@rosthq/cli 0.7.75 → 0.7.76

package/dist/index.js

@@ -42759,9 +42759,150 @@ var recommendationEventInputSchema = external_exports.object({
   occurred_at: external_exports.string().datetime({ offset: true }).optional()
 }).strict();
 
-// ../../packages/protocol/src/reads.ts
-var uuidSchema13 = external_exports.string().uuid();
+// ../../packages/protocol/src/artifacts.ts
 var isoDateTime3 = external_exports.string().datetime({ offset: true });
+var uuidSchema13 = external_exports.string().uuid();
+var dataClassificationSchema = external_exports.enum([
+  "customer_content",
+  "operational",
+  "sandbox_output"
+]);
+var retentionClassSchema = external_exports.enum([
+  "ephemeral_7d",
+  "standard_90d",
+  "durable_1y",
+  "legal_hold"
+]);
+var ARTIFACT_MAX_TITLE_CHARS = 200;
+var ARTIFACT_MAX_DISPLAY_LABEL_CHARS = 300;
+var ARTIFACT_MAX_EXTERNAL_REF_CHARS = 2048;
+var ARTIFACT_MAX_MIME_CHARS = 255;
+var ARTIFACT_MAX_STORAGE_PATH_CHARS = 1024;
+var ARTIFACT_MAX_STORAGE_BUCKET_CHARS = 128;
+var ARTIFACT_MAX_SNAPSHOT_BYTES = 8192;
+var artifactKindSchema = external_exports.enum(["binary", "pointer"]);
+var artifactPointerSystemSchema = external_exports.enum([
+  "gmail_draft",
+  "gmail_message",
+  "google_drive",
+  "google_doc",
+  "github_pr",
+  "github_issue",
+  "linear_issue",
+  "url",
+  "other"
+]);
+var artifactChecksumSchema = external_exports.string().regex(/^[a-f0-9]{64}$/, "checksum must be a lowercase sha256 hex digest");
+function isSafeArtifactStoragePath(value) {
+  if (value.includes("\\")) {
+    return false;
+  }
+  if (value.length === 0 || value.length > ARTIFACT_MAX_STORAGE_PATH_CHARS) {
+    return false;
+  }
+  if (value.startsWith("/") || value.startsWith("./") || value.startsWith("../")) {
+    return false;
+  }
+  if (value.includes("\0") || value.includes("//")) {
+    return false;
+  }
+  return value.split("/").every((segment) => segment.length > 0 && segment !== "." && segment !== "..");
+}
+var artifactStoragePathSchema = external_exports.string().min(1).max(ARTIFACT_MAX_STORAGE_PATH_CHARS).refine(isSafeArtifactStoragePath, "Artifact storage paths must be tenant-local relative paths without traversal segments");
+var artifactSnapshotSchema = external_exports.record(external_exports.string(), external_exports.unknown()).refine((value) => Buffer.byteLength(JSON.stringify(value), "utf8") <= ARTIFACT_MAX_SNAPSHOT_BYTES, "Artifact snapshot exceeds the bounded size limit").refine((value) => !hasSecretShapedContent(value), "Artifact snapshot must not contain secret-shaped content");
+var SECRET_URL_PARAM_NAME = /^(access[_-]?token|refresh[_-]?token|id[_-]?token|token|api[_-]?key|apikey|client[_-]?secret|secret|credential|password|passwd|pwd|auth|authorization|signature|sig|x-amz-signature|x-amz-credential|x-amz-security-token|sas|jwt|session|key)$/i;
+function isTokenizedUrl(value) {
+  let url2;
+  try {
+    url2 = new URL(value);
+  } catch {
+    return false;
+  }
+  if (url2.username !== "" || url2.password !== "") {
+    return true;
+  }
+  for (const [name, paramValue] of url2.searchParams) {
+    if (SECRET_URL_PARAM_NAME.test(name) || hasSecretShapedContent(paramValue)) {
+      return true;
+    }
+  }
+  return false;
+}
+var binaryArtifactCreateInputSchema = external_exports.object({
+  seat_id: uuidSchema13,
+  run_id: uuidSchema13.nullable().optional(),
+  title: external_exports.string().trim().min(1).max(ARTIFACT_MAX_TITLE_CHARS).nullable().optional(),
+  storage_bucket: external_exports.string().min(1).max(ARTIFACT_MAX_STORAGE_BUCKET_CHARS),
+  storage_path: artifactStoragePathSchema,
+  mime_type: external_exports.string().min(1).max(ARTIFACT_MAX_MIME_CHARS),
+  size_bytes: external_exports.number().int().nonnegative(),
+  checksum_sha256: artifactChecksumSchema,
+  supersedes_id: uuidSchema13.nullable().optional(),
+  data_classification: dataClassificationSchema.default("customer_content"),
+  retention_class: retentionClassSchema.default("standard_90d")
+}).strict();
+var pointerArtifactCreateInputSchema = external_exports.object({
+  seat_id: uuidSchema13,
+  run_id: uuidSchema13.nullable().optional(),
+  title: external_exports.string().trim().min(1).max(ARTIFACT_MAX_TITLE_CHARS).nullable().optional(),
+  pointer_system: artifactPointerSystemSchema,
+  external_ref: external_exports.string().trim().min(1).max(ARTIFACT_MAX_EXTERNAL_REF_CHARS).refine((value) => !isTokenizedUrl(value), "external_ref must be a stable reference, not a tokenized/credentialed URL"),
+  display_label: external_exports.string().trim().min(1).max(ARTIFACT_MAX_DISPLAY_LABEL_CHARS).nullable().optional(),
+  snapshot: artifactSnapshotSchema.default({}),
+  supersedes_id: uuidSchema13.nullable().optional(),
+  data_classification: dataClassificationSchema.default("operational"),
+  retention_class: retentionClassSchema.default("standard_90d")
+}).strict();
+var artifactSummarySchema = external_exports.object({
+  artifact_ref: external_exports.string().min(1),
+  artifact_id: uuidSchema13,
+  seat_id: uuidSchema13,
+  run_id: uuidSchema13.nullable(),
+  kind: artifactKindSchema,
+  title: external_exports.string().nullable(),
+  mime_type: external_exports.string().nullable(),
+  size_bytes: external_exports.number().int().nonnegative().nullable(),
+  checksum_sha256: external_exports.string().nullable(),
+  pointer_system: artifactPointerSystemSchema.nullable(),
+  external_ref: external_exports.string().nullable(),
+  display_label: external_exports.string().nullable(),
+  supersedes_id: uuidSchema13.nullable(),
+  data_classification: dataClassificationSchema,
+  retention_class: retentionClassSchema,
+  created_at: isoDateTime3,
+  updated_at: isoDateTime3
+}).strict();
+var artifactReadResultSchema = artifactSummarySchema.extend({
+  snapshot: external_exports.record(external_exports.string(), external_exports.unknown()),
+  signed_url: external_exports.string().nullable(),
+  signed_url_expires_at: isoDateTime3.nullable()
+}).strict();
+var artifactListOutputSchema = external_exports.object({
+  artifacts: external_exports.array(artifactSummarySchema)
+}).strict();
+var sessionTranscriptLaneSchema = external_exports.enum(["cloud", "runner"]);
+var sessionTranscriptFormatSchema = external_exports.enum(["jsonl", "text"]);
+var sessionTranscriptSummarySchema = external_exports.object({
+  transcript_id: uuidSchema13,
+  seat_id: uuidSchema13,
+  run_id: uuidSchema13.nullable(),
+  lane: sessionTranscriptLaneSchema,
+  format: sessionTranscriptFormatSchema,
+  message_count: external_exports.number().int().nonnegative().nullable(),
+  truncated: external_exports.boolean(),
+  char_count: external_exports.number().int().nonnegative(),
+  data_classification: dataClassificationSchema,
+  retention_class: retentionClassSchema,
+  created_at: isoDateTime3,
+  updated_at: isoDateTime3
+}).strict();
+var sessionTranscriptReadResultSchema = sessionTranscriptSummarySchema.extend({
+  transcript: external_exports.string()
+}).strict();
+
+// ../../packages/protocol/src/reads.ts
+var uuidSchema14 = external_exports.string().uuid();
+var isoDateTime4 = external_exports.string().datetime({ offset: true });
 var seatTypeSchema = external_exports.enum(["human", "agent", "hybrid"]);
 var seatStatusSchema = external_exports.enum(["draft", "active", "vacant", "decommissioned"]);
 var rollupStateSchema = external_exports.enum(["ok", "risk", "crit", "pending"]);
@@ -42775,13 +42916,13 @@ var credentialStatusSchema = external_exports.enum(["active", "revoked"]);
 var runStatusSchema = external_exports.enum(["running", "succeeded", "failed", "timeout", "cancelled"]);
 var graphGetInputSchema = external_exports.object({}).strict();
 var graphNodeSchema = external_exports.object({
-  seat_id: uuidSchema13,
+  seat_id: uuidSchema14,
   name: external_exports.string(),
   seat_type: seatTypeSchema,
   status: seatStatusSchema,
-  parent_seat_id: uuidSchema13.nullable(),
+  parent_seat_id: uuidSchema14.nullable(),
   is_root: external_exports.boolean(),
-  steward_seat_id: uuidSchema13.nullable(),
+  steward_seat_id: uuidSchema14.nullable(),
   occupant: external_exports.object({
     kind: external_exports.enum(["user", "agent"]),
     label: external_exports.string(),
@@ -42794,11 +42935,11 @@ var graphNodeSchema = external_exports.object({
   is_peer: external_exports.boolean()
 }).strict();
 var graphEdgeSchema = external_exports.object({
-  parent_seat_id: uuidSchema13,
-  child_seat_id: uuidSchema13
+  parent_seat_id: uuidSchema14,
+  child_seat_id: uuidSchema14
 }).strict();
 var graphGetOutputSchema = external_exports.object({
-  root_seat_id: uuidSchema13.nullable(),
+  root_seat_id: uuidSchema14.nullable(),
   nodes: external_exports.array(graphNodeSchema),
   edges: external_exports.array(graphEdgeSchema),
   status_rollups: external_exports.object({
@@ -42810,42 +42951,42 @@ var graphGetOutputSchema = external_exports.object({
   }).strict()
 }).strict();
 var seatGetInputSchema = external_exports.object({
-  seat_id: uuidSchema13
+  seat_id: uuidSchema14
 }).strict();
 var seatGetOutputSchema = external_exports.object({
-  seat_id: uuidSchema13,
+  seat_id: uuidSchema14,
   name: external_exports.string(),
   seat_type: seatTypeSchema,
   status: seatStatusSchema,
   purpose: external_exports.string().nullable(),
-  parent_seat_id: uuidSchema13.nullable(),
+  parent_seat_id: uuidSchema14.nullable(),
   steward_chain: external_exports.array(external_exports.object({
-    seat_id: uuidSchema13,
+    seat_id: uuidSchema14,
     name: external_exports.string()
   }).strict()),
   occupancies: external_exports.array(external_exports.object({
-    occupancy_id: uuidSchema13,
+    occupancy_id: uuidSchema14,
     occupant_type: external_exports.enum(["user", "agent"]),
     label: external_exports.string(),
-    started_at: isoDateTime3,
-    ended_at: isoDateTime3.nullable()
+    started_at: isoDateTime4,
+    ended_at: isoDateTime4.nullable()
   }).strict()),
-  active_charter_version_id: uuidSchema13.nullable(),
-  draft_charter_version_id: uuidSchema13.nullable(),
+  active_charter_version_id: uuidSchema14.nullable(),
+  draft_charter_version_id: uuidSchema14.nullable(),
   agent_status: agentStatusEnum2.nullable(),
   agent_lane: agentLaneSchema2.nullable(),
   mcp_tokens: external_exports.array(external_exports.object({
-    token_id: uuidSchema13,
+    token_id: uuidSchema14,
     scope: mcpScopeSchema,
-    created_at: isoDateTime3,
-    last_seen_at: isoDateTime3.nullable(),
+    created_at: isoDateTime4,
+    last_seen_at: isoDateTime4.nullable(),
     // DER-830: expires_at is NOT NULL; surface days-remaining alongside it.
-    expires_at: isoDateTime3,
+    expires_at: isoDateTime4,
     expires_in_days: external_exports.number().int(),
-    revoked_at: isoDateTime3.nullable()
+    revoked_at: isoDateTime4.nullable()
   }).strict()),
   credentials: external_exports.array(external_exports.object({
-    credential_id: uuidSchema13,
+    credential_id: uuidSchema14,
     provider: external_exports.string(),
     status: credentialStatusSchema
   }).strict()),
@@ -42857,30 +42998,30 @@ var seatGetOutputSchema = external_exports.object({
   }).strict()
 }).strict();
 var charterListInputSchema = external_exports.object({
-  seat_id: uuidSchema13.optional(),
+  seat_id: uuidSchema14.optional(),
   status: charterStatusSchema.optional()
 }).strict();
 var charterSummarySchema = external_exports.object({
-  charter_version_id: uuidSchema13,
-  seat_id: uuidSchema13,
+  charter_version_id: uuidSchema14,
+  seat_id: uuidSchema14,
   version: external_exports.number().int().nonnegative(),
   status: charterStatusSchema,
-  created_at: isoDateTime3,
-  approved_at: isoDateTime3.nullable()
+  created_at: isoDateTime4,
+  approved_at: isoDateTime4.nullable()
 }).strict();
 var charterListOutputSchema = external_exports.object({
   charters: external_exports.array(charterSummarySchema)
 }).strict();
 var charterGetInputSchema = external_exports.object({
-  charter_version_id: uuidSchema13
+  charter_version_id: uuidSchema14
 }).strict();
 var charterGetOutputSchema = external_exports.object({
-  charter_version_id: uuidSchema13,
-  seat_id: uuidSchema13,
+  charter_version_id: uuidSchema14,
+  seat_id: uuidSchema14,
   version: external_exports.number().int().nonnegative(),
   status: charterStatusSchema,
-  created_at: isoDateTime3,
-  approved_at: isoDateTime3.nullable(),
+  created_at: isoDateTime4,
+  approved_at: isoDateTime4.nullable(),
   doc: external_exports.unknown(),
   history: external_exports.array(charterSummarySchema),
   dry_run: external_exports.object({
@@ -42890,7 +43031,7 @@ var charterGetOutputSchema = external_exports.object({
 }).strict();
 var compassGetCurrentInputSchema = external_exports.object({}).strict();
 var compassVersionRefSchema = external_exports.object({
-  compass_version_id: uuidSchema13,
+  compass_version_id: uuidSchema14,
   version: external_exports.number().int().nonnegative(),
   status: compassStatusSchema,
   doc: external_exports.unknown()
@@ -42901,7 +43042,7 @@ var compassGetCurrentOutputSchema = external_exports.object({
   // Sources expose document id and kind only. The underlying storage_ref can
   // be a local file path, so it is never surfaced (redaction rule).
   sources: external_exports.array(external_exports.object({
-    document_id: uuidSchema13,
+    document_id: uuidSchema14,
     kind: external_exports.string()
   }).strict())
 }).strict();
@@ -42916,31 +43057,31 @@ var compassGapSchema = external_exports.object({
   answer: external_exports.string().nullable()
 }).strict();
 var compassListGapsOutputSchema = external_exports.object({
-  compass_version_id: uuidSchema13.nullable(),
+  compass_version_id: uuidSchema14.nullable(),
   unanswered: external_exports.array(compassGapSchema),
   answered: external_exports.array(compassGapSchema)
 }).strict();
 var agentStatusInputSchema = external_exports.object({
-  seat_id: uuidSchema13
+  seat_id: uuidSchema14
 }).strict();
 var agentStatusOutputSchema = external_exports.object({
-  seat_id: uuidSchema13,
+  seat_id: uuidSchema14,
   // DER-786 (C7): `has_agent` is true whenever a setup agent exists for the seat
   // — including a draft setup that has no occupancy yet — so it agrees with
   // agent_setup.get. `lifecycle` is the shared cross-surface term derived from
   // `status` (none | draft_setup | dry_run | live | …).
   has_agent: external_exports.boolean(),
   lifecycle: agentLifecycleSchema,
-  agent_id: uuidSchema13.nullable(),
+  agent_id: uuidSchema14.nullable(),
   kind: agentKindSchema2.nullable(),
   display_name: external_exports.string().nullable(),
   lane: agentLaneSchema2.nullable(),
   status: agentStatusEnum2.nullable(),
   schedule_cron: external_exports.string().nullable(),
   live: external_exports.boolean(),
-  charter_version_id: uuidSchema13.nullable(),
+  charter_version_id: uuidSchema14.nullable(),
   steward_chain: external_exports.array(external_exports.object({
-    seat_id: uuidSchema13,
+    seat_id: uuidSchema14,
     name: external_exports.string()
   }).strict()),
   steward_chain_resolves_to_human: external_exports.boolean(),
@@ -42952,13 +43093,13 @@ var agentStatusOutputSchema = external_exports.object({
 }).strict();
 var agentListFleetInputSchema = external_exports.object({}).strict();
 var fleetOverviewRowSchema = external_exports.object({
-  seat_id: uuidSchema13,
+  seat_id: uuidSchema14,
   seat_name: external_exports.string(),
   seat_path: external_exports.string(),
   lane: agentLaneSchema2.nullable(),
   agent_status: external_exports.enum(["draft", "dry_run", "live", "paused", "decommissioned", "vacant"]),
   live: external_exports.boolean(),
-  last_turn_at: isoDateTime3.nullable(),
+  last_turn_at: isoDateTime4.nullable(),
   turns_24h: external_exports.number().int().nonnegative(),
   turns_7d: external_exports.number().int().nonnegative(),
   top_measurable_status: external_exports.enum(["on", "off", "pending", "none"]),
@@ -42969,48 +43110,48 @@ var agentListFleetOutputSchema = external_exports.object({
   agents: external_exports.array(fleetOverviewRowSchema)
 }).strict();
 var runErrorLogSchema = external_exports.object({
-  error_log_id: uuidSchema13,
+  error_log_id: uuidSchema14,
   source: external_exports.enum(["run", "llm", "tool", "mcp", "runner", "integration", "job", "web"]),
   severity: external_exports.enum(["warning", "error", "critical"]),
   code: external_exports.string().nullable(),
   message: external_exports.string(),
-  created_at: isoDateTime3,
-  resolved_at: isoDateTime3.nullable()
+  created_at: isoDateTime4,
+  resolved_at: isoDateTime4.nullable()
 }).strict();
 var agentFleetDigestInputSchema = external_exports.object({
   window_hours: external_exports.number().int().min(1).max(168).default(24),
   error_limit: external_exports.number().int().min(1).max(100).default(50)
 }).strict();
 var fleetDigestRunSchema = external_exports.object({
-  run_id: uuidSchema13,
-  seat_id: uuidSchema13,
-  agent_id: uuidSchema13,
+  run_id: uuidSchema14,
+  seat_id: uuidSchema14,
+  agent_id: uuidSchema14,
   status: runStatusSchema,
   lane: agentLaneSchema2,
   model: external_exports.string(),
-  started_at: isoDateTime3,
-  finished_at: isoDateTime3.nullable(),
+  started_at: isoDateTime4,
+  finished_at: isoDateTime4.nullable(),
   cost_usd: external_exports.string(),
   error_logs: external_exports.array(runErrorLogSchema)
 }).strict();
 var fleetDigestErrorSchema = runErrorLogSchema.extend({
-  seat_id: uuidSchema13.nullable(),
-  agent_id: uuidSchema13.nullable(),
-  run_id: uuidSchema13.nullable(),
+  seat_id: uuidSchema14.nullable(),
+  agent_id: uuidSchema14.nullable(),
+  run_id: uuidSchema14.nullable(),
   disposition: external_exports.enum(["active", "acknowledged", "resolved", "superseded"])
 }).strict();
 var fleetDigestNotificationErrorSchema = external_exports.object({
-  notification_id: uuidSchema13,
+  notification_id: uuidSchema14,
   kind: external_exports.string(),
   channel: external_exports.string(),
   status: external_exports.string(),
   provider: external_exports.string(),
   error_message: external_exports.string().nullable(),
-  error_log_id: uuidSchema13.nullable(),
+  error_log_id: uuidSchema14.nullable(),
   source: external_exports.enum(["run", "llm", "tool", "mcp", "runner", "integration", "job", "web"]).nullable(),
-  seat_id: uuidSchema13.nullable(),
-  run_id: uuidSchema13.nullable(),
-  created_at: isoDateTime3
+  seat_id: uuidSchema14.nullable(),
+  run_id: uuidSchema14.nullable(),
+  created_at: isoDateTime4
 }).strict();
 var fleetDigestAgentSchema = fleetOverviewRowSchema.extend({
   failed_runs_24h: external_exports.number().int().nonnegative(),
@@ -43029,7 +43170,7 @@ var fleetDigestAgentSchema = fleetOverviewRowSchema.extend({
   suggested_next_action: external_exports.string()
 }).strict();
 var agentFleetDigestOutputSchema = external_exports.object({
-  generated_at: isoDateTime3,
+  generated_at: isoDateTime4,
   window_hours: external_exports.number().int().min(1).max(168),
   summary: external_exports.object({
     fleet_count: external_exports.number().int().nonnegative(),
@@ -43055,26 +43196,30 @@ var seatTrustSummarySchema = external_exports.object({
   tool_call_count: external_exports.number().int().nonnegative(),
   // The hero metric: actions held this period because they exceeded the charter.
   denied_tool_call_count: external_exports.number().int().nonnegative(),
-  last_activity_at: isoDateTime3.nullable()
+  last_activity_at: isoDateTime4.nullable()
 }).strict();
 var agentListRunsInputSchema = external_exports.object({
-  seat_id: uuidSchema13,
+  seat_id: uuidSchema14,
   // Conservative, bounded page size; the timeline is a recent-history view.
   limit: external_exports.number().int().min(1).max(200).default(50)
 }).strict();
 var agentGetRunInputSchema = external_exports.object({
-  seat_id: uuidSchema13,
-  run_id: uuidSchema13
+  seat_id: uuidSchema14,
+  run_id: uuidSchema14,
+  // DER-1661: opt in to the persisted session transcript (`--transcript`). Off by
+  // default so the diagnostic read stays lean; the (potentially large) transcript body
+  // loads only when asked.
+  transcript: external_exports.boolean().default(false)
 }).strict();
 var seatRunSchema = external_exports.object({
-  run_id: uuidSchema13,
-  agent_id: uuidSchema13,
+  run_id: uuidSchema14,
+  agent_id: uuidSchema14,
   agent_display_name: external_exports.string().nullable(),
   status: runStatusSchema,
   lane: agentLaneSchema2,
   model: external_exports.string(),
-  started_at: isoDateTime3,
-  finished_at: isoDateTime3.nullable(),
+  started_at: isoDateTime4,
+  finished_at: isoDateTime4.nullable(),
   cost_usd: external_exports.string(),
   tool_call_count: external_exports.number().int().nonnegative(),
   denied_tool_call_count: external_exports.number().int().nonnegative(),
@@ -43084,16 +43229,16 @@ var seatRunErrorLogSchema = runErrorLogSchema.extend({
   error_class: external_exports.string().nullable()
 }).strict();
 var seatRunDetailSchema = seatRunSchema.extend({
-  task_id: uuidSchema13.nullable(),
-  work_order_id: uuidSchema13.nullable(),
+  task_id: uuidSchema14.nullable(),
+  work_order_id: uuidSchema14.nullable(),
   transcript_ref: external_exports.string(),
   input_tokens: external_exports.number().int().nonnegative(),
   output_tokens: external_exports.number().int().nonnegative(),
   outcome: external_exports.record(external_exports.string(), external_exports.unknown()),
   error_logs: external_exports.array(seatRunErrorLogSchema),
   skill_activations: external_exports.array(external_exports.object({
-    skill_activation_id: uuidSchema13,
-    skill_version_id: uuidSchema13,
+    skill_activation_id: uuidSchema14,
+    skill_version_id: uuidSchema14,
     slug: external_exports.string().min(1),
     name: external_exports.string().min(1),
     version: external_exports.number().int().positive(),
@@ -43103,36 +43248,39 @@ var seatRunDetailSchema = seatRunSchema.extend({
       content_sha256: external_exports.string().regex(/^[a-f0-9]{64}$/),
       size_bytes: external_exports.number().int().nonnegative()
     }).strict()),
-    created_at: isoDateTime3
-  }).strict())
+    created_at: isoDateTime4
+  }).strict()),
+  // DER-1661/DER-1753: the persisted session transcript, present only when the read
+  // asked for it (`transcript: true`) — null when requested but none was persisted.
+  transcript: sessionTranscriptReadResultSchema.nullable().optional()
 }).strict();
 var agentListRunsOutputSchema = external_exports.object({
-  seat_id: uuidSchema13,
+  seat_id: uuidSchema14,
   summary: seatTrustSummarySchema,
   runs: external_exports.array(seatRunSchema)
 }).strict();
 var agentGetRunOutputSchema = external_exports.object({
-  seat_id: uuidSchema13,
+  seat_id: uuidSchema14,
   run: seatRunDetailSchema
 }).strict();
 var agentListToolCallsInputSchema = external_exports.object({
-  seat_id: uuidSchema13,
+  seat_id: uuidSchema14,
   limit: external_exports.number().int().min(1).max(200).default(50),
   // When true, return only HELD (non-allowed) tool calls — the governance view.
   held_only: external_exports.boolean().default(false)
 }).strict();
 var seatToolCallSchema = external_exports.object({
-  tool_call_id: uuidSchema13,
-  run_id: uuidSchema13.nullable(),
+  tool_call_id: uuidSchema14,
+  run_id: uuidSchema14.nullable(),
   tool_name: external_exports.string(),
   guard_result: guardResultSchema,
   manifest_clause: external_exports.string().nullable(),
   outcome: external_exports.string(),
-  started_at: isoDateTime3,
-  finished_at: isoDateTime3.nullable()
+  started_at: isoDateTime4,
+  finished_at: isoDateTime4.nullable()
 }).strict();
 var agentListToolCallsOutputSchema = external_exports.object({
-  seat_id: uuidSchema13,
+  seat_id: uuidSchema14,
   summary: seatTrustSummarySchema,
   tool_calls: external_exports.array(seatToolCallSchema)
 }).strict();
@@ -43143,21 +43291,21 @@ var deliverableLinkSchema = external_exports.object({
   kind: external_exports.enum(["internal", "linear", "github", "external"])
 }).strict();
 var deliverableIdSchema = external_exports.union([
-  uuidSchema13,
+  uuidSchema14,
   external_exports.string().regex(/^run:[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i)
 ]);
 var deliverableRowSchema = external_exports.object({
   id: deliverableIdSchema,
-  seat_id: uuidSchema13,
-  agent_id: uuidSchema13.nullable(),
-  run_id: uuidSchema13.nullable(),
-  task_id: uuidSchema13.nullable(),
-  work_order_id: uuidSchema13.nullable(),
+  seat_id: uuidSchema14,
+  agent_id: uuidSchema14.nullable(),
+  run_id: uuidSchema14.nullable(),
+  task_id: uuidSchema14.nullable(),
+  work_order_id: uuidSchema14.nullable(),
   kind: deliverableKindSchema,
   title: external_exports.string(),
   summary: external_exports.string().nullable(),
   content: external_exports.string().nullable(),
-  delivered_at: isoDateTime3,
+  delivered_at: isoDateTime4,
   source_run_status: external_exports.string().nullable(),
   source_run_model: external_exports.string().nullable(),
   source_run_log_ref: external_exports.string().nullable(),
@@ -43165,13 +43313,13 @@ var deliverableRowSchema = external_exports.object({
   links: external_exports.array(deliverableLinkSchema)
 }).strict();
 var deliverableListInputSchema = external_exports.object({
-  seat_id: uuidSchema13
+  seat_id: uuidSchema14
 }).strict();
 var deliverableListOutputSchema = external_exports.object({
   deliverables: external_exports.array(deliverableRowSchema)
 }).strict();
 var deliverableGetInputSchema = external_exports.object({
-  seat_id: uuidSchema13,
+  seat_id: uuidSchema14,
   deliverable_id: deliverableIdSchema
 }).strict();
 var deliverableGetOutputSchema = external_exports.object({
@@ -43179,86 +43327,86 @@ var deliverableGetOutputSchema = external_exports.object({
 }).strict();
 var mcpTokenListInputSchema = external_exports.object({
   include_revoked: external_exports.boolean().default(false),
-  seat_id: uuidSchema13.optional()
+  seat_id: uuidSchema14.optional()
 }).strict();
 var mcpTokenMetadataSchema = external_exports.object({
-  token_id: uuidSchema13,
+  token_id: uuidSchema14,
   scope: mcpScopeSchema,
-  seat_id: uuidSchema13.nullable(),
-  created_at: isoDateTime3,
-  last_seen_at: isoDateTime3.nullable(),
+  seat_id: uuidSchema14.nullable(),
+  created_at: isoDateTime4,
+  last_seen_at: isoDateTime4.nullable(),
   // DER-830: expires_at is now always present (the column is NOT NULL).
-  expires_at: isoDateTime3,
+  expires_at: isoDateTime4,
   // DER-830: whole days remaining until expiry, computed server-side. Negative
   // when the token is already expired (so the CLI can render "expired").
   expires_in_days: external_exports.number().int(),
-  revoked_at: isoDateTime3.nullable()
+  revoked_at: isoDateTime4.nullable()
 }).strict();
 var mcpTokenListOutputSchema = external_exports.object({
   tokens: external_exports.array(mcpTokenMetadataSchema)
 }).strict();
 var errorLogListInputSchema = external_exports.object({
-  seat_id: uuidSchema13.optional(),
+  seat_id: uuidSchema14.optional(),
   source: external_exports.enum(["run", "llm", "tool", "mcp", "runner", "integration", "job", "web"]).optional(),
   severity: external_exports.enum(["warning", "error", "critical"]).optional(),
   resolved: external_exports.enum(["active", "acknowledged", "resolved", "all"]).default("active"),
   limit: external_exports.number().int().min(1).max(200).default(50)
 }).strict();
 var errorLogListItemSchema = external_exports.object({
-  error_log_id: uuidSchema13,
+  error_log_id: uuidSchema14,
   source: external_exports.enum(["run", "llm", "tool", "mcp", "runner", "integration", "job", "web"]),
   severity: external_exports.enum(["warning", "error", "critical"]),
   code: external_exports.string().nullable(),
   message: external_exports.string(),
-  seat_id: uuidSchema13.nullable(),
-  agent_id: uuidSchema13.nullable(),
-  run_id: uuidSchema13.nullable(),
+  seat_id: uuidSchema14.nullable(),
+  agent_id: uuidSchema14.nullable(),
+  run_id: uuidSchema14.nullable(),
   disposition: external_exports.enum(["active", "acknowledged", "resolved", "superseded"]),
-  resolved_at: isoDateTime3.nullable(),
-  resolved_by: uuidSchema13.nullable(),
+  resolved_at: isoDateTime4.nullable(),
+  resolved_by: uuidSchema14.nullable(),
   resolution_reason: external_exports.string().nullable(),
-  linked_task_id: uuidSchema13.nullable(),
-  linked_issue_id: uuidSchema13.nullable(),
+  linked_task_id: uuidSchema14.nullable(),
+  linked_issue_id: uuidSchema14.nullable(),
   linked_pr_ref: external_exports.string().nullable(),
-  superseded_by_id: uuidSchema13.nullable(),
-  created_at: isoDateTime3
+  superseded_by_id: uuidSchema14.nullable(),
+  created_at: isoDateTime4
 }).strict();
 var errorLogListOutputSchema = external_exports.object({
   errors: external_exports.array(errorLogListItemSchema),
   total: external_exports.number().int().nonnegative()
 }).strict();
 var errorLogResolveInputSchema = external_exports.object({
-  error_log_id: uuidSchema13,
+  error_log_id: uuidSchema14,
   reason: external_exports.string().trim().min(1),
   disposition: external_exports.enum(["acknowledged", "resolved"]).default("acknowledged"),
-  linked_task_id: uuidSchema13.optional(),
-  linked_issue_id: uuidSchema13.optional(),
+  linked_task_id: uuidSchema14.optional(),
+  linked_issue_id: uuidSchema14.optional(),
   linked_pr_ref: external_exports.string().trim().min(1).optional()
 }).strict();
 var errorLogResolveOutputSchema = external_exports.object({
-  error_log_id: uuidSchema13,
+  error_log_id: uuidSchema14,
   disposition: external_exports.enum(["acknowledged", "resolved"]),
-  resolved_at: isoDateTime3
+  resolved_at: isoDateTime4
 }).strict();
 var errorLogSupersedeInputSchema = external_exports.object({
-  error_log_id: uuidSchema13,
-  new_error_log_id: uuidSchema13,
+  error_log_id: uuidSchema14,
+  new_error_log_id: uuidSchema14,
   reason: external_exports.string().trim().min(1),
-  linked_task_id: uuidSchema13.optional(),
-  linked_issue_id: uuidSchema13.optional(),
+  linked_task_id: uuidSchema14.optional(),
+  linked_issue_id: uuidSchema14.optional(),
   linked_pr_ref: external_exports.string().trim().min(1).optional()
 }).strict();
 var errorLogSupersedeOutputSchema = external_exports.object({
-  error_log_id: uuidSchema13,
-  superseded_by_id: uuidSchema13,
+  error_log_id: uuidSchema14,
+  superseded_by_id: uuidSchema14,
   disposition: external_exports.literal("superseded"),
-  resolved_at: isoDateTime3
+  resolved_at: isoDateTime4
 }).strict();
 
 // ../../packages/protocol/src/working-files.ts
 var WORKING_FILE_MAX_PATH_CHARS = 512;
 var WORKING_FILE_MAX_CONTENT_CHARS = 16384;
-var isoDateTime4 = external_exports.string().datetime({ offset: true });
+var isoDateTime5 = external_exports.string().datetime({ offset: true });
 var workingFileContentTypeSchema = external_exports.enum([
   "text/plain",
   "text/markdown",
@@ -43337,10 +43485,10 @@ var workingFileSummarySchema = external_exports.object({
   content_type: workingFileContentTypeSchema,
   content_chars: external_exports.number().int().nonnegative(),
   published_ref: external_exports.string().min(1).nullable(),
-  published_at: isoDateTime4.nullable(),
-  expires_at: isoDateTime4,
-  created_at: isoDateTime4,
-  updated_at: isoDateTime4
+  published_at: isoDateTime5.nullable(),
+  expires_at: isoDateTime5,
+  created_at: isoDateTime5,
+  updated_at: isoDateTime5
 }).strict();
 var workingFileReadResultSchema = workingFileSummarySchema.extend({
   content: external_exports.string(),
@@ -43357,7 +43505,7 @@ var runSummaryOutputSchema = external_exports.object({
 
 // ../../packages/protocol/src/runner-settings.ts
 var uuid8 = external_exports.string().uuid();
-var isoDateTime5 = external_exports.string().datetime({ offset: true });
+var isoDateTime6 = external_exports.string().datetime({ offset: true });
 var runnerHealthSchema = external_exports.enum(["online", "stale", "offline", "revoked", "unpaired"]);
 var runnerExecutionStateSchema = external_exports.enum([
   "ready",
@@ -43377,8 +43525,8 @@ var runnerExecutionReadinessSchema = external_exports.object({
   due_queued_work_orders: external_exports.number().int().nonnegative(),
   claimed_work_orders: external_exports.number().int().nonnegative(),
   running_work_orders: external_exports.number().int().nonnegative(),
-  recent_completed_at: isoDateTime5.nullable(),
-  recent_failed_at: isoDateTime5.nullable()
+  recent_completed_at: isoDateTime6.nullable(),
+  recent_failed_at: isoDateTime6.nullable()
 }).strict();
 var runnerSandboxPostureSchema = external_exports.enum(["guard", "strict", "off", "none", "unknown"]);
 var runnerPostureSchema = external_exports.object({
@@ -43395,10 +43543,10 @@ var runnerSummarySchema = external_exports.object({
   cli_version: external_exports.string().nullable(),
   posture: runnerPostureSchema,
   execution: runnerExecutionReadinessSchema,
-  paired_at: isoDateTime5.nullable(),
-  last_heartbeat_at: isoDateTime5.nullable(),
-  revoked_at: isoDateTime5.nullable(),
-  created_at: isoDateTime5
+  paired_at: isoDateTime6.nullable(),
+  last_heartbeat_at: isoDateTime6.nullable(),
+  revoked_at: isoDateTime6.nullable(),
+  created_at: isoDateTime6
 }).strict();
 var runnerListInputSchema = external_exports.object({
   include_revoked: external_exports.boolean().optional()
@@ -43417,7 +43565,7 @@ var runnerPairingStartOutputSchema = external_exports.object({
   pairing_session_id: uuid8,
   user_code: external_exports.string(),
   verification_uri: external_exports.string(),
-  expires_at: isoDateTime5,
+  expires_at: isoDateTime6,
   expires_in: external_exports.number().int().nonnegative()
 }).strict();
 var runnerRevokeInputSchema = external_exports.object({
@@ -43435,9 +43583,9 @@ var workOrderSummarySchema = external_exports.object({
   lane: external_exports.enum(["cloud", "runner"]),
   status: workOrderStatusSchema,
   claimed_by_runner_id: uuid8.nullable(),
-  scheduled_for: isoDateTime5,
-  grace_deadline: isoDateTime5,
-  created_at: isoDateTime5
+  scheduled_for: isoDateTime6,
+  grace_deadline: isoDateTime6,
+  created_at: isoDateTime6
 }).strict();
 var workOrderListInputSchema = external_exports.object({
   status: workOrderStatusSchema.optional(),
@@ -43450,7 +43598,7 @@ var workOrderListOutputSchema = external_exports.object({
 }).strict();
 var workOrderEnqueueInputSchema = external_exports.object({
   agent_id: uuid8,
-  scheduled_for: isoDateTime5.optional(),
+  scheduled_for: isoDateTime6.optional(),
   task_id: uuid8.optional()
 }).strict();
 var agentRunNowInputSchema = external_exports.object({
@@ -43477,8 +43625,8 @@ var runnerDiagnoseOutputSchema = external_exports.object({
   platform: external_exports.string(),
   health: runnerHealthSchema,
   capabilities: runnerCapabilityDetailSchema,
-  last_heartbeat_at: isoDateTime5.nullable(),
-  paired_at: isoDateTime5.nullable(),
+  last_heartbeat_at: isoDateTime6.nullable(),
+  paired_at: isoDateTime6.nullable(),
   revocation_state: external_exports.enum(["active", "revoked", "unpaired"]),
   repair_guidance: external_exports.array(external_exports.object({
     action: external_exports.string(),
@@ -43539,7 +43687,7 @@ var notificationErrorSummarySchema = external_exports.object({
   source: external_exports.enum(["run", "llm", "tool", "mcp", "runner", "integration", "job", "web"]).nullable(),
   seat_id: uuid8.nullable(),
   run_id: uuid8.nullable(),
-  created_at: isoDateTime5
+  created_at: isoDateTime6
 }).strict();
 var notificationListErrorsOutputSchema = external_exports.object({
   errors: external_exports.array(notificationErrorSummarySchema)
@@ -43656,7 +43804,7 @@ var integrationSummarySchema = external_exports.object({
   id: uuid8,
   provider: external_exports.string(),
   status: external_exports.enum(["connected", "error", "disconnected"]),
-  last_synced_at: isoDateTime5.nullable()
+  last_synced_at: isoDateTime6.nullable()
 }).strict();
 var settingsGetInputSchema = external_exports.object({}).strict();
 var settingsGetOutputSchema = external_exports.object({
@@ -43691,13 +43839,13 @@ var tenantRenameOutputSchema = external_exports.object({
 }).strict();
 
 // ../../packages/protocol/src/system-health.ts
-var uuidSchema14 = external_exports.string().uuid();
-var isoDateTime6 = external_exports.string().datetime({ offset: true });
+var uuidSchema15 = external_exports.string().uuid();
+var isoDateTime7 = external_exports.string().datetime({ offset: true });
 var systemHealthCallerKindSchema = external_exports.enum(["tenant_admin", "member", "seat_token"]);
 var systemHealthCallerSchema = external_exports.object({
   kind: systemHealthCallerKindSchema,
-  seat_id: uuidSchema14.optional(),
-  seat_ids: external_exports.array(uuidSchema14).min(1).optional()
+  seat_id: uuidSchema15.optional(),
+  seat_ids: external_exports.array(uuidSchema15).min(1).optional()
 }).strict();
 var systemHealthVerdictSchema = external_exports.enum(["healthy", "degraded", "blocked"]);
 var systemHealthSeveritySchema = external_exports.enum(["info", "warning", "critical"]);
@@ -43735,18 +43883,18 @@ var systemHealthFindingSchema = external_exports.object({
   summary: external_exports.string().min(1),
   detail: external_exports.string().min(1),
   remediation: systemHealthActionSchema,
-  seat_id: uuidSchema14.nullable(),
-  goal_id: uuidSchema14.nullable(),
-  run_id: uuidSchema14.nullable(),
-  issue_id: uuidSchema14.nullable(),
-  task_id: uuidSchema14.nullable(),
-  error_log_id: uuidSchema14.nullable()
+  seat_id: uuidSchema15.nullable(),
+  goal_id: uuidSchema15.nullable(),
+  run_id: uuidSchema15.nullable(),
+  issue_id: uuidSchema15.nullable(),
+  task_id: uuidSchema15.nullable(),
+  error_log_id: uuidSchema15.nullable()
 }).strict();
 var systemHealthScopeSchema = external_exports.object({
   mode: systemHealthScopeModeSchema,
-  root_seat_ids: external_exports.array(uuidSchema14),
-  included_seat_ids: external_exports.array(uuidSchema14),
-  requested_seat_id: uuidSchema14.nullable(),
+  root_seat_ids: external_exports.array(uuidSchema15),
+  included_seat_ids: external_exports.array(uuidSchema15),
+  requested_seat_id: uuidSchema15.nullable(),
   total_seat_count: external_exports.number().int().nonnegative()
 }).strict();
 var systemHealthFleetSectionSchema = external_exports.object({
@@ -43782,7 +43930,7 @@ var systemHealthConnectivitySectionSchema = external_exports.object({
   failed_notification_count: external_exports.number().int().nonnegative()
 }).strict();
 var systemHealthSyncSectionSchema = external_exports.object({
-  latest_brief_at: isoDateTime6.nullable(),
+  latest_brief_at: isoDateTime7.nullable(),
   missing_latest_brief: external_exports.boolean(),
   flagged_gap_count: external_exports.number().int().nonnegative()
 }).strict();
@@ -43796,13 +43944,13 @@ var systemHealthSectionsSchema = external_exports.object({
   sync: systemHealthSyncSectionSchema
 }).strict();
 var systemHealthInputSchema = external_exports.object({
-  seat_id: uuidSchema14.optional()
+  seat_id: uuidSchema15.optional()
 }).strict();
 var systemHealthCheckInputSchema = systemHealthInputSchema.extend({
   caller: systemHealthCallerSchema
 }).strict();
 var systemHealthOutputSchema = external_exports.object({
-  generated_at: isoDateTime6,
+  generated_at: isoDateTime7,
   scope: systemHealthScopeSchema,
   verdict: systemHealthVerdictSchema,
   top_actions: external_exports.array(systemHealthActionSchema),
@@ -43984,10 +44132,10 @@ var baserowFilteredCountInputSchema = external_exports.object({
 }).strict();
 
 // ../../packages/protocol/src/signal-report.ts
-var uuidSchema15 = external_exports.string().uuid();
+var uuidSchema16 = external_exports.string().uuid();
 var dateOnlySchema2 = external_exports.string().regex(/^\d{4}-\d{2}-\d{2}$/, "expected YYYY-MM-DD");
 var signalReportInputSchema = external_exports.object({
-  measurable_id: uuidSchema15,
+  measurable_id: uuidSchema16,
   value: external_exports.number().finite(),
   // Optional; defaults to the measurable's current period (resolved in the
   // command against the measurable's own cadence via the canonical bounds).
@@ -43998,8 +44146,8 @@ var signalReportInputSchema = external_exports.object({
   confidence: external_exports.enum(["low", "medium", "high"]).optional()
 }).strict();
 var signalReportOutputSchema = external_exports.object({
-  reading_id: uuidSchema15,
-  measurable_id: uuidSchema15,
+  reading_id: uuidSchema16,
+  measurable_id: uuidSchema16,
   // Always false: an agent-sourced reading is a draft until a human confirms it.
   confirmed: external_exports.literal(false)
 }).strict();
@@ -45270,7 +45418,7 @@ var softwareFactoryBudgetExhaustedEventSchema = external_exports.object({
 }).strict();
 
 // ../../packages/protocol/src/sync-brief.ts
-var uuidSchema16 = external_exports.string().uuid();
+var uuidSchema17 = external_exports.string().uuid();
 var dateSchema = external_exports.string().regex(/^\d{4}-\d{2}-\d{2}$/);
 var syncBriefGapSchema = external_exports.object({
   section: external_exports.enum(["exceptions", "goal_deltas", "task_review", "friction", "agent_activity"]),
@@ -45283,8 +45431,8 @@ var sectionSchema = (itemSchema) => external_exports.object({
   flagged_gaps: external_exports.array(syncBriefGapSchema)
 }).strict();
 var syncBriefExceptionSchema = external_exports.object({
-  measurable_id: uuidSchema16,
-  seat_id: uuidSchema16,
+  measurable_id: uuidSchema17,
+  seat_id: uuidSchema17,
   seat_name: external_exports.string().min(1),
   name: external_exports.string().min(1),
   state: external_exports.enum(["risk", "crit", "pending"]),
@@ -45295,8 +45443,8 @@ var syncBriefExceptionSchema = external_exports.object({
   freshness: external_exports.enum(["fresh", "due", "stale", "awaiting_first_reading", "not_expected"]).optional()
 }).strict();
 var syncBriefGoalDeltaSchema = external_exports.object({
-  goal_id: uuidSchema16,
-  seat_id: uuidSchema16.nullable(),
+  goal_id: uuidSchema17,
+  seat_id: uuidSchema17.nullable(),
   seat_name: external_exports.string().nullable(),
   title: external_exports.string().min(1),
   status: external_exports.enum(["on", "off", "done", "dropped"]),
@@ -45310,22 +45458,22 @@ var syncBriefTaskReviewSchema = external_exports.object({
   previous_done_rate: external_exports.number().min(0).max(1),
   delta: external_exports.number().min(-1).max(1),
   stalled: external_exports.array(external_exports.object({
-    task_id: uuidSchema16,
-    owner_seat_id: uuidSchema16,
+    task_id: uuidSchema17,
+    owner_seat_id: uuidSchema17,
     owner_seat_name: external_exports.string().min(1),
     title: external_exports.string().min(1),
     due_on: dateSchema,
     stalled_at: external_exports.string().nullable()
   }).strict()),
   overdue_by_owner: external_exports.array(external_exports.object({
-    owner_seat_id: uuidSchema16,
+    owner_seat_id: uuidSchema17,
     owner_seat_name: external_exports.string().min(1),
     overdue_count: external_exports.number().int().nonnegative()
   }).strict())
 }).strict();
 var syncBriefIssueSchema = external_exports.object({
-  issue_id: uuidSchema16,
-  raised_by_seat_id: uuidSchema16,
+  issue_id: uuidSchema17,
+  raised_by_seat_id: uuidSchema17,
   raised_by_seat_name: external_exports.string().min(1),
   summary: external_exports.string().min(1),
   severity: external_exports.enum(["low", "med", "high", "critical"]),
@@ -45342,16 +45490,16 @@ var syncBriefActionItemTrendSchema = external_exports.object({
   has_prior: external_exports.boolean()
 }).strict();
 var syncBriefCascadeAtRiskSchema = external_exports.object({
-  goal_id: uuidSchema16,
+  goal_id: uuidSchema17,
   title: external_exports.string().min(1),
-  seat_id: uuidSchema16.nullable(),
+  seat_id: uuidSchema17.nullable(),
   progress_pct: external_exports.number().int().min(0).max(100),
   classification: external_exports.enum(["at_risk", "projected_miss"]),
   behind_days: external_exports.number().nullable()
 }).strict();
 var syncBriefAgentActivitySchema = external_exports.object({
-  agent_id: uuidSchema16,
-  seat_id: uuidSchema16,
+  agent_id: uuidSchema17,
+  seat_id: uuidSchema17,
   seat_name: external_exports.string().min(1),
   run_count: external_exports.number().int().nonnegative(),
   failed_run_count: external_exports.number().int().nonnegative(),
@@ -45363,11 +45511,11 @@ var syncBriefAgentActivitySchema = external_exports.object({
 var syncBriefSchema = external_exports.object({
   schema_version: external_exports.literal(1),
   tenant: external_exports.object({
-    id: uuidSchema16,
+    id: uuidSchema17,
     name: external_exports.string().min(1)
   }).strict(),
   cluster: external_exports.object({
-    id: uuidSchema16,
+    id: uuidSchema17,
     name: external_exports.string().min(1)
   }).strict().nullable(),
   period: external_exports.object({
@@ -45405,16 +45553,16 @@ var syncBriefSchema = external_exports.object({
 }).strict();
 
 // ../../packages/protocol/src/usage.ts
-var isoDateTime7 = external_exports.string().datetime({ offset: true });
+var isoDateTime8 = external_exports.string().datetime({ offset: true });
 var periodKeySchema = external_exports.string().regex(/^\d{4}-\d{2}-\d{2}$/);
 var countSchema = external_exports.number().int().nonnegative();
 var usdSchema = external_exports.string();
 var bigCountSchema = external_exports.string();
 var usagePeriodSchema = external_exports.object({
   period: periodKeySchema,
-  period_start: isoDateTime7,
-  period_end: isoDateTime7,
-  captured_at: isoDateTime7,
+  period_start: isoDateTime8,
+  period_end: isoDateTime8,
+  captured_at: isoDateTime8,
   run_count: countSchema,
   agent_count: countSchema,
   succeeded_run_count: countSchema,
@@ -45466,7 +45614,7 @@ var usageSnapshotInputSchema = external_exports.object({
   // current month. Normalized to the first of that month server-side.
   period: external_exports.union([
     external_exports.string().regex(/^\d{4}-\d{2}-\d{2}$/),
-    isoDateTime7
+    isoDateTime8
   ]).optional()
 }).strict();
 var usageSnapshotOutputSchema = external_exports.object({
@@ -45478,11 +45626,11 @@ var usageSnapshotOutputSchema = external_exports.object({
 }).strict();
 
 // ../../packages/protocol/src/event-payloads.ts
-var uuidSchema17 = external_exports.string().uuid();
+var uuidSchema18 = external_exports.string().uuid();
 var evidenceSchema = external_exports.array(external_exports.unknown());
 var statusEventPayloadSchema = external_exports.object({
   measurables: external_exports.array(external_exports.object({
-    id: uuidSchema17,
+    id: uuidSchema18,
     value: external_exports.number().finite(),
     // DER-1045: an optional, non-secret citation for an agent-proposed reading
     // (signal.report) — where the number came from + the agent's confidence.
@@ -45511,7 +45659,7 @@ var statusEventPayloadSchema = external_exports.object({
     }).strict().optional()
   }).strict()).optional(),
   goals: external_exports.array(external_exports.object({
-    id: uuidSchema17,
+    id: uuidSchema18,
     state: external_exports.enum(["on", "off"]),
     note: external_exports.string().min(1).optional()
   }).strict()).optional()
@@ -45524,8 +45672,8 @@ var escalationEventPayloadSchema = external_exports.object({
 }).strict();
 var issueEventPayloadSchema = external_exports.object({
   summary: external_exports.string().min(1),
-  blocking_goal_id: uuidSchema17.optional(),
-  broken_measurable_id: uuidSchema17.optional(),
+  blocking_goal_id: uuidSchema18.optional(),
+  broken_measurable_id: uuidSchema18.optional(),
   evidence: evidenceSchema,
   severity: external_exports.enum(["low", "med", "high", "critical"])
 }).strict();
@@ -45538,14 +45686,14 @@ var heldToolActionReplaySchema = external_exports.object({
 }).strict();
 
 // ../../packages/protocol/src/operating.ts
-var uuidSchema18 = external_exports.string().uuid();
+var uuidSchema19 = external_exports.string().uuid();
 var taskListInputSchema = external_exports.object({}).strict();
 var operatingTaskSchema = external_exports.object({
-  id: uuidSchema18,
+  id: uuidSchema19,
   title: external_exports.string(),
   description: external_exports.string().nullable(),
-  from_seat_id: uuidSchema18.nullable(),
-  goal_id: uuidSchema18.nullable(),
+  from_seat_id: uuidSchema19.nullable(),
+  goal_id: uuidSchema19.nullable(),
   acceptance_criteria: external_exports.unknown(),
   due_on: external_exports.string().nullable(),
   status: external_exports.string()
@@ -45554,48 +45702,48 @@ var taskListOutputSchema = external_exports.object({
   tasks: external_exports.array(operatingTaskSchema)
 }).strict();
 var taskAcceptInputSchema = external_exports.object({
-  id: uuidSchema18
+  id: uuidSchema19
 }).strict();
 var taskMutationOutputSchema = external_exports.object({
   task: external_exports.object({
-    id: uuidSchema18,
+    id: uuidSchema19,
     status: external_exports.string()
   }).strict()
 }).strict();
 var taskDeclineInputSchema = external_exports.object({
-  id: uuidSchema18,
+  id: uuidSchema19,
   reason: external_exports.string().min(1)
 }).strict();
 var taskDeclineOutputSchema = external_exports.object({
   task: external_exports.object({
-    id: uuidSchema18,
+    id: uuidSchema19,
     status: external_exports.string(),
     decline_reason: external_exports.string()
   }).strict()
 }).strict();
 var taskCompleteInputSchema = external_exports.object({
-  id: uuidSchema18,
+  id: uuidSchema19,
   summary: external_exports.string().min(1),
   artifacts: external_exports.unknown().optional()
 }).strict();
 var taskCompleteOutputSchema = external_exports.object({
-  task_id: uuidSchema18,
-  event_id: uuidSchema18,
+  task_id: uuidSchema19,
+  event_id: uuidSchema19,
   type: external_exports.literal("handoff")
 }).strict();
 var statusRecordOutputSchema = external_exports.object({
-  event_id: uuidSchema18,
+  event_id: uuidSchema19,
   type: external_exports.literal("status")
 }).strict();
 var duplicateFrictionCandidateSchema = external_exports.object({
-  issue_id: uuidSchema18,
+  issue_id: uuidSchema19,
   summary: external_exports.string().min(1),
   // pg_trgm similarity in [0, 1]; higher is more similar.
   similarity: external_exports.number().min(0).max(1)
 }).strict();
 var frictionFileIssueOutputSchema = external_exports.object({
-  event_id: uuidSchema18,
-  issue_id: uuidSchema18,
+  event_id: uuidSchema19,
+  issue_id: uuidSchema19,
   type: external_exports.literal("issue"),
   // DER-1522: likely-duplicate candidates detected before creation. Recommend,
   // never block — filing always proceeds; empty when nothing crossed the
@@ -45606,12 +45754,12 @@ var workLogInputSchema = external_exports.object({
   note: external_exports.string().min(1)
 }).strict();
 var workLogOutputSchema = external_exports.object({
-  event_id: uuidSchema18,
+  event_id: uuidSchema19,
   type: external_exports.literal("task")
 }).strict();
 var escalationRaiseOutputSchema = external_exports.object({
-  event_id: uuidSchema18,
-  escalation_id: uuidSchema18,
+  event_id: uuidSchema19,
+  escalation_id: uuidSchema19,
   type: external_exports.literal("escalation")
 }).strict();
 var deliverableKindSchema2 = external_exports.enum(["brief", "work_evidence", "artifact", "report", "other"]);
@@ -45659,7 +45807,7 @@ var deliverableAcceptOutputSchema = external_exports.object({
 }).strict();
 
 // ../../packages/protocol/src/steward.ts
-var uuidSchema19 = external_exports.string().uuid();
+var uuidSchema20 = external_exports.string().uuid();
 var escalationStatusSchema = external_exports.enum([
   "open",
   "approved",
@@ -45667,21 +45815,21 @@ var escalationStatusSchema = external_exports.enum([
   "converted_to_issue"
 ]);
 var stewardEscalationSchema = external_exports.object({
-  id: uuidSchema19,
-  seat_id: uuidSchema19,
+  id: uuidSchema20,
+  seat_id: uuidSchema20,
   seat_name: external_exports.string(),
   seat_type: external_exports.enum(["human", "agent", "hybrid"]),
-  steward_seat_id: uuidSchema19,
+  steward_seat_id: uuidSchema20,
   steward_seat_name: external_exports.string(),
   reason: external_exports.string(),
   charter_clause: external_exports.string(),
   recommended_action: external_exports.string().nullable(),
   status: escalationStatusSchema,
-  decided_by: uuidSchema19.nullable(),
+  decided_by: uuidSchema20.nullable(),
   decided_by_name: external_exports.string().nullable(),
   decided_at: external_exports.string().nullable(),
   decision_note: external_exports.string().nullable(),
-  issue_id: uuidSchema19.nullable(),
+  issue_id: uuidSchema20.nullable(),
   created_at: external_exports.string(),
   updated_at: external_exports.string()
 }).strict();
@@ -45692,27 +45840,27 @@ var escalationListOutputSchema = external_exports.object({
   escalations: external_exports.array(stewardEscalationSchema)
 }).strict();
 var escalationGetInputSchema = external_exports.object({
-  id: uuidSchema19
+  id: uuidSchema20
 }).strict();
 var escalationGetOutputSchema = external_exports.object({
   escalation: stewardEscalationSchema
 }).strict();
 var escalationResolveActionSchema = external_exports.enum(["approve", "convert_to_issue"]);
 var escalationResolveInputSchema = external_exports.object({
-  id: uuidSchema19,
+  id: uuidSchema20,
   action: escalationResolveActionSchema.optional(),
   rationale: external_exports.string().trim().min(1).optional()
 }).strict();
 var escalationRejectInputSchema = external_exports.object({
-  id: uuidSchema19,
+  id: uuidSchema20,
   rationale: external_exports.string().trim().min(1).optional()
 }).strict();
 var escalationDecisionOutputSchema = external_exports.object({
-  escalation_id: uuidSchema19,
+  escalation_id: uuidSchema20,
   status: escalationStatusSchema,
-  decision_id: uuidSchema19,
-  decided_by: uuidSchema19,
-  issue_id: uuidSchema19.nullable(),
+  decision_id: uuidSchema20,
+  decided_by: uuidSchema20,
+  issue_id: uuidSchema20.nullable(),
   // DER-1478: true when the resolved escalation carries a durable replay_action
   // (an approval-gated connector write) that the approvals path should actuate
   // after this decision is recorded. Omitted (not false) for non-connector
@@ -45734,7 +45882,7 @@ var eventTypes = [
   "task"
 ];
 var publicMessageTypes = ["status", "handoff", "escalation", "issue"];
-var uuidSchema20 = external_exports.string().uuid();
+var uuidSchema21 = external_exports.string().uuid();
 var evidenceSchema2 = external_exports.array(external_exports.unknown());
 var internalEventPayloadSchema = external_exports.record(external_exports.string(), external_exports.unknown()).refine((payload) => !Array.isArray(payload), "Internal event payload must be an object");
 var handoffEventPayloadSchema = external_exports.object({
@@ -45744,24 +45892,24 @@ var handoffEventPayloadSchema = external_exports.object({
     acceptance_criteria: external_exports.array(external_exports.string().min(1)),
     due: external_exports.string().datetime({ offset: true })
   }).strict(),
-  to_seat_id: uuidSchema20
+  to_seat_id: uuidSchema21
 }).strict();
 var intakeEventPayloadSchema = external_exports.discriminatedUnion("action", [
   external_exports.object({
     action: external_exports.literal("uploaded"),
-    document_id: uuidSchema20,
+    document_id: uuidSchema21,
     storage_ref: external_exports.string().min(1)
   }).strict(),
   external_exports.object({
     action: external_exports.literal("parsed"),
-    document_id: uuidSchema20,
+    document_id: uuidSchema21,
     mode: external_exports.enum(["source_tree", "function_first"]),
     seat_count: external_exports.number().int().nonnegative(),
     edge_count: external_exports.number().int().nonnegative()
   }).strict(),
   external_exports.object({
     action: external_exports.literal("failed"),
-    document_id: uuidSchema20,
+    document_id: uuidSchema21,
     reason: external_exports.string().min(1)
   }).strict(),
   external_exports.object({
@@ -45867,9 +46015,9 @@ var publicMessageTypeSchema = external_exports.enum(publicMessageTypes);
 var eventEnvelopeBaseSchema = external_exports.object({
   protocol: external_exports.literal(EVENT_PROTOCOL),
   type: eventTypeSchema,
-  seat_id: uuidSchema20.nullable(),
+  seat_id: uuidSchema21.nullable(),
   occurred_at: external_exports.string().datetime({ offset: true }),
-  goal_ancestry: external_exports.array(uuidSchema20)
+  goal_ancestry: external_exports.array(uuidSchema21)
 }).strict();
 var statusEventEnvelopeSchema = eventEnvelopeBaseSchema.extend({
   type: external_exports.literal("status"),
@@ -46143,7 +46291,7 @@ The Compass is drafted, then activated by a human through supersession.
     order: 15,
     title: "AICOS chat guide",
     summary: "How the AI Chief of Staff chat works in the authenticated app shell and what it can safely do today.",
-    version: "2026-07-11.1",
+    version: "2026-07-13.1",
     public: true,
     audiences: ["human", "in_app_agent"],
     stages: ["company_setup", "operating_rhythm"],
@@ -46206,6 +46354,8 @@ The repair action ensures the same structure new companies receive: a Founder/CE
 
 Settings is the infrastructure surface for AICOS. Use it to confirm foundation status, inspect the current lane, see whether a seat-scoped MCP token exists, and choose **Cloud**, **Runner**, or **MCP** when the server-side readiness checks allow it. The AICOS seat has its own operations panel instead of the normal **Staff this seat** setup tabs, because AICOS is the company's governed AI Chief of Staff foundation rather than a generic agent to restaff from stock, custom design, or runner pairing controls. Use that panel to reach AICOS Settings, its Charter, runner readiness, MCP token management, and Trust Card run evidence.
 
+The same Settings area shows AICOS authority and launch recovery in customer language. AICOS starts with connected company capabilities at maximum available access and Trusted posture, but tenant dial-backs and always-human boundaries remain authoritative. Launch-credit status shows 50%, 80%, and exhaustion posture plus Billing and BYOK recovery links; BYOK reduces managed inference cost only and does not replace the required subscription after launch access ends.
+
 ## What context AICOS receives
 
 Each turn carries server-normalized page context: route template, current path, safe search state, selected seat or object ids when authorized, onboarding state when relevant, and the current tenant clock. AICOS treats the supplied clock as authoritative for today's date and time instead of guessing from model priors. The server derives tenant and user authority from the authenticated session. Client-supplied tenant context is never accepted as authority.
@@ -46295,7 +46445,7 @@ Treat AICOS as a coordinator over the operating system. It can become more usefu
     order: 20,
     title: "Responsibility Graph playbook",
     summary: "How to build a functions-first graph with seats, owners, Stewards, vacancies, and clean authority.",
-    version: "2026-07-10.6",
+    version: "2026-07-13.2",
     public: true,
     audiences: ["human", "cli", "mcp", "in_app_agent"],
     stages: ["graph_design", "staffing"],
@@ -46378,7 +46528,7 @@ A staffed non-AICOS agent's seat page uses one profile shell with eight URL-addr
 
 The **Charter** tab renders the accepted Charter as a document \u2014 purpose, responsibilities, decision authority \u2014 with its version chip and signer, plus a structured edit drawer for quick purpose/responsibilities/decision-authority changes. The drawer prefills from the active Charter (or an open amendment draft, if one exists) and stages the edited slice through the same audited commands as any other Charter change; sensitive fields (permission manifest, budget, measurables, escalation rules) never round-trip through the client, and a save fails closed with an explicit conflict message if the Charter changed underneath the drawer since it opened. An **Amend** action stays next to the drawer for changes it does not cover, opening the same draft-and-confirm flow as the Charter Builder.
 
-An owner or Steward manages the agent's capabilities in context from the **Tools & connections** and **Skills** tabs, no separate editor page. On **Skills**, assign or revoke a Skill directly; each change stages a confirmation envelope for the human to approve in \`/approvals\` \u2014 never a silent write. On **Tools & connections**, granted tools are read-only on this page; a change routes to the governed Charter re-sign flow (tool grants live in the signed, active Charter, so they change by supersession, never in place), and a missing provider links straight to Settings connections with a return link back to this tab. Viewers without manage authority see the same tabs with an explanation instead of controls; every write still re-asserts seat authority server-side regardless of what the client shows.
+An owner or Steward manages the agent's capabilities in context from the **Tools & connections** and **Skills** tabs, no separate editor page. On **Skills**, assign or revoke a Skill directly; each change stages a confirmation envelope for the human to approve in \`/approvals\` \u2014 never a silent write. On **Tools & connections**, capability setup uses the production access language: **Off**, **Read**, and **Read & act**. Deterministic suggestions from the template or Charter are labelled, unavailable provider scopes are disabled instead of hidden, and human overrides stay visible until saved. Saving a capability change stages the governed \`tool_grants.agent.update\` path; selection alone never grants a tool call. The activation review then builds one receipt from the current scope digest, budget, lane, cadence, capabilities, and always-human boundaries. Signing Ask-first or creating a bounded Trusted grant uses that digest, so widening scopes or changing budget requires rebuilding and re-signing. A missing provider links straight to Settings connections with a return link back to this tab. Viewers without manage authority see the same tabs with an explanation instead of controls; every write still re-asserts seat authority server-side regardless of what the client shows.
 
 Agent creation at \`/agents/new\` begins with four doors: **Describe the job** opens the existing in-app builder, **Start from a template** opens the stock-template picker, **Build manually** opens the custom setup path, and **Import** opens an in-app format explainer. Definition-file import is roadmap-only and never opens a bare file picker; operators can instead continue to the existing-agent pairing flow. Setup is the detail page filling in: creating a seat from any door hands off to that agent's detail page in draft mode (\`/seats/{seatId}\`) \u2014 there is no separate wizard shell or tab vocabulary. Draft mode renders the exact same eight tabs the live seat uses; **Overview** and **Activity** stay locked until the first run has something to show, and the other six own the editable draft (Charter, Tools & connections, Skills, Autonomy, Outcomes & Signals, Settings). The shared **GateRail** review rail (sign manifest \u2192 sandbox dry run \u2192 go-live) and the server's \`next_action\` stay the sole lifecycle truth throughout, unaffected by which door you entered through. The door only changes how the one canonical form gets filled in: manual is the blank form, template pre-populates it, chat opens an AICOS setup assistant beside the form that proposes typed field changes grouped by section for review before anything durable saves, and import maps a definition file into the same fields and reports what did not map \u2014 never credentials. Existing \`?mode=template|custom|existing\` links open the matching door, and a \`?seat=\` resume link redirects straight to the draft detail page.
 
@@ -46532,7 +46682,7 @@ Drafting can be assisted by agents. Activation is a human decision. When authori
     order: 40,
     title: "Agent staffing playbook",
     summary: "How to decide whether a seat should be human, agent, or hybrid, and how to go live safely.",
-    version: "2026-07-05.1",
+    version: "2026-07-13.1",
     public: true,
     audiences: ["human", "cli", "mcp", "in_app_agent"],
     stages: ["staffing"],
@@ -46591,7 +46741,7 @@ Two creation paths, both draft-first. Read the stock-agents guide for templates
 - Custom: \`agent_setup.start\` / \`rost_start_agent_setup\` (returns a \`setup_id\`), iterate with \`agent_setup.get\` and \`agent_setup.update\`, then \`agent.create_custom\` / \`rost_create_custom_agent\`. Stage tools with \`agent.configure_tools\` (vault refs only) and sandbox with \`agent.run_dry_run\`.
 - Inspect runtime: \`agent.status\` / \`rost_get_agent_status\` with \`{"seat_id":"<seat-id>"}\` returns lane, live state, steward chain, dry-run result, and Runner availability.
 - Run on demand: \`{{cli}} agent run-now --seat-id <seat-id>\` / \`agent.run_now\` / \`rost_run_agent_now\` queues an immediate live run without changing the saved schedule. Cloud agents dispatch to the Inngest executor; runner agents queue work for the paired runner. The command is ungated but still requires a live staffed agent and the normal server-side tool guard.
-- Audit what an agent did (Trust Card): \`{{cli}} command agent.list_runs --json '{"seat_id":"<seat-id>"}'\` / \`rost_list_agent_runs\` returns the seat's run history with per-run Skill activation counts plus tool-call and guard-held counts; \`{{cli}} agent get-run --seat-id <seat-id> --run-id <run-id>\` / \`agent.get_run\` / \`rost_get_agent_run_diagnostics\` reads one run's transcript reference, token/cost usage, outcome, product-visible run errors, and any Skill versions/files loaded for that run. Loaded Skill file hashes and sizes identify the immutable source package; the runtime may still bound or truncate prompt text before sending it to the model. \`{{cli}} command agent.list_tool_calls --json '{"seat_id":"<seat-id>"}'\` / \`rost_list_agent_tool_calls\` returns the tool-call ledger with each call's guard result. Both list commands include a \`denied_tool_call_count\` rollup \u2014 the actions held because they exceeded the charter. Pass \`{"seat_id":"<seat-id>","held_only":true}\` to \`agent.list_tool_calls\` for only the held calls. The web seat page shows the same facts as a Trust Card.
+- Audit what an agent did (Trust Card): \`{{cli}} command agent.list_runs --json '{"seat_id":"<seat-id>"}'\` / \`rost_list_agent_runs\` returns the seat's run history with per-run Skill activation counts plus tool-call and guard-held counts; \`{{cli}} agent get-run --seat-id <seat-id> --run-id <run-id>\` / \`agent.get_run\` / \`rost_get_agent_run_diagnostics\` reads one run's transcript reference, token/cost usage, outcome, product-visible run errors, and any Skill versions/files loaded for that run. Pass \`--transcript\` (\`{"transcript":true}\`) to also return the persisted, secret-scrubbed session transcript for that run when one exists \u2014 cloud-lane and runner turns persist a bounded transcript at turn end. Final run outcomes are no longer chopped to a short summary; the full report survives. Loaded Skill file hashes and sizes identify the immutable source package; the runtime may still bound or truncate prompt text before sending it to the model. \`{{cli}} command agent.list_tool_calls --json '{"seat_id":"<seat-id>"}'\` / \`rost_list_agent_tool_calls\` returns the tool-call ledger with each call's guard result. Both list commands include a \`denied_tool_call_count\` rollup \u2014 the actions held because they exceeded the charter. Pass \`{"seat_id":"<seat-id>","held_only":true}\` to \`agent.list_tool_calls\` for only the held calls. The web seat page shows the same facts as a Trust Card.
 
 ## Review readiness before go-live
 
@@ -48819,7 +48969,7 @@ Stop before: approving a Charter, signing a manifest, connecting a tool or crede
     order: 71,
     title: "Billing and pricing guide",
     summary: "How {{brand}} packages company-wide access, Stripe billing, and governed-agent usage without per-human-seat pricing.",
-    version: "2026-07-13.1",
+    version: "2026-07-13.2",
     public: true,
     audiences: ["human", "cli", "mcp", "in_app_agent"],
     stages: ["company_setup", "staffing", "operating_rhythm"],
@@ -48877,7 +49027,7 @@ Billable true-up is service-owned and runs after a period is closed. The tenant-
 
 ## Launch credits and recovery access
 
-Eligible launch tenants can receive one configured launch credit for {{brand}}-managed variable costs. Managed LLM, Exa, browser, and sandbox costs are estimated before the provider call, reserved atomically against the active launch credit, and then settled to actual usage or released if the call does not complete. BYOK model calls do not draw down launch credit, but they still keep their ordinary audit and usage records.
+Eligible launch tenants can receive one configured launch credit for {{brand}}-managed variable costs. Managed LLM, Exa, browser, and sandbox costs are estimated before the provider call, reserved atomically against the active launch credit, and then settled to actual usage or released if the call does not complete. BYOK model calls do not draw down launch credit, but they still keep their ordinary audit and usage records. Settings surfaces 50%, 80%, and exhaustion posture so a tenant can choose subscription recovery, BYOK cost reduction, export, cancel, or delete before operations pause.
 
 Launch-credit notifications are informational and idempotent: owners may see threshold, exhaustion, or expiry notices with recovery actions when the remaining credit drops or the credit approaches its expiry window.
 
@@ -49237,7 +49387,7 @@ The runner should not store raw credentials in local notes, prompts, or logs. It
     order: 76,
     title: "Stock agents guide",
     summary: "How to use stock agent templates as starting points while preserving seat-specific Charters and human approval.",
-    version: "2026-07-04.1",
+    version: "2026-07-13.5",
     public: true,
     audiences: ["human", "cli", "mcp", "in_app_agent"],
     stages: ["staffing"],
@@ -49264,7 +49414,7 @@ Before dry run, review the template's responsibilities, tool assumptions, escala
 
 ## Template catalog
 
-Eight stock templates ship today. Every one is draft-first, escalates the actions in its safety boundaries, and keeps spend, external sends, and credential scope human-owned until a Steward sets a threshold. Read the live list with \`agent_template.list\` / \`rost_list_agent_templates\` or the \`rost://agents/templates\` resource.
+Nine stock templates ship today. Every one is draft-first, escalates the actions in its safety boundaries, and keeps spend, external sends, and credential scope human-owned until a Steward sets a threshold. Read the live list with \`agent_template.list\` / \`rost_list_agent_templates\` or the \`rost://agents/templates\` resource.
 
 ### AP Clerk \u2014 \`stock/ap-clerk\`
 
@@ -49273,6 +49423,13 @@ Eight stock templates ship today. Every one is draft-first, escalates the action
 - Default tools: Accounting bills read/write drafts; AP inbox read/draft.
 - Safety boundary: vendor bank changes, payment release, disputed or duplicate invoices, and unclear approval chains escalate before action.
 
+### Vendor Follow-up Coordinator \u2014 \`stock/vendor-follow-up-coordinator\`
+
+- Function: Finance. Tier: \`1 \xB7 Launch\`.
+- Responsibilities: Work the approved vendor follow-up queue on weekdays; Draft and send the routine follow-up message; Update the approved Sheet range and escalate any drift.
+- Default tools: Gmail read/draft/send; Sheets read/write approved range.
+- Safety boundary: new or changed recipients, attachments, nonroutine copy, out-of-range Sheet writes, and revoked authority escalate; only the approved weekday follow-up contract may run.
+
 ### AR & Collections Clerk \u2014 \`stock/ar-collections-clerk\`
 
 - Function: Finance. Tier: \`1 \xB7 Launch\`.
@@ -51054,7 +51211,7 @@ var COMMAND_MANIFEST = [
   { "id": "agent.create_from_template", "namespace": "agent", "action": "create_from_template", "title": "Create agent from template", "description": "Create a draft stock agent and draft Charter from a stock template. Creates the agent occupancy only when a human steward chain resolves; the agent stays draft until a signed manifest, a passed dry run, and human go-live.", "requiredScope": "tenant", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": true }, { "name": "template_slug", "flag": "template-slug", "type": "string", "required": true }, { "name": "expected_template_version", "flag": "expected-template-version", "type": "string", "required": false }], "hasComplexInput": false, "help": "Create a draft stock agent and draft Charter from a template; the agent occupancy is created only when a human steward chain resolves, and the agent stays draft until a signed manifest, a passed dry run, and human go-live." },
   { "id": "agent.decommission", "namespace": "agent", "action": "decommission", "title": "Decommission agent", "description": "Retire an agent occupancy safely. Blocks if it would leave another live agent without a human steward chain.", "requiredScope": "tenant", "confirmation": "dangerous", "exposeOverMcp": true, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": true }, { "name": "reason", "flag": "reason", "type": "string", "required": false }], "hasComplexInput": false, "help": "Retire an agent occupancy safely; the no-orphan guard blocks any decommission that would leave another live agent without a human steward chain." },
   { "id": "agent.fleet_digest", "namespace": "agent", "action": "fleet_digest", "title": "Get dogfood fleet health digest", "description": "Return a daily tenant fleet health digest with live/idle state, run counts, spend, failed runs, unresolved product errors, notification errors, and next actions.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "window_hours", "flag": "window-hours", "type": "integer", "required": false }, { "name": "error_limit", "flag": "error-limit", "type": "integer", "required": false }], "hasComplexInput": false, "help": "Capture a daily dogfood fleet health digest with fleet state, run counts, spend, failed runs, unresolved errors, failed notifications, and next actions." },
-  { "id": "agent.get_run", "namespace": "agent", "action": "get_run", "title": "Get agent run diagnostics", "description": "Return one seat run's diagnostic record: run status, transcript reference, token/cost usage, outcome, and linked product-visible run errors.", "requiredScope": "seat", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": true }, { "name": "run_id", "flag": "run-id", "type": "string", "required": true }], "hasComplexInput": false, "help": "Read one run's diagnostic record, transcript reference, token/cost usage, outcome, and linked product-visible errors." },
+  { "id": "agent.get_run", "namespace": "agent", "action": "get_run", "title": "Get agent run diagnostics", "description": "Return one seat run's diagnostic record: run status, transcript reference, token/cost usage, outcome, and linked product-visible run errors.", "requiredScope": "seat", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": true }, { "name": "run_id", "flag": "run-id", "type": "string", "required": true }, { "name": "transcript", "flag": "transcript", "type": "boolean", "required": false }], "hasComplexInput": false, "help": "Read one run's diagnostic record, transcript reference, token/cost usage, outcome, and linked product-visible errors." },
   { "id": "agent.go_live", "namespace": "agent", "action": "go_live", "title": "Go live", "description": "Promote a dry-run agent seat to live after the human approval gate.", "requiredScope": "seat", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": true }, { "name": "charter_version_id", "flag": "charter-version-id", "type": "string", "required": true }], "hasComplexInput": false, "help": "Move an agent live only after dry-run evidence, signed permissions, and a human Steward chain are clear.", "example": { "seat_id": "0190aaaa-aaaa-7aaa-8aaa-aaaaaaaaaaaa", "charter_version_id": "0190cccc-cccc-7ccc-8ccc-cccccccccccc" } },
   { "id": "agent.list_fleet", "namespace": "agent", "action": "list_fleet", "title": "List agent fleet", "description": "Return every agent-occupied seat with lane, live state, last real turn, recent turn counts, top measurable status, open escalations, and 7-day real-run spend.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [], "hasComplexInput": false, "help": "Read every agent-occupied seat at once: lane, live state, last real turn, 24h/7d turns, measurable status, escalations, and spend." },
   { "id": "agent.list_runs", "namespace": "agent", "action": "list_runs", "title": "List agent runs", "description": "Return a seat's agent run history (status, lane, model, cost, per-run tool-call and guard-denial counts) plus the seat's run/tool-call rollup with held-action count.", "requiredScope": "seat", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": true }, { "name": "limit", "flag": "limit", "type": "integer", "required": false }], "hasComplexInput": false, "help": "Audit a seat's agent run history with per-run tool-call and guard-held counts (the Trust Card)." },