@contextecf/guardian-cli 0.1.6 → 0.1.9

package/dist/packages/guardian-cli/src/bin.js

@@ -17061,6 +17061,8 @@ async function runGuardianCli(argv, options = {}) {
       return runReleaseCommand(argv.slice(1), flags, options);
     case "open":
       return runControlTowerOpenCommand(flags, options);
+    case "connect":
+      return runExtensionConnectCommand(flags, options);
     case "status":
       write(stdout, await statusGuardian(flags, options));
       return 0;
@@ -17072,6 +17074,14 @@ async function runGuardianCli(argv, options = {}) {
       return runLaunchCommand(flags, options);
     case "stop":
       return runStopCommand(flags, options);
+    case "pair": {
+      if (!flags.has("json")) {
+        return runExtensionConnectCommand(flags, options);
+      }
+      const result = await daemonPair(flags, options);
+      write(result.exitCode === 0 ? stdout : stderr, result.message);
+      return result.exitCode;
+    }
     case "daemon":
       return runDaemonCommand(argv.slice(1), flags, options);
     case "service":
@@ -17094,6 +17104,9 @@ async function runGuardianCli(argv, options = {}) {
       return runPrivacyCommand(argv.slice(1), flags, options);
     case "mcp":
       return runMcpCommand(argv.slice(1), flags, options);
+    case "coach":
+    case "prompt-coach":
+      return runCoachCommand(argv.slice(1), flags, options);
     case "policy":
       return runPolicyCommand(argv.slice(1), flags, options);
     case "marketplace":
@@ -17116,7 +17129,7 @@ async function runGuardianCli(argv, options = {}) {
     case "help":
     case "--help":
     case "-h":
-      write(stdout, `${HELP_TEXT}
+      write(stdout, `${flags.has("advanced") ? ADVANCED_HELP_TEXT : HELP_TEXT}
 `);
       return 0;
     default:
@@ -17195,11 +17208,13 @@ async function installGuardian(flags, options = {}) {
       "guardian start",
       "guardian open",
       "guardian mcp install",
-      "guardian daemon pair --json",
       "guardian service install",
       "guardian key-store install --yes",
-      "guardian extension open-setup",
-      "guardian extension native-host install --extension-id=<browser-extension-id>"
+      "guardian connect"
+    ],
+    advancedCommands: [
+      `guardian extension native-host install --extension-id=${GUARDIAN_HALO_CHROME_EXTENSION_ID}`,
+      "guardian pair --json"
     ]
   };
   return flags.has("json") ? `${JSON.stringify(result, null, 2)}
@@ -17212,7 +17227,8 @@ async function installGuardian(flags, options = {}) {
     `First run: ${GUARDIAN_FIRST_RUN_COMMAND}`,
     `Open Control Tower: ${GUARDIAN_OPEN_CONTROL_TOWER_COMMAND}`,
     `No global install: ${GUARDIAN_NPX_SETUP_COMMAND}`,
-    "Next: guardian setup; guardian doctor; guardian readiness; guardian launch; guardian open; guardian mcp install; guardian extension open-setup; guardian daemon pair --json; guardian extension native-host install --extension-id=<browser-extension-id>"
+    "Next: guardian setup; open ContextECF Halo and click Connect; guardian open",
+    "Help: run guardian doctor if setup needs attention."
   ].join("\n")}
 `;
 }
@@ -17220,8 +17236,9 @@ async function runSetupCommand(flags, options) {
   const stdout = options.stdout ?? process.stdout;
   const stderr = options.stderr ?? process.stderr;
   const home = resolveGuardianHome(options.env, options.platform);
-  const extensionId = stringFlag(flags, "extension-id") ?? stringFlag(flags, "id");
-  if (extensionId && !isValidChromeExtensionId(extensionId)) {
+  const requestedExtensionId = stringFlag(flags, "extension-id") ?? stringFlag(flags, "id");
+  const extensionId = requestedExtensionId ?? GUARDIAN_HALO_CHROME_EXTENSION_ID;
+  if (requestedExtensionId && !isValidChromeExtensionId(requestedExtensionId)) {
     write(
       stderr,
       "Invalid --extension-id. Chrome extension ids must be 32 lowercase letters from a-p.\n"
@@ -17277,10 +17294,80 @@ async function runSetupCommand(flags, options) {
     }
     launch = JSON.parse(launchOutput);
   }
+  const requestedHost = stringFlag(flags, "host") ?? "127.0.0.1";
+  const requestedPort = numberFlag(flags, "port") ?? 4317;
+  const requestedControlTowerUrl = `${formatDaemonBaseUrl(requestedHost, requestedPort)}/control-tower`;
   const resolvedControlTowerUrl = resolveControlTowerUrl(/* @__PURE__ */ new Map(), options.env, profile);
-  const controlTowerUrl = launch?.controlTowerUrl ?? (resolvedControlTowerUrl.ok ? resolvedControlTowerUrl.url : GUARDIAN_DEFAULT_CONTROL_TOWER_URL);
+  const controlTowerUrl = launch?.controlTowerUrl ?? (flags.has("host") || flags.has("port") ? requestedControlTowerUrl : resolvedControlTowerUrl.ok ? resolvedControlTowerUrl.url : GUARDIAN_DEFAULT_CONTROL_TOWER_URL);
+  if (!launch && (flags.has("host") || flags.has("port"))) {
+    profile.control_tower = {
+      url: controlTowerUrl,
+      source: "env_or_flag"
+    };
+    await writeProfile(home, profile);
+  }
   const setupUrl = buildControlTowerSetupUrl(controlTowerUrl);
-  const nativeHostCommand = `guardian extension native-host install --extension-id=${extensionId ?? "<browser-extension-id>"}`;
+  const nativeHostCommand = `guardian extension native-host install --extension-id=${extensionId}`;
+  let browserHelper;
+  if (flags.has("no-browser-connection") || flags.has("no-browser-helper")) {
+    browserHelper = {
+      success: false,
+      skipped: true,
+      tokenPrinted: false
+    };
+  } else {
+    let nativeHostOutput = "";
+    let nativeHostError = "";
+    const nativeHostFlags = new Map([
+      ["json", true],
+      ["force", true],
+      ["extension-id", extensionId],
+      ...copyStringFlags(flags, ["browser", "target"])
+    ]);
+    if ((options.platform ?? process.platform) === "win32") {
+      nativeHostFlags.set("write-registry", true);
+      nativeHostFlags.set("yes", true);
+    }
+    const nativeHostExitCode = await runExtensionCommand(
+      ["native-host", "install"],
+      nativeHostFlags,
+      {
+        ...options,
+        stdout: {
+          write: (chunk) => {
+            nativeHostOutput += chunk.toString();
+            return true;
+          }
+        },
+        stderr: {
+          write: (chunk) => {
+            nativeHostError += chunk.toString();
+            return true;
+          }
+        }
+      }
+    );
+    if (nativeHostExitCode === 0) {
+      const nativeHost = JSON.parse(nativeHostOutput);
+      browserHelper = {
+        success: true,
+        skipped: false,
+        browser: nativeHost.browser,
+        hostName: nativeHost.hostName,
+        manifestPath: nativeHost.manifestPath,
+        allowedOrigins: nativeHost.allowedOrigins,
+        tokenPrinted: nativeHost.tokenPrinted
+      };
+    } else {
+      browserHelper = {
+        success: false,
+        skipped: false,
+        error: nativeHostError.trim() || "Guardian browser connection setup failed.",
+        exitCode: nativeHostExitCode,
+        tokenPrinted: false
+      };
+    }
+  }
   const result = {
     schema_version: "contextecf/project-guardian-setup/v1",
     success: true,
@@ -17330,10 +17417,14 @@ async function runSetupCommand(flags, options) {
     },
     browserSetup: {
       setupUrl,
-      extensionId: extensionId ?? null,
+      extensionId,
+      defaultExtensionId: GUARDIAN_HALO_CHROME_EXTENSION_ID,
       opened: false,
       tokenPrinted: false,
-      nativeHostCommand
+      nativeHostCommand,
+      connectInstruction: "Open ContextECF Halo and click Connect. No setup code is needed.",
+      manualFallbackCommand: "guardian pair --json",
+      nativeHost: browserHelper
     },
     nextCommands: [
       "guardian status",
@@ -17342,12 +17433,10 @@ async function runSetupCommand(flags, options) {
       "guardian policy list",
       "guardian posture list",
       "guardian preferences show",
-      "guardian extension open-setup",
-      "guardian daemon pair --json",
       "guardian service install",
-      "guardian key-store install --yes",
-      nativeHostCommand
-    ]
+      "guardian key-store install --yes"
+    ],
+    advancedCommands: ["guardian extension connect", nativeHostCommand, "guardian pair --json"]
   };
   write(
     stdout,
@@ -17360,8 +17449,11 @@ async function runSetupCommand(flags, options) {
       result.launch.opened ? `Opening: ${result.launch.controlTowerUrl}` : void 0,
       `MCP artifacts: ${result.mcp.writtenFiles.length > 0 ? result.mcp.writtenFiles.join(", ") : "skipped" in result.mcp && result.mcp.skipped ? "skipped" : "none"}`,
       `Browser setup: ${result.browserSetup.setupUrl}`,
+      result.browserSetup.nativeHost.success ? `Browser connection: ready for ContextECF Halo (${result.browserSetup.extensionId})` : result.browserSetup.nativeHost.skipped ? "Browser connection: skipped" : `Browser connection: needs attention${result.browserSetup.nativeHost.error ? ` (${result.browserSetup.nativeHost.error})` : ""}`,
+      "Extension setup: open ContextECF Halo and click Connect. No setup code needed.",
       "Token printed: no",
-      `Next: ${result.nextCommands.join("; ")}`
+      `Next: ${result.nextCommands.join("; ")}`,
+      "Help: run guardian connect if the browser says Local Guardian is not connected."
     ].filter(Boolean).join("\n")}
 `
   );
@@ -17436,8 +17528,8 @@ function buildGuardianDistributionReadiness(npmPreviewReady) {
     },
     aiToolIntegration: {
       mcpInstallCommand: "guardian mcp install --client=all --write",
-      browserSetupCommand: "guardian extension open-setup",
-      nativeHostInstallCommand: "guardian extension native-host install --extension-id=<browser-extension-id>"
+      browserSetupCommand: "guardian connect",
+      nativeHostInstallCommand: `guardian extension native-host install --extension-id=${GUARDIAN_HALO_CHROME_EXTENSION_ID}`
     },
     browserStoreHandoff: {
       status: npmPreviewReady ? "operator_handoff_ready_not_submitted" : "blocked_until_preview_ready",
@@ -17453,15 +17545,17 @@ function buildGuardianDistributionReadiness(npmPreviewReady) {
       workflow: GUARDIAN_RELEASE_DISPATCH_WORKFLOW,
       dryRunCommand: buildGuardianReleaseDispatchCommand(true),
       publishCommand: buildGuardianReleaseDispatchCommand(false),
-      requiredPublishCredentialName: "NPM_TOKEN",
+      defaultPublishAuth: GUARDIAN_DEFAULT_NPM_PUBLISH_AUTH,
+      tokenFallbackCredentialName: "NPM_TOKEN",
       channels: ["all", "npm", "browser", "evidence"],
       defaultDockerSmoke: true,
       provenance: "github_actions_oidc_supported",
       status: npmPreviewReady ? "ready_for_dispatch_after_preview_evidence" : "blocked_until_preview_release_evidence_passes",
       boundaries: [
         "Use dry_run=true before public publication.",
-        "dry_run=false requires the repository secret NPM_TOKEN and must not print npm tokens, OTP values, or .npmrc contents.",
-        "The workflow can publish the npm preview package, upload evidence, and run public install smokes; it does not sign native installers or approve future browser-store listings.",
+        "dry_run=false defaults to npm Trusted Publishing and must not print npm tokens, OTP values, or .npmrc contents.",
+        "The token fallback route remains available with publish_auth=token and requires the repository secret NPM_TOKEN.",
+        "The workflow can publish the npm preview package, upload evidence, submit future Chrome Web Store updates for review when browser_store_publish=api, and run public install smokes; it does not sign native installers or prove future browser-store approval.",
         "GitHub Actions OIDC/provenance applies to CI release context; manual local publishes are recorded separately and should not claim CI provenance."
       ]
     },
@@ -17482,12 +17576,16 @@ function buildGuardianReleaseDispatchCommand(dryRun) {
   });
 }
 function buildGuardianReleaseDispatchCommandFor(input2) {
+  const publishAuth = input2.publishAuth ?? GUARDIAN_DEFAULT_NPM_PUBLISH_AUTH;
+  const browserStorePublish = input2.browserStorePublish ?? "manual";
   return [
     `gh workflow run ${GUARDIAN_RELEASE_DISPATCH_WORKFLOW} \\`,
     `  -f release_version=${input2.releaseVersion} \\`,
     `  -f channels=${input2.channels} \\`,
     `  -f dry_run=${input2.dryRun ? "true" : "false"} \\`,
-    `  -f run_docker_smoke=${input2.runDockerSmoke ? "true" : "false"}`
+    `  -f run_docker_smoke=${input2.runDockerSmoke ? "true" : "false"} \\`,
+    `  -f publish_auth=${publishAuth} \\`,
+    `  -f browser_store_publish=${browserStorePublish}`
   ].join("\n");
 }
 async function runReleaseCommand(argv, flags, options) {
@@ -17594,11 +17692,23 @@ async function runReleaseCommand(argv, flags, options) {
   }
   const dryRun = flags.has("publish") ? false : booleanFlag(flags, "dry-run", true);
   const runDockerSmoke = booleanFlag(flags, "run-docker-smoke", true);
+  const publishAuth = stringFlag(flags, "publish-auth") ?? GUARDIAN_DEFAULT_NPM_PUBLISH_AUTH;
+  if (!isValidReleasePublishAuth(publishAuth)) {
+    write(stderr, "Invalid --publish-auth. Expected one of: token, trusted_publisher.\n");
+    return 1;
+  }
+  const browserStorePublish = stringFlag(flags, "browser-store-publish") ?? "manual";
+  if (!isValidBrowserStorePublish(browserStorePublish)) {
+    write(stderr, "Invalid --browser-store-publish. Expected one of: manual, api.\n");
+    return 1;
+  }
   const result = buildGuardianReleaseDispatchCommandResult({
     releaseVersion,
     channels,
     dryRun,
-    runDockerSmoke
+    runDockerSmoke,
+    publishAuth,
+    browserStorePublish
   });
   write(stdout, renderGuardianReleaseDispatchCommand(result, flags));
   return 0;
@@ -17666,6 +17776,7 @@ function renderGuardianReleaseHelp(result, flags) {
 `;
 }
 function buildGuardianReleaseDispatchCommandResult(input2) {
+  const npmLaneSelected = input2.channels === "all" || input2.channels === "npm";
   return {
     schema_version: "contextecf/project-guardian-release-dispatch-command/v1",
     cli_version: GUARDIAN_CLI_VERSION,
@@ -17674,13 +17785,21 @@ function buildGuardianReleaseDispatchCommandResult(input2) {
     channels: input2.channels,
     dryRun: input2.dryRun,
     runDockerSmoke: input2.runDockerSmoke,
+    publishAuth: input2.publishAuth,
+    browserStorePublish: input2.browserStorePublish,
     command: buildGuardianReleaseDispatchCommandFor(input2),
-    ...input2.dryRun ? {} : { requiredPublishCredentialName: "NPM_TOKEN" },
+    ...input2.dryRun || input2.publishAuth === "trusted_publisher" || !npmLaneSelected ? {} : { requiredPublishCredentialName: "NPM_TOKEN" },
+    ...input2.browserStorePublish === "api" && !input2.dryRun ? {
+      requiredBrowserStoreCredentialNames: [...GUARDIAN_CHROME_WEB_STORE_API_SECRET_NAMES]
+    } : {},
     provenance: "github_actions_oidc_supported",
     boundaries: [
       "Use dry_run=true before public publication.",
-      "dry_run=false requires the repository secret NPM_TOKEN and must not print npm tokens, OTP values, or .npmrc contents.",
-      "This dispatch can publish the npm preview package, upload evidence, and run public install smokes; it does not sign native installers or approve future browser-store listings.",
+      "dry_run=false with publish_auth=token requires the repository secret NPM_TOKEN and must not print npm tokens, OTP values, or .npmrc contents.",
+      "dry_run=false with publish_auth=trusted_publisher requires npm Trusted Publishing to be configured for this GitHub Actions workflow and package.",
+      "browser_store_publish=manual keeps Chrome Web Store upload as an operator ZIP handoff.",
+      "browser_store_publish=api uploads an existing Chrome Web Store item update and submits it for review when Chrome Web Store API secrets are configured.",
+      "This dispatch can publish the npm preview package, upload evidence, submit future Chrome Web Store updates for review, and run public install smokes; it does not sign native installers or prove future browser-store approval.",
       "A release-dispatch command is operator guidance, not production-gate proof."
     ],
     tokenPrinted: false,
@@ -17699,7 +17818,10 @@ function renderGuardianReleaseDispatchCommand(result, flags) {
     `Workflow: ${result.workflow}`,
     `Channels: ${result.channels}`,
     `Docker smoke: ${result.runDockerSmoke ? "yes" : "no"}`,
-    result.requiredPublishCredentialName ? `Required repository secret: ${result.requiredPublishCredentialName}` : "Required repository secret: not needed for dry run",
+    `Publish auth: ${result.publishAuth}`,
+    `Browser store publish: ${result.browserStorePublish}`,
+    result.requiredPublishCredentialName ? `Required repository secret: ${result.requiredPublishCredentialName}` : result.publishAuth === "trusted_publisher" && !result.dryRun ? "Required npm setup: Trusted Publisher connection" : "Required repository secret: not needed for dry run",
+    result.requiredBrowserStoreCredentialNames ? `Required browser-store secrets: ${result.requiredBrowserStoreCredentialNames.join(", ")}` : "Required browser-store secrets: not needed for manual browser handoff",
     "Command:",
     result.command,
     "Boundaries:",
@@ -17714,6 +17836,7 @@ function buildGuardianBrowserStoreHandoffCommandResult() {
     cli_version: GUARDIAN_CLI_VERSION,
     status: "chrome_distribution_proven_next_submission_pack_ready",
     primaryStore: "chrome_web_store",
+    publicListingUrl: GUARDIAN_HALO_CHROME_WEB_STORE_LISTING_URL,
     productionGate: {
       id: "browser-store-distribution",
       status: "proven",
@@ -17780,6 +17903,7 @@ function renderGuardianBrowserStoreHandoffCommand(result, flags) {
     "Project Guardian Browser Store Handoff",
     `Status: ${result.status}`,
     `Primary store: ${result.primaryStore}`,
+    `Public listing: ${result.publicListingUrl}`,
     `Production gate: ${result.productionGate.id} (${result.productionGate.status})`,
     "1. Build submission pack:",
     result.commands.submissionPack,
@@ -17800,15 +17924,25 @@ function renderGuardianBrowserStoreHandoffCommand(result, flags) {
 `;
 }
 function buildGuardianReleaseSecretSetup() {
+  const chromeWebStoreSecretMatcher = GUARDIAN_CHROME_WEB_STORE_API_SECRET_NAMES.join("|");
   return {
     schema_version: "contextecf/project-guardian-release-secret-setup/v1",
     cli_version: GUARDIAN_CLI_VERSION,
     repository: GUARDIAN_RELEASE_REPOSITORY,
-    requiredForPublish: "NPM_TOKEN",
+    defaultPublishAuth: GUARDIAN_DEFAULT_NPM_PUBLISH_AUTH,
+    requiredForPublish: "npm_trusted_publisher_connection",
+    tokenFallbackCredentialName: "NPM_TOKEN",
+    requiredForBrowserStoreApi: GUARDIAN_CHROME_WEB_STORE_API_SECRET_NAMES,
     githubActionsSecretUrl: `https://github.com/${GUARDIAN_RELEASE_REPOSITORY}/settings/secrets/actions/new`,
     commands: {
       setNpmToken: `gh secret set NPM_TOKEN --repo ${GUARDIAN_RELEASE_REPOSITORY} --app actions`,
+      setChromeWebStoreClientId: `gh secret set CHROME_WEB_STORE_CLIENT_ID --repo ${GUARDIAN_RELEASE_REPOSITORY} --app actions`,
+      setChromeWebStoreClientSecret: `gh secret set CHROME_WEB_STORE_CLIENT_SECRET --repo ${GUARDIAN_RELEASE_REPOSITORY} --app actions`,
+      setChromeWebStoreRefreshToken: `gh secret set CHROME_WEB_STORE_REFRESH_TOKEN --repo ${GUARDIAN_RELEASE_REPOSITORY} --app actions`,
+      setChromeWebStorePublisherId: `gh secret set CHROME_WEB_STORE_PUBLISHER_ID --repo ${GUARDIAN_RELEASE_REPOSITORY} --app actions`,
+      setChromeWebStoreExtensionId: `gh secret set CHROME_WEB_STORE_EXTENSION_ID --repo ${GUARDIAN_RELEASE_REPOSITORY} --app actions`,
       verifyNpmTokenPresence: `gh secret list --repo ${GUARDIAN_RELEASE_REPOSITORY} --app actions | rg '^NPM_TOKEN\\b'`,
+      verifyChromeWebStoreSecretsPresence: `gh secret list --repo ${GUARDIAN_RELEASE_REPOSITORY} --app actions | rg '^(${chromeWebStoreSecretMatcher})\\b'`,
       dryRunDispatch: buildGuardianReleaseDispatchCommandFor({
         dryRun: true,
         releaseVersion: "<version>",
@@ -17820,13 +17954,24 @@ function buildGuardianReleaseSecretSetup() {
         releaseVersion: "<version>",
         channels: "all",
         runDockerSmoke: true
+      }),
+      browserStoreApiPublishDispatch: buildGuardianReleaseDispatchCommandFor({
+        dryRun: false,
+        releaseVersion: "<version>",
+        channels: "browser",
+        runDockerSmoke: true,
+        publishAuth: "trusted_publisher",
+        browserStorePublish: "api"
       })
     },
     boundaries: [
-      "NPM_TOKEN belongs only in GitHub Actions repository secrets for guarded dry_run=false npm publication.",
+      "npm Trusted Publishing is the default Guardian release path and uses this GitHub Actions workflow identity.",
+      "NPM_TOKEN is a fallback credential only; when used, it belongs only in GitHub Actions repository secrets for guarded dry_run=false npm publication.",
+      "Chrome Web Store API OAuth values belong only in GitHub Actions repository secrets for guarded browser_store_publish=api upload/submission.",
       "Do not paste npm tokens, OTP values, .npmrc contents, signing keys, browser-store credentials, raw prompts, raw responses, private policy packs, or customer content into chat, PR bodies, release evidence, or CLI output.",
-      "Use dry_run=true before dry_run=false; dry-run dispatch does not require NPM_TOKEN.",
-      "Adding NPM_TOKEN enables the npm preview publish lane only; it does not close signed-installer, browser-store, high-risk desktop, or autonomous app production gates."
+      "Use dry_run=true before dry_run=false; dry-run dispatch does not require npm publish credentials.",
+      "Adding NPM_TOKEN enables the npm preview publish lane only; it does not close signed-installer, browser-store, high-risk desktop, or autonomous app production gates.",
+      "Chrome Web Store API secrets enable browser update upload/submission only; official review approval evidence is still required for production browser-store claims."
     ],
     tokenPrinted: false,
     rawContentIncluded: false
@@ -17840,16 +17985,28 @@ function renderGuardianReleaseSecretSetup(result, flags) {
   return `${[
     "Project Guardian Release Secret Setup",
     `Repository: ${result.repository}`,
-    `Required for publish: ${result.requiredForPublish}`,
+    "Default npm publish setup: Trusted Publisher connection",
+    `Fallback npm publish secret: ${result.tokenFallbackCredentialName}`,
+    `Required for Chrome Web Store API: ${result.requiredForBrowserStoreApi.join(", ")}`,
     `GitHub Actions secret page: ${result.githubActionsSecretUrl}`,
-    "Set secret:",
+    "NPM publish secret:",
     result.commands.setNpmToken,
-    "Verify secret presence:",
+    "Verify npm secret presence:",
     result.commands.verifyNpmTokenPresence,
+    "Chrome Web Store API secrets:",
+    result.commands.setChromeWebStoreClientId,
+    result.commands.setChromeWebStoreClientSecret,
+    result.commands.setChromeWebStoreRefreshToken,
+    result.commands.setChromeWebStorePublisherId,
+    result.commands.setChromeWebStoreExtensionId,
+    "Verify Chrome Web Store API secret presence:",
+    result.commands.verifyChromeWebStoreSecretsPresence,
     "Dry-run release command:",
     result.commands.dryRunDispatch,
-    "Publish release command:",
+    "Default publish command with manual browser-store upload:",
     result.commands.publishDispatch,
+    "Browser-store API publish command:",
+    result.commands.browserStoreApiPublishDispatch,
     "Boundaries:",
     ...result.boundaries.map((boundary) => `- ${boundary}`),
     "Token printed: no"
@@ -17880,7 +18037,8 @@ function buildGuardianReleaseChecklist(releaseVersion) {
       browserStoreHandoff: "guardian release browser-store",
       readiness: "guardian readiness"
     },
-    requiredRepositoryCredentialName: "NPM_TOKEN",
+    defaultPublishAuth: GUARDIAN_DEFAULT_NPM_PUBLISH_AUTH,
+    tokenFallbackCredentialName: "NPM_TOKEN",
     evidenceOutputs: [
       "release/evidence/guardian-release-dispatch-summary.json",
       "release/evidence/guardian-npm-publish-execution-summary.json",
@@ -17897,7 +18055,8 @@ function buildGuardianReleaseChecklist(releaseVersion) {
     boundaries: [
       "This checklist is an operator command surface for Guardian preview releases; it is not production-gate proof.",
       "Run the dry-run dispatch before any dry_run=false publish dispatch.",
-      "dry_run=false requires NPM_TOKEN in GitHub Actions repository secrets and must not print npm tokens, OTP values, or .npmrc contents.",
+      "dry_run=false defaults to npm Trusted Publishing and must not print npm tokens, OTP values, or .npmrc contents.",
+      "The token fallback route remains available with publish_auth=token and requires NPM_TOKEN in GitHub Actions repository secrets.",
       "The checklist does not sign native installers, submit browser-store packages, execute high-risk desktop actions, or enable autonomous local app execution.",
       "Full production claims remain blocked until every not-proven production gate has real validated external evidence."
     ],
@@ -17935,7 +18094,7 @@ function buildGuardianReleaseFlow(releaseVersion) {
       },
       {
         id: "verify-secrets",
-        label: "Verify npm publish secret setup",
+        label: "Verify npm Trusted Publisher setup or token fallback",
         command: "guardian release secrets",
         credentialRequired: false
       },
@@ -17949,7 +18108,7 @@ function buildGuardianReleaseFlow(releaseVersion) {
         id: "publish-dispatch",
         label: "Run the guarded publish dispatch after dry-run evidence passes",
         command: publishDispatch,
-        credentialRequired: true
+        credentialRequired: false
       },
       {
         id: "verify-public-release",
@@ -17985,7 +18144,8 @@ function buildGuardianReleaseFlow(releaseVersion) {
     })),
     boundaries: [
       "This release flow is copy-paste operator guidance only; it is not release evidence or production-gate proof.",
-      "Publish dispatch requires NPM_TOKEN in GitHub Actions repository secrets and must not print npm tokens, OTP values, or .npmrc contents.",
+      "Publish dispatch defaults to npm Trusted Publishing and must not print npm tokens, OTP values, or .npmrc contents.",
+      "The token fallback route remains available with publish_auth=token and requires NPM_TOKEN in GitHub Actions repository secrets.",
       "Run the dry-run dispatch before the guarded dry_run=false publish dispatch.",
       "Public npm preview publication and local install smoke prove the CLI preview lane only.",
       "Signed native installers, high-risk desktop action execution, and autonomous local app execution remain separate not-proven production gates until real external evidence is collected and validated."
@@ -18034,7 +18194,8 @@ function renderGuardianReleaseChecklist(result, flags) {
     `Release: ${result.releaseVersion}`,
     `Repository: ${result.repository}`,
     `Status: ${result.status}`,
-    `Required repository credential: ${result.requiredRepositoryCredentialName}`,
+    "Default npm publish setup: Trusted Publisher connection",
+    `Fallback npm publish secret: ${result.tokenFallbackCredentialName}`,
     "1. Secret setup:",
     result.operatorCommands.secretSetup,
     "2. Dry-run dispatch:",
@@ -18070,9 +18231,9 @@ function buildGuardianReleaseVerify(releaseVersion) {
     commands: {
       registryVersion: `npm view ${GUARDIAN_NPM_PACKAGE_NAME}@${releaseVersion} version --registry=${GUARDIAN_NPM_REGISTRY}`,
       publicInstall: `npm install -g ${GUARDIAN_NPM_PACKAGE_NAME}@${releaseVersion}`,
+      chromeWebStoreListing: GUARDIAN_HALO_CHROME_WEB_STORE_LISTING_URL,
       installedVersion: "guardian --version",
       setup: "guardian setup",
-      launch: "guardian launch",
       status: "guardian status",
       openControlTower: "guardian open",
       copyPasteLocalSmoke,
@@ -18101,9 +18262,8 @@ function buildGuardianReleasePaste(releaseVersion) {
     "guardian --version",
     "guardian stop",
     "guardian setup",
-    "guardian launch",
-    "guardian open",
-    "guardian status"
+    "guardian status",
+    "guardian open"
   ];
   return {
     schema_version: "contextecf/project-guardian-release-paste/v1",
@@ -18114,9 +18274,9 @@ function buildGuardianReleasePaste(releaseVersion) {
     command: commands.join("\n"),
     commands,
     boundaries: [
-      "This paste block verifies public npm visibility, global install, first-run setup, daemon launch, Control Tower open, and status.",
+      "This paste block verifies public npm visibility, global install, stale-process cleanup, first-run setup, Local Guardian status, and Control Tower open.",
       "It does not publish to npm and must not include npm tokens, OTP values, .npmrc contents, signing keys, browser-store credentials, raw prompts, raw responses, private policy packs, or customer content.",
-      "guardian stop is included before setup so stale local daemons or local token mismatches are cleared before launch."
+      "guardian stop is included before setup so stale Local Guardian processes or local token mismatches are cleared before setup relaunches the local service."
     ],
     tokenPrinted: false,
     rawContentIncluded: false
@@ -18143,18 +18303,19 @@ function renderGuardianReleaseVerify(result, flags) {
     `Status: ${result.status}`,
     "1. Confirm registry visibility:",
     result.commands.registryVersion,
-    "2. Install the published version:",
+    "2. Confirm public Chrome Web Store listing:",
+    result.commands.chromeWebStoreListing,
+    "3. Install the published version:",
     result.commands.publicInstall,
-    "3. Confirm installed CLI version:",
+    "4. Confirm installed CLI version:",
     result.commands.installedVersion,
-    "4. Run first-use smoke:",
+    "5. Run first-use smoke:",
     result.commands.setup,
-    result.commands.launch,
     result.commands.status,
     result.commands.openControlTower,
-    "5. Copy-paste local smoke block:",
+    "6. Copy-paste local smoke block:",
     result.commands.copyPasteLocalSmoke,
-    "6. Verify release evidence:",
+    "7. Verify release evidence:",
     result.commands.publishStatusVerification,
     result.commands.finishLineStatus,
     "Evidence outputs:",
@@ -18171,6 +18332,12 @@ function isValidReleaseVersion(value) {
 function isValidReleaseChannels(value) {
   return ["all", "npm", "browser", "evidence"].includes(value);
 }
+function isValidReleasePublishAuth(value) {
+  return value === "token" || value === "trusted_publisher";
+}
+function isValidBrowserStorePublish(value) {
+  return value === "manual" || value === "api";
+}
 function renderGuardianProductionReadiness(result, flags) {
   if (flags.has("json")) {
     return `${JSON.stringify(result, null, 2)}
@@ -18273,9 +18440,9 @@ async function statusGuardian(flags, options) {
     `Profile: ${home}`,
     `Runtime profile: ${result.runtime.profileDaemonStatus}`,
     `Control Tower: ${result.controlTowerUrl ?? "not configured"}`,
-    `Daemon health: ${result.daemon.status}${result.daemon.statusCode ? ` (HTTP ${result.daemon.statusCode})` : ""}`,
-    result.daemon.error ? `Daemon detail: ${result.daemon.error}` : void 0,
-    result.daemonVersionMismatch ? `Daemon version: ${result.daemonVersionMismatch.daemonVersion} (this CLI is ${result.daemonVersionMismatch.cliVersion} \u2014 versions differ, likely because the CLI was reinstalled or changed version while this daemon kept running; run guardian stop && guardian launch to restart it on the current version)` : void 0,
+    `Local Guardian: ${result.daemon.status}${result.daemon.statusCode ? ` (HTTP ${result.daemon.statusCode})` : ""}`,
+    result.daemon.error ? `Connection detail: ${result.daemon.error}` : void 0,
+    result.daemonVersionMismatch ? `Local Guardian version: ${result.daemonVersionMismatch.daemonVersion} (this CLI is ${result.daemonVersionMismatch.cliVersion} \u2014 versions differ, likely because the CLI was reinstalled or changed version while Local Guardian kept running; run guardian stop && guardian launch to restart it on the current version)` : void 0,
     `MCP stdio: ${result.runtime.mcpStdioAvailable ? "available" : "unavailable"}`,
     `Posture Profile: ${result.postureProfile.selected}`,
     `Prompt Coach: ${result.preferences.promptCoachMode}`,
@@ -18382,7 +18549,7 @@ async function runLaunchCommand(flags, options) {
     nextCommands: [
       "guardian open",
       "guardian status",
-      "guardian daemon pair --json",
+      "Open ContextECF Halo and click Connect",
       "guardian policy list"
     ]
   };
@@ -18391,7 +18558,7 @@ async function runLaunchCommand(flags, options) {
     flags.has("json") ? `${JSON.stringify(result, null, 2)}
 ` : `${[
       "Project Guardian launched.",
-      `Daemon: ${result.daemonUrl}${result.reusedExistingDaemon ? " (already running)" : ""}`,
+      `Local Guardian: ${result.daemonUrl}${result.reusedExistingDaemon ? " (already running)" : ""}`,
       `Control Tower: ${result.controlTowerUrl}`,
       shouldOpen ? `Opening: ${result.controlTowerUrl}` : void 0,
       "Next: guardian open; guardian status"
@@ -18502,14 +18669,14 @@ async function runStartCommand(flags, options) {
       controlTowerUrl: requestedControlTowerUrl,
       healthUrl,
       healthStatus: "reachable",
-      nextCommands: ["guardian open", "guardian status", "guardian daemon pair --json"]
+      nextCommands: ["guardian open", "guardian status", "Open ContextECF Halo and click Connect"]
     };
     write(
       stdout,
       flags.has("json") ? `${JSON.stringify(result2, null, 2)}
 ` : `${[
-        "Guardian daemon already running.",
-        `Daemon: ${requestedDaemonUrl}`,
+        "Local Guardian already running.",
+        `Local Guardian: ${requestedDaemonUrl}`,
         `Control Tower: ${requestedControlTowerUrl}`,
         "Next: guardian open"
       ].join("\n")}
@@ -18518,7 +18685,7 @@ async function runStartCommand(flags, options) {
     return 0;
   }
   if (!options.startDetachedDaemon) {
-    write(stderr, "Guardian detached daemon launcher is unavailable in this runtime.\n");
+    write(stderr, "Guardian local background launcher is unavailable in this runtime.\n");
     return 1;
   }
   const started = await options.startDetachedDaemon({ home, host, port: selected.port });
@@ -18539,14 +18706,14 @@ async function runStartCommand(flags, options) {
     pid: started.pid,
     healthUrl,
     healthStatus: existing.error ? "unreachable" : "not_reachable",
-    nextCommands: ["guardian open", "guardian status", "guardian daemon pair --json"]
+    nextCommands: ["guardian open", "guardian status", "Open ContextECF Halo and click Connect"]
   };
   write(
     stdout,
     flags.has("json") ? `${JSON.stringify(result, null, 2)}
 ` : `${[
-      "Guardian daemon start requested.",
-      `Daemon: ${daemonUrl}`,
+      "Local Guardian start requested.",
+      `Local Guardian: ${daemonUrl}`,
       `Control Tower: ${controlTowerUrl}`,
       started.pid ? `PID: ${started.pid}` : void 0,
       "Next: guardian open"
@@ -18557,8 +18724,8 @@ async function runStartCommand(flags, options) {
 }
 function renderDaemonTokenMismatchMessage(requestedDaemonUrl, port) {
   return [
-    `Guardian found another daemon or container at ${requestedDaemonUrl}, but it rejected this profile's local runtime token.`,
-    "This usually means an older Guardian daemon or Docker demo is still using the port.",
+    `Guardian found another local service or container at ${requestedDaemonUrl}, but it rejected this profile's local connection token.`,
+    "This usually means an older Guardian background service or Docker demo is still using the port.",
     `Recovery: stop the other process/container, or run Guardian on a different port with guardian launch --port=${port + 1}.`,
     `Diagnostics: guardian status; docker ps --filter publish=${port}`,
     ""
@@ -18591,7 +18758,7 @@ async function runStopCommand(flags, options) {
   if (!stopped.ok) {
     write(
       stderr,
-      `Guardian daemon did not stop cleanly${stopped.statusCode ? ` (HTTP ${stopped.statusCode})` : ""}: ${stopped.error ?? "unknown_error"}
+      `Local Guardian did not stop cleanly${stopped.statusCode ? ` (HTTP ${stopped.statusCode})` : ""}: ${stopped.error ?? "unknown_error"}
 `
     );
     return 1;
@@ -18602,12 +18769,12 @@ async function runStopCommand(flags, options) {
     success: true,
     daemonStatus: profile.runtime.daemon_status,
     stopUrl: stopUrl.url,
-    note: "Guardian daemon stop requested."
+    note: "Local Guardian stop requested."
   };
   write(
     stdout,
     flags.has("json") ? `${JSON.stringify(result, null, 2)}
-` : `${["Guardian daemon stop requested.", "Status: not_started_mvp"].join("\n")}
+` : `${["Local Guardian stop requested.", "Status: not_started_mvp"].join("\n")}
 `
   );
   return 0;
@@ -18679,7 +18846,7 @@ Proof: ${result2.proofPath}
   }
   const host = stringFlag(flags, "host") ?? "127.0.0.1";
   if (!isLoopbackHost(host)) {
-    write(stderr, "Guardian service supervision only accepts loopback daemon hosts.\n");
+    write(stderr, "Guardian service supervision only accepts loopback Local Guardian hosts.\n");
     return 1;
   }
   const port = numberFlag(flags, "port") ?? 4317;
@@ -18936,7 +19103,7 @@ async function daemonPair(flags, options) {
       [GUARDIAN_BRIDGE_CONFIG_STORAGE_KEY]: bridgeConfig,
       [GUARDIAN_BRIDGE_TOKEN_STORAGE_KEY]: token
     },
-    note: "Store this token in the Guardian browser extension local settings, then run guardian daemon serve."
+    note: "Advanced fallback only. Most users should run guardian setup, open ContextECF Halo, and click Connect."
   };
   if (flags.has("json")) {
     return { exitCode: 0, message: `${JSON.stringify(pairing, null, 2)}
@@ -18945,13 +19112,10 @@ async function daemonPair(flags, options) {
   return {
     exitCode: 0,
     message: `${[
-      "Guardian browser bridge pairing",
-      `Storage key: ${pairing.storageKey}`,
-      `Loopback URL: ${pairing.loopbackBaseUrl}`,
-      `Transport: ${pairing.transport}`,
-      `Native host: ${pairing.nativeHostName}`,
-      `Token: ${pairing.token}`,
-      pairing.note
+      "Guardian browser connection uses one-click setup now.",
+      "Run guardian connect, then open ContextECF Halo and click Connect.",
+      "Support setup codes are only printed by guardian pair --json.",
+      "Token printed: no"
     ].join("\n")}
 `
   };
@@ -18960,6 +19124,9 @@ async function runExtensionCommand(argv, flags, options) {
   const subcommand = argv[0] ?? "native-host";
   const stdout = options.stdout ?? process.stdout;
   const stderr = options.stderr ?? process.stderr;
+  if (subcommand === "connect") {
+    return runExtensionConnectCommand(flags, options);
+  }
   if (subcommand === "open-setup") {
     return runExtensionOpenSetupCommand(flags, options);
   }
@@ -19147,13 +19314,18 @@ Re-run with --force to replace it.
     registryMutationRequested: writeRegistry,
     registryProofPath,
     tokenPrinted: false,
-    nextCommands: ["guardian launch", "guardian daemon pair --json"]
+    nextCommands: [
+      "guardian launch",
+      "Open ContextECF Halo and click Connect",
+      "guardian extension native-host status"
+    ],
+    advancedCommands: ["guardian pair --json"]
   };
   write(
     stdout,
     flags.has("json") ? `${JSON.stringify(result, null, 2)}
 ` : `${[
-      "Guardian native host installed.",
+      "Guardian browser connection installed.",
       `Browser: ${browser}`,
       `Host: ${plan.hostName}`,
       `Manifest: ${plan.manifestPath}`,
@@ -19168,6 +19340,121 @@ Re-run with --force to replace it.
   );
   return 0;
 }
+async function runExtensionConnectCommand(flags, options) {
+  const stdout = options.stdout ?? process.stdout;
+  const stderr = options.stderr ?? process.stderr;
+  const requestedExtensionId = stringFlag(flags, "extension-id") ?? stringFlag(flags, "id");
+  const extensionId = requestedExtensionId ?? GUARDIAN_HALO_CHROME_EXTENSION_ID;
+  if (requestedExtensionId && !isValidChromeExtensionId(requestedExtensionId)) {
+    write(
+      stderr,
+      "Invalid --extension-id. Chrome extension ids must be 32 lowercase letters from a-p.\n"
+    );
+    return 1;
+  }
+  const install = JSON.parse(await installGuardian(/* @__PURE__ */ new Map([["json", true]]), options));
+  let launchOutput = "";
+  const launchFlags = new Map([
+    ["json", true],
+    ["print", true],
+    ...copyStringFlags(flags, ["host", "port"])
+  ]);
+  const launchExitCode = await runLaunchCommand(launchFlags, {
+    ...options,
+    stdout: {
+      write: (chunk) => {
+        launchOutput += chunk.toString();
+        return true;
+      }
+    },
+    stderr
+  });
+  if (launchExitCode !== 0) {
+    return launchExitCode;
+  }
+  const launch = JSON.parse(launchOutput);
+  const helperFlags = new Map([
+    ["json", true],
+    ["force", true],
+    ["extension-id", extensionId],
+    ...copyStringFlags(flags, ["browser", "target"])
+  ]);
+  if ((options.platform ?? process.platform) === "win32") {
+    helperFlags.set("write-registry", true);
+    helperFlags.set("yes", true);
+  }
+  let helperOutput = "";
+  let helperError = "";
+  const helperExitCode = await runExtensionCommand(["native-host", "install"], helperFlags, {
+    ...options,
+    stdout: {
+      write: (chunk) => {
+        helperOutput += chunk.toString();
+        return true;
+      }
+    },
+    stderr: {
+      write: (chunk) => {
+        helperError += chunk.toString();
+        return true;
+      }
+    }
+  });
+  if (helperExitCode !== 0) {
+    write(
+      stderr,
+      helperError.trim() ? `${helperError.trim()}
+` : "Guardian could not prepare the browser connection. Run guardian setup, then try again.\n"
+    );
+    return helperExitCode;
+  }
+  const helper = JSON.parse(helperOutput);
+  const result = {
+    schema_version: "contextecf/project-guardian-browser-connect/v1",
+    success: true,
+    extensionId,
+    defaultExtensionId: GUARDIAN_HALO_CHROME_EXTENSION_ID,
+    install: {
+      profileDir: install.profileDir,
+      tokenCreated: install.tokenCreated,
+      tokenPrinted: false
+    },
+    localGuardian: {
+      running: true,
+      opened: launch.opened,
+      reusedExistingDaemon: launch.reusedExistingDaemon,
+      daemonUrl: launch.daemonUrl,
+      controlTowerUrl: launch.controlTowerUrl,
+      pid: launch.pid,
+      healthStatus: launch.healthStatus
+    },
+    browser: helper.browser,
+    helperInstalled: true,
+    helperStatus: {
+      hostName: helper.hostName,
+      manifestPath: helper.manifestPath,
+      allowedOrigins: helper.allowedOrigins,
+      tokenPrinted: helper.tokenPrinted
+    },
+    tokenPrinted: false,
+    nextCommands: ["Open ContextECF Halo and click Connect", "guardian open", "guardian status"],
+    supportCommands: ["guardian extension open-setup --print", "guardian pair --json"]
+  };
+  write(
+    stdout,
+    flags.has("json") ? `${JSON.stringify(result, null, 2)}
+` : `${[
+      "Guardian browser connection is ready.",
+      `Local Guardian: ${result.localGuardian.daemonUrl}${result.localGuardian.reusedExistingDaemon ? " (already running)" : ""}`,
+      `Browser: ${result.browser}`,
+      "Next: open ContextECF Halo and click Connect.",
+      "No setup code needed.",
+      "Token printed: no"
+    ].join("\n")}
+`
+  );
+  return 0;
+}
 async function runExtensionOpenSetupCommand(flags, options) {
   const stdout = options.stdout ?? process.stdout;
   const stderr = options.stderr ?? process.stderr;
@@ -19177,8 +19464,9 @@ async function runExtensionOpenSetupCommand(flags, options) {
     write(stderr, "Guardian is not installed. Run guardian install first.\n");
     return 1;
   }
-  const extensionId = stringFlag(flags, "extension-id") ?? stringFlag(flags, "id");
-  if (extensionId && !isValidChromeExtensionId(extensionId)) {
+  const requestedExtensionId = stringFlag(flags, "extension-id") ?? stringFlag(flags, "id");
+  const extensionId = requestedExtensionId ?? GUARDIAN_HALO_CHROME_EXTENSION_ID;
+  if (requestedExtensionId && !isValidChromeExtensionId(requestedExtensionId)) {
     write(
       stderr,
       "Invalid --extension-id. Chrome extension ids must be 32 lowercase letters from a-p.\n"
@@ -19192,22 +19480,24 @@ async function runExtensionOpenSetupCommand(flags, options) {
     return 1;
   }
   const setupUrl = buildControlTowerSetupUrl(resolved.url);
-  const nativeHostCommand = `guardian extension native-host install --extension-id=${extensionId ?? "<browser-extension-id>"}`;
+  const nativeHostCommand = `guardian extension native-host install --extension-id=${extensionId}`;
   const result = {
     schema_version: "contextecf/project-guardian-extension-setup/v1",
     success: true,
     opened: !flags.has("print"),
     controlTowerUrl: resolved.url,
     setupUrl,
-    extensionId: extensionId ?? null,
+    extensionId,
+    defaultExtensionId: GUARDIAN_HALO_CHROME_EXTENSION_ID,
     tokenPrinted: false,
     nextCommands: [
       "guardian launch",
-      "guardian daemon pair --json",
       nativeHostCommand,
-      "guardian extension native-host status"
+      "guardian extension native-host status",
+      "Open ContextECF Halo and click Connect"
     ],
-    note: extensionId ? "Guardian browser setup opened with a concrete native host install command." : "Guardian browser setup opened with placeholder extension-id guidance."
+    advancedCommands: ["guardian pair --json"],
+    note: extensionId ? "Guardian browser setup opened for ContextECF Halo." : "Guardian browser setup opened."
   };
   if (result.opened) {
     const opener = options.openUrl ?? ((url2) => openUrlInDefaultBrowser(url2, options));
@@ -19219,7 +19509,8 @@ async function runExtensionOpenSetupCommand(flags, options) {
 ` : `${[
       result.opened ? `Opening Guardian browser setup: ${setupUrl}` : `Guardian browser setup: ${setupUrl}`,
       "Token printed: no",
-      `Next: ${result.nextCommands.join("; ")}`
+      `Next: ${result.nextCommands.join("; ")}`,
+      `Advanced fallback: ${result.advancedCommands.join("; ")}`
     ].join("\n")}
 `
   );
@@ -19746,7 +20037,7 @@ function buildGuardianServiceArtifact(input2) {
   if (input2.platform === "systemd") {
     return `${[
       "[Unit]",
-      "Description=Project Guardian local daemon",
+      "Description=Project Guardian Local Guardian background service",
       "After=network.target",
       "",
       "[Service]",
@@ -19765,7 +20056,7 @@ function buildGuardianServiceArtifact(input2) {
     '<?xml version="1.0" encoding="UTF-16"?>',
     '<Task version="1.4" xmlns="http://schemas.microsoft.com/windows/2004/02/mit/task">',
     "  <RegistrationInfo>",
-    "    <Description>Project Guardian local daemon</Description>",
+    "    <Description>Project Guardian Local Guardian background service</Description>",
     "  </RegistrationInfo>",
     "  <Triggers>",
     "    <LogonTrigger><Enabled>true</Enabled></LogonTrigger>",
@@ -20747,6 +21038,59 @@ async function runReceiptsCommand(argv, flags, options) {
   write(stdout, await verifyReceipts(flags, options));
   return 0;
 }
+async function runCoachCommand(argv, flags, options) {
+  const subcommand = argv[0] ?? "options";
+  const stdout = options.stdout ?? process.stdout;
+  const stderr = options.stderr ?? process.stderr;
+  if (subcommand === "options" || subcommand === "catalog") {
+    write(stdout, renderGuardianPromptCardOptions(buildGuardianPromptCardOptions(), flags));
+    return 0;
+  }
+  write(stderr, `Unknown Guardian coach command: ${subcommand}
+`);
+  return 1;
+}
+function buildGuardianPromptCardOptions() {
+  return {
+    schema_version: "contextecf/project-guardian-prompt-card-options/v1",
+    cli_version: GUARDIAN_CLI_VERSION,
+    status: "catalog_ready",
+    summary: "Guardian prompt cards keep the user in control: warnings and safer rewrites can be sent as-is, while hard blocks cannot.",
+    catalog: GUARDIAN_PROMPT_CARD_OPTIONS_CATALOG,
+    rules: [
+      "Show a clear reason before asking the user to decide.",
+      "Offer Send as-is for warnings and safer rewrites when policy allows override.",
+      "Never offer Send as-is for hard blocks or unavailable Local Guardian checks.",
+      "Keep Edit prompt available as the safe path for every visible send-time card.",
+      "Do not store raw sensitive prompt text in this catalog or CLI output."
+    ],
+    tokenPrinted: false,
+    rawContentIncluded: false
+  };
+}
+function renderGuardianPromptCardOptions(result, flags) {
+  if (flags.has("json")) {
+    return `${JSON.stringify(result, null, 2)}
+`;
+  }
+  return `${[
+    "Guardian Prompt Card Options",
+    result.summary,
+    "",
+    "Programmed cards:",
+    ...result.catalog.map((entry) => {
+      const visibleActions = entry.actions.filter((action) => action.visibleToUser).map((action) => action.label);
+      const labels = visibleActions.length > 0 ? visibleActions.join(", ") : "Prompt sends automatically";
+      return `- ${entry.cardStyle}: ${labels}`;
+    }),
+    "",
+    "Rules:",
+    ...result.rules.map((rule) => `- ${rule}`),
+    "Token printed: no",
+    "Raw prompt content included: no"
+  ].join("\n")}
+`;
+}
 async function runPolicyCommand(argv, flags, options) {
   const subcommand = argv[0] ?? "list";
   const stdout = options.stdout ?? process.stdout;
@@ -23166,22 +23510,32 @@ function openUrlInDefaultBrowser(url2, options = {}) {
     });
   });
 }
-var GUARDIAN_CLI_VERSION, GUARDIAN_PROFILE_SCHEMA_VERSION, GUARDIAN_NPM_PACKAGE_NAME, GUARDIAN_NPM_REGISTRY, GUARDIAN_GLOBAL_INSTALL_COMMAND, GUARDIAN_NPX_SETUP_COMMAND, GUARDIAN_FIRST_RUN_COMMAND, GUARDIAN_OPEN_CONTROL_TOWER_COMMAND, GUARDIAN_RELEASE_DISPATCH_WORKFLOW, GUARDIAN_RELEASE_REPOSITORY, GUARDIAN_DEFAULT_CONTROL_TOWER_URL, GUARDIAN_LOCAL_DATA_ENCRYPTION_KEY_ENV, GUARDIAN_LOCAL_DATA_ENCRYPTION_KEY_ID_ENV, GUARDIAN_SQLITE_PAGE_ENCRYPTION_KEY_ENV, GUARDIAN_SQLITE_PAGE_ENCRYPTION_KEY_ID_ENV, GUARDIAN_DESKTOP_ADAPTER_SIMULATE_OPEN_ENV, GUARDIAN_DESKTOP_URL_OPEN_ADAPTER_ID, GUARDIAN_DESKTOP_URL_OPEN_ADAPTER_VERSION, GUARDIAN_DESKTOP_URL_OPEN_ADAPTER_PROOF_SCHEMA_VERSION, GUARDIAN_SERVICE_PROOF_SCHEMA_VERSION, GUARDIAN_OS_KEY_STORAGE_PROOF_SCHEMA_VERSION, GUARDIAN_WINDOWS_NATIVE_HOST_REGISTRY_PROOF_SCHEMA_VERSION, PERSONAL_FABRIC_CONTRACTS_SCHEMA_VERSION2, PROMPT_COACH_MODES, DEFAULT_PROMPT_COACH_DAILY_SOFT_CARD_LIMIT, GUARDIAN_POSTURE_PROFILE_IDS, GUARDIAN_POSTURE_PROFILE_CATALOG, GUARDIAN_POLICY_PACK_MARKETPLACE_CATALOG, GUARDIAN_PROVIDER_IDS, GUARDIAN_SOURCE_TYPES, GUARDIAN_NOT_PROVEN_PRODUCTION_GATES, DEFAULT_POLICY_PACKS, GUARDIAN_BRIDGE_CONFIG_STORAGE_KEY, GUARDIAN_BRIDGE_TOKEN_STORAGE_KEY, GUARDIAN_BRIDGE_CONFIG_SCHEMA_VERSION, GUARDIAN_NATIVE_HOST_NAME, MCP_CLIENTS, NATIVE_HOST_BROWSERS, HELP_TEXT, normalizeGuardianPreferences, GUARDIAN_DATA_FILE_NAMES, GUARDIAN_DATA_DIR_NAMES, GUARDIAN_MIN_SUPPORTED_NODE_VERSION;
+var GUARDIAN_CLI_VERSION, GUARDIAN_PROFILE_SCHEMA_VERSION, GUARDIAN_NPM_PACKAGE_NAME, GUARDIAN_NPM_REGISTRY, GUARDIAN_DEFAULT_NPM_PUBLISH_AUTH, GUARDIAN_GLOBAL_INSTALL_COMMAND, GUARDIAN_NPX_SETUP_COMMAND, GUARDIAN_FIRST_RUN_COMMAND, GUARDIAN_OPEN_CONTROL_TOWER_COMMAND, GUARDIAN_HALO_CHROME_EXTENSION_ID, GUARDIAN_HALO_CHROME_WEB_STORE_LISTING_URL, GUARDIAN_RELEASE_DISPATCH_WORKFLOW, GUARDIAN_RELEASE_REPOSITORY, GUARDIAN_CHROME_WEB_STORE_API_SECRET_NAMES, GUARDIAN_DEFAULT_CONTROL_TOWER_URL, GUARDIAN_LOCAL_DATA_ENCRYPTION_KEY_ENV, GUARDIAN_LOCAL_DATA_ENCRYPTION_KEY_ID_ENV, GUARDIAN_SQLITE_PAGE_ENCRYPTION_KEY_ENV, GUARDIAN_SQLITE_PAGE_ENCRYPTION_KEY_ID_ENV, GUARDIAN_DESKTOP_ADAPTER_SIMULATE_OPEN_ENV, GUARDIAN_DESKTOP_URL_OPEN_ADAPTER_ID, GUARDIAN_DESKTOP_URL_OPEN_ADAPTER_VERSION, GUARDIAN_DESKTOP_URL_OPEN_ADAPTER_PROOF_SCHEMA_VERSION, GUARDIAN_SERVICE_PROOF_SCHEMA_VERSION, GUARDIAN_OS_KEY_STORAGE_PROOF_SCHEMA_VERSION, GUARDIAN_WINDOWS_NATIVE_HOST_REGISTRY_PROOF_SCHEMA_VERSION, PERSONAL_FABRIC_CONTRACTS_SCHEMA_VERSION2, PROMPT_COACH_MODES, DEFAULT_PROMPT_COACH_DAILY_SOFT_CARD_LIMIT, GUARDIAN_PROMPT_CARD_OPTIONS_CATALOG, GUARDIAN_POSTURE_PROFILE_IDS, GUARDIAN_POSTURE_PROFILE_CATALOG, GUARDIAN_POLICY_PACK_MARKETPLACE_CATALOG, GUARDIAN_PROVIDER_IDS, GUARDIAN_SOURCE_TYPES, GUARDIAN_NOT_PROVEN_PRODUCTION_GATES, DEFAULT_POLICY_PACKS, GUARDIAN_BRIDGE_CONFIG_STORAGE_KEY, GUARDIAN_BRIDGE_TOKEN_STORAGE_KEY, GUARDIAN_BRIDGE_CONFIG_SCHEMA_VERSION, GUARDIAN_NATIVE_HOST_NAME, MCP_CLIENTS, NATIVE_HOST_BROWSERS, HELP_TEXT, ADVANCED_HELP_TEXT, normalizeGuardianPreferences, GUARDIAN_DATA_FILE_NAMES, GUARDIAN_DATA_DIR_NAMES, GUARDIAN_MIN_SUPPORTED_NODE_VERSION;
 var init_runtime = __esm({
   "packages/guardian-cli/src/runtime.ts"() {
     "use strict";
     init_src();
     init_src2();
-    GUARDIAN_CLI_VERSION = "0.1.6";
+    GUARDIAN_CLI_VERSION = "0.1.9";
     GUARDIAN_PROFILE_SCHEMA_VERSION = "contextecf/project-guardian-profile/v1";
     GUARDIAN_NPM_PACKAGE_NAME = "@contextecf/guardian-cli";
     GUARDIAN_NPM_REGISTRY = "https://registry.npmjs.org/";
+    GUARDIAN_DEFAULT_NPM_PUBLISH_AUTH = "trusted_publisher";
     GUARDIAN_GLOBAL_INSTALL_COMMAND = `npm install -g ${GUARDIAN_NPM_PACKAGE_NAME}`;
     GUARDIAN_NPX_SETUP_COMMAND = `npx ${GUARDIAN_NPM_PACKAGE_NAME}@latest setup`;
     GUARDIAN_FIRST_RUN_COMMAND = "guardian setup";
     GUARDIAN_OPEN_CONTROL_TOWER_COMMAND = "guardian open";
+    GUARDIAN_HALO_CHROME_EXTENSION_ID = "dopkdppbiakhbglhgjfacfdhpheejkck";
+    GUARDIAN_HALO_CHROME_WEB_STORE_LISTING_URL = `https://chromewebstore.google.com/detail/contextecf-halo/${GUARDIAN_HALO_CHROME_EXTENSION_ID}`;
     GUARDIAN_RELEASE_DISPATCH_WORKFLOW = "guardian-release-dispatch.yml";
     GUARDIAN_RELEASE_REPOSITORY = "Intelligent-Context-AI-Inc/ContextECF-GITHUB";
+    GUARDIAN_CHROME_WEB_STORE_API_SECRET_NAMES = [
+      "CHROME_WEB_STORE_CLIENT_ID",
+      "CHROME_WEB_STORE_CLIENT_SECRET",
+      "CHROME_WEB_STORE_REFRESH_TOKEN",
+      "CHROME_WEB_STORE_PUBLISHER_ID",
+      "CHROME_WEB_STORE_EXTENSION_ID"
+    ];
     GUARDIAN_DEFAULT_CONTROL_TOWER_URL = "http://127.0.0.1:4317/control-tower";
     GUARDIAN_LOCAL_DATA_ENCRYPTION_KEY_ENV = "GUARDIAN_LOCAL_DATA_ENCRYPTION_KEY";
     GUARDIAN_LOCAL_DATA_ENCRYPTION_KEY_ID_ENV = "GUARDIAN_LOCAL_DATA_ENCRYPTION_KEY_ID";
@@ -23197,6 +23551,195 @@ var init_runtime = __esm({
     PERSONAL_FABRIC_CONTRACTS_SCHEMA_VERSION2 = "contextecf/personal-fabric-contracts/v1";
     PROMPT_COACH_MODES = ["off", "quiet", "balanced", "hands_on"];
     DEFAULT_PROMPT_COACH_DAILY_SOFT_CARD_LIMIT = 6;
+    GUARDIAN_PROMPT_CARD_OPTIONS_CATALOG = [
+      {
+        disposition: "allow",
+        cardStyle: "No visible card",
+        whenShown: "Local Guardian approves the prompt before it leaves the browser.",
+        actions: [
+          {
+            id: "auto-send",
+            label: "Send prompt",
+            role: "none",
+            sendsPrompt: true,
+            sendsRevisedPrompt: false,
+            requiresConfirmation: false,
+            visibleToUser: false
+          }
+        ],
+        sendAsIsAllowed: true,
+        hardBlock: false,
+        receiptExpected: true
+      },
+      {
+        disposition: "warn",
+        cardStyle: "Quick check",
+        whenShown: "Guardian found a low or medium-risk concern, but policy still allows the user to continue.",
+        actions: [
+          {
+            id: "send-as-is",
+            label: "Send as-is",
+            role: "allowed_override",
+            sendsPrompt: true,
+            sendsRevisedPrompt: false,
+            requiresConfirmation: false,
+            visibleToUser: true
+          },
+          {
+            id: "edit-prompt",
+            label: "Edit prompt",
+            role: "safe_escape",
+            sendsPrompt: false,
+            sendsRevisedPrompt: false,
+            requiresConfirmation: false,
+            visibleToUser: true
+          }
+        ],
+        sendAsIsAllowed: true,
+        hardBlock: false,
+        receiptExpected: true
+      },
+      {
+        disposition: "rewrite",
+        cardStyle: "Safer version ready",
+        whenShown: "Guardian prepared a safer prompt, usually by masking sensitive text or narrowing scope.",
+        actions: [
+          {
+            id: "send-revised-prompt",
+            label: "Send revised prompt",
+            role: "recommended",
+            sendsPrompt: true,
+            sendsRevisedPrompt: true,
+            requiresConfirmation: false,
+            visibleToUser: true
+          },
+          {
+            id: "send-as-is",
+            label: "Send as-is",
+            role: "allowed_override",
+            sendsPrompt: true,
+            sendsRevisedPrompt: false,
+            requiresConfirmation: false,
+            visibleToUser: true
+          },
+          {
+            id: "edit-prompt",
+            label: "Edit prompt",
+            role: "safe_escape",
+            sendsPrompt: false,
+            sendsRevisedPrompt: false,
+            requiresConfirmation: false,
+            visibleToUser: true
+          }
+        ],
+        sendAsIsAllowed: true,
+        hardBlock: false,
+        receiptExpected: true
+      },
+      {
+        disposition: "confirm",
+        cardStyle: "Review needed",
+        whenShown: "Guardian needs deliberate approval before sending higher-risk content or action requests.",
+        actions: [
+          {
+            id: "approve-and-send",
+            label: "Approve and send",
+            role: "recommended",
+            sendsPrompt: true,
+            sendsRevisedPrompt: false,
+            requiresConfirmation: true,
+            visibleToUser: true
+          },
+          {
+            id: "edit-prompt",
+            label: "Edit prompt",
+            role: "safe_escape",
+            sendsPrompt: false,
+            sendsRevisedPrompt: false,
+            requiresConfirmation: false,
+            visibleToUser: true
+          }
+        ],
+        sendAsIsAllowed: false,
+        hardBlock: false,
+        receiptExpected: true
+      },
+      {
+        disposition: "block",
+        cardStyle: "Blocked",
+        whenShown: "The prompt violates policy, contains protected secrets, or targets a denied destination.",
+        actions: [
+          {
+            id: "edit-prompt",
+            label: "Edit prompt",
+            role: "safe_escape",
+            sendsPrompt: false,
+            sendsRevisedPrompt: false,
+            requiresConfirmation: false,
+            visibleToUser: true
+          }
+        ],
+        sendAsIsAllowed: false,
+        hardBlock: true,
+        receiptExpected: true
+      },
+      {
+        disposition: "unavailable",
+        cardStyle: "Setup needed",
+        whenShown: "The browser cannot reach Local Guardian, so the prompt is held back.",
+        actions: [
+          {
+            id: "edit-prompt",
+            label: "Edit prompt",
+            role: "safe_escape",
+            sendsPrompt: false,
+            sendsRevisedPrompt: false,
+            requiresConfirmation: false,
+            visibleToUser: true
+          }
+        ],
+        sendAsIsAllowed: false,
+        hardBlock: false,
+        receiptExpected: false
+      },
+      {
+        disposition: "live_sensitive_warning",
+        cardStyle: "Early heads-up",
+        whenShown: "Guardian notices sensitive text while the user is typing, before the formal send-time check.",
+        actions: [
+          {
+            id: "use-placeholder",
+            label: "Use placeholder",
+            role: "recommended",
+            sendsPrompt: false,
+            sendsRevisedPrompt: true,
+            requiresConfirmation: false,
+            visibleToUser: true
+          },
+          {
+            id: "send-as-is",
+            label: "Send as-is",
+            role: "allowed_override",
+            sendsPrompt: true,
+            sendsRevisedPrompt: false,
+            requiresConfirmation: false,
+            visibleToUser: true
+          },
+          {
+            id: "keep-drafting",
+            label: "Keep drafting",
+            role: "safe_escape",
+            sendsPrompt: false,
+            sendsRevisedPrompt: false,
+            requiresConfirmation: false,
+            visibleToUser: true
+          }
+        ],
+        sendAsIsAllowed: true,
+        hardBlock: false,
+        receiptExpected: false
+      }
+    ];
     GUARDIAN_POSTURE_PROFILE_IDS = [
       "calm",
       "balanced",
@@ -23689,10 +24232,49 @@ Open Control Tower:
   ${GUARDIAN_OPEN_CONTROL_TOWER_COMMAND}
   start aliases: guardian launch, guardian tower, guardian control-tower
 
+Everyday commands:
+  guardian --version
+  guardian setup
+  guardian launch
+  guardian open
+  guardian status
+  guardian doctor
+  guardian connect
+  guardian coach options
+  guardian policy list
+  guardian marketplace list
+  guardian posture list
+  guardian privacy show
+
+Recommended first run:
+  ${GUARDIAN_GLOBAL_INSTALL_COMMAND}
+  guardian setup
+  Open ContextECF Halo and click Connect.
+  guardian open
+
+Support and developer commands:
+  guardian help --advanced
+
+Defaults are local-first: raw capture, cloud sync, learning graph, and app autopilot stay off.`;
+    ADVANCED_HELP_TEXT = `guardian \u2014 Project Guardian Personal Context Fabric
+
+Global install:
+  ${GUARDIAN_GLOBAL_INSTALL_COMMAND}
+
+First run:
+  ${GUARDIAN_FIRST_RUN_COMMAND}
+
+No global install:
+  ${GUARDIAN_NPX_SETUP_COMMAND}
+
+Open Control Tower:
+  ${GUARDIAN_OPEN_CONTROL_TOWER_COMMAND}
+  start aliases: guardian launch, guardian tower, guardian control-tower
+
 Usage:
   guardian --version
   guardian version [--json]
-  guardian setup [--json] [--open] [--print] [--host=127.0.0.1] [--port=4317] [--no-launch] [--no-mcp] [--extension-id=<chrome-extension-id>]
+  guardian setup [--json] [--open] [--print] [--host=127.0.0.1] [--port=4317] [--no-launch] [--no-mcp] [--no-browser-connection] [--extension-id=<chrome-extension-id>]
   guardian install [--json]
   guardian doctor [--json]
   guardian readiness [--json] [--strict]
@@ -23700,7 +24282,7 @@ Usage:
   guardian release flow --version=<semver> [--json]
   guardian release verify --version=<semver> [--json]
   guardian release paste --version=<semver> [--json]
-  guardian release command --version=<semver> [--publish|--dry-run=false] [--channels=all|npm|browser|evidence] [--run-docker-smoke=true|false] [--json]
+  guardian release command --version=<semver> [--publish|--dry-run=false] [--channels=all|npm|browser|evidence] [--run-docker-smoke=true|false] [--publish-auth=token|trusted_publisher] [--browser-store-publish=manual|api] [--json]
   guardian release secrets [--json]
   guardian release browser-store [--json]
   guardian open [--json] [--print] [--url=http://127.0.0.1:<port>]
@@ -23708,6 +24290,8 @@ Usage:
   guardian start [--json] [--host=127.0.0.1] [--port=4317]
   guardian launch|tower|control-tower [--json] [--open] [--print] [--host=127.0.0.1] [--port=4317]
   guardian stop [--json] [--url=http://127.0.0.1:<port>/control-tower]
+  guardian pair [--json]
+  guardian connect [--json] [--browser=chrome|chromium|edge] [--extension-id=<chrome-extension-id>] [--host=127.0.0.1] [--port=4317]
   guardian service install [--json] [--platform=auto|launchd|systemd|windows-task-scheduler] [--force]
   guardian service status [--json]
   guardian service uninstall [--yes] [--json]
@@ -23716,6 +24300,7 @@ Usage:
   guardian key-store uninstall [--yes] [--json]
   guardian daemon serve [--host=127.0.0.1] [--port=4317]
   guardian daemon pair [--json]
+  guardian extension connect [--json] [--browser=chrome|chromium|edge] [--extension-id=<chrome-extension-id>]
   guardian extension open-setup [--json] [--print] [--url=http://127.0.0.1:<port>/control-tower] [--extension-id=<chrome-extension-id>]
   guardian extension native-host install --extension-id=<chrome-extension-id> [--browser=chrome|chromium|edge] [--target=/path/to/manifest] [--force] [--write-registry --yes] [--json]
   guardian extension native-host status [--browser=chrome|chromium|edge] [--target=/path/to/manifest] [--json]
@@ -23731,6 +24316,7 @@ Usage:
   guardian privacy mode on [--json]
   guardian mcp install [--json] [--client=generic|codex|claude-desktop|cursor|all] [--write] [--target=/path/to/config] [--force]
   guardian mcp serve
+  guardian coach options [--json]
   guardian policy list [--json]
   guardian policy enable <pack-id> [--json]
   guardian policy disable <pack-id> [--json]
@@ -23940,7 +24526,7 @@ function detectRisk(promptManifest, policyPacks) {
     risks.add("healthcare_data");
     matchedPolicyRefs.push("guardian:builtin:healthcare-data");
   }
-  if (WORK_PATTERN.test(prompt)) {
+  if (containsSensitiveWorkData(prompt)) {
     risks.add("work_data");
     matchedPolicyRefs.push("guardian:builtin:work-data");
   }
@@ -23952,7 +24538,7 @@ function detectRisk(promptManifest, policyPacks) {
     risks.add("destructive_action");
     matchedPolicyRefs.push("guardian:builtin:destructive-action");
   }
-  if (promptManifest.source_permissions_snapshot.length === 0 && /\b(this|that|them|it|latest)\b/i.test(prompt)) {
+  if (shouldOfferContextHelp(promptManifest, policyPacks)) {
     risks.add("insufficient_context");
     matchedPolicyRefs.push("guardian:builtin:context-sufficiency");
   }
@@ -24067,11 +24653,12 @@ function buildCoachCard(disposition, riskReport, policyPacks, learningSignals) {
     return void 0;
   }
   const fullSsnRisk = hasFullSsnRisk(riskReport.matched_policy_refs);
+  const riskCopy = buildPromptCoachRiskCopy(riskReport, fullSsnRisk);
   const card = {
     card_id: `coach:${riskReport.risk_report_id}`,
     intervention_level: coachDecision.intervention_level,
-    title: disposition === "block" ? "Guardian blocked this prompt" : disposition === "confirm" ? "Guardian needs your confirmation" : coachDecision.intervention_level === "soft_tag_along" ? "Guardian found useful context" : fullSsnRisk ? "Guardian found an identity number" : "Guardian can improve this prompt",
-    body: disposition === "confirm" ? "This prompt includes higher-risk content and needs confirmation before it leaves your machine." : coachDecision.intervention_level === "soft_tag_along" ? "This prompt may work better with a little more local context attached first." : fullSsnRisk ? "Guardian can mask the Social Security number before anything leaves your machine." : "Guardian found context or privacy improvements that may make this prompt safer and more useful.",
+    title: disposition === "block" ? "Guardian blocked this prompt" : disposition === "confirm" ? "Guardian needs your confirmation" : coachDecision.intervention_level === "soft_tag_along" ? "Guardian found useful context" : riskCopy.title,
+    body: disposition === "confirm" ? `${riskCopy.body} Please review before it leaves your machine.` : coachDecision.intervention_level === "soft_tag_along" ? "This prompt may work better with a little more local context attached first." : riskCopy.body,
     recommended_choice_id: disposition === "confirm" ? "confirm-after-review" : coachDecision.intervention_level === "soft_tag_along" ? "add-context" : "use-guardian-version",
     choices: disposition === "confirm" ? [
       {
@@ -24096,8 +24683,8 @@ function buildCoachCard(disposition, riskReport, policyPacks, learningSignals) {
         resulting_disposition: "warn"
       },
       {
-        choice_id: "continue",
-        label: "Continue",
+        choice_id: "send-as-is",
+        label: "Send as-is",
         description: "Send without adding context.",
         resulting_disposition: "allow"
       }
@@ -24114,6 +24701,12 @@ function buildCoachCard(disposition, riskReport, policyPacks, learningSignals) {
         label: "Cancel",
         description: "Do not send this prompt.",
         resulting_disposition: "block"
+      },
+      {
+        choice_id: "send-as-is",
+        label: "Send as-is",
+        description: "Send the original prompt after reviewing the identity-number risk.",
+        resulting_disposition: "allow"
       }
     ] : [
       {
@@ -24134,6 +24727,60 @@ function buildCoachCard(disposition, riskReport, policyPacks, learningSignals) {
   const parsedCard = PromptCoachCardSchema.parse(card);
   return shouldQuietPromptCoachCard(parsedCard, disposition, learningSignals) ? void 0 : parsedCard;
 }
+function buildPromptCoachRiskCopy(riskReport, fullSsnRisk) {
+  if (fullSsnRisk) {
+    return {
+      title: "Guardian found an identity number",
+      body: "Guardian can mask the Social Security number before anything leaves your machine."
+    };
+  }
+  if (riskReport.detected_risks.includes("secret")) {
+    return {
+      title: "Guardian found a secret or credential",
+      body: "Guardian can remove tokens, keys, or passwords before this prompt leaves your machine."
+    };
+  }
+  if (riskReport.detected_risks.includes("financial_data")) {
+    return {
+      title: "Guardian found financial information",
+      body: "Guardian can mask financial details or help you keep them out of the prompt."
+    };
+  }
+  if (riskReport.detected_risks.includes("healthcare_data")) {
+    return {
+      title: "Guardian found health information",
+      body: "Guardian can help remove identifying health details before you send this prompt."
+    };
+  }
+  if (riskReport.detected_risks.includes("prompt_injection")) {
+    return {
+      title: "Guardian found prompt-injection language",
+      body: "Guardian noticed instructions that may try to override your intended task or safety rules."
+    };
+  }
+  if (riskReport.detected_risks.includes("unsafe_destination")) {
+    return {
+      title: "Guardian found an unfamiliar destination",
+      body: "Guardian noticed this prompt may be going somewhere that needs an extra check."
+    };
+  }
+  if (riskReport.detected_risks.includes("pii")) {
+    return {
+      title: "Guardian found personal information",
+      body: "Guardian can mask personal details before this prompt leaves your machine."
+    };
+  }
+  if (riskReport.detected_risks.includes("work_data")) {
+    return {
+      title: "Guardian found work or customer data",
+      body: "Guardian can help keep private work details out of the prompt or replace them with placeholders."
+    };
+  }
+  return {
+    title: "Guardian can improve this prompt",
+    body: "Guardian found context or privacy improvements that may make this prompt safer and more useful."
+  };
+}
 function shouldQuietPromptCoachCard(card, disposition, learningSignals) {
   if (!learningSignals || disposition === "block" || disposition === "confirm") {
     return false;
@@ -24218,6 +24865,19 @@ function containsFullSsn(prompt) {
   SSN_PATTERN.lastIndex = 0;
   return SSN_PATTERN.test(prompt);
 }
+function containsSensitiveWorkData(prompt) {
+  return WORK_SENSITIVE_PATTERN.test(prompt) || WORK_ENTITY_CONTEXT_PATTERN.test(prompt) || WORK_CONTEXT_ENTITY_PATTERN.test(prompt);
+}
+function shouldOfferContextHelp(promptManifest, policyPacks) {
+  if (promptManifest.source_permissions_snapshot.length > 0) {
+    return false;
+  }
+  if (effectivePromptCoachMode(policyPacks) !== "hands_on") {
+    return false;
+  }
+  const prompt = promptManifest.prompt_text;
+  return CONTEXT_HELP_ACTION_PATTERN.test(prompt) && CONTEXT_HELP_REFERENCE_PATTERN.test(prompt);
+}
 function hasFullSsnRisk(policyRefs) {
   return policyRefs.includes("guardian:builtin:ssn-full-value");
 }
@@ -24316,7 +24976,7 @@ function digest2(value) {
 function isPresent(value) {
   return value !== void 0;
 }
-var DEFAULT_RISK_THRESHOLDS, POLICY_PACK_PRESET_VERSION, HIGH_RISK_TERMS, SECRET_PATTERNS, EMAIL_PATTERN, SSN_PATTERN, SSN_CONTEXT_PATTERN, FINANCIAL_PATTERN, HEALTHCARE_PATTERN, WORK_PATTERN, PROMPT_INJECTION_PATTERN, GUARDIAN_POLICY_PACK_PRESETS;
+var DEFAULT_RISK_THRESHOLDS, POLICY_PACK_PRESET_VERSION, HIGH_RISK_TERMS, SECRET_PATTERNS, EMAIL_PATTERN, SSN_PATTERN, SSN_CONTEXT_PATTERN, FINANCIAL_PATTERN, HEALTHCARE_PATTERN, WORK_SENSITIVE_PATTERN, WORK_ENTITY_CONTEXT_PATTERN, WORK_CONTEXT_ENTITY_PATTERN, PROMPT_INJECTION_PATTERN, CONTEXT_HELP_ACTION_PATTERN, CONTEXT_HELP_REFERENCE_PATTERN, GUARDIAN_POLICY_PACK_PRESETS;
 var init_src3 = __esm({
   "packages/personal-fabric-runtime/src/index.ts"() {
     "use strict";
@@ -24341,8 +25001,12 @@ var init_src3 = __esm({
     SSN_CONTEXT_PATTERN = /\b(ssn|social security(?: number)?)\b/i;
     FINANCIAL_PATTERN = /\b(bank|wire|routing number|account number|payroll|invoice|revenue|forecast|contract value|credit card)\b/i;
     HEALTHCARE_PATTERN = /\b(patient|diagnosis|medication|hipaa|medical record|prescription|clinical)\b/i;
-    WORK_PATTERN = /\b(contract|client|customer|salesforce|pipeline|renewal|board|employee|confidential)\b/i;
+    WORK_SENSITIVE_PATTERN = /\b(confidential|internal|non[-\s]?public|private|proprietary|salesforce|pipeline|renewal)\b/i;
+    WORK_ENTITY_CONTEXT_PATTERN = /\b(?:client|customer|employee|vendor|partner)\b[\s\S]{0,80}\b(?:contract|account|record|data|list|pricing|renewal|pipeline|payroll|confidential|private|proprietary)\b/i;
+    WORK_CONTEXT_ENTITY_PATTERN = /\b(?:contract|account|record|data|list|pricing|renewal|pipeline|payroll|confidential|private|proprietary)\b[\s\S]{0,80}\b(?:client|customer|employee|vendor|partner)\b/i;
     PROMPT_INJECTION_PATTERN = /\b(ignore previous instructions|system prompt|developer message|jailbreak|exfiltrate|bypass policy|reveal hidden)\b/i;
+    CONTEXT_HELP_ACTION_PATTERN = /\b(summarize|summarise|analyze|analyse|review|compare|extract|rewrite|improve|turn|convert|update)\b/i;
+    CONTEXT_HELP_REFERENCE_PATTERN = /\b(this|that|these|those|attached|uploaded|latest version|current version|file|document|deck|slide|email|thread|conversation|transcript|meeting|pdf)\b/i;
     GUARDIAN_POLICY_PACK_PRESETS = [
       createPolicyPackPreset({
         pack_id: "privacy-first",
@@ -25781,10 +26445,14 @@ __export(daemon_exports, {
   processGuardianControlTowerActivityRequest: () => processGuardianControlTowerActivityRequest,
   processGuardianControlTowerAppPermissionRequest: () => processGuardianControlTowerAppPermissionRequest,
   processGuardianControlTowerDataRequest: () => processGuardianControlTowerDataRequest,
+  processGuardianControlTowerMarketplaceRequest: () => processGuardianControlTowerMarketplaceRequest,
+  processGuardianControlTowerNoticeRequest: () => processGuardianControlTowerNoticeRequest,
   processGuardianControlTowerPolicyRequest: () => processGuardianControlTowerPolicyRequest,
   processGuardianControlTowerPreferenceRequest: () => processGuardianControlTowerPreferenceRequest,
+  processGuardianControlTowerPrimePackRequest: () => processGuardianControlTowerPrimePackRequest,
   processGuardianControlTowerProviderPermissionRequest: () => processGuardianControlTowerProviderPermissionRequest,
   processGuardianControlTowerSourcePermissionRequest: () => processGuardianControlTowerSourcePermissionRequest,
+  processGuardianControlTowerViewModelRequest: () => processGuardianControlTowerViewModelRequest,
   processGuardianDaemonHealthRequest: () => processGuardianDaemonHealthRequest,
   processGuardianDaemonStopRequest: () => processGuardianDaemonStopRequest,
   processGuardianLiveCoachEventRequest: () => processGuardianLiveCoachEventRequest,
@@ -25794,7 +26462,7 @@ __export(daemon_exports, {
 });
 import { createHash as createHash5, randomBytes as randomBytes3, timingSafeEqual } from "node:crypto";
 import { existsSync as existsSync2 } from "node:fs";
-import { mkdir as mkdir4, readFile as readFile4, readdir as readdir2, stat as stat3 } from "node:fs/promises";
+import { mkdir as mkdir4, readFile as readFile4, readdir as readdir2, stat as stat3, writeFile as writeFile2 } from "node:fs/promises";
 import { createServer } from "node:http";
 import path4 from "node:path";
 import { StringDecoder } from "node:string_decoder";
@@ -25920,12 +26588,22 @@ async function handleRequest(input2) {
     return;
   }
   if (input2.request.method === "GET" && (input2.request.url === "/control-tower" || input2.request.url === "/control-tower/")) {
-    const [receipts, searchGraph, learningEvents, localDataStatus, releaseDoctorStatus] = await Promise.all([
+    const [
+      receipts,
+      searchGraph,
+      learningEvents,
+      localDataStatus,
+      releaseDoctorStatus,
+      adminNotices,
+      marketplaceRequests
+    ] = await Promise.all([
       input2.store.listReceipts(),
       input2.store.searchGraph({ limit: CONTROL_TOWER_GRAPH_NODE_LIMIT }),
       input2.store.listLearningEvents({ limit: CONTROL_TOWER_LEARNING_EVENT_LIMIT }),
       buildControlTowerLocalDataStatus(input2.profile, input2.env),
-      buildControlTowerReleaseDoctorStatus(input2.profile, input2.env)
+      buildControlTowerReleaseDoctorStatus(input2.profile, input2.env),
+      readControlTowerAdminNotices(input2.profile.profile_dir),
+      readControlTowerMarketplaceRequests(input2.profile.profile_dir)
     ]);
     writeHtml(
       input2.response,
@@ -25936,7 +26614,9 @@ async function handleRequest(input2) {
         searchGraph,
         learningEvents,
         localDataStatus,
-        releaseDoctorStatus
+        releaseDoctorStatus,
+        adminNotices,
+        marketplaceRequests
       ),
       {
         controlToken: input2.controlToken
@@ -25945,10 +26625,45 @@ async function handleRequest(input2) {
     return;
   }
   const activityUrl = parseGuardianUrl(input2.request.url);
-  if (input2.request.method === "GET" && activityUrl?.pathname === "/v1/guardian/activity") {
-    const filter = parseActivityFilter(activityUrl.searchParams.get("filter") ?? "all");
-    const receipts = (await input2.store.listReceipts()).slice().sort((left, right) => right.created_at.localeCompare(left.created_at)).slice(0, CONTROL_TOWER_RECEIPT_LIMIT);
-    const result2 = processGuardianControlTowerActivityRequest(receipts, filter);
+  if (input2.request.method === "GET" && activityUrl?.pathname === "/v1/guardian/control-tower/view-model") {
+    const [
+      receipts,
+      searchGraph,
+      learningEvents,
+      localDataStatus,
+      releaseDoctorStatus,
+      adminNotices,
+      marketplaceRequests
+    ] = await Promise.all([
+      input2.store.listReceipts(),
+      input2.store.searchGraph({ limit: CONTROL_TOWER_GRAPH_NODE_LIMIT }),
+      input2.store.listLearningEvents({ limit: CONTROL_TOWER_LEARNING_EVENT_LIMIT }),
+      buildControlTowerLocalDataStatus(input2.profile, input2.env),
+      buildControlTowerReleaseDoctorStatus(input2.profile, input2.env),
+      readControlTowerAdminNotices(input2.profile.profile_dir),
+      readControlTowerMarketplaceRequests(input2.profile.profile_dir)
+    ]);
+    const result2 = processGuardianControlTowerViewModelRequest(
+      input2.profile,
+      receipts,
+      searchGraph,
+      learningEvents,
+      localDataStatus,
+      releaseDoctorStatus,
+      adminNotices,
+      marketplaceRequests
+    );
+    writeJson(input2.response, result2.statusCode, result2.body);
+    return;
+  }
+  if (input2.request.method === "GET" && activityUrl?.pathname === "/v1/guardian/activity") {
+    const filter = parseActivityFilter(activityUrl.searchParams.get("filter") ?? "all");
+    const [receipts, searchGraph] = await Promise.all([
+      input2.store.listReceipts(),
+      input2.store.searchGraph({ limit: 100 })
+    ]);
+    const recentReceipts = receipts.slice().sort((left, right) => right.created_at.localeCompare(left.created_at)).slice(0, CONTROL_TOWER_RECEIPT_LIMIT);
+    const result2 = processGuardianControlTowerActivityRequest(recentReceipts, filter, searchGraph);
     writeJson(input2.response, result2.statusCode, result2.body);
     return;
   }
@@ -25989,6 +26704,24 @@ async function handleRequest(input2) {
     writeAdminResponse(input2.response, result2.statusCode, result2.body, parsedBody2.redirect);
     return;
   }
+  if (input2.request.method === "POST" && input2.request.url === "/v1/guardian/admin/prime-pack") {
+    const parsedBody2 = await readGuardianDaemonAdminBody(input2.request);
+    if (!parsedBody2.ok) {
+      writeJson(input2.response, parsedBody2.statusCode, parsedBody2.body);
+      return;
+    }
+    const result2 = await processGuardianControlTowerPrimePackRequest({
+      profile: input2.profile,
+      token: input2.token,
+      controlToken: input2.controlToken,
+      suppliedToken: headerValue(input2.request, ADMIN_HEADER) ?? readCookieValue(input2.request, CONTROL_TOWER_COOKIE),
+      body: parsedBody2.body,
+      now: input2.now,
+      store: input2.store
+    });
+    writeAdminResponse(input2.response, result2.statusCode, result2.body, parsedBody2.redirect);
+    return;
+  }
   if (input2.request.method === "POST" && input2.request.url === "/v1/guardian/admin/preferences") {
     const parsedBody2 = await readGuardianDaemonAdminBody(input2.request);
     if (!parsedBody2.ok) {
@@ -26069,6 +26802,42 @@ async function handleRequest(input2) {
     writeAdminResponse(input2.response, result2.statusCode, result2.body, parsedBody2.redirect);
     return;
   }
+  if (input2.request.method === "POST" && input2.request.url === "/v1/guardian/admin/notice") {
+    const parsedBody2 = await readGuardianDaemonAdminBody(input2.request);
+    if (!parsedBody2.ok) {
+      writeJson(input2.response, parsedBody2.statusCode, parsedBody2.body);
+      return;
+    }
+    const result2 = await processGuardianControlTowerNoticeRequest({
+      profile: input2.profile,
+      token: input2.token,
+      controlToken: input2.controlToken,
+      suppliedToken: headerValue(input2.request, ADMIN_HEADER) ?? readCookieValue(input2.request, CONTROL_TOWER_COOKIE),
+      body: parsedBody2.body,
+      now: input2.now,
+      store: input2.store
+    });
+    writeAdminResponse(input2.response, result2.statusCode, result2.body, parsedBody2.redirect);
+    return;
+  }
+  if (input2.request.method === "POST" && input2.request.url === "/v1/guardian/admin/marketplace-request") {
+    const parsedBody2 = await readGuardianDaemonAdminBody(input2.request);
+    if (!parsedBody2.ok) {
+      writeJson(input2.response, parsedBody2.statusCode, parsedBody2.body);
+      return;
+    }
+    const result2 = await processGuardianControlTowerMarketplaceRequest({
+      profile: input2.profile,
+      token: input2.token,
+      controlToken: input2.controlToken,
+      suppliedToken: headerValue(input2.request, ADMIN_HEADER) ?? readCookieValue(input2.request, CONTROL_TOWER_COOKIE),
+      body: parsedBody2.body,
+      now: input2.now,
+      store: input2.store
+    });
+    writeAdminResponse(input2.response, result2.statusCode, result2.body, parsedBody2.redirect);
+    return;
+  }
   if (input2.request.method === "POST" && input2.request.url === "/v1/guardian/live-coach-event") {
     const suppliedToken2 = headerValue(input2.request, ADMIN_HEADER);
     const parsedBody2 = await readGuardianDaemonJsonBody(input2.request);
@@ -26127,7 +26896,7 @@ function processGuardianDaemonHealthRequest(input2) {
     }
   };
 }
-function processGuardianControlTowerActivityRequest(receipts, filterValue) {
+function processGuardianControlTowerActivityRequest(receipts, filterValue, searchGraph = { nodes: [], edges: [] }) {
   const filter = parseActivityFilter(filterValue);
   return {
     statusCode: 200,
@@ -26137,10 +26906,27 @@ function processGuardianControlTowerActivityRequest(receipts, filterValue) {
       filter,
       raw_content_included: false,
       token_printed: false,
-      activities: buildActivityItems(receipts, filter)
+      activities: buildActivityItems(receipts, filter, searchGraph)
     }
   };
 }
+function processGuardianControlTowerViewModelRequest(profile, receipts = [], searchGraph = { nodes: [], edges: [] }, learningEvents = [], localDataStatus = createEmptyControlTowerLocalDataStatus(profile), releaseDoctorStatus = createEmptyControlTowerReleaseDoctorStatus(
+  profile
+), adminNotices = [], marketplaceRequests = []) {
+  return {
+    statusCode: 200,
+    body: buildControlTowerViewModel(
+      profile,
+      receipts,
+      searchGraph,
+      learningEvents,
+      localDataStatus,
+      releaseDoctorStatus,
+      adminNotices,
+      marketplaceRequests
+    )
+  };
+}
 function processGuardianDaemonStopRequest(input2) {
   if (!isAuthorized(input2.token, input2.suppliedToken)) {
     return {
@@ -26206,6 +26992,105 @@ async function processGuardianControlTowerPolicyRequest(input2) {
     };
   }
 }
+async function processGuardianControlTowerPrimePackRequest(input2) {
+  if (!isAdminAuthorized(input2)) {
+    return {
+      statusCode: 401,
+      body: {
+        ok: false,
+        error: "unauthorized"
+      }
+    };
+  }
+  const action = parsePrimePackAction(input2.body.action);
+  if (!action) {
+    return {
+      statusCode: 400,
+      body: {
+        ok: false,
+        error: "invalid_prime_pack_action"
+      }
+    };
+  }
+  const inputs = {
+    sensitive_terms: parsePrimePackEntries([
+      input2.body.sensitiveTerms,
+      parsePrimePackImportEntries(input2.body.importContent, "sensitive_terms")
+    ]),
+    approved_domains: parsePrimePackEntries(
+      [
+        input2.body.approvedDomains,
+        parsePrimePackImportEntries(input2.body.importContent, "approved_domains")
+      ],
+      { lowercase: true }
+    ),
+    blocked_destinations: parsePrimePackEntries(
+      [
+        input2.body.blockedDestinations,
+        parsePrimePackImportEntries(input2.body.importContent, "blocked_destinations")
+      ],
+      {
+        lowercase: true
+      }
+    ),
+    escalation_phrases: parsePrimePackEntries([
+      input2.body.escalationPhrases,
+      parsePrimePackImportEntries(input2.body.importContent, "escalation_phrases")
+    ])
+  };
+  const preview = buildPrimePackPreview(inputs);
+  if (preview.total_inputs === 0) {
+    return {
+      statusCode: 400,
+      body: {
+        ok: false,
+        error: "empty_prime_pack"
+      }
+    };
+  }
+  const now = (input2.now?.() ?? /* @__PURE__ */ new Date()).toISOString();
+  const draftSeed = JSON.stringify(inputs);
+  const transactionId = `txn:prime-pack:${digest4(`${draftSeed}:${now}`).slice(0, 20)}`;
+  const guardianReceipt = action === "deploy" ? buildPrimePackDeployGuardianReceipt(inputs, preview, transactionId, now) : void 0;
+  const draft = {
+    schema_version: "contextecf/project-guardian-prime-pack-draft/v1",
+    draft_id: `prime-pack:${digest4(draftSeed).slice(0, 16)}`,
+    status: action === "deploy" ? "deployed_metadata_only" : "preview_ready",
+    updated_at: now,
+    ...action === "deploy" ? { deployed_at: now } : {},
+    inputs,
+    preview,
+    ...guardianReceipt ? {
+      local_receipt: buildPrimePackDeployReceipt(guardianReceipt)
+    } : {},
+    raw_prompt_content_included: false,
+    token_printed: false
+  };
+  if (guardianReceipt && input2.store) {
+    await input2.store.putReceipt(guardianReceipt);
+    await input2.store.appendEvent(
+      buildPrimePackDeployEvent(inputs, preview, transactionId, now, guardianReceipt)
+    );
+  }
+  await writeControlTowerPrimePackDraft(input2.profile.profile_dir, draft);
+  return {
+    statusCode: 200,
+    body: {
+      ok: true,
+      schema_version: "contextecf/project-guardian-control-tower-prime-pack/v1",
+      action,
+      status: draft.status,
+      draft_id: draft.draft_id,
+      file: CONTROL_TOWER_PRIME_PACK_FILE_NAME,
+      preview,
+      local_receipt: draft.local_receipt,
+      receipt_id: guardianReceipt?.receipt_id,
+      stored_locally: true,
+      raw_prompt_content_included: false,
+      token_printed: false
+    }
+  };
+}
 async function processGuardianControlTowerPreferenceRequest(input2) {
   if (!isAdminAuthorized(input2)) {
     return {
@@ -26492,6 +27377,190 @@ async function processGuardianControlTowerDataRequest(input2) {
     };
   }
 }
+async function processGuardianControlTowerNoticeRequest(input2) {
+  if (!isAdminAuthorized(input2)) {
+    return {
+      statusCode: 401,
+      body: {
+        ok: false,
+        error: "unauthorized"
+      }
+    };
+  }
+  const action = input2.body.action?.trim() || "publish";
+  if (action === "clear") {
+    const clearedAt = input2.now().toISOString();
+    const transactionId2 = `txn:admin-notice:${digest4(`clear:${clearedAt}`).slice(0, 20)}`;
+    const receipt2 = buildAdminNoticeReceipt({
+      action,
+      transactionId: transactionId2,
+      timestamp: clearedAt
+    });
+    await input2.store.putReceipt(receipt2);
+    await input2.store.appendEvent(
+      buildAdminNoticeEvent({ action, transactionId: transactionId2, timestamp: clearedAt, receipt: receipt2 })
+    );
+    await writeControlTowerAdminNotices(input2.profile.profile_dir, []);
+    return {
+      statusCode: 200,
+      body: {
+        ok: true,
+        schema_version: "contextecf/project-guardian-control-tower-admin-notice/v1",
+        action,
+        notices: [],
+        receipt_id: receipt2.receipt_id,
+        raw_content_included: false,
+        token_printed: false
+      }
+    };
+  }
+  if (action !== "publish") {
+    return {
+      statusCode: 400,
+      body: {
+        ok: false,
+        error: "invalid_notice_action"
+      }
+    };
+  }
+  const title = boundedNoticeText(input2.body.title, CONTROL_TOWER_ADMIN_NOTICE_TITLE_LIMIT);
+  const message = boundedNoticeText(input2.body.message, CONTROL_TOWER_ADMIN_NOTICE_MESSAGE_LIMIT);
+  const audience = parseControlTowerAdminNoticeAudience(input2.body.audience);
+  const tone = parseControlTowerAdminNoticeTone(input2.body.tone);
+  if (!title || !message || !audience || !tone) {
+    return {
+      statusCode: 400,
+      body: {
+        ok: false,
+        error: "invalid_notice_request"
+      }
+    };
+  }
+  const existingNotices = await readControlTowerAdminNotices(input2.profile.profile_dir);
+  const createdAt = input2.now().toISOString();
+  const transactionId = `txn:admin-notice:${digest4(
+    `${title}:${message}:${audience}:${tone}:${createdAt}`
+  ).slice(0, 20)}`;
+  const receipt = buildAdminNoticeReceipt({
+    action,
+    transactionId,
+    timestamp: createdAt,
+    title,
+    message,
+    audience,
+    tone
+  });
+  const notice = {
+    id: `notice:${digest4(`${title}:${message}:${createdAt}`).slice(0, 16)}`,
+    title,
+    message,
+    audience,
+    tone,
+    created_at: createdAt,
+    receipt_id: receipt.receipt_id,
+    receipt_hash: receipt.receipt_hash,
+    raw_content_included: false
+  };
+  const notices = [notice, ...existingNotices].slice(0, CONTROL_TOWER_ADMIN_NOTICE_LIMIT);
+  await input2.store.putReceipt(receipt);
+  await input2.store.appendEvent(
+    buildAdminNoticeEvent({
+      action,
+      transactionId,
+      timestamp: createdAt,
+      receipt,
+      title,
+      message,
+      audience,
+      tone
+    })
+  );
+  await writeControlTowerAdminNotices(input2.profile.profile_dir, notices);
+  return {
+    statusCode: 200,
+    body: {
+      ok: true,
+      schema_version: "contextecf/project-guardian-control-tower-admin-notice/v1",
+      action,
+      notice,
+      notices,
+      receipt_id: receipt.receipt_id,
+      raw_content_included: false,
+      token_printed: false
+    }
+  };
+}
+async function processGuardianControlTowerMarketplaceRequest(input2) {
+  if (!isAdminAuthorized(input2)) {
+    return {
+      statusCode: 401,
+      body: {
+        ok: false,
+        error: "unauthorized"
+      }
+    };
+  }
+  const action = parseMarketplaceRequestAction(input2.body.action);
+  const targetId = input2.body.packId?.trim();
+  const manifest = targetId ? findControlTowerMarketplaceManifest(targetId) : void 0;
+  if (!action || !manifest) {
+    return {
+      statusCode: 400,
+      body: {
+        ok: false,
+        error: "invalid_marketplace_request"
+      }
+    };
+  }
+  const requestedAt = input2.now().toISOString();
+  const transactionId = `txn:marketplace-request:${digest4(
+    `${manifest.marketplace_manifest_id}:${action}:${requestedAt}`
+  ).slice(0, 20)}`;
+  const receipt = buildMarketplaceRequestReceipt(manifest, action, transactionId, requestedAt);
+  const request = {
+    schema_version: "contextecf/project-guardian-marketplace-request/v1",
+    request_id: `request:${transactionId}`,
+    pack_id: manifest.pack_id,
+    marketplace_manifest_id: manifest.marketplace_manifest_id,
+    pack_version: manifest.pack_version,
+    pack_name: manifest.display_name,
+    publisher: manifest.publisher_display_name,
+    action,
+    status: "requested_metadata_only",
+    requested_at: requestedAt,
+    receipt_id: receipt.receipt_id,
+    receipt_hash: receipt.receipt_hash,
+    raw_content_included: false,
+    token_printed: false
+  };
+  const existingRequests = await readControlTowerMarketplaceRequests(input2.profile.profile_dir);
+  const requests = [
+    request,
+    ...existingRequests.filter(
+      (existing) => existing.marketplace_manifest_id !== manifest.marketplace_manifest_id
+    )
+  ].slice(0, CONTROL_TOWER_MARKETPLACE_REQUEST_LIMIT);
+  await input2.store.putReceipt(receipt);
+  await input2.store.appendEvent(
+    buildMarketplaceRequestEvent(manifest, action, transactionId, requestedAt, receipt)
+  );
+  await writeControlTowerMarketplaceRequests(input2.profile.profile_dir, requests);
+  return {
+    statusCode: 200,
+    body: {
+      ok: true,
+      schema_version: "contextecf/project-guardian-control-tower-marketplace-request/v1",
+      action,
+      status: request.status,
+      request,
+      request_file: CONTROL_TOWER_MARKETPLACE_REQUEST_FILE_NAME,
+      receipt_id: receipt.receipt_id,
+      stored_locally: true,
+      raw_content_included: false,
+      token_printed: false
+    }
+  };
+}
 function parseAppPermissionAction(value) {
   return value === "revoke" || value === "allow" ? value : void 0;
 }
@@ -26507,6 +27576,25 @@ function parseGuardianSourceType2(value) {
   }
   return GUARDIAN_SOURCE_TYPES.includes(value) ? value : void 0;
 }
+function parseControlTowerAdminNoticeAudience(value) {
+  return value === "all_users" || value === "admins" || value === "developers" ? value : void 0;
+}
+function parseControlTowerAdminNoticeTone(value) {
+  return value === "info" || value === "warning" || value === "success" ? value : void 0;
+}
+function boundedNoticeText(value, limit) {
+  if (typeof value !== "string") {
+    return void 0;
+  }
+  const trimmed = value.replace(/\s+/gu, " ").trim();
+  if (!trimmed) {
+    return void 0;
+  }
+  return trimmed.slice(0, limit);
+}
+function isRecord(value) {
+  return typeof value === "object" && value !== null;
+}
 async function processGuardianBrowserBridgeRequest(input2) {
   if (!isAuthorized(input2.token, input2.suppliedToken)) {
     return {
@@ -26647,6 +27735,11 @@ async function processBrowserPrompt(input2) {
     visible_message: decision.visible_message,
     required_confirmation: decision.required_confirmation,
     coach_card: decision.coach_card,
+    risk_report: {
+      risk_tier: decision.risk_report.risk_tier,
+      detected_risks: decision.risk_report.detected_risks,
+      matched_policy_refs: decision.risk_report.matched_policy_refs
+    },
     receipt_id: decision.receipt.receipt_id
   };
 }
@@ -26837,6 +27930,114 @@ function buildLiveCoachEvent(request, transactionId, timestamp, receipt) {
     redaction_state: "metadata_only"
   };
 }
+function parseMarketplaceRequestAction(value) {
+  return value === "request_review" ? value : void 0;
+}
+function findControlTowerMarketplaceManifest(targetId) {
+  return GUARDIAN_POLICY_PACK_MARKETPLACE_CATALOG.find(
+    (manifest) => manifest.pack_id === targetId || manifest.marketplace_manifest_id === targetId
+  );
+}
+function buildMarketplaceRequestReceipt(manifest, action, transactionId, timestamp) {
+  const core = {
+    transaction_id: transactionId,
+    pack_id: manifest.pack_id,
+    marketplace_manifest_id: manifest.marketplace_manifest_id,
+    pack_version: manifest.pack_version,
+    action,
+    created_at: timestamp,
+    raw_content_included: false
+  };
+  return {
+    schema_version: PERSONAL_FABRIC_CONTRACTS_SCHEMA_VERSION,
+    receipt_id: `receipt:${transactionId}:marketplace-request`,
+    transaction_id: transactionId,
+    receipt_type: "policy",
+    disposition: "allow",
+    policy_basis: [
+      "marketplace-request-metadata-only",
+      `pack:${manifest.pack_id}`,
+      `manifest:${manifest.marketplace_manifest_id}`
+    ],
+    receipt_hash: `sha256:${digest4(JSON.stringify(core))}`,
+    raw_content_included: false,
+    created_at: timestamp,
+    summary: `Guardian recorded a marketplace review request for ${manifest.display_name}.`
+  };
+}
+function buildMarketplaceRequestEvent(manifest, action, transactionId, timestamp, receipt) {
+  const payload = {
+    pack_id: manifest.pack_id,
+    marketplace_manifest_id: manifest.marketplace_manifest_id,
+    pack_version: manifest.pack_version,
+    action,
+    status: "requested_metadata_only",
+    raw_content_included: false
+  };
+  return {
+    event_id: `event:${transactionId}:marketplace-request`,
+    transaction_id: transactionId,
+    event_type: "policy_decided",
+    occurred_at: timestamp,
+    actor: "guardian-daemon",
+    summary: `Marketplace pack review requested for ${manifest.display_name}.`,
+    payload_hash: `sha256:${digest4(JSON.stringify(payload))}`,
+    receipt_id: receipt.receipt_id,
+    graph_refs: [`policy-pack:${manifest.pack_id}`, `receipt:${receipt.receipt_id}`],
+    redaction_state: "metadata_only"
+  };
+}
+function buildAdminNoticeReceipt(input2) {
+  const core = {
+    transaction_id: input2.transactionId,
+    action: input2.action,
+    title_hash: input2.title ? digest4(input2.title) : void 0,
+    message_hash: input2.message ? digest4(input2.message) : void 0,
+    audience: input2.audience ?? "all_users",
+    tone: input2.tone ?? "info",
+    created_at: input2.timestamp,
+    raw_content_included: false
+  };
+  const audienceLabel = adminNoticeAudienceLabel(input2.audience ?? "all_users");
+  return {
+    schema_version: PERSONAL_FABRIC_CONTRACTS_SCHEMA_VERSION,
+    receipt_id: `receipt:${input2.transactionId}:admin-notice`,
+    transaction_id: input2.transactionId,
+    receipt_type: "policy",
+    disposition: "allow",
+    policy_basis: [
+      "admin-notice-metadata-only",
+      `action:${input2.action}`,
+      `audience:${input2.audience ?? "all_users"}`
+    ],
+    receipt_hash: `sha256:${digest4(JSON.stringify(core))}`,
+    raw_content_included: false,
+    created_at: input2.timestamp,
+    summary: input2.action === "clear" ? "Guardian cleared local admin notices." : `Guardian published a local admin notice for ${audienceLabel}.`
+  };
+}
+function buildAdminNoticeEvent(input2) {
+  const payload = {
+    action: input2.action,
+    title_hash: input2.title ? digest4(input2.title) : void 0,
+    message_hash: input2.message ? digest4(input2.message) : void 0,
+    audience: input2.audience ?? "all_users",
+    tone: input2.tone ?? "info",
+    raw_content_included: false
+  };
+  return {
+    event_id: `event:${input2.transactionId}:admin-notice`,
+    transaction_id: input2.transactionId,
+    event_type: "policy_decided",
+    occurred_at: input2.timestamp,
+    actor: "guardian-daemon",
+    summary: input2.action === "clear" ? "Admin notice bar cleared." : `Admin notice bar updated for ${adminNoticeAudienceLabel(input2.audience ?? "all_users")}.`,
+    payload_hash: `sha256:${digest4(JSON.stringify(payload))}`,
+    receipt_id: input2.receipt.receipt_id,
+    graph_refs: [`admin-notice:${input2.action}`, `receipt:${input2.receipt.receipt_id}`],
+    redaction_state: "metadata_only"
+  };
+}
 function liveCoachCategoryLabel(category) {
   if (category === "ssn") return "possible SSN sharing";
   if (category === "password") return "possible credential sharing";
@@ -26952,6 +28153,218 @@ function isAdminAuthorized(input2) {
 function parsePolicyPackAction(value) {
   return value === "enable" || value === "disable" ? value : void 0;
 }
+function parsePrimePackAction(value) {
+  return value === "preview" || value === "deploy" ? value : void 0;
+}
+function parsePrimePackEntries(value, options = {}) {
+  const seen = /* @__PURE__ */ new Set();
+  const entries = [];
+  for (const rawEntry of flattenPrimePackEntryValues(value)) {
+    const normalized = rawEntry.replace(/\s+/gu, " ").trim();
+    if (!normalized) {
+      continue;
+    }
+    const bounded = normalized.slice(0, CONTROL_TOWER_PRIME_PACK_VALUE_LIMIT);
+    const entry = options.lowercase ? bounded.toLowerCase() : bounded;
+    const key = entry.toLowerCase();
+    if (seen.has(key)) {
+      continue;
+    }
+    seen.add(key);
+    entries.push(entry);
+    if (entries.length >= CONTROL_TOWER_PRIME_PACK_ENTRY_LIMIT) {
+      break;
+    }
+  }
+  return entries;
+}
+function flattenPrimePackEntryValues(value) {
+  if (Array.isArray(value)) {
+    return value.flatMap((entry) => flattenPrimePackEntryValues(entry));
+  }
+  if (typeof value !== "string") {
+    return [];
+  }
+  return value.split(/[\n,;]+/u);
+}
+function parsePrimePackImportEntries(value, key) {
+  if (typeof value !== "string" || !value.trim()) {
+    return [];
+  }
+  const bounded = value.slice(0, CONTROL_TOWER_PRIME_PACK_IMPORT_LIMIT);
+  const parsedJson = parsePrimePackImportJson(bounded, key);
+  if (parsedJson.length > 0) {
+    return parsedJson;
+  }
+  const rows = parsePrimePackImportRows(bounded);
+  return rows.filter((row) => normalizePrimePackImportKey(row[0]) === key).flatMap((row) => row.slice(1));
+}
+function parsePrimePackImportJson(value, key) {
+  const trimmed = value.trim();
+  if (!trimmed.startsWith("{") && !trimmed.startsWith("[")) {
+    return [];
+  }
+  try {
+    const parsed = JSON.parse(trimmed);
+    return extractPrimePackImportJsonValues(parsed, key);
+  } catch {
+    return [];
+  }
+}
+function extractPrimePackImportJsonValues(value, key) {
+  if (Array.isArray(value)) {
+    return value.flatMap((entry) => extractPrimePackImportJsonValues(entry, key));
+  }
+  if (!isRecord(value)) {
+    return [];
+  }
+  const direct = value[key];
+  if (Array.isArray(direct)) {
+    return direct.filter((entry) => typeof entry === "string");
+  }
+  if (typeof direct === "string") {
+    return [direct];
+  }
+  const type = normalizePrimePackImportKey(value.type);
+  const term = value.value ?? value.term ?? value.pattern ?? value.phrase ?? value.domain ?? value.destination;
+  if (type === key && typeof term === "string") {
+    return [term];
+  }
+  return [];
+}
+function parsePrimePackImportRows(value) {
+  return value.split(/\r?\n/u).map((line) => splitPrimePackImportRow(line).map((cell) => cell.trim())).filter((row) => row.some(Boolean));
+}
+function splitPrimePackImportRow(line) {
+  const delimiter = line.includes("	") ? "	" : ",";
+  return line.split(delimiter);
+}
+function normalizePrimePackImportKey(value) {
+  if (typeof value !== "string") {
+    return void 0;
+  }
+  const normalized = value.trim().toLowerCase().replace(/[\s-]+/gu, "_");
+  switch (normalized) {
+    case "sensitive":
+    case "sensitive_term":
+    case "sensitive_terms":
+    case "term":
+    case "terms":
+      return "sensitive_terms";
+    case "approved_domain":
+    case "approved_domains":
+    case "allow_domain":
+    case "allowed_domain":
+    case "domain":
+      return "approved_domains";
+    case "blocked_destination":
+    case "blocked_destinations":
+    case "blocked_domain":
+    case "deny_destination":
+    case "destination":
+      return "blocked_destinations";
+    case "escalation":
+    case "escalation_phrase":
+    case "escalation_phrases":
+    case "confirmation_phrase":
+    case "phrase":
+      return "escalation_phrases";
+    default:
+      return void 0;
+  }
+}
+function buildPrimePackPreview(inputs) {
+  const totalInputs = inputs.sensitive_terms.length + inputs.approved_domains.length + inputs.blocked_destinations.length + inputs.escalation_phrases.length;
+  const examples = [
+    inputs.sensitive_terms.length > 0 ? `${inputs.sensitive_terms.length} sensitive term(s) will be flagged before prompt send.` : "",
+    inputs.blocked_destinations.length > 0 ? `${inputs.blocked_destinations.length} blocked destination rule(s) will stop risky sharing.` : "",
+    inputs.escalation_phrases.length > 0 ? `${inputs.escalation_phrases.length} escalation phrase(s) will require confirmation.` : "",
+    inputs.approved_domains.length > 0 ? `${inputs.approved_domains.length} approved domain(s) will lower false positives.` : ""
+  ].filter(Boolean);
+  return {
+    total_inputs: totalInputs,
+    flag_rules: inputs.sensitive_terms.length,
+    block_rules: inputs.blocked_destinations.length,
+    confirm_rules: inputs.escalation_phrases.length,
+    examples
+  };
+}
+function buildPrimePackDeployReceipt(receipt) {
+  return {
+    receipt_id: receipt.receipt_id,
+    action: "deploy",
+    created_at: receipt.created_at,
+    receipt_hash: receipt.receipt_hash,
+    raw_prompt_content_included: false,
+    token_printed: false
+  };
+}
+function buildPrimePackDeployGuardianReceipt(inputs, preview, transactionId, timestamp) {
+  const core = {
+    transaction_id: transactionId,
+    action: "deploy",
+    input_counts: buildPrimePackInputCounts(inputs),
+    preview,
+    input_hashes: buildPrimePackInputHashes(inputs),
+    created_at: timestamp,
+    raw_content_included: false
+  };
+  return {
+    schema_version: PERSONAL_FABRIC_CONTRACTS_SCHEMA_VERSION,
+    receipt_id: `receipt:${transactionId}:prime-pack-deploy`,
+    transaction_id: transactionId,
+    receipt_type: "policy",
+    disposition: "allow",
+    policy_basis: [
+      "prime-pack-deploy-metadata-only",
+      `inputs:${preview.total_inputs}`,
+      `flag_rules:${preview.flag_rules}`,
+      `block_rules:${preview.block_rules}`,
+      `confirm_rules:${preview.confirm_rules}`
+    ],
+    receipt_hash: `sha256:${digest4(JSON.stringify(core))}`,
+    raw_content_included: false,
+    created_at: timestamp,
+    summary: `Guardian deployed a local Prime Pack with ${preview.total_inputs} metadata rule input(s).`
+  };
+}
+function buildPrimePackDeployEvent(inputs, preview, transactionId, timestamp, receipt) {
+  const payload = {
+    action: "deploy",
+    input_counts: buildPrimePackInputCounts(inputs),
+    input_hashes: buildPrimePackInputHashes(inputs),
+    preview,
+    raw_content_included: false
+  };
+  return {
+    event_id: `event:${transactionId}:prime-pack-deploy`,
+    transaction_id: transactionId,
+    event_type: "policy_decided",
+    occurred_at: timestamp,
+    actor: "guardian-daemon",
+    summary: "Prime Pack deployment recorded with metadata-only hashes.",
+    payload_hash: `sha256:${digest4(JSON.stringify(payload))}`,
+    receipt_id: receipt.receipt_id,
+    graph_refs: ["policy-pack:prime-pack", `receipt:${receipt.receipt_id}`],
+    redaction_state: "metadata_only"
+  };
+}
+function buildPrimePackInputCounts(inputs) {
+  return {
+    sensitive_terms: inputs.sensitive_terms.length,
+    approved_domains: inputs.approved_domains.length,
+    blocked_destinations: inputs.blocked_destinations.length,
+    escalation_phrases: inputs.escalation_phrases.length
+  };
+}
+function buildPrimePackInputHashes(inputs) {
+  return {
+    sensitive_terms: inputs.sensitive_terms.map((entry) => `sha256:${digest4(entry)}`),
+    approved_domains: inputs.approved_domains.map((entry) => `sha256:${digest4(entry)}`),
+    blocked_destinations: inputs.blocked_destinations.map((entry) => `sha256:${digest4(entry)}`),
+    escalation_phrases: inputs.escalation_phrases.map((entry) => `sha256:${digest4(entry)}`)
+  };
+}
 function parsePromptCoachMode2(value) {
   return PROMPT_COACH_MODES2.includes(value) ? value : void 0;
 }
@@ -27031,7 +28444,7 @@ function writeHtml(response, statusCode, body, options = {}) {
   response.writeHead(statusCode, {
     "Content-Type": "text/html; charset=utf-8",
     "Referrer-Policy": "no-referrer",
-    "Content-Security-Policy": "default-src 'none'; style-src 'unsafe-inline'",
+    "Content-Security-Policy": "default-src 'none'; style-src 'unsafe-inline'; script-src 'unsafe-inline'; connect-src 'self'",
     "X-Content-Type-Options": "nosniff"
   });
   response.end(body);
@@ -27068,9 +28481,158 @@ function parseGuardianUrl(url2) {
     return void 0;
   }
 }
+function buildControlTowerViewModel(profile, receipts, searchGraph, learningEvents, localDataStatus, releaseDoctorStatus, adminNotices = [], marketplaceRequests = []) {
+  const recentReceipts = receipts.slice().sort((left, right) => right.created_at.localeCompare(left.created_at)).slice(0, CONTROL_TOWER_RECEIPT_LIMIT);
+  const blocked = recentReceipts.filter((receipt) => receipt.disposition === "block").length;
+  const flagged = recentReceipts.filter(
+    (receipt) => receipt.disposition === "warn" || receipt.disposition === "confirm"
+  ).length;
+  const allowed = recentReceipts.filter(
+    (receipt) => receipt.disposition === "allow" || receipt.disposition === "rewrite"
+  ).length;
+  const privacyDefaults = profile.privacy.privacy_mode_enabled && !profile.privacy.raw_content_capture_enabled && !profile.privacy.cloud_sync_enabled && !profile.privacy.local_app_autopilot_enabled ? "on" : "needs review";
+  const protectedState = releaseDoctorStatus.doctor.checkCounts.fail === 0 && privacyDefaults === "on";
+  return {
+    ok: true,
+    schema_version: "contextecf/project-guardian-control-tower-view-model/v1",
+    surfaces: [
+      {
+        id: "personal",
+        label: "Personal Guardian",
+        audience: "Individual users",
+        purpose: "Protection status, prompt coaching, privacy, receipts, and browser connection."
+      },
+      {
+        id: "admin",
+        label: "Guardian Admin",
+        audience: "Organizations",
+        purpose: "Groups, policy packs, marketplace approvals, Prime Pack, scope, and audit."
+      },
+      {
+        id: "power_user",
+        label: "Power User",
+        audience: "Developers and technical operators",
+        purpose: "MCP, local data, doctor checks, receipts, and release evidence."
+      },
+      {
+        id: "marketplace_contributor",
+        label: "Marketplace Contributor",
+        audience: "Policy pack creators",
+        purpose: "Submission metadata, examples, license terms, and review state."
+      }
+    ],
+    personal: {
+      protectionLabel: protectedState ? "You're Protected" : "Needs Review",
+      protectionDetail: protectedState ? "Guardian is running locally with metadata-only privacy defaults." : "Guardian is running, but one or more install checks need attention.",
+      privacyDefaults,
+      activePolicyPacks: [...profile.policy_packs.active],
+      activityCounts: { blocked, flagged, allowed }
+    },
+    admin: {
+      organizationLabel: "Example organization deployment",
+      notices: adminNotices.slice(0, CONTROL_TOWER_ADMIN_NOTICE_LIMIT),
+      marketplaceRequests: marketplaceRequests.slice(0, CONTROL_TOWER_MARKETPLACE_REQUEST_LIMIT),
+      managedGroups: buildControlTowerDeploymentGroups(profile),
+      primePack: {
+        status: "draft_ready",
+        supportedInputs: ["typed terms", "text upload", "CSV upload", "JSON upload"],
+        deployable: true,
+        receiptRequired: true
+      }
+    },
+    marketplace: buildControlTowerMarketplaceRows(profile, marketplaceRequests),
+    releaseAutomation: {
+      repository: GUARDIAN_RELEASE_REPOSITORY,
+      workflow: GUARDIAN_RELEASE_DISPATCH_WORKFLOW,
+      npmPackage: GUARDIAN_NPM_PACKAGE_NAME,
+      registry: GUARDIAN_NPM_REGISTRY,
+      chromeExtensionId: GUARDIAN_HALO_CHROME_EXTENSION_ID,
+      dryRunCommand: CONTROL_TOWER_DRY_RUN_COMMAND_TEMPLATE,
+      publishCommand: CONTROL_TOWER_RELEASE_COMMAND_TEMPLATE,
+      humanIntervention: [
+        "Chrome Web Store upload/review remains a store-console step until Google approval APIs are wired.",
+        "Native installer signing still requires platform signing credentials.",
+        `Latest doctor status: ${releaseDoctorStatus.doctor.overall}.`,
+        `Search Graph has ${searchGraph.nodes.length} node(s); Learning Graph has ${learningEvents.length} event(s).`,
+        `Local data encryption: ${localDataStatus.encryptionStatus}.`
+      ]
+    },
+    raw_content_included: false,
+    token_printed: false
+  };
+}
+function buildControlTowerDeploymentGroups(profile) {
+  return [
+    {
+      id: "group:individual-default",
+      label: "Personal default",
+      users: 1,
+      posture: profile.posture_profile.selected,
+      packs: [...profile.policy_packs.active]
+    },
+    {
+      id: "group:employees",
+      label: "Employees",
+      users: 24,
+      posture: "balanced",
+      packs: ["privacy-first", "executive"]
+    },
+    {
+      id: "group:technical-users",
+      label: "Technical users",
+      users: 8,
+      posture: "guided",
+      packs: ["privacy-first", "developer"]
+    },
+    {
+      id: "group:high-risk-functions",
+      label: "High-risk functions",
+      users: 5,
+      posture: "high_assurance",
+      packs: ["privacy-first", "finance"]
+    }
+  ];
+}
+function buildControlTowerMarketplaceRows(profile, marketplaceRequests = []) {
+  const activePacks = new Set(profile.policy_packs.active);
+  const requestsByManifest = new Map(
+    marketplaceRequests.map((request) => [request.marketplace_manifest_id, request])
+  );
+  return GUARDIAN_POLICY_PACK_MARKETPLACE_CATALOG.map((manifest) => {
+    const request = requestsByManifest.get(manifest.marketplace_manifest_id);
+    const connected = activePacks.has(manifest.pack_id);
+    return {
+      packId: manifest.pack_id,
+      name: manifest.display_name,
+      version: manifest.pack_version,
+      audience: manifest.audiences.join(", "),
+      category: manifest.policy_domains.join(", "),
+      publisher: manifest.publisher_display_name,
+      price: manifest.price_model,
+      licenseRef: manifest.license_ref,
+      supportRef: manifest.support_ref ?? "Not provided",
+      state: connected ? "connected" : request?.status ?? manifest.listing_status,
+      permissions: [
+        manifest.provider_rules_summary,
+        manifest.source_rules_summary,
+        manifest.app_permission_summary
+      ],
+      protectedDataTypes: manifest.protected_data_types,
+      examples: [
+        manifest.short_description,
+        manifest.confirmation_rules_summary,
+        manifest.data_handling_summary
+      ],
+      risk: manifest.limitations.length > 0 ? manifest.limitations[0] : "Standard false-positive review recommended before wide deployment.",
+      requestState: connected ? "connected" : request?.status ?? "not_requested",
+      requestReceiptId: request?.receipt_id,
+      requestedAt: request?.requested_at
+    };
+  });
+}
 function renderControlTowerStatusPage(profile, receipts = [], searchGraph = { nodes: [], edges: [] }, learningEvents = [], localDataStatus = createEmptyControlTowerLocalDataStatus(profile), releaseDoctorStatus = createEmptyControlTowerReleaseDoctorStatus(
   profile
-)) {
+), adminNotices = [], marketplaceRequests = []) {
   const policyPacks = profile.policy_packs.available.length;
   const activePolicyPacks = profile.policy_packs.active.join(", ") || "none";
   const recentReceipts = receipts.slice().sort((left, right) => right.created_at.localeCompare(left.created_at)).slice(0, CONTROL_TOWER_RECEIPT_LIMIT);
@@ -27199,7 +28761,7 @@ function renderControlTowerStatusPage(profile, receipts = [], searchGraph = { no
               <div class="metric-detail">${escapeHtml(metric.detail)}</div>
             </article>`
   ).join("\n");
-  const activityFeedHtml = renderActivityFeed(recentReceipts);
+  const activityFeedHtml = renderActivityFeed(recentReceipts, searchGraph);
   const postureCardsHtml = GUARDIAN_POSTURE_PROFILE_CATALOG.map((postureProfile) => {
     const selected = profile.posture_profile.selected === postureProfile.id;
     const icon = postureProfile.id === "calm" ? "&#9790;" : postureProfile.id === "balanced" ? "&#9878;" : postureProfile.id === "guided" ? "&#127891;" : postureProfile.id === "high_assurance" ? "&#128274;" : "&#9881;";
@@ -27248,9 +28810,28 @@ function renderControlTowerStatusPage(profile, receipts = [], searchGraph = { no
               <button type="submit" class="provider-pill" aria-label="Revoke ${escapeHtml(providerDisplayName(row.id))}"><span></span>${escapeHtml(providerDisplayName(row.id))}</button>
             </form>`
   ).join("\n");
+  const viewModel = buildControlTowerViewModel(
+    profile,
+    recentReceipts,
+    searchGraph,
+    learningEvents,
+    localDataStatus,
+    releaseDoctorStatus,
+    adminNotices,
+    marketplaceRequests
+  );
+  const roleCardsHtml = renderControlTowerRoleCards(viewModel);
+  const adminNoticeBarHtml = renderAdminNoticeBar(viewModel.admin.notices);
+  const adminPanelsHtml = renderGuardianAdminSurface(
+    viewModel,
+    profile,
+    recentReceipts,
+    appPermissionRows
+  );
+  const localGuardianStatus = renderLocalGuardianStatus(profile.runtime.daemon_status);
   const rows = [
     ["Profile", profile.profile_dir],
-    ["Daemon", profile.runtime.daemon_status],
+    ["Local Guardian", localGuardianStatus],
     [
       "Posture Profile",
       `${profile.posture_profile.selected}; managed baseline ${profile.posture_profile.managed_baseline_id ?? "none"}`
@@ -27418,6 +28999,161 @@ function renderControlTowerStatusPage(profile, receipts = [], searchGraph = { no
         background: rgba(15, 23, 42, 0.78);
         font-size: 16px;
       }
+      .surface-tabs, .role-grid, .admin-grid, .marketplace-grid {
+        display: grid;
+        gap: 12px;
+      }
+      .surface-tabs {
+        grid-template-columns: repeat(2, minmax(0, 1fr));
+        margin: 28px 0 16px;
+      }
+      .surface-tab {
+        display: grid;
+        gap: 6px;
+        width: 100%;
+        min-height: 78px;
+        padding: 15px 16px;
+        border-color: rgba(148, 163, 184, 0.2);
+        background: rgba(13, 24, 40, 0.84);
+        color: #eff6ff;
+        text-align: left;
+      }
+      .surface-tab strong, .role-card strong, .admin-card strong { font-size: 17px; }
+      .surface-tab span, .role-card span, .admin-card span, .marketplace-card span {
+        color: #98a7bc;
+        font-size: 13px;
+        line-height: 1.35;
+      }
+      .surface-tab.is-active, .surface-tab[aria-pressed="true"] {
+        border-color: rgba(34, 197, 94, 0.5);
+        background: rgba(6, 45, 37, 0.78);
+        box-shadow: inset 0 0 0 1px rgba(34, 197, 94, 0.12);
+      }
+      .surface-panel[hidden] { display: none; }
+      .role-grid { grid-template-columns: repeat(4, minmax(0, 1fr)); }
+      .role-card, .admin-card, .marketplace-card, .prime-pack-builder, .release-command-card {
+        border: 1px solid rgba(148, 163, 184, 0.18);
+        border-radius: 8px;
+        background: rgba(11, 24, 40, 0.82);
+        padding: 18px;
+      }
+      .admin-grid { grid-template-columns: repeat(3, minmax(0, 1fr)); }
+      .marketplace-grid { grid-template-columns: repeat(2, minmax(0, 1fr)); }
+      .marketplace-card h3, .admin-card h3, .prime-pack-builder h3, .release-command-card h3 {
+        margin: 0 0 8px;
+        color: #f6f8ff;
+        font-size: 18px;
+      }
+      .marketplace-card p, .admin-card p, .prime-pack-builder p, .release-command-card p {
+        margin-bottom: 12px;
+      }
+      .marketplace-detail-drawer {
+        margin-top: 14px;
+        border-top: 1px solid rgba(148, 163, 184, 0.16);
+        padding-top: 12px;
+      }
+      .marketplace-detail-drawer summary {
+        cursor: pointer;
+        color: #dce7f7;
+        font-size: 14px;
+        font-weight: 800;
+      }
+      .marketplace-detail-drawer dl {
+        display: grid;
+        gap: 8px;
+        margin: 12px 0 0;
+      }
+      .marketplace-detail-drawer dt {
+        color: #f6f8ff;
+        font-size: 13px;
+        font-weight: 800;
+      }
+      .marketplace-detail-drawer dd {
+        margin: 0;
+        color: #98a7bc;
+        font-size: 13px;
+        line-height: 1.45;
+      }
+      .marketplace-request-form {
+        display: grid;
+        gap: 8px;
+        margin-top: 14px;
+      }
+      .marketplace-request-form span,
+      .marketplace-request-state {
+        margin: 14px 0 0;
+        color: #9fb0c6;
+        font-size: 13px;
+        line-height: 1.45;
+      }
+      .marketplace-request-list {
+        display: grid;
+        gap: 10px;
+        margin-top: 16px;
+      }
+      .marketplace-request-card {
+        display: grid;
+        gap: 6px;
+        padding: 12px 14px;
+        border: 1px solid rgba(34, 197, 94, 0.28);
+        border-radius: 8px;
+        background: rgba(6, 45, 37, 0.52);
+      }
+      .marketplace-request-card span {
+        color: #9fb0c6;
+        font-size: 13px;
+      }
+      .metadata-list {
+        display: grid;
+        gap: 8px;
+        margin: 14px 0 0;
+        padding: 0;
+        list-style: none;
+      }
+      .metadata-list li {
+        display: flex;
+        gap: 8px;
+        justify-content: space-between;
+        border-top: 1px solid rgba(148, 163, 184, 0.12);
+        padding-top: 8px;
+        color: #c8d2e3;
+        font-size: 13px;
+      }
+      .metadata-list b { color: #eff6ff; }
+      .builder-grid {
+        display: grid;
+        grid-template-columns: repeat(2, minmax(0, 1fr));
+        gap: 12px;
+        margin-top: 12px;
+      }
+      .button-row {
+        display: flex;
+        flex-wrap: wrap;
+        gap: 10px;
+        margin-top: 12px;
+      }
+      textarea {
+        width: 100%;
+        min-height: 104px;
+        border: 1px solid rgba(148, 163, 184, 0.24);
+        border-radius: 8px;
+        background: rgba(8, 13, 24, 0.92);
+        color: #f6f8ff;
+        padding: 10px;
+        font: inherit;
+        resize: vertical;
+      }
+      .command-box {
+        display: block;
+        width: 100%;
+        padding: 12px;
+        border: 1px solid rgba(148, 163, 184, 0.2);
+        border-radius: 8px;
+        background: rgba(5, 10, 20, 0.88);
+        color: #d8f8e7;
+        overflow-x: auto;
+        white-space: nowrap;
+      }
       .eyebrow {
         width: fit-content;
         margin-bottom: 16px;
@@ -27599,6 +29335,22 @@ function renderControlTowerStatusPage(profile, receipts = [], searchGraph = { no
       }
       .provider-pill:hover { background: rgba(30, 41, 59, 0.78); }
       .provider-pill span { width: 8px; height: 8px; border-radius: 999px; background: #22c55e; }
+      .notice-bar { display: grid; gap: 10px; margin: 20px 0 26px; }
+      .notice-card {
+        display: grid;
+        gap: 6px;
+        padding: 14px 16px;
+        border: 1px solid rgba(96, 165, 250, 0.32);
+        border-radius: 8px;
+        color: #d8e1f0;
+        background: rgba(15, 23, 42, 0.78);
+      }
+      .notice-card.warning { border-color: rgba(245, 158, 11, 0.46); background: rgba(39, 26, 9, 0.82); }
+      .notice-card.success { border-color: rgba(34, 197, 94, 0.46); background: rgba(6, 45, 37, 0.82); }
+      .notice-card strong { color: #f6f8ff; font-size: 16px; }
+      .notice-card span { color: #91a1b8; font-size: 13px; font-weight: 700; }
+      .notice-card p { margin: 0; color: #d8e1f0; line-height: 1.45; }
+      .notice-form { display: grid; gap: 12px; }
       .activity-heading { justify-content: space-between; gap: 16px; margin-bottom: 12px; }
       .activity-heading h2 { margin: 0; }
       .filter-chips { gap: 8px; flex-wrap: wrap; }
@@ -27619,6 +29371,14 @@ function renderControlTowerStatusPage(profile, receipts = [], searchGraph = { no
       .chip:hover { color: #f5f7fb; background: rgba(30, 41, 59, 0.78); }
       .chip.is-active, .chip[aria-pressed="true"] { border-color: rgba(34, 197, 94, 0.38); color: #d7ffe5; background: rgba(21, 128, 61, 0.22); }
       .activity-card[hidden], .empty-filter-state[hidden] { display: none; }
+      .receipt-row.is-selected-receipt {
+        outline: 2px solid rgba(56, 230, 120, 0.7);
+        outline-offset: 4px;
+        background: rgba(34, 197, 94, 0.08);
+      }
+      .receipt-row.is-selected-receipt details {
+        border-radius: 8px;
+      }
       .empty-filter-state {
         padding: 22px;
         border: 1px dashed rgba(148, 163, 184, 0.24);
@@ -27676,6 +29436,7 @@ function renderControlTowerStatusPage(profile, receipts = [], searchGraph = { no
         .protection-card { min-height: 320px; }
         .activity-card { grid-template-columns: 48px 1fr; }
         .activity-badge { grid-column: 2; width: fit-content; }
+        .surface-tabs, .role-grid, .admin-grid, .marketplace-grid, .builder-grid { grid-template-columns: 1fr; }
         section { padding: 16px; overflow-x: auto; }
         table { min-width: 720px; }
         .activity-heading { align-items: flex-start; flex-direction: column; }
@@ -27688,7 +29449,7 @@ function renderControlTowerStatusPage(profile, receipts = [], searchGraph = { no
     <header class="topbar">
       <div class="brand"><span class="brand-mark">G</span><span>Guardian</span></div>
       <div class="topbar-actions">
-        <span class="status-pill"><span class="status-dot"></span>${escapeHtml(profile.runtime.daemon_status)}</span>
+        <span class="status-pill"><span class="status-dot"></span>${escapeHtml(localGuardianStatus)}</span>
         <span class="icon-button" aria-label="Settings">&#9881;</span>
       </div>
     </header>
@@ -27696,6 +29457,25 @@ function renderControlTowerStatusPage(profile, receipts = [], searchGraph = { no
       <div class="eyebrow">Local-first status</div>
       <h1>Project Guardian Control Tower</h1>
       <p class="intro">This local page confirms Guardian is watching your AI surface with privacy-first, metadata-only governance. It never exposes the runtime token, raw prompts, raw responses, or local action payloads.</p>
+${adminNoticeBarHtml}
+      <div class="surface-tabs" aria-label="Control Tower surfaces">
+        <button type="button" class="surface-tab is-active" data-surface-tab="personal" aria-pressed="true">
+          <strong>Personal Guardian</strong>
+          <span>Simple protection, privacy, coaching, browser connection, and receipts.</span>
+        </button>
+        <button type="button" class="surface-tab" data-surface-tab="admin" aria-pressed="false">
+          <strong>Guardian Admin</strong>
+          <span>Policy packs, marketplace approvals, Prime Pack, deployment, audit, and releases.</span>
+        </button>
+      </div>
+      <section aria-labelledby="role-experiences">
+        <h2 id="role-experiences">Role Experiences</h2>
+        <p>Guardian ships one local brain with different surfaces for individuals, power users, enterprise admins, and marketplace contributors.</p>
+        <div class="role-grid">
+${roleCardsHtml}
+        </div>
+      </section>
+      <div class="surface-panel" data-surface-panel="personal">
       <div class="hero-grid" aria-label="Guardian protection overview">
         <article class="protection-card">
           <div class="${protectionRingClass}"><div class="ring-core">G</div></div>
@@ -27717,6 +29497,7 @@ ${heroMetricCards}
           </div>
         </div>
         <p class="activity-filter-status" data-activity-filter-status aria-live="polite">Showing all local Guardian activity.</p>
+        <p class="activity-filter-status" data-guardian-time-zone-label>Times use your browser's local timezone.</p>
         <div class="activity-list" data-activity-list>
 ${activityFeedHtml}
           <div class="empty-filter-state" data-activity-empty hidden>No activity matches this filter yet.</div>
@@ -27885,7 +29666,7 @@ ${releaseDoctorRows}
           </tbody>
         </table>
       </section>
-      <section aria-labelledby="receipt-drilldowns">
+      <section id="receipts" aria-labelledby="receipt-drilldowns">
         <div class="activity-heading">
           <h2 id="receipt-drilldowns">What Guardian did today</h2>
           <div class="filter-chips" aria-label="Activity filters">
@@ -27895,7 +29676,7 @@ ${releaseDoctorRows}
             <span class="chip">Allowed</span>
           </div>
         </div>
-        <p><span class="visually-hidden">Activity &amp; Receipts.</span>Inspect recent Guardian decisions without raw prompt, response, or local-action payload content.</p>
+        <p><span class="visually-hidden">Activity &amp; Receipts.</span>Inspect recent Guardian decisions without raw prompt, response, or local-action payload content. Links from Halo open the matching receipt here.</p>
         <table aria-label="Guardian receipt drilldowns">
           <thead>
             <tr><th scope="col">Receipt</th><th scope="col">Type</th><th scope="col">Decision</th><th scope="col">Details</th></tr>
@@ -27975,9 +29756,47 @@ ${learningEventRows}
       </section>
         </div>
       </details>
+      </div>
+      <div class="surface-panel" data-surface-panel="admin" hidden>
+${adminPanelsHtml}
+      </div>
     </main>
     <script>
       (() => {
+        const surfaceTabs = Array.from(document.querySelectorAll('[data-surface-tab]'));
+        const surfacePanels = Array.from(document.querySelectorAll('[data-surface-panel]'));
+        const selectSurface = (surface) => {
+          for (const tab of surfaceTabs) {
+            const selected = tab.getAttribute('data-surface-tab') === surface;
+            tab.classList.toggle('is-active', selected);
+            tab.setAttribute('aria-pressed', selected ? 'true' : 'false');
+          }
+          for (const panel of surfacePanels) {
+            panel.hidden = panel.getAttribute('data-surface-panel') !== surface;
+          }
+        };
+        for (const tab of surfaceTabs) {
+          tab.addEventListener('click', () => selectSurface(tab.getAttribute('data-surface-tab') || 'personal'));
+        }
+        const hydrateViewModel = async () => {
+          const controller = new AbortController();
+          const timeoutId = window.setTimeout(() => controller.abort(), 2500);
+          try {
+            const response = await fetch('/v1/guardian/control-tower/view-model', {
+              headers: { accept: 'application/json' },
+              signal: controller.signal,
+            });
+            if (!response.ok) return;
+            const body = await response.json();
+            if (!body || body.ok !== true) return;
+            document.documentElement.setAttribute('data-view-model', body.schema_version || 'loaded');
+          } catch {
+            // Keep the server-rendered Control Tower if local hydration is unavailable.
+          } finally {
+            window.clearTimeout(timeoutId);
+          }
+        };
+        hydrateViewModel();
         const filters = Array.from(document.querySelectorAll('[data-activity-filter]'));
         const list = document.querySelector('[data-activity-list]');
         const emptyState = document.querySelector('[data-activity-empty]');
@@ -28013,6 +29832,85 @@ ${learningEventRows}
           }
           setFilterCopy(selectedFilter);
         };
+        const absoluteLocalTimeFormatter = new Intl.DateTimeFormat(navigator.language || undefined, {
+          month: 'short',
+          day: 'numeric',
+          year: 'numeric',
+          hour: 'numeric',
+          minute: '2-digit',
+          timeZoneName: 'short',
+        });
+        const relativeTimeFormatter = new Intl.RelativeTimeFormat(navigator.language || undefined, {
+          numeric: 'auto',
+        });
+        const formatAbsoluteLocalTime = (createdAt) => {
+          const date = new Date(createdAt);
+          if (Number.isNaN(date.getTime())) return createdAt || '';
+          return absoluteLocalTimeFormatter.format(date);
+        };
+        const formatLocalTime = (createdAt) => {
+          const date = new Date(createdAt);
+          if (Number.isNaN(date.getTime())) return createdAt || '';
+          const diffMs = date.getTime() - Date.now();
+          const absMs = Math.abs(diffMs);
+          if (absMs < 60 * 1000) return 'just now';
+          if (absMs < 60 * 60 * 1000) {
+            return relativeTimeFormatter.format(Math.round(diffMs / (60 * 1000)), 'minute');
+          }
+          if (absMs < 24 * 60 * 60 * 1000) {
+            return relativeTimeFormatter.format(Math.round(diffMs / (60 * 60 * 1000)), 'hour');
+          }
+          if (absMs < 7 * 24 * 60 * 60 * 1000) {
+            return relativeTimeFormatter.format(Math.round(diffMs / (24 * 60 * 60 * 1000)), 'day');
+          }
+          return formatAbsoluteLocalTime(createdAt);
+        };
+        const hydrateLocalTimes = () => {
+          for (const element of Array.from(document.querySelectorAll('[data-guardian-local-time]'))) {
+            const createdAt = element.getAttribute('datetime') || element.getAttribute('data-created-at') || '';
+            const formatted = formatLocalTime(createdAt);
+            if (formatted) element.textContent = formatted;
+            if (createdAt) {
+              element.setAttribute('title', 'Your local time: ' + formatAbsoluteLocalTime(createdAt) + ' \xB7 Stored by Guardian as ' + createdAt);
+            }
+          }
+        };
+        const hydrateLocalTimeZoneLabels = () => {
+          let timeZone = '';
+          try {
+            timeZone = Intl.DateTimeFormat().resolvedOptions().timeZone || '';
+          } catch {
+            timeZone = '';
+          }
+          const label = timeZone
+            ? 'Times use your browser timezone: ' + timeZone + '.'
+            : "Times use your browser's local timezone.";
+          for (const element of Array.from(document.querySelectorAll('[data-guardian-time-zone-label]'))) {
+            element.textContent = label;
+          }
+        };
+        const receiptIdFromHash = () => {
+          const hash = window.location.hash || '';
+          if (!hash.startsWith('#receipt=')) return '';
+          try {
+            return decodeURIComponent(hash.slice('#receipt='.length));
+          } catch {
+            return hash.slice('#receipt='.length);
+          }
+        };
+        const highlightReceiptFromHash = () => {
+          const selectedReceiptId = receiptIdFromHash();
+          let matchedRow = null;
+          for (const row of Array.from(document.querySelectorAll('[data-receipt-row]'))) {
+            const selected = Boolean(selectedReceiptId) && row.getAttribute('data-receipt-id') === selectedReceiptId;
+            row.classList.toggle('is-selected-receipt', selected);
+            if (selected) matchedRow = row;
+          }
+          if (!matchedRow) return;
+          const details = matchedRow.querySelector('details');
+          if (details) details.open = true;
+          matchedRow.scrollIntoView({ block: 'center', behavior: 'smooth' });
+        };
         const createActivityCard = (activity) => {
           const card = document.createElement('article');
           card.className = 'activity-card ' + activity.tone;
@@ -28026,7 +29924,16 @@ ${learningEventRows}
           title.textContent = activity.title;
           const meta = document.createElement('div');
           meta.className = 'activity-meta';
-          meta.textContent = activity.meta;
+          if (activity.created_at) {
+            const time = document.createElement('time');
+            time.setAttribute('datetime', activity.created_at);
+            time.setAttribute('data-guardian-local-time', '');
+            time.textContent = formatLocalTime(activity.created_at);
+            time.title = 'Your local time: ' + formatAbsoluteLocalTime(activity.created_at) + ' \xB7 Stored by Guardian as ' + activity.created_at;
+            meta.append(time, ' \xB7 ' + (activity.meta_detail || activity.receipt_type || 'receipt'));
+          } else {
+            meta.textContent = activity.meta;
+          }
           body.append(title, meta);
           const badge = document.createElement('div');
           badge.className = 'activity-badge ' + activity.tone;
@@ -28069,6 +29976,11 @@ ${learningEventRows}
             applyFilter(filter.getAttribute('data-activity-filter') || 'all');
           });
         }
+        window.addEventListener('hashchange', highlightReceiptFromHash);
+        hydrateLocalTimeZoneLabels();
+        hydrateLocalTimes();
+        window.setInterval(hydrateLocalTimes, 60 * 1000);
+        highlightReceiptFromHash();
       })();
     </script>
   </body>
@@ -28205,6 +30117,120 @@ function renderReleaseDoctorRows(status) {
 function renderDoctorCounts(doctor) {
   return `${doctor.checkCounts.pass} pass; ${doctor.checkCounts.warn} warn; ${doctor.checkCounts.fail} fail`;
 }
+async function readControlTowerAdminNotices(profileDir) {
+  try {
+    const raw = await readFile4(path4.join(profileDir, CONTROL_TOWER_ADMIN_NOTICE_FILE_NAME), "utf8");
+    const parsed = JSON.parse(raw);
+    if (!isRecord(parsed) || !Array.isArray(parsed.notices)) {
+      return [];
+    }
+    return parsed.notices.map(parseControlTowerAdminNotice).filter((notice) => Boolean(notice)).slice(0, CONTROL_TOWER_ADMIN_NOTICE_LIMIT);
+  } catch {
+    return [];
+  }
+}
+async function writeControlTowerAdminNotices(profileDir, notices) {
+  await writeFile2(
+    path4.join(profileDir, CONTROL_TOWER_ADMIN_NOTICE_FILE_NAME),
+    `${JSON.stringify(
+      {
+        schema_version: "contextecf/project-guardian-control-tower-admin-notices/v1",
+        notices: notices.slice(0, CONTROL_TOWER_ADMIN_NOTICE_LIMIT),
+        raw_content_included: false,
+        token_printed: false
+      },
+      null,
+      2
+    )}
+`,
+    "utf8"
+  );
+}
+async function readControlTowerMarketplaceRequests(profileDir) {
+  try {
+    const raw = await readFile4(
+      path4.join(profileDir, CONTROL_TOWER_MARKETPLACE_REQUEST_FILE_NAME),
+      "utf8"
+    );
+    const parsed = JSON.parse(raw);
+    if (!isRecord(parsed) || !Array.isArray(parsed.requests)) {
+      return [];
+    }
+    return parsed.requests.map(parseControlTowerMarketplaceRequest).filter((request) => Boolean(request)).slice(0, CONTROL_TOWER_MARKETPLACE_REQUEST_LIMIT);
+  } catch {
+    return [];
+  }
+}
+async function writeControlTowerMarketplaceRequests(profileDir, requests) {
+  await writeFile2(
+    path4.join(profileDir, CONTROL_TOWER_MARKETPLACE_REQUEST_FILE_NAME),
+    `${JSON.stringify(
+      {
+        schema_version: "contextecf/project-guardian-marketplace-requests/v1",
+        requests: requests.slice(0, CONTROL_TOWER_MARKETPLACE_REQUEST_LIMIT),
+        raw_content_included: false,
+        token_printed: false
+      },
+      null,
+      2
+    )}
+`,
+    "utf8"
+  );
+}
+async function writeControlTowerPrimePackDraft(profileDir, draft) {
+  await writeFile2(
+    path4.join(profileDir, CONTROL_TOWER_PRIME_PACK_FILE_NAME),
+    `${JSON.stringify(draft, null, 2)}
+`,
+    "utf8"
+  );
+}
+function parseControlTowerAdminNotice(value) {
+  if (!isRecord(value)) {
+    return null;
+  }
+  const audience = parseControlTowerAdminNoticeAudience(value.audience);
+  const tone = parseControlTowerAdminNoticeTone(value.tone);
+  if (typeof value.id !== "string" || typeof value.title !== "string" || typeof value.message !== "string" || typeof value.created_at !== "string" || !audience || !tone) {
+    return null;
+  }
+  return {
+    id: value.id.slice(0, 80),
+    title: value.title.slice(0, CONTROL_TOWER_ADMIN_NOTICE_TITLE_LIMIT),
+    message: value.message.slice(0, CONTROL_TOWER_ADMIN_NOTICE_MESSAGE_LIMIT),
+    audience,
+    tone,
+    created_at: value.created_at,
+    receipt_id: typeof value.receipt_id === "string" ? value.receipt_id.slice(0, 160) : void 0,
+    receipt_hash: typeof value.receipt_hash === "string" ? value.receipt_hash.slice(0, 80) : void 0,
+    raw_content_included: false
+  };
+}
+function parseControlTowerMarketplaceRequest(value) {
+  if (!isRecord(value)) {
+    return null;
+  }
+  if (value.schema_version !== "contextecf/project-guardian-marketplace-request/v1" || value.action !== "request_review" || value.status !== "requested_metadata_only" || typeof value.request_id !== "string" || typeof value.pack_id !== "string" || typeof value.marketplace_manifest_id !== "string" || typeof value.pack_version !== "string" || typeof value.pack_name !== "string" || typeof value.publisher !== "string" || typeof value.requested_at !== "string" || typeof value.receipt_id !== "string" || typeof value.receipt_hash !== "string") {
+    return null;
+  }
+  return {
+    schema_version: "contextecf/project-guardian-marketplace-request/v1",
+    request_id: value.request_id.slice(0, 120),
+    pack_id: value.pack_id.slice(0, 120),
+    marketplace_manifest_id: value.marketplace_manifest_id.slice(0, 160),
+    pack_version: value.pack_version.slice(0, 40),
+    pack_name: value.pack_name.slice(0, 120),
+    publisher: value.publisher.slice(0, 120),
+    action: "request_review",
+    status: "requested_metadata_only",
+    requested_at: value.requested_at,
+    receipt_id: value.receipt_id.slice(0, 160),
+    receipt_hash: value.receipt_hash.slice(0, 80),
+    raw_content_included: false,
+    token_printed: false
+  };
+}
 async function buildControlTowerLocalDataStatus(profile, env = process.env) {
   const profileDir = profile.profile_dir;
   const encryption = buildControlTowerEncryptionStatus(
@@ -28440,7 +30466,7 @@ function renderReceiptRows(receipts) {
   }
   return receipts.map((receipt) => renderReceiptRow(receipt)).join("\n");
 }
-function renderActivityFeed(receipts) {
+function renderActivityFeed(receipts, searchGraph = { nodes: [], edges: [] }) {
   if (receipts.length === 0) {
     return `          <article class="activity-card allow" data-activity-state="allowed">
             <div class="activity-icon">&#9989;</div>
@@ -28451,7 +30477,8 @@ function renderActivityFeed(receipts) {
             <div class="activity-badge allow">READY</div>
           </article>`;
   }
-  return receipts.map((receipt) => renderActivityCard(receipt)).join("\n");
+  const attribution = buildActivityAttributionIndex(searchGraph);
+  return receipts.map((receipt) => renderActivityCard(receipt, attribution)).join("\n");
 }
 function parseActivityFilter(value) {
   if (value === "blocked" || value === "flagged" || value === "allowed") {
@@ -28459,36 +30486,149 @@ function parseActivityFilter(value) {
   }
   return "all";
 }
-function buildActivityItems(receipts, filter) {
+function buildActivityItems(receipts, filter, searchGraph = { nodes: [], edges: [] }) {
+  const attribution = buildActivityAttributionIndex(searchGraph);
   return receipts.filter((receipt) => {
     const group = activityFilterGroup(receipt.disposition);
     return filter === "all" || group === filter;
-  }).map((receipt) => ({
-    id: receipt.receipt_id,
-    state: activityFilterGroup(receipt.disposition),
-    tone: activityTone(receipt.disposition),
-    icon: activityPlainIcon(receipt.disposition),
-    title: receipt.summary,
-    meta: `${formatActivityTime(receipt.created_at)} \xB7 ${receipt.receipt_type}`,
-    label: activityLabel(receipt.disposition),
-    raw_content_included: false
-  }));
+  }).map((receipt) => {
+    const detail = activityDetailForReceipt(receipt, attribution);
+    return {
+      id: receipt.receipt_id,
+      state: activityFilterGroup(receipt.disposition),
+      tone: activityTone(receipt.disposition),
+      icon: activityPlainIcon(receipt.disposition),
+      title: receipt.summary,
+      created_at: receipt.created_at,
+      receipt_type: receipt.receipt_type,
+      source_label: detail.surfaceLabel,
+      provider_label: detail.providerLabel,
+      meta_detail: detail.metaDetail,
+      meta: `${formatActivityTime(receipt.created_at)} \xB7 ${detail.metaDetail}`,
+      label: activityLabel(receipt.disposition),
+      raw_content_included: false
+    };
+  });
 }
-function renderActivityCard(receipt) {
+function renderActivityCard(receipt, attribution = /* @__PURE__ */ new Map()) {
   const tone = activityTone(receipt.disposition);
   const filterGroup = activityFilterGroup(receipt.disposition);
+  const detail = activityDetailForReceipt(receipt, attribution);
   return `          <article class="activity-card ${tone}" data-activity-state="${escapeHtml(filterGroup)}">
             <div class="activity-icon">${activityIcon(receipt.disposition)}</div>
             <div>
               <div class="activity-title">${escapeHtml(receipt.summary)}</div>
-              <div class="activity-meta">${escapeHtml(formatActivityTime(receipt.created_at))} \xB7 ${escapeHtml(receipt.receipt_type)}</div>
+              <div class="activity-meta">${renderLocalTime(receipt.created_at)} \xB7 ${escapeHtml(detail.metaDetail)}</div>
             </div>
             <div class="activity-badge ${tone}">${escapeHtml(activityLabel(receipt.disposition))}</div>
           </article>`;
 }
+function buildActivityAttributionIndex(searchGraph) {
+  const index = /* @__PURE__ */ new Map();
+  for (const node of searchGraph.nodes) {
+    if (node.node_type !== "prompt" || !node.summary) {
+      continue;
+    }
+    const attribution = parsePromptNodeAttribution(node.summary);
+    if (!attribution) {
+      continue;
+    }
+    for (const evidenceRef of node.evidence_refs) {
+      if (evidenceRef.startsWith("receipt:")) {
+        index.set(evidenceRef, attribution);
+      }
+    }
+  }
+  return index;
+}
+function parsePromptNodeAttribution(summary) {
+  const match = /^Prompt sent from ([a-z_]+) to ([a-z_]+)\.$/.exec(summary.trim());
+  if (!match) {
+    return null;
+  }
+  return {
+    surfaceLabel: friendlySurfaceLabel(match[1]),
+    providerLabel: friendlyProviderLabel(match[2])
+  };
+}
+function activityDetailForReceipt(receipt, attribution) {
+  const graphAttribution = attribution.get(receipt.receipt_id);
+  const surfaceLabel = graphAttribution?.surfaceLabel ?? (receipt.policy_basis.some((basis) => basis.includes("guardian:mcp:")) ? "MCP" : void 0);
+  const providerLabel = graphAttribution?.providerLabel;
+  const parts = [
+    surfaceLabel,
+    providerLabel,
+    friendlyReceiptTypeLabel(receipt.receipt_type)
+  ].filter((part) => Boolean(part));
+  return {
+    surfaceLabel,
+    providerLabel,
+    metaDetail: parts.join(" \xB7 ") || friendlyReceiptTypeLabel(receipt.receipt_type)
+  };
+}
+function friendlySurfaceLabel(surface) {
+  switch (surface) {
+    case "browser":
+      return "Browser";
+    case "mcp":
+      return "MCP";
+    case "ide":
+      return "IDE";
+    case "cli":
+      return "CLI";
+    case "desktop":
+      return "Desktop app";
+    case "rest":
+      return "API";
+    case "voice":
+      return "Voice";
+    default:
+      return void 0;
+  }
+}
+function friendlyProviderLabel(provider) {
+  switch (provider) {
+    case "chatgpt":
+      return "ChatGPT";
+    case "claude":
+      return "Claude";
+    case "gemini":
+      return "Gemini";
+    case "perplexity":
+      return "Perplexity";
+    case "cursor":
+      return "Cursor";
+    case "windsurf":
+      return "Windsurf";
+    case "openrouter":
+      return "OpenRouter";
+    case "local_model":
+      return "Local AI";
+    case "unknown":
+      return void 0;
+    default:
+      return provider ? provider.split(/[_-]+/g).filter(Boolean).map((part) => part[0]?.toUpperCase() + part.slice(1)).join(" ") : void 0;
+  }
+}
+function friendlyReceiptTypeLabel(receiptType) {
+  switch (receiptType) {
+    case "prompt":
+      return "Prompt check";
+    case "policy":
+      return "Policy receipt";
+    case "context":
+      return "Context receipt";
+    case "local_action":
+      return "Local action";
+    case "learning":
+      return "Learning receipt";
+    case "output":
+      return "Output check";
+  }
+}
 function renderReceiptRow(receipt) {
   const policyBasis = receipt.policy_basis.length > 0 ? receipt.policy_basis.join(", ") : "none recorded";
-  return `          <tr><th scope="row"><code>${escapeHtml(receipt.receipt_id)}</code></th><td>${escapeHtml(receipt.receipt_type)}</td><td>${escapeHtml(receipt.disposition)}</td><td><details><summary>${escapeHtml(receipt.summary)}</summary><dl><dt>Transaction</dt><dd><code>${escapeHtml(receipt.transaction_id)}</code></dd><dt>Created</dt><dd>${escapeHtml(receipt.created_at)}</dd><dt>Policy basis</dt><dd>${escapeHtml(policyBasis)}</dd><dt>Receipt hash</dt><dd><code>${escapeHtml(receipt.receipt_hash)}</code></dd><dt>Raw content</dt><dd>${receipt.raw_content_included ? "included" : "metadata-only"}</dd></dl></details></td></tr>`;
+  return `          <tr class="receipt-row" data-receipt-row data-receipt-id="${escapeHtml(receipt.receipt_id)}"><th scope="row"><code>${escapeHtml(receipt.receipt_id)}</code></th><td>${escapeHtml(receipt.receipt_type)}</td><td>${escapeHtml(receipt.disposition)}</td><td><details><summary>${escapeHtml(receipt.summary)}</summary><dl><dt>Transaction</dt><dd><code>${escapeHtml(receipt.transaction_id)}</code></dd><dt>Created</dt><dd>${renderLocalTime(receipt.created_at)}</dd><dt>Policy basis</dt><dd>${escapeHtml(policyBasis)}</dd><dt>Receipt hash</dt><dd><code>${escapeHtml(receipt.receipt_hash)}</code></dd><dt>Raw content</dt><dd>${receipt.raw_content_included ? "included" : "metadata-only"}</dd></dl></details></td></tr>`;
 }
 function activityTone(disposition) {
   if (disposition === "block") return "block";
@@ -28517,17 +30657,321 @@ function activityFilterGroup(disposition) {
   if (disposition === "warn" || disposition === "confirm") return "flagged";
   return "allowed";
 }
-function formatActivityTime(createdAt) {
+function formatActivityTime(createdAt, nowMs = Date.now()) {
   const parsed = Date.parse(createdAt);
   if (Number.isNaN(parsed)) {
     return createdAt;
   }
+  const diffMs = parsed - nowMs;
+  const absMs = Math.abs(diffMs);
+  if (absMs < 60 * 1e3) {
+    return "just now";
+  }
+  if (absMs < 60 * 60 * 1e3) {
+    const minutes = Math.round(absMs / (60 * 1e3));
+    return diffMs < 0 ? `${minutes} min ago` : `in ${minutes} min`;
+  }
+  if (absMs < 24 * 60 * 60 * 1e3) {
+    const hours = Math.round(absMs / (60 * 60 * 1e3));
+    return diffMs < 0 ? `${hours} hr ago` : `in ${hours} hr`;
+  }
+  if (absMs < 7 * 24 * 60 * 60 * 1e3) {
+    const days = Math.round(absMs / (24 * 60 * 60 * 1e3));
+    return diffMs < 0 ? `${days} day${days === 1 ? "" : "s"} ago` : `in ${days} day${days === 1 ? "" : "s"}`;
+  }
   return new Date(parsed).toLocaleString("en-US", {
-    dateStyle: "medium",
-    timeStyle: "short",
-    timeZone: "UTC"
+    month: "short",
+    day: "numeric",
+    year: "numeric",
+    hour: "numeric",
+    minute: "2-digit",
+    timeZoneName: "short"
   });
 }
+function renderLocalTime(createdAt) {
+  const parsed = Date.parse(createdAt);
+  if (Number.isNaN(parsed)) {
+    return escapeHtml(createdAt);
+  }
+  return `<time data-guardian-local-time datetime="${escapeHtml(createdAt)}" title="${escapeHtml(
+    `Stored by Guardian as ${createdAt}`
+  )}">${escapeHtml(formatActivityTime(createdAt))}</time>`;
+}
+function renderLocalGuardianStatus(status) {
+  switch (status) {
+    case "start_requested":
+      return "Running";
+    case "not_started_mvp":
+      return "Not running";
+  }
+}
+function renderControlTowerRoleCards(viewModel) {
+  return viewModel.surfaces.map(
+    (surface) => `          <article class="role-card">
+            <strong>${escapeHtml(surface.label)}</strong>
+            <span>${escapeHtml(surface.audience)}</span>
+            <span>${escapeHtml(surface.purpose)}</span>
+          </article>`
+  ).join("\n");
+}
+function renderAdminNoticeBar(notices) {
+  if (notices.length === 0) {
+    return "";
+  }
+  return `      <section class="notice-bar" aria-label="Guardian notifications">
+${notices.map((notice) => renderAdminNoticeCard(notice)).join("\n")}
+      </section>`;
+}
+function renderAdminNoticeList(notices) {
+  if (notices.length === 0) {
+    return "        <p>No local admin notices are published.</p>";
+  }
+  return `        <div class="notice-bar" aria-label="Current admin notices">
+${notices.map((notice) => renderAdminNoticeCard(notice)).join("\n")}
+        </div>`;
+}
+function renderAdminNoticeCard(notice) {
+  return `        <article class="notice-card ${escapeHtml(notice.tone)}">
+          <strong>${escapeHtml(notice.title)}</strong>
+          <p>${escapeHtml(notice.message)}</p>
+          <span>${escapeHtml(adminNoticeAudienceLabel(notice.audience))} \xB7 ${renderLocalTime(notice.created_at)}</span>
+          ${notice.receipt_id ? `<code>${escapeHtml(notice.receipt_id)}</code>` : ""}
+        </article>`;
+}
+function adminNoticeAudienceLabel(audience) {
+  switch (audience) {
+    case "admins":
+      return "Admins";
+    case "developers":
+      return "Developers";
+    case "all_users":
+      return "Everyone";
+  }
+}
+function renderGuardianAdminSurface(viewModel, profile, receipts, appPermissionRows) {
+  return `      <section aria-labelledby="guardian-admin-overview">
+        <h2 id="guardian-admin-overview">Guardian Admin</h2>
+        <p>Manage policy packs, marketplace approvals, Prime Pack custom rules, deployment scope, receipts, and release automation from the same local Guardian brain used by the browser extension and MCP clients.</p>
+        <div class="admin-grid">
+${renderAdminSummaryCards(viewModel, profile, receipts, appPermissionRows)}
+        </div>
+      </section>
+      <section aria-labelledby="admin-notifications">
+        <h2 id="admin-notifications">Admin Notifications</h2>
+        <p>Send a short local notice into the Control Tower notification bar. Notices are metadata-only and stay on this device in <code>${escapeHtml(CONTROL_TOWER_ADMIN_NOTICE_FILE_NAME)}</code>.</p>
+        <form class="notice-form" method="post" action="/v1/guardian/admin/notice">
+          <input type="hidden" name="action" value="publish">
+          <label>Title<input name="title" maxlength="${CONTROL_TOWER_ADMIN_NOTICE_TITLE_LIMIT}" placeholder="Policy reminder" required></label>
+          <label>Message<textarea name="message" maxlength="${CONTROL_TOWER_ADMIN_NOTICE_MESSAGE_LIMIT}" placeholder="Use approved customer-data placeholders in external AI tools." required></textarea></label>
+          <label>Audience<select name="audience"><option value="all_users">Everyone</option><option value="admins">Admins</option><option value="developers">Developers</option></select></label>
+          <label>Tone<select name="tone"><option value="info">Helpful note</option><option value="warning">Watch out</option><option value="success">Good news</option></select></label>
+          <button type="submit">Publish local notice</button>
+        </form>
+        <form method="post" action="/v1/guardian/admin/notice">
+          <input type="hidden" name="action" value="clear">
+          <button type="submit">Clear local notices</button>
+        </form>
+${renderAdminNoticeList(viewModel.admin.notices)}
+      </section>
+      <section aria-labelledby="admin-policy-packs">
+        <h2 id="admin-policy-packs">Policy Pack Management</h2>
+        <p>Turn built-in packs on or off for this device now. In enterprise deployments, the same model becomes group assignment.</p>
+        <table aria-label="Admin policy pack assignment">
+          <thead>
+            <tr><th scope="col">Pack</th><th scope="col">State</th><th scope="col">Local action</th></tr>
+          </thead>
+          <tbody>
+${profile.policy_packs.available.map((packId) => {
+    const active = profile.policy_packs.active.includes(packId);
+    const disabled = active && profile.policy_packs.active.length <= 1;
+    return `            <tr><th scope="row">${escapeHtml(packId)}</th><td>${active ? "active" : "available"}</td><td>${renderPolicyPackForm(active ? "disable" : "enable", packId, disabled)}</td></tr>`;
+  }).join("\n")}
+          </tbody>
+        </table>
+      </section>
+      <section aria-labelledby="admin-marketplace">
+        <h2 id="admin-marketplace">Policy Pack Marketplace</h2>
+        <p>Review pack metadata before connecting it to a deployment. Packs can start as request/approval metadata before billing automation is added.</p>
+        <div class="marketplace-grid">
+${renderMarketplaceCards(viewModel)}
+        </div>
+${renderMarketplaceRequestList(viewModel.admin.marketplaceRequests)}
+      </section>
+      <section aria-labelledby="admin-prime-pack">
+        <h2 id="admin-prime-pack">Prime Pack Builder</h2>
+        <p>Create one organization-specific pack from terms, domains, blocked destinations, and escalation phrases. Upload support is designed for text, CSV, and JSON sources.</p>
+        <article class="prime-pack-builder">
+          <h3>Custom protection inputs</h3>
+          <form method="post" action="/v1/guardian/admin/prime-pack">
+            <div class="builder-grid">
+              <label>Sensitive terms<textarea name="sensitiveTerms" maxlength="${CONTROL_TOWER_PRIME_PACK_ENTRY_LIMIT * CONTROL_TOWER_PRIME_PACK_VALUE_LIMIT}" placeholder="Customer IDs, internal code names, regulated phrases"></textarea></label>
+              <label>Approved domains<textarea name="approvedDomains" maxlength="${CONTROL_TOWER_PRIME_PACK_ENTRY_LIMIT * CONTROL_TOWER_PRIME_PACK_VALUE_LIMIT}" placeholder="company.com, secure.vendor.com"></textarea></label>
+              <label>Blocked destinations<textarea name="blockedDestinations" maxlength="${CONTROL_TOWER_PRIME_PACK_ENTRY_LIMIT * CONTROL_TOWER_PRIME_PACK_VALUE_LIMIT}" placeholder="paste sites, personal email domains, unknown file shares"></textarea></label>
+              <label>Escalation phrases<textarea name="escalationPhrases" maxlength="${CONTROL_TOWER_PRIME_PACK_ENTRY_LIMIT * CONTROL_TOWER_PRIME_PACK_VALUE_LIMIT}" placeholder="payment approval, publish externally, send to customer"></textarea></label>
+            </div>
+            <label>Import from text, CSV, or JSON<textarea name="importContent" maxlength="${CONTROL_TOWER_PRIME_PACK_IMPORT_LIMIT}" placeholder="Examples: sensitive_terms,Project Falcon&#10;blocked_destinations,paste.example&#10;or JSON with sensitive_terms, approved_domains, blocked_destinations, and escalation_phrases arrays"></textarea></label>
+            <div class="button-row">
+              <button type="submit" name="action" value="preview">Preview impact</button>
+              <button type="submit" name="action" value="deploy">Deploy locally</button>
+            </div>
+          </form>
+          <ul class="metadata-list">
+            <li><b>Input formats</b><span>${escapeHtml(viewModel.admin.primePack.supportedInputs.join(", "))}</span></li>
+            <li><b>Preview</b><span>stores counts and sample impact in <code>${escapeHtml(CONTROL_TOWER_PRIME_PACK_FILE_NAME)}</code></span></li>
+            <li><b>Deploy</b><span>writes a local admin receipt before assignment</span></li>
+          </ul>
+        </article>
+      </section>
+      <section aria-labelledby="admin-deployment-scope">
+        <h2 id="admin-deployment-scope">Deployment Scope</h2>
+        <p>Assign posture and packs by user or group. Personal Guardian uses the first row; enterprise deployments add managed groups.</p>
+        <table aria-label="Guardian deployment groups">
+          <thead>
+            <tr><th scope="col">Group</th><th scope="col">Users</th><th scope="col">Posture</th><th scope="col">Packs</th></tr>
+          </thead>
+          <tbody>
+${viewModel.admin.managedGroups.map(
+    (group) => `            <tr><th scope="row">${escapeHtml(group.label)}</th><td>${group.users}</td><td>${escapeHtml(group.posture)}</td><td>${escapeHtml(group.packs.join(", ") || "none")}</td></tr>`
+  ).join("\n")}
+          </tbody>
+        </table>
+      </section>
+      <section aria-labelledby="admin-release-automation">
+        <h2 id="admin-release-automation">Release Automation</h2>
+        <p>Use GitHub Actions as the default release path so package evidence, browser artifacts, Docker smoke tests, and npm publication stay repeatable.</p>
+        <div class="builder-grid">
+          <article class="release-command-card">
+            <h3>Dry run</h3>
+            <code class="command-box">${escapeHtml(viewModel.releaseAutomation.dryRunCommand)}</code>
+          </article>
+          <article class="release-command-card">
+            <h3>Publish</h3>
+            <code class="command-box">${escapeHtml(viewModel.releaseAutomation.publishCommand)}</code>
+          </article>
+        </div>
+        <ul class="metadata-list">
+          <li><b>Repository</b><span>${escapeHtml(viewModel.releaseAutomation.repository)}</span></li>
+          <li><b>Workflow</b><span>${escapeHtml(viewModel.releaseAutomation.workflow)}</span></li>
+          <li><b>NPM package</b><span>${escapeHtml(viewModel.releaseAutomation.npmPackage)}</span></li>
+          <li><b>Chrome extension</b><span>${escapeHtml(viewModel.releaseAutomation.chromeExtensionId)}</span></li>
+          <li><b>Still manual</b><span>${escapeHtml(viewModel.releaseAutomation.humanIntervention[0])}</span></li>
+        </ul>
+      </section>
+      <section aria-labelledby="admin-audit">
+        <h2 id="admin-audit">Receipts And Audit</h2>
+        <p>Admins can review metadata-only decisions without exposing raw prompt text, raw responses, local action payloads, or runtime tokens.</p>
+        <table aria-label="Guardian admin receipt audit">
+          <thead>
+            <tr><th scope="col">Receipt</th><th scope="col">Type</th><th scope="col">Decision</th><th scope="col">Details</th></tr>
+          </thead>
+          <tbody>
+${renderReceiptRows(receipts)}
+          </tbody>
+        </table>
+      </section>`;
+}
+function renderAdminSummaryCards(viewModel, profile, receipts, appPermissionRows) {
+  const cards = [
+    {
+      title: "Managed groups",
+      value: String(viewModel.admin.managedGroups.length),
+      detail: "Group-level posture and pack assignment model."
+    },
+    {
+      title: "Marketplace packs",
+      value: String(viewModel.marketplace.length),
+      detail: "Metadata listings ready for approval review."
+    },
+    {
+      title: "Prime Pack",
+      value: viewModel.admin.primePack.status.replace(/_/gu, " "),
+      detail: "Custom strings, domains, destinations, and escalation phrases."
+    },
+    {
+      title: "Active local packs",
+      value: String(profile.policy_packs.active.length),
+      detail: profile.policy_packs.active.join(", ") || "none"
+    },
+    {
+      title: "Governed apps",
+      value: String(appPermissionRows.length),
+      detail: "Local app access remains confirmation-gated."
+    },
+    {
+      title: "Audit receipts",
+      value: String(receipts.length),
+      detail: "Metadata-only receipt chain."
+    }
+  ];
+  return cards.map(
+    (card) => `          <article class="admin-card">
+            <h3>${escapeHtml(card.title)}</h3>
+            <strong>${escapeHtml(card.value)}</strong>
+            <span>${escapeHtml(card.detail)}</span>
+          </article>`
+  ).join("\n");
+}
+function renderMarketplaceCards(viewModel) {
+  return viewModel.marketplace.map(
+    (pack) => `          <article class="marketplace-card" data-marketplace-pack-id="${escapeHtml(pack.packId)}">
+            <h3>${escapeHtml(pack.name)}</h3>
+            <p>${escapeHtml(pack.examples[0] ?? "Policy pack metadata listing.")}</p>
+            <ul class="metadata-list">
+              <li><b>Audience</b><span>${escapeHtml(pack.audience)}</span></li>
+              <li><b>Category</b><span>${escapeHtml(pack.category)}</span></li>
+              <li><b>Maintainer</b><span>${escapeHtml(pack.publisher)}</span></li>
+              <li><b>Version</b><span>${escapeHtml(pack.version)}</span></li>
+              <li><b>Price/license</b><span>${escapeHtml(pack.price)}</span></li>
+              <li><b>Approval state</b><span>${escapeHtml(pack.state)}</span></li>
+              <li><b>False-positive risk</b><span>${escapeHtml(pack.risk)}</span></li>
+            </ul>
+${renderMarketplaceRequestAction(pack)}
+            <details class="marketplace-detail-drawer">
+              <summary>Review details before connecting</summary>
+              <dl>
+                <dt>Permissions requested</dt>
+                <dd>${escapeHtml(pack.permissions.join(" "))}</dd>
+                <dt>Protected data</dt>
+                <dd>${escapeHtml(pack.protectedDataTypes.join(", "))}</dd>
+                <dt>Examples</dt>
+                <dd>${escapeHtml(pack.examples.join(" "))}</dd>
+                <dt>License reference</dt>
+                <dd><code>${escapeHtml(pack.licenseRef)}</code></dd>
+                <dt>Support reference</dt>
+                <dd><code>${escapeHtml(pack.supportRef)}</code></dd>
+              </dl>
+            </details>
+          </article>`
+  ).join("\n");
+}
+function renderMarketplaceRequestAction(pack) {
+  if (pack.requestState === "connected") {
+    return '            <p class="marketplace-request-state">Connected locally through active policy packs.</p>';
+  }
+  if (pack.requestState === "requested_metadata_only") {
+    return `            <p class="marketplace-request-state">Review requested ${pack.requestedAt ? renderLocalTime(pack.requestedAt) : "locally"}.</p>`;
+  }
+  return `            <form class="marketplace-request-form" method="post" action="/v1/guardian/admin/marketplace-request">
+              <input type="hidden" name="action" value="request_review">
+              <input type="hidden" name="packId" value="${escapeHtml(pack.packId)}">
+              <button type="submit">Request review</button>
+              <span>Writes a local receipt; paid pack connection remains approval-gated.</span>
+            </form>`;
+}
+function renderMarketplaceRequestList(requests) {
+  if (requests.length === 0) {
+    return "        <p>No marketplace pack reviews have been requested on this device yet.</p>";
+  }
+  return `        <div class="marketplace-request-list" aria-label="Marketplace review requests">
+${requests.map(
+    (request) => `          <article class="marketplace-request-card">
+            <strong>${escapeHtml(request.pack_name)}</strong>
+            <span>${escapeHtml(request.publisher)} \xB7 ${renderLocalTime(request.requested_at)}</span>
+            <code>${escapeHtml(request.receipt_id)}</code>
+          </article>`
+  ).join("\n")}
+        </div>`;
+}
 function providerDisplayName(providerId) {
   if (providerId === "chatgpt") return "ChatGPT";
   if (providerId === "claude") return "Claude";
@@ -28823,7 +31267,7 @@ function listen(server, host, port) {
     });
   });
 }
-var MAX_BODY_BYTES, ADMIN_HEADER, CONTROL_TOWER_COOKIE, PROMPT_COACH_MODES2, CONTROL_TOWER_RECEIPT_LIMIT, CONTROL_TOWER_GRAPH_NODE_LIMIT, CONTROL_TOWER_GRAPH_EDGE_LIMIT, CONTROL_TOWER_LEARNING_EVENT_LIMIT, CONTROL_TOWER_DATA_FILE_NAMES, CONTROL_TOWER_DATA_DIRECTORY_NAMES, CONTROL_TOWER_SUPPORTED_LIFECYCLE_ACTIONS;
+var MAX_BODY_BYTES, ADMIN_HEADER, CONTROL_TOWER_COOKIE, PROMPT_COACH_MODES2, CONTROL_TOWER_RECEIPT_LIMIT, CONTROL_TOWER_GRAPH_NODE_LIMIT, CONTROL_TOWER_GRAPH_EDGE_LIMIT, CONTROL_TOWER_LEARNING_EVENT_LIMIT, CONTROL_TOWER_ADMIN_NOTICE_LIMIT, CONTROL_TOWER_ADMIN_NOTICE_FILE_NAME, CONTROL_TOWER_ADMIN_NOTICE_TITLE_LIMIT, CONTROL_TOWER_ADMIN_NOTICE_MESSAGE_LIMIT, CONTROL_TOWER_MARKETPLACE_REQUEST_LIMIT, CONTROL_TOWER_MARKETPLACE_REQUEST_FILE_NAME, CONTROL_TOWER_PRIME_PACK_FILE_NAME, CONTROL_TOWER_PRIME_PACK_VALUE_LIMIT, CONTROL_TOWER_PRIME_PACK_ENTRY_LIMIT, CONTROL_TOWER_PRIME_PACK_IMPORT_LIMIT, CONTROL_TOWER_DATA_FILE_NAMES, CONTROL_TOWER_DATA_DIRECTORY_NAMES, CONTROL_TOWER_SUPPORTED_LIFECYCLE_ACTIONS, CONTROL_TOWER_RELEASE_COMMAND_TEMPLATE, CONTROL_TOWER_DRY_RUN_COMMAND_TEMPLATE;
 var init_daemon = __esm({
   "packages/guardian-cli/src/daemon.ts"() {
     "use strict";
@@ -28839,12 +31283,25 @@ var init_daemon = __esm({
     CONTROL_TOWER_GRAPH_NODE_LIMIT = 12;
     CONTROL_TOWER_GRAPH_EDGE_LIMIT = 16;
     CONTROL_TOWER_LEARNING_EVENT_LIMIT = 12;
+    CONTROL_TOWER_ADMIN_NOTICE_LIMIT = 5;
+    CONTROL_TOWER_ADMIN_NOTICE_FILE_NAME = "admin-notices.json";
+    CONTROL_TOWER_ADMIN_NOTICE_TITLE_LIMIT = 80;
+    CONTROL_TOWER_ADMIN_NOTICE_MESSAGE_LIMIT = 240;
+    CONTROL_TOWER_MARKETPLACE_REQUEST_LIMIT = 20;
+    CONTROL_TOWER_MARKETPLACE_REQUEST_FILE_NAME = "marketplace-requests.json";
+    CONTROL_TOWER_PRIME_PACK_FILE_NAME = "prime-pack-draft.json";
+    CONTROL_TOWER_PRIME_PACK_VALUE_LIMIT = 120;
+    CONTROL_TOWER_PRIME_PACK_ENTRY_LIMIT = 100;
+    CONTROL_TOWER_PRIME_PACK_IMPORT_LIMIT = 24 * 1024;
     CONTROL_TOWER_DATA_FILE_NAMES = [
       "profile.json",
       "policy-packs.json",
       "posture-profile.json",
       "preferences.json",
       "permissions.json",
+      CONTROL_TOWER_ADMIN_NOTICE_FILE_NAME,
+      CONTROL_TOWER_MARKETPLACE_REQUEST_FILE_NAME,
+      CONTROL_TOWER_PRIME_PACK_FILE_NAME,
       "runtime-token"
     ];
     CONTROL_TOWER_DATA_DIRECTORY_NAMES = ["ecl", "receipts", "mcp"];
@@ -28855,6 +31312,8 @@ var init_daemon = __esm({
       "restore",
       "delete"
     ];
+    CONTROL_TOWER_RELEASE_COMMAND_TEMPLATE = `gh workflow run ${GUARDIAN_RELEASE_DISPATCH_WORKFLOW} -f release_version=<version> -f channels=all -f dry_run=false -f run_docker_smoke=true -f publish_auth=token -f browser_store_publish=manual`;
+    CONTROL_TOWER_DRY_RUN_COMMAND_TEMPLATE = `gh workflow run ${GUARDIAN_RELEASE_DISPATCH_WORKFLOW} -f release_version=<version> -f channels=all -f dry_run=true -f run_docker_smoke=true -f publish_auth=token -f browser_store_publish=manual`;
   }
 });