@rosthq/cli 0.7.122 → 0.7.123

package/dist/index.js

@@ -31772,15 +31772,16 @@ var charterBudgetSchema = external_exports.object({
   approval_required_over_usd: external_exports.number().nonnegative().nullable(),
   notes: external_exports.string().min(1)
 }).strict();
+var charterDecisionAuthoritySchema = external_exports.object({
+  autonomous: external_exports.array(charterAuthorityItemSchema),
+  approval: external_exports.array(charterAuthorityItemSchema),
+  escalate: external_exports.array(charterAuthorityItemSchema).min(1)
+}).strict();
 var charterDocObjectSchema = external_exports.object({
   payload_version: external_exports.literal(1),
   purpose: external_exports.string().min(1),
   accountabilities: external_exports.array(charterAccountabilitySchema).min(1),
-  decision_authority: external_exports.object({
-    autonomous: external_exports.array(charterAuthorityItemSchema),
-    approval: external_exports.array(charterAuthorityItemSchema),
-    escalate: external_exports.array(charterAuthorityItemSchema).min(1)
-  }).strict(),
+  decision_authority: charterDecisionAuthoritySchema,
   escalation_rules: external_exports.array(external_exports.string().min(1)).min(1),
   measurables: external_exports.array(charterMeasurableSchema).min(1),
   permission_manifest: external_exports.array(charterPermissionSchema),
@@ -36587,9 +36588,163 @@ var onboardingRehearseOutputSchema = external_exports.union([
   terminalOutputSchema
 ]);
 
+// ../../packages/protocol/src/onboarding-activation.ts
+var uuidSchema18 = external_exports.string().uuid();
+var digestSchema4 = external_exports.string().regex(/^sha256:[0-9a-f]{64}$/);
+var boundedText3 = (max) => external_exports.string().trim().min(1).max(max);
+var rehearsalRunEntrySchema = external_exports.object({
+  agent_id: uuidSchema18,
+  rehearsal_run_id: uuidSchema18
+}).strict();
+var configurationDigestEntrySchema = external_exports.object({
+  agent_id: uuidSchema18,
+  configuration_digest: digestSchema4
+}).strict();
+function uniqueAgentEntries(values, ctx) {
+  const seen = /* @__PURE__ */ new Set();
+  values.forEach((value, index) => {
+    if (seen.has(value.agent_id)) {
+      ctx.addIssue({
+        code: external_exports.ZodIssueCode.custom,
+        path: [index, "agent_id"],
+        message: "Activation evidence must not repeat an agent_id."
+      });
+    }
+    seen.add(value.agent_id);
+  });
+}
+var onboardingActivationRehearsalRunsSchema = external_exports.array(rehearsalRunEntrySchema).min(1).max(100).superRefine(uniqueAgentEntries);
+var onboardingActivationConfigurationDigestsSchema = external_exports.array(configurationDigestEntrySchema).min(1).max(100).superRefine(uniqueAgentEntries);
+var onboardingActivateInputSchema = external_exports.object({
+  idempotency_key: boundedText3(120),
+  setup_application_id: uuidSchema18,
+  expected_input_digest: digestSchema4,
+  expected_receipt_revision: external_exports.number().int().positive(),
+  terminal_rehearsal_batch_receipt_id: uuidSchema18,
+  rehearsal_runs: onboardingActivationRehearsalRunsSchema,
+  configuration_digests: onboardingActivationConfigurationDigestsSchema
+}).strict();
+var effectivePermissionManifestRuleSchema = external_exports.object({
+  name: boundedText3(200),
+  mode: external_exports.enum(["allow", "deny", "escalate"]),
+  clause: boundedText3(500),
+  scopeTier: external_exports.enum(["read", "draft", "write_with_approval", "full"]).optional(),
+  args: external_exports.object({
+    equals: external_exports.record(external_exports.string(), external_exports.unknown()).optional()
+  }).strict().optional(),
+  credentialGrant: external_exports.object({
+    capabilityId: boundedText3(200),
+    integrationId: uuidSchema18.nullable(),
+    requestedAccessLevel: capabilityGrantAccessLevelSchema,
+    actingSeatId: uuidSchema18.optional(),
+    effectiveCharterVersionId: uuidSchema18.optional()
+  }).strict().optional()
+}).strict();
+var onboardingActivationAgentProposalSchema = external_exports.object({
+  agent_id: uuidSchema18,
+  seat_id: uuidSchema18,
+  charter_version_id: uuidSchema18,
+  manifest: external_exports.object({
+    digest: digestSchema4,
+    evidence_receipt_id: uuidSchema18,
+    evidence_revision: external_exports.number().int().positive()
+  }).strict(),
+  configuration_digest: digestSchema4,
+  rehearsal_run_id: uuidSchema18,
+  effective_lane: external_exports.enum(["cloud", "mcp_session", "runner"]),
+  effective_model: external_exports.string().trim().min(1).max(200).nullable(),
+  decision_authority: charterDecisionAuthoritySchema,
+  effective_permission_manifest: external_exports.array(effectivePermissionManifestRuleSchema).max(200),
+  schedule: external_exports.object({
+    cron: external_exports.string().trim().min(1).max(200).nullable(),
+    timezone: external_exports.string().trim().min(1).max(100).nullable()
+  }).strict(),
+  budget: external_exports.object({
+    current_spend_usd: external_exports.string().trim().min(1).max(100),
+    hard_cap_usd: external_exports.string().trim().min(1).max(100).nullable()
+  }).strict(),
+  sources: external_exports.object({
+    checked: external_exports.number().int().nonnegative(),
+    required: external_exports.number().int().positive()
+  }).strict(),
+  warnings: external_exports.array(external_exports.string().trim().min(1).max(500)).max(100)
+}).strict();
+var onboardingActivationApprovalProjectionSchema = external_exports.object({
+  kind: external_exports.literal("onboarding_activation"),
+  setup_application_id: uuidSchema18,
+  implementation_run_id: uuidSchema18.nullable(),
+  expected_input_digest: digestSchema4,
+  expected_receipt_revision: external_exports.number().int().positive(),
+  terminal_rehearsal_batch_receipt_id: uuidSchema18,
+  activation_input_digest: digestSchema4,
+  agents: external_exports.array(onboardingActivationAgentProposalSchema).min(1).max(100),
+  checked_count: external_exports.number().int().positive(),
+  total_count: external_exports.number().int().positive(),
+  onboarding_completion_effect: external_exports.literal(true)
+}).strict();
+var onboardingActivationCommittedAgentSchema = external_exports.object({
+  agent_id: uuidSchema18,
+  seat_id: uuidSchema18,
+  status: external_exports.literal("live"),
+  schedule_armed: external_exports.boolean()
+}).strict();
+var onboardingActivationCommittedAgentsSchema = external_exports.array(
+  onboardingActivationCommittedAgentSchema
+).min(1).max(100).superRefine((agents, ctx) => {
+  const agentIds = /* @__PURE__ */ new Set();
+  const seatIds = /* @__PURE__ */ new Set();
+  agents.forEach((agent, index) => {
+    if (agentIds.has(agent.agent_id)) {
+      ctx.addIssue({
+        code: external_exports.ZodIssueCode.custom,
+        path: [index, "agent_id"],
+        message: "Activation snapshot agents must have unique agent_id values."
+      });
+    }
+    if (seatIds.has(agent.seat_id)) {
+      ctx.addIssue({
+        code: external_exports.ZodIssueCode.custom,
+        path: [index, "seat_id"],
+        message: "Activation snapshot agents must have unique seat_id values."
+      });
+    }
+    agentIds.add(agent.agent_id);
+    seatIds.add(agent.seat_id);
+  });
+});
+var onboardingActivationCommitSnapshotSchema = external_exports.object({
+  terminal_rehearsal_batch_receipt_id: uuidSchema18,
+  agents: onboardingActivationCommittedAgentsSchema,
+  onboarding_completed_at: external_exports.string().datetime({ offset: true })
+}).strict();
+var onboardingActivationPersistenceInputSchema = external_exports.object({
+  activation_confirmation_id: uuidSchema18,
+  activation_idempotency_key: boundedText3(120),
+  activation_input_digest: digestSchema4,
+  receipt_revision: external_exports.number().int().positive(),
+  activation_snapshot: onboardingActivationCommitSnapshotSchema
+}).strict();
+var onboardingActivationReceiptSchema = external_exports.object({
+  activation_receipt_id: uuidSchema18,
+  activation_confirmation_id: uuidSchema18,
+  setup_application_id: uuidSchema18,
+  implementation_run_id: uuidSchema18.nullable(),
+  activation_input_digest: digestSchema4,
+  setup_receipt_revision: external_exports.number().int().positive(),
+  terminal_rehearsal_batch_receipt_id: uuidSchema18,
+  agents: external_exports.array(onboardingActivationCommittedAgentSchema).min(1).max(100),
+  onboarding_completed_at: external_exports.string().datetime({ offset: true }),
+  activated_at: external_exports.string().datetime({ offset: true })
+}).strict();
+var onboardingActivateOutputSchema = external_exports.object({
+  application_id: uuidSchema18,
+  status: external_exports.literal("activated"),
+  receipt: onboardingActivationReceiptSchema
+}).strict();
+
 // ../../packages/protocol/src/mcp-onboarding.ts
 var MCP_TOKEN_ABSOLUTE_MAX_EXPIRY_MS = (MCP_TOKEN_NO_EXPIRY_SENTINEL_DAYS + 1) * 24 * 60 * 60 * 1e3;
-var uuidSchema18 = external_exports.string().uuid();
+var uuidSchema19 = external_exports.string().uuid();
 var isoDateTime6 = external_exports.string().datetime({ offset: true });
 var onboardingStatusInputSchema = external_exports.object({}).strict();
 var onboardingStatusOutputSchema = external_exports.object({
@@ -36633,7 +36788,7 @@ var onboardingAttachReferenceInputSchema = external_exports.object({
   source: external_exports.string().trim().min(1).max(500).optional()
 }).strict();
 var onboardingAttachReferenceOutputSchema = external_exports.object({
-  document_id: uuidSchema18,
+  document_id: uuidSchema19,
   storage_ref: external_exports.string().min(1),
   kind: external_exports.enum(["org_chart", "role_doc", "plan", "financial", "other"]),
   title: external_exports.string().min(1).nullable()
@@ -36658,7 +36813,7 @@ var onboardingCreateInviteInputSchema = external_exports.object({
   flags: external_exports.record(external_exports.string(), external_exports.unknown()).default({})
 }).strict();
 var onboardingCreateInviteOutputSchema = external_exports.object({
-  invite_id: uuidSchema18,
+  invite_id: uuidSchema19,
   email: external_exports.string().email(),
   role: external_exports.enum(["owner", "admin", "steward", "member"]),
   token: external_exports.string().min(1)
@@ -36671,19 +36826,19 @@ var tenantAnthropicKeySaveOutputSchema = external_exports.object({
 }).strict();
 var tenantAnthropicKeyDisableInputSchema = external_exports.object({}).strict();
 var tenantAnthropicKeyDisableOutputSchema = external_exports.object({
-  tenant_id: uuidSchema18,
-  credential_id: uuidSchema18.nullable(),
+  tenant_id: uuidSchema19,
+  credential_id: uuidSchema19.nullable(),
   disabled: external_exports.boolean(),
   already_disabled: external_exports.boolean(),
   managed_fallback_ready: external_exports.boolean()
 }).strict();
 var seatCreateInputSchema = external_exports.object({
   name: external_exports.string().trim().min(1).max(120),
-  parent_seat_id: uuidSchema18.nullable().optional(),
+  parent_seat_id: uuidSchema19.nullable().optional(),
   seat_type: external_exports.enum(["human", "agent", "hybrid"]).default("human")
 }).strict();
 var seatCreateOutputSchema = withCommandEffect({
-  seat_id: uuidSchema18,
+  seat_id: uuidSchema19,
   // Mirrors the literal `createSeat` writes at insert time. Not sourced from a
   // read-back: `createSeat` returns only the new id, and widening its
   // signature to return the row is out of scope for this issue (schema +
@@ -36694,29 +36849,29 @@ var seatCreateOutputSchema = withCommandEffect({
   status: external_exports.enum(["draft", "active", "vacant", "decommissioned"])
 });
 var seatRenameInputSchema = external_exports.object({
-  seat_id: uuidSchema18,
+  seat_id: uuidSchema19,
   name: external_exports.string().trim().min(1).max(120)
 }).strict();
 var seatReparentInputSchema = external_exports.object({
-  seat_id: uuidSchema18,
-  new_parent_seat_id: uuidSchema18.nullable()
+  seat_id: uuidSchema19,
+  new_parent_seat_id: uuidSchema19.nullable()
 }).strict();
 var seatSetTypeInputSchema = external_exports.object({
-  seat_id: uuidSchema18,
+  seat_id: uuidSchema19,
   seat_type: external_exports.enum(["human", "agent", "hybrid"])
 }).strict();
 var seatDecommissionInputSchema = external_exports.object({
-  seat_id: uuidSchema18
+  seat_id: uuidSchema19
 }).strict();
 var seatMutationOutputSchema = external_exports.object({
-  seat_id: uuidSchema18
+  seat_id: uuidSchema19
 }).strict();
 var seatDecommissionPreviewOutputSchema = external_exports.object({
-  seat_id: uuidSchema18,
+  seat_id: uuidSchema19,
   seat_name: external_exports.string(),
   previous_status: external_exports.enum(["draft", "active", "vacant", "decommissioned"]),
   active_occupancy_count: external_exports.number().int().nonnegative(),
-  active_agent_ids: external_exports.array(uuidSchema18),
+  active_agent_ids: external_exports.array(uuidSchema19),
   active_charter_count: external_exports.number().int().nonnegative(),
   active_mcp_token_count: external_exports.number().int().nonnegative(),
   active_credential_count: external_exports.number().int().nonnegative(),
@@ -36726,16 +36881,16 @@ var seatDecommissionPreviewOutputSchema = external_exports.object({
   effects: external_exports.array(external_exports.string())
 }).strict();
 var charterDraftInputSchema = external_exports.object({
-  seat_id: uuidSchema18
+  seat_id: uuidSchema19
 }).strict();
 var charterDraftOutputSchema = external_exports.object({
-  charter_version_id: uuidSchema18,
-  seat_id: uuidSchema18,
+  charter_version_id: uuidSchema19,
+  seat_id: uuidSchema19,
   edit_revision: external_exports.number().int().min(1).optional(),
   doc: external_exports.unknown()
 }).strict();
 var charterUpdateDraftInputSchema = external_exports.object({
-  charter_version_id: uuidSchema18,
+  charter_version_id: uuidSchema19,
   expected_edit_revision: external_exports.number().int().min(1).optional(),
   // DER-785 (Part G): the full Charter document contract (was `z.unknown()`).
   // The DB layer already validated this with `charterSchema.parse`; advertising
@@ -36744,18 +36899,18 @@ var charterUpdateDraftInputSchema = external_exports.object({
   doc: charterDocSchema
 }).strict();
 var charterSetInputSchema = external_exports.object({
-  seat_id: uuidSchema18,
+  seat_id: uuidSchema19,
   doc: charterDocSchema,
   approve: external_exports.boolean().default(false)
 }).strict();
 var charterMutationOutputSchema = external_exports.object({
-  charter_version_id: uuidSchema18,
-  seat_id: uuidSchema18,
+  charter_version_id: uuidSchema19,
+  seat_id: uuidSchema19,
   edit_revision: external_exports.number().int().min(1).optional()
 }).strict();
 var charterApproveInputSchema = external_exports.object({
-  seat_id: uuidSchema18.optional(),
-  charter_version_id: uuidSchema18.optional(),
+  seat_id: uuidSchema19.optional(),
+  charter_version_id: uuidSchema19.optional(),
   // DER-785 (Part G): a partial of the Charter doc shape (was an untyped record).
   // These fields are shallow-merged onto the existing draft, then the merged doc
   // is re-validated against the full schema at persist time.
@@ -36771,12 +36926,12 @@ var charterSignalResolutionSchema = external_exports.discriminatedUnion("action"
   external_exports.object({
     declaration_name: charterSignalDeclarationNameSchema,
     action: external_exports.literal("adopt_existing"),
-    measurable_id: uuidSchema18
+    measurable_id: uuidSchema19
   }).strict(),
   external_exports.object({
     declaration_name: charterSignalDeclarationNameSchema,
     action: external_exports.literal("move_existing"),
-    measurable_id: uuidSchema18
+    measurable_id: uuidSchema19
   }).strict(),
   external_exports.object({
     declaration_name: charterSignalDeclarationNameSchema,
@@ -36784,7 +36939,7 @@ var charterSignalResolutionSchema = external_exports.discriminatedUnion("action"
   }).strict()
 ]);
 var charterReconcileSignalsInputSchema = external_exports.object({
-  charter_version_id: uuidSchema18,
+  charter_version_id: uuidSchema19,
   // The stale-draft guard: `charter_versions.edit_revision` starts at 1, so 0 is
   // never a real revision.
   expected_edit_revision: external_exports.number().int().min(1),
@@ -36792,16 +36947,16 @@ var charterReconcileSignalsInputSchema = external_exports.object({
   apply_seat_type: external_exports.boolean().default(false)
 }).strict();
 var charterSignalGoalBindingSchema = external_exports.object({
-  goal_id: uuidSchema18,
+  goal_id: uuidSchema19,
   goal_title: external_exports.string(),
   // Null for a company objective, which owns no Seat. A `drives_status` binding on a
   // seatless goal can never match a destination Seat, so movement fails closed.
-  goal_seat_id: uuidSchema18.nullable(),
+  goal_seat_id: uuidSchema19.nullable(),
   role: external_exports.enum(["drives_status", "informs"])
 }).strict();
 var charterSignalCandidateSchema = external_exports.object({
-  measurable_id: uuidSchema18,
-  owner_seat_id: uuidSchema18,
+  measurable_id: uuidSchema19,
+  owner_seat_id: uuidSchema19,
   owner_seat_name: external_exports.string(),
   stored_source: external_exports.enum(["human", "agent", "integration"]),
   reading_count: external_exports.number().int().min(0),
@@ -36821,7 +36976,7 @@ var charterSignalCandidateSchema = external_exports.object({
 var charterSignalReconciliationItemSchema = external_exports.object({
   declaration_name: external_exports.string(),
   status: external_exports.enum(["linked", "candidate", "ambiguous", "missing"]),
-  linked_measurable_id: uuidSchema18.nullable(),
+  linked_measurable_id: uuidSchema19.nullable(),
   candidates: external_exports.array(charterSignalCandidateSchema),
   // A DERIVED suggestion, never an applied one: `null` whenever a human must choose
   // (ambiguous), whenever nothing matches (missing), or when the declaration is already
@@ -36832,11 +36987,11 @@ var charterSignalReconciliationItemSchema = external_exports.object({
   warnings: external_exports.array(external_exports.string())
 }).strict();
 var charterPreviewSignalReconciliationInputSchema = external_exports.object({
-  charter_version_id: uuidSchema18
+  charter_version_id: uuidSchema19
 }).strict();
 var charterPreviewSignalReconciliationOutputSchema = external_exports.object({
-  charter_version_id: uuidSchema18,
-  seat_id: uuidSchema18,
+  charter_version_id: uuidSchema19,
+  seat_id: uuidSchema19,
   // Pass this back as `expected_edit_revision` when reconciling, so a draft edited after
   // the preview cannot be reconciled against a stale reading of it.
   edit_revision: external_exports.number().int().min(1),
@@ -36847,20 +37002,20 @@ var charterDraftSkipReasonSchema = external_exports.enum(["seat_not_active", "ch
 var charterDraftAllOutputSchema = withCommandEffect({
   drafted: external_exports.number().int().nonnegative(),
   skipped: external_exports.number().int().nonnegative(),
-  draft_ids: external_exports.array(uuidSchema18),
+  draft_ids: external_exports.array(uuidSchema19),
   skipped_seats: external_exports.array(external_exports.object({
-    seat_id: uuidSchema18,
+    seat_id: uuidSchema19,
     reason: charterDraftSkipReasonSchema
   }).strict())
 });
 var charterSkipInputSchema = external_exports.object({
-  charter_version_id: uuidSchema18
+  charter_version_id: uuidSchema19
 }).strict();
 var charterApplySeatTypeRecommendationInputSchema = external_exports.object({
-  charter_version_id: uuidSchema18
+  charter_version_id: uuidSchema19
 }).strict();
 var charterSignManifestInputSchema = external_exports.object({
-  charter_version_id: uuidSchema18
+  charter_version_id: uuidSchema19
 }).strict();
 var pendingConfirmationSchema = external_exports.object({
   confirmationId: external_exports.string().min(1),
@@ -36914,7 +37069,7 @@ var confirmationListInputSchema = external_exports.object({
   limit: external_exports.number().int().min(1).max(200).optional()
 }).strict();
 var confirmationSummarySchema = external_exports.object({
-  id: uuidSchema18,
+  id: uuidSchema19,
   command_id: external_exports.string(),
   redacted_args: external_exports.unknown(),
   // DER-2161 kickback round 1, finding (6): tracks `PendingConfirmationListRow`'s
@@ -36924,7 +37079,7 @@ var confirmationSummarySchema = external_exports.object({
   actor_kind: external_exports.enum(["user", "agent", "system", "operator"]),
   source: external_exports.string(),
   scope_kind: external_exports.enum(["tenant_admin", "tenant", "seat"]),
-  seat_id: uuidSchema18.nullable(),
+  seat_id: uuidSchema19.nullable(),
   seat_name: external_exports.string().nullable(),
   seat_type: external_exports.enum(["human", "agent", "hybrid"]).nullable(),
   risk_level: external_exports.enum(["normal", "sensitive", "dangerous"]),
@@ -36936,37 +37091,37 @@ var confirmationListOutputSchema = external_exports.object({
   confirmations: external_exports.array(confirmationSummarySchema)
 }).strict();
 var confirmationDismissInputSchema = external_exports.object({
-  confirmation_id: uuidSchema18
+  confirmation_id: uuidSchema19
 }).strict();
 var confirmationDismissOutputSchema = external_exports.object({
   dismissed: external_exports.object({
-    id: uuidSchema18,
+    id: uuidSchema19,
     status: external_exports.literal("dismissed")
   }).strict()
 }).strict();
 var confirmationDismissStaleInputSchema = external_exports.object({}).strict();
 var confirmationDismissStaleOutputSchema = external_exports.object({
   dismissed_count: external_exports.number().int().min(0),
-  dismissed_ids: external_exports.array(uuidSchema18)
+  dismissed_ids: external_exports.array(uuidSchema19)
 }).strict();
 var credentialIngressInputSchema = external_exports.object({
-  seat_id: uuidSchema18.optional(),
+  seat_id: uuidSchema19.optional(),
   provider: external_exports.string().trim().min(1),
   scope_description: external_exports.string().trim().min(1),
   secret_name: external_exports.string().trim().min(1),
   secret: external_exports.string().trim().min(1)
 }).strict();
 var credentialIngressOutputSchema = external_exports.object({
-  credential_id: uuidSchema18,
+  credential_id: uuidSchema19,
   provider: external_exports.string().min(1),
-  seat_id: uuidSchema18.nullable()
+  seat_id: uuidSchema19.nullable()
 }).strict();
 var credentialListInputSchema = external_exports.object({}).strict();
 var credentialSummarySchema = external_exports.object({
-  credential_id: uuidSchema18,
+  credential_id: uuidSchema19,
   provider: external_exports.string(),
   scope_description: external_exports.string(),
-  seat_id: uuidSchema18.nullable(),
+  seat_id: uuidSchema19.nullable(),
   status: external_exports.string(),
   created_at: external_exports.string(),
   rotated_at: external_exports.string(),
@@ -36976,16 +37131,16 @@ var credentialListOutputSchema = external_exports.object({
   credentials: external_exports.array(credentialSummarySchema)
 }).strict();
 var agentGoLiveInputSchema = external_exports.object({
-  seat_id: uuidSchema18,
-  charter_version_id: uuidSchema18
+  seat_id: uuidSchema19,
+  charter_version_id: uuidSchema19
 }).strict();
 var agentGoLiveOutputSchema = external_exports.object({
-  seat_id: uuidSchema18,
-  charter_version_id: uuidSchema18,
+  seat_id: uuidSchema19,
+  charter_version_id: uuidSchema19,
   status: external_exports.literal("live")
 }).strict();
 var compassSetInputSchema = external_exports.object({
-  draft_id: uuidSchema18.optional(),
+  draft_id: uuidSchema19.optional(),
   doc: compassDraftSchema.optional(),
   approve: external_exports.boolean().default(false)
 }).strict().refine((input) => Boolean(input.draft_id) !== Boolean(input.doc), {
@@ -36993,7 +37148,7 @@ var compassSetInputSchema = external_exports.object({
   path: ["draft_id"]
 });
 var compassMutationOutputSchema = external_exports.object({
-  compass_version_id: uuidSchema18,
+  compass_version_id: uuidSchema19,
   status: external_exports.enum(["draft", "active", "superseded"]),
   version: external_exports.number().int().nonnegative()
 }).strict();
@@ -37002,42 +37157,42 @@ var compassDraftInputSchema = external_exports.object({
   doc: compassDraftSchema
 }).strict();
 var compassUpdateDraftInputSchema = external_exports.object({
-  draft_id: uuidSchema18,
+  draft_id: uuidSchema19,
   doc: compassDraftSchema
 }).strict();
 var compassApproveVersionInputSchema = external_exports.object({
-  draft_id: uuidSchema18
+  draft_id: uuidSchema19
 }).strict();
 var compassRejectDraftInputSchema = external_exports.object({
-  draft_id: uuidSchema18
+  draft_id: uuidSchema19
 }).strict();
 var compassAnswerGapInputSchema = external_exports.object({
   gap_id: external_exports.string().min(1),
   answer: external_exports.string().trim().min(1)
 }).strict();
 var seatStaffInputSchema = external_exports.object({
-  seat_id: uuidSchema18,
+  seat_id: uuidSchema19,
   occupant: external_exports.discriminatedUnion("type", [
     external_exports.object({ type: external_exports.literal("vacant") }).strict(),
-    external_exports.object({ type: external_exports.literal("user"), user_id: uuidSchema18 }).strict(),
-    external_exports.object({ type: external_exports.literal("agent"), agent_id: uuidSchema18 }).strict()
+    external_exports.object({ type: external_exports.literal("user"), user_id: uuidSchema19 }).strict(),
+    external_exports.object({ type: external_exports.literal("agent"), agent_id: uuidSchema19 }).strict()
   ])
 }).strict();
 var staffingMutationOutputSchema = external_exports.object({
-  seat_id: uuidSchema18,
+  seat_id: uuidSchema19,
   staffed: external_exports.enum(["vacant", "user", "agent"])
 }).strict();
 var staffingAssignUserInputSchema = external_exports.object({
-  seat_id: uuidSchema18,
-  user_id: uuidSchema18
+  seat_id: uuidSchema19,
+  user_id: uuidSchema19
 }).strict();
 var staffingAssignAgentDryRunInputSchema = external_exports.object({
-  seat_id: uuidSchema18,
-  agent_id: uuidSchema18
+  seat_id: uuidSchema19,
+  agent_id: uuidSchema19
 }).strict();
 var mcpTokenCreateInputSchema = external_exports.object({
   scope: external_exports.enum(["tenant_admin", "seat"]),
-  seat_id: uuidSchema18.optional(),
+  seat_id: uuidSchema19.optional(),
   // DER-830: explicit absolute expiry (kept for back-compat / direct callers).
   // When omitted OR null, the DB default (now() + 90 days) applies — `null` is an
   // accepted "no explicit expiry" signal (existing UI/MCP callers pass it), so it
@@ -37081,17 +37236,17 @@ var mcpTokenCreateInputSchema = external_exports.object({
   }
 });
 var mcpTokenCreateOutputSchema = external_exports.object({
-  token_id: uuidSchema18,
+  token_id: uuidSchema19,
   token: external_exports.string().min(1),
   scope: external_exports.enum(["tenant_admin", "seat"]),
-  seat_id: uuidSchema18.nullable()
+  seat_id: uuidSchema19.nullable()
 }).strict();
 var mcpTokenRevokeInputSchema = external_exports.object({
-  token_id: uuidSchema18,
-  seat_id: uuidSchema18.optional()
+  token_id: uuidSchema19,
+  seat_id: uuidSchema19.optional()
 }).strict();
 var mcpTokenRevokeOutputSchema = external_exports.object({
-  token_id: uuidSchema18,
+  token_id: uuidSchema19,
   revoked: external_exports.boolean()
 }).strict();
 
@@ -37104,7 +37259,7 @@ var markNotificationsReadRequestSchema = external_exports.object({
 });
 
 // ../../packages/protocol/src/product-analytics.ts
-var uuidSchema19 = external_exports.string().uuid();
+var uuidSchema20 = external_exports.string().uuid();
 var opaqueRequestIdSchema = external_exports.string().trim().min(1).max(240);
 var safeNameSchema = external_exports.string().trim().min(1).max(120).regex(/^[a-z][a-z0-9._:-]*$/);
 var safeSurfaceSchema = external_exports.string().trim().min(1).max(80).regex(/^[a-z][a-z0-9_-]*$/);
@@ -37198,8 +37353,8 @@ var recommendationOutcomeStatusSchema = external_exports.enum([
 ]);
 var durationMsSchema = external_exports.number().int().nonnegative().max(24 * 60 * 60 * 1e3).optional();
 var productEventInputSchema = external_exports.object({
-  tenant_id: uuidSchema19,
-  user_id: uuidSchema19.optional(),
+  tenant_id: uuidSchema20,
+  user_id: uuidSchema20.optional(),
   source: analyticsSourceSchema,
   event_name: safeNameSchema,
   route_template: routeTemplateSchema.optional(),
@@ -37208,8 +37363,8 @@ var productEventInputSchema = external_exports.object({
   occurred_at: external_exports.string().datetime({ offset: true }).optional()
 }).strict();
 var pageViewInputSchema = external_exports.object({
-  tenant_id: uuidSchema19,
-  user_id: uuidSchema19.optional(),
+  tenant_id: uuidSchema20,
+  user_id: uuidSchema20.optional(),
   route_template: routeTemplateSchema,
   referrer_route_template: routeTemplateSchema.optional(),
   surface: safeSurfaceSchema.default("web"),
@@ -37218,12 +37373,12 @@ var pageViewInputSchema = external_exports.object({
   occurred_at: external_exports.string().datetime({ offset: true }).optional()
 }).strict();
 var commandInvocationInputSchema = external_exports.object({
-  tenant_id: uuidSchema19,
-  user_id: uuidSchema19.optional(),
-  seat_id: uuidSchema19.optional(),
-  run_id: uuidSchema19.optional(),
-  agent_turn_execution_id: uuidSchema19.optional(),
-  session_id: uuidSchema19.optional(),
+  tenant_id: uuidSchema20,
+  user_id: uuidSchema20.optional(),
+  seat_id: uuidSchema20.optional(),
+  run_id: uuidSchema20.optional(),
+  agent_turn_execution_id: uuidSchema20.optional(),
+  session_id: uuidSchema20.optional(),
   command_id: safeNameSchema,
   source: analyticsSourceSchema,
   // DER-2161 kickback round 1, finding (6): tracks `command_invocations.actor_kind`
@@ -37237,7 +37392,7 @@ var commandInvocationInputSchema = external_exports.object({
   // `packages/commands/src/context.ts`'s operator context builder now sets
   // `initiatorKind: "operator"` instead of coercing to "agent".
   initiator_kind: external_exports.enum(["user", "agent", "system", "operator"]).optional(),
-  initiator_user_id: uuidSchema19.nullable().optional(),
+  initiator_user_id: uuidSchema20.nullable().optional(),
   scope_kind: external_exports.enum(["tenant_admin", "tenant", "seat"]),
   status: commandInvocationStatusSchema,
   guard_result: external_exports.enum(["allowed", "denied_manifest", "denied_budget", "escalated", "denied_tenant_policy"]).optional(),
@@ -37256,8 +37411,8 @@ var commandInvocationInputSchema = external_exports.object({
   }
 });
 var onboardingMilestoneInputSchema = external_exports.object({
-  tenant_id: uuidSchema19,
-  user_id: uuidSchema19.optional(),
+  tenant_id: uuidSchema20,
+  user_id: uuidSchema20.optional(),
   milestone: safeNameSchema,
   status: analyticsOutcomeStatusSchema,
   step_index: external_exports.number().int().nonnegative().max(100).optional(),
@@ -37266,19 +37421,19 @@ var onboardingMilestoneInputSchema = external_exports.object({
   occurred_at: external_exports.string().datetime({ offset: true }).optional()
 }).strict();
 var recommendationEventInputSchema = external_exports.object({
-  tenant_id: uuidSchema19,
-  user_id: uuidSchema19.optional(),
+  tenant_id: uuidSchema20,
+  user_id: uuidSchema20.optional(),
   recommendation_type: safeNameSchema,
   source_surface: safeSurfaceSchema,
   status: recommendationOutcomeStatusSchema,
   target_kind: safeSurfaceSchema.optional(),
-  target_id: uuidSchema19.optional(),
+  target_id: uuidSchema20.optional(),
   properties: recommendationAnalyticsPropertiesSchema.optional(),
   occurred_at: external_exports.string().datetime({ offset: true }).optional()
 }).strict();
 
 // ../../packages/protocol/src/reads.ts
-var uuidSchema20 = external_exports.string().uuid();
+var uuidSchema21 = external_exports.string().uuid();
 var isoDateTime7 = external_exports.string().datetime({ offset: true });
 var seatTypeSchema = external_exports.enum(["human", "agent", "hybrid"]);
 var seatStatusSchema = external_exports.enum(["draft", "active", "vacant", "decommissioned"]);
@@ -37293,13 +37448,13 @@ var credentialStatusSchema = external_exports.enum(["active", "revoked"]);
 var runStatusSchema = external_exports.enum(["running", "succeeded", "failed", "timeout", "cancelled"]);
 var graphGetInputSchema = external_exports.object({}).strict();
 var graphNodeSchema = external_exports.object({
-  seat_id: uuidSchema20,
+  seat_id: uuidSchema21,
   name: external_exports.string(),
   seat_type: seatTypeSchema,
   status: seatStatusSchema,
-  parent_seat_id: uuidSchema20.nullable(),
+  parent_seat_id: uuidSchema21.nullable(),
   is_root: external_exports.boolean(),
-  steward_seat_id: uuidSchema20.nullable(),
+  steward_seat_id: uuidSchema21.nullable(),
   occupant: external_exports.object({
     kind: external_exports.enum(["user", "agent"]),
     label: external_exports.string(),
@@ -37312,11 +37467,11 @@ var graphNodeSchema = external_exports.object({
   is_peer: external_exports.boolean()
 }).strict();
 var graphEdgeSchema = external_exports.object({
-  parent_seat_id: uuidSchema20,
-  child_seat_id: uuidSchema20
+  parent_seat_id: uuidSchema21,
+  child_seat_id: uuidSchema21
 }).strict();
 var graphGetOutputSchema = external_exports.object({
-  root_seat_id: uuidSchema20.nullable(),
+  root_seat_id: uuidSchema21.nullable(),
   nodes: external_exports.array(graphNodeSchema),
   edges: external_exports.array(graphEdgeSchema),
   status_rollups: external_exports.object({
@@ -37328,32 +37483,32 @@ var graphGetOutputSchema = external_exports.object({
   }).strict()
 }).strict();
 var seatGetInputSchema = external_exports.object({
-  seat_id: uuidSchema20
+  seat_id: uuidSchema21
 }).strict();
 var seatGetOutputSchema = external_exports.object({
-  seat_id: uuidSchema20,
+  seat_id: uuidSchema21,
   name: external_exports.string(),
   seat_type: seatTypeSchema,
   status: seatStatusSchema,
   purpose: external_exports.string().nullable(),
-  parent_seat_id: uuidSchema20.nullable(),
+  parent_seat_id: uuidSchema21.nullable(),
   steward_chain: external_exports.array(external_exports.object({
-    seat_id: uuidSchema20,
+    seat_id: uuidSchema21,
     name: external_exports.string()
   }).strict()),
   occupancies: external_exports.array(external_exports.object({
-    occupancy_id: uuidSchema20,
+    occupancy_id: uuidSchema21,
     occupant_type: external_exports.enum(["user", "agent"]),
     label: external_exports.string(),
     started_at: isoDateTime7,
     ended_at: isoDateTime7.nullable()
   }).strict()),
-  active_charter_version_id: uuidSchema20.nullable(),
-  draft_charter_version_id: uuidSchema20.nullable(),
+  active_charter_version_id: uuidSchema21.nullable(),
+  draft_charter_version_id: uuidSchema21.nullable(),
   agent_status: agentStatusEnum2.nullable(),
   agent_lane: agentLaneSchema3.nullable(),
   mcp_tokens: external_exports.array(external_exports.object({
-    token_id: uuidSchema20,
+    token_id: uuidSchema21,
     scope: mcpScopeSchema,
     created_at: isoDateTime7,
     last_seen_at: isoDateTime7.nullable(),
@@ -37363,7 +37518,7 @@ var seatGetOutputSchema = external_exports.object({
     revoked_at: isoDateTime7.nullable()
   }).strict()),
   credentials: external_exports.array(external_exports.object({
-    credential_id: uuidSchema20,
+    credential_id: uuidSchema21,
     provider: external_exports.string(),
     status: credentialStatusSchema
   }).strict()),
@@ -37375,12 +37530,12 @@ var seatGetOutputSchema = external_exports.object({
   }).strict()
 }).strict();
 var charterListInputSchema = external_exports.object({
-  seat_id: uuidSchema20.optional(),
+  seat_id: uuidSchema21.optional(),
   status: charterStatusSchema.optional()
 }).strict();
 var charterSummarySchema = external_exports.object({
-  charter_version_id: uuidSchema20,
-  seat_id: uuidSchema20,
+  charter_version_id: uuidSchema21,
+  seat_id: uuidSchema21,
   version: external_exports.number().int().nonnegative(),
   status: charterStatusSchema,
   created_at: isoDateTime7,
@@ -37390,11 +37545,11 @@ var charterListOutputSchema = external_exports.object({
   charters: external_exports.array(charterSummarySchema)
 }).strict();
 var charterGetInputSchema = external_exports.object({
-  charter_version_id: uuidSchema20
+  charter_version_id: uuidSchema21
 }).strict();
 var charterGetOutputSchema = external_exports.object({
-  charter_version_id: uuidSchema20,
-  seat_id: uuidSchema20,
+  charter_version_id: uuidSchema21,
+  seat_id: uuidSchema21,
   version: external_exports.number().int().nonnegative(),
   status: charterStatusSchema,
   created_at: isoDateTime7,
@@ -37408,7 +37563,7 @@ var charterGetOutputSchema = external_exports.object({
 }).strict();
 var compassGetCurrentInputSchema = external_exports.object({}).strict();
 var compassVersionRefSchema = external_exports.object({
-  compass_version_id: uuidSchema20,
+  compass_version_id: uuidSchema21,
   version: external_exports.number().int().nonnegative(),
   status: compassStatusSchema,
   doc: external_exports.unknown()
@@ -37419,7 +37574,7 @@ var compassGetCurrentOutputSchema = external_exports.object({
   // Sources expose document id and kind only. The underlying storage_ref can
   // be a local file path, so it is never surfaced (redaction rule).
   sources: external_exports.array(external_exports.object({
-    document_id: uuidSchema20,
+    document_id: uuidSchema21,
     kind: external_exports.string()
   }).strict())
 }).strict();
@@ -37434,22 +37589,22 @@ var compassGapSchema = external_exports.object({
   answer: external_exports.string().nullable()
 }).strict();
 var compassListGapsOutputSchema = external_exports.object({
-  compass_version_id: uuidSchema20.nullable(),
+  compass_version_id: uuidSchema21.nullable(),
   unanswered: external_exports.array(compassGapSchema),
   answered: external_exports.array(compassGapSchema)
 }).strict();
 var agentStatusInputSchema = external_exports.object({
-  seat_id: uuidSchema20
+  seat_id: uuidSchema21
 }).strict();
 var agentStatusOutputSchema = external_exports.object({
-  seat_id: uuidSchema20,
+  seat_id: uuidSchema21,
   // DER-786 (C7): `has_agent` is true whenever a setup agent exists for the seat
   // — including a draft setup that has no occupancy yet — so it agrees with
   // agent_setup.get. `lifecycle` is the shared cross-surface term derived from
   // `status` (none | draft_setup | dry_run | live | …).
   has_agent: external_exports.boolean(),
   lifecycle: agentLifecycleSchema,
-  agent_id: uuidSchema20.nullable(),
+  agent_id: uuidSchema21.nullable(),
   kind: agentKindSchema2.nullable(),
   display_name: external_exports.string().nullable(),
   lane: agentLaneSchema3.nullable(),
@@ -37457,9 +37612,9 @@ var agentStatusOutputSchema = external_exports.object({
   schedule_cron: external_exports.string().nullable(),
   schedule_timezone: external_exports.string().min(1).max(100).nullable(),
   live: external_exports.boolean(),
-  charter_version_id: uuidSchema20.nullable(),
+  charter_version_id: uuidSchema21.nullable(),
   steward_chain: external_exports.array(external_exports.object({
-    seat_id: uuidSchema20,
+    seat_id: uuidSchema21,
     name: external_exports.string()
   }).strict()),
   steward_chain_resolves_to_human: external_exports.boolean(),
@@ -37500,7 +37655,7 @@ var fleetWorkEvidenceSchema = external_exports.object({
   label: external_exports.string(),
   detail: external_exports.string(),
   href: external_exports.string().nullable(),
-  run_id: uuidSchema20.nullable(),
+  run_id: uuidSchema21.nullable(),
   linkable_run: external_exports.boolean(),
   can_run_now: external_exports.boolean()
 }).strict();
@@ -37514,7 +37669,7 @@ var fleetWorkProgressSchema = external_exports.object({
   last_durable_activity_at: isoDateTime7.nullable()
 }).strict();
 var fleetOverviewRowSchema = external_exports.object({
-  seat_id: uuidSchema20,
+  seat_id: uuidSchema21,
   seat_name: external_exports.string(),
   seat_path: external_exports.string(),
   // DER-2068 (N-2): the seat's immediate parent seat name (null for the root
@@ -37551,7 +37706,7 @@ var agentListFleetOutputSchema = external_exports.object({
   agents: external_exports.array(fleetOverviewRowSchema)
 }).strict();
 var runErrorLogSchema = external_exports.object({
-  error_log_id: uuidSchema20,
+  error_log_id: uuidSchema21,
   source: external_exports.enum(["run", "llm", "tool", "mcp", "runner", "integration", "job", "web"]),
   severity: external_exports.enum(["warning", "error", "critical"]),
   code: external_exports.string().nullable(),
@@ -37564,9 +37719,9 @@ var agentFleetDigestInputSchema = external_exports.object({
   error_limit: external_exports.number().int().min(1).max(100).default(50)
 }).strict();
 var fleetDigestRunSchema = external_exports.object({
-  run_id: uuidSchema20,
-  seat_id: uuidSchema20,
-  agent_id: uuidSchema20,
+  run_id: uuidSchema21,
+  seat_id: uuidSchema21,
+  agent_id: uuidSchema21,
   status: runStatusSchema,
   lane: agentLaneSchema3,
   model: external_exports.string(),
@@ -37576,22 +37731,22 @@ var fleetDigestRunSchema = external_exports.object({
   error_logs: external_exports.array(runErrorLogSchema)
 }).strict();
 var fleetDigestErrorSchema = runErrorLogSchema.extend({
-  seat_id: uuidSchema20.nullable(),
-  agent_id: uuidSchema20.nullable(),
-  run_id: uuidSchema20.nullable(),
+  seat_id: uuidSchema21.nullable(),
+  agent_id: uuidSchema21.nullable(),
+  run_id: uuidSchema21.nullable(),
   disposition: external_exports.enum(["active", "acknowledged", "resolved", "superseded"])
 }).strict();
 var fleetDigestNotificationErrorSchema = external_exports.object({
-  notification_id: uuidSchema20,
+  notification_id: uuidSchema21,
   kind: external_exports.string(),
   channel: external_exports.string(),
   status: external_exports.string(),
   provider: external_exports.string(),
   error_message: external_exports.string().nullable(),
-  error_log_id: uuidSchema20.nullable(),
+  error_log_id: uuidSchema21.nullable(),
   source: external_exports.enum(["run", "llm", "tool", "mcp", "runner", "integration", "job", "web"]).nullable(),
-  seat_id: uuidSchema20.nullable(),
-  run_id: uuidSchema20.nullable(),
+  seat_id: uuidSchema21.nullable(),
+  run_id: uuidSchema21.nullable(),
   created_at: isoDateTime7
 }).strict();
 var fleetDigestAgentSchema = fleetOverviewRowSchema.extend({
@@ -37640,21 +37795,21 @@ var seatTrustSummarySchema = external_exports.object({
   last_activity_at: isoDateTime7.nullable()
 }).strict();
 var agentListRunsInputSchema = external_exports.object({
-  seat_id: uuidSchema20,
+  seat_id: uuidSchema21,
   // Conservative, bounded page size; the timeline is a recent-history view.
   limit: external_exports.number().int().min(1).max(200).default(50)
 }).strict();
 var agentGetRunInputSchema = external_exports.object({
-  seat_id: uuidSchema20,
-  run_id: uuidSchema20,
+  seat_id: uuidSchema21,
+  run_id: uuidSchema21,
   // DER-1661: opt in to the persisted session transcript (`--transcript`). Off by
   // default so the diagnostic read stays lean; the (potentially large) transcript body
   // loads only when asked.
   transcript: external_exports.boolean().default(false)
 }).strict();
 var seatRunSchema = external_exports.object({
-  run_id: uuidSchema20,
-  agent_id: uuidSchema20,
+  run_id: uuidSchema21,
+  agent_id: uuidSchema21,
   agent_display_name: external_exports.string().nullable(),
   status: runStatusSchema,
   lane: agentLaneSchema3,
@@ -37671,8 +37826,8 @@ var seatRunErrorLogSchema = runErrorLogSchema.extend({
   error_class: external_exports.string().nullable()
 }).strict();
 var seatRunDetailSchema = seatRunSchema.extend({
-  task_id: uuidSchema20.nullable(),
-  work_order_id: uuidSchema20.nullable(),
+  task_id: uuidSchema21.nullable(),
+  work_order_id: uuidSchema21.nullable(),
   transcript_ref: external_exports.string(),
   // DER-1913: null = usage UNKNOWN — a Codex / read-status / timeout / spawn-error
   // runner turn reports no model-usage envelope, so the run records no token count.
@@ -37682,8 +37837,8 @@ var seatRunDetailSchema = seatRunSchema.extend({
   outcome: external_exports.record(external_exports.string(), external_exports.unknown()),
   error_logs: external_exports.array(seatRunErrorLogSchema),
   skill_activations: external_exports.array(external_exports.object({
-    skill_activation_id: uuidSchema20,
-    skill_version_id: uuidSchema20,
+    skill_activation_id: uuidSchema21,
+    skill_version_id: uuidSchema21,
     slug: external_exports.string().min(1),
     name: external_exports.string().min(1),
     version: external_exports.number().int().positive(),
@@ -37700,23 +37855,23 @@ var seatRunDetailSchema = seatRunSchema.extend({
   transcript: sessionTranscriptReadResultSchema.nullable().optional()
 }).strict();
 var agentListRunsOutputSchema = external_exports.object({
-  seat_id: uuidSchema20,
+  seat_id: uuidSchema21,
   summary: seatTrustSummarySchema,
   runs: external_exports.array(seatRunSchema)
 }).strict();
 var agentGetRunOutputSchema = external_exports.object({
-  seat_id: uuidSchema20,
+  seat_id: uuidSchema21,
   run: seatRunDetailSchema
 }).strict();
 var agentListToolCallsInputSchema = external_exports.object({
-  seat_id: uuidSchema20,
+  seat_id: uuidSchema21,
   limit: external_exports.number().int().min(1).max(200).default(50),
   // When true, return only HELD (non-allowed) tool calls — the governance view.
   held_only: external_exports.boolean().default(false)
 }).strict();
 var seatToolCallSchema = external_exports.object({
-  tool_call_id: uuidSchema20,
-  run_id: uuidSchema20.nullable(),
+  tool_call_id: uuidSchema21,
+  run_id: uuidSchema21.nullable(),
   tool_name: external_exports.string(),
   guard_result: guardResultSchema,
   manifest_clause: external_exports.string().nullable(),
@@ -37725,13 +37880,13 @@ var seatToolCallSchema = external_exports.object({
   finished_at: isoDateTime7.nullable()
 }).strict();
 var agentListToolCallsOutputSchema = external_exports.object({
-  seat_id: uuidSchema20,
+  seat_id: uuidSchema21,
   summary: seatTrustSummarySchema,
   tool_calls: external_exports.array(seatToolCallSchema)
 }).strict();
 var agentWatchRunInputSchema = external_exports.object({
-  seat_id: uuidSchema20,
-  run_id: uuidSchema20
+  seat_id: uuidSchema21,
+  run_id: uuidSchema21
 }).strict();
 var runWatchCurrentStateSchema = external_exports.object({
   state: workProgressStateSchema,
@@ -37752,7 +37907,7 @@ var runWatchHeartbeatSchema = external_exports.object({
   reasons: external_exports.array(external_exports.string())
 }).strict();
 var agentWatchRunOutputSchema = external_exports.object({
-  seat_id: uuidSchema20,
+  seat_id: uuidSchema21,
   run: seatRunSchema,
   // the lean run row (status/lane/model/counts/timestamps)
   is_live: external_exports.boolean(),
@@ -37776,16 +37931,16 @@ var deliverableLinkSchema = external_exports.object({
   kind: external_exports.enum(["internal", "linear", "github", "external"])
 }).strict();
 var deliverableIdSchema = external_exports.union([
-  uuidSchema20,
+  uuidSchema21,
   external_exports.string().regex(/^run:[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i)
 ]);
 var deliverableRowSchema = external_exports.object({
   id: deliverableIdSchema,
-  seat_id: uuidSchema20,
-  agent_id: uuidSchema20.nullable(),
-  run_id: uuidSchema20.nullable(),
-  task_id: uuidSchema20.nullable(),
-  work_order_id: uuidSchema20.nullable(),
+  seat_id: uuidSchema21,
+  agent_id: uuidSchema21.nullable(),
+  run_id: uuidSchema21.nullable(),
+  task_id: uuidSchema21.nullable(),
+  work_order_id: uuidSchema21.nullable(),
   kind: deliverableKindSchema,
   title: external_exports.string(),
   summary: external_exports.string().nullable(),
@@ -37805,13 +37960,13 @@ var deliverableRowSchema = external_exports.object({
   receipt_presence: receiptPresenceSchema
 }).strict();
 var deliverableListInputSchema = external_exports.object({
-  seat_id: uuidSchema20
+  seat_id: uuidSchema21
 }).strict();
 var deliverableListOutputSchema = external_exports.object({
   deliverables: external_exports.array(deliverableRowSchema)
 }).strict();
 var deliverableGetInputSchema = external_exports.object({
-  seat_id: uuidSchema20,
+  seat_id: uuidSchema21,
   deliverable_id: deliverableIdSchema
 }).strict();
 var deliverableGetOutputSchema = external_exports.object({
@@ -37819,12 +37974,12 @@ var deliverableGetOutputSchema = external_exports.object({
 }).strict();
 var mcpTokenListInputSchema = external_exports.object({
   include_revoked: external_exports.boolean().default(false),
-  seat_id: uuidSchema20.optional()
+  seat_id: uuidSchema21.optional()
 }).strict();
 var mcpTokenMetadataSchema = external_exports.object({
-  token_id: uuidSchema20,
+  token_id: uuidSchema21,
   scope: mcpScopeSchema,
-  seat_id: uuidSchema20.nullable(),
+  seat_id: uuidSchema21.nullable(),
   created_at: isoDateTime7,
   last_seen_at: isoDateTime7.nullable(),
   // DER-830: expires_at is now always present (the column is NOT NULL).
@@ -37838,29 +37993,29 @@ var mcpTokenListOutputSchema = external_exports.object({
   tokens: external_exports.array(mcpTokenMetadataSchema)
 }).strict();
 var errorLogListInputSchema = external_exports.object({
-  seat_id: uuidSchema20.optional(),
+  seat_id: uuidSchema21.optional(),
   source: external_exports.enum(["run", "llm", "tool", "mcp", "runner", "integration", "job", "web"]).optional(),
   severity: external_exports.enum(["warning", "error", "critical"]).optional(),
   resolved: external_exports.enum(["active", "acknowledged", "resolved", "all"]).default("active"),
   limit: external_exports.number().int().min(1).max(200).default(50)
 }).strict();
 var errorLogListItemSchema = external_exports.object({
-  error_log_id: uuidSchema20,
+  error_log_id: uuidSchema21,
   source: external_exports.enum(["run", "llm", "tool", "mcp", "runner", "integration", "job", "web"]),
   severity: external_exports.enum(["warning", "error", "critical"]),
   code: external_exports.string().nullable(),
   message: external_exports.string(),
-  seat_id: uuidSchema20.nullable(),
-  agent_id: uuidSchema20.nullable(),
-  run_id: uuidSchema20.nullable(),
+  seat_id: uuidSchema21.nullable(),
+  agent_id: uuidSchema21.nullable(),
+  run_id: uuidSchema21.nullable(),
   disposition: external_exports.enum(["active", "acknowledged", "resolved", "superseded"]),
   resolved_at: isoDateTime7.nullable(),
-  resolved_by: uuidSchema20.nullable(),
+  resolved_by: uuidSchema21.nullable(),
   resolution_reason: external_exports.string().nullable(),
-  linked_task_id: uuidSchema20.nullable(),
-  linked_issue_id: uuidSchema20.nullable(),
+  linked_task_id: uuidSchema21.nullable(),
+  linked_issue_id: uuidSchema21.nullable(),
   linked_pr_ref: external_exports.string().nullable(),
-  superseded_by_id: uuidSchema20.nullable(),
+  superseded_by_id: uuidSchema21.nullable(),
   created_at: isoDateTime7
 }).strict();
 var errorLogListOutputSchema = external_exports.object({
@@ -37868,29 +38023,29 @@ var errorLogListOutputSchema = external_exports.object({
   total: external_exports.number().int().nonnegative()
 }).strict();
 var errorLogResolveInputSchema = external_exports.object({
-  error_log_id: uuidSchema20,
+  error_log_id: uuidSchema21,
   reason: external_exports.string().trim().min(1),
   disposition: external_exports.enum(["acknowledged", "resolved"]).default("acknowledged"),
-  linked_task_id: uuidSchema20.optional(),
-  linked_issue_id: uuidSchema20.optional(),
+  linked_task_id: uuidSchema21.optional(),
+  linked_issue_id: uuidSchema21.optional(),
   linked_pr_ref: external_exports.string().trim().min(1).optional()
 }).strict();
 var errorLogResolveOutputSchema = external_exports.object({
-  error_log_id: uuidSchema20,
+  error_log_id: uuidSchema21,
   disposition: external_exports.enum(["acknowledged", "resolved"]),
   resolved_at: isoDateTime7
 }).strict();
 var errorLogSupersedeInputSchema = external_exports.object({
-  error_log_id: uuidSchema20,
-  new_error_log_id: uuidSchema20,
+  error_log_id: uuidSchema21,
+  new_error_log_id: uuidSchema21,
   reason: external_exports.string().trim().min(1),
-  linked_task_id: uuidSchema20.optional(),
-  linked_issue_id: uuidSchema20.optional(),
+  linked_task_id: uuidSchema21.optional(),
+  linked_issue_id: uuidSchema21.optional(),
   linked_pr_ref: external_exports.string().trim().min(1).optional()
 }).strict();
 var errorLogSupersedeOutputSchema = external_exports.object({
-  error_log_id: uuidSchema20,
-  superseded_by_id: uuidSchema20,
+  error_log_id: uuidSchema21,
+  superseded_by_id: uuidSchema21,
   disposition: external_exports.literal("superseded"),
   resolved_at: isoDateTime7
 }).strict();
@@ -37901,17 +38056,17 @@ var staleCandidatesInputSchema = external_exports.object({
   limit: external_exports.number().int().min(1).max(200).default(50)
 }).strict();
 var errorLogStaleCandidateSchema = external_exports.object({
-  error_log_id: uuidSchema20,
+  error_log_id: uuidSchema21,
   source: external_exports.enum(["run", "llm", "tool", "mcp", "runner", "integration", "job", "web"]),
   severity: external_exports.enum(["warning", "error", "critical"]),
   code: external_exports.string().nullable(),
   message: external_exports.string(),
-  seat_id: uuidSchema20.nullable(),
+  seat_id: uuidSchema21.nullable(),
   occurrence_count: external_exports.number().int(),
   last_seen_at: isoDateTime7,
   created_at: isoDateTime7,
   days_stale: external_exports.number().int(),
-  linked_issue_id: uuidSchema20.nullable(),
+  linked_issue_id: uuidSchema21.nullable(),
   linked_issue_resolved: external_exports.boolean(),
   confidence: staleCandidateConfidenceSchema,
   evidence: staleCandidateEvidenceSchema
@@ -37921,8 +38076,8 @@ var errorLogStaleCandidatesOutputSchema = external_exports.object({
   total: external_exports.number().int().nonnegative()
 }).strict();
 var escalationStaleCandidateSchema = external_exports.object({
-  escalation_id: uuidSchema20,
-  seat_id: uuidSchema20,
+  escalation_id: uuidSchema21,
+  seat_id: uuidSchema21,
   seat_name: external_exports.string(),
   reason: external_exports.string(),
   status: external_exports.literal("open"),
@@ -37938,14 +38093,14 @@ var escalationStaleCandidatesOutputSchema = external_exports.object({
   total: external_exports.number().int().nonnegative()
 }).strict();
 var frictionStaleCandidateSchema = external_exports.object({
-  issue_id: uuidSchema20,
+  issue_id: uuidSchema21,
   summary: external_exports.string(),
   severity: external_exports.enum(["low", "med", "high", "critical"]),
   status: external_exports.enum(["open", "diagnosing"]),
   created_at: isoDateTime7,
   updated_at: isoDateTime7,
   days_stale: external_exports.number().int(),
-  action_task_id: uuidSchema20.nullable(),
+  action_task_id: uuidSchema21.nullable(),
   action_task_status: external_exports.string().nullable(),
   action_task_done: external_exports.boolean(),
   confidence: staleCandidateConfidenceSchema,
@@ -37956,20 +38111,20 @@ var frictionStaleCandidatesOutputSchema = external_exports.object({
   total: external_exports.number().int().nonnegative()
 }).strict();
 var errorLogBulkResolveInputSchema = external_exports.object({
-  error_log_ids: external_exports.array(uuidSchema20).min(1).max(200),
+  error_log_ids: external_exports.array(uuidSchema21).min(1).max(200),
   reason: external_exports.string().trim().min(1),
   disposition: external_exports.enum(["acknowledged", "resolved"]).default("resolved")
 }).strict();
 var errorLogBulkResolveSkippedSchema = external_exports.object({
-  error_log_id: uuidSchema20,
+  error_log_id: uuidSchema21,
   reason: external_exports.string()
 }).strict();
 var errorLogBulkResolveFailedSchema = external_exports.object({
-  error_log_id: uuidSchema20,
+  error_log_id: uuidSchema21,
   reason: external_exports.string()
 }).strict();
 var errorLogBulkResolveOutputSchema = external_exports.object({
-  resolved: external_exports.array(uuidSchema20),
+  resolved: external_exports.array(uuidSchema21),
   skipped: external_exports.array(errorLogBulkResolveSkippedSchema),
   failed: external_exports.array(errorLogBulkResolveFailedSchema),
   resolved_count: external_exports.number().int().nonnegative(),
@@ -37978,19 +38133,19 @@ var errorLogBulkResolveOutputSchema = external_exports.object({
   total: external_exports.number().int().nonnegative()
 }).strict();
 var escalationBulkResolveInputSchema = external_exports.object({
-  escalation_ids: external_exports.array(uuidSchema20).min(1).max(200),
+  escalation_ids: external_exports.array(uuidSchema21).min(1).max(200),
   reason: external_exports.string().trim().min(1)
 }).strict();
 var escalationBulkResolveSkippedSchema = external_exports.object({
-  escalation_id: uuidSchema20,
+  escalation_id: uuidSchema21,
   reason: external_exports.string()
 }).strict();
 var escalationBulkResolveFailedSchema = external_exports.object({
-  escalation_id: uuidSchema20,
+  escalation_id: uuidSchema21,
   reason: external_exports.string()
 }).strict();
 var escalationBulkResolveOutputSchema = external_exports.object({
-  resolved: external_exports.array(uuidSchema20),
+  resolved: external_exports.array(uuidSchema21),
   skipped: external_exports.array(escalationBulkResolveSkippedSchema),
   failed: external_exports.array(escalationBulkResolveFailedSchema),
   resolved_count: external_exports.number().int().nonnegative(),
@@ -37999,19 +38154,19 @@ var escalationBulkResolveOutputSchema = external_exports.object({
   total: external_exports.number().int().nonnegative()
 }).strict();
 var frictionBulkResolveInputSchema = external_exports.object({
-  issue_ids: external_exports.array(uuidSchema20).min(1).max(200),
+  issue_ids: external_exports.array(uuidSchema21).min(1).max(200),
   root_cause: external_exports.string().trim().min(1)
 }).strict();
 var frictionBulkResolveSkippedSchema = external_exports.object({
-  issue_id: uuidSchema20,
+  issue_id: uuidSchema21,
   reason: external_exports.string()
 }).strict();
 var frictionBulkResolveFailedSchema = external_exports.object({
-  issue_id: uuidSchema20,
+  issue_id: uuidSchema21,
   reason: external_exports.string()
 }).strict();
 var frictionBulkResolveOutputSchema = external_exports.object({
-  resolved: external_exports.array(uuidSchema20),
+  resolved: external_exports.array(uuidSchema21),
   skipped: external_exports.array(frictionBulkResolveSkippedSchema),
   failed: external_exports.array(frictionBulkResolveFailedSchema),
   resolved_count: external_exports.number().int().nonnegative(),
@@ -38021,10 +38176,10 @@ var frictionBulkResolveOutputSchema = external_exports.object({
 }).strict();
 var runHeartbeatStateSchema = external_exports.enum(["working", "quiet_healthy", "recovered", "stalled", "unavailable"]);
 var agentRunHeartbeatsInputSchema = external_exports.object({
-  seat_ids: external_exports.array(uuidSchema20).min(1).max(200).optional()
+  seat_ids: external_exports.array(uuidSchema21).min(1).max(200).optional()
 }).strict();
 var runHeartbeatSeatRollupSchema = external_exports.object({
-  seat_id: uuidSchema20,
+  seat_id: uuidSchema21,
   state: runHeartbeatStateSchema,
   stalled: external_exports.boolean(),
   run_count: external_exports.number().int().nonnegative(),
@@ -38144,13 +38299,13 @@ var runSummaryOutputSchema = external_exports.object({
 });
 
 // ../../packages/protocol/src/system-health.ts
-var uuidSchema21 = external_exports.string().uuid();
+var uuidSchema22 = external_exports.string().uuid();
 var isoDateTime9 = external_exports.string().datetime({ offset: true });
 var systemHealthCallerKindSchema = external_exports.enum(["tenant_admin", "member", "seat_token"]);
 var systemHealthCallerSchema = external_exports.object({
   kind: systemHealthCallerKindSchema,
-  seat_id: uuidSchema21.optional(),
-  seat_ids: external_exports.array(uuidSchema21).min(1).optional()
+  seat_id: uuidSchema22.optional(),
+  seat_ids: external_exports.array(uuidSchema22).min(1).optional()
 }).strict();
 var systemHealthVerdictSchema = external_exports.enum(["healthy", "degraded", "blocked"]);
 var systemHealthSeveritySchema = external_exports.enum(["info", "warning", "critical"]);
@@ -38188,18 +38343,18 @@ var systemHealthFindingSchema = external_exports.object({
   summary: external_exports.string().min(1),
   detail: external_exports.string().min(1),
   remediation: systemHealthActionSchema,
-  seat_id: uuidSchema21.nullable(),
-  goal_id: uuidSchema21.nullable(),
-  run_id: uuidSchema21.nullable(),
-  issue_id: uuidSchema21.nullable(),
-  task_id: uuidSchema21.nullable(),
-  error_log_id: uuidSchema21.nullable()
+  seat_id: uuidSchema22.nullable(),
+  goal_id: uuidSchema22.nullable(),
+  run_id: uuidSchema22.nullable(),
+  issue_id: uuidSchema22.nullable(),
+  task_id: uuidSchema22.nullable(),
+  error_log_id: uuidSchema22.nullable()
 }).strict();
 var systemHealthScopeSchema = external_exports.object({
   mode: systemHealthScopeModeSchema,
-  root_seat_ids: external_exports.array(uuidSchema21),
-  included_seat_ids: external_exports.array(uuidSchema21),
-  requested_seat_id: uuidSchema21.nullable(),
+  root_seat_ids: external_exports.array(uuidSchema22),
+  included_seat_ids: external_exports.array(uuidSchema22),
+  requested_seat_id: uuidSchema22.nullable(),
   total_seat_count: external_exports.number().int().nonnegative()
 }).strict();
 var systemHealthFleetSectionSchema = external_exports.object({
@@ -38256,7 +38411,7 @@ var systemHealthSectionsSchema = external_exports.object({
   sync: systemHealthSyncSectionSchema
 }).strict();
 var systemHealthInputSchema = external_exports.object({
-  seat_id: uuidSchema21.optional()
+  seat_id: uuidSchema22.optional()
 }).strict();
 var systemHealthCheckInputSchema = systemHealthInputSchema.extend({
   caller: systemHealthCallerSchema
@@ -38283,10 +38438,10 @@ var baserowFilteredCountInputSchema = external_exports.object({
 }).strict();
 
 // ../../packages/protocol/src/signal-report.ts
-var uuidSchema22 = external_exports.string().uuid();
+var uuidSchema23 = external_exports.string().uuid();
 var dateOnlySchema3 = external_exports.string().regex(/^\d{4}-\d{2}-\d{2}$/, "expected YYYY-MM-DD");
 var signalReportInputSchema = external_exports.object({
-  measurable_id: uuidSchema22,
+  measurable_id: uuidSchema23,
   value: external_exports.number().finite(),
   // Optional; defaults to the measurable's current period (resolved in the
   // command against the measurable's own cadence via the canonical bounds).
@@ -38297,8 +38452,8 @@ var signalReportInputSchema = external_exports.object({
   confidence: external_exports.enum(["low", "medium", "high"]).optional()
 }).strict();
 var signalReportOutputSchema = external_exports.object({
-  reading_id: uuidSchema22,
-  measurable_id: uuidSchema22,
+  reading_id: uuidSchema23,
+  measurable_id: uuidSchema23,
   // Always false: an agent-sourced reading is a draft until a human confirms it.
   confirmed: external_exports.literal(false)
 }).strict();
@@ -38329,12 +38484,12 @@ var signalReadingProposalSchema = external_exports.object({
 });
 
 // ../../packages/protocol/src/signal-draft-first-readings.ts
-var uuidSchema23 = external_exports.string().uuid();
+var uuidSchema24 = external_exports.string().uuid();
 var signalDraftFirstReadingsInputSchema = external_exports.object({
-  measurable_id: uuidSchema23
+  measurable_id: uuidSchema24
 }).strict();
 var signalDraftFirstReadingsOutputSchema = external_exports.object({
-  measurable_id: uuidSchema23,
+  measurable_id: uuidSchema24,
   // The live pull outcome, surfaced verbatim so the UI can explain a no-datapoint
   // result honestly ("source polled, nothing came back") rather than silently.
   outcome: external_exports.enum(["ok", "blocked", "error"]),
@@ -38342,7 +38497,7 @@ var signalDraftFirstReadingsOutputSchema = external_exports.object({
   // Never fabricates back-dated history the source cannot actually produce.
   drafted: external_exports.number().int().min(0).max(1),
   // Present only when drafted === 1.
-  reading_id: uuidSchema23.optional(),
+  reading_id: uuidSchema24.optional(),
   value: external_exports.number().finite().optional(),
   period_start: external_exports.string().regex(/^\d{4}-\d{2}-\d{2}$/, "expected YYYY-MM-DD").optional(),
   // Present only when drafted === 0: a short, non-secret machine reason
@@ -40050,7 +40205,7 @@ var softwareFactoryBudgetExhaustedEventSchema = external_exports.object({
 }).strict();
 
 // ../../packages/protocol/src/sync-brief.ts
-var uuidSchema24 = external_exports.string().uuid();
+var uuidSchema25 = external_exports.string().uuid();
 var dateSchema = external_exports.string().regex(/^\d{4}-\d{2}-\d{2}$/);
 var syncBriefGapSchema = external_exports.object({
   section: external_exports.enum(["exceptions", "goal_deltas", "task_review", "friction", "agent_activity"]),
@@ -40063,8 +40218,8 @@ var sectionSchema = (itemSchema) => external_exports.object({
   flagged_gaps: external_exports.array(syncBriefGapSchema)
 }).strict();
 var syncBriefExceptionSchema = external_exports.object({
-  measurable_id: uuidSchema24,
-  seat_id: uuidSchema24,
+  measurable_id: uuidSchema25,
+  seat_id: uuidSchema25,
   seat_name: external_exports.string().min(1),
   name: external_exports.string().min(1),
   state: external_exports.enum(["risk", "crit", "pending"]),
@@ -40075,8 +40230,8 @@ var syncBriefExceptionSchema = external_exports.object({
   freshness: external_exports.enum(["fresh", "due", "stale", "awaiting_first_reading", "not_expected"]).optional()
 }).strict();
 var syncBriefGoalDeltaSchema = external_exports.object({
-  goal_id: uuidSchema24,
-  seat_id: uuidSchema24.nullable(),
+  goal_id: uuidSchema25,
+  seat_id: uuidSchema25.nullable(),
   seat_name: external_exports.string().nullable(),
   title: external_exports.string().min(1),
   status: external_exports.enum(["on", "off", "done", "dropped"]),
@@ -40103,22 +40258,22 @@ var syncBriefTaskReviewSchema = external_exports.object({
   previous_done_rate: external_exports.number().min(0).max(1),
   delta: external_exports.number().min(-1).max(1),
   stalled: external_exports.array(external_exports.object({
-    task_id: uuidSchema24,
-    owner_seat_id: uuidSchema24,
+    task_id: uuidSchema25,
+    owner_seat_id: uuidSchema25,
     owner_seat_name: external_exports.string().min(1),
     title: external_exports.string().min(1),
     due_on: dateSchema,
     stalled_at: external_exports.string().nullable()
   }).strict()),
   overdue_by_owner: external_exports.array(external_exports.object({
-    owner_seat_id: uuidSchema24,
+    owner_seat_id: uuidSchema25,
     owner_seat_name: external_exports.string().min(1),
     overdue_count: external_exports.number().int().nonnegative()
   }).strict())
 }).strict();
 var syncBriefIssueSchema = external_exports.object({
-  issue_id: uuidSchema24,
-  raised_by_seat_id: uuidSchema24,
+  issue_id: uuidSchema25,
+  raised_by_seat_id: uuidSchema25,
   raised_by_seat_name: external_exports.string().min(1),
   summary: external_exports.string().min(1),
   severity: external_exports.enum(["low", "med", "high", "critical"]),
@@ -40135,9 +40290,9 @@ var syncBriefActionItemTrendSchema = external_exports.object({
   has_prior: external_exports.boolean()
 }).strict();
 var syncBriefCascadeAtRiskSchema = external_exports.object({
-  goal_id: uuidSchema24,
+  goal_id: uuidSchema25,
   title: external_exports.string().min(1),
-  seat_id: uuidSchema24.nullable(),
+  seat_id: uuidSchema25.nullable(),
   progress_pct: external_exports.number().int().min(0).max(100),
   classification: external_exports.enum(["at_risk", "projected_miss"]),
   behind_days: external_exports.number().nullable(),
@@ -40146,7 +40301,7 @@ var syncBriefCascadeAtRiskSchema = external_exports.object({
   target_date: external_exports.string().date().nullable().optional()
 }).strict();
 var syncBriefRunHeartbeatStalledSeatSchema = external_exports.object({
-  seat_id: uuidSchema24,
+  seat_id: uuidSchema25,
   current_phase: external_exports.string().nullable(),
   stalled_run_count: external_exports.number().int().nonnegative()
 }).strict();
@@ -40171,8 +40326,8 @@ var syncBriefRunHeartbeatRollupSchema = external_exports.object({
   stalled_seats: external_exports.array(syncBriefRunHeartbeatStalledSeatSchema)
 }).strict();
 var syncBriefAgentActivitySchema = external_exports.object({
-  agent_id: uuidSchema24,
-  seat_id: uuidSchema24,
+  agent_id: uuidSchema25,
+  seat_id: uuidSchema25,
   seat_name: external_exports.string().min(1),
   run_count: external_exports.number().int().nonnegative(),
   failed_run_count: external_exports.number().int().nonnegative(),
@@ -40185,11 +40340,11 @@ var syncBriefAgentActivitySchema = external_exports.object({
 var syncBriefSchema = external_exports.object({
   schema_version: external_exports.literal(1),
   tenant: external_exports.object({
-    id: uuidSchema24,
+    id: uuidSchema25,
     name: external_exports.string().min(1)
   }).strict(),
   cluster: external_exports.object({
-    id: uuidSchema24,
+    id: uuidSchema25,
     name: external_exports.string().min(1)
   }).strict().nullable(),
   period: external_exports.object({
@@ -40306,11 +40461,11 @@ var usageSnapshotOutputSchema = external_exports.object({
 }).strict();
 
 // ../../packages/protocol/src/event-payloads.ts
-var uuidSchema25 = external_exports.string().uuid();
+var uuidSchema26 = external_exports.string().uuid();
 var evidenceSchema = external_exports.array(external_exports.unknown());
 var statusEventPayloadSchema = external_exports.object({
   measurables: external_exports.array(external_exports.object({
-    id: uuidSchema25,
+    id: uuidSchema26,
     value: external_exports.number().finite(),
     // DER-1045: an optional, non-secret citation for an agent-proposed reading
     // (signal.report) — where the number came from + the agent's confidence.
@@ -40345,7 +40500,7 @@ var statusEventPayloadSchema = external_exports.object({
     }).strict().optional()
   }).strict()).optional(),
   goals: external_exports.array(external_exports.object({
-    id: uuidSchema25,
+    id: uuidSchema26,
     state: external_exports.enum(["on", "off"]),
     note: external_exports.string().min(1).optional(),
     // DER-2214: structured status-event attribution so "deliberately human-pinned"
@@ -40377,8 +40532,8 @@ var escalationEventPayloadSchema = escalationRaiseInputSchema.extend({
 }).strict();
 var issueEventPayloadSchema = external_exports.object({
   summary: external_exports.string().min(1),
-  blocking_goal_id: uuidSchema25.optional(),
-  broken_measurable_id: uuidSchema25.optional(),
+  blocking_goal_id: uuidSchema26.optional(),
+  broken_measurable_id: uuidSchema26.optional(),
   evidence: evidenceSchema,
   severity: external_exports.enum(["low", "med", "high", "critical"]),
   // DER-1978 (S2): an OPTIONAL short human-readable title written at creation.
@@ -40390,7 +40545,7 @@ var issueEventPayloadSchema = external_exports.object({
 }).strict();
 
 // ../../packages/protocol/src/event-internal-payloads.ts
-var uuidSchema26 = external_exports.string().uuid();
+var uuidSchema27 = external_exports.string().uuid();
 var internalEventObjectSchema = external_exports.record(external_exports.string(), external_exports.unknown()).refine((payload) => !Array.isArray(payload), "Internal event payload must be an object");
 var actionEventPayloadSchema = external_exports.object({ action: external_exports.string().min(1) }).passthrough();
 function authoritativePrefixUnion(branches, authoritative) {
@@ -40412,25 +40567,25 @@ function authoritativePrefixUnion(branches, authoritative) {
 }
 var inviteCreatedEventPayloadSchema = external_exports.object({
   action: external_exports.literal("invite.created"),
-  invite_id: uuidSchema26,
+  invite_id: uuidSchema27,
   email: external_exports.string().email(),
   role: memberRoleSchema,
   member_type: memberTypeSchema,
   access_profile: memberAccessProfileSchema,
   aicos_access_scope: aicosAccessScopeSchema,
-  invited_by: uuidSchema26
+  invited_by: uuidSchema27
 }).strict();
 var inviteRevokedEventPayloadSchema = external_exports.object({
   action: external_exports.literal("invite.revoked"),
-  invite_id: uuidSchema26,
-  revoked_by: uuidSchema26
+  invite_id: uuidSchema27,
+  revoked_by: uuidSchema27
 }).strict();
 var inviteAcceptedEventPayloadSchema = external_exports.object({
   action: external_exports.literal("invite.accepted"),
-  invite_id: uuidSchema26,
-  user_id: uuidSchema26,
-  membership_id: uuidSchema26,
-  linked_seat_ids: external_exports.array(uuidSchema26)
+  invite_id: uuidSchema27,
+  user_id: uuidSchema27,
+  membership_id: uuidSchema27,
+  linked_seat_ids: external_exports.array(uuidSchema27)
 }).strict();
 var inviteLifecycleEventPayloadSchema = external_exports.union([
   inviteCreatedEventPayloadSchema,
@@ -40495,14 +40650,14 @@ var heldToolActionReplaySchema = external_exports.object({
 }).strict();
 
 // ../../packages/protocol/src/operating.ts
-var uuidSchema27 = external_exports.string().uuid();
+var uuidSchema28 = external_exports.string().uuid();
 var taskListInputSchema = external_exports.object({}).strict();
 var operatingTaskSchema = external_exports.object({
-  id: uuidSchema27,
+  id: uuidSchema28,
   title: external_exports.string(),
   description: external_exports.string().nullable(),
-  from_seat_id: uuidSchema27.nullable(),
-  goal_id: uuidSchema27.nullable(),
+  from_seat_id: uuidSchema28.nullable(),
+  goal_id: uuidSchema28.nullable(),
   acceptance_criteria: external_exports.unknown(),
   due_on: external_exports.string().nullable(),
   status: external_exports.string()
@@ -40511,54 +40666,54 @@ var taskListOutputSchema = external_exports.object({
   tasks: external_exports.array(operatingTaskSchema)
 }).strict();
 var taskAcceptInputSchema = external_exports.object({
-  id: uuidSchema27
+  id: uuidSchema28
 }).strict();
 var taskConfirmProposalInputSchema = external_exports.object({
-  id: uuidSchema27
+  id: uuidSchema28
 }).strict();
 var taskMutationOutputSchema = external_exports.object({
   task: external_exports.object({
-    id: uuidSchema27,
+    id: uuidSchema28,
     status: external_exports.string()
   }).strict()
 }).strict();
 var taskDeclineInputSchema = external_exports.object({
-  id: uuidSchema27,
+  id: uuidSchema28,
   reason: external_exports.string().min(1)
 }).strict();
 var taskDeclineOutputSchema = external_exports.object({
   task: external_exports.object({
-    id: uuidSchema27,
+    id: uuidSchema28,
     status: external_exports.string(),
     decline_reason: external_exports.string()
   }).strict()
 }).strict();
 var taskCompleteInputSchema = external_exports.object({
-  id: uuidSchema27,
+  id: uuidSchema28,
   summary: external_exports.string().min(1),
   artifacts: external_exports.unknown().optional()
 }).strict();
 var taskCompleteOutputSchema = external_exports.object({
-  task_id: uuidSchema27,
-  event_id: uuidSchema27,
+  task_id: uuidSchema28,
+  event_id: uuidSchema28,
   type: external_exports.literal("handoff")
 }).strict();
 var statusRecordOutputSchema = external_exports.object({
-  event_id: uuidSchema27,
+  event_id: uuidSchema28,
   type: external_exports.literal("status")
 }).strict();
 var frictionFileIssueInputSchema = issueEventPayloadSchema.extend({
   source_key: external_exports.string().trim().min(1).max(200).optional()
 }).strict();
 var duplicateFrictionCandidateSchema = external_exports.object({
-  issue_id: uuidSchema27,
+  issue_id: uuidSchema28,
   summary: external_exports.string().min(1),
   // pg_trgm similarity in [0, 1]; higher is more similar.
   similarity: external_exports.number().min(0).max(1)
 }).strict();
 var frictionFileIssueOutputSchema = external_exports.object({
-  event_id: uuidSchema27,
-  issue_id: uuidSchema27,
+  event_id: uuidSchema28,
+  issue_id: uuidSchema28,
   type: external_exports.literal("issue"),
   // DER-1522: likely-duplicate candidates detected before creation. Recommend,
   // never block — filing always proceeds; empty when nothing crossed the
@@ -40572,12 +40727,12 @@ var workLogInputSchema = external_exports.object({
   note: external_exports.string().min(1)
 }).strict();
 var workLogOutputSchema = external_exports.object({
-  event_id: uuidSchema27,
+  event_id: uuidSchema28,
   type: external_exports.literal("task")
 }).strict();
 var escalationRaiseOutputSchema = external_exports.object({
-  event_id: uuidSchema27,
-  escalation_id: uuidSchema27,
+  event_id: uuidSchema28,
+  escalation_id: uuidSchema28,
   type: external_exports.literal("escalation")
 }).strict();
 var deliverableKindSchema2 = external_exports.enum(["brief", "work_evidence", "artifact", "report", "other"]);
@@ -40636,7 +40791,7 @@ var deliverableRejectOutputSchema = external_exports.object({
 }).strict();
 
 // ../../packages/protocol/src/steward.ts
-var uuidSchema28 = external_exports.string().uuid();
+var uuidSchema29 = external_exports.string().uuid();
 var escalationStatusSchema = external_exports.enum([
   "open",
   "approved",
@@ -40645,18 +40800,18 @@ var escalationStatusSchema = external_exports.enum([
 ]);
 var stewardReplayActionSummarySchema = external_exports.object({
   tool_name: external_exports.string(),
-  run_id: uuidSchema28
+  run_id: uuidSchema29
 }).strict();
 var stewardProposedToolCallSchema = external_exports.object({
   tool_name: external_exports.string(),
   args_summary: external_exports.unknown()
 }).strict();
 var stewardEscalationSchema = external_exports.object({
-  id: uuidSchema28,
-  seat_id: uuidSchema28,
+  id: uuidSchema29,
+  seat_id: uuidSchema29,
   seat_name: external_exports.string(),
   seat_type: external_exports.enum(["human", "agent", "hybrid"]),
-  steward_seat_id: uuidSchema28,
+  steward_seat_id: uuidSchema29,
   steward_seat_name: external_exports.string(),
   reason: external_exports.string(),
   // DER-1978 (S2): OPTIONAL short headline written at creation; null/absent when unset
@@ -40679,11 +40834,11 @@ var stewardEscalationSchema = external_exports.object({
   proposed_tool_call: stewardProposedToolCallSchema.optional(),
   recommended_action: external_exports.string().nullable(),
   status: escalationStatusSchema,
-  decided_by: uuidSchema28.nullable(),
+  decided_by: uuidSchema29.nullable(),
   decided_by_name: external_exports.string().nullable(),
   decided_at: external_exports.string().nullable(),
   decision_note: external_exports.string().nullable(),
-  issue_id: uuidSchema28.nullable(),
+  issue_id: uuidSchema29.nullable(),
   created_at: external_exports.string(),
   updated_at: external_exports.string()
 }).strict();
@@ -40694,27 +40849,27 @@ var escalationListOutputSchema = external_exports.object({
   escalations: external_exports.array(stewardEscalationSchema)
 }).strict();
 var escalationGetInputSchema = external_exports.object({
-  id: uuidSchema28
+  id: uuidSchema29
 }).strict();
 var escalationGetOutputSchema = external_exports.object({
   escalation: stewardEscalationSchema
 }).strict();
 var escalationResolveActionSchema = external_exports.enum(["approve", "convert_to_issue"]);
 var escalationResolveInputSchema = external_exports.object({
-  id: uuidSchema28,
+  id: uuidSchema29,
   action: escalationResolveActionSchema.optional(),
   rationale: external_exports.string().trim().min(1).optional()
 }).strict();
 var escalationRejectInputSchema = external_exports.object({
-  id: uuidSchema28,
+  id: uuidSchema29,
   rationale: external_exports.string().trim().min(1).optional()
 }).strict();
 var escalationDecisionOutputSchema = external_exports.object({
-  escalation_id: uuidSchema28,
+  escalation_id: uuidSchema29,
   status: escalationStatusSchema,
-  decision_id: uuidSchema28,
-  decided_by: uuidSchema28,
-  issue_id: uuidSchema28.nullable(),
+  decision_id: uuidSchema29,
+  decided_by: uuidSchema29,
+  issue_id: uuidSchema29.nullable(),
   // DER-1478: true when the resolved escalation carries a durable replay_action
   // (an approval-gated connector write) that the approvals path should actuate
   // after this decision is recorded. Omitted (not false) for non-connector
@@ -40895,7 +41050,7 @@ var workDetailsSchemas = {
 };
 
 // ../../packages/protocol/src/agent-grant-intervention.ts
-var uuidSchema29 = external_exports.string().uuid();
+var uuidSchema30 = external_exports.string().uuid();
 var agentGrantBlockerKindSchema = external_exports.enum([
   "rost_capability",
   "os_permission",
@@ -40912,16 +41067,16 @@ var agentGrantInterventionStatusSchema = external_exports.enum([
 ]);
 var agentGrantKindSchema = external_exports.enum(["allow_once", "permanent"]);
 var agentGrantInterventionSchema = external_exports.object({
-  id: uuidSchema29,
-  seat_id: uuidSchema29,
+  id: uuidSchema30,
+  seat_id: uuidSchema30,
   seat_name: external_exports.string().nullable(),
-  agent_id: uuidSchema29.nullable(),
+  agent_id: uuidSchema30.nullable(),
   // The source blocked attempt (audit link); null once the run is retention-purged.
-  run_id: uuidSchema29.nullable(),
+  run_id: uuidSchema30.nullable(),
   // The runner the blocker lives on, for os_permission repairs ("Open on Runner").
-  runner_id: uuidSchema29.nullable(),
+  runner_id: uuidSchema30.nullable(),
   // The linked continuation attempt, populated when a continuation is enqueued.
-  continuation_run_id: uuidSchema29.nullable(),
+  continuation_run_id: uuidSchema30.nullable(),
   blocker_kind: agentGrantBlockerKindSchema,
   status: agentGrantInterventionStatusSchema,
   // The specific capability/scope requested (e.g. "gmail.send"), when applicable.
@@ -40936,7 +41091,7 @@ var agentGrantInterventionSchema = external_exports.object({
   // True once the blocked attempt released its lease/compute (AC #2 clean termination).
   compute_released: external_exports.boolean(),
   grant_kind: agentGrantKindSchema.nullable(),
-  decided_by: uuidSchema29.nullable(),
+  decided_by: uuidSchema30.nullable(),
   decided_by_name: external_exports.string().nullable(),
   decided_at: external_exports.string().nullable(),
   expires_at: external_exports.string().nullable(),
@@ -40945,7 +41100,7 @@ var agentGrantInterventionSchema = external_exports.object({
 }).strict();
 var agentGrantInterventionListInputSchema = external_exports.object({
   // Optional seat filter (a seat-scoped caller is additionally clamped to its own seat).
-  seat_id: uuidSchema29.optional(),
+  seat_id: uuidSchema30.optional(),
   // When true, include decided/terminal records (declined/resumed/expired) too;
   // by default only the actionable open blocked/granted records are returned.
   include_decided: external_exports.boolean().optional()
@@ -40954,14 +41109,14 @@ var agentGrantInterventionListOutputSchema = external_exports.object({
   interventions: external_exports.array(agentGrantInterventionSchema)
 }).strict();
 var agentGrantInterventionGetInputSchema = external_exports.object({
-  id: uuidSchema29
+  id: uuidSchema30
 }).strict();
 var agentGrantInterventionGetOutputSchema = external_exports.object({
   intervention: agentGrantInterventionSchema
 }).strict();
 var agentGrantInterventionDecideActionSchema = external_exports.enum(["grant", "decline"]);
 var agentGrantInterventionDecideInputSchema = external_exports.object({
-  intervention_id: uuidSchema29,
+  intervention_id: uuidSchema30,
   action: agentGrantInterventionDecideActionSchema,
   // Defaults to allow_once. `permanent` never auto-widens — it returns
   // requires_charter_resign so the surface routes the human to a Charter re-sign.
@@ -40973,12 +41128,12 @@ var agentGrantInterventionDecideInputSchema = external_exports.object({
   rationale: external_exports.string().trim().min(1).max(2e3).optional()
 }).strict();
 var agentGrantInterventionDecideOutputSchema = external_exports.object({
-  intervention_id: uuidSchema29,
+  intervention_id: uuidSchema30,
   status: agentGrantInterventionStatusSchema,
-  continuation_run_id: uuidSchema29.nullable(),
+  continuation_run_id: uuidSchema30.nullable(),
   // The human decision row written for a grant/decline (invariant #7). Null only
   // when a permanent grant deferred to a Charter re-sign (no one-time decision made).
-  decision_id: uuidSchema29.nullable(),
+  decision_id: uuidSchema30.nullable(),
   // True when the human chose the permanent option — the surface must route to a
   // Charter re-sign; no authority was widened by this call (invariant #10).
   requires_charter_resign: external_exports.boolean(),
@@ -40992,12 +41147,12 @@ var agentGrantInterventionDecideOutputSchema = external_exports.object({
   enqueue_failed: external_exports.boolean()
 }).strict();
 var agentGrantInterventionResumeInputSchema = external_exports.object({
-  intervention_id: uuidSchema29
+  intervention_id: uuidSchema30
 }).strict();
 var agentGrantInterventionResumeOutputSchema = external_exports.object({
-  intervention_id: uuidSchema29,
+  intervention_id: uuidSchema30,
   status: agentGrantInterventionStatusSchema,
-  continuation_run_id: uuidSchema29.nullable(),
+  continuation_run_id: uuidSchema30.nullable(),
   enqueue_failed: external_exports.boolean()
 }).strict();
 
@@ -41015,7 +41170,7 @@ var eventTypes = [
   "task"
 ];
 var publicMessageTypes = ["status", "handoff", "escalation", "issue"];
-var uuidSchema30 = external_exports.string().uuid();
+var uuidSchema31 = external_exports.string().uuid();
 var evidenceSchema2 = external_exports.array(external_exports.unknown());
 var internalEventPayloadSchema = external_exports.record(external_exports.string(), external_exports.unknown()).refine((payload) => !Array.isArray(payload), "Internal event payload must be an object");
 var handoffEventPayloadSchema = external_exports.object({
@@ -41025,24 +41180,24 @@ var handoffEventPayloadSchema = external_exports.object({
     acceptance_criteria: external_exports.array(external_exports.string().min(1)),
     due: external_exports.string().datetime({ offset: true })
   }).strict(),
-  to_seat_id: uuidSchema30
+  to_seat_id: uuidSchema31
 }).strict();
 var intakeEventPayloadSchema = external_exports.discriminatedUnion("action", [
   external_exports.object({
     action: external_exports.literal("uploaded"),
-    document_id: uuidSchema30,
+    document_id: uuidSchema31,
     storage_ref: external_exports.string().min(1)
   }).strict(),
   external_exports.object({
     action: external_exports.literal("parsed"),
-    document_id: uuidSchema30,
+    document_id: uuidSchema31,
     mode: external_exports.enum(["source_tree", "function_first"]),
     seat_count: external_exports.number().int().nonnegative(),
     edge_count: external_exports.number().int().nonnegative()
   }).strict(),
   external_exports.object({
     action: external_exports.literal("failed"),
-    document_id: uuidSchema30,
+    document_id: uuidSchema31,
     reason: external_exports.string().min(1)
   }).strict(),
   external_exports.object({
@@ -41148,9 +41303,9 @@ var publicMessageTypeSchema = external_exports.enum(publicMessageTypes);
 var eventEnvelopeBaseSchema = external_exports.object({
   protocol: external_exports.literal(EVENT_PROTOCOL),
   type: eventTypeSchema,
-  seat_id: uuidSchema30.nullable(),
+  seat_id: uuidSchema31.nullable(),
   occurred_at: external_exports.string().datetime({ offset: true }),
-  goal_ancestry: external_exports.array(uuidSchema30),
+  goal_ancestry: external_exports.array(uuidSchema31),
   // DER-2381: optional so historical rows and every caller that hasn't been
   // updated yet keep parsing — but every per-type writer envelope below
   // extends THIS base and re-`.strict()`s, so adding it here propagates the
@@ -51896,7 +52051,7 @@ var referenceDocuments = [
     order: 10,
     title: "{{brand}} implementation method",
     summary: "The staged operating-system setup path used by humans, CLI sessions, MCP clients, and in-app agents.",
-    version: "2026-07-29.3",
+    version: "2026-07-29.4",
     public: true,
     audiences: ["human", "cli", "mcp", "in_app_agent"],
     stages: ["company_setup", "graph_design", "charter_design", "staffing", "operating_rhythm"],
@@ -51909,6 +52064,7 @@ var referenceDocuments = [
       "onboarding.create_invite",
       "onboarding.setup",
       "onboarding.rehearse",
+      "onboarding.activate",
       "onboarding.source_ingest",
       "seat.create",
       "seat.set_type",
@@ -52024,7 +52180,7 @@ The Compass is drafted, then activated by a human through supersession.
 
 \`onboarding.setup\`, \`onboarding.finish\`, \`compass.approve_version\`, \`compass.reject_draft\`, and \`compass.set\` are \`human_required\`. \`onboarding.source_ingest\` is a bootstrap-safe \`none\` prerequisite that retains bounded source bytes encrypted under the exact tenant/run, computes its digest and canonical parser manifest server-side, and remains permanently outside Trusted and Full Operator. \`onboarding.setup\` is the one-approval composite apply: it freezes the complete plan and live proof at staging, then rechecks them and applies Compass, cycle, Responsibility Graph, Charters, staffing, goals, Signals/readings, Frictions, tasks, and Sync scope in one transaction. A failure rolls back the entire application and leaves the confirmation pending.
 
-After setup succeeds, call \`onboarding.rehearse\` with the exact setup application, expected setup digest/revision, and a caller idempotency key. This is the implementation principal's one bounded \`execute\` exception: it is ungated because it can run only the setup receipt's exact agents in the sandbox, with no schedule arming, go-live transition, credential access, source mutation, or external communication. It rechecks the current Charter manifest, pinned published Skill versions and content hashes, schedule, execution lane, and canonical configuration digest under the same tenant/run boundary. A complete batch returns an immutable terminal batch receipt plus one immutable per-agent receipt with nonzero checked counts, runtime run ids, bounded tool previews/manifest holds/errors, and \`passed\` or \`failed\` status. Same-key/same-configuration retry returns that terminal evidence; a changed configuration conflicts instead of silently reusing it. The rehearsal never returns an approval URL and never stages activation. Only the later, separate \`onboarding.activate\` command may consume the exact terminal batch and unique per-agent evidence and stage the post-rehearsal activation decision.
+After setup succeeds, call \`onboarding.rehearse\` with the exact setup application, expected setup digest/revision, and a caller idempotency key. This is the implementation principal's one bounded \`execute\` exception: it is ungated because it can run only the setup receipt's exact agents in the sandbox, with no schedule arming, go-live transition, credential access, source mutation, or external communication. It rechecks the current Charter manifest, pinned published Skill versions and content hashes, schedule, execution lane, and canonical configuration digest under the same tenant/run boundary. A complete batch returns an immutable terminal batch receipt plus one immutable per-agent receipt with nonzero checked counts, runtime run ids, bounded tool previews/manifest holds/errors, and \`passed\` or \`failed\` status. Same-key/same-configuration retry returns that terminal evidence; a changed configuration conflicts instead of silently reusing it. The rehearsal never returns an approval URL and never stages activation. The later, separate \`onboarding.activate\` command consumes that exact terminal batch and the unique run/configuration evidence for the setup receipt's complete agent set. It stages one owner approval whose durable card shows every agent, Seat, Charter/configuration digest, rehearsal run, effective lane/model, permissions, schedule, warnings, and the onboarding-completion effect. Approval rechecks the full projection, records one composite human decision, makes every agent live, arms eligible schedules, and completes onboarding atomically. Any stale or failed member rolls the transaction back; same-key retry returns the committed receipt without duplicating effects.
 
 \`onboarding.advance_step\`, \`onboarding.create_invite\`, \`onboarding.attach_reference\`, \`compass.answer_gap\`, and drafting a Compass are \`none\` \u2014 none of them returns a pending confirmation. \`none\` is not the same as "agent-callable", though: \`onboarding.create_invite\` and \`compass.answer_gap\` record the human who ran them, so they run as a person, not from an agent session, while advancing a step, attaching a reference, drafting a Compass, and exact-run source ingestion are safe for the bootstrap agent. Approving a version (a supersession) is a human act. The agent drafts and surfaces the approve link. See the confirmations guide.
 
@@ -53164,7 +53320,7 @@ External connectors are being rolled out provider by provider, conservatively (r
     order: 48,
     title: "CLI and MCP installation guide",
     summary: "Install the public CLI, register remote token-backed MCP clients, and find the full command and tool catalog.",
-    version: "2026-07-29.1",
+    version: "2026-07-29.2",
     public: true,
     audiences: ["human", "cli", "mcp", "in_app_agent"],
     stages: ["company_setup", "staffing"],
@@ -53856,6 +54012,7 @@ Several rows here are seat-operating commands (\`task.create\`, the \`signal.*\`
 | \`rost_ingest_onboarding_source\` | \`onboarding.source_ingest\` | Retain one bounded encrypted onboarding source for the current implementation run or direct owner setup. | Tenant | Call with one source and its declared kind; use the returned logical source key in setup. |
 | \`rost_apply_onboarding_setup\` | \`onboarding.setup\` | Stage one atomic company setup proposal for owner review without making agents live. | Tenant | Submit the complete normalized plan; expect one human confirmation. |
 | \`rost_rehearse_onboarding_agents\` | \`onboarding.rehearse\` | Run the setup receipt's exact agents in a run-bound sandbox and return the complete immutable terminal batch plus per-agent evidence. It cannot activate agents, arm schedules, use credentials, mutate sources, send externally, or stage a confirmation. | Tenant | Inspect the live command contract, then pass the exact setup application, expected digest/revision, and idempotency key. A retry returns the same terminal evidence only when configuration is unchanged. |
+| \`rost_activate_onboarding_agents\` | \`onboarding.activate\` | Stage one complete owner approval for the setup receipt's exact all-passed agent set; approval activates the group and completes onboarding atomically. | Tenant | Pass the terminal batch receipt id plus every per-agent rehearsal run and configuration digest returned by \`onboarding.rehearse\`; expect one approval URL. |
 | \`rost_onboard_resume\` | \`onboarding.resume\` | Return the machine-readable onboarding resume state (path choice, pending setup, next step). | Tenant | Call with \`{}\`. |
 | \`rost_attach_reference_document\` | \`onboarding.attach_reference\` | Attach a company reference document (text/markdown) with title/kind/source so Compass and Charters can cite it. | Tenant | Call with \`text\`, a \`title\`, a \`kind\`, and a \`source\`. |
 | \`rost_upload_org_context\` | \`onboarding.upload_context\` | Back-compat alias of \`onboarding.attach_reference\`. | Tenant | Prefer \`rost_attach_reference_document\`; same widened schema. |
@@ -57833,6 +57990,7 @@ function parseSemver(value) {
 
 // src/commands/onboarding.ts
 var REHEARSE_USAGE = `${cliBrand.binName} onboard rehearse --setup-application-id <uuid> --expected-input-digest <sha256:digest> --expected-receipt-revision <integer> --idempotency-key <key> [--json]`;
+var ACTIVATE_USAGE = `${cliBrand.binName} onboard activate --setup-application-id <uuid> --expected-input-digest <sha256:digest> --expected-receipt-revision <integer> --terminal-rehearsal-batch-receipt-id <uuid> --rehearsal-runs '<json-array>' --configuration-digests '<json-array>' --idempotency-key <key> [--json]`;
 var OnboardingUsageError = class extends Error {
   constructor(message) {
     super(message);
@@ -57873,14 +58031,19 @@ function parseOnboardingInvocation(args) {
       action
     };
   }
-  if (action !== "rehearse") {
+  if (action !== "rehearse" && action !== "activate") {
     throw new OnboardingUsageError(`Unknown onboard action: ${action ?? "(missing)"}`);
   }
   const allowed = /* @__PURE__ */ new Set([
     "setup-application-id",
     "expected-input-digest",
     "expected-receipt-revision",
-    "idempotency-key"
+    "idempotency-key",
+    ...action === "activate" ? [
+      "terminal-rehearsal-batch-receipt-id",
+      "rehearsal-runs",
+      "configuration-digests"
+    ] : []
   ]);
   const values = /* @__PURE__ */ new Map();
   let json2 = false;
@@ -57925,14 +58088,36 @@ function parseOnboardingInvocation(args) {
   if (!Number.isSafeInteger(expectedReceiptRevision) || expectedReceiptRevision <= 0) {
     throw new OnboardingUsageError("--expected-receipt-revision must be a positive integer.");
   }
+  const sharedBody = {
+    setup_application_id: setupApplicationId,
+    expected_input_digest: expectedInputDigest,
+    expected_receipt_revision: expectedReceiptRevision,
+    idempotency_key: idempotencyKey
+  };
+  if (action === "activate") {
+    return {
+      commandId: "onboarding.activate",
+      body: {
+        ...sharedBody,
+        terminal_rehearsal_batch_receipt_id: requiredValue2(
+          "terminal-rehearsal-batch-receipt-id"
+        ),
+        rehearsal_runs: parseJsonArrayFlag(
+          "rehearsal-runs",
+          requiredValue2("rehearsal-runs")
+        ),
+        configuration_digests: parseJsonArrayFlag(
+          "configuration-digests",
+          requiredValue2("configuration-digests")
+        )
+      },
+      json: json2,
+      action
+    };
+  }
   return {
     commandId: "onboarding.rehearse",
-    body: {
-      setup_application_id: setupApplicationId,
-      expected_input_digest: expectedInputDigest,
-      expected_receipt_revision: expectedReceiptRevision,
-      idempotency_key: idempotencyKey
-    },
+    body: sharedBody,
     json: json2,
     action
   };
@@ -57940,19 +58125,55 @@ function parseOnboardingInvocation(args) {
 function onboardingUsage() {
   return [
     `Usage: ${cliBrand.binName} onboard status|resume [--json]`,
-    `  ${REHEARSE_USAGE}`
+    `  ${REHEARSE_USAGE}`,
+    `  ${ACTIVATE_USAGE}`
   ].join("\n");
 }
 function formatOnboardingOutput(action, output) {
   if (action === "rehearse") {
     return formatRehearsalOutput(output);
   }
+  if (action === "activate") {
+    return formatActivationOutput(output);
+  }
   const record2 = typeof output === "object" && output !== null ? output : {};
   if (typeof record2.summary === "string") {
     return record2.summary;
   }
   return JSON.stringify(output, null, 2);
 }
+function parseJsonArrayFlag(flag, value) {
+  try {
+    const parsed = JSON.parse(value);
+    if (!Array.isArray(parsed)) {
+      throw new Error("not an array");
+    }
+    return parsed;
+  } catch {
+    throw new OnboardingUsageError(`--${flag} must be a valid JSON array.`);
+  }
+}
+function formatActivationOutput(output) {
+  const record2 = asRecord(output);
+  const approveVia = asRecord(record2.approveVia);
+  if (typeof approveVia.webUrl === "string") {
+    return [
+      "Onboarding activation approval is ready.",
+      `Approve once: ${approveVia.webUrl}`
+    ].join("\n");
+  }
+  const receipt = asRecord(record2.receipt);
+  const agents = Array.isArray(receipt.agents) ? receipt.agents : [];
+  if (record2.status === "activated") {
+    return [
+      "Onboarding activation completed.",
+      `Activation receipt: ${field(receipt, "activation_receipt_id")}`,
+      `Agents live: ${agents.length} of ${agents.length}`,
+      `Onboarding completed: ${field(receipt, "onboarding_completed_at")}`
+    ].join("\n");
+  }
+  return JSON.stringify(output, null, 2);
+}
 function formatRehearsalOutput(output) {
   const record2 = asRecord(output);
   if (record2.status === "in_progress") {
@@ -58416,6 +58637,7 @@ var COMMAND_MANIFEST = [
   { "id": "notification.settings.get", "namespace": "notification", "action": "settings.get", "title": "Get notification settings", "description": "Read tenant notification preferences (escalations, Sync brief, default channel).", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [], "hasComplexInput": false, "help": "Read notification preferences before changing escalation or Sync brief delivery." },
   { "id": "notification.settings.update", "namespace": "notification", "action": "settings.update", "title": "Update notification settings", "description": "Update tenant notification preferences.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "escalations_enabled", "flag": "escalations-enabled", "type": "boolean", "required": false }, { "name": "sync_brief_enabled", "flag": "sync-brief-enabled", "type": "boolean", "required": false }, { "name": "default_channel", "flag": "default-channel", "type": "enum", "required": false, "enumValues": ["slack", "email", "in_app"] }], "hasComplexInput": false, "help": "Update notification preferences for escalations, Sync briefs, and the default channel." },
   { "id": "notification.test", "namespace": "notification", "action": "test", "title": "Send test notification", "description": "Emit an in-app test notification to the acting human to verify delivery is wired.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [], "hasComplexInput": false, "help": "Send an in-app test notification to confirm the delivery path is wired." },
+  { "id": "onboarding.activate", "namespace": "onboarding", "action": "activate", "title": "Activate onboarding agents", "description": "Stage one owner approval to activate every agent in an applied onboarding receipt and complete onboarding atomically.", "requiredScope": "tenant", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "idempotency_key", "flag": "idempotency-key", "type": "string", "required": true }, { "name": "setup_application_id", "flag": "setup-application-id", "type": "string", "required": true }, { "name": "expected_input_digest", "flag": "expected-input-digest", "type": "string", "required": true }, { "name": "expected_receipt_revision", "flag": "expected-receipt-revision", "type": "integer", "required": true }, { "name": "terminal_rehearsal_batch_receipt_id", "flag": "terminal-rehearsal-batch-receipt-id", "type": "string", "required": true }], "hasComplexInput": true, "help": "After a terminal all-passed onboarding rehearsal, submit its exact batch receipt, per-agent run IDs, and configuration digests. One owner approval activates the entire group and completes onboarding atomically." },
   { "id": "onboarding.advance_step", "namespace": "onboarding", "action": "advance_step", "title": "Advance onboarding step", "description": "Persist the current onboarding step after server-side validation.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "step", "flag": "step", "type": "string", "required": true }, { "name": "completed", "flag": "completed", "type": "boolean", "required": false }], "hasComplexInput": true, "help": "Advance onboarding only after the current setup step is represented in the tenant state." },
   { "id": "onboarding.attach_reference", "namespace": "onboarding", "action": "attach_reference", "title": "Attach reference document", "description": "Attach a company reference document (text/markdown) so Compass and Charters can cite it. Reference-only \u2014 it does not build a Compass; convert each meaningful doc to markdown and attach it with a title, kind, and source.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "text", "flag": "text", "type": "string", "required": true }, { "name": "filename", "flag": "filename", "type": "string", "required": false }, { "name": "mime_type", "flag": "mime-type", "type": "enum", "required": false, "enumValues": ["text/plain", "text/markdown", "text/csv"] }, { "name": "title", "flag": "title", "type": "string", "required": false }, { "name": "kind", "flag": "kind", "type": "enum", "required": false, "enumValues": ["plan", "financial", "org_chart", "process"] }, { "name": "source", "flag": "source", "type": "string", "required": false }], "hasComplexInput": false, "help": "Convert each meaningful company doc to markdown and attach it as a reference (title, kind, source) so Compass and Charters can cite it; this attaches a reference, it does not build a Compass \u2014 author Compass directly.", "example": { "text": "# Company handbook\n\nWe build precision components for the aerospace supply chain.", "filename": "handbook.md", "mime_type": "text/markdown", "title": "Company handbook", "kind": "plan", "source": "handbook/overview.md" } },
   { "id": "onboarding.create_invite", "namespace": "onboarding", "action": "create_invite", "title": "Create onboarding invite", "description": "Create a pending invite for an onboarding team member.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "email", "flag": "email", "type": "string", "required": true }, { "name": "role", "flag": "role", "type": "enum", "required": false, "enumValues": ["owner", "admin", "steward", "member"] }], "hasComplexInput": true, "help": "Invites should give humans access to the company without assigning work directly to people instead of seats." },
@@ -67512,7 +67734,7 @@ async function main(argv = process.argv.slice(2), options = {}) {
       allowDevelopmentAppUrl: process.env[allowInsecureAppUrlEnv] === "1"
     });
   }
-  if (command === "onboard" && (args[0] === "status" || args[0] === "resume" || args[0] === "rehearse")) {
+  if (command === "onboard" && (args[0] === "status" || args[0] === "resume" || args[0] === "rehearse" || args[0] === "activate")) {
     let implCredential = null;
     try {
       implCredential = await createImplementationCredentialStore().read();