@m8t-stack/cli 0.2.79 → 0.2.81

package/dist/cli.js

@@ -229,9 +229,19 @@ var init_agent_roster = __esm({
 });
 
 // ../../packages/api-contract/dist/esm/ui-directive.js
+var DECISION_REFUSAL_REASONS, decisionRefusalReasons;
 var init_ui_directive = __esm({
   "../../packages/api-contract/dist/esm/ui-directive.js"() {
     "use strict";
+    DECISION_REFUSAL_REASONS = {
+      /** 409 — no live call with that `callId`. Answered twice, or talked past and dismissed. */
+      notPending: "decision_not_pending",
+      /** 400 — decisions are a prompt-worker surface; a hosted worker raises none. */
+      invalidAgent: "invalid_decision_agent",
+      /** 400 — the `data-ui-result` payload is malformed or its option is out of range. */
+      invalidResult: "invalid_decision_result"
+    };
+    decisionRefusalReasons = Object.values(DECISION_REFUSAL_REASONS);
   }
 });
 
@@ -1390,7 +1400,7 @@ var init_enable_hosted_brain = __esm({
 import { Builtins, Cli } from "clipanion";
 
 // src/lib/package-version.ts
-var CLI_VERSION = "0.2.79";
+var CLI_VERSION = "0.2.81";
 
 // src/lib/render-error.ts
 init_errors();
@@ -15005,14 +15015,14 @@ function tryResolveRepoRoot() {
   const root = fs5.readFileSync(marker, "utf8").trim();
   return root.length > 0 ? root : null;
 }
-function assertPlatformCheckout(repoRoot, operation, needs = ["personas"]) {
+function assertPlatformCheckout(repoRoot, operation, needs = ["personas"], overrides = {}) {
   const missing = needs.filter((d) => !fs5.existsSync(path6.join(repoRoot, d)));
   if (missing.length === 0) return;
   const isAgentRepo = fs5.existsSync(path6.join(repoRoot, "agent", "persona.md"));
   throw new LocalCliError({
     code: "PLATFORM_CHECKOUT_REQUIRED",
-    message: `${operation} needs a platform checkout, but ~/.m8t/repo-root points at '${repoRoot}', which has no ${missing.join("/ or ")}/.` + (isAgentRepo ? " That path is the agent repository \u2014 it carries the install runbook, not the platform." : ""),
-    hint: "This operation reads platform content that is not published today, so it is maintainer-side for now. Your installation still updates itself: the auto-update rail applies published releases without needing any checkout."
+    message: `${operation} needs a platform checkout, but ${overrides.source ?? "~/.m8t/repo-root"} points at '${repoRoot}', which has no ${missing.join("/ or ")}/.` + (isAgentRepo ? " That path is the agent repository \u2014 it carries the install runbook, not the platform." : ""),
+    hint: overrides.hint ?? "This operation reads platform content that is not published today, so it is maintainer-side for now. Your installation still updates itself: the auto-update rail applies published releases without needing any checkout."
   });
 }
 function resolvePlatformRepoRoot(operation, needs) {
@@ -26621,13 +26631,66 @@ import { TableClient as TableClient7 } from "@azure/data-tables";
 import { AIProjectClient as AIProjectClient3 } from "@azure/ai-projects";
 import { LogsQueryClient as LogsQueryClient3, LogsQueryResultStatus as LogsQueryResultStatus3 } from "@azure/monitor-query";
 
+// ../../packages/agent-ledger/dist/esm/pii.js
+import { createHmac } from "crypto";
+var EMAIL_PLACEHOLDER = "[email]";
+var PHONE_PLACEHOLDER = "[phone]";
+var SECRET_PLACEHOLDER = "[secret]";
+var PEM_BLOCK_RE = /-----BEGIN [A-Z0-9 ]{0,32}PRIVATE KEY-----[\s\S]*?-----END [A-Z0-9 ]{0,32}PRIVATE KEY-----/g;
+var JWT_RE = /\beyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{6,}(?:\.[A-Za-z0-9_-]{10,})?/g;
+var HTTP_CREDENTIAL_RE = /\b(Bearer|Basic)[ \t]+(?=[A-Za-z0-9._~+/=-]{0,80}[0-9+/=])[A-Za-z0-9._~+/=-]{16,}/gi;
+var KNOWN_PREFIX_RE = /(?<![A-Za-z0-9_-])(?:sk-[A-Za-z0-9_-]{16,}|rk-[A-Za-z0-9_-]{16,}|xox[a-z]-[A-Za-z0-9-]{10,}|gh[pousr]_[A-Za-z0-9]{16,}|github_pat_[A-Za-z0-9_]{20,}|glpat-[A-Za-z0-9_-]{20,}|npm_[A-Za-z0-9]{28,}|AKIA[0-9A-Z]{16}|ASIA[0-9A-Z]{16}|AIza[0-9A-Za-z_-]{35}|ya29\.[A-Za-z0-9_-]{20,}|dckr_pat_[A-Za-z0-9_-]{20,}|shp(?:at|ca|pa|ss)_[a-fA-F0-9]{32,})(?![A-Za-z0-9_-])/g;
+var KEYED_VALUE = `("[^"\\n]{8,}"|'[^'\\n]{8,}'|(?=[A-Za-z0-9+/=_.~%-]{0,64}[0-9+/=])[A-Za-z0-9+/=_.~%-]{8,})`;
+var KEYED_STRONG_SECRET_RE = new RegExp(`(?<![A-Za-z0-9])(shared[_-]?access[_-]?key|account[_-]?key|access[_-]?key|storage[_-]?key|api[_-]?key|apikey|x[_-]?api[_-]?key|client[_-]?secret|sas[_-]?token|access[_-]?token|refresh[_-]?token|auth[_-]?token|id[_-]?token|bot[_-]?token|private[_-]?key|password|passwd|pwd)(["']?\\s*[:=]\\s*)("[^"\\n]{8,}"|'[^'\\n]{8,}'|[A-Za-z0-9+/=_.~%-]{8,})`, "gi");
+var KEYED_WEAK_SECRET_RE = new RegExp(`(?<![A-Za-z0-9])(authorization|secret|token|sig)(["']?\\s*[:=]\\s*)` + KEYED_VALUE, "gi");
+var TELEGRAM_BOT_TOKEN_RE = /(?<!\d)\d{8,10}:AA[A-Za-z0-9_-]{32,34}(?![A-Za-z0-9_-])/g;
+var SPOKEN_SECRET_RE = /\b((?:password|passcode|passphrase|api[ _-]?key|access code|pin(?: code)?)\s+is[ \t:]+)(?=\S{0,32}[0-9])\S{4,64}/gi;
+var SPOKEN_PASSWORD_RE = /\b((?:password|passcode|passphrase)\s+is[ \t:]+)(?!\[)(?!(?:wrong|incorrect|invalid|expired|required|missing|reset|unchanged|correct|secure|weak|strong|blank|empty|not|now|still|too|the|already|also|only|just|being|getting)\b)("[^"\n]{4,64}"|'[^'\n]{4,64}'|\S{4,64})/gi;
+var B64ISH_RE = /(?<![A-Za-z0-9+=_-])(?=[A-Za-z0-9+=_-]{0,64}[A-Z])(?=[A-Za-z0-9+=_-]{0,64}[a-z])(?=[A-Za-z0-9+=_-]{0,64}[0-9])[A-Za-z0-9+=_-]{40,}(?![A-Za-z0-9+=_-])/g;
+var EMAIL_RE = new RegExp("[\\p{L}\\p{N}._%+-]+@[\\p{L}\\p{N}](?:[\\p{L}\\p{N}.-]*[\\p{L}\\p{N}])?\\.\\p{L}{2,}(?![\\p{L}\\p{N}-])", "gu");
+var PHONE_INTL_RE = /(?<![\d/.-])\+\d{1,3}(?:[ .-]?\(\d{1,4}\))?(?:[ .-]?\d){6,12}(?!\d)/g;
+var PHONE_SEP_RE = /(?<![\d.-])(?:\d[ .-])?(?:\(\d{3}\)[ .-]?\d{3}[ .-]?\d{4}|\d{3}[ .-]\d{3}[ .-]\d{4}|0\d{1,2}[ .-]\d{7})(?![\d-])/g;
+var PHONE_CONTEXT_RE = /\b((?:call|text|dial|whatsapp)(?:\s+(?:me|us|him|her|them|back))?(?:\s+(?:at|on))?\s*[:-]?\s*|(?:phone|mobile|cell|tel)(?:\s*(?:number|no\.?))?\s*(?:is|:)?\s*)(?<![\d.(-])\d{7,15}(?![\d.])/gi;
+var PEM_OPEN_RE = /-----BEGIN [A-Z0-9 ]{0,32}PRIVATE KEY-----/;
+var UNCLOSED_QUOTED_SECRET_RE = /(?<![A-Za-z0-9])(?:shared[_-]?access[_-]?key|account[_-]?key|access[_-]?key|storage[_-]?key|api[_-]?key|apikey|x[_-]?api[_-]?key|client[_-]?secret|sas[_-]?token|access[_-]?token|refresh[_-]?token|auth[_-]?token|id[_-]?token|bot[_-]?token|private[_-]?key|password|passwd|pwd|authorization|secret|token|sig)["']?\s*[:=]\s*["'][^"'\n]*$/i;
+function failClosedOnCutConstructs(text) {
+  const pem = PEM_OPEN_RE.exec(text);
+  if (pem && !/-----END [A-Z0-9 ]{0,32}PRIVATE KEY-----/.test(text.slice(pem.index))) {
+    return text.slice(0, pem.index) + SECRET_PLACEHOLDER;
+  }
+  const quoted = UNCLOSED_QUOTED_SECRET_RE.exec(text);
+  if (quoted)
+    return text.slice(0, quoted.index) + SECRET_PLACEHOLDER;
+  return text;
+}
+function maskSecrets(text) {
+  const masked = text.replace(PEM_BLOCK_RE, SECRET_PLACEHOLDER).replace(JWT_RE, SECRET_PLACEHOLDER).replace(HTTP_CREDENTIAL_RE, (_, scheme) => `${scheme} ${SECRET_PLACEHOLDER}`).replace(KNOWN_PREFIX_RE, SECRET_PLACEHOLDER).replace(TELEGRAM_BOT_TOKEN_RE, SECRET_PLACEHOLDER).replace(KEYED_STRONG_SECRET_RE, (_, key2, sep4) => `${key2}${sep4}${SECRET_PLACEHOLDER}`).replace(KEYED_WEAK_SECRET_RE, (_, key2, sep4) => `${key2}${sep4}${SECRET_PLACEHOLDER}`).replace(SPOKEN_SECRET_RE, (_, lead) => `${lead}${SECRET_PLACEHOLDER}`).replace(SPOKEN_PASSWORD_RE, (_, lead) => `${lead}${SECRET_PLACEHOLDER}`).replace(B64ISH_RE, SECRET_PLACEHOLDER);
+  return failClosedOnCutConstructs(masked);
+}
+function maskContact(text) {
+  return text.replace(EMAIL_RE, EMAIL_PLACEHOLDER).replace(PHONE_INTL_RE, PHONE_PLACEHOLDER).replace(PHONE_SEP_RE, PHONE_PLACEHOLDER).replace(PHONE_CONTEXT_RE, (_, lead) => `${lead}${PHONE_PLACEHOLDER}`);
+}
+var BARE_PHONE_RUN_RE = /(?<![\w.,-])\d{7,15}(?!\.?\d)(?![\w,-])/g;
+function maskContactStrict(text) {
+  return maskContact(text).replace(BARE_PHONE_RUN_RE, PHONE_PLACEHOLDER);
+}
+var USERREF_DIGEST_VERSION = "1";
+function userRefHashKey() {
+  return process.env.M8T_LEDGER_USERREF_KEY ?? (process.env.STORAGE_ACCOUNT_NAME ? `m8t-ledger-userref:${process.env.STORAGE_ACCOUNT_NAME}` : "m8t-agent-ledger-userref-dev");
+}
+function maskUserRef(ref) {
+  if (ref == null)
+    return void 0;
+  return ref.replace(EMAIL_RE, (m) => `email#${USERREF_DIGEST_VERSION}:${createHmac("sha256", userRefHashKey()).update(m.toLowerCase()).digest("hex").slice(0, 32)}`);
+}
+
 // ../../packages/agent-ledger/dist/esm/read/ledger-identity.js
 var CHANNEL_SOURCES = /* @__PURE__ */ new Set(["telegram", "slack"]);
 function resolveIdentity(source, userRef, members = []) {
   if (!userRef)
     return { source, ref: "unknown" };
   if (CHANNEL_SOURCES.has(source)) {
-    const m = members.find((x) => x.source === source && x.handle.toLowerCase() === userRef.toLowerCase());
+    const m = members.find((x) => x.source === source && (x.handle.toLowerCase() === userRef.toLowerCase() || maskUserRef(x.handle.toLowerCase()) === userRef.toLowerCase()));
     if (m)
       return { source, ref: userRef, display: m.displayName };
   }
@@ -26937,6 +27000,10 @@ function makeRowKey(timestampIso, eventId) {
   return `${String(reverse).padStart(19, "0")}_${eventId}`;
 }
 
+// ../../packages/agent-ledger/dist/esm/entity.js
+var SNIPPET_MAX_LEN = 256;
+var PII_SCAN_WINDOW = SNIPPET_MAX_LEN * 16;
+
 // ../../packages/brain/engine/dist/esm/cursor.js
 var CURSOR_PARTITION_KEY = "dreamcursor";
 function isAbsentCursorError(e) {
@@ -27165,7 +27232,7 @@ function mapItems(raw) {
       continue;
     if (item.role !== "user" && item.role !== "assistant")
       continue;
-    const text = Array.isArray(item.content) ? stripVoiceEnvelope(item.content.map((c) => typeof c.text === "string" && c.text.length > 0 ? c.text : typeof c.transcript === "string" && c.transcript.length > 0 ? c.transcript : "").filter(Boolean).join("\n\n")) : "";
+    const text = Array.isArray(item.content) ? maskSecrets(stripVoiceEnvelope(item.content.map((c) => typeof c.text === "string" && c.text.length > 0 ? c.text : typeof c.transcript === "string" && c.transcript.length > 0 ? c.transcript : "").filter(Boolean).join("\n\n"))) : "";
     const at = typeof item.created_at === "number" ? new Date(item.created_at * 1e3).toISOString() : void 0;
     acc.push(at ? { role: item.role, text, at } : { role: item.role, text });
   }
@@ -27450,7 +27517,9 @@ async function runPipeline(args) {
       const grpRows = rowsByGroupKey.get(groupKeyOf(g)) ?? [];
       (consumedRowsByPk[pk] ??= []).push(...grpRows);
       const provRows = grpRows.map((r) => ({ rowKey: rowStorageKey(r), eventTimestamp: r.eventTimestamp }));
-      const conv = normalize(ng, items, enrichment);
+      const trustedOwner = g.source !== "a2a" && g.user.ref !== "unknown" && !g.user.ref.startsWith("svc:");
+      const dreamItems = trustedOwner ? items : items.map((i) => ({ ...i, text: maskContactStrict(i.text) }));
+      const conv = normalize(ng, dreamItems, enrichment);
       conv.provenance = { pk, rows: provRows };
       conversations.push(conv);
       if (outcome === "consumed")
@@ -29207,14 +29276,278 @@ function defaultDeps(overrides) {
   return deps;
 }
 
-// src/commands/foundry/create.ts
+// src/commands/conversations/sweep.ts
+import { createHash as createHash4 } from "crypto";
 import { Command as Command53, Option as Option50 } from "clipanion";
+import { AzureCliCredential as AzureCliCredential2 } from "@azure/identity";
+import { TableClient as TableClient8 } from "@azure/data-tables";
+import { AIProjectClient as AIProjectClient4 } from "@azure/ai-projects";
+init_errors();
+var LEDGER_TABLE_NAME2 = "AgentLedger";
+var KEY_LIFETIME_DAYS = 30;
+var DAY_MS = 24 * 60 * 60 * 1e3;
+function ownerDigest(nativeUserKey) {
+  return createHash4("sha256").update(nativeUserKey).digest("base64url");
+}
+function svcPrincipal(svcRef) {
+  return svcRef.split(":")[1] ?? "";
+}
+function svcConversationFacts(rows) {
+  const facts = /* @__PURE__ */ new Map();
+  for (const r of rows) {
+    if (!r.foundryConversationId) continue;
+    if (!r.userRef?.startsWith("svc:")) continue;
+    const prev = facts.get(r.foundryConversationId);
+    if (!prev || r.eventTimestamp > prev.lastSeen) {
+      facts.set(r.foundryConversationId, {
+        conversationId: r.foundryConversationId,
+        svcRef: r.userRef,
+        principal: svcPrincipal(r.userRef),
+        agent: r.agentName,
+        lastSeen: r.eventTimestamp
+      });
+    }
+  }
+  return facts;
+}
+function selectStaleCandidates(facts, cutoffIso) {
+  return [...facts.values()].filter((f) => f.lastSeen < cutoffIso).sort((a, b) => a.lastSeen < b.lastSeen ? -1 : 1);
+}
+function confirmCandidate(fact, meta, newestItemAt, cutoffIso) {
+  if (meta.app !== "m8t-webapp") return { ok: false, reason: `unexpected app tag '${meta.app ?? ""}'` };
+  const expectedOwner = `web:${ownerDigest(fact.svcRef)}`;
+  if (meta.ownerKey !== expectedOwner) return { ok: false, reason: "owner mismatch" };
+  if (newestItemAt === null) return { ok: false, reason: "no items to prove inactivity" };
+  if (newestItemAt >= cutoffIso) return { ok: false, reason: "recent activity" };
+  return { ok: true };
+}
+function statusOf2(e) {
+  const err = e;
+  return err?.statusCode ?? err?.status;
+}
+function defaultDeps2() {
+  const credential2 = new AzureCliCredential2();
+  const openaiFor = (ctx) => new AIProjectClient4(ctx.projectEndpoint, credential2).getOpenAIClient();
+  return {
+    async resolveContext(opts) {
+      const account = await getAzAccount();
+      const subscriptionId = opts.subscription ?? account.subscriptionId;
+      const project = await resolveFoundryProject({
+        credential: credential2,
+        subscriptionId,
+        interactive: false,
+        endpoint: opts.endpoint
+      });
+      const m = /\/resourceGroups\/([^/]+)/i.exec(project.accountScope);
+      if (!m) throw new LocalCliError({ code: "sweep_context", message: `Could not parse resource group from '${project.accountScope}'.` });
+      const { ledgerTableEndpoint } = await discoverLedgerResources({
+        credential: credential2,
+        subscriptionId,
+        resourceGroup: m[1]
+      });
+      return { projectEndpoint: project.endpoint, ledgerTableEndpoint };
+    },
+    async fetchRows(ctx, fromIso, toIso) {
+      const client = new TableClient8(ctx.ledgerTableEndpoint, LEDGER_TABLE_NAME2, credential2);
+      return fetchLedgerRows({ workers: [], source: "all", from: fromIso, to: toIso }, client);
+    },
+    async retrieveMetadata(ctx, conversationId) {
+      try {
+        const conv = await openaiFor(ctx).conversations.retrieve(conversationId);
+        const md = conv.metadata;
+        const s = (v) => typeof v === "string" ? v : void 0;
+        if (!md || typeof md !== "object") return {};
+        return { app: s(md.app), ownerKey: s(md.ownerKey), platform: s(md.platform) };
+      } catch (e) {
+        if (statusOf2(e) === 404) return "gone";
+        throw e;
+      }
+    },
+    async newestItemAt(ctx, conversationId) {
+      try {
+        for await (const item of openaiFor(ctx).conversations.items.list(conversationId)) {
+          const created = item.created_at;
+          if (typeof created !== "number") return { at: null };
+          return { at: new Date(created * 1e3).toISOString() };
+        }
+        return { at: null };
+      } catch (e) {
+        if (statusOf2(e) === 404) return "gone";
+        throw e;
+      }
+    },
+    async deleteConversation(ctx, conversationId) {
+      try {
+        await openaiFor(ctx).conversations.delete(conversationId);
+        return "deleted";
+      } catch (e) {
+        if (statusOf2(e) === 404) return "already-gone";
+        throw e;
+      }
+    }
+  };
+}
+var ConversationsSweepCommand = class extends M8tCommand {
+  static paths = [["conversations", "sweep"]];
+  static usage = Command53.Usage({
+    category: "Conversations",
+    description: "Delete expired public-visitor conversations (dry run by default)",
+    details: `
+      Finds conversations owned by delegated end users (public visitors) whose
+      last activity predates the retention window (${String(KEY_LIFETIME_DAYS)}-day key life + grace),
+      confirms each against its own metadata and newest item, and \u2014 only with
+      --delete \u2014 permanently removes them. Team, channel, and delegated-work
+      conversations are structurally out of scope. The masked ledger telemetry
+      of swept conversations is kept.
+    `,
+    examples: [
+      ["Report what would be deleted (nothing is)", "m8t conversations sweep"],
+      ["Delete, capped at 50", "m8t conversations sweep --delete --max 50"]
+    ]
+  });
+  doDelete = Option50.Boolean("--delete", false, {
+    description: "Perform deletions (without this flag the command only reports)"
+  });
+  principal = Option50.String("--principal", {
+    description: "Service-principal oid whose end-user keys are known-ephemeral (required with --delete; a dry run without it reports candidates grouped by principal)"
+  });
+  max = Option50.String("--max", "200", { description: "Maximum deletions per run" });
+  graceDays = Option50.String("--grace-days", "14", {
+    description: "Days past the 30-day key life before a conversation is eligible"
+  });
+  lookbackDays = Option50.String("--lookback-days", "180", {
+    description: "How far back to scan ledger activity for candidates"
+  });
+  subscription = Option50.String("--subscription", { description: "Azure subscription id override" });
+  endpoint = Option50.String("--endpoint", { description: "Foundry project endpoint override" });
+  deps = defaultDeps2();
+  async executeCommand() {
+    const out = this.context.stdout;
+    const max = Number.parseInt(this.max, 10);
+    const grace = Number.parseInt(this.graceDays, 10);
+    const lookback = Number.parseInt(this.lookbackDays, 10);
+    if (!Number.isFinite(max) || max < 1) throw new LocalCliError({ code: "sweep_args", message: "--max must be a positive integer." });
+    if (!Number.isFinite(grace) || grace < 0) throw new LocalCliError({ code: "sweep_args", message: "--grace-days must be a non-negative integer." });
+    const retentionDays = KEY_LIFETIME_DAYS + grace;
+    if (!Number.isFinite(lookback) || lookback <= retentionDays) {
+      throw new LocalCliError({ code: "sweep_args", message: `--lookback-days must exceed the retention window (${String(retentionDays)} days).` });
+    }
+    const now = Date.now();
+    const cutoffIso = new Date(now - retentionDays * DAY_MS).toISOString();
+    const fromIso = new Date(now - lookback * DAY_MS).toISOString();
+    const toIso = new Date(now).toISOString();
+    const ctx = await this.deps.resolveContext({ subscription: this.subscription, endpoint: this.endpoint });
+    out.write(`Scanning ledger activity ${fromIso} \u2192 ${toIso}; retention cutoff ${cutoffIso}.
+`);
+    const rows = await this.deps.fetchRows(ctx, fromIso, toIso);
+    const facts = svcConversationFacts(rows);
+    const stale = selectStaleCandidates(facts, cutoffIso);
+    if (this.doDelete && !this.principal) {
+      throw new LocalCliError({
+        code: "sweep_principal_required",
+        message: "--delete requires --principal <service-principal oid>.",
+        hint: "Run without --delete first: the dry run lists candidates grouped by principal so you can identify the visitor-minting one."
+      });
+    }
+    const inScope = this.principal ? stale.filter((f) => f.principal === this.principal) : stale;
+    const outOfScope = stale.length - inScope.length;
+    out.write(
+      `${String(facts.size)} delegated conversation(s) seen in window; ${String(stale.length)} past cutoff` + (this.principal ? ` (${String(inScope.length)} for principal ${this.principal}, ${String(outOfScope)} other-principal ignored)` : "") + ".\n"
+    );
+    if (!this.principal && stale.length > 0) {
+      const byPrincipal = /* @__PURE__ */ new Map();
+      for (const f of stale) byPrincipal.set(f.principal, (byPrincipal.get(f.principal) ?? 0) + 1);
+      out.write("Stale candidates by principal (pass --principal to scope deletion):\n");
+      for (const [pr, n] of [...byPrincipal.entries()].sort((a, b) => b[1] - a[1])) {
+        out.write(`  ${pr || "(malformed)"}  ${String(n)}
+`);
+      }
+    }
+    out.write("\n");
+    let attempts = 0;
+    let deleted = 0;
+    let alreadyGone = 0;
+    let skipped = 0;
+    let failures = 0;
+    let remaining = 0;
+    for (const fact of inScope) {
+      if (attempts >= max) {
+        remaining += 1;
+        continue;
+      }
+      const ageDays = Math.floor((now - Date.parse(fact.lastSeen)) / DAY_MS);
+      const label = `${fact.conversationId}  agent=${fact.agent}  last-active=${fact.lastSeen} (${String(ageDays)}d)`;
+      let meta;
+      let newest;
+      try {
+        meta = await this.deps.retrieveMetadata(ctx, fact.conversationId);
+        newest = meta === "gone" ? "gone" : await this.deps.newestItemAt(ctx, fact.conversationId);
+      } catch (e) {
+        failures += 1;
+        out.write(`${colors.error("failed")}  ${label}  \u2014 ${e.message}
+`);
+        continue;
+      }
+      if (meta === "gone" || newest === "gone") {
+        alreadyGone += 1;
+        out.write(`${colors.dim("already gone")}  ${label}
+`);
+        continue;
+      }
+      const verdict = confirmCandidate(fact, meta, newest.at, cutoffIso);
+      if (!verdict.ok) {
+        skipped += 1;
+        out.write(`${colors.warn("skip")}    ${label}  \u2014 ${verdict.reason}
+`);
+        continue;
+      }
+      attempts += 1;
+      if (!this.doDelete) {
+        out.write(`${colors.field("would delete")}  ${label}
+`);
+        continue;
+      }
+      try {
+        const result2 = await this.deps.deleteConversation(ctx, fact.conversationId);
+        if (result2 === "deleted") {
+          deleted += 1;
+          out.write(`${colors.error("deleted")} ${label}
+`);
+        } else {
+          alreadyGone += 1;
+          out.write(`${colors.dim("already gone")}  ${label}
+`);
+        }
+      } catch (e) {
+        failures += 1;
+        out.write(`${colors.error("failed")}  ${label}  \u2014 ${e.message}
+`);
+      }
+    }
+    out.write("\n");
+    const tail = `already gone ${String(alreadyGone)}, skipped ${String(skipped)} (fail-closed), failed ${String(failures)}` + (remaining > 0 ? `, ${String(remaining)} past the cap \u2014 re-run to continue` : "") + ".\n";
+    if (this.doDelete) {
+      out.write(`Deleted ${String(deleted)}, ${tail}`);
+    } else {
+      out.write(`DRY RUN \u2014 nothing deleted. ${String(attempts)} conversation(s) would be deleted, ${tail}`);
+    }
+    if (failures > 0) {
+      out.write(`${colors.error("Run incomplete:")} ${String(failures)} verification/deletion failure(s) \u2014 fix access and re-run.
+`);
+      return 1;
+    }
+    return 0;
+  }
+};
+
+// src/commands/foundry/create.ts
+import { Command as Command54, Option as Option51 } from "clipanion";
 
 // src/lib/foundry-create.ts
 init_errors();
-import { createHash as createHash4 } from "crypto";
+import { createHash as createHash5 } from "crypto";
 function deriveAccountName(subscriptionId) {
-  const h = createHash4("sha256").update(subscriptionId).digest("hex").slice(0, 12);
+  const h = createHash5("sha256").update(subscriptionId).digest("hex").slice(0, 12);
   return `m8t${h}`;
 }
 function assertHostedRegion(location) {
@@ -29446,7 +29779,7 @@ async function createFoundryProject(args) {
 init_errors();
 var FoundryCreateCommand = class extends M8tCommand {
   static paths = [["foundry", "create"]];
-  static usage = Command53.Usage({
+  static usage = Command54.Usage({
     description: "Create an AI Foundry (AIServices) account + project + model deployment from scratch.",
     details: "Non-interactive and idempotent. Creates the AIServices account (custom subdomain + project management), a project, and a model deployment (default gpt-4.1-mini @ capacity 50). Region must be hosted-agent-eligible. Emits the project endpoint as structured output. Re-run is a clean no-op (account/project skipped if present; deployment capacity converges UP, never down).",
     examples: [
@@ -29455,16 +29788,16 @@ var FoundryCreateCommand = class extends M8tCommand {
       ["Higher capacity for a reasoning model", "$0 foundry create --resource-group rg-m8t-stack --location eastus2 --model gpt-5-mini --capacity 250"]
     ]
   });
-  resourceGroup = Option50.String("--resource-group");
-  location = Option50.String("--location");
-  account = Option50.String("--account");
-  project = Option50.String("--project", "m8t");
-  model = Option50.String("--model", "gpt-4.1-mini");
-  modelVersion = Option50.String("--model-version", "2025-04-14");
-  capacity = Option50.String("--capacity", "50");
-  subscription = Option50.String("--subscription");
-  skipQuotaCheck = Option50.Boolean("--skip-quota-check", false);
-  output = Option50.String("--output");
+  resourceGroup = Option51.String("--resource-group");
+  location = Option51.String("--location");
+  account = Option51.String("--account");
+  project = Option51.String("--project", "m8t");
+  model = Option51.String("--model", "gpt-4.1-mini");
+  modelVersion = Option51.String("--model-version", "2025-04-14");
+  capacity = Option51.String("--capacity", "50");
+  subscription = Option51.String("--subscription");
+  skipQuotaCheck = Option51.Boolean("--skip-quota-check", false);
+  output = Option51.String("--output");
   async executeCommand() {
     const mode = resolveOutputMode(
       this.output,
@@ -29536,22 +29869,22 @@ var FoundryCreateCommand = class extends M8tCommand {
 };
 
 // src/commands/foundry/await-ready.ts
-import { Command as Command54, Option as Option51 } from "clipanion";
-import { AzureCliCredential as AzureCliCredential2 } from "@azure/identity";
+import { Command as Command55, Option as Option52 } from "clipanion";
+import { AzureCliCredential as AzureCliCredential3 } from "@azure/identity";
 init_errors();
 var FoundryAwaitReadyCommand = class extends M8tCommand {
   static paths = [["foundry", "await-ready"]];
-  static usage = Command54.Usage({
+  static usage = Command55.Usage({
     description: "Wait until a freshly-created Foundry project's data plane reliably serves it.",
     details: "Probes the project (GET /agents) until it returns 200 on a few consecutive tries, or fails clearly after a bounded budget. A newly-created account can serve intermittent 404 'Project not found' for minutes; run this after 'foundry create' and before deploying agents so the worker phase doesn't catch the unstable window.",
     examples: [["Wait for a project to be ready", "$0 foundry await-ready --endpoint https://acc.services.ai.azure.com/api/projects/m8t"]]
   });
-  endpoint = Option51.String("--endpoint");
-  consecutive = Option51.String("--consecutive", "3");
-  attempts = Option51.String("--attempts", "60");
-  interval = Option51.String("--interval", "5");
-  subscription = Option51.String("--subscription");
-  output = Option51.String("--output");
+  endpoint = Option52.String("--endpoint");
+  consecutive = Option52.String("--consecutive", "3");
+  attempts = Option52.String("--attempts", "60");
+  interval = Option52.String("--interval", "5");
+  subscription = Option52.String("--subscription");
+  output = Option52.String("--output");
   async executeCommand() {
     const mode = resolveOutputMode(this.output, this.context.stdout);
     const endpoint = typeof this.endpoint === "string" ? this.endpoint : void 0;
@@ -29562,7 +29895,7 @@ var FoundryAwaitReadyCommand = class extends M8tCommand {
     const attempts = typeof this.attempts === "string" ? Number(this.attempts) : 60;
     const intervalMs = (typeof this.interval === "string" ? Number(this.interval) : 5) * 1e3;
     await getAzAccount();
-    const credential2 = new AzureCliCredential2();
+    const credential2 = new AzureCliCredential3();
     const probe = makeAgentsProbe(credential2, endpoint);
     const onProgress = mode === "pretty" ? (m) => this.context.stderr.write(`  ${colors.dim(m)}
 `) : void 0;
@@ -29585,7 +29918,7 @@ var FoundryAwaitReadyCommand = class extends M8tCommand {
 };
 
 // src/commands/bootstrap/preflight.ts
-import { Command as Command55, Option as Option52 } from "clipanion";
+import { Command as Command56, Option as Option53 } from "clipanion";
 
 // ../../packages/telemetry-contract/artifact/tier-map.ts
 var EVENT_TIERS = {
@@ -29637,7 +29970,7 @@ function preflightRenderable(results) {
 }
 var BootstrapPreflightCommand = class extends M8tCommand {
   static paths = [["bootstrap", "preflight"]];
-  static usage = Command55.Usage({
+  static usage = Command56.Usage({
     description: "Loudly verify you can install m8t (Owner/UAA + directory admin) and hard-stop if not.",
     details: "Step 1 of `m8t bootstrap`. Prints an unmissable admin-credentials notice, then checks: Owner or User Access Administrator at subscription scope (hard requirement), directory-admin capability to register the app (or pass --client-id), every Azure resource provider the install uses (registering any that are missing), soft-deleted Cognitive Services accounts (they keep their model quota until purged, so quota can read free and the model deployment still fail), and \u2014 with --location \u2014 model quota in the target region. Exits non-zero with the exact failing check + remedy. `m8t prereqs` runs the same substrate checks on their own.",
     examples: [
@@ -29646,9 +29979,9 @@ var BootstrapPreflightCommand = class extends M8tCommand {
       ["BYO app registration (directory guests)", "$0 bootstrap preflight --client-id <appId>"]
     ]
   });
-  clientId = Option52.String("--client-id");
-  subscription = Option52.String("--subscription");
-  location = Option52.String("--location", {
+  clientId = Option53.String("--client-id");
+  subscription = Option53.String("--subscription");
+  location = Option53.String("--location", {
     description: "Target region. Enables the model-quota check \u2014 without it, quota is not verified."
   });
   async executeCommand() {
@@ -29748,7 +30081,7 @@ ${colors.error("  " + why)}
 import * as fs35 from "fs";
 import * as os15 from "os";
 import * as path38 from "path";
-import { Command as Command56, Option as Option53 } from "clipanion";
+import { Command as Command57, Option as Option54 } from "clipanion";
 init_errors();
 
 // src/lib/bootstrap-mi.ts
@@ -29903,7 +30236,7 @@ async function kickInstaller(s) {
 }
 
 // src/lib/bootstrap-status.ts
-import { createHash as createHash5, randomUUID as randomUUID2 } from "crypto";
+import { createHash as createHash6, randomUUID as randomUUID2 } from "crypto";
 import * as fs33 from "fs/promises";
 import * as os13 from "os";
 import * as path36 from "path";
@@ -29911,7 +30244,7 @@ init_errors();
 var STATUS_CONTAINER = "status";
 var STATUS_BLOB = "status.json";
 function deriveStatusSaName(resourceGroup, subscriptionId) {
-  const hex = createHash5("sha256").update(resourceGroup + subscriptionId).digest("hex").slice(0, 12);
+  const hex = createHash6("sha256").update(resourceGroup + subscriptionId).digest("hex").slice(0, 12);
   return `m8tinst${hex}`;
 }
 function statusBlobUrl(saName) {
@@ -30118,7 +30451,7 @@ var ACI_NAME = "m8t-installer";
 var MI_NAME = "m8t-installer-mi";
 var BootstrapLaunchCommand = class extends M8tCommand {
   static paths = [["bootstrap", "launch"]];
-  static usage = Command56.Usage({
+  static usage = Command57.Usage({
     description: "Create + authorize the installer managed identity, then kick the cloud installer.",
     details: "Step 2 of `m8t bootstrap` (run after `preflight`). Ensures the resource group, creates the m8t app registration (or uses --client-id), creates a user-assigned managed identity granted Owner at subscription scope, and launches the published m8t-installer image as an ACI run-to-completion job under that identity. Writes ~/.m8t/bootstrap.json for `status` and `reap`, and threads your Azure object id so the installer can grant you the platform's data-plane roles itself.",
     examples: [
@@ -30129,26 +30462,26 @@ var BootstrapLaunchCommand = class extends M8tCommand {
       ["Share a support contact", "$0 bootstrap launch --location eastus2 --contact-email you@example.com --company 'Acme'"]
     ]
   });
-  location = Option53.String("--location");
-  resourceGroup = Option53.String("--resource-group");
-  clientId = Option53.String("--client-id");
-  subscription = Option53.String("--subscription");
-  installerTag = Option53.String("--installer-tag");
+  location = Option54.String("--location");
+  resourceGroup = Option54.String("--resource-group");
+  clientId = Option54.String("--client-id");
+  subscription = Option54.String("--subscription");
+  installerTag = Option54.String("--installer-tag");
   // Full image ref override (registry + repo + tag) — an escape hatch when the
   // default org/tag is wrong for the current CLI (e.g. a stale published build).
   // Wins over --installer-tag / the pinned default.
-  installerImage = Option53.String("--installer-image");
-  gatewayImageRef = Option53.String("--gateway-image-ref");
-  githubAppCreds = Option53.String("--github-app-creds");
-  contactEmail = Option53.String("--contact-email", { description: "Share a contact email with m8t support. Not sent unless you pass it." });
-  company = Option53.String("--company", { description: "Share your company name with m8t support. Not sent unless you pass it." });
+  installerImage = Option54.String("--installer-image");
+  gatewayImageRef = Option54.String("--gateway-image-ref");
+  githubAppCreds = Option54.String("--github-app-creds");
+  contactEmail = Option54.String("--contact-email", { description: "Share a contact email with m8t support. Not sent unless you pass it." });
+  company = Option54.String("--company", { description: "Share your company name with m8t support. Not sent unless you pass it." });
   // Value-carrying on purpose: a bare --force would be cargo-culted into
   // runbooks and harness prompts and erode the protection, whereas a faithful
   // paste can never accidentally carry the victim group's name. It AUTHORIZES
   // the target; --resource-group is what CHOOSES it.
-  reinstallInto = Option53.String("--reinstall-into", { description: "Consent to installing into --resource-group even though it already holds resources. Must match the target group's name." });
-  org = Option53.String("--org", { description: "Assert the GitHub App on disk is installed on this org; refuses on a mismatch." });
-  noBrains = Option53.Boolean("--no-brains", false, { description: "Install without brain-backed workers. For test and CI rigs; the supported install creates brains." });
+  reinstallInto = Option54.String("--reinstall-into", { description: "Consent to installing into --resource-group even though it already holds resources. Must match the target group's name." });
+  org = Option54.String("--org", { description: "Assert the GitHub App on disk is installed on this org; refuses on a mismatch." });
+  noBrains = Option54.Boolean("--no-brains", false, { description: "Install without brain-backed workers. For test and CI rigs; the supported install creates brains." });
   async executeCommand() {
     const location = typeof this.location === "string" ? this.location : void 0;
     if (!location) {
@@ -30309,7 +30642,7 @@ var BootstrapLaunchCommand = class extends M8tCommand {
 };
 
 // src/commands/bootstrap/status.ts
-import { Command as Command58, Option as Option55 } from "clipanion";
+import { Command as Command59, Option as Option56 } from "clipanion";
 init_errors();
 
 // src/lib/bootstrap-aci-state.ts
@@ -31313,7 +31646,7 @@ import { randomUUID as randomUUID3 } from "crypto";
 import { execFile, spawn as spawn7 } from "child_process";
 
 // src/lib/companion-artifact.ts
-import { createHash as createHash6 } from "crypto";
+import { createHash as createHash7 } from "crypto";
 import { constants } from "fs";
 import * as fs36 from "fs/promises";
 import * as path40 from "path";
@@ -31351,7 +31684,7 @@ function canonicalEntry(entry) {
 `;
 }
 function artifactTreeSha256(entries) {
-  const hash = createHash6("sha256");
+  const hash = createHash7("sha256");
   const ordered = [...entries].sort(
     (left, right) => left.path.localeCompare(right.path)
   );
@@ -31421,7 +31754,7 @@ function parseArtifactManifest(value) {
   };
 }
 async function sha256File2(filePath) {
-  return createHash6("sha256").update(await fs36.readFile(filePath)).digest("hex");
+  return createHash7("sha256").update(await fs36.readFile(filePath)).digest("hex");
 }
 async function walk2(root, relative4 = "") {
   const directory = path40.join(root, ...relative4.split("/").filter(Boolean));
@@ -32237,7 +32570,7 @@ async function uninstallCompanion(options) {
 // src/commands/companion/install.ts
 import * as os18 from "os";
 import * as path43 from "path";
-import { Command as Command57, Option as Option54 } from "clipanion";
+import { Command as Command58, Option as Option55 } from "clipanion";
 
 // src/lib/companion-channel.ts
 async function readCompanionRelease(source = { url: CHANNEL_LATEST_URL }, deps = {}) {
@@ -32252,7 +32585,7 @@ async function readCompanionRelease(source = { url: CHANNEL_LATEST_URL }, deps =
 }
 
 // src/lib/companion-download.ts
-import { createHash as createHash7 } from "crypto";
+import { createHash as createHash8 } from "crypto";
 import { execFile as execFile2 } from "child_process";
 import * as fs38 from "fs/promises";
 import * as os17 from "os";
@@ -32301,7 +32634,7 @@ async function downloadCompanionArtifact(component, deps = {}) {
       message: `${pinned.asset} is larger than this command will accept.`
     });
   }
-  const digest = createHash7("sha256").update(bytes).digest("hex");
+  const digest = createHash8("sha256").update(bytes).digest("hex");
   if (digest !== pinned.sha256) {
     throw new LocalCliError({
       code: "COMPANION_ASSET_DIGEST_MISMATCH",
@@ -32395,7 +32728,7 @@ Version: ${state.version}
 }
 var CompanionInstallCommand = class extends M8tCommand {
   static paths = [["companion", "install"]];
-  static usage = Command57.Usage({
+  static usage = Command58.Usage({
     description: "Install the desktop companions for this user from the release channel.",
     examples: [
       ["Install the released build", "$0 companion install"],
@@ -32405,10 +32738,10 @@ var CompanionInstallCommand = class extends M8tCommand {
       ]
     ]
   });
-  from = Option54.String("--from", {
+  from = Option55.String("--from", {
     description: "A locally staged build directory instead of the released one."
   });
-  resourceGroup = Option54.String("--resource-group", {
+  resourceGroup = Option55.String("--resource-group", {
     description: "Which deployment to bind to, when the subscription holds more than one."
   });
   async executeCommand() {
@@ -32436,7 +32769,7 @@ async function looksLikeCheckout(dir) {
     return false;
   }
 }
-var defaultDeps2 = {
+var defaultDeps3 = {
   discoverGateway,
   writeConfig,
   ensureGatewayRedirectUri,
@@ -32449,7 +32782,7 @@ var defaultDeps2 = {
   }),
   homedir: () => os19.homedir()
 };
-async function finalizeInstall(args, deps = defaultDeps2) {
+async function finalizeInstall(args, deps = defaultDeps3) {
   const markerDir = path44.join(deps.homedir(), ".m8t");
   const markerPath = path44.join(markerDir, "repo-root");
   const cwd = process.cwd();
@@ -32624,7 +32957,7 @@ var BootstrapStatusCommand = class extends M8tCommand {
   // runbooks and shakedown recipes that a founder may already be part-way
   // through — it prints a deprecation notice and does the right thing.
   static paths = [["bootstrap", "status"], ["bootstrap", "finish"]];
-  static usage = Command58.Usage({
+  static usage = Command59.Usage({
     description: "Show the cloud installer's live status (phase, progress, result) \u2014 and finish the local setup when it lands.",
     details: "Reads the durable status blob written by the installer. --watch polls until the install reaches done or failed.\n\nOn reaching done under --watch this also completes the local half of the install, which nothing else in the bootstrap path can do: it registers the webapp's sign-in redirect URI (the installer runs as a managed identity with no directory role, and at launch time the gateway FQDN did not exist yet), writes ~/.m8t/repo-root and the gateway discovery cache, and seeds your advisors' brains from the onboarding intake. Re-runnable \u2014 `m8t bootstrap finish` is a deprecated alias that does exactly this on an already-done install.",
     examples: [
@@ -32633,12 +32966,12 @@ var BootstrapStatusCommand = class extends M8tCommand {
       ["Redo the local setup on a finished install", "$0 bootstrap status --finalize --repo-root /path/to/m8t"]
     ]
   });
-  watch = Option55.Boolean("--watch", false);
-  output = Option55.String("--output");
-  repoRoot = Option55.String("--repo-root", { description: "The m8t clone to point local tools at (default: the current directory)." });
-  finalize = Option55.Boolean("--finalize", false, { description: "Complete the local setup against an already-done install, without watching." });
-  subscription = Option55.String("--subscription");
-  resourceGroup = Option55.String("--resource-group");
+  watch = Option56.Boolean("--watch", false);
+  output = Option56.String("--output");
+  repoRoot = Option56.String("--repo-root", { description: "The m8t clone to point local tools at (default: the current directory)." });
+  finalize = Option56.Boolean("--finalize", false, { description: "Complete the local setup against an already-done install, without watching." });
+  subscription = Option56.String("--subscription");
+  resourceGroup = Option56.String("--resource-group");
   async executeCommand() {
     const state = await readBootstrapState();
     if (!state) {
@@ -32771,7 +33104,7 @@ function formatStatus(d) {
 }
 
 // src/commands/bootstrap/reap.ts
-import { Command as Command59, Option as Option56 } from "clipanion";
+import { Command as Command60, Option as Option57 } from "clipanion";
 init_errors();
 
 // src/lib/bootstrap-reap.ts
@@ -32865,7 +33198,7 @@ async function reapInstaller(opts) {
 // src/commands/bootstrap/reap.ts
 var BootstrapReapCommand = class extends M8tCommand {
   static paths = [["bootstrap", "reap"]];
-  static usage = Command59.Usage({
+  static usage = Command60.Usage({
     description: "Tear down the installer scaffolding (ACI \u2192 MI \u2192 its role assignments) after a successful install.",
     details: "Runs locally on the 'done' signal (the installer can't delete its own identity). The platform RG and the gateway's own assignments persist. A failed install is left intact for diagnosis unless --force.\n\n--sweep-orphans is a DIFFERENT and much broader mode: instead of reaping this install, it scans the WHOLE SUBSCRIPTION for m8t role assignments left behind by installs whose resources are gone \u2014 orphaned installer Owner-at-subscription-scope grants and orphaned gateway subscription-scope roles. It is a dry run that only lists what it found unless you also pass --yes, which deletes them.",
     examples: [
@@ -32875,9 +33208,9 @@ var BootstrapReapCommand = class extends M8tCommand {
       ["\u2026and delete them", "$0 bootstrap reap --sweep-orphans --yes"]
     ]
   });
-  force = Option56.Boolean("--force", false, { description: "Reap even if the install failed or never reported a status." });
-  sweepOrphans = Option56.Boolean("--sweep-orphans", false, { description: "Subscription-wide: find m8t role assignments orphaned by earlier installs. Lists only, unless --yes." });
-  yes = Option56.Boolean("--yes", false, { description: "With --sweep-orphans, actually delete what the sweep found." });
+  force = Option57.Boolean("--force", false, { description: "Reap even if the install failed or never reported a status." });
+  sweepOrphans = Option57.Boolean("--sweep-orphans", false, { description: "Subscription-wide: find m8t role assignments orphaned by earlier installs. Lists only, unless --yes." });
+  yes = Option57.Boolean("--yes", false, { description: "With --sweep-orphans, actually delete what the sweep found." });
   async executeCommand() {
     if (this.sweepOrphans === true) {
       const { subscriptionId: sub } = await getAzAccount();
@@ -32974,7 +33307,7 @@ Found ${String(total)} orphaned assignment(s) (${breakdown}) (dry-run). ${colors
 import * as fs41 from "fs";
 import * as os21 from "os";
 import * as path46 from "path";
-import { Command as Command60, Option as Option57 } from "clipanion";
+import { Command as Command61, Option as Option58 } from "clipanion";
 import { DefaultAzureCredential as DefaultAzureCredential24 } from "@azure/identity";
 init_errors();
 
@@ -33802,7 +34135,7 @@ function renderDeployFailure(error) {
 }
 var BootstrapUiCommand = class extends M8tCommand {
   static paths = [["bootstrap", "ui"]];
-  static usage = Command60.Usage({
+  static usage = Command61.Usage({
     description: "Deploy Ezra + start the local onboarding chat UI in the background (returns immediately).",
     details: [
       "Run after `m8t bootstrap launch`, in parallel with `status --watch`. Waits for the cloud",
@@ -33823,16 +34156,16 @@ var BootstrapUiCommand = class extends M8tCommand {
       ["Experimental: start the voice relay (no effect on the text-only intake)", "$0 bootstrap ui --repo-root /path/to/m8t --voice"]
     ]
   });
-  repoRoot = Option57.String("--repo-root");
-  port = Option57.String("--port", "3000");
-  endpoint = Option57.String("--endpoint", {
+  repoRoot = Option58.String("--repo-root");
+  port = Option58.String("--port", "3000");
+  endpoint = Option58.String("--endpoint", {
     description: "Foundry project endpoint to target \u2014 overrides discovery when this install's resource group holds more than one Foundry project."
   });
-  prepOnly = Option57.Boolean("--prep-only", false);
-  skipInstall = Option57.Boolean("--skip-install", false);
-  stop = Option57.Boolean("--stop", false);
-  foreground = Option57.Boolean("--foreground", false);
-  voice = Option57.Boolean("--voice", false, {
+  prepOnly = Option58.Boolean("--prep-only", false);
+  skipInstall = Option58.Boolean("--skip-install", false);
+  stop = Option58.Boolean("--stop", false);
+  foreground = Option58.Boolean("--foreground", false);
+  voice = Option58.Boolean("--voice", false, {
     description: "Experimental: when serving, starts the voice relay and writes the intake voice env var. The onboarding intake is text-only and is unaffected by this flag \u2014 no voice worker is registered for it."
   });
   async executeCommand() {
@@ -33855,7 +34188,12 @@ var BootstrapUiCommand = class extends M8tCommand {
         hint: "Run 'm8t bootstrap launch --location <region>' first."
       });
     }
-    const repoRoot = (typeof this.repoRoot === "string" ? this.repoRoot : void 0) ?? process.cwd();
+    const explicitRoot = typeof this.repoRoot === "string" ? this.repoRoot : void 0;
+    const repoRoot = explicitRoot ?? process.cwd();
+    assertPlatformCheckout(repoRoot, "'m8t bootstrap ui'", ["apps/web"], {
+      source: explicitRoot === void 0 ? "the working directory" : "--repo-root",
+      hint: "The local onboarding chat is part of the platform's web app, which is not published, so this step is unavailable today. Nothing else is blocked: let the install finish, then run 'm8t open' to meet Ezra in your deployed web app."
+    });
     if (this.port !== "3000") {
       throw new LocalCliError({
         code: "BOOTSTRAP_UI_PORT_MSAL_LOCKED",
@@ -33999,10 +34337,10 @@ var BootstrapUiCommand = class extends M8tCommand {
 };
 
 // src/commands/bootstrap/seed-profile.ts
-import { Command as Command61, Option as Option58 } from "clipanion";
+import { Command as Command62, Option as Option59 } from "clipanion";
 var BootstrapSeedProfileCommand = class extends M8tCommand {
   static paths = [["bootstrap", "seed-profile"]];
-  static usage = Command61.Usage({
+  static usage = Command62.Usage({
     description: "Seed your advisors' brains with the founder + company profile from the onboarding intake.",
     details: "Reads the latest onboarding conversation, renders memory/founder.md + memory/company-profile.md (+ their MEMORY.md index lines), and commits them to both <org>/stacey-brain and <org>/ezra-brain via the GitHub App. Idempotent. --watch polls until the founder finishes the intake.",
     examples: [
@@ -34010,11 +34348,11 @@ var BootstrapSeedProfileCommand = class extends M8tCommand {
       ["Wait for the founder to finish", "$0 bootstrap seed-profile --watch"]
     ]
   });
-  endpoint = Option58.String("--endpoint", { description: "Override the Foundry endpoint (else read from the install status)." });
-  brain = Option58.String("--brain", { description: "Seed only this one brain repo, instead of both <org>/stacey-brain and <org>/ezra-brain." });
-  watch = Option58.Boolean("--watch", false, { description: "Poll until the intake completes (or --timeout)." });
-  timeout = Option58.String("--timeout", { description: "Watch timeout in minutes (default 20)." });
-  githubAppCreds = Option58.String("--github-app-creds");
+  endpoint = Option59.String("--endpoint", { description: "Override the Foundry endpoint (else read from the install status)." });
+  brain = Option59.String("--brain", { description: "Seed only this one brain repo, instead of both <org>/stacey-brain and <org>/ezra-brain." });
+  watch = Option59.Boolean("--watch", false, { description: "Poll until the intake completes (or --timeout)." });
+  timeout = Option59.String("--timeout", { description: "Watch timeout in minutes (default 20)." });
+  githubAppCreds = Option59.String("--github-app-creds");
   async executeCommand() {
     const ctx = await resolveSeedContext({
       endpointOverride: typeof this.endpoint === "string" ? this.endpoint : void 0,
@@ -34077,7 +34415,7 @@ var BootstrapSeedProfileCommand = class extends M8tCommand {
 import * as fs42 from "fs";
 import * as os22 from "os";
 import * as path47 from "path";
-import { Command as Command62, Option as Option59 } from "clipanion";
+import { Command as Command63, Option as Option60 } from "clipanion";
 init_errors();
 
 // src/lib/telemetry-enroll.ts
@@ -34159,7 +34497,7 @@ async function resolveKeyVaultName(containerAppResourceId) {
 }
 var TelemetryEnrollCommand = class extends M8tCommand {
   static paths = [["telemetry", "enroll"]];
-  static usage = Command62.Usage({
+  static usage = Command63.Usage({
     description: "Enroll this installation for operational telemetry (pre-existing installs).",
     details: "Generates an instance id + ingest key from the m8t telemetry ingest and stores the key in your platform Key Vault, the same place the installer writes it on a fresh install. Your installation is identified only by that random instance id \u2014 no contact, company, or subscription details are sent unless you pass them explicitly. Idempotent: refuses if a key already exists.",
     examples: [
@@ -34167,11 +34505,11 @@ var TelemetryEnrollCommand = class extends M8tCommand {
       ["Enroll and share a support contact", "$0 telemetry enroll --contact-email you@example.com --company 'Acme'"]
     ]
   });
-  company = Option59.String("--company", { description: "Share your company name with m8t support. Not sent unless you pass it." });
-  contactEmail = Option59.String("--contact-email", { description: "Share a contact email with m8t support. Not sent unless you pass it." });
-  subscription = Option59.String("--subscription", { description: "Azure subscription id used to find your deployment. Never sent to m8t." });
-  resourceGroup = Option59.String("--resource-group", { description: "Resource group to disambiguate discovery, if you have more than one m8t deployment." });
-  force = Option59.Boolean("--force", false, { description: "Enroll even when a key is already stored. Use only when m8t support asks you to." });
+  company = Option60.String("--company", { description: "Share your company name with m8t support. Not sent unless you pass it." });
+  contactEmail = Option60.String("--contact-email", { description: "Share a contact email with m8t support. Not sent unless you pass it." });
+  subscription = Option60.String("--subscription", { description: "Azure subscription id used to find your deployment. Never sent to m8t." });
+  resourceGroup = Option60.String("--resource-group", { description: "Resource group to disambiguate discovery, if you have more than one m8t deployment." });
+  force = Option60.Boolean("--force", false, { description: "Enroll even when a key is already stored. Use only when m8t support asks you to." });
   async executeCommand() {
     const account = await getAzAccount();
     const subscriptionId = (typeof this.subscription === "string" ? this.subscription : void 0) ?? account.subscriptionId;
@@ -34221,7 +34559,7 @@ var TelemetryEnrollCommand = class extends M8tCommand {
 };
 
 // src/commands/companion/bridge.ts
-import { Command as Command63, Option as Option60 } from "clipanion";
+import { Command as Command64, Option as Option61 } from "clipanion";
 
 // ../../packages/companion-bridge-contract/src/index.ts
 var COMPANION_MESSAGE_MAX_CODE_POINTS = 32768;
@@ -35274,7 +35612,7 @@ async function runCompanionBridgeServe(stdin, stdout, stderr, deps = {}) {
 }
 
 // src/commands/companion/bridge.ts
-var defaultDeps3 = {
+var defaultDeps4 = {
   roster: rosterCompanions,
   send: sendCompanionMessage,
   converse: converseCompanionMessage,
@@ -35309,7 +35647,7 @@ function exitFor(terminal) {
   }
   return 2;
 }
-async function runCompanionBridge(stdin, stdout, stderr, deps = defaultDeps3) {
+async function runCompanionBridge(stdin, stdout, stderr, deps = defaultDeps4) {
   let request;
   try {
     request = parseRequestLine(await readSingleRequest(stdin));
@@ -35338,14 +35676,14 @@ async function runCompanionBridge(stdin, stdout, stderr, deps = defaultDeps3) {
     return 3;
   }
 }
-var CompanionBridgeCommand = class extends Command63 {
+var CompanionBridgeCommand = class extends Command64 {
   static paths = [["companion", "_bridge"]];
   /**
    * One process serving many requests instead of one per request, so the
    * session keeps its authenticated context between them. A CLI predating the
    * flag rejects it outright, which is how the app knows to fall back.
    */
-  serve = Option60.Boolean("--serve", false);
+  serve = Option61.Boolean("--serve", false);
   async execute() {
     if (this.serve) {
       return runCompanionBridgeServe(
@@ -35363,7 +35701,7 @@ var CompanionBridgeCommand = class extends Command63 {
 };
 
 // src/commands/companion/status.ts
-import { Command as Command64 } from "clipanion";
+import { Command as Command65 } from "clipanion";
 async function withTimeout(work, ms) {
   let timer;
   try {
@@ -35435,7 +35773,7 @@ Run: m8t companion install
 }
 var CompanionStatusCommand = class extends M8tCommand {
   static paths = [["companion", "status"]];
-  static usage = Command64.Usage({
+  static usage = Command65.Usage({
     description: "Verify the installed desktop companion without launching it."
   });
   async executeCommand() {
@@ -35449,7 +35787,7 @@ var CompanionStatusCommand = class extends M8tCommand {
 };
 
 // src/commands/companion/repair.ts
-import { Command as Command65, Option as Option61 } from "clipanion";
+import { Command as Command66, Option as Option62 } from "clipanion";
 async function runCompanionRepairCommand(stdout, repair) {
   const state = await repair();
   if (state.state === "not-released") {
@@ -35468,10 +35806,10 @@ async function runCompanionRepairCommand(stdout, repair) {
 }
 var CompanionRepairCommand = class extends M8tCommand {
   static paths = [["companion", "repair"]];
-  static usage = Command65.Usage({
+  static usage = Command66.Usage({
     description: "Restore the desktop companions and start-at-login state."
   });
-  resourceGroup = Option61.String("--resource-group", {
+  resourceGroup = Option62.String("--resource-group", {
     description: "Which deployment to bind to, when the subscription holds more than one."
   });
   async executeCommand() {
@@ -35485,7 +35823,7 @@ var CompanionRepairCommand = class extends M8tCommand {
 };
 
 // src/commands/companion/uninstall.ts
-import { Command as Command66 } from "clipanion";
+import { Command as Command67 } from "clipanion";
 async function runCompanionUninstallCommand(stdout, uninstall) {
   const state = await uninstall();
   if (state.state !== "not-installed") {
@@ -35497,7 +35835,7 @@ async function runCompanionUninstallCommand(stdout, uninstall) {
 }
 var CompanionUninstallCommand = class extends M8tCommand {
   static paths = [["companion", "uninstall"]];
-  static usage = Command66.Usage({
+  static usage = Command67.Usage({
     description: "Remove only this user's desktop companion installation."
   });
   async executeCommand() {
@@ -35567,6 +35905,7 @@ cli.register(A2aDisableCommand);
 cli.register(EvalSkillCommand);
 cli.register(EvalExamCommand);
 cli.register(DreamRunCommand);
+cli.register(ConversationsSweepCommand);
 cli.register(FoundryCreateCommand);
 cli.register(FoundryAwaitReadyCommand);
 cli.register(BootstrapPreflightCommand);