@m8t-stack/cli 0.2.80 → 0.2.82

package/dist/cli.js

@@ -229,10 +229,77 @@ var init_agent_roster = __esm({
 });
 
 // ../../packages/api-contract/dist/esm/ui-directive.js
-var DECISION_REFUSAL_REASONS, decisionRefusalReasons;
+function parseArgs(input) {
+  if (!isRecord(input) || !nonEmpty(input.title) || !Array.isArray(input.options))
+    return null;
+  const { options } = input;
+  if (options.length < MIN_OPTIONS || options.length > MAX_OPTIONS)
+    return null;
+  const parsed = [];
+  for (const option of options) {
+    if (!isRecord(option) || !nonEmpty(option.label) || !nonEmpty(option.detail))
+      return null;
+    parsed.push({ label: option.label, detail: option.detail });
+  }
+  return { title: input.title, options: parsed };
+}
+function parseState(input, optionCount) {
+  if (!isRecord(input))
+    return null;
+  switch (input.status) {
+    case "pending":
+      return { status: "pending" };
+    case "dismissed":
+      return { status: "dismissed" };
+    case "submitting":
+      return inRange(input.optionIndex, optionCount) ? { status: "submitting", optionIndex: input.optionIndex } : null;
+    case "selected":
+      if (!inRange(input.optionIndex, optionCount))
+        return null;
+      return input.acknowledgement === "pending" || input.acknowledgement === "complete" || input.acknowledgement === "error" ? { status: "selected", optionIndex: input.optionIndex, acknowledgement: input.acknowledgement } : null;
+    case "error":
+      return nonEmpty(input.message) ? { status: "error", message: input.message } : null;
+    default:
+      return null;
+  }
+}
+function parseUiDirectiveFrame(input) {
+  if (!isRecord(input))
+    return null;
+  if (input.source !== "voice" && input.source !== "text")
+    return null;
+  const directive = input.directive;
+  if (!isRecord(directive))
+    return null;
+  if (directive.version !== 1 || directive.name !== "present_decision")
+    return null;
+  if (!nonEmpty(directive.callId))
+    return null;
+  const args = parseArgs(directive.args);
+  if (!args)
+    return null;
+  const state = parseState(directive.state, args.options.length);
+  if (!state)
+    return null;
+  return {
+    directive: { version: 1, name: "present_decision", callId: directive.callId, args, state },
+    source: input.source
+  };
+}
+function isDecisionRefusalReason(value) {
+  return typeof value === "string" && decisionRefusalReasons.includes(value);
+}
+var UI_DIRECTIVE_PART_TYPE, MIN_OPTIONS, MAX_OPTIONS, isRecord, nonEmpty, inRange, UI_DIRECTIVE_RESULT_PART_TYPE, DECISION_REFUSAL_REASONS, decisionRefusalReasons;
 var init_ui_directive = __esm({
   "../../packages/api-contract/dist/esm/ui-directive.js"() {
     "use strict";
+    UI_DIRECTIVE_PART_TYPE = "data-ui-directive";
+    MIN_OPTIONS = 2;
+    MAX_OPTIONS = 4;
+    isRecord = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+    nonEmpty = (value) => typeof value === "string" && value.trim().length > 0;
+    inRange = (value, count) => typeof value === "number" && Number.isInteger(value) && value >= 0 && value < count;
+    UI_DIRECTIVE_RESULT_PART_TYPE = "data-ui-result";
     DECISION_REFUSAL_REASONS = {
       /** 409 — no live call with that `callId`. Answered twice, or talked past and dismissed. */
       notPending: "decision_not_pending",
@@ -1400,7 +1467,7 @@ var init_enable_hosted_brain = __esm({
 import { Builtins, Cli } from "clipanion";
 
 // src/lib/package-version.ts
-var CLI_VERSION = "0.2.80";
+var CLI_VERSION = "0.2.82";
 
 // src/lib/render-error.ts
 init_errors();
@@ -12728,6 +12795,25 @@ function classifyFoundryError(err) {
   return { category: "unknown", retryable: false, status, message };
 }
 
+// ../../packages/foundry-invoke/dist/esm/artifacts.js
+var FENCE_RE = /```json m8t:artifacts\s*\n([\s\S]*?)\n```/;
+function parseArtifacts(raw) {
+  const text = raw;
+  const m = FENCE_RE.exec(text);
+  if (!m)
+    return { text: text.trimEnd(), artifacts: [] };
+  let artifacts = [];
+  try {
+    const parsed = JSON.parse(m[1]);
+    if (Array.isArray(parsed))
+      artifacts = parsed;
+  } catch {
+    artifacts = [];
+  }
+  const clean2 = text.slice(0, m.index).trimEnd();
+  return { text: clean2, artifacts };
+}
+
 // src/lib/render-error.ts
 function renderHint(hint) {
   return hint.split("\n").join("\n        ");
@@ -26631,13 +26717,66 @@ import { TableClient as TableClient7 } from "@azure/data-tables";
 import { AIProjectClient as AIProjectClient3 } from "@azure/ai-projects";
 import { LogsQueryClient as LogsQueryClient3, LogsQueryResultStatus as LogsQueryResultStatus3 } from "@azure/monitor-query";
 
+// ../../packages/agent-ledger/dist/esm/pii.js
+import { createHmac } from "crypto";
+var EMAIL_PLACEHOLDER = "[email]";
+var PHONE_PLACEHOLDER = "[phone]";
+var SECRET_PLACEHOLDER = "[secret]";
+var PEM_BLOCK_RE = /-----BEGIN [A-Z0-9 ]{0,32}PRIVATE KEY-----[\s\S]*?-----END [A-Z0-9 ]{0,32}PRIVATE KEY-----/g;
+var JWT_RE = /\beyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{6,}(?:\.[A-Za-z0-9_-]{10,})?/g;
+var HTTP_CREDENTIAL_RE = /\b(Bearer|Basic)[ \t]+(?=[A-Za-z0-9._~+/=-]{0,80}[0-9+/=])[A-Za-z0-9._~+/=-]{16,}/gi;
+var KNOWN_PREFIX_RE = /(?<![A-Za-z0-9_-])(?:sk-[A-Za-z0-9_-]{16,}|rk-[A-Za-z0-9_-]{16,}|xox[a-z]-[A-Za-z0-9-]{10,}|gh[pousr]_[A-Za-z0-9]{16,}|github_pat_[A-Za-z0-9_]{20,}|glpat-[A-Za-z0-9_-]{20,}|npm_[A-Za-z0-9]{28,}|AKIA[0-9A-Z]{16}|ASIA[0-9A-Z]{16}|AIza[0-9A-Za-z_-]{35}|ya29\.[A-Za-z0-9_-]{20,}|dckr_pat_[A-Za-z0-9_-]{20,}|shp(?:at|ca|pa|ss)_[a-fA-F0-9]{32,})(?![A-Za-z0-9_-])/g;
+var KEYED_VALUE = `("[^"\\n]{8,}"|'[^'\\n]{8,}'|(?=[A-Za-z0-9+/=_.~%-]{0,64}[0-9+/=])[A-Za-z0-9+/=_.~%-]{8,})`;
+var KEYED_STRONG_SECRET_RE = new RegExp(`(?<![A-Za-z0-9])(shared[_-]?access[_-]?key|account[_-]?key|access[_-]?key|storage[_-]?key|api[_-]?key|apikey|x[_-]?api[_-]?key|client[_-]?secret|sas[_-]?token|access[_-]?token|refresh[_-]?token|auth[_-]?token|id[_-]?token|bot[_-]?token|private[_-]?key|password|passwd|pwd)(["']?\\s*[:=]\\s*)("[^"\\n]{8,}"|'[^'\\n]{8,}'|[A-Za-z0-9+/=_.~%-]{8,})`, "gi");
+var KEYED_WEAK_SECRET_RE = new RegExp(`(?<![A-Za-z0-9])(authorization|secret|token|sig)(["']?\\s*[:=]\\s*)` + KEYED_VALUE, "gi");
+var TELEGRAM_BOT_TOKEN_RE = /(?<!\d)\d{8,10}:AA[A-Za-z0-9_-]{32,34}(?![A-Za-z0-9_-])/g;
+var SPOKEN_SECRET_RE = /\b((?:password|passcode|passphrase|api[ _-]?key|access code|pin(?: code)?)\s+is[ \t:]+)(?=\S{0,32}[0-9])\S{4,64}/gi;
+var SPOKEN_PASSWORD_RE = /\b((?:password|passcode|passphrase)\s+is[ \t:]+)(?!\[)(?!(?:wrong|incorrect|invalid|expired|required|missing|reset|unchanged|correct|secure|weak|strong|blank|empty|not|now|still|too|the|already|also|only|just|being|getting)\b)("[^"\n]{4,64}"|'[^'\n]{4,64}'|\S{4,64})/gi;
+var B64ISH_RE = /(?<![A-Za-z0-9+=_-])(?=[A-Za-z0-9+=_-]{0,64}[A-Z])(?=[A-Za-z0-9+=_-]{0,64}[a-z])(?=[A-Za-z0-9+=_-]{0,64}[0-9])[A-Za-z0-9+=_-]{40,}(?![A-Za-z0-9+=_-])/g;
+var EMAIL_RE = new RegExp("[\\p{L}\\p{N}._%+-]+@[\\p{L}\\p{N}](?:[\\p{L}\\p{N}.-]*[\\p{L}\\p{N}])?\\.\\p{L}{2,}(?![\\p{L}\\p{N}-])", "gu");
+var PHONE_INTL_RE = /(?<![\d/.-])\+\d{1,3}(?:[ .-]?\(\d{1,4}\))?(?:[ .-]?\d){6,12}(?!\d)/g;
+var PHONE_SEP_RE = /(?<![\d.-])(?:\d[ .-])?(?:\(\d{3}\)[ .-]?\d{3}[ .-]?\d{4}|\d{3}[ .-]\d{3}[ .-]\d{4}|0\d{1,2}[ .-]\d{7})(?![\d-])/g;
+var PHONE_CONTEXT_RE = /\b((?:call|text|dial|whatsapp)(?:\s+(?:me|us|him|her|them|back))?(?:\s+(?:at|on))?\s*[:-]?\s*|(?:phone|mobile|cell|tel)(?:\s*(?:number|no\.?))?\s*(?:is|:)?\s*)(?<![\d.(-])\d{7,15}(?![\d.])/gi;
+var PEM_OPEN_RE = /-----BEGIN [A-Z0-9 ]{0,32}PRIVATE KEY-----/;
+var UNCLOSED_QUOTED_SECRET_RE = /(?<![A-Za-z0-9])(?:shared[_-]?access[_-]?key|account[_-]?key|access[_-]?key|storage[_-]?key|api[_-]?key|apikey|x[_-]?api[_-]?key|client[_-]?secret|sas[_-]?token|access[_-]?token|refresh[_-]?token|auth[_-]?token|id[_-]?token|bot[_-]?token|private[_-]?key|password|passwd|pwd|authorization|secret|token|sig)["']?\s*[:=]\s*["'][^"'\n]*$/i;
+function failClosedOnCutConstructs(text) {
+  const pem = PEM_OPEN_RE.exec(text);
+  if (pem && !/-----END [A-Z0-9 ]{0,32}PRIVATE KEY-----/.test(text.slice(pem.index))) {
+    return text.slice(0, pem.index) + SECRET_PLACEHOLDER;
+  }
+  const quoted = UNCLOSED_QUOTED_SECRET_RE.exec(text);
+  if (quoted)
+    return text.slice(0, quoted.index) + SECRET_PLACEHOLDER;
+  return text;
+}
+function maskSecrets(text) {
+  const masked = text.replace(PEM_BLOCK_RE, SECRET_PLACEHOLDER).replace(JWT_RE, SECRET_PLACEHOLDER).replace(HTTP_CREDENTIAL_RE, (_, scheme) => `${scheme} ${SECRET_PLACEHOLDER}`).replace(KNOWN_PREFIX_RE, SECRET_PLACEHOLDER).replace(TELEGRAM_BOT_TOKEN_RE, SECRET_PLACEHOLDER).replace(KEYED_STRONG_SECRET_RE, (_, key2, sep4) => `${key2}${sep4}${SECRET_PLACEHOLDER}`).replace(KEYED_WEAK_SECRET_RE, (_, key2, sep4) => `${key2}${sep4}${SECRET_PLACEHOLDER}`).replace(SPOKEN_SECRET_RE, (_, lead) => `${lead}${SECRET_PLACEHOLDER}`).replace(SPOKEN_PASSWORD_RE, (_, lead) => `${lead}${SECRET_PLACEHOLDER}`).replace(B64ISH_RE, SECRET_PLACEHOLDER);
+  return failClosedOnCutConstructs(masked);
+}
+function maskContact(text) {
+  return text.replace(EMAIL_RE, EMAIL_PLACEHOLDER).replace(PHONE_INTL_RE, PHONE_PLACEHOLDER).replace(PHONE_SEP_RE, PHONE_PLACEHOLDER).replace(PHONE_CONTEXT_RE, (_, lead) => `${lead}${PHONE_PLACEHOLDER}`);
+}
+var BARE_PHONE_RUN_RE = /(?<![\w.,-])\d{7,15}(?!\.?\d)(?![\w,-])/g;
+function maskContactStrict(text) {
+  return maskContact(text).replace(BARE_PHONE_RUN_RE, PHONE_PLACEHOLDER);
+}
+var USERREF_DIGEST_VERSION = "1";
+function userRefHashKey() {
+  return process.env.M8T_LEDGER_USERREF_KEY ?? (process.env.STORAGE_ACCOUNT_NAME ? `m8t-ledger-userref:${process.env.STORAGE_ACCOUNT_NAME}` : "m8t-agent-ledger-userref-dev");
+}
+function maskUserRef(ref) {
+  if (ref == null)
+    return void 0;
+  return ref.replace(EMAIL_RE, (m) => `email#${USERREF_DIGEST_VERSION}:${createHmac("sha256", userRefHashKey()).update(m.toLowerCase()).digest("hex").slice(0, 32)}`);
+}
+
 // ../../packages/agent-ledger/dist/esm/read/ledger-identity.js
 var CHANNEL_SOURCES = /* @__PURE__ */ new Set(["telegram", "slack"]);
 function resolveIdentity(source, userRef, members = []) {
   if (!userRef)
     return { source, ref: "unknown" };
   if (CHANNEL_SOURCES.has(source)) {
-    const m = members.find((x) => x.source === source && x.handle.toLowerCase() === userRef.toLowerCase());
+    const m = members.find((x) => x.source === source && (x.handle.toLowerCase() === userRef.toLowerCase() || maskUserRef(x.handle.toLowerCase()) === userRef.toLowerCase()));
     if (m)
       return { source, ref: userRef, display: m.displayName };
   }
@@ -26655,7 +26794,7 @@ var str3 = (v) => {
   return "";
 };
 var req = (v, fallback = "") => str3(v) ?? fallback;
-function parseArtifacts(v) {
+function parseArtifacts2(v) {
   if (typeof v !== "string" || v === "")
     return void 0;
   try {
@@ -26689,7 +26828,7 @@ function mapEntity(e) {
     delegationId: str3(e.delegationId),
     parentEventId: str3(e.parentEventId),
     depth: e.depth == null ? void 0 : Number(e.depth),
-    artifacts: parseArtifacts(e.artifacts)
+    artifacts: parseArtifacts2(e.artifacts)
   };
 }
 var rank = (o) => o === "ok" ? 0 : 1;
@@ -26947,6 +27086,10 @@ function makeRowKey(timestampIso, eventId) {
   return `${String(reverse).padStart(19, "0")}_${eventId}`;
 }
 
+// ../../packages/agent-ledger/dist/esm/entity.js
+var SNIPPET_MAX_LEN = 256;
+var PII_SCAN_WINDOW = SNIPPET_MAX_LEN * 16;
+
 // ../../packages/brain/engine/dist/esm/cursor.js
 var CURSOR_PARTITION_KEY = "dreamcursor";
 function isAbsentCursorError(e) {
@@ -27175,7 +27318,7 @@ function mapItems(raw) {
       continue;
     if (item.role !== "user" && item.role !== "assistant")
       continue;
-    const text = Array.isArray(item.content) ? stripVoiceEnvelope(item.content.map((c) => typeof c.text === "string" && c.text.length > 0 ? c.text : typeof c.transcript === "string" && c.transcript.length > 0 ? c.transcript : "").filter(Boolean).join("\n\n")) : "";
+    const text = Array.isArray(item.content) ? maskSecrets(stripVoiceEnvelope(item.content.map((c) => typeof c.text === "string" && c.text.length > 0 ? c.text : typeof c.transcript === "string" && c.transcript.length > 0 ? c.transcript : "").filter(Boolean).join("\n\n"))) : "";
     const at = typeof item.created_at === "number" ? new Date(item.created_at * 1e3).toISOString() : void 0;
     acc.push(at ? { role: item.role, text, at } : { role: item.role, text });
   }
@@ -27460,7 +27603,9 @@ async function runPipeline(args) {
       const grpRows = rowsByGroupKey.get(groupKeyOf(g)) ?? [];
       (consumedRowsByPk[pk] ??= []).push(...grpRows);
       const provRows = grpRows.map((r) => ({ rowKey: rowStorageKey(r), eventTimestamp: r.eventTimestamp }));
-      const conv = normalize(ng, items, enrichment);
+      const trustedOwner = g.source !== "a2a" && g.user.ref !== "unknown" && !g.user.ref.startsWith("svc:");
+      const dreamItems = trustedOwner ? items : items.map((i) => ({ ...i, text: maskContactStrict(i.text) }));
+      const conv = normalize(ng, dreamItems, enrichment);
       conv.provenance = { pk, rows: provRows };
       conversations.push(conv);
       if (outcome === "consumed")
@@ -29217,14 +29362,278 @@ function defaultDeps(overrides) {
   return deps;
 }
 
-// src/commands/foundry/create.ts
+// src/commands/conversations/sweep.ts
+import { createHash as createHash4 } from "crypto";
 import { Command as Command53, Option as Option50 } from "clipanion";
+import { AzureCliCredential as AzureCliCredential2 } from "@azure/identity";
+import { TableClient as TableClient8 } from "@azure/data-tables";
+import { AIProjectClient as AIProjectClient4 } from "@azure/ai-projects";
+init_errors();
+var LEDGER_TABLE_NAME2 = "AgentLedger";
+var KEY_LIFETIME_DAYS = 30;
+var DAY_MS = 24 * 60 * 60 * 1e3;
+function ownerDigest(nativeUserKey) {
+  return createHash4("sha256").update(nativeUserKey).digest("base64url");
+}
+function svcPrincipal(svcRef) {
+  return svcRef.split(":")[1] ?? "";
+}
+function svcConversationFacts(rows) {
+  const facts = /* @__PURE__ */ new Map();
+  for (const r of rows) {
+    if (!r.foundryConversationId) continue;
+    if (!r.userRef?.startsWith("svc:")) continue;
+    const prev = facts.get(r.foundryConversationId);
+    if (!prev || r.eventTimestamp > prev.lastSeen) {
+      facts.set(r.foundryConversationId, {
+        conversationId: r.foundryConversationId,
+        svcRef: r.userRef,
+        principal: svcPrincipal(r.userRef),
+        agent: r.agentName,
+        lastSeen: r.eventTimestamp
+      });
+    }
+  }
+  return facts;
+}
+function selectStaleCandidates(facts, cutoffIso) {
+  return [...facts.values()].filter((f) => f.lastSeen < cutoffIso).sort((a, b) => a.lastSeen < b.lastSeen ? -1 : 1);
+}
+function confirmCandidate(fact, meta, newestItemAt, cutoffIso) {
+  if (meta.app !== "m8t-webapp") return { ok: false, reason: `unexpected app tag '${meta.app ?? ""}'` };
+  const expectedOwner = `web:${ownerDigest(fact.svcRef)}`;
+  if (meta.ownerKey !== expectedOwner) return { ok: false, reason: "owner mismatch" };
+  if (newestItemAt === null) return { ok: false, reason: "no items to prove inactivity" };
+  if (newestItemAt >= cutoffIso) return { ok: false, reason: "recent activity" };
+  return { ok: true };
+}
+function statusOf2(e) {
+  const err = e;
+  return err?.statusCode ?? err?.status;
+}
+function defaultDeps2() {
+  const credential2 = new AzureCliCredential2();
+  const openaiFor = (ctx) => new AIProjectClient4(ctx.projectEndpoint, credential2).getOpenAIClient();
+  return {
+    async resolveContext(opts) {
+      const account = await getAzAccount();
+      const subscriptionId = opts.subscription ?? account.subscriptionId;
+      const project = await resolveFoundryProject({
+        credential: credential2,
+        subscriptionId,
+        interactive: false,
+        endpoint: opts.endpoint
+      });
+      const m = /\/resourceGroups\/([^/]+)/i.exec(project.accountScope);
+      if (!m) throw new LocalCliError({ code: "sweep_context", message: `Could not parse resource group from '${project.accountScope}'.` });
+      const { ledgerTableEndpoint } = await discoverLedgerResources({
+        credential: credential2,
+        subscriptionId,
+        resourceGroup: m[1]
+      });
+      return { projectEndpoint: project.endpoint, ledgerTableEndpoint };
+    },
+    async fetchRows(ctx, fromIso, toIso) {
+      const client = new TableClient8(ctx.ledgerTableEndpoint, LEDGER_TABLE_NAME2, credential2);
+      return fetchLedgerRows({ workers: [], source: "all", from: fromIso, to: toIso }, client);
+    },
+    async retrieveMetadata(ctx, conversationId) {
+      try {
+        const conv = await openaiFor(ctx).conversations.retrieve(conversationId);
+        const md = conv.metadata;
+        const s = (v) => typeof v === "string" ? v : void 0;
+        if (!md || typeof md !== "object") return {};
+        return { app: s(md.app), ownerKey: s(md.ownerKey), platform: s(md.platform) };
+      } catch (e) {
+        if (statusOf2(e) === 404) return "gone";
+        throw e;
+      }
+    },
+    async newestItemAt(ctx, conversationId) {
+      try {
+        for await (const item of openaiFor(ctx).conversations.items.list(conversationId)) {
+          const created = item.created_at;
+          if (typeof created !== "number") return { at: null };
+          return { at: new Date(created * 1e3).toISOString() };
+        }
+        return { at: null };
+      } catch (e) {
+        if (statusOf2(e) === 404) return "gone";
+        throw e;
+      }
+    },
+    async deleteConversation(ctx, conversationId) {
+      try {
+        await openaiFor(ctx).conversations.delete(conversationId);
+        return "deleted";
+      } catch (e) {
+        if (statusOf2(e) === 404) return "already-gone";
+        throw e;
+      }
+    }
+  };
+}
+var ConversationsSweepCommand = class extends M8tCommand {
+  static paths = [["conversations", "sweep"]];
+  static usage = Command53.Usage({
+    category: "Conversations",
+    description: "Delete expired public-visitor conversations (dry run by default)",
+    details: `
+      Finds conversations owned by delegated end users (public visitors) whose
+      last activity predates the retention window (${String(KEY_LIFETIME_DAYS)}-day key life + grace),
+      confirms each against its own metadata and newest item, and \u2014 only with
+      --delete \u2014 permanently removes them. Team, channel, and delegated-work
+      conversations are structurally out of scope. The masked ledger telemetry
+      of swept conversations is kept.
+    `,
+    examples: [
+      ["Report what would be deleted (nothing is)", "m8t conversations sweep"],
+      ["Delete, capped at 50", "m8t conversations sweep --delete --max 50"]
+    ]
+  });
+  doDelete = Option50.Boolean("--delete", false, {
+    description: "Perform deletions (without this flag the command only reports)"
+  });
+  principal = Option50.String("--principal", {
+    description: "Service-principal oid whose end-user keys are known-ephemeral (required with --delete; a dry run without it reports candidates grouped by principal)"
+  });
+  max = Option50.String("--max", "200", { description: "Maximum deletions per run" });
+  graceDays = Option50.String("--grace-days", "14", {
+    description: "Days past the 30-day key life before a conversation is eligible"
+  });
+  lookbackDays = Option50.String("--lookback-days", "180", {
+    description: "How far back to scan ledger activity for candidates"
+  });
+  subscription = Option50.String("--subscription", { description: "Azure subscription id override" });
+  endpoint = Option50.String("--endpoint", { description: "Foundry project endpoint override" });
+  deps = defaultDeps2();
+  async executeCommand() {
+    const out = this.context.stdout;
+    const max = Number.parseInt(this.max, 10);
+    const grace = Number.parseInt(this.graceDays, 10);
+    const lookback = Number.parseInt(this.lookbackDays, 10);
+    if (!Number.isFinite(max) || max < 1) throw new LocalCliError({ code: "sweep_args", message: "--max must be a positive integer." });
+    if (!Number.isFinite(grace) || grace < 0) throw new LocalCliError({ code: "sweep_args", message: "--grace-days must be a non-negative integer." });
+    const retentionDays = KEY_LIFETIME_DAYS + grace;
+    if (!Number.isFinite(lookback) || lookback <= retentionDays) {
+      throw new LocalCliError({ code: "sweep_args", message: `--lookback-days must exceed the retention window (${String(retentionDays)} days).` });
+    }
+    const now = Date.now();
+    const cutoffIso = new Date(now - retentionDays * DAY_MS).toISOString();
+    const fromIso = new Date(now - lookback * DAY_MS).toISOString();
+    const toIso = new Date(now).toISOString();
+    const ctx = await this.deps.resolveContext({ subscription: this.subscription, endpoint: this.endpoint });
+    out.write(`Scanning ledger activity ${fromIso} \u2192 ${toIso}; retention cutoff ${cutoffIso}.
+`);
+    const rows = await this.deps.fetchRows(ctx, fromIso, toIso);
+    const facts = svcConversationFacts(rows);
+    const stale = selectStaleCandidates(facts, cutoffIso);
+    if (this.doDelete && !this.principal) {
+      throw new LocalCliError({
+        code: "sweep_principal_required",
+        message: "--delete requires --principal <service-principal oid>.",
+        hint: "Run without --delete first: the dry run lists candidates grouped by principal so you can identify the visitor-minting one."
+      });
+    }
+    const inScope = this.principal ? stale.filter((f) => f.principal === this.principal) : stale;
+    const outOfScope = stale.length - inScope.length;
+    out.write(
+      `${String(facts.size)} delegated conversation(s) seen in window; ${String(stale.length)} past cutoff` + (this.principal ? ` (${String(inScope.length)} for principal ${this.principal}, ${String(outOfScope)} other-principal ignored)` : "") + ".\n"
+    );
+    if (!this.principal && stale.length > 0) {
+      const byPrincipal = /* @__PURE__ */ new Map();
+      for (const f of stale) byPrincipal.set(f.principal, (byPrincipal.get(f.principal) ?? 0) + 1);
+      out.write("Stale candidates by principal (pass --principal to scope deletion):\n");
+      for (const [pr, n] of [...byPrincipal.entries()].sort((a, b) => b[1] - a[1])) {
+        out.write(`  ${pr || "(malformed)"}  ${String(n)}
+`);
+      }
+    }
+    out.write("\n");
+    let attempts = 0;
+    let deleted = 0;
+    let alreadyGone = 0;
+    let skipped = 0;
+    let failures = 0;
+    let remaining = 0;
+    for (const fact of inScope) {
+      if (attempts >= max) {
+        remaining += 1;
+        continue;
+      }
+      const ageDays = Math.floor((now - Date.parse(fact.lastSeen)) / DAY_MS);
+      const label = `${fact.conversationId}  agent=${fact.agent}  last-active=${fact.lastSeen} (${String(ageDays)}d)`;
+      let meta;
+      let newest;
+      try {
+        meta = await this.deps.retrieveMetadata(ctx, fact.conversationId);
+        newest = meta === "gone" ? "gone" : await this.deps.newestItemAt(ctx, fact.conversationId);
+      } catch (e) {
+        failures += 1;
+        out.write(`${colors.error("failed")}  ${label}  \u2014 ${e.message}
+`);
+        continue;
+      }
+      if (meta === "gone" || newest === "gone") {
+        alreadyGone += 1;
+        out.write(`${colors.dim("already gone")}  ${label}
+`);
+        continue;
+      }
+      const verdict = confirmCandidate(fact, meta, newest.at, cutoffIso);
+      if (!verdict.ok) {
+        skipped += 1;
+        out.write(`${colors.warn("skip")}    ${label}  \u2014 ${verdict.reason}
+`);
+        continue;
+      }
+      attempts += 1;
+      if (!this.doDelete) {
+        out.write(`${colors.field("would delete")}  ${label}
+`);
+        continue;
+      }
+      try {
+        const result2 = await this.deps.deleteConversation(ctx, fact.conversationId);
+        if (result2 === "deleted") {
+          deleted += 1;
+          out.write(`${colors.error("deleted")} ${label}
+`);
+        } else {
+          alreadyGone += 1;
+          out.write(`${colors.dim("already gone")}  ${label}
+`);
+        }
+      } catch (e) {
+        failures += 1;
+        out.write(`${colors.error("failed")}  ${label}  \u2014 ${e.message}
+`);
+      }
+    }
+    out.write("\n");
+    const tail = `already gone ${String(alreadyGone)}, skipped ${String(skipped)} (fail-closed), failed ${String(failures)}` + (remaining > 0 ? `, ${String(remaining)} past the cap \u2014 re-run to continue` : "") + ".\n";
+    if (this.doDelete) {
+      out.write(`Deleted ${String(deleted)}, ${tail}`);
+    } else {
+      out.write(`DRY RUN \u2014 nothing deleted. ${String(attempts)} conversation(s) would be deleted, ${tail}`);
+    }
+    if (failures > 0) {
+      out.write(`${colors.error("Run incomplete:")} ${String(failures)} verification/deletion failure(s) \u2014 fix access and re-run.
+`);
+      return 1;
+    }
+    return 0;
+  }
+};
+
+// src/commands/foundry/create.ts
+import { Command as Command54, Option as Option51 } from "clipanion";
 
 // src/lib/foundry-create.ts
 init_errors();
-import { createHash as createHash4 } from "crypto";
+import { createHash as createHash5 } from "crypto";
 function deriveAccountName(subscriptionId) {
-  const h = createHash4("sha256").update(subscriptionId).digest("hex").slice(0, 12);
+  const h = createHash5("sha256").update(subscriptionId).digest("hex").slice(0, 12);
   return `m8t${h}`;
 }
 function assertHostedRegion(location) {
@@ -29456,7 +29865,7 @@ async function createFoundryProject(args) {
 init_errors();
 var FoundryCreateCommand = class extends M8tCommand {
   static paths = [["foundry", "create"]];
-  static usage = Command53.Usage({
+  static usage = Command54.Usage({
     description: "Create an AI Foundry (AIServices) account + project + model deployment from scratch.",
     details: "Non-interactive and idempotent. Creates the AIServices account (custom subdomain + project management), a project, and a model deployment (default gpt-4.1-mini @ capacity 50). Region must be hosted-agent-eligible. Emits the project endpoint as structured output. Re-run is a clean no-op (account/project skipped if present; deployment capacity converges UP, never down).",
     examples: [
@@ -29465,16 +29874,16 @@ var FoundryCreateCommand = class extends M8tCommand {
       ["Higher capacity for a reasoning model", "$0 foundry create --resource-group rg-m8t-stack --location eastus2 --model gpt-5-mini --capacity 250"]
     ]
   });
-  resourceGroup = Option50.String("--resource-group");
-  location = Option50.String("--location");
-  account = Option50.String("--account");
-  project = Option50.String("--project", "m8t");
-  model = Option50.String("--model", "gpt-4.1-mini");
-  modelVersion = Option50.String("--model-version", "2025-04-14");
-  capacity = Option50.String("--capacity", "50");
-  subscription = Option50.String("--subscription");
-  skipQuotaCheck = Option50.Boolean("--skip-quota-check", false);
-  output = Option50.String("--output");
+  resourceGroup = Option51.String("--resource-group");
+  location = Option51.String("--location");
+  account = Option51.String("--account");
+  project = Option51.String("--project", "m8t");
+  model = Option51.String("--model", "gpt-4.1-mini");
+  modelVersion = Option51.String("--model-version", "2025-04-14");
+  capacity = Option51.String("--capacity", "50");
+  subscription = Option51.String("--subscription");
+  skipQuotaCheck = Option51.Boolean("--skip-quota-check", false);
+  output = Option51.String("--output");
   async executeCommand() {
     const mode = resolveOutputMode(
       this.output,
@@ -29546,22 +29955,22 @@ var FoundryCreateCommand = class extends M8tCommand {
 };
 
 // src/commands/foundry/await-ready.ts
-import { Command as Command54, Option as Option51 } from "clipanion";
-import { AzureCliCredential as AzureCliCredential2 } from "@azure/identity";
+import { Command as Command55, Option as Option52 } from "clipanion";
+import { AzureCliCredential as AzureCliCredential3 } from "@azure/identity";
 init_errors();
 var FoundryAwaitReadyCommand = class extends M8tCommand {
   static paths = [["foundry", "await-ready"]];
-  static usage = Command54.Usage({
+  static usage = Command55.Usage({
     description: "Wait until a freshly-created Foundry project's data plane reliably serves it.",
     details: "Probes the project (GET /agents) until it returns 200 on a few consecutive tries, or fails clearly after a bounded budget. A newly-created account can serve intermittent 404 'Project not found' for minutes; run this after 'foundry create' and before deploying agents so the worker phase doesn't catch the unstable window.",
     examples: [["Wait for a project to be ready", "$0 foundry await-ready --endpoint https://acc.services.ai.azure.com/api/projects/m8t"]]
   });
-  endpoint = Option51.String("--endpoint");
-  consecutive = Option51.String("--consecutive", "3");
-  attempts = Option51.String("--attempts", "60");
-  interval = Option51.String("--interval", "5");
-  subscription = Option51.String("--subscription");
-  output = Option51.String("--output");
+  endpoint = Option52.String("--endpoint");
+  consecutive = Option52.String("--consecutive", "3");
+  attempts = Option52.String("--attempts", "60");
+  interval = Option52.String("--interval", "5");
+  subscription = Option52.String("--subscription");
+  output = Option52.String("--output");
   async executeCommand() {
     const mode = resolveOutputMode(this.output, this.context.stdout);
     const endpoint = typeof this.endpoint === "string" ? this.endpoint : void 0;
@@ -29572,7 +29981,7 @@ var FoundryAwaitReadyCommand = class extends M8tCommand {
     const attempts = typeof this.attempts === "string" ? Number(this.attempts) : 60;
     const intervalMs = (typeof this.interval === "string" ? Number(this.interval) : 5) * 1e3;
     await getAzAccount();
-    const credential2 = new AzureCliCredential2();
+    const credential2 = new AzureCliCredential3();
     const probe = makeAgentsProbe(credential2, endpoint);
     const onProgress = mode === "pretty" ? (m) => this.context.stderr.write(`  ${colors.dim(m)}
 `) : void 0;
@@ -29595,7 +30004,7 @@ var FoundryAwaitReadyCommand = class extends M8tCommand {
 };
 
 // src/commands/bootstrap/preflight.ts
-import { Command as Command55, Option as Option52 } from "clipanion";
+import { Command as Command56, Option as Option53 } from "clipanion";
 
 // ../../packages/telemetry-contract/artifact/tier-map.ts
 var EVENT_TIERS = {
@@ -29647,7 +30056,7 @@ function preflightRenderable(results) {
 }
 var BootstrapPreflightCommand = class extends M8tCommand {
   static paths = [["bootstrap", "preflight"]];
-  static usage = Command55.Usage({
+  static usage = Command56.Usage({
     description: "Loudly verify you can install m8t (Owner/UAA + directory admin) and hard-stop if not.",
     details: "Step 1 of `m8t bootstrap`. Prints an unmissable admin-credentials notice, then checks: Owner or User Access Administrator at subscription scope (hard requirement), directory-admin capability to register the app (or pass --client-id), every Azure resource provider the install uses (registering any that are missing), soft-deleted Cognitive Services accounts (they keep their model quota until purged, so quota can read free and the model deployment still fail), and \u2014 with --location \u2014 model quota in the target region. Exits non-zero with the exact failing check + remedy. `m8t prereqs` runs the same substrate checks on their own.",
     examples: [
@@ -29656,9 +30065,9 @@ var BootstrapPreflightCommand = class extends M8tCommand {
       ["BYO app registration (directory guests)", "$0 bootstrap preflight --client-id <appId>"]
     ]
   });
-  clientId = Option52.String("--client-id");
-  subscription = Option52.String("--subscription");
-  location = Option52.String("--location", {
+  clientId = Option53.String("--client-id");
+  subscription = Option53.String("--subscription");
+  location = Option53.String("--location", {
     description: "Target region. Enables the model-quota check \u2014 without it, quota is not verified."
   });
   async executeCommand() {
@@ -29758,7 +30167,7 @@ ${colors.error("  " + why)}
 import * as fs35 from "fs";
 import * as os15 from "os";
 import * as path38 from "path";
-import { Command as Command56, Option as Option53 } from "clipanion";
+import { Command as Command57, Option as Option54 } from "clipanion";
 init_errors();
 
 // src/lib/bootstrap-mi.ts
@@ -29913,7 +30322,7 @@ async function kickInstaller(s) {
 }
 
 // src/lib/bootstrap-status.ts
-import { createHash as createHash5, randomUUID as randomUUID2 } from "crypto";
+import { createHash as createHash6, randomUUID as randomUUID2 } from "crypto";
 import * as fs33 from "fs/promises";
 import * as os13 from "os";
 import * as path36 from "path";
@@ -29921,7 +30330,7 @@ init_errors();
 var STATUS_CONTAINER = "status";
 var STATUS_BLOB = "status.json";
 function deriveStatusSaName(resourceGroup, subscriptionId) {
-  const hex = createHash5("sha256").update(resourceGroup + subscriptionId).digest("hex").slice(0, 12);
+  const hex = createHash6("sha256").update(resourceGroup + subscriptionId).digest("hex").slice(0, 12);
   return `m8tinst${hex}`;
 }
 function statusBlobUrl(saName) {
@@ -30128,7 +30537,7 @@ var ACI_NAME = "m8t-installer";
 var MI_NAME = "m8t-installer-mi";
 var BootstrapLaunchCommand = class extends M8tCommand {
   static paths = [["bootstrap", "launch"]];
-  static usage = Command56.Usage({
+  static usage = Command57.Usage({
     description: "Create + authorize the installer managed identity, then kick the cloud installer.",
     details: "Step 2 of `m8t bootstrap` (run after `preflight`). Ensures the resource group, creates the m8t app registration (or uses --client-id), creates a user-assigned managed identity granted Owner at subscription scope, and launches the published m8t-installer image as an ACI run-to-completion job under that identity. Writes ~/.m8t/bootstrap.json for `status` and `reap`, and threads your Azure object id so the installer can grant you the platform's data-plane roles itself.",
     examples: [
@@ -30139,26 +30548,26 @@ var BootstrapLaunchCommand = class extends M8tCommand {
       ["Share a support contact", "$0 bootstrap launch --location eastus2 --contact-email you@example.com --company 'Acme'"]
     ]
   });
-  location = Option53.String("--location");
-  resourceGroup = Option53.String("--resource-group");
-  clientId = Option53.String("--client-id");
-  subscription = Option53.String("--subscription");
-  installerTag = Option53.String("--installer-tag");
+  location = Option54.String("--location");
+  resourceGroup = Option54.String("--resource-group");
+  clientId = Option54.String("--client-id");
+  subscription = Option54.String("--subscription");
+  installerTag = Option54.String("--installer-tag");
   // Full image ref override (registry + repo + tag) — an escape hatch when the
   // default org/tag is wrong for the current CLI (e.g. a stale published build).
   // Wins over --installer-tag / the pinned default.
-  installerImage = Option53.String("--installer-image");
-  gatewayImageRef = Option53.String("--gateway-image-ref");
-  githubAppCreds = Option53.String("--github-app-creds");
-  contactEmail = Option53.String("--contact-email", { description: "Share a contact email with m8t support. Not sent unless you pass it." });
-  company = Option53.String("--company", { description: "Share your company name with m8t support. Not sent unless you pass it." });
+  installerImage = Option54.String("--installer-image");
+  gatewayImageRef = Option54.String("--gateway-image-ref");
+  githubAppCreds = Option54.String("--github-app-creds");
+  contactEmail = Option54.String("--contact-email", { description: "Share a contact email with m8t support. Not sent unless you pass it." });
+  company = Option54.String("--company", { description: "Share your company name with m8t support. Not sent unless you pass it." });
   // Value-carrying on purpose: a bare --force would be cargo-culted into
   // runbooks and harness prompts and erode the protection, whereas a faithful
   // paste can never accidentally carry the victim group's name. It AUTHORIZES
   // the target; --resource-group is what CHOOSES it.
-  reinstallInto = Option53.String("--reinstall-into", { description: "Consent to installing into --resource-group even though it already holds resources. Must match the target group's name." });
-  org = Option53.String("--org", { description: "Assert the GitHub App on disk is installed on this org; refuses on a mismatch." });
-  noBrains = Option53.Boolean("--no-brains", false, { description: "Install without brain-backed workers. For test and CI rigs; the supported install creates brains." });
+  reinstallInto = Option54.String("--reinstall-into", { description: "Consent to installing into --resource-group even though it already holds resources. Must match the target group's name." });
+  org = Option54.String("--org", { description: "Assert the GitHub App on disk is installed on this org; refuses on a mismatch." });
+  noBrains = Option54.Boolean("--no-brains", false, { description: "Install without brain-backed workers. For test and CI rigs; the supported install creates brains." });
   async executeCommand() {
     const location = typeof this.location === "string" ? this.location : void 0;
     if (!location) {
@@ -30319,7 +30728,7 @@ var BootstrapLaunchCommand = class extends M8tCommand {
 };
 
 // src/commands/bootstrap/status.ts
-import { Command as Command58, Option as Option55 } from "clipanion";
+import { Command as Command59, Option as Option56 } from "clipanion";
 init_errors();
 
 // src/lib/bootstrap-aci-state.ts
@@ -30405,7 +30814,7 @@ var ONBOARDING_BLOCK_KEYS = [
   "advisor_name",
   "advisor_email"
 ];
-function isRecord(value) {
+function isRecord2(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function hasValidUniqueJsonKeys(source) {
@@ -30513,7 +30922,7 @@ var V3_COMPANY_KEYS = ["name", "one_liner"];
 var V3_ADDRESS_KEYS = ["address", "city", "postal_code", "country"];
 var V3_REQUEST_KEYS = ["type", "model", "region", "consent", "company_address"];
 function exactStringRecord(value, keys) {
-  if (!isRecord(value)) return "non-string-value";
+  if (!isRecord2(value)) return "non-string-value";
   const present = new Set(Object.keys(value));
   for (const key2 of keys) if (!present.has(key2)) return "missing-key";
   if (present.size !== keys.length) return "unexpected-key";
@@ -30525,7 +30934,7 @@ function canonicalPendingRequests(value) {
   if (value.length > 1) return { ok: false, reason: "too-many-pending-requests" };
   const requests = [];
   for (const entry of value) {
-    if (!isRecord(entry)) return { ok: false, reason: "non-string-value" };
+    if (!isRecord2(entry)) return { ok: false, reason: "non-string-value" };
     const present = new Set(Object.keys(entry));
     for (const key2 of V3_REQUEST_KEYS) {
       if (!present.has(key2)) return { ok: false, reason: "missing-key" };
@@ -30575,7 +30984,7 @@ function canonicalV3Block(value) {
   };
 }
 function canonicalBlock(value) {
-  if (!isRecord(value)) return { ok: false, reason: "non-string-value" };
+  if (!isRecord2(value)) return { ok: false, reason: "non-string-value" };
   if (value.schema_version === "3") return canonicalV3Block(value);
   if (value.schema_version !== "2") return { ok: false, reason: "unknown-schema-version" };
   const keys = new Set(Object.keys(value));
@@ -30620,7 +31029,7 @@ function parseOnboardingArtifactResult(machineText) {
       if (json.includes("m8t_onboarding")) return { ok: false, reason: "malformed-json" };
       continue;
     }
-    if (!isRecord(parsed) || !Object.hasOwn(parsed, "m8t_onboarding")) continue;
+    if (!isRecord2(parsed) || !Object.hasOwn(parsed, "m8t_onboarding")) continue;
     if (Object.keys(parsed).length !== 1) return { ok: false, reason: "unexpected-key" };
     const outcome = canonicalBlock(parsed.m8t_onboarding);
     if (!outcome.ok) return outcome;
@@ -30666,7 +31075,7 @@ async function readCursorPages(args) {
     } catch {
       return null;
     }
-    if (!isRecord(body) || !Array.isArray(body.data)) return null;
+    if (!isRecord2(body) || !Array.isArray(body.data)) return null;
     const page = body;
     all.push(...page.data);
     if (page.has_more !== true) {
@@ -30687,7 +31096,7 @@ function decodeFoundryUser(token) {
   if (parts.length !== 3 || parts.some((part) => part.length === 0) || !/^[A-Za-z0-9_-]+$/.test(parts[1] ?? "")) return null;
   try {
     const payload = JSON.parse(Buffer.from(parts[1] ?? "", "base64url").toString("utf8"));
-    if (!isRecord(payload)) return null;
+    if (!isRecord2(payload)) return null;
     const claim = payload.upn ?? payload.preferred_username ?? payload.email;
     return typeof claim === "string" && claim.trim().length > 0 ? claim : null;
   } catch {
@@ -30718,7 +31127,7 @@ async function findOnboardingProfile(args) {
   });
   if (!listed) return { ...EMPTY_PROFILE_RESULT };
   const conversations = orderNewest(listed.flatMap((value, ordinal) => {
-    if (!isRecord(value) || typeof value.id !== "string" || value.id.length === 0 || !isRecord(value.metadata)) return [];
+    if (!isRecord2(value) || typeof value.id !== "string" || value.id.length === 0 || !isRecord2(value.metadata)) return [];
     const metadata = value.metadata;
     if (metadata.app !== "m8t-webapp" || metadata.agent !== INTAKE_AGENT_NAME) return [];
     return [{
@@ -30736,7 +31145,7 @@ async function findOnboardingProfile(args) {
   });
   if (!items) return { hadIntake: true, block: null, machineText: null, speechText: null, rejection: null };
   const assistantItems = orderNewest(items.flatMap((value, ordinal) => {
-    if (!isRecord(value) || value.type !== "message" || value.role !== "assistant" || !Array.isArray(value.content)) return [];
+    if (!isRecord2(value) || value.type !== "message" || value.role !== "assistant" || !Array.isArray(value.content)) return [];
     const id = typeof value.id === "string" ? value.id : "";
     return [{ value, id, createdAt: timestamp(value.created_at), ordinal }];
   }));
@@ -30745,7 +31154,7 @@ async function findOnboardingProfile(args) {
   for (const item of assistantItems) {
     const content = item.value.content;
     const machineText = content.flatMap((part) => {
-      if (!isRecord(part)) return [];
+      if (!isRecord2(part)) return [];
       if (typeof part.text === "string" && part.text.length > 0) return [part.text];
       if (typeof part.transcript === "string") return [part.transcript];
       return [];
@@ -31323,7 +31732,7 @@ import { randomUUID as randomUUID3 } from "crypto";
 import { execFile, spawn as spawn7 } from "child_process";
 
 // src/lib/companion-artifact.ts
-import { createHash as createHash6 } from "crypto";
+import { createHash as createHash7 } from "crypto";
 import { constants } from "fs";
 import * as fs36 from "fs/promises";
 import * as path40 from "path";
@@ -31361,7 +31770,7 @@ function canonicalEntry(entry) {
 `;
 }
 function artifactTreeSha256(entries) {
-  const hash = createHash6("sha256");
+  const hash = createHash7("sha256");
   const ordered = [...entries].sort(
     (left, right) => left.path.localeCompare(right.path)
   );
@@ -31431,7 +31840,7 @@ function parseArtifactManifest(value) {
   };
 }
 async function sha256File2(filePath) {
-  return createHash6("sha256").update(await fs36.readFile(filePath)).digest("hex");
+  return createHash7("sha256").update(await fs36.readFile(filePath)).digest("hex");
 }
 async function walk2(root, relative4 = "") {
   const directory = path40.join(root, ...relative4.split("/").filter(Boolean));
@@ -32247,7 +32656,7 @@ async function uninstallCompanion(options) {
 // src/commands/companion/install.ts
 import * as os18 from "os";
 import * as path43 from "path";
-import { Command as Command57, Option as Option54 } from "clipanion";
+import { Command as Command58, Option as Option55 } from "clipanion";
 
 // src/lib/companion-channel.ts
 async function readCompanionRelease(source = { url: CHANNEL_LATEST_URL }, deps = {}) {
@@ -32262,7 +32671,7 @@ async function readCompanionRelease(source = { url: CHANNEL_LATEST_URL }, deps =
 }
 
 // src/lib/companion-download.ts
-import { createHash as createHash7 } from "crypto";
+import { createHash as createHash8 } from "crypto";
 import { execFile as execFile2 } from "child_process";
 import * as fs38 from "fs/promises";
 import * as os17 from "os";
@@ -32311,7 +32720,7 @@ async function downloadCompanionArtifact(component, deps = {}) {
       message: `${pinned.asset} is larger than this command will accept.`
     });
   }
-  const digest = createHash7("sha256").update(bytes).digest("hex");
+  const digest = createHash8("sha256").update(bytes).digest("hex");
   if (digest !== pinned.sha256) {
     throw new LocalCliError({
       code: "COMPANION_ASSET_DIGEST_MISMATCH",
@@ -32405,7 +32814,7 @@ Version: ${state.version}
 }
 var CompanionInstallCommand = class extends M8tCommand {
   static paths = [["companion", "install"]];
-  static usage = Command57.Usage({
+  static usage = Command58.Usage({
     description: "Install the desktop companions for this user from the release channel.",
     examples: [
       ["Install the released build", "$0 companion install"],
@@ -32415,10 +32824,10 @@ var CompanionInstallCommand = class extends M8tCommand {
       ]
     ]
   });
-  from = Option54.String("--from", {
+  from = Option55.String("--from", {
     description: "A locally staged build directory instead of the released one."
   });
-  resourceGroup = Option54.String("--resource-group", {
+  resourceGroup = Option55.String("--resource-group", {
     description: "Which deployment to bind to, when the subscription holds more than one."
   });
   async executeCommand() {
@@ -32446,7 +32855,7 @@ async function looksLikeCheckout(dir) {
     return false;
   }
 }
-var defaultDeps2 = {
+var defaultDeps3 = {
   discoverGateway,
   writeConfig,
   ensureGatewayRedirectUri,
@@ -32459,7 +32868,7 @@ var defaultDeps2 = {
   }),
   homedir: () => os19.homedir()
 };
-async function finalizeInstall(args, deps = defaultDeps2) {
+async function finalizeInstall(args, deps = defaultDeps3) {
   const markerDir = path44.join(deps.homedir(), ".m8t");
   const markerPath = path44.join(markerDir, "repo-root");
   const cwd = process.cwd();
@@ -32634,7 +33043,7 @@ var BootstrapStatusCommand = class extends M8tCommand {
   // runbooks and shakedown recipes that a founder may already be part-way
   // through — it prints a deprecation notice and does the right thing.
   static paths = [["bootstrap", "status"], ["bootstrap", "finish"]];
-  static usage = Command58.Usage({
+  static usage = Command59.Usage({
     description: "Show the cloud installer's live status (phase, progress, result) \u2014 and finish the local setup when it lands.",
     details: "Reads the durable status blob written by the installer. --watch polls until the install reaches done or failed.\n\nOn reaching done under --watch this also completes the local half of the install, which nothing else in the bootstrap path can do: it registers the webapp's sign-in redirect URI (the installer runs as a managed identity with no directory role, and at launch time the gateway FQDN did not exist yet), writes ~/.m8t/repo-root and the gateway discovery cache, and seeds your advisors' brains from the onboarding intake. Re-runnable \u2014 `m8t bootstrap finish` is a deprecated alias that does exactly this on an already-done install.",
     examples: [
@@ -32643,12 +33052,12 @@ var BootstrapStatusCommand = class extends M8tCommand {
       ["Redo the local setup on a finished install", "$0 bootstrap status --finalize --repo-root /path/to/m8t"]
     ]
   });
-  watch = Option55.Boolean("--watch", false);
-  output = Option55.String("--output");
-  repoRoot = Option55.String("--repo-root", { description: "The m8t clone to point local tools at (default: the current directory)." });
-  finalize = Option55.Boolean("--finalize", false, { description: "Complete the local setup against an already-done install, without watching." });
-  subscription = Option55.String("--subscription");
-  resourceGroup = Option55.String("--resource-group");
+  watch = Option56.Boolean("--watch", false);
+  output = Option56.String("--output");
+  repoRoot = Option56.String("--repo-root", { description: "The m8t clone to point local tools at (default: the current directory)." });
+  finalize = Option56.Boolean("--finalize", false, { description: "Complete the local setup against an already-done install, without watching." });
+  subscription = Option56.String("--subscription");
+  resourceGroup = Option56.String("--resource-group");
   async executeCommand() {
     const state = await readBootstrapState();
     if (!state) {
@@ -32781,7 +33190,7 @@ function formatStatus(d) {
 }
 
 // src/commands/bootstrap/reap.ts
-import { Command as Command59, Option as Option56 } from "clipanion";
+import { Command as Command60, Option as Option57 } from "clipanion";
 init_errors();
 
 // src/lib/bootstrap-reap.ts
@@ -32875,7 +33284,7 @@ async function reapInstaller(opts) {
 // src/commands/bootstrap/reap.ts
 var BootstrapReapCommand = class extends M8tCommand {
   static paths = [["bootstrap", "reap"]];
-  static usage = Command59.Usage({
+  static usage = Command60.Usage({
     description: "Tear down the installer scaffolding (ACI \u2192 MI \u2192 its role assignments) after a successful install.",
     details: "Runs locally on the 'done' signal (the installer can't delete its own identity). The platform RG and the gateway's own assignments persist. A failed install is left intact for diagnosis unless --force.\n\n--sweep-orphans is a DIFFERENT and much broader mode: instead of reaping this install, it scans the WHOLE SUBSCRIPTION for m8t role assignments left behind by installs whose resources are gone \u2014 orphaned installer Owner-at-subscription-scope grants and orphaned gateway subscription-scope roles. It is a dry run that only lists what it found unless you also pass --yes, which deletes them.",
     examples: [
@@ -32885,9 +33294,9 @@ var BootstrapReapCommand = class extends M8tCommand {
       ["\u2026and delete them", "$0 bootstrap reap --sweep-orphans --yes"]
     ]
   });
-  force = Option56.Boolean("--force", false, { description: "Reap even if the install failed or never reported a status." });
-  sweepOrphans = Option56.Boolean("--sweep-orphans", false, { description: "Subscription-wide: find m8t role assignments orphaned by earlier installs. Lists only, unless --yes." });
-  yes = Option56.Boolean("--yes", false, { description: "With --sweep-orphans, actually delete what the sweep found." });
+  force = Option57.Boolean("--force", false, { description: "Reap even if the install failed or never reported a status." });
+  sweepOrphans = Option57.Boolean("--sweep-orphans", false, { description: "Subscription-wide: find m8t role assignments orphaned by earlier installs. Lists only, unless --yes." });
+  yes = Option57.Boolean("--yes", false, { description: "With --sweep-orphans, actually delete what the sweep found." });
   async executeCommand() {
     if (this.sweepOrphans === true) {
       const { subscriptionId: sub } = await getAzAccount();
@@ -32984,7 +33393,7 @@ Found ${String(total)} orphaned assignment(s) (${breakdown}) (dry-run). ${colors
 import * as fs41 from "fs";
 import * as os21 from "os";
 import * as path46 from "path";
-import { Command as Command60, Option as Option57 } from "clipanion";
+import { Command as Command61, Option as Option58 } from "clipanion";
 import { DefaultAzureCredential as DefaultAzureCredential24 } from "@azure/identity";
 init_errors();
 
@@ -33812,7 +34221,7 @@ function renderDeployFailure(error) {
 }
 var BootstrapUiCommand = class extends M8tCommand {
   static paths = [["bootstrap", "ui"]];
-  static usage = Command60.Usage({
+  static usage = Command61.Usage({
     description: "Deploy Ezra + start the local onboarding chat UI in the background (returns immediately).",
     details: [
       "Run after `m8t bootstrap launch`, in parallel with `status --watch`. Waits for the cloud",
@@ -33833,16 +34242,16 @@ var BootstrapUiCommand = class extends M8tCommand {
       ["Experimental: start the voice relay (no effect on the text-only intake)", "$0 bootstrap ui --repo-root /path/to/m8t --voice"]
     ]
   });
-  repoRoot = Option57.String("--repo-root");
-  port = Option57.String("--port", "3000");
-  endpoint = Option57.String("--endpoint", {
+  repoRoot = Option58.String("--repo-root");
+  port = Option58.String("--port", "3000");
+  endpoint = Option58.String("--endpoint", {
     description: "Foundry project endpoint to target \u2014 overrides discovery when this install's resource group holds more than one Foundry project."
   });
-  prepOnly = Option57.Boolean("--prep-only", false);
-  skipInstall = Option57.Boolean("--skip-install", false);
-  stop = Option57.Boolean("--stop", false);
-  foreground = Option57.Boolean("--foreground", false);
-  voice = Option57.Boolean("--voice", false, {
+  prepOnly = Option58.Boolean("--prep-only", false);
+  skipInstall = Option58.Boolean("--skip-install", false);
+  stop = Option58.Boolean("--stop", false);
+  foreground = Option58.Boolean("--foreground", false);
+  voice = Option58.Boolean("--voice", false, {
     description: "Experimental: when serving, starts the voice relay and writes the intake voice env var. The onboarding intake is text-only and is unaffected by this flag \u2014 no voice worker is registered for it."
   });
   async executeCommand() {
@@ -34014,10 +34423,10 @@ var BootstrapUiCommand = class extends M8tCommand {
 };
 
 // src/commands/bootstrap/seed-profile.ts
-import { Command as Command61, Option as Option58 } from "clipanion";
+import { Command as Command62, Option as Option59 } from "clipanion";
 var BootstrapSeedProfileCommand = class extends M8tCommand {
   static paths = [["bootstrap", "seed-profile"]];
-  static usage = Command61.Usage({
+  static usage = Command62.Usage({
     description: "Seed your advisors' brains with the founder + company profile from the onboarding intake.",
     details: "Reads the latest onboarding conversation, renders memory/founder.md + memory/company-profile.md (+ their MEMORY.md index lines), and commits them to both <org>/stacey-brain and <org>/ezra-brain via the GitHub App. Idempotent. --watch polls until the founder finishes the intake.",
     examples: [
@@ -34025,11 +34434,11 @@ var BootstrapSeedProfileCommand = class extends M8tCommand {
       ["Wait for the founder to finish", "$0 bootstrap seed-profile --watch"]
     ]
   });
-  endpoint = Option58.String("--endpoint", { description: "Override the Foundry endpoint (else read from the install status)." });
-  brain = Option58.String("--brain", { description: "Seed only this one brain repo, instead of both <org>/stacey-brain and <org>/ezra-brain." });
-  watch = Option58.Boolean("--watch", false, { description: "Poll until the intake completes (or --timeout)." });
-  timeout = Option58.String("--timeout", { description: "Watch timeout in minutes (default 20)." });
-  githubAppCreds = Option58.String("--github-app-creds");
+  endpoint = Option59.String("--endpoint", { description: "Override the Foundry endpoint (else read from the install status)." });
+  brain = Option59.String("--brain", { description: "Seed only this one brain repo, instead of both <org>/stacey-brain and <org>/ezra-brain." });
+  watch = Option59.Boolean("--watch", false, { description: "Poll until the intake completes (or --timeout)." });
+  timeout = Option59.String("--timeout", { description: "Watch timeout in minutes (default 20)." });
+  githubAppCreds = Option59.String("--github-app-creds");
   async executeCommand() {
     const ctx = await resolveSeedContext({
       endpointOverride: typeof this.endpoint === "string" ? this.endpoint : void 0,
@@ -34092,7 +34501,7 @@ var BootstrapSeedProfileCommand = class extends M8tCommand {
 import * as fs42 from "fs";
 import * as os22 from "os";
 import * as path47 from "path";
-import { Command as Command62, Option as Option59 } from "clipanion";
+import { Command as Command63, Option as Option60 } from "clipanion";
 init_errors();
 
 // src/lib/telemetry-enroll.ts
@@ -34174,7 +34583,7 @@ async function resolveKeyVaultName(containerAppResourceId) {
 }
 var TelemetryEnrollCommand = class extends M8tCommand {
   static paths = [["telemetry", "enroll"]];
-  static usage = Command62.Usage({
+  static usage = Command63.Usage({
     description: "Enroll this installation for operational telemetry (pre-existing installs).",
     details: "Generates an instance id + ingest key from the m8t telemetry ingest and stores the key in your platform Key Vault, the same place the installer writes it on a fresh install. Your installation is identified only by that random instance id \u2014 no contact, company, or subscription details are sent unless you pass them explicitly. Idempotent: refuses if a key already exists.",
     examples: [
@@ -34182,11 +34591,11 @@ var TelemetryEnrollCommand = class extends M8tCommand {
       ["Enroll and share a support contact", "$0 telemetry enroll --contact-email you@example.com --company 'Acme'"]
     ]
   });
-  company = Option59.String("--company", { description: "Share your company name with m8t support. Not sent unless you pass it." });
-  contactEmail = Option59.String("--contact-email", { description: "Share a contact email with m8t support. Not sent unless you pass it." });
-  subscription = Option59.String("--subscription", { description: "Azure subscription id used to find your deployment. Never sent to m8t." });
-  resourceGroup = Option59.String("--resource-group", { description: "Resource group to disambiguate discovery, if you have more than one m8t deployment." });
-  force = Option59.Boolean("--force", false, { description: "Enroll even when a key is already stored. Use only when m8t support asks you to." });
+  company = Option60.String("--company", { description: "Share your company name with m8t support. Not sent unless you pass it." });
+  contactEmail = Option60.String("--contact-email", { description: "Share a contact email with m8t support. Not sent unless you pass it." });
+  subscription = Option60.String("--subscription", { description: "Azure subscription id used to find your deployment. Never sent to m8t." });
+  resourceGroup = Option60.String("--resource-group", { description: "Resource group to disambiguate discovery, if you have more than one m8t deployment." });
+  force = Option60.Boolean("--force", false, { description: "Enroll even when a key is already stored. Use only when m8t support asks you to." });
   async executeCommand() {
     const account = await getAzAccount();
     const subscriptionId = (typeof this.subscription === "string" ? this.subscription : void 0) ?? account.subscriptionId;
@@ -34236,7 +34645,7 @@ var TelemetryEnrollCommand = class extends M8tCommand {
 };
 
 // src/commands/companion/bridge.ts
-import { Command as Command63, Option as Option60 } from "clipanion";
+import { Command as Command64, Option as Option61 } from "clipanion";
 
 // ../../packages/companion-bridge-contract/src/index.ts
 var COMPANION_MESSAGE_MAX_CODE_POINTS = 32768;
@@ -34248,6 +34657,14 @@ var COMPANION_HISTORY_LIMIT_MAX = 40;
 var COMPANION_TURN_TEXT_MAX_CODE_POINTS = 32768;
 var COMPANION_REPLY_DELTA_MAX_CODE_POINTS = 4096;
 var COMPANION_TURN_ID_MAX_LENGTH = 256;
+var COMPANION_DECISION_CALL_ID_MAX_LENGTH = 256;
+var COMPANION_DECISION_TITLE_MAX_LENGTH = 200;
+var COMPANION_DECISION_LABEL_MAX_LENGTH = 100;
+var COMPANION_DECISION_DETAIL_MAX_CODE_POINTS = 400;
+var COMPANION_DECISION_OPTIONS_MIN = 2;
+var COMPANION_DECISION_OPTIONS_MAX = 4;
+var COMPANION_ARTIFACT_NAME_MAX_LENGTH = 200;
+var COMPANION_ARTIFACTS_MAX = 16;
 var PERSONAS = /* @__PURE__ */ new Set([
   "startup-advisor",
   "ezra"
@@ -34257,7 +34674,8 @@ var FAILURE_REASONS = /* @__PURE__ */ new Set([
   "not-authorized",
   "mate-unavailable",
   "busy",
-  "bad-request"
+  "bad-request",
+  "decision-not-pending"
 ]);
 var CONTROL_CHARACTERS = /[\u0000-\u001f\u007f]/u;
 var URL_SAFE_OPAQUE_ID = /^[A-Za-z0-9_-]+$/u;
@@ -34266,7 +34684,7 @@ var VERSION3 = /^[A-Za-z0-9][A-Za-z0-9._+-]{0,63}$/u;
 function isVersionOrNull(value) {
   return value === null || typeof value === "string" && VERSION3.test(value);
 }
-function isRecord2(value) {
+function isRecord3(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function hasExactKeys(value, keys) {
@@ -34290,8 +34708,72 @@ var INSTANT_SHAPE = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(?:\.\d{1,3})?Z$/;
 function isInstantOrNull(value) {
   return value === null || typeof value === "string" && INSTANT_SHAPE.test(value) && Number.isFinite(Date.parse(value));
 }
-function isCompanionTurn(value) {
-  return isRecord2(value) && hasExactKeys(value, ["id", "role", "text", "at"]) && isBoundedPlainString(value.id, COMPANION_TURN_ID_MAX_LENGTH) && (value.role === "user" || value.role === "mate") && isBoundedMessageText(value.text, COMPANION_TURN_TEXT_MAX_CODE_POINTS) && isInstantOrNull(value.at);
+function parseDecision(value) {
+  if (!isRecord3(value) || !isBoundedPlainString(value.callId, COMPANION_DECISION_CALL_ID_MAX_LENGTH) || !isBoundedPlainString(value.title, COMPANION_DECISION_TITLE_MAX_LENGTH) || !Array.isArray(value.options) || value.options.length < COMPANION_DECISION_OPTIONS_MIN || value.options.length > COMPANION_DECISION_OPTIONS_MAX) {
+    return eventError();
+  }
+  const options = value.options.map((option) => {
+    if (!isRecord3(option) || !hasExactKeys(option, ["label", "detail"]) || !isBoundedPlainString(option.label, COMPANION_DECISION_LABEL_MAX_LENGTH) || !isBoundedMessageText(option.detail, COMPANION_DECISION_DETAIL_MAX_CODE_POINTS)) {
+      return eventError();
+    }
+    return { label: option.label, detail: option.detail };
+  });
+  const base = { callId: value.callId, title: value.title, options };
+  if (value.status === "pending" || value.status === "dismissed") {
+    if (!hasExactKeys(value, ["callId", "title", "options", "status"])) {
+      return eventError();
+    }
+    return { ...base, status: value.status };
+  }
+  if (value.status !== "selected" || !hasExactKeys(value, ["callId", "title", "options", "status", "optionIndex"]) || !Number.isSafeInteger(value.optionIndex) || value.optionIndex < 0 || value.optionIndex >= options.length) {
+    return eventError();
+  }
+  return { ...base, status: "selected", optionIndex: value.optionIndex };
+}
+function parseArtifact(value) {
+  if (!isRecord3(value) || !isBoundedPlainString(value.name, COMPANION_ARTIFACT_NAME_MAX_LENGTH)) {
+    return eventError();
+  }
+  if (value.sizeBytes === void 0) {
+    if (!hasExactKeys(value, ["name"])) return eventError();
+    return { name: value.name };
+  }
+  if (!hasExactKeys(value, ["name", "sizeBytes"]) || !Number.isSafeInteger(value.sizeBytes) || value.sizeBytes < 0) {
+    return eventError();
+  }
+  return { name: value.name, sizeBytes: value.sizeBytes };
+}
+function parseTurnArtifacts(value) {
+  if (!Array.isArray(value) || value.length === 0 || value.length > COMPANION_ARTIFACTS_MAX) {
+    return eventError();
+  }
+  return value.map(parseArtifact);
+}
+function parseTurn(value) {
+  if (!isRecord3(value) || !isBoundedPlainString(value.id, COMPANION_TURN_ID_MAX_LENGTH) || value.role !== "user" && value.role !== "mate" || !isInstantOrNull(value.at)) {
+    return eventError();
+  }
+  const keys = [
+    "id",
+    "role",
+    "text",
+    "at",
+    ...value.decision === void 0 ? [] : ["decision"],
+    ...value.artifacts === void 0 ? [] : ["artifacts"]
+  ];
+  if (!hasExactKeys(value, keys)) return eventError();
+  const allowEmptyText = value.decision !== void 0 || value.artifacts !== void 0;
+  if (!(allowEmptyText && value.text === "" || isBoundedMessageText(value.text, COMPANION_TURN_TEXT_MAX_CODE_POINTS))) {
+    return eventError();
+  }
+  return {
+    id: value.id,
+    role: value.role,
+    text: value.text,
+    at: value.at,
+    ...value.decision === void 0 ? {} : { decision: parseDecision(value.decision) },
+    ...value.artifacts === void 0 ? {} : { artifacts: parseTurnArtifacts(value.artifacts) }
+  };
 }
 function isCanonicalInstant(value) {
   if (typeof value !== "string") return false;
@@ -34347,7 +34829,7 @@ function isValidMateRoute(value) {
   }
 }
 function parseRequest(value) {
-  if (!isRecord2(value)) return requestError();
+  if (!isRecord3(value)) return requestError();
   if (value.type === "roster") {
     if (!hasExactKeys(value, ["type"])) return requestError();
     return { type: "roster" };
@@ -34356,18 +34838,36 @@ function parseRequest(value) {
     if (!hasExactKeys(value, ["type"])) return requestError();
     return { type: "update" };
   }
-  if (value.type === "history") {
+  if (value.type === "history" || value.type === "recall") {
     if (!hasExactKeys(value, ["type", "requestId", "personaKey", "limit"]) || !isRequestId(value.requestId) || !isPersonaKey(value.personaKey) || !Number.isSafeInteger(value.limit) || value.limit < 1 || value.limit > COMPANION_HISTORY_LIMIT_MAX) {
       return requestError();
     }
     return {
-      type: "history",
+      type: value.type,
       requestId: value.requestId,
       personaKey: value.personaKey,
       limit: value.limit
     };
   }
-  if (value.type !== "send" && value.type !== "converse" || !hasExactKeys(value, [
+  if (value.type === "decide") {
+    if (!hasExactKeys(value, [
+      "type",
+      "requestId",
+      "personaKey",
+      "callId",
+      "optionIndex"
+    ]) || !isRequestId(value.requestId) || !isPersonaKey(value.personaKey) || !isBoundedPlainString(value.callId, COMPANION_DECISION_CALL_ID_MAX_LENGTH) || !Number.isSafeInteger(value.optionIndex) || value.optionIndex < 0 || value.optionIndex >= COMPANION_DECISION_OPTIONS_MAX) {
+      return requestError();
+    }
+    return {
+      type: "decide",
+      requestId: value.requestId,
+      personaKey: value.personaKey,
+      callId: value.callId,
+      optionIndex: value.optionIndex
+    };
+  }
+  if (value.type !== "send" && value.type !== "converse" && value.type !== "chat" || !hasExactKeys(value, [
     "type",
     "requestId",
     "personaKey",
@@ -34395,7 +34895,7 @@ function parseRequestLine(line2) {
   }
 }
 function parseMate(value) {
-  if (!isRecord2(value) || !hasExactKeys(value, [
+  if (!isRecord3(value) || !hasExactKeys(value, [
     "personaKey",
     "agentName",
     "displayName",
@@ -34420,7 +34920,7 @@ function parseMate(value) {
   };
 }
 function parseEvent(value) {
-  if (!isRecord2(value)) return eventError();
+  if (!isRecord3(value)) return eventError();
   if (value.type === "update") {
     if (!hasExactKeys(value, ["type", "installed", "available", "severity"]) || !isVersionOrNull(value.installed) || !isVersionOrNull(value.available) || !(value.severity === null || SEVERITIES2.has(value.severity))) {
       return eventError();
@@ -34463,18 +34963,33 @@ function parseEvent(value) {
     return { type: "completed", requestId: value.requestId };
   }
   if (value.type === "turn") {
-    if (!hasExactKeys(value, ["type", "requestId", "turn"]) || !isRequestId(value.requestId) || !isCompanionTurn(value.turn)) {
+    if (!hasExactKeys(value, ["type", "requestId", "turn"]) || !isRequestId(value.requestId)) {
       return eventError();
     }
     return {
       type: "turn",
       requestId: value.requestId,
-      turn: {
-        id: value.turn.id,
-        role: value.turn.role,
-        text: value.turn.text,
-        at: value.turn.at
-      }
+      turn: parseTurn(value.turn)
+    };
+  }
+  if (value.type === "reply-decision") {
+    if (!hasExactKeys(value, ["type", "requestId", "decision"]) || !isRequestId(value.requestId)) {
+      return eventError();
+    }
+    return {
+      type: "reply-decision",
+      requestId: value.requestId,
+      decision: parseDecision(value.decision)
+    };
+  }
+  if (value.type === "reply-artifacts") {
+    if (!hasExactKeys(value, ["type", "requestId", "artifacts"]) || !isRequestId(value.requestId) || !Array.isArray(value.artifacts) || value.artifacts.length === 0 || value.artifacts.length > COMPANION_ARTIFACTS_MAX) {
+      return eventError();
+    }
+    return {
+      type: "reply-artifacts",
+      requestId: value.requestId,
+      artifacts: value.artifacts.map(parseArtifact)
     };
   }
   if (value.type === "history-end") {
@@ -34531,6 +35046,7 @@ function serializeEvent(value) {
 }
 
 // src/lib/companion-chat-client.ts
+init_esm();
 import { stat as stat4 } from "fs/promises";
 var RESPONSE_MAX_BYTES = 1e6;
 var REQUEST_DEADLINE_MS = 12e4;
@@ -34543,7 +35059,7 @@ var PredispatchFailure = class extends Error {
   }
   reason;
 };
-function isRecord3(value) {
+function isRecord4(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function hasControlCharacter(value) {
@@ -34613,16 +35129,16 @@ async function readJsonEnvelope(response) {
     if (error instanceof PredispatchFailure) throw error;
     throw new PredispatchFailure("not-connected");
   }
-  if (!isRecord3(envelope) || envelope.ok !== true || !("data" in envelope)) {
+  if (!isRecord4(envelope) || envelope.ok !== true || !("data" in envelope)) {
     throw new PredispatchFailure("not-connected");
   }
   return envelope.data;
 }
 function decodeAgents(data) {
-  if (!isRecord3(data) || !Array.isArray(data.agents)) {
+  if (!isRecord4(data) || !Array.isArray(data.agents)) {
     throw new PredispatchFailure("mate-unavailable");
   }
-  return data.agents.filter(isRecord3);
+  return data.agents.filter(isRecord4);
 }
 function resolveAgentName(agents, personaKey) {
   const matches = agents.filter(
@@ -34644,18 +35160,18 @@ function requireAgentName(agents, personaKey) {
   return name;
 }
 function decodeConversationId(data) {
-  if (!isRecord3(data) || typeof data.id !== "string" || !OPAQUE_ID.test(data.id)) {
+  if (!isRecord4(data) || typeof data.id !== "string" || !OPAQUE_ID.test(data.id)) {
     throw new PredispatchFailure("not-connected");
   }
   return data.id;
 }
 function decodeLastMessageId(data) {
-  if (!isRecord3(data) || !Array.isArray(data.messages)) {
+  if (!isRecord4(data) || !Array.isArray(data.messages)) {
     throw new PredispatchFailure("not-connected");
   }
   const messages = data.messages;
   const last = messages.at(-1);
-  if (!isRecord3(last) || typeof last.id !== "string" || !OPAQUE_ID.test(last.id)) {
+  if (!isRecord4(last) || typeof last.id !== "string" || !OPAQUE_ID.test(last.id)) {
     return void 0;
   }
   return last.id;
@@ -34706,13 +35222,61 @@ function boundCodePoints(value, maxCodePoints) {
   }
   return value;
 }
+function boundPlainLine(value, maxLength) {
+  return value.replace(/[\u0000-\u001f\u007f]/gu, " ").trim().slice(0, maxLength);
+}
+var ARTIFACTS_PART_TYPE = "data-artifacts";
+function toCompanionDecision(directive) {
+  const state = directive.state;
+  if (state.status !== "pending" && state.status !== "selected" && state.status !== "dismissed") {
+    return null;
+  }
+  const callId = boundPlainLine(
+    directive.callId,
+    COMPANION_DECISION_CALL_ID_MAX_LENGTH
+  );
+  const title = boundPlainLine(
+    directive.args.title,
+    COMPANION_DECISION_TITLE_MAX_LENGTH
+  );
+  if (callId.length === 0 || title.length === 0) return null;
+  const options = [];
+  for (const option of directive.args.options) {
+    const label = boundPlainLine(option.label, COMPANION_DECISION_LABEL_MAX_LENGTH);
+    const detail = boundCodePoints(
+      sanitizeMessageText(option.detail).trim(),
+      COMPANION_DECISION_DETAIL_MAX_CODE_POINTS
+    );
+    if (label.length === 0 || detail.length === 0) return null;
+    options.push({ label, detail });
+  }
+  const base = { callId, title, options };
+  return state.status === "selected" ? { ...base, status: "selected", optionIndex: state.optionIndex } : { ...base, status: state.status };
+}
+function toCompanionArtifacts(data) {
+  const artifacts = [];
+  for (const entry of data) {
+    if (artifacts.length >= COMPANION_ARTIFACTS_MAX) break;
+    if (!isRecord4(entry) || typeof entry.name !== "string") continue;
+    const name = boundPlainLine(entry.name, COMPANION_ARTIFACT_NAME_MAX_LENGTH);
+    if (name.length === 0) continue;
+    const size = entry.size_bytes;
+    artifacts.push(
+      typeof size === "number" && Number.isSafeInteger(size) && size >= 0 ? { name, sizeBytes: size } : { name }
+    );
+  }
+  return artifacts;
+}
+function decodeMessageInstant(value) {
+  return typeof value === "number" && Number.isFinite(value) && value > 0 && value < EPOCH_SECONDS_LIMIT ? new Date(Math.round(value) * 1e3).toISOString() : null;
+}
 function decodeTurns(data, limit2) {
-  if (!isRecord3(data) || !Array.isArray(data.messages)) {
+  if (!isRecord4(data) || !Array.isArray(data.messages)) {
     throw new PredispatchFailure("not-connected");
   }
   const turns = [];
   for (const entry of data.messages) {
-    if (!isRecord3(entry)) continue;
+    if (!isRecord4(entry)) continue;
     if (entry.role !== "user" && entry.role !== "assistant") continue;
     if (typeof entry.id !== "string" || !OPAQUE_ID.test(entry.id)) continue;
     if (typeof entry.content !== "string") continue;
@@ -34721,12 +35285,52 @@ function decodeTurns(data, limit2) {
       COMPANION_TURN_TEXT_MAX_CODE_POINTS
     );
     if (text.length === 0) continue;
-    const at = typeof entry.createdAt === "number" && Number.isFinite(entry.createdAt) && entry.createdAt > 0 && entry.createdAt < EPOCH_SECONDS_LIMIT ? new Date(Math.round(entry.createdAt) * 1e3).toISOString() : null;
     turns.push({
       id: entry.id,
       role: entry.role === "user" ? "user" : "mate",
       text,
-      at
+      at: decodeMessageInstant(entry.createdAt)
+    });
+  }
+  return turns.slice(-limit2);
+}
+function decodeDurableDecision(entry) {
+  const frame = parseUiDirectiveFrame({
+    directive: entry.uiDirective,
+    source: entry.uiDirectiveSource === "voice" ? "voice" : "text"
+  });
+  if (!frame) return null;
+  return toCompanionDecision(frame.directive);
+}
+function decodeRichTurns(data, limit2) {
+  if (!isRecord4(data) || !Array.isArray(data.messages)) {
+    throw new PredispatchFailure("not-connected");
+  }
+  const turns = [];
+  for (const entry of data.messages) {
+    if (!isRecord4(entry)) continue;
+    if (entry.role !== "user" && entry.role !== "assistant") continue;
+    if (typeof entry.id !== "string" || !OPAQUE_ID.test(entry.id)) continue;
+    if (typeof entry.content !== "string") continue;
+    const parsed = parseArtifacts(entry.content);
+    const artifacts = toCompanionArtifacts(parsed.artifacts);
+    const text = boundCodePoints(
+      sanitizeMessageText(parsed.text),
+      COMPANION_TURN_TEXT_MAX_CODE_POINTS
+    );
+    const at = decodeMessageInstant(entry.createdAt);
+    const decision = entry.uiDirective === void 0 ? null : decodeDurableDecision(entry);
+    if (decision !== null) {
+      turns.push({ id: entry.id, role: "mate", text, at, decision });
+      continue;
+    }
+    if (text.length === 0 && artifacts.length === 0) continue;
+    turns.push({
+      id: entry.id,
+      role: entry.role === "user" ? "user" : "mate",
+      text,
+      at,
+      ...artifacts.length > 0 ? { artifacts } : {}
     });
   }
   return turns.slice(-limit2);
@@ -34840,7 +35444,7 @@ async function drainAcceptedSse(response) {
       continue;
     }
     const parsed = JSON.parse(data);
-    if (!isRecord3(parsed) || typeof parsed.type !== "string" || parsed.type === "error") {
+    if (!isRecord4(parsed) || typeof parsed.type !== "string" || parsed.type === "error") {
       throw new Error("invalid stream event");
     }
   }
@@ -34862,7 +35466,7 @@ function emitBoundedText(text, emit) {
   }
   if (slice.length > 0) emit(slice);
 }
-async function streamAcceptedSse(response, now, onText) {
+async function streamAcceptedSse(response, now, onText, onData) {
   if (!response.body) throw new Error("response body unavailable");
   const reader = response.body.getReader();
   const decoder = new TextDecoder("utf-8", { fatal: true });
@@ -34888,7 +35492,7 @@ async function streamAcceptedSse(response, now, onText) {
       return;
     }
     const parsed = JSON.parse(data);
-    if (!isRecord3(parsed) || typeof parsed.type !== "string" || parsed.type === "error") {
+    if (!isRecord4(parsed) || typeof parsed.type !== "string" || parsed.type === "error") {
       throw new Error("invalid stream event");
     }
     if (parsed.type === "text-delta" && typeof parsed.delta === "string" && parsed.delta.length > 0) {
@@ -34897,6 +35501,10 @@ async function streamAcceptedSse(response, now, onText) {
         flush();
       }
     }
+    if (onData && parsed.type.startsWith("data-")) {
+      flush();
+      onData(parsed);
+    }
   };
   const drainFrames = () => {
     for (; ; ) {
@@ -34932,7 +35540,7 @@ async function streamAcceptedSse(response, now, onText) {
     throw new Error("stream ended without terminal marker");
   }
 }
-async function dispatchConversation(request, sink, deps, consume, readDesktopMarker) {
+async function dispatchConversation(request, sink, deps, consume, readDesktopMarker, chatBody, classifyRefusal) {
   const { controller, timer } = createDeadline(deps);
   const fetchImpl = deps.fetch ?? fetch;
   let route;
@@ -34978,17 +35586,19 @@ async function dispatchConversation(request, sink, deps, consume, readDesktopMar
       chatResponse = await fetchImpl(`${origin}/api/chat`, {
         method: "POST",
         headers: { ...headers, "content-type": "application/json" },
-        body: JSON.stringify({
-          messages: [{ role: "user", content: request.text }],
-          agentName,
-          conversationId
-        }),
+        body: JSON.stringify(chatBody(agentName, conversationId)),
         signal: controller.signal
       });
     } catch {
       throw new Error("chat dispatch outcome unavailable");
     }
     if (!chatResponse.ok || !chatResponse.body || !(chatResponse.headers.get("content-type") ?? "").toLowerCase().includes("text/event-stream")) {
+      if (!chatResponse.ok && classifyRefusal) {
+        const reason = await classifyRefusal(chatResponse);
+        if (reason !== null) {
+          return emitFailure(sink, reason, request.requestId);
+        }
+      }
       throw new Error("chat response not accepted");
     }
     const acceptedEvent = parseEvent({
@@ -35026,8 +35636,40 @@ async function dispatchConversation(request, sink, deps, consume, readDesktopMar
     clearTimeout(timer);
   }
 }
+function textTurnBody(text) {
+  return (agentName, conversationId) => ({
+    messages: [{ role: "user", content: text }],
+    agentName,
+    conversationId
+  });
+}
+function replyDataForwarder(requestId, sink) {
+  return (part) => {
+    if (part.type === UI_DIRECTIVE_PART_TYPE) {
+      const frame = parseUiDirectiveFrame(part.data);
+      if (!frame) return;
+      const decision = toCompanionDecision(frame.directive);
+      if (decision === null) return;
+      sink(parseEvent({ type: "reply-decision", requestId, decision }));
+      return;
+    }
+    if (part.type === ARTIFACTS_PART_TYPE && Array.isArray(part.data)) {
+      const artifacts = toCompanionArtifacts(part.data);
+      if (artifacts.length > 0) {
+        sink(parseEvent({ type: "reply-artifacts", requestId, artifacts }));
+      }
+    }
+  };
+}
 async function sendCompanionMessage(request, sink, deps = {}) {
-  return dispatchConversation(request, sink, deps, drainAcceptedSse, true);
+  return dispatchConversation(
+    request,
+    sink,
+    deps,
+    drainAcceptedSse,
+    true,
+    textTurnBody(request.text)
+  );
 }
 async function converseCompanionMessage(request, sink, deps = {}) {
   return dispatchConversation(
@@ -35043,10 +35685,101 @@ async function converseCompanionMessage(request, sink, deps = {}) {
         })
       );
     }),
-    false
+    false,
+    textTurnBody(request.text)
+  );
+}
+async function chatCompanionMessage(request, sink, deps = {}) {
+  return dispatchConversation(
+    request,
+    sink,
+    deps,
+    (response) => streamAcceptedSse(
+      response,
+      deps.now ?? Date.now,
+      (text) => {
+        sink(
+          parseEvent({
+            type: "reply-delta",
+            requestId: request.requestId,
+            text
+          })
+        );
+      },
+      replyDataForwarder(request.requestId, sink)
+    ),
+    false,
+    textTurnBody(request.text)
+  );
+}
+async function classifyDecideRefusal(response) {
+  let reason;
+  try {
+    const envelope = JSON.parse(await readBoundedText(response));
+    if (isRecord4(envelope) && isRecord4(envelope.error) && isRecord4(envelope.error.details)) {
+      reason = envelope.error.details.reason;
+    }
+  } catch {
+  }
+  if (isDecisionRefusalReason(reason)) {
+    return reason === DECISION_REFUSAL_REASONS.notPending ? "decision-not-pending" : "bad-request";
+  }
+  if (response.status === 401 || response.status === 403) {
+    return "not-authorized";
+  }
+  if (response.status === 400) return "bad-request";
+  if (response.status === 409) return "busy";
+  return null;
+}
+async function decideCompanionMessage(request, sink, deps = {}) {
+  const message = {
+    role: "user",
+    parts: [
+      {
+        type: UI_DIRECTIVE_RESULT_PART_TYPE,
+        data: {
+          version: 1,
+          name: "present_decision",
+          callId: request.callId,
+          result: { status: "selected", optionIndex: request.optionIndex }
+        }
+      }
+    ]
+  };
+  return dispatchConversation(
+    request,
+    sink,
+    deps,
+    (response) => streamAcceptedSse(
+      response,
+      deps.now ?? Date.now,
+      (text) => {
+        sink(
+          parseEvent({
+            type: "reply-delta",
+            requestId: request.requestId,
+            text
+          })
+        );
+      },
+      replyDataForwarder(request.requestId, sink)
+    ),
+    false,
+    (agentName, conversationId) => ({
+      messages: [message],
+      agentName,
+      conversationId
+    }),
+    classifyDecideRefusal
   );
 }
 async function historyCompanionMessages(request, sink, deps = {}) {
+  return fetchConversationTurns(request, sink, deps, decodeTurns);
+}
+async function recallCompanionMessages(request, sink, deps = {}) {
+  return fetchConversationTurns(request, sink, deps, decodeRichTurns);
+}
+async function fetchConversationTurns(request, sink, deps, decode) {
   const { controller, timer } = createDeadline(deps);
   const fetchImpl = deps.fetch ?? fetch;
   try {
@@ -35066,7 +35799,7 @@ async function historyCompanionMessages(request, sink, deps = {}) {
       agentName,
       controller.signal
     );
-    const turns = decodeTurns(
+    const turns = decode(
       await fetchConversationMessages(
         fetchImpl,
         origin,
@@ -35222,7 +35955,10 @@ async function dispatchRequest(request, sink, handlers) {
     return terminal;
   }
   if (request.type === "history") return handlers.history(request, sink);
+  if (request.type === "recall") return handlers.recall(request, sink);
   if (request.type === "converse") return handlers.converse(request, sink);
+  if (request.type === "chat") return handlers.chat(request, sink);
+  if (request.type === "decide") return handlers.decide(request, sink);
   return handlers.send(request, sink);
 }
 async function handleWithContext(request, sink, handlers, context) {
@@ -35258,7 +35994,10 @@ async function runCompanionBridgeServe(stdin, stdout, stderr, deps = {}) {
     roster: (sink2) => rosterCompanions(sink2, chat),
     send: (request, sink2) => sendCompanionMessage(request, sink2, chat),
     converse: (request, sink2) => converseCompanionMessage(request, sink2, chat),
+    chat: (request, sink2) => chatCompanionMessage(request, sink2, chat),
+    decide: (request, sink2) => decideCompanionMessage(request, sink2, chat),
     history: (request, sink2) => historyCompanionMessages(request, sink2, chat),
+    recall: (request, sink2) => recallCompanionMessages(request, sink2, chat),
     update: deps.update ?? (() => checkCompanionUpdate(defaultLocalCompanionInstallOptions()))
   };
   const sink = (event) => {
@@ -35289,11 +36028,14 @@ async function runCompanionBridgeServe(stdin, stdout, stderr, deps = {}) {
 }
 
 // src/commands/companion/bridge.ts
-var defaultDeps3 = {
+var defaultDeps4 = {
   roster: rosterCompanions,
   send: sendCompanionMessage,
   converse: converseCompanionMessage,
+  chat: chatCompanionMessage,
+  decide: decideCompanionMessage,
   history: historyCompanionMessages,
+  recall: recallCompanionMessages,
   update: () => checkCompanionUpdate(defaultLocalCompanionInstallOptions())
 };
 async function readSingleRequest(stdin) {
@@ -35324,7 +36066,7 @@ function exitFor(terminal) {
   }
   return 2;
 }
-async function runCompanionBridge(stdin, stdout, stderr, deps = defaultDeps3) {
+async function runCompanionBridge(stdin, stdout, stderr, deps = defaultDeps4) {
   let request;
   try {
     request = parseRequestLine(await readSingleRequest(stdin));
@@ -35344,8 +36086,14 @@ async function runCompanionBridge(stdin, stdout, stderr, deps = defaultDeps3) {
       sink(terminal);
     } else if (request.type === "history") {
       terminal = await deps.history(request, sink);
+    } else if (request.type === "recall") {
+      terminal = await deps.recall(request, sink);
     } else if (request.type === "converse") {
       terminal = await deps.converse(request, sink);
+    } else if (request.type === "chat") {
+      terminal = await deps.chat(request, sink);
+    } else if (request.type === "decide") {
+      terminal = await deps.decide(request, sink);
     } else terminal = await deps.send(request, sink);
     return exitFor(terminal);
   } catch {
@@ -35353,14 +36101,14 @@ async function runCompanionBridge(stdin, stdout, stderr, deps = defaultDeps3) {
     return 3;
   }
 }
-var CompanionBridgeCommand = class extends Command63 {
+var CompanionBridgeCommand = class extends Command64 {
   static paths = [["companion", "_bridge"]];
   /**
    * One process serving many requests instead of one per request, so the
    * session keeps its authenticated context between them. A CLI predating the
    * flag rejects it outright, which is how the app knows to fall back.
    */
-  serve = Option60.Boolean("--serve", false);
+  serve = Option61.Boolean("--serve", false);
   async execute() {
     if (this.serve) {
       return runCompanionBridgeServe(
@@ -35378,7 +36126,7 @@ var CompanionBridgeCommand = class extends Command63 {
 };
 
 // src/commands/companion/status.ts
-import { Command as Command64 } from "clipanion";
+import { Command as Command65 } from "clipanion";
 async function withTimeout(work, ms) {
   let timer;
   try {
@@ -35450,7 +36198,7 @@ Run: m8t companion install
 }
 var CompanionStatusCommand = class extends M8tCommand {
   static paths = [["companion", "status"]];
-  static usage = Command64.Usage({
+  static usage = Command65.Usage({
     description: "Verify the installed desktop companion without launching it."
   });
   async executeCommand() {
@@ -35464,7 +36212,7 @@ var CompanionStatusCommand = class extends M8tCommand {
 };
 
 // src/commands/companion/repair.ts
-import { Command as Command65, Option as Option61 } from "clipanion";
+import { Command as Command66, Option as Option62 } from "clipanion";
 async function runCompanionRepairCommand(stdout, repair) {
   const state = await repair();
   if (state.state === "not-released") {
@@ -35483,10 +36231,10 @@ async function runCompanionRepairCommand(stdout, repair) {
 }
 var CompanionRepairCommand = class extends M8tCommand {
   static paths = [["companion", "repair"]];
-  static usage = Command65.Usage({
+  static usage = Command66.Usage({
     description: "Restore the desktop companions and start-at-login state."
   });
-  resourceGroup = Option61.String("--resource-group", {
+  resourceGroup = Option62.String("--resource-group", {
     description: "Which deployment to bind to, when the subscription holds more than one."
   });
   async executeCommand() {
@@ -35500,7 +36248,7 @@ var CompanionRepairCommand = class extends M8tCommand {
 };
 
 // src/commands/companion/uninstall.ts
-import { Command as Command66 } from "clipanion";
+import { Command as Command67 } from "clipanion";
 async function runCompanionUninstallCommand(stdout, uninstall) {
   const state = await uninstall();
   if (state.state !== "not-installed") {
@@ -35512,7 +36260,7 @@ async function runCompanionUninstallCommand(stdout, uninstall) {
 }
 var CompanionUninstallCommand = class extends M8tCommand {
   static paths = [["companion", "uninstall"]];
-  static usage = Command66.Usage({
+  static usage = Command67.Usage({
     description: "Remove only this user's desktop companion installation."
   });
   async executeCommand() {
@@ -35582,6 +36330,7 @@ cli.register(A2aDisableCommand);
 cli.register(EvalSkillCommand);
 cli.register(EvalExamCommand);
 cli.register(DreamRunCommand);
+cli.register(ConversationsSweepCommand);
 cli.register(FoundryCreateCommand);
 cli.register(FoundryAwaitReadyCommand);
 cli.register(BootstrapPreflightCommand);