@rosthq/cli 0.7.69 → 0.7.71

package/dist/index.js

@@ -38201,6 +38201,21 @@ function hasSecretShapedValue(value) {
 // ../../packages/protocol/src/tool-catalog.ts
 var toolScopeTierSchema = external_exports.enum(["read", "draft", "write_with_approval", "full"]);
 var toolAccessPolicySchema = external_exports.enum(["always_allow", "always_ask"]);
+var toolAccessLevelSchema = external_exports.enum(["read", "draft", "write", "admin"]);
+var toolProviderRequirementSchema = external_exports.enum(["none", "connection", "vault_ref", "platform_managed"]);
+var toolCostClassSchema = external_exports.enum(["included", "metered_low", "metered_standard", "metered_high"]);
+var toolExecutionLaneSchema = external_exports.enum(["cloud", "runner", "mcp"]);
+var trustedRequiredMetadataSchema = external_exports.enum([
+  "standing_authorization_id",
+  "decided_by_user_id",
+  "charter_scope",
+  "budget_cap",
+  "lane",
+  "capability_id",
+  "access_level",
+  "authorization_expires_at",
+  "authorization_revoked_at"
+]);
 var toolCatalogEntrySchema = external_exports.object({
   // Stable tool id used in permission manifests and execution.
   id: external_exports.string().min(1),
@@ -38217,7 +38232,18 @@ var toolCatalogEntrySchema = external_exports.object({
   // Whether using this tool requires attaching a credential (vault ref) first.
   credential_required: external_exports.boolean(),
   // The conservative default access policy for this tool in a new manifest.
-  default_access_policy: toolAccessPolicySchema
+  default_access_policy: toolAccessPolicySchema,
+  // Provider-neutral capability grant access levels supported by this tool.
+  access_levels: external_exports.array(toolAccessLevelSchema).min(1),
+  default_access_level: toolAccessLevelSchema,
+  // What must exist before the provider can execute this capability.
+  provider_requirement: toolProviderRequirementSchema,
+  // Coarse cost class for setup and Trusted-mode launch review.
+  cost_class: toolCostClassSchema,
+  // Execution lanes whose server guard path can carry this capability.
+  lane_support: external_exports.array(toolExecutionLaneSchema).min(1),
+  // Metadata that must be present when this capability is used under Trusted mode.
+  trusted_required_metadata: external_exports.array(trustedRequiredMetadataSchema)
 }).strict();
 var toolCatalogOutputSchema = external_exports.object({
   // The explicit, important note that the catalog is configuration the builder
@@ -38393,6 +38419,36 @@ var CATALOG_ENTRIES = [
     credential_required: false,
     default_access_policy: "always_allow"
   },
+  {
+    id: "browser.read",
+    title: "Read public page in browser",
+    provider: "web",
+    description: "Call this to inspect a public page in a read-only sandbox browser. It never submits forms, persists authenticated state, downloads executables, or reaches private networks.",
+    default_scope_tier: "read",
+    scope_tiers: ["read"],
+    credential_required: false,
+    default_access_policy: "always_allow"
+  },
+  {
+    id: "files.read",
+    title: "Read working files",
+    provider: "rost",
+    description: "Call this to read bounded tenant-scoped working files and published artifact references. Read-only: it never exposes files outside the approved workspace.",
+    default_scope_tier: "read",
+    scope_tiers: ["read"],
+    credential_required: false,
+    default_access_policy: "always_allow"
+  },
+  {
+    id: "files.write",
+    title: "Write working files",
+    provider: "rost",
+    description: "Call this to create bounded working files or publish reviewable artifacts inside the tenant workspace. It never executes file contents or writes outside the approved workspace.",
+    default_scope_tier: "draft",
+    scope_tiers: ["draft"],
+    credential_required: false,
+    default_access_policy: "always_allow"
+  },
   {
     id: "docs.drafts.write",
     title: "Write document drafts",
@@ -38585,7 +38641,54 @@ var CATALOG_ENTRIES = [
     default_access_policy: "always_allow"
   }
 ];
-var catalogById = new Map(CATALOG_ENTRIES.map((entry) => [entry.id, entry]));
+function accessLevelForScope(scopeTier) {
+  switch (scopeTier) {
+    case "read":
+      return "read";
+    case "draft":
+      return "draft";
+    case "write_with_approval":
+      return "write";
+    case "full":
+      return "admin";
+  }
+}
+function providerRequirementFor(entry) {
+  if (!entry.credential_required) {
+    return entry.provider === "rost" ? "platform_managed" : "none";
+  }
+  return entry.id === "secret.broker" ? "vault_ref" : "connection";
+}
+function trustedRequiredMetadataFor(entry) {
+  if (entry.default_access_policy === "always_allow" && entry.default_scope_tier !== "write_with_approval") {
+    return [];
+  }
+  return [
+    "standing_authorization_id",
+    "decided_by_user_id",
+    "charter_scope",
+    "budget_cap",
+    "lane",
+    "capability_id",
+    "access_level",
+    "authorization_expires_at",
+    "authorization_revoked_at"
+  ];
+}
+function enrichCatalogEntry(entry) {
+  const accessLevels = [...new Set(entry.scope_tiers.map(accessLevelForScope))];
+  return {
+    ...entry,
+    access_levels: accessLevels,
+    default_access_level: accessLevelForScope(entry.default_scope_tier),
+    provider_requirement: providerRequirementFor(entry),
+    cost_class: entry.id === "script.run" || entry.id === "secret.broker" ? "metered_standard" : "included",
+    lane_support: ["cloud", "runner", "mcp"],
+    trusted_required_metadata: trustedRequiredMetadataFor(entry)
+  };
+}
+var catalogEntries = CATALOG_ENTRIES.map(enrichCatalogEntry);
+var catalogById = new Map(catalogEntries.map((entry) => [entry.id, entry]));
 
 // ../../packages/protocol/src/skills.ts
 var skillVisibilitySchema = external_exports.enum(["private", "seat", "tenant"]);
@@ -39491,6 +39594,165 @@ var agentBuilderCompilationSchema = external_exports.object({
   }).strict()).default([]),
   pendingConfirmationCards: external_exports.array(agentBuilderPendingConfirmationCardSchema).default([])
 }).strict();
+var agentSetupSectionSchema = external_exports.enum([
+  "overview",
+  "charter",
+  "outcomes_signals",
+  "tools_connections",
+  "skills",
+  "autonomy",
+  "activity",
+  "settings"
+]);
+var agentSetupMethodSchema = external_exports.enum(["manual", "template", "chat", "import"]);
+var agentBuilderFieldDiffSchema = external_exports.object({
+  section: agentSetupSectionSchema,
+  field: external_exports.string().trim().min(1).max(80),
+  label: external_exports.string().trim().min(1).max(120),
+  before: external_exports.unknown(),
+  proposed: external_exports.unknown(),
+  rationale: external_exports.string().trim().max(360)
+}).strict();
+
+// ../../packages/protocol/src/tool-policy.ts
+var uuidSchema5 = external_exports.string().uuid();
+var capabilityGrantAccessLevelSchema = external_exports.enum(["off", "read", "draft", "write", "admin"]);
+var capabilityGrantAvailabilitySchema = external_exports.enum([
+  "available",
+  "connection_required",
+  "scope_missing",
+  "revoked",
+  "disabled"
+]);
+var capabilityGrantSourceSchema = external_exports.enum([
+  "connection",
+  "catalog",
+  "manual",
+  "aicos_automatic",
+  "system",
+  "suggested",
+  "human",
+  "aicos_override",
+  "migration"
+]);
+var capabilityGrantCompileStatusSchema = external_exports.enum([
+  "compiled",
+  "unavailable",
+  "revoked",
+  "off",
+  "unsupported_lane"
+]);
+var capabilityGrantConnectionSchema = external_exports.object({
+  integration_id: uuidSchema5.nullable(),
+  provider: external_exports.string().min(1).nullable(),
+  account_email: external_exports.string().min(1).nullable(),
+  account_label: external_exports.string().min(1).nullable(),
+  status: external_exports.enum(["connected", "error", "disconnected"]).nullable()
+}).strict();
+var tenantCapabilityGrantDtoSchema = external_exports.object({
+  tool_grant_id: uuidSchema5,
+  capability_id: external_exports.string().min(1),
+  connection: capabilityGrantConnectionSchema,
+  availability: capabilityGrantAvailabilitySchema,
+  source: capabilityGrantSourceSchema,
+  max_access_level: capabilityGrantAccessLevelSchema,
+  default_agent_access_level: capabilityGrantAccessLevelSchema,
+  compile_status: capabilityGrantCompileStatusSchema
+}).strict();
+var agentEffectiveCapabilityGrantDtoSchema = external_exports.object({
+  tool_grant_id: uuidSchema5,
+  agent_tool_grant_id: uuidSchema5.nullable(),
+  agent_id: uuidSchema5,
+  capability_id: external_exports.string().min(1),
+  connection: capabilityGrantConnectionSchema,
+  availability: capabilityGrantAvailabilitySchema,
+  source: capabilityGrantSourceSchema,
+  selection_source: capabilityGrantSourceSchema.nullable(),
+  max_access_level: capabilityGrantAccessLevelSchema,
+  default_agent_access_level: capabilityGrantAccessLevelSchema,
+  selected_access_level: capabilityGrantAccessLevelSchema,
+  effective_access_level: capabilityGrantAccessLevelSchema,
+  compile_status: capabilityGrantCompileStatusSchema
+}).strict();
+var toolGrantsTenantListInputSchema = external_exports.object({}).strict();
+var toolGrantsTenantListOutputSchema = external_exports.object({
+  grants: external_exports.array(tenantCapabilityGrantDtoSchema)
+}).strict();
+var toolGrantsAgentEffectiveInputSchema = external_exports.object({
+  agent_id: uuidSchema5
+}).strict();
+var toolGrantsAgentEffectiveOutputSchema = external_exports.object({
+  agent_id: uuidSchema5,
+  seat_id: uuidSchema5,
+  grants: external_exports.array(agentEffectiveCapabilityGrantDtoSchema)
+}).strict();
+var agentCapabilityGrantUpdateSchema = external_exports.object({
+  tool_grant_id: uuidSchema5,
+  access_level: capabilityGrantAccessLevelSchema
+}).strict();
+var compiledCapabilityManifestEntrySchema = external_exports.object({
+  tool: external_exports.string().min(1),
+  capability_id: external_exports.string().min(1),
+  integration_id: uuidSchema5.optional(),
+  access_level: capabilityGrantAccessLevelSchema.exclude(["off"]),
+  scope_tier: external_exports.enum(["read", "draft", "write_with_approval", "full"]),
+  access_policy: external_exports.enum(["always_allow", "always_ask"]),
+  mode: external_exports.enum(["allow", "escalate"])
+}).strict();
+var toolGrantsAgentUpdateInputSchema = external_exports.object({
+  agent_id: uuidSchema5,
+  grants: external_exports.array(agentCapabilityGrantUpdateSchema).min(1).max(50),
+  reason: external_exports.string().trim().min(1).max(500).optional()
+}).strict();
+var toolGrantsAgentUpdateOutputSchema = external_exports.object({
+  agent_id: uuidSchema5,
+  applied_immediately: external_exports.boolean(),
+  requires_charter_supersession: external_exports.boolean(),
+  changed_grants: external_exports.array(agentEffectiveCapabilityGrantDtoSchema),
+  charter_proposal: external_exports.object({
+    compiler_version: external_exports.string().min(1),
+    scope_digest: external_exports.string().regex(/^sha256:[0-9a-f]{64}$/),
+    permission_manifest: external_exports.array(compiledCapabilityManifestEntrySchema)
+  }).strict().nullable()
+}).strict();
+var agentSetupCapabilitySuggestionsInputSchema = external_exports.object({
+  seat_id: uuidSchema5.optional(),
+  setup_id: uuidSchema5.optional()
+}).strict().refine(
+  (value) => Boolean(value.seat_id) || Boolean(value.setup_id),
+  "Provide seat_id or setup_id."
+);
+var agentSetupCapabilitySuggestionSchema = external_exports.object({
+  capability_id: external_exports.string().min(1),
+  tool_grant_id: uuidSchema5.nullable(),
+  suggested_access_level: capabilityGrantAccessLevelSchema,
+  reason: external_exports.string().min(1).max(240),
+  available: external_exports.boolean()
+}).strict();
+var agentSetupCapabilitySuggestionsOutputSchema = external_exports.object({
+  agent_id: uuidSchema5,
+  seat_id: uuidSchema5,
+  template_slug: external_exports.string().nullable(),
+  suggestions: external_exports.array(agentSetupCapabilitySuggestionSchema)
+}).strict();
+var tenantToolPolicyAicosSchema = external_exports.object({
+  trust_new_capabilities_automatically: external_exports.boolean()
+}).strict();
+var storedTenantToolPolicySchema = external_exports.object({
+  mode: external_exports.enum(["managed", "open"]),
+  aicos: tenantToolPolicyAicosSchema
+}).strict().superRefine((value, ctx) => {
+  if (hasSecretShapedValue(value)) {
+    ctx.addIssue({
+      code: external_exports.ZodIssueCode.custom,
+      message: "Tenant tool policy cannot contain secret-shaped content."
+    });
+  }
+});
+var toolPolicyGetInputSchema = external_exports.object({}).strict();
+var toolPolicyGetOutputSchema = external_exports.object({
+  tool_policy: storedTenantToolPolicySchema
+}).strict();
 
 // ../../packages/protocol/src/agent-policy.ts
 var AUTONOMOUS_RISK_LEVELS = ["low", "medium", "high", "critical"];
@@ -39554,7 +39816,7 @@ var cloudBrainOptionSchema = external_exports.object({
 }).strict();
 
 // ../../packages/protocol/src/aicos.ts
-var uuidSchema5 = external_exports.string().uuid();
+var uuidSchema6 = external_exports.string().uuid();
 var jsonObjectSchema = external_exports.record(external_exports.string(), external_exports.unknown());
 var aicosConversationPurposeSchema = external_exports.enum(["onboarding", "general", "seat"]);
 var aicosLaneSchema = external_exports.enum(["cloud", "runner", "mcp"]);
@@ -39630,19 +39892,19 @@ var aicosBrainSelectionSchema = external_exports.object({
 }).strict();
 var agentTurnExecutionLaneSchema = external_exports.enum(["cloud", "mcp_session", "runner"]);
 var agentTurnExecutionSchema = external_exports.object({
-  id: uuidSchema5,
-  tenantId: uuidSchema5,
-  sessionId: uuidSchema5,
-  userMessageId: uuidSchema5,
-  assistantMessageId: uuidSchema5.nullable(),
-  seatId: uuidSchema5,
-  agentId: uuidSchema5,
-  userId: uuidSchema5,
+  id: uuidSchema6,
+  tenantId: uuidSchema6,
+  sessionId: uuidSchema6,
+  userMessageId: uuidSchema6,
+  assistantMessageId: uuidSchema6.nullable(),
+  seatId: uuidSchema6,
+  agentId: uuidSchema6,
+  userId: uuidSchema6,
   lane: agentTurnExecutionLaneSchema,
   brain: agentTurnExecutionBrainSchema,
   status: agentTurnExecutionStatusSchema,
-  claimedByRunnerId: uuidSchema5.nullable(),
-  linkedRunId: uuidSchema5.nullable(),
+  claimedByRunnerId: uuidSchema6.nullable(),
+  linkedRunId: uuidSchema6.nullable(),
   interactiveDeadline: external_exports.string().datetime({ offset: true }),
   claimedAt: external_exports.string().datetime({ offset: true }).nullable().optional(),
   startedAt: external_exports.string().datetime({ offset: true }).nullable().optional(),
@@ -39658,13 +39920,13 @@ var agentTurnExecutionSchema = external_exports.object({
   updatedAt: external_exports.string().datetime({ offset: true })
 }).strict();
 var aicosPendingTurnSchema = external_exports.object({
-  id: uuidSchema5,
-  userMessageId: uuidSchema5,
-  assistantMessageId: uuidSchema5.nullable(),
+  id: uuidSchema6,
+  userMessageId: uuidSchema6,
+  assistantMessageId: uuidSchema6.nullable(),
   lane: agentTurnExecutionLaneSchema,
   brain: agentTurnExecutionBrainSchema,
   status: agentTurnExecutionStatusSchema,
-  linkedRunId: uuidSchema5.nullable(),
+  linkedRunId: uuidSchema6.nullable(),
   interactiveDeadline: external_exports.string().datetime({ offset: true }),
   terminalReason: external_exports.string().min(1).max(120).nullable().default(null),
   claimLatencyMs: external_exports.number().int().nonnegative().nullable().default(null),
@@ -39730,8 +39992,8 @@ var aicosRouteContextSchema = external_exports.object({
   pathname: external_exports.string().min(1),
   routeTemplate: external_exports.string().min(1),
   search: external_exports.string().max(500).optional(),
-  selectedSeatId: uuidSchema5.nullable().optional(),
-  selectedObjectId: uuidSchema5.nullable().optional()
+  selectedSeatId: uuidSchema6.nullable().optional(),
+  selectedObjectId: uuidSchema6.nullable().optional()
 }).strict();
 var aicosOnboardingContextSchema = external_exports.object({
   step: external_exports.string().min(1).nullable().default(null),
@@ -39739,7 +40001,7 @@ var aicosOnboardingContextSchema = external_exports.object({
   state: jsonObjectSchema.optional()
 }).strict();
 var aicosSeatScopeSchema = external_exports.object({
-  seatId: uuidSchema5,
+  seatId: uuidSchema6,
   seatName: external_exports.string().min(1).max(200)
 }).strict();
 var aicosCapabilitySnapshotSchema = external_exports.object({
@@ -39797,7 +40059,7 @@ var aicosBrainSettingsUpdateInputSchema = external_exports.object({
   "At least one AICOS lane or brain setting must be provided."
 );
 var aicosSessionSchema = external_exports.object({
-  id: uuidSchema5,
+  id: uuidSchema6,
   title: external_exports.string().min(1),
   purpose: aicosConversationPurposeSchema,
   active: external_exports.boolean(),
@@ -39814,7 +40076,7 @@ var aicosAttachmentContentTypeSchema = external_exports.enum(AICOS_ATTACHMENT_CO
 var AICOS_ATTACHMENT_READINESS = ["ready", "unavailable", "expired"];
 var aicosAttachmentReadinessSchema = external_exports.enum(AICOS_ATTACHMENT_READINESS);
 var aicosAttachmentSchema = external_exports.object({
-  id: uuidSchema5,
+  id: uuidSchema6,
   contentType: aicosAttachmentContentTypeSchema,
   sizeBytes: external_exports.number().int().positive(),
   width: external_exports.number().int().positive().nullable(),
@@ -39827,7 +40089,7 @@ var aicosAttachmentUploadResultSchema = external_exports.object({
   attachment: aicosAttachmentSchema
 }).strict();
 var aicosRunnerAttachmentRefSchema = external_exports.object({
-  id: uuidSchema5,
+  id: uuidSchema6,
   content_type: aicosAttachmentContentTypeSchema,
   size_bytes: external_exports.number().int().positive(),
   width: external_exports.number().int().positive().nullable(),
@@ -39840,28 +40102,28 @@ var aicosRunnerAttachmentRefSchema = external_exports.object({
 }).strict();
 var AICOS_RUNNER_ATTACHMENT_OUTCOMES = ["used", "expired", "load_failed"];
 var aicosRunnerAttachmentOutcomeSchema = external_exports.object({
-  id: uuidSchema5,
+  id: uuidSchema6,
   outcome: external_exports.enum(AICOS_RUNNER_ATTACHMENT_OUTCOMES)
 }).strict();
 var aicosMessageSchema = external_exports.object({
-  id: uuidSchema5,
-  sessionId: uuidSchema5,
+  id: uuidSchema6,
+  sessionId: uuidSchema6,
   role: aicosMessageRoleSchema,
   actorKind: aicosActorKindSchema,
   contentText: external_exports.string(),
   routeContext: jsonObjectSchema,
   onboardingContext: jsonObjectSchema,
   metadata: jsonObjectSchema.default({}),
-  linkedRunId: uuidSchema5.nullable(),
-  linkedWorkOrderId: uuidSchema5.nullable(),
+  linkedRunId: uuidSchema6.nullable(),
+  linkedWorkOrderId: uuidSchema6.nullable(),
   sourceCount: external_exports.number().int().nonnegative().default(0),
   attachments: external_exports.array(aicosAttachmentSchema).default([]),
   createdAt: external_exports.string().datetime({ offset: true })
 }).strict();
 var aicosSourceSchema = external_exports.object({
-  id: uuidSchema5,
-  sessionId: uuidSchema5,
-  messageId: uuidSchema5.nullable(),
+  id: uuidSchema6,
+  sessionId: uuidSchema6,
+  messageId: uuidSchema6.nullable(),
   sourceKind: aicosSourceKindSchema,
   sourceRef: external_exports.string().min(1).max(500),
   title: external_exports.string().min(1).max(300),
@@ -39884,14 +40146,14 @@ var aicosAgentBuilderMetadataSchema = external_exports.object({
   agentBuilder: agentBuilderCompilationSchema
 }).strict();
 var aicosTurnRequestSchema = external_exports.object({
-  requestId: uuidSchema5,
-  sessionId: uuidSchema5.nullable().optional(),
+  requestId: uuidSchema6,
+  sessionId: uuidSchema6.nullable().optional(),
   purpose: aicosConversationPurposeSchema.default("general"),
   // Empty is permitted only when attachments are present (an image-only turn);
   // runAicosTurn enforces the "message or attachment required" invariant so the
   // schema stays a plain object for downstream `.shape`/`.extend` consumers.
   message: external_exports.string().trim().max(12e3).default(""),
-  attachmentIds: external_exports.array(uuidSchema5).max(AICOS_MAX_ATTACHMENTS_PER_TURN).default([]),
+  attachmentIds: external_exports.array(uuidSchema6).max(AICOS_MAX_ATTACHMENTS_PER_TURN).default([]),
   routeContext: aicosRouteContextSchema,
   model: aicosModelRequestSchema.optional(),
   agentBuilderClarification: agentBuilderClarificationSetSchema.optional()
@@ -39960,6 +40222,21 @@ var aicosPulseSnapshotSchema = external_exports.object({
 // ../../packages/protocol/src/command-introspection.ts
 var requiredScopeSchema = external_exports.enum(["tenant_admin", "tenant", "seat", "user"]);
 var confirmationSchema = external_exports.enum(["none", "human_required", "credential_flow", "dangerous"]);
+var trustedExecutionModeSchema = external_exports.enum(["eligible", "always_human", "not_applicable"]);
+var trustedExecutionRiskFlagSchema = external_exports.enum([
+  "admin",
+  "credential",
+  "destructive",
+  "production",
+  "self_approval",
+  "external_send",
+  "spend"
+]);
+var trustedExecutionSchema = external_exports.object({
+  mode: trustedExecutionModeSchema,
+  risk_flags: external_exports.array(trustedExecutionRiskFlagSchema),
+  rationale: external_exports.string().min(1)
+}).strict();
 var jsonSchemaObjectSchema = external_exports.record(external_exports.string(), external_exports.unknown()).refine((value) => value !== null, { message: "JSON Schema must be an object." });
 var commandDescribeInputSchema = external_exports.object({
   // The command id to describe, e.g. "compass.draft".
@@ -39971,6 +40248,7 @@ var commandDescribeOutputSchema = external_exports.object({
   description: external_exports.string().min(1),
   required_scope: requiredScopeSchema,
   confirmation: confirmationSchema,
+  trusted_execution: trustedExecutionSchema,
   expose_over_mcp: external_exports.boolean(),
   input_schema: jsonSchemaObjectSchema,
   output_schema: jsonSchemaObjectSchema,
@@ -39988,6 +40266,7 @@ var commandListEntrySchema = external_exports.object({
   title: external_exports.string().min(1),
   required_scope: requiredScopeSchema,
   confirmation: confirmationSchema,
+  trusted_execution: trustedExecutionSchema,
   expose_over_mcp: external_exports.boolean(),
   stages: external_exports.array(external_exports.string())
 }).strict();
@@ -39996,10 +40275,10 @@ var commandListOutputSchema = external_exports.object({
 }).strict();
 
 // ../../packages/protocol/src/compass.ts
-var uuidSchema6 = external_exports.string().uuid();
+var uuidSchema7 = external_exports.string().uuid();
 var sourceCitationSchema = external_exports.object({
   source_id: external_exports.string().min(1),
-  document_id: uuidSchema6.optional(),
+  document_id: uuidSchema7.optional(),
   label: external_exports.string().min(1),
   locator: external_exports.string().min(1),
   quote: external_exports.string().min(1).optional(),
@@ -40028,14 +40307,14 @@ var contextGapSchema = external_exports.object({
 var gapInterviewAnswerSchema = external_exports.object({
   gap_id: external_exports.string().min(1),
   answer: external_exports.string().min(1),
-  answered_by: uuidSchema6
+  answered_by: uuidSchema7
 }).strict();
 var contextPackSchema = external_exports.object({
   schema_version: external_exports.literal(1),
-  tenant_id: uuidSchema6.optional(),
+  tenant_id: uuidSchema7.optional(),
   sources: external_exports.array(external_exports.object({
     id: external_exports.string().min(1),
-    document_id: uuidSchema6.optional(),
+    document_id: uuidSchema7.optional(),
     name: external_exports.string().min(1),
     kind: external_exports.enum(["document", "financial_upload", "interview", "integration_stub"]),
     mime_type: external_exports.string().min(1).optional()
@@ -40085,7 +40364,7 @@ var compassDraftSchema = external_exports.discriminatedUnion("schema_version", [
   compassDraftSchemaV2
 ]);
 var guardrailInputSchema = external_exports.object({
-  source_compass_version_id: uuidSchema6.optional(),
+  source_compass_version_id: uuidSchema7.optional(),
   principles: external_exports.array(external_exports.object({
     index: external_exports.number().int().positive(),
     statement: external_exports.string().min(1),
@@ -40138,6 +40417,8 @@ var charterMeasurableSchema = external_exports.object({
 });
 var charterPermissionSchema = external_exports.object({
   tool: external_exports.string().min(1),
+  capability_id: external_exports.string().min(1).optional(),
+  integration_id: external_exports.string().uuid().optional(),
   scope: external_exports.string().min(1),
   granted: external_exports.boolean(),
   rationale: external_exports.string().min(1),
@@ -40279,6 +40560,21 @@ var coachDiscussionGuideOutputSchema = external_exports.object({
   suggested_structure: external_exports.array(external_exports.string()).max(8)
 });
 
+// ../../packages/protocol/src/integration-scopes.ts
+var integrationCapabilityAvailabilitySchema = external_exports.object({
+  capability_id: external_exports.string().min(1),
+  provider: external_exports.string().min(1),
+  max_access_level: toolAccessLevelSchema.or(external_exports.literal("off")),
+  availability: external_exports.enum(["available", "connection_required", "scope_missing", "revoked", "disabled"]),
+  granted_scopes: external_exports.array(external_exports.string().min(1)),
+  missing_scopes: external_exports.array(external_exports.string().min(1))
+}).strict();
+var normalizedIntegrationScopesSchema = external_exports.object({
+  provider: external_exports.string().min(1),
+  granted_scopes: external_exports.array(external_exports.string().min(1)),
+  capabilities: external_exports.array(integrationCapabilityAvailabilitySchema)
+}).strict();
+
 // ../../packages/protocol/src/integrations.ts
 var uuid5 = external_exports.string().uuid();
 var isoDateTime = external_exports.string().datetime({ offset: true });
@@ -40301,6 +40597,7 @@ var tenantIntegrationSummarySchema = external_exports.object({
   account_label: external_exports.string().min(1).nullable(),
   scopes: external_exports.array(external_exports.string().min(1)),
   capabilities: external_exports.array(external_exports.string().min(1)),
+  capability_availability: external_exports.array(integrationCapabilityAvailabilitySchema).optional(),
   last_synced_at: isoDateTime.nullable(),
   last_tested_at: isoDateTime.nullable(),
   last_test_result: external_exports.enum(["ok", "failed"]).nullable(),
@@ -40397,15 +40694,15 @@ var integrationReadinessOutputSchema = external_exports.object({
 }).strict();
 
 // ../../packages/protocol/src/cli-bootstrap.ts
-var uuidSchema7 = external_exports.string().uuid();
+var uuidSchema8 = external_exports.string().uuid();
 var userWhoamiInputSchema = external_exports.object({}).strict();
 var userWhoamiOutputSchema = external_exports.object({
-  user_id: uuidSchema7,
+  user_id: uuidSchema8,
   email: external_exports.string().email().nullable(),
   full_name: external_exports.string().nullable(),
-  current_tenant_id: uuidSchema7.nullable(),
+  current_tenant_id: uuidSchema8.nullable(),
   roles: external_exports.array(external_exports.object({
-    tenant_id: uuidSchema7,
+    tenant_id: uuidSchema8,
     role: external_exports.enum(["owner", "admin", "steward", "member"]),
     status: external_exports.enum(["active", "invited", "suspended"])
   }).strict())
@@ -40413,7 +40710,7 @@ var userWhoamiOutputSchema = external_exports.object({
 var userTenantsInputSchema = external_exports.object({}).strict();
 var userTenantsOutputSchema = external_exports.object({
   tenants: external_exports.array(external_exports.object({
-    id: uuidSchema7,
+    id: uuidSchema8,
     slug: external_exports.string().min(1),
     name: external_exports.string().min(1),
     role: external_exports.enum(["owner", "admin", "steward", "member"]),
@@ -40425,7 +40722,7 @@ var userUseTenantInputSchema = external_exports.object({
   tenant: external_exports.string().min(1)
 }).strict();
 var userUseTenantOutputSchema = external_exports.object({
-  tenant_id: uuidSchema7,
+  tenant_id: uuidSchema8,
   slug: external_exports.string().min(1),
   name: external_exports.string().min(1),
   role: external_exports.enum(["owner", "admin", "steward", "member"]),
@@ -40435,7 +40732,7 @@ var signupProvisionTenantInputSchema = external_exports.object({
   company_name: external_exports.string().trim().min(2).max(120)
 }).strict();
 var signupProvisionTenantOutputSchema = external_exports.object({
-  tenant_id: uuidSchema7,
+  tenant_id: uuidSchema8,
   slug: external_exports.string().min(1),
   name: external_exports.string().min(1),
   // false when the caller already had an active tenant — conservative-by-default
@@ -40446,26 +40743,26 @@ var tenantCreateInputSchema = external_exports.object({
   company_name: external_exports.string().trim().min(2).max(120)
 }).strict();
 var tenantCreateOutputSchema = external_exports.object({
-  tenant_id: uuidSchema7,
+  tenant_id: uuidSchema8,
   slug: external_exports.string().min(1),
   name: external_exports.string().min(1),
   created: external_exports.literal(true),
-  source_tenant_id: uuidSchema7,
-  entitlement_id: uuidSchema7,
-  accounting_event_id: uuidSchema7,
+  source_tenant_id: uuidSchema8,
+  entitlement_id: uuidSchema8,
+  accounting_event_id: uuidSchema8,
   active: external_exports.boolean(),
   next_action: external_exports.string().min(1)
 }).strict();
 
 // ../../packages/protocol/src/cli-operations.ts
-var uuidSchema8 = external_exports.string().uuid();
+var uuidSchema9 = external_exports.string().uuid();
 var dateOnlySchema = external_exports.string().regex(/^\d{4}-\d{2}-\d{2}$/, "expected YYYY-MM-DD");
 var signalListInputSchema = external_exports.object({
-  seat_id: uuidSchema8.optional()
+  seat_id: uuidSchema9.optional()
 }).strict();
 var signalSummarySchema = external_exports.object({
-  measurable_id: uuidSchema8,
-  seat_id: uuidSchema8,
+  measurable_id: uuidSchema9,
+  seat_id: uuidSchema9,
   seat_name: external_exports.string(),
   name: external_exports.string(),
   unit: external_exports.string(),
@@ -40473,7 +40770,7 @@ var signalSummarySchema = external_exports.object({
   target: external_exports.number(),
   cadence: external_exports.enum(["daily", "weekly", "monthly", "quarterly", "annual"]),
   source: external_exports.enum(["agent", "human", "integration"]),
-  latest_reading_id: uuidSchema8.nullable(),
+  latest_reading_id: uuidSchema9.nullable(),
   latest_value: external_exports.number().nullable(),
   latest_period_start: external_exports.string().nullable(),
   latest_confirmed: external_exports.boolean().nullable(),
@@ -40483,20 +40780,20 @@ var signalListOutputSchema = external_exports.object({
   signals: external_exports.array(signalSummarySchema)
 }).strict();
 var signalGetInputSchema = external_exports.object({
-  measurable_id: uuidSchema8
+  measurable_id: uuidSchema9
 }).strict();
 var signalReadingSchema = external_exports.object({
-  reading_id: uuidSchema8,
+  reading_id: uuidSchema9,
   period_start: dateOnlySchema,
   value: external_exports.number(),
   source: external_exports.enum(["agent", "human", "integration"]),
   confirmed: external_exports.boolean(),
   confirmed_at: external_exports.string().nullable(),
-  confirmed_by: uuidSchema8.nullable()
+  confirmed_by: uuidSchema9.nullable()
 }).strict();
 var signalGetOutputSchema = external_exports.object({
-  measurable_id: uuidSchema8,
-  seat_id: uuidSchema8,
+  measurable_id: uuidSchema9,
+  seat_id: uuidSchema9,
   name: external_exports.string(),
   unit: external_exports.string(),
   direction: external_exports.enum(["up_good", "down_good"]),
@@ -40507,26 +40804,26 @@ var signalGetOutputSchema = external_exports.object({
   readings: external_exports.array(signalReadingSchema)
 }).strict();
 var signalConfirmReadingInputSchema = external_exports.object({
-  reading_id: uuidSchema8
+  reading_id: uuidSchema9
 }).strict();
 var signalConfirmReadingOutputSchema = external_exports.object({
-  reading_id: uuidSchema8,
+  reading_id: uuidSchema9,
   confirmed: external_exports.literal(true)
 }).strict();
 var signalCorrectReadingInputSchema = external_exports.object({
-  measurable_id: uuidSchema8,
+  measurable_id: uuidSchema9,
   period_start: dateOnlySchema,
   value: external_exports.number().finite()
 }).strict();
 var signalCorrectReadingOutputSchema = external_exports.object({
-  reading_id: uuidSchema8,
-  measurable_id: uuidSchema8,
+  reading_id: uuidSchema9,
+  measurable_id: uuidSchema9,
   period_start: dateOnlySchema,
   value: external_exports.number(),
   confirmed: external_exports.literal(true)
 }).strict();
 var measurableCreateInputSchema = external_exports.object({
-  seat_id: uuidSchema8,
+  seat_id: uuidSchema9,
   name: external_exports.string().trim().min(1).max(120),
   unit: external_exports.string().trim().min(1).max(40),
   direction: external_exports.enum(["up_good", "down_good"]),
@@ -40534,8 +40831,8 @@ var measurableCreateInputSchema = external_exports.object({
   cadence: external_exports.enum(["daily", "weekly", "monthly", "quarterly", "annual"])
 }).strict();
 var measurableCreateOutputSchema = external_exports.object({
-  measurable_id: uuidSchema8,
-  seat_id: uuidSchema8,
+  measurable_id: uuidSchema9,
+  seat_id: uuidSchema9,
   name: external_exports.string(),
   unit: external_exports.string(),
   direction: external_exports.enum(["up_good", "down_good"]),
@@ -40566,8 +40863,8 @@ var signalImportSkipSchema = external_exports.object({
   reason: external_exports.string()
 }).strict();
 var signalImportMeasurableResultSchema = external_exports.object({
-  measurable_id: uuidSchema8,
-  seat_id: uuidSchema8,
+  measurable_id: uuidSchema9,
+  seat_id: uuidSchema9,
   name: external_exports.string(),
   cadence: external_exports.enum(["daily", "weekly", "monthly", "quarterly", "annual"]),
   readings_written: external_exports.number().int().nonnegative()
@@ -40611,13 +40908,13 @@ var measurableTemplateListOutputSchema = external_exports.object({
 }).strict();
 var measurableTemplateAdoptInputSchema = external_exports.object({
   template_id: external_exports.string().trim().min(1).max(80),
-  seat_id: uuidSchema8,
+  seat_id: uuidSchema9,
   target: external_exports.number().finite().optional()
 }).strict();
 var measurableTemplateAdoptOutputSchema = external_exports.object({
-  measurable_id: uuidSchema8,
+  measurable_id: uuidSchema9,
   template_id: external_exports.string(),
-  seat_id: uuidSchema8,
+  seat_id: uuidSchema9,
   name: external_exports.string(),
   unit: external_exports.string(),
   direction: measureDirectionSchema,
@@ -40628,7 +40925,7 @@ var scorecardGridInputSchema = external_exports.object({
   cadence: measureCadenceSchema.optional(),
   // Trailing period count; defaults per cadence (weekly 13, monthly 6, …).
   trailing: external_exports.number().int().min(1).max(53).optional(),
-  seat_id: uuidSchema8.optional(),
+  seat_id: uuidSchema9.optional(),
   // Anchor date (YYYY-MM-DD) for the trailing window; defaults to today. Present
   // so callers/tests get a deterministic column set.
   as_of: dateOnlySchema.optional()
@@ -40645,8 +40942,8 @@ var scorecardGridCellSchema = external_exports.object({
   confirmed: external_exports.boolean().nullable()
 }).strict();
 var scorecardGridRowSchema = external_exports.object({
-  measurable_id: uuidSchema8,
-  seat_id: uuidSchema8,
+  measurable_id: uuidSchema9,
+  seat_id: uuidSchema9,
   seat_name: external_exports.string(),
   name: external_exports.string(),
   unit: external_exports.string(),
@@ -40695,7 +40992,7 @@ var frictionImportOutputSchema = external_exports.object({
   issues_created: external_exports.number().int().nonnegative(),
   issues_matched: external_exports.number().int().nonnegative(),
   issues_skipped: external_exports.number().int().nonnegative(),
-  batch_id: uuidSchema8.nullable(),
+  batch_id: uuidSchema9.nullable(),
   skipped: external_exports.array(importSkipSchema).max(200)
 }).strict();
 var taskImportTodoSchema = external_exports.object({
@@ -40713,7 +41010,7 @@ var taskImportOutputSchema = external_exports.object({
   tasks_created: external_exports.number().int().nonnegative(),
   tasks_matched: external_exports.number().int().nonnegative(),
   tasks_skipped: external_exports.number().int().nonnegative(),
-  batch_id: uuidSchema8.nullable(),
+  batch_id: uuidSchema9.nullable(),
   skipped: external_exports.array(importSkipSchema).max(200)
 }).strict();
 var cascadeImportRockSchema = external_exports.object({
@@ -40723,7 +41020,7 @@ var cascadeImportRockSchema = external_exports.object({
 }).strict();
 var cascadeImportInputSchema = external_exports.object({
   dry_run: external_exports.boolean().optional().default(false),
-  parent_objective_id: uuidSchema8.optional(),
+  parent_objective_id: uuidSchema9.optional(),
   rocks: external_exports.array(cascadeImportRockSchema).min(1).max(1e3)
 }).strict();
 var cascadeImportOutputSchema = external_exports.object({
@@ -40731,8 +41028,8 @@ var cascadeImportOutputSchema = external_exports.object({
   rocks_created: external_exports.number().int().nonnegative(),
   rocks_matched: external_exports.number().int().nonnegative(),
   rocks_skipped: external_exports.number().int().nonnegative(),
-  objective_id: uuidSchema8.nullable(),
-  batch_id: uuidSchema8.nullable(),
+  objective_id: uuidSchema9.nullable(),
+  batch_id: uuidSchema9.nullable(),
   skipped: external_exports.array(importSkipSchema).max(200)
 }).strict();
 var MAX_VTO_TEXT_CHARS = 4e4;
@@ -40748,9 +41045,9 @@ var compassImportOutputSchema = external_exports.object({
   drafted: external_exports.boolean(),
   advisory_available: external_exports.boolean(),
   already_imported: external_exports.boolean(),
-  draft_id: uuidSchema8.nullable(),
+  draft_id: uuidSchema9.nullable(),
   compass_version: external_exports.number().int().nonnegative().nullable(),
-  batch_id: uuidSchema8.nullable(),
+  batch_id: uuidSchema9.nullable(),
   principles: external_exports.number().int().nonnegative(),
   horizons: external_exports.number().int().nonnegative(),
   cycle_objectives: external_exports.number().int().nonnegative(),
@@ -40758,18 +41055,18 @@ var compassImportOutputSchema = external_exports.object({
 }).strict();
 var goalStatusSchema = external_exports.enum(["on", "off", "done", "dropped"]);
 var goalListInputSchema = external_exports.object({
-  cycle_id: uuidSchema8.optional(),
-  seat_id: uuidSchema8.optional()
+  cycle_id: uuidSchema9.optional(),
+  seat_id: uuidSchema9.optional()
 }).strict();
 var goalSummarySchema = external_exports.object({
-  goal_id: uuidSchema8,
+  goal_id: uuidSchema9,
   // DER-1039: 4-kind taxonomy (company_objective | seat_goal | milestone). Legacy
   // 'objective'/'cycle_goal' stay in the read enum for any tenant not yet re-seeded
   // during the add-only expand window (goal.list surfaces whatever the DB holds).
   kind: external_exports.enum(["objective", "cycle_goal", "company_objective", "seat_goal", "milestone"]),
-  cycle_id: uuidSchema8,
-  seat_id: uuidSchema8.nullable(),
-  parent_goal_id: uuidSchema8.nullable(),
+  cycle_id: uuidSchema9,
+  seat_id: uuidSchema9.nullable(),
+  parent_goal_id: uuidSchema9.nullable(),
   title: external_exports.string(),
   status: goalStatusSchema,
   status_source: external_exports.enum(["human", "agent", "rollup"])
@@ -40778,24 +41075,24 @@ var goalListOutputSchema = external_exports.object({
   goals: external_exports.array(goalSummarySchema)
 }).strict();
 var goalCreateInputSchema = external_exports.object({
-  cycle_id: uuidSchema8,
-  seat_id: uuidSchema8,
-  parent_goal_id: uuidSchema8,
+  cycle_id: uuidSchema9,
+  seat_id: uuidSchema9,
+  parent_goal_id: uuidSchema9,
   title: external_exports.string().trim().min(1),
   definition_of_done: external_exports.string().trim().min(1),
   status: external_exports.enum(["on", "off"]).optional()
 }).strict();
 var goalMutationOutputSchema = external_exports.object({
-  goal_id: uuidSchema8,
-  cycle_id: uuidSchema8,
-  seat_id: uuidSchema8.nullable(),
-  parent_goal_id: uuidSchema8.nullable(),
+  goal_id: uuidSchema9,
+  cycle_id: uuidSchema9,
+  seat_id: uuidSchema9.nullable(),
+  parent_goal_id: uuidSchema9.nullable(),
   title: external_exports.string(),
   status: goalStatusSchema,
   status_source: external_exports.enum(["human", "agent", "rollup"])
 }).strict();
 var goalUpdateInputSchema = external_exports.object({
-  goal_id: uuidSchema8,
+  goal_id: uuidSchema9,
   title: external_exports.string().trim().min(1).optional(),
   definition_of_done: external_exports.string().trim().min(1).optional()
 }).strict().refine(
@@ -40803,22 +41100,22 @@ var goalUpdateInputSchema = external_exports.object({
   { message: "goal.update requires at least one of title or definition_of_done" }
 );
 var goalSetStatusInputSchema = external_exports.object({
-  goal_id: uuidSchema8,
+  goal_id: uuidSchema9,
   status: external_exports.enum(["on", "off", "done"])
 }).strict();
 var goalReparentInputSchema = external_exports.object({
-  goal_id: uuidSchema8,
-  parent_goal_id: uuidSchema8
+  goal_id: uuidSchema9,
+  parent_goal_id: uuidSchema9
 }).strict();
 var goalDropInputSchema = external_exports.object({
-  goal_id: uuidSchema8
+  goal_id: uuidSchema9
 }).strict();
 var goalSetProgressInputSchema = external_exports.object({
-  goal_id: uuidSchema8,
+  goal_id: uuidSchema9,
   progress_pct: external_exports.number().int().min(0).max(100)
 }).strict();
 var goalSetProgressOutputSchema = external_exports.object({
-  goal_id: uuidSchema8,
+  goal_id: uuidSchema9,
   progress_pct: external_exports.number().int().min(0).max(100),
   status: goalStatusSchema
 }).strict();
@@ -40829,10 +41126,10 @@ var goalPaceClassificationSchema = external_exports.enum([
   "untracked"
 ]);
 var goalAtRiskSchema = external_exports.object({
-  goal_id: uuidSchema8,
+  goal_id: uuidSchema9,
   title: external_exports.string(),
-  seat_id: uuidSchema8.nullable(),
-  cycle_id: uuidSchema8,
+  seat_id: uuidSchema9.nullable(),
+  cycle_id: uuidSchema9,
   progress_pct: external_exports.number().int().min(0).max(100),
   classification: goalPaceClassificationSchema,
   expected_pct: external_exports.number().nullable(),
@@ -40845,17 +41142,28 @@ var goalListAtRiskOutputSchema = external_exports.object({
 var goalSignalStateSchema = external_exports.enum(["ok", "risk", "crit", "pending"]);
 var goalStatusSourceSchema = external_exports.enum(["human", "agent", "rollup", "signal"]);
 var goalMeasurableRoleSchema = external_exports.enum(["drives_status", "informs"]);
+var goalDriverAnchorSchema = external_exports.object({
+  // The closed period being anchored on (an ISO date / period label — free-form so a
+  // caller can pass '2026-Q1' or '2026-06-30' as the books define the period).
+  period_start: external_exports.string().min(1),
+  // The value the goal's Signal should show for that closed period per the books.
+  expected_value: external_exports.number()
+}).strict();
 var goalBindMeasurableInputSchema = external_exports.object({
-  goal_id: uuidSchema8,
-  measurable_id: uuidSchema8,
+  goal_id: uuidSchema9,
+  measurable_id: uuidSchema9,
   // DER-1643: new operator bindings default to the conservative 'informs' role.
   // 'drives_status' is the deliberate leaf-only status driver (childless goal only,
   // one per goal) and stays human-confirmed.
-  role: goalMeasurableRoleSchema.default("informs")
+  role: goalMeasurableRoleSchema.default("informs"),
+  // DER-1126 (ADR-0009 R5): required when role is 'drives_status' — a binding may not
+  // drive status without a second anchor. Optional here (only drives_status needs it);
+  // the command rejects a driver bind that omits it, exactly like signal.bind_confirm.
+  second_anchor: goalDriverAnchorSchema.optional()
 }).strict();
 var goalBindMeasurableOutputSchema = external_exports.object({
-  goal_id: uuidSchema8,
-  measurable_id: uuidSchema8,
+  goal_id: uuidSchema9,
+  measurable_id: uuidSchema9,
   role: goalMeasurableRoleSchema,
   // Per-binding steward opt-in; a fresh binding is always created OFF.
   auto_status_enabled: external_exports.boolean(),
@@ -40869,27 +41177,31 @@ var goalBindMeasurableOutputSchema = external_exports.object({
   // DER-1633: false for a fresh binding; true when this exact (goal, Signal) pair was
   // already bound — the command is an idempotent no-op (no new event, no duplicate
   // confirmation). Lets a caller distinguish "just bound" from "already bound".
-  already_bound: external_exports.boolean()
+  already_bound: external_exports.boolean(),
+  // DER-1126: the second anchor recorded when this binding was promoted to (or created
+  // as) the status driver. Null for an 'informs' binding (no anchor) and for a legacy
+  // driver bound before the anchor gate existed.
+  driver_anchor: goalDriverAnchorSchema.nullable()
 }).strict();
 var goalUnbindMeasurableInputSchema = external_exports.object({
-  goal_id: uuidSchema8,
-  measurable_id: uuidSchema8,
+  goal_id: uuidSchema9,
+  measurable_id: uuidSchema9,
   // Which binding to remove; defaults to the status driver (the historical unbind).
   role: goalMeasurableRoleSchema.default("drives_status")
 }).strict();
 var goalUnbindMeasurableOutputSchema = external_exports.object({
-  goal_id: uuidSchema8,
-  measurable_id: uuidSchema8,
+  goal_id: uuidSchema9,
+  measurable_id: uuidSchema9,
   removed: external_exports.boolean()
 }).strict();
 var goalSetAutoStatusInputSchema = external_exports.object({
-  goal_id: uuidSchema8,
-  measurable_id: uuidSchema8,
+  goal_id: uuidSchema9,
+  measurable_id: uuidSchema9,
   enabled: external_exports.boolean()
 }).strict();
 var goalSetAutoStatusOutputSchema = external_exports.object({
-  goal_id: uuidSchema8,
-  measurable_id: uuidSchema8,
+  goal_id: uuidSchema9,
+  measurable_id: uuidSchema9,
   auto_status_enabled: external_exports.boolean(),
   // The goal's status after applying: enabling opts in and, when a confirmed
   // reading is available on a childless leaf that is not human-pinned, drives the
@@ -40899,7 +41211,7 @@ var goalSetAutoStatusOutputSchema = external_exports.object({
   applied_from_signal: external_exports.boolean()
 }).strict();
 var goalMeasurableBindingSchema = external_exports.object({
-  measurable_id: uuidSchema8,
+  measurable_id: uuidSchema9,
   name: external_exports.string(),
   unit: external_exports.string(),
   role: external_exports.literal("drives_status"),
@@ -40910,28 +41222,32 @@ var goalMeasurableBindingSchema = external_exports.object({
   computed_status: goalStatusSchema.nullable(),
   // The latest confirmed reading's value (null while awaiting one) — enough to render
   // "measured by <Signal>: <value> <unit>" instead of a bare "Not measured".
-  last_reading_value: external_exports.number().nullable()
+  last_reading_value: external_exports.number().nullable(),
+  // DER-1126: the second anchor recorded when this driver was confirmed (null for a
+  // legacy driver bound before the anchor gate). Lets the driver view show "Anchored on
+  // <period>: expected <value>".
+  driver_anchor: goalDriverAnchorSchema.nullable()
 }).strict();
 var goalListMeasurablesInputSchema = external_exports.object({
-  goal_id: uuidSchema8
+  goal_id: uuidSchema9
 }).strict();
 var goalListMeasurablesOutputSchema = external_exports.object({
-  goal_id: uuidSchema8,
+  goal_id: uuidSchema9,
   bindings: external_exports.array(goalMeasurableBindingSchema)
 }).strict();
 var goalCoreSchema = external_exports.object({
-  id: uuidSchema8,
+  id: uuidSchema9,
   title: external_exports.string(),
   kind: external_exports.enum(["objective", "cycle_goal", "company_objective", "seat_goal", "milestone"]),
   status: goalStatusSchema,
   status_source: goalStatusSourceSchema,
   progress_pct: external_exports.number().int().min(0).max(100).nullable(),
-  seat_id: uuidSchema8.nullable(),
-  parent_goal_id: uuidSchema8.nullable(),
+  seat_id: uuidSchema9.nullable(),
+  parent_goal_id: uuidSchema9.nullable(),
   definition_of_done: external_exports.string()
 }).strict();
 var goalGetInputSchema = external_exports.object({
-  goal_id: uuidSchema8
+  goal_id: uuidSchema9
 }).strict();
 var goalGetOutputSchema = external_exports.object({
   goal: goalCoreSchema
@@ -40941,16 +41257,16 @@ var frictionListInputSchema = external_exports.object({
   status: external_exports.enum(["open", "diagnosing", "resolved", "dropped", "active", "all"]).optional()
 }).strict();
 var frictionIssueSummarySchema = external_exports.object({
-  issue_id: uuidSchema8,
-  raised_by_seat_id: uuidSchema8,
+  issue_id: uuidSchema9,
+  raised_by_seat_id: uuidSchema9,
   raised_by_seat_name: external_exports.string(),
   summary: external_exports.string(),
   severity: external_exports.enum(["low", "med", "high", "critical"]),
   impact_score: external_exports.number(),
   status: issueStatusSchema,
-  blocking_goal_id: uuidSchema8.nullable(),
-  broken_measurable_id: uuidSchema8.nullable(),
-  action_task_id: uuidSchema8.nullable(),
+  blocking_goal_id: uuidSchema9.nullable(),
+  broken_measurable_id: uuidSchema9.nullable(),
+  action_task_id: uuidSchema9.nullable(),
   root_cause: external_exports.string().nullable(),
   resolved_at: external_exports.string().nullable(),
   created_at: external_exports.string()
@@ -40962,42 +41278,42 @@ var frictionIssueDetailSchema = frictionIssueSummarySchema.extend({
   raised_by_seat_type: external_exports.enum(["human", "agent", "hybrid"]),
   raised_by_seat_steward_name: external_exports.string().nullable(),
   origin_actor_kind: external_exports.enum(["user", "agent", "system"]).nullable(),
-  origin_actor_id: uuidSchema8.nullable(),
+  origin_actor_id: uuidSchema9.nullable(),
   evidence: external_exports.unknown(),
   action_task_title: external_exports.string().nullable(),
-  action_task_owner_seat_id: uuidSchema8.nullable(),
+  action_task_owner_seat_id: uuidSchema9.nullable(),
   action_task_owner_seat_name: external_exports.string().nullable(),
   action_task_due_on: external_exports.string().nullable(),
-  decision_id: uuidSchema8.nullable(),
+  decision_id: uuidSchema9.nullable(),
   decision_title: external_exports.string().nullable(),
   decision_summary: external_exports.string().nullable(),
   decided_by_name: external_exports.string().nullable(),
   updated_at: external_exports.string()
 }).strict();
 var frictionGetInputSchema = external_exports.object({
-  issue_id: uuidSchema8
+  issue_id: uuidSchema9
 }).strict();
 var frictionGetOutputSchema = external_exports.object({
   issue: frictionIssueDetailSchema
 }).strict();
 var frictionUpdateStatusInputSchema = external_exports.object({
-  issue_id: uuidSchema8,
+  issue_id: uuidSchema9,
   status: external_exports.enum(["open", "diagnosing"])
 }).strict();
 var frictionUpdateStatusOutputSchema = external_exports.object({
-  issue_id: uuidSchema8,
+  issue_id: uuidSchema9,
   status: external_exports.enum(["open", "diagnosing"]),
-  event_id: uuidSchema8
+  event_id: uuidSchema9
 }).strict();
 var frictionResolveInputSchema = external_exports.object({
-  issue_id: uuidSchema8,
+  issue_id: uuidSchema9,
   resolution_mode: external_exports.enum(["ids", "already_fixed"]).default("ids"),
   root_cause: external_exports.string().trim().min(1),
-  owner_seat_id: uuidSchema8.optional(),
+  owner_seat_id: uuidSchema9.optional(),
   task_title: external_exports.string().trim().min(1).optional(),
   task_description: external_exports.string().trim().min(1).optional(),
   done_by: dateOnlySchema.optional(),
-  resolving_seat_id: uuidSchema8.optional()
+  resolving_seat_id: uuidSchema9.optional()
 }).strict().superRefine((value, ctx) => {
   if (value.resolution_mode !== "ids") {
     return;
@@ -41016,38 +41332,38 @@ var frictionResolveInputSchema = external_exports.object({
   }
 });
 var frictionResolveOutputSchema = external_exports.object({
-  issue_id: uuidSchema8,
+  issue_id: uuidSchema9,
   status: external_exports.literal("resolved"),
-  action_task_id: uuidSchema8.nullable(),
-  decision_id: uuidSchema8
+  action_task_id: uuidSchema9.nullable(),
+  decision_id: uuidSchema9
 }).strict();
 var frictionLinkTaskInputSchema = external_exports.object({
-  issue_id: uuidSchema8,
-  task_id: uuidSchema8
+  issue_id: uuidSchema9,
+  task_id: uuidSchema9
 }).strict();
 var frictionLinkTaskOutputSchema = external_exports.object({
-  issue_id: uuidSchema8,
-  action_task_id: uuidSchema8
+  issue_id: uuidSchema9,
+  action_task_id: uuidSchema9
 }).strict();
 var taskCreateInputSchema = external_exports.object({
-  owner_seat_id: uuidSchema8,
-  from_seat_id: uuidSchema8.optional(),
+  owner_seat_id: uuidSchema9,
+  from_seat_id: uuidSchema9.optional(),
   title: external_exports.string().trim().min(1),
   description: external_exports.string().trim().min(1),
-  goal_id: uuidSchema8.optional(),
+  goal_id: uuidSchema9.optional(),
   acceptance_criteria: external_exports.array(external_exports.string().min(1)).optional(),
   due_on: dateOnlySchema.optional()
 }).strict();
 var taskCreateOutputSchema = external_exports.object({
-  task_id: uuidSchema8,
-  owner_seat_id: uuidSchema8,
-  from_seat_id: uuidSchema8.nullable(),
+  task_id: uuidSchema9,
+  owner_seat_id: uuidSchema9,
+  from_seat_id: uuidSchema9.nullable(),
   status: external_exports.string(),
   due_on: external_exports.string().nullable()
 }).strict();
 var taskUpdateInputSchema = external_exports.object({
-  task_id: uuidSchema8,
-  owner_seat_id: uuidSchema8.optional(),
+  task_id: uuidSchema9,
+  owner_seat_id: uuidSchema9.optional(),
   due_on: dateOnlySchema.optional(),
   title: external_exports.string().trim().min(1).optional(),
   description: external_exports.string().trim().min(1).optional(),
@@ -41057,17 +41373,17 @@ var taskUpdateInputSchema = external_exports.object({
   { message: "Provide at least one field to update." }
 );
 var taskUpdateOutputSchema = external_exports.object({
-  task_id: uuidSchema8,
-  owner_seat_id: uuidSchema8,
-  from_seat_id: uuidSchema8.nullable(),
+  task_id: uuidSchema9,
+  owner_seat_id: uuidSchema9,
+  from_seat_id: uuidSchema9.nullable(),
   status: external_exports.string(),
   due_on: external_exports.string().nullable()
 }).strict();
 var syncBriefCompileInputSchema = external_exports.object({
-  cluster_id: uuidSchema8.optional()
+  cluster_id: uuidSchema9.optional()
 }).strict();
 var syncBriefRefSchema = external_exports.object({
-  sync_brief_id: uuidSchema8,
+  sync_brief_id: uuidSchema9,
   period_start: dateOnlySchema,
   period_end: dateOnlySchema,
   compiled_at: external_exports.string(),
@@ -41076,10 +41392,10 @@ var syncBriefRefSchema = external_exports.object({
   created: external_exports.boolean()
 }).strict();
 var syncBriefGetInputSchema = external_exports.object({
-  sync_brief_id: uuidSchema8.optional()
+  sync_brief_id: uuidSchema9.optional()
 }).strict();
 var syncBriefGetOutputSchema = external_exports.object({
-  sync_brief_id: uuidSchema8,
+  sync_brief_id: uuidSchema9,
   period_start: dateOnlySchema,
   period_end: dateOnlySchema,
   compiled_at: external_exports.string(),
@@ -41088,10 +41404,10 @@ var syncBriefGetOutputSchema = external_exports.object({
   doc: external_exports.unknown()
 }).strict();
 var syncRunStartInputSchema = external_exports.object({
-  cluster_id: uuidSchema8.optional()
+  cluster_id: uuidSchema9.optional()
 }).strict();
 var syncRunStartOutputSchema = external_exports.object({
-  sync_brief_id: uuidSchema8,
+  sync_brief_id: uuidSchema9,
   period_start: dateOnlySchema,
   period_end: dateOnlySchema,
   compiled_at: external_exports.string(),
@@ -41099,25 +41415,25 @@ var syncRunStartOutputSchema = external_exports.object({
   degraded: external_exports.boolean()
 }).strict();
 var syncRunCompleteInputSchema = external_exports.object({
-  sync_brief_id: uuidSchema8
+  sync_brief_id: uuidSchema9
 }).strict();
 var syncRunCompleteOutputSchema = external_exports.object({
-  sync_brief_id: uuidSchema8,
-  event_id: uuidSchema8,
-  decision_ids: external_exports.array(uuidSchema8),
-  task_ids: external_exports.array(uuidSchema8)
+  sync_brief_id: uuidSchema9,
+  event_id: uuidSchema9,
+  decision_ids: external_exports.array(uuidSchema9),
+  task_ids: external_exports.array(uuidSchema9)
 }).strict();
 var syncItemAssignInputSchema = external_exports.object({
-  sync_brief_id: uuidSchema8,
-  owner_seat_id: uuidSchema8,
+  sync_brief_id: uuidSchema9,
+  owner_seat_id: uuidSchema9,
   title: external_exports.string().trim().min(1),
   description: external_exports.string().trim().min(1),
   due_on: dateOnlySchema.optional()
 }).strict();
 var syncItemAssignOutputSchema = external_exports.object({
-  sync_brief_id: uuidSchema8,
-  task_id: uuidSchema8,
-  owner_seat_id: uuidSchema8,
+  sync_brief_id: uuidSchema9,
+  task_id: uuidSchema9,
+  owner_seat_id: uuidSchema9,
   status: external_exports.string(),
   due_on: external_exports.string().nullable()
 }).strict();
@@ -41613,18 +41929,18 @@ function parseNinetyRocksCsv(text) {
 }
 
 // ../../packages/protocol/src/markdown-readout.ts
-var uuidSchema9 = external_exports.string().uuid();
+var uuidSchema10 = external_exports.string().uuid();
 var markdownOutputSchema = external_exports.object({
   markdown: external_exports.string().min(1)
 }).strict();
 var compassShowMarkdownInputSchema = external_exports.object({}).strict();
 var charterShowMarkdownInputSchema = external_exports.object({
-  seat_id: uuidSchema9
+  seat_id: uuidSchema10
 }).strict();
 var charterShowMarkdownOutputSchema = external_exports.object({
   markdown: external_exports.string().min(1),
-  charter_version_id: uuidSchema9.nullable(),
-  seat_id: uuidSchema9,
+  charter_version_id: uuidSchema10.nullable(),
+  seat_id: uuidSchema10,
   version: external_exports.number().int().nonnegative().nullable(),
   status: external_exports.string().nullable(),
   doc: external_exports.unknown().nullable(),
@@ -41634,7 +41950,7 @@ var charterShowMarkdownOutputSchema = external_exports.object({
   }).strict().nullable()
 }).strict();
 var agentShowMarkdownInputSchema = external_exports.object({
-  seat_id: uuidSchema9
+  seat_id: uuidSchema10
 }).strict();
 
 // ../../packages/protocol/src/constants.ts
@@ -41658,7 +41974,7 @@ var SEAT_MCP_CLAIM_TOKEN_TTL_SECONDS = (FORGE_TURN_HARD_CEILING_SECONDS + FORGE_
 
 // ../../packages/protocol/src/mcp-onboarding.ts
 var MCP_TOKEN_ABSOLUTE_MAX_EXPIRY_MS = (MCP_TOKEN_NO_EXPIRY_SENTINEL_DAYS + 1) * 24 * 60 * 60 * 1e3;
-var uuidSchema10 = external_exports.string().uuid();
+var uuidSchema11 = external_exports.string().uuid();
 var isoDateTime2 = external_exports.string().datetime({ offset: true });
 var onboardingStatusInputSchema = external_exports.object({}).strict();
 var onboardingStatusOutputSchema = external_exports.object({
@@ -41699,7 +42015,7 @@ var onboardingAttachReferenceInputSchema = external_exports.object({
   source: external_exports.string().trim().min(1).max(500).optional()
 }).strict();
 var onboardingAttachReferenceOutputSchema = external_exports.object({
-  document_id: uuidSchema10,
+  document_id: uuidSchema11,
   storage_ref: external_exports.string().min(1),
   kind: external_exports.enum(["org_chart", "role_doc", "plan", "financial", "other"]),
   title: external_exports.string().min(1).nullable()
@@ -41721,7 +42037,7 @@ var onboardingCreateInviteInputSchema = external_exports.object({
   flags: external_exports.record(external_exports.string(), external_exports.unknown()).default({})
 }).strict();
 var onboardingCreateInviteOutputSchema = external_exports.object({
-  invite_id: uuidSchema10,
+  invite_id: uuidSchema11,
   email: external_exports.string().email(),
   role: external_exports.enum(["owner", "admin", "steward", "member"]),
   token: external_exports.string().min(1)
@@ -41734,36 +42050,36 @@ var tenantAnthropicKeySaveOutputSchema = external_exports.object({
 }).strict();
 var seatCreateInputSchema = external_exports.object({
   name: external_exports.string().trim().min(1).max(120),
-  parent_seat_id: uuidSchema10.nullable().optional(),
+  parent_seat_id: uuidSchema11.nullable().optional(),
   seat_type: external_exports.enum(["human", "agent", "hybrid"]).default("human")
 }).strict();
 var seatCreateOutputSchema = external_exports.object({
-  seat_id: uuidSchema10
+  seat_id: uuidSchema11
 }).strict();
 var seatRenameInputSchema = external_exports.object({
-  seat_id: uuidSchema10,
+  seat_id: uuidSchema11,
   name: external_exports.string().trim().min(1).max(120)
 }).strict();
 var seatReparentInputSchema = external_exports.object({
-  seat_id: uuidSchema10,
-  new_parent_seat_id: uuidSchema10.nullable()
+  seat_id: uuidSchema11,
+  new_parent_seat_id: uuidSchema11.nullable()
 }).strict();
 var seatSetTypeInputSchema = external_exports.object({
-  seat_id: uuidSchema10,
+  seat_id: uuidSchema11,
   seat_type: external_exports.enum(["human", "agent", "hybrid"])
 }).strict();
 var seatDecommissionInputSchema = external_exports.object({
-  seat_id: uuidSchema10
+  seat_id: uuidSchema11
 }).strict();
 var seatMutationOutputSchema = external_exports.object({
-  seat_id: uuidSchema10
+  seat_id: uuidSchema11
 }).strict();
 var seatDecommissionPreviewOutputSchema = external_exports.object({
-  seat_id: uuidSchema10,
+  seat_id: uuidSchema11,
   seat_name: external_exports.string(),
   previous_status: external_exports.enum(["draft", "active", "vacant", "decommissioned"]),
   active_occupancy_count: external_exports.number().int().nonnegative(),
-  active_agent_ids: external_exports.array(uuidSchema10),
+  active_agent_ids: external_exports.array(uuidSchema11),
   active_charter_count: external_exports.number().int().nonnegative(),
   active_mcp_token_count: external_exports.number().int().nonnegative(),
   active_credential_count: external_exports.number().int().nonnegative(),
@@ -41773,15 +42089,15 @@ var seatDecommissionPreviewOutputSchema = external_exports.object({
   effects: external_exports.array(external_exports.string())
 }).strict();
 var charterDraftInputSchema = external_exports.object({
-  seat_id: uuidSchema10
+  seat_id: uuidSchema11
 }).strict();
 var charterDraftOutputSchema = external_exports.object({
-  charter_version_id: uuidSchema10,
-  seat_id: uuidSchema10,
+  charter_version_id: uuidSchema11,
+  seat_id: uuidSchema11,
   doc: external_exports.unknown()
 }).strict();
 var charterUpdateDraftInputSchema = external_exports.object({
-  charter_version_id: uuidSchema10,
+  charter_version_id: uuidSchema11,
   // DER-785 (Part G): the full Charter document contract (was `z.unknown()`).
   // The DB layer already validated this with `charterSchema.parse`; advertising
   // it here gives `command.describe`/`rost command schema` a real shape and a
@@ -41789,17 +42105,17 @@ var charterUpdateDraftInputSchema = external_exports.object({
   doc: charterDocSchema
 }).strict();
 var charterSetInputSchema = external_exports.object({
-  seat_id: uuidSchema10,
+  seat_id: uuidSchema11,
   doc: charterDocSchema,
   approve: external_exports.boolean().default(false)
 }).strict();
 var charterMutationOutputSchema = external_exports.object({
-  charter_version_id: uuidSchema10,
-  seat_id: uuidSchema10
+  charter_version_id: uuidSchema11,
+  seat_id: uuidSchema11
 }).strict();
 var charterApproveInputSchema = external_exports.object({
-  seat_id: uuidSchema10.optional(),
-  charter_version_id: uuidSchema10.optional(),
+  seat_id: uuidSchema11.optional(),
+  charter_version_id: uuidSchema11.optional(),
   // DER-785 (Part G): a partial of the Charter doc shape (was an untyped record).
   // These fields are shallow-merged onto the existing draft, then the merged doc
   // is re-validated against the full schema at persist time.
@@ -41814,20 +42130,20 @@ var charterDraftSkipReasonSchema = external_exports.enum(["seat_not_active", "ch
 var charterDraftAllOutputSchema = external_exports.object({
   drafted: external_exports.number().int().nonnegative(),
   skipped: external_exports.number().int().nonnegative(),
-  draft_ids: external_exports.array(uuidSchema10),
+  draft_ids: external_exports.array(uuidSchema11),
   skipped_seats: external_exports.array(external_exports.object({
-    seat_id: uuidSchema10,
+    seat_id: uuidSchema11,
     reason: charterDraftSkipReasonSchema
   }).strict())
 }).strict();
 var charterSkipInputSchema = external_exports.object({
-  charter_version_id: uuidSchema10
+  charter_version_id: uuidSchema11
 }).strict();
 var charterApplySeatTypeRecommendationInputSchema = external_exports.object({
-  charter_version_id: uuidSchema10
+  charter_version_id: uuidSchema11
 }).strict();
 var charterSignManifestInputSchema = external_exports.object({
-  charter_version_id: uuidSchema10
+  charter_version_id: uuidSchema11
 }).strict();
 var pendingConfirmationSchema = external_exports.object({
   confirmationId: external_exports.string().min(1),
@@ -41871,13 +42187,13 @@ var confirmationListInputSchema = external_exports.object({
   limit: external_exports.number().int().min(1).max(200).optional()
 }).strict();
 var confirmationSummarySchema = external_exports.object({
-  id: uuidSchema10,
+  id: uuidSchema11,
   command_id: external_exports.string(),
   redacted_args: external_exports.unknown(),
   actor_kind: external_exports.enum(["user", "agent", "system"]),
   source: external_exports.string(),
   scope_kind: external_exports.enum(["tenant_admin", "tenant", "seat"]),
-  seat_id: uuidSchema10.nullable(),
+  seat_id: uuidSchema11.nullable(),
   seat_name: external_exports.string().nullable(),
   seat_type: external_exports.enum(["human", "agent", "hybrid"]).nullable(),
   risk_level: external_exports.enum(["normal", "sensitive", "dangerous"]),
@@ -41889,28 +42205,28 @@ var confirmationListOutputSchema = external_exports.object({
   confirmations: external_exports.array(confirmationSummarySchema)
 }).strict();
 var credentialIngressInputSchema = external_exports.object({
-  seat_id: uuidSchema10.optional(),
+  seat_id: uuidSchema11.optional(),
   provider: external_exports.string().trim().min(1),
   scope_description: external_exports.string().trim().min(1),
   secret_name: external_exports.string().trim().min(1),
   secret: external_exports.string().trim().min(1)
 }).strict();
 var credentialIngressOutputSchema = external_exports.object({
-  credential_id: uuidSchema10,
+  credential_id: uuidSchema11,
   provider: external_exports.string().min(1),
-  seat_id: uuidSchema10.nullable()
+  seat_id: uuidSchema11.nullable()
 }).strict();
 var agentGoLiveInputSchema = external_exports.object({
-  seat_id: uuidSchema10,
-  charter_version_id: uuidSchema10
+  seat_id: uuidSchema11,
+  charter_version_id: uuidSchema11
 }).strict();
 var agentGoLiveOutputSchema = external_exports.object({
-  seat_id: uuidSchema10,
-  charter_version_id: uuidSchema10,
+  seat_id: uuidSchema11,
+  charter_version_id: uuidSchema11,
   status: external_exports.literal("live")
 }).strict();
 var compassSetInputSchema = external_exports.object({
-  draft_id: uuidSchema10.optional(),
+  draft_id: uuidSchema11.optional(),
   doc: compassDraftSchema.optional(),
   approve: external_exports.boolean().default(false)
 }).strict().refine((input) => Boolean(input.draft_id) !== Boolean(input.doc), {
@@ -41918,7 +42234,7 @@ var compassSetInputSchema = external_exports.object({
   path: ["draft_id"]
 });
 var compassMutationOutputSchema = external_exports.object({
-  compass_version_id: uuidSchema10,
+  compass_version_id: uuidSchema11,
   status: external_exports.enum(["draft", "active", "superseded"]),
   version: external_exports.number().int().nonnegative()
 }).strict();
@@ -41926,42 +42242,42 @@ var compassDraftInputSchema = external_exports.object({
   doc: compassDraftSchema
 }).strict();
 var compassUpdateDraftInputSchema = external_exports.object({
-  draft_id: uuidSchema10,
+  draft_id: uuidSchema11,
   doc: compassDraftSchema
 }).strict();
 var compassApproveVersionInputSchema = external_exports.object({
-  draft_id: uuidSchema10
+  draft_id: uuidSchema11
 }).strict();
 var compassRejectDraftInputSchema = external_exports.object({
-  draft_id: uuidSchema10
+  draft_id: uuidSchema11
 }).strict();
 var compassAnswerGapInputSchema = external_exports.object({
   gap_id: external_exports.string().min(1),
   answer: external_exports.string().trim().min(1)
 }).strict();
 var seatStaffInputSchema = external_exports.object({
-  seat_id: uuidSchema10,
+  seat_id: uuidSchema11,
   occupant: external_exports.discriminatedUnion("type", [
     external_exports.object({ type: external_exports.literal("vacant") }).strict(),
-    external_exports.object({ type: external_exports.literal("user"), user_id: uuidSchema10 }).strict(),
-    external_exports.object({ type: external_exports.literal("agent"), agent_id: uuidSchema10 }).strict()
+    external_exports.object({ type: external_exports.literal("user"), user_id: uuidSchema11 }).strict(),
+    external_exports.object({ type: external_exports.literal("agent"), agent_id: uuidSchema11 }).strict()
   ])
 }).strict();
 var staffingMutationOutputSchema = external_exports.object({
-  seat_id: uuidSchema10,
+  seat_id: uuidSchema11,
   staffed: external_exports.enum(["vacant", "user", "agent"])
 }).strict();
 var staffingAssignUserInputSchema = external_exports.object({
-  seat_id: uuidSchema10,
-  user_id: uuidSchema10
+  seat_id: uuidSchema11,
+  user_id: uuidSchema11
 }).strict();
 var staffingAssignAgentDryRunInputSchema = external_exports.object({
-  seat_id: uuidSchema10,
-  agent_id: uuidSchema10
+  seat_id: uuidSchema11,
+  agent_id: uuidSchema11
 }).strict();
 var mcpTokenCreateInputSchema = external_exports.object({
   scope: external_exports.enum(["tenant_admin", "seat"]),
-  seat_id: uuidSchema10.optional(),
+  seat_id: uuidSchema11.optional(),
   // DER-830: explicit absolute expiry (kept for back-compat / direct callers).
   // When omitted OR null, the DB default (now() + 90 days) applies — `null` is an
   // accepted "no explicit expiry" signal (existing UI/MCP callers pass it), so it
@@ -42005,17 +42321,17 @@ var mcpTokenCreateInputSchema = external_exports.object({
   }
 });
 var mcpTokenCreateOutputSchema = external_exports.object({
-  token_id: uuidSchema10,
+  token_id: uuidSchema11,
   token: external_exports.string().min(1),
   scope: external_exports.enum(["tenant_admin", "seat"]),
-  seat_id: uuidSchema10.nullable()
+  seat_id: uuidSchema11.nullable()
 }).strict();
 var mcpTokenRevokeInputSchema = external_exports.object({
-  token_id: uuidSchema10,
-  seat_id: uuidSchema10.optional()
+  token_id: uuidSchema11,
+  seat_id: uuidSchema11.optional()
 }).strict();
 var mcpTokenRevokeOutputSchema = external_exports.object({
-  token_id: uuidSchema10,
+  token_id: uuidSchema11,
   revoked: external_exports.boolean()
 }).strict();
 
@@ -42028,7 +42344,7 @@ var markNotificationsReadRequestSchema = external_exports.object({
 });
 
 // ../../packages/protocol/src/product-analytics.ts
-var uuidSchema11 = external_exports.string().uuid();
+var uuidSchema12 = external_exports.string().uuid();
 var safeNameSchema = external_exports.string().trim().min(1).max(120).regex(/^[a-z][a-z0-9._:-]*$/);
 var safeSurfaceSchema = external_exports.string().trim().min(1).max(80).regex(/^[a-z][a-z0-9_-]*$/);
 var routeSegmentSchema = /^(?:[a-z][a-z0-9-]{0,31}|:[a-z][a-z0-9_]{0,31}|\*)$/;
@@ -42091,8 +42407,8 @@ var recommendationOutcomeStatusSchema = external_exports.enum([
 ]);
 var durationMsSchema = external_exports.number().int().nonnegative().max(24 * 60 * 60 * 1e3).optional();
 var productEventInputSchema = external_exports.object({
-  tenant_id: uuidSchema11,
-  user_id: uuidSchema11.optional(),
+  tenant_id: uuidSchema12,
+  user_id: uuidSchema12.optional(),
   source: analyticsSourceSchema,
   event_name: safeNameSchema,
   route_template: routeTemplateSchema.optional(),
@@ -42101,8 +42417,8 @@ var productEventInputSchema = external_exports.object({
   occurred_at: external_exports.string().datetime({ offset: true }).optional()
 }).strict();
 var pageViewInputSchema = external_exports.object({
-  tenant_id: uuidSchema11,
-  user_id: uuidSchema11.optional(),
+  tenant_id: uuidSchema12,
+  user_id: uuidSchema12.optional(),
   route_template: routeTemplateSchema,
   referrer_route_template: routeTemplateSchema.optional(),
   surface: safeSurfaceSchema.default("web"),
@@ -42111,9 +42427,9 @@ var pageViewInputSchema = external_exports.object({
   occurred_at: external_exports.string().datetime({ offset: true }).optional()
 }).strict();
 var commandInvocationInputSchema = external_exports.object({
-  tenant_id: uuidSchema11,
-  user_id: uuidSchema11.optional(),
-  seat_id: uuidSchema11.optional(),
+  tenant_id: uuidSchema12,
+  user_id: uuidSchema12.optional(),
+  seat_id: uuidSchema12.optional(),
   command_id: safeNameSchema,
   source: analyticsSourceSchema,
   actor_kind: external_exports.enum(["user", "agent", "system"]),
@@ -42122,7 +42438,7 @@ var commandInvocationInputSchema = external_exports.object({
   guard_result: external_exports.enum(["allowed", "denied_manifest", "denied_budget", "escalated", "denied_tenant_policy"]).optional(),
   duration_ms: durationMsSchema,
   confirmation_required: external_exports.boolean().optional(),
-  request_id: uuidSchema11.optional(),
+  request_id: uuidSchema12.optional(),
   properties: analyticsPropertiesSchema.optional(),
   occurred_at: external_exports.string().datetime({ offset: true }).optional()
 }).strict().superRefine((value, ctx) => {
@@ -42135,8 +42451,8 @@ var commandInvocationInputSchema = external_exports.object({
   }
 });
 var onboardingMilestoneInputSchema = external_exports.object({
-  tenant_id: uuidSchema11,
-  user_id: uuidSchema11.optional(),
+  tenant_id: uuidSchema12,
+  user_id: uuidSchema12.optional(),
   milestone: safeNameSchema,
   status: analyticsOutcomeStatusSchema,
   step_index: external_exports.number().int().nonnegative().max(100).optional(),
@@ -42145,19 +42461,19 @@ var onboardingMilestoneInputSchema = external_exports.object({
   occurred_at: external_exports.string().datetime({ offset: true }).optional()
 }).strict();
 var recommendationEventInputSchema = external_exports.object({
-  tenant_id: uuidSchema11,
-  user_id: uuidSchema11.optional(),
+  tenant_id: uuidSchema12,
+  user_id: uuidSchema12.optional(),
   recommendation_type: safeNameSchema,
   source_surface: safeSurfaceSchema,
   status: recommendationOutcomeStatusSchema,
   target_kind: safeSurfaceSchema.optional(),
-  target_id: uuidSchema11.optional(),
+  target_id: uuidSchema12.optional(),
   properties: analyticsPropertiesSchema.optional(),
   occurred_at: external_exports.string().datetime({ offset: true }).optional()
 }).strict();
 
 // ../../packages/protocol/src/reads.ts
-var uuidSchema12 = external_exports.string().uuid();
+var uuidSchema13 = external_exports.string().uuid();
 var isoDateTime3 = external_exports.string().datetime({ offset: true });
 var seatTypeSchema = external_exports.enum(["human", "agent", "hybrid"]);
 var seatStatusSchema = external_exports.enum(["draft", "active", "vacant", "decommissioned"]);
@@ -42172,13 +42488,13 @@ var credentialStatusSchema = external_exports.enum(["active", "revoked"]);
 var runStatusSchema = external_exports.enum(["running", "succeeded", "failed", "timeout", "cancelled"]);
 var graphGetInputSchema = external_exports.object({}).strict();
 var graphNodeSchema = external_exports.object({
-  seat_id: uuidSchema12,
+  seat_id: uuidSchema13,
   name: external_exports.string(),
   seat_type: seatTypeSchema,
   status: seatStatusSchema,
-  parent_seat_id: uuidSchema12.nullable(),
+  parent_seat_id: uuidSchema13.nullable(),
   is_root: external_exports.boolean(),
-  steward_seat_id: uuidSchema12.nullable(),
+  steward_seat_id: uuidSchema13.nullable(),
   occupant: external_exports.object({
     kind: external_exports.enum(["user", "agent"]),
     label: external_exports.string(),
@@ -42191,11 +42507,11 @@ var graphNodeSchema = external_exports.object({
   is_peer: external_exports.boolean()
 }).strict();
 var graphEdgeSchema = external_exports.object({
-  parent_seat_id: uuidSchema12,
-  child_seat_id: uuidSchema12
+  parent_seat_id: uuidSchema13,
+  child_seat_id: uuidSchema13
 }).strict();
 var graphGetOutputSchema = external_exports.object({
-  root_seat_id: uuidSchema12.nullable(),
+  root_seat_id: uuidSchema13.nullable(),
   nodes: external_exports.array(graphNodeSchema),
   edges: external_exports.array(graphEdgeSchema),
   status_rollups: external_exports.object({
@@ -42207,32 +42523,32 @@ var graphGetOutputSchema = external_exports.object({
   }).strict()
 }).strict();
 var seatGetInputSchema = external_exports.object({
-  seat_id: uuidSchema12
+  seat_id: uuidSchema13
 }).strict();
 var seatGetOutputSchema = external_exports.object({
-  seat_id: uuidSchema12,
+  seat_id: uuidSchema13,
   name: external_exports.string(),
   seat_type: seatTypeSchema,
   status: seatStatusSchema,
   purpose: external_exports.string().nullable(),
-  parent_seat_id: uuidSchema12.nullable(),
+  parent_seat_id: uuidSchema13.nullable(),
   steward_chain: external_exports.array(external_exports.object({
-    seat_id: uuidSchema12,
+    seat_id: uuidSchema13,
     name: external_exports.string()
   }).strict()),
   occupancies: external_exports.array(external_exports.object({
-    occupancy_id: uuidSchema12,
+    occupancy_id: uuidSchema13,
     occupant_type: external_exports.enum(["user", "agent"]),
     label: external_exports.string(),
     started_at: isoDateTime3,
     ended_at: isoDateTime3.nullable()
   }).strict()),
-  active_charter_version_id: uuidSchema12.nullable(),
-  draft_charter_version_id: uuidSchema12.nullable(),
+  active_charter_version_id: uuidSchema13.nullable(),
+  draft_charter_version_id: uuidSchema13.nullable(),
   agent_status: agentStatusEnum2.nullable(),
   agent_lane: agentLaneSchema2.nullable(),
   mcp_tokens: external_exports.array(external_exports.object({
-    token_id: uuidSchema12,
+    token_id: uuidSchema13,
     scope: mcpScopeSchema,
     created_at: isoDateTime3,
     last_seen_at: isoDateTime3.nullable(),
@@ -42242,7 +42558,7 @@ var seatGetOutputSchema = external_exports.object({
     revoked_at: isoDateTime3.nullable()
   }).strict()),
   credentials: external_exports.array(external_exports.object({
-    credential_id: uuidSchema12,
+    credential_id: uuidSchema13,
     provider: external_exports.string(),
     status: credentialStatusSchema
   }).strict()),
@@ -42254,12 +42570,12 @@ var seatGetOutputSchema = external_exports.object({
   }).strict()
 }).strict();
 var charterListInputSchema = external_exports.object({
-  seat_id: uuidSchema12.optional(),
+  seat_id: uuidSchema13.optional(),
   status: charterStatusSchema.optional()
 }).strict();
 var charterSummarySchema = external_exports.object({
-  charter_version_id: uuidSchema12,
-  seat_id: uuidSchema12,
+  charter_version_id: uuidSchema13,
+  seat_id: uuidSchema13,
   version: external_exports.number().int().nonnegative(),
   status: charterStatusSchema,
   created_at: isoDateTime3,
@@ -42269,11 +42585,11 @@ var charterListOutputSchema = external_exports.object({
   charters: external_exports.array(charterSummarySchema)
 }).strict();
 var charterGetInputSchema = external_exports.object({
-  charter_version_id: uuidSchema12
+  charter_version_id: uuidSchema13
 }).strict();
 var charterGetOutputSchema = external_exports.object({
-  charter_version_id: uuidSchema12,
-  seat_id: uuidSchema12,
+  charter_version_id: uuidSchema13,
+  seat_id: uuidSchema13,
   version: external_exports.number().int().nonnegative(),
   status: charterStatusSchema,
   created_at: isoDateTime3,
@@ -42287,7 +42603,7 @@ var charterGetOutputSchema = external_exports.object({
 }).strict();
 var compassGetCurrentInputSchema = external_exports.object({}).strict();
 var compassVersionRefSchema = external_exports.object({
-  compass_version_id: uuidSchema12,
+  compass_version_id: uuidSchema13,
   version: external_exports.number().int().nonnegative(),
   status: compassStatusSchema,
   doc: external_exports.unknown()
@@ -42298,7 +42614,7 @@ var compassGetCurrentOutputSchema = external_exports.object({
   // Sources expose document id and kind only. The underlying storage_ref can
   // be a local file path, so it is never surfaced (redaction rule).
   sources: external_exports.array(external_exports.object({
-    document_id: uuidSchema12,
+    document_id: uuidSchema13,
     kind: external_exports.string()
   }).strict())
 }).strict();
@@ -42313,31 +42629,31 @@ var compassGapSchema = external_exports.object({
   answer: external_exports.string().nullable()
 }).strict();
 var compassListGapsOutputSchema = external_exports.object({
-  compass_version_id: uuidSchema12.nullable(),
+  compass_version_id: uuidSchema13.nullable(),
   unanswered: external_exports.array(compassGapSchema),
   answered: external_exports.array(compassGapSchema)
 }).strict();
 var agentStatusInputSchema = external_exports.object({
-  seat_id: uuidSchema12
+  seat_id: uuidSchema13
 }).strict();
 var agentStatusOutputSchema = external_exports.object({
-  seat_id: uuidSchema12,
+  seat_id: uuidSchema13,
   // DER-786 (C7): `has_agent` is true whenever a setup agent exists for the seat
   // — including a draft setup that has no occupancy yet — so it agrees with
   // agent_setup.get. `lifecycle` is the shared cross-surface term derived from
   // `status` (none | draft_setup | dry_run | live | …).
   has_agent: external_exports.boolean(),
   lifecycle: agentLifecycleSchema,
-  agent_id: uuidSchema12.nullable(),
+  agent_id: uuidSchema13.nullable(),
   kind: agentKindSchema2.nullable(),
   display_name: external_exports.string().nullable(),
   lane: agentLaneSchema2.nullable(),
   status: agentStatusEnum2.nullable(),
   schedule_cron: external_exports.string().nullable(),
   live: external_exports.boolean(),
-  charter_version_id: uuidSchema12.nullable(),
+  charter_version_id: uuidSchema13.nullable(),
   steward_chain: external_exports.array(external_exports.object({
-    seat_id: uuidSchema12,
+    seat_id: uuidSchema13,
     name: external_exports.string()
   }).strict()),
   steward_chain_resolves_to_human: external_exports.boolean(),
@@ -42349,7 +42665,7 @@ var agentStatusOutputSchema = external_exports.object({
 }).strict();
 var agentListFleetInputSchema = external_exports.object({}).strict();
 var fleetOverviewRowSchema = external_exports.object({
-  seat_id: uuidSchema12,
+  seat_id: uuidSchema13,
   seat_name: external_exports.string(),
   seat_path: external_exports.string(),
   lane: agentLaneSchema2.nullable(),
@@ -42366,7 +42682,7 @@ var agentListFleetOutputSchema = external_exports.object({
   agents: external_exports.array(fleetOverviewRowSchema)
 }).strict();
 var runErrorLogSchema = external_exports.object({
-  error_log_id: uuidSchema12,
+  error_log_id: uuidSchema13,
   source: external_exports.enum(["run", "llm", "tool", "mcp", "runner", "integration", "job", "web"]),
   severity: external_exports.enum(["warning", "error", "critical"]),
   code: external_exports.string().nullable(),
@@ -42379,9 +42695,9 @@ var agentFleetDigestInputSchema = external_exports.object({
   error_limit: external_exports.number().int().min(1).max(100).default(50)
 }).strict();
 var fleetDigestRunSchema = external_exports.object({
-  run_id: uuidSchema12,
-  seat_id: uuidSchema12,
-  agent_id: uuidSchema12,
+  run_id: uuidSchema13,
+  seat_id: uuidSchema13,
+  agent_id: uuidSchema13,
   status: runStatusSchema,
   lane: agentLaneSchema2,
   model: external_exports.string(),
@@ -42391,22 +42707,22 @@ var fleetDigestRunSchema = external_exports.object({
   error_logs: external_exports.array(runErrorLogSchema)
 }).strict();
 var fleetDigestErrorSchema = runErrorLogSchema.extend({
-  seat_id: uuidSchema12.nullable(),
-  agent_id: uuidSchema12.nullable(),
-  run_id: uuidSchema12.nullable(),
+  seat_id: uuidSchema13.nullable(),
+  agent_id: uuidSchema13.nullable(),
+  run_id: uuidSchema13.nullable(),
   disposition: external_exports.enum(["active", "acknowledged", "resolved", "superseded"])
 }).strict();
 var fleetDigestNotificationErrorSchema = external_exports.object({
-  notification_id: uuidSchema12,
+  notification_id: uuidSchema13,
   kind: external_exports.string(),
   channel: external_exports.string(),
   status: external_exports.string(),
   provider: external_exports.string(),
   error_message: external_exports.string().nullable(),
-  error_log_id: uuidSchema12.nullable(),
+  error_log_id: uuidSchema13.nullable(),
   source: external_exports.enum(["run", "llm", "tool", "mcp", "runner", "integration", "job", "web"]).nullable(),
-  seat_id: uuidSchema12.nullable(),
-  run_id: uuidSchema12.nullable(),
+  seat_id: uuidSchema13.nullable(),
+  run_id: uuidSchema13.nullable(),
   created_at: isoDateTime3
 }).strict();
 var fleetDigestAgentSchema = fleetOverviewRowSchema.extend({
@@ -42455,17 +42771,17 @@ var seatTrustSummarySchema = external_exports.object({
   last_activity_at: isoDateTime3.nullable()
 }).strict();
 var agentListRunsInputSchema = external_exports.object({
-  seat_id: uuidSchema12,
+  seat_id: uuidSchema13,
   // Conservative, bounded page size; the timeline is a recent-history view.
   limit: external_exports.number().int().min(1).max(200).default(50)
 }).strict();
 var agentGetRunInputSchema = external_exports.object({
-  seat_id: uuidSchema12,
-  run_id: uuidSchema12
+  seat_id: uuidSchema13,
+  run_id: uuidSchema13
 }).strict();
 var seatRunSchema = external_exports.object({
-  run_id: uuidSchema12,
-  agent_id: uuidSchema12,
+  run_id: uuidSchema13,
+  agent_id: uuidSchema13,
   agent_display_name: external_exports.string().nullable(),
   status: runStatusSchema,
   lane: agentLaneSchema2,
@@ -42478,16 +42794,16 @@ var seatRunSchema = external_exports.object({
   skill_activation_count: external_exports.number().int().nonnegative()
 }).strict();
 var seatRunDetailSchema = seatRunSchema.extend({
-  task_id: uuidSchema12.nullable(),
-  work_order_id: uuidSchema12.nullable(),
+  task_id: uuidSchema13.nullable(),
+  work_order_id: uuidSchema13.nullable(),
   transcript_ref: external_exports.string(),
   input_tokens: external_exports.number().int().nonnegative(),
   output_tokens: external_exports.number().int().nonnegative(),
   outcome: external_exports.record(external_exports.string(), external_exports.unknown()),
   error_logs: external_exports.array(runErrorLogSchema),
   skill_activations: external_exports.array(external_exports.object({
-    skill_activation_id: uuidSchema12,
-    skill_version_id: uuidSchema12,
+    skill_activation_id: uuidSchema13,
+    skill_version_id: uuidSchema13,
     slug: external_exports.string().min(1),
     name: external_exports.string().min(1),
     version: external_exports.number().int().positive(),
@@ -42501,23 +42817,23 @@ var seatRunDetailSchema = seatRunSchema.extend({
   }).strict())
 }).strict();
 var agentListRunsOutputSchema = external_exports.object({
-  seat_id: uuidSchema12,
+  seat_id: uuidSchema13,
   summary: seatTrustSummarySchema,
   runs: external_exports.array(seatRunSchema)
 }).strict();
 var agentGetRunOutputSchema = external_exports.object({
-  seat_id: uuidSchema12,
+  seat_id: uuidSchema13,
   run: seatRunDetailSchema
 }).strict();
 var agentListToolCallsInputSchema = external_exports.object({
-  seat_id: uuidSchema12,
+  seat_id: uuidSchema13,
   limit: external_exports.number().int().min(1).max(200).default(50),
   // When true, return only HELD (non-allowed) tool calls — the governance view.
   held_only: external_exports.boolean().default(false)
 }).strict();
 var seatToolCallSchema = external_exports.object({
-  tool_call_id: uuidSchema12,
-  run_id: uuidSchema12.nullable(),
+  tool_call_id: uuidSchema13,
+  run_id: uuidSchema13.nullable(),
   tool_name: external_exports.string(),
   guard_result: guardResultSchema,
   manifest_clause: external_exports.string().nullable(),
@@ -42526,7 +42842,7 @@ var seatToolCallSchema = external_exports.object({
   finished_at: isoDateTime3.nullable()
 }).strict();
 var agentListToolCallsOutputSchema = external_exports.object({
-  seat_id: uuidSchema12,
+  seat_id: uuidSchema13,
   summary: seatTrustSummarySchema,
   tool_calls: external_exports.array(seatToolCallSchema)
 }).strict();
@@ -42537,16 +42853,16 @@ var deliverableLinkSchema = external_exports.object({
   kind: external_exports.enum(["internal", "linear", "github", "external"])
 }).strict();
 var deliverableIdSchema = external_exports.union([
-  uuidSchema12,
+  uuidSchema13,
   external_exports.string().regex(/^run:[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i)
 ]);
 var deliverableRowSchema = external_exports.object({
   id: deliverableIdSchema,
-  seat_id: uuidSchema12,
-  agent_id: uuidSchema12.nullable(),
-  run_id: uuidSchema12.nullable(),
-  task_id: uuidSchema12.nullable(),
-  work_order_id: uuidSchema12.nullable(),
+  seat_id: uuidSchema13,
+  agent_id: uuidSchema13.nullable(),
+  run_id: uuidSchema13.nullable(),
+  task_id: uuidSchema13.nullable(),
+  work_order_id: uuidSchema13.nullable(),
   kind: deliverableKindSchema,
   title: external_exports.string(),
   summary: external_exports.string().nullable(),
@@ -42559,13 +42875,13 @@ var deliverableRowSchema = external_exports.object({
   links: external_exports.array(deliverableLinkSchema)
 }).strict();
 var deliverableListInputSchema = external_exports.object({
-  seat_id: uuidSchema12
+  seat_id: uuidSchema13
 }).strict();
 var deliverableListOutputSchema = external_exports.object({
   deliverables: external_exports.array(deliverableRowSchema)
 }).strict();
 var deliverableGetInputSchema = external_exports.object({
-  seat_id: uuidSchema12,
+  seat_id: uuidSchema13,
   deliverable_id: deliverableIdSchema
 }).strict();
 var deliverableGetOutputSchema = external_exports.object({
@@ -42573,12 +42889,12 @@ var deliverableGetOutputSchema = external_exports.object({
 }).strict();
 var mcpTokenListInputSchema = external_exports.object({
   include_revoked: external_exports.boolean().default(false),
-  seat_id: uuidSchema12.optional()
+  seat_id: uuidSchema13.optional()
 }).strict();
 var mcpTokenMetadataSchema = external_exports.object({
-  token_id: uuidSchema12,
+  token_id: uuidSchema13,
   scope: mcpScopeSchema,
-  seat_id: uuidSchema12.nullable(),
+  seat_id: uuidSchema13.nullable(),
   created_at: isoDateTime3,
   last_seen_at: isoDateTime3.nullable(),
   // DER-830: expires_at is now always present (the column is NOT NULL).
@@ -42592,29 +42908,29 @@ var mcpTokenListOutputSchema = external_exports.object({
   tokens: external_exports.array(mcpTokenMetadataSchema)
 }).strict();
 var errorLogListInputSchema = external_exports.object({
-  seat_id: uuidSchema12.optional(),
+  seat_id: uuidSchema13.optional(),
   source: external_exports.enum(["run", "llm", "tool", "mcp", "runner", "integration", "job", "web"]).optional(),
   severity: external_exports.enum(["warning", "error", "critical"]).optional(),
   resolved: external_exports.enum(["active", "acknowledged", "resolved", "all"]).default("active"),
   limit: external_exports.number().int().min(1).max(200).default(50)
 }).strict();
 var errorLogListItemSchema = external_exports.object({
-  error_log_id: uuidSchema12,
+  error_log_id: uuidSchema13,
   source: external_exports.enum(["run", "llm", "tool", "mcp", "runner", "integration", "job", "web"]),
   severity: external_exports.enum(["warning", "error", "critical"]),
   code: external_exports.string().nullable(),
   message: external_exports.string(),
-  seat_id: uuidSchema12.nullable(),
-  agent_id: uuidSchema12.nullable(),
-  run_id: uuidSchema12.nullable(),
+  seat_id: uuidSchema13.nullable(),
+  agent_id: uuidSchema13.nullable(),
+  run_id: uuidSchema13.nullable(),
   disposition: external_exports.enum(["active", "acknowledged", "resolved", "superseded"]),
   resolved_at: isoDateTime3.nullable(),
-  resolved_by: uuidSchema12.nullable(),
+  resolved_by: uuidSchema13.nullable(),
   resolution_reason: external_exports.string().nullable(),
-  linked_task_id: uuidSchema12.nullable(),
-  linked_issue_id: uuidSchema12.nullable(),
+  linked_task_id: uuidSchema13.nullable(),
+  linked_issue_id: uuidSchema13.nullable(),
   linked_pr_ref: external_exports.string().nullable(),
-  superseded_by_id: uuidSchema12.nullable(),
+  superseded_by_id: uuidSchema13.nullable(),
   created_at: isoDateTime3
 }).strict();
 var errorLogListOutputSchema = external_exports.object({
@@ -42622,29 +42938,29 @@ var errorLogListOutputSchema = external_exports.object({
   total: external_exports.number().int().nonnegative()
 }).strict();
 var errorLogResolveInputSchema = external_exports.object({
-  error_log_id: uuidSchema12,
+  error_log_id: uuidSchema13,
   reason: external_exports.string().trim().min(1),
   disposition: external_exports.enum(["acknowledged", "resolved"]).default("acknowledged"),
-  linked_task_id: uuidSchema12.optional(),
-  linked_issue_id: uuidSchema12.optional(),
+  linked_task_id: uuidSchema13.optional(),
+  linked_issue_id: uuidSchema13.optional(),
   linked_pr_ref: external_exports.string().trim().min(1).optional()
 }).strict();
 var errorLogResolveOutputSchema = external_exports.object({
-  error_log_id: uuidSchema12,
+  error_log_id: uuidSchema13,
   disposition: external_exports.enum(["acknowledged", "resolved"]),
   resolved_at: isoDateTime3
 }).strict();
 var errorLogSupersedeInputSchema = external_exports.object({
-  error_log_id: uuidSchema12,
-  new_error_log_id: uuidSchema12,
+  error_log_id: uuidSchema13,
+  new_error_log_id: uuidSchema13,
   reason: external_exports.string().trim().min(1),
-  linked_task_id: uuidSchema12.optional(),
-  linked_issue_id: uuidSchema12.optional(),
+  linked_task_id: uuidSchema13.optional(),
+  linked_issue_id: uuidSchema13.optional(),
   linked_pr_ref: external_exports.string().trim().min(1).optional()
 }).strict();
 var errorLogSupersedeOutputSchema = external_exports.object({
-  error_log_id: uuidSchema12,
-  superseded_by_id: uuidSchema12,
+  error_log_id: uuidSchema13,
+  superseded_by_id: uuidSchema13,
   disposition: external_exports.literal("superseded"),
   resolved_at: isoDateTime3
 }).strict();
@@ -42990,13 +43306,13 @@ var tenantRenameOutputSchema = external_exports.object({
 }).strict();
 
 // ../../packages/protocol/src/system-health.ts
-var uuidSchema13 = external_exports.string().uuid();
+var uuidSchema14 = external_exports.string().uuid();
 var isoDateTime5 = external_exports.string().datetime({ offset: true });
 var systemHealthCallerKindSchema = external_exports.enum(["tenant_admin", "member", "seat_token"]);
 var systemHealthCallerSchema = external_exports.object({
   kind: systemHealthCallerKindSchema,
-  seat_id: uuidSchema13.optional(),
-  seat_ids: external_exports.array(uuidSchema13).min(1).optional()
+  seat_id: uuidSchema14.optional(),
+  seat_ids: external_exports.array(uuidSchema14).min(1).optional()
 }).strict();
 var systemHealthVerdictSchema = external_exports.enum(["healthy", "degraded", "blocked"]);
 var systemHealthSeveritySchema = external_exports.enum(["info", "warning", "critical"]);
@@ -43034,18 +43350,18 @@ var systemHealthFindingSchema = external_exports.object({
   summary: external_exports.string().min(1),
   detail: external_exports.string().min(1),
   remediation: systemHealthActionSchema,
-  seat_id: uuidSchema13.nullable(),
-  goal_id: uuidSchema13.nullable(),
-  run_id: uuidSchema13.nullable(),
-  issue_id: uuidSchema13.nullable(),
-  task_id: uuidSchema13.nullable(),
-  error_log_id: uuidSchema13.nullable()
+  seat_id: uuidSchema14.nullable(),
+  goal_id: uuidSchema14.nullable(),
+  run_id: uuidSchema14.nullable(),
+  issue_id: uuidSchema14.nullable(),
+  task_id: uuidSchema14.nullable(),
+  error_log_id: uuidSchema14.nullable()
 }).strict();
 var systemHealthScopeSchema = external_exports.object({
   mode: systemHealthScopeModeSchema,
-  root_seat_ids: external_exports.array(uuidSchema13),
-  included_seat_ids: external_exports.array(uuidSchema13),
-  requested_seat_id: uuidSchema13.nullable(),
+  root_seat_ids: external_exports.array(uuidSchema14),
+  included_seat_ids: external_exports.array(uuidSchema14),
+  requested_seat_id: uuidSchema14.nullable(),
   total_seat_count: external_exports.number().int().nonnegative()
 }).strict();
 var systemHealthFleetSectionSchema = external_exports.object({
@@ -43095,7 +43411,7 @@ var systemHealthSectionsSchema = external_exports.object({
   sync: systemHealthSyncSectionSchema
 }).strict();
 var systemHealthInputSchema = external_exports.object({
-  seat_id: uuidSchema13.optional()
+  seat_id: uuidSchema14.optional()
 }).strict();
 var systemHealthCheckInputSchema = systemHealthInputSchema.extend({
   caller: systemHealthCallerSchema
@@ -43109,6 +43425,37 @@ var systemHealthOutputSchema = external_exports.object({
   findings: external_exports.array(systemHealthFindingSchema)
 }).strict();
 
+// ../../packages/protocol/src/baserow-filter-operators.ts
+var baserowFilterOperatorSchema = external_exports.enum([
+  "equal",
+  "not_equal",
+  "higher_than",
+  "higher_than_or_equal",
+  "lower_than",
+  "lower_than_or_equal",
+  "contains",
+  "contains_not",
+  "empty",
+  "not_empty"
+]);
+var BASEROW_FILTER_OPERATORS = {
+  equal: { requiresValue: true, label: "equals" },
+  not_equal: { requiresValue: true, label: "does not equal" },
+  higher_than: { requiresValue: true, label: "is greater than" },
+  higher_than_or_equal: { requiresValue: true, label: "is greater than or equal to" },
+  lower_than: { requiresValue: true, label: "is less than" },
+  lower_than_or_equal: { requiresValue: true, label: "is less than or equal to" },
+  contains: { requiresValue: true, label: "contains" },
+  contains_not: { requiresValue: true, label: "does not contain" },
+  empty: { requiresValue: false, label: "is empty" },
+  not_empty: { requiresValue: false, label: "is not empty" }
+};
+var baserowFilterOperatorOptions = Object.keys(BASEROW_FILTER_OPERATORS).map((value) => ({
+  value,
+  label: BASEROW_FILTER_OPERATORS[value].label,
+  requiresValue: BASEROW_FILTER_OPERATORS[value].requiresValue
+}));
+
 // ../../packages/protocol/src/signal-source.ts
 var uuid9 = external_exports.string().uuid();
 var signalCadenceSchema = external_exports.enum(["daily", "weekly", "monthly", "quarterly", "annual"]);
@@ -43239,11 +43586,23 @@ var signalBindConfirmOutputSchema = external_exports.object({
   binding_status: external_exports.literal("active")
 }).strict();
 
+// ../../packages/protocol/src/baserow-filtered-count.ts
+var FIELD_KEY_PATTERN = /^field_\d+$/;
+var baserowFilteredCountInputSchema = external_exports.object({
+  endpointHost: external_exports.string().min(1).max(255),
+  // Accept string or number from callers (CLI/MCP/assistant), coerce to a bounded
+  // positive integer before it is ever used as a URL path segment.
+  tableId: external_exports.coerce.number().int().positive().max(2147483647),
+  fieldKey: external_exports.string().regex(FIELD_KEY_PATTERN, "fieldKey must look like field_123"),
+  operator: baserowFilterOperatorSchema,
+  value: external_exports.string().max(200).optional()
+}).strict();
+
 // ../../packages/protocol/src/signal-report.ts
-var uuidSchema14 = external_exports.string().uuid();
+var uuidSchema15 = external_exports.string().uuid();
 var dateOnlySchema2 = external_exports.string().regex(/^\d{4}-\d{2}-\d{2}$/, "expected YYYY-MM-DD");
 var signalReportInputSchema = external_exports.object({
-  measurable_id: uuidSchema14,
+  measurable_id: uuidSchema15,
   value: external_exports.number().finite(),
   // Optional; defaults to the measurable's current period (resolved in the
   // command against the measurable's own cadence via the canonical bounds).
@@ -43254,8 +43613,8 @@ var signalReportInputSchema = external_exports.object({
   confidence: external_exports.enum(["low", "medium", "high"]).optional()
 }).strict();
 var signalReportOutputSchema = external_exports.object({
-  reading_id: uuidSchema14,
-  measurable_id: uuidSchema14,
+  reading_id: uuidSchema15,
+  measurable_id: uuidSchema15,
   // Always false: an agent-sourced reading is a draft until a human confirms it.
   confirmed: external_exports.literal(false)
 }).strict();
@@ -44526,7 +44885,7 @@ var softwareFactoryBudgetExhaustedEventSchema = external_exports.object({
 }).strict();
 
 // ../../packages/protocol/src/sync-brief.ts
-var uuidSchema15 = external_exports.string().uuid();
+var uuidSchema16 = external_exports.string().uuid();
 var dateSchema = external_exports.string().regex(/^\d{4}-\d{2}-\d{2}$/);
 var syncBriefGapSchema = external_exports.object({
   section: external_exports.enum(["exceptions", "goal_deltas", "task_review", "friction", "agent_activity"]),
@@ -44539,8 +44898,8 @@ var sectionSchema = (itemSchema) => external_exports.object({
   flagged_gaps: external_exports.array(syncBriefGapSchema)
 }).strict();
 var syncBriefExceptionSchema = external_exports.object({
-  measurable_id: uuidSchema15,
-  seat_id: uuidSchema15,
+  measurable_id: uuidSchema16,
+  seat_id: uuidSchema16,
   seat_name: external_exports.string().min(1),
   name: external_exports.string().min(1),
   state: external_exports.enum(["risk", "crit", "pending"]),
@@ -44551,8 +44910,8 @@ var syncBriefExceptionSchema = external_exports.object({
   freshness: external_exports.enum(["fresh", "due", "stale", "awaiting_first_reading", "not_expected"]).optional()
 }).strict();
 var syncBriefGoalDeltaSchema = external_exports.object({
-  goal_id: uuidSchema15,
-  seat_id: uuidSchema15.nullable(),
+  goal_id: uuidSchema16,
+  seat_id: uuidSchema16.nullable(),
   seat_name: external_exports.string().nullable(),
   title: external_exports.string().min(1),
   status: external_exports.enum(["on", "off", "done", "dropped"]),
@@ -44566,22 +44925,22 @@ var syncBriefTaskReviewSchema = external_exports.object({
   previous_done_rate: external_exports.number().min(0).max(1),
   delta: external_exports.number().min(-1).max(1),
   stalled: external_exports.array(external_exports.object({
-    task_id: uuidSchema15,
-    owner_seat_id: uuidSchema15,
+    task_id: uuidSchema16,
+    owner_seat_id: uuidSchema16,
     owner_seat_name: external_exports.string().min(1),
     title: external_exports.string().min(1),
     due_on: dateSchema,
     stalled_at: external_exports.string().nullable()
   }).strict()),
   overdue_by_owner: external_exports.array(external_exports.object({
-    owner_seat_id: uuidSchema15,
+    owner_seat_id: uuidSchema16,
     owner_seat_name: external_exports.string().min(1),
     overdue_count: external_exports.number().int().nonnegative()
   }).strict())
 }).strict();
 var syncBriefIssueSchema = external_exports.object({
-  issue_id: uuidSchema15,
-  raised_by_seat_id: uuidSchema15,
+  issue_id: uuidSchema16,
+  raised_by_seat_id: uuidSchema16,
   raised_by_seat_name: external_exports.string().min(1),
   summary: external_exports.string().min(1),
   severity: external_exports.enum(["low", "med", "high", "critical"]),
@@ -44598,16 +44957,16 @@ var syncBriefActionItemTrendSchema = external_exports.object({
   has_prior: external_exports.boolean()
 }).strict();
 var syncBriefCascadeAtRiskSchema = external_exports.object({
-  goal_id: uuidSchema15,
+  goal_id: uuidSchema16,
   title: external_exports.string().min(1),
-  seat_id: uuidSchema15.nullable(),
+  seat_id: uuidSchema16.nullable(),
   progress_pct: external_exports.number().int().min(0).max(100),
   classification: external_exports.enum(["at_risk", "projected_miss"]),
   behind_days: external_exports.number().nullable()
 }).strict();
 var syncBriefAgentActivitySchema = external_exports.object({
-  agent_id: uuidSchema15,
-  seat_id: uuidSchema15,
+  agent_id: uuidSchema16,
+  seat_id: uuidSchema16,
   seat_name: external_exports.string().min(1),
   run_count: external_exports.number().int().nonnegative(),
   failed_run_count: external_exports.number().int().nonnegative(),
@@ -44619,11 +44978,11 @@ var syncBriefAgentActivitySchema = external_exports.object({
 var syncBriefSchema = external_exports.object({
   schema_version: external_exports.literal(1),
   tenant: external_exports.object({
-    id: uuidSchema15,
+    id: uuidSchema16,
     name: external_exports.string().min(1)
   }).strict(),
   cluster: external_exports.object({
-    id: uuidSchema15,
+    id: uuidSchema16,
     name: external_exports.string().min(1)
   }).strict().nullable(),
   period: external_exports.object({
@@ -44734,11 +45093,11 @@ var usageSnapshotOutputSchema = external_exports.object({
 }).strict();
 
 // ../../packages/protocol/src/event-payloads.ts
-var uuidSchema16 = external_exports.string().uuid();
+var uuidSchema17 = external_exports.string().uuid();
 var evidenceSchema = external_exports.array(external_exports.unknown());
 var statusEventPayloadSchema = external_exports.object({
   measurables: external_exports.array(external_exports.object({
-    id: uuidSchema16,
+    id: uuidSchema17,
     value: external_exports.number().finite(),
     // DER-1045: an optional, non-secret citation for an agent-proposed reading
     // (signal.report) — where the number came from + the agent's confidence.
@@ -44747,10 +45106,27 @@ var statusEventPayloadSchema = external_exports.object({
     // so every existing status writer (status.record, corrections, imports) is
     // unaffected.
     note: external_exports.string().min(1).max(2e3).optional(),
-    confidence: external_exports.enum(["low", "medium", "high"]).optional()
+    confidence: external_exports.enum(["low", "medium", "high"]).optional(),
+    // DER-1123: when this reading supersedes a materially-different same-period
+    // reading (e.g. an integration pull replacing an agent-reported value), the
+    // prior reading's provenance is captured here — append-only, so the audit
+    // story survives even though the canonical row keeps a single value
+    // (invariant #8, supersession not silent rewrite). Non-secret fields ONLY
+    // (source kind, the numeric value, actor kind, a timestamp); never a vault
+    // ref, token, or raw integration response.
+    supersededFrom: external_exports.object({
+      // The value's origin (agent report / human entry / integration pull).
+      source: external_exports.enum(["agent", "human", "integration"]),
+      value: external_exports.number().finite(),
+      // The actor that last ESTABLISHED the superseded value — its reporter, or the
+      // human who confirmed/corrected it. Optional (a reading may lack a backing
+      // event). Never an actor id — only the coarse kind, so no PII.
+      actorKind: external_exports.enum(["user", "agent", "system"]).optional(),
+      at: external_exports.string().min(1)
+    }).strict().optional()
   }).strict()).optional(),
   goals: external_exports.array(external_exports.object({
-    id: uuidSchema16,
+    id: uuidSchema17,
     state: external_exports.enum(["on", "off"]),
     note: external_exports.string().min(1).optional()
   }).strict()).optional()
@@ -44763,8 +45139,8 @@ var escalationEventPayloadSchema = external_exports.object({
 }).strict();
 var issueEventPayloadSchema = external_exports.object({
   summary: external_exports.string().min(1),
-  blocking_goal_id: uuidSchema16.optional(),
-  broken_measurable_id: uuidSchema16.optional(),
+  blocking_goal_id: uuidSchema17.optional(),
+  broken_measurable_id: uuidSchema17.optional(),
   evidence: evidenceSchema,
   severity: external_exports.enum(["low", "med", "high", "critical"])
 }).strict();
@@ -44777,14 +45153,14 @@ var heldToolActionReplaySchema = external_exports.object({
 }).strict();
 
 // ../../packages/protocol/src/operating.ts
-var uuidSchema17 = external_exports.string().uuid();
+var uuidSchema18 = external_exports.string().uuid();
 var taskListInputSchema = external_exports.object({}).strict();
 var operatingTaskSchema = external_exports.object({
-  id: uuidSchema17,
+  id: uuidSchema18,
   title: external_exports.string(),
   description: external_exports.string().nullable(),
-  from_seat_id: uuidSchema17.nullable(),
-  goal_id: uuidSchema17.nullable(),
+  from_seat_id: uuidSchema18.nullable(),
+  goal_id: uuidSchema18.nullable(),
   acceptance_criteria: external_exports.unknown(),
   due_on: external_exports.string().nullable(),
   status: external_exports.string()
@@ -44793,48 +45169,48 @@ var taskListOutputSchema = external_exports.object({
   tasks: external_exports.array(operatingTaskSchema)
 }).strict();
 var taskAcceptInputSchema = external_exports.object({
-  id: uuidSchema17
+  id: uuidSchema18
 }).strict();
 var taskMutationOutputSchema = external_exports.object({
   task: external_exports.object({
-    id: uuidSchema17,
+    id: uuidSchema18,
     status: external_exports.string()
   }).strict()
 }).strict();
 var taskDeclineInputSchema = external_exports.object({
-  id: uuidSchema17,
+  id: uuidSchema18,
   reason: external_exports.string().min(1)
 }).strict();
 var taskDeclineOutputSchema = external_exports.object({
   task: external_exports.object({
-    id: uuidSchema17,
+    id: uuidSchema18,
     status: external_exports.string(),
     decline_reason: external_exports.string()
   }).strict()
 }).strict();
 var taskCompleteInputSchema = external_exports.object({
-  id: uuidSchema17,
+  id: uuidSchema18,
   summary: external_exports.string().min(1),
   artifacts: external_exports.unknown().optional()
 }).strict();
 var taskCompleteOutputSchema = external_exports.object({
-  task_id: uuidSchema17,
-  event_id: uuidSchema17,
+  task_id: uuidSchema18,
+  event_id: uuidSchema18,
   type: external_exports.literal("handoff")
 }).strict();
 var statusRecordOutputSchema = external_exports.object({
-  event_id: uuidSchema17,
+  event_id: uuidSchema18,
   type: external_exports.literal("status")
 }).strict();
 var duplicateFrictionCandidateSchema = external_exports.object({
-  issue_id: uuidSchema17,
+  issue_id: uuidSchema18,
   summary: external_exports.string().min(1),
   // pg_trgm similarity in [0, 1]; higher is more similar.
   similarity: external_exports.number().min(0).max(1)
 }).strict();
 var frictionFileIssueOutputSchema = external_exports.object({
-  event_id: uuidSchema17,
-  issue_id: uuidSchema17,
+  event_id: uuidSchema18,
+  issue_id: uuidSchema18,
   type: external_exports.literal("issue"),
   // DER-1522: likely-duplicate candidates detected before creation. Recommend,
   // never block — filing always proceeds; empty when nothing crossed the
@@ -44845,12 +45221,12 @@ var workLogInputSchema = external_exports.object({
   note: external_exports.string().min(1)
 }).strict();
 var workLogOutputSchema = external_exports.object({
-  event_id: uuidSchema17,
+  event_id: uuidSchema18,
   type: external_exports.literal("task")
 }).strict();
 var escalationRaiseOutputSchema = external_exports.object({
-  event_id: uuidSchema17,
-  escalation_id: uuidSchema17,
+  event_id: uuidSchema18,
+  escalation_id: uuidSchema18,
   type: external_exports.literal("escalation")
 }).strict();
 var deliverableKindSchema2 = external_exports.enum(["brief", "work_evidence", "artifact", "report", "other"]);
@@ -44898,7 +45274,7 @@ var deliverableAcceptOutputSchema = external_exports.object({
 }).strict();
 
 // ../../packages/protocol/src/steward.ts
-var uuidSchema18 = external_exports.string().uuid();
+var uuidSchema19 = external_exports.string().uuid();
 var escalationStatusSchema = external_exports.enum([
   "open",
   "approved",
@@ -44906,21 +45282,21 @@ var escalationStatusSchema = external_exports.enum([
   "converted_to_issue"
 ]);
 var stewardEscalationSchema = external_exports.object({
-  id: uuidSchema18,
-  seat_id: uuidSchema18,
+  id: uuidSchema19,
+  seat_id: uuidSchema19,
   seat_name: external_exports.string(),
   seat_type: external_exports.enum(["human", "agent", "hybrid"]),
-  steward_seat_id: uuidSchema18,
+  steward_seat_id: uuidSchema19,
   steward_seat_name: external_exports.string(),
   reason: external_exports.string(),
   charter_clause: external_exports.string(),
   recommended_action: external_exports.string().nullable(),
   status: escalationStatusSchema,
-  decided_by: uuidSchema18.nullable(),
+  decided_by: uuidSchema19.nullable(),
   decided_by_name: external_exports.string().nullable(),
   decided_at: external_exports.string().nullable(),
   decision_note: external_exports.string().nullable(),
-  issue_id: uuidSchema18.nullable(),
+  issue_id: uuidSchema19.nullable(),
   created_at: external_exports.string(),
   updated_at: external_exports.string()
 }).strict();
@@ -44931,27 +45307,27 @@ var escalationListOutputSchema = external_exports.object({
   escalations: external_exports.array(stewardEscalationSchema)
 }).strict();
 var escalationGetInputSchema = external_exports.object({
-  id: uuidSchema18
+  id: uuidSchema19
 }).strict();
 var escalationGetOutputSchema = external_exports.object({
   escalation: stewardEscalationSchema
 }).strict();
 var escalationResolveActionSchema = external_exports.enum(["approve", "convert_to_issue"]);
 var escalationResolveInputSchema = external_exports.object({
-  id: uuidSchema18,
+  id: uuidSchema19,
   action: escalationResolveActionSchema.optional(),
   rationale: external_exports.string().trim().min(1).optional()
 }).strict();
 var escalationRejectInputSchema = external_exports.object({
-  id: uuidSchema18,
+  id: uuidSchema19,
   rationale: external_exports.string().trim().min(1).optional()
 }).strict();
 var escalationDecisionOutputSchema = external_exports.object({
-  escalation_id: uuidSchema18,
+  escalation_id: uuidSchema19,
   status: escalationStatusSchema,
-  decision_id: uuidSchema18,
-  decided_by: uuidSchema18,
-  issue_id: uuidSchema18.nullable(),
+  decision_id: uuidSchema19,
+  decided_by: uuidSchema19,
+  issue_id: uuidSchema19.nullable(),
   // DER-1478: true when the resolved escalation carries a durable replay_action
   // (an approval-gated connector write) that the approvals path should actuate
   // after this decision is recorded. Omitted (not false) for non-connector
@@ -44973,7 +45349,7 @@ var eventTypes = [
   "task"
 ];
 var publicMessageTypes = ["status", "handoff", "escalation", "issue"];
-var uuidSchema19 = external_exports.string().uuid();
+var uuidSchema20 = external_exports.string().uuid();
 var evidenceSchema2 = external_exports.array(external_exports.unknown());
 var internalEventPayloadSchema = external_exports.record(external_exports.string(), external_exports.unknown()).refine((payload) => !Array.isArray(payload), "Internal event payload must be an object");
 var handoffEventPayloadSchema = external_exports.object({
@@ -44983,24 +45359,24 @@ var handoffEventPayloadSchema = external_exports.object({
     acceptance_criteria: external_exports.array(external_exports.string().min(1)),
     due: external_exports.string().datetime({ offset: true })
   }).strict(),
-  to_seat_id: uuidSchema19
+  to_seat_id: uuidSchema20
 }).strict();
 var intakeEventPayloadSchema = external_exports.discriminatedUnion("action", [
   external_exports.object({
     action: external_exports.literal("uploaded"),
-    document_id: uuidSchema19,
+    document_id: uuidSchema20,
     storage_ref: external_exports.string().min(1)
   }).strict(),
   external_exports.object({
     action: external_exports.literal("parsed"),
-    document_id: uuidSchema19,
+    document_id: uuidSchema20,
     mode: external_exports.enum(["source_tree", "function_first"]),
     seat_count: external_exports.number().int().nonnegative(),
     edge_count: external_exports.number().int().nonnegative()
   }).strict(),
   external_exports.object({
     action: external_exports.literal("failed"),
-    document_id: uuidSchema19,
+    document_id: uuidSchema20,
     reason: external_exports.string().min(1)
   }).strict(),
   external_exports.object({
@@ -45106,9 +45482,9 @@ var publicMessageTypeSchema = external_exports.enum(publicMessageTypes);
 var eventEnvelopeBaseSchema = external_exports.object({
   protocol: external_exports.literal(EVENT_PROTOCOL),
   type: eventTypeSchema,
-  seat_id: uuidSchema19.nullable(),
+  seat_id: uuidSchema20.nullable(),
   occurred_at: external_exports.string().datetime({ offset: true }),
-  goal_ancestry: external_exports.array(uuidSchema19)
+  goal_ancestry: external_exports.array(uuidSchema20)
 }).strict();
 var statusEventEnvelopeSchema = eventEnvelopeBaseSchema.extend({
   type: external_exports.literal("status"),
@@ -45534,7 +45910,7 @@ Treat AICOS as a coordinator over the operating system. It can become more usefu
     order: 20,
     title: "Responsibility Graph playbook",
     summary: "How to build a functions-first graph with seats, owners, Stewards, vacancies, and clean authority.",
-    version: "2026-07-10.2",
+    version: "2026-07-10.6",
     public: true,
     audiences: ["human", "cli", "mcp", "in_app_agent"],
     stages: ["graph_design", "staffing"],
@@ -45607,13 +45983,19 @@ The graph is also where you land after onboarding \u2014 it is the mission contr
 - **Signal** \u2014 the worst measurable state per seat.
 - **Scoreboard** \u2014 direct work and direct cost on each seat, plus a separate team/subtree rollup for manager seats. The tenant summary counts direct agent work once, so a parent seat's team cost does not double-count the same run again. A seat whose direct cost is a clear outlier above the rest of the fleet is flagged as cost drift (labelled, not colour-only). Human seats and seats with no direct or team runs read calmly rather than showing a bare zero. For a small fleet the Scoreboard also leads with a two-tile summary \u2014 total work and total cost \u2014 framed as the single question that matters: is it earning its keep.
 
+Switching into Cascade never re-runs the chart layout \u2014 seat positions scale in place to fit taller goal-summary cards, and the connector layer scales to match, so nothing rearranges under you. A company-objectives card anchors above the root seat with the active cycle's objectives; selecting one traces and emphasizes its branch down through the connectors while the rest of the chart recedes. Selecting a seat's goal opens the same goal detail panel \`/cascade\` uses, as a right-hand drawer \u2014 breadcrumb ancestry and child-goal rows let you walk the branch without leaving the graph, and an **Open in Cascade** link round-trips the same cycle, branch, and goal selection to the \`/cascade\` page. Lens, objective, goal, seat, and cycle are all URL state, so a reload or a shared link reopens the same view.
+
 The graph also carries a mission-control panel. It pulls the same operational state visible on the agent and setup-health surfaces: held actions that need steward decisions, failed runs, open Friction, pending Signal readings, stale agents, and setup recommendations. Each item can focus the affected seat on the canvas and links to the route where the operator can act.
 
 ## An agent seat's profile
 
 A staffed non-AICOS agent's seat page uses one profile shell with eight URL-addressable tabs: **Overview**, **Charter**, **Tools & connections**, **Skills**, **Autonomy**, **Signals**, **Activity**, and **Settings**. The hero shows status, Charter purpose, Steward, seat path, lane, model, and last run. The sidebar keeps access, connection, tool/Skill/Signal/escalation/Charter counters, and schedule facts visible while the tabs organize the existing read models and controls. Legacy links such as \`#agent-ops\`, \`#recent-runs\`, and \`#run-<id>\` select the matching Settings or Activity tab. Human seats and the AICOS foundation seat keep their dedicated pages. Members without sensitive-data access see the same shell with explicit unavailable states for run, tool-call, cost, connection-status, and escalation facts; the page never broadens Trust Card access or turns an unavailable read into a confident empty/disconnected claim.
 
-Agent creation at \`/agents/new\` begins with four doors: **Describe the job** opens the existing in-app builder, **Start from a template** opens the stock-template picker, **Build manually** opens the custom setup path, and **Import** opens an in-app format explainer. Definition-file import is roadmap-only and never opens a bare file picker; operators can instead continue to the existing-agent pairing flow. Setup is the detail page filling in: creating a seat from any door hands off to that agent's detail page in draft mode (\`/seats/{seatId}\`), where numbered setup tabs and a shared go-live gate rail complete the draft \u2014 there is no separate multi-step wizard. Existing \`?mode=template|custom|existing\` links open the matching door, and a \`?seat=\` resume link redirects straight to the draft detail page.
+The **Charter** tab renders the accepted Charter as a document \u2014 purpose, responsibilities, decision authority \u2014 with its version chip and signer, plus a structured edit drawer for quick purpose/responsibilities/decision-authority changes. The drawer prefills from the active Charter (or an open amendment draft, if one exists) and stages the edited slice through the same audited commands as any other Charter change; sensitive fields (permission manifest, budget, measurables, escalation rules) never round-trip through the client, and a save fails closed with an explicit conflict message if the Charter changed underneath the drawer since it opened. An **Amend** action stays next to the drawer for changes it does not cover, opening the same draft-and-confirm flow as the Charter Builder.
+
+An owner or Steward manages the agent's capabilities in context from the **Tools & connections** and **Skills** tabs, no separate editor page. On **Skills**, assign or revoke a Skill directly; each change stages a confirmation envelope for the human to approve in \`/approvals\` \u2014 never a silent write. On **Tools & connections**, granted tools are read-only on this page; a change routes to the governed Charter re-sign flow (tool grants live in the signed, active Charter, so they change by supersession, never in place), and a missing provider links straight to Settings connections with a return link back to this tab. Viewers without manage authority see the same tabs with an explanation instead of controls; every write still re-asserts seat authority server-side regardless of what the client shows.
+
+Agent creation at \`/agents/new\` begins with four doors: **Describe the job** opens the existing in-app builder, **Start from a template** opens the stock-template picker, **Build manually** opens the custom setup path, and **Import** opens an in-app format explainer. Definition-file import is roadmap-only and never opens a bare file picker; operators can instead continue to the existing-agent pairing flow. Setup is the detail page filling in: creating a seat from any door hands off to that agent's detail page in draft mode (\`/seats/{seatId}\`) \u2014 there is no separate wizard shell or tab vocabulary. Draft mode renders the exact same eight tabs the live seat uses; **Overview** and **Activity** stay locked until the first run has something to show, and the other six own the editable draft (Charter, Tools & connections, Skills, Autonomy, Outcomes & Signals, Settings). The shared **GateRail** review rail (sign manifest \u2192 sandbox dry run \u2192 go-live) and the server's \`next_action\` stay the sole lifecycle truth throughout, unaffected by which door you entered through. The door only changes how the one canonical form gets filled in: manual is the blank form, template pre-populates it, chat opens an AICOS setup assistant beside the form that proposes typed field changes grouped by section for review before anything durable saves, and import maps a definition file into the same fields and reports what did not map \u2014 never credentials. Existing \`?mode=template|custom|existing\` links open the matching door, and a \`?seat=\` resume link redirects straight to the draft detail page.
 
 ## Review an agent seat's delivered work
 
@@ -46204,7 +46586,7 @@ Use the lower-level commands after health names a finding: \`agent.get_run\` for
     order: 46,
     title: "Tool access and vault",
     summary: "How to give agents access to tools without exposing raw credentials or expanding authority by accident.",
-    version: "2026-07-02.4",
+    version: "2026-07-13.1",
     public: true,
     audiences: ["human", "cli", "mcp", "in_app_agent"],
     stages: ["staffing"],
@@ -46258,7 +46640,7 @@ The native Gmail handlers run inside the same broker boundary as the REST and Sl
 
 ## Google connector status
 
-Google can be connected from Settings once the workspace OAuth app is configured. The connection flow requests offline access for Gmail read/compose and Sheets, stores the returned credential in the vault, and records only account and scope metadata in the integration row. The test action refreshes the vaulted credential and performs a minimal Gmail profile read. Gmail read/draft, bounded Sheets read, and approval-held Sheets write handlers run through the guarded broker when Google is connected; connecting Google still does not bypass the signed Charter manifest, tenant policy ceiling, credential vault, or tool-call audit. Sheet grants should use exact signed argument bindings for approved spreadsheet ids and ranges.
+Google can be connected from Settings once the workspace OAuth app is configured. The connection flow requests offline access for Gmail read/compose/send and Sheets, stores the returned credential in the vault, and records only account, scope, and capability-availability metadata in the integration row. Partial grants are accepted when at least one connector capability is usable; missing or revoked scopes reduce the affected capability instead of granting more authority. The test action refreshes the vaulted credential and performs a minimal Gmail profile read. Gmail read/draft/send, bounded Sheets read, and approval-held Sheets write handlers run through the guarded broker when Google is connected; connecting Google still does not bypass the signed Charter manifest, tenant policy ceiling, credential vault, or tool-call audit. Sheet grants should use exact signed argument bindings for approved spreadsheet ids and ranges.
 
 CLI and MCP can inspect connector readiness without seeing secrets: \`integration.list\` / \`rost_list_integrations\` lists connected providers and health metadata, \`integration.status\` / \`rost_get_integration_status\` reads one provider by id or name, and \`integration.test\` / \`rost_test_integration_connection\` runs the installed provider-specific health check. For Google, the test refreshes the vaulted OAuth credential and reads the Gmail profile, then records only account, scope, and health metadata.
 
@@ -46295,7 +46677,7 @@ There is exactly one way to give a connected tool its credential, and it is the
     order: 47,
     title: "Available tools guide",
     summary: "How to think about tool categories available to seats and what each category should be used for.",
-    version: "2026-07-04.1",
+    version: "2026-07-13.1",
     public: true,
     audiences: ["human", "cli", "mcp", "in_app_agent"],
     stages: ["staffing"],
@@ -46331,9 +46713,9 @@ Start from the seat's responsibility, not the tool list. If a tool does not dire
 
 ## Skills and tool dependencies
 
-Skills are reusable procedures a seat can learn from; they are not tools and they never grant authority. A skill package may declare required or optional tool dependencies so setup can identify blockers before assignment. Those dependencies are checked against the discoverable \`tool.catalog\` ids and scope tiers, then compared to the seat's Charter permission manifest. Missing required tools block approval; optional tools produce setup warnings. A published skill version is immutable, so later corrections create a new version instead of rewriting what a run may have used.
+Skills are reusable procedures a seat can learn from; they are not tools and they never grant authority. A skill package may declare required or optional tool dependencies so setup can identify blockers before assignment. Those dependencies are checked against the discoverable \`tool.catalog\` ids, scope tiers, and provider-neutral access levels, then compared to the seat's Charter permission manifest. Missing required tools block approval; optional tools produce setup warnings. A published skill version is immutable, so later corrections create a new version instead of rewriting what a run may have used.
 
-The catalog covers both the platform verbs (status, escalation, Signal readings) and the business tools the stock-agent templates grant \u2014 accounts-payable and receivable reads, AP-inbox and collections drafts, helpdesk triage, CRM reads, and content-calendar, release-artifact, and issue drafts. Each is listed at a conservative scope tier (read for the reads, draft for the drafts, where a draft never sends), and the business tools are credential-gated. Because a skill's required tool id is matched against these ids, a skill that requires one of them resolves against the catalog rather than reporting an unknown tool. Catalog membership is configuration only: it still confers no authority, and a listed id runs only once a live handler exists behind the seat's signed permission manifest, the server guard, and any required credential \u2014 the manifest and guard remain the control plane.
+The catalog covers both the platform verbs (status, escalation, Signal readings) and the business tools the stock-agent templates grant \u2014 accounts-payable and receivable reads, AP-inbox and collections drafts, helpdesk triage, CRM reads, and content-calendar, release-artifact, and issue drafts. Each is listed with a conservative scope tier (read for the reads, draft for the drafts, where a draft never sends), a provider-neutral access level, a provider requirement, cost class, lane support, and any Trusted-mode metadata that must be present before a standing authorization can apply. Business tools are credential-gated. Because a skill's required tool id is matched against these ids, a skill that requires one of them resolves against the catalog rather than reporting an unknown tool. Catalog membership is configuration only: it still confers no authority, and a listed id runs only once a live handler exists behind the seat's signed permission manifest, the server guard, and any required credential \u2014 the manifest and guard remain the control plane. Unknown tool ids or unsupported access levels fail closed.
 
 ## How agents should request tools
 
@@ -46350,7 +46732,7 @@ External connectors are being rolled out provider by provider, conservatively (r
     order: 48,
     title: "CLI and MCP installation guide",
     summary: "Install the public CLI, register remote token-backed MCP clients, and find the full command and tool catalog.",
-    version: "2026-07-12.3",
+    version: "2026-07-13.2",
     public: true,
     audiences: ["human", "cli", "mcp", "in_app_agent"],
     stages: ["company_setup", "staffing"],
@@ -46781,8 +47163,8 @@ These are the security posture rules for operating after install \u2014 a checkl
 | Command | Purpose | Scope | Safe example |
 |---|---|---|---|
 | \`{{cli}} command <id> [--seat <seat-id>] --json [json-body]\` | Execute a server-side command by id. Add \`--seat <seat-id>\` to run a seat-scoped command (e.g. \`task.list\`) against a specific seat. | Command-defined | \`{{cli}} command task.list --seat <seat-id> --json '{}'\` |
-| \`{{cli}} command schema <id> [--json]\` | Discover a command's exact input/output schema, help pointer, and a worked example before calling it. | User | \`{{cli}} command schema compass.draft\` |
-| \`{{cli}} command list [--json]\` | List every callable command id with its scope and confirmation gate. | User | \`{{cli}} command list\` |
+| \`{{cli}} command schema <id> [--json]\` | Discover a command's exact input/output schema, help pointer, Trusted execution classification, and a worked example before calling it. | User | \`{{cli}} command schema compass.draft\` |
+| \`{{cli}} command list [--json]\` | List every callable command id with its scope, confirmation gate, and Trusted execution classification. | User | \`{{cli}} command list\` |
 | \`{{cli}} command onboarding.attach_reference --json ...\` | Attach a company reference document (reference-only). | Tenant | \`{{cli}} command onboarding.attach_reference --json '{"text":"# Ops handbook\\n...","title":"Ops handbook","kind":"process","source":"handbook/ops.md"}'\` |
 | \`{{cli}} command seat.create --json ...\` | Create a Responsibility Graph seat. | Tenant | \`{{cli}} command seat.create --json '{"name":"Finance","seat_type":"human"}'\` |
 | \`{{cli}} command charter.draft --json ...\` | Create or fetch a draft Charter. | Seat or tenant-admin | \`{{cli}} command charter.draft --json '{"seat_id":"<seat-id>"}'\` |
@@ -46820,7 +47202,7 @@ The signed-in app exposes the same Skill command surface at **Skills**, linked f
 | \`{{cli}} command tenant.model_gateway_policy.update\` | \`tenant.model_gateway_policy.update\` | Unlock or relock managed models that lack a zero-retention (ZDR) tier (ADR-0019). Locked (default) restricts the AI Gateway to zero-retention-eligible managed models. Owner-only and human-gated; unlocking establishes an ADR-0018 \xA76 standing authorization and surfaces a per-model retention disclosure. | Tenant-admin | \`{{cli}} command tenant.model_gateway_policy.update --json '{"allow_non_zdr_models":true}'\` |
 | \`{{cli}} member invite|update|remove\` | \`member.invite\`, \`member.update\`, \`member.remove\` | Manage tenant members; execution requires an owner or admin membership. | Tenant | \`{{cli}} member invite --email ops@example.com --role member\` |
 | \`{{cli}} agent templates|create|setup|tools|dry-run|go-live|status|run-now|fleet-digest|get-run|show\` | \`agent_template.list\`, \`agent.create_from_template\`, \`agent.create_custom\`, \`agent_setup.get\`, \`agent_setup.update\`, \`agent.configure_tools\`, \`agent.run_dry_run\`, \`agent.go_live\`, \`agent.status\`, \`agent.run_now\`, \`agent.fleet_digest\`, \`agent.get_run\`, \`agent.show_markdown\` | Run the full agent setup and operation flow: list templates, create a draft from a template or guided custom answers (with \`--model\` and \`--effort\`), read or answer setup state, connect or decline tools, dry-run, go live, run on demand, capture the fleet-health digest, read one run's transcript/error diagnostics, and show a markdown readout. Human CLI dry-runs print the rehearsal transcript and, when present, the per-tool preview labels (\`Would run\`, \`Blocked\`, \`Escalated\`) before go-live. Create and go-live stop at human gates; the dry-run is ungated by human approval but requires a signed manifest first. | Tenant and seat | \`{{cli}} agent fleet-digest --json\` |
-| \`{{cli}} tools list\` | \`tool.catalog\` | List the discoverable tool catalog the builder reads (id, scope tiers, credential requirement, access policy, and execution-boundary guidance). | Tenant | \`{{cli}} tools list --json\` |
+| \`{{cli}} tools list\` | \`tool.catalog\` | List the discoverable tool catalog the builder reads (id, scope tiers, access levels, provider requirement, cost class, lane support, credential requirement, access policy, Trusted metadata, and execution-boundary guidance). | Tenant | \`{{cli}} tools list --json\` |
 | \`{{cli}} skills list|get|file|assigned|check-dependencies\` | \`skill.list\`, \`skill.get\`, \`skill.file.get\`, \`skill.assigned.list\`, \`skill.check_dependencies\` | Discover reusable Skills, read descriptors and stored package files, list approved Seat assignments, and compare required/optional tool dependencies with a Seat's signed Charter manifest. Skills are instructions, not authority. | Tenant-admin; seat-scoped reads for assigned Skills | \`{{cli}} skills list --json\`; \`{{cli}} skills file --slug invoice-review --path SKILL.md\` |
 | \`{{cli}} skills catalog|enable|install|sync\` | \`skill.catalog\`, \`skill.enable_catalog\`, \`skill.install_local\`, \`skill.sync_local\` | Discover entitled {{brand}} catalog Skills, enable a catalog Skill into the company library with human confirmation, and install or sync approved Skill files locally from {{brand}} APIs. Private catalog source URLs and GitHub tokens never go to local agents. | Tenant-admin for catalog enablement; seat-scoped sync for assigned Skills | \`{{cli}} skills sync --seat-id <id> --client codex\`; \`{{cli}} skills install rost/ap-review --seat-id <id> --client codex\` |
 | \`{{cli}} skills create|update-draft|import|publish|assign|revoke\` | \`skill.create\`, \`skill.update_draft\`, \`skill.import_github\`, \`skill.import_upload\`, \`skill.publish\`, \`skill.assign_to_seat\`, \`skill.revoke_from_seat\` | Create or import bounded text Skill packages, publish reviewed immutable versions, propose Seat assignments, and revoke future use without deleting historical activations. Publish, revoke, and approved assignment stop at human confirmation; blocked required tools cannot be approved. | Tenant-admin writes; seat agents read assignments and escalate requests | \`{{cli}} skills import github --url https://github.com/acme/skills/tree/main/ap --json\`; \`{{cli}} skills assign --seat-id <id> --slug invoice-review --json\` |
@@ -46869,7 +47251,7 @@ Skills wrapper help:
 This catalog is the canonical machine surface \u2014 the \`rost_*\` tools your MCP client calls. Three different things are called "tools" in {{brand}}; do not confuse them:
 
 1. **The MCP tools below** \u2014 the \`rost_*\` surface your client actually calls to read and act.
-2. **\`{{cli}} tools list\` / \`tool.catalog\`** (MCP \`rost_list_tool_catalog\`) \u2014 the agent-configuration catalog the builder reads when staffing an agent. It is selectable per agent, but selecting a tool is not itself a call; live handlers execute later only behind the signed manifest, guard, credentials, and bindings.
+2. **\`{{cli}} tools list\` / \`tool.catalog\`** (MCP \`rost_list_tool_catalog\`) \u2014 the agent-configuration catalog the builder reads when staffing an agent. It includes scope tiers, provider-neutral access levels, provider requirements, cost class, lane support, and Trusted metadata. It is selectable per agent, but selecting a tool is not itself a call; live handlers execute later only behind the signed manifest, guard, credentials, and bindings.
 3. **\`{{cli}} model list\` / \`model.catalog\`** (MCP \`rost_list_model_catalog\`) \u2014 the guided model-tier catalog the builder reads for recommendations, effort, token prices, cost bands, and model id selection.
 4. **The "Available tools guide"** (in the sidebar) \u2014 covers tool *categories* and governance, not a callable surface. See the available-tools-guide.
 
@@ -46881,8 +47263,8 @@ These read-only tools are available to any valid MCP token (like the reference t
 
 | Tool | Purpose | Scope | Safe example |
 |---|---|---|---|
-| \`rost_describe_command\` | Return a command's input/output JSON Schema, scope, confirmation gate, MCP tool name, help pointer, guides, a validated example, and related commands. | Any valid MCP token | Query \`{"command_id":"compass.draft"}\` |
-| \`rost_list_commands\` | List callable command ids in bounded pages with title, scope, confirmation, stages, and MCP tool name when callable. Supports \`q\`, \`category\`, \`stage\`, \`limit\`, and \`cursor\`. | Any valid MCP token | Query \`{"q":"status","limit":10}\` |
+| \`rost_describe_command\` | Return a command's input/output JSON Schema, scope, confirmation gate, Trusted execution classification, MCP tool name, help pointer, guides, a validated example, and related commands. | Any valid MCP token | Query \`{"command_id":"compass.draft"}\` |
+| \`rost_list_commands\` | List callable command ids in bounded pages with title, scope, confirmation, Trusted execution classification, stages, and MCP tool name when callable. Supports \`q\`, \`category\`, \`stage\`, \`limit\`, and \`cursor\`. | Any valid MCP token | Query \`{"q":"status","limit":10}\` |
 
 The equivalent CLI verbs are \`{{cli}} command schema <id>\` and \`{{cli}} command list\`. The discoverable tool catalog is \`{{cli}} tools list\` (MCP \`rost_list_tool_catalog\`, tenant-scoped).
 
@@ -47003,6 +47385,8 @@ Several rows here are seat-operating commands (\`task.create\`, the \`signal.*\`
 | \`rost_set_company_autonomy_ceiling\` | \`settings.agent_policy.update\` | Set the company autonomy ceiling. | Tenant-admin | Owner-only, human-gated; call with \`{"profile":"locked_down"}\` (or \`balanced\`/\`high_autonomy\`, or \`{"profile":"custom","max_autonomous_risk":"high"}\`). Enforced by default. |
 | \`rost_get_cli_confirmation_mode\` | \`settings.confirmation_policy.get\` | Read the CLI confirmation mode: \`careful\` (the strict default \u2014 the CLI cannot silently auto-approve a pending confirmation) or \`trusted_operator\` (an owner opt-in). | Tenant | Call with \`{}\`; metadata only. |
 | \`rost_set_cli_confirmation_mode\` | \`settings.confirmation_policy.update\` | Set the CLI confirmation mode. | Tenant-admin | Owner-only, human-gated; call with \`{"cli_mode":"trusted_operator"}\` (or \`{"cli_mode":"careful"}\`). Choosing \`trusted_operator\` establishes an ADR-0018 \xA76 standing authorization; a \`dangerous\`-risk confirmation always requires interactive human review in either mode. |
+| \`rost_get_tenant_tool_policy\` | \`settings.tool_policy.get\` | Read tenant capability-grant defaults and the AICOS auto-trust posture. | Tenant | Call with \`{}\`; metadata only. |
+| \`rost_update_tenant_tool_policy\` | \`settings.tool_policy.update\` | Update tenant capability-grant defaults and the AICOS auto-trust posture. | Tenant-admin | Owner/admin only and human-gated; call with \`{"mode":"managed","aicos":{"trust_new_capabilities_automatically":true}}\`. |
 | \`rost_update_model_gateway_policy\` | \`tenant.model_gateway_policy.update\` | Unlock or relock managed models that lack a zero-retention (ZDR) tier. | Tenant-admin | Owner-only, human-gated; call with \`{"allow_non_zdr_models":true}\` (or \`false\` to relock). Unlocking establishes an ADR-0018 \xA76 standing authorization and surfaces a per-model retention disclosure. |
 | \`rost_get_aicos_brain_settings\` | \`aicos.brain_settings.get\` | Read AICOS lane and brain labels for cloud managed/BYOK, runner Claude/Codex, and MCP client. | Tenant | Call with \`{}\`; returns enum labels only, never keys, vault refs, or runner secrets. |
 | \`rost_update_aicos_brain_settings\` | \`aicos.brain_settings.update\` | Update AICOS lane and cloud/runner brain preferences. | Tenant-admin | Owner-only and human-gated; call with \`{"lane":"runner","runner_brain":"claude-cli"}\` or \`{"cloud_brain":"byok"}\`. BYOK requires an active tenant Anthropic key. For AICOS, selecting \`codex-cli\` is currently rejected until the governed interactive runner path is verified. |
@@ -47030,7 +47414,7 @@ Several rows here are seat-operating commands (\`task.create\`, the \`signal.*\`
 | \`rost_update_cascade_goal\` | \`goal.update\` | Update a goal's title or definition of done. | Tenant | Call with \`goal_id\` and the changed fields. |
 | \`rost_set_cascade_goal_status\` | \`goal.set_status\` | Set a goal's status (on/off/done). | Seat or tenant-admin | Seats may set only their own goals. |
 | \`rost_set_cascade_goal_progress\` | \`goal.set_progress\` | Report a goal's quantified progress (0-100). An agent's progress is a proposal a human approves before the goal moves. | Seat or tenant-admin | Seats set only their own goals; expect confirmation. |
-| \`rost_bind_a_signal_to_a_cascade_goal\` | \`goal.bind_measurable\` | Bind a measurable to a goal. Defaults to role \`informs\` \u2014 a conservative indicator allowed at any goal level (many per goal) that never changes status. Pass role \`drives_status\` to make it the goal's status driver (childless leaf only, one per goal). Human-gated. | Seat or tenant-admin | Call with \`{"goal_id":"<id>","measurable_id":"<id>"}\` (add \`"role":"drives_status"\` for the driver); expect confirmation. |
+| \`rost_bind_a_signal_to_a_cascade_goal\` | \`goal.bind_measurable\` | Bind a measurable to a goal. Defaults to role \`informs\` \u2014 a conservative indicator allowed at any goal level (many per goal) that never changes status. Pass role \`drives_status\` to make it the goal's status driver (childless leaf only, one per goal); a driver requires a \`second_anchor\` (a prior closed period + expected value confirming the Signal matched the books) and promotes an existing \`informs\` binding of the same Signal. Human-gated. | Seat or tenant-admin | Call with \`{"goal_id":"<id>","measurable_id":"<id>"}\` (add \`"role":"drives_status","second_anchor":{"period_start":"2026-Q1","expected_value":0}\` for the driver); expect confirmation. |
 | \`rost_unbind_a_signal_from_a_cascade_goal\` | \`goal.unbind_measurable\` | Remove a goal\u2194measurable binding (role defaults to \`drives_status\`; pass \`"role":"informs"\` to remove an indicator). | Seat or tenant-admin | Call with \`{"goal_id":"<id>","measurable_id":"<id>"}\`. |
 | \`rost_toggle_signal_driven_auto_status\` | \`goal.set_auto_status\` | Per-goal steward opt-in (default OFF) that lets the bound measurable's latest confirmed reading compute the goal's status. Enabling applies the current signal immediately. Human-gated. | Seat or tenant-admin | Call with \`{"goal_id":"<id>","enabled":true}\`; expect confirmation. |
 | \`rost_list_at_risk_cascade_goals\` | \`goal.list_at_risk\` | List goals projected off pace (at-risk or projected-miss) with days behind pace. Read-only; status-only goals excluded. | Tenant | Call with \`{}\`. |
@@ -47057,6 +47441,10 @@ Several rows here are seat-operating commands (\`task.create\`, the \`signal.*\`
 | \`rost_show_charter_as_markdown\` | \`charter.show_markdown\` | Render a seat's active or latest Charter as a clean markdown card for review. | Tenant | Call with \`{"seat_id":"<seat-id>"}\`. |
 | \`rost_show_agent_setup_as_markdown\` | \`agent.show_markdown\` | Render a seat's agent setup, model, steward, tools, and Charter as a clean markdown card for review. | Tenant | Call with \`{"seat_id":"<seat-id>"}\`. |
 | \`rost_list_tool_catalog\` | \`tool.catalog\` | List the discoverable tool catalog the agent builder reads \u2014 id, prescriptive description, scope tiers, credential requirement, access policy, and execution-boundary guidance. | Tenant | Call with \`{}\` or \`{"provider":"google"}\`. |
+| \`rost_list_tenant_capability_grants\` | \`tool_grants.tenant.list\` | List tenant capability ceilings/defaults with connection, availability, source, and compile status. | Tenant | Call with \`{}\`; no secrets or vault refs. |
+| \`rost_list_agent_effective_capability_grants\` | \`tool_grants.agent.effective\` | Read one agent's effective capability grants after tenant ceilings, agent selections, and compile availability are applied. | Tenant | Call with \`{"agent_id":"<agent-id>"}\`. |
+| \`rost_update_agent_capability_grants\` | \`tool_grants.agent.update\` | Compile a Charter supersession proposal for agent capability grant reductions or expansions. | Tenant | Human steward/admin only; call with \`{"agent_id":"<agent-id>","grants":[{"tool_grant_id":"<grant-id>","access_level":"read"}]}\`; active authority changes only after the signed Charter is superseded. |
+| \`rost_suggest_setup_capability_grants\` | \`agent_setup.capability_suggestions\` | Suggest deterministic minimum capability grants from the current setup/template and tenant grant availability. | Tenant | Call with \`{"seat_id":"<seat-id>"}\` or \`{"setup_id":"<agent-id>"}\`; no model call and no mutation. |
 | \`rost_list_skills\` | \`skill.list\` | List tenant Skills with application descriptors, dependency metadata, source status, latest version, and assigned Seat count. Seat-scoped reads are available through \`rost://skills\`. | Tenant-admin | Call with \`{}\` or \`{"query":"invoice"}\`. |
 | \`rost_list_rost_skill_catalog\` | \`skill.catalog\` | List entitled {{brand}} catalog Skills. Private catalog source URLs and credentials stay server-side. | Tenant-admin | Call with \`{}\`; use \`{"include_unentitled":true}\` only to inspect tier availability. |
 | \`rost_enable_rost_catalog_skill\` | \`skill.enable_catalog\` | Enable an entitled {{brand}} catalog Skill into the company library with human confirmation. | Tenant-admin | Call with \`{"slug":"rost/ap-review"}\`; non-interactive callers receive a confirmation handoff. |
@@ -47599,7 +47987,7 @@ Retrieve the narrowest relevant guide before making a setup recommendation. Pref
     order: 60,
     title: "Cascade guide",
     summary: "How to connect company goals to seat-level work without turning {{brand}} into a project-management tool.",
-    version: "2026-07-12.1",
+    version: "2026-07-12.2",
     public: true,
     audiences: ["human", "cli", "mcp", "in_app_agent"],
     stages: ["operating_rhythm"],
@@ -47678,7 +48066,7 @@ On human and function seat pages, goal visibility includes both direct goals and
 
 ## Drive a goal's status from a Signal
 
-A Signal can be linked to a goal for visibility, or set to compute its status. Bind a Signal with \`goal.bind_measurable\`. By default the binding is **informative** (role \`informs\`): it appears as a direct indicator on the goal, is allowed at any level (company objective, parent, or leaf), can be one of many on the same goal, and never changes the goal's status. To let a Signal **drive** a leaf goal's status instead, bind it with \`--role drives_status\` (the goal must be a childless seat goal or milestone \u2014 a company objective or a goal with children rolls up from its children, so a driver there is rejected). A goal can have at most one driving Signal, and choosing a driver is a deliberate, human-gated act.
+A Signal can be linked to a goal for visibility, or set to compute its status. Bind a Signal with \`goal.bind_measurable\`. By default the binding is **informative** (role \`informs\`): it appears as a direct indicator on the goal, is allowed at any level (company objective, parent, or leaf), can be one of many on the same goal, and never changes the goal's status. To let a Signal **drive** a leaf goal's status instead, bind it with \`--role drives_status\` (the goal must be a childless seat goal or milestone \u2014 a company objective or a goal with children rolls up from its children, so a driver there is rejected). A goal can have at most one driving Signal, and choosing a driver is a deliberate, human-gated act. Promoting a Signal to the status driver requires a **second anchor**: a prior closed period plus the value that period's books show (\`second_anchor: { period_start, expected_value }\`). The instantaneous reading is not enough \u2014 the anchor proves the Signal matched reality at least once before it may automatically flip a goal, and it is recorded durably with the confirmation. Confirming a driver over an existing informative binding of the same Signal promotes that binding in place.
 
 A \`drives_status\` binding starts as an indicator only: nothing changes until a steward opts in with \`goal.set_auto_status --enabled true\`. Once opted in, the goal's status is computed from the measurable's latest confirmed reading against its target and direction \u2014 on target reads on-track, below target reads off-track. Only confirmed readings drive status; an agent's draft reading never auto-flips a goal. A human who sets the status by hand pins it, and that pin wins over the computed value until they change it or re-run \`goal.set_auto_status\`. Remove a binding with \`goal.unbind_measurable\`; the goal keeps its last status. Until a binding is opted in, an off-track Signal never raises an at-risk alert on its own.
 
@@ -47706,7 +48094,7 @@ Agents can suggest commitments and report progress. They should not create a new
     order: 61,
     title: "Signal guide",
     summary: "How to define and read measurables so the company runs on evidence instead of status theater.",
-    version: "2026-07-08.1",
+    version: "2026-07-12.1",
     public: true,
     audiences: ["human", "cli", "mcp", "in_app_agent"],
     stages: ["operating_rhythm"],
@@ -47794,7 +48182,7 @@ Once a measurable's number lives in a connected system, you can teach {{brand}}
 - \`signal.bind\` persists the validated recipe as an inert \`draft\` binding. It requires the \`preview_token\` from a preview of the same recipe, so nothing is bound that was not first seen working.
 - \`signal.bind_confirm\` is human-only. It activates the binding (\`draft -> active\`); an agent that calls it produces a pending confirmation instead. Only after a human confirms does the scheduled pull begin writing confirmed readings.
 
-Discovery always returns a \`recipe_presets\` array; it is empty when {{brand}} does not recognize a safe source type. Today the proven self-filling path is Baserow REST through \`integration.connect_rest\`: a tenant admin creates or rotates the Baserow connection through the command/vault path, then Signal runs \`integration.discover -> signal.preview -> signal.bind -> signal.bind_confirm\` against that connected source. Baserow row-field recipes and custom filtered-count recipes are supported when the human supplies the real table, field, filter, host, and value path. A first-class filtered-count preset is still a follow-up; do not imply every filtered count appears as a one-click preset. Google Sheets Signal pulls are not live yet: Google uses OAuth JSON credentials and remains withheld from REST presets until the pull executor extracts and refreshes the Google access token instead of treating the stored credential blob as a bearer token. A preset includes a label, cadence, required metadata, a draft \`rest_for_signals\` recipe, and the host allowlist to preview with. The human still fills in the real Baserow table/row/field or exact REST URL and value path before running \`signal.preview\`; presets are starter recipes, not secret stores.
+Discovery always returns a \`recipe_presets\` array; it is empty when {{brand}} does not recognize a safe source type. Today the proven self-filling path is Baserow REST through \`integration.connect_rest\`: a tenant admin creates or rotates the Baserow connection through the command/vault path, then Signal runs \`integration.discover -> signal.preview -> signal.bind -> signal.bind_confirm\` against that connected source. Baserow discovery now offers two first-class presets: \`baserow.row-field\` (read one scalar field from a row) and \`baserow.filtered-count\` (count rows matching a condition). The filtered-count builder takes a table id, field key, comparison operator, and comparison value and assembles a validated \`rest_for_signals\` recipe whose \`value_path\` is the response \`count\`; the field key and operator are allowlisted (they form the query-parameter name) and the comparison value is percent-encoded, so nothing the operator types can inject into the URL. The human still supplies the real table, field, operator, value, and host \u2014 presets and the builder are starter recipes, not secret stores. Google Sheets Signal pulls are not live yet: Google uses OAuth JSON credentials and remains withheld from REST presets until the pull executor extracts and refreshes the Google access token instead of treating the stored credential blob as a bearer token. A preset includes a label, cadence, required metadata, a draft \`rest_for_signals\` recipe, and the host allowlist to preview with. The human still fills in the real Baserow table/row/field or exact REST URL and value path before running \`signal.preview\`; presets are starter recipes, not secret stores.
 
 Recipes are validated data, never code: a read-only GET, a closed set of non-secret headers, and a restricted scalar path to the value. Every fetch passes one SSRF guard (HTTPS only, a steward-confirmed host allowlist set at bind, and a runtime check that the host does not resolve to a private address). The preset output never contains \`nango://\` handles, vault refs, tokens, or static credential headers. Deterministic pulls write \`integration\`-sourced readings on the measurable's cadence.
 
@@ -49171,7 +49559,7 @@ A consultancy's purpose might be "Make expert tax guidance affordable for first-
     order: 31,
     title: "Charter authoring deep-dive",
     summary: "The full Charter document contract field by field \u2014 decision authority, escalation, measurables, budget, permissions \u2014 with worked examples for human, agent, and hybrid seats.",
-    version: "2026-06-18.1",
+    version: "2026-07-13.1",
     public: true,
     audiences: ["cli", "mcp", "in_app_agent"],
     stages: ["charter_design", "staffing"],
@@ -49218,7 +49606,7 @@ A Charter is a seat's executable operating contract. On the CLI and MCP path you
   - **escalate** (1+) \u2014 the must-ask set: ambiguous authority, irreversible actions, credentials, legal or financial exposure, customer-impacting exceptions. At least one escalate item should carry \`unanswered_boundary: true\` so unresolved boundaries default conservative. The submit schema does not strictly require it, but the direct submit path (\`charter.update_draft\` / \`charter.set\`) does not add one for you \u2014 it only records the boundaries you flag \u2014 so include one whenever a boundary is unresolved.
 - **escalation_rules** (1+) \u2014 plain-language rules that trigger escalation, beyond the structured authority items. "Escalate any invoice over $5,000 or from a vendor not already in the ledger."
 - **measurables** (1+) \u2014 each \`{ name, target, cadence, source }\`. A measurable must measure the accountability, not vanity. \`cadence\` is \`daily|weekly|monthly|quarterly\`; \`source\` is \`human|agent|integration\`. Agent-sourced readings are unconfirmed until a human confirms them.
-- **permission_manifest** \u2014 each \`{ tool, scope, granted, rationale }\`. Map each accountability to the narrowest tool scope that performs it. Prefer draft/read scopes; a send or spend scope is a deliberate, justified grant. The manifest is what the tool-guard enforces and what a human signs.
+- **permission_manifest** \u2014 each \`{ tool, scope, granted, rationale }\`, with machine fields such as \`capability_id\` and \`integration_id\` when the grant is backed by a connected capability. Map each accountability to the narrowest tool scope that performs it. Prefer draft/read scopes; a send or spend scope is a deliberate, justified grant. Connection-backed entries are signed against the exact tenant integration; stale, cross-tenant, or scope-revoked identities fail closed before activation. The manifest is what the tool-guard enforces and what a human signs.
 - **budget** \u2014 \`{ monthly_usd, approval_required_over_usd, notes }\`. \`monthly_usd\` may be \`null\` (no autonomous budget). \`approval_required_over_usd: 0\` means any spend needs approval. State the rule in \`notes\`.
 - **unanswered_boundaries** (optional) \u2014 the open questions about this seat's authority you have not resolved. Naming them keeps them conservative instead of silently autonomous. **You may omit this field**; the server defaults it to \`[]\` (and still records any boundary you flag inline via \`unanswered_boundary: true\` on an authority item).
 - **seat_type_recommendation** (optional) \u2014 \`{ recommendation, rationale, confidence }\` where recommendation is \`human|agent|hybrid\`. Reason from the work: high-volume, rule-bound, reviewable work suits an agent under a Steward; judgment-heavy or relationship work stays human; split work is hybrid. **You may omit this field**; the server defaults conservatively to \`human\` until a human decides otherwise. Supply it when you have a clear recommendation.
@@ -50246,6 +50634,7 @@ function parseSemver(value) {
 
 // src/generated/command-manifest.ts
 var COMMAND_MANIFEST = [
+  { "id": "agent_setup.capability_suggestions", "namespace": "agent_setup", "action": "capability_suggestions", "title": "Suggest setup capability grants", "description": "Return deterministic minimum capability suggestions from a stock template and current tenant grant availability. No model call and no authority mutation.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": false }, { "name": "setup_id", "flag": "setup-id", "type": "string", "required": false }], "hasComplexInput": false, "help": "Suggest deterministic minimum capability grants from the setup/template and current tenant grant availability. No model call and no mutation." },
   { "id": "agent_setup.get", "namespace": "agent_setup", "action": "get", "title": "Get agent setup", "description": "Read the resumable agent-setup state: mode, parent, steward, template, lane, schedule, tool decisions, dry run, and next action.", "requiredScope": "seat", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": false }, { "name": "setup_id", "flag": "setup-id", "type": "string", "required": false }], "hasComplexInput": false, "help": "Read the resumable setup state: mode, parent, steward, lane, schedule, tool decisions, dry-run blockers, and the next action." },
   { "id": "agent_setup.relane", "namespace": "agent_setup", "action": "relane", "title": "Re-lane a live agent", "description": "Governed re-lane of a live agent: pause, move to the new lane, force a fresh dry-run rehearsal on that lane, then go live. Owner-only and human-gated; records a rationale.", "requiredScope": "tenant_admin", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": true }, { "name": "lane", "flag": "lane", "type": "enum", "required": true, "enumValues": ["cloud", "mcp_session", "runner"] }, { "name": "reason", "flag": "reason", "type": "string", "required": true }], "hasComplexInput": false, "help": "Re-lane a live agent (cloud / runner / mcp_session): it pauses, moves to the new lane, forces a fresh dry-run rehearsal on that lane, then goes live \u2014 owner-only, human-gated, with a required rationale. A runner target needs a paired runner; a failed rehearsal leaves the agent paused on the new lane." },
   { "id": "agent_setup.start", "namespace": "agent_setup", "action": "start", "title": "Start agent setup", "description": "Start (or resume) a draft agent setup for a seat in template, custom, or existing mode.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": true }, { "name": "mode", "flag": "mode", "type": "enum", "required": true, "enumValues": ["template", "custom", "existing"] }, { "name": "template_slug", "flag": "template-slug", "type": "string", "required": false }], "hasComplexInput": false, "help": "Start a draft agent setup from a template, custom, or existing mode; the setup resumes from the draft agent and Charter, not a fresh start." },
@@ -50321,7 +50710,7 @@ var COMMAND_MANIFEST = [
   { "id": "friction.list", "namespace": "friction", "action": "list", "title": "List Friction issues", "description": "List Friction issues ranked by status, impact, and severity. Defaults to active (open + diagnosing).", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "status", "flag": "status", "type": "enum", "required": false, "enumValues": ["open", "diagnosing", "resolved", "dropped", "active", "all"] }], "hasComplexInput": false, "help": "List Friction issues ranked by impact and severity to find the issue id before updating or resolving it." },
   { "id": "friction.resolve", "namespace": "friction", "action": "resolve", "title": "Resolve Friction issue", "description": 'Resolve an issue with a root cause. In the default "ids" resolution_mode this also creates a remediation follow-up task; "already_fixed" records only the root cause (no follow-up task). Always records a human decision (decided_by) in the same transaction.', "requiredScope": "tenant_admin", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "issue_id", "flag": "issue-id", "type": "string", "required": true }, { "name": "resolution_mode", "flag": "resolution-mode", "type": "enum", "required": false, "enumValues": ["ids", "already_fixed"] }, { "name": "root_cause", "flag": "root-cause", "type": "string", "required": true }, { "name": "owner_seat_id", "flag": "owner-seat-id", "type": "string", "required": false }, { "name": "task_title", "flag": "task-title", "type": "string", "required": false }, { "name": "task_description", "flag": "task-description", "type": "string", "required": false }, { "name": "done_by", "flag": "done-by", "type": "string", "required": false }, { "name": "resolving_seat_id", "flag": "resolving-seat-id", "type": "string", "required": false }], "hasComplexInput": false, "help": "Resolve an issue with a root cause and remediation task; resolution is a human decision." },
   { "id": "friction.update_status", "namespace": "friction", "action": "update_status", "title": "Update Friction issue status", "description": "Move a non-terminal issue between open and diagnosing. Terminal issues (resolved/dropped) cannot be reopened here.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "issue_id", "flag": "issue-id", "type": "string", "required": true }, { "name": "status", "flag": "status", "type": "enum", "required": true, "enumValues": ["open", "diagnosing"] }], "hasComplexInput": false, "help": "Move a non-terminal issue between open and diagnosing while it is being worked." },
-  { "id": "goal.bind_measurable", "namespace": "goal", "action": "bind_measurable", "title": "Bind a Signal to a Cascade goal", "description": "Bind a measurable to a goal. Role defaults to 'informs' \u2014 a conservative informative indicator allowed at any goal level (many per goal) that never changes goal status. Role 'drives_status' makes it the goal's status driver: allowed only on a childless seat goal or milestone, at most one per goal, and auto-status starts OFF until a steward opts in with goal.set_auto_status. Binding is human-gated.", "requiredScope": "seat", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "goal_id", "flag": "goal-id", "type": "string", "required": true }, { "name": "measurable_id", "flag": "measurable-id", "type": "string", "required": true }, { "name": "role", "flag": "role", "type": "enum", "required": false, "enumValues": ["drives_status", "informs"] }], "hasComplexInput": false, "help": "Bind a Signal to a goal. Defaults to role informs (a conservative indicator at any level that never changes status); pass role drives_status to make it a childless leaf goal's status driver (auto-status starts OFF until a steward opts in)." },
+  { "id": "goal.bind_measurable", "namespace": "goal", "action": "bind_measurable", "title": "Bind a Signal to a Cascade goal", "description": "Bind a measurable to a goal. Role defaults to 'informs' \u2014 a conservative informative indicator allowed at any goal level (many per goal) that never changes goal status. Role 'drives_status' makes it the goal's status driver: allowed only on a childless seat goal or milestone, at most one per goal, requires a second_anchor (a prior closed period + expected value confirming the Signal matched the books), and auto-status starts OFF until a steward opts in with goal.set_auto_status. Binding a driver over an existing informs binding of the same Signal promotes it. Binding is human-gated.", "requiredScope": "seat", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "goal_id", "flag": "goal-id", "type": "string", "required": true }, { "name": "measurable_id", "flag": "measurable-id", "type": "string", "required": true }, { "name": "role", "flag": "role", "type": "enum", "required": false, "enumValues": ["drives_status", "informs"] }], "hasComplexInput": true, "help": "Bind a Signal to a goal. Defaults to role informs (a conservative indicator at any level that never changes status); pass role drives_status with a second_anchor (a prior closed period + expected value confirming the Signal matched the books) to make it a childless leaf goal's status driver \u2014 this promotes an existing informs binding (auto-status starts OFF until a steward opts in)." },
   { "id": "goal.create", "namespace": "goal", "action": "create", "title": "Create Cascade goal", "description": "Create a cycle goal under an existing objective. The parent chain must terminate at a Compass objective in the same cycle (enforced server-side).", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "cycle_id", "flag": "cycle-id", "type": "string", "required": true }, { "name": "seat_id", "flag": "seat-id", "type": "string", "required": true }, { "name": "parent_goal_id", "flag": "parent-goal-id", "type": "string", "required": true }, { "name": "title", "flag": "title", "type": "string", "required": true }, { "name": "definition_of_done", "flag": "definition-of-done", "type": "string", "required": true }, { "name": "status", "flag": "status", "type": "enum", "required": false, "enumValues": ["on", "off"] }], "hasComplexInput": false, "help": "Create cycle goals under an existing objective; the parent chain must terminate at a Compass objective." },
   { "id": "goal.drop", "namespace": "goal", "action": "drop", "title": "Drop Cascade goal", "description": "Drop (retire) a goal by setting status to dropped. Dropping retires the commitment, so it is human-gated. The row is retained for audit (never deleted).", "requiredScope": "tenant_admin", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "goal_id", "flag": "goal-id", "type": "string", "required": true }], "hasComplexInput": false, "help": "Drop a goal to retire a commitment; the goal is retained for audit and dropping is human-gated." },
   { "id": "goal.get", "namespace": "goal", "action": "get", "title": "Get Cascade goal", "description": "Get one goal's core detail and status by id. Seat-scoped callers may only read their own seat's goals.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "goal_id", "flag": "goal-id", "type": "string", "required": true }], "hasComplexInput": false, "help": "Get one goal's core detail and status by id; seat tokens may only read their own goals." },
@@ -50384,6 +50773,8 @@ var COMMAND_MANIFEST = [
   { "id": "settings.product_learning.update", "namespace": "settings", "action": "product_learning.update", "title": "Update product-learning policy", "description": "Set tenant product-learning participation. Disabled and enterprise-contract modes block generic product analytics writes, but not security/audit logs.", "requiredScope": "tenant_admin", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "mode", "flag": "mode", "type": "enum", "required": true, "enumValues": ["enabled", "disabled", "enterprise_contract"] }], "hasComplexInput": false, "help": "Set tenant product-learning mode to enabled, disabled, or enterprise_contract; the change is human-gated." },
   { "id": "settings.sync_brief_scope.get", "namespace": "settings", "action": "sync_brief_scope.get", "title": "Get Sync Brief scope", "description": "Read the tenant's Sync Brief scope: company_wide (one weekly brief) or per_cluster (one brief per cluster).", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [], "hasComplexInput": false, "help": "Read whether weekly Sync Briefs compile company-wide (one brief) or per cluster (one brief per cluster)." },
   { "id": "settings.sync_brief_scope.update", "namespace": "settings", "action": "sync_brief_scope.update", "title": "Update Sync Brief scope", "description": "Set the tenant's Sync Brief scope (company_wide or per_cluster). Per_cluster falls back to company-wide when the tenant has no clusters.", "requiredScope": "tenant_admin", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "sync_brief_scope", "flag": "sync-brief-scope", "type": "enum", "required": true, "enumValues": ["company_wide", "per_cluster"] }], "hasComplexInput": false, "help": "Set Sync Brief scope to company_wide or per_cluster; per_cluster falls back to company-wide when no clusters exist." },
+  { "id": "settings.tool_policy.get", "namespace": "settings", "action": "tool_policy.get", "title": "Get tenant tool policy", "description": "Read the tenant tool-policy settings that govern capability-grant defaults and the AICOS auto-trust posture. Returns metadata only.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [], "hasComplexInput": false, "help": "Read tenant capability-grant defaults and the AICOS auto-trust posture. No secrets." },
+  { "id": "settings.tool_policy.update", "namespace": "settings", "action": "tool_policy.update", "title": "Update tenant tool policy", "description": "Set the tenant tool-policy defaults for capability grants and the AICOS auto-trust posture. Owner/admin only and human-gated.", "requiredScope": "tenant_admin", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "mode", "flag": "mode", "type": "enum", "required": true, "enumValues": ["managed", "open"] }], "hasComplexInput": true, "help": "Update tenant capability-grant defaults and the AICOS auto-trust posture. Owner/admin only, human-gated, and event-audited." },
   { "id": "settings.update", "namespace": "settings", "action": "update", "title": "Update tenant settings", "description": "Update tenant AI budget caps (soft/hard, USD). Budget changes are dangerous and gated.", "requiredScope": "tenant", "confirmation": "dangerous", "exposeOverMcp": true, "fields": [{ "name": "soft_cap_usd", "flag": "soft-cap-usd", "type": "string", "required": false }, { "name": "hard_cap_usd", "flag": "hard-cap-usd", "type": "string", "required": false }], "hasComplexInput": false, "help": "Update tenant AI budget caps; budget changes are dangerous and require human confirmation." },
   { "id": "signal.bind", "namespace": "signal", "action": "bind", "title": "Bind a signal source (draft)", "description": "Persist a validated recipe + connection + cadence as an INERT draft binding for a measurable. Requires a valid preview_token from signal.preview of the same recipe. Never activates \u2014 a human signal.bind_confirm does that.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "measurable_id", "flag": "measurable-id", "type": "string", "required": true }, { "name": "integration_id", "flag": "integration-id", "type": "string", "required": true }, { "name": "cadence", "flag": "cadence", "type": "enum", "required": true, "enumValues": ["daily", "weekly", "monthly", "quarterly", "annual"] }, { "name": "host_allowlist", "flag": "host-allowlist", "type": "array", "required": true, "itemType": "string" }, { "name": "preview_token", "flag": "preview-token", "type": "string", "required": true }, { "name": "role", "flag": "role", "type": "enum", "required": false, "enumValues": ["informs", "drives_status"] }], "hasComplexInput": true, "help": "Persist a validated recipe as an inert draft binding; requires the preview_token from a preview of the same recipe." },
   { "id": "signal.bind_confirm", "namespace": "signal", "action": "bind_confirm", "title": "Confirm and activate a signal binding", "description": "Human-only activation of a draft signal binding (draft \u2192 active). Agents can never self-activate \u2014 an agent caller produces a pending confirmation. A drives_status binding requires a second-anchor confirmation. Once active, the scheduled pull auto-fills the measurable.", "requiredScope": "tenant", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "binding_id", "flag": "binding-id", "type": "string", "required": true }], "hasComplexInput": true, "help": "Human-only: activate a draft signal binding (draft -> active) so scheduled pulls begin; an agent that calls it produces a pending confirmation." },
@@ -50472,6 +50863,9 @@ var COMMAND_MANIFEST = [
   { "id": "tenant.create", "namespace": "tenant", "action": "create", "title": "Create additional company", "description": "Create a new clean company for an already-provisioned account after checking tenant.create.additional entitlement.", "requiredScope": "tenant_admin", "confirmation": "none", "exposeOverMcp": false, "fields": [{ "name": "company_name", "flag": "company-name", "type": "string", "required": true }], "hasComplexInput": false, "help": "Create an additional clean company from an existing company session. Requires tenant.create.additional entitlement; first-company bootstrap stays signup.provision_tenant." },
   { "id": "tenant.model_gateway_policy.update", "namespace": "tenant", "action": "model_gateway_policy.update", "title": "Update model gateway policy", "description": "Unlock or relock managed models that do not offer a zero-retention (ZDR) tier (ADR-0019). Locked (the conservative default) restricts the AI Gateway to zero-retention-eligible managed models. Owner-only and human-gated: unlocking is a deliberate ADR-0018 \xA76 standing authorization that lets managed brains without a zero-retention tier run. This provider retains data up to 30 days for abuse monitoring.", "requiredScope": "tenant_admin", "confirmation": "dangerous", "exposeOverMcp": true, "fields": [{ "name": "allow_non_zdr_models", "flag": "allow-non-zdr-models", "type": "boolean", "required": true }], "hasComplexInput": false, "help": "Unlock or relock managed models that do not offer a zero-retention (ZDR) tier (ADR-0019). Locked (default) restricts the AI Gateway to zero-retention-eligible managed models. Owner-only and human-gated; unlocking establishes an ADR-0018 \xA76 standing authorization and surfaces the per-model retention disclosure." },
   { "id": "tenant.rename", "namespace": "tenant", "action": "rename", "title": "Rename company", "description": "Rename the current tenant/company. The rename is human-gated and writes an audit event.", "requiredScope": "tenant_admin", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "company_name", "flag": "company-name", "type": "string", "required": true }], "hasComplexInput": false, "help": "Rename the current company; owner-only, human-gated, and audited as an event." },
+  { "id": "tool_grants.agent.effective", "namespace": "tool_grants", "action": "agent.effective", "title": "List agent effective capability grants", "description": "Read the effective capability grants for one agent, including the lower-of-ceiling-and-selection access level and compile status. Returns metadata only.", "requiredScope": "seat", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "agent_id", "flag": "agent-id", "type": "string", "required": true }], "hasComplexInput": false, "help": "Read one agent's effective capability grants after tenant ceilings, agent selections, and compile availability are applied." },
+  { "id": "tool_grants.agent.update", "namespace": "tool_grants", "action": "agent.update", "title": "Update agent capability grants", "description": "Compile a Charter supersession proposal for per-agent capability grant reductions or expansions. Human steward/admin only.", "requiredScope": "tenant", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "agent_id", "flag": "agent-id", "type": "string", "required": true }, { "name": "reason", "flag": "reason", "type": "string", "required": false }], "hasComplexInput": true, "help": "Compile a Charter supersession proposal for an agent capability grant reduction or expansion. Human steward/admin only." },
+  { "id": "tool_grants.tenant.list", "namespace": "tool_grants", "action": "tenant.list", "title": "List tenant capability grants", "description": "Read the tenant capability ceiling/default matrix with connection, availability, source, ceiling, and compile status. Returns metadata only.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [], "hasComplexInput": false, "help": "List tenant capability ceilings/defaults with connection, availability, source, and compile status. Read-only." },
   { "id": "tool.catalog", "namespace": "tool", "action": "catalog", "title": "List tool catalog", "description": "List the discoverable tool catalog the agent builder reads \u2014 tool id, title, provider, prescriptive description, default scope tiers, credential requirement, access policy, and execution-boundary guidance.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "provider", "flag": "provider", "type": "string", "required": false }], "hasComplexInput": false, "help": "List the tool catalog the builder reads \u2014 id, prescriptive description, scope tiers, credential requirement, access policy, and execution-boundary guidance." },
   { "id": "usage.report", "namespace": "usage", "action": "report", "title": "AI-workforce ROI report", "description": "Return the tenant's immutable per-period usage snapshots \u2014 agents ran, outputs, token/run cost, human-accepted value, exceptions, and approvals \u2014 for the AI-workforce ROI report.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "limit", "flag": "limit", "type": "integer", "required": false }], "hasComplexInput": false, "help": "Read the AI-workforce ROI report \u2014 per-period agents/outputs/token+run cost, human-accepted value, exceptions, and approvals \u2014 from immutable usage snapshots." },
   { "id": "usage.snapshot", "namespace": "usage", "action": "snapshot", "title": "Capture usage period snapshot", "description": "Freeze the current (or a given) period's usage and accepted-value totals into an immutable snapshot for the ROI report. Insert-only and idempotent \u2014 re-running a captured period changes nothing.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [], "hasComplexInput": true, "help": "Freeze the current period's usage and accepted-value totals into an immutable snapshot for the ROI report; insert-only and idempotent, so re-running a captured period changes nothing." },