@rosthq/cli 0.7.161 → 0.7.163

package/dist/index.js

@@ -29434,6 +29434,19 @@ var runnerPairingStartOutputSchema = external_exports.object({
   expires_at: isoDateTime2,
   expires_in: external_exports.number().int().nonnegative()
 }).strict();
+var runnerPairingClaimInputSchema = external_exports.object({
+  user_code: external_exports.string().min(8).max(12),
+  service_key_public: external_exports.string().trim().min(1).max(1024).optional()
+}).strict();
+var runnerPairingClaimOutputSchema = external_exports.object({
+  runner_id: uuid5,
+  tenant_id: uuid5,
+  runner_secret: external_exports.string().min(1),
+  name: external_exports.string(),
+  platform: external_exports.string(),
+  service_key_generation: external_exports.number().int().nonnegative().optional(),
+  service_key_bound: external_exports.boolean().optional()
+}).strict();
 var runnerRevokeInputSchema = external_exports.object({
   runner_id: uuid5
 }).strict();
@@ -30506,6 +30519,43 @@ function scanSecretShapedValue(value, budget) {
 function hasSecretShapedValue(value) {
   return scanSecretShapedValue(value, { visitedNodes: 0 });
 }
+function hasSecretShapedValueAtAnchors(value) {
+  if (typeof value === "string" || !value || typeof value !== "object") {
+    return hasSecretShapedValue(value);
+  }
+  const budget = { visitedNodes: 0 };
+  try {
+    if (Array.isArray(value)) {
+      let entryCount = 0;
+      for (const entry of value) {
+        entryCount += 1;
+        if (entryCount > MAX_SECRET_SHAPED_VALUE_NODES) {
+          return true;
+        }
+        if (scanSecretShapedValue(entry, budget)) {
+          return true;
+        }
+      }
+      return false;
+    }
+    const keys = Object.keys(value);
+    for (let index = 0; index < keys.length; index += 1) {
+      if (index >= MAX_SECRET_SHAPED_VALUE_NODES) {
+        return true;
+      }
+      const key = keys[index];
+      if (key === void 0) {
+        return true;
+      }
+      if (scanSecretShapedValue(value[key], budget)) {
+        return true;
+      }
+    }
+    return false;
+  } catch {
+    return true;
+  }
+}
 var REDACTION_SENTINEL = "[REDACTED]";
 
 // ../../packages/protocol/src/agent-setup.ts
@@ -32927,9 +32977,43 @@ var DECISION_EVIDENCE_TARGET_KINDS = [
 ];
 var decisionEvidenceTargetKindSchema = external_exports.enum(DECISION_EVIDENCE_TARGET_KINDS);
 var decisionEvidenceDigestSchema = external_exports.string().regex(/^sha256:[0-9a-f]{64}$/);
+function isSecretShapedCommandValue(value) {
+  return carriesSecretShapedMaterial(value);
+}
+var commandIdSchema = external_exports.string().regex(/^[a-z][a-z0-9_.-]{0,119}$/).refine((value) => !isSecretShapedCommandValue(value), {
+  message: "command_id must not contain secret-shaped content"
+});
+var commandDecisionSummarySchema = external_exports.string().min(1).max(1e3).refine((value) => value === value.trim(), {
+  message: "summary must use canonical edge whitespace"
+}).refine((value) => !isSecretShapedCommandValue(value), {
+  message: "summary must not contain secret-shaped content"
+});
+var safeJsonValueSchema = external_exports.lazy(() => external_exports.union([
+  external_exports.string(),
+  external_exports.number().finite(),
+  external_exports.boolean(),
+  external_exports.null(),
+  external_exports.array(safeJsonValueSchema),
+  external_exports.record(external_exports.string(), safeJsonValueSchema)
+]));
+var safeRedactedJsonObjectSchema = external_exports.record(external_exports.string(), safeJsonValueSchema).superRefine((value, ctx) => {
+  if (hasSecretShapedValueAtAnchors(value) || hasSecretShapedContent(value)) {
+    ctx.addIssue({
+      code: external_exports.ZodIssueCode.custom,
+      message: "redacted JSON must not contain bearer tokens, claims, cookies, or secret-shaped values"
+    });
+  }
+});
+var commandDecisionBindingSchema = external_exports.strictObject({
+  effectVariant: effectVariantSchema,
+  inputDigest: decisionEvidenceDigestSchema,
+  resourceVersionDigest: decisionEvidenceDigestSchema,
+  summary: commandDecisionSummarySchema,
+  safeProjection: safeRedactedJsonObjectSchema
+});
 var uuidSchema8 = external_exports.string().uuid();
 var commandDecisionEvidenceSchema = external_exports.strictObject({
-  command_id: external_exports.string().min(1),
+  command_id: commandIdSchema,
   evidence_mode: decisionEvidenceModeSchema,
   principal_kind: decisionEvidencePrincipalKindSchema,
   effect_variant: effectVariantSchema,
@@ -33008,12 +33092,21 @@ var PENDING_CONFIRMATION_V2_AUTHORITY_FIELDS = [
   "effect_variant",
   "evidence_refs"
 ];
-var evidenceRefsSchema = external_exports.array(
-  external_exports.object({
-    kind: external_exports.string().min(1),
-    id: uuidSchema8
-  })
-);
+var evidenceRefSchema = external_exports.object({
+  kind: external_exports.string().min(1),
+  id: uuidSchema8
+}).catchall(safeJsonValueSchema).superRefine((value, ctx) => {
+  const extras = Object.fromEntries(
+    Object.entries(value).filter(([key]) => key !== "kind" && key !== "id")
+  );
+  if (hasSecretShapedValueAtAnchors(extras) || hasSecretShapedContent(extras)) {
+    ctx.addIssue({
+      code: external_exports.ZodIssueCode.custom,
+      message: "evidence reference extras must not contain secret-shaped values"
+    });
+  }
+});
+var evidenceRefsSchema = external_exports.array(evidenceRefSchema);
 var pendingConfirmationAuthoritySchema = external_exports.strictObject({
   // The structural discriminator: null = V1 legacy, 2 = V2. Not an arbitrary
   // smallint — the only legal non-null value is the literal 2.
@@ -33047,11 +33140,148 @@ var pendingConfirmationAuthoritySchema = external_exports.strictObject({
   }
 });
 
-// ../../packages/protocol/src/compass.ts
+// ../../packages/protocol/src/inline-human-confirmation.ts
 var uuidSchema9 = external_exports.string().uuid();
+var publicTokenHashSchema = external_exports.string().regex(/^[0-9a-f]{64}$/);
+var durableTimestampSchema2 = external_exports.union([external_exports.date(), external_exports.string().datetime({ offset: true })]);
+var redactedReplayArgsSchema = safeRedactedJsonObjectSchema;
+var safeProjectionSchema = safeRedactedJsonObjectSchema;
+var INLINE_HUMAN_CONFIRMATION_STATUSES = [
+  "pending",
+  "consumed",
+  "expired",
+  "superseded"
+];
+var inlineHumanConfirmationStatusSchema = external_exports.enum(INLINE_HUMAN_CONFIRMATION_STATUSES);
+var inlineHumanConfirmationBindingSchema = external_exports.strictObject({
+  command_id: commandIdSchema,
+  effect_variant: effectVariantSchema,
+  [EFFECT_POLICY_VERSION_ALIAS_FIELD]: persistedEffectPolicyVersionSchema,
+  binding_version: external_exports.number().int().positive().max(32767),
+  input_digest: decisionEvidenceDigestSchema,
+  resource_version_digest: decisionEvidenceDigestSchema,
+  summary: commandDecisionSummarySchema,
+  redacted_replay_args: redactedReplayArgsSchema,
+  safe_projection: safeProjectionSchema
+});
+var inlineHumanConfirmationCreateInputSchema = external_exports.strictObject({
+  tenant_id: uuidSchema9,
+  public_token_hash: publicTokenHashSchema,
+  session_owner_user_id: uuidSchema9,
+  session_fingerprint: decisionEvidenceDigestSchema,
+  ...inlineHumanConfirmationBindingSchema.shape,
+  expires_at: durableTimestampSchema2
+});
+var inlineHumanConfirmationConsumeInputSchema = external_exports.strictObject({
+  tenant_id: uuidSchema9,
+  id: uuidSchema9,
+  session_owner_user_id: uuidSchema9,
+  session_fingerprint: decisionEvidenceDigestSchema,
+  consume_key: decisionEvidenceDigestSchema,
+  binding: inlineHumanConfirmationBindingSchema
+});
+var inlineHumanConfirmationProbeInputSchema = external_exports.strictObject({
+  tenant_id: uuidSchema9,
+  id: uuidSchema9,
+  session_owner_user_id: uuidSchema9,
+  session_fingerprint: decisionEvidenceDigestSchema,
+  binding: inlineHumanConfirmationBindingSchema
+});
+var inlineHumanConfirmationSupersedeInputSchema = external_exports.strictObject({
+  tenant_id: uuidSchema9,
+  id: uuidSchema9,
+  session_owner_user_id: uuidSchema9,
+  session_fingerprint: decisionEvidenceDigestSchema,
+  ...inlineHumanConfirmationBindingSchema.shape,
+  expires_at: durableTimestampSchema2,
+  public_token_hash: publicTokenHashSchema
+});
+var inlineHumanConfirmationSchema = external_exports.strictObject({
+  id: uuidSchema9,
+  tenant_id: uuidSchema9,
+  public_token_hash: publicTokenHashSchema,
+  session_owner_user_id: uuidSchema9,
+  session_fingerprint: decisionEvidenceDigestSchema,
+  ...inlineHumanConfirmationBindingSchema.shape,
+  consume_key: decisionEvidenceDigestSchema.nullable(),
+  status: inlineHumanConfirmationStatusSchema,
+  expires_at: durableTimestampSchema2,
+  consumed_at: durableTimestampSchema2.nullable(),
+  expired_at: durableTimestampSchema2.nullable(),
+  superseded_at: durableTimestampSchema2.nullable(),
+  superseded_by: uuidSchema9.nullable(),
+  created_at: durableTimestampSchema2,
+  updated_at: durableTimestampSchema2
+});
+
+// ../../packages/protocol/src/browser-control-delegation.ts
+var uuidSchema10 = external_exports.string().uuid();
+var durableTimestampSchema3 = external_exports.union([external_exports.date(), external_exports.string().datetime({ offset: true })]);
+var BROWSER_CONTROL_SURFACES = ["routine_navigation", "direct_effect"];
+var browserControlSurfaceSchema = external_exports.enum(BROWSER_CONTROL_SURFACES);
+var BROWSER_CONTROL_DELEGATION_STATUSES = [
+  "active",
+  "revoked",
+  "expired",
+  "superseded"
+];
+var browserControlDelegationStatusSchema = external_exports.enum(BROWSER_CONTROL_DELEGATION_STATUSES);
+var browserControlDelegationBindingSchema = external_exports.strictObject({
+  owner_decision_id: uuidSchema10,
+  implementation_run_id: uuidSchema10,
+  session_owner_user_id: uuidSchema10,
+  session_fingerprint: decisionEvidenceDigestSchema,
+  allowed_surface: browserControlSurfaceSchema
+});
+var browserControlDelegationCreateInputSchema = external_exports.strictObject({
+  tenant_id: uuidSchema10,
+  ...browserControlDelegationBindingSchema.shape,
+  expires_at: durableTimestampSchema3
+});
+var browserControlDelegationRenewInputSchema = external_exports.strictObject({
+  tenant_id: uuidSchema10,
+  id: uuidSchema10,
+  expires_at: durableTimestampSchema3
+});
+var browserControlDelegationProbeInputSchema = external_exports.strictObject({
+  tenant_id: uuidSchema10,
+  implementation_run_id: uuidSchema10,
+  session_owner_user_id: uuidSchema10,
+  session_fingerprint: decisionEvidenceDigestSchema,
+  allowed_surface: browserControlSurfaceSchema
+});
+var browserControlDelegationRevokeInputSchema = external_exports.strictObject({
+  tenant_id: uuidSchema10,
+  id: uuidSchema10
+});
+var browserControlDelegationSchema = external_exports.strictObject({
+  id: uuidSchema10,
+  tenant_id: uuidSchema10,
+  ...browserControlDelegationBindingSchema.shape,
+  status: browserControlDelegationStatusSchema,
+  expires_at: durableTimestampSchema3,
+  revoked_at: durableTimestampSchema3.nullable(),
+  expired_at: durableTimestampSchema3.nullable(),
+  superseded_at: durableTimestampSchema3.nullable(),
+  superseded_by: uuidSchema10.nullable(),
+  created_at: durableTimestampSchema3,
+  updated_at: durableTimestampSchema3
+});
+var browserDecisionPrincipalSchema = external_exports.strictObject({
+  sessionOwnerUserId: uuidSchema10,
+  sessionFingerprint: decisionEvidenceDigestSchema,
+  delegation: external_exports.nullable(external_exports.strictObject({
+    delegationId: uuidSchema10,
+    implementationRunId: uuidSchema10,
+    allowedSurface: browserControlSurfaceSchema
+  }))
+});
+
+// ../../packages/protocol/src/compass.ts
+var uuidSchema11 = external_exports.string().uuid();
 var sourceCitationSchema = external_exports.object({
   source_id: external_exports.string().min(1),
-  document_id: uuidSchema9.optional(),
+  document_id: uuidSchema11.optional(),
   label: external_exports.string().min(1),
   locator: external_exports.string().min(1),
   quote: external_exports.string().min(1).optional(),
@@ -33080,14 +33310,14 @@ var contextGapSchema = external_exports.object({
 var gapInterviewAnswerSchema = external_exports.object({
   gap_id: external_exports.string().min(1),
   answer: external_exports.string().min(1),
-  answered_by: uuidSchema9
+  answered_by: uuidSchema11
 }).strict();
 var contextPackSchema = external_exports.object({
   schema_version: external_exports.literal(1),
-  tenant_id: uuidSchema9.optional(),
+  tenant_id: uuidSchema11.optional(),
   sources: external_exports.array(external_exports.object({
     id: external_exports.string().min(1),
-    document_id: uuidSchema9.optional(),
+    document_id: uuidSchema11.optional(),
     name: external_exports.string().min(1),
     kind: external_exports.enum(["document", "financial_upload", "interview", "integration_stub"]),
     mime_type: external_exports.string().min(1).optional()
@@ -33137,7 +33367,7 @@ var compassDraftSchema = external_exports.discriminatedUnion("schema_version", [
   compassDraftSchemaV2
 ]);
 var guardrailInputSchema = external_exports.object({
-  source_compass_version_id: uuidSchema9.optional(),
+  source_compass_version_id: uuidSchema11.optional(),
   principles: external_exports.array(external_exports.object({
     index: external_exports.number().int().positive(),
     statement: external_exports.string().min(1),
@@ -33647,7 +33877,7 @@ function displayLabelRejection(candidate, trust) {
 
 // ../../packages/protocol/src/artifacts.ts
 var isoDateTime4 = external_exports.string().datetime({ offset: true });
-var uuidSchema10 = external_exports.string().uuid();
+var uuidSchema12 = external_exports.string().uuid();
 var dataClassificationSchema = external_exports.enum([
   "customer_content",
   "operational",
@@ -33768,35 +33998,35 @@ var SECRET_URL_PARAM_NAME_ASSIGNMENT = new RegExp(
   "iu"
 );
 var binaryArtifactCreateInputSchema = external_exports.object({
-  seat_id: uuidSchema10,
-  run_id: uuidSchema10.nullable().optional(),
+  seat_id: uuidSchema12,
+  run_id: uuidSchema12.nullable().optional(),
   title: external_exports.string().trim().min(1).max(ARTIFACT_MAX_TITLE_CHARS).nullable().optional(),
   storage_bucket: external_exports.string().min(1).max(ARTIFACT_MAX_STORAGE_BUCKET_CHARS),
   storage_path: artifactStoragePathSchema,
   mime_type: external_exports.string().min(1).max(ARTIFACT_MAX_MIME_CHARS).refine(isValidMimeType, "mime_type must be a valid media type (type/subtype), not a URL"),
   size_bytes: external_exports.number().int().nonnegative(),
   checksum_sha256: artifactChecksumSchema,
-  supersedes_id: uuidSchema10.nullable().optional(),
+  supersedes_id: uuidSchema12.nullable().optional(),
   data_classification: dataClassificationSchema.default("customer_content"),
   retention_class: retentionClassSchema.default("standard_90d")
 }).strict();
 var pointerArtifactCreateInputSchema = external_exports.object({
-  seat_id: uuidSchema10,
-  run_id: uuidSchema10.nullable().optional(),
+  seat_id: uuidSchema12,
+  run_id: uuidSchema12.nullable().optional(),
   title: external_exports.string().trim().min(1).max(ARTIFACT_MAX_TITLE_CHARS).nullable().optional(),
   pointer_system: artifactPointerSystemSchema,
   external_ref: external_exports.string().trim().min(1).max(ARTIFACT_MAX_EXTERNAL_REF_CHARS).refine((value) => !isTokenizedUrl(value), "external_ref must be a stable reference, not a tokenized/credentialed URL"),
   display_label: external_exports.string().trim().min(1).max(ARTIFACT_MAX_DISPLAY_LABEL_CHARS).nullable().optional(),
   snapshot: artifactSnapshotSchema.default({}),
-  supersedes_id: uuidSchema10.nullable().optional(),
+  supersedes_id: uuidSchema12.nullable().optional(),
   data_classification: dataClassificationSchema.default("operational"),
   retention_class: retentionClassSchema.default("standard_90d")
 }).strict();
 var artifactSummarySchema = external_exports.object({
   artifact_ref: external_exports.string().min(1),
-  artifact_id: uuidSchema10,
-  seat_id: uuidSchema10,
-  run_id: uuidSchema10.nullable(),
+  artifact_id: uuidSchema12,
+  seat_id: uuidSchema12,
+  run_id: uuidSchema12.nullable(),
   kind: artifactKindSchema,
   title: external_exports.string().nullable(),
   mime_type: external_exports.string().nullable(),
@@ -33805,7 +34035,7 @@ var artifactSummarySchema = external_exports.object({
   pointer_system: artifactPointerSystemSchema.nullable(),
   external_ref: external_exports.string().nullable(),
   display_label: external_exports.string().nullable(),
-  supersedes_id: uuidSchema10.nullable(),
+  supersedes_id: uuidSchema12.nullable(),
   data_classification: dataClassificationSchema,
   retention_class: retentionClassSchema,
   created_at: isoDateTime4,
@@ -33822,9 +34052,9 @@ var artifactListOutputSchema = external_exports.object({
 var sessionTranscriptLaneSchema = external_exports.enum(["cloud", "runner"]);
 var sessionTranscriptFormatSchema = external_exports.enum(["jsonl", "text"]);
 var sessionTranscriptSummarySchema = external_exports.object({
-  transcript_id: uuidSchema10,
-  seat_id: uuidSchema10,
-  run_id: uuidSchema10.nullable(),
+  transcript_id: uuidSchema12,
+  seat_id: uuidSchema12,
+  run_id: uuidSchema12.nullable(),
   lane: sessionTranscriptLaneSchema,
   format: sessionTranscriptFormatSchema,
   message_count: external_exports.number().int().nonnegative().nullable(),
@@ -33944,15 +34174,15 @@ var mcpToolRefusalReasonSchema = external_exports.enum([
 ]);
 
 // ../../packages/protocol/src/cli-bootstrap.ts
-var uuidSchema11 = external_exports.string().uuid();
+var uuidSchema13 = external_exports.string().uuid();
 var userWhoamiInputSchema = external_exports.object({}).strict();
 var userWhoamiOutputSchema = external_exports.object({
-  user_id: uuidSchema11,
+  user_id: uuidSchema13,
   email: external_exports.string().email().nullable(),
   full_name: external_exports.string().nullable(),
-  current_tenant_id: uuidSchema11.nullable(),
+  current_tenant_id: uuidSchema13.nullable(),
   roles: external_exports.array(external_exports.object({
-    tenant_id: uuidSchema11,
+    tenant_id: uuidSchema13,
     role: external_exports.enum(["owner", "admin", "steward", "member"]),
     status: external_exports.enum(["active", "invited", "suspended"])
   }).strict())
@@ -33960,7 +34190,7 @@ var userWhoamiOutputSchema = external_exports.object({
 var userTenantsInputSchema = external_exports.object({}).strict();
 var userTenantsOutputSchema = external_exports.object({
   tenants: external_exports.array(external_exports.object({
-    id: uuidSchema11,
+    id: uuidSchema13,
     slug: external_exports.string().min(1),
     name: external_exports.string().min(1),
     role: external_exports.enum(["owner", "admin", "steward", "member"]),
@@ -33972,7 +34202,7 @@ var userUseTenantInputSchema = external_exports.object({
   tenant: external_exports.string().min(1)
 }).strict();
 var userUseTenantOutputSchema = external_exports.object({
-  tenant_id: uuidSchema11,
+  tenant_id: uuidSchema13,
   slug: external_exports.string().min(1),
   name: external_exports.string().min(1),
   role: external_exports.enum(["owner", "admin", "steward", "member"]),
@@ -33982,7 +34212,7 @@ var signupProvisionTenantInputSchema = external_exports.object({
   company_name: external_exports.string().trim().min(2).max(120)
 }).strict();
 var signupProvisionTenantOutputSchema = external_exports.object({
-  tenant_id: uuidSchema11,
+  tenant_id: uuidSchema13,
   slug: external_exports.string().min(1),
   name: external_exports.string().min(1),
   // false when the caller already had an active tenant — conservative-by-default
@@ -33993,13 +34223,13 @@ var tenantCreateInputSchema = external_exports.object({
   company_name: external_exports.string().trim().min(2).max(120)
 }).strict();
 var tenantCreateOutputSchema = external_exports.object({
-  tenant_id: uuidSchema11,
+  tenant_id: uuidSchema13,
   slug: external_exports.string().min(1),
   name: external_exports.string().min(1),
   created: external_exports.literal(true),
-  source_tenant_id: uuidSchema11,
-  entitlement_id: uuidSchema11,
-  accounting_event_id: uuidSchema11,
+  source_tenant_id: uuidSchema13,
+  entitlement_id: uuidSchema13,
+  accounting_event_id: uuidSchema13,
   active: external_exports.boolean(),
   next_action: external_exports.string().min(1)
 }).strict();
@@ -34026,14 +34256,14 @@ var FORGE_TURN_PHASE_OVERHEAD_SECONDS = 20 * 60;
 var SEAT_MCP_CLAIM_TOKEN_TTL_SECONDS = (FORGE_TURN_HARD_CEILING_SECONDS + FORGE_TURN_PHASE_OVERHEAD_SECONDS) * 2;
 
 // ../../packages/protocol/src/cli-operations.ts
-var uuidSchema12 = external_exports.string().uuid();
+var uuidSchema14 = external_exports.string().uuid();
 var dateOnlySchema = external_exports.string().regex(/^\d{4}-\d{2}-\d{2}$/, "expected YYYY-MM-DD");
 var signalListInputSchema = external_exports.object({
-  seat_id: uuidSchema12.optional()
+  seat_id: uuidSchema14.optional()
 }).strict();
 var signalSummarySchema = external_exports.object({
-  measurable_id: uuidSchema12,
-  seat_id: uuidSchema12,
+  measurable_id: uuidSchema14,
+  seat_id: uuidSchema14,
   seat_name: external_exports.string(),
   name: external_exports.string(),
   unit: external_exports.string(),
@@ -34043,7 +34273,7 @@ var signalSummarySchema = external_exports.object({
   source: external_exports.enum(["agent", "human", "integration"]),
   // DER-2066: read-time truth of how the measurable is currently fed (DER-1904 effectiveSource) — an active binding reads "auto" even while declared source stays "human". Additive; does not replace source.
   effective_source: external_exports.enum(["auto", "agent", "human"]),
-  latest_reading_id: uuidSchema12.nullable(),
+  latest_reading_id: uuidSchema14.nullable(),
   latest_value: external_exports.number().nullable(),
   latest_period_start: external_exports.string().nullable(),
   latest_confirmed: external_exports.boolean().nullable(),
@@ -34053,20 +34283,20 @@ var signalListOutputSchema = external_exports.object({
   signals: external_exports.array(signalSummarySchema)
 }).strict();
 var signalGetInputSchema = external_exports.object({
-  measurable_id: uuidSchema12
+  measurable_id: uuidSchema14
 }).strict();
 var signalReadingSchema = external_exports.object({
-  reading_id: uuidSchema12,
+  reading_id: uuidSchema14,
   period_start: dateOnlySchema,
   value: external_exports.number(),
   source: external_exports.enum(["agent", "human", "integration"]),
   confirmed: external_exports.boolean(),
   confirmed_at: external_exports.string().nullable(),
-  confirmed_by: uuidSchema12.nullable()
+  confirmed_by: uuidSchema14.nullable()
 }).strict();
 var signalGetOutputSchema = external_exports.object({
-  measurable_id: uuidSchema12,
-  seat_id: uuidSchema12,
+  measurable_id: uuidSchema14,
+  seat_id: uuidSchema14,
   name: external_exports.string(),
   unit: external_exports.string(),
   direction: external_exports.enum(["up_good", "down_good"]),
@@ -34077,26 +34307,26 @@ var signalGetOutputSchema = external_exports.object({
   readings: external_exports.array(signalReadingSchema)
 }).strict();
 var signalConfirmReadingInputSchema = external_exports.object({
-  reading_id: uuidSchema12
+  reading_id: uuidSchema14
 }).strict();
 var signalConfirmReadingOutputSchema = external_exports.object({
-  reading_id: uuidSchema12,
+  reading_id: uuidSchema14,
   confirmed: external_exports.literal(true)
 }).strict();
 var signalCorrectReadingInputSchema = external_exports.object({
-  measurable_id: uuidSchema12,
+  measurable_id: uuidSchema14,
   period_start: dateOnlySchema,
   value: external_exports.number().finite()
 }).strict();
 var signalCorrectReadingOutputSchema = external_exports.object({
-  reading_id: uuidSchema12,
-  measurable_id: uuidSchema12,
+  reading_id: uuidSchema14,
+  measurable_id: uuidSchema14,
   period_start: dateOnlySchema,
   value: external_exports.number(),
   confirmed: external_exports.literal(true)
 }).strict();
 var measurableCreateInputSchema = external_exports.object({
-  seat_id: uuidSchema12,
+  seat_id: uuidSchema14,
   name: external_exports.string().trim().min(1).max(120),
   unit: external_exports.string().trim().min(1).max(40),
   direction: external_exports.enum(["up_good", "down_good"]),
@@ -34104,8 +34334,8 @@ var measurableCreateInputSchema = external_exports.object({
   cadence: external_exports.enum(["daily", "weekly", "monthly", "quarterly", "annual"])
 }).strict();
 var measurableCreateOutputSchema = external_exports.object({
-  measurable_id: uuidSchema12,
-  seat_id: uuidSchema12,
+  measurable_id: uuidSchema14,
+  seat_id: uuidSchema14,
   name: external_exports.string(),
   unit: external_exports.string(),
   direction: external_exports.enum(["up_good", "down_good"]),
@@ -34136,8 +34366,8 @@ var signalImportSkipSchema = external_exports.object({
   reason: external_exports.string()
 }).strict();
 var signalImportMeasurableResultSchema = external_exports.object({
-  measurable_id: uuidSchema12,
-  seat_id: uuidSchema12,
+  measurable_id: uuidSchema14,
+  seat_id: uuidSchema14,
   name: external_exports.string(),
   cadence: external_exports.enum(["daily", "weekly", "monthly", "quarterly", "annual"]),
   readings_written: external_exports.number().int().nonnegative()
@@ -34181,13 +34411,13 @@ var measurableTemplateListOutputSchema = external_exports.object({
 }).strict();
 var measurableTemplateAdoptInputSchema = external_exports.object({
   template_id: external_exports.string().trim().min(1).max(80),
-  seat_id: uuidSchema12,
+  seat_id: uuidSchema14,
   target: external_exports.number().finite().optional()
 }).strict();
 var measurableTemplateAdoptOutputSchema = external_exports.object({
-  measurable_id: uuidSchema12,
+  measurable_id: uuidSchema14,
   template_id: external_exports.string(),
-  seat_id: uuidSchema12,
+  seat_id: uuidSchema14,
   name: external_exports.string(),
   unit: external_exports.string(),
   direction: measureDirectionSchema,
@@ -34198,7 +34428,7 @@ var scorecardGridInputSchema = external_exports.object({
   cadence: measureCadenceSchema.optional(),
   // Trailing period count; defaults per cadence (weekly 13, monthly 6, …).
   trailing: external_exports.number().int().min(1).max(53).optional(),
-  seat_id: uuidSchema12.optional(),
+  seat_id: uuidSchema14.optional(),
   // Anchor date (YYYY-MM-DD) for the trailing window; defaults to today. Present
   // so callers/tests get a deterministic column set.
   as_of: dateOnlySchema.optional()
@@ -34215,8 +34445,8 @@ var scorecardGridCellSchema = external_exports.object({
   confirmed: external_exports.boolean().nullable()
 }).strict();
 var scorecardGridRowSchema = external_exports.object({
-  measurable_id: uuidSchema12,
-  seat_id: uuidSchema12,
+  measurable_id: uuidSchema14,
+  seat_id: uuidSchema14,
   seat_name: external_exports.string(),
   name: external_exports.string(),
   unit: external_exports.string(),
@@ -34265,7 +34495,7 @@ var frictionImportOutputSchema = external_exports.object({
   issues_created: external_exports.number().int().nonnegative(),
   issues_matched: external_exports.number().int().nonnegative(),
   issues_skipped: external_exports.number().int().nonnegative(),
-  batch_id: uuidSchema12.nullable(),
+  batch_id: uuidSchema14.nullable(),
   skipped: external_exports.array(importSkipSchema).max(200)
 }).strict();
 var taskImportTodoSchema = external_exports.object({
@@ -34283,7 +34513,7 @@ var taskImportOutputSchema = external_exports.object({
   tasks_created: external_exports.number().int().nonnegative(),
   tasks_matched: external_exports.number().int().nonnegative(),
   tasks_skipped: external_exports.number().int().nonnegative(),
-  batch_id: uuidSchema12.nullable(),
+  batch_id: uuidSchema14.nullable(),
   skipped: external_exports.array(importSkipSchema).max(200)
 }).strict();
 var cascadeImportRockSchema = external_exports.object({
@@ -34293,7 +34523,7 @@ var cascadeImportRockSchema = external_exports.object({
 }).strict();
 var cascadeImportInputSchema = external_exports.object({
   dry_run: external_exports.boolean().optional().default(false),
-  parent_objective_id: uuidSchema12.optional(),
+  parent_objective_id: uuidSchema14.optional(),
   rocks: external_exports.array(cascadeImportRockSchema).min(1).max(1e3)
 }).strict();
 var cascadeImportOutputSchema = external_exports.object({
@@ -34301,8 +34531,8 @@ var cascadeImportOutputSchema = external_exports.object({
   rocks_created: external_exports.number().int().nonnegative(),
   rocks_matched: external_exports.number().int().nonnegative(),
   rocks_skipped: external_exports.number().int().nonnegative(),
-  objective_id: uuidSchema12.nullable(),
-  batch_id: uuidSchema12.nullable(),
+  objective_id: uuidSchema14.nullable(),
+  batch_id: uuidSchema14.nullable(),
   skipped: external_exports.array(importSkipSchema).max(200)
 }).strict();
 var okrImportKrShared = {
@@ -34325,7 +34555,7 @@ var okrImportObjectiveSchema = external_exports.object({
 }).strict();
 var okrImportInputSchema = external_exports.object({
   dry_run: external_exports.boolean().optional().default(false),
-  parent_objective_id: uuidSchema12.optional(),
+  parent_objective_id: uuidSchema14.optional(),
   objectives: external_exports.array(okrImportObjectiveSchema).min(1).max(200)
 }).strict().refine(
   (value) => value.objectives.reduce((total, objective) => total + 1 + objective.key_results.length, 0) <= OKR_MAX_RECORDS,
@@ -34360,8 +34590,8 @@ var okrImportOutputSchema = external_exports.object({
   milestones_created: external_exports.number().int().nonnegative(),
   milestones_matched: external_exports.number().int().nonnegative(),
   skipped_count: external_exports.number().int().nonnegative(),
-  company_objective_id: uuidSchema12.nullable(),
-  batch_id: uuidSchema12.nullable(),
+  company_objective_id: uuidSchema14.nullable(),
+  batch_id: uuidSchema14.nullable(),
   skipped: external_exports.array(importSkipSchema).max(200)
 }).strict();
 var MAX_VTO_TEXT_CHARS = 4e4;
@@ -34377,9 +34607,9 @@ var compassImportOutputSchema = external_exports.object({
   drafted: external_exports.boolean(),
   advisory_available: external_exports.boolean(),
   already_imported: external_exports.boolean(),
-  draft_id: uuidSchema12.nullable(),
+  draft_id: uuidSchema14.nullable(),
   compass_version: external_exports.number().int().nonnegative().nullable(),
-  batch_id: uuidSchema12.nullable(),
+  batch_id: uuidSchema14.nullable(),
   principles: external_exports.number().int().nonnegative(),
   horizons: external_exports.number().int().nonnegative(),
   cycle_objectives: external_exports.number().int().nonnegative(),
@@ -34388,18 +34618,18 @@ var compassImportOutputSchema = external_exports.object({
 var goalStatusSchema = external_exports.enum(["on", "off", "done", "dropped"]);
 var goalStatusSourceSchema = external_exports.enum(["human", "agent", "rollup", "signal"]);
 var goalListInputSchema = external_exports.object({
-  cycle_id: uuidSchema12.optional(),
-  seat_id: uuidSchema12.optional()
+  cycle_id: uuidSchema14.optional(),
+  seat_id: uuidSchema14.optional()
 }).strict();
 var goalSummarySchema = external_exports.object({
-  goal_id: uuidSchema12,
+  goal_id: uuidSchema14,
   // DER-1039: 4-kind taxonomy (company_objective | seat_goal | milestone). Legacy
   // 'objective'/'cycle_goal' stay in the read enum for any tenant not yet re-seeded
   // during the add-only expand window (goal.list surfaces whatever the DB holds).
   kind: external_exports.enum(["objective", "cycle_goal", "company_objective", "seat_goal", "milestone"]),
-  cycle_id: uuidSchema12,
-  seat_id: uuidSchema12.nullable(),
-  parent_goal_id: uuidSchema12.nullable(),
+  cycle_id: uuidSchema14,
+  seat_id: uuidSchema14.nullable(),
+  parent_goal_id: uuidSchema14.nullable(),
   title: external_exports.string(),
   status: goalStatusSchema,
   status_source: goalStatusSourceSchema
@@ -34409,10 +34639,10 @@ var goalListOutputSchema = external_exports.object({
 }).strict();
 var goalCreateKindSchema = external_exports.enum(["company_objective", "seat_goal"]);
 var goalCreateInputSchema = external_exports.object({
-  cycle_id: uuidSchema12,
+  cycle_id: uuidSchema14,
   kind: goalCreateKindSchema.optional(),
-  seat_id: uuidSchema12.optional(),
-  parent_goal_id: uuidSchema12.optional(),
+  seat_id: uuidSchema14.optional(),
+  parent_goal_id: uuidSchema14.optional(),
   title: external_exports.string().trim().min(1),
   definition_of_done: external_exports.string().trim().min(1),
   status: external_exports.enum(["on", "off"]).optional(),
@@ -34453,10 +34683,10 @@ var goalCreateInputSchema = external_exports.object({
   }
 });
 var goalMutationOutputSchema = external_exports.object({
-  goal_id: uuidSchema12,
-  cycle_id: uuidSchema12,
-  seat_id: uuidSchema12.nullable(),
-  parent_goal_id: uuidSchema12.nullable(),
+  goal_id: uuidSchema14,
+  cycle_id: uuidSchema14,
+  seat_id: uuidSchema14.nullable(),
+  parent_goal_id: uuidSchema14.nullable(),
   title: external_exports.string(),
   status: goalStatusSchema,
   status_source: goalStatusSourceSchema,
@@ -34467,7 +34697,7 @@ var goalMutationOutputSchema = external_exports.object({
   warnings: external_exports.array(external_exports.string()).optional()
 }).strict();
 var goalUpdateInputSchema = external_exports.object({
-  goal_id: uuidSchema12,
+  goal_id: uuidSchema14,
   title: external_exports.string().trim().min(1).optional(),
   definition_of_done: external_exports.string().trim().min(1).optional(),
   // DER-2140: nullable so an explicit `null` clears a previously-set target date,
@@ -34478,34 +34708,34 @@ var goalUpdateInputSchema = external_exports.object({
   { message: "goal.update requires at least one of title, definition_of_done, or target_date" }
 );
 var goalSetStatusInputSchema = external_exports.object({
-  goal_id: uuidSchema12,
+  goal_id: uuidSchema14,
   status: external_exports.enum(["on", "off", "done"])
 }).strict();
 var goalReparentInputSchema = external_exports.object({
-  goal_id: uuidSchema12,
-  parent_goal_id: uuidSchema12
+  goal_id: uuidSchema14,
+  parent_goal_id: uuidSchema14
 }).strict();
 var goalReassignOwnerInputSchema = external_exports.object({
-  goal_id: uuidSchema12,
-  seat_id: uuidSchema12
+  goal_id: uuidSchema14,
+  seat_id: uuidSchema14
 }).strict();
 var goalReassignOwnerOutputSchema = external_exports.object({
-  goal_id: uuidSchema12,
-  cycle_id: uuidSchema12,
-  previous_seat_id: uuidSchema12.nullable(),
-  seat_id: uuidSchema12,
+  goal_id: uuidSchema14,
+  cycle_id: uuidSchema14,
+  previous_seat_id: uuidSchema14.nullable(),
+  seat_id: uuidSchema14,
   title: external_exports.string(),
   status: goalStatusSchema
 }).strict();
 var goalDropInputSchema = external_exports.object({
-  goal_id: uuidSchema12
+  goal_id: uuidSchema14
 }).strict();
 var goalSetProgressInputSchema = external_exports.object({
-  goal_id: uuidSchema12,
+  goal_id: uuidSchema14,
   progress_pct: external_exports.number().int().min(0).max(100)
 }).strict();
 var goalSetProgressOutputSchema = external_exports.object({
-  goal_id: uuidSchema12,
+  goal_id: uuidSchema14,
   progress_pct: external_exports.number().int().min(0).max(100),
   status: goalStatusSchema
 }).strict();
@@ -34516,10 +34746,10 @@ var goalPaceClassificationSchema = external_exports.enum([
   "untracked"
 ]);
 var goalAtRiskSchema = external_exports.object({
-  goal_id: uuidSchema12,
+  goal_id: uuidSchema14,
   title: external_exports.string(),
-  seat_id: uuidSchema12.nullable(),
-  cycle_id: uuidSchema12,
+  seat_id: uuidSchema14.nullable(),
+  cycle_id: uuidSchema14,
   progress_pct: external_exports.number().int().min(0).max(100),
   classification: goalPaceClassificationSchema,
   expected_pct: external_exports.number().nullable(),
@@ -34539,8 +34769,8 @@ var goalDriverAnchorSchema = external_exports.object({
   expected_value: external_exports.number()
 }).strict();
 var goalBindMeasurableInputSchema = external_exports.object({
-  goal_id: uuidSchema12,
-  measurable_id: uuidSchema12,
+  goal_id: uuidSchema14,
+  measurable_id: uuidSchema14,
   // DER-1643: new operator bindings default to the conservative 'informs' role.
   // 'drives_status' is the deliberate leaf-only status driver (childless goal only,
   // one per goal) and stays human-confirmed.
@@ -34558,8 +34788,8 @@ var goalBindMeasurableInputSchema = external_exports.object({
   second_anchor: goalDriverAnchorSchema.optional()
 }).strict();
 var goalBindMeasurableOutputSchema = external_exports.object({
-  goal_id: uuidSchema12,
-  measurable_id: uuidSchema12,
+  goal_id: uuidSchema14,
+  measurable_id: uuidSchema14,
   role: goalMeasurableRoleSchema,
   // Per-binding steward opt-in; a fresh binding is always created OFF.
   auto_status_enabled: external_exports.boolean(),
@@ -34580,24 +34810,24 @@ var goalBindMeasurableOutputSchema = external_exports.object({
   driver_anchor: goalDriverAnchorSchema.nullable()
 }).strict();
 var goalUnbindMeasurableInputSchema = external_exports.object({
-  goal_id: uuidSchema12,
-  measurable_id: uuidSchema12,
+  goal_id: uuidSchema14,
+  measurable_id: uuidSchema14,
   // Which binding to remove; defaults to the status driver (the historical unbind).
   role: goalMeasurableRoleSchema.default("drives_status")
 }).strict();
 var goalUnbindMeasurableOutputSchema = external_exports.object({
-  goal_id: uuidSchema12,
-  measurable_id: uuidSchema12,
+  goal_id: uuidSchema14,
+  measurable_id: uuidSchema14,
   removed: external_exports.boolean()
 }).strict();
 var goalSetAutoStatusInputSchema = external_exports.object({
-  goal_id: uuidSchema12,
-  measurable_id: uuidSchema12,
+  goal_id: uuidSchema14,
+  measurable_id: uuidSchema14,
   enabled: external_exports.boolean()
 }).strict();
 var goalSetAutoStatusOutputSchema = external_exports.object({
-  goal_id: uuidSchema12,
-  measurable_id: uuidSchema12,
+  goal_id: uuidSchema14,
+  measurable_id: uuidSchema14,
   auto_status_enabled: external_exports.boolean(),
   // The goal's status after applying: enabling opts in and, when a confirmed
   // reading is available on a childless leaf that is not human-pinned, drives the
@@ -34607,7 +34837,7 @@ var goalSetAutoStatusOutputSchema = external_exports.object({
   applied_from_signal: external_exports.boolean()
 }).strict();
 var goalMeasurableBindingSchema = external_exports.object({
-  measurable_id: uuidSchema12,
+  measurable_id: uuidSchema14,
   name: external_exports.string(),
   unit: external_exports.string(),
   role: external_exports.literal("drives_status"),
@@ -34625,27 +34855,27 @@ var goalMeasurableBindingSchema = external_exports.object({
   driver_anchor: goalDriverAnchorSchema.nullable()
 }).strict();
 var goalListMeasurablesInputSchema = external_exports.object({
-  goal_id: uuidSchema12
+  goal_id: uuidSchema14
 }).strict();
 var goalListMeasurablesOutputSchema = external_exports.object({
-  goal_id: uuidSchema12,
+  goal_id: uuidSchema14,
   bindings: external_exports.array(goalMeasurableBindingSchema)
 }).strict();
 var goalCoreSchema = external_exports.object({
-  id: uuidSchema12,
+  id: uuidSchema14,
   title: external_exports.string(),
   kind: external_exports.enum(["objective", "cycle_goal", "company_objective", "seat_goal", "milestone"]),
   status: goalStatusSchema,
   status_source: goalStatusSourceSchema,
   progress_pct: external_exports.number().int().min(0).max(100).nullable(),
-  seat_id: uuidSchema12.nullable(),
-  parent_goal_id: uuidSchema12.nullable(),
+  seat_id: uuidSchema14.nullable(),
+  parent_goal_id: uuidSchema14.nullable(),
   definition_of_done: external_exports.string(),
   // DER-2140: optional per-goal 4DX "by when".
   target_date: external_exports.string().date().nullable()
 }).strict();
 var goalGetInputSchema = external_exports.object({
-  goal_id: uuidSchema12
+  goal_id: uuidSchema14
 }).strict();
 var goalGetOutputSchema = external_exports.object({
   goal: goalCoreSchema
@@ -34655,8 +34885,8 @@ var frictionListInputSchema = external_exports.object({
   status: external_exports.enum(["open", "diagnosing", "resolved", "dropped", "active", "all"]).optional()
 }).strict();
 var frictionIssueSummarySchema = external_exports.object({
-  issue_id: uuidSchema12,
-  raised_by_seat_id: uuidSchema12,
+  issue_id: uuidSchema14,
+  raised_by_seat_id: uuidSchema14,
   raised_by_seat_name: external_exports.string(),
   summary: external_exports.string(),
   // DER-1978 (S2): OPTIONAL short headline written at creation; null/absent when unset
@@ -34666,9 +34896,9 @@ var frictionIssueSummarySchema = external_exports.object({
   severity: external_exports.enum(["low", "med", "high", "critical"]),
   impact_score: external_exports.number(),
   status: issueStatusSchema,
-  blocking_goal_id: uuidSchema12.nullable(),
-  broken_measurable_id: uuidSchema12.nullable(),
-  action_task_id: uuidSchema12.nullable(),
+  blocking_goal_id: uuidSchema14.nullable(),
+  broken_measurable_id: uuidSchema14.nullable(),
+  action_task_id: uuidSchema14.nullable(),
   root_cause: external_exports.string().nullable(),
   resolved_at: external_exports.string().nullable(),
   created_at: external_exports.string()
@@ -34683,42 +34913,42 @@ var frictionIssueDetailSchema = frictionIssueSummarySchema.extend({
   // (packages/db/src/issues.ts), which reads `events.actor_kind` — the shared PG
   // enum widened by migration 0138 — via the origin event join.
   origin_actor_kind: external_exports.enum(["user", "agent", "system", "operator"]).nullable(),
-  origin_actor_id: uuidSchema12.nullable(),
+  origin_actor_id: uuidSchema14.nullable(),
   evidence: external_exports.unknown(),
   action_task_title: external_exports.string().nullable(),
-  action_task_owner_seat_id: uuidSchema12.nullable(),
+  action_task_owner_seat_id: uuidSchema14.nullable(),
   action_task_owner_seat_name: external_exports.string().nullable(),
   action_task_due_on: external_exports.string().nullable(),
-  decision_id: uuidSchema12.nullable(),
+  decision_id: uuidSchema14.nullable(),
   decision_title: external_exports.string().nullable(),
   decision_summary: external_exports.string().nullable(),
   decided_by_name: external_exports.string().nullable(),
   updated_at: external_exports.string()
 }).strict();
 var frictionGetInputSchema = external_exports.object({
-  issue_id: uuidSchema12
+  issue_id: uuidSchema14
 }).strict();
 var frictionGetOutputSchema = external_exports.object({
   issue: frictionIssueDetailSchema
 }).strict();
 var frictionUpdateStatusInputSchema = external_exports.object({
-  issue_id: uuidSchema12,
+  issue_id: uuidSchema14,
   status: external_exports.enum(["open", "diagnosing"])
 }).strict();
 var frictionUpdateStatusOutputSchema = external_exports.object({
-  issue_id: uuidSchema12,
+  issue_id: uuidSchema14,
   status: external_exports.enum(["open", "diagnosing"]),
-  event_id: uuidSchema12
+  event_id: uuidSchema14
 }).strict();
 var frictionResolveInputSchema = external_exports.object({
-  issue_id: uuidSchema12,
+  issue_id: uuidSchema14,
   resolution_mode: external_exports.enum(["ids", "already_fixed"]).default("ids"),
   root_cause: external_exports.string().trim().min(1),
-  owner_seat_id: uuidSchema12.optional(),
+  owner_seat_id: uuidSchema14.optional(),
   task_title: external_exports.string().trim().min(1).optional(),
   task_description: external_exports.string().trim().min(1).optional(),
   done_by: dateOnlySchema.optional(),
-  resolving_seat_id: uuidSchema12.optional()
+  resolving_seat_id: uuidSchema14.optional()
 }).strict().superRefine((value, ctx) => {
   if (value.resolution_mode !== "ids") {
     return;
@@ -34737,25 +34967,25 @@ var frictionResolveInputSchema = external_exports.object({
   }
 });
 var frictionResolveOutputSchema = external_exports.object({
-  issue_id: uuidSchema12,
+  issue_id: uuidSchema14,
   status: external_exports.literal("resolved"),
-  action_task_id: uuidSchema12.nullable(),
-  decision_id: uuidSchema12
+  action_task_id: uuidSchema14.nullable(),
+  decision_id: uuidSchema14
 }).strict();
 var frictionLinkTaskInputSchema = external_exports.object({
-  issue_id: uuidSchema12,
-  task_id: uuidSchema12
+  issue_id: uuidSchema14,
+  task_id: uuidSchema14
 }).strict();
 var frictionLinkTaskOutputSchema = external_exports.object({
-  issue_id: uuidSchema12,
-  action_task_id: uuidSchema12
+  issue_id: uuidSchema14,
+  action_task_id: uuidSchema14
 }).strict();
 var taskCreateInputSchema = external_exports.object({
-  owner_seat_id: uuidSchema12,
-  from_seat_id: uuidSchema12.optional(),
+  owner_seat_id: uuidSchema14,
+  from_seat_id: uuidSchema14.optional(),
   title: external_exports.string().trim().min(1),
   description: external_exports.string().trim().min(1),
-  goal_id: uuidSchema12.optional(),
+  goal_id: uuidSchema14.optional(),
   acceptance_criteria: external_exports.array(external_exports.string().min(1)).optional(),
   due_on: dateOnlySchema.optional(),
   // DER-1379: deterministic idempotency key; agent/scheduled producers only
@@ -34763,9 +34993,9 @@ var taskCreateInputSchema = external_exports.object({
   source_key: external_exports.string().trim().min(1).max(200).optional()
 }).strict();
 var taskCreateOutputSchema = external_exports.object({
-  task_id: uuidSchema12,
-  owner_seat_id: uuidSchema12,
-  from_seat_id: uuidSchema12.nullable(),
+  task_id: uuidSchema14,
+  owner_seat_id: uuidSchema14,
+  from_seat_id: uuidSchema14.nullable(),
   status: external_exports.string(),
   due_on: external_exports.string().nullable(),
   // DER-1379: true when this was an idempotent no-op returning an existing
@@ -34773,8 +35003,8 @@ var taskCreateOutputSchema = external_exports.object({
   already_filed: external_exports.boolean().default(false)
 }).strict();
 var taskUpdateInputSchema = external_exports.object({
-  task_id: uuidSchema12,
-  owner_seat_id: uuidSchema12.optional(),
+  task_id: uuidSchema14,
+  owner_seat_id: uuidSchema14.optional(),
   due_on: dateOnlySchema.optional(),
   title: external_exports.string().trim().min(1).optional(),
   description: external_exports.string().trim().min(1).optional(),
@@ -34784,17 +35014,17 @@ var taskUpdateInputSchema = external_exports.object({
   { message: "Provide at least one field to update." }
 );
 var taskUpdateOutputSchema = external_exports.object({
-  task_id: uuidSchema12,
-  owner_seat_id: uuidSchema12,
-  from_seat_id: uuidSchema12.nullable(),
+  task_id: uuidSchema14,
+  owner_seat_id: uuidSchema14,
+  from_seat_id: uuidSchema14.nullable(),
   status: external_exports.string(),
   due_on: external_exports.string().nullable()
 }).strict();
 var syncBriefCompileInputSchema = external_exports.object({
-  cluster_id: uuidSchema12.optional()
+  cluster_id: uuidSchema14.optional()
 }).strict();
 var syncBriefRefSchema = external_exports.object({
-  sync_brief_id: uuidSchema12,
+  sync_brief_id: uuidSchema14,
   period_start: dateOnlySchema,
   period_end: dateOnlySchema,
   compiled_at: external_exports.string(),
@@ -34803,10 +35033,10 @@ var syncBriefRefSchema = external_exports.object({
   created: external_exports.boolean()
 }).strict();
 var syncBriefGetInputSchema = external_exports.object({
-  sync_brief_id: uuidSchema12.optional()
+  sync_brief_id: uuidSchema14.optional()
 }).strict();
 var syncBriefGetOutputSchema = external_exports.object({
-  sync_brief_id: uuidSchema12,
+  sync_brief_id: uuidSchema14,
   period_start: dateOnlySchema,
   period_end: dateOnlySchema,
   compiled_at: external_exports.string(),
@@ -34815,10 +35045,10 @@ var syncBriefGetOutputSchema = external_exports.object({
   doc: external_exports.unknown()
 }).strict();
 var syncRunStartInputSchema = external_exports.object({
-  cluster_id: uuidSchema12.optional()
+  cluster_id: uuidSchema14.optional()
 }).strict();
 var syncRunStartOutputSchema = external_exports.object({
-  sync_brief_id: uuidSchema12,
+  sync_brief_id: uuidSchema14,
   period_start: dateOnlySchema,
   period_end: dateOnlySchema,
   compiled_at: external_exports.string(),
@@ -34826,25 +35056,25 @@ var syncRunStartOutputSchema = external_exports.object({
   degraded: external_exports.boolean()
 }).strict();
 var syncRunCompleteInputSchema = external_exports.object({
-  sync_brief_id: uuidSchema12
+  sync_brief_id: uuidSchema14
 }).strict();
 var syncRunCompleteOutputSchema = external_exports.object({
-  sync_brief_id: uuidSchema12,
-  event_id: uuidSchema12,
-  decision_ids: external_exports.array(uuidSchema12),
-  task_ids: external_exports.array(uuidSchema12)
+  sync_brief_id: uuidSchema14,
+  event_id: uuidSchema14,
+  decision_ids: external_exports.array(uuidSchema14),
+  task_ids: external_exports.array(uuidSchema14)
 }).strict();
 var syncItemAssignInputSchema = external_exports.object({
-  sync_brief_id: uuidSchema12,
-  owner_seat_id: uuidSchema12,
+  sync_brief_id: uuidSchema14,
+  owner_seat_id: uuidSchema14,
   title: external_exports.string().trim().min(1),
   description: external_exports.string().trim().min(1),
   due_on: dateOnlySchema.optional()
 }).strict();
 var syncItemAssignOutputSchema = external_exports.object({
-  sync_brief_id: uuidSchema12,
-  task_id: uuidSchema12,
-  owner_seat_id: uuidSchema12,
+  sync_brief_id: uuidSchema14,
+  task_id: uuidSchema14,
+  owner_seat_id: uuidSchema14,
   status: external_exports.string(),
   due_on: external_exports.string().nullable()
 }).strict();
@@ -35059,7 +35289,7 @@ var measurableTemplateSchema = external_exports.object({
 }).strict();
 
 // ../../packages/protocol/src/migration-run.ts
-var uuidSchema13 = external_exports.string().uuid();
+var uuidSchema15 = external_exports.string().uuid();
 var isoDateTime5 = external_exports.string().datetime({ offset: true });
 var jsonObjectSchema2 = external_exports.record(external_exports.string(), external_exports.unknown());
 var contentHashSchema = external_exports.string().regex(/^[0-9a-f]{64}$/, "content_hash must be a 64-character lowercase sha-256 hex digest");
@@ -35168,8 +35398,8 @@ var migrationTargetKindSchema = external_exports.enum([
   "other"
 ]);
 var migrationRunSummarySchema = external_exports.object({
-  id: uuidSchema13,
-  tenant_id: uuidSchema13,
+  id: uuidSchema15,
+  tenant_id: uuidSchema15,
   status: migrationRunStatusSchema,
   source_platform: migrationSourcePlatformSchema,
   authorization_mode: migrationAuthorizationModeSchema,
@@ -35177,16 +35407,16 @@ var migrationRunSummarySchema = external_exports.object({
   skill_version: external_exports.string().nullable(),
   cli_version: external_exports.string().nullable(),
   source_client: external_exports.string().nullable(),
-  initiated_by: uuidSchema13.nullable(),
+  initiated_by: uuidSchema15.nullable(),
   started_at: isoDateTime5,
   completed_at: isoDateTime5.nullable(),
   created_at: isoDateTime5,
   updated_at: isoDateTime5
 }).strict();
 var migrationRunArtifactSummarySchema = external_exports.object({
-  id: uuidSchema13,
-  tenant_id: uuidSchema13,
-  run_id: uuidSchema13,
+  id: uuidSchema15,
+  tenant_id: uuidSchema15,
+  run_id: uuidSchema15,
   artifact_kind: migrationArtifactKindSchema,
   source_identity_key: external_exports.string(),
   source_filename: external_exports.string().nullable(),
@@ -35200,32 +35430,32 @@ var migrationRunArtifactSummarySchema = external_exports.object({
   // Postgres bigint: carried as a decimal STRING (the DB mapper's convention) to avoid
   // JS-number precision loss beyond 2^53. Nullable; non-negative (mirrors the >= 0 CHECK).
   byte_size: nonNegativeBigintStringSchema.nullable(),
-  import_batch_id: uuidSchema13.nullable(),
+  import_batch_id: uuidSchema15.nullable(),
   imported_at: isoDateTime5.nullable(),
   created_at: isoDateTime5,
   updated_at: isoDateTime5
 }).strict();
 var migrationRunCheckpointSummarySchema = external_exports.object({
-  id: uuidSchema13,
-  tenant_id: uuidSchema13,
-  run_id: uuidSchema13,
+  id: uuidSchema15,
+  tenant_id: uuidSchema15,
+  run_id: uuidSchema15,
   stage: migrationRunStageSchema,
   checkpoint_status: migrationCheckpointStatusSchema,
   retry_class: migrationRetryClassSchema.nullable(),
   // Constrained to the reachable resume stages (mirrors the DB CHECK) so a boundary
   // payload can never carry an unreachable/terminal resume target.
   legal_resume_stage: migrationResumableStageSchema.nullable(),
-  last_completed_checkpoint_id: uuidSchema13.nullable(),
+  last_completed_checkpoint_id: uuidSchema15.nullable(),
   detail: jsonObjectSchema2,
   created_at: isoDateTime5
 }).strict();
 var migrationConsentWaitSummarySchema = external_exports.object({
-  id: uuidSchema13,
-  tenant_id: uuidSchema13,
-  run_id: uuidSchema13,
+  id: uuidSchema15,
+  tenant_id: uuidSchema15,
+  run_id: uuidSchema15,
   // NOT NULL at the DB layer: a stopped clock segment must have a run-scoped continuation
   // checkpoint and a non-empty verified-evidence pointer, so the boundary schema mirrors it.
-  checkpoint_id: uuidSchema13,
+  checkpoint_id: uuidSchema15,
   wait_kind: migrationConsentWaitKindSchema,
   responsible_party: migrationConsentResponsiblePartySchema,
   status: migrationConsentWaitStatusSchema,
@@ -35240,9 +35470,9 @@ var migrationConsentWaitSummarySchema = external_exports.object({
   updated_at: isoDateTime5
 }).strict();
 var clockSegmentSharedShape = {
-  id: uuidSchema13,
-  tenant_id: uuidSchema13,
-  run_id: uuidSchema13,
+  id: uuidSchema15,
+  tenant_id: uuidSchema15,
+  run_id: uuidSchema15,
   started_at: isoDateTime5,
   ended_at: isoDateTime5.nullable(),
   created_at: isoDateTime5,
@@ -35256,17 +35486,17 @@ var activeClockSegmentSchema = external_exports.object({
 var stoppedClockSegmentSchema = external_exports.object({
   ...clockSegmentSharedShape,
   segment_kind: external_exports.literal("stopped"),
-  consent_wait_id: uuidSchema13
+  consent_wait_id: uuidSchema15
 }).strict();
 var migrationClockSegmentSummarySchema = external_exports.discriminatedUnion("segment_kind", [activeClockSegmentSchema, stoppedClockSegmentSchema]).refine(
   (segment) => segment.ended_at === null || new Date(segment.ended_at).getTime() >= new Date(segment.started_at).getTime(),
   { message: "ended_at must be at or after started_at", path: ["ended_at"] }
 );
 var migrationItemDispositionSummarySchema = external_exports.object({
-  id: uuidSchema13,
-  tenant_id: uuidSchema13,
-  run_id: uuidSchema13,
-  artifact_id: uuidSchema13.nullable(),
+  id: uuidSchema15,
+  tenant_id: uuidSchema15,
+  run_id: uuidSchema15,
+  artifact_id: uuidSchema15.nullable(),
   item_kind: migrationItemKindSchema,
   source_ref: external_exports.string(),
   disposition: migrationItemDispositionSchema,
@@ -35276,14 +35506,14 @@ var migrationItemDispositionSummarySchema = external_exports.object({
   updated_at: isoDateTime5
 }).strict();
 var migrationSourceMappingSummarySchema = external_exports.object({
-  id: uuidSchema13,
-  tenant_id: uuidSchema13,
-  run_id: uuidSchema13,
-  artifact_id: uuidSchema13.nullable(),
-  disposition_id: uuidSchema13.nullable(),
+  id: uuidSchema15,
+  tenant_id: uuidSchema15,
+  run_id: uuidSchema15,
+  artifact_id: uuidSchema15.nullable(),
+  disposition_id: uuidSchema15.nullable(),
   source_ref: external_exports.string(),
   target_kind: migrationTargetKindSchema,
-  target_id: uuidSchema13,
+  target_id: uuidSchema15,
   is_ai_transformed: external_exports.boolean(),
   citation: jsonObjectSchema2.nullable(),
   created_at: isoDateTime5,
@@ -36644,18 +36874,18 @@ function parseNinetyRocksCsv(text) {
 }
 
 // ../../packages/protocol/src/markdown-readout.ts
-var uuidSchema14 = external_exports.string().uuid();
+var uuidSchema16 = external_exports.string().uuid();
 var markdownOutputSchema = external_exports.object({
   markdown: external_exports.string().min(1)
 }).strict();
 var compassShowMarkdownInputSchema = external_exports.object({}).strict();
 var charterShowMarkdownInputSchema = external_exports.object({
-  seat_id: uuidSchema14
+  seat_id: uuidSchema16
 }).strict();
 var charterShowMarkdownOutputSchema = external_exports.object({
   markdown: external_exports.string().min(1),
-  charter_version_id: uuidSchema14.nullable(),
-  seat_id: uuidSchema14,
+  charter_version_id: uuidSchema16.nullable(),
+  seat_id: uuidSchema16,
   version: external_exports.number().int().nonnegative().nullable(),
   status: external_exports.string().nullable(),
   doc: external_exports.unknown().nullable(),
@@ -36665,11 +36895,11 @@ var charterShowMarkdownOutputSchema = external_exports.object({
   }).strict().nullable()
 }).strict();
 var agentShowMarkdownInputSchema = external_exports.object({
-  seat_id: uuidSchema14
+  seat_id: uuidSchema16
 }).strict();
 
 // ../../packages/protocol/src/implementation-bootstrap.ts
-var uuidSchema15 = external_exports.string().uuid();
+var uuidSchema17 = external_exports.string().uuid();
 var isoDateTime6 = external_exports.string().datetime({ offset: true });
 var IMPLEMENTATION_BOOTSTRAP_SCOPE = "implementation_bootstrap";
 var implementationBootstrapScopeSchema = external_exports.literal(IMPLEMENTATION_BOOTSTRAP_SCOPE);
@@ -36686,14 +36916,14 @@ var implementationDeviceHandoffSchema = external_exports.object({
 var implementationBootstrapCredentialSchema = implementationDeviceHandoffSchema.omit({ type: true });
 var implementationDeviceCorrelationDescriptorSchema = external_exports.object({
   type: external_exports.literal("implementation_bootstrap"),
-  tenant_id: uuidSchema15,
-  implementation_run_id: uuidSchema15
+  tenant_id: uuidSchema17,
+  implementation_run_id: uuidSchema17
 }).strict();
 var implementationRunStatusSchema = external_exports.enum(["active", "completed", "abandoned", "expired"]);
 var onboardingPathChoiceSchema = external_exports.enum(["guided", "agent_led"]);
 var implementationRunSummarySchema = external_exports.object({
-  run_id: uuidSchema15,
-  tenant_id: uuidSchema15,
+  run_id: uuidSchema17,
+  tenant_id: uuidSchema17,
   status: implementationRunStatusSchema,
   // Bound to 80 to match the DB CHECK on device_authorizations.source_client
   // (migration 0135, char_length between 1 and 80) — every implementation
@@ -36705,14 +36935,14 @@ var implementationRunSummarySchema = external_exports.object({
   created_at: isoDateTime6
 }).strict();
 var implementationBootstrapContextSchema = external_exports.object({
-  token_id: uuidSchema15,
-  tenant_id: uuidSchema15,
-  run_id: uuidSchema15,
+  token_id: uuidSchema17,
+  tenant_id: uuidSchema17,
+  run_id: uuidSchema17,
   scope: implementationBootstrapScopeSchema
 }).strict();
 
 // ../../packages/protocol/src/complete-seat-setup.ts
-var uuidSchema16 = external_exports.string().uuid();
+var uuidSchema18 = external_exports.string().uuid();
 var digestSchema = external_exports.string().regex(/^[a-f0-9]{64}$/);
 var proposalKeySchema = external_exports.string().trim().regex(/^[a-z][a-z0-9-]{1,79}$/);
 var sourceKeySchema = external_exports.string().regex(/^[a-z][a-z0-9-]{1,79}$/);
@@ -36807,7 +37037,7 @@ var safeSourceLabel = (max) => safeHumanLabel(max).refine(
   "Source labels cannot contain path separators."
 );
 var completeSeatRefSchema = external_exports.discriminatedUnion("kind", [
-  external_exports.object({ kind: external_exports.literal("existing"), seat_id: uuidSchema16 }).strict(),
+  external_exports.object({ kind: external_exports.literal("existing"), seat_id: uuidSchema18 }).strict(),
   external_exports.object({ kind: external_exports.literal("logical"), seat_key: proposalKeySchema }).strict()
 ]);
 var setupSourceUseSchema = external_exports.object({
@@ -36815,7 +37045,7 @@ var setupSourceUseSchema = external_exports.object({
 }).strict();
 var setupSourceRefSchema = external_exports.object({
   source_key: sourceKeySchema,
-  source_upload_id: uuidSchema16,
+  source_upload_id: uuidSchema18,
   title: safeSourceLabel(200),
   kind: external_exports.enum(["org_chart", "signal_export", "goal_export", "friction_export", "meeting_export", "other"]),
   sha256: digestSchema,
@@ -36823,7 +37053,7 @@ var setupSourceRefSchema = external_exports.object({
 }).strict();
 var completeSeatSkillRefSchema = external_exports.object({
   slug: skillSlugSchema,
-  skill_version_id: uuidSchema16,
+  skill_version_id: uuidSchema18,
   content_sha256: digestSchema
 }).strict();
 var timezoneSchema = external_exports.string().trim().min(1).max(100).superRefine((value, ctx) => {
@@ -36962,14 +37192,14 @@ var createCompleteSeatRequestSchema = external_exports.object({
   }
 });
 var createCompleteSeatOutputSchema = external_exports.object({
-  application_id: uuidSchema16,
+  application_id: uuidSchema18,
   receipt: external_exports.object({
     receipt_revision: external_exports.literal(1),
     receipt_digest: external_exports.string().regex(/^sha256:[a-f0-9]{64}$/),
-    seat_id: uuidSchema16,
-    charter_version_id: uuidSchema16,
-    agent_id: uuidSchema16.nullable(),
-    decision_id: uuidSchema16
+    seat_id: uuidSchema18,
+    charter_version_id: uuidSchema18,
+    agent_id: uuidSchema18.nullable(),
+    decision_id: uuidSchema18
   }).strict()
 }).strict();
 var completeSeatApprovalStaffingSchema = external_exports.discriminatedUnion("kind", [
@@ -36995,7 +37225,7 @@ var completeSeatApprovalProjectionSchema = external_exports.object({
     model_config: agentModelConfigSchema,
     skills: external_exports.array(external_exports.object({
       slug: skillSlugSchema,
-      skill_version_id: uuidSchema16,
+      skill_version_id: uuidSchema18,
       content_sha256: digestSchema,
       dependency_state: external_exports.enum(["ready", "warning", "blocked"])
     }).strict()),
@@ -37184,7 +37414,7 @@ var signalBindConfirmOutputSchema = external_exports.object({
 }).strict();
 
 // ../../packages/protocol/src/setup-application.ts
-var uuidSchema17 = external_exports.string().uuid();
+var uuidSchema19 = external_exports.string().uuid();
 var digestSchema2 = external_exports.string().regex(/^sha256:[0-9a-f]{64}$/);
 var bareDigestSchema = external_exports.string().regex(/^[0-9a-f]{64}$/);
 var receiptKeySchema = external_exports.string().regex(/^[a-z][a-z0-9_]{0,63}$/);
@@ -37226,7 +37456,7 @@ var onboardingSourceIngestInputSchema = external_exports.object({
   content_base64: external_exports.string().min(1).max(Math.ceil(ONBOARDING_SOURCE_MAX_BYTES * 4 / 3) + 4)
 }).strict();
 var onboardingSourceIngestOutputSchema = external_exports.object({
-  source_upload_id: uuidSchema17,
+  source_upload_id: uuidSchema19,
   descriptor: external_exports.object({
     kind: onboardingSourceKindSchema,
     title: external_exports.string().trim().min(1).max(200),
@@ -37732,7 +37962,7 @@ var setupApplicationSummarySchema = external_exports.object({
 }).strict();
 var createdIdsSchema = external_exports.partialRecord(
   setupReceiptFamilySchema,
-  external_exports.array(uuidSchema17).max(5e3)
+  external_exports.array(uuidSchema19).max(5e3)
 );
 var skippedSummarySchema = external_exports.object({
   family: setupReceiptFamilySchema,
@@ -37744,8 +37974,8 @@ var warningSchema = external_exports.object({
   count: external_exports.number().int().positive()
 }).strict();
 var setupAgentBindingSchema = external_exports.object({
-  agent_id: uuidSchema17,
-  seat_id: uuidSchema17,
+  agent_id: uuidSchema19,
+  seat_id: uuidSchema19,
   configuration_digest: digestSchema2
 }).strict();
 var setupAgentBindingsSchema = external_exports.array(setupAgentBindingSchema).max(100).superRefine((bindings, ctx) => {
@@ -37781,8 +38011,8 @@ var setupApplicationResultReceiptSchema = setupApplicationReceiptBodySchema.exte
   receipt_digest: digestSchema2
 }).strict();
 var setupActivationReceiptPayloadSchema = external_exports.object({
-  activation_confirmation_id: uuidSchema17,
-  activation_receipt_id: uuidSchema17,
+  activation_confirmation_id: uuidSchema19,
+  activation_receipt_id: uuidSchema19,
   activation_idempotency_key: boundedText(120),
   activation_input_digest: digestSchema2
 }).strict();
@@ -37800,7 +38030,7 @@ function digestCanonicalJson(value) {
   return `sha256:${createHash("sha256").update(canonicalJson(value)).digest("hex")}`;
 }
 var onboardingSetupOutputSchema = external_exports.object({
-  application_id: uuidSchema17,
+  application_id: uuidSchema19,
   root_foundation_bound: external_exports.literal(true),
   receipt: setupApplicationResultReceiptSchema
 }).strict();
@@ -37813,8 +38043,8 @@ var charterInputReachabilityWarningSchema = external_exports.object({
 var onboardingAgentLaneSchema = external_exports.enum(["cloud", "mcp_session", "runner"]);
 var onboardingRunnerCompatibilityBindingSchema = external_exports.object({
   seat_key: boundedText(120),
-  tenant_id: uuidSchema17,
-  seat_id: uuidSchema17.nullable(),
+  tenant_id: uuidSchema19,
+  seat_id: uuidSchema19.nullable(),
   charter_digest: digestSchema2,
   manifest_digest: digestSchema2,
   runtime: runnerSetupRuntimeSchema,
@@ -37836,7 +38066,7 @@ var onboardingRunnerCompatibilityBindingSchema = external_exports.object({
   effective_lane: onboardingAgentLaneSchema
 }).strict();
 var onboardingRunnerSetupFactsSchema = external_exports.object({
-  setup_id: uuidSchema17,
+  setup_id: uuidSchema19,
   selected_runtimes: runnerSetupSelectedRuntimesSchema,
   stage: runnerSetupStageSchema,
   status: runnerSetupStatusSchema,
@@ -37883,12 +38113,12 @@ var onboardingSetupApprovalProjectionSchema = external_exports.object({
   kind: external_exports.literal("onboarding_setup"),
   submitted_plan_digest: digestSchema2,
   plan_digest: digestSchema2,
-  owner_target_user_id: uuidSchema17,
-  implementation_run_id: uuidSchema17.nullable(),
+  owner_target_user_id: uuidSchema19,
+  implementation_run_id: uuidSchema19.nullable(),
   staging_state: external_exports.object({
-    root_seat_id: uuidSchema17,
-    compass_version_id: uuidSchema17.nullable(),
-    cycle_id: uuidSchema17.nullable(),
+    root_seat_id: uuidSchema19,
+    compass_version_id: uuidSchema19.nullable(),
+    cycle_id: uuidSchema19.nullable(),
     cycle_fingerprint: external_exports.string().max(500).nullable(),
     live_proof_digest: digestSchema2
   }).strict(),
@@ -38081,7 +38311,7 @@ var onboardingSetupPlanPreflightSchema = external_exports.object({
 });
 
 // ../../packages/protocol/src/onboarding-rehearsal.ts
-var uuidSchema18 = external_exports.string().uuid();
+var uuidSchema20 = external_exports.string().uuid();
 var digestSchema3 = external_exports.string().regex(/^sha256:[0-9a-f]{64}$/);
 var timestampSchema = external_exports.string().datetime({ offset: true });
 var boundedText2 = (max) => external_exports.string().trim().min(1).max(max);
@@ -38118,13 +38348,13 @@ var onboardingRehearseTypedErrorSchema = external_exports.object({
 }).strict();
 var onboardingRehearseInputSchema = external_exports.object({
   idempotency_key: boundedText2(120),
-  setup_application_id: uuidSchema18,
+  setup_application_id: uuidSchema20,
   expected_input_digest: digestSchema3,
   expected_receipt_revision: external_exports.number().int().positive()
 }).strict();
 var rehearsalAgentConfigurationSchema = external_exports.object({
-  agent_id: uuidSchema18,
-  seat_id: uuidSchema18,
+  agent_id: uuidSchema20,
+  seat_id: uuidSchema20,
   configuration_digest: digestSchema3
 }).strict();
 function strictlySortedUniqueAgents(values, ctx) {
@@ -38152,13 +38382,13 @@ function strictlySortedUniqueAgents(values, ctx) {
 }
 var rehearsalAgentConfigurationsSchema = external_exports.array(rehearsalAgentConfigurationSchema).min(1).max(REHEARSAL_MAX_AGENTS).superRefine(strictlySortedUniqueAgents);
 var onboardingRehearsalCanonicalInputSchema = onboardingRehearseInputSchema.extend({
-  implementation_run_id: uuidSchema18.nullable(),
+  implementation_run_id: uuidSchema20.nullable(),
   agents: rehearsalAgentConfigurationsSchema
 }).strict();
 var rehearsalBatchHeaderSchema = external_exports.object({
-  batch_id: uuidSchema18,
-  setup_application_id: uuidSchema18,
-  implementation_run_id: uuidSchema18.nullable(),
+  batch_id: uuidSchema20,
+  setup_application_id: uuidSchema20,
+  implementation_run_id: uuidSchema20.nullable(),
   idempotency_key: boundedText2(120),
   rehearsal_input_digest: digestSchema3,
   expected_input_digest: digestSchema3,
@@ -38204,10 +38434,10 @@ var rehearsalEvidenceSchema = external_exports.object({
   }
 });
 var checkpointBaseSchema = external_exports.object({
-  checkpoint_id: uuidSchema18,
-  batch_id: uuidSchema18,
-  agent_id: uuidSchema18,
-  seat_id: uuidSchema18,
+  checkpoint_id: uuidSchema20,
+  batch_id: uuidSchema20,
+  agent_id: uuidSchema20,
+  seat_id: uuidSchema20,
   runtime_run_key: boundedText2(240),
   configuration_digest: digestSchema3
 });
@@ -38222,7 +38452,7 @@ var rehearsalCheckpointSchema = external_exports.discriminatedUnion("status", [
   }).strict(),
   checkpointBaseSchema.extend({
     status: external_exports.literal("running"),
-    rehearsal_run_id: uuidSchema18.nullable(),
+    rehearsal_run_id: uuidSchema20.nullable(),
     claimed_at: timestampSchema,
     lease_expires_at: timestampSchema,
     started_at: timestampSchema,
@@ -38230,7 +38460,7 @@ var rehearsalCheckpointSchema = external_exports.discriminatedUnion("status", [
   }).strict(),
   checkpointBaseSchema.extend({
     status: rehearsalTerminalStatusSchema,
-    rehearsal_run_id: uuidSchema18,
+    rehearsal_run_id: uuidSchema20,
     claimed_at: timestampSchema,
     lease_expires_at: timestampSchema,
     started_at: timestampSchema,
@@ -38238,13 +38468,13 @@ var rehearsalCheckpointSchema = external_exports.discriminatedUnion("status", [
   }).strict()
 ]);
 var rehearsalAgentReceiptSchema = external_exports.object({
-  receipt_id: uuidSchema18,
-  batch_id: uuidSchema18,
-  setup_application_id: uuidSchema18,
-  implementation_run_id: uuidSchema18.nullable(),
-  agent_id: uuidSchema18,
-  seat_id: uuidSchema18,
-  rehearsal_run_id: uuidSchema18,
+  receipt_id: uuidSchema20,
+  batch_id: uuidSchema20,
+  setup_application_id: uuidSchema20,
+  implementation_run_id: uuidSchema20.nullable(),
+  agent_id: uuidSchema20,
+  seat_id: uuidSchema20,
+  rehearsal_run_id: uuidSchema20,
   caller_idempotency_key: boundedText2(120),
   rehearsal_input_digest: digestSchema3,
   expected_input_digest: digestSchema3,
@@ -38257,10 +38487,10 @@ var rehearsalAgentReceiptSchema = external_exports.object({
 }).strict();
 var rehearsalAgentReceiptsSchema = external_exports.array(rehearsalAgentReceiptSchema).min(1).max(REHEARSAL_MAX_AGENTS).superRefine(strictlySortedUniqueAgents);
 var rehearsalTerminalBatchReceiptSchema = external_exports.object({
-  receipt_id: uuidSchema18,
-  batch_id: uuidSchema18,
-  setup_application_id: uuidSchema18,
-  implementation_run_id: uuidSchema18.nullable(),
+  receipt_id: uuidSchema20,
+  batch_id: uuidSchema20,
+  setup_application_id: uuidSchema20,
+  implementation_run_id: uuidSchema20.nullable(),
   expected_input_digest: digestSchema3,
   expected_receipt_revision: external_exports.number().int().positive(),
   rehearsal_input_digest: digestSchema3,
@@ -38338,15 +38568,15 @@ var onboardingRehearseOutputSchema = external_exports.union([
 ]);
 
 // ../../packages/protocol/src/onboarding-activation.ts
-var uuidSchema19 = external_exports.string().uuid();
+var uuidSchema21 = external_exports.string().uuid();
 var digestSchema4 = external_exports.string().regex(/^sha256:[0-9a-f]{64}$/);
 var boundedText3 = (max) => external_exports.string().trim().min(1).max(max);
 var rehearsalRunEntrySchema = external_exports.object({
-  agent_id: uuidSchema19,
-  rehearsal_run_id: uuidSchema19
+  agent_id: uuidSchema21,
+  rehearsal_run_id: uuidSchema21
 }).strict();
 var configurationDigestEntrySchema = external_exports.object({
-  agent_id: uuidSchema19,
+  agent_id: uuidSchema21,
   configuration_digest: digestSchema4
 }).strict();
 function uniqueAgentEntries(values, ctx) {
@@ -38366,26 +38596,26 @@ var onboardingActivationRehearsalRunsSchema = external_exports.array(rehearsalRu
 var onboardingActivationConfigurationDigestsSchema = external_exports.array(configurationDigestEntrySchema).min(1).max(100).superRefine(uniqueAgentEntries);
 var onboardingActivateInputSchema = external_exports.object({
   idempotency_key: boundedText3(120),
-  setup_application_id: uuidSchema19,
+  setup_application_id: uuidSchema21,
   expected_input_digest: digestSchema4,
   expected_receipt_revision: external_exports.number().int().positive(),
-  terminal_rehearsal_batch_receipt_id: uuidSchema19,
+  terminal_rehearsal_batch_receipt_id: uuidSchema21,
   rehearsal_runs: onboardingActivationRehearsalRunsSchema,
   configuration_digests: onboardingActivationConfigurationDigestsSchema
 }).strict();
 var onboardingActivationCredentialGrantSchema = external_exports.object({
   capabilityId: boundedText3(200),
-  integrationId: uuidSchema19.nullable(),
+  integrationId: uuidSchema21.nullable(),
   requestedAccessLevel: capabilityGrantAccessLevelSchema,
-  actingSeatId: uuidSchema19.optional(),
-  effectiveCharterVersionId: uuidSchema19.optional()
+  actingSeatId: uuidSchema21.optional(),
+  effectiveCharterVersionId: uuidSchema21.optional()
 }).strict();
 var onboardingActivationCredentialGrantExemptionSchema = external_exports.object({
   capabilityId: capabilityIdSchema,
-  integrationId: uuidSchema19.nullable(),
+  integrationId: uuidSchema21.nullable(),
   requestedAccessLevel: capabilityGrantAccessLevelSchema,
-  actingSeatId: uuidSchema19.optional(),
-  effectiveCharterVersionId: uuidSchema19.optional()
+  actingSeatId: uuidSchema21.optional(),
+  effectiveCharterVersionId: uuidSchema21.optional()
 }).strict();
 var effectivePermissionManifestRuleSchema = external_exports.object({
   name: boundedText3(200),
@@ -38398,16 +38628,16 @@ var effectivePermissionManifestRuleSchema = external_exports.object({
   credentialGrant: onboardingActivationCredentialGrantSchema.optional()
 }).strict();
 var onboardingActivationAgentProposalSchema = external_exports.object({
-  agent_id: uuidSchema19,
-  seat_id: uuidSchema19,
-  charter_version_id: uuidSchema19,
+  agent_id: uuidSchema21,
+  seat_id: uuidSchema21,
+  charter_version_id: uuidSchema21,
   manifest: external_exports.object({
     digest: digestSchema4,
-    evidence_receipt_id: uuidSchema19,
+    evidence_receipt_id: uuidSchema21,
     evidence_revision: external_exports.number().int().positive()
   }).strict(),
   configuration_digest: digestSchema4,
-  rehearsal_run_id: uuidSchema19,
+  rehearsal_run_id: uuidSchema21,
   effective_lane: external_exports.enum(["cloud", "mcp_session", "runner"]),
   effective_model: external_exports.string().trim().min(1).max(200).nullable(),
   decision_authority: charterDecisionAuthoritySchema,
@@ -38428,11 +38658,11 @@ var onboardingActivationAgentProposalSchema = external_exports.object({
 }).strict();
 var onboardingActivationApprovalProjectionSchema = external_exports.object({
   kind: external_exports.literal("onboarding_activation"),
-  setup_application_id: uuidSchema19,
-  implementation_run_id: uuidSchema19.nullable(),
+  setup_application_id: uuidSchema21,
+  implementation_run_id: uuidSchema21.nullable(),
   expected_input_digest: digestSchema4,
   expected_receipt_revision: external_exports.number().int().positive(),
-  terminal_rehearsal_batch_receipt_id: uuidSchema19,
+  terminal_rehearsal_batch_receipt_id: uuidSchema21,
   activation_input_digest: digestSchema4,
   agents: external_exports.array(onboardingActivationAgentProposalSchema).min(1).max(100),
   checked_count: external_exports.number().int().positive(),
@@ -38440,8 +38670,8 @@ var onboardingActivationApprovalProjectionSchema = external_exports.object({
   onboarding_completion_effect: external_exports.literal(true)
 }).strict();
 var onboardingActivationCommittedAgentSchema = external_exports.object({
-  agent_id: uuidSchema19,
-  seat_id: uuidSchema19,
+  agent_id: uuidSchema21,
+  seat_id: uuidSchema21,
   status: external_exports.literal("live"),
   schedule_armed: external_exports.boolean()
 }).strict();
@@ -38490,7 +38720,7 @@ var onboardingActivationAicosProjectionSchema = external_exports.object({
   }
 });
 var onboardingActivationCommitSnapshotSchema = external_exports.object({
-  terminal_rehearsal_batch_receipt_id: uuidSchema19,
+  terminal_rehearsal_batch_receipt_id: uuidSchema21,
   agents: onboardingActivationCommittedAgentsSchema,
   onboarding_completed_at: external_exports.string().datetime({ offset: true }),
   // Optional: the table is live and pre-DER-3359 rows carry no `aicos` key.
@@ -38510,26 +38740,26 @@ var setupActivationConsumptionRejectionSchema = external_exports.enum([
   "brain_mismatch"
 ]);
 var onboardingActivationPersistenceInputSchema = external_exports.object({
-  activation_confirmation_id: uuidSchema19,
+  activation_confirmation_id: uuidSchema21,
   activation_idempotency_key: boundedText3(120),
   activation_input_digest: digestSchema4,
   receipt_revision: external_exports.number().int().positive(),
   activation_snapshot: onboardingActivationCommitSnapshotSchema
 }).strict();
 var onboardingActivationReceiptSchema = external_exports.object({
-  activation_receipt_id: uuidSchema19,
-  activation_confirmation_id: uuidSchema19,
-  setup_application_id: uuidSchema19,
-  implementation_run_id: uuidSchema19.nullable(),
+  activation_receipt_id: uuidSchema21,
+  activation_confirmation_id: uuidSchema21,
+  setup_application_id: uuidSchema21,
+  implementation_run_id: uuidSchema21.nullable(),
   activation_input_digest: digestSchema4,
   setup_receipt_revision: external_exports.number().int().positive(),
-  terminal_rehearsal_batch_receipt_id: uuidSchema19,
+  terminal_rehearsal_batch_receipt_id: uuidSchema21,
   agents: external_exports.array(onboardingActivationCommittedAgentSchema).min(1).max(100),
   onboarding_completed_at: external_exports.string().datetime({ offset: true }),
   activated_at: external_exports.string().datetime({ offset: true })
 }).strict();
 var onboardingActivateOutputSchema = external_exports.object({
-  application_id: uuidSchema19,
+  application_id: uuidSchema21,
   status: external_exports.literal("activated"),
   receipt: onboardingActivationReceiptSchema
 }).strict();
@@ -38632,7 +38862,7 @@ var invitePurposeSchema = external_exports.enum(["ordinary", "cohort"]);
 
 // ../../packages/protocol/src/mcp-onboarding.ts
 var MCP_TOKEN_ABSOLUTE_MAX_EXPIRY_MS = (MCP_TOKEN_NO_EXPIRY_SENTINEL_DAYS + 1) * 24 * 60 * 60 * 1e3;
-var uuidSchema20 = external_exports.string().uuid();
+var uuidSchema22 = external_exports.string().uuid();
 var isoDateTime7 = external_exports.string().datetime({ offset: true });
 var onboardingStatusInputSchema = external_exports.object({}).strict();
 var onboardingStatusOutputSchema = external_exports.object({
@@ -38676,7 +38906,7 @@ var onboardingAttachReferenceInputSchema = external_exports.object({
   source: external_exports.string().trim().min(1).max(500).optional()
 }).strict();
 var onboardingAttachReferenceOutputSchema = external_exports.object({
-  document_id: uuidSchema20,
+  document_id: uuidSchema22,
   storage_ref: external_exports.string().min(1),
   kind: external_exports.enum(["org_chart", "role_doc", "plan", "financial", "other"]),
   title: external_exports.string().min(1).nullable()
@@ -38706,7 +38936,7 @@ var onboardingCreateInviteInputSchema = external_exports.object({
   flags: ordinaryInviteFlagsSchema.default({})
 }).strict();
 var onboardingCreateInviteOutputSchema = external_exports.object({
-  invite_id: uuidSchema20,
+  invite_id: uuidSchema22,
   email: external_exports.string().email(),
   role: external_exports.enum(["owner", "admin", "steward", "member"]),
   token: external_exports.string().min(1)
@@ -38719,19 +38949,19 @@ var tenantAnthropicKeySaveOutputSchema = external_exports.object({
 }).strict();
 var tenantAnthropicKeyDisableInputSchema = external_exports.object({}).strict();
 var tenantAnthropicKeyDisableOutputSchema = external_exports.object({
-  tenant_id: uuidSchema20,
-  credential_id: uuidSchema20.nullable(),
+  tenant_id: uuidSchema22,
+  credential_id: uuidSchema22.nullable(),
   disabled: external_exports.boolean(),
   already_disabled: external_exports.boolean(),
   managed_fallback_ready: external_exports.boolean()
 }).strict();
 var seatCreateInputSchema = external_exports.object({
   name: external_exports.string().trim().min(1).max(120),
-  parent_seat_id: uuidSchema20.nullable().optional(),
+  parent_seat_id: uuidSchema22.nullable().optional(),
   seat_type: external_exports.enum(["human", "agent", "hybrid"]).default("human")
 }).strict();
 var seatCreateOutputSchema = withCommandEffect({
-  seat_id: uuidSchema20,
+  seat_id: uuidSchema22,
   // Mirrors the literal `createSeat` writes at insert time. Not sourced from a
   // read-back: `createSeat` returns only the new id, and widening its
   // signature to return the row is out of scope for this issue (schema +
@@ -38742,29 +38972,29 @@ var seatCreateOutputSchema = withCommandEffect({
   status: external_exports.enum(["draft", "active", "vacant", "decommissioned"])
 });
 var seatRenameInputSchema = external_exports.object({
-  seat_id: uuidSchema20,
+  seat_id: uuidSchema22,
   name: external_exports.string().trim().min(1).max(120)
 }).strict();
 var seatReparentInputSchema = external_exports.object({
-  seat_id: uuidSchema20,
-  new_parent_seat_id: uuidSchema20.nullable()
+  seat_id: uuidSchema22,
+  new_parent_seat_id: uuidSchema22.nullable()
 }).strict();
 var seatSetTypeInputSchema = external_exports.object({
-  seat_id: uuidSchema20,
+  seat_id: uuidSchema22,
   seat_type: external_exports.enum(["human", "agent", "hybrid"])
 }).strict();
 var seatDecommissionInputSchema = external_exports.object({
-  seat_id: uuidSchema20
+  seat_id: uuidSchema22
 }).strict();
 var seatMutationOutputSchema = external_exports.object({
-  seat_id: uuidSchema20
+  seat_id: uuidSchema22
 }).strict();
 var seatDecommissionPreviewOutputSchema = external_exports.object({
-  seat_id: uuidSchema20,
+  seat_id: uuidSchema22,
   seat_name: external_exports.string(),
   previous_status: external_exports.enum(["draft", "active", "vacant", "decommissioned"]),
   active_occupancy_count: external_exports.number().int().nonnegative(),
-  active_agent_ids: external_exports.array(uuidSchema20),
+  active_agent_ids: external_exports.array(uuidSchema22),
   active_charter_count: external_exports.number().int().nonnegative(),
   active_mcp_token_count: external_exports.number().int().nonnegative(),
   active_credential_count: external_exports.number().int().nonnegative(),
@@ -38774,16 +39004,16 @@ var seatDecommissionPreviewOutputSchema = external_exports.object({
   effects: external_exports.array(external_exports.string())
 }).strict();
 var charterDraftInputSchema = external_exports.object({
-  seat_id: uuidSchema20
+  seat_id: uuidSchema22
 }).strict();
 var charterDraftOutputSchema = external_exports.object({
-  charter_version_id: uuidSchema20,
-  seat_id: uuidSchema20,
+  charter_version_id: uuidSchema22,
+  seat_id: uuidSchema22,
   edit_revision: external_exports.number().int().min(1).optional(),
   doc: external_exports.unknown()
 }).strict();
 var charterUpdateDraftInputSchema = external_exports.object({
-  charter_version_id: uuidSchema20,
+  charter_version_id: uuidSchema22,
   expected_edit_revision: external_exports.number().int().min(1).optional(),
   // DER-785 (Part G): the full Charter document contract (was `z.unknown()`).
   // The DB layer already validated this with `charterSchema.parse`; advertising
@@ -38792,18 +39022,18 @@ var charterUpdateDraftInputSchema = external_exports.object({
   doc: charterDocSchema
 }).strict();
 var charterSetInputSchema = external_exports.object({
-  seat_id: uuidSchema20,
+  seat_id: uuidSchema22,
   doc: charterDocSchema,
   approve: external_exports.boolean().default(false)
 }).strict();
 var charterMutationOutputSchema = external_exports.object({
-  charter_version_id: uuidSchema20,
-  seat_id: uuidSchema20,
+  charter_version_id: uuidSchema22,
+  seat_id: uuidSchema22,
   edit_revision: external_exports.number().int().min(1).optional()
 }).strict();
 var charterApproveInputSchema = external_exports.object({
-  seat_id: uuidSchema20.optional(),
-  charter_version_id: uuidSchema20.optional(),
+  seat_id: uuidSchema22.optional(),
+  charter_version_id: uuidSchema22.optional(),
   // DER-785 (Part G): a partial of the Charter doc shape (was an untyped record).
   // These fields are shallow-merged onto the existing draft, then the merged doc
   // is re-validated against the full schema at persist time.
@@ -38819,12 +39049,12 @@ var charterSignalResolutionSchema = external_exports.discriminatedUnion("action"
   external_exports.object({
     declaration_name: charterSignalDeclarationNameSchema,
     action: external_exports.literal("adopt_existing"),
-    measurable_id: uuidSchema20
+    measurable_id: uuidSchema22
   }).strict(),
   external_exports.object({
     declaration_name: charterSignalDeclarationNameSchema,
     action: external_exports.literal("move_existing"),
-    measurable_id: uuidSchema20
+    measurable_id: uuidSchema22
   }).strict(),
   external_exports.object({
     declaration_name: charterSignalDeclarationNameSchema,
@@ -38832,7 +39062,7 @@ var charterSignalResolutionSchema = external_exports.discriminatedUnion("action"
   }).strict()
 ]);
 var charterReconcileSignalsInputSchema = external_exports.object({
-  charter_version_id: uuidSchema20,
+  charter_version_id: uuidSchema22,
   // The stale-draft guard: `charter_versions.edit_revision` starts at 1, so 0 is
   // never a real revision.
   expected_edit_revision: external_exports.number().int().min(1),
@@ -38840,16 +39070,16 @@ var charterReconcileSignalsInputSchema = external_exports.object({
   apply_seat_type: external_exports.boolean().default(false)
 }).strict();
 var charterSignalGoalBindingSchema = external_exports.object({
-  goal_id: uuidSchema20,
+  goal_id: uuidSchema22,
   goal_title: external_exports.string(),
   // Null for a company objective, which owns no Seat. A `drives_status` binding on a
   // seatless goal can never match a destination Seat, so movement fails closed.
-  goal_seat_id: uuidSchema20.nullable(),
+  goal_seat_id: uuidSchema22.nullable(),
   role: external_exports.enum(["drives_status", "informs"])
 }).strict();
 var charterSignalCandidateSchema = external_exports.object({
-  measurable_id: uuidSchema20,
-  owner_seat_id: uuidSchema20,
+  measurable_id: uuidSchema22,
+  owner_seat_id: uuidSchema22,
   owner_seat_name: external_exports.string(),
   stored_source: external_exports.enum(["human", "agent", "integration"]),
   reading_count: external_exports.number().int().min(0),
@@ -38869,7 +39099,7 @@ var charterSignalCandidateSchema = external_exports.object({
 var charterSignalReconciliationItemSchema = external_exports.object({
   declaration_name: external_exports.string(),
   status: external_exports.enum(["linked", "candidate", "ambiguous", "missing"]),
-  linked_measurable_id: uuidSchema20.nullable(),
+  linked_measurable_id: uuidSchema22.nullable(),
   candidates: external_exports.array(charterSignalCandidateSchema),
   // A DERIVED suggestion, never an applied one: `null` whenever a human must choose
   // (ambiguous), whenever nothing matches (missing), or when the declaration is already
@@ -38880,11 +39110,11 @@ var charterSignalReconciliationItemSchema = external_exports.object({
   warnings: external_exports.array(external_exports.string())
 }).strict();
 var charterPreviewSignalReconciliationInputSchema = external_exports.object({
-  charter_version_id: uuidSchema20
+  charter_version_id: uuidSchema22
 }).strict();
 var charterPreviewSignalReconciliationOutputSchema = external_exports.object({
-  charter_version_id: uuidSchema20,
-  seat_id: uuidSchema20,
+  charter_version_id: uuidSchema22,
+  seat_id: uuidSchema22,
   // Pass this back as `expected_edit_revision` when reconciling, so a draft edited after
   // the preview cannot be reconciled against a stale reading of it.
   edit_revision: external_exports.number().int().min(1),
@@ -38895,20 +39125,20 @@ var charterDraftSkipReasonSchema = external_exports.enum(["seat_not_active", "ch
 var charterDraftAllOutputSchema = withCommandEffect({
   drafted: external_exports.number().int().nonnegative(),
   skipped: external_exports.number().int().nonnegative(),
-  draft_ids: external_exports.array(uuidSchema20),
+  draft_ids: external_exports.array(uuidSchema22),
   skipped_seats: external_exports.array(external_exports.object({
-    seat_id: uuidSchema20,
+    seat_id: uuidSchema22,
     reason: charterDraftSkipReasonSchema
   }).strict())
 });
 var charterSkipInputSchema = external_exports.object({
-  charter_version_id: uuidSchema20
+  charter_version_id: uuidSchema22
 }).strict();
 var charterApplySeatTypeRecommendationInputSchema = external_exports.object({
-  charter_version_id: uuidSchema20
+  charter_version_id: uuidSchema22
 }).strict();
 var charterSignManifestInputSchema = external_exports.object({
-  charter_version_id: uuidSchema20
+  charter_version_id: uuidSchema22
 }).strict();
 var pendingConfirmationSchema = external_exports.object({
   confirmationId: external_exports.string().min(1),
@@ -38962,7 +39192,7 @@ var confirmationListInputSchema = external_exports.object({
   limit: external_exports.number().int().min(1).max(200).optional()
 }).strict();
 var confirmationSummarySchema = external_exports.object({
-  id: uuidSchema20,
+  id: uuidSchema22,
   command_id: external_exports.string(),
   redacted_args: external_exports.unknown(),
   // DER-2161 kickback round 1, finding (6): tracks `PendingConfirmationListRow`'s
@@ -38972,7 +39202,7 @@ var confirmationSummarySchema = external_exports.object({
   actor_kind: external_exports.enum(["user", "agent", "system", "operator"]),
   source: external_exports.string(),
   scope_kind: external_exports.enum(["tenant_admin", "tenant", "seat"]),
-  seat_id: uuidSchema20.nullable(),
+  seat_id: uuidSchema22.nullable(),
   seat_name: external_exports.string().nullable(),
   seat_type: external_exports.enum(["human", "agent", "hybrid"]).nullable(),
   risk_level: external_exports.enum(["normal", "sensitive", "dangerous"]),
@@ -39004,37 +39234,37 @@ var confirmationListOutputSchema = external_exports.object({
   confirmations: external_exports.array(confirmationSummarySchema)
 }).strict();
 var confirmationDismissInputSchema = external_exports.object({
-  confirmation_id: uuidSchema20
+  confirmation_id: uuidSchema22
 }).strict();
 var confirmationDismissOutputSchema = external_exports.object({
   dismissed: external_exports.object({
-    id: uuidSchema20,
+    id: uuidSchema22,
     status: external_exports.literal("dismissed")
   }).strict()
 }).strict();
 var confirmationDismissStaleInputSchema = external_exports.object({}).strict();
 var confirmationDismissStaleOutputSchema = external_exports.object({
   dismissed_count: external_exports.number().int().min(0),
-  dismissed_ids: external_exports.array(uuidSchema20)
+  dismissed_ids: external_exports.array(uuidSchema22)
 }).strict();
 var credentialIngressInputSchema = external_exports.object({
-  seat_id: uuidSchema20.optional(),
+  seat_id: uuidSchema22.optional(),
   provider: external_exports.string().trim().min(1),
   scope_description: external_exports.string().trim().min(1),
   secret_name: external_exports.string().trim().min(1),
   secret: external_exports.string().trim().min(1)
 }).strict();
 var credentialIngressOutputSchema = external_exports.object({
-  credential_id: uuidSchema20,
+  credential_id: uuidSchema22,
   provider: external_exports.string().min(1),
-  seat_id: uuidSchema20.nullable()
+  seat_id: uuidSchema22.nullable()
 }).strict();
 var credentialListInputSchema = external_exports.object({}).strict();
 var credentialSummarySchema = external_exports.object({
-  credential_id: uuidSchema20,
+  credential_id: uuidSchema22,
   provider: external_exports.string(),
   scope_description: external_exports.string(),
-  seat_id: uuidSchema20.nullable(),
+  seat_id: uuidSchema22.nullable(),
   status: external_exports.string(),
   created_at: external_exports.string(),
   rotated_at: external_exports.string(),
@@ -39044,16 +39274,16 @@ var credentialListOutputSchema = external_exports.object({
   credentials: external_exports.array(credentialSummarySchema)
 }).strict();
 var agentGoLiveInputSchema = external_exports.object({
-  seat_id: uuidSchema20,
-  charter_version_id: uuidSchema20
+  seat_id: uuidSchema22,
+  charter_version_id: uuidSchema22
 }).strict();
 var agentGoLiveOutputSchema = external_exports.object({
-  seat_id: uuidSchema20,
-  charter_version_id: uuidSchema20,
+  seat_id: uuidSchema22,
+  charter_version_id: uuidSchema22,
   status: external_exports.literal("live")
 }).strict();
 var compassSetInputSchema = external_exports.object({
-  draft_id: uuidSchema20.optional(),
+  draft_id: uuidSchema22.optional(),
   doc: compassDraftSchema.optional(),
   approve: external_exports.boolean().default(false)
 }).strict().refine((input) => Boolean(input.draft_id) !== Boolean(input.doc), {
@@ -39061,7 +39291,7 @@ var compassSetInputSchema = external_exports.object({
   path: ["draft_id"]
 });
 var compassMutationOutputSchema = external_exports.object({
-  compass_version_id: uuidSchema20,
+  compass_version_id: uuidSchema22,
   status: external_exports.enum(["draft", "active", "superseded"]),
   version: external_exports.number().int().nonnegative()
 }).strict();
@@ -39070,42 +39300,42 @@ var compassDraftInputSchema = external_exports.object({
   doc: compassDraftSchema
 }).strict();
 var compassUpdateDraftInputSchema = external_exports.object({
-  draft_id: uuidSchema20,
+  draft_id: uuidSchema22,
   doc: compassDraftSchema
 }).strict();
 var compassApproveVersionInputSchema = external_exports.object({
-  draft_id: uuidSchema20
+  draft_id: uuidSchema22
 }).strict();
 var compassRejectDraftInputSchema = external_exports.object({
-  draft_id: uuidSchema20
+  draft_id: uuidSchema22
 }).strict();
 var compassAnswerGapInputSchema = external_exports.object({
   gap_id: external_exports.string().min(1),
   answer: external_exports.string().trim().min(1)
 }).strict();
 var seatStaffInputSchema = external_exports.object({
-  seat_id: uuidSchema20,
+  seat_id: uuidSchema22,
   occupant: external_exports.discriminatedUnion("type", [
     external_exports.object({ type: external_exports.literal("vacant") }).strict(),
-    external_exports.object({ type: external_exports.literal("user"), user_id: uuidSchema20 }).strict(),
-    external_exports.object({ type: external_exports.literal("agent"), agent_id: uuidSchema20 }).strict()
+    external_exports.object({ type: external_exports.literal("user"), user_id: uuidSchema22 }).strict(),
+    external_exports.object({ type: external_exports.literal("agent"), agent_id: uuidSchema22 }).strict()
   ])
 }).strict();
 var staffingMutationOutputSchema = external_exports.object({
-  seat_id: uuidSchema20,
+  seat_id: uuidSchema22,
   staffed: external_exports.enum(["vacant", "user", "agent"])
 }).strict();
 var staffingAssignUserInputSchema = external_exports.object({
-  seat_id: uuidSchema20,
-  user_id: uuidSchema20
+  seat_id: uuidSchema22,
+  user_id: uuidSchema22
 }).strict();
 var staffingAssignAgentDryRunInputSchema = external_exports.object({
-  seat_id: uuidSchema20,
-  agent_id: uuidSchema20
+  seat_id: uuidSchema22,
+  agent_id: uuidSchema22
 }).strict();
 var mcpTokenCreateInputSchema = external_exports.object({
   scope: external_exports.enum(["tenant_admin", "seat"]),
-  seat_id: uuidSchema20.optional(),
+  seat_id: uuidSchema22.optional(),
   // DER-830: explicit absolute expiry (kept for back-compat / direct callers).
   // When omitted OR null, the DB default (now() + 90 days) applies — `null` is an
   // accepted "no explicit expiry" signal (existing UI/MCP callers pass it), so it
@@ -39149,17 +39379,17 @@ var mcpTokenCreateInputSchema = external_exports.object({
   }
 });
 var mcpTokenCreateOutputSchema = external_exports.object({
-  token_id: uuidSchema20,
+  token_id: uuidSchema22,
   token: external_exports.string().min(1),
   scope: external_exports.enum(["tenant_admin", "seat"]),
-  seat_id: uuidSchema20.nullable()
+  seat_id: uuidSchema22.nullable()
 }).strict();
 var mcpTokenRevokeInputSchema = external_exports.object({
-  token_id: uuidSchema20,
-  seat_id: uuidSchema20.optional()
+  token_id: uuidSchema22,
+  seat_id: uuidSchema22.optional()
 }).strict();
 var mcpTokenRevokeOutputSchema = external_exports.object({
-  token_id: uuidSchema20,
+  token_id: uuidSchema22,
   revoked: external_exports.boolean()
 }).strict();
 
@@ -39172,7 +39402,7 @@ var markNotificationsReadRequestSchema = external_exports.object({
 });
 
 // ../../packages/protocol/src/product-analytics.ts
-var uuidSchema21 = external_exports.string().uuid();
+var uuidSchema23 = external_exports.string().uuid();
 var opaqueRequestIdSchema = external_exports.string().trim().min(1).max(240);
 var safeNameSchema = external_exports.string().trim().min(1).max(120).regex(/^[a-z][a-z0-9._:-]*$/);
 var safeSurfaceSchema = external_exports.string().trim().min(1).max(80).regex(/^[a-z][a-z0-9_-]*$/);
@@ -39266,8 +39496,8 @@ var recommendationOutcomeStatusSchema = external_exports.enum([
 ]);
 var durationMsSchema = external_exports.number().int().nonnegative().max(24 * 60 * 60 * 1e3).optional();
 var productEventInputSchema = external_exports.object({
-  tenant_id: uuidSchema21,
-  user_id: uuidSchema21.optional(),
+  tenant_id: uuidSchema23,
+  user_id: uuidSchema23.optional(),
   source: analyticsSourceSchema,
   event_name: safeNameSchema,
   route_template: routeTemplateSchema.optional(),
@@ -39276,8 +39506,8 @@ var productEventInputSchema = external_exports.object({
   occurred_at: external_exports.string().datetime({ offset: true }).optional()
 }).strict();
 var pageViewInputSchema = external_exports.object({
-  tenant_id: uuidSchema21,
-  user_id: uuidSchema21.optional(),
+  tenant_id: uuidSchema23,
+  user_id: uuidSchema23.optional(),
   route_template: routeTemplateSchema,
   referrer_route_template: routeTemplateSchema.optional(),
   surface: safeSurfaceSchema.default("web"),
@@ -39286,12 +39516,12 @@ var pageViewInputSchema = external_exports.object({
   occurred_at: external_exports.string().datetime({ offset: true }).optional()
 }).strict();
 var commandInvocationInputSchema = external_exports.object({
-  tenant_id: uuidSchema21,
-  user_id: uuidSchema21.optional(),
-  seat_id: uuidSchema21.optional(),
-  run_id: uuidSchema21.optional(),
-  agent_turn_execution_id: uuidSchema21.optional(),
-  session_id: uuidSchema21.optional(),
+  tenant_id: uuidSchema23,
+  user_id: uuidSchema23.optional(),
+  seat_id: uuidSchema23.optional(),
+  run_id: uuidSchema23.optional(),
+  agent_turn_execution_id: uuidSchema23.optional(),
+  session_id: uuidSchema23.optional(),
   command_id: safeNameSchema,
   source: analyticsSourceSchema,
   // DER-2161 kickback round 1, finding (6): tracks `command_invocations.actor_kind`
@@ -39305,7 +39535,7 @@ var commandInvocationInputSchema = external_exports.object({
   // `packages/commands/src/context.ts`'s operator context builder now sets
   // `initiatorKind: "operator"` instead of coercing to "agent".
   initiator_kind: external_exports.enum(["user", "agent", "system", "operator"]).optional(),
-  initiator_user_id: uuidSchema21.nullable().optional(),
+  initiator_user_id: uuidSchema23.nullable().optional(),
   scope_kind: external_exports.enum(["tenant_admin", "tenant", "seat"]),
   status: commandInvocationStatusSchema,
   guard_result: external_exports.enum(["allowed", "denied_manifest", "denied_budget", "escalated", "denied_tenant_policy"]).optional(),
@@ -39324,8 +39554,8 @@ var commandInvocationInputSchema = external_exports.object({
   }
 });
 var onboardingMilestoneInputSchema = external_exports.object({
-  tenant_id: uuidSchema21,
-  user_id: uuidSchema21.optional(),
+  tenant_id: uuidSchema23,
+  user_id: uuidSchema23.optional(),
   milestone: safeNameSchema,
   status: analyticsOutcomeStatusSchema,
   step_index: external_exports.number().int().nonnegative().max(100).optional(),
@@ -39334,19 +39564,19 @@ var onboardingMilestoneInputSchema = external_exports.object({
   occurred_at: external_exports.string().datetime({ offset: true }).optional()
 }).strict();
 var recommendationEventInputSchema = external_exports.object({
-  tenant_id: uuidSchema21,
-  user_id: uuidSchema21.optional(),
+  tenant_id: uuidSchema23,
+  user_id: uuidSchema23.optional(),
   recommendation_type: safeNameSchema,
   source_surface: safeSurfaceSchema,
   status: recommendationOutcomeStatusSchema,
   target_kind: safeSurfaceSchema.optional(),
-  target_id: uuidSchema21.optional(),
+  target_id: uuidSchema23.optional(),
   properties: recommendationAnalyticsPropertiesSchema.optional(),
   occurred_at: external_exports.string().datetime({ offset: true }).optional()
 }).strict();
 
 // ../../packages/protocol/src/reads.ts
-var uuidSchema22 = external_exports.string().uuid();
+var uuidSchema24 = external_exports.string().uuid();
 var isoDateTime8 = external_exports.string().datetime({ offset: true });
 var seatTypeSchema = external_exports.enum(["human", "agent", "hybrid"]);
 var seatStatusSchema = external_exports.enum(["draft", "active", "vacant", "decommissioned"]);
@@ -39361,13 +39591,13 @@ var credentialStatusSchema = external_exports.enum(["active", "revoked"]);
 var runStatusSchema = external_exports.enum(["running", "succeeded", "failed", "timeout", "cancelled"]);
 var graphGetInputSchema = external_exports.object({}).strict();
 var graphNodeSchema = external_exports.object({
-  seat_id: uuidSchema22,
+  seat_id: uuidSchema24,
   name: external_exports.string(),
   seat_type: seatTypeSchema,
   status: seatStatusSchema,
-  parent_seat_id: uuidSchema22.nullable(),
+  parent_seat_id: uuidSchema24.nullable(),
   is_root: external_exports.boolean(),
-  steward_seat_id: uuidSchema22.nullable(),
+  steward_seat_id: uuidSchema24.nullable(),
   occupant: external_exports.object({
     kind: external_exports.enum(["user", "agent"]),
     label: external_exports.string(),
@@ -39381,11 +39611,11 @@ var graphNodeSchema = external_exports.object({
   planned_occupants: external_exports.array(external_exports.object({ display_name: external_exports.string() }).strict())
 }).strict();
 var graphEdgeSchema = external_exports.object({
-  parent_seat_id: uuidSchema22,
-  child_seat_id: uuidSchema22
+  parent_seat_id: uuidSchema24,
+  child_seat_id: uuidSchema24
 }).strict();
 var graphGetOutputSchema = external_exports.object({
-  root_seat_id: uuidSchema22.nullable(),
+  root_seat_id: uuidSchema24.nullable(),
   nodes: external_exports.array(graphNodeSchema),
   edges: external_exports.array(graphEdgeSchema),
   status_rollups: external_exports.object({
@@ -39397,32 +39627,32 @@ var graphGetOutputSchema = external_exports.object({
   }).strict()
 }).strict();
 var seatGetInputSchema = external_exports.object({
-  seat_id: uuidSchema22
+  seat_id: uuidSchema24
 }).strict();
 var seatGetOutputSchema = external_exports.object({
-  seat_id: uuidSchema22,
+  seat_id: uuidSchema24,
   name: external_exports.string(),
   seat_type: seatTypeSchema,
   status: seatStatusSchema,
   purpose: external_exports.string().nullable(),
-  parent_seat_id: uuidSchema22.nullable(),
+  parent_seat_id: uuidSchema24.nullable(),
   steward_chain: external_exports.array(external_exports.object({
-    seat_id: uuidSchema22,
+    seat_id: uuidSchema24,
     name: external_exports.string()
   }).strict()),
   occupancies: external_exports.array(external_exports.object({
-    occupancy_id: uuidSchema22,
+    occupancy_id: uuidSchema24,
     occupant_type: external_exports.enum(["user", "agent"]),
     label: external_exports.string(),
     started_at: isoDateTime8,
     ended_at: isoDateTime8.nullable()
   }).strict()),
-  active_charter_version_id: uuidSchema22.nullable(),
-  draft_charter_version_id: uuidSchema22.nullable(),
+  active_charter_version_id: uuidSchema24.nullable(),
+  draft_charter_version_id: uuidSchema24.nullable(),
   agent_status: agentStatusEnum2.nullable(),
   agent_lane: agentLaneSchema3.nullable(),
   mcp_tokens: external_exports.array(external_exports.object({
-    token_id: uuidSchema22,
+    token_id: uuidSchema24,
     scope: mcpScopeSchema,
     created_at: isoDateTime8,
     last_seen_at: isoDateTime8.nullable(),
@@ -39432,7 +39662,7 @@ var seatGetOutputSchema = external_exports.object({
     revoked_at: isoDateTime8.nullable()
   }).strict()),
   credentials: external_exports.array(external_exports.object({
-    credential_id: uuidSchema22,
+    credential_id: uuidSchema24,
     provider: external_exports.string(),
     status: credentialStatusSchema
   }).strict()),
@@ -39445,12 +39675,12 @@ var seatGetOutputSchema = external_exports.object({
   planned_occupants: external_exports.array(external_exports.object({ display_name: external_exports.string() }).strict())
 }).strict();
 var charterListInputSchema = external_exports.object({
-  seat_id: uuidSchema22.optional(),
+  seat_id: uuidSchema24.optional(),
   status: charterStatusSchema.optional()
 }).strict();
 var charterSummarySchema = external_exports.object({
-  charter_version_id: uuidSchema22,
-  seat_id: uuidSchema22,
+  charter_version_id: uuidSchema24,
+  seat_id: uuidSchema24,
   version: external_exports.number().int().nonnegative(),
   status: charterStatusSchema,
   created_at: isoDateTime8,
@@ -39460,11 +39690,11 @@ var charterListOutputSchema = external_exports.object({
   charters: external_exports.array(charterSummarySchema)
 }).strict();
 var charterGetInputSchema = external_exports.object({
-  charter_version_id: uuidSchema22
+  charter_version_id: uuidSchema24
 }).strict();
 var charterGetOutputSchema = external_exports.object({
-  charter_version_id: uuidSchema22,
-  seat_id: uuidSchema22,
+  charter_version_id: uuidSchema24,
+  seat_id: uuidSchema24,
   version: external_exports.number().int().nonnegative(),
   status: charterStatusSchema,
   created_at: isoDateTime8,
@@ -39478,7 +39708,7 @@ var charterGetOutputSchema = external_exports.object({
 }).strict();
 var compassGetCurrentInputSchema = external_exports.object({}).strict();
 var compassVersionRefSchema = external_exports.object({
-  compass_version_id: uuidSchema22,
+  compass_version_id: uuidSchema24,
   version: external_exports.number().int().nonnegative(),
   status: compassStatusSchema,
   doc: external_exports.unknown()
@@ -39489,7 +39719,7 @@ var compassGetCurrentOutputSchema = external_exports.object({
   // Sources expose document id and kind only. The underlying storage_ref can
   // be a local file path, so it is never surfaced (redaction rule).
   sources: external_exports.array(external_exports.object({
-    document_id: uuidSchema22,
+    document_id: uuidSchema24,
     kind: external_exports.string()
   }).strict())
 }).strict();
@@ -39504,22 +39734,22 @@ var compassGapSchema = external_exports.object({
   answer: external_exports.string().nullable()
 }).strict();
 var compassListGapsOutputSchema = external_exports.object({
-  compass_version_id: uuidSchema22.nullable(),
+  compass_version_id: uuidSchema24.nullable(),
   unanswered: external_exports.array(compassGapSchema),
   answered: external_exports.array(compassGapSchema)
 }).strict();
 var agentStatusInputSchema = external_exports.object({
-  seat_id: uuidSchema22
+  seat_id: uuidSchema24
 }).strict();
 var agentStatusOutputSchema = external_exports.object({
-  seat_id: uuidSchema22,
+  seat_id: uuidSchema24,
   // DER-786 (C7): `has_agent` is true whenever a setup agent exists for the seat
   // — including a draft setup that has no occupancy yet — so it agrees with
   // agent_setup.get. `lifecycle` is the shared cross-surface term derived from
   // `status` (none | draft_setup | dry_run | live | …).
   has_agent: external_exports.boolean(),
   lifecycle: agentLifecycleSchema,
-  agent_id: uuidSchema22.nullable(),
+  agent_id: uuidSchema24.nullable(),
   kind: agentKindSchema2.nullable(),
   display_name: external_exports.string().nullable(),
   lane: agentLaneSchema3.nullable(),
@@ -39527,9 +39757,9 @@ var agentStatusOutputSchema = external_exports.object({
   schedule_cron: external_exports.string().nullable(),
   schedule_timezone: external_exports.string().min(1).max(100).nullable(),
   live: external_exports.boolean(),
-  charter_version_id: uuidSchema22.nullable(),
+  charter_version_id: uuidSchema24.nullable(),
   steward_chain: external_exports.array(external_exports.object({
-    seat_id: uuidSchema22,
+    seat_id: uuidSchema24,
     name: external_exports.string()
   }).strict()),
   steward_chain_resolves_to_human: external_exports.boolean(),
@@ -39570,7 +39800,7 @@ var fleetWorkEvidenceSchema = external_exports.object({
   label: external_exports.string(),
   detail: external_exports.string(),
   href: external_exports.string().nullable(),
-  run_id: uuidSchema22.nullable(),
+  run_id: uuidSchema24.nullable(),
   linkable_run: external_exports.boolean(),
   can_run_now: external_exports.boolean()
 }).strict();
@@ -39584,7 +39814,7 @@ var fleetWorkProgressSchema = external_exports.object({
   last_durable_activity_at: isoDateTime8.nullable()
 }).strict();
 var fleetOverviewRowSchema = external_exports.object({
-  seat_id: uuidSchema22,
+  seat_id: uuidSchema24,
   seat_name: external_exports.string(),
   seat_path: external_exports.string(),
   // DER-2068 (N-2): the seat's immediate parent seat name (null for the root
@@ -39621,7 +39851,7 @@ var agentListFleetOutputSchema = external_exports.object({
   agents: external_exports.array(fleetOverviewRowSchema)
 }).strict();
 var runErrorLogSchema = external_exports.object({
-  error_log_id: uuidSchema22,
+  error_log_id: uuidSchema24,
   source: external_exports.enum(["run", "llm", "tool", "mcp", "runner", "integration", "job", "web"]),
   severity: external_exports.enum(["warning", "error", "critical"]),
   code: external_exports.string().nullable(),
@@ -39634,9 +39864,9 @@ var agentFleetDigestInputSchema = external_exports.object({
   error_limit: external_exports.number().int().min(1).max(100).default(50)
 }).strict();
 var fleetDigestRunSchema = external_exports.object({
-  run_id: uuidSchema22,
-  seat_id: uuidSchema22,
-  agent_id: uuidSchema22,
+  run_id: uuidSchema24,
+  seat_id: uuidSchema24,
+  agent_id: uuidSchema24,
   status: runStatusSchema,
   lane: agentLaneSchema3,
   model: external_exports.string(),
@@ -39646,22 +39876,22 @@ var fleetDigestRunSchema = external_exports.object({
   error_logs: external_exports.array(runErrorLogSchema)
 }).strict();
 var fleetDigestErrorSchema = runErrorLogSchema.extend({
-  seat_id: uuidSchema22.nullable(),
-  agent_id: uuidSchema22.nullable(),
-  run_id: uuidSchema22.nullable(),
+  seat_id: uuidSchema24.nullable(),
+  agent_id: uuidSchema24.nullable(),
+  run_id: uuidSchema24.nullable(),
   disposition: external_exports.enum(["active", "acknowledged", "resolved", "superseded"])
 }).strict();
 var fleetDigestNotificationErrorSchema = external_exports.object({
-  notification_id: uuidSchema22,
+  notification_id: uuidSchema24,
   kind: external_exports.string(),
   channel: external_exports.string(),
   status: external_exports.string(),
   provider: external_exports.string(),
   error_message: external_exports.string().nullable(),
-  error_log_id: uuidSchema22.nullable(),
+  error_log_id: uuidSchema24.nullable(),
   source: external_exports.enum(["run", "llm", "tool", "mcp", "runner", "integration", "job", "web"]).nullable(),
-  seat_id: uuidSchema22.nullable(),
-  run_id: uuidSchema22.nullable(),
+  seat_id: uuidSchema24.nullable(),
+  run_id: uuidSchema24.nullable(),
   created_at: isoDateTime8
 }).strict();
 var fleetDigestAgentSchema = fleetOverviewRowSchema.extend({
@@ -39710,21 +39940,21 @@ var seatTrustSummarySchema = external_exports.object({
   last_activity_at: isoDateTime8.nullable()
 }).strict();
 var agentListRunsInputSchema = external_exports.object({
-  seat_id: uuidSchema22,
+  seat_id: uuidSchema24,
   // Conservative, bounded page size; the timeline is a recent-history view.
   limit: external_exports.number().int().min(1).max(200).default(50)
 }).strict();
 var agentGetRunInputSchema = external_exports.object({
-  seat_id: uuidSchema22,
-  run_id: uuidSchema22,
+  seat_id: uuidSchema24,
+  run_id: uuidSchema24,
   // DER-1661: opt in to the persisted session transcript (`--transcript`). Off by
   // default so the diagnostic read stays lean; the (potentially large) transcript body
   // loads only when asked.
   transcript: external_exports.boolean().default(false)
 }).strict();
 var seatRunSchema = external_exports.object({
-  run_id: uuidSchema22,
-  agent_id: uuidSchema22,
+  run_id: uuidSchema24,
+  agent_id: uuidSchema24,
   agent_display_name: external_exports.string().nullable(),
   status: runStatusSchema,
   lane: agentLaneSchema3,
@@ -39741,8 +39971,8 @@ var seatRunErrorLogSchema = runErrorLogSchema.extend({
   error_class: external_exports.string().nullable()
 }).strict();
 var seatRunDetailSchema = seatRunSchema.extend({
-  task_id: uuidSchema22.nullable(),
-  work_order_id: uuidSchema22.nullable(),
+  task_id: uuidSchema24.nullable(),
+  work_order_id: uuidSchema24.nullable(),
   transcript_ref: external_exports.string(),
   // DER-1913: null = usage UNKNOWN — a Codex / read-status / timeout / spawn-error
   // runner turn reports no model-usage envelope, so the run records no token count.
@@ -39752,8 +39982,8 @@ var seatRunDetailSchema = seatRunSchema.extend({
   outcome: external_exports.record(external_exports.string(), external_exports.unknown()),
   error_logs: external_exports.array(seatRunErrorLogSchema),
   skill_activations: external_exports.array(external_exports.object({
-    skill_activation_id: uuidSchema22,
-    skill_version_id: uuidSchema22,
+    skill_activation_id: uuidSchema24,
+    skill_version_id: uuidSchema24,
     slug: external_exports.string().min(1),
     name: external_exports.string().min(1),
     version: external_exports.number().int().positive(),
@@ -39770,23 +40000,23 @@ var seatRunDetailSchema = seatRunSchema.extend({
   transcript: sessionTranscriptReadResultSchema.nullable().optional()
 }).strict();
 var agentListRunsOutputSchema = external_exports.object({
-  seat_id: uuidSchema22,
+  seat_id: uuidSchema24,
   summary: seatTrustSummarySchema,
   runs: external_exports.array(seatRunSchema)
 }).strict();
 var agentGetRunOutputSchema = external_exports.object({
-  seat_id: uuidSchema22,
+  seat_id: uuidSchema24,
   run: seatRunDetailSchema
 }).strict();
 var agentListToolCallsInputSchema = external_exports.object({
-  seat_id: uuidSchema22,
+  seat_id: uuidSchema24,
   limit: external_exports.number().int().min(1).max(200).default(50),
   // When true, return only HELD (non-allowed) tool calls — the governance view.
   held_only: external_exports.boolean().default(false)
 }).strict();
 var seatToolCallSchema = external_exports.object({
-  tool_call_id: uuidSchema22,
-  run_id: uuidSchema22.nullable(),
+  tool_call_id: uuidSchema24,
+  run_id: uuidSchema24.nullable(),
   tool_name: external_exports.string(),
   guard_result: guardResultSchema,
   manifest_clause: external_exports.string().nullable(),
@@ -39795,13 +40025,13 @@ var seatToolCallSchema = external_exports.object({
   finished_at: isoDateTime8.nullable()
 }).strict();
 var agentListToolCallsOutputSchema = external_exports.object({
-  seat_id: uuidSchema22,
+  seat_id: uuidSchema24,
   summary: seatTrustSummarySchema,
   tool_calls: external_exports.array(seatToolCallSchema)
 }).strict();
 var agentWatchRunInputSchema = external_exports.object({
-  seat_id: uuidSchema22,
-  run_id: uuidSchema22
+  seat_id: uuidSchema24,
+  run_id: uuidSchema24
 }).strict();
 var runWatchCurrentStateSchema = external_exports.object({
   state: workProgressStateSchema,
@@ -39822,7 +40052,7 @@ var runWatchHeartbeatSchema = external_exports.object({
   reasons: external_exports.array(external_exports.string())
 }).strict();
 var agentWatchRunOutputSchema = external_exports.object({
-  seat_id: uuidSchema22,
+  seat_id: uuidSchema24,
   run: seatRunSchema,
   // the lean run row (status/lane/model/counts/timestamps)
   is_live: external_exports.boolean(),
@@ -39846,16 +40076,16 @@ var deliverableLinkSchema = external_exports.object({
   kind: external_exports.enum(["internal", "linear", "github", "external"])
 }).strict();
 var deliverableIdSchema = external_exports.union([
-  uuidSchema22,
+  uuidSchema24,
   external_exports.string().regex(/^run:[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i)
 ]);
 var deliverableRowSchema = external_exports.object({
   id: deliverableIdSchema,
-  seat_id: uuidSchema22,
-  agent_id: uuidSchema22.nullable(),
-  run_id: uuidSchema22.nullable(),
-  task_id: uuidSchema22.nullable(),
-  work_order_id: uuidSchema22.nullable(),
+  seat_id: uuidSchema24,
+  agent_id: uuidSchema24.nullable(),
+  run_id: uuidSchema24.nullable(),
+  task_id: uuidSchema24.nullable(),
+  work_order_id: uuidSchema24.nullable(),
   kind: deliverableKindSchema,
   title: external_exports.string(),
   summary: external_exports.string().nullable(),
@@ -39875,13 +40105,13 @@ var deliverableRowSchema = external_exports.object({
   receipt_presence: receiptPresenceSchema
 }).strict();
 var deliverableListInputSchema = external_exports.object({
-  seat_id: uuidSchema22
+  seat_id: uuidSchema24
 }).strict();
 var deliverableListOutputSchema = external_exports.object({
   deliverables: external_exports.array(deliverableRowSchema)
 }).strict();
 var deliverableGetInputSchema = external_exports.object({
-  seat_id: uuidSchema22,
+  seat_id: uuidSchema24,
   deliverable_id: deliverableIdSchema
 }).strict();
 var deliverableGetOutputSchema = external_exports.object({
@@ -39889,12 +40119,12 @@ var deliverableGetOutputSchema = external_exports.object({
 }).strict();
 var mcpTokenListInputSchema = external_exports.object({
   include_revoked: external_exports.boolean().default(false),
-  seat_id: uuidSchema22.optional()
+  seat_id: uuidSchema24.optional()
 }).strict();
 var mcpTokenMetadataSchema = external_exports.object({
-  token_id: uuidSchema22,
+  token_id: uuidSchema24,
   scope: mcpScopeSchema,
-  seat_id: uuidSchema22.nullable(),
+  seat_id: uuidSchema24.nullable(),
   created_at: isoDateTime8,
   last_seen_at: isoDateTime8.nullable(),
   // DER-830: expires_at is now always present (the column is NOT NULL).
@@ -39909,7 +40139,7 @@ var mcpTokenListOutputSchema = external_exports.object({
 }).strict();
 var devicePairingListInputSchema = external_exports.object({}).strict();
 var devicePairingIntentSummarySchema = external_exports.object({
-  intent_id: uuidSchema22,
+  intent_id: uuidSchema24,
   // The purpose the owner paired FOR. MVP mints only `user_session`; the enum
   // carries the reserved second member so the contract is forward-complete.
   purpose: external_exports.enum(["user_session", "implementation_bootstrap"]),
@@ -39917,14 +40147,14 @@ var devicePairingIntentSummarySchema = external_exports.object({
   // `consumed` (a CLI redeemed it and a device row is anchored). Expired/revoked
   // intents are omitted by the reader, so they never appear on this contract.
   status: external_exports.enum(["pending", "consumed"]),
-  created_by: uuidSchema22,
+  created_by: uuidSchema24,
   created_at: isoDateTime8,
   expires_at: isoDateTime8,
   // Whole seconds until the intent's own TTL lapses. Never negative: the reader
   // only returns still-live intents, and the command floors it at 0.
   expires_in_seconds: external_exports.number().int().nonnegative(),
   // The anchored device row, present once a CLI has redeemed the code.
-  device_authorization_id: uuidSchema22.nullable(),
+  device_authorization_id: uuidSchema24.nullable(),
   device_status: external_exports.enum(["pending", "approved", "denied", "expired", "consumed"]).nullable(),
   // TRUE only for an anchored device row that is still pending + unexpired — the
   // exact rows the owner surface may one-click approve without a typed user_code.
@@ -39934,29 +40164,29 @@ var devicePairingListOutputSchema = external_exports.object({
   intents: external_exports.array(devicePairingIntentSummarySchema)
 }).strict();
 var errorLogListInputSchema = external_exports.object({
-  seat_id: uuidSchema22.optional(),
+  seat_id: uuidSchema24.optional(),
   source: external_exports.enum(["run", "llm", "tool", "mcp", "runner", "integration", "job", "web"]).optional(),
   severity: external_exports.enum(["warning", "error", "critical"]).optional(),
   resolved: external_exports.enum(["active", "acknowledged", "resolved", "all"]).default("active"),
   limit: external_exports.number().int().min(1).max(200).default(50)
 }).strict();
 var errorLogListItemSchema = external_exports.object({
-  error_log_id: uuidSchema22,
+  error_log_id: uuidSchema24,
   source: external_exports.enum(["run", "llm", "tool", "mcp", "runner", "integration", "job", "web"]),
   severity: external_exports.enum(["warning", "error", "critical"]),
   code: external_exports.string().nullable(),
   message: external_exports.string(),
-  seat_id: uuidSchema22.nullable(),
-  agent_id: uuidSchema22.nullable(),
-  run_id: uuidSchema22.nullable(),
+  seat_id: uuidSchema24.nullable(),
+  agent_id: uuidSchema24.nullable(),
+  run_id: uuidSchema24.nullable(),
   disposition: external_exports.enum(["active", "acknowledged", "resolved", "superseded"]),
   resolved_at: isoDateTime8.nullable(),
-  resolved_by: uuidSchema22.nullable(),
+  resolved_by: uuidSchema24.nullable(),
   resolution_reason: external_exports.string().nullable(),
-  linked_task_id: uuidSchema22.nullable(),
-  linked_issue_id: uuidSchema22.nullable(),
+  linked_task_id: uuidSchema24.nullable(),
+  linked_issue_id: uuidSchema24.nullable(),
   linked_pr_ref: external_exports.string().nullable(),
-  superseded_by_id: uuidSchema22.nullable(),
+  superseded_by_id: uuidSchema24.nullable(),
   created_at: isoDateTime8
 }).strict();
 var errorLogListOutputSchema = external_exports.object({
@@ -39964,29 +40194,29 @@ var errorLogListOutputSchema = external_exports.object({
   total: external_exports.number().int().nonnegative()
 }).strict();
 var errorLogResolveInputSchema = external_exports.object({
-  error_log_id: uuidSchema22,
+  error_log_id: uuidSchema24,
   reason: external_exports.string().trim().min(1),
   disposition: external_exports.enum(["acknowledged", "resolved"]).default("acknowledged"),
-  linked_task_id: uuidSchema22.optional(),
-  linked_issue_id: uuidSchema22.optional(),
+  linked_task_id: uuidSchema24.optional(),
+  linked_issue_id: uuidSchema24.optional(),
   linked_pr_ref: external_exports.string().trim().min(1).optional()
 }).strict();
 var errorLogResolveOutputSchema = external_exports.object({
-  error_log_id: uuidSchema22,
+  error_log_id: uuidSchema24,
   disposition: external_exports.enum(["acknowledged", "resolved"]),
   resolved_at: isoDateTime8
 }).strict();
 var errorLogSupersedeInputSchema = external_exports.object({
-  error_log_id: uuidSchema22,
-  new_error_log_id: uuidSchema22,
+  error_log_id: uuidSchema24,
+  new_error_log_id: uuidSchema24,
   reason: external_exports.string().trim().min(1),
-  linked_task_id: uuidSchema22.optional(),
-  linked_issue_id: uuidSchema22.optional(),
+  linked_task_id: uuidSchema24.optional(),
+  linked_issue_id: uuidSchema24.optional(),
   linked_pr_ref: external_exports.string().trim().min(1).optional()
 }).strict();
 var errorLogSupersedeOutputSchema = external_exports.object({
-  error_log_id: uuidSchema22,
-  superseded_by_id: uuidSchema22,
+  error_log_id: uuidSchema24,
+  superseded_by_id: uuidSchema24,
   disposition: external_exports.literal("superseded"),
   resolved_at: isoDateTime8
 }).strict();
@@ -39997,17 +40227,17 @@ var staleCandidatesInputSchema = external_exports.object({
   limit: external_exports.number().int().min(1).max(200).default(50)
 }).strict();
 var errorLogStaleCandidateSchema = external_exports.object({
-  error_log_id: uuidSchema22,
+  error_log_id: uuidSchema24,
   source: external_exports.enum(["run", "llm", "tool", "mcp", "runner", "integration", "job", "web"]),
   severity: external_exports.enum(["warning", "error", "critical"]),
   code: external_exports.string().nullable(),
   message: external_exports.string(),
-  seat_id: uuidSchema22.nullable(),
+  seat_id: uuidSchema24.nullable(),
   occurrence_count: external_exports.number().int(),
   last_seen_at: isoDateTime8,
   created_at: isoDateTime8,
   days_stale: external_exports.number().int(),
-  linked_issue_id: uuidSchema22.nullable(),
+  linked_issue_id: uuidSchema24.nullable(),
   linked_issue_resolved: external_exports.boolean(),
   confidence: staleCandidateConfidenceSchema,
   evidence: staleCandidateEvidenceSchema
@@ -40017,8 +40247,8 @@ var errorLogStaleCandidatesOutputSchema = external_exports.object({
   total: external_exports.number().int().nonnegative()
 }).strict();
 var escalationStaleCandidateSchema = external_exports.object({
-  escalation_id: uuidSchema22,
-  seat_id: uuidSchema22,
+  escalation_id: uuidSchema24,
+  seat_id: uuidSchema24,
   seat_name: external_exports.string(),
   reason: external_exports.string(),
   status: external_exports.literal("open"),
@@ -40034,14 +40264,14 @@ var escalationStaleCandidatesOutputSchema = external_exports.object({
   total: external_exports.number().int().nonnegative()
 }).strict();
 var frictionStaleCandidateSchema = external_exports.object({
-  issue_id: uuidSchema22,
+  issue_id: uuidSchema24,
   summary: external_exports.string(),
   severity: external_exports.enum(["low", "med", "high", "critical"]),
   status: external_exports.enum(["open", "diagnosing"]),
   created_at: isoDateTime8,
   updated_at: isoDateTime8,
   days_stale: external_exports.number().int(),
-  action_task_id: uuidSchema22.nullable(),
+  action_task_id: uuidSchema24.nullable(),
   action_task_status: external_exports.string().nullable(),
   action_task_done: external_exports.boolean(),
   confidence: staleCandidateConfidenceSchema,
@@ -40052,20 +40282,20 @@ var frictionStaleCandidatesOutputSchema = external_exports.object({
   total: external_exports.number().int().nonnegative()
 }).strict();
 var errorLogBulkResolveInputSchema = external_exports.object({
-  error_log_ids: external_exports.array(uuidSchema22).min(1).max(200),
+  error_log_ids: external_exports.array(uuidSchema24).min(1).max(200),
   reason: external_exports.string().trim().min(1),
   disposition: external_exports.enum(["acknowledged", "resolved"]).default("resolved")
 }).strict();
 var errorLogBulkResolveSkippedSchema = external_exports.object({
-  error_log_id: uuidSchema22,
+  error_log_id: uuidSchema24,
   reason: external_exports.string()
 }).strict();
 var errorLogBulkResolveFailedSchema = external_exports.object({
-  error_log_id: uuidSchema22,
+  error_log_id: uuidSchema24,
   reason: external_exports.string()
 }).strict();
 var errorLogBulkResolveOutputSchema = external_exports.object({
-  resolved: external_exports.array(uuidSchema22),
+  resolved: external_exports.array(uuidSchema24),
   skipped: external_exports.array(errorLogBulkResolveSkippedSchema),
   failed: external_exports.array(errorLogBulkResolveFailedSchema),
   resolved_count: external_exports.number().int().nonnegative(),
@@ -40074,19 +40304,19 @@ var errorLogBulkResolveOutputSchema = external_exports.object({
   total: external_exports.number().int().nonnegative()
 }).strict();
 var escalationBulkResolveInputSchema = external_exports.object({
-  escalation_ids: external_exports.array(uuidSchema22).min(1).max(200),
+  escalation_ids: external_exports.array(uuidSchema24).min(1).max(200),
   reason: external_exports.string().trim().min(1)
 }).strict();
 var escalationBulkResolveSkippedSchema = external_exports.object({
-  escalation_id: uuidSchema22,
+  escalation_id: uuidSchema24,
   reason: external_exports.string()
 }).strict();
 var escalationBulkResolveFailedSchema = external_exports.object({
-  escalation_id: uuidSchema22,
+  escalation_id: uuidSchema24,
   reason: external_exports.string()
 }).strict();
 var escalationBulkResolveOutputSchema = external_exports.object({
-  resolved: external_exports.array(uuidSchema22),
+  resolved: external_exports.array(uuidSchema24),
   skipped: external_exports.array(escalationBulkResolveSkippedSchema),
   failed: external_exports.array(escalationBulkResolveFailedSchema),
   resolved_count: external_exports.number().int().nonnegative(),
@@ -40095,19 +40325,19 @@ var escalationBulkResolveOutputSchema = external_exports.object({
   total: external_exports.number().int().nonnegative()
 }).strict();
 var frictionBulkResolveInputSchema = external_exports.object({
-  issue_ids: external_exports.array(uuidSchema22).min(1).max(200),
+  issue_ids: external_exports.array(uuidSchema24).min(1).max(200),
   root_cause: external_exports.string().trim().min(1)
 }).strict();
 var frictionBulkResolveSkippedSchema = external_exports.object({
-  issue_id: uuidSchema22,
+  issue_id: uuidSchema24,
   reason: external_exports.string()
 }).strict();
 var frictionBulkResolveFailedSchema = external_exports.object({
-  issue_id: uuidSchema22,
+  issue_id: uuidSchema24,
   reason: external_exports.string()
 }).strict();
 var frictionBulkResolveOutputSchema = external_exports.object({
-  resolved: external_exports.array(uuidSchema22),
+  resolved: external_exports.array(uuidSchema24),
   skipped: external_exports.array(frictionBulkResolveSkippedSchema),
   failed: external_exports.array(frictionBulkResolveFailedSchema),
   resolved_count: external_exports.number().int().nonnegative(),
@@ -40117,10 +40347,10 @@ var frictionBulkResolveOutputSchema = external_exports.object({
 }).strict();
 var runHeartbeatStateSchema = external_exports.enum(["working", "quiet_healthy", "recovered", "stalled", "unavailable"]);
 var agentRunHeartbeatsInputSchema = external_exports.object({
-  seat_ids: external_exports.array(uuidSchema22).min(1).max(200).optional()
+  seat_ids: external_exports.array(uuidSchema24).min(1).max(200).optional()
 }).strict();
 var runHeartbeatSeatRollupSchema = external_exports.object({
-  seat_id: uuidSchema22,
+  seat_id: uuidSchema24,
   state: runHeartbeatStateSchema,
   stalled: external_exports.boolean(),
   run_count: external_exports.number().int().nonnegative(),
@@ -40240,13 +40470,13 @@ var runSummaryOutputSchema = external_exports.object({
 });
 
 // ../../packages/protocol/src/system-health.ts
-var uuidSchema23 = external_exports.string().uuid();
+var uuidSchema25 = external_exports.string().uuid();
 var isoDateTime10 = external_exports.string().datetime({ offset: true });
 var systemHealthCallerKindSchema = external_exports.enum(["tenant_admin", "member", "seat_token"]);
 var systemHealthCallerSchema = external_exports.object({
   kind: systemHealthCallerKindSchema,
-  seat_id: uuidSchema23.optional(),
-  seat_ids: external_exports.array(uuidSchema23).min(1).optional()
+  seat_id: uuidSchema25.optional(),
+  seat_ids: external_exports.array(uuidSchema25).min(1).optional()
 }).strict();
 var systemHealthVerdictSchema = external_exports.enum(["healthy", "degraded", "blocked"]);
 var systemHealthSeveritySchema = external_exports.enum(["info", "warning", "critical"]);
@@ -40284,18 +40514,18 @@ var systemHealthFindingSchema = external_exports.object({
   summary: external_exports.string().min(1),
   detail: external_exports.string().min(1),
   remediation: systemHealthActionSchema,
-  seat_id: uuidSchema23.nullable(),
-  goal_id: uuidSchema23.nullable(),
-  run_id: uuidSchema23.nullable(),
-  issue_id: uuidSchema23.nullable(),
-  task_id: uuidSchema23.nullable(),
-  error_log_id: uuidSchema23.nullable()
+  seat_id: uuidSchema25.nullable(),
+  goal_id: uuidSchema25.nullable(),
+  run_id: uuidSchema25.nullable(),
+  issue_id: uuidSchema25.nullable(),
+  task_id: uuidSchema25.nullable(),
+  error_log_id: uuidSchema25.nullable()
 }).strict();
 var systemHealthScopeSchema = external_exports.object({
   mode: systemHealthScopeModeSchema,
-  root_seat_ids: external_exports.array(uuidSchema23),
-  included_seat_ids: external_exports.array(uuidSchema23),
-  requested_seat_id: uuidSchema23.nullable(),
+  root_seat_ids: external_exports.array(uuidSchema25),
+  included_seat_ids: external_exports.array(uuidSchema25),
+  requested_seat_id: uuidSchema25.nullable(),
   total_seat_count: external_exports.number().int().nonnegative()
 }).strict();
 var systemHealthFleetSectionSchema = external_exports.object({
@@ -40352,7 +40582,7 @@ var systemHealthSectionsSchema = external_exports.object({
   sync: systemHealthSyncSectionSchema
 }).strict();
 var systemHealthInputSchema = external_exports.object({
-  seat_id: uuidSchema23.optional()
+  seat_id: uuidSchema25.optional()
 }).strict();
 var systemHealthCheckInputSchema = systemHealthInputSchema.extend({
   caller: systemHealthCallerSchema
@@ -40379,10 +40609,10 @@ var baserowFilteredCountInputSchema = external_exports.object({
 }).strict();
 
 // ../../packages/protocol/src/signal-report.ts
-var uuidSchema24 = external_exports.string().uuid();
+var uuidSchema26 = external_exports.string().uuid();
 var dateOnlySchema3 = external_exports.string().regex(/^\d{4}-\d{2}-\d{2}$/, "expected YYYY-MM-DD");
 var signalReportInputSchema = external_exports.object({
-  measurable_id: uuidSchema24,
+  measurable_id: uuidSchema26,
   value: external_exports.number().finite(),
   // Optional; defaults to the measurable's current period (resolved in the
   // command against the measurable's own cadence via the canonical bounds).
@@ -40393,8 +40623,8 @@ var signalReportInputSchema = external_exports.object({
   confidence: external_exports.enum(["low", "medium", "high"]).optional()
 }).strict();
 var signalReportOutputSchema = external_exports.object({
-  reading_id: uuidSchema24,
-  measurable_id: uuidSchema24,
+  reading_id: uuidSchema26,
+  measurable_id: uuidSchema26,
   // Always false: an agent-sourced reading is a draft until a human confirms it.
   confirmed: external_exports.literal(false)
 }).strict();
@@ -40425,12 +40655,12 @@ var signalReadingProposalSchema = external_exports.object({
 });
 
 // ../../packages/protocol/src/signal-draft-first-readings.ts
-var uuidSchema25 = external_exports.string().uuid();
+var uuidSchema27 = external_exports.string().uuid();
 var signalDraftFirstReadingsInputSchema = external_exports.object({
-  measurable_id: uuidSchema25
+  measurable_id: uuidSchema27
 }).strict();
 var signalDraftFirstReadingsOutputSchema = external_exports.object({
-  measurable_id: uuidSchema25,
+  measurable_id: uuidSchema27,
   // The live pull outcome, surfaced verbatim so the UI can explain a no-datapoint
   // result honestly ("source polled, nothing came back") rather than silently.
   outcome: external_exports.enum(["ok", "blocked", "error"]),
@@ -40438,7 +40668,7 @@ var signalDraftFirstReadingsOutputSchema = external_exports.object({
   // Never fabricates back-dated history the source cannot actually produce.
   drafted: external_exports.number().int().min(0).max(1),
   // Present only when drafted === 1.
-  reading_id: uuidSchema25.optional(),
+  reading_id: uuidSchema27.optional(),
   value: external_exports.number().finite().optional(),
   period_start: external_exports.string().regex(/^\d{4}-\d{2}-\d{2}$/, "expected YYYY-MM-DD").optional(),
   // Present only when drafted === 0: a short, non-secret machine reason
@@ -42149,7 +42379,7 @@ var softwareFactoryBudgetExhaustedEventSchema = external_exports.object({
 }).strict();
 
 // ../../packages/protocol/src/sync-brief.ts
-var uuidSchema26 = external_exports.string().uuid();
+var uuidSchema28 = external_exports.string().uuid();
 var dateSchema = external_exports.string().regex(/^\d{4}-\d{2}-\d{2}$/);
 var syncBriefGapSchema = external_exports.object({
   section: external_exports.enum(["exceptions", "goal_deltas", "task_review", "friction", "agent_activity"]),
@@ -42162,8 +42392,8 @@ var sectionSchema = (itemSchema) => external_exports.object({
   flagged_gaps: external_exports.array(syncBriefGapSchema)
 }).strict();
 var syncBriefExceptionSchema = external_exports.object({
-  measurable_id: uuidSchema26,
-  seat_id: uuidSchema26,
+  measurable_id: uuidSchema28,
+  seat_id: uuidSchema28,
   seat_name: external_exports.string().min(1),
   name: external_exports.string().min(1),
   state: external_exports.enum(["risk", "crit", "pending"]),
@@ -42174,8 +42404,8 @@ var syncBriefExceptionSchema = external_exports.object({
   freshness: external_exports.enum(["fresh", "due", "stale", "awaiting_first_reading", "not_expected"]).optional()
 }).strict();
 var syncBriefGoalDeltaSchema = external_exports.object({
-  goal_id: uuidSchema26,
-  seat_id: uuidSchema26.nullable(),
+  goal_id: uuidSchema28,
+  seat_id: uuidSchema28.nullable(),
   seat_name: external_exports.string().nullable(),
   title: external_exports.string().min(1),
   status: external_exports.enum(["on", "off", "done", "dropped"]),
@@ -42202,22 +42432,22 @@ var syncBriefTaskReviewSchema = external_exports.object({
   previous_done_rate: external_exports.number().min(0).max(1),
   delta: external_exports.number().min(-1).max(1),
   stalled: external_exports.array(external_exports.object({
-    task_id: uuidSchema26,
-    owner_seat_id: uuidSchema26,
+    task_id: uuidSchema28,
+    owner_seat_id: uuidSchema28,
     owner_seat_name: external_exports.string().min(1),
     title: external_exports.string().min(1),
     due_on: dateSchema,
     stalled_at: external_exports.string().nullable()
   }).strict()),
   overdue_by_owner: external_exports.array(external_exports.object({
-    owner_seat_id: uuidSchema26,
+    owner_seat_id: uuidSchema28,
     owner_seat_name: external_exports.string().min(1),
     overdue_count: external_exports.number().int().nonnegative()
   }).strict())
 }).strict();
 var syncBriefIssueSchema = external_exports.object({
-  issue_id: uuidSchema26,
-  raised_by_seat_id: uuidSchema26,
+  issue_id: uuidSchema28,
+  raised_by_seat_id: uuidSchema28,
   raised_by_seat_name: external_exports.string().min(1),
   summary: external_exports.string().min(1),
   severity: external_exports.enum(["low", "med", "high", "critical"]),
@@ -42234,9 +42464,9 @@ var syncBriefActionItemTrendSchema = external_exports.object({
   has_prior: external_exports.boolean()
 }).strict();
 var syncBriefCascadeAtRiskSchema = external_exports.object({
-  goal_id: uuidSchema26,
+  goal_id: uuidSchema28,
   title: external_exports.string().min(1),
-  seat_id: uuidSchema26.nullable(),
+  seat_id: uuidSchema28.nullable(),
   progress_pct: external_exports.number().int().min(0).max(100),
   classification: external_exports.enum(["at_risk", "projected_miss"]),
   behind_days: external_exports.number().nullable(),
@@ -42245,7 +42475,7 @@ var syncBriefCascadeAtRiskSchema = external_exports.object({
   target_date: external_exports.string().date().nullable().optional()
 }).strict();
 var syncBriefRunHeartbeatStalledSeatSchema = external_exports.object({
-  seat_id: uuidSchema26,
+  seat_id: uuidSchema28,
   current_phase: external_exports.string().nullable(),
   stalled_run_count: external_exports.number().int().nonnegative()
 }).strict();
@@ -42270,8 +42500,8 @@ var syncBriefRunHeartbeatRollupSchema = external_exports.object({
   stalled_seats: external_exports.array(syncBriefRunHeartbeatStalledSeatSchema)
 }).strict();
 var syncBriefAgentActivitySchema = external_exports.object({
-  agent_id: uuidSchema26,
-  seat_id: uuidSchema26,
+  agent_id: uuidSchema28,
+  seat_id: uuidSchema28,
   seat_name: external_exports.string().min(1),
   run_count: external_exports.number().int().nonnegative(),
   failed_run_count: external_exports.number().int().nonnegative(),
@@ -42284,11 +42514,11 @@ var syncBriefAgentActivitySchema = external_exports.object({
 var syncBriefSchema = external_exports.object({
   schema_version: external_exports.literal(1),
   tenant: external_exports.object({
-    id: uuidSchema26,
+    id: uuidSchema28,
     name: external_exports.string().min(1)
   }).strict(),
   cluster: external_exports.object({
-    id: uuidSchema26,
+    id: uuidSchema28,
     name: external_exports.string().min(1)
   }).strict().nullable(),
   period: external_exports.object({
@@ -42332,17 +42562,17 @@ var syncBriefSchema = external_exports.object({
 }).strict();
 
 // ../../packages/protocol/src/charter-backfill.ts
-var uuidSchema27 = external_exports.string().uuid();
+var uuidSchema29 = external_exports.string().uuid();
 var charterBackfillStockEvidenceInputSchema = external_exports.object({}).strict();
 var charterBackfillStockEvidenceOutputSchema = external_exports.object({
-  tenant_id: uuidSchema27,
+  tenant_id: uuidSchema29,
   updated: external_exports.array(external_exports.object({
-    seat_id: uuidSchema27,
-    charter_version_id: uuidSchema27,
-    superseded_charter_version_id: uuidSchema27,
+    seat_id: uuidSchema29,
+    charter_version_id: uuidSchema29,
+    superseded_charter_version_id: uuidSchema29,
     from_revision: external_exports.enum(["0092", "0124", "current"]),
-    decision_id: uuidSchema27,
-    receipt_id: uuidSchema27.nullable(),
+    decision_id: uuidSchema29,
+    receipt_id: uuidSchema29.nullable(),
     // DER-3043 r8 disclosure: the permission-manifest grant delta this
     // supersession applied (0092 -> current appends the two Trusted auto-band
     // grants; 0124 -> current drops tool_grants.agent.update; current -> []).
@@ -42353,28 +42583,28 @@ var charterBackfillStockEvidenceOutputSchema = external_exports.object({
     }).strict()
   }).strict()),
   already_current: external_exports.array(external_exports.object({
-    seat_id: uuidSchema27,
-    charter_version_id: uuidSchema27,
+    seat_id: uuidSchema29,
+    charter_version_id: uuidSchema29,
     reason: external_exports.literal("evidence_already_verified")
   }).strict()),
   excluded_edited: external_exports.array(external_exports.object({
-    seat_id: uuidSchema27,
-    charter_version_id: uuidSchema27,
+    seat_id: uuidSchema29,
+    charter_version_id: uuidSchema29,
     reason: external_exports.literal("charter_doc_not_a_recognized_stock_revision")
   }).strict()),
   excluded_in_flight: external_exports.array(external_exports.object({
-    seat_id: uuidSchema27,
-    charter_version_id: uuidSchema27,
+    seat_id: uuidSchema29,
+    charter_version_id: uuidSchema29,
     successor_kind: external_exports.enum(["agent", "charter_version"]),
     reason: external_exports.literal("successor_in_flight")
   }).strict()),
   excluded_no_active_charter: external_exports.array(external_exports.object({
-    seat_id: uuidSchema27.nullable(),
+    seat_id: uuidSchema29.nullable(),
     reason: external_exports.enum(["no_active_charter_version", "no_canonical_aicos_seat"])
   }).strict()),
   excluded_noncanonical: external_exports.array(external_exports.object({
-    seat_id: uuidSchema27,
-    charter_version_id: uuidSchema27,
+    seat_id: uuidSchema29,
+    charter_version_id: uuidSchema29,
     reason: external_exports.enum(["stock_doc_off_canonical_seat", "canonical_seat_without_stock_occupancy"])
   }).strict())
 }).strict();
@@ -42453,11 +42683,11 @@ var usageSnapshotOutputSchema = external_exports.object({
 }).strict();
 
 // ../../packages/protocol/src/event-payloads.ts
-var uuidSchema28 = external_exports.string().uuid();
+var uuidSchema30 = external_exports.string().uuid();
 var evidenceSchema = external_exports.array(external_exports.unknown());
 var statusEventPayloadSchema = external_exports.object({
   measurables: external_exports.array(external_exports.object({
-    id: uuidSchema28,
+    id: uuidSchema30,
     value: external_exports.number().finite(),
     // DER-1045: an optional, non-secret citation for an agent-proposed reading
     // (signal.report) — where the number came from + the agent's confidence.
@@ -42492,7 +42722,7 @@ var statusEventPayloadSchema = external_exports.object({
     }).strict().optional()
   }).strict()).optional(),
   goals: external_exports.array(external_exports.object({
-    id: uuidSchema28,
+    id: uuidSchema30,
     state: external_exports.enum(["on", "off"]),
     note: external_exports.string().min(1).optional(),
     // DER-2214: structured status-event attribution so "deliberately human-pinned"
@@ -42524,8 +42754,8 @@ var escalationEventPayloadSchema = escalationRaiseInputSchema.extend({
 }).strict();
 var issueEventPayloadSchema = external_exports.object({
   summary: external_exports.string().min(1),
-  blocking_goal_id: uuidSchema28.optional(),
-  broken_measurable_id: uuidSchema28.optional(),
+  blocking_goal_id: uuidSchema30.optional(),
+  broken_measurable_id: uuidSchema30.optional(),
   evidence: evidenceSchema,
   severity: external_exports.enum(["low", "med", "high", "critical"]),
   // DER-1978 (S2): an OPTIONAL short human-readable title written at creation.
@@ -42537,7 +42767,7 @@ var issueEventPayloadSchema = external_exports.object({
 }).strict();
 
 // ../../packages/protocol/src/event-internal-payloads.ts
-var uuidSchema29 = external_exports.string().uuid();
+var uuidSchema31 = external_exports.string().uuid();
 var internalEventObjectSchema = external_exports.record(external_exports.string(), external_exports.unknown()).refine((payload) => !Array.isArray(payload), "Internal event payload must be an object");
 var actionEventPayloadSchema = external_exports.object({ action: external_exports.string().min(1) }).passthrough();
 function authoritativePrefixUnion(branches, authoritative) {
@@ -42559,25 +42789,25 @@ function authoritativePrefixUnion(branches, authoritative) {
 }
 var inviteCreatedEventPayloadSchema = external_exports.object({
   action: external_exports.literal("invite.created"),
-  invite_id: uuidSchema29,
+  invite_id: uuidSchema31,
   email: external_exports.string().email(),
   role: memberRoleSchema,
   member_type: memberTypeSchema,
   access_profile: memberAccessProfileSchema,
   aicos_access_scope: aicosAccessScopeSchema,
-  invited_by: uuidSchema29
+  invited_by: uuidSchema31
 }).strict();
 var inviteRevokedEventPayloadSchema = external_exports.object({
   action: external_exports.literal("invite.revoked"),
-  invite_id: uuidSchema29,
-  revoked_by: uuidSchema29
+  invite_id: uuidSchema31,
+  revoked_by: uuidSchema31
 }).strict();
 var inviteAcceptedEventPayloadSchema = external_exports.object({
   action: external_exports.literal("invite.accepted"),
-  invite_id: uuidSchema29,
-  user_id: uuidSchema29,
-  membership_id: uuidSchema29,
-  linked_seat_ids: external_exports.array(uuidSchema29)
+  invite_id: uuidSchema31,
+  user_id: uuidSchema31,
+  membership_id: uuidSchema31,
+  linked_seat_ids: external_exports.array(uuidSchema31)
 }).strict();
 var inviteLifecycleEventPayloadSchema = external_exports.union([
   inviteCreatedEventPayloadSchema,
@@ -42642,14 +42872,14 @@ var heldToolActionReplaySchema = external_exports.object({
 }).strict();
 
 // ../../packages/protocol/src/operating.ts
-var uuidSchema30 = external_exports.string().uuid();
+var uuidSchema32 = external_exports.string().uuid();
 var taskListInputSchema = external_exports.object({}).strict();
 var operatingTaskSchema = external_exports.object({
-  id: uuidSchema30,
+  id: uuidSchema32,
   title: external_exports.string(),
   description: external_exports.string().nullable(),
-  from_seat_id: uuidSchema30.nullable(),
-  goal_id: uuidSchema30.nullable(),
+  from_seat_id: uuidSchema32.nullable(),
+  goal_id: uuidSchema32.nullable(),
   acceptance_criteria: external_exports.unknown(),
   due_on: external_exports.string().nullable(),
   status: external_exports.string()
@@ -42658,54 +42888,54 @@ var taskListOutputSchema = external_exports.object({
   tasks: external_exports.array(operatingTaskSchema)
 }).strict();
 var taskAcceptInputSchema = external_exports.object({
-  id: uuidSchema30
+  id: uuidSchema32
 }).strict();
 var taskConfirmProposalInputSchema = external_exports.object({
-  id: uuidSchema30
+  id: uuidSchema32
 }).strict();
 var taskMutationOutputSchema = external_exports.object({
   task: external_exports.object({
-    id: uuidSchema30,
+    id: uuidSchema32,
     status: external_exports.string()
   }).strict()
 }).strict();
 var taskDeclineInputSchema = external_exports.object({
-  id: uuidSchema30,
+  id: uuidSchema32,
   reason: external_exports.string().min(1)
 }).strict();
 var taskDeclineOutputSchema = external_exports.object({
   task: external_exports.object({
-    id: uuidSchema30,
+    id: uuidSchema32,
     status: external_exports.string(),
     decline_reason: external_exports.string()
   }).strict()
 }).strict();
 var taskCompleteInputSchema = external_exports.object({
-  id: uuidSchema30,
+  id: uuidSchema32,
   summary: external_exports.string().min(1),
   artifacts: external_exports.unknown().optional()
 }).strict();
 var taskCompleteOutputSchema = external_exports.object({
-  task_id: uuidSchema30,
-  event_id: uuidSchema30,
+  task_id: uuidSchema32,
+  event_id: uuidSchema32,
   type: external_exports.literal("handoff")
 }).strict();
 var statusRecordOutputSchema = external_exports.object({
-  event_id: uuidSchema30,
+  event_id: uuidSchema32,
   type: external_exports.literal("status")
 }).strict();
 var frictionFileIssueInputSchema = issueEventPayloadSchema.extend({
   source_key: external_exports.string().trim().min(1).max(200).optional()
 }).strict();
 var duplicateFrictionCandidateSchema = external_exports.object({
-  issue_id: uuidSchema30,
+  issue_id: uuidSchema32,
   summary: external_exports.string().min(1),
   // pg_trgm similarity in [0, 1]; higher is more similar.
   similarity: external_exports.number().min(0).max(1)
 }).strict();
 var frictionFileIssueOutputSchema = external_exports.object({
-  event_id: uuidSchema30,
-  issue_id: uuidSchema30,
+  event_id: uuidSchema32,
+  issue_id: uuidSchema32,
   type: external_exports.literal("issue"),
   // DER-1522: likely-duplicate candidates detected before creation. Recommend,
   // never block — filing always proceeds; empty when nothing crossed the
@@ -42719,12 +42949,12 @@ var workLogInputSchema = external_exports.object({
   note: external_exports.string().min(1)
 }).strict();
 var workLogOutputSchema = external_exports.object({
-  event_id: uuidSchema30,
+  event_id: uuidSchema32,
   type: external_exports.literal("task")
 }).strict();
 var escalationRaiseOutputSchema = external_exports.object({
-  event_id: uuidSchema30,
-  escalation_id: uuidSchema30,
+  event_id: uuidSchema32,
+  escalation_id: uuidSchema32,
   type: external_exports.literal("escalation")
 }).strict();
 var deliverableKindSchema2 = external_exports.enum(["brief", "work_evidence", "artifact", "report", "other"]);
@@ -42783,7 +43013,7 @@ var deliverableRejectOutputSchema = external_exports.object({
 }).strict();
 
 // ../../packages/protocol/src/steward.ts
-var uuidSchema31 = external_exports.string().uuid();
+var uuidSchema33 = external_exports.string().uuid();
 var escalationStatusSchema = external_exports.enum([
   "open",
   "approved",
@@ -42792,18 +43022,18 @@ var escalationStatusSchema = external_exports.enum([
 ]);
 var stewardReplayActionSummarySchema = external_exports.object({
   tool_name: external_exports.string(),
-  run_id: uuidSchema31
+  run_id: uuidSchema33
 }).strict();
 var stewardProposedToolCallSchema = external_exports.object({
   tool_name: external_exports.string(),
   args_summary: external_exports.unknown()
 }).strict();
 var stewardEscalationSchema = external_exports.object({
-  id: uuidSchema31,
-  seat_id: uuidSchema31,
+  id: uuidSchema33,
+  seat_id: uuidSchema33,
   seat_name: external_exports.string(),
   seat_type: external_exports.enum(["human", "agent", "hybrid"]),
-  steward_seat_id: uuidSchema31,
+  steward_seat_id: uuidSchema33,
   steward_seat_name: external_exports.string(),
   reason: external_exports.string(),
   // DER-1978 (S2): OPTIONAL short headline written at creation; null/absent when unset
@@ -42826,11 +43056,11 @@ var stewardEscalationSchema = external_exports.object({
   proposed_tool_call: stewardProposedToolCallSchema.optional(),
   recommended_action: external_exports.string().nullable(),
   status: escalationStatusSchema,
-  decided_by: uuidSchema31.nullable(),
+  decided_by: uuidSchema33.nullable(),
   decided_by_name: external_exports.string().nullable(),
   decided_at: external_exports.string().nullable(),
   decision_note: external_exports.string().nullable(),
-  issue_id: uuidSchema31.nullable(),
+  issue_id: uuidSchema33.nullable(),
   created_at: external_exports.string(),
   updated_at: external_exports.string()
 }).strict();
@@ -42841,27 +43071,27 @@ var escalationListOutputSchema = external_exports.object({
   escalations: external_exports.array(stewardEscalationSchema)
 }).strict();
 var escalationGetInputSchema = external_exports.object({
-  id: uuidSchema31
+  id: uuidSchema33
 }).strict();
 var escalationGetOutputSchema = external_exports.object({
   escalation: stewardEscalationSchema
 }).strict();
 var escalationResolveActionSchema = external_exports.enum(["approve", "convert_to_issue"]);
 var escalationResolveInputSchema = external_exports.object({
-  id: uuidSchema31,
+  id: uuidSchema33,
   action: escalationResolveActionSchema.optional(),
   rationale: external_exports.string().trim().min(1).optional()
 }).strict();
 var escalationRejectInputSchema = external_exports.object({
-  id: uuidSchema31,
+  id: uuidSchema33,
   rationale: external_exports.string().trim().min(1).optional()
 }).strict();
 var escalationDecisionOutputSchema = external_exports.object({
-  escalation_id: uuidSchema31,
+  escalation_id: uuidSchema33,
   status: escalationStatusSchema,
-  decision_id: uuidSchema31,
-  decided_by: uuidSchema31,
-  issue_id: uuidSchema31.nullable(),
+  decision_id: uuidSchema33,
+  decided_by: uuidSchema33,
+  issue_id: uuidSchema33.nullable(),
   // DER-1478: true when the resolved escalation carries a durable replay_action
   // (an approval-gated connector write) that the approvals path should actuate
   // after this decision is recorded. Omitted (not false) for non-connector
@@ -43042,7 +43272,7 @@ var workDetailsSchemas = {
 };
 
 // ../../packages/protocol/src/agent-grant-intervention.ts
-var uuidSchema32 = external_exports.string().uuid();
+var uuidSchema34 = external_exports.string().uuid();
 var agentGrantBlockerKindSchema = external_exports.enum([
   "rost_capability",
   "os_permission",
@@ -43059,16 +43289,16 @@ var agentGrantInterventionStatusSchema = external_exports.enum([
 ]);
 var agentGrantKindSchema = external_exports.enum(["allow_once", "permanent"]);
 var agentGrantInterventionSchema = external_exports.object({
-  id: uuidSchema32,
-  seat_id: uuidSchema32,
+  id: uuidSchema34,
+  seat_id: uuidSchema34,
   seat_name: external_exports.string().nullable(),
-  agent_id: uuidSchema32.nullable(),
+  agent_id: uuidSchema34.nullable(),
   // The source blocked attempt (audit link); null once the run is retention-purged.
-  run_id: uuidSchema32.nullable(),
+  run_id: uuidSchema34.nullable(),
   // The runner the blocker lives on, for os_permission repairs ("Open on Runner").
-  runner_id: uuidSchema32.nullable(),
+  runner_id: uuidSchema34.nullable(),
   // The linked continuation attempt, populated when a continuation is enqueued.
-  continuation_run_id: uuidSchema32.nullable(),
+  continuation_run_id: uuidSchema34.nullable(),
   blocker_kind: agentGrantBlockerKindSchema,
   status: agentGrantInterventionStatusSchema,
   // The specific capability/scope requested (e.g. "gmail.send"), when applicable.
@@ -43083,7 +43313,7 @@ var agentGrantInterventionSchema = external_exports.object({
   // True once the blocked attempt released its lease/compute (AC #2 clean termination).
   compute_released: external_exports.boolean(),
   grant_kind: agentGrantKindSchema.nullable(),
-  decided_by: uuidSchema32.nullable(),
+  decided_by: uuidSchema34.nullable(),
   decided_by_name: external_exports.string().nullable(),
   decided_at: external_exports.string().nullable(),
   expires_at: external_exports.string().nullable(),
@@ -43092,7 +43322,7 @@ var agentGrantInterventionSchema = external_exports.object({
 }).strict();
 var agentGrantInterventionListInputSchema = external_exports.object({
   // Optional seat filter (a seat-scoped caller is additionally clamped to its own seat).
-  seat_id: uuidSchema32.optional(),
+  seat_id: uuidSchema34.optional(),
   // When true, include decided/terminal records (declined/resumed/expired) too;
   // by default only the actionable open blocked/granted records are returned.
   include_decided: external_exports.boolean().optional()
@@ -43101,14 +43331,14 @@ var agentGrantInterventionListOutputSchema = external_exports.object({
   interventions: external_exports.array(agentGrantInterventionSchema)
 }).strict();
 var agentGrantInterventionGetInputSchema = external_exports.object({
-  id: uuidSchema32
+  id: uuidSchema34
 }).strict();
 var agentGrantInterventionGetOutputSchema = external_exports.object({
   intervention: agentGrantInterventionSchema
 }).strict();
 var agentGrantInterventionDecideActionSchema = external_exports.enum(["grant", "decline"]);
 var agentGrantInterventionDecideInputSchema = external_exports.object({
-  intervention_id: uuidSchema32,
+  intervention_id: uuidSchema34,
   action: agentGrantInterventionDecideActionSchema,
   // Defaults to allow_once. `permanent` never auto-widens — it returns
   // requires_charter_resign so the surface routes the human to a Charter re-sign.
@@ -43120,12 +43350,12 @@ var agentGrantInterventionDecideInputSchema = external_exports.object({
   rationale: external_exports.string().trim().min(1).max(2e3).optional()
 }).strict();
 var agentGrantInterventionDecideOutputSchema = external_exports.object({
-  intervention_id: uuidSchema32,
+  intervention_id: uuidSchema34,
   status: agentGrantInterventionStatusSchema,
-  continuation_run_id: uuidSchema32.nullable(),
+  continuation_run_id: uuidSchema34.nullable(),
   // The human decision row written for a grant/decline (invariant #7). Null only
   // when a permanent grant deferred to a Charter re-sign (no one-time decision made).
-  decision_id: uuidSchema32.nullable(),
+  decision_id: uuidSchema34.nullable(),
   // True when the human chose the permanent option — the surface must route to a
   // Charter re-sign; no authority was widened by this call (invariant #10).
   requires_charter_resign: external_exports.boolean(),
@@ -43139,12 +43369,12 @@ var agentGrantInterventionDecideOutputSchema = external_exports.object({
   enqueue_failed: external_exports.boolean()
 }).strict();
 var agentGrantInterventionResumeInputSchema = external_exports.object({
-  intervention_id: uuidSchema32
+  intervention_id: uuidSchema34
 }).strict();
 var agentGrantInterventionResumeOutputSchema = external_exports.object({
-  intervention_id: uuidSchema32,
+  intervention_id: uuidSchema34,
   status: agentGrantInterventionStatusSchema,
-  continuation_run_id: uuidSchema32.nullable(),
+  continuation_run_id: uuidSchema34.nullable(),
   enqueue_failed: external_exports.boolean()
 }).strict();
 
@@ -43162,7 +43392,7 @@ var eventTypes = [
   "task"
 ];
 var publicMessageTypes = ["status", "handoff", "escalation", "issue"];
-var uuidSchema33 = external_exports.string().uuid();
+var uuidSchema35 = external_exports.string().uuid();
 var evidenceSchema2 = external_exports.array(external_exports.unknown());
 var internalEventPayloadSchema = external_exports.record(external_exports.string(), external_exports.unknown()).refine((payload) => !Array.isArray(payload), "Internal event payload must be an object");
 var handoffEventPayloadSchema = external_exports.object({
@@ -43172,24 +43402,24 @@ var handoffEventPayloadSchema = external_exports.object({
     acceptance_criteria: external_exports.array(external_exports.string().min(1)),
     due: external_exports.string().datetime({ offset: true })
   }).strict(),
-  to_seat_id: uuidSchema33
+  to_seat_id: uuidSchema35
 }).strict();
 var intakeEventPayloadSchema = external_exports.discriminatedUnion("action", [
   external_exports.object({
     action: external_exports.literal("uploaded"),
-    document_id: uuidSchema33,
+    document_id: uuidSchema35,
     storage_ref: external_exports.string().min(1)
   }).strict(),
   external_exports.object({
     action: external_exports.literal("parsed"),
-    document_id: uuidSchema33,
+    document_id: uuidSchema35,
     mode: external_exports.enum(["source_tree", "function_first"]),
     seat_count: external_exports.number().int().nonnegative(),
     edge_count: external_exports.number().int().nonnegative()
   }).strict(),
   external_exports.object({
     action: external_exports.literal("failed"),
-    document_id: uuidSchema33,
+    document_id: uuidSchema35,
     reason: external_exports.string().min(1)
   }).strict(),
   external_exports.object({
@@ -43295,9 +43525,9 @@ var publicMessageTypeSchema = external_exports.enum(publicMessageTypes);
 var eventEnvelopeBaseSchema = external_exports.object({
   protocol: external_exports.literal(EVENT_PROTOCOL),
   type: eventTypeSchema,
-  seat_id: uuidSchema33.nullable(),
+  seat_id: uuidSchema35.nullable(),
   occurred_at: external_exports.string().datetime({ offset: true }),
-  goal_ancestry: external_exports.array(uuidSchema33),
+  goal_ancestry: external_exports.array(uuidSchema35),
   // DER-2381: optional so historical rows and every caller that hasn't been
   // updated yet keep parsing — but every per-type writer envelope below
   // extends THIS base and re-`.strict()`s, so adding it here propagates the
@@ -69392,7 +69622,7 @@ async function removeWorkspace(ws) {
 
 // src/runner-serve.ts
 import { execFile as execFileCallback5, spawn } from "node:child_process";
-import { createHash as createHash4, randomUUID } from "node:crypto";
+import { createHash as createHash4, createPrivateKey, createPublicKey as createPublicKey2, generateKeyPairSync, randomUUID } from "node:crypto";
 import { constants as fsConstants6 } from "node:fs";
 import { access as access3, chmod as chmod2, lstat as lstat2, mkdir as mkdir8, open as open2, readFile as readFile11, rename as rename2, rm as rm8, statfs, writeFile as writeFile8 } from "node:fs/promises";
 import { cpus, homedir as homedir7, hostname as hostname3, platform, totalmem, tmpdir as tmpdir2 } from "node:os";
@@ -70152,16 +70382,20 @@ async function pairIfNeeded(client, fetchImpl, appUrl2, config2, io) {
       `No paired runner state at ${config2.stateFile}. Provide --user-code <code> from Settings > Runners (Add a runner), or run \`${cliBrand.binName} login --device\` once to pair this runner.`
     );
   }
+  const serviceKey = runnerServiceKeyPairForState(priorState);
   const { runnerId, runnerSecret, tenantId: claimedTenantId, name: claimedName } = await claimRunnerPairingCode(
     fetchImpl,
     appUrl2,
-    userCode
+    userCode,
+    serviceKey
   );
   const state = {
     runner_id: runnerId,
     runner_secret: runnerSecret,
     ...typeof claimedTenantId === "string" ? { tenant_id: claimedTenantId } : config2.expectedTenantId ? { tenant_id: config2.expectedTenantId } : {},
-    name: typeof claimedName === "string" ? claimedName : config2.name
+    name: typeof claimedName === "string" ? claimedName : config2.name,
+    service_key_private: serviceKey.privateKey,
+    service_key_public: serviceKey.publicKey
   };
   await saveState(config2.stateFile, state);
   await reapSupersededRunnerHomes(priorState, runnerId, config2.homeDir);
@@ -70245,6 +70479,8 @@ async function loadState(filePath, expectedTenantId) {
         runner_secret: parsed.runner_secret,
         ...typeof parsed.tenant_id === "string" ? { tenant_id: parsed.tenant_id } : {},
         ...typeof parsed.name === "string" ? { name: parsed.name } : {},
+        ...typeof parsed.service_key_private === "string" ? { service_key_private: parsed.service_key_private } : {},
+        ...typeof parsed.service_key_public === "string" ? { service_key_public: parsed.service_key_public } : {},
         ...isRuntimeSessionMap(parsed.runtime_sessions) ? { runtime_sessions: parsed.runtime_sessions } : {},
         ...isInFlightWorkOrderMap(parsed.in_flight_work_orders) ? { in_flight_work_orders: parsed.in_flight_work_orders } : {}
       };
@@ -70279,8 +70515,56 @@ async function saveState(filePath, state) {
     throw error51;
   }
 }
-async function claimRunnerPairingCode(fetchImpl, appUrl2, userCode) {
-  const claim = await post2(fetchImpl, appUrl2, "/api/runner/pairing/claim", { user_code: userCode });
+var RUNNER_SERVICE_KEY_REPAIR_MESSAGE = "The persisted runner service key is invalid. Repair the local service-key state, then re-pair the runner or use explicit service-key rotation.";
+var RunnerServiceKeyError = class extends Error {
+  code = "service_key_invalid";
+  constructor() {
+    super(RUNNER_SERVICE_KEY_REPAIR_MESSAGE);
+    this.name = "RunnerServiceKeyError";
+  }
+};
+function sshWireField(value) {
+  const bytes = Buffer.isBuffer(value) ? value : Buffer.from(value, "utf8");
+  const length = Buffer.allocUnsafe(4);
+  length.writeUInt32BE(bytes.length, 0);
+  return Buffer.concat([length, bytes]);
+}
+function openSshEd25519PublicKey(publicKey) {
+  const der = publicKey.export({ type: "spki", format: "der" });
+  if (!Buffer.isBuffer(der) || der.length < 32) {
+    throw new Error("Unable to encode the runner service key.");
+  }
+  const rawKey = der.subarray(der.length - 32);
+  const wire = Buffer.concat([sshWireField("ssh-ed25519"), sshWireField(rawKey)]);
+  return `ssh-ed25519 ${wire.toString("base64")}`;
+}
+function generateRunnerServiceKeyPair() {
+  const { publicKey, privateKey } = generateKeyPairSync("ed25519");
+  const privatePem = privateKey.export({ type: "pkcs8", format: "pem" });
+  if (typeof privatePem !== "string") {
+    throw new Error("Unable to persist the runner service key.");
+  }
+  return { privateKey: privatePem, publicKey: openSshEd25519PublicKey(publicKey) };
+}
+function runnerServiceKeyPairFromPrivate(privatePem) {
+  const privateKey = createPrivateKey(privatePem);
+  return { privateKey: privatePem, publicKey: openSshEd25519PublicKey(createPublicKey2(privateKey)) };
+}
+function runnerServiceKeyPairForState(state) {
+  if (state?.service_key_private === void 0) {
+    return generateRunnerServiceKeyPair();
+  }
+  try {
+    return runnerServiceKeyPairFromPrivate(state.service_key_private);
+  } catch {
+    throw new RunnerServiceKeyError();
+  }
+}
+async function claimRunnerPairingCode(fetchImpl, appUrl2, userCode, serviceKey) {
+  const claim = await post2(fetchImpl, appUrl2, "/api/runner/pairing/claim", {
+    user_code: userCode,
+    ...serviceKey ? { service_key_public: serviceKey.publicKey } : {}
+  });
   const runnerSecret = claim.json.runner_secret;
   const runnerId = claim.json.runner_id;
   const tenantId = claim.json.tenant_id;
@@ -70291,7 +70575,10 @@ async function claimRunnerPairingCode(fetchImpl, appUrl2, userCode) {
     runnerId,
     runnerSecret,
     tenantId: typeof tenantId === "string" ? tenantId : null,
-    name: typeof claim.json.name === "string" ? claim.json.name : null
+    name: typeof claim.json.name === "string" ? claim.json.name : null,
+    ...serviceKey ? { serviceKeyPrivate: serviceKey.privateKey, serviceKeyPublic: serviceKey.publicKey } : {},
+    ...typeof claim.json.service_key_generation === "number" ? { serviceKeyGeneration: claim.json.service_key_generation } : {},
+    ...typeof claim.json.service_key_bound === "boolean" ? { serviceKeyBound: claim.json.service_key_bound } : {}
   };
 }
 async function startPairing(client, config2) {
@@ -73757,7 +74044,14 @@ async function runPairingStage(sidecar, userCode, agent, fetchImpl, appUrl2, hom
   }
   if (userCode !== void 0) {
     const priorState = await loadState(sidecar.state_file, expectedTenantId);
-    const claimResult = await claimRunnerPairingCodeSafe(fetchImpl, appUrl2, userCode);
+    let serviceKey;
+    try {
+      serviceKey = runnerServiceKeyPairForState(priorState);
+    } catch (error51) {
+      const message = error51 instanceof RunnerServiceKeyError ? error51.message : RUNNER_SERVICE_KEY_REPAIR_MESSAGE;
+      return { kind: "claim_failed", exitCode: 1, message: redactForLog(message) };
+    }
+    const claimResult = await claimRunnerPairingCodeSafe(fetchImpl, appUrl2, userCode, serviceKey);
     if (!claimResult.ok) {
       return { kind: "claim_failed", exitCode: claimResult.exitCode, message: claimResult.message };
     }
@@ -73779,7 +74073,9 @@ async function runPairingStage(sidecar, userCode, agent, fetchImpl, appUrl2, hom
       runner_id: claimResult.runnerId,
       runner_secret: claimResult.runnerSecret,
       ...claimResult.tenantId !== null ? { tenant_id: claimResult.tenantId } : {},
-      ...claimResult.name !== null ? { name: claimResult.name } : {}
+      ...claimResult.name !== null ? { name: claimResult.name } : {},
+      ...claimResult.serviceKeyPrivate !== void 0 ? { service_key_private: claimResult.serviceKeyPrivate } : {},
+      ...claimResult.serviceKeyPublic !== void 0 ? { service_key_public: claimResult.serviceKeyPublic } : {}
     };
     await saveState(sidecar.state_file, newState);
     await reapSupersededRunnerHomes(priorState, newState.runner_id, homeDir);
@@ -73804,9 +74100,9 @@ async function runPairingStage(sidecar, userCode, agent, fetchImpl, appUrl2, hom
   }
   return { kind: "needs_user_code" };
 }
-async function claimRunnerPairingCodeSafe(fetchImpl, appUrl2, userCode) {
+async function claimRunnerPairingCodeSafe(fetchImpl, appUrl2, userCode, serviceKey) {
   try {
-    const claim = await claimRunnerPairingCode(fetchImpl, appUrl2, userCode);
+    const claim = await claimRunnerPairingCode(fetchImpl, appUrl2, userCode, serviceKey);
     return { ok: true, ...claim };
   } catch (error51) {
     const message = error51 instanceof Error ? error51.message : String(error51);