@codazen/harmonica-mcp 4.4.2 → 5.0.0

package/dist/index.js

@@ -21584,12 +21584,12 @@ async function assertMovementExists(client, movementId) {
     throw new Error(`Movement not found: "${movementId}"`);
   }
 }
-async function fetchDeliverableGroup(client, deliverableGroupId) {
-  const group = await client.getDeliverableGroup(deliverableGroupId);
-  if (!group) {
-    throw new Error(`DeliverableGroup not found: "${deliverableGroupId}"`);
+async function fetchTrack(client, trackId) {
+  const track = await client.getTrack(trackId);
+  if (!track) {
+    throw new Error(`Track not found: "${trackId}"`);
   }
-  return group;
+  return track;
 }
 async function fetchNotebook(client, notebookId) {
   const notebook = await client.getNotebook(notebookId);
@@ -24101,260 +24101,6 @@ function registerClaimTools(server, ctx, client) {
   );
 }
 
-// ../../libs/harmonica-services/src/mcp/tools/deliverable-group-tools.ts
-function registerDeliverableGroupTools(server, ctx, client) {
-  server.tool(
-    "list_deliverable_groups",
-    "List all DeliverableGroups for a Teamspace. A DeliverableGroup is a scoped initiative \u2014 client SOW, internal phase, or engagement container \u2014 that organises Deliverables and Drops.",
-    {
-      teamspaceId: external_exports.string().describe("The teamspace ID")
-    },
-    async ({ teamspaceId }) => {
-      const groups = await client.listTeamspaceDeliverableGroups(teamspaceId);
-      const text = groups.length === 0 ? "No deliverable groups found." : groups.map(
-        (g) => `[${g.deliverableGroupId}] ${g.groupCode} \u2014 ${g.title} (${g.status})`
-      ).join("\n");
-      return { content: [{ type: "text", text }] };
-    }
-  );
-  server.tool(
-    "list_movement_deliverable_groups",
-    `List the DeliverableGroups scoped to a Movement (client SOW). Returns the commitments grouped under that engagement. Recognition cues: "what's in this SOW", "this engagement's deliverable groups" \u2192 list_movement_deliverable_groups.`,
-    {
-      movementId: external_exports.string().describe("The Movement ID (e.g., mv-abc123)")
-    },
-    async ({ movementId }) => {
-      await assertMovementExists(client, movementId);
-      const groups = await client.listMovementDeliverableGroups(movementId);
-      const text = groups.length === 0 ? "No deliverable groups found for this Movement." : groups.map(
-        (g) => `[${g.deliverableGroupId}] ${g.groupCode} \u2014 ${g.title} (${g.status})`
-      ).join("\n");
-      return { content: [{ type: "text", text }] };
-    }
-  );
-  server.tool(
-    "get_deliverable_group",
-    "Get a DeliverableGroup by ID. Returns full details including commercial lifecycle status, VU rate, and audit stamps.",
-    {
-      deliverableGroupId: external_exports.string().describe("The DeliverableGroup ID")
-    },
-    async ({ deliverableGroupId }) => {
-      const g = await client.getDeliverableGroup(deliverableGroupId);
-      if (!g) {
-        return {
-          content: [{ type: "text", text: `DeliverableGroup not found: ${deliverableGroupId}` }]
-        };
-      }
-      const lines = [
-        `ID: ${g.deliverableGroupId}`,
-        `Code: ${g.groupCode}`,
-        `Title: ${g.title}`,
-        `Teamspace: ${g.teamspaceId}`,
-        `Status: ${g.status}`,
-        `VU Rate: ${g.vuRate}`,
-        g.description ? `Description: ${g.description}` : null,
-        g.deliverables ? `Deliverables:
-${g.deliverables}` : null,
-        g.acceptanceCriteria ? `Acceptance Criteria:
-${g.acceptanceCriteria}` : null,
-        g.parentGroupId ? `Parent Group: ${g.parentGroupId}` : null,
-        g.proposedAt ? `Proposed: ${g.proposedAt}` : null,
-        g.approvedAt ? `Approved: ${g.approvedAt}` : null,
-        `Version: ${g.version}`,
-        `Created: ${g.createdAt}`,
-        `Updated: ${g.updatedAt}`
-      ].filter(Boolean).join("\n");
-      return { content: [{ type: "text", text: lines }] };
-    }
-  );
-  const createTrackSchema = {
-    teamspaceId: external_exports.string().describe("The teamspace ID"),
-    title: external_exports.string().min(1).max(300).describe('Track title (e.g. "SOW-2026-Q2 / Platform Modernisation")'),
-    description: external_exports.string().max(2e3).optional().describe("Optional description"),
-    deliverables: external_exports.string().max(2e4).optional().describe("The Track's deliverables as Markdown bullet points (parallel to acceptanceCriteria)"),
-    acceptanceCriteria: external_exports.string().max(2e4).optional().describe("The Track's acceptance criteria (Markdown), parallel to its deliverables"),
-    vuRate: external_exports.number().nonnegative().describe("Value-Unit rate (billing rate for this engagement)"),
-    systemId: external_exports.string().optional().describe("Optional System to scope this Track to"),
-    movementId: external_exports.string().optional().describe("Optional Movement (client SOW) to scope this Track to"),
-    parentGroupId: external_exports.string().optional().describe("Optional parent Track ID for nested grouping (Phase 0 scaffolding)")
-  };
-  const createTrackHandler = async ({ teamspaceId, title, description, deliverables, acceptanceCriteria, vuRate, systemId, movementId, parentGroupId }) => {
-    const teamspace = await fetchTeamspace(client, teamspaceId);
-    if (movementId !== void 0) {
-      await assertMovementExists(client, movementId);
-    }
-    if (parentGroupId !== void 0) {
-      await fetchDeliverableGroup(client, parentGroupId);
-    }
-    const g = await client.createDeliverableGroup({
-      teamspaceId,
-      orgId: teamspace.orgId,
-      title,
-      ...description !== void 0 && { description },
-      ...deliverables !== void 0 && { deliverables },
-      ...acceptanceCriteria !== void 0 && { acceptanceCriteria },
-      vuRate,
-      ...systemId !== void 0 && { systemId },
-      ...movementId !== void 0 && { movementId },
-      ...parentGroupId !== void 0 && { parentGroupId },
-      createdBy: ctx.user.userId
-    });
-    return {
-      content: [
-        {
-          type: "text",
-          text: `Created Track: [${g.deliverableGroupId}] ${g.groupCode} \u2014 ${g.title} (${g.status})`
-        }
-      ]
-    };
-  };
-  server.tool(
-    "create_track",
-    'Create a Track (a DeliverableGroup) in a Teamspace. Use for scoped initiatives \u2014 client SOWs, internal phases, engagement containers \u2014 that collect Deliverables and Drops. Do NOT use for software capabilities the product provides to end users (those are Beats). Recognition cues: "this engagement", "this SOW", "this phase of work", "the client project", "this track" \u2192 Track.',
-    createTrackSchema,
-    createTrackHandler
-  );
-  server.tool(
-    "create_deliverable_group",
-    "DEPRECATED alias for create_track \u2014 use create_track instead. Creates a Track (DeliverableGroup) in a Teamspace.",
-    createTrackSchema,
-    createTrackHandler
-  );
-  server.tool(
-    "update_deliverable_group",
-    "Update mutable content fields on a DeliverableGroup / Track (title, description, deliverables, acceptanceCriteria, vuRate). To change commercial status use transition_deliverable_group instead.",
-    {
-      deliverableGroupId: external_exports.string().describe("The DeliverableGroup ID"),
-      title: external_exports.string().min(1).max(300).optional().describe("New title"),
-      description: external_exports.string().max(2e3).optional().describe("New description"),
-      deliverables: external_exports.string().max(2e4).optional().describe(`Replace the Track's deliverables Markdown ("" clears)`),
-      acceptanceCriteria: external_exports.string().max(2e4).optional().describe(`Replace the Track's acceptance-criteria Markdown ("" clears)`),
-      vuRate: external_exports.number().nonnegative().optional().describe("New VU rate")
-    },
-    async ({ deliverableGroupId, title, description, deliverables, acceptanceCriteria, vuRate }) => {
-      const g = await client.updateDeliverableGroup(deliverableGroupId, {
-        ...title !== void 0 && { title },
-        ...description !== void 0 && { description },
-        ...deliverables !== void 0 && { deliverables },
-        ...acceptanceCriteria !== void 0 && { acceptanceCriteria },
-        ...vuRate !== void 0 && { vuRate }
-      });
-      if (!g) {
-        return {
-          content: [{ type: "text", text: `DeliverableGroup not found: ${deliverableGroupId}` }]
-        };
-      }
-      return {
-        content: [
-          {
-            type: "text",
-            text: `Updated DeliverableGroup: [${g.deliverableGroupId}] ${g.groupCode} \u2014 ${g.title} (${g.status})`
-          }
-        ]
-      };
-    }
-  );
-  server.tool(
-    "transition_deliverable_group",
-    'Transition a DeliverableGroup through its commercial lifecycle: draft \u2192 proposed \u2192 approved \u2192 active \u2192 fulfilled. Cancelled is reachable from any non-terminal state. Advancing to "approved" requires an approvalNoteId. Use confirm=false (default) to preview the transition without writing; confirm=true to execute.',
-    {
-      deliverableGroupId: external_exports.string().describe("The DeliverableGroup ID"),
-      targetState: external_exports.enum(["proposed", "approved", "active", "fulfilled", "cancelled"]).describe("Target lifecycle state"),
-      approvalNoteId: external_exports.string().optional().describe('Required when transitioning to "approved" \u2014 the Note ID capturing the approval decision'),
-      reason: external_exports.string().optional().describe("Reason for the transition (especially useful for cancellation)"),
-      confirm: external_exports.boolean().optional().default(false).describe("false (default) = dry-run preview; true = execute the transition")
-    },
-    async ({ deliverableGroupId, targetState, approvalNoteId, reason, confirm }) => {
-      if (!confirm) {
-        return {
-          content: [
-            {
-              type: "text",
-              text: `Dry-run: would transition DeliverableGroup ${deliverableGroupId} \u2192 ${targetState}${approvalNoteId ? ` (approvalNoteId: ${approvalNoteId})` : ""}${reason ? ` \u2014 ${reason}` : ""}. Call again with confirm=true to execute.`
-            }
-          ]
-        };
-      }
-      const g = await client.transitionDeliverableGroupStatus(
-        deliverableGroupId,
-        targetState,
-        {
-          ...approvalNoteId !== void 0 && { approvalNoteId },
-          ...reason !== void 0 && { reason }
-        }
-      );
-      if (!g) {
-        return {
-          content: [{ type: "text", text: `DeliverableGroup not found: ${deliverableGroupId}` }]
-        };
-      }
-      return {
-        content: [
-          {
-            type: "text",
-            text: `Transitioned DeliverableGroup [${g.deliverableGroupId}] ${g.groupCode} \u2192 ${g.status}`
-          }
-        ]
-      };
-    }
-  );
-  server.tool(
-    "list_deliverable_group_drops",
-    'List all Drops linked to a DeliverableGroup. Use to answer "what releases are part of this phase?" or "which software drops are tied to this engagement milestone?"',
-    {
-      deliverableGroupId: external_exports.string().describe("The DeliverableGroup ID")
-    },
-    async ({ deliverableGroupId }) => {
-      const items = await client.listDeliverableGroupDrops(deliverableGroupId);
-      const text = items.length === 0 ? "No drops linked to this group." : items.map((d) => `[${d.dropId}] account: ${d.accountId}`).join("\n");
-      return { content: [{ type: "text", text }] };
-    }
-  );
-  server.tool(
-    "assign_drop_to_deliverable_group",
-    `Link a Drop to a DeliverableGroup so it appears on the parent Movement's timed-release axis (the Drops shown on the Movement overview). A Drop belongs to at most one group; linking moves it if it was in another group. Use to answer "put this release under this SOW/phase" or "add a Drop to this Movement".`,
-    {
-      deliverableGroupId: external_exports.string().describe("The DeliverableGroup ID"),
-      dropId: external_exports.string().describe("The Drop ID to link to the group")
-    },
-    async ({ deliverableGroupId, dropId }) => {
-      await fetchDeliverableGroup(client, deliverableGroupId);
-      const drop = await client.getDrop(dropId);
-      if (!drop) {
-        return { content: [{ type: "text", text: `Drop not found: ${dropId}` }] };
-      }
-      await assertAccountExists(client, drop.accountId);
-      const ok = await client.setDropDeliverableGroup(deliverableGroupId, dropId);
-      if (!ok) {
-        return { content: [{ type: "text", text: `Drop not found: ${dropId}` }] };
-      }
-      return {
-        content: [{ type: "text", text: `Linked Drop ${dropId} to DeliverableGroup ${deliverableGroupId}.` }]
-      };
-    }
-  );
-  server.tool(
-    "list_deliverable_group_beat_versions",
-    'List the Beat Versions linked to a DeliverableGroup via its work items (Work Plan). Use to answer "what feature increments are scoped under this SOW/phase?"',
-    {
-      deliverableGroupId: external_exports.string().describe("The DeliverableGroup ID")
-    },
-    async ({ deliverableGroupId }) => {
-      await fetchDeliverableGroup(client, deliverableGroupId);
-      const workItems = await client.listTrackWorkItems(deliverableGroupId);
-      const bvIds = [...new Set(
-        workItems.map((wi) => wi.beatVersionId).filter((id) => id !== void 0)
-      )];
-      if (bvIds.length === 0) {
-        return { content: [{ type: "text", text: "No beat versions linked via work items in this group." }] };
-      }
-      const hydrated = await Promise.all(bvIds.map((id) => client.getBeatVersion(id)));
-      const text = hydrated.filter((bv) => bv !== void 0).map((bv) => `[${bv.beatVersionId}] v${bv.versionNumber} \u2014 ${bv.title} (${bv.status})`).join("\n");
-      return { content: [{ type: "text", text }] };
-    }
-  );
-}
-
 // ../../libs/harmonica-services/src/mcp/tools/downbeat-harmony-report-tools.ts
 function formatQualifyingBeat(b) {
   return `- \`${b.beatId}\` ${b.title}: ${b.signals.join(", ")}`;
@@ -25100,1147 +24846,371 @@ ${members}${parent}`;
   );
 }
 
-// ../../libs/harmonica-services/src/mcp/tools/feature-flag-tools.ts
-var STAGE_ENUM = external_exports.enum([
-  "local",
-  "staging",
-  "staging-alpha",
-  "staging-beta",
-  "alpha",
-  "beta",
-  "prod"
-]);
-function registerFeatureFlagTools(server, ctx, client) {
-  server.tool(
-    "list_flags",
-    "List feature flags and their enabled stages. Use check_flag to test a single flag against a specific stage, or get_flag for full detail on one flag.",
-    {
-      includeArchived: external_exports.boolean().optional().describe("Include archived flags. Default false"),
-      search: external_exports.string().optional().describe("Case-insensitive search against flag name and description"),
-      cursor: external_exports.string().optional().describe("Pagination cursor from a prior list_flags result"),
-      limit: external_exports.number().int().min(1).max(100).optional().describe("Flags per page. Default 20")
-    },
-    async ({ includeArchived, search, cursor, limit }) => {
-      try {
-        const page = await client.listFlags({ includeArchived, search, cursor, limit });
-        if (page.flags.length === 0) {
-          return { content: [{ type: "text", text: "No flags found." }] };
-        }
-        return { content: [{ type: "text", text: formatFlagList(page.flags, page.total, page.nextCursor) }] };
-      } catch (err) {
-        const message = err instanceof Error ? err.message : String(err);
-        return { content: [{ type: "text", text: `Failed to list flags: ${message}` }], isError: true };
-      }
-    }
-  );
-  server.tool(
-    "get_flag",
-    "Get full detail for a single feature flag by name, including its enabled stages and optional change history.",
-    {
-      name: external_exports.string().describe("Flag name"),
-      includeHistory: external_exports.boolean().optional().describe("Include change history entries. Default false")
-    },
-    async ({ name, includeHistory }) => {
-      try {
-        const flag = await client.getFlag(name, { includeHistory });
-        if (!flag) {
-          return { content: [{ type: "text", text: `Flag "${name}" not found.` }] };
-        }
-        return { content: [{ type: "text", text: formatFlag(flag, flag.history) }] };
-      } catch (err) {
-        const message = err instanceof Error ? err.message : String(err);
-        return { content: [{ type: "text", text: `Failed to get flag: ${message}` }], isError: true };
-      }
-    }
-  );
-  server.tool(
-    "check_flag",
-    "Check whether a feature flag is enabled in a specific stage. Returns a simple enabled/disabled answer.",
-    {
-      name: external_exports.string().describe("Flag name"),
-      stage: STAGE_ENUM.describe("Deployment stage to check against")
-    },
-    async ({ name, stage }) => {
-      try {
-        const enabled = await client.checkFlag(name, stage);
-        const status = enabled ? "enabled" : "disabled";
-        return {
-          content: [{
-            type: "text",
-            text: `Flag "${name}" is **${status}** in stage "${stage}".`
-          }]
-        };
-      } catch (err) {
-        const message = err instanceof Error ? err.message : String(err);
-        return { content: [{ type: "text", text: `Failed to check flag: ${message}` }], isError: true };
-      }
-    }
-  );
-  server.tool(
-    "create_flag",
-    "Create or update a feature flag with the specified enabled stages. Idempotent \u2014 calling with an existing flag name replaces its enabledIn list.",
-    {
-      name: external_exports.string().min(1).describe('Flag name (e.g. "rbac:enforcement")'),
-      enabledIn: external_exports.array(STAGE_ENUM).describe("Stages to enable the flag in"),
-      description: external_exports.string().optional().describe("Human-readable description of what this flag gates"),
-      note: external_exports.string().optional().describe("Reason for this change (recorded in change history)")
-    },
-    async ({ name, enabledIn, description, note }) => {
-      if (!ctx.user.email) {
-        return { content: [{ type: "text", text: "Write operations require an authenticated user with a valid email." }], isError: true };
-      }
-      try {
-        const flag = await client.createFlag(name, enabledIn, { description, note, updatedBy: ctx.user.email });
-        return { content: [{ type: "text", text: formatFlag(flag) }] };
-      } catch (err) {
-        const message = err instanceof Error ? err.message : String(err);
-        return { content: [{ type: "text", text: `Failed to create flag: ${message}` }], isError: true };
-      }
-    }
-  );
-  server.tool(
-    "set_flag",
-    "Update which stages a feature flag is enabled in. Replaces the current enabledIn list entirely.",
-    {
-      name: external_exports.string().min(1).describe("Flag name"),
-      enabledIn: external_exports.array(STAGE_ENUM).describe("New set of stages to enable the flag in. Pass [] to disable everywhere without archiving."),
-      note: external_exports.string().optional().describe("Reason for this change (recorded in change history)")
-    },
-    async ({ name, enabledIn, note }) => {
-      if (!ctx.user.email) {
-        return { content: [{ type: "text", text: "Write operations require an authenticated user with a valid email." }], isError: true };
-      }
-      try {
-        const flag = await client.setFlag(name, enabledIn, { note, updatedBy: ctx.user.email });
-        return { content: [{ type: "text", text: formatFlag(flag) }] };
-      } catch (err) {
-        const message = err instanceof Error ? err.message : String(err);
-        return { content: [{ type: "text", text: `Failed to set flag: ${message}` }], isError: true };
-      }
-    }
-  );
-  server.tool(
-    "archive_flag",
-    "Archive a feature flag. Clears its enabledIn list and marks it archived so it cannot be re-enabled via set_flag. Use unarchive_flag to restore it.",
-    {
-      name: external_exports.string().min(1).describe("Flag name"),
-      note: external_exports.string().optional().describe("Reason for archiving (recorded in change history)")
-    },
-    async ({ name, note }) => {
-      if (!ctx.user.email) {
-        return { content: [{ type: "text", text: "Write operations require an authenticated user with a valid email." }], isError: true };
-      }
-      try {
-        const flag = await client.archiveFlag(name, { note, updatedBy: ctx.user.email });
-        return { content: [{ type: "text", text: formatFlag(flag) }] };
-      } catch (err) {
-        const message = err instanceof Error ? err.message : String(err);
-        return { content: [{ type: "text", text: `Failed to archive flag: ${message}` }], isError: true };
-      }
-    }
-  );
-  server.tool(
-    "unarchive_flag",
-    "Restore an archived feature flag to operable state. The flag is re-enabled with an empty enabledIn list \u2014 use set_flag afterward to enable it in specific stages.",
-    {
-      name: external_exports.string().min(1).describe("Flag name"),
-      note: external_exports.string().optional().describe("Reason for restoring (recorded in change history)")
-    },
-    async ({ name, note }) => {
-      if (!ctx.user.email) {
-        return { content: [{ type: "text", text: "Write operations require an authenticated user with a valid email." }], isError: true };
-      }
-      try {
-        const flag = await client.unarchiveFlag(name, { note, updatedBy: ctx.user.email });
-        return { content: [{ type: "text", text: formatFlag(flag) }] };
-      } catch (err) {
-        const message = err instanceof Error ? err.message : String(err);
-        return { content: [{ type: "text", text: `Failed to unarchive flag: ${message}` }], isError: true };
-      }
-    }
-  );
-}
-function formatFlag(flag, history) {
-  const archived = flag.archivedAt ? " **(archived)**" : "";
-  const enabled = flag.enabledIn.length > 0 ? flag.enabledIn.join(", ") : "(none)";
-  const parts = [
-    `# Flag: ${flag.name}${archived}`,
-    `**Scope:** ${flag.scope}`,
-    `**Enabled in:** ${enabled}`,
-    flag.description ? `**Description:** ${flag.description}` : null,
-    `**Last updated:** ${flag.updatedAt.slice(0, 10)} by ${flag.updatedBy}`,
-    flag.archivedAt ? `**Archived:** ${flag.archivedAt.slice(0, 10)} by ${flag.archivedBy}` : null
-  ].filter(Boolean).join("\n");
-  if (!history?.length) return parts;
-  const historyLines = history.map((h) => {
-    const prev = h.previousEnabledIn.length > 0 ? h.previousEnabledIn.join(", ") : "(none)";
-    const next = h.newEnabledIn.length > 0 ? h.newEnabledIn.join(", ") : "(none)";
-    const note = h.note ? ` \u2014 ${h.note}` : "";
-    return `- ${h.updatedAt.slice(0, 10)} ${h.updatedBy}: ${prev} \u2192 ${next}${note}`;
-  }).join("\n");
-  return `${parts}
+// ../../libs/harmonica-schemas/src/azure-marketplace.ts
+var AzureMarketplaceSubscriptionSchema = external_exports.object({
+  id: external_exports.string(),
+  publisherId: external_exports.string().optional(),
+  offerId: external_exports.string().optional(),
+  name: external_exports.string().optional(),
+  saasSubscriptionStatus: external_exports.string().optional(),
+  planId: external_exports.string().optional(),
+  quantity: external_exports.number().optional(),
+  beneficiary: external_exports.object({
+    emailId: external_exports.string().optional(),
+    objectId: external_exports.string().optional(),
+    tenantId: external_exports.string().optional()
+  }).optional(),
+  purchaser: external_exports.object({
+    emailId: external_exports.string().optional(),
+    objectId: external_exports.string().optional(),
+    tenantId: external_exports.string().optional()
+  }).optional()
+});
+var AzureSubscribedSchema = external_exports.object({
+  action: external_exports.literal("Subscribe"),
+  // Non-blank, not merely non-empty. A bare z.string() accepts "", which would
+  // derive the slug "az-" — 3 chars, trailing dash, invalid under the repository
+  // slug invariant. And .min(1) alone still admits "   ", which normalizes to
+  // nothing and falls through to the hash fallback, quietly provisioning an org
+  // under a hashed slug for input that is plainly garbage. Reject it at the
+  // boundary instead.
+  subscriptionId: external_exports.string().min(1).refine((v) => v.trim().length > 0, {
+    message: "subscriptionId must not be blank"
+  }),
+  offerId: external_exports.string(),
+  planId: external_exports.string(),
+  quantity: external_exports.number().optional(),
+  timeStamp: external_exports.string(),
+  operationId: external_exports.string(),
+  subscription: AzureMarketplaceSubscriptionSchema
+});
+var AzureUnsubscribedSchema = external_exports.object({
+  action: external_exports.literal("Unsubscribe"),
+  // Non-blank, not merely non-empty. A bare z.string() accepts "", which would
+  // derive the slug "az-" — 3 chars, trailing dash, invalid under the repository
+  // slug invariant. And .min(1) alone still admits "   ", which normalizes to
+  // nothing and falls through to the hash fallback, quietly provisioning an org
+  // under a hashed slug for input that is plainly garbage. Reject it at the
+  // boundary instead.
+  subscriptionId: external_exports.string().min(1).refine((v) => v.trim().length > 0, {
+    message: "subscriptionId must not be blank"
+  }),
+  offerId: external_exports.string(),
+  planId: external_exports.string(),
+  timeStamp: external_exports.string(),
+  operationId: external_exports.string(),
+  subscription: AzureMarketplaceSubscriptionSchema
+});
+var AzureChangePlanSchema = external_exports.object({
+  action: external_exports.literal("ChangePlan"),
+  // Non-blank, not merely non-empty. A bare z.string() accepts "", which would
+  // derive the slug "az-" — 3 chars, trailing dash, invalid under the repository
+  // slug invariant. And .min(1) alone still admits "   ", which normalizes to
+  // nothing and falls through to the hash fallback, quietly provisioning an org
+  // under a hashed slug for input that is plainly garbage. Reject it at the
+  // boundary instead.
+  subscriptionId: external_exports.string().min(1).refine((v) => v.trim().length > 0, {
+    message: "subscriptionId must not be blank"
+  }),
+  offerId: external_exports.string(),
+  planId: external_exports.string(),
+  timeStamp: external_exports.string(),
+  operationId: external_exports.string(),
+  subscription: AzureMarketplaceSubscriptionSchema
+});
+var AzureSuspendSchema = external_exports.object({
+  action: external_exports.literal("Suspend"),
+  // Non-blank, not merely non-empty. A bare z.string() accepts "", which would
+  // derive the slug "az-" — 3 chars, trailing dash, invalid under the repository
+  // slug invariant. And .min(1) alone still admits "   ", which normalizes to
+  // nothing and falls through to the hash fallback, quietly provisioning an org
+  // under a hashed slug for input that is plainly garbage. Reject it at the
+  // boundary instead.
+  subscriptionId: external_exports.string().min(1).refine((v) => v.trim().length > 0, {
+    message: "subscriptionId must not be blank"
+  }),
+  offerId: external_exports.string(),
+  planId: external_exports.string(),
+  timeStamp: external_exports.string(),
+  operationId: external_exports.string(),
+  subscription: AzureMarketplaceSubscriptionSchema
+});
+var AzureReinstateSchema = external_exports.object({
+  action: external_exports.literal("Reinstate"),
+  // Non-blank, not merely non-empty. A bare z.string() accepts "", which would
+  // derive the slug "az-" — 3 chars, trailing dash, invalid under the repository
+  // slug invariant. And .min(1) alone still admits "   ", which normalizes to
+  // nothing and falls through to the hash fallback, quietly provisioning an org
+  // under a hashed slug for input that is plainly garbage. Reject it at the
+  // boundary instead.
+  subscriptionId: external_exports.string().min(1).refine((v) => v.trim().length > 0, {
+    message: "subscriptionId must not be blank"
+  }),
+  offerId: external_exports.string(),
+  planId: external_exports.string(),
+  timeStamp: external_exports.string(),
+  operationId: external_exports.string(),
+  subscription: AzureMarketplaceSubscriptionSchema
+});
+var AzureMarketplaceWebhookEventSchema = external_exports.discriminatedUnion("action", [
+  AzureSubscribedSchema,
+  AzureUnsubscribedSchema,
+  AzureChangePlanSchema,
+  AzureSuspendSchema,
+  AzureReinstateSchema
+]);
+var AZURE_MARKETPLACE_WEBHOOK_ACTIONS = AzureMarketplaceWebhookEventSchema.options.map(
+  (o) => o.shape.action.value
+);
+var AzureMarketplaceActivateBodySchema = external_exports.object({
+  token: external_exports.string().min(1)
+});
 
-## Change History
-${historyLines}`;
-}
-function formatFlagList(flags, total, nextCursor) {
-  const rows = flags.map((f) => {
-    const enabled = f.enabledIn.length > 0 ? f.enabledIn.join(", ") : "(none)";
-    const archived = f.archivedAt ? " *(archived)*" : "";
-    return `| ${f.name}${archived} | ${enabled} | ${f.updatedAt.slice(0, 10)} |`;
-  });
-  const table = [
-    `# Feature Flags (${total} total, showing ${flags.length})`,
-    "",
-    "| Name | Enabled In | Updated |",
-    "|---|---|---|",
-    ...rows
-  ].join("\n");
-  if (!nextCursor) return table;
-  return `${table}
+// ../../libs/harmonica-schemas/src/compose-beat-versions.ts
+var BeatVersionDraftSchema = external_exports.object({
+  title: external_exports.string().min(1).max(300),
+  description: external_exports.string().min(1).max(2e3),
+  scope: external_exports.string().max(1e3).optional(),
+  changeSummary: external_exports.string().min(1).max(500),
+  changeImportance: external_exports.enum(["minor", "moderate", "major"]),
+  priority: external_exports.number().int().min(1).optional(),
+  tags: external_exports.array(external_exports.string()).optional(),
+  estimatedEffort: external_exports.enum(["XS", "S", "M", "L", "XL"]).optional()
+});
+var LLMBeatVersionsCompositionOutputSchema = external_exports.object({
+  drafts: external_exports.array(BeatVersionDraftSchema).min(2).max(5)
+});
 
-More flags available. Pass \`cursor: "${nextCursor}"\` to list_flags to continue.`;
-}
+// ../../libs/harmonica-schemas/src/note-extraction.ts
+var EXTRACTABLE_NOTE_TYPES = ["context", "constraint", "guidance", "decision"];
+var DECISION_SIGNIFICANCE_VALUES = ["strategic", "structural", "implementation"];
+var ExtractedNoteRawSchema = external_exports.object({
+  noteType: external_exports.enum(EXTRACTABLE_NOTE_TYPES),
+  content: external_exports.string().min(1),
+  rationale: external_exports.string().optional(),
+  confidence: external_exports.number().min(0).max(1),
+  significance: external_exports.enum(DECISION_SIGNIFICANCE_VALUES).optional()
+});
+var NoteExtractionResponseSchema = external_exports.array(ExtractedNoteRawSchema);
 
-// ../../libs/harmonica-services/src/mcp/tools/layer-tools.ts
-function registerLayerTools(server, ctx, client) {
-  server.tool(
-    "list_system_layers",
-    "List the architectural Layers declared on a System (e.g. frontend, backend, data). Layers are an evaluation lens for plan/build quality checks, not a work container.",
-    {
-      systemId: external_exports.string().describe("The System ID")
-    },
-    async ({ systemId }) => {
-      try {
-        await assertSystemExists(client, systemId);
-      } catch (err) {
-        const message = err instanceof Error ? err.message : String(err);
-        return { content: [{ type: "text", text: `Access denied: ${message}` }], isError: true };
-      }
-      let layers;
-      try {
-        layers = await client.listSystemLayers(systemId);
-      } catch (err) {
-        const message = err instanceof Error ? err.message : String(err);
-        return { content: [{ type: "text", text: `Failed to list Layers: ${message}` }], isError: true };
-      }
-      const text = formatLayerList(layers);
-      return { content: [{ type: "text", text }] };
-    }
-  );
-  server.tool(
-    "get_layer",
-    "Get full details of a single Layer by ID, including its repo mapping and parent Layer (if it was split from one).",
-    {
-      systemId: external_exports.string().describe("The System ID (for access control)"),
-      layerId: external_exports.string().describe("The Layer ID")
-    },
-    async ({ systemId, layerId }) => {
-      try {
-        await assertSystemExists(client, systemId);
-      } catch (err) {
-        const message = err instanceof Error ? err.message : String(err);
-        return { content: [{ type: "text", text: `Access denied: ${message}` }], isError: true };
-      }
-      let layer;
-      try {
-        layer = await client.getLayer(layerId);
-      } catch (err) {
-        const message = err instanceof Error ? err.message : String(err);
-        return { content: [{ type: "text", text: `Failed to get Layer: ${message}` }], isError: true };
-      }
-      if (!layer) {
-        return { content: [{ type: "text", text: `Layer not found: "${layerId}"` }], isError: true };
-      }
-      if (layer.systemId !== systemId) {
-        return { content: [{ type: "text", text: `Layer "${layerId}" does not belong to System "${systemId}".` }], isError: true };
-      }
-      const text = formatLayerDetail(layer);
-      return { content: [{ type: "text", text }] };
-    }
-  );
-  server.tool(
-    "create_layer",
-    "Declare a new architectural Layer on a System (e.g. frontend, backend, data). Layers are an evaluation lens for plan/build quality checks. layerKey must be a lowercase slug and unique per System.",
-    {
-      systemId: external_exports.string().describe("The System ID"),
-      layerKey: external_exports.string().regex(/^[a-z]([a-z0-9-]*[a-z0-9])?$/, "layerKey must be a lowercase slug (letters, digits, hyphens; start with a letter, no trailing hyphen)").describe('Stable lowercase slug for the Layer role, e.g. "frontend" or "agent-workers"'),
-      name: external_exports.string().describe('Display name, e.g. "Frontend"'),
-      description: external_exports.string().optional().describe("Optional description of the Layer"),
-      parentLayerId: external_exports.string().optional().describe("Optional parent Layer to nest under (must be a Layer on the same System)"),
-      repoPatterns: external_exports.array(external_exports.string()).optional().describe("Optional repo path patterns owned by this Layer")
-    },
-    async ({ systemId, layerKey, name, description, parentLayerId, repoPatterns }) => {
-      try {
-        await assertSystemExists(client, systemId);
-      } catch (err) {
-        const message = err instanceof Error ? err.message : String(err);
-        return { content: [{ type: "text", text: `Access denied: ${message}` }], isError: true };
-      }
-      let layer;
-      try {
-        layer = await client.createSystemLayer({
-          systemId,
-          layerKey,
-          name,
-          ...description !== void 0 && { description },
-          ...parentLayerId !== void 0 && { parentLayerId },
-          ...repoPatterns !== void 0 && { repoPatterns }
-        });
-      } catch (err) {
-        const message = err instanceof Error ? err.message : String(err);
-        return { content: [{ type: "text", text: `Failed to create Layer: ${message}` }], isError: true };
-      }
-      if (!layer) {
-        return { content: [{ type: "text", text: `System "${systemId}" not found or not writable.` }], isError: true };
-      }
-      return { content: [{ type: "text", text: `Created Layer.
-
-${formatLayerDetail(layer)}` }] };
-    }
-  );
-  server.tool(
-    "update_layer",
-    "Update a Layer's editable fields (name, description, repo mapping). Omitted fields are left unchanged. Archiving/reviving a Layer goes through transition_layer, not this tool. Requires write access to the System.",
-    {
-      systemId: external_exports.string().describe("The System ID the Layer belongs to (for access control)"),
-      layerId: external_exports.string().describe("The Layer ID to update"),
-      name: external_exports.string().optional().describe("New display name"),
-      description: external_exports.string().optional().describe("New description"),
-      repoPatterns: external_exports.array(external_exports.string()).optional().describe("Replacement repo mapping (replaces the existing list)")
-    },
-    async ({ systemId, layerId, name, description, repoPatterns }) => {
-      try {
-        await assertSystemExists(client, systemId);
-      } catch (err) {
-        const message = err instanceof Error ? err.message : String(err);
-        return { content: [{ type: "text", text: `Access denied: ${message}` }], isError: true };
-      }
-      let existing;
-      try {
-        existing = await client.getLayer(layerId);
-      } catch (err) {
-        const message = err instanceof Error ? err.message : String(err);
-        return { content: [{ type: "text", text: `Failed to load Layer: ${message}` }], isError: true };
-      }
-      if (!existing) return { content: [{ type: "text", text: `Layer not found: "${layerId}"` }], isError: true };
-      if (existing.systemId !== systemId) {
-        return { content: [{ type: "text", text: `Layer "${layerId}" does not belong to System "${systemId}".` }], isError: true };
-      }
-      let layer;
-      try {
-        layer = await client.updateSystemLayer(layerId, {
-          ...name !== void 0 && { name },
-          ...description !== void 0 && { description },
-          ...repoPatterns !== void 0 && { repoPatterns }
-        });
-      } catch (err) {
-        const message = err instanceof Error ? err.message : String(err);
-        return { content: [{ type: "text", text: `Failed to update Layer: ${message}` }], isError: true };
-      }
-      if (!layer) return { content: [{ type: "text", text: `Layer not found: "${layerId}"` }], isError: true };
-      return { content: [{ type: "text", text: `Updated Layer.
+// ../../libs/harmonica-schemas/src/plan-quality.ts
+var PLAN_QUALITY_DIMENSIONS = [
+  "scoped",
+  "directional",
+  "testable",
+  "traceable",
+  "assignable",
+  "riskAware",
+  "completeness"
+];
+var PlanDimensionScoreSchema = external_exports.object({
+  dimension: external_exports.enum(PLAN_QUALITY_DIMENSIONS),
+  label: external_exports.string(),
+  score: external_exports.number().min(1).max(5),
+  rationale: external_exports.string(),
+  suggestions: external_exports.array(external_exports.string())
+});
+var PlanQualityLLMResponseSchema = external_exports.object({
+  dimensions: external_exports.array(PlanDimensionScoreSchema).min(1),
+  summary: external_exports.string(),
+  topSuggestion: external_exports.string()
+});
 
-${formatLayerDetail(layer)}` }] };
-    }
-  );
-  server.tool(
-    "transition_layer",
-    "Archive or revive a Layer. Archiving requires a reason (audit trail); reviving sets it back to active. Requires write access to the System.",
-    {
-      systemId: external_exports.string().describe("The System ID the Layer belongs to (for access control)"),
-      layerId: external_exports.string().describe("The Layer ID to transition"),
-      status: external_exports.enum(["active", "archived"]).describe('Target status: "archived" to retire, "active" to revive'),
-      reason: external_exports.string().optional().describe('Why the Layer is being archived (required when status is "archived")')
-    },
-    async ({ systemId, layerId, status, reason }) => {
-      try {
-        await assertSystemExists(client, systemId);
-      } catch (err) {
-        const message = err instanceof Error ? err.message : String(err);
-        return { content: [{ type: "text", text: `Access denied: ${message}` }], isError: true };
-      }
-      let existing;
-      try {
-        existing = await client.getLayer(layerId);
-      } catch (err) {
-        const message = err instanceof Error ? err.message : String(err);
-        return { content: [{ type: "text", text: `Failed to load Layer: ${message}` }], isError: true };
-      }
-      if (!existing) return { content: [{ type: "text", text: `Layer not found: "${layerId}"` }], isError: true };
-      if (existing.systemId !== systemId) {
-        return { content: [{ type: "text", text: `Layer "${layerId}" does not belong to System "${systemId}".` }], isError: true };
-      }
-      let layer;
-      try {
-        layer = await client.setSystemLayerStatus(layerId, status, reason);
-      } catch (err) {
-        const message = err instanceof Error ? err.message : String(err);
-        return { content: [{ type: "text", text: `Failed to transition Layer: ${message}` }], isError: true };
-      }
-      if (!layer) return { content: [{ type: "text", text: `Layer not found: "${layerId}"` }], isError: true };
-      return { content: [{ type: "text", text: `Layer ${status === "archived" ? "archived" : "revived"}.
+// ../../libs/harmonica-schemas/src/revision-quality.ts
+var REVISION_QUALITY_DIMENSIONS = [
+  "scoped",
+  "traceable",
+  "testable",
+  "reviewReady",
+  "nonDuplicating"
+];
+var RevisionDimensionScoreSchema = external_exports.object({
+  dimension: external_exports.enum(REVISION_QUALITY_DIMENSIONS),
+  label: external_exports.string(),
+  score: external_exports.number().min(1).max(5),
+  rationale: external_exports.string(),
+  suggestions: external_exports.array(external_exports.string())
+});
+var RevisionQualityLLMResponseSchema = external_exports.object({
+  dimensions: external_exports.array(RevisionDimensionScoreSchema).min(1),
+  summary: external_exports.string(),
+  topSuggestion: external_exports.string()
+});
 
-${formatLayerDetail(layer)}` }] };
-    }
-  );
-}
+// ../../libs/harmonica-schemas/src/beat-quality.ts
+var BEAT_QUALITY_DIMENSIONS = [
+  "distinctive",
+  "harmonious",
+  "substantial",
+  "durable",
+  "clear",
+  "strategicallyAligned",
+  "outcomeOriented"
+];
+var BeatDimensionScoreSchema = external_exports.object({
+  dimension: external_exports.enum(BEAT_QUALITY_DIMENSIONS),
+  label: external_exports.string(),
+  score: external_exports.number().min(1).max(5),
+  rationale: external_exports.string(),
+  suggestions: external_exports.array(external_exports.string())
+});
+var BeatQualityLLMResponseSchema = external_exports.object({
+  dimensions: external_exports.array(BeatDimensionScoreSchema).length(BEAT_QUALITY_DIMENSIONS.length).refine(
+    (arr) => new Set(arr.map((d) => d.dimension)).size === arr.length,
+    { message: "Each quality dimension must appear exactly once" }
+  ),
+  summary: external_exports.string(),
+  topSuggestion: external_exports.string()
+});
 
-// ../../libs/harmonica-services/src/mcp/tools/membership-tools.ts
-var orgIdArg = external_exports.string().describe("The organization ID \u2014 see list_organizations");
-function registerMembershipTools(server, ctx, client) {
-  server.tool(
-    "list_org_members",
-    "List all members of an organization",
-    {
-      orgId: orgIdArg
-    },
-    async ({ orgId }) => {
-      try {
-        const members = await client.listOrgMembers(orgId);
-        if (members.length === 0) {
-          return { content: [{ type: "text", text: "No members found." }] };
-        }
-        const header = "| User ID | Name | Role | Title |";
-        const divider = "|---------|------|------|-------|";
-        const rows = members.map(
-          (m) => `| ${m.userId} | ${m.name} | ${m.role} | ${m.title ?? "\u2014"} |`
-        );
-        return { content: [{ type: "text", text: [header, divider, ...rows].join("\n") }] };
-      } catch (err) {
-        const message = err instanceof Error ? err.message : String(err);
-        return { content: [{ type: "text", text: `Failed to list members: ${message}` }], isError: true };
-      }
-    }
-  );
-  server.tool(
-    "add_member",
-    "Grant a user access to an organization. Their name and avatar are filled in when they first sign in.",
-    {
-      orgId: orgIdArg,
-      email: external_exports.string().email().describe("Email address (used as the user ID)"),
-      role: external_exports.enum(["member", "admin", "client"]).optional().describe('Organization role (defaults to "member")')
-    },
-    async ({ orgId, email: email2, role }) => {
-      try {
-        const member = await client.addOrgMember(orgId, { email: email2, role });
-        const lines = [
-          "Member added successfully.",
-          "",
-          `**User ID:** ${member.userId}`,
-          `**Email:** ${member.email}`,
-          `**Name:** ${member.name}`,
-          `**Role:** ${member.role}`,
-          member.title ? `**Title:** ${member.title}` : ""
-        ].filter(Boolean);
-        return { content: [{ type: "text", text: lines.join("\n") }] };
-      } catch (err) {
-        const message = err instanceof Error ? err.message : String(err);
-        return { content: [{ type: "text", text: `Failed to add member: ${message}` }], isError: true };
-      }
-    }
-  );
-  server.tool(
-    "update_member_role",
-    "Change a member's role within an organization.",
-    {
-      orgId: orgIdArg,
-      userId: external_exports.string().describe("User ID (email address) of the member to update"),
-      role: external_exports.enum(["member", "admin", "client"]).describe("New organization role")
-    },
-    async ({ orgId, userId, role }) => {
-      try {
-        const member = await client.updateOrgMember(orgId, userId, { role });
-        if (!member) {
-          return { content: [{ type: "text", text: `Member not found: "${userId}"` }], isError: true };
-        }
-        const lines = [
-          "Member updated successfully.",
-          "",
-          `**User ID:** ${member.userId}`,
-          `**Email:** ${member.email}`,
-          `**Name:** ${member.name}`,
-          `**Role:** ${member.role}`,
-          member.title ? `**Title:** ${member.title}` : "",
-          member.responsibility ? `**Responsibility:** ${member.responsibility}` : ""
-        ].filter(Boolean);
-        return { content: [{ type: "text", text: lines.join("\n") }] };
-      } catch (err) {
-        const message = err instanceof Error ? err.message : String(err);
-        return { content: [{ type: "text", text: `Failed to update member: ${message}` }], isError: true };
-      }
-    }
-  );
-  server.tool(
-    "remove_member",
-    "Remove a user from an organization.",
-    {
-      orgId: orgIdArg,
-      userId: external_exports.string().describe("User ID (email address) of the member to remove")
-    },
-    async ({ orgId, userId }) => {
-      try {
-        await client.removeOrgMember(orgId, userId);
-        return { content: [{ type: "text", text: `Member "${userId}" has been removed from the organization.` }] };
-      } catch (err) {
-        const message = err instanceof Error ? err.message : String(err);
-        return { content: [{ type: "text", text: `Failed to remove member: ${message}` }], isError: true };
-      }
-    }
-  );
-}
+// ../../libs/harmonica-schemas/src/drop-quality.ts
+var DROP_QUALITY_DIMENSIONS = [
+  "substantial",
+  "harmonious",
+  "clear",
+  "focused",
+  "strategicallyAligned"
+];
+var DropDimensionScoreSchema = external_exports.object({
+  dimension: external_exports.enum(DROP_QUALITY_DIMENSIONS),
+  label: external_exports.string(),
+  score: external_exports.number().min(1).max(5),
+  rationale: external_exports.string(),
+  suggestions: external_exports.array(external_exports.string())
+});
+var DropQualityLLMResponseSchema = external_exports.object({
+  dimensions: external_exports.array(DropDimensionScoreSchema).length(DROP_QUALITY_DIMENSIONS.length).refine(
+    (arr) => new Set(arr.map((d) => d.dimension)).size === arr.length,
+    { message: "Each drop quality dimension must appear exactly once" }
+  ),
+  summary: external_exports.string(),
+  topSuggestion: external_exports.string()
+});
 
-// ../../libs/harmonica-services/src/mcp/tools/movement-tools.ts
-function registerMovementTools(server, _ctx, client) {
-  server.tool(
-    "list_movements",
-    'List all Movements for a Teamspace. A Movement is a Teamspace-scoped client-SOW container for an engagement. Recognition cues: "this SOW", "this engagement", "what contracts are active" \u2192 list_movements.',
-    {
-      teamspaceId: external_exports.string().describe("The teamspace ID")
-    },
-    async ({ teamspaceId }) => {
-      const movements = await client.listTeamspaceMovements(teamspaceId);
-      const text = movements.length === 0 ? "No movements found." : movements.map((m) => `[${m.movementId}] ${m.movementCode} \u2014 ${m.title} (${m.status})`).join("\n");
-      return { content: [{ type: "text", text }] };
-    }
-  );
-  server.tool(
-    "get_movement",
-    "Get a Movement by ID. Returns full details including status, approval timestamps, and audit stamps.",
-    {
-      movementId: external_exports.string().describe("The movement ID (e.g., mv-abc123)")
-    },
-    async ({ movementId }) => {
-      const m = await client.getMovement(movementId);
-      if (!m) {
-        return { content: [{ type: "text", text: `Movement not found: ${movementId}` }] };
-      }
-      const lines = [
-        `ID: ${m.movementId}`,
-        `Code: ${m.movementCode}`,
-        `Title: ${m.title}`,
-        `Teamspace: ${m.teamspaceId}`,
-        `Status: ${m.status}`,
-        m.description ? `Description: ${m.description}` : null,
-        m.proposedAt ? `Proposed: ${m.proposedAt}` : null,
-        m.approvedAt ? `Approved: ${m.approvedAt}` : null,
-        m.approvalNoteId ? `Approval Note: ${m.approvalNoteId}` : null,
-        m.createdBy ? `Created By: ${m.createdBy}` : null,
-        `Version: ${m.version}`,
-        `Created: ${m.createdAt}`,
-        `Updated: ${m.updatedAt}`
-      ].filter(Boolean).join("\n");
-      return { content: [{ type: "text", text: lines }] };
-    }
-  );
-  server.tool(
-    "create_movement",
-    'Create a Movement in a Teamspace. A Movement is a Teamspace-scoped client-SOW container for an engagement \u2014 it is NOT a Beat. Recognition cues: "new SOW", "create a contract scope", "start an engagement container" \u2192 create_movement.',
-    {
-      teamspaceId: external_exports.string().describe("The teamspace ID"),
-      title: external_exports.string().min(1).max(300).describe('Movement title (e.g. "Q3 Platform Modernisation SOW")'),
-      description: external_exports.string().max(2e3).optional().describe("Optional description"),
-      accountId: external_exports.string().min(1).max(128).optional().describe("Optional Account this Movement rolls up to. Must belong to the same org as the Teamspace.")
-    },
-    async ({ teamspaceId, title, description, accountId }) => {
-      const m = await client.createMovement({
-        teamspaceId,
-        title,
-        ...description !== void 0 && { description },
-        ...accountId !== void 0 && { accountId }
-      });
-      return {
-        content: [
-          {
-            type: "text",
-            text: `Created Movement: [${m.movementId}] ${m.movementCode} \u2014 ${m.title} (${m.status})`
-          }
-        ]
-      };
-    }
-  );
-  server.tool(
-    "update_movement",
-    "Update mutable content fields on a Movement (title, description). To change status use transition_movement_status instead.",
-    {
-      movementId: external_exports.string().describe("The movement ID"),
-      title: external_exports.string().min(1).max(300).optional().describe("New title"),
-      description: external_exports.string().max(2e3).optional().describe("New description"),
-      accountId: external_exports.string().max(128).nullable().optional().describe("Account this Movement rolls up to. Must belong to the same org. Pass null (or an empty string) to unlink.")
-    },
-    async ({ movementId, title, description, accountId }) => {
-      const hasUpdates = title !== void 0 || description !== void 0 || accountId !== void 0;
-      if (!hasUpdates) {
-        return {
-          content: [{ type: "text", text: `No updates provided for Movement: ${movementId}` }],
-          isError: true
-        };
-      }
-      const resolvedAccountId = accountId === "" ? null : accountId;
-      try {
-        const m = await client.updateMovement(movementId, {
-          ...title !== void 0 && { title },
-          ...description !== void 0 && { description },
-          ...accountId !== void 0 && { accountId: resolvedAccountId }
-        });
-        if (!m) {
-          return {
-            content: [{ type: "text", text: `Movement not found: ${movementId}` }],
-            isError: true
-          };
-        }
-        const account = accountId !== void 0 ? resolvedAccountId === null ? " \u2014 Account: (unlinked)" : ` \u2014 Account: ${resolvedAccountId}` : m.accountId ? ` \u2014 Account: ${m.accountId}` : "";
-        return {
-          content: [
-            {
-              type: "text",
-              text: `Updated Movement: [${m.movementId}] ${m.movementCode} \u2014 ${m.title} (${m.status})${account}`
-            }
-          ]
-        };
-      } catch (err) {
-        const message = err instanceof Error ? err.message : String(err);
-        return {
-          content: [{ type: "text", text: `Failed to update Movement: ${message}` }],
-          isError: true
-        };
-      }
-    }
-  );
-  server.tool(
-    "transition_movement_status",
-    'Transition a Movement through its commercial lifecycle: draft \u2192 proposed \u2192 approved \u2192 active \u2192 fulfilled. Cancelled is reachable from any non-terminal state and is how a superseded Movement is retired. Advancing to "approved" requires an approvalNoteId. Use confirm=false (default) to preview the transition without writing; confirm=true to execute.',
-    {
-      movementId: external_exports.string().describe("The movement ID"),
-      targetState: external_exports.enum(["proposed", "approved", "active", "fulfilled", "cancelled"]).describe("Target lifecycle state"),
-      approvalNoteId: external_exports.string().optional().describe('Required when transitioning to "approved" \u2014 the Note ID capturing the approval decision'),
-      reason: external_exports.string().optional().describe("Reason for the transition. Strongly recommended for cancellation \u2014 retiring a Movement with no recorded reason leaves no audit trail"),
-      confirm: external_exports.boolean().optional().default(false).describe("false (default) = dry-run preview; true = execute the transition")
-    },
-    async ({ movementId, targetState, approvalNoteId, reason, confirm }) => {
-      if (!confirm) {
-        return {
-          content: [
-            {
-              type: "text",
-              text: `Dry-run: would transition Movement ${movementId} \u2192 ${targetState}${approvalNoteId ? ` (approvalNoteId: ${approvalNoteId})` : ""}${reason ? ` \u2014 ${reason}` : ""}. Call again with confirm=true to execute.`
-            }
-          ]
-        };
-      }
-      try {
-        const m = await client.transitionMovementStatus(movementId, targetState, {
-          ...approvalNoteId !== void 0 && { approvalNoteId },
-          ...reason !== void 0 && { reason }
-        });
-        if (!m) {
-          return {
-            content: [{ type: "text", text: `Movement not found: ${movementId}` }],
-            isError: true
-          };
-        }
-        return {
-          content: [
-            {
-              type: "text",
-              text: `Transitioned Movement: [${m.movementId}] ${m.movementCode} \u2014 ${m.title} \u2192 ${m.status}`
-            }
-          ]
-        };
-      } catch (err) {
-        const message = err instanceof Error ? err.message : String(err);
-        return {
-          content: [{ type: "text", text: `Failed to transition Movement: ${message}` }],
-          isError: true
-        };
-      }
-    }
-  );
-}
-
-// ../../libs/harmonica-services/src/mcp/tools/next-actions-tools.ts
-var PRIORITY_ICONS = {
-  P0: "\u{1F6A8}",
-  P1: "\u{1F680}",
-  P2: "\u{1F528}",
-  P3: "\u{1F4CB}",
-  P4: "\u{1F4A1}",
-  P5: "\u2728"
-};
-function formatNextActions(actions) {
-  if (actions.length === 0) {
-    return "No actions found. Project is up to date.";
-  }
-  const lines = ["# Next Actions\n"];
-  for (const action of actions) {
-    const icon = PRIORITY_ICONS[action.priority] ?? "\u2022";
-    lines.push(`## ${icon} ${action.priority} \u2014 ${action.category}`);
-    lines.push(`**${action.title}**`);
-    lines.push(action.description);
-    if (action.entityId) {
-      const parts = [`${action.entityType}: ${action.entityId}`];
-      if (action.beatId) parts.push(`Beat: ${action.beatId}`);
-      lines.push(parts.join(" | "));
-    }
-    if (action.count) {
-      lines.push(`Count: ${action.count}`);
-    }
-    lines.push("");
-  }
-  return lines.join("\n");
-}
-function registerNextActionsTools(server, ctx, client) {
-  server.tool(
-    "get_next_actions",
-    "Get prioritized list of recommended next actions for a system. Analyzes Beats, Revisions, and Notes to surface the highest-priority work: P0 (urgent bugs) \u2192 P1 (deploy) \u2192 P2 (build) \u2192 P3 (plan) \u2192 P4 (compose) \u2192 P5 (maintenance).",
-    {
-      systemId: external_exports.string().describe("The system ID"),
-      limit: external_exports.coerce.number().optional().default(10).describe("Max actions to return")
-    },
-    async ({ systemId, limit }) => {
-      try {
-        await assertSystemExists(client, systemId);
-        const actions = await client.getNextActions(systemId, { limit });
-        return { content: [{ type: "text", text: formatNextActions(actions) }] };
-      } catch (err) {
-        const message = err instanceof Error ? err.message : String(err);
-        return { content: [{ type: "text", text: `Failed to get next actions: ${message}` }], isError: true };
-      }
-    }
-  );
-  server.tool(
-    "list_triage_actions",
-    "List active triage actions from the ledger (open + acted). This is the stateful view of what needs attention \u2014 includes status tracking, task progress, and escalation state. Use this instead of get_next_actions when triage has been run.",
-    {
-      systemId: external_exports.string().describe("The system ID")
-    },
-    async ({ systemId }) => {
-      try {
-        await assertSystemExists(client, systemId);
-        const actions = await client.listTriageActions(systemId);
-        return { content: [{ type: "text", text: formatTriageActions(actions) }] };
-      } catch (err) {
-        const message = err instanceof Error ? err.message : String(err);
-        return { content: [{ type: "text", text: `Failed to list triage actions: ${message}` }], isError: true };
-      }
-    }
-  );
-  server.tool(
-    "dismiss_triage_action",
-    'Dismiss a triage action (human decides "not now"). The action will not be re-escalated until the underlying state changes.',
-    {
-      systemId: external_exports.string().describe("The system ID"),
-      actionKey: external_exports.string().describe("The action key to dismiss (from list_triage_actions)")
-    },
-    async ({ systemId, actionKey }) => {
-      try {
-        await assertSystemExists(client, systemId);
-        await client.dismissTriageAction(systemId, actionKey, ctx.user?.userId ?? "mcp");
-        return { content: [{ type: "text", text: `Action ${actionKey} dismissed.` }] };
-      } catch (err) {
-        const message = err instanceof Error ? err.message : String(err);
-        return { content: [{ type: "text", text: `Failed to dismiss action: ${message}` }], isError: true };
-      }
-    }
-  );
-}
-var STATUS_ICONS = {
-  open: "\u2B1A",
-  acted: "\u25D0",
-  dismissed: "\u2715",
-  resolved: "\u2713"
-};
-function formatTriageActions(actions) {
-  if (actions.length === 0) {
-    return "No active triage actions. Run triage to populate the ledger.";
-  }
-  const lines = [`# Triage Actions (${actions.length})
-`];
-  for (const action of actions) {
-    const pIcon = PRIORITY_ICONS[action.priority] ?? "\u2022";
-    const sIcon = STATUS_ICONS[action.status] ?? "?";
-    lines.push(`## ${pIcon} ${action.priority} \u2014 ${action.category} ${sIcon} ${action.status.toUpperCase()}`);
-    lines.push(`**${action.title}**`);
-    lines.push(action.description);
-    const meta = [];
-    if (action.entityId) meta.push(`Entity: ${action.entityId}`);
-    if (action.taskId) meta.push(`Task: ${action.taskId}${action.taskStatus ? ` (${action.taskStatus})` : ""}`);
-    if (action.decision) meta.push(`Decision: ${action.decision}`);
-    if (meta.length > 0) lines.push(meta.join(" | "));
-    lines.push(`Action key: \`${action.actionKey}\` | First seen: ${action.firstSeenAt}`);
-    lines.push("");
-  }
-  return lines.join("\n");
-}
-
-// ../../libs/harmonica-services/src/mcp/tools/note-element-tools.ts
-var import_crypto3 = require("crypto");
+// ../../libs/harmonica-schemas/src/build-quality.ts
+var BUILD_DIMENSIONS = [
+  "testability",
+  "observability",
+  "architecturalFitness",
+  "modernization",
+  "resilience",
+  "maintainability",
+  "securityPosture",
+  "operability",
+  "completeness"
+];
+var BuildDimensionScoreSchema = external_exports.object({
+  dimension: external_exports.enum(BUILD_DIMENSIONS),
+  label: external_exports.string(),
+  score: external_exports.number().min(1).max(5),
+  rationale: external_exports.string(),
+  suggestions: external_exports.array(external_exports.string()),
+  evidenceFiles: external_exports.array(external_exports.string()).optional()
+});
+var BuildGapSchema = external_exports.object({
+  dimension: external_exports.enum(BUILD_DIMENSIONS),
+  severity: external_exports.enum(["blocker", "major", "minor"]),
+  finding: external_exports.string(),
+  impact: external_exports.string(),
+  recommendation: external_exports.string(),
+  effort: external_exports.enum(["small", "medium", "large"]),
+  incrementalPath: external_exports.string().optional(),
+  relevantFiles: external_exports.array(external_exports.string()).optional(),
+  evidenceFile: external_exports.string().optional(),
+  evidenceLine: external_exports.number().int().positive().optional(),
+  evidenceQuote: external_exports.string().optional()
+  // evidenceVerified is intentionally absent — it is set ONLY by verifyEvidenceQuotes(),
+  // never by the LLM. Accepting it from the LLM would undermine the entire trust model.
+});
+var BuildQualityLLMResponseSchema = external_exports.object({
+  dimensions: external_exports.array(BuildDimensionScoreSchema).min(1),
+  gaps: external_exports.array(BuildGapSchema),
+  summary: external_exports.string(),
+  topSuggestion: external_exports.string(),
+  filesExamined: external_exports.array(external_exports.string())
+});
 
-// ../../libs/harmonica-schemas/src/azure-marketplace.ts
-var AzureMarketplaceSubscriptionSchema = external_exports.object({
-  id: external_exports.string(),
-  publisherId: external_exports.string().optional(),
-  offerId: external_exports.string().optional(),
+// ../../libs/harmonica-schemas/src/onboarding-analysis.ts
+var ConfidenceTierSchema = external_exports.enum(["confirmed", "inferred", "assumed"]);
+var DiscoveryItemSchema = external_exports.object({
+  content: external_exports.string().min(1),
+  confidence: ConfidenceTierSchema,
+  source: external_exports.string().min(1)
+  // e.g. "documents", "your input", "research"
+});
+var StakeholderGapActionSchema = external_exports.enum([
+  "confirm_name",
+  "ask_pm",
+  "flag_for_followup",
+  "suggest_from_roster"
+]);
+var ClientStakeholderSchema = external_exports.object({
+  role: external_exports.string().min(1),
   name: external_exports.string().optional(),
-  saasSubscriptionStatus: external_exports.string().optional(),
-  planId: external_exports.string().optional(),
-  quantity: external_exports.number().optional(),
-  beneficiary: external_exports.object({
-    emailId: external_exports.string().optional(),
-    objectId: external_exports.string().optional(),
-    tenantId: external_exports.string().optional()
-  }).optional(),
-  purchaser: external_exports.object({
-    emailId: external_exports.string().optional(),
-    objectId: external_exports.string().optional(),
-    tenantId: external_exports.string().optional()
-  }).optional()
+  confidence: ConfidenceTierSchema,
+  whyNeeded: external_exports.string().min(1),
+  proposedAction: StakeholderGapActionSchema
 });
-var AzureSubscribedSchema = external_exports.object({
-  action: external_exports.literal("Subscribe"),
-  // Non-blank, not merely non-empty. A bare z.string() accepts "", which would
-  // derive the slug "az-" — 3 chars, trailing dash, invalid under the repository
-  // slug invariant. And .min(1) alone still admits "   ", which normalizes to
-  // nothing and falls through to the hash fallback, quietly provisioning an org
-  // under a hashed slug for input that is plainly garbage. Reject it at the
-  // boundary instead.
-  subscriptionId: external_exports.string().min(1).refine((v) => v.trim().length > 0, {
-    message: "subscriptionId must not be blank"
-  }),
-  offerId: external_exports.string(),
-  planId: external_exports.string(),
-  quantity: external_exports.number().optional(),
-  timeStamp: external_exports.string(),
-  operationId: external_exports.string(),
-  subscription: AzureMarketplaceSubscriptionSchema
+var CodazenStakeholderSchema = external_exports.object({
+  role: external_exports.string().min(1),
+  name: external_exports.string().optional(),
+  confidence: ConfidenceTierSchema,
+  basis: external_exports.string().min(1)
 });
-var AzureUnsubscribedSchema = external_exports.object({
-  action: external_exports.literal("Unsubscribe"),
-  // Non-blank, not merely non-empty. A bare z.string() accepts "", which would
-  // derive the slug "az-" — 3 chars, trailing dash, invalid under the repository
-  // slug invariant. And .min(1) alone still admits "   ", which normalizes to
-  // nothing and falls through to the hash fallback, quietly provisioning an org
-  // under a hashed slug for input that is plainly garbage. Reject it at the
-  // boundary instead.
-  subscriptionId: external_exports.string().min(1).refine((v) => v.trim().length > 0, {
-    message: "subscriptionId must not be blank"
-  }),
-  offerId: external_exports.string(),
-  planId: external_exports.string(),
-  timeStamp: external_exports.string(),
-  operationId: external_exports.string(),
-  subscription: AzureMarketplaceSubscriptionSchema
-});
-var AzureChangePlanSchema = external_exports.object({
-  action: external_exports.literal("ChangePlan"),
-  // Non-blank, not merely non-empty. A bare z.string() accepts "", which would
-  // derive the slug "az-" — 3 chars, trailing dash, invalid under the repository
-  // slug invariant. And .min(1) alone still admits "   ", which normalizes to
-  // nothing and falls through to the hash fallback, quietly provisioning an org
-  // under a hashed slug for input that is plainly garbage. Reject it at the
-  // boundary instead.
-  subscriptionId: external_exports.string().min(1).refine((v) => v.trim().length > 0, {
-    message: "subscriptionId must not be blank"
-  }),
-  offerId: external_exports.string(),
-  planId: external_exports.string(),
-  timeStamp: external_exports.string(),
-  operationId: external_exports.string(),
-  subscription: AzureMarketplaceSubscriptionSchema
-});
-var AzureSuspendSchema = external_exports.object({
-  action: external_exports.literal("Suspend"),
-  // Non-blank, not merely non-empty. A bare z.string() accepts "", which would
-  // derive the slug "az-" — 3 chars, trailing dash, invalid under the repository
-  // slug invariant. And .min(1) alone still admits "   ", which normalizes to
-  // nothing and falls through to the hash fallback, quietly provisioning an org
-  // under a hashed slug for input that is plainly garbage. Reject it at the
-  // boundary instead.
-  subscriptionId: external_exports.string().min(1).refine((v) => v.trim().length > 0, {
-    message: "subscriptionId must not be blank"
-  }),
-  offerId: external_exports.string(),
-  planId: external_exports.string(),
-  timeStamp: external_exports.string(),
-  operationId: external_exports.string(),
-  subscription: AzureMarketplaceSubscriptionSchema
-});
-var AzureReinstateSchema = external_exports.object({
-  action: external_exports.literal("Reinstate"),
-  // Non-blank, not merely non-empty. A bare z.string() accepts "", which would
-  // derive the slug "az-" — 3 chars, trailing dash, invalid under the repository
-  // slug invariant. And .min(1) alone still admits "   ", which normalizes to
-  // nothing and falls through to the hash fallback, quietly provisioning an org
-  // under a hashed slug for input that is plainly garbage. Reject it at the
-  // boundary instead.
-  subscriptionId: external_exports.string().min(1).refine((v) => v.trim().length > 0, {
-    message: "subscriptionId must not be blank"
+var DiscoveryAnalysisSchema = external_exports.object({
+  organization: external_exports.object({
+    name: external_exports.string().min(1),
+    description: external_exports.string().min(1),
+    confidence: ConfidenceTierSchema,
+    source: external_exports.string().min(1)
   }),
-  offerId: external_exports.string(),
-  planId: external_exports.string(),
-  timeStamp: external_exports.string(),
-  operationId: external_exports.string(),
-  subscription: AzureMarketplaceSubscriptionSchema
+  painPoints: external_exports.array(DiscoveryItemSchema),
+  goals: external_exports.array(DiscoveryItemSchema),
+  constraints: external_exports.array(DiscoveryItemSchema),
+  commitments: external_exports.array(
+    DiscoveryItemSchema.extend({
+      suggestedDeliverableName: external_exports.string().optional(),
+      suggestedDueDate: external_exports.string().optional()
+    })
+  ),
+  people: external_exports.object({
+    client: external_exports.array(ClientStakeholderSchema),
+    codazen: external_exports.array(CodazenStakeholderSchema)
+  })
 });
-var AzureMarketplaceWebhookEventSchema = external_exports.discriminatedUnion("action", [
-  AzureSubscribedSchema,
-  AzureUnsubscribedSchema,
-  AzureChangePlanSchema,
-  AzureSuspendSchema,
-  AzureReinstateSchema
+var GapNoteTypeSchema = external_exports.enum([
+  "constraint",
+  "context",
+  "guidance",
+  "decision"
 ]);
-var AZURE_MARKETPLACE_WEBHOOK_ACTIONS = AzureMarketplaceWebhookEventSchema.options.map(
-  (o) => o.shape.action.value
-);
-var AzureMarketplaceActivateBodySchema = external_exports.object({
-  token: external_exports.string().min(1)
-});
-
-// ../../libs/harmonica-schemas/src/compose-beat-versions.ts
-var BeatVersionDraftSchema = external_exports.object({
-  title: external_exports.string().min(1).max(300),
-  description: external_exports.string().min(1).max(2e3),
-  scope: external_exports.string().max(1e3).optional(),
-  changeSummary: external_exports.string().min(1).max(500),
-  changeImportance: external_exports.enum(["minor", "moderate", "major"]),
-  priority: external_exports.number().int().min(1).optional(),
-  tags: external_exports.array(external_exports.string()).optional(),
-  estimatedEffort: external_exports.enum(["XS", "S", "M", "L", "XL"]).optional()
-});
-var LLMBeatVersionsCompositionOutputSchema = external_exports.object({
-  drafts: external_exports.array(BeatVersionDraftSchema).min(2).max(5)
-});
-
-// ../../libs/harmonica-schemas/src/note-extraction.ts
-var EXTRACTABLE_NOTE_TYPES = ["context", "constraint", "guidance", "decision"];
-var DECISION_SIGNIFICANCE_VALUES = ["strategic", "structural", "implementation"];
-var ExtractedNoteRawSchema = external_exports.object({
-  noteType: external_exports.enum(EXTRACTABLE_NOTE_TYPES),
+var GapToFileSchema = external_exports.object({
+  action: external_exports.literal("file"),
+  noteType: GapNoteTypeSchema,
   content: external_exports.string().min(1),
   rationale: external_exports.string().optional(),
-  confidence: external_exports.number().min(0).max(1),
-  significance: external_exports.enum(DECISION_SIGNIFICANCE_VALUES).optional()
-});
-var NoteExtractionResponseSchema = external_exports.array(ExtractedNoteRawSchema);
-
-// ../../libs/harmonica-schemas/src/plan-quality.ts
-var PLAN_QUALITY_DIMENSIONS = [
-  "scoped",
-  "directional",
-  "testable",
-  "traceable",
-  "assignable",
-  "riskAware",
-  "completeness"
-];
-var PlanDimensionScoreSchema = external_exports.object({
-  dimension: external_exports.enum(PLAN_QUALITY_DIMENSIONS),
-  label: external_exports.string(),
-  score: external_exports.number().min(1).max(5),
-  rationale: external_exports.string(),
-  suggestions: external_exports.array(external_exports.string())
-});
-var PlanQualityLLMResponseSchema = external_exports.object({
-  dimensions: external_exports.array(PlanDimensionScoreSchema).min(1),
-  summary: external_exports.string(),
-  topSuggestion: external_exports.string()
-});
-
-// ../../libs/harmonica-schemas/src/revision-quality.ts
-var REVISION_QUALITY_DIMENSIONS = [
-  "scoped",
-  "traceable",
-  "testable",
-  "reviewReady",
-  "nonDuplicating"
-];
-var RevisionDimensionScoreSchema = external_exports.object({
-  dimension: external_exports.enum(REVISION_QUALITY_DIMENSIONS),
-  label: external_exports.string(),
-  score: external_exports.number().min(1).max(5),
-  rationale: external_exports.string(),
-  suggestions: external_exports.array(external_exports.string())
-});
-var RevisionQualityLLMResponseSchema = external_exports.object({
-  dimensions: external_exports.array(RevisionDimensionScoreSchema).min(1),
-  summary: external_exports.string(),
-  topSuggestion: external_exports.string()
-});
-
-// ../../libs/harmonica-schemas/src/beat-quality.ts
-var BEAT_QUALITY_DIMENSIONS = [
-  "distinctive",
-  "harmonious",
-  "substantial",
-  "durable",
-  "clear",
-  "strategicallyAligned",
-  "outcomeOriented"
-];
-var BeatDimensionScoreSchema = external_exports.object({
-  dimension: external_exports.enum(BEAT_QUALITY_DIMENSIONS),
-  label: external_exports.string(),
-  score: external_exports.number().min(1).max(5),
-  rationale: external_exports.string(),
-  suggestions: external_exports.array(external_exports.string())
-});
-var BeatQualityLLMResponseSchema = external_exports.object({
-  dimensions: external_exports.array(BeatDimensionScoreSchema).length(BEAT_QUALITY_DIMENSIONS.length).refine(
-    (arr) => new Set(arr.map((d) => d.dimension)).size === arr.length,
-    { message: "Each quality dimension must appear exactly once" }
-  ),
-  summary: external_exports.string(),
-  topSuggestion: external_exports.string()
+  confidence: external_exports.number().min(0).max(1).optional()
 });
-
-// ../../libs/harmonica-schemas/src/drop-quality.ts
-var DROP_QUALITY_DIMENSIONS = [
-  "substantial",
-  "harmonious",
-  "clear",
-  "focused",
-  "strategicallyAligned"
-];
-var DropDimensionScoreSchema = external_exports.object({
-  dimension: external_exports.enum(DROP_QUALITY_DIMENSIONS),
-  label: external_exports.string(),
-  score: external_exports.number().min(1).max(5),
-  rationale: external_exports.string(),
-  suggestions: external_exports.array(external_exports.string())
+var GapToEscalateSchema = external_exports.object({
+  action: external_exports.literal("escalate"),
+  category: external_exports.string().min(1),
+  question: external_exports.string().min(1),
+  mayaRecommendation: external_exports.string().min(1)
+  // Maya's best guess so PM is correcting, not composing
 });
-var DropQualityLLMResponseSchema = external_exports.object({
-  dimensions: external_exports.array(DropDimensionScoreSchema).length(DROP_QUALITY_DIMENSIONS.length).refine(
-    (arr) => new Set(arr.map((d) => d.dimension)).size === arr.length,
-    { message: "Each drop quality dimension must appear exactly once" }
-  ),
-  summary: external_exports.string(),
-  topSuggestion: external_exports.string()
+var GapClassificationItemSchema = external_exports.discriminatedUnion("action", [
+  GapToFileSchema,
+  GapToEscalateSchema
+]);
+var GapClassificationResponseSchema = external_exports.array(GapClassificationItemSchema);
+var BeatDraftSuggestionSchema = external_exports.object({
+  title: external_exports.string().min(1).max(200),
+  description: external_exports.string().min(1).max(2e3),
+  rationale: external_exports.string().min(1).max(1e3),
+  recommendConvertToNote: external_exports.boolean(),
+  noteConversionReason: external_exports.string().max(1e3).optional()
 });
-
-// ../../libs/harmonica-schemas/src/build-quality.ts
-var BUILD_DIMENSIONS = [
-  "testability",
-  "observability",
-  "architecturalFitness",
-  "modernization",
-  "resilience",
-  "maintainability",
-  "securityPosture",
-  "operability",
-  "completeness"
-];
-var BuildDimensionScoreSchema = external_exports.object({
-  dimension: external_exports.enum(BUILD_DIMENSIONS),
-  label: external_exports.string(),
-  score: external_exports.number().min(1).max(5),
-  rationale: external_exports.string(),
-  suggestions: external_exports.array(external_exports.string()),
-  evidenceFiles: external_exports.array(external_exports.string()).optional()
-});
-var BuildGapSchema = external_exports.object({
-  dimension: external_exports.enum(BUILD_DIMENSIONS),
-  severity: external_exports.enum(["blocker", "major", "minor"]),
-  finding: external_exports.string(),
-  impact: external_exports.string(),
-  recommendation: external_exports.string(),
-  effort: external_exports.enum(["small", "medium", "large"]),
-  incrementalPath: external_exports.string().optional(),
-  relevantFiles: external_exports.array(external_exports.string()).optional(),
-  evidenceFile: external_exports.string().optional(),
-  evidenceLine: external_exports.number().int().positive().optional(),
-  evidenceQuote: external_exports.string().optional()
-  // evidenceVerified is intentionally absent — it is set ONLY by verifyEvidenceQuotes(),
-  // never by the LLM. Accepting it from the LLM would undermine the entire trust model.
-});
-var BuildQualityLLMResponseSchema = external_exports.object({
-  dimensions: external_exports.array(BuildDimensionScoreSchema).min(1),
-  gaps: external_exports.array(BuildGapSchema),
-  summary: external_exports.string(),
-  topSuggestion: external_exports.string(),
-  filesExamined: external_exports.array(external_exports.string())
-});
-
-// ../../libs/harmonica-schemas/src/onboarding-analysis.ts
-var ConfidenceTierSchema = external_exports.enum(["confirmed", "inferred", "assumed"]);
-var DiscoveryItemSchema = external_exports.object({
-  content: external_exports.string().min(1),
-  confidence: ConfidenceTierSchema,
-  source: external_exports.string().min(1)
-  // e.g. "documents", "your input", "research"
-});
-var StakeholderGapActionSchema = external_exports.enum([
-  "confirm_name",
-  "ask_pm",
-  "flag_for_followup",
-  "suggest_from_roster"
-]);
-var ClientStakeholderSchema = external_exports.object({
-  role: external_exports.string().min(1),
-  name: external_exports.string().optional(),
-  confidence: ConfidenceTierSchema,
-  whyNeeded: external_exports.string().min(1),
-  proposedAction: StakeholderGapActionSchema
-});
-var CodazenStakeholderSchema = external_exports.object({
-  role: external_exports.string().min(1),
-  name: external_exports.string().optional(),
-  confidence: ConfidenceTierSchema,
-  basis: external_exports.string().min(1)
-});
-var DiscoveryAnalysisSchema = external_exports.object({
-  organization: external_exports.object({
-    name: external_exports.string().min(1),
-    description: external_exports.string().min(1),
-    confidence: ConfidenceTierSchema,
-    source: external_exports.string().min(1)
-  }),
-  painPoints: external_exports.array(DiscoveryItemSchema),
-  goals: external_exports.array(DiscoveryItemSchema),
-  constraints: external_exports.array(DiscoveryItemSchema),
-  commitments: external_exports.array(
-    DiscoveryItemSchema.extend({
-      suggestedDeliverableName: external_exports.string().optional(),
-      suggestedDueDate: external_exports.string().optional()
-    })
-  ),
-  people: external_exports.object({
-    client: external_exports.array(ClientStakeholderSchema),
-    codazen: external_exports.array(CodazenStakeholderSchema)
-  })
-});
-var GapNoteTypeSchema = external_exports.enum([
-  "constraint",
-  "context",
-  "guidance",
-  "decision"
-]);
-var GapToFileSchema = external_exports.object({
-  action: external_exports.literal("file"),
-  noteType: GapNoteTypeSchema,
-  content: external_exports.string().min(1),
-  rationale: external_exports.string().optional(),
-  confidence: external_exports.number().min(0).max(1).optional()
-});
-var GapToEscalateSchema = external_exports.object({
-  action: external_exports.literal("escalate"),
-  category: external_exports.string().min(1),
-  question: external_exports.string().min(1),
-  mayaRecommendation: external_exports.string().min(1)
-  // Maya's best guess so PM is correcting, not composing
-});
-var GapClassificationItemSchema = external_exports.discriminatedUnion("action", [
-  GapToFileSchema,
-  GapToEscalateSchema
-]);
-var GapClassificationResponseSchema = external_exports.array(GapClassificationItemSchema);
-var BeatDraftSuggestionSchema = external_exports.object({
-  title: external_exports.string().min(1).max(200),
-  description: external_exports.string().min(1).max(2e3),
-  rationale: external_exports.string().min(1).max(1e3),
-  recommendConvertToNote: external_exports.boolean(),
-  noteConversionReason: external_exports.string().max(1e3).optional()
-});
-var BeatDraftSuggestionsSchema = external_exports.array(BeatDraftSuggestionSchema);
+var BeatDraftSuggestionsSchema = external_exports.array(BeatDraftSuggestionSchema);
 
 // ../../libs/harmonica-schemas/src/api-responses.ts
 var HumanAssigneeSchema = external_exports.object({ email: external_exports.string(), name: external_exports.string() });
@@ -26627,6 +25597,7 @@ var OrganizationSummarySchema = external_exports.object({
   name: external_exports.string(),
   slug: external_exports.string(),
   logoUrl: external_exports.string().optional(),
+  capabilityProfile: external_exports.enum(["azure-core"]).optional(),
   status: external_exports.string(),
   role: external_exports.string(),
   systemCount: external_exports.number(),
@@ -26967,6 +25938,15 @@ var WorkItemApiSchema = external_exports.object({
    * named group, not hide them.
    */
   workOrderId: external_exports.string().min(1).optional(),
+  /**
+   * Optional link to the Bar this item is planned into (B-298). Absent means
+   * unplanned, which is a supported state — a reader grouping a queue by Bar
+   * must render those as their own named group, not hide them. An id that
+   * doesn't resolve within the Account in view is work the reader cannot
+   * place, not work that is unplanned: a Bar is Account-scoped but a Track is
+   * not, so a move on either side can separate the two.
+   */
+  barId: external_exports.string().min(1).optional(),
   createdBy: external_exports.string().optional(),
   version: external_exports.number().optional(),
   createdAt: external_exports.string(),
@@ -26976,8 +25956,68 @@ var WorkItemEstimateHintApiSchema = external_exports.object({
   hours: external_exports.number(),
   source: external_exports.literal("beat_version_value_velocity")
 });
+var BAR_STATUSES2 = ["open", "closed"];
+var BarApiSchema = external_exports.object({
+  barId: external_exports.string(),
+  accountId: external_exports.string(),
+  /** ISO 8601 date the Bar opens. */
+  startDate: external_exports.string(),
+  /** ISO 8601 date the Bar closes. */
+  endDate: external_exports.string(),
+  status: external_exports.enum(BAR_STATUSES2),
+  createdAt: external_exports.string(),
+  updatedAt: external_exports.string()
+}).passthrough();
+var BarsResponseSchema = external_exports.object({ bars: external_exports.array(BarApiSchema) }).passthrough();
 var WorkItemsResponseSchema = external_exports.object({ workItems: external_exports.array(WorkItemApiSchema) }).passthrough();
 var WorkItemResponseSchema = external_exports.object({ workItem: WorkItemApiSchema, estimateHint: WorkItemEstimateHintApiSchema.optional() }).passthrough();
+var EXTERNAL_MAPPING_SUBJECT_TYPES = [
+  "movement",
+  "work_order",
+  "work_item"
+];
+var ExternalMappingSubjectTypeApiSchema = external_exports.enum(EXTERNAL_MAPPING_SUBJECT_TYPES);
+var EXTERNAL_MAPPING_PROVIDERS = [
+  "jira",
+  "linear",
+  "github",
+  "asana",
+  "other"
+];
+var ExternalMappingProviderApiSchema = external_exports.enum(EXTERNAL_MAPPING_PROVIDERS);
+var EXTERNAL_MAPPING_SYNC_DIRECTIONS = [
+  "none",
+  "inbound",
+  "outbound",
+  "bidirectional"
+];
+var ExternalMappingSyncDirectionApiSchema = external_exports.enum(EXTERNAL_MAPPING_SYNC_DIRECTIONS);
+var EXTERNAL_MAPPING_SYNC_STATUSES = [
+  "ok",
+  "stale",
+  "error",
+  "unlinked"
+];
+var ExternalMappingSyncStatusApiSchema = external_exports.enum(EXTERNAL_MAPPING_SYNC_STATUSES);
+var ExternalMappingApiSchema = external_exports.object({
+  externalMappingId: external_exports.string(),
+  subjectType: ExternalMappingSubjectTypeApiSchema,
+  subjectId: external_exports.string(),
+  teamspaceId: external_exports.string(),
+  orgId: external_exports.string(),
+  provider: ExternalMappingProviderApiSchema,
+  externalKey: external_exports.string(),
+  url: external_exports.string().optional(),
+  syncDirection: ExternalMappingSyncDirectionApiSchema,
+  lastSyncedAt: external_exports.string().optional(),
+  syncStatus: ExternalMappingSyncStatusApiSchema,
+  createdBy: external_exports.string().optional(),
+  version: external_exports.number().optional(),
+  createdAt: external_exports.string(),
+  updatedAt: external_exports.string()
+}).passthrough();
+var ExternalMappingsResponseSchema = external_exports.object({ externalMappings: external_exports.array(ExternalMappingApiSchema) }).passthrough();
+var EXTERNAL_MAPPING_SUBJECT_NOT_FOUND_CODE = "SUBJECT_NOT_FOUND";
 var WORK_INTAKE_STATUSES = [
   "requested",
   "needs_decision",
@@ -27024,8 +26064,14 @@ var WorkOrderApiSchema = external_exports.object({
   workOrderId: external_exports.string(),
   /** Immutable lineage back to the ask this Order was split from. */
   workRequestId: external_exports.string(),
-  /** Mutable — an Order moves Tracks when an early split guess turns out wrong. */
-  trackId: external_exports.string(),
+  /**
+   * Optional: an Order may carry no Track at all. Under N-4E09-7470 a Track is
+   * attribution, not an Order's parent, and an Order can be raised against a
+   * Request before any placement exists. Requiring it here made the API reject
+   * its own valid responses — a Movement holding one unplaced Order failed to
+   * parse, so the whole list threw.
+   */
+  trackId: external_exports.string().optional(),
   teamspaceId: external_exports.string(),
   orgId: external_exports.string(),
   title: external_exports.string(),
@@ -27141,7 +26187,7 @@ var LayerRubricTemplateApiSchema = external_exports.object({
 var LayerRubricTemplatesResponseSchema = external_exports.object({
   layerRubricTemplates: external_exports.array(LayerRubricTemplateApiSchema)
 }).passthrough();
-var DELIVERABLE_GROUP_STATUSES = [
+var TRACK_STATUSES = [
   "draft",
   "proposed",
   "approved",
@@ -27149,19 +26195,18 @@ var DELIVERABLE_GROUP_STATUSES = [
   "fulfilled",
   "cancelled"
 ];
-var DeliverableGroupStatusSchema = external_exports.enum(DELIVERABLE_GROUP_STATUSES);
-var DeliverableGroupApiSchema = external_exports.object({
-  deliverableGroupId: external_exports.string(),
-  groupCode: external_exports.string(),
+var TrackStatusSchema = external_exports.enum(TRACK_STATUSES);
+var TrackApiSchema = external_exports.object({
+  trackId: external_exports.string(),
+  trackCode: external_exports.string(),
   teamspaceId: external_exports.string(),
-  systemId: external_exports.string().nullish(),
   movementId: external_exports.string().nullish(),
   orgId: external_exports.string(),
   title: external_exports.string(),
   description: external_exports.string().nullish(),
   deliverables: external_exports.string().nullish(),
   acceptanceCriteria: external_exports.string().nullish(),
-  status: DeliverableGroupStatusSchema,
+  status: TrackStatusSchema,
   vuRate: external_exports.number().nullish(),
   proposedAt: external_exports.string().nullish(),
   approvedAt: external_exports.string().nullish(),
@@ -27172,8 +26217,8 @@ var DeliverableGroupApiSchema = external_exports.object({
   createdAt: external_exports.string(),
   updatedAt: external_exports.string()
 }).passthrough();
-var DeliverableGroupsResponseSchema = external_exports.object({
-  deliverableGroups: external_exports.array(DeliverableGroupApiSchema)
+var TracksResponseSchema = external_exports.object({
+  tracks: external_exports.array(TrackApiSchema)
 }).passthrough();
 var MovementDropSummaryApiSchema = external_exports.object({
   dropId: external_exports.string(),
@@ -27203,7 +26248,7 @@ var WorkPlanBeatVersionApiSchema = external_exports.object({
   createdAt: external_exports.string(),
   updatedAt: external_exports.string()
 }).passthrough();
-var DeliverableGroupBeatVersionsResponseSchema = external_exports.object({
+var TrackBeatVersionsResponseSchema = external_exports.object({
   beatVersions: external_exports.array(WorkPlanBeatVersionApiSchema)
 }).passthrough();
 var RevisionClaimActorSchema = external_exports.union([
@@ -27300,7 +26345,918 @@ var DropProposalApiSchema = external_exports.object({
   scoredCandidates: external_exports.array(ScoredDropCandidateSchema).optional()
 }).passthrough();
 
+// ../../libs/harmonica-services/src/mcp/tools/external-mapping-tools.ts
+var SUBJECT_TYPE_ENUM = ["movement", "work_order", "work_item"];
+var PROVIDER_ENUM = ["jira", "linear", "github", "asana", "other"];
+var SYNC_DIRECTION_ENUM = ["none", "inbound", "outbound", "bidirectional"];
+var SYNC_STATUS_ENUM = ["ok", "stale", "error", "unlinked"];
+function formatMapping(m) {
+  const parts = [
+    `[${m.externalMappingId}] ${m.provider}:${m.externalKey}`,
+    `status: ${m.syncStatus}`,
+    `direction: ${m.syncDirection}`
+  ];
+  if (m.url) parts.push(`url: ${m.url}`);
+  if (m.lastSyncedAt) parts.push(`last synced: ${m.lastSyncedAt}`);
+  return parts.join(" \u2014 ");
+}
+function registerExternalMappingTools(server, _ctx, client) {
+  server.tool(
+    "add_external_mapping",
+    "Add an External Mapping \u2014 a reference-only link from a Project (Movement), Work Order, or Work Item to an external tracker such as Jira, Linear, GitHub, or Asana. Nothing talks to the external system; sync direction is recorded intent only (N-4E09-6311). Zero to many mappings per subject; creating one checks the subject exists and is in the caller's scope.",
+    {
+      subjectType: external_exports.enum(SUBJECT_TYPE_ENUM).describe("The type of Harmonica entity being linked: movement (project), work_order, or work_item"),
+      subjectId: external_exports.string().min(1).max(128).describe("The ID of the subject entity"),
+      provider: external_exports.enum(PROVIDER_ENUM).describe("The external tracker provider"),
+      externalKey: external_exports.string().min(1).max(500).describe('Provider-specific key, e.g. a Jira issue key "PROJ-123" or a Linear issue id'),
+      url: external_exports.string().url().optional().describe("Optional human-readable URL to the external object"),
+      syncDirection: external_exports.enum(SYNC_DIRECTION_ENUM).optional().describe('Recorded intent for a later sync increment. Defaults to "none". Nothing syncs in this version.')
+    },
+    async ({ subjectType, subjectId, provider, externalKey, url, syncDirection }) => {
+      try {
+        const em = await client.addExternalMapping({
+          subjectType,
+          subjectId,
+          provider,
+          externalKey,
+          ...url !== void 0 && { url },
+          ...syncDirection !== void 0 && { syncDirection }
+        });
+        return {
+          content: [
+            {
+              type: "text",
+              text: `Added external mapping: ${formatMapping(em)}`
+            }
+          ]
+        };
+      } catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        const isSubjectMissing = err instanceof Error && err.code === EXTERNAL_MAPPING_SUBJECT_NOT_FOUND_CODE;
+        return {
+          content: [{
+            type: "text",
+            text: isSubjectMissing ? `**Field:** subjectId
+**Detail:** ${subjectType} ${subjectId} was not found, or is outside your scope.
+**Action:** Check the ID, or list the subject first to confirm it exists.` : `Failed to add external mapping: ${message}`
+          }],
+          isError: true
+        };
+      }
+    }
+  );
+  server.tool(
+    "update_external_mapping",
+    'Update an External Mapping \u2014 change the external key, URL, sync direction, or sync status. Use syncStatus "unlinked" when the external object no longer exists (the mapping is kept as evidence, not deleted).',
+    {
+      externalMappingId: external_exports.string().describe("The external mapping ID (e.g., em-abc123)"),
+      externalKey: external_exports.string().min(1).max(500).optional().describe("New provider-specific key"),
+      url: external_exports.string().url().nullable().optional().describe("New URL. Pass null to clear; omit to leave untouched."),
+      syncDirection: external_exports.enum(SYNC_DIRECTION_ENUM).optional().describe("New recorded sync intent"),
+      syncStatus: external_exports.enum(SYNC_STATUS_ENUM).optional().describe('New sync status. Use "unlinked" when the external object is gone \u2014 the mapping is kept as evidence.')
+    },
+    async ({ externalMappingId, externalKey, url, syncDirection, syncStatus }) => {
+      const hasUpdates = externalKey !== void 0 || url !== void 0 || syncDirection !== void 0 || syncStatus !== void 0;
+      if (!hasUpdates) {
+        return {
+          content: [{ type: "text", text: `No updates provided for external mapping: ${externalMappingId}` }],
+          isError: true
+        };
+      }
+      try {
+        const em = await client.updateExternalMapping(externalMappingId, {
+          ...externalKey !== void 0 && { externalKey },
+          ...url !== void 0 && { url },
+          ...syncDirection !== void 0 && { syncDirection },
+          ...syncStatus !== void 0 && { syncStatus }
+        });
+        if (!em) {
+          return {
+            content: [{ type: "text", text: `External mapping not found: ${externalMappingId}` }],
+            isError: true
+          };
+        }
+        return {
+          content: [
+            {
+              type: "text",
+              text: `Updated external mapping: ${formatMapping(em)}`
+            }
+          ]
+        };
+      } catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        return {
+          content: [{ type: "text", text: `Failed to update external mapping: ${message}` }],
+          isError: true
+        };
+      }
+    }
+  );
+  server.tool(
+    "list_external_mappings",
+    "List all External Mappings for a subject (Project/Movement, Work Order, or Work Item). Shows where this entity is tracked in external systems. Use subjectType and subjectId from the entity you are inspecting.",
+    {
+      subjectType: external_exports.enum(SUBJECT_TYPE_ENUM).describe("The type of Harmonica entity: movement, work_order, or work_item"),
+      subjectId: external_exports.string().min(1).max(128).describe("The ID of the subject entity")
+    },
+    async ({ subjectType, subjectId }) => {
+      try {
+        const mappings = await client.listExternalMappings(subjectType, subjectId);
+        const text = mappings.length === 0 ? `No external mappings found for ${subjectType} ${subjectId}.` : mappings.map(formatMapping).join("\n");
+        return { content: [{ type: "text", text }] };
+      } catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        const isSubjectMissing = err instanceof Error && err.code === EXTERNAL_MAPPING_SUBJECT_NOT_FOUND_CODE;
+        return {
+          content: [{
+            type: "text",
+            text: isSubjectMissing ? `**Field:** subjectId
+**Detail:** ${subjectType} ${subjectId} was not found, or is outside your scope.
+**Action:** Check the ID, or list the subject first to confirm it exists.` : `Failed to list external mappings: ${message}`
+          }],
+          isError: true
+        };
+      }
+    }
+  );
+}
+
+// ../../libs/harmonica-services/src/mcp/tools/feature-flag-tools.ts
+var STAGE_ENUM = external_exports.enum([
+  "local",
+  "staging",
+  "staging-alpha",
+  "staging-beta",
+  "alpha",
+  "beta",
+  "prod"
+]);
+function registerFeatureFlagTools(server, ctx, client) {
+  server.tool(
+    "list_flags",
+    "List feature flags and their enabled stages. Use check_flag to test a single flag against a specific stage, or get_flag for full detail on one flag.",
+    {
+      includeArchived: external_exports.boolean().optional().describe("Include archived flags. Default false"),
+      search: external_exports.string().optional().describe("Case-insensitive search against flag name and description"),
+      cursor: external_exports.string().optional().describe("Pagination cursor from a prior list_flags result"),
+      limit: external_exports.number().int().min(1).max(100).optional().describe("Flags per page. Default 20")
+    },
+    async ({ includeArchived, search, cursor, limit }) => {
+      try {
+        const page = await client.listFlags({ includeArchived, search, cursor, limit });
+        if (page.flags.length === 0) {
+          return { content: [{ type: "text", text: "No flags found." }] };
+        }
+        return { content: [{ type: "text", text: formatFlagList(page.flags, page.total, page.nextCursor) }] };
+      } catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        return { content: [{ type: "text", text: `Failed to list flags: ${message}` }], isError: true };
+      }
+    }
+  );
+  server.tool(
+    "get_flag",
+    "Get full detail for a single feature flag by name, including its enabled stages and optional change history.",
+    {
+      name: external_exports.string().describe("Flag name"),
+      includeHistory: external_exports.boolean().optional().describe("Include change history entries. Default false")
+    },
+    async ({ name, includeHistory }) => {
+      try {
+        const flag = await client.getFlag(name, { includeHistory });
+        if (!flag) {
+          return { content: [{ type: "text", text: `Flag "${name}" not found.` }] };
+        }
+        return { content: [{ type: "text", text: formatFlag(flag, flag.history) }] };
+      } catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        return { content: [{ type: "text", text: `Failed to get flag: ${message}` }], isError: true };
+      }
+    }
+  );
+  server.tool(
+    "check_flag",
+    "Check whether a feature flag is enabled in a specific stage. Returns a simple enabled/disabled answer.",
+    {
+      name: external_exports.string().describe("Flag name"),
+      stage: STAGE_ENUM.describe("Deployment stage to check against")
+    },
+    async ({ name, stage }) => {
+      try {
+        const enabled = await client.checkFlag(name, stage);
+        const status = enabled ? "enabled" : "disabled";
+        return {
+          content: [{
+            type: "text",
+            text: `Flag "${name}" is **${status}** in stage "${stage}".`
+          }]
+        };
+      } catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        return { content: [{ type: "text", text: `Failed to check flag: ${message}` }], isError: true };
+      }
+    }
+  );
+  server.tool(
+    "create_flag",
+    "Create or update a feature flag with the specified enabled stages. Idempotent \u2014 calling with an existing flag name replaces its enabledIn list.",
+    {
+      name: external_exports.string().min(1).describe('Flag name (e.g. "rbac:enforcement")'),
+      enabledIn: external_exports.array(STAGE_ENUM).describe("Stages to enable the flag in"),
+      description: external_exports.string().optional().describe("Human-readable description of what this flag gates"),
+      note: external_exports.string().optional().describe("Reason for this change (recorded in change history)")
+    },
+    async ({ name, enabledIn, description, note }) => {
+      if (!ctx.user.email) {
+        return { content: [{ type: "text", text: "Write operations require an authenticated user with a valid email." }], isError: true };
+      }
+      try {
+        const flag = await client.createFlag(name, enabledIn, { description, note, updatedBy: ctx.user.email });
+        return { content: [{ type: "text", text: formatFlag(flag) }] };
+      } catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        return { content: [{ type: "text", text: `Failed to create flag: ${message}` }], isError: true };
+      }
+    }
+  );
+  server.tool(
+    "set_flag",
+    "Update which stages a feature flag is enabled in. Replaces the current enabledIn list entirely.",
+    {
+      name: external_exports.string().min(1).describe("Flag name"),
+      enabledIn: external_exports.array(STAGE_ENUM).describe("New set of stages to enable the flag in. Pass [] to disable everywhere without archiving."),
+      note: external_exports.string().optional().describe("Reason for this change (recorded in change history)")
+    },
+    async ({ name, enabledIn, note }) => {
+      if (!ctx.user.email) {
+        return { content: [{ type: "text", text: "Write operations require an authenticated user with a valid email." }], isError: true };
+      }
+      try {
+        const flag = await client.setFlag(name, enabledIn, { note, updatedBy: ctx.user.email });
+        return { content: [{ type: "text", text: formatFlag(flag) }] };
+      } catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        return { content: [{ type: "text", text: `Failed to set flag: ${message}` }], isError: true };
+      }
+    }
+  );
+  server.tool(
+    "archive_flag",
+    "Archive a feature flag. Clears its enabledIn list and marks it archived so it cannot be re-enabled via set_flag. Use unarchive_flag to restore it.",
+    {
+      name: external_exports.string().min(1).describe("Flag name"),
+      note: external_exports.string().optional().describe("Reason for archiving (recorded in change history)")
+    },
+    async ({ name, note }) => {
+      if (!ctx.user.email) {
+        return { content: [{ type: "text", text: "Write operations require an authenticated user with a valid email." }], isError: true };
+      }
+      try {
+        const flag = await client.archiveFlag(name, { note, updatedBy: ctx.user.email });
+        return { content: [{ type: "text", text: formatFlag(flag) }] };
+      } catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        return { content: [{ type: "text", text: `Failed to archive flag: ${message}` }], isError: true };
+      }
+    }
+  );
+  server.tool(
+    "unarchive_flag",
+    "Restore an archived feature flag to operable state. The flag is re-enabled with an empty enabledIn list \u2014 use set_flag afterward to enable it in specific stages.",
+    {
+      name: external_exports.string().min(1).describe("Flag name"),
+      note: external_exports.string().optional().describe("Reason for restoring (recorded in change history)")
+    },
+    async ({ name, note }) => {
+      if (!ctx.user.email) {
+        return { content: [{ type: "text", text: "Write operations require an authenticated user with a valid email." }], isError: true };
+      }
+      try {
+        const flag = await client.unarchiveFlag(name, { note, updatedBy: ctx.user.email });
+        return { content: [{ type: "text", text: formatFlag(flag) }] };
+      } catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        return { content: [{ type: "text", text: `Failed to unarchive flag: ${message}` }], isError: true };
+      }
+    }
+  );
+}
+function formatFlag(flag, history) {
+  const archived = flag.archivedAt ? " **(archived)**" : "";
+  const enabled = flag.enabledIn.length > 0 ? flag.enabledIn.join(", ") : "(none)";
+  const parts = [
+    `# Flag: ${flag.name}${archived}`,
+    `**Scope:** ${flag.scope}`,
+    `**Enabled in:** ${enabled}`,
+    flag.description ? `**Description:** ${flag.description}` : null,
+    `**Last updated:** ${flag.updatedAt.slice(0, 10)} by ${flag.updatedBy}`,
+    flag.archivedAt ? `**Archived:** ${flag.archivedAt.slice(0, 10)} by ${flag.archivedBy}` : null
+  ].filter(Boolean).join("\n");
+  if (!history?.length) return parts;
+  const historyLines = history.map((h) => {
+    const prev = h.previousEnabledIn.length > 0 ? h.previousEnabledIn.join(", ") : "(none)";
+    const next = h.newEnabledIn.length > 0 ? h.newEnabledIn.join(", ") : "(none)";
+    const note = h.note ? ` \u2014 ${h.note}` : "";
+    return `- ${h.updatedAt.slice(0, 10)} ${h.updatedBy}: ${prev} \u2192 ${next}${note}`;
+  }).join("\n");
+  return `${parts}
+
+## Change History
+${historyLines}`;
+}
+function formatFlagList(flags, total, nextCursor) {
+  const rows = flags.map((f) => {
+    const enabled = f.enabledIn.length > 0 ? f.enabledIn.join(", ") : "(none)";
+    const archived = f.archivedAt ? " *(archived)*" : "";
+    return `| ${f.name}${archived} | ${enabled} | ${f.updatedAt.slice(0, 10)} |`;
+  });
+  const table = [
+    `# Feature Flags (${total} total, showing ${flags.length})`,
+    "",
+    "| Name | Enabled In | Updated |",
+    "|---|---|---|",
+    ...rows
+  ].join("\n");
+  if (!nextCursor) return table;
+  return `${table}
+
+More flags available. Pass \`cursor: "${nextCursor}"\` to list_flags to continue.`;
+}
+
+// ../../libs/harmonica-services/src/mcp/tools/layer-tools.ts
+function registerLayerTools(server, ctx, client) {
+  server.tool(
+    "list_system_layers",
+    "List the architectural Layers declared on a System (e.g. frontend, backend, data). Layers are an evaluation lens for plan/build quality checks, not a work container.",
+    {
+      systemId: external_exports.string().describe("The System ID")
+    },
+    async ({ systemId }) => {
+      try {
+        await assertSystemExists(client, systemId);
+      } catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        return { content: [{ type: "text", text: `Access denied: ${message}` }], isError: true };
+      }
+      let layers;
+      try {
+        layers = await client.listSystemLayers(systemId);
+      } catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        return { content: [{ type: "text", text: `Failed to list Layers: ${message}` }], isError: true };
+      }
+      const text = formatLayerList(layers);
+      return { content: [{ type: "text", text }] };
+    }
+  );
+  server.tool(
+    "get_layer",
+    "Get full details of a single Layer by ID, including its repo mapping and parent Layer (if it was split from one).",
+    {
+      systemId: external_exports.string().describe("The System ID (for access control)"),
+      layerId: external_exports.string().describe("The Layer ID")
+    },
+    async ({ systemId, layerId }) => {
+      try {
+        await assertSystemExists(client, systemId);
+      } catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        return { content: [{ type: "text", text: `Access denied: ${message}` }], isError: true };
+      }
+      let layer;
+      try {
+        layer = await client.getLayer(layerId);
+      } catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        return { content: [{ type: "text", text: `Failed to get Layer: ${message}` }], isError: true };
+      }
+      if (!layer) {
+        return { content: [{ type: "text", text: `Layer not found: "${layerId}"` }], isError: true };
+      }
+      if (layer.systemId !== systemId) {
+        return { content: [{ type: "text", text: `Layer "${layerId}" does not belong to System "${systemId}".` }], isError: true };
+      }
+      const text = formatLayerDetail(layer);
+      return { content: [{ type: "text", text }] };
+    }
+  );
+  server.tool(
+    "create_layer",
+    "Declare a new architectural Layer on a System (e.g. frontend, backend, data). Layers are an evaluation lens for plan/build quality checks. layerKey must be a lowercase slug and unique per System.",
+    {
+      systemId: external_exports.string().describe("The System ID"),
+      layerKey: external_exports.string().regex(/^[a-z]([a-z0-9-]*[a-z0-9])?$/, "layerKey must be a lowercase slug (letters, digits, hyphens; start with a letter, no trailing hyphen)").describe('Stable lowercase slug for the Layer role, e.g. "frontend" or "agent-workers"'),
+      name: external_exports.string().describe('Display name, e.g. "Frontend"'),
+      description: external_exports.string().optional().describe("Optional description of the Layer"),
+      parentLayerId: external_exports.string().optional().describe("Optional parent Layer to nest under (must be a Layer on the same System)"),
+      repoPatterns: external_exports.array(external_exports.string()).optional().describe("Optional repo path patterns owned by this Layer")
+    },
+    async ({ systemId, layerKey, name, description, parentLayerId, repoPatterns }) => {
+      try {
+        await assertSystemExists(client, systemId);
+      } catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        return { content: [{ type: "text", text: `Access denied: ${message}` }], isError: true };
+      }
+      let layer;
+      try {
+        layer = await client.createSystemLayer({
+          systemId,
+          layerKey,
+          name,
+          ...description !== void 0 && { description },
+          ...parentLayerId !== void 0 && { parentLayerId },
+          ...repoPatterns !== void 0 && { repoPatterns }
+        });
+      } catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        return { content: [{ type: "text", text: `Failed to create Layer: ${message}` }], isError: true };
+      }
+      if (!layer) {
+        return { content: [{ type: "text", text: `System "${systemId}" not found or not writable.` }], isError: true };
+      }
+      return { content: [{ type: "text", text: `Created Layer.
+
+${formatLayerDetail(layer)}` }] };
+    }
+  );
+  server.tool(
+    "update_layer",
+    "Update a Layer's editable fields (name, description, repo mapping). Omitted fields are left unchanged. Archiving/reviving a Layer goes through transition_layer, not this tool. Requires write access to the System.",
+    {
+      systemId: external_exports.string().describe("The System ID the Layer belongs to (for access control)"),
+      layerId: external_exports.string().describe("The Layer ID to update"),
+      name: external_exports.string().optional().describe("New display name"),
+      description: external_exports.string().optional().describe("New description"),
+      repoPatterns: external_exports.array(external_exports.string()).optional().describe("Replacement repo mapping (replaces the existing list)")
+    },
+    async ({ systemId, layerId, name, description, repoPatterns }) => {
+      try {
+        await assertSystemExists(client, systemId);
+      } catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        return { content: [{ type: "text", text: `Access denied: ${message}` }], isError: true };
+      }
+      let existing;
+      try {
+        existing = await client.getLayer(layerId);
+      } catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        return { content: [{ type: "text", text: `Failed to load Layer: ${message}` }], isError: true };
+      }
+      if (!existing) return { content: [{ type: "text", text: `Layer not found: "${layerId}"` }], isError: true };
+      if (existing.systemId !== systemId) {
+        return { content: [{ type: "text", text: `Layer "${layerId}" does not belong to System "${systemId}".` }], isError: true };
+      }
+      let layer;
+      try {
+        layer = await client.updateSystemLayer(layerId, {
+          ...name !== void 0 && { name },
+          ...description !== void 0 && { description },
+          ...repoPatterns !== void 0 && { repoPatterns }
+        });
+      } catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        return { content: [{ type: "text", text: `Failed to update Layer: ${message}` }], isError: true };
+      }
+      if (!layer) return { content: [{ type: "text", text: `Layer not found: "${layerId}"` }], isError: true };
+      return { content: [{ type: "text", text: `Updated Layer.
+
+${formatLayerDetail(layer)}` }] };
+    }
+  );
+  server.tool(
+    "transition_layer",
+    "Archive or revive a Layer. Archiving requires a reason (audit trail); reviving sets it back to active. Requires write access to the System.",
+    {
+      systemId: external_exports.string().describe("The System ID the Layer belongs to (for access control)"),
+      layerId: external_exports.string().describe("The Layer ID to transition"),
+      status: external_exports.enum(["active", "archived"]).describe('Target status: "archived" to retire, "active" to revive'),
+      reason: external_exports.string().optional().describe('Why the Layer is being archived (required when status is "archived")')
+    },
+    async ({ systemId, layerId, status, reason }) => {
+      try {
+        await assertSystemExists(client, systemId);
+      } catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        return { content: [{ type: "text", text: `Access denied: ${message}` }], isError: true };
+      }
+      let existing;
+      try {
+        existing = await client.getLayer(layerId);
+      } catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        return { content: [{ type: "text", text: `Failed to load Layer: ${message}` }], isError: true };
+      }
+      if (!existing) return { content: [{ type: "text", text: `Layer not found: "${layerId}"` }], isError: true };
+      if (existing.systemId !== systemId) {
+        return { content: [{ type: "text", text: `Layer "${layerId}" does not belong to System "${systemId}".` }], isError: true };
+      }
+      let layer;
+      try {
+        layer = await client.setSystemLayerStatus(layerId, status, reason);
+      } catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        return { content: [{ type: "text", text: `Failed to transition Layer: ${message}` }], isError: true };
+      }
+      if (!layer) return { content: [{ type: "text", text: `Layer not found: "${layerId}"` }], isError: true };
+      return { content: [{ type: "text", text: `Layer ${status === "archived" ? "archived" : "revived"}.
+
+${formatLayerDetail(layer)}` }] };
+    }
+  );
+}
+
+// ../../libs/harmonica-services/src/mcp/tools/membership-tools.ts
+var orgIdArg = external_exports.string().describe("The organization ID \u2014 see list_organizations");
+function registerMembershipTools(server, ctx, client) {
+  server.tool(
+    "list_org_members",
+    "List all members of an organization",
+    {
+      orgId: orgIdArg
+    },
+    async ({ orgId }) => {
+      try {
+        const members = await client.listOrgMembers(orgId);
+        if (members.length === 0) {
+          return { content: [{ type: "text", text: "No members found." }] };
+        }
+        const header = "| User ID | Name | Role | Title |";
+        const divider = "|---------|------|------|-------|";
+        const rows = members.map(
+          (m) => `| ${m.userId} | ${m.name} | ${m.role} | ${m.title ?? "\u2014"} |`
+        );
+        return { content: [{ type: "text", text: [header, divider, ...rows].join("\n") }] };
+      } catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        return { content: [{ type: "text", text: `Failed to list members: ${message}` }], isError: true };
+      }
+    }
+  );
+  server.tool(
+    "add_member",
+    "Grant a user access to an organization. Their name and avatar are filled in when they first sign in.",
+    {
+      orgId: orgIdArg,
+      email: external_exports.string().email().describe("Email address (used as the user ID)"),
+      role: external_exports.enum(["member", "admin", "client"]).optional().describe('Organization role (defaults to "member")')
+    },
+    async ({ orgId, email: email2, role }) => {
+      try {
+        const member = await client.addOrgMember(orgId, { email: email2, role });
+        const lines = [
+          "Member added successfully.",
+          "",
+          `**User ID:** ${member.userId}`,
+          `**Email:** ${member.email}`,
+          `**Name:** ${member.name}`,
+          `**Role:** ${member.role}`,
+          member.title ? `**Title:** ${member.title}` : ""
+        ].filter(Boolean);
+        return { content: [{ type: "text", text: lines.join("\n") }] };
+      } catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        return { content: [{ type: "text", text: `Failed to add member: ${message}` }], isError: true };
+      }
+    }
+  );
+  server.tool(
+    "update_member_role",
+    "Change a member's role within an organization.",
+    {
+      orgId: orgIdArg,
+      userId: external_exports.string().describe("User ID (email address) of the member to update"),
+      role: external_exports.enum(["member", "admin", "client"]).describe("New organization role")
+    },
+    async ({ orgId, userId, role }) => {
+      try {
+        const member = await client.updateOrgMember(orgId, userId, { role });
+        if (!member) {
+          return { content: [{ type: "text", text: `Member not found: "${userId}"` }], isError: true };
+        }
+        const lines = [
+          "Member updated successfully.",
+          "",
+          `**User ID:** ${member.userId}`,
+          `**Email:** ${member.email}`,
+          `**Name:** ${member.name}`,
+          `**Role:** ${member.role}`,
+          member.title ? `**Title:** ${member.title}` : "",
+          member.responsibility ? `**Responsibility:** ${member.responsibility}` : ""
+        ].filter(Boolean);
+        return { content: [{ type: "text", text: lines.join("\n") }] };
+      } catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        return { content: [{ type: "text", text: `Failed to update member: ${message}` }], isError: true };
+      }
+    }
+  );
+  server.tool(
+    "remove_member",
+    "Remove a user from an organization.",
+    {
+      orgId: orgIdArg,
+      userId: external_exports.string().describe("User ID (email address) of the member to remove")
+    },
+    async ({ orgId, userId }) => {
+      try {
+        await client.removeOrgMember(orgId, userId);
+        return { content: [{ type: "text", text: `Member "${userId}" has been removed from the organization.` }] };
+      } catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        return { content: [{ type: "text", text: `Failed to remove member: ${message}` }], isError: true };
+      }
+    }
+  );
+}
+
+// ../../libs/harmonica-services/src/mcp/tools/movement-tools.ts
+function registerMovementTools(server, _ctx, client) {
+  server.tool(
+    "list_movements",
+    'List all Movements for a Teamspace. A Movement is a Teamspace-scoped client-SOW container for an engagement. Recognition cues: "this SOW", "this engagement", "what contracts are active" \u2192 list_movements.',
+    {
+      teamspaceId: external_exports.string().describe("The teamspace ID")
+    },
+    async ({ teamspaceId }) => {
+      const movements = await client.listTeamspaceMovements(teamspaceId);
+      const text = movements.length === 0 ? "No movements found." : movements.map((m) => `[${m.movementId}] ${m.movementCode} \u2014 ${m.title} (${m.status})`).join("\n");
+      return { content: [{ type: "text", text }] };
+    }
+  );
+  server.tool(
+    "get_movement",
+    "Get a Movement by ID. Returns full details including status, approval timestamps, and audit stamps.",
+    {
+      movementId: external_exports.string().describe("The movement ID (e.g., mv-abc123)")
+    },
+    async ({ movementId }) => {
+      const m = await client.getMovement(movementId);
+      if (!m) {
+        return { content: [{ type: "text", text: `Movement not found: ${movementId}` }] };
+      }
+      const lines = [
+        `ID: ${m.movementId}`,
+        `Code: ${m.movementCode}`,
+        `Title: ${m.title}`,
+        `Teamspace: ${m.teamspaceId}`,
+        `Status: ${m.status}`,
+        m.description ? `Description: ${m.description}` : null,
+        m.proposedAt ? `Proposed: ${m.proposedAt}` : null,
+        m.approvedAt ? `Approved: ${m.approvedAt}` : null,
+        m.approvalNoteId ? `Approval Note: ${m.approvalNoteId}` : null,
+        m.createdBy ? `Created By: ${m.createdBy}` : null,
+        `Version: ${m.version}`,
+        `Created: ${m.createdAt}`,
+        `Updated: ${m.updatedAt}`
+      ].filter(Boolean).join("\n");
+      return { content: [{ type: "text", text: lines }] };
+    }
+  );
+  server.tool(
+    "create_movement",
+    'Create a Movement in a Teamspace. A Movement is a Teamspace-scoped client-SOW container for an engagement \u2014 it is NOT a Beat. Recognition cues: "new SOW", "create a contract scope", "start an engagement container" \u2192 create_movement.',
+    {
+      teamspaceId: external_exports.string().describe("The teamspace ID"),
+      title: external_exports.string().min(1).max(300).describe('Movement title (e.g. "Q3 Platform Modernisation SOW")'),
+      description: external_exports.string().max(2e3).optional().describe("Optional description"),
+      accountId: external_exports.string().min(1).max(128).optional().describe("Optional Account this Movement rolls up to. Must belong to the same org as the Teamspace.")
+    },
+    async ({ teamspaceId, title, description, accountId }) => {
+      const m = await client.createMovement({
+        teamspaceId,
+        title,
+        ...description !== void 0 && { description },
+        ...accountId !== void 0 && { accountId }
+      });
+      return {
+        content: [
+          {
+            type: "text",
+            text: `Created Movement: [${m.movementId}] ${m.movementCode} \u2014 ${m.title} (${m.status})`
+          }
+        ]
+      };
+    }
+  );
+  server.tool(
+    "update_movement",
+    "Update mutable content fields on a Movement (title, description). To change status use transition_movement_status instead.",
+    {
+      movementId: external_exports.string().describe("The movement ID"),
+      title: external_exports.string().min(1).max(300).optional().describe("New title"),
+      description: external_exports.string().max(2e3).optional().describe("New description"),
+      accountId: external_exports.string().max(128).nullable().optional().describe("Account this Movement rolls up to. Must belong to the same org. Pass null (or an empty string) to unlink.")
+    },
+    async ({ movementId, title, description, accountId }) => {
+      const hasUpdates = title !== void 0 || description !== void 0 || accountId !== void 0;
+      if (!hasUpdates) {
+        return {
+          content: [{ type: "text", text: `No updates provided for Movement: ${movementId}` }],
+          isError: true
+        };
+      }
+      const resolvedAccountId = accountId === "" ? null : accountId;
+      try {
+        const m = await client.updateMovement(movementId, {
+          ...title !== void 0 && { title },
+          ...description !== void 0 && { description },
+          ...accountId !== void 0 && { accountId: resolvedAccountId }
+        });
+        if (!m) {
+          return {
+            content: [{ type: "text", text: `Movement not found: ${movementId}` }],
+            isError: true
+          };
+        }
+        const account = accountId !== void 0 ? resolvedAccountId === null ? " \u2014 Account: (unlinked)" : ` \u2014 Account: ${resolvedAccountId}` : m.accountId ? ` \u2014 Account: ${m.accountId}` : "";
+        return {
+          content: [
+            {
+              type: "text",
+              text: `Updated Movement: [${m.movementId}] ${m.movementCode} \u2014 ${m.title} (${m.status})${account}`
+            }
+          ]
+        };
+      } catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        return {
+          content: [{ type: "text", text: `Failed to update Movement: ${message}` }],
+          isError: true
+        };
+      }
+    }
+  );
+  server.tool(
+    "transition_movement_status",
+    'Transition a Movement through its commercial lifecycle: draft \u2192 proposed \u2192 approved \u2192 active \u2192 fulfilled. Cancelled is reachable from any non-terminal state and is how a superseded Movement is retired. Advancing to "approved" requires an approvalNoteId. Use confirm=false (default) to preview the transition without writing; confirm=true to execute.',
+    {
+      movementId: external_exports.string().describe("The movement ID"),
+      targetState: external_exports.enum(["proposed", "approved", "active", "fulfilled", "cancelled"]).describe("Target lifecycle state"),
+      approvalNoteId: external_exports.string().optional().describe('Required when transitioning to "approved" \u2014 the Note ID capturing the approval decision'),
+      reason: external_exports.string().optional().describe("Reason for the transition. Strongly recommended for cancellation \u2014 retiring a Movement with no recorded reason leaves no audit trail"),
+      confirm: external_exports.boolean().optional().default(false).describe("false (default) = dry-run preview; true = execute the transition")
+    },
+    async ({ movementId, targetState, approvalNoteId, reason, confirm }) => {
+      if (!confirm) {
+        return {
+          content: [
+            {
+              type: "text",
+              text: `Dry-run: would transition Movement ${movementId} \u2192 ${targetState}${approvalNoteId ? ` (approvalNoteId: ${approvalNoteId})` : ""}${reason ? ` \u2014 ${reason}` : ""}. Call again with confirm=true to execute.`
+            }
+          ]
+        };
+      }
+      try {
+        const m = await client.transitionMovementStatus(movementId, targetState, {
+          ...approvalNoteId !== void 0 && { approvalNoteId },
+          ...reason !== void 0 && { reason }
+        });
+        if (!m) {
+          return {
+            content: [{ type: "text", text: `Movement not found: ${movementId}` }],
+            isError: true
+          };
+        }
+        return {
+          content: [
+            {
+              type: "text",
+              text: `Transitioned Movement: [${m.movementId}] ${m.movementCode} \u2014 ${m.title} \u2192 ${m.status}`
+            }
+          ]
+        };
+      } catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        return {
+          content: [{ type: "text", text: `Failed to transition Movement: ${message}` }],
+          isError: true
+        };
+      }
+    }
+  );
+}
+
+// ../../libs/harmonica-services/src/mcp/tools/next-actions-tools.ts
+var PRIORITY_ICONS = {
+  P0: "\u{1F6A8}",
+  P1: "\u{1F680}",
+  P2: "\u{1F528}",
+  P3: "\u{1F4CB}",
+  P4: "\u{1F4A1}",
+  P5: "\u2728"
+};
+function formatNextActions(actions) {
+  if (actions.length === 0) {
+    return "No actions found. Project is up to date.";
+  }
+  const lines = ["# Next Actions\n"];
+  for (const action of actions) {
+    const icon = PRIORITY_ICONS[action.priority] ?? "\u2022";
+    lines.push(`## ${icon} ${action.priority} \u2014 ${action.category}`);
+    lines.push(`**${action.title}**`);
+    lines.push(action.description);
+    if (action.entityId) {
+      const parts = [`${action.entityType}: ${action.entityId}`];
+      if (action.beatId) parts.push(`Beat: ${action.beatId}`);
+      lines.push(parts.join(" | "));
+    }
+    if (action.count) {
+      lines.push(`Count: ${action.count}`);
+    }
+    lines.push("");
+  }
+  return lines.join("\n");
+}
+function registerNextActionsTools(server, ctx, client) {
+  server.tool(
+    "get_next_actions",
+    "Get prioritized list of recommended next actions for a system. Analyzes Beats, Revisions, and Notes to surface the highest-priority work: P0 (urgent bugs) \u2192 P1 (deploy) \u2192 P2 (build) \u2192 P3 (plan) \u2192 P4 (compose) \u2192 P5 (maintenance).",
+    {
+      systemId: external_exports.string().describe("The system ID"),
+      limit: external_exports.coerce.number().optional().default(10).describe("Max actions to return")
+    },
+    async ({ systemId, limit }) => {
+      try {
+        await assertSystemExists(client, systemId);
+        const actions = await client.getNextActions(systemId, { limit });
+        return { content: [{ type: "text", text: formatNextActions(actions) }] };
+      } catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        return { content: [{ type: "text", text: `Failed to get next actions: ${message}` }], isError: true };
+      }
+    }
+  );
+  server.tool(
+    "list_triage_actions",
+    "List active triage actions from the ledger (open + acted). This is the stateful view of what needs attention \u2014 includes status tracking, task progress, and escalation state. Use this instead of get_next_actions when triage has been run.",
+    {
+      systemId: external_exports.string().describe("The system ID")
+    },
+    async ({ systemId }) => {
+      try {
+        await assertSystemExists(client, systemId);
+        const actions = await client.listTriageActions(systemId);
+        return { content: [{ type: "text", text: formatTriageActions(actions) }] };
+      } catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        return { content: [{ type: "text", text: `Failed to list triage actions: ${message}` }], isError: true };
+      }
+    }
+  );
+  server.tool(
+    "dismiss_triage_action",
+    'Dismiss a triage action (human decides "not now"). The action will not be re-escalated until the underlying state changes.',
+    {
+      systemId: external_exports.string().describe("The system ID"),
+      actionKey: external_exports.string().describe("The action key to dismiss (from list_triage_actions)")
+    },
+    async ({ systemId, actionKey }) => {
+      try {
+        await assertSystemExists(client, systemId);
+        await client.dismissTriageAction(systemId, actionKey, ctx.user?.userId ?? "mcp");
+        return { content: [{ type: "text", text: `Action ${actionKey} dismissed.` }] };
+      } catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        return { content: [{ type: "text", text: `Failed to dismiss action: ${message}` }], isError: true };
+      }
+    }
+  );
+}
+var STATUS_ICONS = {
+  open: "\u2B1A",
+  acted: "\u25D0",
+  dismissed: "\u2715",
+  resolved: "\u2713"
+};
+function formatTriageActions(actions) {
+  if (actions.length === 0) {
+    return "No active triage actions. Run triage to populate the ledger.";
+  }
+  const lines = [`# Triage Actions (${actions.length})
+`];
+  for (const action of actions) {
+    const pIcon = PRIORITY_ICONS[action.priority] ?? "\u2022";
+    const sIcon = STATUS_ICONS[action.status] ?? "?";
+    lines.push(`## ${pIcon} ${action.priority} \u2014 ${action.category} ${sIcon} ${action.status.toUpperCase()}`);
+    lines.push(`**${action.title}**`);
+    lines.push(action.description);
+    const meta = [];
+    if (action.entityId) meta.push(`Entity: ${action.entityId}`);
+    if (action.taskId) meta.push(`Task: ${action.taskId}${action.taskStatus ? ` (${action.taskStatus})` : ""}`);
+    if (action.decision) meta.push(`Decision: ${action.decision}`);
+    if (meta.length > 0) lines.push(meta.join(" | "));
+    lines.push(`Action key: \`${action.actionKey}\` | First seen: ${action.firstSeenAt}`);
+    lines.push("");
+  }
+  return lines.join("\n");
+}
+
 // ../../libs/harmonica-services/src/mcp/tools/note-element-tools.ts
+var import_crypto3 = require("crypto");
 var parentKindSchema = external_exports.enum(["notebook", "note"]);
 function formatEl(e) {
   const binding = e.query ? `**Live collection:** ${e.query.noteType} @ ${e.query.scope} (limit ${e.query.limit}${e.query.sortBy ? `, ${e.query.sortBy}` : ""})` : `**Child Note:** ${e.childNoteId ?? "(none)"}`;
@@ -27955,7 +27911,13 @@ ${text}` }] };
       try {
         await assertSystemExists(client, systemId);
         const note = await client.getNote(noteId);
-        if (!note || (note.systemId ?? note.projectId) !== systemId) {
+        if (!note) {
+          return { content: [{ type: "text", text: `Note not found: "${noteId}"` }], isError: true };
+        }
+        if (!note.systemId) {
+          return { content: [{ type: "text", text: `Note "${noteId}" has no system identifier \u2014 record may need B-247 migration re-check.` }], isError: true };
+        }
+        if (note.systemId !== systemId) {
           return { content: [{ type: "text", text: `Note not found: "${noteId}"` }], isError: true };
         }
         const removeReason = reason ?? "Removed via remove_note";
@@ -27982,7 +27944,13 @@ ${text}` }] };
       try {
         await assertSystemExists(client, systemId);
         const note = await client.getNote(noteId);
-        if (!note || (note.systemId ?? note.projectId) !== systemId) {
+        if (!note) {
+          return { content: [{ type: "text", text: `Document not found: "${noteId}"` }], isError: true };
+        }
+        if (!note.systemId) {
+          return { content: [{ type: "text", text: `Document "${noteId}" has no system identifier \u2014 record may need B-247 migration re-check.` }], isError: true };
+        }
+        if (note.systemId !== systemId) {
           return { content: [{ type: "text", text: `Document not found: "${noteId}"` }], isError: true };
         }
         if (note.noteType !== "document") {
@@ -28045,7 +28013,7 @@ ${trimmed}` : `# ${title}`;
 }
 
 // ../../libs/harmonica-services/src/mcp/tools/notebook-tools.ts
-var SCOPE_TYPE_VALUES = ["org", "teamspace", "system", "account", "project"];
+var SCOPE_TYPE_VALUES = ["org", "teamspace", "system", "account"];
 var scopeRefSchema = external_exports.object({
   scopeType: external_exports.enum(SCOPE_TYPE_VALUES).describe("Scope type \u2014 org, teamspace, system, or account"),
   scopeId: external_exports.string().min(1).describe("ID of the scope entity")
@@ -28271,14 +28239,23 @@ ${formatTree(tree.root)}` }] };
       }
       let scopeSystemId = systemId;
       if (!scopeSystemId) {
+        let bindings;
+        let bindingsFetchFailed = false;
         try {
-          const bindings = await client.getNotebookScopeBindings(notebookId);
-          scopeSystemId = bindings?.find((b) => b.scopeType === "system" || b.scopeType === "project")?.scopeId;
+          bindings = await client.getNotebookScopeBindings(notebookId);
+          scopeSystemId = bindings?.find((b) => b.scopeType === "system")?.scopeId;
         } catch {
+          bindingsFetchFailed = true;
+        }
+        if (!scopeSystemId) {
+          if (!bindingsFetchFailed) {
+            const hasLegacyProjectBinding = bindings?.some((b) => b.scopeType === "project");
+            if (hasLegacyProjectBinding) {
+              return { content: [{ type: "text", text: `Notebook "${notebookId}" has only a legacy 'project' scope binding \u2014 record may need B-247 migration re-check.` }], isError: true };
+            }
+          }
+          return { content: [{ type: "text", text: "No system scope: pass systemId or bind the notebook to a system first." }], isError: true };
         }
-      }
-      if (!scopeSystemId) {
-        return { content: [{ type: "text", text: "No system scope: pass systemId or bind the notebook to a system first." }], isError: true };
       }
       let tree;
       try {
@@ -28892,8 +28869,7 @@ Error: ${msg}`);
           const createdTracks = [];
           for (const trackInput of tracksToCreate) {
             try {
-              const track = await client.createDeliverableGroup({
-                orgId,
+              const track = await client.createTrack({
                 teamspaceId: teamspace.teamspaceId,
                 movementId: createdMovementId,
                 title: trackInput.title,
@@ -28901,7 +28877,7 @@ Error: ${msg}`);
                 vuRate: 0,
                 createdBy: ctx.user?.userId
               });
-              createdTracks.push({ id: track.deliverableGroupId, title: track.title });
+              createdTracks.push({ id: track.trackId, title: track.title });
             } catch (err) {
               const msg = err instanceof Error ? err.message : String(err);
               lines.unshift(`\u26A0\uFE0F  Onboarding batch partially created \u2014 stopped at: track:${trackInput.title}
@@ -28997,7 +28973,7 @@ ${d.rationale}${d.suggestions?.length ? `
 function registerOrganizationTools(server, ctx, client) {
   server.tool(
     "get_organization",
-    "Get details for an organization by ID \u2014 returns name, slug, status, industry, and description",
+    "Get details for an organization by ID \u2014 returns name, slug, status, industry, description, and coda",
     {
       orgId: external_exports.string().describe("The organization ID")
     },
@@ -29012,7 +28988,9 @@ function registerOrganizationTools(server, ctx, client) {
         `**Slug:** ${org.slug}`,
         `**Status:** ${org.status}`,
         org.industry ? `**Industry:** ${org.industry}` : "",
-        org.description ? `**Description:** ${org.description}` : ""
+        org.description ? `**Description:** ${org.description}` : "",
+        org.coda ? `**Coda:**
+${org.coda}` : ""
       ].filter(Boolean);
       return { content: [{ type: "text", text: lines.join("\n") }] };
     }
@@ -29651,9 +29629,9 @@ function registerRevisionLifecycleTools(server, ctx, client) {
         if (!beat) {
           return { content: [{ type: "text", text: `Beat not found: "${beatId}"` }], isError: true };
         }
-        const beatSystemId = beat.systemId ?? beat.projectId;
+        const beatSystemId = beat.systemId;
         if (!beatSystemId) {
-          return { content: [{ type: "text", text: `Beat "${beatId}" has no system identifier \u2014 record may be corrupt.` }], isError: true };
+          return { content: [{ type: "text", text: `Beat "${beatId}" has no system identifier \u2014 record may need B-247 migration re-check.` }], isError: true };
         }
         let parentBv;
         if (beatVersionId !== void 0) {
@@ -29661,9 +29639,9 @@ function registerRevisionLifecycleTools(server, ctx, client) {
           if (!parentBv) {
             return { content: [{ type: "text", text: `Beat Version not found: "${beatVersionId}"` }], isError: true };
           }
-          const bvSystemId = parentBv.systemId ?? parentBv.projectId;
+          const bvSystemId = parentBv.systemId;
           if (!bvSystemId) {
-            return { content: [{ type: "text", text: `Beat Version "${beatVersionId}" has no system identifier \u2014 record may be corrupt.` }], isError: true };
+            return { content: [{ type: "text", text: `Beat Version "${beatVersionId}" has no system identifier \u2014 record may need B-247 migration re-check.` }], isError: true };
           }
           if (parentBv.beatId !== beat.beatId || bvSystemId !== beatSystemId) {
             return { content: [{ type: "text", text: `Beat Version "${beatVersionId}" belongs to a different Beat.` }], isError: true };
@@ -29772,13 +29750,13 @@ function registerRevisionLifecycleTools(server, ctx, client) {
           if (!bv) {
             return { content: [{ type: "text", text: `Beat Version not found: "${beatVersionId}"` }], isError: true };
           }
-          const bvSystemId = bv.systemId ?? bv.projectId;
+          const bvSystemId = bv.systemId;
           if (!bvSystemId) {
-            return { content: [{ type: "text", text: `Beat Version "${beatVersionId}" has no system identifier \u2014 record may be corrupt.` }], isError: true };
+            return { content: [{ type: "text", text: `Beat Version "${beatVersionId}" has no system identifier \u2014 record may need B-247 migration re-check.` }], isError: true };
           }
-          const revSystemId = revision.systemId ?? revision.projectId;
+          const revSystemId = revision.systemId;
           if (!revSystemId) {
-            return { content: [{ type: "text", text: `Revision "${revisionId}" has no system identifier \u2014 record may be corrupt.` }], isError: true };
+            return { content: [{ type: "text", text: `Revision "${revisionId}" has no system identifier \u2014 record may need B-247 migration re-check.` }], isError: true };
           }
           if (bv.beatId !== revision.beatId || bvSystemId !== revSystemId) {
             return { content: [{ type: "text", text: `Beat Version "${beatVersionId}" belongs to a different Beat.` }], isError: true };
@@ -30667,17 +30645,13 @@ function normalizeSnapshot(raw) {
     accountDropIndex: raw.accountDropIndex ?? [],
     deliverables: raw.deliverables ?? [],
     teamspaceDeliverableIndex: raw.teamspaceDeliverableIndex ?? [],
-    // Compat: v3 and earlier snapshots have 'projectDeliverableIndex'
-    systemDeliverableIndex: raw.systemDeliverableIndex ?? anyRaw["projectDeliverableIndex"] ?? [],
+    systemDeliverableIndex: raw.systemDeliverableIndex ?? [],
     teamspaces: raw.teamspaces ?? [],
     teamspaceAccountIndex: raw.teamspaceAccountIndex ?? [],
     accountTeamspaceIndex: raw.accountTeamspaceIndex ?? [],
     layers: raw.layers ?? [],
     layerIndex: raw.layerIndex ?? [],
     tracks: raw.tracks ?? [],
-    // Compat: early v4 snapshots (before field rename) have 'trackProjectIndex'
-    trackSystemIndex: raw.trackSystemIndex ?? anyRaw["trackProjectIndex"] ?? [],
-    trackTeamspaceIndex: raw.trackTeamspaceIndex ?? [],
     workItems: raw.workItems ?? [],
     workItemIndex: raw.workItemIndex ?? [],
     accounts: raw.accounts ?? []
@@ -30769,10 +30743,7 @@ function assertSnapshotShape(val, sourceHint) {
 
 // ../../libs/harmonica-services/src/mcp/tools/subscription-tools.ts
 var ENTITY_TYPES = ["system", "beat", "revision"];
-var entityTypeField = external_exports.preprocess(
-  (v) => v === "project" ? "system" : v,
-  external_exports.enum(ENTITY_TYPES)
-);
+var entityTypeField = external_exports.enum(ENTITY_TYPES);
 function registerSubscriptionTools(server, ctx, client) {
   server.tool(
     "subscribe_to_entity",
@@ -31264,6 +31235,222 @@ function registerTeamspaceTools(server, ctx, client) {
   );
 }
 
+// ../../libs/harmonica-services/src/mcp/tools/track-tools.ts
+function registerTrackTools(server, ctx, client) {
+  server.tool(
+    "list_movement_tracks",
+    `List the Tracks scoped to a Movement (client SOW). Returns the commitments grouped under that engagement. Recognition cues: "what's in this SOW", "this engagement's tracks" \u2192 list_movement_tracks.`,
+    {
+      movementId: external_exports.string().describe("The Movement ID (e.g., mv-abc123)")
+    },
+    async ({ movementId }) => {
+      await assertMovementExists(client, movementId);
+      const tracks = await client.listMovementTracks(movementId);
+      const text = tracks.length === 0 ? "No tracks found for this Movement." : tracks.map(
+        (t) => `[${t.trackId}] ${t.trackCode} \u2014 ${t.title} (${t.status})`
+      ).join("\n");
+      return { content: [{ type: "text", text }] };
+    }
+  );
+  server.tool(
+    "get_track",
+    "Get a Track by ID. Returns full details including commercial lifecycle status, VU rate, and audit stamps.",
+    {
+      trackId: external_exports.string().describe("The Track ID")
+    },
+    async ({ trackId }) => {
+      const t = await client.getTrack(trackId);
+      if (!t) {
+        return {
+          content: [{ type: "text", text: `Track not found: ${trackId}` }]
+        };
+      }
+      const lines = [
+        `ID: ${t.trackId}`,
+        `Code: ${t.trackCode}`,
+        `Title: ${t.title}`,
+        `Teamspace: ${t.teamspaceId}`,
+        t.movementId ? `Movement: ${t.movementId}` : null,
+        `Status: ${t.status}`,
+        `VU Rate: ${t.vuRate}`,
+        t.description ? `Description: ${t.description}` : null,
+        t.deliverables ? `Deliverables:
+${t.deliverables}` : null,
+        t.acceptanceCriteria ? `Acceptance Criteria:
+${t.acceptanceCriteria}` : null,
+        t.parentGroupId ? `Parent Track: ${t.parentGroupId}` : null,
+        t.proposedAt ? `Proposed: ${t.proposedAt}` : null,
+        t.approvedAt ? `Approved: ${t.approvedAt}` : null,
+        `Version: ${t.version}`,
+        `Created: ${t.createdAt}`,
+        `Updated: ${t.updatedAt}`
+      ].filter(Boolean).join("\n");
+      return { content: [{ type: "text", text: lines }] };
+    }
+  );
+  const createTrackSchema = {
+    teamspaceId: external_exports.string().describe("The teamspace ID"),
+    title: external_exports.string().min(1).max(300).describe('Track title (e.g. "SOW-2026-Q2 / Platform Modernisation")'),
+    description: external_exports.string().max(2e3).optional().describe("Optional description"),
+    deliverables: external_exports.string().max(2e4).optional().describe("The Track's deliverables as Markdown bullet points (parallel to acceptanceCriteria)"),
+    acceptanceCriteria: external_exports.string().max(2e4).optional().describe("The Track's acceptance criteria (Markdown), parallel to its deliverables"),
+    vuRate: external_exports.number().nonnegative().describe("Value-Unit rate (billing rate for this engagement)"),
+    movementId: external_exports.string().describe("The Movement (client SOW) this Track belongs to. Required: a Track is created on its Movement, which supplies the Teamspace (rev-1880d2f0)."),
+    parentGroupId: external_exports.string().optional().describe("Optional parent Track ID for nested grouping (Phase 0 scaffolding)")
+  };
+  const createTrackHandler = async ({ teamspaceId, title, description, deliverables, acceptanceCriteria, vuRate, movementId, parentGroupId }) => {
+    if (movementId !== void 0) {
+      await assertMovementExists(client, movementId);
+    }
+    const t = await client.createTrack({
+      teamspaceId,
+      title,
+      ...description !== void 0 && { description },
+      ...deliverables !== void 0 && { deliverables },
+      ...acceptanceCriteria !== void 0 && { acceptanceCriteria },
+      vuRate,
+      ...movementId !== void 0 && { movementId },
+      ...parentGroupId !== void 0 && { parentGroupId },
+      createdBy: ctx.user.userId
+    });
+    return {
+      content: [
+        {
+          type: "text",
+          text: `Created Track: [${t.trackId}] ${t.trackCode} \u2014 ${t.title} (${t.status})`
+        }
+      ]
+    };
+  };
+  server.tool(
+    "create_track",
+    'Create a Track under a Movement. Use for scoped initiatives \u2014 client SOWs, internal phases, engagement containers \u2014 that collect Deliverables and Drops. Do NOT use for software capabilities the product provides to end users (those are Beats). Recognition cues: "this engagement", "this SOW", "this phase of work", "the client project", "this track" \u2192 Track.',
+    createTrackSchema,
+    createTrackHandler
+  );
+  server.tool(
+    "update_track",
+    "Update mutable content fields on a Track (title, description, deliverables, acceptanceCriteria, vuRate). To change commercial status use transition_track instead.",
+    {
+      trackId: external_exports.string().describe("The Track ID"),
+      title: external_exports.string().min(1).max(300).optional().describe("New title"),
+      description: external_exports.string().max(2e3).optional().describe("New description"),
+      deliverables: external_exports.string().max(2e4).optional().describe(`Replace the Track's deliverables Markdown ("" clears)`),
+      acceptanceCriteria: external_exports.string().max(2e4).optional().describe(`Replace the Track's acceptance-criteria Markdown ("" clears)`),
+      vuRate: external_exports.number().nonnegative().optional().describe("New VU rate")
+    },
+    async ({ trackId, title, description, deliverables, acceptanceCriteria, vuRate }) => {
+      const t = await client.updateTrack(trackId, {
+        ...title !== void 0 && { title },
+        ...description !== void 0 && { description },
+        ...deliverables !== void 0 && { deliverables },
+        ...acceptanceCriteria !== void 0 && { acceptanceCriteria },
+        ...vuRate !== void 0 && { vuRate }
+      });
+      if (!t) {
+        return {
+          content: [{ type: "text", text: `Track not found: ${trackId}` }]
+        };
+      }
+      return {
+        content: [
+          {
+            type: "text",
+            text: `Updated Track: [${t.trackId}] ${t.trackCode} \u2014 ${t.title} (${t.status})`
+          }
+        ]
+      };
+    }
+  );
+  server.tool(
+    "transition_track",
+    'Transition a Track through its commercial lifecycle: draft \u2192 proposed \u2192 approved \u2192 active \u2192 fulfilled. Cancelled is reachable from any non-terminal state. Advancing to "approved" requires an approvalNoteId. Use confirm=false (default) to preview the transition without writing; confirm=true to execute.',
+    {
+      trackId: external_exports.string().describe("The Track ID"),
+      targetState: external_exports.enum(["proposed", "approved", "active", "fulfilled", "cancelled"]).describe("Target lifecycle state"),
+      approvalNoteId: external_exports.string().optional().describe('Required when transitioning to "approved" \u2014 the Note ID capturing the approval decision'),
+      reason: external_exports.string().optional().describe("Reason for the transition (especially useful for cancellation)"),
+      confirm: external_exports.boolean().optional().default(false).describe("false (default) = dry-run preview; true = execute the transition")
+    },
+    async ({ trackId, targetState, approvalNoteId, reason, confirm }) => {
+      if (!confirm) {
+        return {
+          content: [
+            {
+              type: "text",
+              text: `Dry-run: would transition Track ${trackId} \u2192 ${targetState}${approvalNoteId ? ` (approvalNoteId: ${approvalNoteId})` : ""}${reason ? ` \u2014 ${reason}` : ""}. Call again with confirm=true to execute.`
+            }
+          ]
+        };
+      }
+      const t = await client.transitionTrackStatus(
+        trackId,
+        targetState,
+        {
+          ...approvalNoteId !== void 0 && { approvalNoteId },
+          ...reason !== void 0 && { reason }
+        }
+      );
+      if (!t) {
+        return {
+          content: [{ type: "text", text: `Track not found: ${trackId}` }]
+        };
+      }
+      return {
+        content: [
+          {
+            type: "text",
+            text: `Transitioned Track [${t.trackId}] ${t.trackCode} \u2192 ${t.status}`
+          }
+        ]
+      };
+    }
+  );
+  server.tool(
+    "assign_drop_to_track",
+    `Link a Drop to a Track so it appears on the parent Movement's timed-release axis (the Drops shown on the Movement overview). A Drop belongs to at most one group; linking moves it if it was in another group. Use to answer "put this release under this SOW/phase" or "add a Drop to this Movement".`,
+    {
+      trackId: external_exports.string().describe("The Track ID"),
+      dropId: external_exports.string().describe("The Drop ID to link to the group")
+    },
+    async ({ trackId, dropId }) => {
+      await fetchTrack(client, trackId);
+      const drop = await client.getDrop(dropId);
+      if (!drop) {
+        return { content: [{ type: "text", text: `Drop not found: ${dropId}` }] };
+      }
+      await assertAccountExists(client, drop.accountId);
+      const ok = await client.setDropTrack(trackId, dropId);
+      if (!ok) {
+        return { content: [{ type: "text", text: `Drop not found: ${dropId}` }] };
+      }
+      return {
+        content: [{ type: "text", text: `Linked Drop ${dropId} to Track ${trackId}.` }]
+      };
+    }
+  );
+  server.tool(
+    "list_track_beat_versions",
+    'List the Beat Versions linked to a Track via its work items (Work Plan). Use to answer "what feature increments are scoped under this SOW/phase?"',
+    {
+      trackId: external_exports.string().describe("The Track ID")
+    },
+    async ({ trackId }) => {
+      await fetchTrack(client, trackId);
+      const workItems = await client.listTrackWorkItems(trackId);
+      const bvIds = [...new Set(
+        workItems.map((wi) => wi.beatVersionId).filter((id) => id !== void 0)
+      )];
+      if (bvIds.length === 0) {
+        return { content: [{ type: "text", text: "No beat versions linked via work items in this track." }] };
+      }
+      const hydrated = await Promise.all(bvIds.map((id) => client.getBeatVersion(id)));
+      const text = hydrated.filter((bv) => bv !== void 0).map((bv) => `[${bv.beatVersionId}] v${bv.versionNumber} \u2014 ${bv.title} (${bv.status})`).join("\n");
+      return { content: [{ type: "text", text }] };
+    }
+  );
+}
+
 // ../../libs/harmonica-services/src/mcp/tools/value-velocity-tools.ts
 var lensSchema = external_exports.enum(["velocity", "roi", "valuePrimary"]).default("velocity");
 function resolveActorId(ctx) {
@@ -31642,6 +31829,7 @@ function registerWorkItemTools(server, _ctx, client) {
         wi.costPerValueUnit !== void 0 ? `Cost per Value Unit: ${wi.costPerValueUnit}` : null,
         wi.beatVersionId ? `Linked Beat Version: ${wi.beatVersionId}` : null,
         wi.workOrderId ? `Work Order: ${wi.workOrderId}` : "Work Order: none (unattached)",
+        wi.barId ? `Bar: ${wi.barId}` : "Bar: none (unplanned)",
         estimateHint ? `Estimate Hint: ${estimateHint.hours}h (source: ${estimateHint.source})` : null,
         wi.createdBy ? `Created By: ${wi.createdBy}` : null,
         `Created: ${wi.createdAt}`,
@@ -31652,7 +31840,7 @@ function registerWorkItemTools(server, _ctx, client) {
   );
   server.tool(
     "create_work_item",
-    'Create a work item under a Track (DeliverableGroup). A work item is an owned, statused unit of operational work \u2014 it is NOT a Beat. Starts in "not_started" status. Optionally link it to a Beat Version for capability lineage (v2, N-4E09-6574) \u2014 the link is one-directional and never required. Optionally link it to a Work Order it delivers part of; leaving it unattached is a supported state, not a gap to fill (N-4E09-7160).',
+    'Create a work item under a Track (DeliverableGroup). A work item is an owned, statused unit of operational work \u2014 it is NOT a Beat. Starts in "not_started" status. Optionally link it to a Beat Version for capability lineage (v2, N-4E09-6574) \u2014 the link is one-directional and never required. Optionally link it to a Work Order it delivers part of; leaving it unattached is a supported state, not a gap to fill (N-4E09-7160). Optionally link it to a Bar it is planned into; leaving it unplanned is likewise a real state, not a gap (B-298).',
     {
       trackId: external_exports.string().describe("The Track (DeliverableGroup) ID this work item belongs to"),
       title: external_exports.string().min(1).max(300).describe("Work item title"),
@@ -31664,9 +31852,10 @@ function registerWorkItemTools(server, _ctx, client) {
       costPerValueUnit: external_exports.number().nonnegative().optional().describe("Optional price per Value Unit"),
       createdBy: external_exports.string().optional().describe("Optional creator identity for audit"),
       beatVersionId: external_exports.string().min(1).optional().describe("Optional Beat Version to link for capability lineage. Must exist."),
-      workOrderId: external_exports.string().min(1).max(128).optional().describe("Optional Work Order this item delivers part of. Must exist. Omit when there is no Order \u2014 unattached work is legitimate, so do not invent one.")
+      workOrderId: external_exports.string().min(1).max(128).optional().describe("Optional Work Order this item delivers part of. Must exist. Omit when there is no Order \u2014 unattached work is legitimate, so do not invent one."),
+      barId: external_exports.string().min(1).max(128).optional().describe("Optional Bar this item is planned into. Must exist, in this org. Omit when the work is not planned into a Bar yet \u2014 unplanned work is a real state, so do not reach for the current Bar to fill the field.")
     },
-    async ({ trackId, title, ownerName, ownerEmail, committedEstimateHours, effortSize, valueUnits, costPerValueUnit, createdBy, beatVersionId, workOrderId }) => {
+    async ({ trackId, title, ownerName, ownerEmail, committedEstimateHours, effortSize, valueUnits, costPerValueUnit, createdBy, beatVersionId, workOrderId, barId }) => {
       if (ownerName === void 0 !== (ownerEmail === void 0)) {
         return {
           content: [{ type: "text", text: "Setting the owner requires both ownerName and ownerEmail. Omit both to create an unowned work item." }],
@@ -31683,7 +31872,8 @@ function registerWorkItemTools(server, _ctx, client) {
         ...costPerValueUnit !== void 0 && { costPerValueUnit },
         ...createdBy !== void 0 && { createdBy },
         ...beatVersionId !== void 0 && { beatVersionId },
-        ...workOrderId !== void 0 && { workOrderId }
+        ...workOrderId !== void 0 && { workOrderId },
+        ...barId !== void 0 && { barId }
       });
       return {
         content: [
@@ -31697,7 +31887,7 @@ function registerWorkItemTools(server, _ctx, client) {
   );
   server.tool(
     "update_work_item",
-    "Update mutable content fields on a work item (title, owner, committedEstimateHours, actualHours, effortSize, valueUnits, costPerValueUnit, beatVersionId, workOrderId). To move it between Tracks use move_work_item; to change its status use transition_work_item_status.",
+    "Update mutable content fields on a work item (title, owner, committedEstimateHours, actualHours, effortSize, valueUnits, costPerValueUnit, beatVersionId, workOrderId, barId). To move it between Tracks use move_work_item; to change its status use transition_work_item_status.",
     {
       workItemId: external_exports.string().describe("The work item ID"),
       title: external_exports.string().min(1).max(300).optional().describe("New title"),
@@ -31710,9 +31900,10 @@ function registerWorkItemTools(server, _ctx, client) {
       valueUnits: external_exports.number().nonnegative().nullable().optional().describe("Value Units (commercial lens). Pass null to clear; omit to leave untouched."),
       costPerValueUnit: external_exports.number().nonnegative().nullable().optional().describe("Price per Value Unit. Pass null to clear; omit to leave untouched."),
       beatVersionId: external_exports.string().min(1).nullable().optional().describe("Link to a Beat Version for capability lineage. Pass null to unlink; omit to leave the current link untouched."),
-      workOrderId: external_exports.string().min(1).max(128).nullable().optional().describe("Link to the Work Order this item delivers part of. Pass null to unlink, leaving the item unattached; omit to leave the current link untouched.")
+      workOrderId: external_exports.string().min(1).max(128).nullable().optional().describe("Link to the Work Order this item delivers part of. Pass null to unlink, leaving the item unattached; omit to leave the current link untouched."),
+      barId: external_exports.string().min(1).max(128).nullable().optional().describe("Link to the Bar this item is planned into. Pass null to unlink, leaving the item unplanned; omit to leave the current link untouched.")
     },
-    async ({ workItemId, title, ownerName, ownerEmail, unassignOwner, committedEstimateHours, actualHours, effortSize, valueUnits, costPerValueUnit, beatVersionId, workOrderId }) => {
+    async ({ workItemId, title, ownerName, ownerEmail, unassignOwner, committedEstimateHours, actualHours, effortSize, valueUnits, costPerValueUnit, beatVersionId, workOrderId, barId }) => {
       const hasOwnerUpdate = ownerName !== void 0 || ownerEmail !== void 0;
       if (hasOwnerUpdate && (ownerName === void 0 || ownerEmail === void 0)) {
         return {
@@ -31728,7 +31919,7 @@ function registerWorkItemTools(server, _ctx, client) {
       }
       const hasUpdates = title !== void 0 || hasOwnerUpdate || unassignOwner === true || committedEstimateHours !== void 0 || actualHours !== void 0 || effortSize !== void 0 || valueUnits !== void 0 || costPerValueUnit !== void 0 || beatVersionId !== void 0 || // `!== undefined`, never truthiness: an unlink arrives as `null`, and
       // a truthy check here would report "no updates provided" and drop it.
-      workOrderId !== void 0;
+      workOrderId !== void 0 || barId !== void 0;
       if (!hasUpdates) {
         return {
           content: [{ type: "text", text: `No updates provided for work item: ${workItemId}` }],
@@ -31745,7 +31936,8 @@ function registerWorkItemTools(server, _ctx, client) {
         ...valueUnits !== void 0 && { valueUnits },
         ...costPerValueUnit !== void 0 && { costPerValueUnit },
         ...beatVersionId !== void 0 && { beatVersionId },
-        ...workOrderId !== void 0 && { workOrderId }
+        ...workOrderId !== void 0 && { workOrderId },
+        ...barId !== void 0 && { barId }
       });
       if (!wi) {
         return {
@@ -31834,19 +32026,33 @@ function oneLine(value) {
 }
 function formatOrderLine(o) {
   const reason = o.needsDecisionReason ? ` [${o.needsDecisionReason}]` : "";
-  return `[${o.workOrderId}] ${oneLine(o.title)} \u2014 ${o.status}${reason}, ${o.size ?? "unsized"}, on ${o.trackId}`;
+  const track = o.trackId ? `on ${o.trackId}` : "unplaced";
+  return `[${o.workOrderId}] ${oneLine(o.title)} \u2014 ${o.status}${reason}, ${o.size ?? "unsized"}, ${track}`;
 }
 function registerWorkOrderTools(server, _ctx, client) {
   server.tool(
     "list_track_work_orders",
-    'List the Work Orders placed on a Track (DeliverableGroup). A Work Order is the internal unit of agreed work. Recognition cues: "what is committed on this track", "list the orders" \u2192 list_track_work_orders.',
+    "DEPRECATED \u2014 use list_movement_work_orders instead. A Work Order now belongs to its Request and Movement, not its Track. This alias returns a migration message for one minor release rather than failing outright.",
+    // Optional on purpose: a caller that has already dropped the argument is
+    // exactly the caller this alias exists to greet. Requiring it would answer
+    // the migrated caller with a schema error instead of the migration message.
     {
-      trackId: external_exports.string().describe("The Track (DeliverableGroup) ID")
+      trackId: external_exports.string().optional().describe("Ignored \u2014 the Track (DeliverableGroup) ID is no longer meaningful for Order scoping")
     },
-    async ({ trackId }) => {
-      const orders = await client.listTrackWorkOrders(trackId);
-      const text = orders.length === 0 ? "No work orders found." : orders.map(formatOrderLine).join("\n");
-      return { content: [{ type: "text", text }] };
+    async () => {
+      return {
+        content: [
+          {
+            type: "text",
+            text: "list_track_work_orders is deprecated. Use list_movement_work_orders(movementId) to fetch all Orders for an engagement \u2014 Orders are now scoped to their Movement, not their Track. If you have only a Track id, its Movement is on the Track itself: get_deliverable_group(trackId) returns movementId."
+          }
+        ],
+        // The caller asked for a list and is getting none. A result without
+        // this flag reads as a successful empty listing to any client that
+        // checks the field rather than the prose — the same reason every other
+        // "your call did nothing" return in this file sets it.
+        isError: true
+      };
     }
   );
   server.tool(
@@ -31890,18 +32096,16 @@ function registerWorkOrderTools(server, _ctx, client) {
   );
   server.tool(
     "create_work_order",
-    'Split a Work Request into an agreed Work Order on a Track. Called once per piece: a request covering two separate lines of work becomes two orders. Starts in "requested" status \u2014 moving it past the coherence gate is transition_work_order_status. The Track must belong to the same teamspace and Account as the Request; the service refuses a placement that crosses either boundary.',
+    `Split a Work Request into an agreed Work Order. Called once per piece: a request covering two separate lines of work becomes two orders. Starts in "requested" status \u2014 moving it past the coherence gate is transition_work_order_status. The Order's scope is derived from the Work Request's Movement; no Track is required.`,
     {
-      trackId: external_exports.string().describe("The Track (DeliverableGroup) this order is placed on"),
       workRequestId: external_exports.string().min(1).describe("The Work Request this order was split from \u2014 immutable lineage"),
       title: external_exports.string().min(1).max(300).describe("Work order title"),
       description: external_exports.string().max(1e4).optional().describe("Optional detail beyond the title"),
       size: external_exports.enum(WORK_ORDER_SIZE_ENUM).optional().describe("Optional t-shirt size. An order can arrive before it is sized; a request's composition counts unsized orders rather than hiding them."),
       createdBy: external_exports.string().optional().describe("Optional creator identity for audit")
     },
-    async ({ trackId, workRequestId, title, description, size, createdBy }) => {
+    async ({ workRequestId, title, description, size, createdBy }) => {
       const wo = await client.createWorkOrder({
-        trackId,
         workRequestId,
         title,
         ...description !== void 0 && { description },
@@ -31913,9 +32117,21 @@ function registerWorkOrderTools(server, _ctx, client) {
       };
     }
   );
+  server.tool(
+    "list_movement_work_orders",
+    'List the Work Orders belonging to a Movement (engagement). A Work Order is the internal unit of agreed work \u2014 it is split from a Work Request and scoped to the Movement that owns the Request. Recognition cues: "what is committed on this engagement", "list the orders" \u2192 list_movement_work_orders.',
+    {
+      movementId: external_exports.string().describe("The Movement (engagement) ID")
+    },
+    async ({ movementId }) => {
+      const orders = await client.listMovementWorkOrders(movementId);
+      const text = orders.length === 0 ? "No work orders found." : orders.map(formatOrderLine).join("\n");
+      return { content: [{ type: "text", text }] };
+    }
+  );
   server.tool(
     "update_work_order",
-    "Update content fields on a Work Order (title, description, size). To move it between Tracks use move_work_order; to change its status use transition_work_order_status. The Work Request it came from cannot be changed \u2014 that lineage is immutable.",
+    "Update content fields on a Work Order (title, description, size). To change its status use transition_work_order_status. There is no moving an Order between Tracks \u2014 an Order belongs to its Work Request, and a Track is attribution carried by the Work Items (set workOrderId on them via update_work_item). The Work Request it came from cannot be changed \u2014 that lineage is immutable.",
     {
       workOrderId: external_exports.string().describe("The Work Order ID"),
       title: external_exports.string().min(1).max(300).optional().describe("New title"),
@@ -31944,18 +32160,26 @@ function registerWorkOrderTools(server, _ctx, client) {
   );
   server.tool(
     "move_work_order",
-    "Move a Work Order to a different Track \u2014 the reversal path for a bad early split guess. The destination must belong to the same teamspace and Account as the order's Work Request; the service refuses a placement that crosses either boundary.",
+    "DEPRECATED \u2014 this tool still responds but no longer moves anything. Work Orders no longer live on a Track; a Track is now attribution on the Work Item. To associate work with a Track, set workOrderId on the relevant Work Items via update_work_item instead.",
+    // Both optional for the same reason as list_track_work_orders: the tool's
+    // only job now is to deliver the migration message, so it must not refuse
+    // the callers who have already stopped sending these.
     {
-      workOrderId: external_exports.string().describe("The Work Order ID"),
-      newTrackId: external_exports.string().describe("The destination Track (DeliverableGroup) ID")
+      workOrderId: external_exports.string().optional().describe("Ignored \u2014 a Work Order is no longer moveable between Tracks"),
+      newTrackId: external_exports.string().optional().describe("Ignored \u2014 a Track (DeliverableGroup) is no longer a valid parent for Orders")
     },
-    async ({ workOrderId, newTrackId }) => {
-      const wo = await client.moveWorkOrder(workOrderId, newTrackId);
-      if (!wo) {
-        return { content: [{ type: "text", text: `Work order not found: ${workOrderId}` }] };
-      }
+    async () => {
       return {
-        content: [{ type: "text", text: `Moved work order to Track ${wo.trackId}: ${formatOrderLine(wo)}` }]
+        content: [
+          {
+            type: "text",
+            text: "move_work_order is deprecated and has no effect. Work Orders are no longer scoped to a Track. To assign work to a Track, set workOrderId on the relevant Work Items via update_work_item."
+          }
+        ],
+        // "Has no effect" must be machine-readable, not only prose: without
+        // this, a client that moved an Order and checked the result field
+        // records the move as done.
+        isError: true
       };
     }
   );
@@ -32640,7 +32864,7 @@ function registerAllTools(server, ctx, client, profile) {
   registerSubscriptionTools(server, ctx, client);
   registerBaselineTools(server, ctx, client);
   registerTeamspaceTools(server, ctx, client);
-  registerDeliverableGroupTools(server, ctx, client);
+  registerTrackTools(server, ctx, client);
   registerDropTools(server, ctx, client);
   registerSessionTools(server, ctx, client);
   registerOnboardingTools(server, ctx, client);
@@ -32648,6 +32872,7 @@ function registerAllTools(server, ctx, client, profile) {
   registerNotebookTools(server, ctx, client);
   registerAccountTools(server, ctx, client);
   registerMovementTools(server, ctx, client);
+  registerExternalMappingTools(server, ctx, client);
   registerWorkItemTools(server, ctx, client);
   registerWorkRequestTools(server, ctx, client);
   registerWorkOrderTools(server, ctx, client);
@@ -32762,6 +32987,13 @@ var ApiError = class extends Error {
     this.name = "ApiError";
   }
 };
+var ExternalMappingSubjectNotFoundError = class extends Error {
+  code = EXTERNAL_MAPPING_SUBJECT_NOT_FOUND_CODE;
+  constructor(subjectType, subjectId) {
+    super(`Subject ${subjectType} ${subjectId} not found`);
+    this.name = "ExternalMappingSubjectNotFoundError";
+  }
+};
 function bodyCode(body) {
   try {
     const parsed = JSON.parse(body);
@@ -34244,60 +34476,46 @@ function createHttpClient(config2) {
     updateTeamspace: async (teamspaceId, updates) => {
       return request("PATCH", `/api/teamspaces/${encodeURIComponent(teamspaceId)}`, updates);
     },
-    // DeliverableGroups
-    listTeamspaceDeliverableGroups: async (teamspaceId) => {
-      const res = await request("GET", `/api/teamspaces/${encodeURIComponent(teamspaceId)}/deliverable-groups`);
-      if (res === void 0) throw new Error(`Teamspace ${teamspaceId} not found`);
-      return res.deliverableGroups;
-    },
-    listSystemDeliverableGroups: async (systemId) => {
-      const res = await request("GET", `/api/systems/${encodeURIComponent(systemId)}/deliverable-groups`);
-      if (res === void 0) throw new Error(`System ${systemId} not found`);
-      return res.deliverableGroups;
-    },
-    listMovementDeliverableGroups: async (movementId) => {
-      const res = await request("GET", `/api/movements/${encodeURIComponent(movementId)}/deliverable-groups`);
+    // Tracks
+    listMovementTracks: async (movementId) => {
+      const res = await request("GET", `/api/movements/${encodeURIComponent(movementId)}/tracks`);
       if (res === void 0) throw new Error(`Movement ${movementId} not found`);
-      return res.deliverableGroups;
+      return res.tracks;
     },
-    getDeliverableGroup: async (deliverableGroupId) => {
-      return request("GET", `/api/deliverable-groups/${encodeURIComponent(deliverableGroupId)}`);
+    getTrack: async (trackId) => {
+      return request("GET", `/api/tracks/${encodeURIComponent(trackId)}`);
     },
-    createDeliverableGroup: async (input) => {
-      const { title, description, deliverables, acceptanceCriteria, vuRate, movementId, parentGroupId, createdBy } = input;
+    createTrack: async (input) => {
+      const { title, description, deliverables, acceptanceCriteria, vuRate, movementId, parentGroupId, createdBy, teamspaceId } = input;
       const body = {
         title,
         ...description !== void 0 && { description },
         ...deliverables !== void 0 && { deliverables },
         ...acceptanceCriteria !== void 0 && { acceptanceCriteria },
         vuRate,
-        // movementId rides in the body (not the route) so it composes with the
-        // project route when a group is both project- and movement-scoped.
         ...movementId !== void 0 && { movementId },
         ...parentGroupId !== void 0 && { parentGroupId },
         ...createdBy !== void 0 && { createdBy }
       };
-      const effectiveSystemId = input.systemId;
-      const url2 = effectiveSystemId ? `/api/systems/${encodeURIComponent(effectiveSystemId)}/deliverable-groups` : `/api/teamspaces/${encodeURIComponent(input.teamspaceId)}/deliverable-groups`;
+      if (!movementId) {
+        throw new Error(`Cannot create Track "${title}": a movementId is required (teamspaceId ${teamspaceId} alone has no create route).`);
+      }
+      const url2 = `/api/movements/${encodeURIComponent(movementId)}/tracks`;
       const result = await request("POST", url2, body);
-      if (result === void 0) throw new Error(`Resource not found when creating DeliverableGroup`);
+      if (result === void 0) throw new Error(`Resource not found when creating Track`);
       return result;
     },
-    updateDeliverableGroup: async (deliverableGroupId, updates) => {
-      return request("PATCH", `/api/deliverable-groups/${encodeURIComponent(deliverableGroupId)}`, updates);
+    updateTrack: async (trackId, updates) => {
+      return request("PATCH", `/api/tracks/${encodeURIComponent(trackId)}`, updates);
     },
-    transitionDeliverableGroupStatus: async (deliverableGroupId, targetState, opts) => {
-      return request("PATCH", `/api/deliverable-groups/${encodeURIComponent(deliverableGroupId)}/status`, {
+    transitionTrackStatus: async (trackId, targetState, opts) => {
+      return request("PATCH", `/api/tracks/${encodeURIComponent(trackId)}/status`, {
         targetState,
         ...opts ?? {}
       });
     },
-    listDeliverableGroupDrops: async (deliverableGroupId) => {
-      const res = await request("GET", `/api/deliverable-groups/${encodeURIComponent(deliverableGroupId)}/drops`);
-      return res?.drops ?? [];
-    },
-    setDropDeliverableGroup: async (deliverableGroupId, dropId) => {
-      const res = await request("POST", `/api/deliverable-groups/${encodeURIComponent(deliverableGroupId)}/drops`, { dropId });
+    setDropTrack: async (trackId, dropId) => {
+      const res = await request("POST", `/api/tracks/${encodeURIComponent(trackId)}/drops`, { dropId });
       return res?.success === true;
     },
     // Movements (B-242 / teamspace-scoped SOW container)
@@ -34345,9 +34563,55 @@ function createHttpClient(config2) {
       if (!parsed.success) throw new Error(`Unexpected movements list shape from API: ${parsed.error.message}`);
       return parsed.data.movements;
     },
+    // ExternalMappings (reference-only links to external trackers — B-301 / N-4E09-6311)
+    addExternalMapping: async (input) => {
+      const { subjectType, subjectId, provider, externalKey, url: url2, syncDirection } = input;
+      const body = {
+        subjectType,
+        subjectId,
+        provider,
+        externalKey,
+        ...url2 !== void 0 && { url: url2 },
+        ...syncDirection !== void 0 && { syncDirection }
+      };
+      let res;
+      try {
+        res = await request("POST", `/api/external-mappings`, body);
+      } catch (err) {
+        if (err instanceof ApiError && err.status === 400 && bodyCode(err.body) === EXTERNAL_MAPPING_SUBJECT_NOT_FOUND_CODE) {
+          throw new ExternalMappingSubjectNotFoundError(subjectType, subjectId);
+        }
+        throw err;
+      }
+      if (res === void 0) throw new ExternalMappingSubjectNotFoundError(subjectType, subjectId);
+      const parsed = ExternalMappingApiSchema.safeParse(res.externalMapping);
+      if (!parsed.success) throw new Error(`Unexpected ExternalMapping shape from API: ${parsed.error.message}`);
+      return parsed.data;
+    },
+    updateExternalMapping: async (externalMappingId, updates) => {
+      const res = await request(
+        "PATCH",
+        `/api/external-mappings/${encodeURIComponent(externalMappingId)}`,
+        updates
+      );
+      if (res === void 0) return void 0;
+      const parsed = ExternalMappingApiSchema.safeParse(res.externalMapping);
+      if (!parsed.success) throw new Error(`Unexpected ExternalMapping shape from API: ${parsed.error.message}`);
+      return parsed.data;
+    },
+    listExternalMappings: async (subjectType, subjectId) => {
+      const res = await request(
+        "GET",
+        `/api/external-mappings?subjectType=${encodeURIComponent(subjectType)}&subjectId=${encodeURIComponent(subjectId)}`
+      );
+      if (res === void 0) throw new ExternalMappingSubjectNotFoundError(subjectType, subjectId);
+      const parsed = ExternalMappingsResponseSchema.safeParse(res);
+      if (!parsed.success) throw new Error(`Unexpected ExternalMappings list shape from API: ${parsed.error.message}`);
+      return parsed.data.externalMappings;
+    },
     // WorkItems (WorkItem exposure layer — owned, statused unit of operational work under a Track)
     createWorkItem: async (input) => {
-      const { trackId, title, owner, committedEstimateHours, effortSize, valueUnits, costPerValueUnit, createdBy, beatVersionId, workOrderId } = input;
+      const { trackId, title, owner, committedEstimateHours, effortSize, valueUnits, costPerValueUnit, createdBy, beatVersionId, workOrderId, barId } = input;
       const body = {
         title,
         ...owner !== void 0 && { owner },
@@ -34357,11 +34621,12 @@ function createHttpClient(config2) {
         ...costPerValueUnit !== void 0 && { costPerValueUnit },
         ...createdBy !== void 0 && { createdBy },
         ...beatVersionId !== void 0 && { beatVersionId },
-        ...workOrderId !== void 0 && { workOrderId }
+        ...workOrderId !== void 0 && { workOrderId },
+        ...barId !== void 0 && { barId }
       };
       const res = await request(
         "POST",
-        `/api/deliverable-groups/${encodeURIComponent(trackId)}/work-items`,
+        `/api/tracks/${encodeURIComponent(trackId)}/work-items`,
         body
       );
       if (res === void 0) throw new Error(`Track ${trackId} not found`);
@@ -34391,7 +34656,7 @@ function createHttpClient(config2) {
       return parsed.data;
     },
     listTrackWorkItems: async (trackId) => {
-      const res = await request("GET", `/api/deliverable-groups/${encodeURIComponent(trackId)}/work-items`);
+      const res = await request("GET", `/api/tracks/${encodeURIComponent(trackId)}/work-items`);
       if (res === void 0) throw new Error(`Track ${trackId} not found`);
       const parsed = WorkItemsResponseSchema.safeParse(res);
       if (!parsed.success) throw new Error(`Unexpected work items list shape from API: ${parsed.error.message}`);
@@ -34475,9 +34740,8 @@ function createHttpClient(config2) {
       return parsed.data.workRequests;
     },
     createWorkOrder: async (input) => {
-      const { trackId, workRequestId, title, description, size, createdBy } = input;
+      const { workRequestId, title, description, size, createdBy } = input;
       const body = {
-        workRequestId,
         title,
         ...description !== void 0 && { description },
         ...size !== void 0 && { size },
@@ -34485,10 +34749,10 @@ function createHttpClient(config2) {
       };
       const res = await request(
         "POST",
-        `/api/deliverable-groups/${encodeURIComponent(trackId)}/work-orders`,
+        `/api/work-requests/${encodeURIComponent(workRequestId)}/work-orders`,
         body
       );
-      if (res === void 0) throw new Error(`Track ${trackId} not found`);
+      if (res === void 0) throw new Error(`Work request ${workRequestId} not found`);
       const parsed = WorkOrderApiSchema.safeParse(res.workOrder);
       if (!parsed.success) throw new Error(`Unexpected WorkOrder shape from API: ${parsed.error.message}`);
       return parsed.data;
@@ -34511,8 +34775,15 @@ function createHttpClient(config2) {
       if (!parsed.success) throw new Error(`Unexpected WorkOrder shape from API: ${parsed.error.message}`);
       return parsed.data;
     },
+    listMovementWorkOrders: async (movementId) => {
+      const res = await request("GET", `/api/movements/${encodeURIComponent(movementId)}/work-orders`);
+      if (res === void 0) throw new Error(`Movement ${movementId} not found`);
+      const parsed = WorkOrdersResponseSchema.safeParse(res);
+      if (!parsed.success) throw new Error(`Unexpected work orders list shape from API: ${parsed.error.message}`);
+      return parsed.data.workOrders;
+    },
     listTrackWorkOrders: async (trackId) => {
-      const res = await request("GET", `/api/deliverable-groups/${encodeURIComponent(trackId)}/work-orders`);
+      const res = await request("GET", `/api/tracks/${encodeURIComponent(trackId)}/work-orders`);
       if (res === void 0) throw new Error(`Track ${trackId} not found`);
       const parsed = WorkOrdersResponseSchema.safeParse(res);
       if (!parsed.success) throw new Error(`Unexpected work orders list shape from API: ${parsed.error.message}`);
@@ -35098,7 +35369,7 @@ function loadConfig() {
   };
 }
 async function main() {
-  console.error(`[harmonica-mcp] v${"4.4.2"} starting\u2026`);
+  console.error(`[harmonica-mcp] v${"5.0.0"} starting\u2026`);
   const config2 = loadConfig();
   const client = createHttpClient({
     apiBaseUrl: config2.apiBaseUrl,