@rosthq/cli 0.7.123 → 0.7.124

package/dist/index.js

@@ -52051,7 +52051,7 @@ var referenceDocuments = [
     order: 10,
     title: "{{brand}} implementation method",
     summary: "The staged operating-system setup path used by humans, CLI sessions, MCP clients, and in-app agents.",
-    version: "2026-07-29.4",
+    version: "2026-07-30.1",
     public: true,
     audiences: ["human", "cli", "mcp", "in_app_agent"],
     stages: ["company_setup", "graph_design", "charter_design", "staffing", "operating_rhythm"],
@@ -52180,6 +52180,8 @@ The Compass is drafted, then activated by a human through supersession.
 
 \`onboarding.setup\`, \`onboarding.finish\`, \`compass.approve_version\`, \`compass.reject_draft\`, and \`compass.set\` are \`human_required\`. \`onboarding.source_ingest\` is a bootstrap-safe \`none\` prerequisite that retains bounded source bytes encrypted under the exact tenant/run, computes its digest and canonical parser manifest server-side, and remains permanently outside Trusted and Full Operator. \`onboarding.setup\` is the one-approval composite apply: it freezes the complete plan and live proof at staging, then rechecks them and applies Compass, cycle, Responsibility Graph, Charters, staffing, goals, Signals/readings, Frictions, tasks, and Sync scope in one transaction. A failure rolls back the entire application and leaves the confirmation pending.
 
+The whole composite flow has first-class CLI verbs: \`{{cli}} onboard source-ingest --file <path> ...\` for each allowed local source, \`{{cli}} onboard setup --input-file <plan.json>\` to stage the one owner approval (it prints the confirmation id and exact approval URL), \`{{cli}} onboard setup-status --input-file <plan.json>\` to discover the applied receipt by idempotent re-submission of the identical plan, then \`{{cli}} onboard rehearse\` and \`{{cli}} onboard activate\`. Each authenticates with the implementation-bootstrap credential first and falls back to the user session; the generic \`{{cli}} command <id> --json\` path and the generated MCP tools expose the same schemas.
+
 After setup succeeds, call \`onboarding.rehearse\` with the exact setup application, expected setup digest/revision, and a caller idempotency key. This is the implementation principal's one bounded \`execute\` exception: it is ungated because it can run only the setup receipt's exact agents in the sandbox, with no schedule arming, go-live transition, credential access, source mutation, or external communication. It rechecks the current Charter manifest, pinned published Skill versions and content hashes, schedule, execution lane, and canonical configuration digest under the same tenant/run boundary. A complete batch returns an immutable terminal batch receipt plus one immutable per-agent receipt with nonzero checked counts, runtime run ids, bounded tool previews/manifest holds/errors, and \`passed\` or \`failed\` status. Same-key/same-configuration retry returns that terminal evidence; a changed configuration conflicts instead of silently reusing it. The rehearsal never returns an approval URL and never stages activation. The later, separate \`onboarding.activate\` command consumes that exact terminal batch and the unique run/configuration evidence for the setup receipt's complete agent set. It stages one owner approval whose durable card shows every agent, Seat, Charter/configuration digest, rehearsal run, effective lane/model, permissions, schedule, warnings, and the onboarding-completion effect. Approval rechecks the full projection, records one composite human decision, makes every agent live, arms eligible schedules, and completes onboarding atomically. Any stale or failed member rolls the transaction back; same-key retry returns the committed receipt without duplicating effects.
 
 \`onboarding.advance_step\`, \`onboarding.create_invite\`, \`onboarding.attach_reference\`, \`compass.answer_gap\`, and drafting a Compass are \`none\` \u2014 none of them returns a pending confirmation. \`none\` is not the same as "agent-callable", though: \`onboarding.create_invite\` and \`compass.answer_gap\` record the human who ran them, so they run as a person, not from an agent session, while advancing a step, attaching a reference, drafting a Compass, and exact-run source ingestion are safe for the bootstrap agent. Approving a version (a supersession) is a human act. The agent drafts and surfaces the approve link. See the confirmations guide.
@@ -53320,7 +53322,7 @@ External connectors are being rolled out provider by provider, conservatively (r
     order: 48,
     title: "CLI and MCP installation guide",
     summary: "Install the public CLI, register remote token-backed MCP clients, and find the full command and tool catalog.",
-    version: "2026-07-29.2",
+    version: "2026-07-30.1",
     public: true,
     audiences: ["human", "cli", "mcp", "in_app_agent"],
     stages: ["company_setup", "staffing"],
@@ -53844,11 +53846,28 @@ These are the security posture rules for operating after install \u2014 a checkl
 
 ### Onboarding
 
+\`\`\`text
+{{cli}} onboard status
+{{cli}} onboard resume
+{{cli}} onboard run
+{{cli}} onboard source-ingest --file <path> --source-key <key> --kind <kind> --title <title> [--json]
+{{cli}} onboard setup --input '<json-plan>' | --input-file <path> [--json]
+{{cli}} onboard setup-status --input '<json-plan>' | --input-file <path> [--json]
+{{cli}} onboard rehearse|activate --setup-application-id <uuid> ... [--json]
+\`\`\`
+
+Every tenant-scoped \`onboard\` verb (\`status\`, \`resume\`, \`source-ingest\`, \`setup\`, \`setup-status\`, \`rehearse\`, \`activate\` \u2014 \`onboard run\` is an offline public print) authenticates with an existing implementation-bootstrap credential first and falls back to the user session, so the agent-led composite flow works without a personal login. \`onboard source-ingest\` reads one local business file client-side, base64-encodes it, and calls \`onboarding.source_ingest\`; the server computes the digest and family manifest and returns the opaque \`source_ref\` to reference from the setup plan's \`sources[]\` (paths and client digests are rejected). The server's 1 MiB command-body cap is authoritative, and base64 expands content by 4/3, so the largest file reachable through this command today is about 780 KB \u2014 the CLI pre-checks and names the exact fitting size; split a larger export. \`onboard setup\` submits the complete declarative plan to \`onboarding.setup\`: staging succeeds with exit code 0 and prints the pending confirmation id plus the exact approval URL (with \`--json\`, the full pending-confirmation object). \`onboard setup-status\` re-submits the identical plan to discover state through the command's idempotent contract: after approval it returns the immutable applied receipt (application id, receipt revision, input digest) without staging anything; while approval is still pending it returns the current approval card \u2014 an identical still-valid card is reused with the same confirmation id and URL, and only a changed server-derived projection supersedes the stale card and mints a fresh one. After application, a same-key re-submission with a different plan digest is a typed conflict.
+
 | Command | Purpose | Scope | Safe example |
 |---|---|---|---|
 | \`{{cli}} onboard status\` | Return onboarding progress, graph summary, and next actions. | Tenant | \`{{cli}} onboard status\` |
 | \`{{cli}} onboard resume\` | Resume the guided onboarding flow where it left off. | Tenant | \`{{cli}} onboard resume\` |
 | \`{{cli}} onboard run\` | Print the deterministic agent onboarding prompt. | Public reference | \`{{cli}} onboard run\` |
+| \`{{cli}} onboard source-ingest\` | Retain one bounded local business source (encrypted, tenant/run-bound) via \`onboarding.source_ingest\` and print the opaque \`source_ref\` for the setup plan. | Tenant (implementation bootstrap or owner) | \`{{cli}} onboard source-ingest --file org-chart.csv --source-key org-chart --kind org_chart --title "Org chart" --json\` |
+| \`{{cli}} onboard setup\` | Stage the one-approval composite onboarding setup via \`onboarding.setup\`; prints the pending confirmation id and exact approval URL, or the applied receipt on an identical re-submission. | Tenant (implementation bootstrap or owner) | \`{{cli}} onboard setup --input-file setup-plan.json --json\` |
+| \`{{cli}} onboard setup-status\` | Discover the setup application state by idempotent re-submission of the identical plan: applied receipt after approval; while pending, the current approval card (an identical card is reused, same id and URL). | Tenant (implementation bootstrap or owner) | \`{{cli}} onboard setup-status --input-file setup-plan.json --json\` |
+| \`{{cli}} onboard rehearse\` | Run the applied setup receipt's agents through the resumable sandbox-only rehearsal batch via \`onboarding.rehearse\`; returns immutable terminal evidence, never an activation approval URL. | Tenant (implementation bootstrap or owner) | \`{{cli}} onboard rehearse --setup-application-id <uuid> --expected-input-digest <sha256:digest> --expected-receipt-revision 1 --idempotency-key rehearse-1 --json\` |
+| \`{{cli}} onboard activate\` | Stage the one post-rehearsal owner approval via \`onboarding.activate\` with the exact unique-agent-ID rehearsal and configuration evidence arrays; it alone stages the activation URL. | Tenant (implementation bootstrap or owner) | \`{{cli}} onboard activate --setup-application-id <uuid> --expected-input-digest <sha256:digest> --expected-receipt-revision 1 --terminal-rehearsal-batch-receipt-id <uuid> --rehearsal-runs '[...]' --configuration-digests '[...]' --idempotency-key activate-1 --json\` |
 | \`{{cli}} init [--client claude-code|codex|cursor]  (defaults --scope tenant-admin)\` | Log in when needed, install MCP, and print the onboarding prompt. As the first-run helper it defaults to a tenant-admin token (no seats exist yet); pass \`--scope seat --seat-id <id>\` to scope it narrower. | User plus tenant | \`{{cli}} init --client codex\` |
 | \`{{cli}} init --tenant <tenant> --client <client>\` | Select a tenant before MCP install. | User plus tenant | \`{{cli}} init --tenant acme-ops --client cursor\` |
 
@@ -53890,7 +53909,7 @@ These ergonomic wrappers (including the \`{{cli}} agent\` group) require **{{cli
 
 **Generated verbs (0.6.0+).** Every registry command now has a first-class \`{{cli}} <namespace> <action>\` verb, projected directly from the command's input schema \u2014 so namespaces that previously had no ergonomic wrapper (for example \`{{cli}} measurable create\`, \`{{cli}} work_order enqueue\`, \`{{cli}} mcp_token create\`) are usable without dropping to the raw \`command <id>\` path. Flags follow the schema field names (\`--seat-id\`, \`--name\`, \u2026); read a command's exact input offline with \`{{cli}} <namespace> <action> --schema\` before calling it, and pass a nested payload with \`--input '<json>'\` when a field is a complex object. \`--json\` still selects machine output, \`--seat <id>\` still sets seat scope, and \`{{cli}} command <id> --json '<body>'\` remains the universal fallback.
 
-For a complete Seat, inspect \`{{cli}} seat create-complete --schema\`, then pass the strict nested request with \`{{cli}} seat create-complete --input '<json>' --json\`. The generic \`{{cli}} command seat.create_complete --json '<json>'\` path and the generated MCP tool \`rost_create_complete_seat\` expose the same registry schema and server-side command. A successful staging response contains the pending confirmation id and exact approval URL. The human owner reviews one card covering the Seat, canonical Charter and permission manifest, disclosed staffing, effective agent lane/readiness, exact pinned Skill versions and dependency state, and schedule. Approval applies the proposal in one transaction and returns its application and receipt ids. Any failure rolls back the whole proposal. An optional agent remains in \`dry_run\`; this command never approves go-live. Direct calls use existing parent and Steward Seat ids\u2014logical references are reserved for the later composite onboarding flow. Retained source ingestion is not available on this direct command yet, so \`sources\` and every \`source_uses\` collection must be empty and planned staffing must omit \`source_ref\`; the command rejects source-backed provenance instead of accepting an unverified upload id or caller-supplied digest.
+For a complete Seat, inspect \`{{cli}} seat create-complete --schema\`, then pass the strict nested request with \`{{cli}} seat create-complete --input '<json>' --json\`. The generic \`{{cli}} command seat.create_complete --json '<json>'\` path and the generated MCP tool \`rost_create_complete_seat\` expose the same registry schema and server-side command. \`seat create-complete\` authenticates with an existing implementation-bootstrap credential first (it is one of the vetted bootstrap staging primitives) and falls back to the user session. Staging surfaces as the CLI's confirmation-required envelope: a \`COMMAND_CONFIRMATION_REQUIRED\` JSON object on stderr, exit code 3, whose \`details\` carry the pending confirmation id and the exact approval URL (\`details.approveVia.webUrl\`) \u2014 read the URL from there; the command has done its job at that point. The human owner reviews one card covering the Seat, canonical Charter and permission manifest, disclosed staffing, effective agent lane/readiness, exact pinned Skill versions and dependency state, and schedule. Approval applies the proposal in one transaction and returns its application and receipt ids. Any failure rolls back the whole proposal. An optional agent remains in \`dry_run\`; this command never approves go-live. Direct calls use existing parent and Steward Seat ids\u2014logical references are reserved for the later composite onboarding flow. Retained source ingestion is not available on this direct command yet, so \`sources\` and every \`source_uses\` collection must be empty and planned staffing must omit \`source_ref\`; the command rejects source-backed provenance instead of accepting an unverified upload id or caller-supplied digest.
 
 The signed-in app exposes the same Skill command surface at **Skills**, linked from the Agents page (the nav collapse moved it out of the primary sidebar). Use \`/skills\` to filter the tenant library, \`/skills/new\` to build canonical \`SKILL.md\` frontmatter with \`tool.catalog\` dependencies, \`/skills/import\` for bounded GitHub or upload imports, and each Skill detail page to review validation, publish, check Seat dependencies, and assign a published version. During \`/agents/new\`, \`agent_setup.get\` can return \`next_action: "choose_skills"\`; selected Skills are proposed immutable-version assignments and required Skill tools block sign-off/go-live until tool configuration is ready.
 
@@ -57245,6 +57264,19 @@ function renderImplementationAccessNote() {
     `${cliBrand.binName} onboard resume`,
     "```",
     "",
+    "The agent-led composite setup flow has first-class verbs that authenticate with this credential first and fall back to the user session:",
+    "",
+    "```bash",
+    `${cliBrand.binName} onboard source-ingest --file <path> --source-key <key> --kind <kind> --title <title> --json`,
+    `${cliBrand.binName} onboard setup --input-file <plan.json> --json`,
+    `${cliBrand.binName} onboard setup-status --input-file <plan.json> --json`,
+    `${cliBrand.binName} onboard rehearse --setup-application-id <uuid> --expected-input-digest <sha256:digest> --expected-receipt-revision <n> --idempotency-key <key> --json`,
+    `${cliBrand.binName} onboard activate --setup-application-id <uuid> ... --json`,
+    `${cliBrand.binName} seat create-complete --input '<json>' --json`,
+    "```",
+    "",
+    "`onboard setup` staging succeeds with exit code 0 and prints the pending confirmation id plus the exact approval URL; `onboard setup-status` re-submits the identical plan and returns the immutable applied receipt once the owner has approved.",
+    "",
     "Register the same bearer with an MCP client through `implementation access install-mcp`:",
     "",
     "```bash",
@@ -57989,508 +58021,7 @@ function parseSemver(value) {
 }
 
 // src/commands/onboarding.ts
-var REHEARSE_USAGE = `${cliBrand.binName} onboard rehearse --setup-application-id <uuid> --expected-input-digest <sha256:digest> --expected-receipt-revision <integer> --idempotency-key <key> [--json]`;
-var ACTIVATE_USAGE = `${cliBrand.binName} onboard activate --setup-application-id <uuid> --expected-input-digest <sha256:digest> --expected-receipt-revision <integer> --terminal-rehearsal-batch-receipt-id <uuid> --rehearsal-runs '<json-array>' --configuration-digests '<json-array>' --idempotency-key <key> [--json]`;
-var OnboardingUsageError = class extends Error {
-  constructor(message) {
-    super(message);
-    this.name = "OnboardingUsageError";
-  }
-};
-async function runOnboarding(args, io, deps) {
-  let invocation;
-  try {
-    invocation = parseOnboardingInvocation(args);
-  } catch (error51) {
-    if (!(error51 instanceof OnboardingUsageError)) {
-      throw error51;
-    }
-    io.stderr.write(`${error51.message}
-${onboardingUsage()}
-`);
-    return 1;
-  }
-  const client = await deps.makeClient();
-  try {
-    const result = await client.execute(invocation.commandId, invocation.body);
-    const rendered = invocation.json ? JSON.stringify(result.output, null, 2) : formatOnboardingOutput(invocation.action, result.output);
-    io.stdout.write(`${rendered}
-`);
-    return 0;
-  } catch (error51) {
-    return printCommandError(io, error51);
-  }
-}
-function parseOnboardingInvocation(args) {
-  const action = args[0];
-  if (action === "status" || action === "resume") {
-    return {
-      commandId: action === "status" ? "onboarding.status" : "onboarding.resume",
-      body: {},
-      json: args.includes("--json"),
-      action
-    };
-  }
-  if (action !== "rehearse" && action !== "activate") {
-    throw new OnboardingUsageError(`Unknown onboard action: ${action ?? "(missing)"}`);
-  }
-  const allowed = /* @__PURE__ */ new Set([
-    "setup-application-id",
-    "expected-input-digest",
-    "expected-receipt-revision",
-    "idempotency-key",
-    ...action === "activate" ? [
-      "terminal-rehearsal-batch-receipt-id",
-      "rehearsal-runs",
-      "configuration-digests"
-    ] : []
-  ]);
-  const values = /* @__PURE__ */ new Map();
-  let json2 = false;
-  for (let index = 1; index < args.length; index += 1) {
-    const argument = args[index];
-    if (argument === "--json") {
-      if (json2) {
-        throw new OnboardingUsageError("Duplicate --json flag.");
-      }
-      json2 = true;
-      continue;
-    }
-    if (argument === void 0 || !argument.startsWith("--")) {
-      throw new OnboardingUsageError(`Unexpected argument: ${argument ?? "(missing)"}`);
-    }
-    const key = argument.slice(2);
-    if (!allowed.has(key)) {
-      throw new OnboardingUsageError(`Unknown flag: --${key}`);
-    }
-    if (values.has(key)) {
-      throw new OnboardingUsageError(`Duplicate --${key} flag.`);
-    }
-    const value = args[index + 1];
-    if (value === void 0 || value.startsWith("--")) {
-      throw new OnboardingUsageError(`Missing required --${key} value.`);
-    }
-    values.set(key, value);
-    index += 1;
-  }
-  const requiredValue2 = (key) => {
-    const value = values.get(key);
-    if (value === void 0 || value.length === 0) {
-      throw new OnboardingUsageError(`Missing required --${key} value.`);
-    }
-    return value;
-  };
-  const setupApplicationId = requiredValue2("setup-application-id");
-  const expectedInputDigest = requiredValue2("expected-input-digest");
-  const revisionRaw = requiredValue2("expected-receipt-revision");
-  const idempotencyKey = requiredValue2("idempotency-key");
-  const expectedReceiptRevision = Number(revisionRaw);
-  if (!Number.isSafeInteger(expectedReceiptRevision) || expectedReceiptRevision <= 0) {
-    throw new OnboardingUsageError("--expected-receipt-revision must be a positive integer.");
-  }
-  const sharedBody = {
-    setup_application_id: setupApplicationId,
-    expected_input_digest: expectedInputDigest,
-    expected_receipt_revision: expectedReceiptRevision,
-    idempotency_key: idempotencyKey
-  };
-  if (action === "activate") {
-    return {
-      commandId: "onboarding.activate",
-      body: {
-        ...sharedBody,
-        terminal_rehearsal_batch_receipt_id: requiredValue2(
-          "terminal-rehearsal-batch-receipt-id"
-        ),
-        rehearsal_runs: parseJsonArrayFlag(
-          "rehearsal-runs",
-          requiredValue2("rehearsal-runs")
-        ),
-        configuration_digests: parseJsonArrayFlag(
-          "configuration-digests",
-          requiredValue2("configuration-digests")
-        )
-      },
-      json: json2,
-      action
-    };
-  }
-  return {
-    commandId: "onboarding.rehearse",
-    body: sharedBody,
-    json: json2,
-    action
-  };
-}
-function onboardingUsage() {
-  return [
-    `Usage: ${cliBrand.binName} onboard status|resume [--json]`,
-    `  ${REHEARSE_USAGE}`,
-    `  ${ACTIVATE_USAGE}`
-  ].join("\n");
-}
-function formatOnboardingOutput(action, output) {
-  if (action === "rehearse") {
-    return formatRehearsalOutput(output);
-  }
-  if (action === "activate") {
-    return formatActivationOutput(output);
-  }
-  const record2 = typeof output === "object" && output !== null ? output : {};
-  if (typeof record2.summary === "string") {
-    return record2.summary;
-  }
-  return JSON.stringify(output, null, 2);
-}
-function parseJsonArrayFlag(flag, value) {
-  try {
-    const parsed = JSON.parse(value);
-    if (!Array.isArray(parsed)) {
-      throw new Error("not an array");
-    }
-    return parsed;
-  } catch {
-    throw new OnboardingUsageError(`--${flag} must be a valid JSON array.`);
-  }
-}
-function formatActivationOutput(output) {
-  const record2 = asRecord(output);
-  const approveVia = asRecord(record2.approveVia);
-  if (typeof approveVia.webUrl === "string") {
-    return [
-      "Onboarding activation approval is ready.",
-      `Approve once: ${approveVia.webUrl}`
-    ].join("\n");
-  }
-  const receipt = asRecord(record2.receipt);
-  const agents = Array.isArray(receipt.agents) ? receipt.agents : [];
-  if (record2.status === "activated") {
-    return [
-      "Onboarding activation completed.",
-      `Activation receipt: ${field(receipt, "activation_receipt_id")}`,
-      `Agents live: ${agents.length} of ${agents.length}`,
-      `Onboarding completed: ${field(receipt, "onboarding_completed_at")}`
-    ].join("\n");
-  }
-  return JSON.stringify(output, null, 2);
-}
-function formatRehearsalOutput(output) {
-  const record2 = asRecord(output);
-  if (record2.status === "in_progress") {
-    const batch = asRecord(record2.batch);
-    const checkpoints = Array.isArray(record2.checkpoints) ? record2.checkpoints : [];
-    const completed = checkpoints.filter((checkpoint) => {
-      const status = asRecord(checkpoint).status;
-      return status === "passed" || status === "failed";
-    }).length;
-    return [
-      "Onboarding rehearsal is in progress.",
-      `Batch: ${field(batch, "batch_id")}`,
-      `Checkpoints complete: ${completed} of ${checkpoints.length}`,
-      ...checkpoints.map((checkpoint) => {
-        const item = asRecord(checkpoint);
-        return `- Agent ${field(item, "agent_id")} / Seat ${field(item, "seat_id")}: ${field(item, "status")}`;
-      }),
-      "Retry with the same idempotency key to continue this batch."
-    ].join("\n");
-  }
-  if (record2.status === "passed" || record2.status === "failed") {
-    return [
-      `Onboarding rehearsal ${record2.status}.`,
-      "Immutable batch receipt:",
-      JSON.stringify(record2.batch_receipt, null, 2),
-      "Immutable agent receipts:",
-      JSON.stringify(record2.agent_receipts, null, 2)
-    ].join("\n");
-  }
-  return JSON.stringify(output, null, 2);
-}
-function asRecord(value) {
-  return typeof value === "object" && value !== null ? value : {};
-}
-function field(record2, key) {
-  const value = record2[key];
-  return typeof value === "string" || typeof value === "number" ? String(value) : "\u2014";
-}
-function printCommandError(io, error51) {
-  if (error51 instanceof CommandClientError && error51.response && !error51.response.ok) {
-    const help = error51.response.error.help;
-    const requestId = error51.response.requestId;
-    io.stderr.write(redactForLog({
-      code: error51.response.error.code,
-      message: error51.response.error.message,
-      ...error51.response.error.details === void 0 ? {} : { details: error51.response.error.details },
-      ...help === void 0 ? {} : { help },
-      ...requestId === void 0 ? {} : { requestId }
-    }));
-    io.stderr.write("\n");
-    if (help !== void 0) {
-      io.stderr.write(`\u2192 try: ${redactForLog(help)}
-`);
-    }
-    if (error51.status === 409) {
-      return 3;
-    }
-    return error51.status >= 400 && error51.status < 500 ? 1 : 2;
-  }
-  throw error51;
-}
-
-// src/commands/implementation-access.ts
-var implementationCredentialSchema = external_exports.object({
-  token: external_exports.string().regex(/^rost_impl_[A-Za-z0-9_-]+$/),
-  token_id: external_exports.string().uuid(),
-  tenant_id: external_exports.string().uuid(),
-  implementation_run_id: external_exports.string().uuid(),
-  scope: external_exports.literal("implementation_bootstrap"),
-  expires_at: external_exports.string().datetime({ offset: true })
-}).strict();
-var ImplementationAccessError = class extends Error {
-  constructor(message) {
-    super(message);
-    this.name = "ImplementationAccessError";
-  }
-};
-var DEFAULT_SOURCE_CLIENT = "external-agent";
-var SOURCE_CLIENT_MAX_LENGTH = 80;
-async function runImplementationAccess(args, io, deps) {
-  const json2 = args.includes("--json");
-  const action = parseAction(args[0]);
-  if (action === null) {
-    io.stderr.write(
-      `Usage: ${cliBrand.binName} implementation access start|status|complete|abandon [--json]
-`
-    );
-    return 1;
-  }
-  if (action === "start") {
-    const sourceClient = parseSourceClient(args.slice(1), DEFAULT_SOURCE_CLIENT);
-    return runStart(io, deps, sourceClient, json2);
-  }
-  const store = deps.createImplementationStore();
-  const credential = await store.read();
-  if (!credential) {
-    io.stderr.write("No implementation credential. Run rost implementation access start.\n");
-    return 1;
-  }
-  if (action === "status") {
-    return runStatus(io, deps, credential, json2);
-  }
-  if (action === "complete") {
-    return runComplete(io, deps, credential, store, json2);
-  }
-  return runAbandon(io, deps, credential, store, json2);
-}
-function parseAction(value) {
-  if (value === "start" || value === "status" || value === "complete" || value === "abandon") {
-    return value;
-  }
-  return null;
-}
-function parseSourceClient(args, defaultValue) {
-  let sourceClient;
-  for (let index = 0; index < args.length; index += 1) {
-    const arg = args[index];
-    if (arg === "--source-client") {
-      sourceClient = args[index + 1];
-      if (sourceClient === void 0) {
-        throw new ImplementationAccessError("--source-client requires a value.");
-      }
-      index += 1;
-    }
-  }
-  const value = (sourceClient ?? defaultValue).trim();
-  if (value.length === 0) {
-    throw new ImplementationAccessError("--source-client cannot be blank.");
-  }
-  if (value.length > SOURCE_CLIENT_MAX_LENGTH) {
-    throw new ImplementationAccessError(`--source-client must be ${SOURCE_CLIENT_MAX_LENGTH} characters or fewer.`);
-  }
-  return value;
-}
-function minimalConfig(appUrl2) {
-  return {
-    appUrl: appUrl2,
-    supabaseUrl: "https://unused.example.test",
-    supabaseAnonKey: "unused"
-  };
-}
-async function runStart(io, deps, sourceClient, json2) {
-  const store = deps.createImplementationStore();
-  const credential = await deps.pollDeviceAuthorizationHandoff(
-    minimalConfig(deps.appUrl),
-    io,
-    {
-      purpose: "implementation_bootstrap",
-      sourceClient,
-      // DER-2158 (U3b) C3: `silent: json` still suppresses the poller's own
-      // stdout print + browser open in --json mode, so stdout stays pure JSON
-      // for a machine caller. But without a replacement, --json mode never
-      // shows the verification URL/code at all — the command blocks until
-      // approval and nobody ever saw the code to approve it, so it always
-      // times out. `onStart` fires unconditionally (even when silent), so use
-      // it to surface the same URL/code on STDERR instead. Never write the
-      // bearer token here — the pre-approval StartSession doesn't carry one.
-      silent: json2,
-      ...json2 ? { onStart: (session) => writeJsonStartPrompt(io, session) } : {}
-    },
-    {},
-    (approved) => mapApprovedToCredential(approved)
-  );
-  await store.write(credential);
-  if (json2) {
-    io.stdout.write(
-      `${JSON.stringify({
-        status: "started",
-        run_id: credential.implementation_run_id,
-        tenant_id: credential.tenant_id,
-        scope: credential.scope,
-        expires_at: credential.expires_at,
-        stored_in: store.describe()
-      })}
-`
-    );
-  } else {
-    io.stdout.write(
-      `The implementation credential is stored in ${store.describe()} and expires at ${credential.expires_at}.
-`
-    );
-  }
-  return 0;
-}
-function writeJsonStartPrompt(io, session) {
-  io.stderr.write(
-    [
-      "To sign in, open this URL in any browser and approve the code:",
-      `  ${session.verification_uri}`,
-      "",
-      `  Code: ${session.user_code}`,
-      "",
-      "Waiting for approval\u2026",
-      ""
-    ].join("\n")
-  );
-}
-function mapApprovedToCredential(approved) {
-  const raw = approved;
-  const parsed = implementationCredentialSchema.safeParse({
-    token: raw.token,
-    token_id: raw.token_id,
-    tenant_id: raw.tenant_id,
-    implementation_run_id: raw.implementation_run_id,
-    scope: raw.scope,
-    expires_at: raw.expires_at
-  });
-  if (!parsed.success) {
-    return null;
-  }
-  return parsed.data;
-}
-function createImplementationClient(deps, credential) {
-  return new deps.CommandClient({
-    appUrl: deps.appUrl,
-    token: credential.token,
-    credentialKind: "implementation_bootstrap"
-  });
-}
-function isDeadRunError(error51) {
-  if (!(error51 instanceof CommandClientError) || !error51.response || error51.response.ok) {
-    return false;
-  }
-  if (error51.status === 401) {
-    return true;
-  }
-  const code = error51.response.error.code;
-  return code === "COMMAND_AUTHORIZATION" || code === "COMMAND_UNAUTHENTICATED" || /expired/i.test(error51.response.error.message);
-}
-async function runStatus(io, deps, credential, json2) {
-  const client = createImplementationClient(deps, credential);
-  try {
-    const result = await client.execute("implementation_access.status", {});
-    if (json2) {
-      io.stdout.write(`${JSON.stringify(result.output)}
-`);
-    } else {
-      io.stdout.write(`${redactForLog(formatStatusSummary(result.output))}
-`);
-    }
-    return 0;
-  } catch (error51) {
-    if (isDeadRunError(error51)) {
-      io.stderr.write(
-        "The implementation run is no longer active. Start a new one: rost implementation access start\n"
-      );
-      return 1;
-    }
-    io.stderr.write(`${redactForLog(error51 instanceof Error ? error51.message : String(error51))}
-`);
-    return 1;
-  }
-}
-function formatStatusSummary(output) {
-  const record2 = typeof output === "object" && output !== null ? output : {};
-  const status = typeof record2.status === "string" ? record2.status : "unknown";
-  const runId = typeof record2.run_id === "string" ? record2.run_id : "unknown";
-  return `Implementation run ${runId} status: ${status}.`;
-}
-async function runComplete(io, deps, credential, store, json2) {
-  const client = createImplementationClient(deps, credential);
-  try {
-    const result = await client.execute("implementation_access.complete", {});
-    await store.clear();
-    if (json2) {
-      io.stdout.write(
-        `${JSON.stringify({
-          status: "completed",
-          run_id: credential.implementation_run_id,
-          already_closed: result.output?.already_closed ?? false
-        })}
-`
-      );
-    } else {
-      io.stdout.write("Implementation run completed and the local credential was cleared.\n");
-    }
-    return 0;
-  } catch (error51) {
-    io.stderr.write(`${redactForLog(error51 instanceof Error ? error51.message : String(error51))}
-`);
-    io.stderr.write("The credential was kept. Retry with: rost implementation access complete\n");
-    return 1;
-  }
-}
-async function runAbandon(io, deps, credential, store, json2) {
-  const client = createImplementationClient(deps, credential);
-  try {
-    const result = await client.execute("implementation_access.abandon", {});
-    await store.clear();
-    if (json2) {
-      io.stdout.write(
-        `${JSON.stringify({
-          status: "abandoned",
-          run_id: credential.implementation_run_id,
-          already_closed: result.output?.already_closed ?? false
-        })}
-`
-      );
-    } else {
-      io.stdout.write("Implementation run abandoned and the local credential was cleared.\n");
-    }
-    return 0;
-  } catch (error51) {
-    io.stderr.write(`${redactForLog(error51 instanceof Error ? error51.message : String(error51))}
-`);
-    io.stderr.write("The credential was kept. Retry with: rost implementation access abandon\n");
-    return 1;
-  }
-}
-function defaultImplementationAccessDeps(appUrl2) {
-  return {
-    appUrl: appUrl2,
-    createImplementationStore: createImplementationCredentialStore,
-    pollDeviceAuthorizationHandoff,
-    CommandClient
-  };
-}
+import { readFile as readFile5 } from "node:fs/promises";
 
 // src/generated/command-manifest.ts
 var COMMAND_MANIFEST = [
@@ -58791,6 +58322,738 @@ var COMMAND_MANIFEST = [
   { "id": "work.record", "namespace": "work", "action": "record", "title": "Record work", "description": "Append one or more structured business-activity records to the agent work ledger for the acting seat. Batch-accepting, append-only, secret-redacted, and idempotent on dedup_key. Corrections are superseding records.", "requiredScope": "seat", "confirmation": "none", "exposeOverMcp": true, "fields": [], "hasComplexInput": true, "help": "Append structured business-activity records (verb + entity refs + outcome + evidence) to the seat's work ledger, in a batch, right after each action succeeds." }
 ];
 
+// src/commands/onboarding.ts
+var REHEARSE_USAGE = `${cliBrand.binName} onboard rehearse --setup-application-id <uuid> --expected-input-digest <sha256:digest> --expected-receipt-revision <integer> --idempotency-key <key> [--json]`;
+var ACTIVATE_USAGE = `${cliBrand.binName} onboard activate --setup-application-id <uuid> --expected-input-digest <sha256:digest> --expected-receipt-revision <integer> --terminal-rehearsal-batch-receipt-id <uuid> --rehearsal-runs '<json-array>' --configuration-digests '<json-array>' --idempotency-key <key> [--json]`;
+var SOURCE_INGEST_USAGE = `${cliBrand.binName} onboard source-ingest --file <path> --source-key <key> --kind <kind> --title <title> [--json]`;
+var SERVER_COMMAND_BODY_CAP_BYTES = 1048576;
+var COMMAND_BODY_SAFETY_MARGIN_BYTES = 4096;
+var SETUP_USAGE = `${cliBrand.binName} onboard setup --input '<json-plan>' | --input-file <path> [--json]`;
+var SETUP_STATUS_USAGE = `${cliBrand.binName} onboard setup-status --input '<json-plan>' | --input-file <path> [--json]`;
+function sourceIngestKinds() {
+  const entry = COMMAND_MANIFEST.find((candidate) => candidate.id === "onboarding.source_ingest");
+  const kinds = entry?.fields.find((field4) => field4.name === "kind")?.enumValues;
+  if (!kinds || kinds.length === 0) {
+    throw new Error("The command manifest is missing onboarding.source_ingest kind values.");
+  }
+  return kinds;
+}
+var OnboardingUsageError = class extends Error {
+  constructor(message) {
+    super(message);
+    this.name = "OnboardingUsageError";
+  }
+};
+async function runOnboarding(args, io, deps) {
+  let invocation;
+  try {
+    invocation = parseOnboardingInvocation(args);
+    await resolveOnboardingInvocationFiles(invocation, deps.readFile ?? readFile5);
+  } catch (error51) {
+    if (!(error51 instanceof OnboardingUsageError)) {
+      throw error51;
+    }
+    io.stderr.write(`${error51.message}
+${onboardingUsage()}
+`);
+    return 1;
+  }
+  const client = await deps.makeClient();
+  return executeOnboardingInvocation(invocation, io, client);
+}
+async function executeOnboardingInvocation(invocation, io, client, options = {}) {
+  try {
+    const result = await client.execute(invocation.commandId, invocation.body);
+    const rendered = invocation.json ? JSON.stringify(result.output, null, 2) : formatOnboardingOutput(invocation.action, result.output);
+    io.stdout.write(`${rendered}
+`);
+    return 0;
+  } catch (error51) {
+    const staged = stagedSetupConfirmationFromError(invocation, error51);
+    if (staged !== null) {
+      io.stdout.write(`${invocation.json ? JSON.stringify(staged, null, 2) : formatStagedSetupConfirmation(invocation.action, staged)}
+`);
+      return 0;
+    }
+    if (options.onError && options.onError(error51) === "handled") {
+      return "fall-through";
+    }
+    return printCommandError(io, error51);
+  }
+}
+async function resolveOnboardingInvocationFiles(invocation, readFileImpl = readFile5) {
+  if (invocation.sourceFile !== void 0) {
+    let bytes;
+    try {
+      bytes = await readFileImpl(invocation.sourceFile);
+    } catch (error51) {
+      throw new OnboardingUsageError(
+        `Could not read --file ${invocation.sourceFile}: ${error51 instanceof Error ? error51.message : String(error51)}`
+      );
+    }
+    if (bytes.length === 0) {
+      throw new OnboardingUsageError(`--file ${invocation.sourceFile} is empty.`);
+    }
+    const contentBase64 = bytes.toString("base64");
+    invocation.body.content_base64 = contentBase64;
+    const bodyBytes = Buffer.byteLength(JSON.stringify(invocation.body), "utf8");
+    const preflightCap = SERVER_COMMAND_BODY_CAP_BYTES - COMMAND_BODY_SAFETY_MARGIN_BYTES;
+    if (bodyBytes > preflightCap) {
+      const overheadBytes = bodyBytes - contentBase64.length;
+      const effectiveMaxFileBytes = Math.floor((preflightCap - overheadBytes) / 4) * 3;
+      throw new OnboardingUsageError(
+        `--file ${invocation.sourceFile} is ${bytes.length} bytes; base64-encoded it makes a ${bodyBytes}-byte command body, over the server's authoritative ${SERVER_COMMAND_BODY_CAP_BYTES}-byte command-transport cap (this check stops ${COMMAND_BODY_SAFETY_MARGIN_BYTES} bytes early on purpose). The largest file this invocation can send is about ${effectiveMaxFileBytes} bytes. The onboarding.source_ingest protocol documents sources up to 5,000,000 bytes; reaching that range needs the server-side transport follow-up. Split the export or trim rows/columns to fit.`
+      );
+    }
+    delete invocation.sourceFile;
+  }
+  if (invocation.inputFile !== void 0) {
+    let text;
+    try {
+      text = (await readFileImpl(invocation.inputFile)).toString("utf8");
+    } catch (error51) {
+      throw new OnboardingUsageError(
+        `Could not read --input-file ${invocation.inputFile}: ${error51 instanceof Error ? error51.message : String(error51)}`
+      );
+    }
+    invocation.body = parseSetupPlanJson(text, "--input-file");
+    delete invocation.inputFile;
+  }
+}
+function stagedSetupConfirmationFromError(invocation, error51) {
+  if (invocation.action !== "setup" && invocation.action !== "setup-status") {
+    return null;
+  }
+  if (!(error51 instanceof CommandClientError) || !error51.response || error51.response.ok || error51.response.error.code !== "COMMAND_CONFIRMATION_REQUIRED") {
+    return null;
+  }
+  const details = error51.response.error.details;
+  if (typeof details !== "object" || details === null) {
+    return null;
+  }
+  const record2 = details;
+  return record2.commandId === invocation.commandId ? record2 : null;
+}
+function formatStagedSetupConfirmation(action, details) {
+  const approveVia = asRecord(details.approveVia);
+  const lines = [
+    action === "setup-status" ? "Onboarding setup approval is pending. The URL below is the current card: an identical still-valid card is reused as-is; if live state moved, the stale card was superseded and this fresh one minted." : "Onboarding setup approval is ready.",
+    `Confirmation: ${field(details, "confirmationId")}`
+  ];
+  if (typeof approveVia.webUrl === "string") {
+    lines.push(`Approve once: ${approveVia.webUrl}`);
+  }
+  lines.push(
+    "After the owner approves, re-run this command with the identical plan to read the immutable setup receipt."
+  );
+  return lines.join("\n");
+}
+function parseSetupPlanJson(text, flag) {
+  let parsed;
+  try {
+    parsed = JSON.parse(text);
+  } catch {
+    throw new OnboardingUsageError(`${flag} must be valid JSON.`);
+  }
+  if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) {
+    throw new OnboardingUsageError(`${flag} must be a JSON object (the complete onboarding setup plan).`);
+  }
+  return parsed;
+}
+function parseOnboardingInvocation(args) {
+  const action = args[0];
+  if (action === "status" || action === "resume") {
+    return {
+      commandId: action === "status" ? "onboarding.status" : "onboarding.resume",
+      body: {},
+      json: args.includes("--json"),
+      action
+    };
+  }
+  if (action === "source-ingest") {
+    return parseSourceIngestInvocation(args.slice(1));
+  }
+  if (action === "setup" || action === "setup-status") {
+    return parseSetupInvocation(action, args.slice(1));
+  }
+  if (action !== "rehearse" && action !== "activate") {
+    throw new OnboardingUsageError(`Unknown onboard action: ${action ?? "(missing)"}`);
+  }
+  const allowed = /* @__PURE__ */ new Set([
+    "setup-application-id",
+    "expected-input-digest",
+    "expected-receipt-revision",
+    "idempotency-key",
+    ...action === "activate" ? [
+      "terminal-rehearsal-batch-receipt-id",
+      "rehearsal-runs",
+      "configuration-digests"
+    ] : []
+  ]);
+  const values = /* @__PURE__ */ new Map();
+  let json2 = false;
+  for (let index = 1; index < args.length; index += 1) {
+    const argument = args[index];
+    if (argument === "--json") {
+      if (json2) {
+        throw new OnboardingUsageError("Duplicate --json flag.");
+      }
+      json2 = true;
+      continue;
+    }
+    if (argument === void 0 || !argument.startsWith("--")) {
+      throw new OnboardingUsageError(`Unexpected argument: ${argument ?? "(missing)"}`);
+    }
+    const key = argument.slice(2);
+    if (!allowed.has(key)) {
+      throw new OnboardingUsageError(`Unknown flag: --${key}`);
+    }
+    if (values.has(key)) {
+      throw new OnboardingUsageError(`Duplicate --${key} flag.`);
+    }
+    const value = args[index + 1];
+    if (value === void 0 || value.startsWith("--")) {
+      throw new OnboardingUsageError(`Missing required --${key} value.`);
+    }
+    values.set(key, value);
+    index += 1;
+  }
+  const requiredValue2 = (key) => {
+    const value = values.get(key);
+    if (value === void 0 || value.length === 0) {
+      throw new OnboardingUsageError(`Missing required --${key} value.`);
+    }
+    return value;
+  };
+  const setupApplicationId = requiredValue2("setup-application-id");
+  const expectedInputDigest = requiredValue2("expected-input-digest");
+  const revisionRaw = requiredValue2("expected-receipt-revision");
+  const idempotencyKey = requiredValue2("idempotency-key");
+  const expectedReceiptRevision = Number(revisionRaw);
+  if (!Number.isSafeInteger(expectedReceiptRevision) || expectedReceiptRevision <= 0) {
+    throw new OnboardingUsageError("--expected-receipt-revision must be a positive integer.");
+  }
+  const sharedBody = {
+    setup_application_id: setupApplicationId,
+    expected_input_digest: expectedInputDigest,
+    expected_receipt_revision: expectedReceiptRevision,
+    idempotency_key: idempotencyKey
+  };
+  if (action === "activate") {
+    return {
+      commandId: "onboarding.activate",
+      body: {
+        ...sharedBody,
+        terminal_rehearsal_batch_receipt_id: requiredValue2(
+          "terminal-rehearsal-batch-receipt-id"
+        ),
+        rehearsal_runs: parseJsonArrayFlag(
+          "rehearsal-runs",
+          requiredValue2("rehearsal-runs")
+        ),
+        configuration_digests: parseJsonArrayFlag(
+          "configuration-digests",
+          requiredValue2("configuration-digests")
+        )
+      },
+      json: json2,
+      action
+    };
+  }
+  return {
+    commandId: "onboarding.rehearse",
+    body: sharedBody,
+    json: json2,
+    action
+  };
+}
+function collectFlagValues(args, allowed) {
+  const values = /* @__PURE__ */ new Map();
+  let json2 = false;
+  for (let index = 0; index < args.length; index += 1) {
+    const argument = args[index];
+    if (argument === "--json") {
+      if (json2) {
+        throw new OnboardingUsageError("Duplicate --json flag.");
+      }
+      json2 = true;
+      continue;
+    }
+    if (argument === void 0 || !argument.startsWith("--")) {
+      throw new OnboardingUsageError(`Unexpected argument: ${argument ?? "(missing)"}`);
+    }
+    const key = argument.slice(2);
+    if (!allowed.has(key)) {
+      throw new OnboardingUsageError(`Unknown flag: --${key}`);
+    }
+    if (values.has(key)) {
+      throw new OnboardingUsageError(`Duplicate --${key} flag.`);
+    }
+    const value = args[index + 1];
+    if (value === void 0 || value.startsWith("--")) {
+      throw new OnboardingUsageError(`Missing required --${key} value.`);
+    }
+    values.set(key, value);
+    index += 1;
+  }
+  return { values, json: json2 };
+}
+function parseSourceIngestInvocation(args) {
+  const { values, json: json2 } = collectFlagValues(
+    args,
+    /* @__PURE__ */ new Set(["file", "source-key", "kind", "title"])
+  );
+  const required2 = (key) => {
+    const value = values.get(key);
+    if (value === void 0 || value.length === 0) {
+      throw new OnboardingUsageError(`Missing required --${key} value.`);
+    }
+    return value;
+  };
+  const kind = required2("kind");
+  const kinds = sourceIngestKinds();
+  if (!kinds.includes(kind)) {
+    throw new OnboardingUsageError(`--kind must be one of: ${kinds.join(", ")}`);
+  }
+  return {
+    commandId: "onboarding.source_ingest",
+    body: {
+      source_key: required2("source-key"),
+      kind,
+      title: required2("title")
+    },
+    json: json2,
+    action: "source-ingest",
+    sourceFile: required2("file")
+  };
+}
+function parseSetupInvocation(action, args) {
+  const { values, json: json2 } = collectFlagValues(args, /* @__PURE__ */ new Set(["input", "input-file"]));
+  const input = values.get("input");
+  const inputFile = values.get("input-file");
+  if (input === void 0 === (inputFile === void 0)) {
+    throw new OnboardingUsageError(
+      `onboard ${action} requires exactly one of --input '<json-plan>' or --input-file <path>.`
+    );
+  }
+  return {
+    commandId: "onboarding.setup",
+    body: input === void 0 ? {} : parseSetupPlanJson(input, "--input"),
+    json: json2,
+    action,
+    ...inputFile === void 0 ? {} : { inputFile }
+  };
+}
+function onboardingUsage() {
+  return [
+    `Usage: ${cliBrand.binName} onboard status|resume [--json]`,
+    `  ${SOURCE_INGEST_USAGE}`,
+    `  ${SETUP_USAGE}`,
+    `  ${SETUP_STATUS_USAGE}`,
+    `  ${REHEARSE_USAGE}`,
+    `  ${ACTIVATE_USAGE}`
+  ].join("\n");
+}
+function formatOnboardingOutput(action, output) {
+  if (action === "rehearse") {
+    return formatRehearsalOutput(output);
+  }
+  if (action === "activate") {
+    return formatActivationOutput(output);
+  }
+  if (action === "source-ingest") {
+    return formatSourceIngestOutput(output);
+  }
+  if (action === "setup" || action === "setup-status") {
+    return formatAppliedSetupOutput(output);
+  }
+  const record2 = typeof output === "object" && output !== null ? output : {};
+  if (typeof record2.summary === "string") {
+    return record2.summary;
+  }
+  return JSON.stringify(output, null, 2);
+}
+function parseJsonArrayFlag(flag, value) {
+  try {
+    const parsed = JSON.parse(value);
+    if (!Array.isArray(parsed)) {
+      throw new Error("not an array");
+    }
+    return parsed;
+  } catch {
+    throw new OnboardingUsageError(`--${flag} must be a valid JSON array.`);
+  }
+}
+function formatActivationOutput(output) {
+  const record2 = asRecord(output);
+  const approveVia = asRecord(record2.approveVia);
+  if (typeof approveVia.webUrl === "string") {
+    return [
+      "Onboarding activation approval is ready.",
+      `Approve once: ${approveVia.webUrl}`
+    ].join("\n");
+  }
+  const receipt = asRecord(record2.receipt);
+  const agents = Array.isArray(receipt.agents) ? receipt.agents : [];
+  if (record2.status === "activated") {
+    return [
+      "Onboarding activation completed.",
+      `Activation receipt: ${field(receipt, "activation_receipt_id")}`,
+      `Agents live: ${agents.length} of ${agents.length}`,
+      `Onboarding completed: ${field(receipt, "onboarding_completed_at")}`
+    ].join("\n");
+  }
+  return JSON.stringify(output, null, 2);
+}
+function formatSourceIngestOutput(output) {
+  const record2 = asRecord(output);
+  const descriptor = asRecord(record2.descriptor);
+  const families = Array.isArray(descriptor.family_manifest) ? descriptor.family_manifest : [];
+  return [
+    "Source retained for this run.",
+    `Upload: ${field(record2, "source_upload_id")}`,
+    `SHA-256: ${field(descriptor, "sha256")}`,
+    `Bytes: ${field(descriptor, "byte_count")}`,
+    ...families.map((entry) => {
+      const item = asRecord(entry);
+      return `- ${field(item, "family")}: ${field(item, "input_count")} rows`;
+    }),
+    "Reference it from the setup plan's sources[] via the returned source_ref (run with --json to capture it verbatim)."
+  ].join("\n");
+}
+function formatAppliedSetupOutput(output) {
+  const record2 = asRecord(output);
+  if (typeof record2.application_id !== "string") {
+    return JSON.stringify(output, null, 2);
+  }
+  const receipt = asRecord(record2.receipt);
+  const digests = asRecord(receipt.digests);
+  return [
+    "Onboarding setup is applied.",
+    `Setup application: ${field(record2, "application_id")}`,
+    `Receipt revision: ${field(receipt, "receipt_revision")}`,
+    `Input digest: ${field(digests, "input")}`,
+    `Next: ${cliBrand.binName} onboard rehearse --setup-application-id ${field(record2, "application_id")} --expected-input-digest ${field(digests, "input")} --expected-receipt-revision ${field(receipt, "receipt_revision")} --idempotency-key <stable-key> --json`
+  ].join("\n");
+}
+function formatRehearsalOutput(output) {
+  const record2 = asRecord(output);
+  if (record2.status === "in_progress") {
+    const batch = asRecord(record2.batch);
+    const checkpoints = Array.isArray(record2.checkpoints) ? record2.checkpoints : [];
+    const completed = checkpoints.filter((checkpoint) => {
+      const status = asRecord(checkpoint).status;
+      return status === "passed" || status === "failed";
+    }).length;
+    return [
+      "Onboarding rehearsal is in progress.",
+      `Batch: ${field(batch, "batch_id")}`,
+      `Checkpoints complete: ${completed} of ${checkpoints.length}`,
+      ...checkpoints.map((checkpoint) => {
+        const item = asRecord(checkpoint);
+        return `- Agent ${field(item, "agent_id")} / Seat ${field(item, "seat_id")}: ${field(item, "status")}`;
+      }),
+      "Retry with the same idempotency key to continue this batch."
+    ].join("\n");
+  }
+  if (record2.status === "passed" || record2.status === "failed") {
+    return [
+      `Onboarding rehearsal ${record2.status}.`,
+      "Immutable batch receipt:",
+      JSON.stringify(record2.batch_receipt, null, 2),
+      "Immutable agent receipts:",
+      JSON.stringify(record2.agent_receipts, null, 2)
+    ].join("\n");
+  }
+  return JSON.stringify(output, null, 2);
+}
+function asRecord(value) {
+  return typeof value === "object" && value !== null ? value : {};
+}
+function field(record2, key) {
+  const value = record2[key];
+  return typeof value === "string" || typeof value === "number" ? String(value) : "\u2014";
+}
+function printCommandError(io, error51) {
+  if (error51 instanceof CommandClientError && error51.response && !error51.response.ok) {
+    const help = error51.response.error.help;
+    const requestId = error51.response.requestId;
+    io.stderr.write(redactForLog({
+      code: error51.response.error.code,
+      message: error51.response.error.message,
+      ...error51.response.error.details === void 0 ? {} : { details: error51.response.error.details },
+      ...help === void 0 ? {} : { help },
+      ...requestId === void 0 ? {} : { requestId }
+    }));
+    io.stderr.write("\n");
+    if (help !== void 0) {
+      io.stderr.write(`\u2192 try: ${redactForLog(help)}
+`);
+    }
+    if (error51.status === 409) {
+      return 3;
+    }
+    return error51.status >= 400 && error51.status < 500 ? 1 : 2;
+  }
+  throw error51;
+}
+
+// src/commands/implementation-access.ts
+var implementationCredentialSchema = external_exports.object({
+  token: external_exports.string().regex(/^rost_impl_[A-Za-z0-9_-]+$/),
+  token_id: external_exports.string().uuid(),
+  tenant_id: external_exports.string().uuid(),
+  implementation_run_id: external_exports.string().uuid(),
+  scope: external_exports.literal("implementation_bootstrap"),
+  expires_at: external_exports.string().datetime({ offset: true })
+}).strict();
+var ImplementationAccessError = class extends Error {
+  constructor(message) {
+    super(message);
+    this.name = "ImplementationAccessError";
+  }
+};
+var DEFAULT_SOURCE_CLIENT = "external-agent";
+var SOURCE_CLIENT_MAX_LENGTH = 80;
+async function runImplementationAccess(args, io, deps) {
+  const json2 = args.includes("--json");
+  const action = parseAction(args[0]);
+  if (action === null) {
+    io.stderr.write(
+      `Usage: ${cliBrand.binName} implementation access start|status|complete|abandon [--json]
+`
+    );
+    return 1;
+  }
+  if (action === "start") {
+    const sourceClient = parseSourceClient(args.slice(1), DEFAULT_SOURCE_CLIENT);
+    return runStart(io, deps, sourceClient, json2);
+  }
+  const store = deps.createImplementationStore();
+  const credential = await store.read();
+  if (!credential) {
+    io.stderr.write("No implementation credential. Run rost implementation access start.\n");
+    return 1;
+  }
+  if (action === "status") {
+    return runStatus(io, deps, credential, json2);
+  }
+  if (action === "complete") {
+    return runComplete(io, deps, credential, store, json2);
+  }
+  return runAbandon(io, deps, credential, store, json2);
+}
+function parseAction(value) {
+  if (value === "start" || value === "status" || value === "complete" || value === "abandon") {
+    return value;
+  }
+  return null;
+}
+function parseSourceClient(args, defaultValue) {
+  let sourceClient;
+  for (let index = 0; index < args.length; index += 1) {
+    const arg = args[index];
+    if (arg === "--source-client") {
+      sourceClient = args[index + 1];
+      if (sourceClient === void 0) {
+        throw new ImplementationAccessError("--source-client requires a value.");
+      }
+      index += 1;
+    }
+  }
+  const value = (sourceClient ?? defaultValue).trim();
+  if (value.length === 0) {
+    throw new ImplementationAccessError("--source-client cannot be blank.");
+  }
+  if (value.length > SOURCE_CLIENT_MAX_LENGTH) {
+    throw new ImplementationAccessError(`--source-client must be ${SOURCE_CLIENT_MAX_LENGTH} characters or fewer.`);
+  }
+  return value;
+}
+function minimalConfig(appUrl2) {
+  return {
+    appUrl: appUrl2,
+    supabaseUrl: "https://unused.example.test",
+    supabaseAnonKey: "unused"
+  };
+}
+async function runStart(io, deps, sourceClient, json2) {
+  const store = deps.createImplementationStore();
+  const credential = await deps.pollDeviceAuthorizationHandoff(
+    minimalConfig(deps.appUrl),
+    io,
+    {
+      purpose: "implementation_bootstrap",
+      sourceClient,
+      // DER-2158 (U3b) C3: `silent: json` still suppresses the poller's own
+      // stdout print + browser open in --json mode, so stdout stays pure JSON
+      // for a machine caller. But without a replacement, --json mode never
+      // shows the verification URL/code at all — the command blocks until
+      // approval and nobody ever saw the code to approve it, so it always
+      // times out. `onStart` fires unconditionally (even when silent), so use
+      // it to surface the same URL/code on STDERR instead. Never write the
+      // bearer token here — the pre-approval StartSession doesn't carry one.
+      silent: json2,
+      ...json2 ? { onStart: (session) => writeJsonStartPrompt(io, session) } : {}
+    },
+    {},
+    (approved) => mapApprovedToCredential(approved)
+  );
+  await store.write(credential);
+  if (json2) {
+    io.stdout.write(
+      `${JSON.stringify({
+        status: "started",
+        run_id: credential.implementation_run_id,
+        tenant_id: credential.tenant_id,
+        scope: credential.scope,
+        expires_at: credential.expires_at,
+        stored_in: store.describe()
+      })}
+`
+    );
+  } else {
+    io.stdout.write(
+      `The implementation credential is stored in ${store.describe()} and expires at ${credential.expires_at}.
+`
+    );
+  }
+  return 0;
+}
+function writeJsonStartPrompt(io, session) {
+  io.stderr.write(
+    [
+      "To sign in, open this URL in any browser and approve the code:",
+      `  ${session.verification_uri}`,
+      "",
+      `  Code: ${session.user_code}`,
+      "",
+      "Waiting for approval\u2026",
+      ""
+    ].join("\n")
+  );
+}
+function mapApprovedToCredential(approved) {
+  const raw = approved;
+  const parsed = implementationCredentialSchema.safeParse({
+    token: raw.token,
+    token_id: raw.token_id,
+    tenant_id: raw.tenant_id,
+    implementation_run_id: raw.implementation_run_id,
+    scope: raw.scope,
+    expires_at: raw.expires_at
+  });
+  if (!parsed.success) {
+    return null;
+  }
+  return parsed.data;
+}
+function createImplementationClient(deps, credential) {
+  return new deps.CommandClient({
+    appUrl: deps.appUrl,
+    token: credential.token,
+    credentialKind: "implementation_bootstrap"
+  });
+}
+function isDeadRunError(error51) {
+  if (!(error51 instanceof CommandClientError) || !error51.response || error51.response.ok) {
+    return false;
+  }
+  if (error51.status === 401) {
+    return true;
+  }
+  const code = error51.response.error.code;
+  return code === "COMMAND_AUTHORIZATION" || code === "COMMAND_UNAUTHENTICATED" || /expired/i.test(error51.response.error.message);
+}
+async function runStatus(io, deps, credential, json2) {
+  const client = createImplementationClient(deps, credential);
+  try {
+    const result = await client.execute("implementation_access.status", {});
+    if (json2) {
+      io.stdout.write(`${JSON.stringify(result.output)}
+`);
+    } else {
+      io.stdout.write(`${redactForLog(formatStatusSummary(result.output))}
+`);
+    }
+    return 0;
+  } catch (error51) {
+    if (isDeadRunError(error51)) {
+      io.stderr.write(
+        "The implementation run is no longer active. Start a new one: rost implementation access start\n"
+      );
+      return 1;
+    }
+    io.stderr.write(`${redactForLog(error51 instanceof Error ? error51.message : String(error51))}
+`);
+    return 1;
+  }
+}
+function formatStatusSummary(output) {
+  const record2 = typeof output === "object" && output !== null ? output : {};
+  const status = typeof record2.status === "string" ? record2.status : "unknown";
+  const runId = typeof record2.run_id === "string" ? record2.run_id : "unknown";
+  return `Implementation run ${runId} status: ${status}.`;
+}
+async function runComplete(io, deps, credential, store, json2) {
+  const client = createImplementationClient(deps, credential);
+  try {
+    const result = await client.execute("implementation_access.complete", {});
+    await store.clear();
+    if (json2) {
+      io.stdout.write(
+        `${JSON.stringify({
+          status: "completed",
+          run_id: credential.implementation_run_id,
+          already_closed: result.output?.already_closed ?? false
+        })}
+`
+      );
+    } else {
+      io.stdout.write("Implementation run completed and the local credential was cleared.\n");
+    }
+    return 0;
+  } catch (error51) {
+    io.stderr.write(`${redactForLog(error51 instanceof Error ? error51.message : String(error51))}
+`);
+    io.stderr.write("The credential was kept. Retry with: rost implementation access complete\n");
+    return 1;
+  }
+}
+async function runAbandon(io, deps, credential, store, json2) {
+  const client = createImplementationClient(deps, credential);
+  try {
+    const result = await client.execute("implementation_access.abandon", {});
+    await store.clear();
+    if (json2) {
+      io.stdout.write(
+        `${JSON.stringify({
+          status: "abandoned",
+          run_id: credential.implementation_run_id,
+          already_closed: result.output?.already_closed ?? false
+        })}
+`
+      );
+    } else {
+      io.stdout.write("Implementation run abandoned and the local credential was cleared.\n");
+    }
+    return 0;
+  } catch (error51) {
+    io.stderr.write(`${redactForLog(error51 instanceof Error ? error51.message : String(error51))}
+`);
+    io.stderr.write("The credential was kept. Retry with: rost implementation access abandon\n");
+    return 1;
+  }
+}
+function defaultImplementationAccessDeps(appUrl2) {
+  return {
+    appUrl: appUrl2,
+    createImplementationStore: createImplementationCredentialStore,
+    pollDeviceAuthorizationHandoff,
+    CommandClient
+  };
+}
+
 // src/generator/groups.ts
 import { readFileSync as readFileSync2 } from "node:fs";
 
@@ -62676,7 +62939,7 @@ async function sweepStaleRunnerTempFiles(dir, options = {}) {
 // src/runner-service.ts
 import { execFile as execFileCallback2 } from "node:child_process";
 import { realpathSync as realpathSync2 } from "node:fs";
-import { access, mkdir as mkdir4, readFile as readFile5, readdir as readdir2, rm as rm4, writeFile as writeFile4 } from "node:fs/promises";
+import { access, mkdir as mkdir4, readFile as readFile6, readdir as readdir2, rm as rm4, writeFile as writeFile4 } from "node:fs/promises";
 import { homedir as homedir4 } from "node:os";
 import path7 from "node:path";
 import { promisify as promisify2 } from "node:util";
@@ -63090,7 +63353,7 @@ async function inspectRunnerService(options) {
   const paths = runnerServicePaths(options.homeDir, safeName);
   const label = serviceLabel(safeName);
   const installed = await fileExists(paths.launchAgentPath);
-  const plist = installed ? await readFile5(paths.launchAgentPath, "utf8").catch(() => null) : null;
+  const plist = installed ? await readFile6(paths.launchAgentPath, "utf8").catch(() => null) : null;
   const programArgs = plist ? extractProgramArguments(plist) : [];
   const appUrl2 = plist ? extractPlistEnvironmentValue(plist, `${cliBrand.envPrefix}_APP_URL`) : null;
   const urlPolicyEnv = extractPlistEnvironmentValue(plist ?? "", allowInsecureAppUrlEnv) === "1" ? "set" : "unset";
@@ -63358,7 +63621,7 @@ async function fileExists(file2) {
 }
 async function readTail(file2, maxBytes) {
   try {
-    const content = await readFile5(file2, "utf8");
+    const content = await readFile6(file2, "utf8");
     return content.length > maxBytes ? content.slice(content.length - maxBytes) : content;
   } catch {
     return null;
@@ -63506,7 +63769,7 @@ function parseSemver2(value) {
 import { execFile as execFileCallback5, spawn } from "node:child_process";
 import { createHash as createHash4, randomUUID } from "node:crypto";
 import { constants as fsConstants4 } from "node:fs";
-import { access as access3, chmod as chmod2, lstat as lstat2, mkdir as mkdir6, open as open2, readFile as readFile7, rename as rename2, rm as rm6, statfs, writeFile as writeFile6 } from "node:fs/promises";
+import { access as access3, chmod as chmod2, lstat as lstat2, mkdir as mkdir6, open as open2, readFile as readFile8, rename as rename2, rm as rm6, statfs, writeFile as writeFile6 } from "node:fs/promises";
 import { cpus, homedir as homedir5, hostname as hostname3, platform, totalmem, tmpdir as tmpdir2 } from "node:os";
 import path10 from "node:path";
 import { setTimeout as sleep3 } from "node:timers/promises";
@@ -63516,7 +63779,7 @@ import { promisify as promisify5 } from "node:util";
 import { execFile as execFileCallback4 } from "node:child_process";
 import { createHash as createHash3, randomBytes } from "node:crypto";
 import { constants as fsConstants3 } from "node:fs";
-import { chmod, link, lstat, mkdir as mkdir5, mkdtemp, open, readdir as readdir3, readFile as readFile6, realpath, rename, rm as rm5, stat as stat4, writeFile as writeFile5 } from "node:fs/promises";
+import { chmod, link, lstat, mkdir as mkdir5, mkdtemp, open, readdir as readdir3, readFile as readFile7, realpath, rename, rm as rm5, stat as stat4, writeFile as writeFile5 } from "node:fs/promises";
 import os3 from "node:os";
 import path8 from "node:path";
 import { setTimeout as sleep2 } from "node:timers/promises";
@@ -63628,7 +63891,7 @@ async function provisionIsolatedClaudeConfigDir(base, configDir, onRepair) {
   const source = resolveSourceClaudeConfigDir(base);
   for (const file2 of CLAUDE_CONFIG_AUTH_FILES) {
     try {
-      const data = await readFile6(path8.join(source, file2));
+      const data = await readFile7(path8.join(source, file2));
       await writeFileAtomicNoFollow(path8.join(configDir, file2), data, { mode: 384 });
     } catch {
     }
@@ -63831,7 +64094,7 @@ trust_level = "untrusted"
     await rm5(dest, { recursive: true, force: true });
   }
   const source = resolveSourceCodexHomeDir(base);
-  const data = await readFile6(path8.join(source, CODEX_HOME_AUTH_FILE)).catch(() => null);
+  const data = await readFile7(path8.join(source, CODEX_HOME_AUTH_FILE)).catch(() => null);
   if (data === null) {
     return homeDir;
   }
@@ -63914,7 +64177,7 @@ async function acquireCodexHomeLock(homeDir, options = {}) {
       ino = String((await handle.stat()).ino);
     } catch (error51) {
       await handle.close().catch(() => void 0);
-      const stillOurs = await readFile6(lockPath, "utf8").then((raw) => JSON.parse(raw).nonce === nonce).catch(() => false);
+      const stillOurs = await readFile7(lockPath, "utf8").then((raw) => JSON.parse(raw).nonce === nonce).catch(() => false);
       if (stillOurs) {
         await rm5(lockPath, { force: true }).catch(() => void 0);
       }
@@ -63957,7 +64220,7 @@ async function breakCodexHomeLock(lockPath, expected) {
   }
   let raw;
   try {
-    raw = await readFile6(lockPath, "utf8");
+    raw = await readFile7(lockPath, "utf8");
   } catch {
     return;
   }
@@ -63974,7 +64237,7 @@ async function judgeCodexHomeLock(lockPath, staleMs) {
   }
   let raw;
   try {
-    raw = await readFile6(lockPath, "utf8");
+    raw = await readFile7(lockPath, "utf8");
   } catch (error51) {
     if (error51.code === "ENOENT") {
       return { stale: false, identity: null };
@@ -65537,7 +65800,7 @@ async function migrateOneLegacyCodexHome(legacyHome, newHome, io) {
 }
 async function loadState(filePath, expectedTenantId) {
   try {
-    const parsed = JSON.parse(await readFile7(filePath, "utf8"));
+    const parsed = JSON.parse(await readFile8(filePath, "utf8"));
     if (typeof parsed.runner_id === "string" && typeof parsed.runner_secret === "string") {
       if (expectedTenantId && parsed.tenant_id !== expectedTenantId) {
         return null;
@@ -67335,7 +67598,7 @@ async function reconcileOrphanedInFlightWorkOrders(deps) {
         const transcriptPath = await findClaudeTranscriptPath(entry.claude_config_dir, entry.claude_session_id);
         if (transcriptPath) {
           try {
-            const content = await readFile7(transcriptPath, "utf8");
+            const content = await readFile8(transcriptPath, "utf8");
             verdict = classifyClaudeTranscript(content);
           } catch {
             verdict = { kind: "missing" };
@@ -67734,7 +67997,7 @@ async function main(argv = process.argv.slice(2), options = {}) {
       allowDevelopmentAppUrl: process.env[allowInsecureAppUrlEnv] === "1"
     });
   }
-  if (command === "onboard" && (args[0] === "status" || args[0] === "resume" || args[0] === "rehearse" || args[0] === "activate")) {
+  if (command === "onboard" && (args[0] === "status" || args[0] === "resume" || args[0] === "rehearse" || args[0] === "activate" || args[0] === "source-ingest" || args[0] === "setup" || args[0] === "setup-status")) {
     let implCredential = null;
     try {
       implCredential = await createImplementationCredentialStore().read();
@@ -67745,6 +68008,7 @@ async function main(argv = process.argv.slice(2), options = {}) {
       let invocation;
       try {
         invocation = parseOnboardingInvocation(args);
+        await resolveOnboardingInvocationFiles(invocation);
       } catch (error51) {
         if (!(error51 instanceof OnboardingUsageError)) {
           throw error51;
@@ -67760,15 +68024,51 @@ ${onboardingUsage()}
         token: implCredential.token,
         credentialKind: "implementation_bootstrap"
       });
-      try {
-        const result = await implClient.execute(invocation.commandId, invocation.body);
-        io.stdout.write(`${invocation.json ? JSON.stringify(result.output, null, 2) : formatOnboardingOutput(invocation.action, result.output)}
+      const exit = await executeOnboardingInvocation(invocation, io, implClient, {
+        onError: (error51) => isDeadRunError(error51) ? "handled" : "print"
+      });
+      if (exit !== "fall-through") {
+        return exit;
+      }
+    }
+  }
+  if (command === "seat" && args[0] === "create-complete") {
+    let implCredential = null;
+    try {
+      implCredential = await createImplementationCredentialStore().read();
+    } catch {
+      implCredential = null;
+    }
+    if (implCredential) {
+      const CommandClientCtor2 = options.commandClient ?? CommandClient;
+      const implClient = new CommandClientCtor2({
+        appUrl: config2.appUrl,
+        token: implCredential.token,
+        credentialKind: "implementation_bootstrap"
+      });
+      let deadRun = false;
+      const exit = await runOperation("seat", args, {
+        io,
+        client: implClient,
+        binName: cliBrand.binName,
+        run: async (wrapperClient, commandId, body, format, runOptions) => {
+          try {
+            const result = await wrapperClient.execute(commandId, body, runOptions ?? {});
+            const rendered = format ? format(result.output) : JSON.stringify(result.output, null, 2);
+            io.stdout.write(`${rendered}
 `);
-        return 0;
-      } catch (error51) {
-        if (!isDeadRunError(error51)) {
-          return printCommandError3(io, error51);
+            return 0;
+          } catch (error51) {
+            if (isDeadRunError(error51)) {
+              deadRun = true;
+              return 1;
+            }
+            return printCommandError3(io, error51);
+          }
         }
+      });
+      if (!deadRun) {
+        return exit;
       }
     }
   }
@@ -68268,6 +68568,10 @@ function printUsage(io) {
     `${cliBrand.binName} onboard status`,
     `${cliBrand.binName} onboard resume`,
     `${cliBrand.binName} onboard run`,
+    `${cliBrand.binName} onboard source-ingest --file <path> --source-key <key> --kind <kind> --title <title> [--json]`,
+    `${cliBrand.binName} onboard setup --input '<json-plan>' | --input-file <path> [--json]`,
+    `${cliBrand.binName} onboard setup-status --input '<json-plan>' | --input-file <path> [--json]`,
+    `${cliBrand.binName} onboard rehearse|activate --setup-application-id <uuid> ... [--json]`,
     `${cliBrand.binName} mcp install --client claude-code|codex|cursor --scope tenant-admin|seat [--seat-id <id>] [--expires-in <days>|--no-expiry]`,
     `${cliBrand.binName} mcp install --client claude-code|codex|cursor --rotate <old-token-id>  (inherits the old token's scope; no --scope)`,
     `${cliBrand.binName} implementation access start|status|complete|abandon [--json]`,