@rosthq/cli 0.7.121 → 0.7.123

package/dist/index.js

@@ -31772,15 +31772,16 @@ var charterBudgetSchema = external_exports.object({
   approval_required_over_usd: external_exports.number().nonnegative().nullable(),
   notes: external_exports.string().min(1)
 }).strict();
+var charterDecisionAuthoritySchema = external_exports.object({
+  autonomous: external_exports.array(charterAuthorityItemSchema),
+  approval: external_exports.array(charterAuthorityItemSchema),
+  escalate: external_exports.array(charterAuthorityItemSchema).min(1)
+}).strict();
 var charterDocObjectSchema = external_exports.object({
   payload_version: external_exports.literal(1),
   purpose: external_exports.string().min(1),
   accountabilities: external_exports.array(charterAccountabilitySchema).min(1),
-  decision_authority: external_exports.object({
-    autonomous: external_exports.array(charterAuthorityItemSchema),
-    approval: external_exports.array(charterAuthorityItemSchema),
-    escalate: external_exports.array(charterAuthorityItemSchema).min(1)
-  }).strict(),
+  decision_authority: charterDecisionAuthoritySchema,
   escalation_rules: external_exports.array(external_exports.string().min(1)).min(1),
   measurables: external_exports.array(charterMeasurableSchema).min(1),
   permission_manifest: external_exports.array(charterPermissionSchema),
@@ -36587,9 +36588,163 @@ var onboardingRehearseOutputSchema = external_exports.union([
   terminalOutputSchema
 ]);
 
+// ../../packages/protocol/src/onboarding-activation.ts
+var uuidSchema18 = external_exports.string().uuid();
+var digestSchema4 = external_exports.string().regex(/^sha256:[0-9a-f]{64}$/);
+var boundedText3 = (max) => external_exports.string().trim().min(1).max(max);
+var rehearsalRunEntrySchema = external_exports.object({
+  agent_id: uuidSchema18,
+  rehearsal_run_id: uuidSchema18
+}).strict();
+var configurationDigestEntrySchema = external_exports.object({
+  agent_id: uuidSchema18,
+  configuration_digest: digestSchema4
+}).strict();
+function uniqueAgentEntries(values, ctx) {
+  const seen = /* @__PURE__ */ new Set();
+  values.forEach((value, index) => {
+    if (seen.has(value.agent_id)) {
+      ctx.addIssue({
+        code: external_exports.ZodIssueCode.custom,
+        path: [index, "agent_id"],
+        message: "Activation evidence must not repeat an agent_id."
+      });
+    }
+    seen.add(value.agent_id);
+  });
+}
+var onboardingActivationRehearsalRunsSchema = external_exports.array(rehearsalRunEntrySchema).min(1).max(100).superRefine(uniqueAgentEntries);
+var onboardingActivationConfigurationDigestsSchema = external_exports.array(configurationDigestEntrySchema).min(1).max(100).superRefine(uniqueAgentEntries);
+var onboardingActivateInputSchema = external_exports.object({
+  idempotency_key: boundedText3(120),
+  setup_application_id: uuidSchema18,
+  expected_input_digest: digestSchema4,
+  expected_receipt_revision: external_exports.number().int().positive(),
+  terminal_rehearsal_batch_receipt_id: uuidSchema18,
+  rehearsal_runs: onboardingActivationRehearsalRunsSchema,
+  configuration_digests: onboardingActivationConfigurationDigestsSchema
+}).strict();
+var effectivePermissionManifestRuleSchema = external_exports.object({
+  name: boundedText3(200),
+  mode: external_exports.enum(["allow", "deny", "escalate"]),
+  clause: boundedText3(500),
+  scopeTier: external_exports.enum(["read", "draft", "write_with_approval", "full"]).optional(),
+  args: external_exports.object({
+    equals: external_exports.record(external_exports.string(), external_exports.unknown()).optional()
+  }).strict().optional(),
+  credentialGrant: external_exports.object({
+    capabilityId: boundedText3(200),
+    integrationId: uuidSchema18.nullable(),
+    requestedAccessLevel: capabilityGrantAccessLevelSchema,
+    actingSeatId: uuidSchema18.optional(),
+    effectiveCharterVersionId: uuidSchema18.optional()
+  }).strict().optional()
+}).strict();
+var onboardingActivationAgentProposalSchema = external_exports.object({
+  agent_id: uuidSchema18,
+  seat_id: uuidSchema18,
+  charter_version_id: uuidSchema18,
+  manifest: external_exports.object({
+    digest: digestSchema4,
+    evidence_receipt_id: uuidSchema18,
+    evidence_revision: external_exports.number().int().positive()
+  }).strict(),
+  configuration_digest: digestSchema4,
+  rehearsal_run_id: uuidSchema18,
+  effective_lane: external_exports.enum(["cloud", "mcp_session", "runner"]),
+  effective_model: external_exports.string().trim().min(1).max(200).nullable(),
+  decision_authority: charterDecisionAuthoritySchema,
+  effective_permission_manifest: external_exports.array(effectivePermissionManifestRuleSchema).max(200),
+  schedule: external_exports.object({
+    cron: external_exports.string().trim().min(1).max(200).nullable(),
+    timezone: external_exports.string().trim().min(1).max(100).nullable()
+  }).strict(),
+  budget: external_exports.object({
+    current_spend_usd: external_exports.string().trim().min(1).max(100),
+    hard_cap_usd: external_exports.string().trim().min(1).max(100).nullable()
+  }).strict(),
+  sources: external_exports.object({
+    checked: external_exports.number().int().nonnegative(),
+    required: external_exports.number().int().positive()
+  }).strict(),
+  warnings: external_exports.array(external_exports.string().trim().min(1).max(500)).max(100)
+}).strict();
+var onboardingActivationApprovalProjectionSchema = external_exports.object({
+  kind: external_exports.literal("onboarding_activation"),
+  setup_application_id: uuidSchema18,
+  implementation_run_id: uuidSchema18.nullable(),
+  expected_input_digest: digestSchema4,
+  expected_receipt_revision: external_exports.number().int().positive(),
+  terminal_rehearsal_batch_receipt_id: uuidSchema18,
+  activation_input_digest: digestSchema4,
+  agents: external_exports.array(onboardingActivationAgentProposalSchema).min(1).max(100),
+  checked_count: external_exports.number().int().positive(),
+  total_count: external_exports.number().int().positive(),
+  onboarding_completion_effect: external_exports.literal(true)
+}).strict();
+var onboardingActivationCommittedAgentSchema = external_exports.object({
+  agent_id: uuidSchema18,
+  seat_id: uuidSchema18,
+  status: external_exports.literal("live"),
+  schedule_armed: external_exports.boolean()
+}).strict();
+var onboardingActivationCommittedAgentsSchema = external_exports.array(
+  onboardingActivationCommittedAgentSchema
+).min(1).max(100).superRefine((agents, ctx) => {
+  const agentIds = /* @__PURE__ */ new Set();
+  const seatIds = /* @__PURE__ */ new Set();
+  agents.forEach((agent, index) => {
+    if (agentIds.has(agent.agent_id)) {
+      ctx.addIssue({
+        code: external_exports.ZodIssueCode.custom,
+        path: [index, "agent_id"],
+        message: "Activation snapshot agents must have unique agent_id values."
+      });
+    }
+    if (seatIds.has(agent.seat_id)) {
+      ctx.addIssue({
+        code: external_exports.ZodIssueCode.custom,
+        path: [index, "seat_id"],
+        message: "Activation snapshot agents must have unique seat_id values."
+      });
+    }
+    agentIds.add(agent.agent_id);
+    seatIds.add(agent.seat_id);
+  });
+});
+var onboardingActivationCommitSnapshotSchema = external_exports.object({
+  terminal_rehearsal_batch_receipt_id: uuidSchema18,
+  agents: onboardingActivationCommittedAgentsSchema,
+  onboarding_completed_at: external_exports.string().datetime({ offset: true })
+}).strict();
+var onboardingActivationPersistenceInputSchema = external_exports.object({
+  activation_confirmation_id: uuidSchema18,
+  activation_idempotency_key: boundedText3(120),
+  activation_input_digest: digestSchema4,
+  receipt_revision: external_exports.number().int().positive(),
+  activation_snapshot: onboardingActivationCommitSnapshotSchema
+}).strict();
+var onboardingActivationReceiptSchema = external_exports.object({
+  activation_receipt_id: uuidSchema18,
+  activation_confirmation_id: uuidSchema18,
+  setup_application_id: uuidSchema18,
+  implementation_run_id: uuidSchema18.nullable(),
+  activation_input_digest: digestSchema4,
+  setup_receipt_revision: external_exports.number().int().positive(),
+  terminal_rehearsal_batch_receipt_id: uuidSchema18,
+  agents: external_exports.array(onboardingActivationCommittedAgentSchema).min(1).max(100),
+  onboarding_completed_at: external_exports.string().datetime({ offset: true }),
+  activated_at: external_exports.string().datetime({ offset: true })
+}).strict();
+var onboardingActivateOutputSchema = external_exports.object({
+  application_id: uuidSchema18,
+  status: external_exports.literal("activated"),
+  receipt: onboardingActivationReceiptSchema
+}).strict();
+
 // ../../packages/protocol/src/mcp-onboarding.ts
 var MCP_TOKEN_ABSOLUTE_MAX_EXPIRY_MS = (MCP_TOKEN_NO_EXPIRY_SENTINEL_DAYS + 1) * 24 * 60 * 60 * 1e3;
-var uuidSchema18 = external_exports.string().uuid();
+var uuidSchema19 = external_exports.string().uuid();
 var isoDateTime6 = external_exports.string().datetime({ offset: true });
 var onboardingStatusInputSchema = external_exports.object({}).strict();
 var onboardingStatusOutputSchema = external_exports.object({
@@ -36633,7 +36788,7 @@ var onboardingAttachReferenceInputSchema = external_exports.object({
   source: external_exports.string().trim().min(1).max(500).optional()
 }).strict();
 var onboardingAttachReferenceOutputSchema = external_exports.object({
-  document_id: uuidSchema18,
+  document_id: uuidSchema19,
   storage_ref: external_exports.string().min(1),
   kind: external_exports.enum(["org_chart", "role_doc", "plan", "financial", "other"]),
   title: external_exports.string().min(1).nullable()
@@ -36658,7 +36813,7 @@ var onboardingCreateInviteInputSchema = external_exports.object({
   flags: external_exports.record(external_exports.string(), external_exports.unknown()).default({})
 }).strict();
 var onboardingCreateInviteOutputSchema = external_exports.object({
-  invite_id: uuidSchema18,
+  invite_id: uuidSchema19,
   email: external_exports.string().email(),
   role: external_exports.enum(["owner", "admin", "steward", "member"]),
   token: external_exports.string().min(1)
@@ -36671,19 +36826,19 @@ var tenantAnthropicKeySaveOutputSchema = external_exports.object({
 }).strict();
 var tenantAnthropicKeyDisableInputSchema = external_exports.object({}).strict();
 var tenantAnthropicKeyDisableOutputSchema = external_exports.object({
-  tenant_id: uuidSchema18,
-  credential_id: uuidSchema18.nullable(),
+  tenant_id: uuidSchema19,
+  credential_id: uuidSchema19.nullable(),
   disabled: external_exports.boolean(),
   already_disabled: external_exports.boolean(),
   managed_fallback_ready: external_exports.boolean()
 }).strict();
 var seatCreateInputSchema = external_exports.object({
   name: external_exports.string().trim().min(1).max(120),
-  parent_seat_id: uuidSchema18.nullable().optional(),
+  parent_seat_id: uuidSchema19.nullable().optional(),
   seat_type: external_exports.enum(["human", "agent", "hybrid"]).default("human")
 }).strict();
 var seatCreateOutputSchema = withCommandEffect({
-  seat_id: uuidSchema18,
+  seat_id: uuidSchema19,
   // Mirrors the literal `createSeat` writes at insert time. Not sourced from a
   // read-back: `createSeat` returns only the new id, and widening its
   // signature to return the row is out of scope for this issue (schema +
@@ -36694,29 +36849,29 @@ var seatCreateOutputSchema = withCommandEffect({
   status: external_exports.enum(["draft", "active", "vacant", "decommissioned"])
 });
 var seatRenameInputSchema = external_exports.object({
-  seat_id: uuidSchema18,
+  seat_id: uuidSchema19,
   name: external_exports.string().trim().min(1).max(120)
 }).strict();
 var seatReparentInputSchema = external_exports.object({
-  seat_id: uuidSchema18,
-  new_parent_seat_id: uuidSchema18.nullable()
+  seat_id: uuidSchema19,
+  new_parent_seat_id: uuidSchema19.nullable()
 }).strict();
 var seatSetTypeInputSchema = external_exports.object({
-  seat_id: uuidSchema18,
+  seat_id: uuidSchema19,
   seat_type: external_exports.enum(["human", "agent", "hybrid"])
 }).strict();
 var seatDecommissionInputSchema = external_exports.object({
-  seat_id: uuidSchema18
+  seat_id: uuidSchema19
 }).strict();
 var seatMutationOutputSchema = external_exports.object({
-  seat_id: uuidSchema18
+  seat_id: uuidSchema19
 }).strict();
 var seatDecommissionPreviewOutputSchema = external_exports.object({
-  seat_id: uuidSchema18,
+  seat_id: uuidSchema19,
   seat_name: external_exports.string(),
   previous_status: external_exports.enum(["draft", "active", "vacant", "decommissioned"]),
   active_occupancy_count: external_exports.number().int().nonnegative(),
-  active_agent_ids: external_exports.array(uuidSchema18),
+  active_agent_ids: external_exports.array(uuidSchema19),
   active_charter_count: external_exports.number().int().nonnegative(),
   active_mcp_token_count: external_exports.number().int().nonnegative(),
   active_credential_count: external_exports.number().int().nonnegative(),
@@ -36726,16 +36881,16 @@ var seatDecommissionPreviewOutputSchema = external_exports.object({
   effects: external_exports.array(external_exports.string())
 }).strict();
 var charterDraftInputSchema = external_exports.object({
-  seat_id: uuidSchema18
+  seat_id: uuidSchema19
 }).strict();
 var charterDraftOutputSchema = external_exports.object({
-  charter_version_id: uuidSchema18,
-  seat_id: uuidSchema18,
+  charter_version_id: uuidSchema19,
+  seat_id: uuidSchema19,
   edit_revision: external_exports.number().int().min(1).optional(),
   doc: external_exports.unknown()
 }).strict();
 var charterUpdateDraftInputSchema = external_exports.object({
-  charter_version_id: uuidSchema18,
+  charter_version_id: uuidSchema19,
   expected_edit_revision: external_exports.number().int().min(1).optional(),
   // DER-785 (Part G): the full Charter document contract (was `z.unknown()`).
   // The DB layer already validated this with `charterSchema.parse`; advertising
@@ -36744,18 +36899,18 @@ var charterUpdateDraftInputSchema = external_exports.object({
   doc: charterDocSchema
 }).strict();
 var charterSetInputSchema = external_exports.object({
-  seat_id: uuidSchema18,
+  seat_id: uuidSchema19,
   doc: charterDocSchema,
   approve: external_exports.boolean().default(false)
 }).strict();
 var charterMutationOutputSchema = external_exports.object({
-  charter_version_id: uuidSchema18,
-  seat_id: uuidSchema18,
+  charter_version_id: uuidSchema19,
+  seat_id: uuidSchema19,
   edit_revision: external_exports.number().int().min(1).optional()
 }).strict();
 var charterApproveInputSchema = external_exports.object({
-  seat_id: uuidSchema18.optional(),
-  charter_version_id: uuidSchema18.optional(),
+  seat_id: uuidSchema19.optional(),
+  charter_version_id: uuidSchema19.optional(),
   // DER-785 (Part G): a partial of the Charter doc shape (was an untyped record).
   // These fields are shallow-merged onto the existing draft, then the merged doc
   // is re-validated against the full schema at persist time.
@@ -36766,25 +36921,101 @@ var charterApproveInputSchema = external_exports.object({
   message: "Provide seat_id or charter_version_id.",
   path: ["seat_id"]
 });
+var charterSignalDeclarationNameSchema = external_exports.string().trim().min(1).max(120);
+var charterSignalResolutionSchema = external_exports.discriminatedUnion("action", [
+  external_exports.object({
+    declaration_name: charterSignalDeclarationNameSchema,
+    action: external_exports.literal("adopt_existing"),
+    measurable_id: uuidSchema19
+  }).strict(),
+  external_exports.object({
+    declaration_name: charterSignalDeclarationNameSchema,
+    action: external_exports.literal("move_existing"),
+    measurable_id: uuidSchema19
+  }).strict(),
+  external_exports.object({
+    declaration_name: charterSignalDeclarationNameSchema,
+    action: external_exports.literal("create_new")
+  }).strict()
+]);
+var charterReconcileSignalsInputSchema = external_exports.object({
+  charter_version_id: uuidSchema19,
+  // The stale-draft guard: `charter_versions.edit_revision` starts at 1, so 0 is
+  // never a real revision.
+  expected_edit_revision: external_exports.number().int().min(1),
+  signal_resolutions: external_exports.array(charterSignalResolutionSchema).min(1),
+  apply_seat_type: external_exports.boolean().default(false)
+}).strict();
+var charterSignalGoalBindingSchema = external_exports.object({
+  goal_id: uuidSchema19,
+  goal_title: external_exports.string(),
+  // Null for a company objective, which owns no Seat. A `drives_status` binding on a
+  // seatless goal can never match a destination Seat, so movement fails closed.
+  goal_seat_id: uuidSchema19.nullable(),
+  role: external_exports.enum(["drives_status", "informs"])
+}).strict();
+var charterSignalCandidateSchema = external_exports.object({
+  measurable_id: uuidSchema19,
+  owner_seat_id: uuidSchema19,
+  owner_seat_name: external_exports.string(),
+  stored_source: external_exports.enum(["human", "agent", "integration"]),
+  reading_count: external_exports.number().int().min(0),
+  latest_reading: external_exports.object({
+    value: external_exports.number(),
+    period_start: external_exports.string(),
+    confirmed: external_exports.boolean()
+  }).strict().nullable(),
+  goal_bindings: external_exports.array(charterSignalGoalBindingSchema),
+  // Bindings in ANY status, draft included — "a connected source is bound", not "a source is
+  // actively feeding it". The preview's warning copy is worded to match.
+  source_binding_count: external_exports.number().int().min(0),
+  // What choosing THIS candidate would cost or carry. Present on every candidate, including
+  // each side of an ambiguous match, which is where the differences decide the answer.
+  warnings: external_exports.array(external_exports.string())
+}).strict();
+var charterSignalReconciliationItemSchema = external_exports.object({
+  declaration_name: external_exports.string(),
+  status: external_exports.enum(["linked", "candidate", "ambiguous", "missing"]),
+  linked_measurable_id: uuidSchema19.nullable(),
+  candidates: external_exports.array(charterSignalCandidateSchema),
+  // A DERIVED suggestion, never an applied one: `null` whenever a human must choose
+  // (ambiguous), whenever nothing matches (missing), or when the declaration is already
+  // linked. Approval still requires the explicit action.
+  recommended_action: external_exports.enum(["adopt_existing", "move_existing"]).nullable(),
+  // What this choice would cost or carry — a cadence the reading history locks, a
+  // status-driving goal on another Seat that blocks a move. Empty when nothing is at risk.
+  warnings: external_exports.array(external_exports.string())
+}).strict();
+var charterPreviewSignalReconciliationInputSchema = external_exports.object({
+  charter_version_id: uuidSchema19
+}).strict();
+var charterPreviewSignalReconciliationOutputSchema = external_exports.object({
+  charter_version_id: uuidSchema19,
+  seat_id: uuidSchema19,
+  // Pass this back as `expected_edit_revision` when reconciling, so a draft edited after
+  // the preview cannot be reconciled against a stale reading of it.
+  edit_revision: external_exports.number().int().min(1),
+  items: external_exports.array(charterSignalReconciliationItemSchema)
+}).strict();
 var charterDraftAllInputSchema = external_exports.object({}).strict();
 var charterDraftSkipReasonSchema = external_exports.enum(["seat_not_active", "charter_exists"]);
 var charterDraftAllOutputSchema = withCommandEffect({
   drafted: external_exports.number().int().nonnegative(),
   skipped: external_exports.number().int().nonnegative(),
-  draft_ids: external_exports.array(uuidSchema18),
+  draft_ids: external_exports.array(uuidSchema19),
   skipped_seats: external_exports.array(external_exports.object({
-    seat_id: uuidSchema18,
+    seat_id: uuidSchema19,
     reason: charterDraftSkipReasonSchema
   }).strict())
 });
 var charterSkipInputSchema = external_exports.object({
-  charter_version_id: uuidSchema18
+  charter_version_id: uuidSchema19
 }).strict();
 var charterApplySeatTypeRecommendationInputSchema = external_exports.object({
-  charter_version_id: uuidSchema18
+  charter_version_id: uuidSchema19
 }).strict();
 var charterSignManifestInputSchema = external_exports.object({
-  charter_version_id: uuidSchema18
+  charter_version_id: uuidSchema19
 }).strict();
 var pendingConfirmationSchema = external_exports.object({
   confirmationId: external_exports.string().min(1),
@@ -36838,7 +37069,7 @@ var confirmationListInputSchema = external_exports.object({
   limit: external_exports.number().int().min(1).max(200).optional()
 }).strict();
 var confirmationSummarySchema = external_exports.object({
-  id: uuidSchema18,
+  id: uuidSchema19,
   command_id: external_exports.string(),
   redacted_args: external_exports.unknown(),
   // DER-2161 kickback round 1, finding (6): tracks `PendingConfirmationListRow`'s
@@ -36848,7 +37079,7 @@ var confirmationSummarySchema = external_exports.object({
   actor_kind: external_exports.enum(["user", "agent", "system", "operator"]),
   source: external_exports.string(),
   scope_kind: external_exports.enum(["tenant_admin", "tenant", "seat"]),
-  seat_id: uuidSchema18.nullable(),
+  seat_id: uuidSchema19.nullable(),
   seat_name: external_exports.string().nullable(),
   seat_type: external_exports.enum(["human", "agent", "hybrid"]).nullable(),
   risk_level: external_exports.enum(["normal", "sensitive", "dangerous"]),
@@ -36860,37 +37091,37 @@ var confirmationListOutputSchema = external_exports.object({
   confirmations: external_exports.array(confirmationSummarySchema)
 }).strict();
 var confirmationDismissInputSchema = external_exports.object({
-  confirmation_id: uuidSchema18
+  confirmation_id: uuidSchema19
 }).strict();
 var confirmationDismissOutputSchema = external_exports.object({
   dismissed: external_exports.object({
-    id: uuidSchema18,
+    id: uuidSchema19,
     status: external_exports.literal("dismissed")
   }).strict()
 }).strict();
 var confirmationDismissStaleInputSchema = external_exports.object({}).strict();
 var confirmationDismissStaleOutputSchema = external_exports.object({
   dismissed_count: external_exports.number().int().min(0),
-  dismissed_ids: external_exports.array(uuidSchema18)
+  dismissed_ids: external_exports.array(uuidSchema19)
 }).strict();
 var credentialIngressInputSchema = external_exports.object({
-  seat_id: uuidSchema18.optional(),
+  seat_id: uuidSchema19.optional(),
   provider: external_exports.string().trim().min(1),
   scope_description: external_exports.string().trim().min(1),
   secret_name: external_exports.string().trim().min(1),
   secret: external_exports.string().trim().min(1)
 }).strict();
 var credentialIngressOutputSchema = external_exports.object({
-  credential_id: uuidSchema18,
+  credential_id: uuidSchema19,
   provider: external_exports.string().min(1),
-  seat_id: uuidSchema18.nullable()
+  seat_id: uuidSchema19.nullable()
 }).strict();
 var credentialListInputSchema = external_exports.object({}).strict();
 var credentialSummarySchema = external_exports.object({
-  credential_id: uuidSchema18,
+  credential_id: uuidSchema19,
   provider: external_exports.string(),
   scope_description: external_exports.string(),
-  seat_id: uuidSchema18.nullable(),
+  seat_id: uuidSchema19.nullable(),
   status: external_exports.string(),
   created_at: external_exports.string(),
   rotated_at: external_exports.string(),
@@ -36900,16 +37131,16 @@ var credentialListOutputSchema = external_exports.object({
   credentials: external_exports.array(credentialSummarySchema)
 }).strict();
 var agentGoLiveInputSchema = external_exports.object({
-  seat_id: uuidSchema18,
-  charter_version_id: uuidSchema18
+  seat_id: uuidSchema19,
+  charter_version_id: uuidSchema19
 }).strict();
 var agentGoLiveOutputSchema = external_exports.object({
-  seat_id: uuidSchema18,
-  charter_version_id: uuidSchema18,
+  seat_id: uuidSchema19,
+  charter_version_id: uuidSchema19,
   status: external_exports.literal("live")
 }).strict();
 var compassSetInputSchema = external_exports.object({
-  draft_id: uuidSchema18.optional(),
+  draft_id: uuidSchema19.optional(),
   doc: compassDraftSchema.optional(),
   approve: external_exports.boolean().default(false)
 }).strict().refine((input) => Boolean(input.draft_id) !== Boolean(input.doc), {
@@ -36917,7 +37148,7 @@ var compassSetInputSchema = external_exports.object({
   path: ["draft_id"]
 });
 var compassMutationOutputSchema = external_exports.object({
-  compass_version_id: uuidSchema18,
+  compass_version_id: uuidSchema19,
   status: external_exports.enum(["draft", "active", "superseded"]),
   version: external_exports.number().int().nonnegative()
 }).strict();
@@ -36926,42 +37157,42 @@ var compassDraftInputSchema = external_exports.object({
   doc: compassDraftSchema
 }).strict();
 var compassUpdateDraftInputSchema = external_exports.object({
-  draft_id: uuidSchema18,
+  draft_id: uuidSchema19,
   doc: compassDraftSchema
 }).strict();
 var compassApproveVersionInputSchema = external_exports.object({
-  draft_id: uuidSchema18
+  draft_id: uuidSchema19
 }).strict();
 var compassRejectDraftInputSchema = external_exports.object({
-  draft_id: uuidSchema18
+  draft_id: uuidSchema19
 }).strict();
 var compassAnswerGapInputSchema = external_exports.object({
   gap_id: external_exports.string().min(1),
   answer: external_exports.string().trim().min(1)
 }).strict();
 var seatStaffInputSchema = external_exports.object({
-  seat_id: uuidSchema18,
+  seat_id: uuidSchema19,
   occupant: external_exports.discriminatedUnion("type", [
     external_exports.object({ type: external_exports.literal("vacant") }).strict(),
-    external_exports.object({ type: external_exports.literal("user"), user_id: uuidSchema18 }).strict(),
-    external_exports.object({ type: external_exports.literal("agent"), agent_id: uuidSchema18 }).strict()
+    external_exports.object({ type: external_exports.literal("user"), user_id: uuidSchema19 }).strict(),
+    external_exports.object({ type: external_exports.literal("agent"), agent_id: uuidSchema19 }).strict()
   ])
 }).strict();
 var staffingMutationOutputSchema = external_exports.object({
-  seat_id: uuidSchema18,
+  seat_id: uuidSchema19,
   staffed: external_exports.enum(["vacant", "user", "agent"])
 }).strict();
 var staffingAssignUserInputSchema = external_exports.object({
-  seat_id: uuidSchema18,
-  user_id: uuidSchema18
+  seat_id: uuidSchema19,
+  user_id: uuidSchema19
 }).strict();
 var staffingAssignAgentDryRunInputSchema = external_exports.object({
-  seat_id: uuidSchema18,
-  agent_id: uuidSchema18
+  seat_id: uuidSchema19,
+  agent_id: uuidSchema19
 }).strict();
 var mcpTokenCreateInputSchema = external_exports.object({
   scope: external_exports.enum(["tenant_admin", "seat"]),
-  seat_id: uuidSchema18.optional(),
+  seat_id: uuidSchema19.optional(),
   // DER-830: explicit absolute expiry (kept for back-compat / direct callers).
   // When omitted OR null, the DB default (now() + 90 days) applies — `null` is an
   // accepted "no explicit expiry" signal (existing UI/MCP callers pass it), so it
@@ -37005,17 +37236,17 @@ var mcpTokenCreateInputSchema = external_exports.object({
   }
 });
 var mcpTokenCreateOutputSchema = external_exports.object({
-  token_id: uuidSchema18,
+  token_id: uuidSchema19,
   token: external_exports.string().min(1),
   scope: external_exports.enum(["tenant_admin", "seat"]),
-  seat_id: uuidSchema18.nullable()
+  seat_id: uuidSchema19.nullable()
 }).strict();
 var mcpTokenRevokeInputSchema = external_exports.object({
-  token_id: uuidSchema18,
-  seat_id: uuidSchema18.optional()
+  token_id: uuidSchema19,
+  seat_id: uuidSchema19.optional()
 }).strict();
 var mcpTokenRevokeOutputSchema = external_exports.object({
-  token_id: uuidSchema18,
+  token_id: uuidSchema19,
   revoked: external_exports.boolean()
 }).strict();
 
@@ -37028,7 +37259,7 @@ var markNotificationsReadRequestSchema = external_exports.object({
 });
 
 // ../../packages/protocol/src/product-analytics.ts
-var uuidSchema19 = external_exports.string().uuid();
+var uuidSchema20 = external_exports.string().uuid();
 var opaqueRequestIdSchema = external_exports.string().trim().min(1).max(240);
 var safeNameSchema = external_exports.string().trim().min(1).max(120).regex(/^[a-z][a-z0-9._:-]*$/);
 var safeSurfaceSchema = external_exports.string().trim().min(1).max(80).regex(/^[a-z][a-z0-9_-]*$/);
@@ -37122,8 +37353,8 @@ var recommendationOutcomeStatusSchema = external_exports.enum([
 ]);
 var durationMsSchema = external_exports.number().int().nonnegative().max(24 * 60 * 60 * 1e3).optional();
 var productEventInputSchema = external_exports.object({
-  tenant_id: uuidSchema19,
-  user_id: uuidSchema19.optional(),
+  tenant_id: uuidSchema20,
+  user_id: uuidSchema20.optional(),
   source: analyticsSourceSchema,
   event_name: safeNameSchema,
   route_template: routeTemplateSchema.optional(),
@@ -37132,8 +37363,8 @@ var productEventInputSchema = external_exports.object({
   occurred_at: external_exports.string().datetime({ offset: true }).optional()
 }).strict();
 var pageViewInputSchema = external_exports.object({
-  tenant_id: uuidSchema19,
-  user_id: uuidSchema19.optional(),
+  tenant_id: uuidSchema20,
+  user_id: uuidSchema20.optional(),
   route_template: routeTemplateSchema,
   referrer_route_template: routeTemplateSchema.optional(),
   surface: safeSurfaceSchema.default("web"),
@@ -37142,12 +37373,12 @@ var pageViewInputSchema = external_exports.object({
   occurred_at: external_exports.string().datetime({ offset: true }).optional()
 }).strict();
 var commandInvocationInputSchema = external_exports.object({
-  tenant_id: uuidSchema19,
-  user_id: uuidSchema19.optional(),
-  seat_id: uuidSchema19.optional(),
-  run_id: uuidSchema19.optional(),
-  agent_turn_execution_id: uuidSchema19.optional(),
-  session_id: uuidSchema19.optional(),
+  tenant_id: uuidSchema20,
+  user_id: uuidSchema20.optional(),
+  seat_id: uuidSchema20.optional(),
+  run_id: uuidSchema20.optional(),
+  agent_turn_execution_id: uuidSchema20.optional(),
+  session_id: uuidSchema20.optional(),
   command_id: safeNameSchema,
   source: analyticsSourceSchema,
   // DER-2161 kickback round 1, finding (6): tracks `command_invocations.actor_kind`
@@ -37161,7 +37392,7 @@ var commandInvocationInputSchema = external_exports.object({
   // `packages/commands/src/context.ts`'s operator context builder now sets
   // `initiatorKind: "operator"` instead of coercing to "agent".
   initiator_kind: external_exports.enum(["user", "agent", "system", "operator"]).optional(),
-  initiator_user_id: uuidSchema19.nullable().optional(),
+  initiator_user_id: uuidSchema20.nullable().optional(),
   scope_kind: external_exports.enum(["tenant_admin", "tenant", "seat"]),
   status: commandInvocationStatusSchema,
   guard_result: external_exports.enum(["allowed", "denied_manifest", "denied_budget", "escalated", "denied_tenant_policy"]).optional(),
@@ -37180,8 +37411,8 @@ var commandInvocationInputSchema = external_exports.object({
   }
 });
 var onboardingMilestoneInputSchema = external_exports.object({
-  tenant_id: uuidSchema19,
-  user_id: uuidSchema19.optional(),
+  tenant_id: uuidSchema20,
+  user_id: uuidSchema20.optional(),
   milestone: safeNameSchema,
   status: analyticsOutcomeStatusSchema,
   step_index: external_exports.number().int().nonnegative().max(100).optional(),
@@ -37190,19 +37421,19 @@ var onboardingMilestoneInputSchema = external_exports.object({
   occurred_at: external_exports.string().datetime({ offset: true }).optional()
 }).strict();
 var recommendationEventInputSchema = external_exports.object({
-  tenant_id: uuidSchema19,
-  user_id: uuidSchema19.optional(),
+  tenant_id: uuidSchema20,
+  user_id: uuidSchema20.optional(),
   recommendation_type: safeNameSchema,
   source_surface: safeSurfaceSchema,
   status: recommendationOutcomeStatusSchema,
   target_kind: safeSurfaceSchema.optional(),
-  target_id: uuidSchema19.optional(),
+  target_id: uuidSchema20.optional(),
   properties: recommendationAnalyticsPropertiesSchema.optional(),
   occurred_at: external_exports.string().datetime({ offset: true }).optional()
 }).strict();
 
 // ../../packages/protocol/src/reads.ts
-var uuidSchema20 = external_exports.string().uuid();
+var uuidSchema21 = external_exports.string().uuid();
 var isoDateTime7 = external_exports.string().datetime({ offset: true });
 var seatTypeSchema = external_exports.enum(["human", "agent", "hybrid"]);
 var seatStatusSchema = external_exports.enum(["draft", "active", "vacant", "decommissioned"]);
@@ -37217,13 +37448,13 @@ var credentialStatusSchema = external_exports.enum(["active", "revoked"]);
 var runStatusSchema = external_exports.enum(["running", "succeeded", "failed", "timeout", "cancelled"]);
 var graphGetInputSchema = external_exports.object({}).strict();
 var graphNodeSchema = external_exports.object({
-  seat_id: uuidSchema20,
+  seat_id: uuidSchema21,
   name: external_exports.string(),
   seat_type: seatTypeSchema,
   status: seatStatusSchema,
-  parent_seat_id: uuidSchema20.nullable(),
+  parent_seat_id: uuidSchema21.nullable(),
   is_root: external_exports.boolean(),
-  steward_seat_id: uuidSchema20.nullable(),
+  steward_seat_id: uuidSchema21.nullable(),
   occupant: external_exports.object({
     kind: external_exports.enum(["user", "agent"]),
     label: external_exports.string(),
@@ -37236,11 +37467,11 @@ var graphNodeSchema = external_exports.object({
   is_peer: external_exports.boolean()
 }).strict();
 var graphEdgeSchema = external_exports.object({
-  parent_seat_id: uuidSchema20,
-  child_seat_id: uuidSchema20
+  parent_seat_id: uuidSchema21,
+  child_seat_id: uuidSchema21
 }).strict();
 var graphGetOutputSchema = external_exports.object({
-  root_seat_id: uuidSchema20.nullable(),
+  root_seat_id: uuidSchema21.nullable(),
   nodes: external_exports.array(graphNodeSchema),
   edges: external_exports.array(graphEdgeSchema),
   status_rollups: external_exports.object({
@@ -37252,32 +37483,32 @@ var graphGetOutputSchema = external_exports.object({
   }).strict()
 }).strict();
 var seatGetInputSchema = external_exports.object({
-  seat_id: uuidSchema20
+  seat_id: uuidSchema21
 }).strict();
 var seatGetOutputSchema = external_exports.object({
-  seat_id: uuidSchema20,
+  seat_id: uuidSchema21,
   name: external_exports.string(),
   seat_type: seatTypeSchema,
   status: seatStatusSchema,
   purpose: external_exports.string().nullable(),
-  parent_seat_id: uuidSchema20.nullable(),
+  parent_seat_id: uuidSchema21.nullable(),
   steward_chain: external_exports.array(external_exports.object({
-    seat_id: uuidSchema20,
+    seat_id: uuidSchema21,
     name: external_exports.string()
   }).strict()),
   occupancies: external_exports.array(external_exports.object({
-    occupancy_id: uuidSchema20,
+    occupancy_id: uuidSchema21,
     occupant_type: external_exports.enum(["user", "agent"]),
     label: external_exports.string(),
     started_at: isoDateTime7,
     ended_at: isoDateTime7.nullable()
   }).strict()),
-  active_charter_version_id: uuidSchema20.nullable(),
-  draft_charter_version_id: uuidSchema20.nullable(),
+  active_charter_version_id: uuidSchema21.nullable(),
+  draft_charter_version_id: uuidSchema21.nullable(),
   agent_status: agentStatusEnum2.nullable(),
   agent_lane: agentLaneSchema3.nullable(),
   mcp_tokens: external_exports.array(external_exports.object({
-    token_id: uuidSchema20,
+    token_id: uuidSchema21,
     scope: mcpScopeSchema,
     created_at: isoDateTime7,
     last_seen_at: isoDateTime7.nullable(),
@@ -37287,7 +37518,7 @@ var seatGetOutputSchema = external_exports.object({
     revoked_at: isoDateTime7.nullable()
   }).strict()),
   credentials: external_exports.array(external_exports.object({
-    credential_id: uuidSchema20,
+    credential_id: uuidSchema21,
     provider: external_exports.string(),
     status: credentialStatusSchema
   }).strict()),
@@ -37299,12 +37530,12 @@ var seatGetOutputSchema = external_exports.object({
   }).strict()
 }).strict();
 var charterListInputSchema = external_exports.object({
-  seat_id: uuidSchema20.optional(),
+  seat_id: uuidSchema21.optional(),
   status: charterStatusSchema.optional()
 }).strict();
 var charterSummarySchema = external_exports.object({
-  charter_version_id: uuidSchema20,
-  seat_id: uuidSchema20,
+  charter_version_id: uuidSchema21,
+  seat_id: uuidSchema21,
   version: external_exports.number().int().nonnegative(),
   status: charterStatusSchema,
   created_at: isoDateTime7,
@@ -37314,11 +37545,11 @@ var charterListOutputSchema = external_exports.object({
   charters: external_exports.array(charterSummarySchema)
 }).strict();
 var charterGetInputSchema = external_exports.object({
-  charter_version_id: uuidSchema20
+  charter_version_id: uuidSchema21
 }).strict();
 var charterGetOutputSchema = external_exports.object({
-  charter_version_id: uuidSchema20,
-  seat_id: uuidSchema20,
+  charter_version_id: uuidSchema21,
+  seat_id: uuidSchema21,
   version: external_exports.number().int().nonnegative(),
   status: charterStatusSchema,
   created_at: isoDateTime7,
@@ -37332,7 +37563,7 @@ var charterGetOutputSchema = external_exports.object({
 }).strict();
 var compassGetCurrentInputSchema = external_exports.object({}).strict();
 var compassVersionRefSchema = external_exports.object({
-  compass_version_id: uuidSchema20,
+  compass_version_id: uuidSchema21,
   version: external_exports.number().int().nonnegative(),
   status: compassStatusSchema,
   doc: external_exports.unknown()
@@ -37343,7 +37574,7 @@ var compassGetCurrentOutputSchema = external_exports.object({
   // Sources expose document id and kind only. The underlying storage_ref can
   // be a local file path, so it is never surfaced (redaction rule).
   sources: external_exports.array(external_exports.object({
-    document_id: uuidSchema20,
+    document_id: uuidSchema21,
     kind: external_exports.string()
   }).strict())
 }).strict();
@@ -37358,22 +37589,22 @@ var compassGapSchema = external_exports.object({
   answer: external_exports.string().nullable()
 }).strict();
 var compassListGapsOutputSchema = external_exports.object({
-  compass_version_id: uuidSchema20.nullable(),
+  compass_version_id: uuidSchema21.nullable(),
   unanswered: external_exports.array(compassGapSchema),
   answered: external_exports.array(compassGapSchema)
 }).strict();
 var agentStatusInputSchema = external_exports.object({
-  seat_id: uuidSchema20
+  seat_id: uuidSchema21
 }).strict();
 var agentStatusOutputSchema = external_exports.object({
-  seat_id: uuidSchema20,
+  seat_id: uuidSchema21,
   // DER-786 (C7): `has_agent` is true whenever a setup agent exists for the seat
   // — including a draft setup that has no occupancy yet — so it agrees with
   // agent_setup.get. `lifecycle` is the shared cross-surface term derived from
   // `status` (none | draft_setup | dry_run | live | …).
   has_agent: external_exports.boolean(),
   lifecycle: agentLifecycleSchema,
-  agent_id: uuidSchema20.nullable(),
+  agent_id: uuidSchema21.nullable(),
   kind: agentKindSchema2.nullable(),
   display_name: external_exports.string().nullable(),
   lane: agentLaneSchema3.nullable(),
@@ -37381,9 +37612,9 @@ var agentStatusOutputSchema = external_exports.object({
   schedule_cron: external_exports.string().nullable(),
   schedule_timezone: external_exports.string().min(1).max(100).nullable(),
   live: external_exports.boolean(),
-  charter_version_id: uuidSchema20.nullable(),
+  charter_version_id: uuidSchema21.nullable(),
   steward_chain: external_exports.array(external_exports.object({
-    seat_id: uuidSchema20,
+    seat_id: uuidSchema21,
     name: external_exports.string()
   }).strict()),
   steward_chain_resolves_to_human: external_exports.boolean(),
@@ -37424,7 +37655,7 @@ var fleetWorkEvidenceSchema = external_exports.object({
   label: external_exports.string(),
   detail: external_exports.string(),
   href: external_exports.string().nullable(),
-  run_id: uuidSchema20.nullable(),
+  run_id: uuidSchema21.nullable(),
   linkable_run: external_exports.boolean(),
   can_run_now: external_exports.boolean()
 }).strict();
@@ -37438,7 +37669,7 @@ var fleetWorkProgressSchema = external_exports.object({
   last_durable_activity_at: isoDateTime7.nullable()
 }).strict();
 var fleetOverviewRowSchema = external_exports.object({
-  seat_id: uuidSchema20,
+  seat_id: uuidSchema21,
   seat_name: external_exports.string(),
   seat_path: external_exports.string(),
   // DER-2068 (N-2): the seat's immediate parent seat name (null for the root
@@ -37475,7 +37706,7 @@ var agentListFleetOutputSchema = external_exports.object({
   agents: external_exports.array(fleetOverviewRowSchema)
 }).strict();
 var runErrorLogSchema = external_exports.object({
-  error_log_id: uuidSchema20,
+  error_log_id: uuidSchema21,
   source: external_exports.enum(["run", "llm", "tool", "mcp", "runner", "integration", "job", "web"]),
   severity: external_exports.enum(["warning", "error", "critical"]),
   code: external_exports.string().nullable(),
@@ -37488,9 +37719,9 @@ var agentFleetDigestInputSchema = external_exports.object({
   error_limit: external_exports.number().int().min(1).max(100).default(50)
 }).strict();
 var fleetDigestRunSchema = external_exports.object({
-  run_id: uuidSchema20,
-  seat_id: uuidSchema20,
-  agent_id: uuidSchema20,
+  run_id: uuidSchema21,
+  seat_id: uuidSchema21,
+  agent_id: uuidSchema21,
   status: runStatusSchema,
   lane: agentLaneSchema3,
   model: external_exports.string(),
@@ -37500,22 +37731,22 @@ var fleetDigestRunSchema = external_exports.object({
   error_logs: external_exports.array(runErrorLogSchema)
 }).strict();
 var fleetDigestErrorSchema = runErrorLogSchema.extend({
-  seat_id: uuidSchema20.nullable(),
-  agent_id: uuidSchema20.nullable(),
-  run_id: uuidSchema20.nullable(),
+  seat_id: uuidSchema21.nullable(),
+  agent_id: uuidSchema21.nullable(),
+  run_id: uuidSchema21.nullable(),
   disposition: external_exports.enum(["active", "acknowledged", "resolved", "superseded"])
 }).strict();
 var fleetDigestNotificationErrorSchema = external_exports.object({
-  notification_id: uuidSchema20,
+  notification_id: uuidSchema21,
   kind: external_exports.string(),
   channel: external_exports.string(),
   status: external_exports.string(),
   provider: external_exports.string(),
   error_message: external_exports.string().nullable(),
-  error_log_id: uuidSchema20.nullable(),
+  error_log_id: uuidSchema21.nullable(),
   source: external_exports.enum(["run", "llm", "tool", "mcp", "runner", "integration", "job", "web"]).nullable(),
-  seat_id: uuidSchema20.nullable(),
-  run_id: uuidSchema20.nullable(),
+  seat_id: uuidSchema21.nullable(),
+  run_id: uuidSchema21.nullable(),
   created_at: isoDateTime7
 }).strict();
 var fleetDigestAgentSchema = fleetOverviewRowSchema.extend({
@@ -37564,21 +37795,21 @@ var seatTrustSummarySchema = external_exports.object({
   last_activity_at: isoDateTime7.nullable()
 }).strict();
 var agentListRunsInputSchema = external_exports.object({
-  seat_id: uuidSchema20,
+  seat_id: uuidSchema21,
   // Conservative, bounded page size; the timeline is a recent-history view.
   limit: external_exports.number().int().min(1).max(200).default(50)
 }).strict();
 var agentGetRunInputSchema = external_exports.object({
-  seat_id: uuidSchema20,
-  run_id: uuidSchema20,
+  seat_id: uuidSchema21,
+  run_id: uuidSchema21,
   // DER-1661: opt in to the persisted session transcript (`--transcript`). Off by
   // default so the diagnostic read stays lean; the (potentially large) transcript body
   // loads only when asked.
   transcript: external_exports.boolean().default(false)
 }).strict();
 var seatRunSchema = external_exports.object({
-  run_id: uuidSchema20,
-  agent_id: uuidSchema20,
+  run_id: uuidSchema21,
+  agent_id: uuidSchema21,
   agent_display_name: external_exports.string().nullable(),
   status: runStatusSchema,
   lane: agentLaneSchema3,
@@ -37595,8 +37826,8 @@ var seatRunErrorLogSchema = runErrorLogSchema.extend({
   error_class: external_exports.string().nullable()
 }).strict();
 var seatRunDetailSchema = seatRunSchema.extend({
-  task_id: uuidSchema20.nullable(),
-  work_order_id: uuidSchema20.nullable(),
+  task_id: uuidSchema21.nullable(),
+  work_order_id: uuidSchema21.nullable(),
   transcript_ref: external_exports.string(),
   // DER-1913: null = usage UNKNOWN — a Codex / read-status / timeout / spawn-error
   // runner turn reports no model-usage envelope, so the run records no token count.
@@ -37606,8 +37837,8 @@ var seatRunDetailSchema = seatRunSchema.extend({
   outcome: external_exports.record(external_exports.string(), external_exports.unknown()),
   error_logs: external_exports.array(seatRunErrorLogSchema),
   skill_activations: external_exports.array(external_exports.object({
-    skill_activation_id: uuidSchema20,
-    skill_version_id: uuidSchema20,
+    skill_activation_id: uuidSchema21,
+    skill_version_id: uuidSchema21,
     slug: external_exports.string().min(1),
     name: external_exports.string().min(1),
     version: external_exports.number().int().positive(),
@@ -37624,23 +37855,23 @@ var seatRunDetailSchema = seatRunSchema.extend({
   transcript: sessionTranscriptReadResultSchema.nullable().optional()
 }).strict();
 var agentListRunsOutputSchema = external_exports.object({
-  seat_id: uuidSchema20,
+  seat_id: uuidSchema21,
   summary: seatTrustSummarySchema,
   runs: external_exports.array(seatRunSchema)
 }).strict();
 var agentGetRunOutputSchema = external_exports.object({
-  seat_id: uuidSchema20,
+  seat_id: uuidSchema21,
   run: seatRunDetailSchema
 }).strict();
 var agentListToolCallsInputSchema = external_exports.object({
-  seat_id: uuidSchema20,
+  seat_id: uuidSchema21,
   limit: external_exports.number().int().min(1).max(200).default(50),
   // When true, return only HELD (non-allowed) tool calls — the governance view.
   held_only: external_exports.boolean().default(false)
 }).strict();
 var seatToolCallSchema = external_exports.object({
-  tool_call_id: uuidSchema20,
-  run_id: uuidSchema20.nullable(),
+  tool_call_id: uuidSchema21,
+  run_id: uuidSchema21.nullable(),
   tool_name: external_exports.string(),
   guard_result: guardResultSchema,
   manifest_clause: external_exports.string().nullable(),
@@ -37649,13 +37880,13 @@ var seatToolCallSchema = external_exports.object({
   finished_at: isoDateTime7.nullable()
 }).strict();
 var agentListToolCallsOutputSchema = external_exports.object({
-  seat_id: uuidSchema20,
+  seat_id: uuidSchema21,
   summary: seatTrustSummarySchema,
   tool_calls: external_exports.array(seatToolCallSchema)
 }).strict();
 var agentWatchRunInputSchema = external_exports.object({
-  seat_id: uuidSchema20,
-  run_id: uuidSchema20
+  seat_id: uuidSchema21,
+  run_id: uuidSchema21
 }).strict();
 var runWatchCurrentStateSchema = external_exports.object({
   state: workProgressStateSchema,
@@ -37676,7 +37907,7 @@ var runWatchHeartbeatSchema = external_exports.object({
   reasons: external_exports.array(external_exports.string())
 }).strict();
 var agentWatchRunOutputSchema = external_exports.object({
-  seat_id: uuidSchema20,
+  seat_id: uuidSchema21,
   run: seatRunSchema,
   // the lean run row (status/lane/model/counts/timestamps)
   is_live: external_exports.boolean(),
@@ -37700,16 +37931,16 @@ var deliverableLinkSchema = external_exports.object({
   kind: external_exports.enum(["internal", "linear", "github", "external"])
 }).strict();
 var deliverableIdSchema = external_exports.union([
-  uuidSchema20,
+  uuidSchema21,
   external_exports.string().regex(/^run:[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i)
 ]);
 var deliverableRowSchema = external_exports.object({
   id: deliverableIdSchema,
-  seat_id: uuidSchema20,
-  agent_id: uuidSchema20.nullable(),
-  run_id: uuidSchema20.nullable(),
-  task_id: uuidSchema20.nullable(),
-  work_order_id: uuidSchema20.nullable(),
+  seat_id: uuidSchema21,
+  agent_id: uuidSchema21.nullable(),
+  run_id: uuidSchema21.nullable(),
+  task_id: uuidSchema21.nullable(),
+  work_order_id: uuidSchema21.nullable(),
   kind: deliverableKindSchema,
   title: external_exports.string(),
   summary: external_exports.string().nullable(),
@@ -37729,13 +37960,13 @@ var deliverableRowSchema = external_exports.object({
   receipt_presence: receiptPresenceSchema
 }).strict();
 var deliverableListInputSchema = external_exports.object({
-  seat_id: uuidSchema20
+  seat_id: uuidSchema21
 }).strict();
 var deliverableListOutputSchema = external_exports.object({
   deliverables: external_exports.array(deliverableRowSchema)
 }).strict();
 var deliverableGetInputSchema = external_exports.object({
-  seat_id: uuidSchema20,
+  seat_id: uuidSchema21,
   deliverable_id: deliverableIdSchema
 }).strict();
 var deliverableGetOutputSchema = external_exports.object({
@@ -37743,12 +37974,12 @@ var deliverableGetOutputSchema = external_exports.object({
 }).strict();
 var mcpTokenListInputSchema = external_exports.object({
   include_revoked: external_exports.boolean().default(false),
-  seat_id: uuidSchema20.optional()
+  seat_id: uuidSchema21.optional()
 }).strict();
 var mcpTokenMetadataSchema = external_exports.object({
-  token_id: uuidSchema20,
+  token_id: uuidSchema21,
   scope: mcpScopeSchema,
-  seat_id: uuidSchema20.nullable(),
+  seat_id: uuidSchema21.nullable(),
   created_at: isoDateTime7,
   last_seen_at: isoDateTime7.nullable(),
   // DER-830: expires_at is now always present (the column is NOT NULL).
@@ -37762,29 +37993,29 @@ var mcpTokenListOutputSchema = external_exports.object({
   tokens: external_exports.array(mcpTokenMetadataSchema)
 }).strict();
 var errorLogListInputSchema = external_exports.object({
-  seat_id: uuidSchema20.optional(),
+  seat_id: uuidSchema21.optional(),
   source: external_exports.enum(["run", "llm", "tool", "mcp", "runner", "integration", "job", "web"]).optional(),
   severity: external_exports.enum(["warning", "error", "critical"]).optional(),
   resolved: external_exports.enum(["active", "acknowledged", "resolved", "all"]).default("active"),
   limit: external_exports.number().int().min(1).max(200).default(50)
 }).strict();
 var errorLogListItemSchema = external_exports.object({
-  error_log_id: uuidSchema20,
+  error_log_id: uuidSchema21,
   source: external_exports.enum(["run", "llm", "tool", "mcp", "runner", "integration", "job", "web"]),
   severity: external_exports.enum(["warning", "error", "critical"]),
   code: external_exports.string().nullable(),
   message: external_exports.string(),
-  seat_id: uuidSchema20.nullable(),
-  agent_id: uuidSchema20.nullable(),
-  run_id: uuidSchema20.nullable(),
+  seat_id: uuidSchema21.nullable(),
+  agent_id: uuidSchema21.nullable(),
+  run_id: uuidSchema21.nullable(),
   disposition: external_exports.enum(["active", "acknowledged", "resolved", "superseded"]),
   resolved_at: isoDateTime7.nullable(),
-  resolved_by: uuidSchema20.nullable(),
+  resolved_by: uuidSchema21.nullable(),
   resolution_reason: external_exports.string().nullable(),
-  linked_task_id: uuidSchema20.nullable(),
-  linked_issue_id: uuidSchema20.nullable(),
+  linked_task_id: uuidSchema21.nullable(),
+  linked_issue_id: uuidSchema21.nullable(),
   linked_pr_ref: external_exports.string().nullable(),
-  superseded_by_id: uuidSchema20.nullable(),
+  superseded_by_id: uuidSchema21.nullable(),
   created_at: isoDateTime7
 }).strict();
 var errorLogListOutputSchema = external_exports.object({
@@ -37792,29 +38023,29 @@ var errorLogListOutputSchema = external_exports.object({
   total: external_exports.number().int().nonnegative()
 }).strict();
 var errorLogResolveInputSchema = external_exports.object({
-  error_log_id: uuidSchema20,
+  error_log_id: uuidSchema21,
   reason: external_exports.string().trim().min(1),
   disposition: external_exports.enum(["acknowledged", "resolved"]).default("acknowledged"),
-  linked_task_id: uuidSchema20.optional(),
-  linked_issue_id: uuidSchema20.optional(),
+  linked_task_id: uuidSchema21.optional(),
+  linked_issue_id: uuidSchema21.optional(),
   linked_pr_ref: external_exports.string().trim().min(1).optional()
 }).strict();
 var errorLogResolveOutputSchema = external_exports.object({
-  error_log_id: uuidSchema20,
+  error_log_id: uuidSchema21,
   disposition: external_exports.enum(["acknowledged", "resolved"]),
   resolved_at: isoDateTime7
 }).strict();
 var errorLogSupersedeInputSchema = external_exports.object({
-  error_log_id: uuidSchema20,
-  new_error_log_id: uuidSchema20,
+  error_log_id: uuidSchema21,
+  new_error_log_id: uuidSchema21,
   reason: external_exports.string().trim().min(1),
-  linked_task_id: uuidSchema20.optional(),
-  linked_issue_id: uuidSchema20.optional(),
+  linked_task_id: uuidSchema21.optional(),
+  linked_issue_id: uuidSchema21.optional(),
   linked_pr_ref: external_exports.string().trim().min(1).optional()
 }).strict();
 var errorLogSupersedeOutputSchema = external_exports.object({
-  error_log_id: uuidSchema20,
-  superseded_by_id: uuidSchema20,
+  error_log_id: uuidSchema21,
+  superseded_by_id: uuidSchema21,
   disposition: external_exports.literal("superseded"),
   resolved_at: isoDateTime7
 }).strict();
@@ -37825,17 +38056,17 @@ var staleCandidatesInputSchema = external_exports.object({
   limit: external_exports.number().int().min(1).max(200).default(50)
 }).strict();
 var errorLogStaleCandidateSchema = external_exports.object({
-  error_log_id: uuidSchema20,
+  error_log_id: uuidSchema21,
   source: external_exports.enum(["run", "llm", "tool", "mcp", "runner", "integration", "job", "web"]),
   severity: external_exports.enum(["warning", "error", "critical"]),
   code: external_exports.string().nullable(),
   message: external_exports.string(),
-  seat_id: uuidSchema20.nullable(),
+  seat_id: uuidSchema21.nullable(),
   occurrence_count: external_exports.number().int(),
   last_seen_at: isoDateTime7,
   created_at: isoDateTime7,
   days_stale: external_exports.number().int(),
-  linked_issue_id: uuidSchema20.nullable(),
+  linked_issue_id: uuidSchema21.nullable(),
   linked_issue_resolved: external_exports.boolean(),
   confidence: staleCandidateConfidenceSchema,
   evidence: staleCandidateEvidenceSchema
@@ -37845,8 +38076,8 @@ var errorLogStaleCandidatesOutputSchema = external_exports.object({
   total: external_exports.number().int().nonnegative()
 }).strict();
 var escalationStaleCandidateSchema = external_exports.object({
-  escalation_id: uuidSchema20,
-  seat_id: uuidSchema20,
+  escalation_id: uuidSchema21,
+  seat_id: uuidSchema21,
   seat_name: external_exports.string(),
   reason: external_exports.string(),
   status: external_exports.literal("open"),
@@ -37862,14 +38093,14 @@ var escalationStaleCandidatesOutputSchema = external_exports.object({
   total: external_exports.number().int().nonnegative()
 }).strict();
 var frictionStaleCandidateSchema = external_exports.object({
-  issue_id: uuidSchema20,
+  issue_id: uuidSchema21,
   summary: external_exports.string(),
   severity: external_exports.enum(["low", "med", "high", "critical"]),
   status: external_exports.enum(["open", "diagnosing"]),
   created_at: isoDateTime7,
   updated_at: isoDateTime7,
   days_stale: external_exports.number().int(),
-  action_task_id: uuidSchema20.nullable(),
+  action_task_id: uuidSchema21.nullable(),
   action_task_status: external_exports.string().nullable(),
   action_task_done: external_exports.boolean(),
   confidence: staleCandidateConfidenceSchema,
@@ -37880,20 +38111,20 @@ var frictionStaleCandidatesOutputSchema = external_exports.object({
   total: external_exports.number().int().nonnegative()
 }).strict();
 var errorLogBulkResolveInputSchema = external_exports.object({
-  error_log_ids: external_exports.array(uuidSchema20).min(1).max(200),
+  error_log_ids: external_exports.array(uuidSchema21).min(1).max(200),
   reason: external_exports.string().trim().min(1),
   disposition: external_exports.enum(["acknowledged", "resolved"]).default("resolved")
 }).strict();
 var errorLogBulkResolveSkippedSchema = external_exports.object({
-  error_log_id: uuidSchema20,
+  error_log_id: uuidSchema21,
   reason: external_exports.string()
 }).strict();
 var errorLogBulkResolveFailedSchema = external_exports.object({
-  error_log_id: uuidSchema20,
+  error_log_id: uuidSchema21,
   reason: external_exports.string()
 }).strict();
 var errorLogBulkResolveOutputSchema = external_exports.object({
-  resolved: external_exports.array(uuidSchema20),
+  resolved: external_exports.array(uuidSchema21),
   skipped: external_exports.array(errorLogBulkResolveSkippedSchema),
   failed: external_exports.array(errorLogBulkResolveFailedSchema),
   resolved_count: external_exports.number().int().nonnegative(),
@@ -37902,19 +38133,19 @@ var errorLogBulkResolveOutputSchema = external_exports.object({
   total: external_exports.number().int().nonnegative()
 }).strict();
 var escalationBulkResolveInputSchema = external_exports.object({
-  escalation_ids: external_exports.array(uuidSchema20).min(1).max(200),
+  escalation_ids: external_exports.array(uuidSchema21).min(1).max(200),
   reason: external_exports.string().trim().min(1)
 }).strict();
 var escalationBulkResolveSkippedSchema = external_exports.object({
-  escalation_id: uuidSchema20,
+  escalation_id: uuidSchema21,
   reason: external_exports.string()
 }).strict();
 var escalationBulkResolveFailedSchema = external_exports.object({
-  escalation_id: uuidSchema20,
+  escalation_id: uuidSchema21,
   reason: external_exports.string()
 }).strict();
 var escalationBulkResolveOutputSchema = external_exports.object({
-  resolved: external_exports.array(uuidSchema20),
+  resolved: external_exports.array(uuidSchema21),
   skipped: external_exports.array(escalationBulkResolveSkippedSchema),
   failed: external_exports.array(escalationBulkResolveFailedSchema),
   resolved_count: external_exports.number().int().nonnegative(),
@@ -37923,19 +38154,19 @@ var escalationBulkResolveOutputSchema = external_exports.object({
   total: external_exports.number().int().nonnegative()
 }).strict();
 var frictionBulkResolveInputSchema = external_exports.object({
-  issue_ids: external_exports.array(uuidSchema20).min(1).max(200),
+  issue_ids: external_exports.array(uuidSchema21).min(1).max(200),
   root_cause: external_exports.string().trim().min(1)
 }).strict();
 var frictionBulkResolveSkippedSchema = external_exports.object({
-  issue_id: uuidSchema20,
+  issue_id: uuidSchema21,
   reason: external_exports.string()
 }).strict();
 var frictionBulkResolveFailedSchema = external_exports.object({
-  issue_id: uuidSchema20,
+  issue_id: uuidSchema21,
   reason: external_exports.string()
 }).strict();
 var frictionBulkResolveOutputSchema = external_exports.object({
-  resolved: external_exports.array(uuidSchema20),
+  resolved: external_exports.array(uuidSchema21),
   skipped: external_exports.array(frictionBulkResolveSkippedSchema),
   failed: external_exports.array(frictionBulkResolveFailedSchema),
   resolved_count: external_exports.number().int().nonnegative(),
@@ -37945,10 +38176,10 @@ var frictionBulkResolveOutputSchema = external_exports.object({
 }).strict();
 var runHeartbeatStateSchema = external_exports.enum(["working", "quiet_healthy", "recovered", "stalled", "unavailable"]);
 var agentRunHeartbeatsInputSchema = external_exports.object({
-  seat_ids: external_exports.array(uuidSchema20).min(1).max(200).optional()
+  seat_ids: external_exports.array(uuidSchema21).min(1).max(200).optional()
 }).strict();
 var runHeartbeatSeatRollupSchema = external_exports.object({
-  seat_id: uuidSchema20,
+  seat_id: uuidSchema21,
   state: runHeartbeatStateSchema,
   stalled: external_exports.boolean(),
   run_count: external_exports.number().int().nonnegative(),
@@ -38068,13 +38299,13 @@ var runSummaryOutputSchema = external_exports.object({
 });
 
 // ../../packages/protocol/src/system-health.ts
-var uuidSchema21 = external_exports.string().uuid();
+var uuidSchema22 = external_exports.string().uuid();
 var isoDateTime9 = external_exports.string().datetime({ offset: true });
 var systemHealthCallerKindSchema = external_exports.enum(["tenant_admin", "member", "seat_token"]);
 var systemHealthCallerSchema = external_exports.object({
   kind: systemHealthCallerKindSchema,
-  seat_id: uuidSchema21.optional(),
-  seat_ids: external_exports.array(uuidSchema21).min(1).optional()
+  seat_id: uuidSchema22.optional(),
+  seat_ids: external_exports.array(uuidSchema22).min(1).optional()
 }).strict();
 var systemHealthVerdictSchema = external_exports.enum(["healthy", "degraded", "blocked"]);
 var systemHealthSeveritySchema = external_exports.enum(["info", "warning", "critical"]);
@@ -38112,18 +38343,18 @@ var systemHealthFindingSchema = external_exports.object({
   summary: external_exports.string().min(1),
   detail: external_exports.string().min(1),
   remediation: systemHealthActionSchema,
-  seat_id: uuidSchema21.nullable(),
-  goal_id: uuidSchema21.nullable(),
-  run_id: uuidSchema21.nullable(),
-  issue_id: uuidSchema21.nullable(),
-  task_id: uuidSchema21.nullable(),
-  error_log_id: uuidSchema21.nullable()
+  seat_id: uuidSchema22.nullable(),
+  goal_id: uuidSchema22.nullable(),
+  run_id: uuidSchema22.nullable(),
+  issue_id: uuidSchema22.nullable(),
+  task_id: uuidSchema22.nullable(),
+  error_log_id: uuidSchema22.nullable()
 }).strict();
 var systemHealthScopeSchema = external_exports.object({
   mode: systemHealthScopeModeSchema,
-  root_seat_ids: external_exports.array(uuidSchema21),
-  included_seat_ids: external_exports.array(uuidSchema21),
-  requested_seat_id: uuidSchema21.nullable(),
+  root_seat_ids: external_exports.array(uuidSchema22),
+  included_seat_ids: external_exports.array(uuidSchema22),
+  requested_seat_id: uuidSchema22.nullable(),
   total_seat_count: external_exports.number().int().nonnegative()
 }).strict();
 var systemHealthFleetSectionSchema = external_exports.object({
@@ -38180,7 +38411,7 @@ var systemHealthSectionsSchema = external_exports.object({
   sync: systemHealthSyncSectionSchema
 }).strict();
 var systemHealthInputSchema = external_exports.object({
-  seat_id: uuidSchema21.optional()
+  seat_id: uuidSchema22.optional()
 }).strict();
 var systemHealthCheckInputSchema = systemHealthInputSchema.extend({
   caller: systemHealthCallerSchema
@@ -38207,10 +38438,10 @@ var baserowFilteredCountInputSchema = external_exports.object({
 }).strict();
 
 // ../../packages/protocol/src/signal-report.ts
-var uuidSchema22 = external_exports.string().uuid();
+var uuidSchema23 = external_exports.string().uuid();
 var dateOnlySchema3 = external_exports.string().regex(/^\d{4}-\d{2}-\d{2}$/, "expected YYYY-MM-DD");
 var signalReportInputSchema = external_exports.object({
-  measurable_id: uuidSchema22,
+  measurable_id: uuidSchema23,
   value: external_exports.number().finite(),
   // Optional; defaults to the measurable's current period (resolved in the
   // command against the measurable's own cadence via the canonical bounds).
@@ -38221,8 +38452,8 @@ var signalReportInputSchema = external_exports.object({
   confidence: external_exports.enum(["low", "medium", "high"]).optional()
 }).strict();
 var signalReportOutputSchema = external_exports.object({
-  reading_id: uuidSchema22,
-  measurable_id: uuidSchema22,
+  reading_id: uuidSchema23,
+  measurable_id: uuidSchema23,
   // Always false: an agent-sourced reading is a draft until a human confirms it.
   confirmed: external_exports.literal(false)
 }).strict();
@@ -38253,12 +38484,12 @@ var signalReadingProposalSchema = external_exports.object({
 });
 
 // ../../packages/protocol/src/signal-draft-first-readings.ts
-var uuidSchema23 = external_exports.string().uuid();
+var uuidSchema24 = external_exports.string().uuid();
 var signalDraftFirstReadingsInputSchema = external_exports.object({
-  measurable_id: uuidSchema23
+  measurable_id: uuidSchema24
 }).strict();
 var signalDraftFirstReadingsOutputSchema = external_exports.object({
-  measurable_id: uuidSchema23,
+  measurable_id: uuidSchema24,
   // The live pull outcome, surfaced verbatim so the UI can explain a no-datapoint
   // result honestly ("source polled, nothing came back") rather than silently.
   outcome: external_exports.enum(["ok", "blocked", "error"]),
@@ -38266,7 +38497,7 @@ var signalDraftFirstReadingsOutputSchema = external_exports.object({
   // Never fabricates back-dated history the source cannot actually produce.
   drafted: external_exports.number().int().min(0).max(1),
   // Present only when drafted === 1.
-  reading_id: uuidSchema23.optional(),
+  reading_id: uuidSchema24.optional(),
   value: external_exports.number().finite().optional(),
   period_start: external_exports.string().regex(/^\d{4}-\d{2}-\d{2}$/, "expected YYYY-MM-DD").optional(),
   // Present only when drafted === 0: a short, non-secret machine reason
@@ -39974,7 +40205,7 @@ var softwareFactoryBudgetExhaustedEventSchema = external_exports.object({
 }).strict();
 
 // ../../packages/protocol/src/sync-brief.ts
-var uuidSchema24 = external_exports.string().uuid();
+var uuidSchema25 = external_exports.string().uuid();
 var dateSchema = external_exports.string().regex(/^\d{4}-\d{2}-\d{2}$/);
 var syncBriefGapSchema = external_exports.object({
   section: external_exports.enum(["exceptions", "goal_deltas", "task_review", "friction", "agent_activity"]),
@@ -39987,8 +40218,8 @@ var sectionSchema = (itemSchema) => external_exports.object({
   flagged_gaps: external_exports.array(syncBriefGapSchema)
 }).strict();
 var syncBriefExceptionSchema = external_exports.object({
-  measurable_id: uuidSchema24,
-  seat_id: uuidSchema24,
+  measurable_id: uuidSchema25,
+  seat_id: uuidSchema25,
   seat_name: external_exports.string().min(1),
   name: external_exports.string().min(1),
   state: external_exports.enum(["risk", "crit", "pending"]),
@@ -39999,8 +40230,8 @@ var syncBriefExceptionSchema = external_exports.object({
   freshness: external_exports.enum(["fresh", "due", "stale", "awaiting_first_reading", "not_expected"]).optional()
 }).strict();
 var syncBriefGoalDeltaSchema = external_exports.object({
-  goal_id: uuidSchema24,
-  seat_id: uuidSchema24.nullable(),
+  goal_id: uuidSchema25,
+  seat_id: uuidSchema25.nullable(),
   seat_name: external_exports.string().nullable(),
   title: external_exports.string().min(1),
   status: external_exports.enum(["on", "off", "done", "dropped"]),
@@ -40027,22 +40258,22 @@ var syncBriefTaskReviewSchema = external_exports.object({
   previous_done_rate: external_exports.number().min(0).max(1),
   delta: external_exports.number().min(-1).max(1),
   stalled: external_exports.array(external_exports.object({
-    task_id: uuidSchema24,
-    owner_seat_id: uuidSchema24,
+    task_id: uuidSchema25,
+    owner_seat_id: uuidSchema25,
     owner_seat_name: external_exports.string().min(1),
     title: external_exports.string().min(1),
     due_on: dateSchema,
     stalled_at: external_exports.string().nullable()
   }).strict()),
   overdue_by_owner: external_exports.array(external_exports.object({
-    owner_seat_id: uuidSchema24,
+    owner_seat_id: uuidSchema25,
     owner_seat_name: external_exports.string().min(1),
     overdue_count: external_exports.number().int().nonnegative()
   }).strict())
 }).strict();
 var syncBriefIssueSchema = external_exports.object({
-  issue_id: uuidSchema24,
-  raised_by_seat_id: uuidSchema24,
+  issue_id: uuidSchema25,
+  raised_by_seat_id: uuidSchema25,
   raised_by_seat_name: external_exports.string().min(1),
   summary: external_exports.string().min(1),
   severity: external_exports.enum(["low", "med", "high", "critical"]),
@@ -40059,9 +40290,9 @@ var syncBriefActionItemTrendSchema = external_exports.object({
   has_prior: external_exports.boolean()
 }).strict();
 var syncBriefCascadeAtRiskSchema = external_exports.object({
-  goal_id: uuidSchema24,
+  goal_id: uuidSchema25,
   title: external_exports.string().min(1),
-  seat_id: uuidSchema24.nullable(),
+  seat_id: uuidSchema25.nullable(),
   progress_pct: external_exports.number().int().min(0).max(100),
   classification: external_exports.enum(["at_risk", "projected_miss"]),
   behind_days: external_exports.number().nullable(),
@@ -40070,7 +40301,7 @@ var syncBriefCascadeAtRiskSchema = external_exports.object({
   target_date: external_exports.string().date().nullable().optional()
 }).strict();
 var syncBriefRunHeartbeatStalledSeatSchema = external_exports.object({
-  seat_id: uuidSchema24,
+  seat_id: uuidSchema25,
   current_phase: external_exports.string().nullable(),
   stalled_run_count: external_exports.number().int().nonnegative()
 }).strict();
@@ -40095,8 +40326,8 @@ var syncBriefRunHeartbeatRollupSchema = external_exports.object({
   stalled_seats: external_exports.array(syncBriefRunHeartbeatStalledSeatSchema)
 }).strict();
 var syncBriefAgentActivitySchema = external_exports.object({
-  agent_id: uuidSchema24,
-  seat_id: uuidSchema24,
+  agent_id: uuidSchema25,
+  seat_id: uuidSchema25,
   seat_name: external_exports.string().min(1),
   run_count: external_exports.number().int().nonnegative(),
   failed_run_count: external_exports.number().int().nonnegative(),
@@ -40109,11 +40340,11 @@ var syncBriefAgentActivitySchema = external_exports.object({
 var syncBriefSchema = external_exports.object({
   schema_version: external_exports.literal(1),
   tenant: external_exports.object({
-    id: uuidSchema24,
+    id: uuidSchema25,
     name: external_exports.string().min(1)
   }).strict(),
   cluster: external_exports.object({
-    id: uuidSchema24,
+    id: uuidSchema25,
     name: external_exports.string().min(1)
   }).strict().nullable(),
   period: external_exports.object({
@@ -40230,11 +40461,11 @@ var usageSnapshotOutputSchema = external_exports.object({
 }).strict();
 
 // ../../packages/protocol/src/event-payloads.ts
-var uuidSchema25 = external_exports.string().uuid();
+var uuidSchema26 = external_exports.string().uuid();
 var evidenceSchema = external_exports.array(external_exports.unknown());
 var statusEventPayloadSchema = external_exports.object({
   measurables: external_exports.array(external_exports.object({
-    id: uuidSchema25,
+    id: uuidSchema26,
     value: external_exports.number().finite(),
     // DER-1045: an optional, non-secret citation for an agent-proposed reading
     // (signal.report) — where the number came from + the agent's confidence.
@@ -40269,7 +40500,7 @@ var statusEventPayloadSchema = external_exports.object({
     }).strict().optional()
   }).strict()).optional(),
   goals: external_exports.array(external_exports.object({
-    id: uuidSchema25,
+    id: uuidSchema26,
     state: external_exports.enum(["on", "off"]),
     note: external_exports.string().min(1).optional(),
     // DER-2214: structured status-event attribution so "deliberately human-pinned"
@@ -40301,8 +40532,8 @@ var escalationEventPayloadSchema = escalationRaiseInputSchema.extend({
 }).strict();
 var issueEventPayloadSchema = external_exports.object({
   summary: external_exports.string().min(1),
-  blocking_goal_id: uuidSchema25.optional(),
-  broken_measurable_id: uuidSchema25.optional(),
+  blocking_goal_id: uuidSchema26.optional(),
+  broken_measurable_id: uuidSchema26.optional(),
   evidence: evidenceSchema,
   severity: external_exports.enum(["low", "med", "high", "critical"]),
   // DER-1978 (S2): an OPTIONAL short human-readable title written at creation.
@@ -40314,7 +40545,7 @@ var issueEventPayloadSchema = external_exports.object({
 }).strict();
 
 // ../../packages/protocol/src/event-internal-payloads.ts
-var uuidSchema26 = external_exports.string().uuid();
+var uuidSchema27 = external_exports.string().uuid();
 var internalEventObjectSchema = external_exports.record(external_exports.string(), external_exports.unknown()).refine((payload) => !Array.isArray(payload), "Internal event payload must be an object");
 var actionEventPayloadSchema = external_exports.object({ action: external_exports.string().min(1) }).passthrough();
 function authoritativePrefixUnion(branches, authoritative) {
@@ -40336,25 +40567,25 @@ function authoritativePrefixUnion(branches, authoritative) {
 }
 var inviteCreatedEventPayloadSchema = external_exports.object({
   action: external_exports.literal("invite.created"),
-  invite_id: uuidSchema26,
+  invite_id: uuidSchema27,
   email: external_exports.string().email(),
   role: memberRoleSchema,
   member_type: memberTypeSchema,
   access_profile: memberAccessProfileSchema,
   aicos_access_scope: aicosAccessScopeSchema,
-  invited_by: uuidSchema26
+  invited_by: uuidSchema27
 }).strict();
 var inviteRevokedEventPayloadSchema = external_exports.object({
   action: external_exports.literal("invite.revoked"),
-  invite_id: uuidSchema26,
-  revoked_by: uuidSchema26
+  invite_id: uuidSchema27,
+  revoked_by: uuidSchema27
 }).strict();
 var inviteAcceptedEventPayloadSchema = external_exports.object({
   action: external_exports.literal("invite.accepted"),
-  invite_id: uuidSchema26,
-  user_id: uuidSchema26,
-  membership_id: uuidSchema26,
-  linked_seat_ids: external_exports.array(uuidSchema26)
+  invite_id: uuidSchema27,
+  user_id: uuidSchema27,
+  membership_id: uuidSchema27,
+  linked_seat_ids: external_exports.array(uuidSchema27)
 }).strict();
 var inviteLifecycleEventPayloadSchema = external_exports.union([
   inviteCreatedEventPayloadSchema,
@@ -40419,14 +40650,14 @@ var heldToolActionReplaySchema = external_exports.object({
 }).strict();
 
 // ../../packages/protocol/src/operating.ts
-var uuidSchema27 = external_exports.string().uuid();
+var uuidSchema28 = external_exports.string().uuid();
 var taskListInputSchema = external_exports.object({}).strict();
 var operatingTaskSchema = external_exports.object({
-  id: uuidSchema27,
+  id: uuidSchema28,
   title: external_exports.string(),
   description: external_exports.string().nullable(),
-  from_seat_id: uuidSchema27.nullable(),
-  goal_id: uuidSchema27.nullable(),
+  from_seat_id: uuidSchema28.nullable(),
+  goal_id: uuidSchema28.nullable(),
   acceptance_criteria: external_exports.unknown(),
   due_on: external_exports.string().nullable(),
   status: external_exports.string()
@@ -40435,54 +40666,54 @@ var taskListOutputSchema = external_exports.object({
   tasks: external_exports.array(operatingTaskSchema)
 }).strict();
 var taskAcceptInputSchema = external_exports.object({
-  id: uuidSchema27
+  id: uuidSchema28
 }).strict();
 var taskConfirmProposalInputSchema = external_exports.object({
-  id: uuidSchema27
+  id: uuidSchema28
 }).strict();
 var taskMutationOutputSchema = external_exports.object({
   task: external_exports.object({
-    id: uuidSchema27,
+    id: uuidSchema28,
     status: external_exports.string()
   }).strict()
 }).strict();
 var taskDeclineInputSchema = external_exports.object({
-  id: uuidSchema27,
+  id: uuidSchema28,
   reason: external_exports.string().min(1)
 }).strict();
 var taskDeclineOutputSchema = external_exports.object({
   task: external_exports.object({
-    id: uuidSchema27,
+    id: uuidSchema28,
     status: external_exports.string(),
     decline_reason: external_exports.string()
   }).strict()
 }).strict();
 var taskCompleteInputSchema = external_exports.object({
-  id: uuidSchema27,
+  id: uuidSchema28,
   summary: external_exports.string().min(1),
   artifacts: external_exports.unknown().optional()
 }).strict();
 var taskCompleteOutputSchema = external_exports.object({
-  task_id: uuidSchema27,
-  event_id: uuidSchema27,
+  task_id: uuidSchema28,
+  event_id: uuidSchema28,
   type: external_exports.literal("handoff")
 }).strict();
 var statusRecordOutputSchema = external_exports.object({
-  event_id: uuidSchema27,
+  event_id: uuidSchema28,
   type: external_exports.literal("status")
 }).strict();
 var frictionFileIssueInputSchema = issueEventPayloadSchema.extend({
   source_key: external_exports.string().trim().min(1).max(200).optional()
 }).strict();
 var duplicateFrictionCandidateSchema = external_exports.object({
-  issue_id: uuidSchema27,
+  issue_id: uuidSchema28,
   summary: external_exports.string().min(1),
   // pg_trgm similarity in [0, 1]; higher is more similar.
   similarity: external_exports.number().min(0).max(1)
 }).strict();
 var frictionFileIssueOutputSchema = external_exports.object({
-  event_id: uuidSchema27,
-  issue_id: uuidSchema27,
+  event_id: uuidSchema28,
+  issue_id: uuidSchema28,
   type: external_exports.literal("issue"),
   // DER-1522: likely-duplicate candidates detected before creation. Recommend,
   // never block — filing always proceeds; empty when nothing crossed the
@@ -40496,12 +40727,12 @@ var workLogInputSchema = external_exports.object({
   note: external_exports.string().min(1)
 }).strict();
 var workLogOutputSchema = external_exports.object({
-  event_id: uuidSchema27,
+  event_id: uuidSchema28,
   type: external_exports.literal("task")
 }).strict();
 var escalationRaiseOutputSchema = external_exports.object({
-  event_id: uuidSchema27,
-  escalation_id: uuidSchema27,
+  event_id: uuidSchema28,
+  escalation_id: uuidSchema28,
   type: external_exports.literal("escalation")
 }).strict();
 var deliverableKindSchema2 = external_exports.enum(["brief", "work_evidence", "artifact", "report", "other"]);
@@ -40560,7 +40791,7 @@ var deliverableRejectOutputSchema = external_exports.object({
 }).strict();
 
 // ../../packages/protocol/src/steward.ts
-var uuidSchema28 = external_exports.string().uuid();
+var uuidSchema29 = external_exports.string().uuid();
 var escalationStatusSchema = external_exports.enum([
   "open",
   "approved",
@@ -40569,18 +40800,18 @@ var escalationStatusSchema = external_exports.enum([
 ]);
 var stewardReplayActionSummarySchema = external_exports.object({
   tool_name: external_exports.string(),
-  run_id: uuidSchema28
+  run_id: uuidSchema29
 }).strict();
 var stewardProposedToolCallSchema = external_exports.object({
   tool_name: external_exports.string(),
   args_summary: external_exports.unknown()
 }).strict();
 var stewardEscalationSchema = external_exports.object({
-  id: uuidSchema28,
-  seat_id: uuidSchema28,
+  id: uuidSchema29,
+  seat_id: uuidSchema29,
   seat_name: external_exports.string(),
   seat_type: external_exports.enum(["human", "agent", "hybrid"]),
-  steward_seat_id: uuidSchema28,
+  steward_seat_id: uuidSchema29,
   steward_seat_name: external_exports.string(),
   reason: external_exports.string(),
   // DER-1978 (S2): OPTIONAL short headline written at creation; null/absent when unset
@@ -40603,11 +40834,11 @@ var stewardEscalationSchema = external_exports.object({
   proposed_tool_call: stewardProposedToolCallSchema.optional(),
   recommended_action: external_exports.string().nullable(),
   status: escalationStatusSchema,
-  decided_by: uuidSchema28.nullable(),
+  decided_by: uuidSchema29.nullable(),
   decided_by_name: external_exports.string().nullable(),
   decided_at: external_exports.string().nullable(),
   decision_note: external_exports.string().nullable(),
-  issue_id: uuidSchema28.nullable(),
+  issue_id: uuidSchema29.nullable(),
   created_at: external_exports.string(),
   updated_at: external_exports.string()
 }).strict();
@@ -40618,27 +40849,27 @@ var escalationListOutputSchema = external_exports.object({
   escalations: external_exports.array(stewardEscalationSchema)
 }).strict();
 var escalationGetInputSchema = external_exports.object({
-  id: uuidSchema28
+  id: uuidSchema29
 }).strict();
 var escalationGetOutputSchema = external_exports.object({
   escalation: stewardEscalationSchema
 }).strict();
 var escalationResolveActionSchema = external_exports.enum(["approve", "convert_to_issue"]);
 var escalationResolveInputSchema = external_exports.object({
-  id: uuidSchema28,
+  id: uuidSchema29,
   action: escalationResolveActionSchema.optional(),
   rationale: external_exports.string().trim().min(1).optional()
 }).strict();
 var escalationRejectInputSchema = external_exports.object({
-  id: uuidSchema28,
+  id: uuidSchema29,
   rationale: external_exports.string().trim().min(1).optional()
 }).strict();
 var escalationDecisionOutputSchema = external_exports.object({
-  escalation_id: uuidSchema28,
+  escalation_id: uuidSchema29,
   status: escalationStatusSchema,
-  decision_id: uuidSchema28,
-  decided_by: uuidSchema28,
-  issue_id: uuidSchema28.nullable(),
+  decision_id: uuidSchema29,
+  decided_by: uuidSchema29,
+  issue_id: uuidSchema29.nullable(),
   // DER-1478: true when the resolved escalation carries a durable replay_action
   // (an approval-gated connector write) that the approvals path should actuate
   // after this decision is recorded. Omitted (not false) for non-connector
@@ -40819,7 +41050,7 @@ var workDetailsSchemas = {
 };
 
 // ../../packages/protocol/src/agent-grant-intervention.ts
-var uuidSchema29 = external_exports.string().uuid();
+var uuidSchema30 = external_exports.string().uuid();
 var agentGrantBlockerKindSchema = external_exports.enum([
   "rost_capability",
   "os_permission",
@@ -40836,16 +41067,16 @@ var agentGrantInterventionStatusSchema = external_exports.enum([
 ]);
 var agentGrantKindSchema = external_exports.enum(["allow_once", "permanent"]);
 var agentGrantInterventionSchema = external_exports.object({
-  id: uuidSchema29,
-  seat_id: uuidSchema29,
+  id: uuidSchema30,
+  seat_id: uuidSchema30,
   seat_name: external_exports.string().nullable(),
-  agent_id: uuidSchema29.nullable(),
+  agent_id: uuidSchema30.nullable(),
   // The source blocked attempt (audit link); null once the run is retention-purged.
-  run_id: uuidSchema29.nullable(),
+  run_id: uuidSchema30.nullable(),
   // The runner the blocker lives on, for os_permission repairs ("Open on Runner").
-  runner_id: uuidSchema29.nullable(),
+  runner_id: uuidSchema30.nullable(),
   // The linked continuation attempt, populated when a continuation is enqueued.
-  continuation_run_id: uuidSchema29.nullable(),
+  continuation_run_id: uuidSchema30.nullable(),
   blocker_kind: agentGrantBlockerKindSchema,
   status: agentGrantInterventionStatusSchema,
   // The specific capability/scope requested (e.g. "gmail.send"), when applicable.
@@ -40860,7 +41091,7 @@ var agentGrantInterventionSchema = external_exports.object({
   // True once the blocked attempt released its lease/compute (AC #2 clean termination).
   compute_released: external_exports.boolean(),
   grant_kind: agentGrantKindSchema.nullable(),
-  decided_by: uuidSchema29.nullable(),
+  decided_by: uuidSchema30.nullable(),
   decided_by_name: external_exports.string().nullable(),
   decided_at: external_exports.string().nullable(),
   expires_at: external_exports.string().nullable(),
@@ -40869,7 +41100,7 @@ var agentGrantInterventionSchema = external_exports.object({
 }).strict();
 var agentGrantInterventionListInputSchema = external_exports.object({
   // Optional seat filter (a seat-scoped caller is additionally clamped to its own seat).
-  seat_id: uuidSchema29.optional(),
+  seat_id: uuidSchema30.optional(),
   // When true, include decided/terminal records (declined/resumed/expired) too;
   // by default only the actionable open blocked/granted records are returned.
   include_decided: external_exports.boolean().optional()
@@ -40878,14 +41109,14 @@ var agentGrantInterventionListOutputSchema = external_exports.object({
   interventions: external_exports.array(agentGrantInterventionSchema)
 }).strict();
 var agentGrantInterventionGetInputSchema = external_exports.object({
-  id: uuidSchema29
+  id: uuidSchema30
 }).strict();
 var agentGrantInterventionGetOutputSchema = external_exports.object({
   intervention: agentGrantInterventionSchema
 }).strict();
 var agentGrantInterventionDecideActionSchema = external_exports.enum(["grant", "decline"]);
 var agentGrantInterventionDecideInputSchema = external_exports.object({
-  intervention_id: uuidSchema29,
+  intervention_id: uuidSchema30,
   action: agentGrantInterventionDecideActionSchema,
   // Defaults to allow_once. `permanent` never auto-widens — it returns
   // requires_charter_resign so the surface routes the human to a Charter re-sign.
@@ -40897,12 +41128,12 @@ var agentGrantInterventionDecideInputSchema = external_exports.object({
   rationale: external_exports.string().trim().min(1).max(2e3).optional()
 }).strict();
 var agentGrantInterventionDecideOutputSchema = external_exports.object({
-  intervention_id: uuidSchema29,
+  intervention_id: uuidSchema30,
   status: agentGrantInterventionStatusSchema,
-  continuation_run_id: uuidSchema29.nullable(),
+  continuation_run_id: uuidSchema30.nullable(),
   // The human decision row written for a grant/decline (invariant #7). Null only
   // when a permanent grant deferred to a Charter re-sign (no one-time decision made).
-  decision_id: uuidSchema29.nullable(),
+  decision_id: uuidSchema30.nullable(),
   // True when the human chose the permanent option — the surface must route to a
   // Charter re-sign; no authority was widened by this call (invariant #10).
   requires_charter_resign: external_exports.boolean(),
@@ -40916,12 +41147,12 @@ var agentGrantInterventionDecideOutputSchema = external_exports.object({
   enqueue_failed: external_exports.boolean()
 }).strict();
 var agentGrantInterventionResumeInputSchema = external_exports.object({
-  intervention_id: uuidSchema29
+  intervention_id: uuidSchema30
 }).strict();
 var agentGrantInterventionResumeOutputSchema = external_exports.object({
-  intervention_id: uuidSchema29,
+  intervention_id: uuidSchema30,
   status: agentGrantInterventionStatusSchema,
-  continuation_run_id: uuidSchema29.nullable(),
+  continuation_run_id: uuidSchema30.nullable(),
   enqueue_failed: external_exports.boolean()
 }).strict();
 
@@ -40939,7 +41170,7 @@ var eventTypes = [
   "task"
 ];
 var publicMessageTypes = ["status", "handoff", "escalation", "issue"];
-var uuidSchema30 = external_exports.string().uuid();
+var uuidSchema31 = external_exports.string().uuid();
 var evidenceSchema2 = external_exports.array(external_exports.unknown());
 var internalEventPayloadSchema = external_exports.record(external_exports.string(), external_exports.unknown()).refine((payload) => !Array.isArray(payload), "Internal event payload must be an object");
 var handoffEventPayloadSchema = external_exports.object({
@@ -40949,24 +41180,24 @@ var handoffEventPayloadSchema = external_exports.object({
     acceptance_criteria: external_exports.array(external_exports.string().min(1)),
     due: external_exports.string().datetime({ offset: true })
   }).strict(),
-  to_seat_id: uuidSchema30
+  to_seat_id: uuidSchema31
 }).strict();
 var intakeEventPayloadSchema = external_exports.discriminatedUnion("action", [
   external_exports.object({
     action: external_exports.literal("uploaded"),
-    document_id: uuidSchema30,
+    document_id: uuidSchema31,
     storage_ref: external_exports.string().min(1)
   }).strict(),
   external_exports.object({
     action: external_exports.literal("parsed"),
-    document_id: uuidSchema30,
+    document_id: uuidSchema31,
     mode: external_exports.enum(["source_tree", "function_first"]),
     seat_count: external_exports.number().int().nonnegative(),
     edge_count: external_exports.number().int().nonnegative()
   }).strict(),
   external_exports.object({
     action: external_exports.literal("failed"),
-    document_id: uuidSchema30,
+    document_id: uuidSchema31,
     reason: external_exports.string().min(1)
   }).strict(),
   external_exports.object({
@@ -41072,9 +41303,9 @@ var publicMessageTypeSchema = external_exports.enum(publicMessageTypes);
 var eventEnvelopeBaseSchema = external_exports.object({
   protocol: external_exports.literal(EVENT_PROTOCOL),
   type: eventTypeSchema,
-  seat_id: uuidSchema30.nullable(),
+  seat_id: uuidSchema31.nullable(),
   occurred_at: external_exports.string().datetime({ offset: true }),
-  goal_ancestry: external_exports.array(uuidSchema30),
+  goal_ancestry: external_exports.array(uuidSchema31),
   // DER-2381: optional so historical rows and every caller that hasn't been
   // updated yet keep parsing — but every per-type writer envelope below
   // extends THIS base and re-`.strict()`s, so adding it here propagates the
@@ -51820,7 +52051,7 @@ var referenceDocuments = [
     order: 10,
     title: "{{brand}} implementation method",
     summary: "The staged operating-system setup path used by humans, CLI sessions, MCP clients, and in-app agents.",
-    version: "2026-07-29.3",
+    version: "2026-07-29.4",
     public: true,
     audiences: ["human", "cli", "mcp", "in_app_agent"],
     stages: ["company_setup", "graph_design", "charter_design", "staffing", "operating_rhythm"],
@@ -51833,6 +52064,7 @@ var referenceDocuments = [
       "onboarding.create_invite",
       "onboarding.setup",
       "onboarding.rehearse",
+      "onboarding.activate",
       "onboarding.source_ingest",
       "seat.create",
       "seat.set_type",
@@ -51948,7 +52180,7 @@ The Compass is drafted, then activated by a human through supersession.
 
 \`onboarding.setup\`, \`onboarding.finish\`, \`compass.approve_version\`, \`compass.reject_draft\`, and \`compass.set\` are \`human_required\`. \`onboarding.source_ingest\` is a bootstrap-safe \`none\` prerequisite that retains bounded source bytes encrypted under the exact tenant/run, computes its digest and canonical parser manifest server-side, and remains permanently outside Trusted and Full Operator. \`onboarding.setup\` is the one-approval composite apply: it freezes the complete plan and live proof at staging, then rechecks them and applies Compass, cycle, Responsibility Graph, Charters, staffing, goals, Signals/readings, Frictions, tasks, and Sync scope in one transaction. A failure rolls back the entire application and leaves the confirmation pending.
 
-After setup succeeds, call \`onboarding.rehearse\` with the exact setup application, expected setup digest/revision, and a caller idempotency key. This is the implementation principal's one bounded \`execute\` exception: it is ungated because it can run only the setup receipt's exact agents in the sandbox, with no schedule arming, go-live transition, credential access, source mutation, or external communication. It rechecks the current Charter manifest, pinned published Skill versions and content hashes, schedule, execution lane, and canonical configuration digest under the same tenant/run boundary. A complete batch returns an immutable terminal batch receipt plus one immutable per-agent receipt with nonzero checked counts, runtime run ids, bounded tool previews/manifest holds/errors, and \`passed\` or \`failed\` status. Same-key/same-configuration retry returns that terminal evidence; a changed configuration conflicts instead of silently reusing it. The rehearsal never returns an approval URL and never stages activation. Only the later, separate \`onboarding.activate\` command may consume the exact terminal batch and unique per-agent evidence and stage the post-rehearsal activation decision.
+After setup succeeds, call \`onboarding.rehearse\` with the exact setup application, expected setup digest/revision, and a caller idempotency key. This is the implementation principal's one bounded \`execute\` exception: it is ungated because it can run only the setup receipt's exact agents in the sandbox, with no schedule arming, go-live transition, credential access, source mutation, or external communication. It rechecks the current Charter manifest, pinned published Skill versions and content hashes, schedule, execution lane, and canonical configuration digest under the same tenant/run boundary. A complete batch returns an immutable terminal batch receipt plus one immutable per-agent receipt with nonzero checked counts, runtime run ids, bounded tool previews/manifest holds/errors, and \`passed\` or \`failed\` status. Same-key/same-configuration retry returns that terminal evidence; a changed configuration conflicts instead of silently reusing it. The rehearsal never returns an approval URL and never stages activation. The later, separate \`onboarding.activate\` command consumes that exact terminal batch and the unique run/configuration evidence for the setup receipt's complete agent set. It stages one owner approval whose durable card shows every agent, Seat, Charter/configuration digest, rehearsal run, effective lane/model, permissions, schedule, warnings, and the onboarding-completion effect. Approval rechecks the full projection, records one composite human decision, makes every agent live, arms eligible schedules, and completes onboarding atomically. Any stale or failed member rolls the transaction back; same-key retry returns the committed receipt without duplicating effects.
 
 \`onboarding.advance_step\`, \`onboarding.create_invite\`, \`onboarding.attach_reference\`, \`compass.answer_gap\`, and drafting a Compass are \`none\` \u2014 none of them returns a pending confirmation. \`none\` is not the same as "agent-callable", though: \`onboarding.create_invite\` and \`compass.answer_gap\` record the human who ran them, so they run as a person, not from an agent session, while advancing a step, attaching a reference, drafting a Compass, and exact-run source ingestion are safe for the bootstrap agent. Approving a version (a supersession) is a human act. The agent drafts and surfaces the approve link. See the confirmations guide.
 
@@ -52403,11 +52635,11 @@ When operating through CLI or MCP, create fewer seats first and ask for confirma
     order: 30,
     title: "Charter design playbook",
     summary: "How to draft strong Charters that work for human, agent, and hybrid seats.",
-    version: "2026-07-26.3",
+    version: "2026-07-29.1",
     public: true,
     audiences: ["human", "cli", "mcp", "in_app_agent"],
     stages: ["charter_design", "staffing"],
-    relatedCommandIds: ["charter.draft", "charter.draft_all", "charter.update_draft", "charter.approve", "charter.skip", "charter.apply_seat_type_recommendation", "charter.sign_manifest", "charter.list", "charter.get", "confirmation.approve"],
+    relatedCommandIds: ["charter.draft", "charter.draft_all", "charter.update_draft", "charter.approve", "charter.preview_signal_reconciliation", "charter.reconcile_signals", "charter.skip", "charter.apply_seat_type_recommendation", "charter.sign_manifest", "charter.list", "charter.get", "confirmation.approve"],
     legal: {
       publicRisk: "low",
       notes: [
@@ -52465,6 +52697,14 @@ In the app, \`/charters\` is both a drafting queue and a governance library. It
 
 Daily and weekly measurable rows can carry Signal metadata: unit, numeric target, direction, cadence, and source. When a human approves a Charter, those structured measurables materialize into tenant Signal definitions for that seat. Free-text, monthly, and quarterly measurable prose remains accountability text until a human converts it into a supported structured Signal or creates the Signal separately.
 
+## When a declared Signal already exists
+
+Preview first. Approval requires an explicit choice for a declaration that COLLIDES with an active exact-name Signal and is not already linked to one: adopt it if it is already owned by the Charter Seat, move it if another Seat owns it, or deliberately create a second Signal. A declaration nothing matches is created automatically, and one already linked to a Signal takes no choice. Adoption and movement preserve the Signal ID, readings, and compatible goal bindings.
+
+\`charter.preview_signal_reconciliation\` is the owner-only dry run: per declaration it reports whether the declaration is already linked, which existing Signals match its name, who owns them, how much reading history and how many goal links they carry, the action that fits, and what that action would cost. \`charter.reconcile_signals\` then approves the Charter carrying one explicit decision per COLLIDING, UNLINKED declaration, and takes the \`edit_revision\` the preview returned so a draft edited in between is refused rather than reconciled against a stale reading.
+
+Both commands are owner-only. Ordinary \`charter.approve\` stays seat-scoped and cannot take ownership of another Seat's Signal: when a declared name collides, it refuses and says an owner must decide. A Signal that already sets the status of a goal owned by another Seat cannot be moved until that goal's status driver is rebound \u2014 informative goal indicators survive a move.
+
 ## When to stop for confirmation
 
 \`charter.approve\`, \`charter.skip\`, \`charter.apply_seat_type_recommendation\`, and \`charter.sign_manifest\` are \`human_required\`. Over MCP \`rost_approve_charter\` returns a pending confirmation, not an activation. Approving a Charter, signing a permission manifest, or expanding authority is a human act recorded against \`decided_by\`. An agent prepares the draft and surfaces the approve link; it does not approve. See the confirmations guide.
@@ -53080,7 +53320,7 @@ External connectors are being rolled out provider by provider, conservatively (r
     order: 48,
     title: "CLI and MCP installation guide",
     summary: "Install the public CLI, register remote token-backed MCP clients, and find the full command and tool catalog.",
-    version: "2026-07-27.10",
+    version: "2026-07-29.2",
     public: true,
     audiences: ["human", "cli", "mcp", "in_app_agent"],
     stages: ["company_setup", "staffing"],
@@ -53772,6 +54012,7 @@ Several rows here are seat-operating commands (\`task.create\`, the \`signal.*\`
 | \`rost_ingest_onboarding_source\` | \`onboarding.source_ingest\` | Retain one bounded encrypted onboarding source for the current implementation run or direct owner setup. | Tenant | Call with one source and its declared kind; use the returned logical source key in setup. |
 | \`rost_apply_onboarding_setup\` | \`onboarding.setup\` | Stage one atomic company setup proposal for owner review without making agents live. | Tenant | Submit the complete normalized plan; expect one human confirmation. |
 | \`rost_rehearse_onboarding_agents\` | \`onboarding.rehearse\` | Run the setup receipt's exact agents in a run-bound sandbox and return the complete immutable terminal batch plus per-agent evidence. It cannot activate agents, arm schedules, use credentials, mutate sources, send externally, or stage a confirmation. | Tenant | Inspect the live command contract, then pass the exact setup application, expected digest/revision, and idempotency key. A retry returns the same terminal evidence only when configuration is unchanged. |
+| \`rost_activate_onboarding_agents\` | \`onboarding.activate\` | Stage one complete owner approval for the setup receipt's exact all-passed agent set; approval activates the group and completes onboarding atomically. | Tenant | Pass the terminal batch receipt id plus every per-agent rehearsal run and configuration digest returned by \`onboarding.rehearse\`; expect one approval URL. |
 | \`rost_onboard_resume\` | \`onboarding.resume\` | Return the machine-readable onboarding resume state (path choice, pending setup, next step). | Tenant | Call with \`{}\`. |
 | \`rost_attach_reference_document\` | \`onboarding.attach_reference\` | Attach a company reference document (text/markdown) with title/kind/source so Compass and Charters can cite it. | Tenant | Call with \`text\`, a \`title\`, a \`kind\`, and a \`source\`. |
 | \`rost_upload_org_context\` | \`onboarding.upload_context\` | Back-compat alias of \`onboarding.attach_reference\`. | Tenant | Prefer \`rost_attach_reference_document\`; same widened schema. |
@@ -53790,6 +54031,8 @@ Several rows here are seat-operating commands (\`task.create\`, the \`signal.*\`
 | \`rost_update_charter_draft\` | \`charter.update_draft\` | Update a draft Charter document. | Seat or tenant-admin | Call with \`charter_version_id\` and the full \`doc\`. |
 | \`rost_set_charter\` | \`charter.set\` | Create or replace a seat's draft Charter from a full document in one call. | Seat or tenant-admin | Call with \`seat_id\` and \`doc\`; \`approve\` activates it (human gate). |
 | \`rost_approve_charter\` | \`charter.approve\` | Approve a draft Charter as a human owner. | Seat or tenant-admin | Expect confirmation when authority changes. |
+| \`rost_preview_charter_signal_reconciliation\` | \`charter.preview_signal_reconciliation\` | Owner-only dry run of how a draft Charter's declared Signals resolve against the Signals the company already tracks. | Tenant-admin | Call with \`charter_version_id\`; reads only, and returns the \`edit_revision\` to reconcile with. |
+| \`rost_reconcile_charter_signals\` | \`charter.reconcile_signals\` | Owner-only Charter approval carrying an explicit adopt / move / create decision per colliding Signal declaration. | Tenant-admin | Preview first; pass its \`edit_revision\` and one resolution per colliding, unlinked declaration. |
 | \`rost_skip_charter_draft\` | \`charter.skip\` | Mark a Charter draft as skipped. | Seat or tenant-admin | Call only when a human defers the seat. |
 | \`rost_apply_charter_seat_type_recommendation\` | \`charter.apply_seat_type_recommendation\` | Apply a Charter's seat-type recommendation. | Seat or tenant-admin | Call after reviewing the draft. |
 | \`rost_sign_charter_manifest\` | \`charter.sign_manifest\` | Request human confirmation for a permission manifest. | Seat or tenant-admin | Use after tool permissions are reviewed. |
@@ -57747,6 +57990,7 @@ function parseSemver(value) {
 
 // src/commands/onboarding.ts
 var REHEARSE_USAGE = `${cliBrand.binName} onboard rehearse --setup-application-id <uuid> --expected-input-digest <sha256:digest> --expected-receipt-revision <integer> --idempotency-key <key> [--json]`;
+var ACTIVATE_USAGE = `${cliBrand.binName} onboard activate --setup-application-id <uuid> --expected-input-digest <sha256:digest> --expected-receipt-revision <integer> --terminal-rehearsal-batch-receipt-id <uuid> --rehearsal-runs '<json-array>' --configuration-digests '<json-array>' --idempotency-key <key> [--json]`;
 var OnboardingUsageError = class extends Error {
   constructor(message) {
     super(message);
@@ -57787,14 +58031,19 @@ function parseOnboardingInvocation(args) {
       action
     };
   }
-  if (action !== "rehearse") {
+  if (action !== "rehearse" && action !== "activate") {
     throw new OnboardingUsageError(`Unknown onboard action: ${action ?? "(missing)"}`);
   }
   const allowed = /* @__PURE__ */ new Set([
     "setup-application-id",
     "expected-input-digest",
     "expected-receipt-revision",
-    "idempotency-key"
+    "idempotency-key",
+    ...action === "activate" ? [
+      "terminal-rehearsal-batch-receipt-id",
+      "rehearsal-runs",
+      "configuration-digests"
+    ] : []
   ]);
   const values = /* @__PURE__ */ new Map();
   let json2 = false;
@@ -57839,14 +58088,36 @@ function parseOnboardingInvocation(args) {
   if (!Number.isSafeInteger(expectedReceiptRevision) || expectedReceiptRevision <= 0) {
     throw new OnboardingUsageError("--expected-receipt-revision must be a positive integer.");
   }
+  const sharedBody = {
+    setup_application_id: setupApplicationId,
+    expected_input_digest: expectedInputDigest,
+    expected_receipt_revision: expectedReceiptRevision,
+    idempotency_key: idempotencyKey
+  };
+  if (action === "activate") {
+    return {
+      commandId: "onboarding.activate",
+      body: {
+        ...sharedBody,
+        terminal_rehearsal_batch_receipt_id: requiredValue2(
+          "terminal-rehearsal-batch-receipt-id"
+        ),
+        rehearsal_runs: parseJsonArrayFlag(
+          "rehearsal-runs",
+          requiredValue2("rehearsal-runs")
+        ),
+        configuration_digests: parseJsonArrayFlag(
+          "configuration-digests",
+          requiredValue2("configuration-digests")
+        )
+      },
+      json: json2,
+      action
+    };
+  }
   return {
     commandId: "onboarding.rehearse",
-    body: {
-      setup_application_id: setupApplicationId,
-      expected_input_digest: expectedInputDigest,
-      expected_receipt_revision: expectedReceiptRevision,
-      idempotency_key: idempotencyKey
-    },
+    body: sharedBody,
     json: json2,
     action
   };
@@ -57854,19 +58125,55 @@ function parseOnboardingInvocation(args) {
 function onboardingUsage() {
   return [
     `Usage: ${cliBrand.binName} onboard status|resume [--json]`,
-    `  ${REHEARSE_USAGE}`
+    `  ${REHEARSE_USAGE}`,
+    `  ${ACTIVATE_USAGE}`
   ].join("\n");
 }
 function formatOnboardingOutput(action, output) {
   if (action === "rehearse") {
     return formatRehearsalOutput(output);
   }
+  if (action === "activate") {
+    return formatActivationOutput(output);
+  }
   const record2 = typeof output === "object" && output !== null ? output : {};
   if (typeof record2.summary === "string") {
     return record2.summary;
   }
   return JSON.stringify(output, null, 2);
 }
+function parseJsonArrayFlag(flag, value) {
+  try {
+    const parsed = JSON.parse(value);
+    if (!Array.isArray(parsed)) {
+      throw new Error("not an array");
+    }
+    return parsed;
+  } catch {
+    throw new OnboardingUsageError(`--${flag} must be a valid JSON array.`);
+  }
+}
+function formatActivationOutput(output) {
+  const record2 = asRecord(output);
+  const approveVia = asRecord(record2.approveVia);
+  if (typeof approveVia.webUrl === "string") {
+    return [
+      "Onboarding activation approval is ready.",
+      `Approve once: ${approveVia.webUrl}`
+    ].join("\n");
+  }
+  const receipt = asRecord(record2.receipt);
+  const agents = Array.isArray(receipt.agents) ? receipt.agents : [];
+  if (record2.status === "activated") {
+    return [
+      "Onboarding activation completed.",
+      `Activation receipt: ${field(receipt, "activation_receipt_id")}`,
+      `Agents live: ${agents.length} of ${agents.length}`,
+      `Onboarding completed: ${field(receipt, "onboarding_completed_at")}`
+    ].join("\n");
+  }
+  return JSON.stringify(output, null, 2);
+}
 function formatRehearsalOutput(output) {
   const record2 = asRecord(output);
   if (record2.status === "in_progress") {
@@ -58233,6 +58540,8 @@ var COMMAND_MANIFEST = [
   { "id": "charter.draft_all", "namespace": "charter", "action": "draft_all", "title": "Draft all charters", "description": "Draft Charters for every eligible seat in a tenant.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [], "hasComplexInput": false, "help": "Draft Charters in onboarding order after the Responsibility Graph has enough seat clarity.", "example": {} },
   { "id": "charter.get", "namespace": "charter", "action": "get", "title": "Get Charter", "description": "Return a Charter version with its supersession history and latest dry-run status.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "charter_version_id", "flag": "charter-version-id", "type": "string", "required": true }], "hasComplexInput": false, "help": "Read a Charter with its supersession history and dry-run status before approving or signing a manifest." },
   { "id": "charter.list", "namespace": "charter", "action": "list", "title": "List Charters", "description": "List Charter versions in the tenant, optionally filtered by seat or status.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": false }, { "name": "status", "flag": "status", "type": "enum", "required": false, "enumValues": ["draft", "active", "superseded"] }], "hasComplexInput": false, "help": "List Charter versions to find the right draft or active version id before reading or amending it." },
+  { "id": "charter.preview_signal_reconciliation", "namespace": "charter", "action": "preview_signal_reconciliation", "title": "Preview Charter Signal reconciliation", "description": "Owner-only dry run: for each Signal a draft Charter declares, show whether it is already linked, which existing Signals match its name, who owns them, how much reading history and how many goal links they carry, the action that fits, and what it would cost. Reads only \u2014 nothing is changed. Approval needs an explicit choice only for a declaration that COLLIDES with an existing Signal and is not already linked: a declaration nothing matches is created automatically, and one already linked to a Signal takes no choice.", "requiredScope": "tenant_admin", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "charter_version_id", "flag": "charter-version-id", "type": "string", "required": true }], "hasComplexInput": false, "help": "Preview first. Approval requires an explicit choice when an exact-name active Signal exists: adopt it if it is already owned by the Charter Seat, move it if another Seat owns it, or deliberately create a second Signal. Adoption and movement preserve the Signal ID, readings, and compatible goal bindings." },
+  { "id": "charter.reconcile_signals", "namespace": "charter", "action": "reconcile_signals", "title": "Reconcile Charter Signals", "description": "Owner-only: approve a draft Charter with an explicit decision for each declared Signal that collides with one the company already tracks and is not already linked to one \u2014 adopt the existing Signal when this Seat owns it, move it to this Seat, or deliberately create a second one. Adoption and movement keep the Signal's id, its readings, and its compatible goal links. Preview first, and pass that preview's edit_revision.", "requiredScope": "tenant_admin", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "charter_version_id", "flag": "charter-version-id", "type": "string", "required": true }, { "name": "expected_edit_revision", "flag": "expected-edit-revision", "type": "integer", "required": true }, { "name": "apply_seat_type", "flag": "apply-seat-type", "type": "boolean", "required": false }], "hasComplexInput": true, "help": "Owner-only Charter approval carrying one explicit decision per COLLIDING, UNLINKED Signal declaration \u2014 a declaration nothing matches is created automatically, and an already-linked one takes no choice. Take the preview first and pass its edit_revision; adoption and movement keep the Signal's id, readings, and compatible goal bindings, and a cross-Seat status driver blocks a move." },
   { "id": "charter.set", "namespace": "charter", "action": "set", "title": "Set charter", "description": "Create or replace a seat's draft Charter from a full document in one call; approve activates it as a human owner.", "requiredScope": "seat", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": true }, { "name": "approve", "flag": "approve", "type": "boolean", "required": false }], "hasComplexInput": true, "help": "Create or replace a seat's draft Charter from a full document in one call; read the charter authoring deep-dive first. Approving activates the seat's contract and is a human decision.", "example": { "seat_id": "0190aaaa-aaaa-7aaa-8aaa-aaaaaaaaaaaa", "doc": { "payload_version": 1, "purpose": "AP intake clerk: draft accounts-payable invoice entries from inbound vendor emails for human review.", "accountabilities": [{ "title": "Draft every inbound invoice", "description": "Convert each inbound vendor invoice into a draft AP entry with the correct vendor, amount, and GL coding within one business day." }, { "title": "Flag discrepancies", "description": "Surface duplicate, mismatched, or out-of-policy invoices as Friction issues instead of drafting them silently." }], "decision_authority": { "autonomous": [{ "action": "Draft AP entries and propose GL coding from inbound invoices", "condition": "Allowed when the vendor is known and the amount is within the standard purchase range.", "rationale": "Drafting is reversible and reviewed by a human before posting.", "unanswered_boundary": false }], "approval": [{ "action": "Post an invoice or send any vendor-facing message", "condition": "Require explicit human approval before posting or sending.", "rationale": "Posting and sending are durable, money-moving actions.", "unanswered_boundary": false }], "escalate": [{ "action": "Unknown vendor, payment over the approval threshold, or a suspected duplicate", "condition": "Always escalate to the Steward before acting.", "rationale": "Conservative default for ambiguous, irreversible, or financial exposure.", "unanswered_boundary": true }] }, "escalation_rules": ["Escalate any invoice over $5,000 or from a vendor not already in the ledger.", "Escalate when an invoice appears to duplicate one already drafted or posted."], "measurables": [{ "name": "Invoices drafted within one business day", "target": "100%", "cadence": "weekly", "source": "agent" }, { "name": "Discrepancies caught before posting", "target": "\u2265 95%", "cadence": "monthly", "source": "human" }], "permission_manifest": [{ "tool": "ap.invoices.read", "scope": "Read inbound invoices and the vendor ledger.", "granted": true, "rationale": "Needed to draft entries from source invoices." }, { "tool": "email.draft", "scope": "Draft vendor replies for human review; never send.", "granted": true, "rationale": "Lets the seat prepare clarifications without taking a send action." }], "budget": { "monthly_usd": null, "approval_required_over_usd": 0, "notes": "No autonomous spend; any spend requires Steward approval until a budget is set." }, "unanswered_boundaries": ["Approval threshold for auto-posting", "Vendor onboarding authority"], "seat_type_recommendation": { "recommendation": "agent", "rationale": "The work is high-volume, rule-bound, and fully reviewable, which suits a draft-and-confirm agent under a human Steward.", "confidence": 0.8 } }, "approve": false } },
   { "id": "charter.show_markdown", "namespace": "charter", "action": "show_markdown", "title": "Show Charter as markdown", "description": "Compose a seat's active or latest Charter into a clean, human-skimmable markdown card for review.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": true }], "hasComplexInput": false, "help": "Render a seat's active or latest Charter as a clean markdown card to show your human a quick review." },
   { "id": "charter.sign_manifest", "namespace": "charter", "action": "sign_manifest", "title": "Sign charter manifest", "description": "Request human confirmation for a Charter permission manifest.", "requiredScope": "seat", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "charter_version_id", "flag": "charter-version-id", "type": "string", "required": true }], "hasComplexInput": false, "help": "Sign tool manifests only when the Charter explains why the tool is needed and how it is bounded." },
@@ -58328,6 +58637,7 @@ var COMMAND_MANIFEST = [
   { "id": "notification.settings.get", "namespace": "notification", "action": "settings.get", "title": "Get notification settings", "description": "Read tenant notification preferences (escalations, Sync brief, default channel).", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [], "hasComplexInput": false, "help": "Read notification preferences before changing escalation or Sync brief delivery." },
   { "id": "notification.settings.update", "namespace": "notification", "action": "settings.update", "title": "Update notification settings", "description": "Update tenant notification preferences.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "escalations_enabled", "flag": "escalations-enabled", "type": "boolean", "required": false }, { "name": "sync_brief_enabled", "flag": "sync-brief-enabled", "type": "boolean", "required": false }, { "name": "default_channel", "flag": "default-channel", "type": "enum", "required": false, "enumValues": ["slack", "email", "in_app"] }], "hasComplexInput": false, "help": "Update notification preferences for escalations, Sync briefs, and the default channel." },
   { "id": "notification.test", "namespace": "notification", "action": "test", "title": "Send test notification", "description": "Emit an in-app test notification to the acting human to verify delivery is wired.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [], "hasComplexInput": false, "help": "Send an in-app test notification to confirm the delivery path is wired." },
+  { "id": "onboarding.activate", "namespace": "onboarding", "action": "activate", "title": "Activate onboarding agents", "description": "Stage one owner approval to activate every agent in an applied onboarding receipt and complete onboarding atomically.", "requiredScope": "tenant", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "idempotency_key", "flag": "idempotency-key", "type": "string", "required": true }, { "name": "setup_application_id", "flag": "setup-application-id", "type": "string", "required": true }, { "name": "expected_input_digest", "flag": "expected-input-digest", "type": "string", "required": true }, { "name": "expected_receipt_revision", "flag": "expected-receipt-revision", "type": "integer", "required": true }, { "name": "terminal_rehearsal_batch_receipt_id", "flag": "terminal-rehearsal-batch-receipt-id", "type": "string", "required": true }], "hasComplexInput": true, "help": "After a terminal all-passed onboarding rehearsal, submit its exact batch receipt, per-agent run IDs, and configuration digests. One owner approval activates the entire group and completes onboarding atomically." },
   { "id": "onboarding.advance_step", "namespace": "onboarding", "action": "advance_step", "title": "Advance onboarding step", "description": "Persist the current onboarding step after server-side validation.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "step", "flag": "step", "type": "string", "required": true }, { "name": "completed", "flag": "completed", "type": "boolean", "required": false }], "hasComplexInput": true, "help": "Advance onboarding only after the current setup step is represented in the tenant state." },
   { "id": "onboarding.attach_reference", "namespace": "onboarding", "action": "attach_reference", "title": "Attach reference document", "description": "Attach a company reference document (text/markdown) so Compass and Charters can cite it. Reference-only \u2014 it does not build a Compass; convert each meaningful doc to markdown and attach it with a title, kind, and source.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "text", "flag": "text", "type": "string", "required": true }, { "name": "filename", "flag": "filename", "type": "string", "required": false }, { "name": "mime_type", "flag": "mime-type", "type": "enum", "required": false, "enumValues": ["text/plain", "text/markdown", "text/csv"] }, { "name": "title", "flag": "title", "type": "string", "required": false }, { "name": "kind", "flag": "kind", "type": "enum", "required": false, "enumValues": ["plan", "financial", "org_chart", "process"] }, { "name": "source", "flag": "source", "type": "string", "required": false }], "hasComplexInput": false, "help": "Convert each meaningful company doc to markdown and attach it as a reference (title, kind, source) so Compass and Charters can cite it; this attaches a reference, it does not build a Compass \u2014 author Compass directly.", "example": { "text": "# Company handbook\n\nWe build precision components for the aerospace supply chain.", "filename": "handbook.md", "mime_type": "text/markdown", "title": "Company handbook", "kind": "plan", "source": "handbook/overview.md" } },
   { "id": "onboarding.create_invite", "namespace": "onboarding", "action": "create_invite", "title": "Create onboarding invite", "description": "Create a pending invite for an onboarding team member.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "email", "flag": "email", "type": "string", "required": true }, { "name": "role", "flag": "role", "type": "enum", "required": false, "enumValues": ["owner", "admin", "steward", "member"] }], "hasComplexInput": true, "help": "Invites should give humans access to the company without assigning work directly to people instead of seats." },
@@ -67424,7 +67734,7 @@ async function main(argv = process.argv.slice(2), options = {}) {
       allowDevelopmentAppUrl: process.env[allowInsecureAppUrlEnv] === "1"
     });
   }
-  if (command === "onboard" && (args[0] === "status" || args[0] === "resume" || args[0] === "rehearse")) {
+  if (command === "onboard" && (args[0] === "status" || args[0] === "resume" || args[0] === "rehearse" || args[0] === "activate")) {
     let implCredential = null;
     try {
       implCredential = await createImplementationCredentialStore().read();