@rosthq/cli 0.7.70 → 0.7.72

package/dist/index.js

@@ -38201,6 +38201,21 @@ function hasSecretShapedValue(value) {
 // ../../packages/protocol/src/tool-catalog.ts
 var toolScopeTierSchema = external_exports.enum(["read", "draft", "write_with_approval", "full"]);
 var toolAccessPolicySchema = external_exports.enum(["always_allow", "always_ask"]);
+var toolAccessLevelSchema = external_exports.enum(["read", "draft", "write", "admin"]);
+var toolProviderRequirementSchema = external_exports.enum(["none", "connection", "vault_ref", "platform_managed"]);
+var toolCostClassSchema = external_exports.enum(["included", "metered_low", "metered_standard", "metered_high"]);
+var toolExecutionLaneSchema = external_exports.enum(["cloud", "runner", "mcp"]);
+var trustedRequiredMetadataSchema = external_exports.enum([
+  "standing_authorization_id",
+  "decided_by_user_id",
+  "charter_scope",
+  "budget_cap",
+  "lane",
+  "capability_id",
+  "access_level",
+  "authorization_expires_at",
+  "authorization_revoked_at"
+]);
 var toolCatalogEntrySchema = external_exports.object({
   // Stable tool id used in permission manifests and execution.
   id: external_exports.string().min(1),
@@ -38217,7 +38232,18 @@ var toolCatalogEntrySchema = external_exports.object({
   // Whether using this tool requires attaching a credential (vault ref) first.
   credential_required: external_exports.boolean(),
   // The conservative default access policy for this tool in a new manifest.
-  default_access_policy: toolAccessPolicySchema
+  default_access_policy: toolAccessPolicySchema,
+  // Provider-neutral capability grant access levels supported by this tool.
+  access_levels: external_exports.array(toolAccessLevelSchema).min(1),
+  default_access_level: toolAccessLevelSchema,
+  // What must exist before the provider can execute this capability.
+  provider_requirement: toolProviderRequirementSchema,
+  // Coarse cost class for setup and Trusted-mode launch review.
+  cost_class: toolCostClassSchema,
+  // Execution lanes whose server guard path can carry this capability.
+  lane_support: external_exports.array(toolExecutionLaneSchema).min(1),
+  // Metadata that must be present when this capability is used under Trusted mode.
+  trusted_required_metadata: external_exports.array(trustedRequiredMetadataSchema)
 }).strict();
 var toolCatalogOutputSchema = external_exports.object({
   // The explicit, important note that the catalog is configuration the builder
@@ -38393,6 +38419,36 @@ var CATALOG_ENTRIES = [
     credential_required: false,
     default_access_policy: "always_allow"
   },
+  {
+    id: "browser.read",
+    title: "Read public page in browser",
+    provider: "web",
+    description: "Call this to inspect a public page in a read-only sandbox browser. It never submits forms, persists authenticated state, downloads executables, or reaches private networks.",
+    default_scope_tier: "read",
+    scope_tiers: ["read"],
+    credential_required: false,
+    default_access_policy: "always_allow"
+  },
+  {
+    id: "files.read",
+    title: "Read working files",
+    provider: "rost",
+    description: "Call this to read bounded tenant-scoped working files and published artifact references. Read-only: it never exposes files outside the approved workspace.",
+    default_scope_tier: "read",
+    scope_tiers: ["read"],
+    credential_required: false,
+    default_access_policy: "always_allow"
+  },
+  {
+    id: "files.write",
+    title: "Write working files",
+    provider: "rost",
+    description: "Call this to create bounded working files or publish reviewable artifacts inside the tenant workspace. It never executes file contents or writes outside the approved workspace.",
+    default_scope_tier: "draft",
+    scope_tiers: ["draft"],
+    credential_required: false,
+    default_access_policy: "always_allow"
+  },
   {
     id: "docs.drafts.write",
     title: "Write document drafts",
@@ -38585,7 +38641,54 @@ var CATALOG_ENTRIES = [
     default_access_policy: "always_allow"
   }
 ];
-var catalogById = new Map(CATALOG_ENTRIES.map((entry) => [entry.id, entry]));
+function accessLevelForScope(scopeTier) {
+  switch (scopeTier) {
+    case "read":
+      return "read";
+    case "draft":
+      return "draft";
+    case "write_with_approval":
+      return "write";
+    case "full":
+      return "admin";
+  }
+}
+function providerRequirementFor(entry) {
+  if (!entry.credential_required) {
+    return entry.provider === "rost" ? "platform_managed" : "none";
+  }
+  return entry.id === "secret.broker" ? "vault_ref" : "connection";
+}
+function trustedRequiredMetadataFor(entry) {
+  if (entry.default_access_policy === "always_allow" && entry.default_scope_tier !== "write_with_approval") {
+    return [];
+  }
+  return [
+    "standing_authorization_id",
+    "decided_by_user_id",
+    "charter_scope",
+    "budget_cap",
+    "lane",
+    "capability_id",
+    "access_level",
+    "authorization_expires_at",
+    "authorization_revoked_at"
+  ];
+}
+function enrichCatalogEntry(entry) {
+  const accessLevels = [...new Set(entry.scope_tiers.map(accessLevelForScope))];
+  return {
+    ...entry,
+    access_levels: accessLevels,
+    default_access_level: accessLevelForScope(entry.default_scope_tier),
+    provider_requirement: providerRequirementFor(entry),
+    cost_class: entry.id === "script.run" || entry.id === "secret.broker" ? "metered_standard" : "included",
+    lane_support: ["cloud", "runner", "mcp"],
+    trusted_required_metadata: trustedRequiredMetadataFor(entry)
+  };
+}
+var catalogEntries = CATALOG_ENTRIES.map(enrichCatalogEntry);
+var catalogById = new Map(catalogEntries.map((entry) => [entry.id, entry]));
 
 // ../../packages/protocol/src/skills.ts
 var skillVisibilitySchema = external_exports.enum(["private", "seat", "tenant"]);
@@ -39491,6 +39594,275 @@ var agentBuilderCompilationSchema = external_exports.object({
   }).strict()).default([]),
   pendingConfirmationCards: external_exports.array(agentBuilderPendingConfirmationCardSchema).default([])
 }).strict();
+var agentSetupSectionSchema = external_exports.enum([
+  "overview",
+  "charter",
+  "outcomes_signals",
+  "tools_connections",
+  "skills",
+  "autonomy",
+  "activity",
+  "settings"
+]);
+var agentSetupMethodSchema = external_exports.enum(["manual", "template", "chat", "import"]);
+var agentBuilderFieldDiffSchema = external_exports.object({
+  section: agentSetupSectionSchema,
+  field: external_exports.string().trim().min(1).max(80),
+  label: external_exports.string().trim().min(1).max(120),
+  before: external_exports.unknown(),
+  proposed: external_exports.unknown(),
+  rationale: external_exports.string().trim().max(360)
+}).strict();
+
+// ../../packages/protocol/src/tool-policy.ts
+var uuidSchema5 = external_exports.string().uuid();
+var capabilityGrantAccessLevelSchema = external_exports.enum(["off", "read", "draft", "write", "admin"]);
+var capabilityGrantAvailabilitySchema = external_exports.enum([
+  "available",
+  "connection_required",
+  "scope_missing",
+  "revoked",
+  "disabled"
+]);
+var capabilityGrantSourceSchema = external_exports.enum([
+  "connection",
+  "catalog",
+  "manual",
+  "aicos_automatic",
+  "system",
+  "suggested",
+  "human",
+  "aicos_override",
+  "migration"
+]);
+var capabilityGrantCompileStatusSchema = external_exports.enum([
+  "compiled",
+  "unavailable",
+  "revoked",
+  "off",
+  "unsupported_lane"
+]);
+var capabilityGrantConnectionSchema = external_exports.object({
+  integration_id: uuidSchema5.nullable(),
+  provider: external_exports.string().min(1).nullable(),
+  account_email: external_exports.string().min(1).nullable(),
+  account_label: external_exports.string().min(1).nullable(),
+  status: external_exports.enum(["connected", "error", "disconnected"]).nullable()
+}).strict();
+var tenantCapabilityGrantDtoSchema = external_exports.object({
+  tool_grant_id: uuidSchema5,
+  capability_id: external_exports.string().min(1),
+  connection: capabilityGrantConnectionSchema,
+  availability: capabilityGrantAvailabilitySchema,
+  source: capabilityGrantSourceSchema,
+  max_access_level: capabilityGrantAccessLevelSchema,
+  default_agent_access_level: capabilityGrantAccessLevelSchema,
+  compile_status: capabilityGrantCompileStatusSchema
+}).strict();
+var agentEffectiveCapabilityGrantDtoSchema = external_exports.object({
+  tool_grant_id: uuidSchema5,
+  agent_tool_grant_id: uuidSchema5.nullable(),
+  agent_id: uuidSchema5,
+  capability_id: external_exports.string().min(1),
+  connection: capabilityGrantConnectionSchema,
+  availability: capabilityGrantAvailabilitySchema,
+  source: capabilityGrantSourceSchema,
+  selection_source: capabilityGrantSourceSchema.nullable(),
+  max_access_level: capabilityGrantAccessLevelSchema,
+  default_agent_access_level: capabilityGrantAccessLevelSchema,
+  selected_access_level: capabilityGrantAccessLevelSchema,
+  effective_access_level: capabilityGrantAccessLevelSchema,
+  compile_status: capabilityGrantCompileStatusSchema
+}).strict();
+var toolGrantsTenantListInputSchema = external_exports.object({}).strict();
+var toolGrantsTenantListOutputSchema = external_exports.object({
+  grants: external_exports.array(tenantCapabilityGrantDtoSchema)
+}).strict();
+var toolGrantsAgentEffectiveInputSchema = external_exports.object({
+  agent_id: uuidSchema5
+}).strict();
+var toolGrantsAgentEffectiveOutputSchema = external_exports.object({
+  agent_id: uuidSchema5,
+  seat_id: uuidSchema5,
+  grants: external_exports.array(agentEffectiveCapabilityGrantDtoSchema)
+}).strict();
+var agentCapabilityGrantUpdateSchema = external_exports.object({
+  tool_grant_id: uuidSchema5,
+  access_level: capabilityGrantAccessLevelSchema
+}).strict();
+var compiledCapabilityManifestEntrySchema = external_exports.object({
+  tool: external_exports.string().min(1),
+  capability_id: external_exports.string().min(1),
+  integration_id: uuidSchema5.optional(),
+  access_level: capabilityGrantAccessLevelSchema.exclude(["off"]),
+  scope_tier: external_exports.enum(["read", "draft", "write_with_approval", "full"]),
+  access_policy: external_exports.enum(["always_allow", "always_ask"]),
+  mode: external_exports.enum(["allow", "escalate"])
+}).strict();
+var toolGrantsAgentUpdateInputSchema = external_exports.object({
+  agent_id: uuidSchema5,
+  grants: external_exports.array(agentCapabilityGrantUpdateSchema).min(1).max(50),
+  reason: external_exports.string().trim().min(1).max(500).optional()
+}).strict();
+var toolGrantsAgentUpdateOutputSchema = external_exports.object({
+  agent_id: uuidSchema5,
+  applied_immediately: external_exports.boolean(),
+  requires_charter_supersession: external_exports.boolean(),
+  changed_grants: external_exports.array(agentEffectiveCapabilityGrantDtoSchema),
+  charter_proposal: external_exports.object({
+    compiler_version: external_exports.string().min(1),
+    scope_digest: external_exports.string().regex(/^sha256:[0-9a-f]{64}$/),
+    permission_manifest: external_exports.array(compiledCapabilityManifestEntrySchema)
+  }).strict().nullable()
+}).strict();
+var scopeDigestSchema = external_exports.string().regex(/^sha256:[0-9a-f]{64}$/);
+var classifierVersionSchema = external_exports.string().regex(/^[a-z][a-z0-9_.-]{0,79}$/);
+var agentActivationReceiptInputSchema = external_exports.object({
+  agent_id: uuidSchema5,
+  proposed_budget_cents: external_exports.number().int().nonnegative().max(1e7).optional()
+}).strict();
+var agentActivationReceiptCapabilitySchema = external_exports.object({
+  capability_id: external_exports.string().min(1),
+  access_level: capabilityGrantAccessLevelSchema,
+  compile_status: capabilityGrantCompileStatusSchema,
+  connection: capabilityGrantConnectionSchema
+}).strict();
+var agentActivationReceiptDiffSchema = external_exports.object({
+  added: external_exports.array(external_exports.string().min(1)),
+  removed: external_exports.array(external_exports.string().min(1)),
+  changed: external_exports.array(external_exports.object({
+    capability_id: external_exports.string().min(1),
+    from_access_level: capabilityGrantAccessLevelSchema.nullable(),
+    to_access_level: capabilityGrantAccessLevelSchema
+  }).strict())
+}).strict();
+var agentActivationReceiptOutputSchema = external_exports.object({
+  agent_id: uuidSchema5,
+  seat_id: uuidSchema5,
+  steward_seat_id: uuidSchema5,
+  steward_label: external_exports.string().min(1).max(160),
+  lane: external_exports.enum(["cloud", "runner", "mcp_session"]),
+  cadence: external_exports.string().min(1).max(120).nullable(),
+  budget_cents: external_exports.number().int().nonnegative().max(1e7),
+  currency: external_exports.literal("USD"),
+  scope_digest: scopeDigestSchema,
+  compiler_version: classifierVersionSchema,
+  classifier_version: classifierVersionSchema,
+  trusted_boundary: external_exports.object({
+    eligible_command_count: external_exports.number().int().nonnegative(),
+    always_human: external_exports.array(external_exports.string().min(1)).min(1)
+  }).strict(),
+  capabilities: external_exports.array(agentActivationReceiptCapabilitySchema),
+  diff: agentActivationReceiptDiffSchema
+}).strict().superRefine((value, ctx) => {
+  if (hasSecretShapedValue(value)) {
+    ctx.addIssue({
+      code: external_exports.ZodIssueCode.custom,
+      message: "Activation receipt cannot contain secret-shaped content."
+    });
+  }
+});
+var agentActivationSignInputSchema = external_exports.object({
+  agent_id: uuidSchema5,
+  expected_scope_digest: scopeDigestSchema,
+  budget_cents: external_exports.number().int().nonnegative().max(1e7),
+  reason: external_exports.string().trim().min(1).max(500).optional()
+}).strict();
+var agentActivationSignOutputSchema = external_exports.object({
+  agent_id: uuidSchema5,
+  seat_id: uuidSchema5,
+  scope_digest: scopeDigestSchema,
+  decision_id: uuidSchema5,
+  event_id: uuidSchema5,
+  activated: external_exports.boolean()
+}).strict();
+var agentTrustGrantDtoSchema = external_exports.object({
+  grant_id: uuidSchema5,
+  agent_id: uuidSchema5,
+  seat_id: uuidSchema5,
+  granted_by_user_id: uuidSchema5,
+  scope_digest: scopeDigestSchema,
+  classifier_version: classifierVersionSchema,
+  budget_cents: external_exports.number().int().nonnegative(),
+  reserved_cents: external_exports.number().int().nonnegative(),
+  spent_cents: external_exports.number().int().nonnegative(),
+  currency: external_exports.literal("USD"),
+  status: external_exports.enum(["active", "revoked", "superseded", "expired"]),
+  effective_at: external_exports.string().datetime({ offset: true }),
+  expires_at: external_exports.string().datetime({ offset: true }).nullable(),
+  revoked_at: external_exports.string().datetime({ offset: true }).nullable(),
+  supersedes_id: uuidSchema5.nullable()
+}).strict();
+var agentTrustGrantCreateInputSchema = external_exports.object({
+  agent_id: uuidSchema5,
+  expected_scope_digest: scopeDigestSchema,
+  budget_cents: external_exports.number().int().nonnegative().max(1e7),
+  expires_at: external_exports.string().datetime({ offset: true }).optional(),
+  reason: external_exports.string().trim().min(1).max(500).optional()
+}).strict();
+var agentTrustGrantInspectInputSchema = external_exports.object({
+  agent_id: uuidSchema5,
+  include_inactive: external_exports.boolean().optional()
+}).strict();
+var agentTrustGrantInspectOutputSchema = external_exports.object({
+  grants: external_exports.array(agentTrustGrantDtoSchema)
+}).strict();
+var agentTrustGrantMutationInputSchema = external_exports.object({
+  grant_id: uuidSchema5,
+  reason: external_exports.string().trim().min(1).max(500).optional()
+}).strict();
+var agentTrustGrantExpireInputSchema = external_exports.object({
+  agent_id: uuidSchema5
+}).strict();
+var agentTrustGrantSupersedeInputSchema = external_exports.object({
+  agent_id: uuidSchema5,
+  expected_scope_digest: scopeDigestSchema,
+  budget_cents: external_exports.number().int().nonnegative().max(1e7),
+  expires_at: external_exports.string().datetime({ offset: true }).optional(),
+  reason: external_exports.string().trim().min(1).max(500).optional()
+}).strict();
+var agentTrustGrantMutationOutputSchema = external_exports.object({
+  grant: agentTrustGrantDtoSchema,
+  event_id: uuidSchema5
+}).strict();
+var agentSetupCapabilitySuggestionsInputSchema = external_exports.object({
+  seat_id: uuidSchema5.optional(),
+  setup_id: uuidSchema5.optional()
+}).strict().refine(
+  (value) => Boolean(value.seat_id) || Boolean(value.setup_id),
+  "Provide seat_id or setup_id."
+);
+var agentSetupCapabilitySuggestionSchema = external_exports.object({
+  capability_id: external_exports.string().min(1),
+  tool_grant_id: uuidSchema5.nullable(),
+  suggested_access_level: capabilityGrantAccessLevelSchema,
+  reason: external_exports.string().min(1).max(240),
+  available: external_exports.boolean()
+}).strict();
+var agentSetupCapabilitySuggestionsOutputSchema = external_exports.object({
+  agent_id: uuidSchema5,
+  seat_id: uuidSchema5,
+  template_slug: external_exports.string().nullable(),
+  suggestions: external_exports.array(agentSetupCapabilitySuggestionSchema)
+}).strict();
+var tenantToolPolicyAicosSchema = external_exports.object({
+  trust_new_capabilities_automatically: external_exports.boolean()
+}).strict();
+var storedTenantToolPolicySchema = external_exports.object({
+  mode: external_exports.enum(["managed", "open"]),
+  aicos: tenantToolPolicyAicosSchema
+}).strict().superRefine((value, ctx) => {
+  if (hasSecretShapedValue(value)) {
+    ctx.addIssue({
+      code: external_exports.ZodIssueCode.custom,
+      message: "Tenant tool policy cannot contain secret-shaped content."
+    });
+  }
+});
+var toolPolicyGetInputSchema = external_exports.object({}).strict();
+var toolPolicyGetOutputSchema = external_exports.object({
+  tool_policy: storedTenantToolPolicySchema
+}).strict();
 
 // ../../packages/protocol/src/agent-policy.ts
 var AUTONOMOUS_RISK_LEVELS = ["low", "medium", "high", "critical"];
@@ -39554,7 +39926,7 @@ var cloudBrainOptionSchema = external_exports.object({
 }).strict();
 
 // ../../packages/protocol/src/aicos.ts
-var uuidSchema5 = external_exports.string().uuid();
+var uuidSchema6 = external_exports.string().uuid();
 var jsonObjectSchema = external_exports.record(external_exports.string(), external_exports.unknown());
 var aicosConversationPurposeSchema = external_exports.enum(["onboarding", "general", "seat"]);
 var aicosLaneSchema = external_exports.enum(["cloud", "runner", "mcp"]);
@@ -39630,19 +40002,19 @@ var aicosBrainSelectionSchema = external_exports.object({
 }).strict();
 var agentTurnExecutionLaneSchema = external_exports.enum(["cloud", "mcp_session", "runner"]);
 var agentTurnExecutionSchema = external_exports.object({
-  id: uuidSchema5,
-  tenantId: uuidSchema5,
-  sessionId: uuidSchema5,
-  userMessageId: uuidSchema5,
-  assistantMessageId: uuidSchema5.nullable(),
-  seatId: uuidSchema5,
-  agentId: uuidSchema5,
-  userId: uuidSchema5,
+  id: uuidSchema6,
+  tenantId: uuidSchema6,
+  sessionId: uuidSchema6,
+  userMessageId: uuidSchema6,
+  assistantMessageId: uuidSchema6.nullable(),
+  seatId: uuidSchema6,
+  agentId: uuidSchema6,
+  userId: uuidSchema6,
   lane: agentTurnExecutionLaneSchema,
   brain: agentTurnExecutionBrainSchema,
   status: agentTurnExecutionStatusSchema,
-  claimedByRunnerId: uuidSchema5.nullable(),
-  linkedRunId: uuidSchema5.nullable(),
+  claimedByRunnerId: uuidSchema6.nullable(),
+  linkedRunId: uuidSchema6.nullable(),
   interactiveDeadline: external_exports.string().datetime({ offset: true }),
   claimedAt: external_exports.string().datetime({ offset: true }).nullable().optional(),
   startedAt: external_exports.string().datetime({ offset: true }).nullable().optional(),
@@ -39658,13 +40030,13 @@ var agentTurnExecutionSchema = external_exports.object({
   updatedAt: external_exports.string().datetime({ offset: true })
 }).strict();
 var aicosPendingTurnSchema = external_exports.object({
-  id: uuidSchema5,
-  userMessageId: uuidSchema5,
-  assistantMessageId: uuidSchema5.nullable(),
+  id: uuidSchema6,
+  userMessageId: uuidSchema6,
+  assistantMessageId: uuidSchema6.nullable(),
   lane: agentTurnExecutionLaneSchema,
   brain: agentTurnExecutionBrainSchema,
   status: agentTurnExecutionStatusSchema,
-  linkedRunId: uuidSchema5.nullable(),
+  linkedRunId: uuidSchema6.nullable(),
   interactiveDeadline: external_exports.string().datetime({ offset: true }),
   terminalReason: external_exports.string().min(1).max(120).nullable().default(null),
   claimLatencyMs: external_exports.number().int().nonnegative().nullable().default(null),
@@ -39730,8 +40102,8 @@ var aicosRouteContextSchema = external_exports.object({
   pathname: external_exports.string().min(1),
   routeTemplate: external_exports.string().min(1),
   search: external_exports.string().max(500).optional(),
-  selectedSeatId: uuidSchema5.nullable().optional(),
-  selectedObjectId: uuidSchema5.nullable().optional()
+  selectedSeatId: uuidSchema6.nullable().optional(),
+  selectedObjectId: uuidSchema6.nullable().optional()
 }).strict();
 var aicosOnboardingContextSchema = external_exports.object({
   step: external_exports.string().min(1).nullable().default(null),
@@ -39739,7 +40111,7 @@ var aicosOnboardingContextSchema = external_exports.object({
   state: jsonObjectSchema.optional()
 }).strict();
 var aicosSeatScopeSchema = external_exports.object({
-  seatId: uuidSchema5,
+  seatId: uuidSchema6,
   seatName: external_exports.string().min(1).max(200)
 }).strict();
 var aicosCapabilitySnapshotSchema = external_exports.object({
@@ -39797,7 +40169,7 @@ var aicosBrainSettingsUpdateInputSchema = external_exports.object({
   "At least one AICOS lane or brain setting must be provided."
 );
 var aicosSessionSchema = external_exports.object({
-  id: uuidSchema5,
+  id: uuidSchema6,
   title: external_exports.string().min(1),
   purpose: aicosConversationPurposeSchema,
   active: external_exports.boolean(),
@@ -39814,7 +40186,7 @@ var aicosAttachmentContentTypeSchema = external_exports.enum(AICOS_ATTACHMENT_CO
 var AICOS_ATTACHMENT_READINESS = ["ready", "unavailable", "expired"];
 var aicosAttachmentReadinessSchema = external_exports.enum(AICOS_ATTACHMENT_READINESS);
 var aicosAttachmentSchema = external_exports.object({
-  id: uuidSchema5,
+  id: uuidSchema6,
   contentType: aicosAttachmentContentTypeSchema,
   sizeBytes: external_exports.number().int().positive(),
   width: external_exports.number().int().positive().nullable(),
@@ -39827,7 +40199,7 @@ var aicosAttachmentUploadResultSchema = external_exports.object({
   attachment: aicosAttachmentSchema
 }).strict();
 var aicosRunnerAttachmentRefSchema = external_exports.object({
-  id: uuidSchema5,
+  id: uuidSchema6,
   content_type: aicosAttachmentContentTypeSchema,
   size_bytes: external_exports.number().int().positive(),
   width: external_exports.number().int().positive().nullable(),
@@ -39840,28 +40212,28 @@ var aicosRunnerAttachmentRefSchema = external_exports.object({
 }).strict();
 var AICOS_RUNNER_ATTACHMENT_OUTCOMES = ["used", "expired", "load_failed"];
 var aicosRunnerAttachmentOutcomeSchema = external_exports.object({
-  id: uuidSchema5,
+  id: uuidSchema6,
   outcome: external_exports.enum(AICOS_RUNNER_ATTACHMENT_OUTCOMES)
 }).strict();
 var aicosMessageSchema = external_exports.object({
-  id: uuidSchema5,
-  sessionId: uuidSchema5,
+  id: uuidSchema6,
+  sessionId: uuidSchema6,
   role: aicosMessageRoleSchema,
   actorKind: aicosActorKindSchema,
   contentText: external_exports.string(),
   routeContext: jsonObjectSchema,
   onboardingContext: jsonObjectSchema,
   metadata: jsonObjectSchema.default({}),
-  linkedRunId: uuidSchema5.nullable(),
-  linkedWorkOrderId: uuidSchema5.nullable(),
+  linkedRunId: uuidSchema6.nullable(),
+  linkedWorkOrderId: uuidSchema6.nullable(),
   sourceCount: external_exports.number().int().nonnegative().default(0),
   attachments: external_exports.array(aicosAttachmentSchema).default([]),
   createdAt: external_exports.string().datetime({ offset: true })
 }).strict();
 var aicosSourceSchema = external_exports.object({
-  id: uuidSchema5,
-  sessionId: uuidSchema5,
-  messageId: uuidSchema5.nullable(),
+  id: uuidSchema6,
+  sessionId: uuidSchema6,
+  messageId: uuidSchema6.nullable(),
   sourceKind: aicosSourceKindSchema,
   sourceRef: external_exports.string().min(1).max(500),
   title: external_exports.string().min(1).max(300),
@@ -39884,14 +40256,14 @@ var aicosAgentBuilderMetadataSchema = external_exports.object({
   agentBuilder: agentBuilderCompilationSchema
 }).strict();
 var aicosTurnRequestSchema = external_exports.object({
-  requestId: uuidSchema5,
-  sessionId: uuidSchema5.nullable().optional(),
+  requestId: uuidSchema6,
+  sessionId: uuidSchema6.nullable().optional(),
   purpose: aicosConversationPurposeSchema.default("general"),
   // Empty is permitted only when attachments are present (an image-only turn);
   // runAicosTurn enforces the "message or attachment required" invariant so the
   // schema stays a plain object for downstream `.shape`/`.extend` consumers.
   message: external_exports.string().trim().max(12e3).default(""),
-  attachmentIds: external_exports.array(uuidSchema5).max(AICOS_MAX_ATTACHMENTS_PER_TURN).default([]),
+  attachmentIds: external_exports.array(uuidSchema6).max(AICOS_MAX_ATTACHMENTS_PER_TURN).default([]),
   routeContext: aicosRouteContextSchema,
   model: aicosModelRequestSchema.optional(),
   agentBuilderClarification: agentBuilderClarificationSetSchema.optional()
@@ -39960,6 +40332,21 @@ var aicosPulseSnapshotSchema = external_exports.object({
 // ../../packages/protocol/src/command-introspection.ts
 var requiredScopeSchema = external_exports.enum(["tenant_admin", "tenant", "seat", "user"]);
 var confirmationSchema = external_exports.enum(["none", "human_required", "credential_flow", "dangerous"]);
+var trustedExecutionModeSchema = external_exports.enum(["eligible", "always_human", "not_applicable"]);
+var trustedExecutionRiskFlagSchema = external_exports.enum([
+  "admin",
+  "credential",
+  "destructive",
+  "production",
+  "self_approval",
+  "external_send",
+  "spend"
+]);
+var trustedExecutionSchema = external_exports.object({
+  mode: trustedExecutionModeSchema,
+  risk_flags: external_exports.array(trustedExecutionRiskFlagSchema),
+  rationale: external_exports.string().min(1)
+}).strict();
 var jsonSchemaObjectSchema = external_exports.record(external_exports.string(), external_exports.unknown()).refine((value) => value !== null, { message: "JSON Schema must be an object." });
 var commandDescribeInputSchema = external_exports.object({
   // The command id to describe, e.g. "compass.draft".
@@ -39971,6 +40358,7 @@ var commandDescribeOutputSchema = external_exports.object({
   description: external_exports.string().min(1),
   required_scope: requiredScopeSchema,
   confirmation: confirmationSchema,
+  trusted_execution: trustedExecutionSchema,
   expose_over_mcp: external_exports.boolean(),
   input_schema: jsonSchemaObjectSchema,
   output_schema: jsonSchemaObjectSchema,
@@ -39988,6 +40376,7 @@ var commandListEntrySchema = external_exports.object({
   title: external_exports.string().min(1),
   required_scope: requiredScopeSchema,
   confirmation: confirmationSchema,
+  trusted_execution: trustedExecutionSchema,
   expose_over_mcp: external_exports.boolean(),
   stages: external_exports.array(external_exports.string())
 }).strict();
@@ -39996,10 +40385,10 @@ var commandListOutputSchema = external_exports.object({
 }).strict();
 
 // ../../packages/protocol/src/compass.ts
-var uuidSchema6 = external_exports.string().uuid();
+var uuidSchema7 = external_exports.string().uuid();
 var sourceCitationSchema = external_exports.object({
   source_id: external_exports.string().min(1),
-  document_id: uuidSchema6.optional(),
+  document_id: uuidSchema7.optional(),
   label: external_exports.string().min(1),
   locator: external_exports.string().min(1),
   quote: external_exports.string().min(1).optional(),
@@ -40028,14 +40417,14 @@ var contextGapSchema = external_exports.object({
 var gapInterviewAnswerSchema = external_exports.object({
   gap_id: external_exports.string().min(1),
   answer: external_exports.string().min(1),
-  answered_by: uuidSchema6
+  answered_by: uuidSchema7
 }).strict();
 var contextPackSchema = external_exports.object({
   schema_version: external_exports.literal(1),
-  tenant_id: uuidSchema6.optional(),
+  tenant_id: uuidSchema7.optional(),
   sources: external_exports.array(external_exports.object({
     id: external_exports.string().min(1),
-    document_id: uuidSchema6.optional(),
+    document_id: uuidSchema7.optional(),
     name: external_exports.string().min(1),
     kind: external_exports.enum(["document", "financial_upload", "interview", "integration_stub"]),
     mime_type: external_exports.string().min(1).optional()
@@ -40085,7 +40474,7 @@ var compassDraftSchema = external_exports.discriminatedUnion("schema_version", [
   compassDraftSchemaV2
 ]);
 var guardrailInputSchema = external_exports.object({
-  source_compass_version_id: uuidSchema6.optional(),
+  source_compass_version_id: uuidSchema7.optional(),
   principles: external_exports.array(external_exports.object({
     index: external_exports.number().int().positive(),
     statement: external_exports.string().min(1),
@@ -40138,6 +40527,8 @@ var charterMeasurableSchema = external_exports.object({
 });
 var charterPermissionSchema = external_exports.object({
   tool: external_exports.string().min(1),
+  capability_id: external_exports.string().min(1).optional(),
+  integration_id: external_exports.string().uuid().optional(),
   scope: external_exports.string().min(1),
   granted: external_exports.boolean(),
   rationale: external_exports.string().min(1),
@@ -40279,6 +40670,21 @@ var coachDiscussionGuideOutputSchema = external_exports.object({
   suggested_structure: external_exports.array(external_exports.string()).max(8)
 });
 
+// ../../packages/protocol/src/integration-scopes.ts
+var integrationCapabilityAvailabilitySchema = external_exports.object({
+  capability_id: external_exports.string().min(1),
+  provider: external_exports.string().min(1),
+  max_access_level: toolAccessLevelSchema.or(external_exports.literal("off")),
+  availability: external_exports.enum(["available", "connection_required", "scope_missing", "revoked", "disabled"]),
+  granted_scopes: external_exports.array(external_exports.string().min(1)),
+  missing_scopes: external_exports.array(external_exports.string().min(1))
+}).strict();
+var normalizedIntegrationScopesSchema = external_exports.object({
+  provider: external_exports.string().min(1),
+  granted_scopes: external_exports.array(external_exports.string().min(1)),
+  capabilities: external_exports.array(integrationCapabilityAvailabilitySchema)
+}).strict();
+
 // ../../packages/protocol/src/integrations.ts
 var uuid5 = external_exports.string().uuid();
 var isoDateTime = external_exports.string().datetime({ offset: true });
@@ -40301,6 +40707,7 @@ var tenantIntegrationSummarySchema = external_exports.object({
   account_label: external_exports.string().min(1).nullable(),
   scopes: external_exports.array(external_exports.string().min(1)),
   capabilities: external_exports.array(external_exports.string().min(1)),
+  capability_availability: external_exports.array(integrationCapabilityAvailabilitySchema).optional(),
   last_synced_at: isoDateTime.nullable(),
   last_tested_at: isoDateTime.nullable(),
   last_test_result: external_exports.enum(["ok", "failed"]).nullable(),
@@ -40397,15 +40804,15 @@ var integrationReadinessOutputSchema = external_exports.object({
 }).strict();
 
 // ../../packages/protocol/src/cli-bootstrap.ts
-var uuidSchema7 = external_exports.string().uuid();
+var uuidSchema8 = external_exports.string().uuid();
 var userWhoamiInputSchema = external_exports.object({}).strict();
 var userWhoamiOutputSchema = external_exports.object({
-  user_id: uuidSchema7,
+  user_id: uuidSchema8,
   email: external_exports.string().email().nullable(),
   full_name: external_exports.string().nullable(),
-  current_tenant_id: uuidSchema7.nullable(),
+  current_tenant_id: uuidSchema8.nullable(),
   roles: external_exports.array(external_exports.object({
-    tenant_id: uuidSchema7,
+    tenant_id: uuidSchema8,
     role: external_exports.enum(["owner", "admin", "steward", "member"]),
     status: external_exports.enum(["active", "invited", "suspended"])
   }).strict())
@@ -40413,7 +40820,7 @@ var userWhoamiOutputSchema = external_exports.object({
 var userTenantsInputSchema = external_exports.object({}).strict();
 var userTenantsOutputSchema = external_exports.object({
   tenants: external_exports.array(external_exports.object({
-    id: uuidSchema7,
+    id: uuidSchema8,
     slug: external_exports.string().min(1),
     name: external_exports.string().min(1),
     role: external_exports.enum(["owner", "admin", "steward", "member"]),
@@ -40425,7 +40832,7 @@ var userUseTenantInputSchema = external_exports.object({
   tenant: external_exports.string().min(1)
 }).strict();
 var userUseTenantOutputSchema = external_exports.object({
-  tenant_id: uuidSchema7,
+  tenant_id: uuidSchema8,
   slug: external_exports.string().min(1),
   name: external_exports.string().min(1),
   role: external_exports.enum(["owner", "admin", "steward", "member"]),
@@ -40435,7 +40842,7 @@ var signupProvisionTenantInputSchema = external_exports.object({
   company_name: external_exports.string().trim().min(2).max(120)
 }).strict();
 var signupProvisionTenantOutputSchema = external_exports.object({
-  tenant_id: uuidSchema7,
+  tenant_id: uuidSchema8,
   slug: external_exports.string().min(1),
   name: external_exports.string().min(1),
   // false when the caller already had an active tenant — conservative-by-default
@@ -40446,26 +40853,26 @@ var tenantCreateInputSchema = external_exports.object({
   company_name: external_exports.string().trim().min(2).max(120)
 }).strict();
 var tenantCreateOutputSchema = external_exports.object({
-  tenant_id: uuidSchema7,
+  tenant_id: uuidSchema8,
   slug: external_exports.string().min(1),
   name: external_exports.string().min(1),
   created: external_exports.literal(true),
-  source_tenant_id: uuidSchema7,
-  entitlement_id: uuidSchema7,
-  accounting_event_id: uuidSchema7,
+  source_tenant_id: uuidSchema8,
+  entitlement_id: uuidSchema8,
+  accounting_event_id: uuidSchema8,
   active: external_exports.boolean(),
   next_action: external_exports.string().min(1)
 }).strict();
 
 // ../../packages/protocol/src/cli-operations.ts
-var uuidSchema8 = external_exports.string().uuid();
+var uuidSchema9 = external_exports.string().uuid();
 var dateOnlySchema = external_exports.string().regex(/^\d{4}-\d{2}-\d{2}$/, "expected YYYY-MM-DD");
 var signalListInputSchema = external_exports.object({
-  seat_id: uuidSchema8.optional()
+  seat_id: uuidSchema9.optional()
 }).strict();
 var signalSummarySchema = external_exports.object({
-  measurable_id: uuidSchema8,
-  seat_id: uuidSchema8,
+  measurable_id: uuidSchema9,
+  seat_id: uuidSchema9,
   seat_name: external_exports.string(),
   name: external_exports.string(),
   unit: external_exports.string(),
@@ -40473,7 +40880,7 @@ var signalSummarySchema = external_exports.object({
   target: external_exports.number(),
   cadence: external_exports.enum(["daily", "weekly", "monthly", "quarterly", "annual"]),
   source: external_exports.enum(["agent", "human", "integration"]),
-  latest_reading_id: uuidSchema8.nullable(),
+  latest_reading_id: uuidSchema9.nullable(),
   latest_value: external_exports.number().nullable(),
   latest_period_start: external_exports.string().nullable(),
   latest_confirmed: external_exports.boolean().nullable(),
@@ -40483,20 +40890,20 @@ var signalListOutputSchema = external_exports.object({
   signals: external_exports.array(signalSummarySchema)
 }).strict();
 var signalGetInputSchema = external_exports.object({
-  measurable_id: uuidSchema8
+  measurable_id: uuidSchema9
 }).strict();
 var signalReadingSchema = external_exports.object({
-  reading_id: uuidSchema8,
+  reading_id: uuidSchema9,
   period_start: dateOnlySchema,
   value: external_exports.number(),
   source: external_exports.enum(["agent", "human", "integration"]),
   confirmed: external_exports.boolean(),
   confirmed_at: external_exports.string().nullable(),
-  confirmed_by: uuidSchema8.nullable()
+  confirmed_by: uuidSchema9.nullable()
 }).strict();
 var signalGetOutputSchema = external_exports.object({
-  measurable_id: uuidSchema8,
-  seat_id: uuidSchema8,
+  measurable_id: uuidSchema9,
+  seat_id: uuidSchema9,
   name: external_exports.string(),
   unit: external_exports.string(),
   direction: external_exports.enum(["up_good", "down_good"]),
@@ -40507,26 +40914,26 @@ var signalGetOutputSchema = external_exports.object({
   readings: external_exports.array(signalReadingSchema)
 }).strict();
 var signalConfirmReadingInputSchema = external_exports.object({
-  reading_id: uuidSchema8
+  reading_id: uuidSchema9
 }).strict();
 var signalConfirmReadingOutputSchema = external_exports.object({
-  reading_id: uuidSchema8,
+  reading_id: uuidSchema9,
   confirmed: external_exports.literal(true)
 }).strict();
 var signalCorrectReadingInputSchema = external_exports.object({
-  measurable_id: uuidSchema8,
+  measurable_id: uuidSchema9,
   period_start: dateOnlySchema,
   value: external_exports.number().finite()
 }).strict();
 var signalCorrectReadingOutputSchema = external_exports.object({
-  reading_id: uuidSchema8,
-  measurable_id: uuidSchema8,
+  reading_id: uuidSchema9,
+  measurable_id: uuidSchema9,
   period_start: dateOnlySchema,
   value: external_exports.number(),
   confirmed: external_exports.literal(true)
 }).strict();
 var measurableCreateInputSchema = external_exports.object({
-  seat_id: uuidSchema8,
+  seat_id: uuidSchema9,
   name: external_exports.string().trim().min(1).max(120),
   unit: external_exports.string().trim().min(1).max(40),
   direction: external_exports.enum(["up_good", "down_good"]),
@@ -40534,8 +40941,8 @@ var measurableCreateInputSchema = external_exports.object({
   cadence: external_exports.enum(["daily", "weekly", "monthly", "quarterly", "annual"])
 }).strict();
 var measurableCreateOutputSchema = external_exports.object({
-  measurable_id: uuidSchema8,
-  seat_id: uuidSchema8,
+  measurable_id: uuidSchema9,
+  seat_id: uuidSchema9,
   name: external_exports.string(),
   unit: external_exports.string(),
   direction: external_exports.enum(["up_good", "down_good"]),
@@ -40566,8 +40973,8 @@ var signalImportSkipSchema = external_exports.object({
   reason: external_exports.string()
 }).strict();
 var signalImportMeasurableResultSchema = external_exports.object({
-  measurable_id: uuidSchema8,
-  seat_id: uuidSchema8,
+  measurable_id: uuidSchema9,
+  seat_id: uuidSchema9,
   name: external_exports.string(),
   cadence: external_exports.enum(["daily", "weekly", "monthly", "quarterly", "annual"]),
   readings_written: external_exports.number().int().nonnegative()
@@ -40611,13 +41018,13 @@ var measurableTemplateListOutputSchema = external_exports.object({
 }).strict();
 var measurableTemplateAdoptInputSchema = external_exports.object({
   template_id: external_exports.string().trim().min(1).max(80),
-  seat_id: uuidSchema8,
+  seat_id: uuidSchema9,
   target: external_exports.number().finite().optional()
 }).strict();
 var measurableTemplateAdoptOutputSchema = external_exports.object({
-  measurable_id: uuidSchema8,
+  measurable_id: uuidSchema9,
   template_id: external_exports.string(),
-  seat_id: uuidSchema8,
+  seat_id: uuidSchema9,
   name: external_exports.string(),
   unit: external_exports.string(),
   direction: measureDirectionSchema,
@@ -40628,7 +41035,7 @@ var scorecardGridInputSchema = external_exports.object({
   cadence: measureCadenceSchema.optional(),
   // Trailing period count; defaults per cadence (weekly 13, monthly 6, …).
   trailing: external_exports.number().int().min(1).max(53).optional(),
-  seat_id: uuidSchema8.optional(),
+  seat_id: uuidSchema9.optional(),
   // Anchor date (YYYY-MM-DD) for the trailing window; defaults to today. Present
   // so callers/tests get a deterministic column set.
   as_of: dateOnlySchema.optional()
@@ -40645,8 +41052,8 @@ var scorecardGridCellSchema = external_exports.object({
   confirmed: external_exports.boolean().nullable()
 }).strict();
 var scorecardGridRowSchema = external_exports.object({
-  measurable_id: uuidSchema8,
-  seat_id: uuidSchema8,
+  measurable_id: uuidSchema9,
+  seat_id: uuidSchema9,
   seat_name: external_exports.string(),
   name: external_exports.string(),
   unit: external_exports.string(),
@@ -40695,7 +41102,7 @@ var frictionImportOutputSchema = external_exports.object({
   issues_created: external_exports.number().int().nonnegative(),
   issues_matched: external_exports.number().int().nonnegative(),
   issues_skipped: external_exports.number().int().nonnegative(),
-  batch_id: uuidSchema8.nullable(),
+  batch_id: uuidSchema9.nullable(),
   skipped: external_exports.array(importSkipSchema).max(200)
 }).strict();
 var taskImportTodoSchema = external_exports.object({
@@ -40713,7 +41120,7 @@ var taskImportOutputSchema = external_exports.object({
   tasks_created: external_exports.number().int().nonnegative(),
   tasks_matched: external_exports.number().int().nonnegative(),
   tasks_skipped: external_exports.number().int().nonnegative(),
-  batch_id: uuidSchema8.nullable(),
+  batch_id: uuidSchema9.nullable(),
   skipped: external_exports.array(importSkipSchema).max(200)
 }).strict();
 var cascadeImportRockSchema = external_exports.object({
@@ -40723,7 +41130,7 @@ var cascadeImportRockSchema = external_exports.object({
 }).strict();
 var cascadeImportInputSchema = external_exports.object({
   dry_run: external_exports.boolean().optional().default(false),
-  parent_objective_id: uuidSchema8.optional(),
+  parent_objective_id: uuidSchema9.optional(),
   rocks: external_exports.array(cascadeImportRockSchema).min(1).max(1e3)
 }).strict();
 var cascadeImportOutputSchema = external_exports.object({
@@ -40731,8 +41138,8 @@ var cascadeImportOutputSchema = external_exports.object({
   rocks_created: external_exports.number().int().nonnegative(),
   rocks_matched: external_exports.number().int().nonnegative(),
   rocks_skipped: external_exports.number().int().nonnegative(),
-  objective_id: uuidSchema8.nullable(),
-  batch_id: uuidSchema8.nullable(),
+  objective_id: uuidSchema9.nullable(),
+  batch_id: uuidSchema9.nullable(),
   skipped: external_exports.array(importSkipSchema).max(200)
 }).strict();
 var MAX_VTO_TEXT_CHARS = 4e4;
@@ -40748,9 +41155,9 @@ var compassImportOutputSchema = external_exports.object({
   drafted: external_exports.boolean(),
   advisory_available: external_exports.boolean(),
   already_imported: external_exports.boolean(),
-  draft_id: uuidSchema8.nullable(),
+  draft_id: uuidSchema9.nullable(),
   compass_version: external_exports.number().int().nonnegative().nullable(),
-  batch_id: uuidSchema8.nullable(),
+  batch_id: uuidSchema9.nullable(),
   principles: external_exports.number().int().nonnegative(),
   horizons: external_exports.number().int().nonnegative(),
   cycle_objectives: external_exports.number().int().nonnegative(),
@@ -40758,18 +41165,18 @@ var compassImportOutputSchema = external_exports.object({
 }).strict();
 var goalStatusSchema = external_exports.enum(["on", "off", "done", "dropped"]);
 var goalListInputSchema = external_exports.object({
-  cycle_id: uuidSchema8.optional(),
-  seat_id: uuidSchema8.optional()
+  cycle_id: uuidSchema9.optional(),
+  seat_id: uuidSchema9.optional()
 }).strict();
 var goalSummarySchema = external_exports.object({
-  goal_id: uuidSchema8,
+  goal_id: uuidSchema9,
   // DER-1039: 4-kind taxonomy (company_objective | seat_goal | milestone). Legacy
   // 'objective'/'cycle_goal' stay in the read enum for any tenant not yet re-seeded
   // during the add-only expand window (goal.list surfaces whatever the DB holds).
   kind: external_exports.enum(["objective", "cycle_goal", "company_objective", "seat_goal", "milestone"]),
-  cycle_id: uuidSchema8,
-  seat_id: uuidSchema8.nullable(),
-  parent_goal_id: uuidSchema8.nullable(),
+  cycle_id: uuidSchema9,
+  seat_id: uuidSchema9.nullable(),
+  parent_goal_id: uuidSchema9.nullable(),
   title: external_exports.string(),
   status: goalStatusSchema,
   status_source: external_exports.enum(["human", "agent", "rollup"])
@@ -40778,24 +41185,24 @@ var goalListOutputSchema = external_exports.object({
   goals: external_exports.array(goalSummarySchema)
 }).strict();
 var goalCreateInputSchema = external_exports.object({
-  cycle_id: uuidSchema8,
-  seat_id: uuidSchema8,
-  parent_goal_id: uuidSchema8,
+  cycle_id: uuidSchema9,
+  seat_id: uuidSchema9,
+  parent_goal_id: uuidSchema9,
   title: external_exports.string().trim().min(1),
   definition_of_done: external_exports.string().trim().min(1),
   status: external_exports.enum(["on", "off"]).optional()
 }).strict();
 var goalMutationOutputSchema = external_exports.object({
-  goal_id: uuidSchema8,
-  cycle_id: uuidSchema8,
-  seat_id: uuidSchema8.nullable(),
-  parent_goal_id: uuidSchema8.nullable(),
+  goal_id: uuidSchema9,
+  cycle_id: uuidSchema9,
+  seat_id: uuidSchema9.nullable(),
+  parent_goal_id: uuidSchema9.nullable(),
   title: external_exports.string(),
   status: goalStatusSchema,
   status_source: external_exports.enum(["human", "agent", "rollup"])
 }).strict();
 var goalUpdateInputSchema = external_exports.object({
-  goal_id: uuidSchema8,
+  goal_id: uuidSchema9,
   title: external_exports.string().trim().min(1).optional(),
   definition_of_done: external_exports.string().trim().min(1).optional()
 }).strict().refine(
@@ -40803,22 +41210,22 @@ var goalUpdateInputSchema = external_exports.object({
   { message: "goal.update requires at least one of title or definition_of_done" }
 );
 var goalSetStatusInputSchema = external_exports.object({
-  goal_id: uuidSchema8,
+  goal_id: uuidSchema9,
   status: external_exports.enum(["on", "off", "done"])
 }).strict();
 var goalReparentInputSchema = external_exports.object({
-  goal_id: uuidSchema8,
-  parent_goal_id: uuidSchema8
+  goal_id: uuidSchema9,
+  parent_goal_id: uuidSchema9
 }).strict();
 var goalDropInputSchema = external_exports.object({
-  goal_id: uuidSchema8
+  goal_id: uuidSchema9
 }).strict();
 var goalSetProgressInputSchema = external_exports.object({
-  goal_id: uuidSchema8,
+  goal_id: uuidSchema9,
   progress_pct: external_exports.number().int().min(0).max(100)
 }).strict();
 var goalSetProgressOutputSchema = external_exports.object({
-  goal_id: uuidSchema8,
+  goal_id: uuidSchema9,
   progress_pct: external_exports.number().int().min(0).max(100),
   status: goalStatusSchema
 }).strict();
@@ -40829,10 +41236,10 @@ var goalPaceClassificationSchema = external_exports.enum([
   "untracked"
 ]);
 var goalAtRiskSchema = external_exports.object({
-  goal_id: uuidSchema8,
+  goal_id: uuidSchema9,
   title: external_exports.string(),
-  seat_id: uuidSchema8.nullable(),
-  cycle_id: uuidSchema8,
+  seat_id: uuidSchema9.nullable(),
+  cycle_id: uuidSchema9,
   progress_pct: external_exports.number().int().min(0).max(100),
   classification: goalPaceClassificationSchema,
   expected_pct: external_exports.number().nullable(),
@@ -40853,8 +41260,8 @@ var goalDriverAnchorSchema = external_exports.object({
   expected_value: external_exports.number()
 }).strict();
 var goalBindMeasurableInputSchema = external_exports.object({
-  goal_id: uuidSchema8,
-  measurable_id: uuidSchema8,
+  goal_id: uuidSchema9,
+  measurable_id: uuidSchema9,
   // DER-1643: new operator bindings default to the conservative 'informs' role.
   // 'drives_status' is the deliberate leaf-only status driver (childless goal only,
   // one per goal) and stays human-confirmed.
@@ -40865,8 +41272,8 @@ var goalBindMeasurableInputSchema = external_exports.object({
   second_anchor: goalDriverAnchorSchema.optional()
 }).strict();
 var goalBindMeasurableOutputSchema = external_exports.object({
-  goal_id: uuidSchema8,
-  measurable_id: uuidSchema8,
+  goal_id: uuidSchema9,
+  measurable_id: uuidSchema9,
   role: goalMeasurableRoleSchema,
   // Per-binding steward opt-in; a fresh binding is always created OFF.
   auto_status_enabled: external_exports.boolean(),
@@ -40887,24 +41294,24 @@ var goalBindMeasurableOutputSchema = external_exports.object({
   driver_anchor: goalDriverAnchorSchema.nullable()
 }).strict();
 var goalUnbindMeasurableInputSchema = external_exports.object({
-  goal_id: uuidSchema8,
-  measurable_id: uuidSchema8,
+  goal_id: uuidSchema9,
+  measurable_id: uuidSchema9,
   // Which binding to remove; defaults to the status driver (the historical unbind).
   role: goalMeasurableRoleSchema.default("drives_status")
 }).strict();
 var goalUnbindMeasurableOutputSchema = external_exports.object({
-  goal_id: uuidSchema8,
-  measurable_id: uuidSchema8,
+  goal_id: uuidSchema9,
+  measurable_id: uuidSchema9,
   removed: external_exports.boolean()
 }).strict();
 var goalSetAutoStatusInputSchema = external_exports.object({
-  goal_id: uuidSchema8,
-  measurable_id: uuidSchema8,
+  goal_id: uuidSchema9,
+  measurable_id: uuidSchema9,
   enabled: external_exports.boolean()
 }).strict();
 var goalSetAutoStatusOutputSchema = external_exports.object({
-  goal_id: uuidSchema8,
-  measurable_id: uuidSchema8,
+  goal_id: uuidSchema9,
+  measurable_id: uuidSchema9,
   auto_status_enabled: external_exports.boolean(),
   // The goal's status after applying: enabling opts in and, when a confirmed
   // reading is available on a childless leaf that is not human-pinned, drives the
@@ -40914,7 +41321,7 @@ var goalSetAutoStatusOutputSchema = external_exports.object({
   applied_from_signal: external_exports.boolean()
 }).strict();
 var goalMeasurableBindingSchema = external_exports.object({
-  measurable_id: uuidSchema8,
+  measurable_id: uuidSchema9,
   name: external_exports.string(),
   unit: external_exports.string(),
   role: external_exports.literal("drives_status"),
@@ -40932,25 +41339,25 @@ var goalMeasurableBindingSchema = external_exports.object({
   driver_anchor: goalDriverAnchorSchema.nullable()
 }).strict();
 var goalListMeasurablesInputSchema = external_exports.object({
-  goal_id: uuidSchema8
+  goal_id: uuidSchema9
 }).strict();
 var goalListMeasurablesOutputSchema = external_exports.object({
-  goal_id: uuidSchema8,
+  goal_id: uuidSchema9,
   bindings: external_exports.array(goalMeasurableBindingSchema)
 }).strict();
 var goalCoreSchema = external_exports.object({
-  id: uuidSchema8,
+  id: uuidSchema9,
   title: external_exports.string(),
   kind: external_exports.enum(["objective", "cycle_goal", "company_objective", "seat_goal", "milestone"]),
   status: goalStatusSchema,
   status_source: goalStatusSourceSchema,
   progress_pct: external_exports.number().int().min(0).max(100).nullable(),
-  seat_id: uuidSchema8.nullable(),
-  parent_goal_id: uuidSchema8.nullable(),
+  seat_id: uuidSchema9.nullable(),
+  parent_goal_id: uuidSchema9.nullable(),
   definition_of_done: external_exports.string()
 }).strict();
 var goalGetInputSchema = external_exports.object({
-  goal_id: uuidSchema8
+  goal_id: uuidSchema9
 }).strict();
 var goalGetOutputSchema = external_exports.object({
   goal: goalCoreSchema
@@ -40960,16 +41367,16 @@ var frictionListInputSchema = external_exports.object({
   status: external_exports.enum(["open", "diagnosing", "resolved", "dropped", "active", "all"]).optional()
 }).strict();
 var frictionIssueSummarySchema = external_exports.object({
-  issue_id: uuidSchema8,
-  raised_by_seat_id: uuidSchema8,
+  issue_id: uuidSchema9,
+  raised_by_seat_id: uuidSchema9,
   raised_by_seat_name: external_exports.string(),
   summary: external_exports.string(),
   severity: external_exports.enum(["low", "med", "high", "critical"]),
   impact_score: external_exports.number(),
   status: issueStatusSchema,
-  blocking_goal_id: uuidSchema8.nullable(),
-  broken_measurable_id: uuidSchema8.nullable(),
-  action_task_id: uuidSchema8.nullable(),
+  blocking_goal_id: uuidSchema9.nullable(),
+  broken_measurable_id: uuidSchema9.nullable(),
+  action_task_id: uuidSchema9.nullable(),
   root_cause: external_exports.string().nullable(),
   resolved_at: external_exports.string().nullable(),
   created_at: external_exports.string()
@@ -40981,42 +41388,42 @@ var frictionIssueDetailSchema = frictionIssueSummarySchema.extend({
   raised_by_seat_type: external_exports.enum(["human", "agent", "hybrid"]),
   raised_by_seat_steward_name: external_exports.string().nullable(),
   origin_actor_kind: external_exports.enum(["user", "agent", "system"]).nullable(),
-  origin_actor_id: uuidSchema8.nullable(),
+  origin_actor_id: uuidSchema9.nullable(),
   evidence: external_exports.unknown(),
   action_task_title: external_exports.string().nullable(),
-  action_task_owner_seat_id: uuidSchema8.nullable(),
+  action_task_owner_seat_id: uuidSchema9.nullable(),
   action_task_owner_seat_name: external_exports.string().nullable(),
   action_task_due_on: external_exports.string().nullable(),
-  decision_id: uuidSchema8.nullable(),
+  decision_id: uuidSchema9.nullable(),
   decision_title: external_exports.string().nullable(),
   decision_summary: external_exports.string().nullable(),
   decided_by_name: external_exports.string().nullable(),
   updated_at: external_exports.string()
 }).strict();
 var frictionGetInputSchema = external_exports.object({
-  issue_id: uuidSchema8
+  issue_id: uuidSchema9
 }).strict();
 var frictionGetOutputSchema = external_exports.object({
   issue: frictionIssueDetailSchema
 }).strict();
 var frictionUpdateStatusInputSchema = external_exports.object({
-  issue_id: uuidSchema8,
+  issue_id: uuidSchema9,
   status: external_exports.enum(["open", "diagnosing"])
 }).strict();
 var frictionUpdateStatusOutputSchema = external_exports.object({
-  issue_id: uuidSchema8,
+  issue_id: uuidSchema9,
   status: external_exports.enum(["open", "diagnosing"]),
-  event_id: uuidSchema8
+  event_id: uuidSchema9
 }).strict();
 var frictionResolveInputSchema = external_exports.object({
-  issue_id: uuidSchema8,
+  issue_id: uuidSchema9,
   resolution_mode: external_exports.enum(["ids", "already_fixed"]).default("ids"),
   root_cause: external_exports.string().trim().min(1),
-  owner_seat_id: uuidSchema8.optional(),
+  owner_seat_id: uuidSchema9.optional(),
   task_title: external_exports.string().trim().min(1).optional(),
   task_description: external_exports.string().trim().min(1).optional(),
   done_by: dateOnlySchema.optional(),
-  resolving_seat_id: uuidSchema8.optional()
+  resolving_seat_id: uuidSchema9.optional()
 }).strict().superRefine((value, ctx) => {
   if (value.resolution_mode !== "ids") {
     return;
@@ -41035,38 +41442,38 @@ var frictionResolveInputSchema = external_exports.object({
   }
 });
 var frictionResolveOutputSchema = external_exports.object({
-  issue_id: uuidSchema8,
+  issue_id: uuidSchema9,
   status: external_exports.literal("resolved"),
-  action_task_id: uuidSchema8.nullable(),
-  decision_id: uuidSchema8
+  action_task_id: uuidSchema9.nullable(),
+  decision_id: uuidSchema9
 }).strict();
 var frictionLinkTaskInputSchema = external_exports.object({
-  issue_id: uuidSchema8,
-  task_id: uuidSchema8
+  issue_id: uuidSchema9,
+  task_id: uuidSchema9
 }).strict();
 var frictionLinkTaskOutputSchema = external_exports.object({
-  issue_id: uuidSchema8,
-  action_task_id: uuidSchema8
+  issue_id: uuidSchema9,
+  action_task_id: uuidSchema9
 }).strict();
 var taskCreateInputSchema = external_exports.object({
-  owner_seat_id: uuidSchema8,
-  from_seat_id: uuidSchema8.optional(),
+  owner_seat_id: uuidSchema9,
+  from_seat_id: uuidSchema9.optional(),
   title: external_exports.string().trim().min(1),
   description: external_exports.string().trim().min(1),
-  goal_id: uuidSchema8.optional(),
+  goal_id: uuidSchema9.optional(),
   acceptance_criteria: external_exports.array(external_exports.string().min(1)).optional(),
   due_on: dateOnlySchema.optional()
 }).strict();
 var taskCreateOutputSchema = external_exports.object({
-  task_id: uuidSchema8,
-  owner_seat_id: uuidSchema8,
-  from_seat_id: uuidSchema8.nullable(),
+  task_id: uuidSchema9,
+  owner_seat_id: uuidSchema9,
+  from_seat_id: uuidSchema9.nullable(),
   status: external_exports.string(),
   due_on: external_exports.string().nullable()
 }).strict();
 var taskUpdateInputSchema = external_exports.object({
-  task_id: uuidSchema8,
-  owner_seat_id: uuidSchema8.optional(),
+  task_id: uuidSchema9,
+  owner_seat_id: uuidSchema9.optional(),
   due_on: dateOnlySchema.optional(),
   title: external_exports.string().trim().min(1).optional(),
   description: external_exports.string().trim().min(1).optional(),
@@ -41076,17 +41483,17 @@ var taskUpdateInputSchema = external_exports.object({
   { message: "Provide at least one field to update." }
 );
 var taskUpdateOutputSchema = external_exports.object({
-  task_id: uuidSchema8,
-  owner_seat_id: uuidSchema8,
-  from_seat_id: uuidSchema8.nullable(),
+  task_id: uuidSchema9,
+  owner_seat_id: uuidSchema9,
+  from_seat_id: uuidSchema9.nullable(),
   status: external_exports.string(),
   due_on: external_exports.string().nullable()
 }).strict();
 var syncBriefCompileInputSchema = external_exports.object({
-  cluster_id: uuidSchema8.optional()
+  cluster_id: uuidSchema9.optional()
 }).strict();
 var syncBriefRefSchema = external_exports.object({
-  sync_brief_id: uuidSchema8,
+  sync_brief_id: uuidSchema9,
   period_start: dateOnlySchema,
   period_end: dateOnlySchema,
   compiled_at: external_exports.string(),
@@ -41095,10 +41502,10 @@ var syncBriefRefSchema = external_exports.object({
   created: external_exports.boolean()
 }).strict();
 var syncBriefGetInputSchema = external_exports.object({
-  sync_brief_id: uuidSchema8.optional()
+  sync_brief_id: uuidSchema9.optional()
 }).strict();
 var syncBriefGetOutputSchema = external_exports.object({
-  sync_brief_id: uuidSchema8,
+  sync_brief_id: uuidSchema9,
   period_start: dateOnlySchema,
   period_end: dateOnlySchema,
   compiled_at: external_exports.string(),
@@ -41107,10 +41514,10 @@ var syncBriefGetOutputSchema = external_exports.object({
   doc: external_exports.unknown()
 }).strict();
 var syncRunStartInputSchema = external_exports.object({
-  cluster_id: uuidSchema8.optional()
+  cluster_id: uuidSchema9.optional()
 }).strict();
 var syncRunStartOutputSchema = external_exports.object({
-  sync_brief_id: uuidSchema8,
+  sync_brief_id: uuidSchema9,
   period_start: dateOnlySchema,
   period_end: dateOnlySchema,
   compiled_at: external_exports.string(),
@@ -41118,25 +41525,25 @@ var syncRunStartOutputSchema = external_exports.object({
   degraded: external_exports.boolean()
 }).strict();
 var syncRunCompleteInputSchema = external_exports.object({
-  sync_brief_id: uuidSchema8
+  sync_brief_id: uuidSchema9
 }).strict();
 var syncRunCompleteOutputSchema = external_exports.object({
-  sync_brief_id: uuidSchema8,
-  event_id: uuidSchema8,
-  decision_ids: external_exports.array(uuidSchema8),
-  task_ids: external_exports.array(uuidSchema8)
+  sync_brief_id: uuidSchema9,
+  event_id: uuidSchema9,
+  decision_ids: external_exports.array(uuidSchema9),
+  task_ids: external_exports.array(uuidSchema9)
 }).strict();
 var syncItemAssignInputSchema = external_exports.object({
-  sync_brief_id: uuidSchema8,
-  owner_seat_id: uuidSchema8,
+  sync_brief_id: uuidSchema9,
+  owner_seat_id: uuidSchema9,
   title: external_exports.string().trim().min(1),
   description: external_exports.string().trim().min(1),
   due_on: dateOnlySchema.optional()
 }).strict();
 var syncItemAssignOutputSchema = external_exports.object({
-  sync_brief_id: uuidSchema8,
-  task_id: uuidSchema8,
-  owner_seat_id: uuidSchema8,
+  sync_brief_id: uuidSchema9,
+  task_id: uuidSchema9,
+  owner_seat_id: uuidSchema9,
   status: external_exports.string(),
   due_on: external_exports.string().nullable()
 }).strict();
@@ -41632,18 +42039,18 @@ function parseNinetyRocksCsv(text) {
 }
 
 // ../../packages/protocol/src/markdown-readout.ts
-var uuidSchema9 = external_exports.string().uuid();
+var uuidSchema10 = external_exports.string().uuid();
 var markdownOutputSchema = external_exports.object({
   markdown: external_exports.string().min(1)
 }).strict();
 var compassShowMarkdownInputSchema = external_exports.object({}).strict();
 var charterShowMarkdownInputSchema = external_exports.object({
-  seat_id: uuidSchema9
+  seat_id: uuidSchema10
 }).strict();
 var charterShowMarkdownOutputSchema = external_exports.object({
   markdown: external_exports.string().min(1),
-  charter_version_id: uuidSchema9.nullable(),
-  seat_id: uuidSchema9,
+  charter_version_id: uuidSchema10.nullable(),
+  seat_id: uuidSchema10,
   version: external_exports.number().int().nonnegative().nullable(),
   status: external_exports.string().nullable(),
   doc: external_exports.unknown().nullable(),
@@ -41653,7 +42060,7 @@ var charterShowMarkdownOutputSchema = external_exports.object({
   }).strict().nullable()
 }).strict();
 var agentShowMarkdownInputSchema = external_exports.object({
-  seat_id: uuidSchema9
+  seat_id: uuidSchema10
 }).strict();
 
 // ../../packages/protocol/src/constants.ts
@@ -41677,7 +42084,7 @@ var SEAT_MCP_CLAIM_TOKEN_TTL_SECONDS = (FORGE_TURN_HARD_CEILING_SECONDS + FORGE_
 
 // ../../packages/protocol/src/mcp-onboarding.ts
 var MCP_TOKEN_ABSOLUTE_MAX_EXPIRY_MS = (MCP_TOKEN_NO_EXPIRY_SENTINEL_DAYS + 1) * 24 * 60 * 60 * 1e3;
-var uuidSchema10 = external_exports.string().uuid();
+var uuidSchema11 = external_exports.string().uuid();
 var isoDateTime2 = external_exports.string().datetime({ offset: true });
 var onboardingStatusInputSchema = external_exports.object({}).strict();
 var onboardingStatusOutputSchema = external_exports.object({
@@ -41718,7 +42125,7 @@ var onboardingAttachReferenceInputSchema = external_exports.object({
   source: external_exports.string().trim().min(1).max(500).optional()
 }).strict();
 var onboardingAttachReferenceOutputSchema = external_exports.object({
-  document_id: uuidSchema10,
+  document_id: uuidSchema11,
   storage_ref: external_exports.string().min(1),
   kind: external_exports.enum(["org_chart", "role_doc", "plan", "financial", "other"]),
   title: external_exports.string().min(1).nullable()
@@ -41740,7 +42147,7 @@ var onboardingCreateInviteInputSchema = external_exports.object({
   flags: external_exports.record(external_exports.string(), external_exports.unknown()).default({})
 }).strict();
 var onboardingCreateInviteOutputSchema = external_exports.object({
-  invite_id: uuidSchema10,
+  invite_id: uuidSchema11,
   email: external_exports.string().email(),
   role: external_exports.enum(["owner", "admin", "steward", "member"]),
   token: external_exports.string().min(1)
@@ -41753,36 +42160,36 @@ var tenantAnthropicKeySaveOutputSchema = external_exports.object({
 }).strict();
 var seatCreateInputSchema = external_exports.object({
   name: external_exports.string().trim().min(1).max(120),
-  parent_seat_id: uuidSchema10.nullable().optional(),
+  parent_seat_id: uuidSchema11.nullable().optional(),
   seat_type: external_exports.enum(["human", "agent", "hybrid"]).default("human")
 }).strict();
 var seatCreateOutputSchema = external_exports.object({
-  seat_id: uuidSchema10
+  seat_id: uuidSchema11
 }).strict();
 var seatRenameInputSchema = external_exports.object({
-  seat_id: uuidSchema10,
+  seat_id: uuidSchema11,
   name: external_exports.string().trim().min(1).max(120)
 }).strict();
 var seatReparentInputSchema = external_exports.object({
-  seat_id: uuidSchema10,
-  new_parent_seat_id: uuidSchema10.nullable()
+  seat_id: uuidSchema11,
+  new_parent_seat_id: uuidSchema11.nullable()
 }).strict();
 var seatSetTypeInputSchema = external_exports.object({
-  seat_id: uuidSchema10,
+  seat_id: uuidSchema11,
   seat_type: external_exports.enum(["human", "agent", "hybrid"])
 }).strict();
 var seatDecommissionInputSchema = external_exports.object({
-  seat_id: uuidSchema10
+  seat_id: uuidSchema11
 }).strict();
 var seatMutationOutputSchema = external_exports.object({
-  seat_id: uuidSchema10
+  seat_id: uuidSchema11
 }).strict();
 var seatDecommissionPreviewOutputSchema = external_exports.object({
-  seat_id: uuidSchema10,
+  seat_id: uuidSchema11,
   seat_name: external_exports.string(),
   previous_status: external_exports.enum(["draft", "active", "vacant", "decommissioned"]),
   active_occupancy_count: external_exports.number().int().nonnegative(),
-  active_agent_ids: external_exports.array(uuidSchema10),
+  active_agent_ids: external_exports.array(uuidSchema11),
   active_charter_count: external_exports.number().int().nonnegative(),
   active_mcp_token_count: external_exports.number().int().nonnegative(),
   active_credential_count: external_exports.number().int().nonnegative(),
@@ -41792,15 +42199,15 @@ var seatDecommissionPreviewOutputSchema = external_exports.object({
   effects: external_exports.array(external_exports.string())
 }).strict();
 var charterDraftInputSchema = external_exports.object({
-  seat_id: uuidSchema10
+  seat_id: uuidSchema11
 }).strict();
 var charterDraftOutputSchema = external_exports.object({
-  charter_version_id: uuidSchema10,
-  seat_id: uuidSchema10,
+  charter_version_id: uuidSchema11,
+  seat_id: uuidSchema11,
   doc: external_exports.unknown()
 }).strict();
 var charterUpdateDraftInputSchema = external_exports.object({
-  charter_version_id: uuidSchema10,
+  charter_version_id: uuidSchema11,
   // DER-785 (Part G): the full Charter document contract (was `z.unknown()`).
   // The DB layer already validated this with `charterSchema.parse`; advertising
   // it here gives `command.describe`/`rost command schema` a real shape and a
@@ -41808,17 +42215,17 @@ var charterUpdateDraftInputSchema = external_exports.object({
   doc: charterDocSchema
 }).strict();
 var charterSetInputSchema = external_exports.object({
-  seat_id: uuidSchema10,
+  seat_id: uuidSchema11,
   doc: charterDocSchema,
   approve: external_exports.boolean().default(false)
 }).strict();
 var charterMutationOutputSchema = external_exports.object({
-  charter_version_id: uuidSchema10,
-  seat_id: uuidSchema10
+  charter_version_id: uuidSchema11,
+  seat_id: uuidSchema11
 }).strict();
 var charterApproveInputSchema = external_exports.object({
-  seat_id: uuidSchema10.optional(),
-  charter_version_id: uuidSchema10.optional(),
+  seat_id: uuidSchema11.optional(),
+  charter_version_id: uuidSchema11.optional(),
   // DER-785 (Part G): a partial of the Charter doc shape (was an untyped record).
   // These fields are shallow-merged onto the existing draft, then the merged doc
   // is re-validated against the full schema at persist time.
@@ -41833,20 +42240,20 @@ var charterDraftSkipReasonSchema = external_exports.enum(["seat_not_active", "ch
 var charterDraftAllOutputSchema = external_exports.object({
   drafted: external_exports.number().int().nonnegative(),
   skipped: external_exports.number().int().nonnegative(),
-  draft_ids: external_exports.array(uuidSchema10),
+  draft_ids: external_exports.array(uuidSchema11),
   skipped_seats: external_exports.array(external_exports.object({
-    seat_id: uuidSchema10,
+    seat_id: uuidSchema11,
     reason: charterDraftSkipReasonSchema
   }).strict())
 }).strict();
 var charterSkipInputSchema = external_exports.object({
-  charter_version_id: uuidSchema10
+  charter_version_id: uuidSchema11
 }).strict();
 var charterApplySeatTypeRecommendationInputSchema = external_exports.object({
-  charter_version_id: uuidSchema10
+  charter_version_id: uuidSchema11
 }).strict();
 var charterSignManifestInputSchema = external_exports.object({
-  charter_version_id: uuidSchema10
+  charter_version_id: uuidSchema11
 }).strict();
 var pendingConfirmationSchema = external_exports.object({
   confirmationId: external_exports.string().min(1),
@@ -41890,13 +42297,13 @@ var confirmationListInputSchema = external_exports.object({
   limit: external_exports.number().int().min(1).max(200).optional()
 }).strict();
 var confirmationSummarySchema = external_exports.object({
-  id: uuidSchema10,
+  id: uuidSchema11,
   command_id: external_exports.string(),
   redacted_args: external_exports.unknown(),
   actor_kind: external_exports.enum(["user", "agent", "system"]),
   source: external_exports.string(),
   scope_kind: external_exports.enum(["tenant_admin", "tenant", "seat"]),
-  seat_id: uuidSchema10.nullable(),
+  seat_id: uuidSchema11.nullable(),
   seat_name: external_exports.string().nullable(),
   seat_type: external_exports.enum(["human", "agent", "hybrid"]).nullable(),
   risk_level: external_exports.enum(["normal", "sensitive", "dangerous"]),
@@ -41908,28 +42315,28 @@ var confirmationListOutputSchema = external_exports.object({
   confirmations: external_exports.array(confirmationSummarySchema)
 }).strict();
 var credentialIngressInputSchema = external_exports.object({
-  seat_id: uuidSchema10.optional(),
+  seat_id: uuidSchema11.optional(),
   provider: external_exports.string().trim().min(1),
   scope_description: external_exports.string().trim().min(1),
   secret_name: external_exports.string().trim().min(1),
   secret: external_exports.string().trim().min(1)
 }).strict();
 var credentialIngressOutputSchema = external_exports.object({
-  credential_id: uuidSchema10,
+  credential_id: uuidSchema11,
   provider: external_exports.string().min(1),
-  seat_id: uuidSchema10.nullable()
+  seat_id: uuidSchema11.nullable()
 }).strict();
 var agentGoLiveInputSchema = external_exports.object({
-  seat_id: uuidSchema10,
-  charter_version_id: uuidSchema10
+  seat_id: uuidSchema11,
+  charter_version_id: uuidSchema11
 }).strict();
 var agentGoLiveOutputSchema = external_exports.object({
-  seat_id: uuidSchema10,
-  charter_version_id: uuidSchema10,
+  seat_id: uuidSchema11,
+  charter_version_id: uuidSchema11,
   status: external_exports.literal("live")
 }).strict();
 var compassSetInputSchema = external_exports.object({
-  draft_id: uuidSchema10.optional(),
+  draft_id: uuidSchema11.optional(),
   doc: compassDraftSchema.optional(),
   approve: external_exports.boolean().default(false)
 }).strict().refine((input) => Boolean(input.draft_id) !== Boolean(input.doc), {
@@ -41937,7 +42344,7 @@ var compassSetInputSchema = external_exports.object({
   path: ["draft_id"]
 });
 var compassMutationOutputSchema = external_exports.object({
-  compass_version_id: uuidSchema10,
+  compass_version_id: uuidSchema11,
   status: external_exports.enum(["draft", "active", "superseded"]),
   version: external_exports.number().int().nonnegative()
 }).strict();
@@ -41945,42 +42352,42 @@ var compassDraftInputSchema = external_exports.object({
   doc: compassDraftSchema
 }).strict();
 var compassUpdateDraftInputSchema = external_exports.object({
-  draft_id: uuidSchema10,
+  draft_id: uuidSchema11,
   doc: compassDraftSchema
 }).strict();
 var compassApproveVersionInputSchema = external_exports.object({
-  draft_id: uuidSchema10
+  draft_id: uuidSchema11
 }).strict();
 var compassRejectDraftInputSchema = external_exports.object({
-  draft_id: uuidSchema10
+  draft_id: uuidSchema11
 }).strict();
 var compassAnswerGapInputSchema = external_exports.object({
   gap_id: external_exports.string().min(1),
   answer: external_exports.string().trim().min(1)
 }).strict();
 var seatStaffInputSchema = external_exports.object({
-  seat_id: uuidSchema10,
+  seat_id: uuidSchema11,
   occupant: external_exports.discriminatedUnion("type", [
     external_exports.object({ type: external_exports.literal("vacant") }).strict(),
-    external_exports.object({ type: external_exports.literal("user"), user_id: uuidSchema10 }).strict(),
-    external_exports.object({ type: external_exports.literal("agent"), agent_id: uuidSchema10 }).strict()
+    external_exports.object({ type: external_exports.literal("user"), user_id: uuidSchema11 }).strict(),
+    external_exports.object({ type: external_exports.literal("agent"), agent_id: uuidSchema11 }).strict()
   ])
 }).strict();
 var staffingMutationOutputSchema = external_exports.object({
-  seat_id: uuidSchema10,
+  seat_id: uuidSchema11,
   staffed: external_exports.enum(["vacant", "user", "agent"])
 }).strict();
 var staffingAssignUserInputSchema = external_exports.object({
-  seat_id: uuidSchema10,
-  user_id: uuidSchema10
+  seat_id: uuidSchema11,
+  user_id: uuidSchema11
 }).strict();
 var staffingAssignAgentDryRunInputSchema = external_exports.object({
-  seat_id: uuidSchema10,
-  agent_id: uuidSchema10
+  seat_id: uuidSchema11,
+  agent_id: uuidSchema11
 }).strict();
 var mcpTokenCreateInputSchema = external_exports.object({
   scope: external_exports.enum(["tenant_admin", "seat"]),
-  seat_id: uuidSchema10.optional(),
+  seat_id: uuidSchema11.optional(),
   // DER-830: explicit absolute expiry (kept for back-compat / direct callers).
   // When omitted OR null, the DB default (now() + 90 days) applies — `null` is an
   // accepted "no explicit expiry" signal (existing UI/MCP callers pass it), so it
@@ -42024,17 +42431,17 @@ var mcpTokenCreateInputSchema = external_exports.object({
   }
 });
 var mcpTokenCreateOutputSchema = external_exports.object({
-  token_id: uuidSchema10,
+  token_id: uuidSchema11,
   token: external_exports.string().min(1),
   scope: external_exports.enum(["tenant_admin", "seat"]),
-  seat_id: uuidSchema10.nullable()
+  seat_id: uuidSchema11.nullable()
 }).strict();
 var mcpTokenRevokeInputSchema = external_exports.object({
-  token_id: uuidSchema10,
-  seat_id: uuidSchema10.optional()
+  token_id: uuidSchema11,
+  seat_id: uuidSchema11.optional()
 }).strict();
 var mcpTokenRevokeOutputSchema = external_exports.object({
-  token_id: uuidSchema10,
+  token_id: uuidSchema11,
   revoked: external_exports.boolean()
 }).strict();
 
@@ -42047,7 +42454,7 @@ var markNotificationsReadRequestSchema = external_exports.object({
 });
 
 // ../../packages/protocol/src/product-analytics.ts
-var uuidSchema11 = external_exports.string().uuid();
+var uuidSchema12 = external_exports.string().uuid();
 var safeNameSchema = external_exports.string().trim().min(1).max(120).regex(/^[a-z][a-z0-9._:-]*$/);
 var safeSurfaceSchema = external_exports.string().trim().min(1).max(80).regex(/^[a-z][a-z0-9_-]*$/);
 var routeSegmentSchema = /^(?:[a-z][a-z0-9-]{0,31}|:[a-z][a-z0-9_]{0,31}|\*)$/;
@@ -42110,8 +42517,8 @@ var recommendationOutcomeStatusSchema = external_exports.enum([
 ]);
 var durationMsSchema = external_exports.number().int().nonnegative().max(24 * 60 * 60 * 1e3).optional();
 var productEventInputSchema = external_exports.object({
-  tenant_id: uuidSchema11,
-  user_id: uuidSchema11.optional(),
+  tenant_id: uuidSchema12,
+  user_id: uuidSchema12.optional(),
   source: analyticsSourceSchema,
   event_name: safeNameSchema,
   route_template: routeTemplateSchema.optional(),
@@ -42120,8 +42527,8 @@ var productEventInputSchema = external_exports.object({
   occurred_at: external_exports.string().datetime({ offset: true }).optional()
 }).strict();
 var pageViewInputSchema = external_exports.object({
-  tenant_id: uuidSchema11,
-  user_id: uuidSchema11.optional(),
+  tenant_id: uuidSchema12,
+  user_id: uuidSchema12.optional(),
   route_template: routeTemplateSchema,
   referrer_route_template: routeTemplateSchema.optional(),
   surface: safeSurfaceSchema.default("web"),
@@ -42130,9 +42537,9 @@ var pageViewInputSchema = external_exports.object({
   occurred_at: external_exports.string().datetime({ offset: true }).optional()
 }).strict();
 var commandInvocationInputSchema = external_exports.object({
-  tenant_id: uuidSchema11,
-  user_id: uuidSchema11.optional(),
-  seat_id: uuidSchema11.optional(),
+  tenant_id: uuidSchema12,
+  user_id: uuidSchema12.optional(),
+  seat_id: uuidSchema12.optional(),
   command_id: safeNameSchema,
   source: analyticsSourceSchema,
   actor_kind: external_exports.enum(["user", "agent", "system"]),
@@ -42141,7 +42548,7 @@ var commandInvocationInputSchema = external_exports.object({
   guard_result: external_exports.enum(["allowed", "denied_manifest", "denied_budget", "escalated", "denied_tenant_policy"]).optional(),
   duration_ms: durationMsSchema,
   confirmation_required: external_exports.boolean().optional(),
-  request_id: uuidSchema11.optional(),
+  request_id: uuidSchema12.optional(),
   properties: analyticsPropertiesSchema.optional(),
   occurred_at: external_exports.string().datetime({ offset: true }).optional()
 }).strict().superRefine((value, ctx) => {
@@ -42154,8 +42561,8 @@ var commandInvocationInputSchema = external_exports.object({
   }
 });
 var onboardingMilestoneInputSchema = external_exports.object({
-  tenant_id: uuidSchema11,
-  user_id: uuidSchema11.optional(),
+  tenant_id: uuidSchema12,
+  user_id: uuidSchema12.optional(),
   milestone: safeNameSchema,
   status: analyticsOutcomeStatusSchema,
   step_index: external_exports.number().int().nonnegative().max(100).optional(),
@@ -42164,19 +42571,19 @@ var onboardingMilestoneInputSchema = external_exports.object({
   occurred_at: external_exports.string().datetime({ offset: true }).optional()
 }).strict();
 var recommendationEventInputSchema = external_exports.object({
-  tenant_id: uuidSchema11,
-  user_id: uuidSchema11.optional(),
+  tenant_id: uuidSchema12,
+  user_id: uuidSchema12.optional(),
   recommendation_type: safeNameSchema,
   source_surface: safeSurfaceSchema,
   status: recommendationOutcomeStatusSchema,
   target_kind: safeSurfaceSchema.optional(),
-  target_id: uuidSchema11.optional(),
+  target_id: uuidSchema12.optional(),
   properties: analyticsPropertiesSchema.optional(),
   occurred_at: external_exports.string().datetime({ offset: true }).optional()
 }).strict();
 
 // ../../packages/protocol/src/reads.ts
-var uuidSchema12 = external_exports.string().uuid();
+var uuidSchema13 = external_exports.string().uuid();
 var isoDateTime3 = external_exports.string().datetime({ offset: true });
 var seatTypeSchema = external_exports.enum(["human", "agent", "hybrid"]);
 var seatStatusSchema = external_exports.enum(["draft", "active", "vacant", "decommissioned"]);
@@ -42191,13 +42598,13 @@ var credentialStatusSchema = external_exports.enum(["active", "revoked"]);
 var runStatusSchema = external_exports.enum(["running", "succeeded", "failed", "timeout", "cancelled"]);
 var graphGetInputSchema = external_exports.object({}).strict();
 var graphNodeSchema = external_exports.object({
-  seat_id: uuidSchema12,
+  seat_id: uuidSchema13,
   name: external_exports.string(),
   seat_type: seatTypeSchema,
   status: seatStatusSchema,
-  parent_seat_id: uuidSchema12.nullable(),
+  parent_seat_id: uuidSchema13.nullable(),
   is_root: external_exports.boolean(),
-  steward_seat_id: uuidSchema12.nullable(),
+  steward_seat_id: uuidSchema13.nullable(),
   occupant: external_exports.object({
     kind: external_exports.enum(["user", "agent"]),
     label: external_exports.string(),
@@ -42210,11 +42617,11 @@ var graphNodeSchema = external_exports.object({
   is_peer: external_exports.boolean()
 }).strict();
 var graphEdgeSchema = external_exports.object({
-  parent_seat_id: uuidSchema12,
-  child_seat_id: uuidSchema12
+  parent_seat_id: uuidSchema13,
+  child_seat_id: uuidSchema13
 }).strict();
 var graphGetOutputSchema = external_exports.object({
-  root_seat_id: uuidSchema12.nullable(),
+  root_seat_id: uuidSchema13.nullable(),
   nodes: external_exports.array(graphNodeSchema),
   edges: external_exports.array(graphEdgeSchema),
   status_rollups: external_exports.object({
@@ -42226,32 +42633,32 @@ var graphGetOutputSchema = external_exports.object({
   }).strict()
 }).strict();
 var seatGetInputSchema = external_exports.object({
-  seat_id: uuidSchema12
+  seat_id: uuidSchema13
 }).strict();
 var seatGetOutputSchema = external_exports.object({
-  seat_id: uuidSchema12,
+  seat_id: uuidSchema13,
   name: external_exports.string(),
   seat_type: seatTypeSchema,
   status: seatStatusSchema,
   purpose: external_exports.string().nullable(),
-  parent_seat_id: uuidSchema12.nullable(),
+  parent_seat_id: uuidSchema13.nullable(),
   steward_chain: external_exports.array(external_exports.object({
-    seat_id: uuidSchema12,
+    seat_id: uuidSchema13,
     name: external_exports.string()
   }).strict()),
   occupancies: external_exports.array(external_exports.object({
-    occupancy_id: uuidSchema12,
+    occupancy_id: uuidSchema13,
     occupant_type: external_exports.enum(["user", "agent"]),
     label: external_exports.string(),
     started_at: isoDateTime3,
     ended_at: isoDateTime3.nullable()
   }).strict()),
-  active_charter_version_id: uuidSchema12.nullable(),
-  draft_charter_version_id: uuidSchema12.nullable(),
+  active_charter_version_id: uuidSchema13.nullable(),
+  draft_charter_version_id: uuidSchema13.nullable(),
   agent_status: agentStatusEnum2.nullable(),
   agent_lane: agentLaneSchema2.nullable(),
   mcp_tokens: external_exports.array(external_exports.object({
-    token_id: uuidSchema12,
+    token_id: uuidSchema13,
     scope: mcpScopeSchema,
     created_at: isoDateTime3,
     last_seen_at: isoDateTime3.nullable(),
@@ -42261,7 +42668,7 @@ var seatGetOutputSchema = external_exports.object({
     revoked_at: isoDateTime3.nullable()
   }).strict()),
   credentials: external_exports.array(external_exports.object({
-    credential_id: uuidSchema12,
+    credential_id: uuidSchema13,
     provider: external_exports.string(),
     status: credentialStatusSchema
   }).strict()),
@@ -42273,12 +42680,12 @@ var seatGetOutputSchema = external_exports.object({
   }).strict()
 }).strict();
 var charterListInputSchema = external_exports.object({
-  seat_id: uuidSchema12.optional(),
+  seat_id: uuidSchema13.optional(),
   status: charterStatusSchema.optional()
 }).strict();
 var charterSummarySchema = external_exports.object({
-  charter_version_id: uuidSchema12,
-  seat_id: uuidSchema12,
+  charter_version_id: uuidSchema13,
+  seat_id: uuidSchema13,
   version: external_exports.number().int().nonnegative(),
   status: charterStatusSchema,
   created_at: isoDateTime3,
@@ -42288,11 +42695,11 @@ var charterListOutputSchema = external_exports.object({
   charters: external_exports.array(charterSummarySchema)
 }).strict();
 var charterGetInputSchema = external_exports.object({
-  charter_version_id: uuidSchema12
+  charter_version_id: uuidSchema13
 }).strict();
 var charterGetOutputSchema = external_exports.object({
-  charter_version_id: uuidSchema12,
-  seat_id: uuidSchema12,
+  charter_version_id: uuidSchema13,
+  seat_id: uuidSchema13,
   version: external_exports.number().int().nonnegative(),
   status: charterStatusSchema,
   created_at: isoDateTime3,
@@ -42306,7 +42713,7 @@ var charterGetOutputSchema = external_exports.object({
 }).strict();
 var compassGetCurrentInputSchema = external_exports.object({}).strict();
 var compassVersionRefSchema = external_exports.object({
-  compass_version_id: uuidSchema12,
+  compass_version_id: uuidSchema13,
   version: external_exports.number().int().nonnegative(),
   status: compassStatusSchema,
   doc: external_exports.unknown()
@@ -42317,7 +42724,7 @@ var compassGetCurrentOutputSchema = external_exports.object({
   // Sources expose document id and kind only. The underlying storage_ref can
   // be a local file path, so it is never surfaced (redaction rule).
   sources: external_exports.array(external_exports.object({
-    document_id: uuidSchema12,
+    document_id: uuidSchema13,
     kind: external_exports.string()
   }).strict())
 }).strict();
@@ -42332,31 +42739,31 @@ var compassGapSchema = external_exports.object({
   answer: external_exports.string().nullable()
 }).strict();
 var compassListGapsOutputSchema = external_exports.object({
-  compass_version_id: uuidSchema12.nullable(),
+  compass_version_id: uuidSchema13.nullable(),
   unanswered: external_exports.array(compassGapSchema),
   answered: external_exports.array(compassGapSchema)
 }).strict();
 var agentStatusInputSchema = external_exports.object({
-  seat_id: uuidSchema12
+  seat_id: uuidSchema13
 }).strict();
 var agentStatusOutputSchema = external_exports.object({
-  seat_id: uuidSchema12,
+  seat_id: uuidSchema13,
   // DER-786 (C7): `has_agent` is true whenever a setup agent exists for the seat
   // — including a draft setup that has no occupancy yet — so it agrees with
   // agent_setup.get. `lifecycle` is the shared cross-surface term derived from
   // `status` (none | draft_setup | dry_run | live | …).
   has_agent: external_exports.boolean(),
   lifecycle: agentLifecycleSchema,
-  agent_id: uuidSchema12.nullable(),
+  agent_id: uuidSchema13.nullable(),
   kind: agentKindSchema2.nullable(),
   display_name: external_exports.string().nullable(),
   lane: agentLaneSchema2.nullable(),
   status: agentStatusEnum2.nullable(),
   schedule_cron: external_exports.string().nullable(),
   live: external_exports.boolean(),
-  charter_version_id: uuidSchema12.nullable(),
+  charter_version_id: uuidSchema13.nullable(),
   steward_chain: external_exports.array(external_exports.object({
-    seat_id: uuidSchema12,
+    seat_id: uuidSchema13,
     name: external_exports.string()
   }).strict()),
   steward_chain_resolves_to_human: external_exports.boolean(),
@@ -42368,7 +42775,7 @@ var agentStatusOutputSchema = external_exports.object({
 }).strict();
 var agentListFleetInputSchema = external_exports.object({}).strict();
 var fleetOverviewRowSchema = external_exports.object({
-  seat_id: uuidSchema12,
+  seat_id: uuidSchema13,
   seat_name: external_exports.string(),
   seat_path: external_exports.string(),
   lane: agentLaneSchema2.nullable(),
@@ -42385,7 +42792,7 @@ var agentListFleetOutputSchema = external_exports.object({
   agents: external_exports.array(fleetOverviewRowSchema)
 }).strict();
 var runErrorLogSchema = external_exports.object({
-  error_log_id: uuidSchema12,
+  error_log_id: uuidSchema13,
   source: external_exports.enum(["run", "llm", "tool", "mcp", "runner", "integration", "job", "web"]),
   severity: external_exports.enum(["warning", "error", "critical"]),
   code: external_exports.string().nullable(),
@@ -42398,9 +42805,9 @@ var agentFleetDigestInputSchema = external_exports.object({
   error_limit: external_exports.number().int().min(1).max(100).default(50)
 }).strict();
 var fleetDigestRunSchema = external_exports.object({
-  run_id: uuidSchema12,
-  seat_id: uuidSchema12,
-  agent_id: uuidSchema12,
+  run_id: uuidSchema13,
+  seat_id: uuidSchema13,
+  agent_id: uuidSchema13,
   status: runStatusSchema,
   lane: agentLaneSchema2,
   model: external_exports.string(),
@@ -42410,22 +42817,22 @@ var fleetDigestRunSchema = external_exports.object({
   error_logs: external_exports.array(runErrorLogSchema)
 }).strict();
 var fleetDigestErrorSchema = runErrorLogSchema.extend({
-  seat_id: uuidSchema12.nullable(),
-  agent_id: uuidSchema12.nullable(),
-  run_id: uuidSchema12.nullable(),
+  seat_id: uuidSchema13.nullable(),
+  agent_id: uuidSchema13.nullable(),
+  run_id: uuidSchema13.nullable(),
   disposition: external_exports.enum(["active", "acknowledged", "resolved", "superseded"])
 }).strict();
 var fleetDigestNotificationErrorSchema = external_exports.object({
-  notification_id: uuidSchema12,
+  notification_id: uuidSchema13,
   kind: external_exports.string(),
   channel: external_exports.string(),
   status: external_exports.string(),
   provider: external_exports.string(),
   error_message: external_exports.string().nullable(),
-  error_log_id: uuidSchema12.nullable(),
+  error_log_id: uuidSchema13.nullable(),
   source: external_exports.enum(["run", "llm", "tool", "mcp", "runner", "integration", "job", "web"]).nullable(),
-  seat_id: uuidSchema12.nullable(),
-  run_id: uuidSchema12.nullable(),
+  seat_id: uuidSchema13.nullable(),
+  run_id: uuidSchema13.nullable(),
   created_at: isoDateTime3
 }).strict();
 var fleetDigestAgentSchema = fleetOverviewRowSchema.extend({
@@ -42474,17 +42881,17 @@ var seatTrustSummarySchema = external_exports.object({
   last_activity_at: isoDateTime3.nullable()
 }).strict();
 var agentListRunsInputSchema = external_exports.object({
-  seat_id: uuidSchema12,
+  seat_id: uuidSchema13,
   // Conservative, bounded page size; the timeline is a recent-history view.
   limit: external_exports.number().int().min(1).max(200).default(50)
 }).strict();
 var agentGetRunInputSchema = external_exports.object({
-  seat_id: uuidSchema12,
-  run_id: uuidSchema12
+  seat_id: uuidSchema13,
+  run_id: uuidSchema13
 }).strict();
 var seatRunSchema = external_exports.object({
-  run_id: uuidSchema12,
-  agent_id: uuidSchema12,
+  run_id: uuidSchema13,
+  agent_id: uuidSchema13,
   agent_display_name: external_exports.string().nullable(),
   status: runStatusSchema,
   lane: agentLaneSchema2,
@@ -42497,16 +42904,16 @@ var seatRunSchema = external_exports.object({
   skill_activation_count: external_exports.number().int().nonnegative()
 }).strict();
 var seatRunDetailSchema = seatRunSchema.extend({
-  task_id: uuidSchema12.nullable(),
-  work_order_id: uuidSchema12.nullable(),
+  task_id: uuidSchema13.nullable(),
+  work_order_id: uuidSchema13.nullable(),
   transcript_ref: external_exports.string(),
   input_tokens: external_exports.number().int().nonnegative(),
   output_tokens: external_exports.number().int().nonnegative(),
   outcome: external_exports.record(external_exports.string(), external_exports.unknown()),
   error_logs: external_exports.array(runErrorLogSchema),
   skill_activations: external_exports.array(external_exports.object({
-    skill_activation_id: uuidSchema12,
-    skill_version_id: uuidSchema12,
+    skill_activation_id: uuidSchema13,
+    skill_version_id: uuidSchema13,
     slug: external_exports.string().min(1),
     name: external_exports.string().min(1),
     version: external_exports.number().int().positive(),
@@ -42520,23 +42927,23 @@ var seatRunDetailSchema = seatRunSchema.extend({
   }).strict())
 }).strict();
 var agentListRunsOutputSchema = external_exports.object({
-  seat_id: uuidSchema12,
+  seat_id: uuidSchema13,
   summary: seatTrustSummarySchema,
   runs: external_exports.array(seatRunSchema)
 }).strict();
 var agentGetRunOutputSchema = external_exports.object({
-  seat_id: uuidSchema12,
+  seat_id: uuidSchema13,
   run: seatRunDetailSchema
 }).strict();
 var agentListToolCallsInputSchema = external_exports.object({
-  seat_id: uuidSchema12,
+  seat_id: uuidSchema13,
   limit: external_exports.number().int().min(1).max(200).default(50),
   // When true, return only HELD (non-allowed) tool calls — the governance view.
   held_only: external_exports.boolean().default(false)
 }).strict();
 var seatToolCallSchema = external_exports.object({
-  tool_call_id: uuidSchema12,
-  run_id: uuidSchema12.nullable(),
+  tool_call_id: uuidSchema13,
+  run_id: uuidSchema13.nullable(),
   tool_name: external_exports.string(),
   guard_result: guardResultSchema,
   manifest_clause: external_exports.string().nullable(),
@@ -42545,7 +42952,7 @@ var seatToolCallSchema = external_exports.object({
   finished_at: isoDateTime3.nullable()
 }).strict();
 var agentListToolCallsOutputSchema = external_exports.object({
-  seat_id: uuidSchema12,
+  seat_id: uuidSchema13,
   summary: seatTrustSummarySchema,
   tool_calls: external_exports.array(seatToolCallSchema)
 }).strict();
@@ -42556,16 +42963,16 @@ var deliverableLinkSchema = external_exports.object({
   kind: external_exports.enum(["internal", "linear", "github", "external"])
 }).strict();
 var deliverableIdSchema = external_exports.union([
-  uuidSchema12,
+  uuidSchema13,
   external_exports.string().regex(/^run:[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i)
 ]);
 var deliverableRowSchema = external_exports.object({
   id: deliverableIdSchema,
-  seat_id: uuidSchema12,
-  agent_id: uuidSchema12.nullable(),
-  run_id: uuidSchema12.nullable(),
-  task_id: uuidSchema12.nullable(),
-  work_order_id: uuidSchema12.nullable(),
+  seat_id: uuidSchema13,
+  agent_id: uuidSchema13.nullable(),
+  run_id: uuidSchema13.nullable(),
+  task_id: uuidSchema13.nullable(),
+  work_order_id: uuidSchema13.nullable(),
   kind: deliverableKindSchema,
   title: external_exports.string(),
   summary: external_exports.string().nullable(),
@@ -42578,13 +42985,13 @@ var deliverableRowSchema = external_exports.object({
   links: external_exports.array(deliverableLinkSchema)
 }).strict();
 var deliverableListInputSchema = external_exports.object({
-  seat_id: uuidSchema12
+  seat_id: uuidSchema13
 }).strict();
 var deliverableListOutputSchema = external_exports.object({
   deliverables: external_exports.array(deliverableRowSchema)
 }).strict();
 var deliverableGetInputSchema = external_exports.object({
-  seat_id: uuidSchema12,
+  seat_id: uuidSchema13,
   deliverable_id: deliverableIdSchema
 }).strict();
 var deliverableGetOutputSchema = external_exports.object({
@@ -42592,12 +42999,12 @@ var deliverableGetOutputSchema = external_exports.object({
 }).strict();
 var mcpTokenListInputSchema = external_exports.object({
   include_revoked: external_exports.boolean().default(false),
-  seat_id: uuidSchema12.optional()
+  seat_id: uuidSchema13.optional()
 }).strict();
 var mcpTokenMetadataSchema = external_exports.object({
-  token_id: uuidSchema12,
+  token_id: uuidSchema13,
   scope: mcpScopeSchema,
-  seat_id: uuidSchema12.nullable(),
+  seat_id: uuidSchema13.nullable(),
   created_at: isoDateTime3,
   last_seen_at: isoDateTime3.nullable(),
   // DER-830: expires_at is now always present (the column is NOT NULL).
@@ -42611,29 +43018,29 @@ var mcpTokenListOutputSchema = external_exports.object({
   tokens: external_exports.array(mcpTokenMetadataSchema)
 }).strict();
 var errorLogListInputSchema = external_exports.object({
-  seat_id: uuidSchema12.optional(),
+  seat_id: uuidSchema13.optional(),
   source: external_exports.enum(["run", "llm", "tool", "mcp", "runner", "integration", "job", "web"]).optional(),
   severity: external_exports.enum(["warning", "error", "critical"]).optional(),
   resolved: external_exports.enum(["active", "acknowledged", "resolved", "all"]).default("active"),
   limit: external_exports.number().int().min(1).max(200).default(50)
 }).strict();
 var errorLogListItemSchema = external_exports.object({
-  error_log_id: uuidSchema12,
+  error_log_id: uuidSchema13,
   source: external_exports.enum(["run", "llm", "tool", "mcp", "runner", "integration", "job", "web"]),
   severity: external_exports.enum(["warning", "error", "critical"]),
   code: external_exports.string().nullable(),
   message: external_exports.string(),
-  seat_id: uuidSchema12.nullable(),
-  agent_id: uuidSchema12.nullable(),
-  run_id: uuidSchema12.nullable(),
+  seat_id: uuidSchema13.nullable(),
+  agent_id: uuidSchema13.nullable(),
+  run_id: uuidSchema13.nullable(),
   disposition: external_exports.enum(["active", "acknowledged", "resolved", "superseded"]),
   resolved_at: isoDateTime3.nullable(),
-  resolved_by: uuidSchema12.nullable(),
+  resolved_by: uuidSchema13.nullable(),
   resolution_reason: external_exports.string().nullable(),
-  linked_task_id: uuidSchema12.nullable(),
-  linked_issue_id: uuidSchema12.nullable(),
+  linked_task_id: uuidSchema13.nullable(),
+  linked_issue_id: uuidSchema13.nullable(),
   linked_pr_ref: external_exports.string().nullable(),
-  superseded_by_id: uuidSchema12.nullable(),
+  superseded_by_id: uuidSchema13.nullable(),
   created_at: isoDateTime3
 }).strict();
 var errorLogListOutputSchema = external_exports.object({
@@ -42641,29 +43048,29 @@ var errorLogListOutputSchema = external_exports.object({
   total: external_exports.number().int().nonnegative()
 }).strict();
 var errorLogResolveInputSchema = external_exports.object({
-  error_log_id: uuidSchema12,
+  error_log_id: uuidSchema13,
   reason: external_exports.string().trim().min(1),
   disposition: external_exports.enum(["acknowledged", "resolved"]).default("acknowledged"),
-  linked_task_id: uuidSchema12.optional(),
-  linked_issue_id: uuidSchema12.optional(),
+  linked_task_id: uuidSchema13.optional(),
+  linked_issue_id: uuidSchema13.optional(),
   linked_pr_ref: external_exports.string().trim().min(1).optional()
 }).strict();
 var errorLogResolveOutputSchema = external_exports.object({
-  error_log_id: uuidSchema12,
+  error_log_id: uuidSchema13,
   disposition: external_exports.enum(["acknowledged", "resolved"]),
   resolved_at: isoDateTime3
 }).strict();
 var errorLogSupersedeInputSchema = external_exports.object({
-  error_log_id: uuidSchema12,
-  new_error_log_id: uuidSchema12,
+  error_log_id: uuidSchema13,
+  new_error_log_id: uuidSchema13,
   reason: external_exports.string().trim().min(1),
-  linked_task_id: uuidSchema12.optional(),
-  linked_issue_id: uuidSchema12.optional(),
+  linked_task_id: uuidSchema13.optional(),
+  linked_issue_id: uuidSchema13.optional(),
   linked_pr_ref: external_exports.string().trim().min(1).optional()
 }).strict();
 var errorLogSupersedeOutputSchema = external_exports.object({
-  error_log_id: uuidSchema12,
-  superseded_by_id: uuidSchema12,
+  error_log_id: uuidSchema13,
+  superseded_by_id: uuidSchema13,
   disposition: external_exports.literal("superseded"),
   resolved_at: isoDateTime3
 }).strict();
@@ -43009,13 +43416,13 @@ var tenantRenameOutputSchema = external_exports.object({
 }).strict();
 
 // ../../packages/protocol/src/system-health.ts
-var uuidSchema13 = external_exports.string().uuid();
+var uuidSchema14 = external_exports.string().uuid();
 var isoDateTime5 = external_exports.string().datetime({ offset: true });
 var systemHealthCallerKindSchema = external_exports.enum(["tenant_admin", "member", "seat_token"]);
 var systemHealthCallerSchema = external_exports.object({
   kind: systemHealthCallerKindSchema,
-  seat_id: uuidSchema13.optional(),
-  seat_ids: external_exports.array(uuidSchema13).min(1).optional()
+  seat_id: uuidSchema14.optional(),
+  seat_ids: external_exports.array(uuidSchema14).min(1).optional()
 }).strict();
 var systemHealthVerdictSchema = external_exports.enum(["healthy", "degraded", "blocked"]);
 var systemHealthSeveritySchema = external_exports.enum(["info", "warning", "critical"]);
@@ -43053,18 +43460,18 @@ var systemHealthFindingSchema = external_exports.object({
   summary: external_exports.string().min(1),
   detail: external_exports.string().min(1),
   remediation: systemHealthActionSchema,
-  seat_id: uuidSchema13.nullable(),
-  goal_id: uuidSchema13.nullable(),
-  run_id: uuidSchema13.nullable(),
-  issue_id: uuidSchema13.nullable(),
-  task_id: uuidSchema13.nullable(),
-  error_log_id: uuidSchema13.nullable()
+  seat_id: uuidSchema14.nullable(),
+  goal_id: uuidSchema14.nullable(),
+  run_id: uuidSchema14.nullable(),
+  issue_id: uuidSchema14.nullable(),
+  task_id: uuidSchema14.nullable(),
+  error_log_id: uuidSchema14.nullable()
 }).strict();
 var systemHealthScopeSchema = external_exports.object({
   mode: systemHealthScopeModeSchema,
-  root_seat_ids: external_exports.array(uuidSchema13),
-  included_seat_ids: external_exports.array(uuidSchema13),
-  requested_seat_id: uuidSchema13.nullable(),
+  root_seat_ids: external_exports.array(uuidSchema14),
+  included_seat_ids: external_exports.array(uuidSchema14),
+  requested_seat_id: uuidSchema14.nullable(),
   total_seat_count: external_exports.number().int().nonnegative()
 }).strict();
 var systemHealthFleetSectionSchema = external_exports.object({
@@ -43114,7 +43521,7 @@ var systemHealthSectionsSchema = external_exports.object({
   sync: systemHealthSyncSectionSchema
 }).strict();
 var systemHealthInputSchema = external_exports.object({
-  seat_id: uuidSchema13.optional()
+  seat_id: uuidSchema14.optional()
 }).strict();
 var systemHealthCheckInputSchema = systemHealthInputSchema.extend({
   caller: systemHealthCallerSchema
@@ -43302,10 +43709,10 @@ var baserowFilteredCountInputSchema = external_exports.object({
 }).strict();
 
 // ../../packages/protocol/src/signal-report.ts
-var uuidSchema14 = external_exports.string().uuid();
+var uuidSchema15 = external_exports.string().uuid();
 var dateOnlySchema2 = external_exports.string().regex(/^\d{4}-\d{2}-\d{2}$/, "expected YYYY-MM-DD");
 var signalReportInputSchema = external_exports.object({
-  measurable_id: uuidSchema14,
+  measurable_id: uuidSchema15,
   value: external_exports.number().finite(),
   // Optional; defaults to the measurable's current period (resolved in the
   // command against the measurable's own cadence via the canonical bounds).
@@ -43316,8 +43723,8 @@ var signalReportInputSchema = external_exports.object({
   confidence: external_exports.enum(["low", "medium", "high"]).optional()
 }).strict();
 var signalReportOutputSchema = external_exports.object({
-  reading_id: uuidSchema14,
-  measurable_id: uuidSchema14,
+  reading_id: uuidSchema15,
+  measurable_id: uuidSchema15,
   // Always false: an agent-sourced reading is a draft until a human confirms it.
   confirmed: external_exports.literal(false)
 }).strict();
@@ -44588,7 +44995,7 @@ var softwareFactoryBudgetExhaustedEventSchema = external_exports.object({
 }).strict();
 
 // ../../packages/protocol/src/sync-brief.ts
-var uuidSchema15 = external_exports.string().uuid();
+var uuidSchema16 = external_exports.string().uuid();
 var dateSchema = external_exports.string().regex(/^\d{4}-\d{2}-\d{2}$/);
 var syncBriefGapSchema = external_exports.object({
   section: external_exports.enum(["exceptions", "goal_deltas", "task_review", "friction", "agent_activity"]),
@@ -44601,8 +45008,8 @@ var sectionSchema = (itemSchema) => external_exports.object({
   flagged_gaps: external_exports.array(syncBriefGapSchema)
 }).strict();
 var syncBriefExceptionSchema = external_exports.object({
-  measurable_id: uuidSchema15,
-  seat_id: uuidSchema15,
+  measurable_id: uuidSchema16,
+  seat_id: uuidSchema16,
   seat_name: external_exports.string().min(1),
   name: external_exports.string().min(1),
   state: external_exports.enum(["risk", "crit", "pending"]),
@@ -44613,8 +45020,8 @@ var syncBriefExceptionSchema = external_exports.object({
   freshness: external_exports.enum(["fresh", "due", "stale", "awaiting_first_reading", "not_expected"]).optional()
 }).strict();
 var syncBriefGoalDeltaSchema = external_exports.object({
-  goal_id: uuidSchema15,
-  seat_id: uuidSchema15.nullable(),
+  goal_id: uuidSchema16,
+  seat_id: uuidSchema16.nullable(),
   seat_name: external_exports.string().nullable(),
   title: external_exports.string().min(1),
   status: external_exports.enum(["on", "off", "done", "dropped"]),
@@ -44628,22 +45035,22 @@ var syncBriefTaskReviewSchema = external_exports.object({
   previous_done_rate: external_exports.number().min(0).max(1),
   delta: external_exports.number().min(-1).max(1),
   stalled: external_exports.array(external_exports.object({
-    task_id: uuidSchema15,
-    owner_seat_id: uuidSchema15,
+    task_id: uuidSchema16,
+    owner_seat_id: uuidSchema16,
     owner_seat_name: external_exports.string().min(1),
     title: external_exports.string().min(1),
     due_on: dateSchema,
     stalled_at: external_exports.string().nullable()
   }).strict()),
   overdue_by_owner: external_exports.array(external_exports.object({
-    owner_seat_id: uuidSchema15,
+    owner_seat_id: uuidSchema16,
     owner_seat_name: external_exports.string().min(1),
     overdue_count: external_exports.number().int().nonnegative()
   }).strict())
 }).strict();
 var syncBriefIssueSchema = external_exports.object({
-  issue_id: uuidSchema15,
-  raised_by_seat_id: uuidSchema15,
+  issue_id: uuidSchema16,
+  raised_by_seat_id: uuidSchema16,
   raised_by_seat_name: external_exports.string().min(1),
   summary: external_exports.string().min(1),
   severity: external_exports.enum(["low", "med", "high", "critical"]),
@@ -44660,16 +45067,16 @@ var syncBriefActionItemTrendSchema = external_exports.object({
   has_prior: external_exports.boolean()
 }).strict();
 var syncBriefCascadeAtRiskSchema = external_exports.object({
-  goal_id: uuidSchema15,
+  goal_id: uuidSchema16,
   title: external_exports.string().min(1),
-  seat_id: uuidSchema15.nullable(),
+  seat_id: uuidSchema16.nullable(),
   progress_pct: external_exports.number().int().min(0).max(100),
   classification: external_exports.enum(["at_risk", "projected_miss"]),
   behind_days: external_exports.number().nullable()
 }).strict();
 var syncBriefAgentActivitySchema = external_exports.object({
-  agent_id: uuidSchema15,
-  seat_id: uuidSchema15,
+  agent_id: uuidSchema16,
+  seat_id: uuidSchema16,
   seat_name: external_exports.string().min(1),
   run_count: external_exports.number().int().nonnegative(),
   failed_run_count: external_exports.number().int().nonnegative(),
@@ -44681,11 +45088,11 @@ var syncBriefAgentActivitySchema = external_exports.object({
 var syncBriefSchema = external_exports.object({
   schema_version: external_exports.literal(1),
   tenant: external_exports.object({
-    id: uuidSchema15,
+    id: uuidSchema16,
     name: external_exports.string().min(1)
   }).strict(),
   cluster: external_exports.object({
-    id: uuidSchema15,
+    id: uuidSchema16,
     name: external_exports.string().min(1)
   }).strict().nullable(),
   period: external_exports.object({
@@ -44796,11 +45203,11 @@ var usageSnapshotOutputSchema = external_exports.object({
 }).strict();
 
 // ../../packages/protocol/src/event-payloads.ts
-var uuidSchema16 = external_exports.string().uuid();
+var uuidSchema17 = external_exports.string().uuid();
 var evidenceSchema = external_exports.array(external_exports.unknown());
 var statusEventPayloadSchema = external_exports.object({
   measurables: external_exports.array(external_exports.object({
-    id: uuidSchema16,
+    id: uuidSchema17,
     value: external_exports.number().finite(),
     // DER-1045: an optional, non-secret citation for an agent-proposed reading
     // (signal.report) — where the number came from + the agent's confidence.
@@ -44829,7 +45236,7 @@ var statusEventPayloadSchema = external_exports.object({
     }).strict().optional()
   }).strict()).optional(),
   goals: external_exports.array(external_exports.object({
-    id: uuidSchema16,
+    id: uuidSchema17,
     state: external_exports.enum(["on", "off"]),
     note: external_exports.string().min(1).optional()
   }).strict()).optional()
@@ -44842,8 +45249,8 @@ var escalationEventPayloadSchema = external_exports.object({
 }).strict();
 var issueEventPayloadSchema = external_exports.object({
   summary: external_exports.string().min(1),
-  blocking_goal_id: uuidSchema16.optional(),
-  broken_measurable_id: uuidSchema16.optional(),
+  blocking_goal_id: uuidSchema17.optional(),
+  broken_measurable_id: uuidSchema17.optional(),
   evidence: evidenceSchema,
   severity: external_exports.enum(["low", "med", "high", "critical"])
 }).strict();
@@ -44856,14 +45263,14 @@ var heldToolActionReplaySchema = external_exports.object({
 }).strict();
 
 // ../../packages/protocol/src/operating.ts
-var uuidSchema17 = external_exports.string().uuid();
+var uuidSchema18 = external_exports.string().uuid();
 var taskListInputSchema = external_exports.object({}).strict();
 var operatingTaskSchema = external_exports.object({
-  id: uuidSchema17,
+  id: uuidSchema18,
   title: external_exports.string(),
   description: external_exports.string().nullable(),
-  from_seat_id: uuidSchema17.nullable(),
-  goal_id: uuidSchema17.nullable(),
+  from_seat_id: uuidSchema18.nullable(),
+  goal_id: uuidSchema18.nullable(),
   acceptance_criteria: external_exports.unknown(),
   due_on: external_exports.string().nullable(),
   status: external_exports.string()
@@ -44872,48 +45279,48 @@ var taskListOutputSchema = external_exports.object({
   tasks: external_exports.array(operatingTaskSchema)
 }).strict();
 var taskAcceptInputSchema = external_exports.object({
-  id: uuidSchema17
+  id: uuidSchema18
 }).strict();
 var taskMutationOutputSchema = external_exports.object({
   task: external_exports.object({
-    id: uuidSchema17,
+    id: uuidSchema18,
     status: external_exports.string()
   }).strict()
 }).strict();
 var taskDeclineInputSchema = external_exports.object({
-  id: uuidSchema17,
+  id: uuidSchema18,
   reason: external_exports.string().min(1)
 }).strict();
 var taskDeclineOutputSchema = external_exports.object({
   task: external_exports.object({
-    id: uuidSchema17,
+    id: uuidSchema18,
     status: external_exports.string(),
     decline_reason: external_exports.string()
   }).strict()
 }).strict();
 var taskCompleteInputSchema = external_exports.object({
-  id: uuidSchema17,
+  id: uuidSchema18,
   summary: external_exports.string().min(1),
   artifacts: external_exports.unknown().optional()
 }).strict();
 var taskCompleteOutputSchema = external_exports.object({
-  task_id: uuidSchema17,
-  event_id: uuidSchema17,
+  task_id: uuidSchema18,
+  event_id: uuidSchema18,
   type: external_exports.literal("handoff")
 }).strict();
 var statusRecordOutputSchema = external_exports.object({
-  event_id: uuidSchema17,
+  event_id: uuidSchema18,
   type: external_exports.literal("status")
 }).strict();
 var duplicateFrictionCandidateSchema = external_exports.object({
-  issue_id: uuidSchema17,
+  issue_id: uuidSchema18,
   summary: external_exports.string().min(1),
   // pg_trgm similarity in [0, 1]; higher is more similar.
   similarity: external_exports.number().min(0).max(1)
 }).strict();
 var frictionFileIssueOutputSchema = external_exports.object({
-  event_id: uuidSchema17,
-  issue_id: uuidSchema17,
+  event_id: uuidSchema18,
+  issue_id: uuidSchema18,
   type: external_exports.literal("issue"),
   // DER-1522: likely-duplicate candidates detected before creation. Recommend,
   // never block — filing always proceeds; empty when nothing crossed the
@@ -44924,12 +45331,12 @@ var workLogInputSchema = external_exports.object({
   note: external_exports.string().min(1)
 }).strict();
 var workLogOutputSchema = external_exports.object({
-  event_id: uuidSchema17,
+  event_id: uuidSchema18,
   type: external_exports.literal("task")
 }).strict();
 var escalationRaiseOutputSchema = external_exports.object({
-  event_id: uuidSchema17,
-  escalation_id: uuidSchema17,
+  event_id: uuidSchema18,
+  escalation_id: uuidSchema18,
   type: external_exports.literal("escalation")
 }).strict();
 var deliverableKindSchema2 = external_exports.enum(["brief", "work_evidence", "artifact", "report", "other"]);
@@ -44977,7 +45384,7 @@ var deliverableAcceptOutputSchema = external_exports.object({
 }).strict();
 
 // ../../packages/protocol/src/steward.ts
-var uuidSchema18 = external_exports.string().uuid();
+var uuidSchema19 = external_exports.string().uuid();
 var escalationStatusSchema = external_exports.enum([
   "open",
   "approved",
@@ -44985,21 +45392,21 @@ var escalationStatusSchema = external_exports.enum([
   "converted_to_issue"
 ]);
 var stewardEscalationSchema = external_exports.object({
-  id: uuidSchema18,
-  seat_id: uuidSchema18,
+  id: uuidSchema19,
+  seat_id: uuidSchema19,
   seat_name: external_exports.string(),
   seat_type: external_exports.enum(["human", "agent", "hybrid"]),
-  steward_seat_id: uuidSchema18,
+  steward_seat_id: uuidSchema19,
   steward_seat_name: external_exports.string(),
   reason: external_exports.string(),
   charter_clause: external_exports.string(),
   recommended_action: external_exports.string().nullable(),
   status: escalationStatusSchema,
-  decided_by: uuidSchema18.nullable(),
+  decided_by: uuidSchema19.nullable(),
   decided_by_name: external_exports.string().nullable(),
   decided_at: external_exports.string().nullable(),
   decision_note: external_exports.string().nullable(),
-  issue_id: uuidSchema18.nullable(),
+  issue_id: uuidSchema19.nullable(),
   created_at: external_exports.string(),
   updated_at: external_exports.string()
 }).strict();
@@ -45010,27 +45417,27 @@ var escalationListOutputSchema = external_exports.object({
   escalations: external_exports.array(stewardEscalationSchema)
 }).strict();
 var escalationGetInputSchema = external_exports.object({
-  id: uuidSchema18
+  id: uuidSchema19
 }).strict();
 var escalationGetOutputSchema = external_exports.object({
   escalation: stewardEscalationSchema
 }).strict();
 var escalationResolveActionSchema = external_exports.enum(["approve", "convert_to_issue"]);
 var escalationResolveInputSchema = external_exports.object({
-  id: uuidSchema18,
+  id: uuidSchema19,
   action: escalationResolveActionSchema.optional(),
   rationale: external_exports.string().trim().min(1).optional()
 }).strict();
 var escalationRejectInputSchema = external_exports.object({
-  id: uuidSchema18,
+  id: uuidSchema19,
   rationale: external_exports.string().trim().min(1).optional()
 }).strict();
 var escalationDecisionOutputSchema = external_exports.object({
-  escalation_id: uuidSchema18,
+  escalation_id: uuidSchema19,
   status: escalationStatusSchema,
-  decision_id: uuidSchema18,
-  decided_by: uuidSchema18,
-  issue_id: uuidSchema18.nullable(),
+  decision_id: uuidSchema19,
+  decided_by: uuidSchema19,
+  issue_id: uuidSchema19.nullable(),
   // DER-1478: true when the resolved escalation carries a durable replay_action
   // (an approval-gated connector write) that the approvals path should actuate
   // after this decision is recorded. Omitted (not false) for non-connector
@@ -45052,7 +45459,7 @@ var eventTypes = [
   "task"
 ];
 var publicMessageTypes = ["status", "handoff", "escalation", "issue"];
-var uuidSchema19 = external_exports.string().uuid();
+var uuidSchema20 = external_exports.string().uuid();
 var evidenceSchema2 = external_exports.array(external_exports.unknown());
 var internalEventPayloadSchema = external_exports.record(external_exports.string(), external_exports.unknown()).refine((payload) => !Array.isArray(payload), "Internal event payload must be an object");
 var handoffEventPayloadSchema = external_exports.object({
@@ -45062,24 +45469,24 @@ var handoffEventPayloadSchema = external_exports.object({
     acceptance_criteria: external_exports.array(external_exports.string().min(1)),
     due: external_exports.string().datetime({ offset: true })
   }).strict(),
-  to_seat_id: uuidSchema19
+  to_seat_id: uuidSchema20
 }).strict();
 var intakeEventPayloadSchema = external_exports.discriminatedUnion("action", [
   external_exports.object({
     action: external_exports.literal("uploaded"),
-    document_id: uuidSchema19,
+    document_id: uuidSchema20,
     storage_ref: external_exports.string().min(1)
   }).strict(),
   external_exports.object({
     action: external_exports.literal("parsed"),
-    document_id: uuidSchema19,
+    document_id: uuidSchema20,
     mode: external_exports.enum(["source_tree", "function_first"]),
     seat_count: external_exports.number().int().nonnegative(),
     edge_count: external_exports.number().int().nonnegative()
   }).strict(),
   external_exports.object({
     action: external_exports.literal("failed"),
-    document_id: uuidSchema19,
+    document_id: uuidSchema20,
     reason: external_exports.string().min(1)
   }).strict(),
   external_exports.object({
@@ -45185,9 +45592,9 @@ var publicMessageTypeSchema = external_exports.enum(publicMessageTypes);
 var eventEnvelopeBaseSchema = external_exports.object({
   protocol: external_exports.literal(EVENT_PROTOCOL),
   type: eventTypeSchema,
-  seat_id: uuidSchema19.nullable(),
+  seat_id: uuidSchema20.nullable(),
   occurred_at: external_exports.string().datetime({ offset: true }),
-  goal_ancestry: external_exports.array(uuidSchema19)
+  goal_ancestry: external_exports.array(uuidSchema20)
 }).strict();
 var statusEventEnvelopeSchema = eventEnvelopeBaseSchema.extend({
   type: external_exports.literal("status"),
@@ -45613,7 +46020,7 @@ Treat AICOS as a coordinator over the operating system. It can become more usefu
     order: 20,
     title: "Responsibility Graph playbook",
     summary: "How to build a functions-first graph with seats, owners, Stewards, vacancies, and clean authority.",
-    version: "2026-07-10.3",
+    version: "2026-07-10.6",
     public: true,
     audiences: ["human", "cli", "mcp", "in_app_agent"],
     stages: ["graph_design", "staffing"],
@@ -45694,7 +46101,11 @@ The graph also carries a mission-control panel. It pulls the same operational st
 
 A staffed non-AICOS agent's seat page uses one profile shell with eight URL-addressable tabs: **Overview**, **Charter**, **Tools & connections**, **Skills**, **Autonomy**, **Signals**, **Activity**, and **Settings**. The hero shows status, Charter purpose, Steward, seat path, lane, model, and last run. The sidebar keeps access, connection, tool/Skill/Signal/escalation/Charter counters, and schedule facts visible while the tabs organize the existing read models and controls. Legacy links such as \`#agent-ops\`, \`#recent-runs\`, and \`#run-<id>\` select the matching Settings or Activity tab. Human seats and the AICOS foundation seat keep their dedicated pages. Members without sensitive-data access see the same shell with explicit unavailable states for run, tool-call, cost, connection-status, and escalation facts; the page never broadens Trust Card access or turns an unavailable read into a confident empty/disconnected claim.
 
-Agent creation at \`/agents/new\` begins with four doors: **Describe the job** opens the existing in-app builder, **Start from a template** opens the stock-template picker, **Build manually** opens the custom setup path, and **Import** opens an in-app format explainer. Definition-file import is roadmap-only and never opens a bare file picker; operators can instead continue to the existing-agent pairing flow. Setup is the detail page filling in: creating a seat from any door hands off to that agent's detail page in draft mode (\`/seats/{seatId}\`), where numbered setup tabs and a shared go-live gate rail complete the draft \u2014 there is no separate multi-step wizard. Existing \`?mode=template|custom|existing\` links open the matching door, and a \`?seat=\` resume link redirects straight to the draft detail page.
+The **Charter** tab renders the accepted Charter as a document \u2014 purpose, responsibilities, decision authority \u2014 with its version chip and signer, plus a structured edit drawer for quick purpose/responsibilities/decision-authority changes. The drawer prefills from the active Charter (or an open amendment draft, if one exists) and stages the edited slice through the same audited commands as any other Charter change; sensitive fields (permission manifest, budget, measurables, escalation rules) never round-trip through the client, and a save fails closed with an explicit conflict message if the Charter changed underneath the drawer since it opened. An **Amend** action stays next to the drawer for changes it does not cover, opening the same draft-and-confirm flow as the Charter Builder.
+
+An owner or Steward manages the agent's capabilities in context from the **Tools & connections** and **Skills** tabs, no separate editor page. On **Skills**, assign or revoke a Skill directly; each change stages a confirmation envelope for the human to approve in \`/approvals\` \u2014 never a silent write. On **Tools & connections**, granted tools are read-only on this page; a change routes to the governed Charter re-sign flow (tool grants live in the signed, active Charter, so they change by supersession, never in place), and a missing provider links straight to Settings connections with a return link back to this tab. Viewers without manage authority see the same tabs with an explanation instead of controls; every write still re-asserts seat authority server-side regardless of what the client shows.
+
+Agent creation at \`/agents/new\` begins with four doors: **Describe the job** opens the existing in-app builder, **Start from a template** opens the stock-template picker, **Build manually** opens the custom setup path, and **Import** opens an in-app format explainer. Definition-file import is roadmap-only and never opens a bare file picker; operators can instead continue to the existing-agent pairing flow. Setup is the detail page filling in: creating a seat from any door hands off to that agent's detail page in draft mode (\`/seats/{seatId}\`) \u2014 there is no separate wizard shell or tab vocabulary. Draft mode renders the exact same eight tabs the live seat uses; **Overview** and **Activity** stay locked until the first run has something to show, and the other six own the editable draft (Charter, Tools & connections, Skills, Autonomy, Outcomes & Signals, Settings). The shared **GateRail** review rail (sign manifest \u2192 sandbox dry run \u2192 go-live) and the server's \`next_action\` stay the sole lifecycle truth throughout, unaffected by which door you entered through. The door only changes how the one canonical form gets filled in: manual is the blank form, template pre-populates it, chat opens an AICOS setup assistant beside the form that proposes typed field changes grouped by section for review before anything durable saves, and import maps a definition file into the same fields and reports what did not map \u2014 never credentials. Existing \`?mode=template|custom|existing\` links open the matching door, and a \`?seat=\` resume link redirects straight to the draft detail page.
 
 ## Review an agent seat's delivered work
 
@@ -46285,7 +46696,7 @@ Use the lower-level commands after health names a finding: \`agent.get_run\` for
     order: 46,
     title: "Tool access and vault",
     summary: "How to give agents access to tools without exposing raw credentials or expanding authority by accident.",
-    version: "2026-07-02.4",
+    version: "2026-07-13.1",
     public: true,
     audiences: ["human", "cli", "mcp", "in_app_agent"],
     stages: ["staffing"],
@@ -46339,7 +46750,7 @@ The native Gmail handlers run inside the same broker boundary as the REST and Sl
 
 ## Google connector status
 
-Google can be connected from Settings once the workspace OAuth app is configured. The connection flow requests offline access for Gmail read/compose and Sheets, stores the returned credential in the vault, and records only account and scope metadata in the integration row. The test action refreshes the vaulted credential and performs a minimal Gmail profile read. Gmail read/draft, bounded Sheets read, and approval-held Sheets write handlers run through the guarded broker when Google is connected; connecting Google still does not bypass the signed Charter manifest, tenant policy ceiling, credential vault, or tool-call audit. Sheet grants should use exact signed argument bindings for approved spreadsheet ids and ranges.
+Google can be connected from Settings once the workspace OAuth app is configured. The connection flow requests offline access for Gmail read/compose/send and Sheets, stores the returned credential in the vault, and records only account, scope, and capability-availability metadata in the integration row. Partial grants are accepted when at least one connector capability is usable; missing or revoked scopes reduce the affected capability instead of granting more authority. The test action refreshes the vaulted credential and performs a minimal Gmail profile read. Gmail read/draft/send, bounded Sheets read, and approval-held Sheets write handlers run through the guarded broker when Google is connected; connecting Google still does not bypass the signed Charter manifest, tenant policy ceiling, credential vault, or tool-call audit. Sheet grants should use exact signed argument bindings for approved spreadsheet ids and ranges.
 
 CLI and MCP can inspect connector readiness without seeing secrets: \`integration.list\` / \`rost_list_integrations\` lists connected providers and health metadata, \`integration.status\` / \`rost_get_integration_status\` reads one provider by id or name, and \`integration.test\` / \`rost_test_integration_connection\` runs the installed provider-specific health check. For Google, the test refreshes the vaulted OAuth credential and reads the Gmail profile, then records only account, scope, and health metadata.
 
@@ -46376,7 +46787,7 @@ There is exactly one way to give a connected tool its credential, and it is the
     order: 47,
     title: "Available tools guide",
     summary: "How to think about tool categories available to seats and what each category should be used for.",
-    version: "2026-07-04.1",
+    version: "2026-07-13.1",
     public: true,
     audiences: ["human", "cli", "mcp", "in_app_agent"],
     stages: ["staffing"],
@@ -46412,9 +46823,9 @@ Start from the seat's responsibility, not the tool list. If a tool does not dire
 
 ## Skills and tool dependencies
 
-Skills are reusable procedures a seat can learn from; they are not tools and they never grant authority. A skill package may declare required or optional tool dependencies so setup can identify blockers before assignment. Those dependencies are checked against the discoverable \`tool.catalog\` ids and scope tiers, then compared to the seat's Charter permission manifest. Missing required tools block approval; optional tools produce setup warnings. A published skill version is immutable, so later corrections create a new version instead of rewriting what a run may have used.
+Skills are reusable procedures a seat can learn from; they are not tools and they never grant authority. A skill package may declare required or optional tool dependencies so setup can identify blockers before assignment. Those dependencies are checked against the discoverable \`tool.catalog\` ids, scope tiers, and provider-neutral access levels, then compared to the seat's Charter permission manifest. Missing required tools block approval; optional tools produce setup warnings. A published skill version is immutable, so later corrections create a new version instead of rewriting what a run may have used.
 
-The catalog covers both the platform verbs (status, escalation, Signal readings) and the business tools the stock-agent templates grant \u2014 accounts-payable and receivable reads, AP-inbox and collections drafts, helpdesk triage, CRM reads, and content-calendar, release-artifact, and issue drafts. Each is listed at a conservative scope tier (read for the reads, draft for the drafts, where a draft never sends), and the business tools are credential-gated. Because a skill's required tool id is matched against these ids, a skill that requires one of them resolves against the catalog rather than reporting an unknown tool. Catalog membership is configuration only: it still confers no authority, and a listed id runs only once a live handler exists behind the seat's signed permission manifest, the server guard, and any required credential \u2014 the manifest and guard remain the control plane.
+The catalog covers both the platform verbs (status, escalation, Signal readings) and the business tools the stock-agent templates grant \u2014 accounts-payable and receivable reads, AP-inbox and collections drafts, helpdesk triage, CRM reads, and content-calendar, release-artifact, and issue drafts. Each is listed with a conservative scope tier (read for the reads, draft for the drafts, where a draft never sends), a provider-neutral access level, a provider requirement, cost class, lane support, and any Trusted-mode metadata that must be present before a standing authorization can apply. Business tools are credential-gated. Because a skill's required tool id is matched against these ids, a skill that requires one of them resolves against the catalog rather than reporting an unknown tool. Catalog membership is configuration only: it still confers no authority, and a listed id runs only once a live handler exists behind the seat's signed permission manifest, the server guard, and any required credential \u2014 the manifest and guard remain the control plane. Unknown tool ids or unsupported access levels fail closed.
 
 ## How agents should request tools
 
@@ -46431,7 +46842,7 @@ External connectors are being rolled out provider by provider, conservatively (r
     order: 48,
     title: "CLI and MCP installation guide",
     summary: "Install the public CLI, register remote token-backed MCP clients, and find the full command and tool catalog.",
-    version: "2026-07-12.4",
+    version: "2026-07-13.3",
     public: true,
     audiences: ["human", "cli", "mcp", "in_app_agent"],
     stages: ["company_setup", "staffing"],
@@ -46862,8 +47273,8 @@ These are the security posture rules for operating after install \u2014 a checkl
 | Command | Purpose | Scope | Safe example |
 |---|---|---|---|
 | \`{{cli}} command <id> [--seat <seat-id>] --json [json-body]\` | Execute a server-side command by id. Add \`--seat <seat-id>\` to run a seat-scoped command (e.g. \`task.list\`) against a specific seat. | Command-defined | \`{{cli}} command task.list --seat <seat-id> --json '{}'\` |
-| \`{{cli}} command schema <id> [--json]\` | Discover a command's exact input/output schema, help pointer, and a worked example before calling it. | User | \`{{cli}} command schema compass.draft\` |
-| \`{{cli}} command list [--json]\` | List every callable command id with its scope and confirmation gate. | User | \`{{cli}} command list\` |
+| \`{{cli}} command schema <id> [--json]\` | Discover a command's exact input/output schema, help pointer, Trusted execution classification, and a worked example before calling it. | User | \`{{cli}} command schema compass.draft\` |
+| \`{{cli}} command list [--json]\` | List every callable command id with its scope, confirmation gate, and Trusted execution classification. | User | \`{{cli}} command list\` |
 | \`{{cli}} command onboarding.attach_reference --json ...\` | Attach a company reference document (reference-only). | Tenant | \`{{cli}} command onboarding.attach_reference --json '{"text":"# Ops handbook\\n...","title":"Ops handbook","kind":"process","source":"handbook/ops.md"}'\` |
 | \`{{cli}} command seat.create --json ...\` | Create a Responsibility Graph seat. | Tenant | \`{{cli}} command seat.create --json '{"name":"Finance","seat_type":"human"}'\` |
 | \`{{cli}} command charter.draft --json ...\` | Create or fetch a draft Charter. | Seat or tenant-admin | \`{{cli}} command charter.draft --json '{"seat_id":"<seat-id>"}'\` |
@@ -46901,7 +47312,8 @@ The signed-in app exposes the same Skill command surface at **Skills**, linked f
 | \`{{cli}} command tenant.model_gateway_policy.update\` | \`tenant.model_gateway_policy.update\` | Unlock or relock managed models that lack a zero-retention (ZDR) tier (ADR-0019). Locked (default) restricts the AI Gateway to zero-retention-eligible managed models. Owner-only and human-gated; unlocking establishes an ADR-0018 \xA76 standing authorization and surfaces a per-model retention disclosure. | Tenant-admin | \`{{cli}} command tenant.model_gateway_policy.update --json '{"allow_non_zdr_models":true}'\` |
 | \`{{cli}} member invite|update|remove\` | \`member.invite\`, \`member.update\`, \`member.remove\` | Manage tenant members; execution requires an owner or admin membership. | Tenant | \`{{cli}} member invite --email ops@example.com --role member\` |
 | \`{{cli}} agent templates|create|setup|tools|dry-run|go-live|status|run-now|fleet-digest|get-run|show\` | \`agent_template.list\`, \`agent.create_from_template\`, \`agent.create_custom\`, \`agent_setup.get\`, \`agent_setup.update\`, \`agent.configure_tools\`, \`agent.run_dry_run\`, \`agent.go_live\`, \`agent.status\`, \`agent.run_now\`, \`agent.fleet_digest\`, \`agent.get_run\`, \`agent.show_markdown\` | Run the full agent setup and operation flow: list templates, create a draft from a template or guided custom answers (with \`--model\` and \`--effort\`), read or answer setup state, connect or decline tools, dry-run, go live, run on demand, capture the fleet-health digest, read one run's transcript/error diagnostics, and show a markdown readout. Human CLI dry-runs print the rehearsal transcript and, when present, the per-tool preview labels (\`Would run\`, \`Blocked\`, \`Escalated\`) before go-live. Create and go-live stop at human gates; the dry-run is ungated by human approval but requires a signed manifest first. | Tenant and seat | \`{{cli}} agent fleet-digest --json\` |
-| \`{{cli}} tools list\` | \`tool.catalog\` | List the discoverable tool catalog the builder reads (id, scope tiers, credential requirement, access policy, and execution-boundary guidance). | Tenant | \`{{cli}} tools list --json\` |
+| \`{{cli}} command agent.activation_receipt|agent.activation_sign|agent.trust.*\` | \`agent.activation_receipt\`, \`agent.activation_sign\`, \`agent.trust.create\`, \`agent.trust.inspect\`, \`agent.trust.revoke\`, \`agent.trust.expire\`, \`agent.trust.supersede\` | Build a secret-free activation receipt, sign the exact current digest, and create/inspect/revoke/expire/supersede bounded Trusted execution grants. Receipt and inspect are reads; sign and grant lifecycle writes are human steward/admin only and refuse stale receipt digests. | Seat read; tenant write | \`{{cli}} command agent.activation_receipt --json '{"agent_id":"<agent-id>"}'\`; \`{{cli}} command agent.trust.create --json '{"agent_id":"<agent-id>","expected_scope_digest":"sha256:...","budget_cents":2500}'\` |
+| \`{{cli}} tools list\` | \`tool.catalog\` | List the discoverable tool catalog the builder reads (id, scope tiers, access levels, provider requirement, cost class, lane support, credential requirement, access policy, Trusted metadata, and execution-boundary guidance). | Tenant | \`{{cli}} tools list --json\` |
 | \`{{cli}} skills list|get|file|assigned|check-dependencies\` | \`skill.list\`, \`skill.get\`, \`skill.file.get\`, \`skill.assigned.list\`, \`skill.check_dependencies\` | Discover reusable Skills, read descriptors and stored package files, list approved Seat assignments, and compare required/optional tool dependencies with a Seat's signed Charter manifest. Skills are instructions, not authority. | Tenant-admin; seat-scoped reads for assigned Skills | \`{{cli}} skills list --json\`; \`{{cli}} skills file --slug invoice-review --path SKILL.md\` |
 | \`{{cli}} skills catalog|enable|install|sync\` | \`skill.catalog\`, \`skill.enable_catalog\`, \`skill.install_local\`, \`skill.sync_local\` | Discover entitled {{brand}} catalog Skills, enable a catalog Skill into the company library with human confirmation, and install or sync approved Skill files locally from {{brand}} APIs. Private catalog source URLs and GitHub tokens never go to local agents. | Tenant-admin for catalog enablement; seat-scoped sync for assigned Skills | \`{{cli}} skills sync --seat-id <id> --client codex\`; \`{{cli}} skills install rost/ap-review --seat-id <id> --client codex\` |
 | \`{{cli}} skills create|update-draft|import|publish|assign|revoke\` | \`skill.create\`, \`skill.update_draft\`, \`skill.import_github\`, \`skill.import_upload\`, \`skill.publish\`, \`skill.assign_to_seat\`, \`skill.revoke_from_seat\` | Create or import bounded text Skill packages, publish reviewed immutable versions, propose Seat assignments, and revoke future use without deleting historical activations. Publish, revoke, and approved assignment stop at human confirmation; blocked required tools cannot be approved. | Tenant-admin writes; seat agents read assignments and escalate requests | \`{{cli}} skills import github --url https://github.com/acme/skills/tree/main/ap --json\`; \`{{cli}} skills assign --seat-id <id> --slug invoice-review --json\` |
@@ -46950,7 +47362,7 @@ Skills wrapper help:
 This catalog is the canonical machine surface \u2014 the \`rost_*\` tools your MCP client calls. Three different things are called "tools" in {{brand}}; do not confuse them:
 
 1. **The MCP tools below** \u2014 the \`rost_*\` surface your client actually calls to read and act.
-2. **\`{{cli}} tools list\` / \`tool.catalog\`** (MCP \`rost_list_tool_catalog\`) \u2014 the agent-configuration catalog the builder reads when staffing an agent. It is selectable per agent, but selecting a tool is not itself a call; live handlers execute later only behind the signed manifest, guard, credentials, and bindings.
+2. **\`{{cli}} tools list\` / \`tool.catalog\`** (MCP \`rost_list_tool_catalog\`) \u2014 the agent-configuration catalog the builder reads when staffing an agent. It includes scope tiers, provider-neutral access levels, provider requirements, cost class, lane support, and Trusted metadata. It is selectable per agent, but selecting a tool is not itself a call; live handlers execute later only behind the signed manifest, guard, credentials, and bindings.
 3. **\`{{cli}} model list\` / \`model.catalog\`** (MCP \`rost_list_model_catalog\`) \u2014 the guided model-tier catalog the builder reads for recommendations, effort, token prices, cost bands, and model id selection.
 4. **The "Available tools guide"** (in the sidebar) \u2014 covers tool *categories* and governance, not a callable surface. See the available-tools-guide.
 
@@ -46962,8 +47374,8 @@ These read-only tools are available to any valid MCP token (like the reference t
 
 | Tool | Purpose | Scope | Safe example |
 |---|---|---|---|
-| \`rost_describe_command\` | Return a command's input/output JSON Schema, scope, confirmation gate, MCP tool name, help pointer, guides, a validated example, and related commands. | Any valid MCP token | Query \`{"command_id":"compass.draft"}\` |
-| \`rost_list_commands\` | List callable command ids in bounded pages with title, scope, confirmation, stages, and MCP tool name when callable. Supports \`q\`, \`category\`, \`stage\`, \`limit\`, and \`cursor\`. | Any valid MCP token | Query \`{"q":"status","limit":10}\` |
+| \`rost_describe_command\` | Return a command's input/output JSON Schema, scope, confirmation gate, Trusted execution classification, MCP tool name, help pointer, guides, a validated example, and related commands. | Any valid MCP token | Query \`{"command_id":"compass.draft"}\` |
+| \`rost_list_commands\` | List callable command ids in bounded pages with title, scope, confirmation, Trusted execution classification, stages, and MCP tool name when callable. Supports \`q\`, \`category\`, \`stage\`, \`limit\`, and \`cursor\`. | Any valid MCP token | Query \`{"q":"status","limit":10}\` |
 
 The equivalent CLI verbs are \`{{cli}} command schema <id>\` and \`{{cli}} command list\`. The discoverable tool catalog is \`{{cli}} tools list\` (MCP \`rost_list_tool_catalog\`, tenant-scoped).
 
@@ -47084,6 +47496,8 @@ Several rows here are seat-operating commands (\`task.create\`, the \`signal.*\`
 | \`rost_set_company_autonomy_ceiling\` | \`settings.agent_policy.update\` | Set the company autonomy ceiling. | Tenant-admin | Owner-only, human-gated; call with \`{"profile":"locked_down"}\` (or \`balanced\`/\`high_autonomy\`, or \`{"profile":"custom","max_autonomous_risk":"high"}\`). Enforced by default. |
 | \`rost_get_cli_confirmation_mode\` | \`settings.confirmation_policy.get\` | Read the CLI confirmation mode: \`careful\` (the strict default \u2014 the CLI cannot silently auto-approve a pending confirmation) or \`trusted_operator\` (an owner opt-in). | Tenant | Call with \`{}\`; metadata only. |
 | \`rost_set_cli_confirmation_mode\` | \`settings.confirmation_policy.update\` | Set the CLI confirmation mode. | Tenant-admin | Owner-only, human-gated; call with \`{"cli_mode":"trusted_operator"}\` (or \`{"cli_mode":"careful"}\`). Choosing \`trusted_operator\` establishes an ADR-0018 \xA76 standing authorization; a \`dangerous\`-risk confirmation always requires interactive human review in either mode. |
+| \`rost_get_tenant_tool_policy\` | \`settings.tool_policy.get\` | Read tenant capability-grant defaults and the AICOS auto-trust posture. | Tenant | Call with \`{}\`; metadata only. |
+| \`rost_update_tenant_tool_policy\` | \`settings.tool_policy.update\` | Update tenant capability-grant defaults and the AICOS auto-trust posture. | Tenant-admin | Owner/admin only and human-gated; call with \`{"mode":"managed","aicos":{"trust_new_capabilities_automatically":true}}\`. |
 | \`rost_update_model_gateway_policy\` | \`tenant.model_gateway_policy.update\` | Unlock or relock managed models that lack a zero-retention (ZDR) tier. | Tenant-admin | Owner-only, human-gated; call with \`{"allow_non_zdr_models":true}\` (or \`false\` to relock). Unlocking establishes an ADR-0018 \xA76 standing authorization and surfaces a per-model retention disclosure. |
 | \`rost_get_aicos_brain_settings\` | \`aicos.brain_settings.get\` | Read AICOS lane and brain labels for cloud managed/BYOK, runner Claude/Codex, and MCP client. | Tenant | Call with \`{}\`; returns enum labels only, never keys, vault refs, or runner secrets. |
 | \`rost_update_aicos_brain_settings\` | \`aicos.brain_settings.update\` | Update AICOS lane and cloud/runner brain preferences. | Tenant-admin | Owner-only and human-gated; call with \`{"lane":"runner","runner_brain":"claude-cli"}\` or \`{"cloud_brain":"byok"}\`. BYOK requires an active tenant Anthropic key. For AICOS, selecting \`codex-cli\` is currently rejected until the governed interactive runner path is verified. |
@@ -47138,6 +47552,17 @@ Several rows here are seat-operating commands (\`task.create\`, the \`signal.*\`
 | \`rost_show_charter_as_markdown\` | \`charter.show_markdown\` | Render a seat's active or latest Charter as a clean markdown card for review. | Tenant | Call with \`{"seat_id":"<seat-id>"}\`. |
 | \`rost_show_agent_setup_as_markdown\` | \`agent.show_markdown\` | Render a seat's agent setup, model, steward, tools, and Charter as a clean markdown card for review. | Tenant | Call with \`{"seat_id":"<seat-id>"}\`. |
 | \`rost_list_tool_catalog\` | \`tool.catalog\` | List the discoverable tool catalog the agent builder reads \u2014 id, prescriptive description, scope tiers, credential requirement, access policy, and execution-boundary guidance. | Tenant | Call with \`{}\` or \`{"provider":"google"}\`. |
+| \`rost_list_tenant_capability_grants\` | \`tool_grants.tenant.list\` | List tenant capability ceilings/defaults with connection, availability, source, and compile status. | Tenant | Call with \`{}\`; no secrets or vault refs. |
+| \`rost_list_agent_effective_capability_grants\` | \`tool_grants.agent.effective\` | Read one agent's effective capability grants after tenant ceilings, agent selections, and compile availability are applied. | Tenant | Call with \`{"agent_id":"<agent-id>"}\`. |
+| \`rost_update_agent_capability_grants\` | \`tool_grants.agent.update\` | Compile a Charter supersession proposal for agent capability grant reductions or expansions. | Tenant | Human steward/admin only; call with \`{"agent_id":"<agent-id>","grants":[{"tool_grant_id":"<grant-id>","access_level":"read"}]}\`; active authority changes only after the signed Charter is superseded. |
+| \`rost_build_agent_activation_receipt\` | \`agent.activation_receipt\` | Build the current activation receipt for an agent: capabilities, connection metadata, digest, budget, and always-human boundary. | Seat or tenant-admin | Call with \`{"agent_id":"<agent-id>"}\`; rebuild after Charter, connection, lane, schedule, or grant changes. |
+| \`rost_sign_agent_activation_receipt\` | \`agent.activation_sign\` | Human steward/admin sign-off for the exact activation receipt digest. | Tenant | Human-gated; call with \`{"agent_id":"<agent-id>","expected_scope_digest":"sha256:...","budget_cents":2500}\`. |
+| \`rost_create_agent_trusted_grant\` | \`agent.trust.create\` | Create a bounded Trusted execution grant for a live agent after receipt review. | Tenant | Human steward/admin only; call with \`{"agent_id":"<agent-id>","expected_scope_digest":"sha256:...","budget_cents":2500}\`. |
+| \`rost_inspect_agent_trusted_grants\` | \`agent.trust.inspect\` | Inspect active or historical Trusted grants for one agent. | Seat or tenant-admin | Call with \`{"agent_id":"<agent-id>","include_inactive":true}\`; metadata only. |
+| \`rost_revoke_agent_trusted_grant\` | \`agent.trust.revoke\` | Revoke an active Trusted grant while preserving history. | Tenant | Human steward/admin only; call with \`{"grant_id":"<grant-id>","reason":"..."}\`; non-interactive callers receive a confirmation handoff. |
+| \`rost_expire_agent_trusted_grants\` | \`agent.trust.expire\` | Mark overdue active Trusted grants expired and append audit events. | Tenant | Human steward/admin only; call with \`{"agent_id":"<agent-id>"}\`. |
+| \`rost_supersede_agent_trusted_grant\` | \`agent.trust.supersede\` | Replace the active Trusted grant with a fresh digest and budget. | Tenant | Human steward/admin only; call with \`{"agent_id":"<agent-id>","expected_scope_digest":"sha256:...","budget_cents":2500}\`. |
+| \`rost_suggest_setup_capability_grants\` | \`agent_setup.capability_suggestions\` | Suggest deterministic minimum capability grants from the current setup/template and tenant grant availability. | Tenant | Call with \`{"seat_id":"<seat-id>"}\` or \`{"setup_id":"<agent-id>"}\`; no model call and no mutation. |
 | \`rost_list_skills\` | \`skill.list\` | List tenant Skills with application descriptors, dependency metadata, source status, latest version, and assigned Seat count. Seat-scoped reads are available through \`rost://skills\`. | Tenant-admin | Call with \`{}\` or \`{"query":"invoice"}\`. |
 | \`rost_list_rost_skill_catalog\` | \`skill.catalog\` | List entitled {{brand}} catalog Skills. Private catalog source URLs and credentials stay server-side. | Tenant-admin | Call with \`{}\`; use \`{"include_unentitled":true}\` only to inspect tier availability. |
 | \`rost_enable_rost_catalog_skill\` | \`skill.enable_catalog\` | Enable an entitled {{brand}} catalog Skill into the company library with human confirmation. | Tenant-admin | Call with \`{"slug":"rost/ap-review"}\`; non-interactive callers receive a confirmation handoff. |
@@ -49252,7 +49677,7 @@ A consultancy's purpose might be "Make expert tax guidance affordable for first-
     order: 31,
     title: "Charter authoring deep-dive",
     summary: "The full Charter document contract field by field \u2014 decision authority, escalation, measurables, budget, permissions \u2014 with worked examples for human, agent, and hybrid seats.",
-    version: "2026-06-18.1",
+    version: "2026-07-13.1",
     public: true,
     audiences: ["cli", "mcp", "in_app_agent"],
     stages: ["charter_design", "staffing"],
@@ -49299,7 +49724,7 @@ A Charter is a seat's executable operating contract. On the CLI and MCP path you
   - **escalate** (1+) \u2014 the must-ask set: ambiguous authority, irreversible actions, credentials, legal or financial exposure, customer-impacting exceptions. At least one escalate item should carry \`unanswered_boundary: true\` so unresolved boundaries default conservative. The submit schema does not strictly require it, but the direct submit path (\`charter.update_draft\` / \`charter.set\`) does not add one for you \u2014 it only records the boundaries you flag \u2014 so include one whenever a boundary is unresolved.
 - **escalation_rules** (1+) \u2014 plain-language rules that trigger escalation, beyond the structured authority items. "Escalate any invoice over $5,000 or from a vendor not already in the ledger."
 - **measurables** (1+) \u2014 each \`{ name, target, cadence, source }\`. A measurable must measure the accountability, not vanity. \`cadence\` is \`daily|weekly|monthly|quarterly\`; \`source\` is \`human|agent|integration\`. Agent-sourced readings are unconfirmed until a human confirms them.
-- **permission_manifest** \u2014 each \`{ tool, scope, granted, rationale }\`. Map each accountability to the narrowest tool scope that performs it. Prefer draft/read scopes; a send or spend scope is a deliberate, justified grant. The manifest is what the tool-guard enforces and what a human signs.
+- **permission_manifest** \u2014 each \`{ tool, scope, granted, rationale }\`, with machine fields such as \`capability_id\` and \`integration_id\` when the grant is backed by a connected capability. Map each accountability to the narrowest tool scope that performs it. Prefer draft/read scopes; a send or spend scope is a deliberate, justified grant. Connection-backed entries are signed against the exact tenant integration; stale, cross-tenant, or scope-revoked identities fail closed before activation. The manifest is what the tool-guard enforces and what a human signs.
 - **budget** \u2014 \`{ monthly_usd, approval_required_over_usd, notes }\`. \`monthly_usd\` may be \`null\` (no autonomous budget). \`approval_required_over_usd: 0\` means any spend needs approval. State the rule in \`notes\`.
 - **unanswered_boundaries** (optional) \u2014 the open questions about this seat's authority you have not resolved. Naming them keeps them conservative instead of silently autonomous. **You may omit this field**; the server defaults it to \`[]\` (and still records any boundary you flag inline via \`unanswered_boundary: true\` on an authority item).
 - **seat_type_recommendation** (optional) \u2014 \`{ recommendation, rationale, confidence }\` where recommendation is \`human|agent|hybrid\`. Reason from the work: high-volume, rule-bound, reviewable work suits an agent under a Steward; judgment-heavy or relationship work stays human; split work is hybrid. **You may omit this field**; the server defaults conservatively to \`human\` until a human decides otherwise. Supply it when you have a clear recommendation.
@@ -50327,11 +50752,14 @@ function parseSemver(value) {
 
 // src/generated/command-manifest.ts
 var COMMAND_MANIFEST = [
+  { "id": "agent_setup.capability_suggestions", "namespace": "agent_setup", "action": "capability_suggestions", "title": "Suggest setup capability grants", "description": "Return deterministic minimum capability suggestions from a stock template and current tenant grant availability. No model call and no authority mutation.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": false }, { "name": "setup_id", "flag": "setup-id", "type": "string", "required": false }], "hasComplexInput": false, "help": "Suggest deterministic minimum capability grants from the setup/template and current tenant grant availability. No model call and no mutation." },
   { "id": "agent_setup.get", "namespace": "agent_setup", "action": "get", "title": "Get agent setup", "description": "Read the resumable agent-setup state: mode, parent, steward, template, lane, schedule, tool decisions, dry run, and next action.", "requiredScope": "seat", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": false }, { "name": "setup_id", "flag": "setup-id", "type": "string", "required": false }], "hasComplexInput": false, "help": "Read the resumable setup state: mode, parent, steward, lane, schedule, tool decisions, dry-run blockers, and the next action." },
   { "id": "agent_setup.relane", "namespace": "agent_setup", "action": "relane", "title": "Re-lane a live agent", "description": "Governed re-lane of a live agent: pause, move to the new lane, force a fresh dry-run rehearsal on that lane, then go live. Owner-only and human-gated; records a rationale.", "requiredScope": "tenant_admin", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": true }, { "name": "lane", "flag": "lane", "type": "enum", "required": true, "enumValues": ["cloud", "mcp_session", "runner"] }, { "name": "reason", "flag": "reason", "type": "string", "required": true }], "hasComplexInput": false, "help": "Re-lane a live agent (cloud / runner / mcp_session): it pauses, moves to the new lane, forces a fresh dry-run rehearsal on that lane, then goes live \u2014 owner-only, human-gated, with a required rationale. A runner target needs a paired runner; a failed rehearsal leaves the agent paused on the new lane." },
   { "id": "agent_setup.start", "namespace": "agent_setup", "action": "start", "title": "Start agent setup", "description": "Start (or resume) a draft agent setup for a seat in template, custom, or existing mode.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": true }, { "name": "mode", "flag": "mode", "type": "enum", "required": true, "enumValues": ["template", "custom", "existing"] }, { "name": "template_slug", "flag": "template-slug", "type": "string", "required": false }], "hasComplexInput": false, "help": "Start a draft agent setup from a template, custom, or existing mode; the setup resumes from the draft agent and Charter, not a fresh start." },
   { "id": "agent_setup.update", "namespace": "agent_setup", "action": "update", "title": "Update agent setup", "description": "Update the draft agent's parent, steward, lane, schedule, operational answers, and tool decisions.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": true }, { "name": "parent_seat_id", "flag": "parent-seat-id", "type": "string", "required": false }, { "name": "steward_seat_id", "flag": "steward-seat-id", "type": "string", "required": false }, { "name": "lane", "flag": "lane", "type": "enum", "required": false, "enumValues": ["cloud", "mcp_session", "runner"] }, { "name": "schedule_cron", "flag": "schedule-cron", "type": "string", "required": false }, { "name": "answers", "flag": "answers", "type": "array", "required": false, "itemType": "string" }, { "name": "skill_discovery_enabled", "flag": "skill-discovery-enabled", "type": "boolean", "required": false }], "hasComplexInput": true, "help": "Update parent, steward, lane, schedule, answers, or tool decisions on the draft; steward and parent changes keep the no-orphan chain explicit." },
   { "id": "agent_template.list", "namespace": "agent_template", "action": "list", "title": "List agent templates", "description": "List stock agent templates and their responsibilities, default tools, and dry-run rehearsal.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [], "hasComplexInput": false, "help": "List stock agent templates and their default tools and safety boundaries before starting a template setup." },
+  { "id": "agent.activation_receipt", "namespace": "agent", "action": "activation_receipt", "title": "Build agent activation receipt", "description": "Read the compiled authority receipt for one agent: effective capabilities, connection metadata, stale-scope digest, budget, and always-human boundary.", "requiredScope": "seat", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "agent_id", "flag": "agent-id", "type": "string", "required": true }, { "name": "proposed_budget_cents", "flag": "proposed-budget-cents", "type": "integer", "required": false }], "hasComplexInput": false, "help": "Build the current compiled activation receipt before signing or creating a Trusted grant. Rebuild it after any Charter, capability, connection, schedule, or lane change." },
+  { "id": "agent.activation_sign", "namespace": "agent", "action": "activation_sign", "title": "Sign agent activation receipt", "description": "Human steward/admin activation sign-off for the current compiled receipt digest. Refuses stale receipts and records a human decision plus append-only event.", "requiredScope": "tenant", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "agent_id", "flag": "agent-id", "type": "string", "required": true }, { "name": "expected_scope_digest", "flag": "expected-scope-digest", "type": "string", "required": true }, { "name": "budget_cents", "flag": "budget-cents", "type": "integer", "required": true }, { "name": "reason", "flag": "reason", "type": "string", "required": false }], "hasComplexInput": false, "help": "Human steward/admin sign-off for the exact activation receipt digest. Agents can surface the pending confirmation but cannot sign their own authority." },
   { "id": "agent.configure_tools", "namespace": "agent", "action": "configure_tools", "title": "Configure agent tools", "description": "Save tool proposals, declines, and credential-ingress requests for a draft agent. Never stores or echoes secret material; vault refs only.", "requiredScope": "seat", "confirmation": "credential_flow", "exposeOverMcp": true, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": true }], "hasComplexInput": true, "help": "Connect or decline proposed tools and stage credential-ingress requests; never place raw secrets here \u2014 secrets flow through vault-backed credential.ingress as vault refs only.", "example": { "seat_id": "0190aaaa-aaaa-7aaa-8aaa-aaaaaaaaaaaa", "tool_decisions": [{ "tool": "ap.invoices.read", "decision": "connect" }, { "tool": "email.draft", "decision": "connect" }] } },
   { "id": "agent.create_custom", "namespace": "agent", "action": "create_custom", "title": "Create custom agent", "description": "Create a draft custom agent shell and a draft Charter seed from operational answers (what it owns, success, never-do-alone, steward).", "requiredScope": "tenant", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": true }, { "name": "steward_seat_id", "flag": "steward-seat-id", "type": "string", "required": false }, { "name": "lane", "flag": "lane", "type": "enum", "required": false, "enumValues": ["cloud", "mcp_session", "runner"] }, { "name": "what_it_owns", "flag": "what-it-owns", "type": "string", "required": false }, { "name": "what_success_looks_like", "flag": "what-success-looks-like", "type": "string", "required": false }, { "name": "what_it_must_never_do_alone", "flag": "what-it-must-never-do-alone", "type": "string", "required": false }], "hasComplexInput": true, "help": "Create a draft custom agent from operational answers (what it owns, success, never-do-alone, steward); the Charter Builder owns the contract and go-live stays human-gated.", "example": { "seat_id": "0190aaaa-aaaa-7aaa-8aaa-aaaaaaaaaaaa", "steward_seat_id": "0190bbbb-bbbb-7bbb-8bbb-bbbbbbbbbbbb", "lane": "cloud", "what_it_owns": "Drafting AP invoice entries from inbound vendor emails for human review.", "what_success_looks_like": "Every inbound invoice is drafted within one business day with the correct GL coding.", "what_it_must_never_do_alone": "Never send payment or approve an invoice without a human sign-off." } },
   { "id": "agent.create_from_template", "namespace": "agent", "action": "create_from_template", "title": "Create agent from template", "description": "Create a draft stock agent and draft Charter from a stock template. Creates the agent occupancy only when a human steward chain resolves; the agent stays draft until a signed manifest, a passed dry run, and human go-live.", "requiredScope": "tenant", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": true }, { "name": "template_slug", "flag": "template-slug", "type": "string", "required": true }, { "name": "expected_template_version", "flag": "expected-template-version", "type": "string", "required": false }], "hasComplexInput": false, "help": "Create a draft stock agent and draft Charter from a template; the agent occupancy is created only when a human steward chain resolves, and the agent stays draft until a signed manifest, a passed dry run, and human go-live." },
@@ -50348,6 +50776,11 @@ var COMMAND_MANIFEST = [
   { "id": "agent.run_now", "namespace": "agent", "action": "run_now", "title": "Run agent now", "description": "Queue and dispatch an immediate work order for a live cloud or runner agent on a seat.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": true }, { "name": "task_id", "flag": "task-id", "type": "string", "required": false }], "hasComplexInput": false, "help": "Queue and dispatch an immediate live agent run without changing the agent's saved schedule." },
   { "id": "agent.show_markdown", "namespace": "agent", "action": "show_markdown", "title": "Show agent setup as markdown", "description": "Compose a seat's agent setup, steward, model, tools, and Charter into a clean, human-skimmable markdown card for review.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": true }], "hasComplexInput": false, "help": "Render a seat's agent setup, model, steward, tools, and Charter as a clean markdown card to show your human a quick review." },
   { "id": "agent.status", "namespace": "agent", "action": "status", "title": "Get agent status", "description": "Return the agent occupancy, lane, schedule, live/offline state, steward chain, dry-run result, and Runner availability for a seat.", "requiredScope": "seat", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": true }], "hasComplexInput": false, "help": "Check an agent's lane, live state, steward chain, dry-run result, and Runner availability before relying on it." },
+  { "id": "agent.trust.create", "namespace": "agent", "action": "trust.create", "title": "Create agent Trusted grant", "description": "Create a bounded Trusted execution grant for a live agent after a human steward/admin signs the current activation receipt digest.", "requiredScope": "tenant", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "agent_id", "flag": "agent-id", "type": "string", "required": true }, { "name": "expected_scope_digest", "flag": "expected-scope-digest", "type": "string", "required": true }, { "name": "budget_cents", "flag": "budget-cents", "type": "integer", "required": true }, { "name": "expires_at", "flag": "expires-at", "type": "string", "required": false }, { "name": "reason", "flag": "reason", "type": "string", "required": false }], "hasComplexInput": false, "help": "Create a bounded Trusted execution grant only after reviewing the activation receipt digest, budget, and always-human boundary. Human steward/admin only." },
+  { "id": "agent.trust.expire", "namespace": "agent", "action": "trust.expire", "title": "Expire agent Trusted grants", "description": "Human steward/admin maintenance command that marks overdue active Trusted grants expired and appends an event for each expired grant.", "requiredScope": "tenant", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "agent_id", "flag": "agent-id", "type": "string", "required": true }], "hasComplexInput": false, "help": "Mark overdue active Trusted grants expired and append audit events. Human steward/admin only." },
+  { "id": "agent.trust.inspect", "namespace": "agent", "action": "trust.inspect", "title": "Inspect agent Trusted grants", "description": "Read active or historical Trusted execution grants for one agent. Returns metadata only, never secrets.", "requiredScope": "seat", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "agent_id", "flag": "agent-id", "type": "string", "required": true }, { "name": "include_inactive", "flag": "include-inactive", "type": "boolean", "required": false }], "hasComplexInput": false, "help": "Inspect active or historical Trusted grants for one agent. Metadata only; no secrets or vault refs." },
+  { "id": "agent.trust.revoke", "namespace": "agent", "action": "trust.revoke", "title": "Revoke agent Trusted grant", "description": "Human steward/admin revocation for an active Trusted execution grant. Preserves the historical grant row and appends an event.", "requiredScope": "tenant", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "grant_id", "flag": "grant-id", "type": "string", "required": true }, { "name": "reason", "flag": "reason", "type": "string", "required": false }], "hasComplexInput": false, "help": "Revoke an active Trusted grant while preserving history. Human steward/admin only." },
+  { "id": "agent.trust.supersede", "namespace": "agent", "action": "trust.supersede", "title": "Supersede agent Trusted grant", "description": "Human steward/admin replacement for an active Trusted grant. Refuses stale receipt digests and links the new grant to the superseded grant.", "requiredScope": "tenant", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "agent_id", "flag": "agent-id", "type": "string", "required": true }, { "name": "expected_scope_digest", "flag": "expected-scope-digest", "type": "string", "required": true }, { "name": "budget_cents", "flag": "budget-cents", "type": "integer", "required": true }, { "name": "expires_at", "flag": "expires-at", "type": "string", "required": false }, { "name": "reason", "flag": "reason", "type": "string", "required": false }], "hasComplexInput": false, "help": "Replace the active Trusted grant with a fresh digest and budget. Rebuild the receipt first; stale digests are refused." },
   { "id": "agent.update_schedule", "namespace": "agent", "action": "update_schedule", "title": "Update agent schedule", "description": "Set or clear the scheduled execution cron for a draft or live agent on a seat.", "requiredScope": "tenant", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": true }, { "name": "schedule_cron", "flag": "schedule-cron", "type": "string", "required": true }], "hasComplexInput": false, "help": "Set or clear an agent's scheduled execution; a live scheduled agent must keep a steward chain resolving to a human." },
   { "id": "aicos.brain_settings.get", "namespace": "aicos", "action": "brain_settings.get", "title": "Get AICOS brain settings", "description": "Read the AICOS run lane and brain selection. Returns labels and enum settings only; no secrets or vault refs.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [], "hasComplexInput": false, "help": "Read the AICOS lane and brain selection labels without returning provider keys, vault refs, or runner secrets." },
   { "id": "aicos.brain_settings.update", "namespace": "aicos", "action": "brain_settings.update", "title": "Update AICOS brain settings", "description": "Update the AICOS lane and cloud/runner brain preferences. Owner-only and audited.", "requiredScope": "tenant_admin", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "lane", "flag": "lane", "type": "enum", "required": false, "enumValues": ["cloud", "runner", "mcp"] }, { "name": "cloud_brain", "flag": "cloud-brain", "type": "enum", "required": false, "enumValues": ["managed", "byok"] }, { "name": "runner_brain", "flag": "runner-brain", "type": "enum", "required": false, "enumValues": ["claude-cli", "codex-cli"] }, { "name": "cloud_model_slug", "flag": "cloud-model-slug", "type": "string", "required": false }], "hasComplexInput": false, "help": "Owner-only update for AICOS cloud managed/BYOK and runner Claude/Codex preferences; BYOK requires an active tenant Anthropic key." },
@@ -50465,6 +50898,8 @@ var COMMAND_MANIFEST = [
   { "id": "settings.product_learning.update", "namespace": "settings", "action": "product_learning.update", "title": "Update product-learning policy", "description": "Set tenant product-learning participation. Disabled and enterprise-contract modes block generic product analytics writes, but not security/audit logs.", "requiredScope": "tenant_admin", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "mode", "flag": "mode", "type": "enum", "required": true, "enumValues": ["enabled", "disabled", "enterprise_contract"] }], "hasComplexInput": false, "help": "Set tenant product-learning mode to enabled, disabled, or enterprise_contract; the change is human-gated." },
   { "id": "settings.sync_brief_scope.get", "namespace": "settings", "action": "sync_brief_scope.get", "title": "Get Sync Brief scope", "description": "Read the tenant's Sync Brief scope: company_wide (one weekly brief) or per_cluster (one brief per cluster).", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [], "hasComplexInput": false, "help": "Read whether weekly Sync Briefs compile company-wide (one brief) or per cluster (one brief per cluster)." },
   { "id": "settings.sync_brief_scope.update", "namespace": "settings", "action": "sync_brief_scope.update", "title": "Update Sync Brief scope", "description": "Set the tenant's Sync Brief scope (company_wide or per_cluster). Per_cluster falls back to company-wide when the tenant has no clusters.", "requiredScope": "tenant_admin", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "sync_brief_scope", "flag": "sync-brief-scope", "type": "enum", "required": true, "enumValues": ["company_wide", "per_cluster"] }], "hasComplexInput": false, "help": "Set Sync Brief scope to company_wide or per_cluster; per_cluster falls back to company-wide when no clusters exist." },
+  { "id": "settings.tool_policy.get", "namespace": "settings", "action": "tool_policy.get", "title": "Get tenant tool policy", "description": "Read the tenant tool-policy settings that govern capability-grant defaults and the AICOS auto-trust posture. Returns metadata only.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [], "hasComplexInput": false, "help": "Read tenant capability-grant defaults and the AICOS auto-trust posture. No secrets." },
+  { "id": "settings.tool_policy.update", "namespace": "settings", "action": "tool_policy.update", "title": "Update tenant tool policy", "description": "Set the tenant tool-policy defaults for capability grants and the AICOS auto-trust posture. Owner/admin only and human-gated.", "requiredScope": "tenant_admin", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "mode", "flag": "mode", "type": "enum", "required": true, "enumValues": ["managed", "open"] }], "hasComplexInput": true, "help": "Update tenant capability-grant defaults and the AICOS auto-trust posture. Owner/admin only, human-gated, and event-audited." },
   { "id": "settings.update", "namespace": "settings", "action": "update", "title": "Update tenant settings", "description": "Update tenant AI budget caps (soft/hard, USD). Budget changes are dangerous and gated.", "requiredScope": "tenant", "confirmation": "dangerous", "exposeOverMcp": true, "fields": [{ "name": "soft_cap_usd", "flag": "soft-cap-usd", "type": "string", "required": false }, { "name": "hard_cap_usd", "flag": "hard-cap-usd", "type": "string", "required": false }], "hasComplexInput": false, "help": "Update tenant AI budget caps; budget changes are dangerous and require human confirmation." },
   { "id": "signal.bind", "namespace": "signal", "action": "bind", "title": "Bind a signal source (draft)", "description": "Persist a validated recipe + connection + cadence as an INERT draft binding for a measurable. Requires a valid preview_token from signal.preview of the same recipe. Never activates \u2014 a human signal.bind_confirm does that.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "measurable_id", "flag": "measurable-id", "type": "string", "required": true }, { "name": "integration_id", "flag": "integration-id", "type": "string", "required": true }, { "name": "cadence", "flag": "cadence", "type": "enum", "required": true, "enumValues": ["daily", "weekly", "monthly", "quarterly", "annual"] }, { "name": "host_allowlist", "flag": "host-allowlist", "type": "array", "required": true, "itemType": "string" }, { "name": "preview_token", "flag": "preview-token", "type": "string", "required": true }, { "name": "role", "flag": "role", "type": "enum", "required": false, "enumValues": ["informs", "drives_status"] }], "hasComplexInput": true, "help": "Persist a validated recipe as an inert draft binding; requires the preview_token from a preview of the same recipe." },
   { "id": "signal.bind_confirm", "namespace": "signal", "action": "bind_confirm", "title": "Confirm and activate a signal binding", "description": "Human-only activation of a draft signal binding (draft \u2192 active). Agents can never self-activate \u2014 an agent caller produces a pending confirmation. A drives_status binding requires a second-anchor confirmation. Once active, the scheduled pull auto-fills the measurable.", "requiredScope": "tenant", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "binding_id", "flag": "binding-id", "type": "string", "required": true }], "hasComplexInput": true, "help": "Human-only: activate a draft signal binding (draft -> active) so scheduled pulls begin; an agent that calls it produces a pending confirmation." },
@@ -50553,6 +50988,9 @@ var COMMAND_MANIFEST = [
   { "id": "tenant.create", "namespace": "tenant", "action": "create", "title": "Create additional company", "description": "Create a new clean company for an already-provisioned account after checking tenant.create.additional entitlement.", "requiredScope": "tenant_admin", "confirmation": "none", "exposeOverMcp": false, "fields": [{ "name": "company_name", "flag": "company-name", "type": "string", "required": true }], "hasComplexInput": false, "help": "Create an additional clean company from an existing company session. Requires tenant.create.additional entitlement; first-company bootstrap stays signup.provision_tenant." },
   { "id": "tenant.model_gateway_policy.update", "namespace": "tenant", "action": "model_gateway_policy.update", "title": "Update model gateway policy", "description": "Unlock or relock managed models that do not offer a zero-retention (ZDR) tier (ADR-0019). Locked (the conservative default) restricts the AI Gateway to zero-retention-eligible managed models. Owner-only and human-gated: unlocking is a deliberate ADR-0018 \xA76 standing authorization that lets managed brains without a zero-retention tier run. This provider retains data up to 30 days for abuse monitoring.", "requiredScope": "tenant_admin", "confirmation": "dangerous", "exposeOverMcp": true, "fields": [{ "name": "allow_non_zdr_models", "flag": "allow-non-zdr-models", "type": "boolean", "required": true }], "hasComplexInput": false, "help": "Unlock or relock managed models that do not offer a zero-retention (ZDR) tier (ADR-0019). Locked (default) restricts the AI Gateway to zero-retention-eligible managed models. Owner-only and human-gated; unlocking establishes an ADR-0018 \xA76 standing authorization and surfaces the per-model retention disclosure." },
   { "id": "tenant.rename", "namespace": "tenant", "action": "rename", "title": "Rename company", "description": "Rename the current tenant/company. The rename is human-gated and writes an audit event.", "requiredScope": "tenant_admin", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "company_name", "flag": "company-name", "type": "string", "required": true }], "hasComplexInput": false, "help": "Rename the current company; owner-only, human-gated, and audited as an event." },
+  { "id": "tool_grants.agent.effective", "namespace": "tool_grants", "action": "agent.effective", "title": "List agent effective capability grants", "description": "Read the effective capability grants for one agent, including the lower-of-ceiling-and-selection access level and compile status. Returns metadata only.", "requiredScope": "seat", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "agent_id", "flag": "agent-id", "type": "string", "required": true }], "hasComplexInput": false, "help": "Read one agent's effective capability grants after tenant ceilings, agent selections, and compile availability are applied." },
+  { "id": "tool_grants.agent.update", "namespace": "tool_grants", "action": "agent.update", "title": "Update agent capability grants", "description": "Compile a Charter supersession proposal for per-agent capability grant reductions or expansions. Human steward/admin only.", "requiredScope": "tenant", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "agent_id", "flag": "agent-id", "type": "string", "required": true }, { "name": "reason", "flag": "reason", "type": "string", "required": false }], "hasComplexInput": true, "help": "Compile a Charter supersession proposal for an agent capability grant reduction or expansion. Human steward/admin only." },
+  { "id": "tool_grants.tenant.list", "namespace": "tool_grants", "action": "tenant.list", "title": "List tenant capability grants", "description": "Read the tenant capability ceiling/default matrix with connection, availability, source, ceiling, and compile status. Returns metadata only.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [], "hasComplexInput": false, "help": "List tenant capability ceilings/defaults with connection, availability, source, and compile status. Read-only." },
   { "id": "tool.catalog", "namespace": "tool", "action": "catalog", "title": "List tool catalog", "description": "List the discoverable tool catalog the agent builder reads \u2014 tool id, title, provider, prescriptive description, default scope tiers, credential requirement, access policy, and execution-boundary guidance.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "provider", "flag": "provider", "type": "string", "required": false }], "hasComplexInput": false, "help": "List the tool catalog the builder reads \u2014 id, prescriptive description, scope tiers, credential requirement, access policy, and execution-boundary guidance." },
   { "id": "usage.report", "namespace": "usage", "action": "report", "title": "AI-workforce ROI report", "description": "Return the tenant's immutable per-period usage snapshots \u2014 agents ran, outputs, token/run cost, human-accepted value, exceptions, and approvals \u2014 for the AI-workforce ROI report.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "limit", "flag": "limit", "type": "integer", "required": false }], "hasComplexInput": false, "help": "Read the AI-workforce ROI report \u2014 per-period agents/outputs/token+run cost, human-accepted value, exceptions, and approvals \u2014 from immutable usage snapshots." },
   { "id": "usage.snapshot", "namespace": "usage", "action": "snapshot", "title": "Capture usage period snapshot", "description": "Freeze the current (or a given) period's usage and accepted-value totals into an immutable snapshot for the ROI report. Insert-only and idempotent \u2014 re-running a captured period changes nothing.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [], "hasComplexInput": true, "help": "Freeze the current period's usage and accepted-value totals into an immutable snapshot for the ROI report; insert-only and idempotent, so re-running a captured period changes nothing." },