@m8t-stack/cli 0.2.12 → 0.2.14

package/dist/cli.js

@@ -781,7 +781,10 @@ var init_brain_yaml_mirror = __esm({
       `    enabled: true`,
       `    lifecycle: { inbox: 14d, stale: 30d, archive: 90d }`,
       `    artifactRetention: 30d`,
-      `    digestRetention: 90d`
+      `    digestRetention: 90d`,
+      `  costReport:`,
+      `    enabled: true`,
+      `    cadenceDays: 14`
     ].join("\n");
     MIRROR_BANNER = [
       `# \u2500\u2500 MIRROR \u2014 link record convenience copy. NOT the source of truth \u2014`,
@@ -1195,7 +1198,7 @@ var init_enable_hosted_brain = __esm({
 import { Builtins, Cli } from "clipanion";
 
 // src/lib/package-version.ts
-var CLI_VERSION = "0.2.12";
+var CLI_VERSION = "0.2.14";
 
 // src/lib/render-error.ts
 init_errors();
@@ -15064,10 +15067,9 @@ async function deployPromptAdvisor(args) {
   const fillableFields = fm["fillable-fields"] ?? [];
   const valuesMap = {};
   for (const field of fillableFields) {
-    if (field.default !== void 0) {
-      valuesMap[field.name] = field.default;
-    }
+    if (field.default !== void 0) valuesMap[field.name] = field.default;
   }
+  for (const [k, v] of Object.entries(args.fieldOverrides ?? {})) valuesMap[k] = v;
   const instructions = renderPersonaBody(personaPath, valuesMap);
   return createPromptVersion({
     credential: args.credential,
@@ -17426,9 +17428,134 @@ var PlatformUpdateCommand = class extends M8tCommand {
   }
 };
 
-// src/commands/deploy.ts
+// src/commands/platform/enable-cost-report.ts
 import { Command as Command33, Option as Option31 } from "clipanion";
 
+// src/lib/wire-gateway-acs.ts
+init_rbac();
+async function wireGatewayForAcs(args) {
+  try {
+    await args.az([
+      "role",
+      "assignment",
+      "create",
+      "--assignee-object-id",
+      args.gatewayPrincipalId,
+      "--assignee-principal-type",
+      "ServicePrincipal",
+      "--role",
+      CONTRIBUTOR_ROLE_ID,
+      "--scope",
+      args.acsResourceId
+    ]);
+  } catch (e) {
+    if (!(e instanceof Error && /RoleAssignmentExists/i.test(e.message))) throw e;
+  }
+  await args.az([
+    "containerapp",
+    "update",
+    "-n",
+    args.gatewayApp,
+    "-g",
+    args.resourceGroup,
+    "--set-env-vars",
+    `M8T_ACS_ENDPOINT=${args.endpoint}`,
+    `M8T_ACS_SENDER=${args.sender}`,
+    "M8T_ENABLE_COST_REPORTER=1"
+  ]);
+}
+
+// src/commands/platform/enable-cost-report.ts
+init_errors();
+var PlatformEnableCostReportCommand = class extends M8tCommand {
+  static paths = [["platform", "enable-cost-report"]];
+  static usage = Command33.Usage({
+    description: "Wire the deployed gateway to send the bi-weekly cost report via ACS Email.",
+    details: "Discovers the live gateway Container App, grants its managed identity Contributor at the ACS resource scope (authorising the ACS Email send), and sets M8T_ACS_ENDPOINT / M8T_ACS_SENDER / M8T_ENABLE_COST_REPORTER=1 on the gateway. Idempotent \u2014 safely re-runnable. ACS is created during the executor deploy; pass its endpoint, sender, and resource id (from that deploy or 'az communication list')."
+  });
+  subscription = Option31.String("--subscription");
+  resourceGroup = Option31.String("--resource-group", {
+    description: "m8t-stack resource group to disambiguate the gateway (multi-deployment subscriptions)."
+  });
+  acsEndpoint = Option31.String("--acs-endpoint", { required: true, description: "ACS data-plane endpoint, e.g. https://acs-<name>.communication.azure.com/" });
+  acsSender = Option31.String("--acs-sender", { required: true, description: "Managed-domain sender address, e.g. DoNotReply@<guid>.azurecomm.net" });
+  acsResourceId = Option31.String("--acs-resource-id", { required: true, description: "ARM resource id of the acs-<name> Communication Service \u2014 the role-grant scope." });
+  output = Option31.String("--output");
+  async executeCommand() {
+    const mode = resolveOutputMode(
+      this.output,
+      this.context.stdout
+    );
+    const log = (msg) => {
+      if (mode !== "json") this.context.stdout.write(msg + "\n");
+    };
+    const ctx = await resolveGatewayContext({
+      interactive: mode !== "json",
+      subscriptionId: this.subscription,
+      resourceGroup: this.resourceGroup
+    });
+    const { resourceGroup, name } = parseContainerAppResourceId(ctx.containerAppResourceId);
+    const gatewayPrincipalId = (await runAz([
+      "containerapp",
+      "show",
+      "-n",
+      name,
+      "-g",
+      resourceGroup,
+      "--query",
+      "identity.principalId",
+      "-o",
+      "tsv"
+    ])).trim();
+    if (gatewayPrincipalId === "") {
+      throw new LocalCliError({
+        code: "GATEWAY_NO_MANAGED_IDENTITY",
+        message: `Gateway '${name}' has no managed identity principalId to grant.`,
+        hint: "Assign a system-assigned identity to the gateway Container App, then re-run."
+      });
+    }
+    await wireGatewayForAcs({
+      az: runAz,
+      resourceGroup,
+      acsResourceId: this.acsResourceId,
+      gatewayApp: name,
+      endpoint: this.acsEndpoint,
+      sender: this.acsSender,
+      gatewayPrincipalId
+    });
+    if (mode === "json") {
+      this.context.stdout.write(
+        renderJson({
+          gateway: name,
+          resourceGroup,
+          roleGranted: "Contributor",
+          scope: this.acsResourceId,
+          envSet: {
+            M8T_ACS_ENDPOINT: this.acsEndpoint,
+            M8T_ACS_SENDER: this.acsSender,
+            M8T_ENABLE_COST_REPORTER: "1"
+          }
+        }) + "\n"
+      );
+      return 0;
+    }
+    this.context.stdout.write(
+      renderKeyValueBlock([
+        { key: "gateway", value: name },
+        { key: "role granted", value: `Contributor @ ${this.acsResourceId}` },
+        { key: "M8T_ACS_ENDPOINT", value: this.acsEndpoint },
+        { key: "M8T_ACS_SENDER", value: this.acsSender },
+        { key: "M8T_ENABLE_COST_REPORTER", value: "1" }
+      ]) + "\n"
+    );
+    log(colors.success("cost report enabled \u2014 the gateway will send it via ACS \u2713"));
+    return 0;
+  }
+};
+
+// src/commands/deploy.ts
+import { Command as Command34, Option as Option32 } from "clipanion";
+
 // src/lib/app-reg.ts
 init_errors();
 var APP_NAME = "m8t-stack-webapp";
@@ -17961,24 +18088,24 @@ function classifyWhatIf(changes) {
 var DEFAULT_IMAGE_REF = "ghcr.io/m8t-run/m8t:latest";
 var DeployCommand = class extends M8tCommand {
   static paths = [["deploy"]];
-  static usage = Command33.Usage({
+  static usage = Command34.Usage({
     description: "Deploy (or update) the m8t gateway/webapp stack via Bicep.",
     details: "Ensures the Entra app reg (or pass --client-id to reuse an existing one \u2014 required if you can't create app regs), writes ~/.m8t-stack/config.yaml, ensures the resource group, and runs deploy/main.bicep. The repo is located via ~/.m8t-stack/repo-root."
   });
-  subscription = Option31.String("--subscription");
-  resourceGroup = Option31.String("--resource-group", "rg-m8t-stack");
-  location = Option31.String("--location", "eastus");
-  suffix = Option31.String("--suffix", "");
-  imageRef = Option31.String("--image-ref", DEFAULT_IMAGE_REF);
-  acrPullIdentity = Option31.String("--acrpull-identity");
-  acrResourceId = Option31.String("--acr-resource-id");
-  foundryEndpoint = Option31.String("--foundry-endpoint");
-  foundryResourceId = Option31.String("--foundry-resource-id");
-  foundryTracing = Option31.String("--foundry-tracing");
+  subscription = Option32.String("--subscription");
+  resourceGroup = Option32.String("--resource-group", "rg-m8t-stack");
+  location = Option32.String("--location", "eastus");
+  suffix = Option32.String("--suffix", "");
+  imageRef = Option32.String("--image-ref", DEFAULT_IMAGE_REF);
+  acrPullIdentity = Option32.String("--acrpull-identity");
+  acrResourceId = Option32.String("--acr-resource-id");
+  foundryEndpoint = Option32.String("--foundry-endpoint");
+  foundryResourceId = Option32.String("--foundry-resource-id");
+  foundryTracing = Option32.String("--foundry-tracing");
   // project | account | skip (bicep default: project)
-  clientId = Option31.String("--client-id");
-  whatIf = Option31.Boolean("--what-if", false);
-  output = Option31.String("--output");
+  clientId = Option32.String("--client-id");
+  whatIf = Option32.Boolean("--what-if", false);
+  output = Option32.String("--output");
   async executeCommand() {
     const mode = resolveOutputMode(
       this.output,
@@ -18092,7 +18219,7 @@ var DeployCommand = class extends M8tCommand {
 
 // src/commands/eval/skill.ts
 import { spawnSync as spawnSync3 } from "child_process";
-import { Command as Command34, Option as Option32 } from "clipanion";
+import { Command as Command35, Option as Option33 } from "clipanion";
 init_errors();
 var DECISIONS = /* @__PURE__ */ new Set(["promote", "reject", "needs_review"]);
 var JUDGE_STATUSES = /* @__PURE__ */ new Set(["ok", "skipped", "unavailable"]);
@@ -18117,14 +18244,14 @@ function parseVerdict(stdout) {
 }
 var EvalSkillCommand = class extends M8tCommand {
   static paths = [["eval", "skill"]];
-  static usage = Command34.Usage({
+  static usage = Command35.Usage({
     description: "Vet one inbox skill candidate (Brain Faculties Eval F1): promote / reject / needs_review. Shells out to the Python `brain-eval` core (override its path with $BRAIN_EVAL_BIN)."
   });
-  candidate = Option32.String();
-  skillsDir = Option32.String("--skills-dir");
-  noJudge = Option32.Boolean("--no-judge", false);
-  deployment = Option32.String("--deployment");
-  output = Option32.String("--output");
+  candidate = Option33.String();
+  skillsDir = Option33.String("--skills-dir");
+  noJudge = Option33.Boolean("--no-judge", false);
+  deployment = Option33.String("--deployment");
+  output = Option33.String("--output");
   executeCommand() {
     return Promise.resolve(this._runCommand());
   }
@@ -18183,7 +18310,7 @@ var EvalSkillCommand = class extends M8tCommand {
 import { spawnSync as spawnSync4 } from "child_process";
 import { writeFileSync as writeFileSync3, mkdirSync as mkdirSync3, readFileSync as readFileSync13, existsSync as existsSync12, readdirSync } from "fs";
 import { join as join19 } from "path";
-import { Command as Command35, Option as Option33 } from "clipanion";
+import { Command as Command36, Option as Option34 } from "clipanion";
 init_errors();
 init_esm();
 function parseArmToken(tok, opts) {
@@ -18397,23 +18524,23 @@ function buildPlan(args) {
 }
 var EvalExamCommand = class extends M8tCommand {
   static paths = [["eval", "exam"]];
-  static usage = Command35.Usage({
+  static usage = Command36.Usage({
     description: "Run a brain exam (Brain Referee E2-F2): impact A/B + dream-delta. Resolves the plan, then shells out to the Python `brain-exam` orchestrator (override its path with $BRAIN_EXAM_BIN). Renders an ExamVerdict: three-valued verdict + power note + per-task flips."
   });
-  worker = Option33.String();
-  arms = Option33.String("--arms");
-  taskSet = Option33.String("--task-set");
-  examType = Option33.String("--exam-type");
-  reps = Option33.String("-n,--reps");
-  probes = Option33.String("--probes");
-  pool = Option33.String("--pool");
-  out = Option33.String("--out");
-  dryRun = Option33.Boolean("--dry-run", false);
-  keepArms = Option33.Boolean("--keep-arms", false);
-  allowStub = Option33.Boolean("--allow-stub", false);
-  deployment = Option33.String("--deployment");
-  output = Option33.String("--output");
-  observeWaitS = Option33.String("--observe-wait-s");
+  worker = Option34.String();
+  arms = Option34.String("--arms");
+  taskSet = Option34.String("--task-set");
+  examType = Option34.String("--exam-type");
+  reps = Option34.String("-n,--reps");
+  probes = Option34.String("--probes");
+  pool = Option34.String("--pool");
+  out = Option34.String("--out");
+  dryRun = Option34.Boolean("--dry-run", false);
+  keepArms = Option34.Boolean("--keep-arms", false);
+  allowStub = Option34.Boolean("--allow-stub", false);
+  deployment = Option34.String("--deployment");
+  output = Option34.String("--output");
+  observeWaitS = Option34.String("--observe-wait-s");
   async executeCommand() {
     await Promise.resolve();
     const worker = typeof this.worker === "string" ? this.worker : void 0;
@@ -18527,10 +18654,10 @@ var EvalExamCommand = class extends M8tCommand {
 };
 
 // src/commands/version.ts
-import { Command as Command36, Option as Option34 } from "clipanion";
+import { Command as Command37, Option as Option35 } from "clipanion";
 var VersionCommand = class extends M8tCommand {
   static paths = [["version"], ["--version"], ["-v"]];
-  static usage = Command36.Usage({
+  static usage = Command37.Usage({
     description: "Print the CLI version.",
     details: "Prints the m8t CLI version. With --verbose, also prints Node version and platform.",
     examples: [
@@ -18538,8 +18665,8 @@ var VersionCommand = class extends M8tCommand {
       ["Print as JSON", "$0 version --output json"]
     ]
   });
-  output = Option34.String("--output", { description: "pretty | json | auto (default)" });
-  verbose = Option34.Boolean("--verbose", false);
+  output = Option35.String("--output", { description: "pretty | json | auto (default)" });
+  verbose = Option35.Boolean("--verbose", false);
   executeCommand() {
     const mode = resolveOutputMode(
       this.output ?? "auto",
@@ -18570,18 +18697,18 @@ var VersionCommand = class extends M8tCommand {
 };
 
 // src/commands/whoami.ts
-import { Command as Command37, Option as Option35 } from "clipanion";
+import { Command as Command38, Option as Option36 } from "clipanion";
 var WhoamiCommand = class extends M8tCommand {
   static paths = [["whoami"]];
-  static usage = Command37.Usage({
+  static usage = Command38.Usage({
     description: "Show your identity + the gateway you'll talk to. Probes the backend."
   });
-  output = Option35.String("--output");
-  verbose = Option35.Boolean("--verbose", false);
-  subscription = Option35.String("--subscription", {
+  output = Option36.String("--output");
+  verbose = Option36.Boolean("--verbose", false);
+  subscription = Option36.String("--subscription", {
     description: "Azure subscription ID to discover gateway in (defaults to active az subscription)."
   });
-  resourceGroup = Option35.String("--resource-group", {
+  resourceGroup = Option36.String("--resource-group", {
     description: "m8t-stack resource group to disambiguate the gateway (multi-deployment subscriptions)."
   });
   async executeCommand() {
@@ -18646,7 +18773,7 @@ var WhoamiCommand = class extends M8tCommand {
 };
 
 // src/commands/status.ts
-import { Command as Command38, Option as Option36 } from "clipanion";
+import { Command as Command39, Option as Option37 } from "clipanion";
 
 // src/lib/azd.ts
 init_errors();
@@ -18711,10 +18838,10 @@ async function resolveLocalContext() {
 // src/commands/status.ts
 var StatusCommand = class extends M8tCommand {
   static paths = [["status"]];
-  static usage = Command38.Usage({
+  static usage = Command39.Usage({
     description: "Show the local m8t context: identity, config.yaml, gateway cache, azd mode."
   });
-  output = Option36.String("--output");
+  output = Option37.String("--output");
   async executeCommand() {
     const mode = resolveOutputMode(
       this.output,
@@ -18752,7 +18879,7 @@ var StatusCommand = class extends M8tCommand {
 };
 
 // src/commands/doctor.ts
-import { Command as Command39, Option as Option37 } from "clipanion";
+import { Command as Command40, Option as Option38 } from "clipanion";
 import { DefaultAzureCredential as DefaultAzureCredential16 } from "@azure/identity";
 import * as fs19 from "fs";
 import * as os9 from "os";
@@ -19003,12 +19130,12 @@ function probeRepoRoot() {
 }
 var DoctorCommand = class extends M8tCommand {
   static paths = [["doctor"]];
-  static usage = Command39.Usage({
+  static usage = Command40.Usage({
     description: "Diagnose the local m8t setup: az login, config.yaml, gateway, Foundry data-plane."
   });
-  output = Option37.String("--output");
-  agent = Option37.String("--agent");
-  resourceGroup = Option37.String("--resource-group", {
+  output = Option38.String("--output");
+  agent = Option38.String("--agent");
+  resourceGroup = Option38.String("--resource-group", {
     description: "m8t-stack resource group to disambiguate the gateway (multi-deployment subscriptions)."
   });
   async executeCommand() {
@@ -19124,7 +19251,7 @@ var DoctorCommand = class extends M8tCommand {
 };
 
 // src/commands/switch.ts
-import { Command as Command40, Option as Option38 } from "clipanion";
+import { Command as Command41, Option as Option39 } from "clipanion";
 
 // src/lib/profiles.ts
 import * as fs20 from "fs/promises";
@@ -19264,14 +19391,14 @@ async function profileSwitch(name, asName) {
 init_errors();
 var SwitchCommand = class extends M8tCommand {
   static paths = [["switch"]];
-  static usage = Command40.Usage({
+  static usage = Command41.Usage({
     description: "Re-point local config at another deployment: --subscription <id|name> (discovery) or <profile>."
   });
-  profile = Option38.String({ required: false });
-  subscription = Option38.String("--subscription");
-  list = Option38.Boolean("--list", false);
-  as = Option38.String("--as");
-  output = Option38.String("--output");
+  profile = Option39.String({ required: false });
+  subscription = Option39.String("--subscription");
+  list = Option39.Boolean("--list", false);
+  as = Option39.String("--as");
+  output = Option39.String("--output");
   async executeCommand() {
     const mode = resolveOutputMode(
       this.output,
@@ -19328,7 +19455,7 @@ var SwitchCommand = class extends M8tCommand {
 
 // src/commands/open.ts
 import { spawn as spawn5 } from "child_process";
-import { Command as Command41, Option as Option39 } from "clipanion";
+import { Command as Command42, Option as Option40 } from "clipanion";
 
 // src/lib/open-targets.ts
 init_errors();
@@ -19374,14 +19501,14 @@ function openUrl(url) {
 }
 var OpenCommand = class extends M8tCommand {
   static paths = [["open"]];
-  static usage = Command41.Usage({
+  static usage = Command42.Usage({
     description: "Open the deployed webapp (default), the Foundry portal, or the resource group.",
     details: "Targets: webapp (deployed app, default) | foundry (ai.azure.com) | portal (resource group in the Azure portal). Pass --print to emit the URL instead of launching a browser (also the default when stdout isn't a TTY)."
   });
-  target = Option39.String({ required: false });
-  print = Option39.Boolean("--print", false);
-  output = Option39.String("--output");
-  resourceGroup = Option39.String("--resource-group", {
+  target = Option40.String({ required: false });
+  print = Option40.Boolean("--print", false);
+  output = Option40.String("--output");
+  resourceGroup = Option40.String("--resource-group", {
     description: "m8t-stack resource group to disambiguate the gateway (multi-deployment subscriptions)."
   });
   async executeCommand() {
@@ -19425,7 +19552,7 @@ var OpenCommand = class extends M8tCommand {
 };
 
 // src/commands/dream/run.ts
-import { Command as Command42, Option as Option40 } from "clipanion";
+import { Command as Command43, Option as Option41 } from "clipanion";
 import { AzureCliCredential } from "@azure/identity";
 import { TableClient as TableClient2 } from "@azure/data-tables";
 import { AIProjectClient as AIProjectClient3 } from "@azure/ai-projects";
@@ -21442,14 +21569,17 @@ function parseDreamerConfig(rawYaml, env) {
   };
 }
 
+// ../../packages/brain/engine/dist/esm/cost-report/config.js
+import { parse as parseYaml11 } from "yaml";
+
 // ../../packages/brain/engine/dist/esm/librarian/codify/persistence-guard.js
 var ZERO_WIDTH_RE = new RegExp("\u200B|\u200C|\u200D|\uFEFF", "g");
 
 // ../../packages/brain/engine/dist/esm/librarian/janitor/frontmatter.js
-import { parse as parseYaml11, stringify as stringifyYaml5 } from "yaml";
+import { parse as parseYaml12, stringify as stringifyYaml5 } from "yaml";
 
 // ../../packages/brain/engine/dist/esm/librarian/config.js
-import { parse as parseYaml12 } from "yaml";
+import { parse as parseYaml13 } from "yaml";
 
 // src/lib/dream-discovery.ts
 init_http();
@@ -21566,20 +21696,20 @@ function redactTranscripts(input) {
 }
 var DreamRunCommand = class extends M8tCommand {
   static paths = [["dream", "run"]];
-  static usage = Command42.Usage({
+  static usage = Command43.Usage({
     description: "Dry-run the brain consumption pipeline for one worker (no model call, no writes).",
     details: "Builds AzureCliCredential + resolves the Foundry project, ledger table, and Log Analytics workspace, runs the consumption pipeline, and prints the skip-ledger, the partition invariant, and harvest stats. Transcripts are metadata-only unless --show-transcripts is passed."
   });
-  worker = Option40.String("--worker", { description: "Worker (canonical name) to harvest. Required." });
-  dryRun = Option40.Boolean("--dry-run", false, { description: "Read-only harvest; no model call, no writes." });
-  since = Option40.String("--since", { description: "ISO-8601 start override (rejected if malformed or future)." });
-  reset = Option40.Boolean("--reset", false, { description: "Ignore the stored cursor; read from the beginning." });
-  showTranscripts = Option40.Boolean("--show-transcripts", false, {
+  worker = Option41.String("--worker", { description: "Worker (canonical name) to harvest. Required." });
+  dryRun = Option41.Boolean("--dry-run", false, { description: "Read-only harvest; no model call, no writes." });
+  since = Option41.String("--since", { description: "ISO-8601 start override (rejected if malformed or future)." });
+  reset = Option41.Boolean("--reset", false, { description: "Ignore the stored cursor; read from the beginning." });
+  showTranscripts = Option41.Boolean("--show-transcripts", false, {
     description: "Print transcript bodies (default: metadata only)."
   });
-  subscription = Option40.String("--subscription");
-  endpoint = Option40.String("--endpoint");
-  output = Option40.String("--output");
+  subscription = Option41.String("--subscription");
+  endpoint = Option41.String("--endpoint");
+  output = Option41.String("--output");
   // Resolution seam — overridden by tests; built lazily at runtime otherwise.
   deps;
   async executeCommand() {
@@ -21927,7 +22057,7 @@ function defaultDeps(overrides) {
 }
 
 // src/commands/foundry/create.ts
-import { Command as Command43, Option as Option41 } from "clipanion";
+import { Command as Command44, Option as Option42 } from "clipanion";
 
 // src/lib/foundry-create.ts
 init_errors();
@@ -22165,7 +22295,7 @@ async function createFoundryProject(args) {
 init_errors();
 var FoundryCreateCommand = class extends M8tCommand {
   static paths = [["foundry", "create"]];
-  static usage = Command43.Usage({
+  static usage = Command44.Usage({
     description: "Create an AI Foundry (AIServices) account + project + model deployment from scratch.",
     details: "Non-interactive and idempotent. Creates the AIServices account (custom subdomain + project management), a project, and a model deployment (default gpt-4.1-mini @ capacity 50). Region must be hosted-agent-eligible. Emits the project endpoint as structured output. Re-run is a clean no-op (account/project skipped if present; deployment capacity converges UP, never down).",
     examples: [
@@ -22174,16 +22304,16 @@ var FoundryCreateCommand = class extends M8tCommand {
       ["Higher capacity for a reasoning model", "$0 foundry create --resource-group rg-m8t-stack --location eastus2 --model gpt-5-mini --capacity 250"]
     ]
   });
-  resourceGroup = Option41.String("--resource-group");
-  location = Option41.String("--location");
-  account = Option41.String("--account");
-  project = Option41.String("--project", "m8t");
-  model = Option41.String("--model", "gpt-4.1-mini");
-  modelVersion = Option41.String("--model-version", "2025-04-14");
-  capacity = Option41.String("--capacity", "50");
-  subscription = Option41.String("--subscription");
-  skipQuotaCheck = Option41.Boolean("--skip-quota-check", false);
-  output = Option41.String("--output");
+  resourceGroup = Option42.String("--resource-group");
+  location = Option42.String("--location");
+  account = Option42.String("--account");
+  project = Option42.String("--project", "m8t");
+  model = Option42.String("--model", "gpt-4.1-mini");
+  modelVersion = Option42.String("--model-version", "2025-04-14");
+  capacity = Option42.String("--capacity", "50");
+  subscription = Option42.String("--subscription");
+  skipQuotaCheck = Option42.Boolean("--skip-quota-check", false);
+  output = Option42.String("--output");
   async executeCommand() {
     const mode = resolveOutputMode(
       this.output,
@@ -22255,22 +22385,22 @@ var FoundryCreateCommand = class extends M8tCommand {
 };
 
 // src/commands/foundry/await-ready.ts
-import { Command as Command44, Option as Option42 } from "clipanion";
+import { Command as Command45, Option as Option43 } from "clipanion";
 import { AzureCliCredential as AzureCliCredential2 } from "@azure/identity";
 init_errors();
 var FoundryAwaitReadyCommand = class extends M8tCommand {
   static paths = [["foundry", "await-ready"]];
-  static usage = Command44.Usage({
+  static usage = Command45.Usage({
     description: "Wait until a freshly-created Foundry project's data plane reliably serves it.",
     details: "Probes the project (GET /agents) until it returns 200 on a few consecutive tries, or fails clearly after a bounded budget. A newly-created account can serve intermittent 404 'Project not found' for minutes; run this after 'foundry create' and before deploying agents so the worker phase doesn't catch the unstable window.",
     examples: [["Wait for a project to be ready", "$0 foundry await-ready --endpoint https://acc.services.ai.azure.com/api/projects/m8t"]]
   });
-  endpoint = Option42.String("--endpoint");
-  consecutive = Option42.String("--consecutive", "3");
-  attempts = Option42.String("--attempts", "60");
-  interval = Option42.String("--interval", "5");
-  subscription = Option42.String("--subscription");
-  output = Option42.String("--output");
+  endpoint = Option43.String("--endpoint");
+  consecutive = Option43.String("--consecutive", "3");
+  attempts = Option43.String("--attempts", "60");
+  interval = Option43.String("--interval", "5");
+  subscription = Option43.String("--subscription");
+  output = Option43.String("--output");
   async executeCommand() {
     const mode = resolveOutputMode(this.output, this.context.stdout);
     const endpoint = typeof this.endpoint === "string" ? this.endpoint : void 0;
@@ -22304,7 +22434,7 @@ var FoundryAwaitReadyCommand = class extends M8tCommand {
 };
 
 // src/commands/bootstrap/preflight.ts
-import { Command as Command45, Option as Option43 } from "clipanion";
+import { Command as Command46, Option as Option44 } from "clipanion";
 init_errors();
 
 // src/lib/bootstrap-preflight.ts
@@ -22378,7 +22508,7 @@ function buildPreflightBanner(who) {
 // src/commands/bootstrap/preflight.ts
 var BootstrapPreflightCommand = class extends M8tCommand {
   static paths = [["bootstrap", "preflight"]];
-  static usage = Command45.Usage({
+  static usage = Command46.Usage({
     description: "Loudly verify you can install m8t-stack (Owner/UAA + directory admin) and hard-stop if not.",
     details: "Step 1 of `m8t bootstrap`. Prints an unmissable admin-credentials notice, then checks: Owner or User Access Administrator at subscription scope (hard requirement), directory-admin capability to register the app (or pass --client-id), and registers Microsoft.ContainerInstance. Exits non-zero with the exact failing check + remedy.",
     examples: [
@@ -22386,8 +22516,8 @@ var BootstrapPreflightCommand = class extends M8tCommand {
       ["BYO app registration (directory guests)", "$0 bootstrap preflight --client-id <appId>"]
     ]
   });
-  clientId = Option43.String("--client-id");
-  subscription = Option43.String("--subscription");
+  clientId = Option44.String("--client-id");
+  subscription = Option44.String("--subscription");
   async executeCommand() {
     const clientId = typeof this.clientId === "string" ? this.clientId : void 0;
     const account = await getAzAccount();
@@ -22446,7 +22576,7 @@ ${colors.error("  " + why)}
 import * as fs23 from "fs";
 import * as os12 from "os";
 import * as path24 from "path";
-import { Command as Command46, Option as Option44 } from "clipanion";
+import { Command as Command47, Option as Option45 } from "clipanion";
 init_errors();
 
 // src/lib/bootstrap-mi.ts
@@ -22699,7 +22829,7 @@ var ACI_NAME = "m8t-installer";
 var MI_NAME = "m8t-installer-mi";
 var BootstrapLaunchCommand = class extends M8tCommand {
   static paths = [["bootstrap", "launch"]];
-  static usage = Command46.Usage({
+  static usage = Command47.Usage({
     description: "Create + authorize the installer managed identity, then kick the cloud installer.",
     details: "Step 2 of `m8t bootstrap` (run after `preflight`). Ensures the resource group, creates the m8t-stack app registration (or uses --client-id), creates a user-assigned managed identity granted Owner at subscription scope, and launches the published m8t-installer image as an ACI run-to-completion job under that identity. Writes ~/.m8t-stack/bootstrap.json for `status`/`reap`/`finish`.",
     examples: [
@@ -22708,13 +22838,13 @@ var BootstrapLaunchCommand = class extends M8tCommand {
       ["Pin a specific installer tag", "$0 bootstrap launch --location eastus2 --installer-tag v0.1.0"]
     ]
   });
-  location = Option44.String("--location");
-  resourceGroup = Option44.String("--resource-group");
-  clientId = Option44.String("--client-id");
-  subscription = Option44.String("--subscription");
-  installerTag = Option44.String("--installer-tag");
-  gatewayImageRef = Option44.String("--gateway-image-ref");
-  githubAppCreds = Option44.String("--github-app-creds");
+  location = Option45.String("--location");
+  resourceGroup = Option45.String("--resource-group");
+  clientId = Option45.String("--client-id");
+  subscription = Option45.String("--subscription");
+  installerTag = Option45.String("--installer-tag");
+  gatewayImageRef = Option45.String("--gateway-image-ref");
+  githubAppCreds = Option45.String("--github-app-creds");
   async executeCommand() {
     const location = typeof this.location === "string" ? this.location : void 0;
     if (!location) {
@@ -22815,7 +22945,7 @@ var BootstrapLaunchCommand = class extends M8tCommand {
 };
 
 // src/commands/bootstrap/status.ts
-import { Command as Command47, Option as Option45 } from "clipanion";
+import { Command as Command48, Option as Option46 } from "clipanion";
 init_errors();
 
 // src/lib/bootstrap-aci-state.ts
@@ -22843,13 +22973,13 @@ async function getAciState(opts) {
 // src/commands/bootstrap/status.ts
 var BootstrapStatusCommand = class extends M8tCommand {
   static paths = [["bootstrap", "status"]];
-  static usage = Command47.Usage({
+  static usage = Command48.Usage({
     description: "Show the cloud installer's live status (phase, progress, result).",
     details: "Reads the durable status blob written by the installer. --watch polls until the install reaches done or failed.",
     examples: [["One read", "$0 bootstrap status"], ["Watch to completion", "$0 bootstrap status --watch"]]
   });
-  watch = Option45.Boolean("--watch", false);
-  output = Option45.String("--output");
+  watch = Option46.Boolean("--watch", false);
+  output = Option46.String("--output");
   async executeCommand() {
     const state = await readBootstrapState();
     if (!state) {
@@ -22920,7 +23050,7 @@ function formatStatus(d) {
 }
 
 // src/commands/bootstrap/reap.ts
-import { Command as Command48, Option as Option46 } from "clipanion";
+import { Command as Command49, Option as Option47 } from "clipanion";
 init_errors();
 
 // src/lib/bootstrap-reap.ts
@@ -22996,14 +23126,14 @@ async function reapInstaller(opts) {
 // src/commands/bootstrap/reap.ts
 var BootstrapReapCommand = class extends M8tCommand {
   static paths = [["bootstrap", "reap"]];
-  static usage = Command48.Usage({
+  static usage = Command49.Usage({
     description: "Tear down the installer scaffolding (ACI \u2192 MI \u2192 its role assignments) after a successful install.",
     details: "Runs locally on the 'done' signal (the installer can't delete its own identity). The platform RG and the gateway's own assignments persist. A failed install is left intact for diagnosis unless --force.",
     examples: [["Reap after done", "$0 bootstrap reap"]]
   });
-  force = Option46.Boolean("--force", false);
-  sweepOrphans = Option46.Boolean("--sweep-orphans", false);
-  yes = Option46.Boolean("--yes", false);
+  force = Option47.Boolean("--force", false);
+  sweepOrphans = Option47.Boolean("--sweep-orphans", false);
+  yes = Option47.Boolean("--yes", false);
   async executeCommand() {
     if (this.sweepOrphans === true) {
       const { subscriptionId: sub } = await getAzAccount();
@@ -23071,7 +23201,7 @@ Found ${String(found.length)} orphaned Owner@sub assignment(s) (dry-run). ${colo
 import * as fs24 from "fs/promises";
 import * as os14 from "os";
 import * as path26 from "path";
-import { Command as Command49, Option as Option47 } from "clipanion";
+import { Command as Command50, Option as Option48 } from "clipanion";
 init_errors();
 
 // src/lib/company-profile-seed.ts
@@ -23160,9 +23290,9 @@ function companyProfileBodyEquals(a, b) {
   const strip = (s) => s.replace(/^(created|updated):.*$/gm, "").trim();
   return strip(a) === strip(b);
 }
-function upsertMemoryIndex(existing, line2) {
+function upsertMemoryIndex(existing, line2, targetPath2 = COMPANY_PROFILE_PATH) {
   const lines = existing.split("\n");
-  const existingIdx = lines.findIndex((l) => l.includes(`\`${COMPANY_PROFILE_PATH}\``));
+  const existingIdx = lines.findIndex((l) => l.includes(`\`${targetPath2}\``));
   if (existingIdx >= 0) {
     lines[existingIdx] = line2;
     return lines.join("\n");
@@ -23174,6 +23304,88 @@ function upsertMemoryIndex(existing, line2) {
   }
   return existing.replace(/\s*$/, "\n\n") + line2 + "\n";
 }
+var FOUNDER_RECORD_PATH = "memory/founder.md";
+var NOT_CAPTURED = "_not captured yet \u2014 add it anytime (run `m8t bootstrap seed-profile`, or just tell me)_";
+function renderFounderRecord(block, inputs, now = (/* @__PURE__ */ new Date()).toISOString()) {
+  const pick = (...vals) => vals.map((v) => v?.trim()).find(Boolean) ?? "";
+  const founderName = pick(block.founder_name, inputs.azIdentity?.name);
+  const founderEmail = pick(block.founder_email, inputs.azIdentity?.email);
+  const advisorName = (block.advisor_name ?? "").trim();
+  const advisorEmail = (block.advisor_email ?? "").trim();
+  const subscription = (inputs.subscriptionId ?? "").trim();
+  const teamSize = (block.team_size ?? "").trim();
+  const advisorRendered = advisorName || advisorEmail ? [advisorName, advisorEmail ? `<${advisorEmail}>` : ""].filter(Boolean).join(" ") : NOT_CAPTURED;
+  const founderMd = [
+    `---`,
+    `type: memory`,
+    `title: "Founder & install context"`,
+    `created: ${now}`,
+    `updated: ${now}`,
+    `tags: [founder, install-context, onboarding]`,
+    `origin: operator`,
+    `---`,
+    ``,
+    `# Founder & install context`,
+    ``,
+    `_Seeded at onboarding from your Azure identity + the questionnaire. Authoritative \u2014 read it; don't rewrite it (origin: operator)._`,
+    ``,
+    `- **Founder:** ${founderName || NOT_CAPTURED}`,
+    `- **Founder email (company_email):** ${founderEmail || NOT_CAPTURED}`,
+    `- **Microsoft Startup Advisor (SA):** ${advisorRendered}`,
+    `- **Azure subscription:** ${subscription || NOT_CAPTURED}`,
+    `- **Team size:** ${teamSize || "\u2014"}`,
+    ``
+  ].join("\n");
+  const idxAdvisor = advisorEmail || advisorName || "\u2014";
+  const idxSub = subscription ? `${subscription.slice(0, 8)}\u2026` : "\u2014";
+  const memoryIndexLine = `- \`${FOUNDER_RECORD_PATH}\` \u2014 **Founder & install context**: ${founderName || "founder"} \xB7 advisor ${idxAdvisor} \xB7 sub ${idxSub}. (seeded from onboarding)`;
+  return { founderMd, memoryIndexLine };
+}
+function founderRecordBodyEquals(a, b) {
+  const strip = (s) => s.replace(/^(created|updated):.*$/gm, "").trim();
+  return strip(a) === strip(b);
+}
+
+// src/lib/founder-identity.ts
+function deriveEmailCandidate(raw) {
+  const mail = (raw.mail ?? "").trim();
+  if (mail) return mail;
+  const upn = (raw.upn ?? "").trim();
+  if (!upn) return "";
+  const ext = upn.indexOf("#EXT#");
+  if (ext > 0) {
+    const local = upn.slice(0, ext);
+    const at = local.lastIndexOf("_");
+    return at > 0 ? `${local.slice(0, at)}@${local.slice(at + 1)}` : "";
+  }
+  return upn.includes("@") ? upn : "";
+}
+async function getSignedInUserIdentity(runAzImpl = runAz) {
+  try {
+    const raw = await runAzImpl([
+      "ad",
+      "signed-in-user",
+      "show",
+      "--query",
+      "{displayName:displayName, mail:mail, upn:userPrincipalName}",
+      "-o",
+      "json"
+    ]);
+    const p = JSON.parse(raw);
+    return { name: (p.displayName ?? "").trim(), email: deriveEmailCandidate({ mail: p.mail, upn: p.upn }) };
+  } catch {
+    return { name: "", email: "" };
+  }
+}
+function composeFounderIdentityNote(id) {
+  if (id.name && id.email) {
+    return `You're speaking with **${id.name}**, signed in to Azure (their email looks like **${id.email}**). Open by confirming both, in your own voice \u2014 e.g. "I see you're signed in as ${id.name}, and I'll use ${id.email} for your advisor handoffs and cost reports \u2014 is that right, or should I change either?" Record exactly what they approve or correct.`;
+  }
+  if (id.name) {
+    return `You're speaking with **${id.name}** (signed in to Azure). Confirm their name, then ask for the best contact email to reach them (that's where advisor handoffs and cost reports go).`;
+  }
+  return `Ask the founder their name and the best contact email to reach them (that's where advisor handoffs and cost reports go).`;
+}
 
 // src/lib/company-profile-seed.ts
 function readGithubAppCreds(credsPath) {
@@ -23188,18 +23400,21 @@ async function resolveSeedContext(opts) {
   const appCreds = opts.appCredsOverride ?? readGithubAppCreds(opts.credsPath);
   if (!appCreds) return null;
   let endpoint = opts.endpointOverride;
+  let subscriptionId = opts.subscriptionId;
   if (!endpoint) {
     const state = await readBootstrapState();
     if (!state) {
       throw new LocalCliError({ code: "BOOTSTRAP_NO_STATE", message: "No bootstrap state found.", hint: "Run 'm8t bootstrap launch' first, or pass --endpoint." });
     }
+    subscriptionId ??= state.subscriptionId;
     const doc = await readStatusBlob({ saName: state.statusSaName, resourceGroup: state.resourceGroup, subscriptionId: state.subscriptionId });
     endpoint = doc.result?.foundryEndpoint;
     if (!endpoint) {
       throw new LocalCliError({ code: "SEED_NO_ENDPOINT", message: "Could not resolve the Foundry endpoint from the install status.", hint: "Pass --endpoint <foundryEndpoint>." });
     }
   }
-  return { endpoint, brainRepo: opts.brainOverride ?? `${appCreds.org}/stacey-brain`, appCreds };
+  const brainRepos = opts.brainOverride ? [opts.brainOverride] : [`${appCreds.org}/stacey-brain`, `${appCreds.org}/azzy-brain`];
+  return { endpoint, brainRepos, appCreds, subscriptionId };
 }
 async function applyProfileToBrain(args) {
   const token = await mintInstallationTokenFromPem({
@@ -23208,20 +23423,31 @@ async function applyProfileToBrain(args) {
     installationId: args.appCreds.installationId,
     fetchImpl: args.fetchImpl
   });
-  const { profileMd, memoryIndexLine } = renderCompanyProfile(args.block, args.now);
-  const existingProfile = await readRepoFileViaApp({ token, repo: args.brainRepo, path: COMPANY_PROFILE_PATH, fetchImpl: args.fetchImpl });
-  const existingIndex = await readRepoFileViaApp({ token, repo: args.brainRepo, path: "memory/MEMORY.md", fetchImpl: args.fetchImpl }) ?? DEFAULT_MEMORY_INDEX_HEADER;
-  const nextIndex = upsertMemoryIndex(existingIndex, memoryIndexLine);
-  if (existingProfile && companyProfileBodyEquals(existingProfile, profileMd) && nextIndex === existingIndex) {
+  const { profileMd, memoryIndexLine: companyLine } = renderCompanyProfile(args.block, args.now);
+  const { founderMd, memoryIndexLine: founderLine } = renderFounderRecord(
+    args.block,
+    { subscriptionId: args.subscriptionId, azIdentity: args.azIdentity },
+    args.now
+  );
+  const read = (p) => readRepoFileViaApp({ token, repo: args.brainRepo, path: p, fetchImpl: args.fetchImpl });
+  const existingProfile = await read(COMPANY_PROFILE_PATH);
+  const existingFounder = await read(FOUNDER_RECORD_PATH);
+  const existingIndex = await read("memory/MEMORY.md") ?? DEFAULT_MEMORY_INDEX_HEADER;
+  let nextIndex = upsertMemoryIndex(existingIndex, companyLine, COMPANY_PROFILE_PATH);
+  nextIndex = upsertMemoryIndex(nextIndex, founderLine, FOUNDER_RECORD_PATH);
+  const profileSame = existingProfile != null && companyProfileBodyEquals(existingProfile, profileMd);
+  const founderSame = existingFounder != null && founderRecordBodyEquals(existingFounder, founderMd);
+  if (profileSame && founderSame && nextIndex === existingIndex) {
     return;
   }
   await commitFilesViaApp({
     token,
     repo: args.brainRepo,
     branch: args.branch,
-    message: "seed(brain): company profile from onboarding questionnaire",
+    message: "seed(brain): founder + company profile from onboarding",
     files: [
       { path: COMPANY_PROFILE_PATH, content: profileMd },
+      { path: FOUNDER_RECORD_PATH, content: founderMd },
       { path: "memory/MEMORY.md", content: nextIndex }
     ],
     fetchImpl: args.fetchImpl
@@ -23241,20 +23467,31 @@ function spawnDetachedSeedWatch() {
   }
 }
 async function reactiveSeedOnFinish(args) {
-  const ctx = await resolveSeedContext({ endpointOverride: args.endpoint, appCredsOverride: args.appCredsOverride });
+  const ctx = await resolveSeedContext({ endpointOverride: args.endpoint, appCredsOverride: args.appCredsOverride, subscriptionId: args.subscriptionId });
   if (!ctx) return;
   const token = await (args.getFoundryTokenImpl ?? getFoundryToken)();
   const { hadIntake, block } = await findOnboardingProfile({ endpoint: ctx.endpoint, token, fetchImpl: args.fetchImpl });
   if (block) {
-    await applyProfileToBrain({ block, brainRepo: ctx.brainRepo, branch: "main", appCreds: ctx.appCreds, fetchImpl: args.fetchImpl });
-    args.stdout(`${colors.success("\u2713")} Clever Stacey now knows your company (seeded ${ctx.brainRepo}).
+    const azIdentity = args.azIdentity ?? await (args.getSignedInUserIdentityImpl ?? getSignedInUserIdentity)();
+    for (const brainRepo of ctx.brainRepos) {
+      await applyProfileToBrain({
+        block,
+        brainRepo,
+        branch: "main",
+        appCreds: ctx.appCreds,
+        subscriptionId: ctx.subscriptionId,
+        azIdentity,
+        fetchImpl: args.fetchImpl
+      });
+    }
+    args.stdout(`${colors.success("\u2713")} Your advisors now know your company + how to reach you (seeded ${ctx.brainRepos.join(", ")}).
 `);
     return;
   }
   if (!hadIntake) return;
   (args.spawnWatch ?? spawnDetachedSeedWatch)();
   args.stdout(
-    `${colors.dim("\u2139 Stacey will pick up your company profile when you finish the questionnaire (watching in the background).")}
+    `${colors.dim("\u2139 Your advisors will pick up your company profile when you finish the questionnaire (watching in the background).")}
   ${colors.hint("or run:")} m8t bootstrap seed-profile
 `
   );
@@ -23294,14 +23531,14 @@ function renderInstallSummary(args) {
 // src/commands/bootstrap/finish.ts
 var BootstrapFinishCommand = class extends M8tCommand {
   static paths = [["bootstrap", "finish"]];
-  static usage = Command49.Usage({
+  static usage = Command50.Usage({
     description: "Point your local tools at the now-live platform (repo-root marker, discovery cache, next steps).",
     details: "Final step of `m8t bootstrap` (after the install reaches done). Writes ~/.m8t-stack/repo-root, points your local tools at the live gateway, and \u2014 if you completed the onboarding questionnaire \u2014 seeds your brain-backed advisor's brain with your company profile (best-effort; never blocks finish). Run `m8t bootstrap seed-profile` to seed manually later.",
     examples: [["Finish local", "$0 bootstrap finish --repo-root /path/to/m8t"]]
   });
-  repoRoot = Option47.String("--repo-root");
-  subscription = Option47.String("--subscription");
-  resourceGroup = Option47.String("--resource-group");
+  repoRoot = Option48.String("--repo-root");
+  subscription = Option48.String("--subscription");
+  resourceGroup = Option48.String("--resource-group");
   async executeCommand() {
     const state = await readBootstrapState();
     if (!state) {
@@ -23371,6 +23608,7 @@ ${colors.field("Then open a brand new chat/session")} \u2014 new skills + MCP se
     try {
       await reactiveSeedOnFinish({
         endpoint: doc.result?.foundryEndpoint,
+        subscriptionId,
         stdout: (s) => this.context.stdout.write(s)
       });
     } catch (e) {
@@ -23387,7 +23625,7 @@ ${colors.field("Then open a brand new chat/session")} \u2014 new skills + MCP se
 import * as fs26 from "fs";
 import * as os16 from "os";
 import * as path28 from "path";
-import { Command as Command50, Option as Option48 } from "clipanion";
+import { Command as Command51, Option as Option49 } from "clipanion";
 import { DefaultAzureCredential as DefaultAzureCredential17 } from "@azure/identity";
 init_errors();
 
@@ -23617,7 +23855,8 @@ async function deploySimpleStacey(args) {
       endpoint: args.endpoint,
       repoRoot: args.repoRoot,
       persona: SIMPLE_STACEY_PERSONA,
-      agentName: SIMPLE_STACEY_AGENT
+      agentName: SIMPLE_STACEY_AGENT,
+      fieldOverrides: args.fieldOverrides
     });
   } catch (e) {
     if (e && typeof e === "object" && "code" in e) {
@@ -23657,7 +23896,7 @@ async function deploySimpleStacey(args) {
 // src/commands/bootstrap/ui.ts
 var BootstrapUiCommand = class extends M8tCommand {
   static paths = [["bootstrap", "ui"]];
-  static usage = Command50.Usage({
+  static usage = Command51.Usage({
     description: "Deploy Simple Stacey + start the local onboarding chat UI in the background (returns immediately).",
     details: [
       "Run after `m8t bootstrap launch`, in parallel with `status --watch`. Waits for the cloud",
@@ -23675,15 +23914,15 @@ var BootstrapUiCommand = class extends M8tCommand {
       ["Foreground (blocking, old behaviour)", "$0 bootstrap ui --repo-root /path/to/m8t --foreground"]
     ]
   });
-  repoRoot = Option48.String("--repo-root");
-  port = Option48.String("--port", "3000");
-  endpoint = Option48.String("--endpoint", {
+  repoRoot = Option49.String("--repo-root");
+  port = Option49.String("--port", "3000");
+  endpoint = Option49.String("--endpoint", {
     description: "Foundry project endpoint to target \u2014 disambiguates when the subscription has multiple projects."
   });
-  prepOnly = Option48.Boolean("--prep-only", false);
-  skipInstall = Option48.Boolean("--skip-install", false);
-  stop = Option48.Boolean("--stop", false);
-  foreground = Option48.Boolean("--foreground", false);
+  prepOnly = Option49.Boolean("--prep-only", false);
+  skipInstall = Option49.Boolean("--skip-install", false);
+  stop = Option49.Boolean("--stop", false);
+  foreground = Option49.Boolean("--foreground", false);
   async executeCommand() {
     if (this.stop === true) {
       const stopped = stopOnboardingUi();
@@ -23735,7 +23974,13 @@ var BootstrapUiCommand = class extends M8tCommand {
     const oid = await getSignedInUserOid();
     await ensureFounderFoundryRole({ credential: credential2, subscriptionId: state.subscriptionId, principalId: oid, accountScope });
     out("deploying Simple Stacey (stacey-intake)\u2026");
-    const version = await deploySimpleStacey({ credential: credential2, endpoint, repoRoot });
+    const identity = await getSignedInUserIdentity();
+    const version = await deploySimpleStacey({
+      credential: credential2,
+      endpoint,
+      repoRoot,
+      fieldOverrides: { founder_identity_note: composeFounderIdentityNote(identity) }
+    });
     const envPath = writeWebEnvLocal({
       repoRoot,
       tenantId: account.tenantId,
@@ -23784,22 +24029,22 @@ var BootstrapUiCommand = class extends M8tCommand {
 };
 
 // src/commands/bootstrap/seed-profile.ts
-import { Command as Command51, Option as Option49 } from "clipanion";
+import { Command as Command52, Option as Option50 } from "clipanion";
 var BootstrapSeedProfileCommand = class extends M8tCommand {
   static paths = [["bootstrap", "seed-profile"]];
-  static usage = Command51.Usage({
-    description: "Seed Clever Stacey's brain with the company profile from the onboarding questionnaire.",
-    details: "Reads the latest stacey-intake conversation, renders memory/company-profile.md (+ its MEMORY.md index line), and commits both to <org>/stacey-brain via the GitHub App. Idempotent. --watch polls until the founder completes the questionnaire.",
+  static usage = Command52.Usage({
+    description: "Seed your advisors' brains with the founder + company profile from the onboarding questionnaire.",
+    details: "Reads the latest stacey-intake conversation, renders memory/founder.md + memory/company-profile.md (+ their MEMORY.md index lines), and commits them to both <org>/stacey-brain and <org>/azzy-brain via the GitHub App. Idempotent. --watch polls until the founder completes the questionnaire.",
     examples: [
       ["Seed now (idempotent)", "$0 bootstrap seed-profile"],
       ["Wait for the founder to finish", "$0 bootstrap seed-profile --watch"]
     ]
   });
-  endpoint = Option49.String("--endpoint", { description: "Override the Foundry endpoint (else read from the install status)." });
-  brain = Option49.String("--brain", { description: "Override the brain repo (default <org>/stacey-brain)." });
-  watch = Option49.Boolean("--watch", false, { description: "Poll until the questionnaire completes (or --timeout)." });
-  timeout = Option49.String("--timeout", { description: "Watch timeout in minutes (default 20)." });
-  githubAppCreds = Option49.String("--github-app-creds");
+  endpoint = Option50.String("--endpoint", { description: "Override the Foundry endpoint (else read from the install status)." });
+  brain = Option50.String("--brain", { description: "Override the brain repo (default <org>/stacey-brain)." });
+  watch = Option50.Boolean("--watch", false, { description: "Poll until the questionnaire completes (or --timeout)." });
+  timeout = Option50.String("--timeout", { description: "Watch timeout in minutes (default 20)." });
+  githubAppCreds = Option50.String("--github-app-creds");
   async executeCommand() {
     const ctx = await resolveSeedContext({
       endpointOverride: typeof this.endpoint === "string" ? this.endpoint : void 0,
@@ -23821,8 +24066,11 @@ var BootstrapSeedProfileCommand = class extends M8tCommand {
       const token = await getFoundryToken();
       const { hadIntake, block } = await findOnboardingProfile({ endpoint: ctx.endpoint, token });
       if (block) {
-        await applyProfileToBrain({ block, brainRepo: ctx.brainRepo, branch: "main", appCreds: ctx.appCreds });
-        this.context.stdout.write(`${colors.success("\u2713")} seeded Clever Stacey's brain (${ctx.brainRepo}) from your questionnaire.
+        const azIdentity = await getSignedInUserIdentity();
+        for (const brainRepo of ctx.brainRepos) {
+          await applyProfileToBrain({ block, brainRepo, branch: "main", appCreds: ctx.appCreds, subscriptionId: ctx.subscriptionId, azIdentity });
+        }
+        this.context.stdout.write(`${colors.success("\u2713")} seeded your advisors' brains (${ctx.brainRepos.join(", ")}) from your questionnaire.
 `);
         return 0;
       }
@@ -23881,6 +24129,7 @@ cli.register(CoderTeardownCommand);
 cli.register(AzureExecDeployCommand);
 cli.register(PlatformStatusCommand);
 cli.register(PlatformUpdateCommand);
+cli.register(PlatformEnableCostReportCommand);
 cli.register(DeployCommand);
 cli.register(AgentDeployAdvisorCommand);
 cli.register(AgentRemoveCommand);