@rosthq/cli 0.7.160 → 0.7.161

package/dist/index.js

@@ -13304,7 +13304,7 @@ var init_command_discovery = __esm({
       { "id": "agent.update_schedule", "title": "Update agent schedule", "description": "Set or clear the scheduled execution cron for a draft or live agent on a seat.", "required_scope": "tenant", "confirmation": "human_required", "trusted_execution": { "mode": "eligible_bounded", "risk_flags": [], "rationale": "Setting or changing a seat's routine schedule is a bounded, reversible worker action safe to auto-apply under a standing Trusted grant." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "schedule_cron": { "anyOf": [{ "type": "string", "minLength": 1, "maxLength": 120 }, { "type": "null" }] }, "schedule_timezone": { "type": "string", "minLength": 1, "maxLength": 100 } }, "required": ["seat_id", "schedule_cron"], "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "agent_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "schedule_cron": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "schedule_timezone": { "type": "string" }, "schedule_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "schedule_revision": { "type": "integer", "exclusiveMinimum": 0, "maximum": 9007199254740991 } }, "required": ["seat_id", "agent_id", "schedule_cron", "schedule_timezone", "schedule_id", "schedule_revision"], "additionalProperties": false }, "help": "Set or clear an agent's scheduled execution; a live scheduled agent must keep a steward chain resolving to a human.", "guide_slugs": ["agent-staffing-playbook", "runner-guide"], "stages": ["staffing", "operating_rhythm"], "related_command_ids": ["agent_setup.get", "agent_setup.relane", "agent_setup.start", "agent_setup.update", "agent_template.list", "agent.configure_tools", "agent.create_custom", "agent.create_from_template", "agent.decommission", "agent.get_run", "agent.go_live", "agent.list_runs", "agent.list_tool_calls", "agent.pause", "agent.resume", "agent.run_dry_run", "agent.run_now", "agent.status", "agent.trust.create", "aicos.brain_settings.get", "aicos.brain_settings.update", "charter.backfill_stock_evidence", "charter.set", "charter.sign_manifest", "command.describe", "command.list", "confirmation.approve", "friction.resolve", "goal.bind_measurable", "graph.get", "mcp_token.create", "mcp_token.list", "onboarding.status", "runner.list", "seat.get", "skill.assign_to_seat", "staffing.assign_agent_dry_run", "staffing.assign_user", "tenant.model_gateway_policy.update"] },
       { "id": "agent.watch_run", "title": "Watch agent run", "description": "Return a read-only live snapshot of one seat run: run status and lane, the derived current work-state, the run-heartbeat (quiet-but-healthy vs stalled) with current phase, the persisted session transcript, and the run's tool-call step feed (tool name, guard result, outcome). Never returns argument summaries or secret material.", "required_scope": "seat", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "run_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" } }, "required": ["seat_id", "run_id"], "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "run": { "type": "object", "properties": { "run_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "agent_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "agent_display_name": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "status": { "type": "string", "enum": ["running", "succeeded", "failed", "timeout", "cancelled"] }, "lane": { "type": "string", "enum": ["cloud", "mcp_session", "runner"] }, "model": { "type": "string" }, "started_at": { "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, "finished_at": { "anyOf": [{ "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, { "type": "null" }] }, "cost_usd": { "type": "string" }, "tool_call_count": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "denied_tool_call_count": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "held_tool_call_count": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "skill_activation_count": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 } }, "required": ["run_id", "agent_id", "agent_display_name", "status", "lane", "model", "started_at", "finished_at", "cost_usd", "tool_call_count", "denied_tool_call_count", "held_tool_call_count", "skill_activation_count"], "additionalProperties": false }, "is_live": { "type": "boolean" }, "redacted": { "type": "boolean" }, "current_state": { "type": "object", "properties": { "state": { "type": "string", "enum": ["not_started", "in_progress", "handed_off", "done", "failed"] }, "reasons": { "type": "array", "items": { "type": "string" } }, "claimed_state": { "anyOf": [{ "type": "string", "enum": ["not_started", "in_progress", "handed_off", "done", "failed"] }, { "type": "null" }] }, "claim_mismatch": { "type": "boolean" }, "last_activity_at": { "anyOf": [{ "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, { "type": "null" }] }, "last_durable_activity_at": { "anyOf": [{ "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, { "type": "null" }] } }, "required": ["state", "reasons", "claimed_state", "claim_mismatch", "last_activity_at", "last_durable_activity_at"], "additionalProperties": false }, "heartbeat": { "anyOf": [{ "type": "object", "properties": { "state": { "type": "string", "enum": ["working", "quiet_healthy", "recovered", "stalled"] }, "stalled": { "type": "boolean" }, "current_phase": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "last_progress_at": { "anyOf": [{ "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, { "type": "null" }] }, "expected_next_at": { "anyOf": [{ "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, { "type": "null" }] }, "stall_after_at": { "anyOf": [{ "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, { "type": "null" }] }, "lease_remaining_ms": { "anyOf": [{ "type": "number" }, { "type": "null" }] }, "reasons": { "type": "array", "items": { "type": "string" } } }, "required": ["state", "stalled", "current_phase", "last_progress_at", "expected_next_at", "stall_after_at", "lease_remaining_ms", "reasons"], "additionalProperties": false }, { "type": "null" }] }, "transcript": { "anyOf": [{ "type": "object", "properties": { "transcript_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "run_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] }, "lane": { "type": "string", "enum": ["cloud", "runner"] }, "format": { "type": "string", "enum": ["jsonl", "text"] }, "message_count": { "anyOf": [{ "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, { "type": "null" }] }, "truncated": { "type": "boolean" }, "char_count": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "data_classification": { "type": "string", "enum": ["customer_content", "operational", "sandbox_output"] }, "retention_class": { "type": "string", "enum": ["ephemeral_7d", "standard_90d", "durable_1y", "legal_hold"] }, "created_at": { "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, "updated_at": { "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, "transcript": { "type": "string" } }, "required": ["transcript_id", "seat_id", "run_id", "lane", "format", "message_count", "truncated", "char_count", "data_classification", "retention_class", "created_at", "updated_at", "transcript"], "additionalProperties": false }, { "type": "null" }] }, "tool_calls": { "type": "array", "items": { "type": "object", "properties": { "tool_call_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "run_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] }, "tool_name": { "type": "string" }, "guard_result": { "type": "string", "enum": ["allowed", "denied_manifest", "denied_budget", "escalated", "denied_tenant_policy"] }, "manifest_clause": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "outcome": { "type": "string" }, "started_at": { "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, "finished_at": { "anyOf": [{ "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, { "type": "null" }] } }, "required": ["tool_call_id", "run_id", "tool_name", "guard_result", "manifest_clause", "outcome", "started_at", "finished_at"], "additionalProperties": false } }, "fetched_at": { "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" } }, "required": ["seat_id", "run", "is_live", "redacted", "current_state", "heartbeat", "transcript", "tool_calls", "fetched_at"], "additionalProperties": false }, "help": "Watch one run live (read-only): run status, derived work-state, quiet-vs-stalled heartbeat, transcript, and the tool-call step feed.", "guide_slugs": ["mcp-and-cli-guide", "how-agents-work"], "stages": ["operating_rhythm"], "related_command_ids": [] },
       { "id": "aicos.brain_settings.get", "title": "Get AICOS brain settings", "description": "Read the AICOS run lane and brain selection. Returns labels and enum settings only; no secrets or vault refs.", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": {}, "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "aicos": { "type": "object", "properties": { "lane": { "type": "string", "enum": ["cloud", "runner", "mcp"] }, "cloud_brain": { "type": "string", "enum": ["managed", "byok"] }, "runner_brain": { "type": "string", "enum": ["claude-cli", "codex-cli"] }, "effective_brain": { "type": "string", "enum": ["managed", "byok", "claude-cli", "codex-cli", "mcp-client"] }, "label": { "type": "string", "minLength": 1, "maxLength": 80 }, "cloud_model_slug": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "cloud_options": { "type": "array", "items": { "type": "object", "properties": { "slug": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "provider": { "type": "string" }, "label": { "type": "string", "minLength": 1 }, "managed": { "type": "boolean" }, "zdr_available": { "type": "boolean" }, "selectable": { "type": "boolean" }, "disabled_reason": { "anyOf": [{ "type": "string", "minLength": 1 }, { "type": "null" }] }, "retention_disclosure": { "anyOf": [{ "type": "string", "minLength": 1 }, { "type": "null" }] }, "live_note": { "anyOf": [{ "type": "string", "minLength": 1 }, { "type": "null" }] } }, "required": ["slug", "provider", "label", "managed", "zdr_available", "selectable", "disabled_reason", "retention_disclosure", "live_note"], "additionalProperties": false } }, "non_zdr_unlocked": { "type": "boolean" } }, "required": ["lane", "cloud_brain", "runner_brain", "effective_brain", "label", "cloud_model_slug", "cloud_options", "non_zdr_unlocked"], "additionalProperties": false } }, "required": ["aicos"], "additionalProperties": false }, "help": "Read the AICOS lane and brain selection labels without returning provider keys, vault refs, or runner secrets.", "guide_slugs": ["aicos-chat-guide", "ai-model-data-handling-guide", "runner-guide", "settings-guide"], "stages": ["operating_rhythm"], "related_command_ids": ["agent.configure_tools", "agent.create_custom", "agent.go_live", "agent.run_dry_run", "agent.update_schedule", "aicos.brain_settings.update", "charter.backfill_stock_evidence", "charter.set", "charter.sign_manifest", "confirmation.approve", "graph.get", "integration.list", "integration.readiness", "integration.status", "integration.test", "mcp_token.create", "mcp_token.list", "mcp_token.revoke", "onboarding.create_invite", "onboarding.status", "runner.list", "seat.get", "settings.agent_policy.get", "settings.agent_policy.update", "settings.confirmation_policy.get", "settings.confirmation_policy.update", "settings.get", "settings.member_visibility.get", "settings.member_visibility.update", "settings.product_learning.get", "settings.product_learning.update", "settings.sync_brief_scope.get", "settings.sync_brief_scope.update", "settings.update", "skill.assign_to_seat", "tenant.model_gateway_policy.update", "tenant.rename"] },
-      { "id": "aicos.brain_settings.update", "title": "Update AICOS brain settings", "description": "Update the AICOS lane and cloud/runner brain preferences. Owner-only \u2014 an agent-class caller is always refused; have a human owner run this command. Audited.", "required_scope": "tenant", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": [], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "lane": { "type": "string", "enum": ["cloud", "runner", "mcp"] }, "cloud_brain": { "type": "string", "enum": ["managed", "byok"] }, "runner_brain": { "type": "string", "enum": ["claude-cli", "codex-cli"] }, "cloud_model_slug": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "receipt": { "type": "object", "properties": { "mutation_key": { "type": "string", "minLength": 16, "maxLength": 120 }, "authorizing_decision_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] }, "authorizing_receipt_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] }, "expected_configuration_version": { "type": "integer", "exclusiveMinimum": 0, "maximum": 2147483647 }, "expires_at": { "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" } }, "required": ["mutation_key", "expected_configuration_version", "expires_at"], "additionalProperties": false } }, "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "aicos": { "type": "object", "properties": { "lane": { "type": "string", "enum": ["cloud", "runner", "mcp"] }, "cloud_brain": { "type": "string", "enum": ["managed", "byok"] }, "runner_brain": { "type": "string", "enum": ["claude-cli", "codex-cli"] }, "effective_brain": { "type": "string", "enum": ["managed", "byok", "claude-cli", "codex-cli", "mcp-client"] }, "label": { "type": "string", "minLength": 1, "maxLength": 80 }, "cloud_model_slug": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "cloud_options": { "type": "array", "items": { "type": "object", "properties": { "slug": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "provider": { "type": "string" }, "label": { "type": "string", "minLength": 1 }, "managed": { "type": "boolean" }, "zdr_available": { "type": "boolean" }, "selectable": { "type": "boolean" }, "disabled_reason": { "anyOf": [{ "type": "string", "minLength": 1 }, { "type": "null" }] }, "retention_disclosure": { "anyOf": [{ "type": "string", "minLength": 1 }, { "type": "null" }] }, "live_note": { "anyOf": [{ "type": "string", "minLength": 1 }, { "type": "null" }] } }, "required": ["slug", "provider", "label", "managed", "zdr_available", "selectable", "disabled_reason", "retention_disclosure", "live_note"], "additionalProperties": false } }, "non_zdr_unlocked": { "type": "boolean" } }, "required": ["lane", "cloud_brain", "runner_brain", "effective_brain", "label", "cloud_model_slug", "cloud_options", "non_zdr_unlocked"], "additionalProperties": false } }, "required": ["aicos"], "additionalProperties": false }, "help": "Update AICOS cloud managed/BYOK and runner Claude/Codex preferences. Owner-only: an agent caller is always refused. BYOK requires an active tenant Anthropic key.", "guide_slugs": ["aicos-chat-guide", "ai-model-data-handling-guide", "runner-guide", "settings-guide", "security-model-guide"], "stages": ["operating_rhythm"], "related_command_ids": ["agent.configure_tools", "agent.create_custom", "agent.go_live", "agent.run_dry_run", "agent.update_schedule", "aicos.brain_settings.get", "charter.backfill_stock_evidence", "charter.set", "charter.sign_manifest", "confirmation.approve", "graph.get", "integration.list", "integration.readiness", "integration.status", "integration.test", "mcp_token.create", "mcp_token.list", "mcp_token.revoke", "onboarding.create_invite", "onboarding.status", "runner.list", "seat.get", "settings.agent_policy.get", "settings.agent_policy.update", "settings.confirmation_policy.get", "settings.confirmation_policy.update", "settings.get", "settings.member_visibility.get", "settings.member_visibility.update", "settings.product_learning.get", "settings.product_learning.update", "settings.sync_brief_scope.get", "settings.sync_brief_scope.update", "settings.update", "skill.assign_to_seat", "tenant.model_gateway_policy.update", "tenant.rename"] },
+      { "id": "aicos.brain_settings.update", "title": "Update AICOS brain settings", "description": "Update the AICOS lane and cloud/runner brain preferences. Owner-only for a human caller. An agent-class caller may change only lane and runner brain, and only by presenting a live, unconsumed activation receipt naming this command and that exact lane/runner-brain projection \u2014 cloud brain and managed-model fields are always refused for an agent-class call. Audited.", "required_scope": "tenant", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": [], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "lane": { "type": "string", "enum": ["cloud", "runner", "mcp"] }, "cloud_brain": { "type": "string", "enum": ["managed", "byok"] }, "runner_brain": { "type": "string", "enum": ["claude-cli", "codex-cli"] }, "cloud_model_slug": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "receipt": { "type": "object", "properties": { "mutation_key": { "type": "string", "minLength": 16, "maxLength": 120 }, "authorizing_decision_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] }, "authorizing_receipt_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] }, "expected_configuration_version": { "type": "integer", "exclusiveMinimum": 0, "maximum": 2147483647 }, "expires_at": { "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" } }, "required": ["mutation_key", "expected_configuration_version", "expires_at"], "additionalProperties": false } }, "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "aicos": { "type": "object", "properties": { "lane": { "type": "string", "enum": ["cloud", "runner", "mcp"] }, "cloud_brain": { "type": "string", "enum": ["managed", "byok"] }, "runner_brain": { "type": "string", "enum": ["claude-cli", "codex-cli"] }, "effective_brain": { "type": "string", "enum": ["managed", "byok", "claude-cli", "codex-cli", "mcp-client"] }, "label": { "type": "string", "minLength": 1, "maxLength": 80 }, "cloud_model_slug": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "cloud_options": { "type": "array", "items": { "type": "object", "properties": { "slug": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "provider": { "type": "string" }, "label": { "type": "string", "minLength": 1 }, "managed": { "type": "boolean" }, "zdr_available": { "type": "boolean" }, "selectable": { "type": "boolean" }, "disabled_reason": { "anyOf": [{ "type": "string", "minLength": 1 }, { "type": "null" }] }, "retention_disclosure": { "anyOf": [{ "type": "string", "minLength": 1 }, { "type": "null" }] }, "live_note": { "anyOf": [{ "type": "string", "minLength": 1 }, { "type": "null" }] } }, "required": ["slug", "provider", "label", "managed", "zdr_available", "selectable", "disabled_reason", "retention_disclosure", "live_note"], "additionalProperties": false } }, "non_zdr_unlocked": { "type": "boolean" } }, "required": ["lane", "cloud_brain", "runner_brain", "effective_brain", "label", "cloud_model_slug", "cloud_options", "non_zdr_unlocked"], "additionalProperties": false } }, "required": ["aicos"], "additionalProperties": false }, "help": "Update AICOS cloud managed/BYOK and runner Claude/Codex preferences. Agents hold no ambient authority: an agent-class call must present one valid, unconsumed, operation-bound single-use activation receipt, and may change only the lane and runner brain that receipt authorizes; cloud brain and managed-model fields stay owner-only. BYOK requires an active tenant Anthropic key.", "guide_slugs": ["aicos-chat-guide", "ai-model-data-handling-guide", "runner-guide", "settings-guide", "security-model-guide"], "stages": ["operating_rhythm"], "related_command_ids": ["agent.configure_tools", "agent.create_custom", "agent.go_live", "agent.run_dry_run", "agent.update_schedule", "aicos.brain_settings.get", "charter.backfill_stock_evidence", "charter.set", "charter.sign_manifest", "confirmation.approve", "graph.get", "integration.list", "integration.readiness", "integration.status", "integration.test", "mcp_token.create", "mcp_token.list", "mcp_token.revoke", "onboarding.create_invite", "onboarding.status", "runner.list", "seat.get", "settings.agent_policy.get", "settings.agent_policy.update", "settings.confirmation_policy.get", "settings.confirmation_policy.update", "settings.get", "settings.member_visibility.get", "settings.member_visibility.update", "settings.product_learning.get", "settings.product_learning.update", "settings.sync_brief_scope.get", "settings.sync_brief_scope.update", "settings.update", "skill.assign_to_seat", "tenant.model_gateway_policy.update", "tenant.rename"] },
       { "id": "cascade.import", "title": "Import Rocks from a ninety Rocks export", "description": "Bulk-import a ninety Rocks export into the Cascade as cycle goals under a company objective in the active cycle. Owners are seat names resolved to seats. Requires an active cycle and a target company objective (auto-selected when exactly one exists, else pass parent_objective_id). Idempotent \u2014 re-importing the same export is a no-op, and an existing cycle goal with the same objective + seat + title is skipped.", "required_scope": "tenant_admin", "confirmation": "none", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "dry_run": { "default": false, "type": "boolean" }, "parent_objective_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "rocks": { "minItems": 1, "maxItems": 1e3, "type": "array", "items": { "type": "object", "properties": { "owner": { "type": "string", "minLength": 1, "maxLength": 200 }, "title": { "type": "string", "minLength": 1, "maxLength": 200 }, "definition_of_done": { "type": "string", "minLength": 1, "maxLength": 2e3 } }, "required": ["owner", "title", "definition_of_done"], "additionalProperties": false } } }, "required": ["rocks"], "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "dry_run": { "type": "boolean" }, "rocks_created": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "rocks_matched": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "rocks_skipped": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "objective_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] }, "batch_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] }, "skipped": { "maxItems": 200, "type": "array", "items": { "type": "object", "properties": { "owner": { "type": "string" }, "title": { "type": "string" }, "reason": { "type": "string" } }, "required": ["reason"], "additionalProperties": false } } }, "required": ["dry_run", "rocks_created", "rocks_matched", "rocks_skipped", "objective_id", "batch_id", "skipped"], "additionalProperties": false }, "help": "Import a ninety Rocks export into the Cascade as cycle goals under a company objective in the active cycle; owners resolve to seats.", "guide_slugs": ["migration-and-legal-notes"], "stages": ["operating_rhythm"], "related_command_ids": ["agent.go_live", "agent.run_dry_run", "cascade.import_okrs", "charter.approve", "charter.draft", "charter.draft_all", "charter.sign_manifest", "charter.update_draft", "compass.answer_gap", "compass.approve_version", "compass.draft", "compass.get_current", "compass.import", "compass.list_gaps", "compass.reject_draft", "compass.set", "compass.update_draft", "confirmation.activation_set.list", "confirmation.approve", "credential.ingress", "friction.file_issue", "friction.import", "friction.list", "friction.resolve", "onboarding.activate", "onboarding.advance_step", "onboarding.attach_reference", "onboarding.create_invite", "onboarding.finish", "onboarding.rehearse", "onboarding.setup", "onboarding.source_ingest", "onboarding.status", "onboarding.upload_context", "runner_setup.cancel", "runner_setup.resume", "runner_setup.start", "runner_setup.status", "seat.create", "seat.set_type", "signal.bind", "signal.confirm_reading", "signal.draft_first_readings", "signal.import", "signal.report", "staffing.assign_agent_dry_run", "staffing.assign_user", "sync.brief.compile", "sync.brief.get", "sync.item.assign", "sync.run.complete", "sync.run.start", "task.import"] },
       { "id": "cascade.import_okrs", "title": "Import objectives and key results from a generic OKR CSV", "description": "Bulk-import a generic OKR export (objectives + key results) into the Cascade. Company objectives become company_objective goals; seat objectives become seat goals under the resolved company objective; metric key results become measurables bound informs to their objective; milestone key results become milestone goals under a seat objective. Owners are seat names resolved to seats; requires an active cycle. Idempotent \u2014 re-importing the same file is a no-op; existing goals/measurables/bindings are matched, never duplicated.", "required_scope": "tenant_admin", "confirmation": "none", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "dry_run": { "default": false, "type": "boolean" }, "parent_objective_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "objectives": { "minItems": 1, "maxItems": 200, "type": "array", "items": { "type": "object", "properties": { "title": { "type": "string", "minLength": 1, "maxLength": 200 }, "level": { "type": "string", "enum": ["company", "seat"] }, "owner": { "type": "string", "minLength": 1, "maxLength": 200 }, "cycle_label": { "anyOf": [{ "type": "string", "minLength": 1, "maxLength": 200 }, { "type": "null" }] }, "key_results": { "minItems": 1, "maxItems": 50, "type": "array", "items": { "oneOf": [{ "type": "object", "properties": { "type": { "type": "string", "const": "metric" }, "target": { "type": "number" }, "title": { "type": "string", "minLength": 1, "maxLength": 200 }, "unit": { "type": "string", "maxLength": 50 }, "direction": { "type": "string", "enum": ["up_good", "down_good"] }, "start_value": { "anyOf": [{ "type": "number" }, { "type": "null" }] }, "cadence": { "type": "string", "enum": ["daily", "weekly", "monthly", "quarterly", "annual"] } }, "required": ["type", "target", "title", "unit", "direction", "start_value", "cadence"], "additionalProperties": false }, { "type": "object", "properties": { "type": { "type": "string", "const": "milestone" }, "target": { "anyOf": [{ "type": "number" }, { "type": "null" }] }, "title": { "type": "string", "minLength": 1, "maxLength": 200 }, "unit": { "type": "string", "maxLength": 50 }, "direction": { "type": "string", "enum": ["up_good", "down_good"] }, "start_value": { "anyOf": [{ "type": "number" }, { "type": "null" }] }, "cadence": { "type": "string", "enum": ["daily", "weekly", "monthly", "quarterly", "annual"] } }, "required": ["type", "target", "title", "unit", "direction", "start_value", "cadence"], "additionalProperties": false }] } } }, "required": ["title", "level", "owner", "cycle_label", "key_results"], "additionalProperties": false } } }, "required": ["objectives"], "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "dry_run": { "type": "boolean" }, "objectives_created": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "objectives_matched": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "measurables_created": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "measurables_matched": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "bindings_created": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "milestones_created": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "milestones_matched": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "skipped_count": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "company_objective_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] }, "batch_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] }, "skipped": { "maxItems": 200, "type": "array", "items": { "type": "object", "properties": { "owner": { "type": "string" }, "title": { "type": "string" }, "reason": { "type": "string" } }, "required": ["reason"], "additionalProperties": false } } }, "required": ["dry_run", "objectives_created", "objectives_matched", "measurables_created", "measurables_matched", "bindings_created", "milestones_created", "milestones_matched", "skipped_count", "company_objective_id", "batch_id", "skipped"], "additionalProperties": false }, "help": "Import a generic OKR CSV (objectives + key results) into the Cascade; objectives become goals, metric KRs become measurables bound informs, milestone KRs become milestone goals; owners resolve to seats.", "guide_slugs": ["migration-and-legal-notes"], "stages": ["operating_rhythm"], "related_command_ids": ["cascade.import", "charter.draft", "compass.draft", "compass.import", "friction.import", "onboarding.upload_context", "seat.create", "signal.import", "task.import"] },
       { "id": "charter.apply_seat_type_recommendation", "title": "Apply Charter seat-type recommendation", "description": "Apply the seat-type recommendation from a draft Charter.", "required_scope": "seat", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": [], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "charter_version_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" } }, "required": ["charter_version_id"], "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "charter_version_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "edit_revision": { "type": "integer", "minimum": 1, "maximum": 9007199254740991 } }, "required": ["charter_version_id", "seat_id"], "additionalProperties": false }, "help": "Apply seat-type recommendations only after the Charter clarifies work shape, risk, and Steward accountability.", "guide_slugs": ["agent-staffing-playbook", "charter-design-playbook", "how-agents-work"], "stages": ["charter_design", "staffing"], "related_command_ids": ["charter.approve", "charter.draft", "charter.draft_all", "charter.get", "charter.list", "charter.preview_signal_reconciliation", "charter.reconcile_signals", "charter.sign_manifest", "charter.skip", "charter.update_draft", "confirmation.approve"] },
@@ -29029,9 +29029,303 @@ var storedConfirmationPolicySchema = external_exports.object({
   cli_mode: cliConfirmationModeSchema
 }).strict();
 
-// ../../packages/protocol/src/runner-settings.ts
+// ../../packages/protocol/src/runner-setup.ts
 var uuid3 = external_exports.string().uuid();
 var isoDateTime = external_exports.string().datetime({ offset: true });
+var sha256Hex = external_exports.string().regex(/^[0-9a-f]{64}$/, "expected a lowercase sha-256 hex digest");
+var runnerSetupRuntimeSchema = external_exports.enum(["claude", "codex"]);
+var runnerSetupSelectedRuntimesSchema = external_exports.array(runnerSetupRuntimeSchema).min(1).max(2).refine(
+  (runtimes) => new Set(runtimes).size === runtimes.length,
+  "selected runtimes must be distinct"
+);
+var runnerSetupStageSchema = external_exports.enum([
+  "pairing",
+  "provider_consent",
+  "service_install",
+  "runtime_validation",
+  "heartbeat_wait",
+  "ready"
+]);
+var runnerSetupStatusSchema = external_exports.enum([
+  "active",
+  "action_required",
+  "blocked",
+  "ready",
+  "cancelled",
+  "expired"
+]);
+var RUNNER_SETUP_TERMINAL_STATUSES = ["ready", "cancelled", "expired"];
+function isRunnerSetupTerminalStatus(status) {
+  return RUNNER_SETUP_TERMINAL_STATUSES.includes(status);
+}
+var runnerSetupBlockerCodeSchema = external_exports.enum([
+  "unsupported_platform",
+  "unsupported_service_manager",
+  "provider_version_unsupported",
+  "provider_consent_failed",
+  "pairing_expired",
+  "validation_failed",
+  "heartbeat_timeout",
+  "service_key_revoked",
+  "runner_revoked"
+]);
+var runnerSetupActionKindSchema = external_exports.enum([
+  "device_pairing_approval",
+  "provider_consent",
+  // R7: unsupported service managers get a typed manual-service action and must
+  // not claim full background readiness.
+  "manual_service_install"
+]);
+var runnerSetupActionRequiredSchema = external_exports.object({
+  kind: runnerSetupActionKindSchema,
+  // Which selected runtime the action targets (provider consent); null for
+  // runtime-neutral actions such as device pairing approval.
+  runtime: runnerSetupRuntimeSchema.nullable(),
+  // Server-generated allowlisted destination (e.g. the runner setup page).
+  // Null when the action is completed locally on the machine.
+  url: external_exports.string().max(600).nullable(),
+  // Present only when the responding surface freshly minted/holds the raw code
+  // (web setup page, local CLI ceremony). The server stores only hashes, so
+  // remote command responses carry null here.
+  user_code: external_exports.string().max(40).nullable(),
+  expires_at: isoDateTime.nullable()
+}).strict();
+var runnerSetupCheckpointWriterSchema = external_exports.enum(["server", "runner", "owner"]);
+var runnerSetupCheckpointSchema = external_exports.object({
+  stage: runnerSetupStageSchema,
+  key: external_exports.string().min(1).max(120),
+  writer: runnerSetupCheckpointWriterSchema,
+  // Runner-published checkpoints carry the caller's request digest so a replay
+  // (same key + same digest) returns the stored checkpoint and a conflicting
+  // rewrite (same key + different digest) is rejected. Server/owner-written
+  // checkpoints carry null.
+  request_digest: sha256Hex.nullable(),
+  completed_at: isoDateTime
+}).strict();
+var runnerSetupCheckpointPayloadSchema = external_exports.object({
+  service_manager: external_exports.enum(["launchd", "manual"]).optional(),
+  service_installed: external_exports.boolean().optional(),
+  service_state_file_present: external_exports.boolean().optional(),
+  cell_generation: external_exports.number().int().nonnegative().optional(),
+  provider_cli_version: external_exports.string().max(40).regex(/^[0-9A-Za-z.+-]+$/).optional(),
+  blocker_code: runnerSetupBlockerCodeSchema.optional()
+}).strict();
+var runnerSetupCheckpointPublishSchema = external_exports.object({
+  setup_id: uuid3,
+  stage: runnerSetupStageSchema,
+  checkpoint_key: external_exports.string().min(1).max(120),
+  request_digest: sha256Hex,
+  payload: runnerSetupCheckpointPayloadSchema
+}).strict();
+var runnerValidationReceiptSchema = external_exports.object({
+  version: external_exports.number().int().positive(),
+  runner_id: uuid3,
+  runtime: runnerSetupRuntimeSchema,
+  credential_cell_generation: external_exports.number().int().nonnegative(),
+  provider_cli_version: external_exports.string().max(40),
+  rost_cli_version: external_exports.string().max(40),
+  sandbox_policy_version: external_exports.string().max(40),
+  mcp_config_digest: sha256Hex,
+  service_key_generation: external_exports.number().int().nonnegative(),
+  probe_capability_version: external_exports.number().int().positive(),
+  issued_at: isoDateTime,
+  expires_at: isoDateTime
+}).strict();
+var runnerSetupValidationChallengeSchema = external_exports.object({
+  setup_id: uuid3,
+  runtime: runnerSetupRuntimeSchema,
+  nonce: external_exports.string().min(16).max(120),
+  expires_at: isoDateTime
+}).strict();
+var runnerSetupValidationResultSchema = external_exports.object({
+  setup_id: uuid3,
+  runtime: runnerSetupRuntimeSchema,
+  // sha-256 of the nonce-derived probe answer — never raw provider output.
+  nonce_proof: sha256Hex,
+  service_key_generation: external_exports.number().int().nonnegative()
+}).strict();
+var RUNNER_SETUP_ATTEMPT_WINDOW_MS = 10 * 60 * 1e3;
+var runnerSetupValidationJobStatusSchema = external_exports.enum([
+  "issued",
+  "claimed",
+  "completed",
+  "failed",
+  "expired"
+]);
+var runnerSetupValidationAttemptKindSchema = external_exports.enum([
+  "runtime_probe",
+  "aicos_acceptance"
+]);
+var runnerSetupValidationAttemptStatusSchema = external_exports.enum([
+  "started",
+  "succeeded",
+  "failed"
+]);
+var runnerSetupValidationAttemptResultSchema = external_exports.object({
+  runner_id: uuid3,
+  runtime: runnerSetupRuntimeSchema,
+  model: external_exports.string().max(120).regex(/^[0-9A-Za-z _./:+-]+$/).nullable(),
+  provider_cli_version: external_exports.string().max(40).regex(/^[0-9A-Za-z.+-]+$/).nullable(),
+  observed_at: isoDateTime
+}).strict();
+var RUNNER_SETUP_VALIDATION_JOB_TERMINAL_STATUSES = [
+  "completed",
+  "failed",
+  "expired"
+];
+var runnerSetupValidationJobSchema = external_exports.object({
+  job_id: uuid3,
+  setup_id: uuid3,
+  runtime: runnerSetupRuntimeSchema,
+  status: runnerSetupValidationJobStatusSchema,
+  // Stamped at issue from the session's bound key; DER-3357's attempt path
+  // compares it against the live generation (rotation-stale refusal).
+  service_key_generation: external_exports.number().int().nonnegative(),
+  expires_at: isoDateTime,
+  claimed_at: isoDateTime.nullable(),
+  completed_at: isoDateTime.nullable(),
+  created_at: isoDateTime,
+  updated_at: isoDateTime
+}).strict().refine(
+  (job) => RUNNER_SETUP_VALIDATION_JOB_TERMINAL_STATUSES.includes(job.status) === (job.completed_at !== null),
+  "terminal status must correlate with completed_at"
+).refine(
+  (job) => job.claimed_at === null || job.status !== "issued",
+  "claimed_at requires a non-issued status"
+).refine(
+  (job) => {
+    const created = new Date(job.created_at).getTime();
+    const expires = new Date(job.expires_at).getTime();
+    return expires > created && expires <= created + 24 * 60 * 60 * 1e3;
+  },
+  "expires_at must be after created_at and within 24 hours"
+);
+var runnerSetupValidationAttemptSchema = external_exports.object({
+  attempt_id: uuid3,
+  job_id: uuid3,
+  setup_id: uuid3,
+  kind: runnerSetupValidationAttemptKindSchema,
+  status: runnerSetupValidationAttemptStatusSchema,
+  result: runnerSetupValidationAttemptResultSchema.nullable(),
+  decision_id: uuid3.nullable(),
+  activation_receipt_id: uuid3.nullable(),
+  started_at: isoDateTime,
+  completed_at: isoDateTime.nullable(),
+  created_at: isoDateTime,
+  updated_at: isoDateTime
+}).strict().refine(
+  (attempt) => attempt.status === "started" === (attempt.completed_at === null),
+  "started status must correlate with null completed_at"
+).refine(
+  (attempt) => attempt.kind === "aicos_acceptance" === (attempt.decision_id !== null),
+  "aicos_acceptance must be attributed to a decision"
+).refine(
+  (attempt) => attempt.kind === "aicos_acceptance" === (attempt.activation_receipt_id !== null),
+  "aicos_acceptance must be attributed to an activation receipt"
+);
+var runnerSetupValidationClaimRequestSchema = external_exports.object({
+  setup_id: uuid3,
+  runtime: runnerSetupRuntimeSchema
+}).strict();
+var runnerSetupValidationClaimResponseSchema = external_exports.object({
+  job_id: uuid3,
+  challenge: runnerSetupValidationChallengeSchema,
+  probe_capability_version: external_exports.number().int().positive(),
+  allowed_command_ids: external_exports.array(external_exports.string().min(1).max(120)).min(1).max(20)
+}).strict();
+var runnerSetupValidationReportRequestSchema = external_exports.object({
+  job_id: uuid3,
+  // The raw nonce travels back so the server can recompute the proof and
+  // verify the round trip; the server itself only ever stored its sha-256.
+  nonce: external_exports.string().min(16).max(120),
+  result: runnerSetupValidationResultSchema,
+  attempt: runnerSetupValidationAttemptResultSchema,
+  // At least one id: the probe cannot have produced a result without invoking
+  // the setup projection it is built on, and an EMPTY array made the result
+  // route's `.some(...)` bound vacuously true — reporting nothing was the way
+  // past the check (DER-3336).
+  invoked_command_ids: external_exports.array(external_exports.string().min(1).max(120)).min(1).max(20),
+  // DER-3336: machine FACTS about the runner's own environment — never a
+  // VERDICT. `runnerValidationReceiptSchema` binds a receipt to these five
+  // fields (and key rotation invalidates that binding), so the reporting
+  // service must supply them for the server to mint a correct receipt. The
+  // distinction that makes this safe: the runner may assert FACTS about
+  // itself (what CLI/sandbox/MCP-config version it is running), which the
+  // receipt BINDS and which rotation can invalidate — but there is still no
+  // field anywhere in this request by which the runner asserts pass/fail.
+  // The server alone derives that verdict (see the CRITICAL comment above).
+  receipt_facts: runnerValidationReceiptSchema.pick({
+    credential_cell_generation: true,
+    provider_cli_version: true,
+    rost_cli_version: true,
+    sandbox_policy_version: true,
+    mcp_config_digest: true
+  })
+}).strict();
+var runnerSetupValidationReportResponseSchema = external_exports.object({
+  job_id: uuid3,
+  attempt_id: uuid3,
+  verdict: external_exports.enum(["passed", "failed"]),
+  receipt: runnerValidationReceiptSchema.nullable(),
+  reason: external_exports.string().max(200).nullable()
+}).strict();
+var runnerRuntimeAuthStateSchema = external_exports.enum(["ready", "missing", "stale", "unknown"]);
+var runnerRuntimeSandboxStateSchema = external_exports.enum(["passed", "failed", "unknown"]);
+var runnerRuntimeValidationStateSchema = external_exports.enum([
+  "current",
+  "missing",
+  "stale",
+  "failed",
+  "mismatch"
+]);
+var runnerRuntimeReadinessSchema = external_exports.object({
+  runtime: runnerSetupRuntimeSchema,
+  installed: external_exports.boolean(),
+  cli_version: external_exports.string().max(40).nullable(),
+  auth_state: runnerRuntimeAuthStateSchema,
+  // The truthful cell-probe contract version (DER-3022 shape). Null when the
+  // runner never advertised one — which is NOT ready.
+  auth_contract_version: external_exports.number().int().positive().nullable(),
+  sandbox_state: runnerRuntimeSandboxStateSchema,
+  validation_state: runnerRuntimeValidationStateSchema,
+  validation_receipt: runnerValidationReceiptSchema.nullable()
+}).strict();
+var runnerSetupSessionSchema = external_exports.object({
+  setup_id: uuid3,
+  stage: runnerSetupStageSchema,
+  status: runnerSetupStatusSchema,
+  selected_runtimes: runnerSetupSelectedRuntimesSchema,
+  runner_id: uuid3.nullable(),
+  blocker_code: runnerSetupBlockerCodeSchema.nullable(),
+  action_required: runnerSetupActionRequiredSchema.nullable(),
+  checkpoints: external_exports.array(runnerSetupCheckpointSchema),
+  // One readiness entry per SELECTED runtime once observations exist; empty
+  // until the first server-observed heartbeat/validation reaches the session.
+  runtime_readiness: external_exports.array(runnerRuntimeReadinessSchema),
+  service_key_generation: external_exports.number().int().nonnegative(),
+  service_key_bound: external_exports.boolean(),
+  service_key_revoked: external_exports.boolean(),
+  expires_at: isoDateTime,
+  terminal_at: isoDateTime.nullable(),
+  created_at: isoDateTime,
+  updated_at: isoDateTime
+}).strict();
+var runnerSetupStartInputSchema = external_exports.object({
+  selected_runtimes: runnerSetupSelectedRuntimesSchema
+}).strict();
+var runnerSetupStatusInputSchema = external_exports.object({
+  setup_id: uuid3
+}).strict();
+var runnerSetupResumeInputSchema = external_exports.object({
+  setup_id: uuid3
+}).strict();
+var runnerSetupCancelInputSchema = external_exports.object({
+  setup_id: uuid3
+}).strict();
+
+// ../../packages/protocol/src/runner-settings.ts
+var uuid5 = external_exports.string().uuid();
+var isoDateTime2 = external_exports.string().datetime({ offset: true });
 var runnerHealthSchema = external_exports.enum(["online", "stale", "offline", "revoked", "unpaired"]);
 var runnerExecutionStateSchema = external_exports.enum([
   "ready",
@@ -29057,8 +29351,8 @@ var runnerExecutionReadinessSchema = external_exports.object({
   due_queued_work_orders: external_exports.number().int().nonnegative(),
   claimed_work_orders: external_exports.number().int().nonnegative(),
   running_work_orders: external_exports.number().int().nonnegative(),
-  recent_completed_at: isoDateTime.nullable(),
-  recent_failed_at: isoDateTime.nullable()
+  recent_completed_at: isoDateTime2.nullable(),
+  recent_failed_at: isoDateTime2.nullable()
 }).strict();
 var runnerClaimabilityCheckSchema = external_exports.object({
   key: external_exports.string(),
@@ -29101,12 +29395,12 @@ var runnerCapacitySchema = external_exports.object({
   raw_state: external_exports.string().nullable(),
   // Null until the harness gains rate-limit error classification (out of scope for DER-1588);
   // surfaced now so a fleet reader picks it up automatically once it starts being set.
-  rate_limited_until: isoDateTime.nullable(),
+  rate_limited_until: isoDateTime2.nullable(),
   has_observation: external_exports.boolean(),
   freshness: external_exports.enum(["fresh", "stale"])
 }).strict();
 var runnerSummarySchema = external_exports.object({
-  id: uuid3,
+  id: uuid5,
   name: external_exports.string(),
   platform: external_exports.string(),
   health: runnerHealthSchema,
@@ -29115,10 +29409,10 @@ var runnerSummarySchema = external_exports.object({
   posture: runnerPostureSchema,
   execution: runnerExecutionReadinessSchema,
   capacity: runnerCapacitySchema,
-  paired_at: isoDateTime.nullable(),
-  last_heartbeat_at: isoDateTime.nullable(),
-  revoked_at: isoDateTime.nullable(),
-  created_at: isoDateTime
+  paired_at: isoDateTime2.nullable(),
+  last_heartbeat_at: isoDateTime2.nullable(),
+  revoked_at: isoDateTime2.nullable(),
+  created_at: isoDateTime2
 }).strict();
 var runnerListInputSchema = external_exports.object({
   include_revoked: external_exports.boolean().optional()
@@ -29127,24 +29421,24 @@ var runnerListOutputSchema = external_exports.object({
   runners: external_exports.array(runnerSummarySchema)
 }).strict();
 var runnerStatusInputSchema = external_exports.object({
-  runner_id: uuid3
+  runner_id: uuid5
 }).strict();
 var runnerPairingStartInputSchema = external_exports.object({
   name: external_exports.string().min(1).max(120),
   platform: external_exports.string().min(1).max(120)
 }).strict();
 var runnerPairingStartOutputSchema = external_exports.object({
-  pairing_session_id: uuid3,
+  pairing_session_id: uuid5,
   user_code: external_exports.string(),
   verification_uri: external_exports.string(),
-  expires_at: isoDateTime,
+  expires_at: isoDateTime2,
   expires_in: external_exports.number().int().nonnegative()
 }).strict();
 var runnerRevokeInputSchema = external_exports.object({
-  runner_id: uuid3
+  runner_id: uuid5
 }).strict();
 var runnerRevokeOutputSchema = external_exports.object({
-  runner_id: uuid3,
+  runner_id: uuid5,
   revoked: external_exports.boolean()
 }).strict();
 var workOrderStatusSchema = external_exports.enum(["queued", "claimed", "running", "done", "failed", "expired"]);
@@ -29155,16 +29449,16 @@ var agentExecutionModeSchema = external_exports.enum([
 ]);
 var workOrderExecutionModeSchema = agentExecutionModeSchema.exclude(["rehearsal"]);
 var workOrderSummaryBaseSchema = external_exports.object({
-  id: uuid3,
-  agent_id: uuid3,
-  task_id: uuid3.nullable(),
+  id: uuid5,
+  agent_id: uuid5,
+  task_id: uuid5.nullable(),
   execution_mode: workOrderExecutionModeSchema.nullable(),
   lane: external_exports.enum(["cloud", "runner"]),
   status: workOrderStatusSchema,
-  claimed_by_runner_id: uuid3.nullable(),
-  scheduled_for: isoDateTime,
-  grace_deadline: isoDateTime,
-  created_at: isoDateTime
+  claimed_by_runner_id: uuid5.nullable(),
+  scheduled_for: isoDateTime2,
+  grace_deadline: isoDateTime2,
+  created_at: isoDateTime2
 });
 var workOrderSummarySchema = external_exports.union([
   workOrderSummaryBaseSchema.extend({
@@ -29173,43 +29467,43 @@ var workOrderSummarySchema = external_exports.union([
     schedule_local_occurrence: external_exports.null()
   }).strict(),
   workOrderSummaryBaseSchema.extend({
-    schedule_id: uuid3,
+    schedule_id: uuid5,
     schedule_revision: external_exports.number().int().positive(),
     schedule_local_occurrence: external_exports.string().min(1).max(80)
   }).strict()
 ]);
 var workOrderListInputSchema = external_exports.object({
   status: workOrderStatusSchema.optional(),
-  agent_id: uuid3.optional(),
-  runner_id: uuid3.optional(),
+  agent_id: uuid5.optional(),
+  runner_id: uuid5.optional(),
   limit: external_exports.number().int().min(1).max(200).optional()
 }).strict();
 var workOrderListOutputSchema = external_exports.object({
   work_orders: external_exports.array(workOrderSummarySchema)
 }).strict();
 var workOrderEnqueueInputSchema = external_exports.object({
-  agent_id: uuid3,
-  scheduled_for: isoDateTime.optional(),
+  agent_id: uuid5,
+  scheduled_for: isoDateTime2.optional(),
   // DER-1973: cloud-lane only. A runner-lane agent rejects a task_id at enqueue —
   // a task-linked runner order is structurally unclaimable (the runner-claim SQL
   // requires task_id is null). Run task-linked runner work as an interactive agent turn.
-  task_id: uuid3.optional()
+  task_id: uuid5.optional()
 }).strict();
 var agentRunNowInputSchema = external_exports.object({
-  seat_id: uuid3,
+  seat_id: uuid5,
   // DER-1973: cloud-lane only. A runner-lane agent rejects a task_id at enqueue
   // (structurally unclaimable). Run task-linked runner work as an interactive agent turn.
-  task_id: uuid3.optional()
+  task_id: uuid5.optional()
 }).strict();
 var agentRunNowOutputSchema = external_exports.object({
   execution_mode: external_exports.literal("production_manual"),
   work_order: workOrderSummarySchema
 }).strict();
 var workOrderCancelInputSchema = external_exports.object({
-  work_order_id: uuid3
+  work_order_id: uuid5
 }).strict();
 var workOrderCancelOutputSchema = external_exports.object({
-  work_order_id: uuid3,
+  work_order_id: uuid5,
   status: workOrderStatusSchema
 }).strict();
 var runnerCapabilityDetailSchema = external_exports.object({
@@ -29217,13 +29511,13 @@ var runnerCapabilityDetailSchema = external_exports.object({
   codex: external_exports.boolean()
 }).strict();
 var runnerDiagnoseOutputSchema = external_exports.object({
-  id: uuid3,
+  id: uuid5,
   name: external_exports.string(),
   platform: external_exports.string(),
   health: runnerHealthSchema,
   capabilities: runnerCapabilityDetailSchema,
-  last_heartbeat_at: isoDateTime.nullable(),
-  paired_at: isoDateTime.nullable(),
+  last_heartbeat_at: isoDateTime2.nullable(),
+  paired_at: isoDateTime2.nullable(),
   revocation_state: external_exports.enum(["active", "revoked", "unpaired"]),
   claimability: runnerClaimabilityExplainSchema,
   repair_guidance: external_exports.array(external_exports.object({
@@ -29233,7 +29527,7 @@ var runnerDiagnoseOutputSchema = external_exports.object({
   }).strict())
 }).strict();
 var runnerDiagnoseInputSchema = external_exports.object({
-  runner_id: uuid3
+  runner_id: uuid5
 }).strict();
 var runnerRepairActionSchema = external_exports.object({
   action: external_exports.string(),
@@ -29241,14 +29535,14 @@ var runnerRepairActionSchema = external_exports.object({
   detail: external_exports.string()
 }).strict();
 var runnerRepairOutputSchema = external_exports.object({
-  runner_id: uuid3,
+  runner_id: uuid5,
   runner_name: external_exports.string(),
   runner_health: runnerHealthSchema,
   repair_steps: external_exports.array(runnerRepairActionSchema),
   requires_human: external_exports.boolean()
 }).strict();
 var runnerRepairInputSchema = external_exports.object({
-  runner_id: uuid3,
+  runner_id: uuid5,
   issue: external_exports.enum(["restart", "re_pair", "revoke_stale", "missing_cli_runtime"]).optional()
 }).strict();
 var notificationChannelSchema = external_exports.enum(["slack", "email", "in_app"]);
@@ -29268,24 +29562,24 @@ var notificationSettingsUpdateInputSchema = external_exports.object({
 );
 var notificationTestInputSchema = external_exports.object({}).strict();
 var notificationTestOutputSchema = external_exports.object({
-  notification_id: uuid3,
+  notification_id: uuid5,
   delivered: external_exports.boolean()
 }).strict();
 var notificationListErrorsInputSchema = external_exports.object({
   limit: external_exports.number().int().min(1).max(100).optional()
 }).strict();
 var notificationErrorSummarySchema = external_exports.object({
-  id: uuid3,
+  id: uuid5,
   kind: external_exports.string(),
   channel: external_exports.string(),
   status: external_exports.string(),
   provider: external_exports.string(),
   error_message: external_exports.string().nullable(),
-  error_log_id: uuid3.nullable(),
+  error_log_id: uuid5.nullable(),
   source: external_exports.enum(["run", "llm", "tool", "mcp", "runner", "integration", "job", "web"]).nullable(),
-  seat_id: uuid3.nullable(),
-  run_id: uuid3.nullable(),
-  created_at: isoDateTime
+  seat_id: uuid5.nullable(),
+  run_id: uuid5.nullable(),
+  created_at: isoDateTime2
 }).strict();
 var notificationListErrorsOutputSchema = external_exports.object({
   errors: external_exports.array(notificationErrorSummarySchema)
@@ -29303,7 +29597,7 @@ var memberInviteInputSchema = external_exports.object({
   byo_key: external_exports.boolean().optional()
 }).strict();
 var memberInviteOutputSchema = external_exports.object({
-  invite_id: uuid3,
+  invite_id: uuid5,
   email: external_exports.string(),
   role: memberRoleSchema,
   member_type: memberTypeSchema,
@@ -29311,18 +29605,18 @@ var memberInviteOutputSchema = external_exports.object({
   aicos_access_scope: aicosAccessScopeSchema
 }).strict();
 var memberUpdateInputSchema = external_exports.object({
-  member_id: uuid3,
+  member_id: uuid5,
   role: memberRoleSchema
 }).strict();
 var memberUpdateOutputSchema = external_exports.object({
-  member_id: uuid3,
+  member_id: uuid5,
   role: memberRoleSchema
 }).strict();
 var memberRemoveInputSchema = external_exports.object({
-  member_id: uuid3
+  member_id: uuid5
 }).strict();
 var memberRemoveOutputSchema = external_exports.object({
-  member_id: uuid3,
+  member_id: uuid5,
   removed: external_exports.boolean()
 }).strict();
 var syncBriefScopeSchema = external_exports.enum(["company_wide", "per_cluster"]);
@@ -29407,14 +29701,14 @@ var tenantSpendStatusSchema = external_exports.object({
   hard_cap_reached: external_exports.boolean()
 }).strict();
 var integrationSummarySchema = external_exports.object({
-  id: uuid3,
+  id: uuid5,
   provider: external_exports.string(),
   status: external_exports.enum(["connected", "error", "disconnected"]),
-  last_synced_at: isoDateTime.nullable()
+  last_synced_at: isoDateTime2.nullable()
 }).strict();
 var settingsGetInputSchema = external_exports.object({}).strict();
 var settingsGetOutputSchema = external_exports.object({
-  tenant_id: uuid3,
+  tenant_id: uuid5,
   name: external_exports.string(),
   plan: external_exports.enum(["test", "beta_tester", "design_partner", "standard"]),
   status: external_exports.enum(["provisioning", "active", "suspended", "teardown"]),
@@ -29440,7 +29734,7 @@ var tenantRenameInputSchema = external_exports.object({
   company_name: external_exports.string().trim().min(2).max(120)
 }).strict();
 var tenantRenameOutputSchema = external_exports.object({
-  tenant_id: uuid3,
+  tenant_id: uuid5,
   name: external_exports.string(),
   previous_name: external_exports.string()
 }).strict();
@@ -33037,10 +33331,10 @@ var trustedBudgetSuggestionSchema = external_exports.object({
 }).strict();
 
 // ../../packages/protocol/src/eos-intelligence.ts
-var uuid5 = external_exports.string().uuid();
+var uuid8 = external_exports.string().uuid();
 var frictionSeveritySchema = external_exports.enum(["low", "med", "high", "critical"]);
 var frictionAssistRelatedSchema = external_exports.object({
-  issue_id: uuid5,
+  issue_id: uuid8,
   summary: external_exports.string(),
   severity: frictionSeveritySchema,
   root_cause: external_exports.string().nullable(),
@@ -33053,11 +33347,11 @@ var frictionRecurringPatternSchema = external_exports.object({
   window: external_exports.string()
 });
 var frictionAssistInputSchema = external_exports.object({
-  issue_id: uuid5,
+  issue_id: uuid8,
   limit: external_exports.number().int().min(1).max(20).optional()
 });
 var frictionAssistOutputSchema = external_exports.object({
-  issue_id: uuid5,
+  issue_id: uuid8,
   summary: external_exports.string(),
   related: external_exports.array(frictionAssistRelatedSchema),
   recurring_pattern: frictionRecurringPatternSchema,
@@ -33082,7 +33376,7 @@ var compassAlignmentFlagReasonSchema = external_exports.enum([
   "weak_ladder"
 ]);
 var compassAlignmentFlagSchema = external_exports.object({
-  goal_id: uuid5,
+  goal_id: uuid8,
   title: external_exports.string(),
   reason: compassAlignmentFlagReasonSchema,
   rationale: external_exports.string()
@@ -33101,11 +33395,11 @@ var compassDriftAnalyzerOutputSchema = external_exports.object({
   flagged: external_exports.array(compassAlignmentFlagSchema)
 });
 var coachDraftGuideInputSchema = external_exports.object({
-  seat_id: uuid5
+  seat_id: uuid8
 });
 var coachDraftGuideOutputSchema = external_exports.object({
-  seat_id: uuid5,
-  occupant_user_id: uuid5.nullable(),
+  seat_id: uuid8,
+  occupant_user_id: uuid8.nullable(),
   has_concerns: external_exports.boolean(),
   pattern_summary: external_exports.string(),
   talking_points: external_exports.array(external_exports.string()),
@@ -33135,8 +33429,8 @@ var normalizedIntegrationScopesSchema = external_exports.object({
 }).strict();
 
 // ../../packages/protocol/src/integrations.ts
-var uuid8 = external_exports.string().uuid();
-var isoDateTime2 = external_exports.string().datetime({ offset: true });
+var uuid9 = external_exports.string().uuid();
+var isoDateTime3 = external_exports.string().datetime({ offset: true });
 var integrationProviderSchema = external_exports.enum(["slack", "google", "quickbooks", "stripe"]);
 var integrationStatusSchema = external_exports.enum(["connected", "error", "disconnected"]);
 var integrationAdapterTypeSchema = external_exports.enum(["rest", "oauth", "remote_mcp", "webhook"]);
@@ -33149,7 +33443,7 @@ function isValidHttpsEndpoint(value) {
   }
 }
 var tenantIntegrationSummarySchema = external_exports.object({
-  id: uuid8,
+  id: uuid9,
   provider: integrationProviderSchema.or(external_exports.string().min(1)),
   status: integrationStatusSchema,
   account_email: external_exports.string().email().nullable(),
@@ -33157,11 +33451,11 @@ var tenantIntegrationSummarySchema = external_exports.object({
   scopes: external_exports.array(external_exports.string().min(1)),
   capabilities: external_exports.array(external_exports.string().min(1)),
   capability_availability: external_exports.array(integrationCapabilityAvailabilitySchema).optional(),
-  last_synced_at: isoDateTime2.nullable(),
-  last_tested_at: isoDateTime2.nullable(),
+  last_synced_at: isoDateTime3.nullable(),
+  last_tested_at: isoDateTime3.nullable(),
   last_test_result: external_exports.enum(["ok", "failed"]).nullable(),
-  created_at: isoDateTime2,
-  updated_at: isoDateTime2
+  created_at: isoDateTime3,
+  updated_at: isoDateTime3
 }).strict();
 var integrationListInputSchema = external_exports.object({
   provider: external_exports.string().min(1).optional()
@@ -33171,7 +33465,7 @@ var integrationListOutputSchema = external_exports.object({
 }).strict();
 var integrationStatusInputSchema = external_exports.object({
   provider: external_exports.string().min(1).optional(),
-  integration_id: uuid8.optional()
+  integration_id: uuid9.optional()
 }).strict().refine(
   (value) => value.provider !== void 0 || value.integration_id !== void 0,
   "Provide provider or integration_id."
@@ -33181,7 +33475,7 @@ var integrationStatusOutputSchema = external_exports.object({
 }).strict();
 var integrationTestInputSchema = external_exports.object({
   provider: external_exports.string().min(1).optional(),
-  integration_id: uuid8.optional()
+  integration_id: uuid9.optional()
 }).strict().refine(
   (value) => value.provider !== void 0 || value.integration_id !== void 0,
   "Provide provider or integration_id."
@@ -33189,10 +33483,10 @@ var integrationTestInputSchema = external_exports.object({
 var integrationTestOutputSchema = external_exports.object({
   ok: external_exports.boolean(),
   provider: external_exports.string().min(1),
-  integration_id: uuid8,
+  integration_id: uuid9,
   status: integrationStatusSchema,
   account_email: external_exports.string().email().nullable(),
-  checked_at: isoDateTime2,
+  checked_at: isoDateTime3,
   message: external_exports.string().min(1)
 }).strict();
 var integrationConnectRestInputSchema = external_exports.object({
@@ -33206,7 +33500,7 @@ var integrationConnectRestInputSchema = external_exports.object({
   account_label: external_exports.string().trim().min(1).max(120).optional()
 }).strict();
 var integrationConnectRestOutputSchema = external_exports.object({
-  integration_id: uuid8,
+  integration_id: uuid9,
   provider: external_exports.string().min(1),
   adapter_type: external_exports.literal("rest"),
   status: external_exports.literal("connected"),
@@ -33240,7 +33534,7 @@ var integrationReadinessConnectorSchema = external_exports.object({
   provider: external_exports.literal("google"),
   overall_status: integrationReadinessOverallStatusSchema,
   summary: external_exports.string().min(1),
-  integration_id: uuid8.nullable(),
+  integration_id: uuid9.nullable(),
   account_email: external_exports.string().email().nullable(),
   account_label: external_exports.string().min(1).nullable(),
   scopes: external_exports.array(external_exports.string().min(1)),
@@ -33352,7 +33646,7 @@ function displayLabelRejection(candidate, trust) {
 }
 
 // ../../packages/protocol/src/artifacts.ts
-var isoDateTime3 = external_exports.string().datetime({ offset: true });
+var isoDateTime4 = external_exports.string().datetime({ offset: true });
 var uuidSchema10 = external_exports.string().uuid();
 var dataClassificationSchema = external_exports.enum([
   "customer_content",
@@ -33514,13 +33808,13 @@ var artifactSummarySchema = external_exports.object({
   supersedes_id: uuidSchema10.nullable(),
   data_classification: dataClassificationSchema,
   retention_class: retentionClassSchema,
-  created_at: isoDateTime3,
-  updated_at: isoDateTime3
+  created_at: isoDateTime4,
+  updated_at: isoDateTime4
 }).strict();
 var artifactReadResultSchema = artifactSummarySchema.extend({
   snapshot: external_exports.record(external_exports.string(), external_exports.unknown()),
   signed_url: external_exports.string().nullable(),
-  signed_url_expires_at: isoDateTime3.nullable()
+  signed_url_expires_at: isoDateTime4.nullable()
 }).strict();
 var artifactListOutputSchema = external_exports.object({
   artifacts: external_exports.array(artifactSummarySchema)
@@ -33538,8 +33832,8 @@ var sessionTranscriptSummarySchema = external_exports.object({
   char_count: external_exports.number().int().nonnegative(),
   data_classification: dataClassificationSchema,
   retention_class: retentionClassSchema,
-  created_at: isoDateTime3,
-  updated_at: isoDateTime3
+  created_at: isoDateTime4,
+  updated_at: isoDateTime4
 }).strict();
 var sessionTranscriptReadResultSchema = sessionTranscriptSummarySchema.extend({
   transcript: external_exports.string()
@@ -34766,7 +35060,7 @@ var measurableTemplateSchema = external_exports.object({
 
 // ../../packages/protocol/src/migration-run.ts
 var uuidSchema13 = external_exports.string().uuid();
-var isoDateTime4 = external_exports.string().datetime({ offset: true });
+var isoDateTime5 = external_exports.string().datetime({ offset: true });
 var jsonObjectSchema2 = external_exports.record(external_exports.string(), external_exports.unknown());
 var contentHashSchema = external_exports.string().regex(/^[0-9a-f]{64}$/, "content_hash must be a 64-character lowercase sha-256 hex digest");
 var nonNegativeBigintStringSchema = external_exports.string().regex(/^\d+$/, "must be a non-negative integer (decimal string)");
@@ -34884,10 +35178,10 @@ var migrationRunSummarySchema = external_exports.object({
   cli_version: external_exports.string().nullable(),
   source_client: external_exports.string().nullable(),
   initiated_by: uuidSchema13.nullable(),
-  started_at: isoDateTime4,
-  completed_at: isoDateTime4.nullable(),
-  created_at: isoDateTime4,
-  updated_at: isoDateTime4
+  started_at: isoDateTime5,
+  completed_at: isoDateTime5.nullable(),
+  created_at: isoDateTime5,
+  updated_at: isoDateTime5
 }).strict();
 var migrationRunArtifactSummarySchema = external_exports.object({
   id: uuidSchema13,
@@ -34907,9 +35201,9 @@ var migrationRunArtifactSummarySchema = external_exports.object({
   // JS-number precision loss beyond 2^53. Nullable; non-negative (mirrors the >= 0 CHECK).
   byte_size: nonNegativeBigintStringSchema.nullable(),
   import_batch_id: uuidSchema13.nullable(),
-  imported_at: isoDateTime4.nullable(),
-  created_at: isoDateTime4,
-  updated_at: isoDateTime4
+  imported_at: isoDateTime5.nullable(),
+  created_at: isoDateTime5,
+  updated_at: isoDateTime5
 }).strict();
 var migrationRunCheckpointSummarySchema = external_exports.object({
   id: uuidSchema13,
@@ -34923,7 +35217,7 @@ var migrationRunCheckpointSummarySchema = external_exports.object({
   legal_resume_stage: migrationResumableStageSchema.nullable(),
   last_completed_checkpoint_id: uuidSchema13.nullable(),
   detail: jsonObjectSchema2,
-  created_at: isoDateTime4
+  created_at: isoDateTime5
 }).strict();
 var migrationConsentWaitSummarySchema = external_exports.object({
   id: uuidSchema13,
@@ -34940,19 +35234,19 @@ var migrationConsentWaitSummarySchema = external_exports.object({
   evidence_ref: external_exports.string().refine((value) => value.trim().length > 0, {
     message: "evidence_ref must not be blank"
   }),
-  opened_at: isoDateTime4,
-  resolved_at: isoDateTime4.nullable(),
-  created_at: isoDateTime4,
-  updated_at: isoDateTime4
+  opened_at: isoDateTime5,
+  resolved_at: isoDateTime5.nullable(),
+  created_at: isoDateTime5,
+  updated_at: isoDateTime5
 }).strict();
 var clockSegmentSharedShape = {
   id: uuidSchema13,
   tenant_id: uuidSchema13,
   run_id: uuidSchema13,
-  started_at: isoDateTime4,
-  ended_at: isoDateTime4.nullable(),
-  created_at: isoDateTime4,
-  updated_at: isoDateTime4
+  started_at: isoDateTime5,
+  ended_at: isoDateTime5.nullable(),
+  created_at: isoDateTime5,
+  updated_at: isoDateTime5
 };
 var activeClockSegmentSchema = external_exports.object({
   ...clockSegmentSharedShape,
@@ -34978,8 +35272,8 @@ var migrationItemDispositionSummarySchema = external_exports.object({
   disposition: migrationItemDispositionSchema,
   reason: external_exports.string().nullable(),
   detail: jsonObjectSchema2,
-  created_at: isoDateTime4,
-  updated_at: isoDateTime4
+  created_at: isoDateTime5,
+  updated_at: isoDateTime5
 }).strict();
 var migrationSourceMappingSummarySchema = external_exports.object({
   id: uuidSchema13,
@@ -34992,8 +35286,8 @@ var migrationSourceMappingSummarySchema = external_exports.object({
   target_id: uuidSchema13,
   is_ai_transformed: external_exports.boolean(),
   citation: jsonObjectSchema2.nullable(),
-  created_at: isoDateTime4,
-  updated_at: isoDateTime4
+  created_at: isoDateTime5,
+  updated_at: isoDateTime5
 }).strict().refine((mapping) => !mapping.is_ai_transformed || mapping.citation !== null, {
   // Mirror migration_source_mappings_ai_citation_check `not is_ai_transformed or citation is
   // not null`: an AI-transformed mapping MUST retain a source citation (R19).
@@ -36376,7 +36670,7 @@ var agentShowMarkdownInputSchema = external_exports.object({
 
 // ../../packages/protocol/src/implementation-bootstrap.ts
 var uuidSchema15 = external_exports.string().uuid();
-var isoDateTime5 = external_exports.string().datetime({ offset: true });
+var isoDateTime6 = external_exports.string().datetime({ offset: true });
 var IMPLEMENTATION_BOOTSTRAP_SCOPE = "implementation_bootstrap";
 var implementationBootstrapScopeSchema = external_exports.literal(IMPLEMENTATION_BOOTSTRAP_SCOPE);
 var deviceAuthorizationPurposeSchema = external_exports.enum(["user_session", "implementation_bootstrap", "operator_grant"]);
@@ -36407,8 +36701,8 @@ var implementationRunSummarySchema = external_exports.object({
   // ceiling. A wider protocol bound would let an 81+-char value validate here
   // only to abort the write at the DB boundary.
   source_client: external_exports.string().min(1).max(80).nullable(),
-  expires_at: isoDateTime5.nullable(),
-  created_at: isoDateTime5
+  expires_at: isoDateTime6.nullable(),
+  created_at: isoDateTime6
 }).strict();
 var implementationBootstrapContextSchema = external_exports.object({
   token_id: uuidSchema15,
@@ -36760,7 +37054,7 @@ var baserowFilterOperatorOptions = Object.keys(BASEROW_FILTER_OPERATORS).map((va
 }));
 
 // ../../packages/protocol/src/signal-source.ts
-var uuid9 = external_exports.string().uuid();
+var uuid10 = external_exports.string().uuid();
 var signalCadenceSchema = external_exports.enum(["daily", "weekly", "monthly", "quarterly", "annual"]);
 var signalRecipeAuthSchema = external_exports.object({
   placement: external_exports.enum(["none", "bearer", "header", "query"]).default("none"),
@@ -36825,10 +37119,10 @@ var signalSourceRecipePresetSchema = external_exports.object({
 }).strict();
 var PREVIEW_TOKEN_DEFAULT_TTL_SECONDS = 10 * 60;
 var integrationDiscoverInputSchema = external_exports.object({
-  integration_id: uuid9
+  integration_id: uuid10
 }).strict();
 var integrationDiscoverOutputSchema = external_exports.object({
-  integration_id: uuid9,
+  integration_id: uuid10,
   provider: external_exports.string(),
   adapter_type: external_exports.enum(["rest", "oauth", "remote_mcp", "webhook"]),
   status: external_exports.enum(["connected", "error", "disconnected"]),
@@ -36839,15 +37133,15 @@ var integrationDiscoverOutputSchema = external_exports.object({
   note: external_exports.string()
 }).strict();
 var signalPreviewInputSchema = external_exports.object({
-  measurable_id: uuid9,
-  integration_id: uuid9,
+  measurable_id: uuid10,
+  integration_id: uuid10,
   recipe: restForSignalsRecipeSchema,
   cadence: signalCadenceSchema,
   host_allowlist: external_exports.array(external_exports.string().min(1).max(255)).min(1).max(20)
 }).strict();
 var signalPreviewOutputSchema = external_exports.object({
-  measurable_id: uuid9,
-  integration_id: uuid9,
+  measurable_id: uuid10,
+  integration_id: uuid10,
   outcome: external_exports.enum(["ok", "blocked", "error"]),
   value: external_exports.union([external_exports.number(), external_exports.string(), external_exports.boolean(), external_exports.null()]).optional(),
   value_kind: external_exports.string(),
@@ -36855,11 +37149,11 @@ var signalPreviewOutputSchema = external_exports.object({
   preview_token: external_exports.string().optional(),
   preview_expires_at: external_exports.string().optional(),
   message: external_exports.string().optional(),
-  pull_log_id: uuid9.nullable()
+  pull_log_id: uuid10.nullable()
 }).strict();
 var signalBindInputSchema = external_exports.object({
-  measurable_id: uuid9,
-  integration_id: uuid9,
+  measurable_id: uuid10,
+  integration_id: uuid10,
   recipe: restForSignalsRecipeSchema,
   cadence: signalCadenceSchema,
   host_allowlist: external_exports.array(external_exports.string().min(1).max(255)).min(1).max(20),
@@ -36870,12 +37164,12 @@ var signalBindInputSchema = external_exports.object({
   role: external_exports.enum(["informs", "drives_status"]).default("informs")
 }).strict();
 var signalBindOutputSchema = external_exports.object({
-  binding_id: uuid9,
-  measurable_id: uuid9,
+  binding_id: uuid10,
+  measurable_id: uuid10,
   binding_status: external_exports.literal("draft")
 }).strict();
 var signalBindConfirmInputSchema = external_exports.object({
-  binding_id: uuid9,
+  binding_id: uuid10,
   // For a `drives_status` binding, confirm a prior closed period matches the
   // customer's books (R5 second anchor) before the binding may drive status.
   second_anchor: external_exports.object({
@@ -36884,8 +37178,8 @@ var signalBindConfirmInputSchema = external_exports.object({
   }).strict().optional()
 }).strict();
 var signalBindConfirmOutputSchema = external_exports.object({
-  binding_id: uuid9,
-  measurable_id: uuid9,
+  binding_id: uuid10,
+  measurable_id: uuid10,
   binding_status: external_exports.literal("active")
 }).strict();
 
@@ -37516,6 +37810,75 @@ var charterInputReachabilityWarningSchema = external_exports.object({
   source: external_exports.enum(["agent", "integration"]),
   reason: boundedText(1e3)
 }).strict();
+var onboardingAgentLaneSchema = external_exports.enum(["cloud", "mcp_session", "runner"]);
+var onboardingRunnerCompatibilityBindingSchema = external_exports.object({
+  seat_key: boundedText(120),
+  tenant_id: uuidSchema17,
+  seat_id: uuidSchema17.nullable(),
+  charter_digest: digestSchema2,
+  manifest_digest: digestSchema2,
+  runtime: runnerSetupRuntimeSchema,
+  support_registry_digest: digestSchema2,
+  validation_receipt_current: external_exports.boolean(),
+  // The four non-current reasons are `runnerValidationReceiptCurrency`'s own
+  // vocabulary, carried through verbatim rather than re-derived. The fifth,
+  // `receipt_missing`, covers "the session holds no receipt for this runtime
+  // at all" — distinct from a receipt that exists and failed currency. A null
+  // reason therefore means exactly one thing: the receipt IS current.
+  validation_receipt_reason: external_exports.enum([
+    "service_key_revoked",
+    "receipt_runner_mismatch",
+    "receipt_generation_stale",
+    "receipt_expired",
+    "receipt_missing"
+  ]).nullable(),
+  requested_lane: onboardingAgentLaneSchema,
+  effective_lane: onboardingAgentLaneSchema
+}).strict();
+var onboardingRunnerSetupFactsSchema = external_exports.object({
+  setup_id: uuidSchema17,
+  selected_runtimes: runnerSetupSelectedRuntimesSchema,
+  stage: runnerSetupStageSchema,
+  status: runnerSetupStatusSchema,
+  checkpoints: external_exports.array(runnerSetupCheckpointSchema).max(200),
+  attempt_count: external_exports.number().int().nonnegative(),
+  first_action_at: external_exports.string().datetime({ offset: true }).nullable(),
+  attempts_exhausted: external_exports.boolean(),
+  window_exhausted: external_exports.boolean(),
+  // `at` is nullable, not merely optional: migration 0170's two correlation
+  // CHECKs (`runner_setup_sessions_blocker_correlation_check`,
+  // `runner_setup_sessions_terminal_correlation_check`) together make
+  // `blocker_code is not null` imply `status = 'blocked'`, which is NOT one of
+  // the terminal statuses, which implies `terminal_at is null`. A session that
+  // actually carries a blocker code therefore always has a null `terminal_at`
+  // — requiring `at` to be non-null would make this field permanently
+  // unreachable through any legal row.
+  terminal_blocker: external_exports.object({
+    code: runnerSetupBlockerCodeSchema,
+    at: external_exports.string().datetime({ offset: true }).nullable()
+  }).strict().nullable(),
+  consumable: external_exports.boolean(),
+  // `run_mismatch` is deliberately NOT a member here: a foreign-run lookup is
+  // refused by `loadOnboardingRunnerSetupFacts` returning `null` for the whole
+  // facts object (there is no facts object to carry a reason), so the value is
+  // unrepresentable BY CONSTRUCTION, not merely unused.
+  //
+  // `blocked` is the ONE refusal that carries a populated `terminal_blocker`:
+  // migration 0170's correlation CHECKs make `blocker_code is not null` imply
+  // `status = 'blocked'`, so every other refusal reason leaves that field inert
+  // (null). Before this member existed a `blocked` session matched no refusal
+  // branch at all and read as `consumable: true` — fail-open — while the
+  // blocker code was computed and then never used.
+  refusal_reason: external_exports.enum([
+    "expired",
+    "terminal",
+    "blocked",
+    "runtime_mismatch",
+    "attempts_exhausted",
+    "window_exhausted"
+  ]).nullable(),
+  agent_compatibility: external_exports.array(onboardingRunnerCompatibilityBindingSchema).max(200)
+}).strict();
 var onboardingSetupApprovalProjectionSchema = external_exports.object({
   kind: external_exports.literal("onboarding_setup"),
   submitted_plan_digest: digestSchema2,
@@ -37566,7 +37929,12 @@ var onboardingSetupApprovalProjectionSchema = external_exports.object({
   // human sees each unreachable input by name on the composite approval card
   // before approving. Optional with a `[]` default so already-stored
   // projections (written before this field existed) still re-parse.
-  charter_input_warnings: external_exports.array(charterInputReachabilityWarningSchema).max(2e3).default([])
+  charter_input_warnings: external_exports.array(charterInputReachabilityWarningSchema).max(2e3).default([]),
+  // DER-3347: runner-setup facts for the onboarding approval card. Nullable
+  // with a `null` default so already-stored projections (written before this
+  // field existed) still re-parse — same reasoning, same shape as
+  // `charter_input_warnings` above.
+  runner_setup: onboardingRunnerSetupFactsSchema.nullable().default(null)
 }).strict();
 
 // ../../packages/protocol/src/onboarding-steps.ts
@@ -38265,7 +38633,7 @@ var invitePurposeSchema = external_exports.enum(["ordinary", "cohort"]);
 // ../../packages/protocol/src/mcp-onboarding.ts
 var MCP_TOKEN_ABSOLUTE_MAX_EXPIRY_MS = (MCP_TOKEN_NO_EXPIRY_SENTINEL_DAYS + 1) * 24 * 60 * 60 * 1e3;
 var uuidSchema20 = external_exports.string().uuid();
-var isoDateTime6 = external_exports.string().datetime({ offset: true });
+var isoDateTime7 = external_exports.string().datetime({ offset: true });
 var onboardingStatusInputSchema = external_exports.object({}).strict();
 var onboardingStatusOutputSchema = external_exports.object({
   completed_steps: external_exports.array(external_exports.string().min(1)),
@@ -38291,7 +38659,7 @@ var onboardingStatusOutputSchema = external_exports.object({
   // `onboard status` agree with `onboarding.finish` — previously the two were
   // disconnected and status perpetually recommended "Finish onboarding".
   onboarded: external_exports.boolean(),
-  completed_at: isoDateTime6.nullable(),
+  completed_at: isoDateTime7.nullable(),
   next_recommended_actions: external_exports.array(external_exports.string().min(1)),
   // DER-2154 (U1): which onboarding path the tenant has chosen (guided vs.
   // agent_led). null = not yet chosen.
@@ -38979,7 +39347,7 @@ var recommendationEventInputSchema = external_exports.object({
 
 // ../../packages/protocol/src/reads.ts
 var uuidSchema22 = external_exports.string().uuid();
-var isoDateTime7 = external_exports.string().datetime({ offset: true });
+var isoDateTime8 = external_exports.string().datetime({ offset: true });
 var seatTypeSchema = external_exports.enum(["human", "agent", "hybrid"]);
 var seatStatusSchema = external_exports.enum(["draft", "active", "vacant", "decommissioned"]);
 var rollupStateSchema = external_exports.enum(["ok", "risk", "crit", "pending"]);
@@ -39046,8 +39414,8 @@ var seatGetOutputSchema = external_exports.object({
     occupancy_id: uuidSchema22,
     occupant_type: external_exports.enum(["user", "agent"]),
     label: external_exports.string(),
-    started_at: isoDateTime7,
-    ended_at: isoDateTime7.nullable()
+    started_at: isoDateTime8,
+    ended_at: isoDateTime8.nullable()
   }).strict()),
   active_charter_version_id: uuidSchema22.nullable(),
   draft_charter_version_id: uuidSchema22.nullable(),
@@ -39056,12 +39424,12 @@ var seatGetOutputSchema = external_exports.object({
   mcp_tokens: external_exports.array(external_exports.object({
     token_id: uuidSchema22,
     scope: mcpScopeSchema,
-    created_at: isoDateTime7,
-    last_seen_at: isoDateTime7.nullable(),
+    created_at: isoDateTime8,
+    last_seen_at: isoDateTime8.nullable(),
     // DER-830: expires_at is NOT NULL; surface days-remaining alongside it.
-    expires_at: isoDateTime7,
+    expires_at: isoDateTime8,
     expires_in_days: external_exports.number().int(),
-    revoked_at: isoDateTime7.nullable()
+    revoked_at: isoDateTime8.nullable()
   }).strict()),
   credentials: external_exports.array(external_exports.object({
     credential_id: uuidSchema22,
@@ -39085,8 +39453,8 @@ var charterSummarySchema = external_exports.object({
   seat_id: uuidSchema22,
   version: external_exports.number().int().nonnegative(),
   status: charterStatusSchema,
-  created_at: isoDateTime7,
-  approved_at: isoDateTime7.nullable()
+  created_at: isoDateTime8,
+  approved_at: isoDateTime8.nullable()
 }).strict();
 var charterListOutputSchema = external_exports.object({
   charters: external_exports.array(charterSummarySchema)
@@ -39099,8 +39467,8 @@ var charterGetOutputSchema = external_exports.object({
   seat_id: uuidSchema22,
   version: external_exports.number().int().nonnegative(),
   status: charterStatusSchema,
-  created_at: isoDateTime7,
-  approved_at: isoDateTime7.nullable(),
+  created_at: isoDateTime8,
+  approved_at: isoDateTime8.nullable(),
   doc: external_exports.unknown(),
   history: external_exports.array(charterSummarySchema),
   dry_run: external_exports.object({
@@ -39188,7 +39556,7 @@ var agentLivenessSchema = external_exports.object({
 }).strict();
 var fleetHostResourceSchema = external_exports.object({
   reporting: external_exports.boolean(),
-  observed_at: isoDateTime7.nullable(),
+  observed_at: isoDateTime8.nullable(),
   load_avg_1m: external_exports.number().nullable(),
   cpu_count: external_exports.number().int().nullable(),
   memory_total_mb: external_exports.number().nullable(),
@@ -39212,8 +39580,8 @@ var fleetWorkProgressSchema = external_exports.object({
   reasons: external_exports.array(external_exports.string()),
   claimed_state: workProgressStateSchema.nullable(),
   claim_mismatch: external_exports.boolean(),
-  last_activity_at: isoDateTime7.nullable(),
-  last_durable_activity_at: isoDateTime7.nullable()
+  last_activity_at: isoDateTime8.nullable(),
+  last_durable_activity_at: isoDateTime8.nullable()
 }).strict();
 var fleetOverviewRowSchema = external_exports.object({
   seat_id: uuidSchema22,
@@ -39226,7 +39594,7 @@ var fleetOverviewRowSchema = external_exports.object({
   lane: agentLaneSchema3.nullable(),
   agent_status: external_exports.enum(["draft", "dry_run", "live", "paused", "decommissioned", "vacant"]),
   live: external_exports.boolean(),
-  last_turn_at: isoDateTime7.nullable(),
+  last_turn_at: isoDateTime8.nullable(),
   turns_24h: external_exports.number().int().nonnegative(),
   turns_7d: external_exports.number().int().nonnegative(),
   top_measurable_status: external_exports.enum(["on", "off", "pending", "none"]),
@@ -39258,8 +39626,8 @@ var runErrorLogSchema = external_exports.object({
   severity: external_exports.enum(["warning", "error", "critical"]),
   code: external_exports.string().nullable(),
   message: external_exports.string(),
-  created_at: isoDateTime7,
-  resolved_at: isoDateTime7.nullable()
+  created_at: isoDateTime8,
+  resolved_at: isoDateTime8.nullable()
 }).strict();
 var agentFleetDigestInputSchema = external_exports.object({
   window_hours: external_exports.number().int().min(1).max(168).default(24),
@@ -39272,8 +39640,8 @@ var fleetDigestRunSchema = external_exports.object({
   status: runStatusSchema,
   lane: agentLaneSchema3,
   model: external_exports.string(),
-  started_at: isoDateTime7,
-  finished_at: isoDateTime7.nullable(),
+  started_at: isoDateTime8,
+  finished_at: isoDateTime8.nullable(),
   cost_usd: external_exports.string(),
   error_logs: external_exports.array(runErrorLogSchema)
 }).strict();
@@ -39294,7 +39662,7 @@ var fleetDigestNotificationErrorSchema = external_exports.object({
   source: external_exports.enum(["run", "llm", "tool", "mcp", "runner", "integration", "job", "web"]).nullable(),
   seat_id: uuidSchema22.nullable(),
   run_id: uuidSchema22.nullable(),
-  created_at: isoDateTime7
+  created_at: isoDateTime8
 }).strict();
 var fleetDigestAgentSchema = fleetOverviewRowSchema.extend({
   failed_runs_24h: external_exports.number().int().nonnegative(),
@@ -39313,7 +39681,7 @@ var fleetDigestAgentSchema = fleetOverviewRowSchema.extend({
   suggested_next_action: external_exports.string()
 }).strict();
 var agentFleetDigestOutputSchema = external_exports.object({
-  generated_at: isoDateTime7,
+  generated_at: isoDateTime8,
   window_hours: external_exports.number().int().min(1).max(168),
   summary: external_exports.object({
     fleet_count: external_exports.number().int().nonnegative(),
@@ -39339,7 +39707,7 @@ var seatTrustSummarySchema = external_exports.object({
   tool_call_count: external_exports.number().int().nonnegative(),
   denied_tool_call_count: external_exports.number().int().nonnegative(),
   held_tool_call_count: external_exports.number().int().nonnegative(),
-  last_activity_at: isoDateTime7.nullable()
+  last_activity_at: isoDateTime8.nullable()
 }).strict();
 var agentListRunsInputSchema = external_exports.object({
   seat_id: uuidSchema22,
@@ -39361,8 +39729,8 @@ var seatRunSchema = external_exports.object({
   status: runStatusSchema,
   lane: agentLaneSchema3,
   model: external_exports.string(),
-  started_at: isoDateTime7,
-  finished_at: isoDateTime7.nullable(),
+  started_at: isoDateTime8,
+  finished_at: isoDateTime8.nullable(),
   cost_usd: external_exports.string(),
   tool_call_count: external_exports.number().int().nonnegative(),
   denied_tool_call_count: external_exports.number().int().nonnegative(),
@@ -39395,7 +39763,7 @@ var seatRunDetailSchema = seatRunSchema.extend({
       content_sha256: external_exports.string().regex(/^[a-f0-9]{64}$/),
       size_bytes: external_exports.number().int().nonnegative()
     }).strict()),
-    created_at: isoDateTime7
+    created_at: isoDateTime8
   }).strict()),
   // DER-1661/DER-1753: the persisted session transcript, present only when the read
   // asked for it (`transcript: true`) — null when requested but none was persisted.
@@ -39423,8 +39791,8 @@ var seatToolCallSchema = external_exports.object({
   guard_result: guardResultSchema,
   manifest_clause: external_exports.string().nullable(),
   outcome: external_exports.string(),
-  started_at: isoDateTime7,
-  finished_at: isoDateTime7.nullable()
+  started_at: isoDateTime8,
+  finished_at: isoDateTime8.nullable()
 }).strict();
 var agentListToolCallsOutputSchema = external_exports.object({
   seat_id: uuidSchema22,
@@ -39440,16 +39808,16 @@ var runWatchCurrentStateSchema = external_exports.object({
   reasons: external_exports.array(external_exports.string()),
   claimed_state: workProgressStateSchema.nullable(),
   claim_mismatch: external_exports.boolean(),
-  last_activity_at: isoDateTime7.nullable(),
-  last_durable_activity_at: isoDateTime7.nullable()
+  last_activity_at: isoDateTime8.nullable(),
+  last_durable_activity_at: isoDateTime8.nullable()
 }).strict();
 var runWatchHeartbeatSchema = external_exports.object({
   state: external_exports.enum(["working", "quiet_healthy", "recovered", "stalled"]),
   stalled: external_exports.boolean(),
   current_phase: external_exports.string().nullable(),
-  last_progress_at: isoDateTime7.nullable(),
-  expected_next_at: isoDateTime7.nullable(),
-  stall_after_at: isoDateTime7.nullable(),
+  last_progress_at: isoDateTime8.nullable(),
+  expected_next_at: isoDateTime8.nullable(),
+  stall_after_at: isoDateTime8.nullable(),
   lease_remaining_ms: external_exports.number().nullable(),
   reasons: external_exports.array(external_exports.string())
 }).strict();
@@ -39469,7 +39837,7 @@ var agentWatchRunOutputSchema = external_exports.object({
   heartbeat: runWatchHeartbeatSchema.nullable(),
   transcript: sessionTranscriptReadResultSchema.nullable(),
   tool_calls: external_exports.array(seatToolCallSchema),
-  fetched_at: isoDateTime7
+  fetched_at: isoDateTime8
 }).strict();
 var deliverableKindSchema = external_exports.enum(["brief", "work_evidence", "artifact", "report", "other"]);
 var deliverableLinkSchema = external_exports.object({
@@ -39492,7 +39860,7 @@ var deliverableRowSchema = external_exports.object({
   title: external_exports.string(),
   summary: external_exports.string().nullable(),
   content: external_exports.string().nullable(),
-  delivered_at: isoDateTime7,
+  delivered_at: isoDateTime8,
   source_run_status: external_exports.string().nullable(),
   source_run_model: external_exports.string().nullable(),
   source_run_log_ref: external_exports.string().nullable(),
@@ -39527,14 +39895,14 @@ var mcpTokenMetadataSchema = external_exports.object({
   token_id: uuidSchema22,
   scope: mcpScopeSchema,
   seat_id: uuidSchema22.nullable(),
-  created_at: isoDateTime7,
-  last_seen_at: isoDateTime7.nullable(),
+  created_at: isoDateTime8,
+  last_seen_at: isoDateTime8.nullable(),
   // DER-830: expires_at is now always present (the column is NOT NULL).
-  expires_at: isoDateTime7,
+  expires_at: isoDateTime8,
   // DER-830: whole days remaining until expiry, computed server-side. Negative
   // when the token is already expired (so the CLI can render "expired").
   expires_in_days: external_exports.number().int(),
-  revoked_at: isoDateTime7.nullable()
+  revoked_at: isoDateTime8.nullable()
 }).strict();
 var mcpTokenListOutputSchema = external_exports.object({
   tokens: external_exports.array(mcpTokenMetadataSchema)
@@ -39550,8 +39918,8 @@ var devicePairingIntentSummarySchema = external_exports.object({
   // intents are omitted by the reader, so they never appear on this contract.
   status: external_exports.enum(["pending", "consumed"]),
   created_by: uuidSchema22,
-  created_at: isoDateTime7,
-  expires_at: isoDateTime7,
+  created_at: isoDateTime8,
+  expires_at: isoDateTime8,
   // Whole seconds until the intent's own TTL lapses. Never negative: the reader
   // only returns still-live intents, and the command floors it at 0.
   expires_in_seconds: external_exports.number().int().nonnegative(),
@@ -39582,14 +39950,14 @@ var errorLogListItemSchema = external_exports.object({
   agent_id: uuidSchema22.nullable(),
   run_id: uuidSchema22.nullable(),
   disposition: external_exports.enum(["active", "acknowledged", "resolved", "superseded"]),
-  resolved_at: isoDateTime7.nullable(),
+  resolved_at: isoDateTime8.nullable(),
   resolved_by: uuidSchema22.nullable(),
   resolution_reason: external_exports.string().nullable(),
   linked_task_id: uuidSchema22.nullable(),
   linked_issue_id: uuidSchema22.nullable(),
   linked_pr_ref: external_exports.string().nullable(),
   superseded_by_id: uuidSchema22.nullable(),
-  created_at: isoDateTime7
+  created_at: isoDateTime8
 }).strict();
 var errorLogListOutputSchema = external_exports.object({
   errors: external_exports.array(errorLogListItemSchema),
@@ -39606,7 +39974,7 @@ var errorLogResolveInputSchema = external_exports.object({
 var errorLogResolveOutputSchema = external_exports.object({
   error_log_id: uuidSchema22,
   disposition: external_exports.enum(["acknowledged", "resolved"]),
-  resolved_at: isoDateTime7
+  resolved_at: isoDateTime8
 }).strict();
 var errorLogSupersedeInputSchema = external_exports.object({
   error_log_id: uuidSchema22,
@@ -39620,7 +39988,7 @@ var errorLogSupersedeOutputSchema = external_exports.object({
   error_log_id: uuidSchema22,
   superseded_by_id: uuidSchema22,
   disposition: external_exports.literal("superseded"),
-  resolved_at: isoDateTime7
+  resolved_at: isoDateTime8
 }).strict();
 var staleCandidateConfidenceSchema = external_exports.enum(["low", "medium", "high"]);
 var staleCandidateEvidenceSchema = external_exports.array(external_exports.string());
@@ -39636,8 +40004,8 @@ var errorLogStaleCandidateSchema = external_exports.object({
   message: external_exports.string(),
   seat_id: uuidSchema22.nullable(),
   occurrence_count: external_exports.number().int(),
-  last_seen_at: isoDateTime7,
-  created_at: isoDateTime7,
+  last_seen_at: isoDateTime8,
+  created_at: isoDateTime8,
   days_stale: external_exports.number().int(),
   linked_issue_id: uuidSchema22.nullable(),
   linked_issue_resolved: external_exports.boolean(),
@@ -39654,8 +40022,8 @@ var escalationStaleCandidateSchema = external_exports.object({
   seat_name: external_exports.string(),
   reason: external_exports.string(),
   status: external_exports.literal("open"),
-  created_at: isoDateTime7,
-  updated_at: isoDateTime7,
+  created_at: isoDateTime8,
+  updated_at: isoDateTime8,
   days_stale: external_exports.number().int(),
   referenced_refs: external_exports.array(external_exports.string()),
   confidence: staleCandidateConfidenceSchema,
@@ -39670,8 +40038,8 @@ var frictionStaleCandidateSchema = external_exports.object({
   summary: external_exports.string(),
   severity: external_exports.enum(["low", "med", "high", "critical"]),
   status: external_exports.enum(["open", "diagnosing"]),
-  created_at: isoDateTime7,
-  updated_at: isoDateTime7,
+  created_at: isoDateTime8,
+  updated_at: isoDateTime8,
   days_stale: external_exports.number().int(),
   action_task_id: uuidSchema22.nullable(),
   action_task_status: external_exports.string().nullable(),
@@ -39758,9 +40126,9 @@ var runHeartbeatSeatRollupSchema = external_exports.object({
   run_count: external_exports.number().int().nonnegative(),
   stalled_run_count: external_exports.number().int().nonnegative(),
   current_phase: external_exports.string().nullable(),
-  last_progress_at: isoDateTime7.nullable(),
-  expected_next_at: isoDateTime7.nullable(),
-  stall_after_at: isoDateTime7.nullable(),
+  last_progress_at: isoDateTime8.nullable(),
+  expected_next_at: isoDateTime8.nullable(),
+  stall_after_at: isoDateTime8.nullable(),
   done_count: external_exports.number().int().nonnegative(),
   in_flight_count: external_exports.number().int().nonnegative(),
   queued_count: external_exports.number().int().nonnegative(),
@@ -39774,7 +40142,7 @@ var agentRunHeartbeatsOutputSchema = external_exports.object({
 // ../../packages/protocol/src/working-files.ts
 var WORKING_FILE_MAX_PATH_CHARS = 512;
 var WORKING_FILE_MAX_CONTENT_CHARS = 16384;
-var isoDateTime8 = external_exports.string().datetime({ offset: true });
+var isoDateTime9 = external_exports.string().datetime({ offset: true });
 var workingFileContentTypeSchema = external_exports.enum([
   "text/plain",
   "text/markdown",
@@ -39853,10 +40221,10 @@ var workingFileSummarySchema = external_exports.object({
   content_type: workingFileContentTypeSchema,
   content_chars: external_exports.number().int().nonnegative(),
   published_ref: external_exports.string().min(1).nullable(),
-  published_at: isoDateTime8.nullable(),
-  expires_at: isoDateTime8,
-  created_at: isoDateTime8,
-  updated_at: isoDateTime8
+  published_at: isoDateTime9.nullable(),
+  expires_at: isoDateTime9,
+  created_at: isoDateTime9,
+  updated_at: isoDateTime9
 }).strict();
 var workingFileReadResultSchema = workingFileSummarySchema.extend({
   content: external_exports.string(),
@@ -39871,299 +40239,6 @@ var runSummaryOutputSchema = external_exports.object({
   summary: external_exports.string().min(1).max(140)
 });
 
-// ../../packages/protocol/src/runner-setup.ts
-var uuid10 = external_exports.string().uuid();
-var isoDateTime9 = external_exports.string().datetime({ offset: true });
-var sha256Hex = external_exports.string().regex(/^[0-9a-f]{64}$/, "expected a lowercase sha-256 hex digest");
-var runnerSetupRuntimeSchema = external_exports.enum(["claude", "codex"]);
-var runnerSetupSelectedRuntimesSchema = external_exports.array(runnerSetupRuntimeSchema).min(1).max(2).refine(
-  (runtimes) => new Set(runtimes).size === runtimes.length,
-  "selected runtimes must be distinct"
-);
-var runnerSetupStageSchema = external_exports.enum([
-  "pairing",
-  "provider_consent",
-  "service_install",
-  "runtime_validation",
-  "heartbeat_wait",
-  "ready"
-]);
-var runnerSetupStatusSchema = external_exports.enum([
-  "active",
-  "action_required",
-  "blocked",
-  "ready",
-  "cancelled",
-  "expired"
-]);
-var RUNNER_SETUP_TERMINAL_STATUSES = ["ready", "cancelled", "expired"];
-function isRunnerSetupTerminalStatus(status) {
-  return RUNNER_SETUP_TERMINAL_STATUSES.includes(status);
-}
-var runnerSetupBlockerCodeSchema = external_exports.enum([
-  "unsupported_platform",
-  "unsupported_service_manager",
-  "provider_version_unsupported",
-  "provider_consent_failed",
-  "pairing_expired",
-  "validation_failed",
-  "heartbeat_timeout",
-  "service_key_revoked",
-  "runner_revoked"
-]);
-var runnerSetupActionKindSchema = external_exports.enum([
-  "device_pairing_approval",
-  "provider_consent",
-  // R7: unsupported service managers get a typed manual-service action and must
-  // not claim full background readiness.
-  "manual_service_install"
-]);
-var runnerSetupActionRequiredSchema = external_exports.object({
-  kind: runnerSetupActionKindSchema,
-  // Which selected runtime the action targets (provider consent); null for
-  // runtime-neutral actions such as device pairing approval.
-  runtime: runnerSetupRuntimeSchema.nullable(),
-  // Server-generated allowlisted destination (e.g. the runner setup page).
-  // Null when the action is completed locally on the machine.
-  url: external_exports.string().max(600).nullable(),
-  // Present only when the responding surface freshly minted/holds the raw code
-  // (web setup page, local CLI ceremony). The server stores only hashes, so
-  // remote command responses carry null here.
-  user_code: external_exports.string().max(40).nullable(),
-  expires_at: isoDateTime9.nullable()
-}).strict();
-var runnerSetupCheckpointWriterSchema = external_exports.enum(["server", "runner", "owner"]);
-var runnerSetupCheckpointSchema = external_exports.object({
-  stage: runnerSetupStageSchema,
-  key: external_exports.string().min(1).max(120),
-  writer: runnerSetupCheckpointWriterSchema,
-  // Runner-published checkpoints carry the caller's request digest so a replay
-  // (same key + same digest) returns the stored checkpoint and a conflicting
-  // rewrite (same key + different digest) is rejected. Server/owner-written
-  // checkpoints carry null.
-  request_digest: sha256Hex.nullable(),
-  completed_at: isoDateTime9
-}).strict();
-var runnerSetupCheckpointPayloadSchema = external_exports.object({
-  service_manager: external_exports.enum(["launchd", "manual"]).optional(),
-  service_installed: external_exports.boolean().optional(),
-  service_state_file_present: external_exports.boolean().optional(),
-  cell_generation: external_exports.number().int().nonnegative().optional(),
-  provider_cli_version: external_exports.string().max(40).regex(/^[0-9A-Za-z.+-]+$/).optional(),
-  blocker_code: runnerSetupBlockerCodeSchema.optional()
-}).strict();
-var runnerSetupCheckpointPublishSchema = external_exports.object({
-  setup_id: uuid10,
-  stage: runnerSetupStageSchema,
-  checkpoint_key: external_exports.string().min(1).max(120),
-  request_digest: sha256Hex,
-  payload: runnerSetupCheckpointPayloadSchema
-}).strict();
-var runnerValidationReceiptSchema = external_exports.object({
-  version: external_exports.number().int().positive(),
-  runner_id: uuid10,
-  runtime: runnerSetupRuntimeSchema,
-  credential_cell_generation: external_exports.number().int().nonnegative(),
-  provider_cli_version: external_exports.string().max(40),
-  rost_cli_version: external_exports.string().max(40),
-  sandbox_policy_version: external_exports.string().max(40),
-  mcp_config_digest: sha256Hex,
-  service_key_generation: external_exports.number().int().nonnegative(),
-  probe_capability_version: external_exports.number().int().positive(),
-  issued_at: isoDateTime9,
-  expires_at: isoDateTime9
-}).strict();
-var runnerSetupValidationChallengeSchema = external_exports.object({
-  setup_id: uuid10,
-  runtime: runnerSetupRuntimeSchema,
-  nonce: external_exports.string().min(16).max(120),
-  expires_at: isoDateTime9
-}).strict();
-var runnerSetupValidationResultSchema = external_exports.object({
-  setup_id: uuid10,
-  runtime: runnerSetupRuntimeSchema,
-  // sha-256 of the nonce-derived probe answer — never raw provider output.
-  nonce_proof: sha256Hex,
-  service_key_generation: external_exports.number().int().nonnegative()
-}).strict();
-var runnerSetupValidationJobStatusSchema = external_exports.enum([
-  "issued",
-  "claimed",
-  "completed",
-  "failed",
-  "expired"
-]);
-var runnerSetupValidationAttemptKindSchema = external_exports.enum([
-  "runtime_probe",
-  "aicos_acceptance"
-]);
-var runnerSetupValidationAttemptStatusSchema = external_exports.enum([
-  "started",
-  "succeeded",
-  "failed"
-]);
-var runnerSetupValidationAttemptResultSchema = external_exports.object({
-  runner_id: uuid10,
-  runtime: runnerSetupRuntimeSchema,
-  model: external_exports.string().max(120).regex(/^[0-9A-Za-z _./:+-]+$/).nullable(),
-  provider_cli_version: external_exports.string().max(40).regex(/^[0-9A-Za-z.+-]+$/).nullable(),
-  observed_at: isoDateTime9
-}).strict();
-var RUNNER_SETUP_VALIDATION_JOB_TERMINAL_STATUSES = [
-  "completed",
-  "failed",
-  "expired"
-];
-var runnerSetupValidationJobSchema = external_exports.object({
-  job_id: uuid10,
-  setup_id: uuid10,
-  runtime: runnerSetupRuntimeSchema,
-  status: runnerSetupValidationJobStatusSchema,
-  // Stamped at issue from the session's bound key; DER-3357's attempt path
-  // compares it against the live generation (rotation-stale refusal).
-  service_key_generation: external_exports.number().int().nonnegative(),
-  expires_at: isoDateTime9,
-  claimed_at: isoDateTime9.nullable(),
-  completed_at: isoDateTime9.nullable(),
-  created_at: isoDateTime9,
-  updated_at: isoDateTime9
-}).strict().refine(
-  (job) => RUNNER_SETUP_VALIDATION_JOB_TERMINAL_STATUSES.includes(job.status) === (job.completed_at !== null),
-  "terminal status must correlate with completed_at"
-).refine(
-  (job) => job.claimed_at === null || job.status !== "issued",
-  "claimed_at requires a non-issued status"
-).refine(
-  (job) => {
-    const created = new Date(job.created_at).getTime();
-    const expires = new Date(job.expires_at).getTime();
-    return expires > created && expires <= created + 24 * 60 * 60 * 1e3;
-  },
-  "expires_at must be after created_at and within 24 hours"
-);
-var runnerSetupValidationAttemptSchema = external_exports.object({
-  attempt_id: uuid10,
-  job_id: uuid10,
-  setup_id: uuid10,
-  kind: runnerSetupValidationAttemptKindSchema,
-  status: runnerSetupValidationAttemptStatusSchema,
-  result: runnerSetupValidationAttemptResultSchema.nullable(),
-  decision_id: uuid10.nullable(),
-  activation_receipt_id: uuid10.nullable(),
-  started_at: isoDateTime9,
-  completed_at: isoDateTime9.nullable(),
-  created_at: isoDateTime9,
-  updated_at: isoDateTime9
-}).strict().refine(
-  (attempt) => attempt.status === "started" === (attempt.completed_at === null),
-  "started status must correlate with null completed_at"
-).refine(
-  (attempt) => attempt.kind === "aicos_acceptance" === (attempt.decision_id !== null),
-  "aicos_acceptance must be attributed to a decision"
-).refine(
-  (attempt) => attempt.kind === "aicos_acceptance" === (attempt.activation_receipt_id !== null),
-  "aicos_acceptance must be attributed to an activation receipt"
-);
-var runnerSetupValidationClaimRequestSchema = external_exports.object({
-  setup_id: uuid10,
-  runtime: runnerSetupRuntimeSchema
-}).strict();
-var runnerSetupValidationClaimResponseSchema = external_exports.object({
-  job_id: uuid10,
-  challenge: runnerSetupValidationChallengeSchema,
-  probe_capability_version: external_exports.number().int().positive(),
-  allowed_command_ids: external_exports.array(external_exports.string().min(1).max(120)).min(1).max(20)
-}).strict();
-var runnerSetupValidationReportRequestSchema = external_exports.object({
-  job_id: uuid10,
-  // The raw nonce travels back so the server can recompute the proof and
-  // verify the round trip; the server itself only ever stored its sha-256.
-  nonce: external_exports.string().min(16).max(120),
-  result: runnerSetupValidationResultSchema,
-  attempt: runnerSetupValidationAttemptResultSchema,
-  // At least one id: the probe cannot have produced a result without invoking
-  // the setup projection it is built on, and an EMPTY array made the result
-  // route's `.some(...)` bound vacuously true — reporting nothing was the way
-  // past the check (DER-3336).
-  invoked_command_ids: external_exports.array(external_exports.string().min(1).max(120)).min(1).max(20),
-  // DER-3336: machine FACTS about the runner's own environment — never a
-  // VERDICT. `runnerValidationReceiptSchema` binds a receipt to these five
-  // fields (and key rotation invalidates that binding), so the reporting
-  // service must supply them for the server to mint a correct receipt. The
-  // distinction that makes this safe: the runner may assert FACTS about
-  // itself (what CLI/sandbox/MCP-config version it is running), which the
-  // receipt BINDS and which rotation can invalidate — but there is still no
-  // field anywhere in this request by which the runner asserts pass/fail.
-  // The server alone derives that verdict (see the CRITICAL comment above).
-  receipt_facts: runnerValidationReceiptSchema.pick({
-    credential_cell_generation: true,
-    provider_cli_version: true,
-    rost_cli_version: true,
-    sandbox_policy_version: true,
-    mcp_config_digest: true
-  })
-}).strict();
-var runnerSetupValidationReportResponseSchema = external_exports.object({
-  job_id: uuid10,
-  attempt_id: uuid10,
-  verdict: external_exports.enum(["passed", "failed"]),
-  receipt: runnerValidationReceiptSchema.nullable(),
-  reason: external_exports.string().max(200).nullable()
-}).strict();
-var runnerRuntimeAuthStateSchema = external_exports.enum(["ready", "missing", "stale", "unknown"]);
-var runnerRuntimeSandboxStateSchema = external_exports.enum(["passed", "failed", "unknown"]);
-var runnerRuntimeValidationStateSchema = external_exports.enum([
-  "current",
-  "missing",
-  "stale",
-  "failed",
-  "mismatch"
-]);
-var runnerRuntimeReadinessSchema = external_exports.object({
-  runtime: runnerSetupRuntimeSchema,
-  installed: external_exports.boolean(),
-  cli_version: external_exports.string().max(40).nullable(),
-  auth_state: runnerRuntimeAuthStateSchema,
-  // The truthful cell-probe contract version (DER-3022 shape). Null when the
-  // runner never advertised one — which is NOT ready.
-  auth_contract_version: external_exports.number().int().positive().nullable(),
-  sandbox_state: runnerRuntimeSandboxStateSchema,
-  validation_state: runnerRuntimeValidationStateSchema,
-  validation_receipt: runnerValidationReceiptSchema.nullable()
-}).strict();
-var runnerSetupSessionSchema = external_exports.object({
-  setup_id: uuid10,
-  stage: runnerSetupStageSchema,
-  status: runnerSetupStatusSchema,
-  selected_runtimes: runnerSetupSelectedRuntimesSchema,
-  runner_id: uuid10.nullable(),
-  blocker_code: runnerSetupBlockerCodeSchema.nullable(),
-  action_required: runnerSetupActionRequiredSchema.nullable(),
-  checkpoints: external_exports.array(runnerSetupCheckpointSchema),
-  // One readiness entry per SELECTED runtime once observations exist; empty
-  // until the first server-observed heartbeat/validation reaches the session.
-  runtime_readiness: external_exports.array(runnerRuntimeReadinessSchema),
-  service_key_generation: external_exports.number().int().nonnegative(),
-  service_key_bound: external_exports.boolean(),
-  service_key_revoked: external_exports.boolean(),
-  expires_at: isoDateTime9,
-  terminal_at: isoDateTime9.nullable(),
-  created_at: isoDateTime9,
-  updated_at: isoDateTime9
-}).strict();
-var runnerSetupStartInputSchema = external_exports.object({
-  selected_runtimes: runnerSetupSelectedRuntimesSchema
-}).strict();
-var runnerSetupStatusInputSchema = external_exports.object({
-  setup_id: uuid10
-}).strict();
-var runnerSetupResumeInputSchema = external_exports.object({
-  setup_id: uuid10
-}).strict();
-var runnerSetupCancelInputSchema = external_exports.object({
-  setup_id: uuid10
-}).strict();
-
 // ../../packages/protocol/src/system-health.ts
 var uuidSchema23 = external_exports.string().uuid();
 var isoDateTime10 = external_exports.string().datetime({ offset: true });
@@ -54338,7 +54413,7 @@ var COMMAND_MANIFEST = [
   { "id": "agent.update_schedule", "namespace": "agent", "action": "update_schedule", "title": "Update agent schedule", "description": "Set or clear the scheduled execution cron for a draft or live agent on a seat.", "requiredScope": "tenant", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": true }, { "name": "schedule_cron", "flag": "schedule-cron", "type": "string", "required": true }, { "name": "schedule_timezone", "flag": "schedule-timezone", "type": "string", "required": false }], "hasComplexInput": false, "help": "Set or clear an agent's scheduled execution; a live scheduled agent must keep a steward chain resolving to a human." },
   { "id": "agent.watch_run", "namespace": "agent", "action": "watch_run", "title": "Watch agent run", "description": "Return a read-only live snapshot of one seat run: run status and lane, the derived current work-state, the run-heartbeat (quiet-but-healthy vs stalled) with current phase, the persisted session transcript, and the run's tool-call step feed (tool name, guard result, outcome). Never returns argument summaries or secret material.", "requiredScope": "seat", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": true }, { "name": "run_id", "flag": "run-id", "type": "string", "required": true }], "hasComplexInput": false, "help": "Watch one run live (read-only): run status, derived work-state, quiet-vs-stalled heartbeat, transcript, and the tool-call step feed." },
   { "id": "aicos.brain_settings.get", "namespace": "aicos", "action": "brain_settings.get", "title": "Get AICOS brain settings", "description": "Read the AICOS run lane and brain selection. Returns labels and enum settings only; no secrets or vault refs.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [], "hasComplexInput": false, "help": "Read the AICOS lane and brain selection labels without returning provider keys, vault refs, or runner secrets." },
-  { "id": "aicos.brain_settings.update", "namespace": "aicos", "action": "brain_settings.update", "title": "Update AICOS brain settings", "description": "Update the AICOS lane and cloud/runner brain preferences. Owner-only \u2014 an agent-class caller is always refused; have a human owner run this command. Audited.", "requiredScope": "tenant", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "lane", "flag": "lane", "type": "enum", "required": false, "enumValues": ["cloud", "runner", "mcp"] }, { "name": "cloud_brain", "flag": "cloud-brain", "type": "enum", "required": false, "enumValues": ["managed", "byok"] }, { "name": "runner_brain", "flag": "runner-brain", "type": "enum", "required": false, "enumValues": ["claude-cli", "codex-cli"] }, { "name": "cloud_model_slug", "flag": "cloud-model-slug", "type": "string", "required": false }], "hasComplexInput": true, "bootstrapClass": "execute_with_receipt", "help": "Update AICOS cloud managed/BYOK and runner Claude/Codex preferences. Owner-only: an agent caller is always refused. BYOK requires an active tenant Anthropic key." },
+  { "id": "aicos.brain_settings.update", "namespace": "aicos", "action": "brain_settings.update", "title": "Update AICOS brain settings", "description": "Update the AICOS lane and cloud/runner brain preferences. Owner-only for a human caller. An agent-class caller may change only lane and runner brain, and only by presenting a live, unconsumed activation receipt naming this command and that exact lane/runner-brain projection \u2014 cloud brain and managed-model fields are always refused for an agent-class call. Audited.", "requiredScope": "tenant", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "lane", "flag": "lane", "type": "enum", "required": false, "enumValues": ["cloud", "runner", "mcp"] }, { "name": "cloud_brain", "flag": "cloud-brain", "type": "enum", "required": false, "enumValues": ["managed", "byok"] }, { "name": "runner_brain", "flag": "runner-brain", "type": "enum", "required": false, "enumValues": ["claude-cli", "codex-cli"] }, { "name": "cloud_model_slug", "flag": "cloud-model-slug", "type": "string", "required": false }], "hasComplexInput": true, "bootstrapClass": "execute_with_receipt", "help": "Update AICOS cloud managed/BYOK and runner Claude/Codex preferences. Agents hold no ambient authority: an agent-class call must present one valid, unconsumed, operation-bound single-use activation receipt, and may change only the lane and runner brain that receipt authorizes; cloud brain and managed-model fields stay owner-only. BYOK requires an active tenant Anthropic key." },
   { "id": "cascade.import", "namespace": "cascade", "action": "import", "title": "Import Rocks from a ninety Rocks export", "description": "Bulk-import a ninety Rocks export into the Cascade as cycle goals under a company objective in the active cycle. Owners are seat names resolved to seats. Requires an active cycle and a target company objective (auto-selected when exactly one exists, else pass parent_objective_id). Idempotent \u2014 re-importing the same export is a no-op, and an existing cycle goal with the same objective + seat + title is skipped.", "requiredScope": "tenant_admin", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "dry_run", "flag": "dry-run", "type": "boolean", "required": false }, { "name": "parent_objective_id", "flag": "parent-objective-id", "type": "string", "required": false }], "hasComplexInput": true, "help": "Import a ninety Rocks export into the Cascade as cycle goals under a company objective in the active cycle; owners resolve to seats." },
   { "id": "cascade.import_okrs", "namespace": "cascade", "action": "import_okrs", "title": "Import objectives and key results from a generic OKR CSV", "description": "Bulk-import a generic OKR export (objectives + key results) into the Cascade. Company objectives become company_objective goals; seat objectives become seat goals under the resolved company objective; metric key results become measurables bound informs to their objective; milestone key results become milestone goals under a seat objective. Owners are seat names resolved to seats; requires an active cycle. Idempotent \u2014 re-importing the same file is a no-op; existing goals/measurables/bindings are matched, never duplicated.", "requiredScope": "tenant_admin", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "dry_run", "flag": "dry-run", "type": "boolean", "required": false }, { "name": "parent_objective_id", "flag": "parent-objective-id", "type": "string", "required": false }], "hasComplexInput": true, "help": "Import a generic OKR CSV (objectives + key results) into the Cascade; objectives become goals, metric KRs become measurables bound informs, milestone KRs become milestone goals; owners resolve to seats." },
   { "id": "charter.apply_seat_type_recommendation", "namespace": "charter", "action": "apply_seat_type_recommendation", "title": "Apply Charter seat-type recommendation", "description": "Apply the seat-type recommendation from a draft Charter.", "requiredScope": "seat", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "charter_version_id", "flag": "charter-version-id", "type": "string", "required": true }], "hasComplexInput": false, "help": "Apply seat-type recommendations only after the Charter clarifies work shape, risk, and Steward accountability." },
@@ -56279,7 +56354,7 @@ Drafting can be assisted by agents. Activation is a human decision. When authori
     order: 40,
     title: "Agent staffing playbook",
     summary: "How to decide whether a seat should be human, agent, or hybrid, and how to go live safely.",
-    version: "2026-08-10.2",
+    version: "2026-08-11.1",
     public: true,
     audiences: ["human", "cli", "mcp", "in_app_agent"],
     stages: ["staffing"],
@@ -56355,7 +56430,7 @@ After an agent runs, review its completed work as well as its telemetry. Seat pa
 
 The lane a live agent runs on \u2014 cloud (the {{brand}}-managed runtime), a paired runner, or an external MCP session \u2014 is otherwise fixed once it goes live. To move a live agent to a different lane, use \`agent_setup.relane\` (owner-only, human-gated, with a required rationale): it pauses the agent, moves it to the new lane, forces a **fresh** dry-run rehearsal on that lane so lane-specific tool executability is honestly re-surfaced, then brings it back live. It honours the same substrate gate as go-live: an unscheduled runner target can still go live parked while no compatible runner is available, but a scheduled agent's readiness is checked before it returns to live. If the rehearsal fails, the agent is left paused on the new lane rather than going live, so a failed re-lane never wakes on a schedule. This path does not mint a new Charter version, so a seat whose Charter already carries signed manifest evidence needs that evidence re-signed for the new lane before its rehearsal can run.
 
-The governed AICOS seat's own lane change is a separate path \u2014 Settings -> AICOS, or \`aicos.brain_settings.update\` \u2014 and behaves differently on a live, recognized stock AICOS Charter: see the AICOS chat guide for the Charter successor it mints. It is owner-only: an agent-class caller is always refused. A draft agent's lane is still set directly with \`agent_setup.update\`.
+The governed AICOS seat's own lane change is a separate path \u2014 Settings -> AICOS, or \`aicos.brain_settings.update\` \u2014 and behaves differently on a live, recognized stock AICOS Charter: see the AICOS chat guide for the Charter successor it mints. Agents hold no ambient authority over it: an agent-class caller must present one valid, unconsumed, operation-bound single-use activation receipt, and even then may change only the lane and runner brain that receipt authorizes. A draft agent's lane is still set directly with \`agent_setup.update\`.
 
 \`agent_setup.update\` sets the lane only while the agent is still in setup. It refuses a lane change on a **paused** agent, because a paused agent carries a real Charter pin whose manifest evidence names its current lane and \`agent.resume\` brings it back live without re-checking that \u2014 so moving the lane there would put an agent live on evidence for a lane it no longer runs on, at a lower authority than either governed path requires. The refusal names the right one for the agent: \`aicos.brain_settings.update\` for the governed AICOS seat (it mints and re-signs the Charter evidence for the new lane), and \`agent_setup.relane\` for every other agent. Re-sending a paused agent's existing lane is unchanged \u2014 that is not a lane change. A \`dry_run\` agent's lane is still settable, and the go-live gate refuses to promote it until a fresh rehearsal and current manifest evidence both match the new lane.
 
@@ -56889,11 +56964,19 @@ External connectors are being rolled out provider by provider, conservatively (r
     // table (resumable setup lifecycle).
     // DER-3332: adds `runner setup` to the CLI command digest line.
     // DER-3341: restates the `rost_update_aicos_brain_settings` row — the tool is
-    // `Tenant`-scoped now, never stages a confirmation, and an AGENT caller is
-    // always refused (owner-ness of the calling token is not ambient authority
-    // for an agent, and receipt-authorized agent execution is deferred to
-    // DER-3358).
-    version: "2026-08-10.1",
+    // `Tenant`-scoped now, never stages a confirmation, and an AGENT caller has
+    // no ambient authority from the calling token's owner-ness alone.
+    // DER-3358: reopens the AGENT-class path — a call carrying one valid,
+    // unconsumed, operation-bound single-use activation receipt may change the
+    // lane and runner brain that receipt authorizes; a receiptless AGENT call,
+    // or one touching cloud brain/managed-model fields, is still refused.
+    // DER-3507: no caller can stage one FRESH, so it carries no confirmation
+    // routing — the `/settings` deep link and Settings confirmation card were
+    // deleted as dead. Not "never stages": `confirmation.remint` revives a
+    // pre-DER-3341 stored row without re-consulting that rule and persists a
+    // genuinely new row. Either way it resolves to the general `/approvals`
+    // queue, which is where the table row below says it lands.
+    version: "2026-08-11.2",
     public: true,
     audiences: ["human", "cli", "mcp", "in_app_agent"],
     stages: ["company_setup", "staffing"],
@@ -57769,7 +57852,7 @@ Several rows here are seat-operating commands (\`task.create\`, the \`signal.*\`
 | \`rost_update_tenant_tool_policy\` | \`settings.tool_policy.update\` | Update tenant capability-grant defaults and the AICOS auto-trust posture. | Tenant-admin | Owner/admin only and human-gated; call with \`{"mode":"managed","aicos":{"trust_new_capabilities_automatically":true}}\`. |
 | \`rost_update_model_gateway_policy\` | \`tenant.model_gateway_policy.update\` | Unlock or relock managed models that lack a zero-retention (ZDR) tier. | Tenant-admin | Owner-only, human-gated; call with \`{"allow_non_zdr_models":true}\` (or \`false\` to relock). Unlocking establishes an ADR-0018 \xA76 standing authorization and surfaces a per-model retention disclosure. |
 | \`rost_get_aicos_brain_settings\` | \`aicos.brain_settings.get\` | Read AICOS lane and brain labels for cloud managed/BYOK, runner Claude/Codex, and MCP client. | Tenant | Call with \`{}\`; returns enum labels only, never keys, vault refs, or runner secrets. |
-| \`rost_update_aicos_brain_settings\` | \`aicos.brain_settings.update\` | Update AICOS lane and cloud/runner brain preferences. | Tenant | Owner-only for a human caller, and it never stages a pending confirmation for anyone (DER-3341): an authenticated owner executes directly, and an AGENT caller is always refused with a typed \`action_required\` and writes nothing (receipt-authorized agent execution is deferred to DER-3358). Owner-ness of the calling token is never ambient authority for an agent. Call with \`{"lane":"runner","runner_brain":"claude-cli"}\` or \`{"cloud_brain":"byok"}\`. BYOK requires an active tenant Anthropic key. For AICOS, selecting \`codex-cli\` is currently rejected until the governed interactive runner path is verified. |
+| \`rost_update_aicos_brain_settings\` | \`aicos.brain_settings.update\` | Update AICOS lane and cloud/runner brain preferences. | Tenant | Owner-only for a human caller, and it never stages a pending confirmation for anyone (DER-3341): an authenticated owner executes directly. Owner-ness of the calling token is never ambient authority for an agent: an AGENT caller must present one valid, unconsumed, operation-bound single-use activation receipt, and even then may change only the lane and runner brain that receipt authorizes \u2014 cloud brain and managed-model fields stay owner-only. A receiptless AGENT call is refused with a typed \`action_required\` and writes nothing. No caller can stage one fresh, so there is no Settings confirmation card or \`/settings\` deep link; a row stored before DER-3341 \u2014 including one revived by \`confirmation.remint\`, which does not re-consult that rule \u2014 resolves to the general approvals queue instead. Call with \`{"lane":"runner","runner_brain":"claude-cli"}\` or \`{"cloud_brain":"byok"}\`. BYOK requires an active tenant Anthropic key. For AICOS, selecting \`codex-cli\` is currently rejected until the governed interactive runner path is verified. |
 | \`rost_list_signals\` | \`signal.list\` | List measurables with their latest reading, on/off-track state, and \`effective_source\` (read-time measured-by). | Seat or tenant-admin | Call with \`{}\` to find measurable ids. |
 | \`rost_get_signal\` | \`signal.get\` | Read a measurable with its full reading history. | Seat or tenant-admin | Call with \`{"measurable_id":"<id>"}\`. |
 | \`rost_confirm_signal_reading\` | \`signal.confirm_reading\` | Confirm an unconfirmed reading as human-verified. | Seat or tenant-admin | Humans confirm; call with \`{"reading_id":"<id>"}\`. |
@@ -59105,7 +59188,7 @@ A command carrying any of these risk categories always asks a human, even under
     order: 72,
     title: "Settings guide",
     summary: "How to use Settings as the control plane for company access, channels, providers, tokens, and operating defaults.",
-    version: "2026-08-10.1",
+    version: "2026-08-11.1",
     public: true,
     audiences: ["human", "cli", "mcp", "in_app_agent"],
     stages: ["company_setup", "staffing"],
@@ -59189,7 +59272,7 @@ Agents that run on {{brand}}-managed inference draw against a tenant inference b
 - Set the hard cap with \`settings.update\` (CLI: \`{{cli}} settings update --hard-cap-usd <amount>\`). The optional soft cap warns before the hard cap and must be less than or equal to it.
 - The sandbox dry run is free and is never blocked by the cap, so a fresh company can charter, dry-run, and take an agent live before setting a budget. The cap applies only to real managed-inference runs.
 - A company that brings its own provider key (BYOK) is metered on that key and is not subject to the {{brand}}-managed hard cap. BYOK changes the provider account used for eligible cloud calls, not the Charter, tool guard, human gate, or data-retention posture; see the ai-model-data-handling-guide before making provider-handling claims.
-- AICOS cloud brain selection is managed with \`aicos.brain_settings.get\` and \`aicos.brain_settings.update\` \u2014 owner-only, and an agent-class caller is always refused. Managed cloud answers draw from the included allowance; BYOK cloud answers meter against the tenant key. Runner Claude and MCP client answers are labeled separately and do not draw from the managed cloud allowance. The AICOS Codex runner choice remains gated off until the governed interactive runner path is verified.
+- AICOS cloud brain selection is managed with \`aicos.brain_settings.get\` and \`aicos.brain_settings.update\` \u2014 owner-only for a human caller; an agent-class caller holds no ambient authority and must present one valid, unconsumed, operation-bound single-use activation receipt, and even then may change only the lane and runner brain that receipt authorizes (cloud brain and managed-model fields stay owner-only). Managed cloud answers draw from the included allowance; BYOK cloud answers meter against the tenant key. Runner Claude and MCP client answers are labeled separately and do not draw from the managed cloud allowance. The AICOS Codex runner choice remains gated off until the governed interactive runner path is verified.
 
 ## Company autonomy ceiling (Company Guardrails)