@rosthq/cli 0.7.75 → 0.7.77

package/dist/index.js

@@ -38310,6 +38310,30 @@ var CATALOG_ENTRIES = [
     // (script_run_secret_grants) gates availability on top of this — no grant, no call.
     default_access_policy: "always_ask"
   },
+  {
+    // DER-1739: the first named consumers of the generalized secret broker. They ride
+    // the same server-side egress core as `secret.broker` — no credential ever enters
+    // agent context; a `baserow` secret grant (secret_grant.grant) pins the host/token.
+    id: "baserow.read",
+    title: "Read Baserow rows (brokered)",
+    provider: "baserow",
+    description: "Call this to read rows from an approved Baserow table \u2014 list a table's rows or fetch one row by id. You supply only the table id, an optional row id, and optional query filters (page, size, search, filter/order params) \u2014 never a credential. A server-side broker injects the tenant's Baserow token, calls only the allowlisted host, and returns a size-capped, secret-scrubbed result. Read-only.",
+    default_scope_tier: "read",
+    scope_tiers: ["read"],
+    // Resolved via a vault-ref `baserow` secret grant, injected server-side.
+    credential_required: true,
+    default_access_policy: "always_allow"
+  },
+  {
+    id: "baserow.write",
+    title: "Write Baserow row (brokered)",
+    provider: "baserow",
+    description: "Call this to request creating or updating a row in an approved Baserow table. You supply the table id, the field values, and \u2014 to UPDATE \u2014 the row id (omit it to CREATE). You never supply a credential. Every write is HELD for human approval before it is sent; on approval the broker injects the tenant's Baserow token server-side and audits the call. It never writes autonomously.",
+    default_scope_tier: "write_with_approval",
+    scope_tiers: ["write_with_approval"],
+    credential_required: true,
+    default_access_policy: "always_ask"
+  },
   {
     id: "ap.invoices.read",
     title: "Read AP invoices",
@@ -38668,7 +38692,7 @@ function providerRequirementFor(entry) {
   if (!entry.credential_required) {
     return entry.provider === "rost" || entry.provider === "web" ? "platform_managed" : "none";
   }
-  return entry.id === "secret.broker" ? "vault_ref" : "connection";
+  return entry.id === "secret.broker" || entry.id === "baserow.read" || entry.id === "baserow.write" ? "vault_ref" : "connection";
 }
 function trustedRequiredMetadataFor(entry) {
   if (entry.default_access_policy === "always_allow" && entry.default_scope_tier !== "write_with_approval") {
@@ -38693,7 +38717,7 @@ function enrichCatalogEntry(entry) {
     access_levels: accessLevels,
     default_access_level: accessLevelForScope(entry.default_scope_tier),
     provider_requirement: providerRequirementFor(entry),
-    cost_class: entry.id === "script.run" || entry.id === "secret.broker" ? "metered_standard" : entry.id === "web.search" || entry.id === "web.fetch" || entry.id === "browser.read" ? "metered_low" : "included",
+    cost_class: entry.id === "script.run" || entry.id === "secret.broker" || entry.id === "baserow.read" || entry.id === "baserow.write" ? "metered_standard" : entry.id === "web.search" || entry.id === "web.fetch" || entry.id === "browser.read" ? "metered_low" : "included",
     lane_support: ["cloud", "runner", "mcp"],
     trusted_required_metadata: trustedRequiredMetadataFor(entry)
   };
@@ -42759,9 +42783,150 @@ var recommendationEventInputSchema = external_exports.object({
   occurred_at: external_exports.string().datetime({ offset: true }).optional()
 }).strict();
 
-// ../../packages/protocol/src/reads.ts
-var uuidSchema13 = external_exports.string().uuid();
+// ../../packages/protocol/src/artifacts.ts
 var isoDateTime3 = external_exports.string().datetime({ offset: true });
+var uuidSchema13 = external_exports.string().uuid();
+var dataClassificationSchema = external_exports.enum([
+  "customer_content",
+  "operational",
+  "sandbox_output"
+]);
+var retentionClassSchema = external_exports.enum([
+  "ephemeral_7d",
+  "standard_90d",
+  "durable_1y",
+  "legal_hold"
+]);
+var ARTIFACT_MAX_TITLE_CHARS = 200;
+var ARTIFACT_MAX_DISPLAY_LABEL_CHARS = 300;
+var ARTIFACT_MAX_EXTERNAL_REF_CHARS = 2048;
+var ARTIFACT_MAX_MIME_CHARS = 255;
+var ARTIFACT_MAX_STORAGE_PATH_CHARS = 1024;
+var ARTIFACT_MAX_STORAGE_BUCKET_CHARS = 128;
+var ARTIFACT_MAX_SNAPSHOT_BYTES = 8192;
+var artifactKindSchema = external_exports.enum(["binary", "pointer"]);
+var artifactPointerSystemSchema = external_exports.enum([
+  "gmail_draft",
+  "gmail_message",
+  "google_drive",
+  "google_doc",
+  "github_pr",
+  "github_issue",
+  "linear_issue",
+  "url",
+  "other"
+]);
+var artifactChecksumSchema = external_exports.string().regex(/^[a-f0-9]{64}$/, "checksum must be a lowercase sha256 hex digest");
+function isSafeArtifactStoragePath(value) {
+  if (value.includes("\\")) {
+    return false;
+  }
+  if (value.length === 0 || value.length > ARTIFACT_MAX_STORAGE_PATH_CHARS) {
+    return false;
+  }
+  if (value.startsWith("/") || value.startsWith("./") || value.startsWith("../")) {
+    return false;
+  }
+  if (value.includes("\0") || value.includes("//")) {
+    return false;
+  }
+  return value.split("/").every((segment) => segment.length > 0 && segment !== "." && segment !== "..");
+}
+var artifactStoragePathSchema = external_exports.string().min(1).max(ARTIFACT_MAX_STORAGE_PATH_CHARS).refine(isSafeArtifactStoragePath, "Artifact storage paths must be tenant-local relative paths without traversal segments");
+var artifactSnapshotSchema = external_exports.record(external_exports.string(), external_exports.unknown()).refine((value) => Buffer.byteLength(JSON.stringify(value), "utf8") <= ARTIFACT_MAX_SNAPSHOT_BYTES, "Artifact snapshot exceeds the bounded size limit").refine((value) => !hasSecretShapedContent(value), "Artifact snapshot must not contain secret-shaped content");
+var SECRET_URL_PARAM_NAME = /^(access[_-]?token|refresh[_-]?token|id[_-]?token|token|api[_-]?key|apikey|client[_-]?secret|secret|credential|password|passwd|pwd|auth|authorization|signature|sig|x-amz-signature|x-amz-credential|x-amz-security-token|sas|jwt|session|key)$/i;
+function isTokenizedUrl(value) {
+  let url2;
+  try {
+    url2 = new URL(value);
+  } catch {
+    return false;
+  }
+  if (url2.username !== "" || url2.password !== "") {
+    return true;
+  }
+  for (const [name, paramValue] of url2.searchParams) {
+    if (SECRET_URL_PARAM_NAME.test(name) || hasSecretShapedContent(paramValue)) {
+      return true;
+    }
+  }
+  return false;
+}
+var binaryArtifactCreateInputSchema = external_exports.object({
+  seat_id: uuidSchema13,
+  run_id: uuidSchema13.nullable().optional(),
+  title: external_exports.string().trim().min(1).max(ARTIFACT_MAX_TITLE_CHARS).nullable().optional(),
+  storage_bucket: external_exports.string().min(1).max(ARTIFACT_MAX_STORAGE_BUCKET_CHARS),
+  storage_path: artifactStoragePathSchema,
+  mime_type: external_exports.string().min(1).max(ARTIFACT_MAX_MIME_CHARS),
+  size_bytes: external_exports.number().int().nonnegative(),
+  checksum_sha256: artifactChecksumSchema,
+  supersedes_id: uuidSchema13.nullable().optional(),
+  data_classification: dataClassificationSchema.default("customer_content"),
+  retention_class: retentionClassSchema.default("standard_90d")
+}).strict();
+var pointerArtifactCreateInputSchema = external_exports.object({
+  seat_id: uuidSchema13,
+  run_id: uuidSchema13.nullable().optional(),
+  title: external_exports.string().trim().min(1).max(ARTIFACT_MAX_TITLE_CHARS).nullable().optional(),
+  pointer_system: artifactPointerSystemSchema,
+  external_ref: external_exports.string().trim().min(1).max(ARTIFACT_MAX_EXTERNAL_REF_CHARS).refine((value) => !isTokenizedUrl(value), "external_ref must be a stable reference, not a tokenized/credentialed URL"),
+  display_label: external_exports.string().trim().min(1).max(ARTIFACT_MAX_DISPLAY_LABEL_CHARS).nullable().optional(),
+  snapshot: artifactSnapshotSchema.default({}),
+  supersedes_id: uuidSchema13.nullable().optional(),
+  data_classification: dataClassificationSchema.default("operational"),
+  retention_class: retentionClassSchema.default("standard_90d")
+}).strict();
+var artifactSummarySchema = external_exports.object({
+  artifact_ref: external_exports.string().min(1),
+  artifact_id: uuidSchema13,
+  seat_id: uuidSchema13,
+  run_id: uuidSchema13.nullable(),
+  kind: artifactKindSchema,
+  title: external_exports.string().nullable(),
+  mime_type: external_exports.string().nullable(),
+  size_bytes: external_exports.number().int().nonnegative().nullable(),
+  checksum_sha256: external_exports.string().nullable(),
+  pointer_system: artifactPointerSystemSchema.nullable(),
+  external_ref: external_exports.string().nullable(),
+  display_label: external_exports.string().nullable(),
+  supersedes_id: uuidSchema13.nullable(),
+  data_classification: dataClassificationSchema,
+  retention_class: retentionClassSchema,
+  created_at: isoDateTime3,
+  updated_at: isoDateTime3
+}).strict();
+var artifactReadResultSchema = artifactSummarySchema.extend({
+  snapshot: external_exports.record(external_exports.string(), external_exports.unknown()),
+  signed_url: external_exports.string().nullable(),
+  signed_url_expires_at: isoDateTime3.nullable()
+}).strict();
+var artifactListOutputSchema = external_exports.object({
+  artifacts: external_exports.array(artifactSummarySchema)
+}).strict();
+var sessionTranscriptLaneSchema = external_exports.enum(["cloud", "runner"]);
+var sessionTranscriptFormatSchema = external_exports.enum(["jsonl", "text"]);
+var sessionTranscriptSummarySchema = external_exports.object({
+  transcript_id: uuidSchema13,
+  seat_id: uuidSchema13,
+  run_id: uuidSchema13.nullable(),
+  lane: sessionTranscriptLaneSchema,
+  format: sessionTranscriptFormatSchema,
+  message_count: external_exports.number().int().nonnegative().nullable(),
+  truncated: external_exports.boolean(),
+  char_count: external_exports.number().int().nonnegative(),
+  data_classification: dataClassificationSchema,
+  retention_class: retentionClassSchema,
+  created_at: isoDateTime3,
+  updated_at: isoDateTime3
+}).strict();
+var sessionTranscriptReadResultSchema = sessionTranscriptSummarySchema.extend({
+  transcript: external_exports.string()
+}).strict();
+
+// ../../packages/protocol/src/reads.ts
+var uuidSchema14 = external_exports.string().uuid();
+var isoDateTime4 = external_exports.string().datetime({ offset: true });
 var seatTypeSchema = external_exports.enum(["human", "agent", "hybrid"]);
 var seatStatusSchema = external_exports.enum(["draft", "active", "vacant", "decommissioned"]);
 var rollupStateSchema = external_exports.enum(["ok", "risk", "crit", "pending"]);
@@ -42775,13 +42940,13 @@ var credentialStatusSchema = external_exports.enum(["active", "revoked"]);
 var runStatusSchema = external_exports.enum(["running", "succeeded", "failed", "timeout", "cancelled"]);
 var graphGetInputSchema = external_exports.object({}).strict();
 var graphNodeSchema = external_exports.object({
-  seat_id: uuidSchema13,
+  seat_id: uuidSchema14,
   name: external_exports.string(),
   seat_type: seatTypeSchema,
   status: seatStatusSchema,
-  parent_seat_id: uuidSchema13.nullable(),
+  parent_seat_id: uuidSchema14.nullable(),
   is_root: external_exports.boolean(),
-  steward_seat_id: uuidSchema13.nullable(),
+  steward_seat_id: uuidSchema14.nullable(),
   occupant: external_exports.object({
     kind: external_exports.enum(["user", "agent"]),
     label: external_exports.string(),
@@ -42794,11 +42959,11 @@ var graphNodeSchema = external_exports.object({
   is_peer: external_exports.boolean()
 }).strict();
 var graphEdgeSchema = external_exports.object({
-  parent_seat_id: uuidSchema13,
-  child_seat_id: uuidSchema13
+  parent_seat_id: uuidSchema14,
+  child_seat_id: uuidSchema14
 }).strict();
 var graphGetOutputSchema = external_exports.object({
-  root_seat_id: uuidSchema13.nullable(),
+  root_seat_id: uuidSchema14.nullable(),
   nodes: external_exports.array(graphNodeSchema),
   edges: external_exports.array(graphEdgeSchema),
   status_rollups: external_exports.object({
@@ -42810,42 +42975,42 @@ var graphGetOutputSchema = external_exports.object({
   }).strict()
 }).strict();
 var seatGetInputSchema = external_exports.object({
-  seat_id: uuidSchema13
+  seat_id: uuidSchema14
 }).strict();
 var seatGetOutputSchema = external_exports.object({
-  seat_id: uuidSchema13,
+  seat_id: uuidSchema14,
   name: external_exports.string(),
   seat_type: seatTypeSchema,
   status: seatStatusSchema,
   purpose: external_exports.string().nullable(),
-  parent_seat_id: uuidSchema13.nullable(),
+  parent_seat_id: uuidSchema14.nullable(),
   steward_chain: external_exports.array(external_exports.object({
-    seat_id: uuidSchema13,
+    seat_id: uuidSchema14,
     name: external_exports.string()
   }).strict()),
   occupancies: external_exports.array(external_exports.object({
-    occupancy_id: uuidSchema13,
+    occupancy_id: uuidSchema14,
     occupant_type: external_exports.enum(["user", "agent"]),
     label: external_exports.string(),
-    started_at: isoDateTime3,
-    ended_at: isoDateTime3.nullable()
+    started_at: isoDateTime4,
+    ended_at: isoDateTime4.nullable()
   }).strict()),
-  active_charter_version_id: uuidSchema13.nullable(),
-  draft_charter_version_id: uuidSchema13.nullable(),
+  active_charter_version_id: uuidSchema14.nullable(),
+  draft_charter_version_id: uuidSchema14.nullable(),
   agent_status: agentStatusEnum2.nullable(),
   agent_lane: agentLaneSchema2.nullable(),
   mcp_tokens: external_exports.array(external_exports.object({
-    token_id: uuidSchema13,
+    token_id: uuidSchema14,
     scope: mcpScopeSchema,
-    created_at: isoDateTime3,
-    last_seen_at: isoDateTime3.nullable(),
+    created_at: isoDateTime4,
+    last_seen_at: isoDateTime4.nullable(),
     // DER-830: expires_at is NOT NULL; surface days-remaining alongside it.
-    expires_at: isoDateTime3,
+    expires_at: isoDateTime4,
     expires_in_days: external_exports.number().int(),
-    revoked_at: isoDateTime3.nullable()
+    revoked_at: isoDateTime4.nullable()
   }).strict()),
   credentials: external_exports.array(external_exports.object({
-    credential_id: uuidSchema13,
+    credential_id: uuidSchema14,
     provider: external_exports.string(),
     status: credentialStatusSchema
   }).strict()),
@@ -42857,30 +43022,30 @@ var seatGetOutputSchema = external_exports.object({
   }).strict()
 }).strict();
 var charterListInputSchema = external_exports.object({
-  seat_id: uuidSchema13.optional(),
+  seat_id: uuidSchema14.optional(),
   status: charterStatusSchema.optional()
 }).strict();
 var charterSummarySchema = external_exports.object({
-  charter_version_id: uuidSchema13,
-  seat_id: uuidSchema13,
+  charter_version_id: uuidSchema14,
+  seat_id: uuidSchema14,
   version: external_exports.number().int().nonnegative(),
   status: charterStatusSchema,
-  created_at: isoDateTime3,
-  approved_at: isoDateTime3.nullable()
+  created_at: isoDateTime4,
+  approved_at: isoDateTime4.nullable()
 }).strict();
 var charterListOutputSchema = external_exports.object({
   charters: external_exports.array(charterSummarySchema)
 }).strict();
 var charterGetInputSchema = external_exports.object({
-  charter_version_id: uuidSchema13
+  charter_version_id: uuidSchema14
 }).strict();
 var charterGetOutputSchema = external_exports.object({
-  charter_version_id: uuidSchema13,
-  seat_id: uuidSchema13,
+  charter_version_id: uuidSchema14,
+  seat_id: uuidSchema14,
   version: external_exports.number().int().nonnegative(),
   status: charterStatusSchema,
-  created_at: isoDateTime3,
-  approved_at: isoDateTime3.nullable(),
+  created_at: isoDateTime4,
+  approved_at: isoDateTime4.nullable(),
   doc: external_exports.unknown(),
   history: external_exports.array(charterSummarySchema),
   dry_run: external_exports.object({
@@ -42890,7 +43055,7 @@ var charterGetOutputSchema = external_exports.object({
 }).strict();
 var compassGetCurrentInputSchema = external_exports.object({}).strict();
 var compassVersionRefSchema = external_exports.object({
-  compass_version_id: uuidSchema13,
+  compass_version_id: uuidSchema14,
   version: external_exports.number().int().nonnegative(),
   status: compassStatusSchema,
   doc: external_exports.unknown()
@@ -42901,7 +43066,7 @@ var compassGetCurrentOutputSchema = external_exports.object({
   // Sources expose document id and kind only. The underlying storage_ref can
   // be a local file path, so it is never surfaced (redaction rule).
   sources: external_exports.array(external_exports.object({
-    document_id: uuidSchema13,
+    document_id: uuidSchema14,
     kind: external_exports.string()
   }).strict())
 }).strict();
@@ -42916,31 +43081,31 @@ var compassGapSchema = external_exports.object({
   answer: external_exports.string().nullable()
 }).strict();
 var compassListGapsOutputSchema = external_exports.object({
-  compass_version_id: uuidSchema13.nullable(),
+  compass_version_id: uuidSchema14.nullable(),
   unanswered: external_exports.array(compassGapSchema),
   answered: external_exports.array(compassGapSchema)
 }).strict();
 var agentStatusInputSchema = external_exports.object({
-  seat_id: uuidSchema13
+  seat_id: uuidSchema14
 }).strict();
 var agentStatusOutputSchema = external_exports.object({
-  seat_id: uuidSchema13,
+  seat_id: uuidSchema14,
   // DER-786 (C7): `has_agent` is true whenever a setup agent exists for the seat
   // — including a draft setup that has no occupancy yet — so it agrees with
   // agent_setup.get. `lifecycle` is the shared cross-surface term derived from
   // `status` (none | draft_setup | dry_run | live | …).
   has_agent: external_exports.boolean(),
   lifecycle: agentLifecycleSchema,
-  agent_id: uuidSchema13.nullable(),
+  agent_id: uuidSchema14.nullable(),
   kind: agentKindSchema2.nullable(),
   display_name: external_exports.string().nullable(),
   lane: agentLaneSchema2.nullable(),
   status: agentStatusEnum2.nullable(),
   schedule_cron: external_exports.string().nullable(),
   live: external_exports.boolean(),
-  charter_version_id: uuidSchema13.nullable(),
+  charter_version_id: uuidSchema14.nullable(),
   steward_chain: external_exports.array(external_exports.object({
-    seat_id: uuidSchema13,
+    seat_id: uuidSchema14,
     name: external_exports.string()
   }).strict()),
   steward_chain_resolves_to_human: external_exports.boolean(),
@@ -42952,13 +43117,13 @@ var agentStatusOutputSchema = external_exports.object({
 }).strict();
 var agentListFleetInputSchema = external_exports.object({}).strict();
 var fleetOverviewRowSchema = external_exports.object({
-  seat_id: uuidSchema13,
+  seat_id: uuidSchema14,
   seat_name: external_exports.string(),
   seat_path: external_exports.string(),
   lane: agentLaneSchema2.nullable(),
   agent_status: external_exports.enum(["draft", "dry_run", "live", "paused", "decommissioned", "vacant"]),
   live: external_exports.boolean(),
-  last_turn_at: isoDateTime3.nullable(),
+  last_turn_at: isoDateTime4.nullable(),
   turns_24h: external_exports.number().int().nonnegative(),
   turns_7d: external_exports.number().int().nonnegative(),
   top_measurable_status: external_exports.enum(["on", "off", "pending", "none"]),
@@ -42969,48 +43134,48 @@ var agentListFleetOutputSchema = external_exports.object({
   agents: external_exports.array(fleetOverviewRowSchema)
 }).strict();
 var runErrorLogSchema = external_exports.object({
-  error_log_id: uuidSchema13,
+  error_log_id: uuidSchema14,
   source: external_exports.enum(["run", "llm", "tool", "mcp", "runner", "integration", "job", "web"]),
   severity: external_exports.enum(["warning", "error", "critical"]),
   code: external_exports.string().nullable(),
   message: external_exports.string(),
-  created_at: isoDateTime3,
-  resolved_at: isoDateTime3.nullable()
+  created_at: isoDateTime4,
+  resolved_at: isoDateTime4.nullable()
 }).strict();
 var agentFleetDigestInputSchema = external_exports.object({
   window_hours: external_exports.number().int().min(1).max(168).default(24),
   error_limit: external_exports.number().int().min(1).max(100).default(50)
 }).strict();
 var fleetDigestRunSchema = external_exports.object({
-  run_id: uuidSchema13,
-  seat_id: uuidSchema13,
-  agent_id: uuidSchema13,
+  run_id: uuidSchema14,
+  seat_id: uuidSchema14,
+  agent_id: uuidSchema14,
   status: runStatusSchema,
   lane: agentLaneSchema2,
   model: external_exports.string(),
-  started_at: isoDateTime3,
-  finished_at: isoDateTime3.nullable(),
+  started_at: isoDateTime4,
+  finished_at: isoDateTime4.nullable(),
   cost_usd: external_exports.string(),
   error_logs: external_exports.array(runErrorLogSchema)
 }).strict();
 var fleetDigestErrorSchema = runErrorLogSchema.extend({
-  seat_id: uuidSchema13.nullable(),
-  agent_id: uuidSchema13.nullable(),
-  run_id: uuidSchema13.nullable(),
+  seat_id: uuidSchema14.nullable(),
+  agent_id: uuidSchema14.nullable(),
+  run_id: uuidSchema14.nullable(),
   disposition: external_exports.enum(["active", "acknowledged", "resolved", "superseded"])
 }).strict();
 var fleetDigestNotificationErrorSchema = external_exports.object({
-  notification_id: uuidSchema13,
+  notification_id: uuidSchema14,
   kind: external_exports.string(),
   channel: external_exports.string(),
   status: external_exports.string(),
   provider: external_exports.string(),
   error_message: external_exports.string().nullable(),
-  error_log_id: uuidSchema13.nullable(),
+  error_log_id: uuidSchema14.nullable(),
   source: external_exports.enum(["run", "llm", "tool", "mcp", "runner", "integration", "job", "web"]).nullable(),
-  seat_id: uuidSchema13.nullable(),
-  run_id: uuidSchema13.nullable(),
-  created_at: isoDateTime3
+  seat_id: uuidSchema14.nullable(),
+  run_id: uuidSchema14.nullable(),
+  created_at: isoDateTime4
 }).strict();
 var fleetDigestAgentSchema = fleetOverviewRowSchema.extend({
   failed_runs_24h: external_exports.number().int().nonnegative(),
@@ -43029,7 +43194,7 @@ var fleetDigestAgentSchema = fleetOverviewRowSchema.extend({
   suggested_next_action: external_exports.string()
 }).strict();
 var agentFleetDigestOutputSchema = external_exports.object({
-  generated_at: isoDateTime3,
+  generated_at: isoDateTime4,
   window_hours: external_exports.number().int().min(1).max(168),
   summary: external_exports.object({
     fleet_count: external_exports.number().int().nonnegative(),
@@ -43055,26 +43220,30 @@ var seatTrustSummarySchema = external_exports.object({
   tool_call_count: external_exports.number().int().nonnegative(),
   // The hero metric: actions held this period because they exceeded the charter.
   denied_tool_call_count: external_exports.number().int().nonnegative(),
-  last_activity_at: isoDateTime3.nullable()
+  last_activity_at: isoDateTime4.nullable()
 }).strict();
 var agentListRunsInputSchema = external_exports.object({
-  seat_id: uuidSchema13,
+  seat_id: uuidSchema14,
   // Conservative, bounded page size; the timeline is a recent-history view.
   limit: external_exports.number().int().min(1).max(200).default(50)
 }).strict();
 var agentGetRunInputSchema = external_exports.object({
-  seat_id: uuidSchema13,
-  run_id: uuidSchema13
+  seat_id: uuidSchema14,
+  run_id: uuidSchema14,
+  // DER-1661: opt in to the persisted session transcript (`--transcript`). Off by
+  // default so the diagnostic read stays lean; the (potentially large) transcript body
+  // loads only when asked.
+  transcript: external_exports.boolean().default(false)
 }).strict();
 var seatRunSchema = external_exports.object({
-  run_id: uuidSchema13,
-  agent_id: uuidSchema13,
+  run_id: uuidSchema14,
+  agent_id: uuidSchema14,
   agent_display_name: external_exports.string().nullable(),
   status: runStatusSchema,
   lane: agentLaneSchema2,
   model: external_exports.string(),
-  started_at: isoDateTime3,
-  finished_at: isoDateTime3.nullable(),
+  started_at: isoDateTime4,
+  finished_at: isoDateTime4.nullable(),
   cost_usd: external_exports.string(),
   tool_call_count: external_exports.number().int().nonnegative(),
   denied_tool_call_count: external_exports.number().int().nonnegative(),
@@ -43084,16 +43253,16 @@ var seatRunErrorLogSchema = runErrorLogSchema.extend({
   error_class: external_exports.string().nullable()
 }).strict();
 var seatRunDetailSchema = seatRunSchema.extend({
-  task_id: uuidSchema13.nullable(),
-  work_order_id: uuidSchema13.nullable(),
+  task_id: uuidSchema14.nullable(),
+  work_order_id: uuidSchema14.nullable(),
   transcript_ref: external_exports.string(),
   input_tokens: external_exports.number().int().nonnegative(),
   output_tokens: external_exports.number().int().nonnegative(),
   outcome: external_exports.record(external_exports.string(), external_exports.unknown()),
   error_logs: external_exports.array(seatRunErrorLogSchema),
   skill_activations: external_exports.array(external_exports.object({
-    skill_activation_id: uuidSchema13,
-    skill_version_id: uuidSchema13,
+    skill_activation_id: uuidSchema14,
+    skill_version_id: uuidSchema14,
     slug: external_exports.string().min(1),
     name: external_exports.string().min(1),
     version: external_exports.number().int().positive(),
@@ -43103,36 +43272,39 @@ var seatRunDetailSchema = seatRunSchema.extend({
       content_sha256: external_exports.string().regex(/^[a-f0-9]{64}$/),
       size_bytes: external_exports.number().int().nonnegative()
     }).strict()),
-    created_at: isoDateTime3
-  }).strict())
+    created_at: isoDateTime4
+  }).strict()),
+  // DER-1661/DER-1753: the persisted session transcript, present only when the read
+  // asked for it (`transcript: true`) — null when requested but none was persisted.
+  transcript: sessionTranscriptReadResultSchema.nullable().optional()
 }).strict();
 var agentListRunsOutputSchema = external_exports.object({
-  seat_id: uuidSchema13,
+  seat_id: uuidSchema14,
   summary: seatTrustSummarySchema,
   runs: external_exports.array(seatRunSchema)
 }).strict();
 var agentGetRunOutputSchema = external_exports.object({
-  seat_id: uuidSchema13,
+  seat_id: uuidSchema14,
   run: seatRunDetailSchema
 }).strict();
 var agentListToolCallsInputSchema = external_exports.object({
-  seat_id: uuidSchema13,
+  seat_id: uuidSchema14,
   limit: external_exports.number().int().min(1).max(200).default(50),
   // When true, return only HELD (non-allowed) tool calls — the governance view.
   held_only: external_exports.boolean().default(false)
 }).strict();
 var seatToolCallSchema = external_exports.object({
-  tool_call_id: uuidSchema13,
-  run_id: uuidSchema13.nullable(),
+  tool_call_id: uuidSchema14,
+  run_id: uuidSchema14.nullable(),
   tool_name: external_exports.string(),
   guard_result: guardResultSchema,
   manifest_clause: external_exports.string().nullable(),
   outcome: external_exports.string(),
-  started_at: isoDateTime3,
-  finished_at: isoDateTime3.nullable()
+  started_at: isoDateTime4,
+  finished_at: isoDateTime4.nullable()
 }).strict();
 var agentListToolCallsOutputSchema = external_exports.object({
-  seat_id: uuidSchema13,
+  seat_id: uuidSchema14,
   summary: seatTrustSummarySchema,
   tool_calls: external_exports.array(seatToolCallSchema)
 }).strict();
@@ -43143,21 +43315,21 @@ var deliverableLinkSchema = external_exports.object({
   kind: external_exports.enum(["internal", "linear", "github", "external"])
 }).strict();
 var deliverableIdSchema = external_exports.union([
-  uuidSchema13,
+  uuidSchema14,
   external_exports.string().regex(/^run:[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i)
 ]);
 var deliverableRowSchema = external_exports.object({
   id: deliverableIdSchema,
-  seat_id: uuidSchema13,
-  agent_id: uuidSchema13.nullable(),
-  run_id: uuidSchema13.nullable(),
-  task_id: uuidSchema13.nullable(),
-  work_order_id: uuidSchema13.nullable(),
+  seat_id: uuidSchema14,
+  agent_id: uuidSchema14.nullable(),
+  run_id: uuidSchema14.nullable(),
+  task_id: uuidSchema14.nullable(),
+  work_order_id: uuidSchema14.nullable(),
   kind: deliverableKindSchema,
   title: external_exports.string(),
   summary: external_exports.string().nullable(),
   content: external_exports.string().nullable(),
-  delivered_at: isoDateTime3,
+  delivered_at: isoDateTime4,
   source_run_status: external_exports.string().nullable(),
   source_run_model: external_exports.string().nullable(),
   source_run_log_ref: external_exports.string().nullable(),
@@ -43165,13 +43337,13 @@ var deliverableRowSchema = external_exports.object({
   links: external_exports.array(deliverableLinkSchema)
 }).strict();
 var deliverableListInputSchema = external_exports.object({
-  seat_id: uuidSchema13
+  seat_id: uuidSchema14
 }).strict();
 var deliverableListOutputSchema = external_exports.object({
   deliverables: external_exports.array(deliverableRowSchema)
 }).strict();
 var deliverableGetInputSchema = external_exports.object({
-  seat_id: uuidSchema13,
+  seat_id: uuidSchema14,
   deliverable_id: deliverableIdSchema
 }).strict();
 var deliverableGetOutputSchema = external_exports.object({
@@ -43179,86 +43351,86 @@ var deliverableGetOutputSchema = external_exports.object({
 }).strict();
 var mcpTokenListInputSchema = external_exports.object({
   include_revoked: external_exports.boolean().default(false),
-  seat_id: uuidSchema13.optional()
+  seat_id: uuidSchema14.optional()
 }).strict();
 var mcpTokenMetadataSchema = external_exports.object({
-  token_id: uuidSchema13,
+  token_id: uuidSchema14,
   scope: mcpScopeSchema,
-  seat_id: uuidSchema13.nullable(),
-  created_at: isoDateTime3,
-  last_seen_at: isoDateTime3.nullable(),
+  seat_id: uuidSchema14.nullable(),
+  created_at: isoDateTime4,
+  last_seen_at: isoDateTime4.nullable(),
   // DER-830: expires_at is now always present (the column is NOT NULL).
-  expires_at: isoDateTime3,
+  expires_at: isoDateTime4,
   // DER-830: whole days remaining until expiry, computed server-side. Negative
   // when the token is already expired (so the CLI can render "expired").
   expires_in_days: external_exports.number().int(),
-  revoked_at: isoDateTime3.nullable()
+  revoked_at: isoDateTime4.nullable()
 }).strict();
 var mcpTokenListOutputSchema = external_exports.object({
   tokens: external_exports.array(mcpTokenMetadataSchema)
 }).strict();
 var errorLogListInputSchema = external_exports.object({
-  seat_id: uuidSchema13.optional(),
+  seat_id: uuidSchema14.optional(),
   source: external_exports.enum(["run", "llm", "tool", "mcp", "runner", "integration", "job", "web"]).optional(),
   severity: external_exports.enum(["warning", "error", "critical"]).optional(),
   resolved: external_exports.enum(["active", "acknowledged", "resolved", "all"]).default("active"),
   limit: external_exports.number().int().min(1).max(200).default(50)
 }).strict();
 var errorLogListItemSchema = external_exports.object({
-  error_log_id: uuidSchema13,
+  error_log_id: uuidSchema14,
   source: external_exports.enum(["run", "llm", "tool", "mcp", "runner", "integration", "job", "web"]),
   severity: external_exports.enum(["warning", "error", "critical"]),
   code: external_exports.string().nullable(),
   message: external_exports.string(),
-  seat_id: uuidSchema13.nullable(),
-  agent_id: uuidSchema13.nullable(),
-  run_id: uuidSchema13.nullable(),
+  seat_id: uuidSchema14.nullable(),
+  agent_id: uuidSchema14.nullable(),
+  run_id: uuidSchema14.nullable(),
   disposition: external_exports.enum(["active", "acknowledged", "resolved", "superseded"]),
-  resolved_at: isoDateTime3.nullable(),
-  resolved_by: uuidSchema13.nullable(),
+  resolved_at: isoDateTime4.nullable(),
+  resolved_by: uuidSchema14.nullable(),
   resolution_reason: external_exports.string().nullable(),
-  linked_task_id: uuidSchema13.nullable(),
-  linked_issue_id: uuidSchema13.nullable(),
+  linked_task_id: uuidSchema14.nullable(),
+  linked_issue_id: uuidSchema14.nullable(),
   linked_pr_ref: external_exports.string().nullable(),
-  superseded_by_id: uuidSchema13.nullable(),
-  created_at: isoDateTime3
+  superseded_by_id: uuidSchema14.nullable(),
+  created_at: isoDateTime4
 }).strict();
 var errorLogListOutputSchema = external_exports.object({
   errors: external_exports.array(errorLogListItemSchema),
   total: external_exports.number().int().nonnegative()
 }).strict();
 var errorLogResolveInputSchema = external_exports.object({
-  error_log_id: uuidSchema13,
+  error_log_id: uuidSchema14,
   reason: external_exports.string().trim().min(1),
   disposition: external_exports.enum(["acknowledged", "resolved"]).default("acknowledged"),
-  linked_task_id: uuidSchema13.optional(),
-  linked_issue_id: uuidSchema13.optional(),
+  linked_task_id: uuidSchema14.optional(),
+  linked_issue_id: uuidSchema14.optional(),
   linked_pr_ref: external_exports.string().trim().min(1).optional()
 }).strict();
 var errorLogResolveOutputSchema = external_exports.object({
-  error_log_id: uuidSchema13,
+  error_log_id: uuidSchema14,
   disposition: external_exports.enum(["acknowledged", "resolved"]),
-  resolved_at: isoDateTime3
+  resolved_at: isoDateTime4
 }).strict();
 var errorLogSupersedeInputSchema = external_exports.object({
-  error_log_id: uuidSchema13,
-  new_error_log_id: uuidSchema13,
+  error_log_id: uuidSchema14,
+  new_error_log_id: uuidSchema14,
   reason: external_exports.string().trim().min(1),
-  linked_task_id: uuidSchema13.optional(),
-  linked_issue_id: uuidSchema13.optional(),
+  linked_task_id: uuidSchema14.optional(),
+  linked_issue_id: uuidSchema14.optional(),
   linked_pr_ref: external_exports.string().trim().min(1).optional()
 }).strict();
 var errorLogSupersedeOutputSchema = external_exports.object({
-  error_log_id: uuidSchema13,
-  superseded_by_id: uuidSchema13,
+  error_log_id: uuidSchema14,
+  superseded_by_id: uuidSchema14,
   disposition: external_exports.literal("superseded"),
-  resolved_at: isoDateTime3
+  resolved_at: isoDateTime4
 }).strict();
 
 // ../../packages/protocol/src/working-files.ts
 var WORKING_FILE_MAX_PATH_CHARS = 512;
 var WORKING_FILE_MAX_CONTENT_CHARS = 16384;
-var isoDateTime4 = external_exports.string().datetime({ offset: true });
+var isoDateTime5 = external_exports.string().datetime({ offset: true });
 var workingFileContentTypeSchema = external_exports.enum([
   "text/plain",
   "text/markdown",
@@ -43337,10 +43509,10 @@ var workingFileSummarySchema = external_exports.object({
   content_type: workingFileContentTypeSchema,
   content_chars: external_exports.number().int().nonnegative(),
   published_ref: external_exports.string().min(1).nullable(),
-  published_at: isoDateTime4.nullable(),
-  expires_at: isoDateTime4,
-  created_at: isoDateTime4,
-  updated_at: isoDateTime4
+  published_at: isoDateTime5.nullable(),
+  expires_at: isoDateTime5,
+  created_at: isoDateTime5,
+  updated_at: isoDateTime5
 }).strict();
 var workingFileReadResultSchema = workingFileSummarySchema.extend({
   content: external_exports.string(),
@@ -43357,7 +43529,7 @@ var runSummaryOutputSchema = external_exports.object({
 
 // ../../packages/protocol/src/runner-settings.ts
 var uuid8 = external_exports.string().uuid();
-var isoDateTime5 = external_exports.string().datetime({ offset: true });
+var isoDateTime6 = external_exports.string().datetime({ offset: true });
 var runnerHealthSchema = external_exports.enum(["online", "stale", "offline", "revoked", "unpaired"]);
 var runnerExecutionStateSchema = external_exports.enum([
   "ready",
@@ -43377,8 +43549,8 @@ var runnerExecutionReadinessSchema = external_exports.object({
   due_queued_work_orders: external_exports.number().int().nonnegative(),
   claimed_work_orders: external_exports.number().int().nonnegative(),
   running_work_orders: external_exports.number().int().nonnegative(),
-  recent_completed_at: isoDateTime5.nullable(),
-  recent_failed_at: isoDateTime5.nullable()
+  recent_completed_at: isoDateTime6.nullable(),
+  recent_failed_at: isoDateTime6.nullable()
 }).strict();
 var runnerSandboxPostureSchema = external_exports.enum(["guard", "strict", "off", "none", "unknown"]);
 var runnerPostureSchema = external_exports.object({
@@ -43395,10 +43567,10 @@ var runnerSummarySchema = external_exports.object({
   cli_version: external_exports.string().nullable(),
   posture: runnerPostureSchema,
   execution: runnerExecutionReadinessSchema,
-  paired_at: isoDateTime5.nullable(),
-  last_heartbeat_at: isoDateTime5.nullable(),
-  revoked_at: isoDateTime5.nullable(),
-  created_at: isoDateTime5
+  paired_at: isoDateTime6.nullable(),
+  last_heartbeat_at: isoDateTime6.nullable(),
+  revoked_at: isoDateTime6.nullable(),
+  created_at: isoDateTime6
 }).strict();
 var runnerListInputSchema = external_exports.object({
   include_revoked: external_exports.boolean().optional()
@@ -43417,7 +43589,7 @@ var runnerPairingStartOutputSchema = external_exports.object({
   pairing_session_id: uuid8,
   user_code: external_exports.string(),
   verification_uri: external_exports.string(),
-  expires_at: isoDateTime5,
+  expires_at: isoDateTime6,
   expires_in: external_exports.number().int().nonnegative()
 }).strict();
 var runnerRevokeInputSchema = external_exports.object({
@@ -43435,9 +43607,9 @@ var workOrderSummarySchema = external_exports.object({
   lane: external_exports.enum(["cloud", "runner"]),
   status: workOrderStatusSchema,
   claimed_by_runner_id: uuid8.nullable(),
-  scheduled_for: isoDateTime5,
-  grace_deadline: isoDateTime5,
-  created_at: isoDateTime5
+  scheduled_for: isoDateTime6,
+  grace_deadline: isoDateTime6,
+  created_at: isoDateTime6
 }).strict();
 var workOrderListInputSchema = external_exports.object({
   status: workOrderStatusSchema.optional(),
@@ -43450,7 +43622,7 @@ var workOrderListOutputSchema = external_exports.object({
 }).strict();
 var workOrderEnqueueInputSchema = external_exports.object({
   agent_id: uuid8,
-  scheduled_for: isoDateTime5.optional(),
+  scheduled_for: isoDateTime6.optional(),
   task_id: uuid8.optional()
 }).strict();
 var agentRunNowInputSchema = external_exports.object({
@@ -43477,8 +43649,8 @@ var runnerDiagnoseOutputSchema = external_exports.object({
   platform: external_exports.string(),
   health: runnerHealthSchema,
   capabilities: runnerCapabilityDetailSchema,
-  last_heartbeat_at: isoDateTime5.nullable(),
-  paired_at: isoDateTime5.nullable(),
+  last_heartbeat_at: isoDateTime6.nullable(),
+  paired_at: isoDateTime6.nullable(),
   revocation_state: external_exports.enum(["active", "revoked", "unpaired"]),
   repair_guidance: external_exports.array(external_exports.object({
     action: external_exports.string(),
@@ -43539,7 +43711,7 @@ var notificationErrorSummarySchema = external_exports.object({
   source: external_exports.enum(["run", "llm", "tool", "mcp", "runner", "integration", "job", "web"]).nullable(),
   seat_id: uuid8.nullable(),
   run_id: uuid8.nullable(),
-  created_at: isoDateTime5
+  created_at: isoDateTime6
 }).strict();
 var notificationListErrorsOutputSchema = external_exports.object({
   errors: external_exports.array(notificationErrorSummarySchema)
@@ -43656,7 +43828,7 @@ var integrationSummarySchema = external_exports.object({
   id: uuid8,
   provider: external_exports.string(),
   status: external_exports.enum(["connected", "error", "disconnected"]),
-  last_synced_at: isoDateTime5.nullable()
+  last_synced_at: isoDateTime6.nullable()
 }).strict();
 var settingsGetInputSchema = external_exports.object({}).strict();
 var settingsGetOutputSchema = external_exports.object({
@@ -43691,13 +43863,13 @@ var tenantRenameOutputSchema = external_exports.object({
 }).strict();
 
 // ../../packages/protocol/src/system-health.ts
-var uuidSchema14 = external_exports.string().uuid();
-var isoDateTime6 = external_exports.string().datetime({ offset: true });
+var uuidSchema15 = external_exports.string().uuid();
+var isoDateTime7 = external_exports.string().datetime({ offset: true });
 var systemHealthCallerKindSchema = external_exports.enum(["tenant_admin", "member", "seat_token"]);
 var systemHealthCallerSchema = external_exports.object({
   kind: systemHealthCallerKindSchema,
-  seat_id: uuidSchema14.optional(),
-  seat_ids: external_exports.array(uuidSchema14).min(1).optional()
+  seat_id: uuidSchema15.optional(),
+  seat_ids: external_exports.array(uuidSchema15).min(1).optional()
 }).strict();
 var systemHealthVerdictSchema = external_exports.enum(["healthy", "degraded", "blocked"]);
 var systemHealthSeveritySchema = external_exports.enum(["info", "warning", "critical"]);
@@ -43735,18 +43907,18 @@ var systemHealthFindingSchema = external_exports.object({
   summary: external_exports.string().min(1),
   detail: external_exports.string().min(1),
   remediation: systemHealthActionSchema,
-  seat_id: uuidSchema14.nullable(),
-  goal_id: uuidSchema14.nullable(),
-  run_id: uuidSchema14.nullable(),
-  issue_id: uuidSchema14.nullable(),
-  task_id: uuidSchema14.nullable(),
-  error_log_id: uuidSchema14.nullable()
+  seat_id: uuidSchema15.nullable(),
+  goal_id: uuidSchema15.nullable(),
+  run_id: uuidSchema15.nullable(),
+  issue_id: uuidSchema15.nullable(),
+  task_id: uuidSchema15.nullable(),
+  error_log_id: uuidSchema15.nullable()
 }).strict();
 var systemHealthScopeSchema = external_exports.object({
   mode: systemHealthScopeModeSchema,
-  root_seat_ids: external_exports.array(uuidSchema14),
-  included_seat_ids: external_exports.array(uuidSchema14),
-  requested_seat_id: uuidSchema14.nullable(),
+  root_seat_ids: external_exports.array(uuidSchema15),
+  included_seat_ids: external_exports.array(uuidSchema15),
+  requested_seat_id: uuidSchema15.nullable(),
   total_seat_count: external_exports.number().int().nonnegative()
 }).strict();
 var systemHealthFleetSectionSchema = external_exports.object({
@@ -43782,7 +43954,7 @@ var systemHealthConnectivitySectionSchema = external_exports.object({
   failed_notification_count: external_exports.number().int().nonnegative()
 }).strict();
 var systemHealthSyncSectionSchema = external_exports.object({
-  latest_brief_at: isoDateTime6.nullable(),
+  latest_brief_at: isoDateTime7.nullable(),
   missing_latest_brief: external_exports.boolean(),
   flagged_gap_count: external_exports.number().int().nonnegative()
 }).strict();
@@ -43796,13 +43968,13 @@ var systemHealthSectionsSchema = external_exports.object({
   sync: systemHealthSyncSectionSchema
 }).strict();
 var systemHealthInputSchema = external_exports.object({
-  seat_id: uuidSchema14.optional()
+  seat_id: uuidSchema15.optional()
 }).strict();
 var systemHealthCheckInputSchema = systemHealthInputSchema.extend({
   caller: systemHealthCallerSchema
 }).strict();
 var systemHealthOutputSchema = external_exports.object({
-  generated_at: isoDateTime6,
+  generated_at: isoDateTime7,
   scope: systemHealthScopeSchema,
   verdict: systemHealthVerdictSchema,
   top_actions: external_exports.array(systemHealthActionSchema),
@@ -43984,10 +44156,10 @@ var baserowFilteredCountInputSchema = external_exports.object({
 }).strict();
 
 // ../../packages/protocol/src/signal-report.ts
-var uuidSchema15 = external_exports.string().uuid();
+var uuidSchema16 = external_exports.string().uuid();
 var dateOnlySchema2 = external_exports.string().regex(/^\d{4}-\d{2}-\d{2}$/, "expected YYYY-MM-DD");
 var signalReportInputSchema = external_exports.object({
-  measurable_id: uuidSchema15,
+  measurable_id: uuidSchema16,
   value: external_exports.number().finite(),
   // Optional; defaults to the measurable's current period (resolved in the
   // command against the measurable's own cadence via the canonical bounds).
@@ -43998,8 +44170,8 @@ var signalReportInputSchema = external_exports.object({
   confidence: external_exports.enum(["low", "medium", "high"]).optional()
 }).strict();
 var signalReportOutputSchema = external_exports.object({
-  reading_id: uuidSchema15,
-  measurable_id: uuidSchema15,
+  reading_id: uuidSchema16,
+  measurable_id: uuidSchema16,
   // Always false: an agent-sourced reading is a draft until a human confirms it.
   confirmed: external_exports.literal(false)
 }).strict();
@@ -44029,8 +44201,109 @@ var signalReadingProposalSchema = external_exports.object({
   }
 });
 
-// ../../packages/protocol/src/software-factory.ts
+// ../../packages/protocol/src/secret-broker.ts
 var uuid10 = external_exports.string().uuid();
+var VAULT_REF_PROVIDER = /^(?:infisical|doppler|local-dev):\/\/\S+$/;
+var brokerVaultRefSchema = external_exports.string().min(1).max(500).regex(VAULT_REF_PROVIDER, "vault_ref must be a provider URI, e.g. infisical://path, doppler://path, or local-dev://path").refine((value) => !hasSecretShapedValue(value), {
+  message: "vault_ref must be a pointer, never raw secret material"
+});
+var brokerGrantKeySchema = external_exports.string().trim().min(1).max(200).regex(/^[a-z0-9][a-z0-9._:-]*$/i, "grant_key must be a short identifier (letters, digits, . _ : -)").refine((value) => !hasSecretShapedValue(value), {
+  message: "grant_key must be an identifier, never raw secret material"
+});
+var brokerProviderSchema = external_exports.string().trim().min(1).max(100).refine((value) => !hasSecretShapedValue(value), {
+  message: "provider must be a label, never raw secret material"
+});
+var brokerAllowedHostSchema = external_exports.string().trim().min(1).max(255).regex(/^[a-zA-Z0-9.-]+$/, "allowed_host must be a bare hostname (letters, digits, dots, hyphens) \u2014 no scheme, port, or path");
+var brokerAllowedPathPrefixSchema = external_exports.string().min(1).max(512).refine((value) => value.startsWith("/"), { message: "allowed_path_prefix must start with /" }).refine((value) => !value.includes("//"), { message: "allowed_path_prefix must not contain //" }).refine((value) => !value.includes("\\"), { message: "allowed_path_prefix must not contain a backslash" }).refine((value) => !value.includes("://"), { message: "allowed_path_prefix must not contain a scheme" }).refine((value) => !value.includes("?") && !value.includes("#"), { message: "allowed_path_prefix must not contain a query or fragment" }).refine((value) => !value.includes(".."), { message: "allowed_path_prefix must not contain .." }).refine((value) => ![...value].some((ch) => ch <= " "), { message: "allowed_path_prefix must not contain whitespace or control characters" });
+var brokerHttpMethodSchema = external_exports.enum(["GET", "HEAD", "OPTIONS", "POST", "PUT", "PATCH", "DELETE"]);
+var READ_SAFE_METHODS = /* @__PURE__ */ new Set(["GET", "HEAD", "OPTIONS"]);
+var brokerScopeTierSchema = external_exports.enum(["read", "write"]);
+var brokerInjectionModeSchema = external_exports.enum(["header_bearer", "header", "query"]);
+var brokerInjectionNameSchema = external_exports.string().min(1).max(100).regex(/^[A-Za-z0-9._-]+$/, "injection_name may contain only letters, digits, . _ -");
+var brokerAllowedMethodsSchema = external_exports.array(brokerHttpMethodSchema).min(1, "at least one allowed method is required").max(7).refine((methods) => new Set(methods).size === methods.length, { message: "allowed_methods must not contain duplicates" });
+var brokerGrantStatusSchema = external_exports.enum(["active", "revoked"]);
+function refineGrantShape(value, ctx) {
+  if (value.scope_tier === "read" && value.allowed_methods.some((method) => !READ_SAFE_METHODS.has(method))) {
+    ctx.addIssue({ code: "custom", path: ["allowed_methods"], message: "a read-tier grant may only allow GET, HEAD, or OPTIONS" });
+  }
+  const injectionMode = value.injection_mode ?? "header_bearer";
+  if (injectionMode !== "header_bearer" && !value.injection_name) {
+    ctx.addIssue({ code: "custom", path: ["injection_name"], message: "injection_name is required unless injection_mode is header_bearer" });
+  }
+}
+var secretGrantRequestInputSchema = external_exports.object({
+  seat_id: uuid10,
+  grant_key: brokerGrantKeySchema,
+  provider: brokerProviderSchema,
+  allowed_host: brokerAllowedHostSchema,
+  allowed_path_prefix: brokerAllowedPathPrefixSchema.optional(),
+  allowed_methods: brokerAllowedMethodsSchema,
+  scope_tier: brokerScopeTierSchema,
+  reason: external_exports.string().max(2e3).refine((value) => !hasSecretShapedValue(value), { message: "reason must never contain secret material" }).optional()
+}).strict().superRefine((value, ctx) => refineGrantShape(value, ctx));
+var secretGrantRequestOutputSchema = external_exports.object({
+  requested: external_exports.literal(true),
+  event_id: uuid10,
+  seat_id: uuid10,
+  grant_key: external_exports.string(),
+  scope_tier: brokerScopeTierSchema
+}).strict();
+var secretGrantGrantInputSchema = external_exports.object({
+  seat_id: uuid10,
+  grant_key: brokerGrantKeySchema,
+  // POINTER only. The vault-ref refinement rejects any raw-secret value.
+  vault_ref: brokerVaultRefSchema,
+  provider: brokerProviderSchema,
+  allowed_host: brokerAllowedHostSchema,
+  allowed_path_prefix: brokerAllowedPathPrefixSchema.optional(),
+  allowed_methods: brokerAllowedMethodsSchema,
+  scope_tier: brokerScopeTierSchema,
+  injection_mode: brokerInjectionModeSchema.default("header_bearer"),
+  injection_name: brokerInjectionNameSchema.optional(),
+  // ISO-8601; absent = no expiry.
+  expires_at: external_exports.string().datetime({ offset: true }).optional()
+}).strict().superRefine((value, ctx) => refineGrantShape(value, ctx));
+var secretGrantGrantOutputSchema = external_exports.object({
+  grant_id: uuid10,
+  seat_id: uuid10,
+  grant_key: external_exports.string(),
+  scope_tier: brokerScopeTierSchema,
+  status: brokerGrantStatusSchema
+}).strict();
+var secretGrantRevokeInputSchema = external_exports.object({
+  grant_id: uuid10
+}).strict();
+var secretGrantRevokeOutputSchema = external_exports.object({
+  grant_id: uuid10,
+  status: brokerGrantStatusSchema
+}).strict();
+var secretGrantSummarySchema = external_exports.object({
+  id: uuid10,
+  seat_id: uuid10,
+  grant_key: external_exports.string(),
+  provider: external_exports.string(),
+  allowed_host: external_exports.string(),
+  allowed_path_prefix: external_exports.string(),
+  allowed_methods: external_exports.array(external_exports.string()),
+  scope_tier: brokerScopeTierSchema,
+  injection_mode: brokerInjectionModeSchema,
+  injection_name: external_exports.string().nullable(),
+  status: brokerGrantStatusSchema,
+  granted_by_user_id: uuid10,
+  granted_at: external_exports.string(),
+  revoked_at: external_exports.string().nullable(),
+  expires_at: external_exports.string().nullable()
+}).strict();
+var secretGrantListInputSchema = external_exports.object({
+  seat_id: uuid10.nullable().optional(),
+  include_revoked: external_exports.boolean().optional()
+}).strict();
+var secretGrantListOutputSchema = external_exports.object({
+  grants: external_exports.array(secretGrantSummarySchema)
+}).strict();
+
+// ../../packages/protocol/src/software-factory.ts
+var uuid11 = external_exports.string().uuid();
 var SOFTWARE_PHASE_VALUES = [
   "intake",
   "discovery_scoping",
@@ -44141,7 +44414,7 @@ var softwareConfigValueKindSchema = external_exports.enum(["plain", "secret_ref"
 var softwareCredentialRequestStatusSchema = external_exports.enum(["pending", "fulfilled", "rejected", "canceled"]);
 var softwareSecretAccessOperationSchema = external_exports.enum(["use", "vercel_env_sync", "test_execution"]);
 var softwareProjectSummarySchema = external_exports.object({
-  id: uuid10,
+  id: uuid11,
   name: external_exports.string().min(1),
   slug: external_exports.string().min(1),
   base_branch: external_exports.string().min(1),
@@ -44168,8 +44441,8 @@ var softwareProjectListInputSchema = external_exports.object({}).strict();
 var softwareProjectListOutputSchema = external_exports.object({
   projects: external_exports.array(softwareProjectSummarySchema)
 });
-var VAULT_REF_PROVIDER = /^(?:infisical|doppler|local-dev):\/\/\S+$/;
-var softwareVaultRefSchema = external_exports.string().min(1).max(500).regex(VAULT_REF_PROVIDER, "vault_ref must be a provider URI, e.g. infisical://path, doppler://path, or local-dev://path").refine((value) => !hasSecretShapedValue(value), {
+var VAULT_REF_PROVIDER2 = /^(?:infisical|doppler|local-dev):\/\/\S+$/;
+var softwareVaultRefSchema = external_exports.string().min(1).max(500).regex(VAULT_REF_PROVIDER2, "vault_ref must be a provider URI, e.g. infisical://path, doppler://path, or local-dev://path").refine((value) => !hasSecretShapedValue(value), {
   message: "vault_ref must be a pointer, never raw secret material"
 });
 var softwareSecretKeyNameSchema = external_exports.string().trim().min(1).max(200).refine((value) => !hasSecretShapedValue(value), {
@@ -44195,11 +44468,11 @@ var softwarePhaseSchedulerStateSchema = external_exports.object({
   ]).nullable(),
   message: external_exports.string(),
   remediation_href: external_exports.string().nullable(),
-  work_order_id: uuid10.nullable()
+  work_order_id: uuid11.nullable()
 });
 var softwareBuildRequestSummarySchema = external_exports.object({
-  id: uuid10,
-  software_project_id: uuid10,
+  id: uuid11,
+  software_project_id: uuid11,
   title: external_exports.string(),
   source_channel: softwareSourceChannelSchema,
   source_ref: external_exports.string().nullable(),
@@ -44215,7 +44488,7 @@ var softwareBuildRequestSummarySchema = external_exports.object({
   scheduler_state: softwarePhaseSchedulerStateSchema.nullable()
 });
 var softwarePhaseRunSummarySchema = external_exports.object({
-  id: uuid10,
+  id: uuid11,
   phase: softwarePhaseSchema,
   status: softwarePhaseRunStatusSchema,
   attempt_no: external_exports.number().int(),
@@ -44225,17 +44498,17 @@ var softwarePhaseRunSummarySchema = external_exports.object({
   scheduler_state: softwarePhaseSchedulerStateSchema.nullable()
 });
 var softwareGateSummarySchema = external_exports.object({
-  id: uuid10,
+  id: uuid11,
   gate_type: softwareGateTypeSchema,
   status: external_exports.enum(["pending", "approved", "rejected", "held"]),
-  phase_run_id: uuid10.nullable(),
-  resolved_by_user_id: uuid10.nullable(),
+  phase_run_id: uuid11.nullable(),
+  resolved_by_user_id: uuid11.nullable(),
   rationale: external_exports.string().nullable(),
   created_at: external_exports.string()
 });
 var softwareChangesetSummarySchema = external_exports.object({
-  id: uuid10,
-  build_request_id: uuid10,
+  id: uuid11,
+  build_request_id: uuid11,
   ordinal: external_exports.number().int(),
   title: external_exports.string(),
   split_criterion: softwareChangesetSplitCriterionSchema,
@@ -44249,10 +44522,10 @@ var softwareChangesetSummarySchema = external_exports.object({
   created_at: external_exports.string()
 });
 var softwareTaskSummarySchema = external_exports.object({
-  id: uuid10,
-  build_request_id: uuid10,
-  changeset_id: uuid10,
-  plan_version_id: uuid10,
+  id: uuid11,
+  build_request_id: uuid11,
+  changeset_id: uuid11,
+  plan_version_id: uuid11,
   ordinal: external_exports.number().int(),
   task_key: external_exports.string(),
   title: external_exports.string(),
@@ -44267,8 +44540,8 @@ var softwareTaskSummarySchema = external_exports.object({
   created_at: external_exports.string()
 });
 var softwarePlanVersionSummarySchema = external_exports.object({
-  id: uuid10,
-  build_request_id: uuid10,
+  id: uuid11,
+  build_request_id: uuid11,
   version_no: external_exports.number().int(),
   status: softwarePlanVersionStatusSchema,
   summary: external_exports.string().nullable(),
@@ -44278,37 +44551,37 @@ var softwarePlanVersionSummarySchema = external_exports.object({
     question: external_exports.string(),
     answer: external_exports.string()
   })).default([]),
-  created_by_seat_id: uuid10.nullable(),
+  created_by_seat_id: uuid11.nullable(),
   created_at: external_exports.string()
 });
 var softwarePlanConformanceFindingSummarySchema = external_exports.object({
-  id: uuid10,
-  build_request_id: uuid10,
-  changeset_id: uuid10.nullable(),
-  phase_run_id: uuid10.nullable(),
-  plan_version_id: uuid10.nullable(),
+  id: uuid11,
+  build_request_id: uuid11,
+  changeset_id: uuid11.nullable(),
+  phase_run_id: uuid11.nullable(),
+  plan_version_id: uuid11.nullable(),
   severity: softwareConformanceSeveritySchema,
   category: softwareConformanceCategorySchema,
   summary: external_exports.string(),
   detail: external_exports.string().nullable(),
   status: softwareConformanceStatusSchema,
-  accepted_by_decision_id: uuid10.nullable(),
+  accepted_by_decision_id: uuid11.nullable(),
   resolved_at: external_exports.string().nullable(),
   created_at: external_exports.string()
 });
 var softwareAuthorityProfileSummarySchema = external_exports.object({
-  id: uuid10,
-  software_project_id: uuid10.nullable(),
+  id: uuid11,
+  software_project_id: uuid11.nullable(),
   name: external_exports.string(),
   preset: softwareAuthorityPresetSchema,
   is_default: external_exports.boolean(),
   created_at: external_exports.string()
 });
 var softwareSecretGrantSummarySchema = external_exports.object({
-  id: uuid10,
-  software_project_id: uuid10,
+  id: uuid11,
+  software_project_id: uuid11,
   environment: softwareEnvironmentSchema,
-  seat_id: uuid10,
+  seat_id: uuid11,
   action: external_exports.string(),
   key_name: external_exports.string(),
   vault_ref: external_exports.string(),
@@ -44317,8 +44590,8 @@ var softwareSecretGrantSummarySchema = external_exports.object({
   revoked_at: external_exports.string().nullable()
 });
 var softwareConfigEntrySummarySchema = external_exports.object({
-  id: uuid10,
-  software_project_id: uuid10,
+  id: uuid11,
+  software_project_id: uuid11,
   environment: softwareEnvironmentSchema,
   key_name: external_exports.string(),
   value_kind: softwareConfigValueKindSchema,
@@ -44328,20 +44601,20 @@ var softwareConfigEntrySummarySchema = external_exports.object({
   updated_at: external_exports.string()
 });
 var softwareCredentialRequestSummarySchema = external_exports.object({
-  id: uuid10,
-  software_project_id: uuid10,
+  id: uuid11,
+  software_project_id: uuid11,
   environment: softwareEnvironmentSchema,
-  requested_by_seat_id: uuid10,
+  requested_by_seat_id: uuid11,
   action: external_exports.string(),
   key_name: external_exports.string(),
   reason: external_exports.string().nullable(),
   status: softwareCredentialRequestStatusSchema,
-  approval_task_id: uuid10.nullable(),
+  approval_task_id: uuid11.nullable(),
   created_at: external_exports.string()
 });
 var softwareCapacityObservationSummarySchema = external_exports.object({
-  id: uuid10,
-  runner_id: uuid10,
+  id: uuid11,
+  runner_id: uuid11,
   observed_at: external_exports.string(),
   os: external_exports.string().nullable(),
   cpu_count: external_exports.number().int().nullable(),
@@ -44357,7 +44630,7 @@ var softwareRequestCreateInputSchema = external_exports.object({
   // this schema) enforces that exactly one resolves, with an actionable error
   // when neither is given or neither matches — keeping this shape a plain
   // `z.object` so JSON-schema/CLI-flag projection stays simple (no `.refine`).
-  software_project_id: uuid10.optional(),
+  software_project_id: uuid11.optional(),
   project: external_exports.string().trim().min(1).max(200).optional(),
   // Untrusted display text (ADR-0018 §5) — bounded, never treated as an instruction.
   title: external_exports.string().trim().min(1).max(500),
@@ -44369,11 +44642,11 @@ var softwareRequestCreateInputSchema = external_exports.object({
   automation_mode: softwareAutomationModeSchema.optional()
 }).strict();
 var softwareRequestCreateOutputSchema = external_exports.object({
-  build_request_id: uuid10,
-  software_project_id: uuid10,
+  build_request_id: uuid11,
+  software_project_id: uuid11,
   status: softwareRequestStatusSchema,
   current_phase: softwarePhaseSchema,
-  phase_run_id: uuid10,
+  phase_run_id: uuid11,
   scheduler_state: softwarePhaseSchedulerStateSchema
 });
 var softwareRequestListInputSchema = external_exports.object({
@@ -44383,7 +44656,7 @@ var softwareRequestListOutputSchema = external_exports.object({
   requests: external_exports.array(softwareBuildRequestSummarySchema)
 });
 var softwareRequestShowInputSchema = external_exports.object({
-  build_request_id: uuid10
+  build_request_id: uuid11
 }).strict();
 var softwareRequestShowOutputSchema = external_exports.object({
   request: softwareBuildRequestSummarySchema,
@@ -44396,80 +44669,80 @@ var softwareRequestShowOutputSchema = external_exports.object({
 });
 var softwareRequestLifecycleReason = external_exports.string().trim().min(1).max(2e3);
 var softwareRequestPauseInputSchema = external_exports.object({
-  build_request_id: uuid10,
+  build_request_id: uuid11,
   reason: softwareRequestLifecycleReason.optional()
 }).strict();
 var softwareRequestCancelInputSchema = external_exports.object({
-  build_request_id: uuid10,
+  build_request_id: uuid11,
   reason: softwareRequestLifecycleReason.optional()
 }).strict();
 var softwareRequestResumeInputSchema = external_exports.object({
-  build_request_id: uuid10,
+  build_request_id: uuid11,
   reason: softwareRequestLifecycleReason.optional(),
   termination_bound: softwareTerminationBoundSchema.optional()
 }).strict();
 var softwareRequestLifecycleOutputSchema = external_exports.object({
-  build_request_id: uuid10,
+  build_request_id: uuid11,
   status: softwareRequestStatusSchema,
   current_phase: softwarePhaseSchema,
-  phase_run_id: uuid10.nullable(),
-  work_order_id: uuid10.nullable(),
-  resume_from_task_id: uuid10.nullable()
+  phase_run_id: uuid11.nullable(),
+  work_order_id: uuid11.nullable(),
+  resume_from_task_id: uuid11.nullable()
 });
 var softwarePhaseAdvanceInputSchema = external_exports.object({
-  build_request_id: uuid10,
+  build_request_id: uuid11,
   to_phase: softwarePhaseSchema,
-  owning_seat_id: uuid10.optional(),
+  owning_seat_id: uuid11.optional(),
   note: external_exports.string().max(2e3).optional()
 }).strict();
 var softwarePhaseAdvanceOutputSchema = external_exports.object({
-  build_request_id: uuid10,
+  build_request_id: uuid11,
   from_phase: softwarePhaseSchema,
   to_phase: softwarePhaseSchema,
-  phase_run_id: uuid10
+  phase_run_id: uuid11
 });
 var softwareGateDecideInputSchema = external_exports.object({
-  gate_id: uuid10,
+  gate_id: uuid11,
   decision: softwareGateDecisionSchema,
   rationale: external_exports.string().max(4e3).optional()
 }).strict();
 var softwareGateDecideOutputSchema = external_exports.object({
-  gate_id: uuid10,
+  gate_id: uuid11,
   status: external_exports.enum(["approved", "rejected"]),
-  resolved_by_user_id: uuid10,
-  decision_id: uuid10.nullable()
+  resolved_by_user_id: uuid11,
+  decision_id: uuid11.nullable()
 });
 var forgeClarificationAnswer = external_exports.object({
   question: external_exports.string().trim().min(1).max(2e3),
   answer: external_exports.string().trim().min(1).max(4e3)
 }).strict();
 var softwareRequestAnswerClarificationInputSchema = external_exports.object({
-  build_request_id: uuid10,
+  build_request_id: uuid11,
   answers: external_exports.array(forgeClarificationAnswer).min(1).max(50),
   // The planner marks the plan ready once its questions are resolved; the human/COS can
   // signal that here. Default false keeps the plan in needs_clarification.
   mark_ready_for_plan_review: external_exports.boolean().default(false)
 }).strict();
 var softwareRequestAnswerClarificationOutputSchema = external_exports.object({
-  build_request_id: uuid10,
-  plan_version_id: uuid10,
+  build_request_id: uuid11,
+  plan_version_id: uuid11,
   status: softwarePlanVersionStatusSchema,
   answered_count: external_exports.number().int()
 });
 var softwarePlanApproveInputSchema = external_exports.object({
-  build_request_id: uuid10,
+  build_request_id: uuid11,
   rationale: external_exports.string().trim().min(1).max(4e3).optional()
 }).strict();
 var softwarePlanRejectInputSchema = external_exports.object({
-  build_request_id: uuid10,
+  build_request_id: uuid11,
   // A rejection must say why (it routes the request back to discovery/scoping).
   rationale: external_exports.string().trim().min(1).max(4e3)
 }).strict();
 var softwarePlanDecisionOutputSchema = external_exports.object({
-  build_request_id: uuid10,
-  plan_version_id: uuid10,
+  build_request_id: uuid11,
+  plan_version_id: uuid11,
   status: external_exports.enum(["approved", "rejected"]),
-  decision_id: uuid10,
+  decision_id: uuid11,
   current_phase: softwarePhaseSchema
 });
 var forgeConformanceFindingInput = external_exports.object({
@@ -44477,41 +44750,41 @@ var forgeConformanceFindingInput = external_exports.object({
   category: softwareConformanceCategorySchema.default("other"),
   summary: external_exports.string().trim().min(1).max(2e3),
   detail: external_exports.string().trim().min(1).max(8e3).optional(),
-  changeset_id: uuid10.optional(),
-  plan_version_id: uuid10.optional()
+  changeset_id: uuid11.optional(),
+  plan_version_id: uuid11.optional()
 }).strict();
 var softwareConformanceRecordFindingsInputSchema = external_exports.object({
-  build_request_id: uuid10,
-  phase_run_id: uuid10.optional(),
+  build_request_id: uuid11,
+  phase_run_id: uuid11.optional(),
   findings: external_exports.array(forgeConformanceFindingInput).min(1).max(50)
 }).strict();
 var softwareConformanceRecordFindingsOutputSchema = external_exports.object({
-  build_request_id: uuid10,
+  build_request_id: uuid11,
   recorded_count: external_exports.number().int(),
-  finding_ids: external_exports.array(uuid10),
+  finding_ids: external_exports.array(uuid11),
   open_finding_count: external_exports.number().int()
 }).strict();
 var softwareConformanceResolveFindingInputSchema = external_exports.object({
-  build_request_id: uuid10,
-  finding_ids: external_exports.array(uuid10).min(1).max(50),
+  build_request_id: uuid11,
+  finding_ids: external_exports.array(uuid11).min(1).max(50),
   // The re-review run that verified the fix — provenance only (rides into the append-only audit
   // event; the finding row's resolution state is the durable transition).
-  phase_run_id: uuid10.optional()
+  phase_run_id: uuid11.optional()
 }).strict();
 var softwareConformanceResolveFindingOutputSchema = external_exports.object({
-  build_request_id: uuid10,
+  build_request_id: uuid11,
   resolved_count: external_exports.number().int(),
-  resolved_finding_ids: external_exports.array(uuid10),
+  resolved_finding_ids: external_exports.array(uuid11),
   open_finding_count: external_exports.number().int()
 }).strict();
 var softwareAuthorityProfileListInputSchema = external_exports.object({
-  software_project_id: uuid10.nullable().optional()
+  software_project_id: uuid11.nullable().optional()
 }).strict();
 var softwareAuthorityProfileListOutputSchema = external_exports.object({
   profiles: external_exports.array(softwareAuthorityProfileSummarySchema)
 });
 var softwareAuthorityProfileCreateInputSchema = external_exports.object({
-  software_project_id: uuid10.nullable().optional(),
+  software_project_id: uuid11.nullable().optional(),
   name: external_exports.string().trim().min(1).max(120),
   preset: softwareAuthorityPresetSchema.default("read_only"),
   // A closed capability map (booleans by capability key). Never derived from
@@ -44520,77 +44793,77 @@ var softwareAuthorityProfileCreateInputSchema = external_exports.object({
   is_default: external_exports.boolean().optional()
 }).strict();
 var softwareAuthorityProfileCreateOutputSchema = external_exports.object({
-  profile_id: uuid10,
+  profile_id: uuid11,
   name: external_exports.string(),
   preset: softwareAuthorityPresetSchema
 });
 var softwareAuthorityGrantInputSchema = external_exports.object({
-  software_project_id: uuid10,
-  seat_id: uuid10,
-  authority_profile_id: uuid10
+  software_project_id: uuid11,
+  seat_id: uuid11,
+  authority_profile_id: uuid11
 }).strict();
 var softwareAuthorityGrantOutputSchema = external_exports.object({
-  grant_id: uuid10,
-  software_project_id: uuid10,
-  seat_id: uuid10,
-  authority_profile_id: uuid10,
+  grant_id: uuid11,
+  software_project_id: uuid11,
+  seat_id: uuid11,
+  authority_profile_id: uuid11,
   status: softwareGrantStatusSchema
 });
 var softwareAuthorityRevokeInputSchema = external_exports.object({
-  grant_id: uuid10
+  grant_id: uuid11
 }).strict();
 var softwareAuthorityRevokeOutputSchema = external_exports.object({
-  grant_id: uuid10,
+  grant_id: uuid11,
   status: softwareGrantStatusSchema
 });
 var softwareSecretRequestInputSchema = external_exports.object({
-  software_project_id: uuid10,
+  software_project_id: uuid11,
   environment: softwareEnvironmentSchema,
-  seat_id: uuid10,
+  seat_id: uuid11,
   action: softwareSecretActionSchema,
   key_name: softwareSecretKeyNameSchema,
   reason: external_exports.string().max(2e3).optional()
 }).strict();
 var softwareSecretRequestOutputSchema = external_exports.object({
   requested: external_exports.literal(true),
-  credential_request_id: uuid10,
-  approval_task_id: uuid10,
-  software_project_id: uuid10,
+  credential_request_id: uuid11,
+  approval_task_id: uuid11,
+  software_project_id: uuid11,
   environment: softwareEnvironmentSchema,
-  seat_id: uuid10,
+  seat_id: uuid11,
   key_name: external_exports.string()
 });
 var softwareSecretGrantInputSchema = external_exports.object({
-  software_project_id: uuid10,
+  software_project_id: uuid11,
   environment: softwareEnvironmentSchema,
-  seat_id: uuid10,
+  seat_id: uuid11,
   action: softwareSecretActionSchema,
   key_name: softwareSecretKeyNameSchema,
   // POINTER only. The vault ref shape refinement rejects any raw-secret value.
   vault_ref: softwareVaultRefSchema
 }).strict();
 var softwareSecretGrantOutputSchema = external_exports.object({
-  grant_id: uuid10,
+  grant_id: uuid11,
   key_name: external_exports.string(),
   environment: softwareEnvironmentSchema,
   status: softwareGrantStatusSchema
 });
 var softwareSecretRevokeInputSchema = external_exports.object({
-  grant_id: uuid10
+  grant_id: uuid11
 }).strict();
 var softwareSecretRevokeOutputSchema = external_exports.object({
-  grant_id: uuid10,
+  grant_id: uuid11,
   status: softwareGrantStatusSchema
 });
 var softwareConfigListInputSchema = external_exports.object({
-  software_project_id: uuid10.nullable().optional(),
+  software_project_id: uuid11.nullable().optional(),
   environment: softwareEnvironmentSchema.nullable().optional()
 }).strict();
 var softwareConfigListOutputSchema = external_exports.object({
   entries: external_exports.array(softwareConfigEntrySummarySchema)
 });
 var softwareConfigSetInputSchema = external_exports.object({
-  software_project_id: uuid10,
+  software_project_id: uuid11,
   environment: softwareEnvironmentSchema,
   key_name: softwareSecretKeyNameSchema,
   value_kind: softwareConfigValueKindSchema,
@@ -44610,24 +44883,24 @@ var softwareConfigSetInputSchema = external_exports.object({
   }
 });
 var softwareConfigSetOutputSchema = external_exports.object({
-  config_entry_id: uuid10,
-  software_project_id: uuid10,
+  config_entry_id: uuid11,
+  software_project_id: uuid11,
   environment: softwareEnvironmentSchema,
   key_name: external_exports.string(),
   value_kind: softwareConfigValueKindSchema,
   has_secret_ref: external_exports.boolean()
 });
 var softwareSecretRequestListInputSchema = external_exports.object({
-  software_project_id: uuid10.nullable().optional(),
+  software_project_id: uuid11.nullable().optional(),
   status: softwareCredentialRequestStatusSchema.nullable().optional()
 }).strict();
 var softwareSecretRequestListOutputSchema = external_exports.object({
   requests: external_exports.array(softwareCredentialRequestSummarySchema)
 });
 var softwareSecretUseInputSchema = external_exports.object({
-  software_project_id: uuid10,
+  software_project_id: uuid11,
   environment: softwareEnvironmentSchema,
-  seat_id: uuid10,
+  seat_id: uuid11,
   action: softwareSecretActionSchema,
   key_name: softwareSecretKeyNameSchema,
   operation: softwareSecretAccessOperationSchema.default("use")
@@ -44638,12 +44911,12 @@ var softwareSecretUseOutputSchema = external_exports.object({
   key_name: external_exports.string(),
   environment: softwareEnvironmentSchema,
   operation: softwareSecretAccessOperationSchema,
-  access_log_id: uuid10,
-  missing_request_id: uuid10.nullable(),
+  access_log_id: uuid11,
+  missing_request_id: uuid11.nullable(),
   redacted_summary: external_exports.record(external_exports.string(), external_exports.unknown())
 });
 var softwareCapacityListInputSchema = external_exports.object({
-  runner_id: uuid10.nullable().optional(),
+  runner_id: uuid11.nullable().optional(),
   limit: external_exports.number().int().positive().max(200).optional()
 }).strict();
 var softwareCapacityListOutputSchema = external_exports.object({
@@ -44698,9 +44971,9 @@ var forgeTrustedControlSchema = external_exports.object({
   automation_mode: softwareAutomationModeSchema,
   inferred_risk: softwareRiskLevelSchema,
   risk_ceiling: softwareRiskLevelSchema.nullable().default(null),
-  authority_profile_ids: external_exports.array(uuid10).max(50).default([]),
+  authority_profile_ids: external_exports.array(uuid11).max(50).default([]),
   active_secret_grant_count: external_exports.number().int().nonnegative().max(1e3).default(0),
-  pending_gate_ids: external_exports.array(uuid10).max(50).default([])
+  pending_gate_ids: external_exports.array(uuid11).max(50).default([])
 }).strict();
 var forgeSeatSkillSchema = external_exports.object({
   slug: external_exports.string().trim().min(1).max(200),
@@ -44709,9 +44982,9 @@ var forgeSeatSkillSchema = external_exports.object({
 }).strict();
 var forgeRuntimeContextPacketSchema = external_exports.object({
   schema_version: external_exports.literal(1),
-  phase_run_id: uuid10,
-  build_request_id: uuid10,
-  software_project_id: uuid10,
+  phase_run_id: uuid11,
+  build_request_id: uuid11,
+  software_project_id: uuid11,
   phase: softwarePhaseSchema,
   request_status: softwareRequestStatusSchema,
   project: external_exports.object({
@@ -44720,7 +44993,7 @@ var forgeRuntimeContextPacketSchema = external_exports.object({
   }).strict(),
   scheduler: external_exports.object({
     lease_model: external_exports.literal("work_order_claim_heartbeat"),
-    runner_id: uuid10,
+    runner_id: uuid11,
     max_runner_sessions: external_exports.number().int().positive().max(8),
     model_account_state: external_exports.string().min(1).max(80),
     account_alias: external_exports.string().min(1).max(200).nullable()
@@ -44804,7 +45077,7 @@ var runnerTurnReportSchema = external_exports.object({
 var softwareDeveloperTeamInstallInputSchema = external_exports.object({
   // The human-accountable steward seat for the installed team. Agent seats created
   // by the template chain through this seat so no agent occupancy can be orphaned.
-  steward_seat_id: uuid10,
+  steward_seat_id: uuid11,
   // Optional project scope for authority grants. Authority profile presets are
   // installed tenant-wide either way; grants are project-scoped only when supplied.
   // DER-1241: `.nullable()` too — this command is human-confirmed, so its input is
@@ -44812,7 +45085,7 @@ var softwareDeveloperTeamInstallInputSchema = external_exports.object({
   // replay; an empty project round-trips as JSON `null`, which a bare `.optional()`
   // rejects (→ "Command input failed schema validation"). Matches the sibling
   // software-factory schemas that already use `.nullable().optional()`.
-  software_project_id: uuid10.nullable().optional(),
+  software_project_id: uuid11.nullable().optional(),
   assign_skills: external_exports.boolean().default(true),
   // DER-1264: the install auto-staffs live agents at a pr_only, observe-first
   // posture. If the tenant's company autonomy ceiling (`agent_policy`) is MORE
@@ -44832,34 +45105,34 @@ var softwareDeveloperTeamInstallInputSchema = external_exports.object({
 }).strict();
 var softwareDeveloperTeamSeatSummarySchema = external_exports.object({
   role: softwareDeveloperTeamRoleSchema,
-  seat_id: uuid10,
+  seat_id: uuid11,
   name: external_exports.string(),
-  charter_version_id: uuid10,
+  charter_version_id: uuid11,
   created: external_exports.boolean()
 });
 var softwareDeveloperTeamSkillSummarySchema = external_exports.object({
   slug: external_exports.string(),
-  skill_id: uuid10,
-  skill_version_id: uuid10,
-  assigned_seat_ids: external_exports.array(uuid10)
+  skill_id: uuid11,
+  skill_version_id: uuid11,
+  assigned_seat_ids: external_exports.array(uuid11)
 });
 var softwareDeveloperTeamAuthorityProfileSummarySchema = external_exports.object({
   preset: softwareAuthorityPresetSchema,
-  profile_id: uuid10,
+  profile_id: uuid11,
   name: external_exports.string()
 });
 var softwareDeveloperTeamAuthorityGrantSummarySchema = external_exports.object({
   role: softwareDeveloperTeamRoleSchema,
-  software_project_id: uuid10,
-  seat_id: uuid10,
-  authority_profile_id: uuid10,
-  grant_id: uuid10,
+  software_project_id: uuid11,
+  seat_id: uuid11,
+  authority_profile_id: uuid11,
+  grant_id: uuid11,
   created: external_exports.boolean()
 });
 var softwareDeveloperTeamOccupancySummarySchema = external_exports.object({
   role: softwareDeveloperTeamRoleSchema,
-  seat_id: uuid10,
-  agent_id: uuid10,
+  seat_id: uuid11,
+  agent_id: uuid11,
   template_slug: external_exports.string(),
   status: external_exports.literal("live"),
   // false when a live agent already occupied the seat (idempotent re-install).
@@ -44879,7 +45152,7 @@ var softwareDeveloperTeamTokenBudgetSummarySchema = external_exports.object({
   set_by_install: external_exports.boolean()
 });
 var softwareDeveloperTeamGithubPolicySummarySchema = external_exports.object({
-  software_project_id: uuid10,
+  software_project_id: uuid11,
   automation_mode_ceiling: softwareAutomationModeSchema,
   // false when a pre-existing policy was preserved (not created by this install).
   created: external_exports.boolean()
@@ -44907,8 +45180,8 @@ var softwareDeveloperTeamUninstallInputSchema = external_exports.object({
 }).strict();
 var softwareDeveloperTeamDecommissionedAgentSchema = external_exports.object({
   role: softwareDeveloperTeamRoleSchema.nullable(),
-  seat_id: uuid10,
-  agent_id: uuid10
+  seat_id: uuid11,
+  agent_id: uuid11
 });
 var softwareDeveloperTeamUninstallOutputSchema = external_exports.object({
   torn_down: external_exports.boolean(),
@@ -45058,8 +45331,8 @@ var forgeMemoryDraftArtifact = external_exports.object({
   follow_up_items: forgeArtifactList
 }).strict();
 var softwareGithubAutomationPolicyInputSchema = external_exports.object({
-  software_project_id: uuid10,
-  authority_profile_id: uuid10.nullable().optional(),
+  software_project_id: uuid11,
+  authority_profile_id: uuid11.nullable().optional(),
   automation_mode_ceiling: softwareAutomationModeSchema.default("plan_only"),
   allowed_actions: external_exports.array(softwareGithubActionSchema).max(20),
   // DER-1233: the element schema is a single FLATTENED enum (the union of the
@@ -45090,12 +45363,12 @@ var softwareGithubInstallationConnectInputSchema = external_exports.object({
   repositories: external_exports.array(softwareGithubConnectedRepositoryInputSchema).min(1).max(200)
 }).strict();
 var softwareGithubInstallationConnectOutputSchema = external_exports.object({
-  github_installation_id: uuid10,
+  github_installation_id: uuid11,
   repositories_connected: external_exports.number().int().nonnegative()
 });
 var softwareGithubRepositoryBindMappingSchema = external_exports.object({
   repository_id: external_exports.number().int().positive(),
-  software_project_id: uuid10
+  software_project_id: uuid11
 }).strict();
 var softwareGithubInstallationBindInputSchema = external_exports.object({
   app_slug: external_exports.string().trim().min(1).max(120).default("rost-forge"),
@@ -45103,7 +45376,7 @@ var softwareGithubInstallationBindInputSchema = external_exports.object({
   bindings: external_exports.array(softwareGithubRepositoryBindMappingSchema).min(1).max(100)
 }).strict();
 var softwareGithubInstallationBindOutputSchema = external_exports.object({
-  github_installation_id: uuid10,
+  github_installation_id: uuid11,
   repositories_bound: external_exports.number().int().nonnegative()
 });
 var softwareGithubRepositoryUnbindInputSchema = external_exports.object({
@@ -45124,12 +45397,12 @@ var softwareGithubInstallationRepositoryViewSchema = external_exports.object({
   private: external_exports.boolean(),
   default_branch: external_exports.string(),
   status: external_exports.enum(["connected", "active"]),
-  software_project_id: uuid10.nullable(),
+  software_project_id: uuid11.nullable(),
   software_project_name: external_exports.string().nullable(),
   software_project_slug: external_exports.string().nullable()
 });
 var softwareGithubInstallationViewSchema = external_exports.object({
-  id: uuid10,
+  id: uuid11,
   installation_id: external_exports.number().int().positive(),
   account_login: external_exports.string(),
   account_id: external_exports.number().int().positive(),
@@ -45141,16 +45414,16 @@ var softwareGithubInstallationListOutputSchema = external_exports.object({
   installations: external_exports.array(softwareGithubInstallationViewSchema)
 });
 var softwareGithubAutomationPolicyUpsertOutputSchema = external_exports.object({
-  policy_id: uuid10,
-  software_project_id: uuid10,
+  policy_id: uuid11,
+  software_project_id: uuid11,
   automation_mode_ceiling: softwareAutomationModeSchema
 });
 var softwareGithubInstallationTokenCreateInputSchema = external_exports.object({
-  software_project_id: uuid10,
+  software_project_id: uuid11,
   repository_id: external_exports.number().int().positive(),
   requested_actions: external_exports.array(softwareGithubActionSchema).min(1).max(20),
   requested_automation_mode: softwareAutomationModeSchema.default("plan_only"),
-  seat_id: uuid10.optional()
+  seat_id: uuid11.optional()
 }).strict();
 var softwareGithubInstallationTokenCreateOutputSchema = external_exports.object({
   installation_id: external_exports.number().int().positive(),
@@ -45187,13 +45460,13 @@ var softwareVercelConnectionConnectInputSchema = external_exports.object({
   scopes: external_exports.array(external_exports.string().trim().min(1).max(120)).max(40).default([])
 }).strict();
 var softwareVercelConnectionConnectOutputSchema = external_exports.object({
-  vercel_connection_id: uuid10,
+  vercel_connection_id: uuid11,
   account_id: external_exports.string(),
   team_id: external_exports.string().nullable()
 });
 var softwareVercelProjectLinkInputSchema = external_exports.object({
-  software_project_id: uuid10,
-  vercel_connection_id: uuid10,
+  software_project_id: uuid11,
+  vercel_connection_id: uuid11,
   vercel_project_id: external_exports.string().trim().min(1).max(200),
   vercel_project_name: external_exports.string().trim().min(1).max(255),
   framework: external_exports.string().trim().min(1).max(120).nullable().optional(),
@@ -45202,12 +45475,12 @@ var softwareVercelProjectLinkInputSchema = external_exports.object({
   git_repository: external_exports.record(external_exports.string().min(1), external_exports.unknown()).default({})
 }).strict();
 var softwareVercelProjectLinkOutputSchema = external_exports.object({
-  vercel_project_link_id: uuid10,
-  software_project_id: uuid10,
+  vercel_project_link_id: uuid11,
+  software_project_id: uuid11,
   vercel_project_id: external_exports.string()
 });
 var softwareVercelConnectionViewSchema = external_exports.object({
-  id: uuid10,
+  id: uuid11,
   account_id: external_exports.string(),
   account_name: external_exports.string().nullable(),
   team_id: external_exports.string().nullable(),
@@ -45218,11 +45491,11 @@ var softwareVercelConnectionViewSchema = external_exports.object({
   connected_at: external_exports.string()
 });
 var softwareVercelProjectLinkViewSchema = external_exports.object({
-  id: uuid10,
-  software_project_id: uuid10,
+  id: uuid11,
+  software_project_id: uuid11,
   software_project_name: external_exports.string(),
   software_project_slug: external_exports.string(),
-  vercel_connection_id: uuid10,
+  vercel_connection_id: uuid11,
   vercel_project_id: external_exports.string(),
   vercel_project_name: external_exports.string(),
   framework: external_exports.string().nullable(),
@@ -45236,16 +45509,16 @@ var softwareVercelProjectListOutputSchema = external_exports.object({
   project_links: external_exports.array(softwareVercelProjectLinkViewSchema)
 });
 var softwareVercelDeployPreviewInputSchema = external_exports.object({
-  software_project_id: uuid10,
+  software_project_id: uuid11,
   commit_sha: external_exports.string().trim().regex(/^[A-Fa-f0-9]{7,64}$/),
   git_ref: external_exports.string().trim().min(1).max(255),
-  build_request_id: uuid10.optional(),
-  phase_run_id: uuid10.optional(),
-  seat_id: uuid10.optional(),
+  build_request_id: uuid11.optional(),
+  phase_run_id: uuid11.optional(),
+  seat_id: uuid11.optional(),
   required_secret_keys: external_exports.array(external_exports.string().trim().min(1).max(200)).max(25).default([])
 }).strict();
 var softwareVercelDeployPreviewOutputSchema = external_exports.object({
-  vercel_deployment_record_id: uuid10,
+  vercel_deployment_record_id: uuid11,
   deployment_id: external_exports.string(),
   deployment_url: external_exports.string().nullable(),
   commit_sha: external_exports.string(),
@@ -45253,24 +45526,24 @@ var softwareVercelDeployPreviewOutputSchema = external_exports.object({
 });
 
 // ../../packages/protocol/src/software-factory-events.ts
-var uuid11 = external_exports.string().uuid();
+var uuid12 = external_exports.string().uuid();
 var softwareFactoryPhaseRunCompletedEventSchema = external_exports.object({
-  tenantId: uuid11,
-  phaseRunId: uuid11,
-  buildRequestId: uuid11.nullish(),
+  tenantId: uuid12,
+  phaseRunId: uuid12,
+  buildRequestId: uuid12.nullish(),
   status: external_exports.enum(["passed", "failed"]),
   idempotencyKey: external_exports.string().min(1).optional()
 }).strict();
 var softwareFactoryBudgetExhaustedEventSchema = external_exports.object({
-  tenantId: uuid11,
-  phaseRunId: uuid11,
-  buildRequestId: uuid11,
+  tenantId: uuid12,
+  phaseRunId: uuid12,
+  buildRequestId: uuid12,
   reason: external_exports.string().min(1),
   idempotencyKey: external_exports.string().min(1).optional()
 }).strict();
 
 // ../../packages/protocol/src/sync-brief.ts
-var uuidSchema16 = external_exports.string().uuid();
+var uuidSchema17 = external_exports.string().uuid();
 var dateSchema = external_exports.string().regex(/^\d{4}-\d{2}-\d{2}$/);
 var syncBriefGapSchema = external_exports.object({
   section: external_exports.enum(["exceptions", "goal_deltas", "task_review", "friction", "agent_activity"]),
@@ -45283,8 +45556,8 @@ var sectionSchema = (itemSchema) => external_exports.object({
   flagged_gaps: external_exports.array(syncBriefGapSchema)
 }).strict();
 var syncBriefExceptionSchema = external_exports.object({
-  measurable_id: uuidSchema16,
-  seat_id: uuidSchema16,
+  measurable_id: uuidSchema17,
+  seat_id: uuidSchema17,
   seat_name: external_exports.string().min(1),
   name: external_exports.string().min(1),
   state: external_exports.enum(["risk", "crit", "pending"]),
@@ -45295,8 +45568,8 @@ var syncBriefExceptionSchema = external_exports.object({
   freshness: external_exports.enum(["fresh", "due", "stale", "awaiting_first_reading", "not_expected"]).optional()
 }).strict();
 var syncBriefGoalDeltaSchema = external_exports.object({
-  goal_id: uuidSchema16,
-  seat_id: uuidSchema16.nullable(),
+  goal_id: uuidSchema17,
+  seat_id: uuidSchema17.nullable(),
   seat_name: external_exports.string().nullable(),
   title: external_exports.string().min(1),
   status: external_exports.enum(["on", "off", "done", "dropped"]),
@@ -45310,22 +45583,22 @@ var syncBriefTaskReviewSchema = external_exports.object({
   previous_done_rate: external_exports.number().min(0).max(1),
   delta: external_exports.number().min(-1).max(1),
   stalled: external_exports.array(external_exports.object({
-    task_id: uuidSchema16,
-    owner_seat_id: uuidSchema16,
+    task_id: uuidSchema17,
+    owner_seat_id: uuidSchema17,
     owner_seat_name: external_exports.string().min(1),
     title: external_exports.string().min(1),
     due_on: dateSchema,
     stalled_at: external_exports.string().nullable()
   }).strict()),
   overdue_by_owner: external_exports.array(external_exports.object({
-    owner_seat_id: uuidSchema16,
+    owner_seat_id: uuidSchema17,
     owner_seat_name: external_exports.string().min(1),
     overdue_count: external_exports.number().int().nonnegative()
   }).strict())
 }).strict();
 var syncBriefIssueSchema = external_exports.object({
-  issue_id: uuidSchema16,
-  raised_by_seat_id: uuidSchema16,
+  issue_id: uuidSchema17,
+  raised_by_seat_id: uuidSchema17,
   raised_by_seat_name: external_exports.string().min(1),
   summary: external_exports.string().min(1),
   severity: external_exports.enum(["low", "med", "high", "critical"]),
@@ -45342,16 +45615,16 @@ var syncBriefActionItemTrendSchema = external_exports.object({
   has_prior: external_exports.boolean()
 }).strict();
 var syncBriefCascadeAtRiskSchema = external_exports.object({
-  goal_id: uuidSchema16,
+  goal_id: uuidSchema17,
   title: external_exports.string().min(1),
-  seat_id: uuidSchema16.nullable(),
+  seat_id: uuidSchema17.nullable(),
   progress_pct: external_exports.number().int().min(0).max(100),
   classification: external_exports.enum(["at_risk", "projected_miss"]),
   behind_days: external_exports.number().nullable()
 }).strict();
 var syncBriefAgentActivitySchema = external_exports.object({
-  agent_id: uuidSchema16,
-  seat_id: uuidSchema16,
+  agent_id: uuidSchema17,
+  seat_id: uuidSchema17,
   seat_name: external_exports.string().min(1),
   run_count: external_exports.number().int().nonnegative(),
   failed_run_count: external_exports.number().int().nonnegative(),
@@ -45363,11 +45636,11 @@ var syncBriefAgentActivitySchema = external_exports.object({
 var syncBriefSchema = external_exports.object({
   schema_version: external_exports.literal(1),
   tenant: external_exports.object({
-    id: uuidSchema16,
+    id: uuidSchema17,
     name: external_exports.string().min(1)
   }).strict(),
   cluster: external_exports.object({
-    id: uuidSchema16,
+    id: uuidSchema17,
     name: external_exports.string().min(1)
   }).strict().nullable(),
   period: external_exports.object({
@@ -45405,16 +45678,16 @@ var syncBriefSchema = external_exports.object({
 }).strict();
 
 // ../../packages/protocol/src/usage.ts
-var isoDateTime7 = external_exports.string().datetime({ offset: true });
+var isoDateTime8 = external_exports.string().datetime({ offset: true });
 var periodKeySchema = external_exports.string().regex(/^\d{4}-\d{2}-\d{2}$/);
 var countSchema = external_exports.number().int().nonnegative();
 var usdSchema = external_exports.string();
 var bigCountSchema = external_exports.string();
 var usagePeriodSchema = external_exports.object({
   period: periodKeySchema,
-  period_start: isoDateTime7,
-  period_end: isoDateTime7,
-  captured_at: isoDateTime7,
+  period_start: isoDateTime8,
+  period_end: isoDateTime8,
+  captured_at: isoDateTime8,
   run_count: countSchema,
   agent_count: countSchema,
   succeeded_run_count: countSchema,
@@ -45466,7 +45739,7 @@ var usageSnapshotInputSchema = external_exports.object({
   // current month. Normalized to the first of that month server-side.
   period: external_exports.union([
     external_exports.string().regex(/^\d{4}-\d{2}-\d{2}$/),
-    isoDateTime7
+    isoDateTime8
   ]).optional()
 }).strict();
 var usageSnapshotOutputSchema = external_exports.object({
@@ -45478,11 +45751,11 @@ var usageSnapshotOutputSchema = external_exports.object({
 }).strict();
 
 // ../../packages/protocol/src/event-payloads.ts
-var uuidSchema17 = external_exports.string().uuid();
+var uuidSchema18 = external_exports.string().uuid();
 var evidenceSchema = external_exports.array(external_exports.unknown());
 var statusEventPayloadSchema = external_exports.object({
   measurables: external_exports.array(external_exports.object({
-    id: uuidSchema17,
+    id: uuidSchema18,
     value: external_exports.number().finite(),
     // DER-1045: an optional, non-secret citation for an agent-proposed reading
     // (signal.report) — where the number came from + the agent's confidence.
@@ -45511,7 +45784,7 @@ var statusEventPayloadSchema = external_exports.object({
     }).strict().optional()
   }).strict()).optional(),
   goals: external_exports.array(external_exports.object({
-    id: uuidSchema17,
+    id: uuidSchema18,
     state: external_exports.enum(["on", "off"]),
     note: external_exports.string().min(1).optional()
   }).strict()).optional()
@@ -45524,8 +45797,8 @@ var escalationEventPayloadSchema = external_exports.object({
 }).strict();
 var issueEventPayloadSchema = external_exports.object({
   summary: external_exports.string().min(1),
-  blocking_goal_id: uuidSchema17.optional(),
-  broken_measurable_id: uuidSchema17.optional(),
+  blocking_goal_id: uuidSchema18.optional(),
+  broken_measurable_id: uuidSchema18.optional(),
   evidence: evidenceSchema,
   severity: external_exports.enum(["low", "med", "high", "critical"])
 }).strict();
@@ -45538,14 +45811,14 @@ var heldToolActionReplaySchema = external_exports.object({
 }).strict();
 
 // ../../packages/protocol/src/operating.ts
-var uuidSchema18 = external_exports.string().uuid();
+var uuidSchema19 = external_exports.string().uuid();
 var taskListInputSchema = external_exports.object({}).strict();
 var operatingTaskSchema = external_exports.object({
-  id: uuidSchema18,
+  id: uuidSchema19,
   title: external_exports.string(),
   description: external_exports.string().nullable(),
-  from_seat_id: uuidSchema18.nullable(),
-  goal_id: uuidSchema18.nullable(),
+  from_seat_id: uuidSchema19.nullable(),
+  goal_id: uuidSchema19.nullable(),
   acceptance_criteria: external_exports.unknown(),
   due_on: external_exports.string().nullable(),
   status: external_exports.string()
@@ -45554,48 +45827,48 @@ var taskListOutputSchema = external_exports.object({
   tasks: external_exports.array(operatingTaskSchema)
 }).strict();
 var taskAcceptInputSchema = external_exports.object({
-  id: uuidSchema18
+  id: uuidSchema19
 }).strict();
 var taskMutationOutputSchema = external_exports.object({
   task: external_exports.object({
-    id: uuidSchema18,
+    id: uuidSchema19,
     status: external_exports.string()
   }).strict()
 }).strict();
 var taskDeclineInputSchema = external_exports.object({
-  id: uuidSchema18,
+  id: uuidSchema19,
   reason: external_exports.string().min(1)
 }).strict();
 var taskDeclineOutputSchema = external_exports.object({
   task: external_exports.object({
-    id: uuidSchema18,
+    id: uuidSchema19,
     status: external_exports.string(),
     decline_reason: external_exports.string()
   }).strict()
 }).strict();
 var taskCompleteInputSchema = external_exports.object({
-  id: uuidSchema18,
+  id: uuidSchema19,
   summary: external_exports.string().min(1),
   artifacts: external_exports.unknown().optional()
 }).strict();
 var taskCompleteOutputSchema = external_exports.object({
-  task_id: uuidSchema18,
-  event_id: uuidSchema18,
+  task_id: uuidSchema19,
+  event_id: uuidSchema19,
   type: external_exports.literal("handoff")
 }).strict();
 var statusRecordOutputSchema = external_exports.object({
-  event_id: uuidSchema18,
+  event_id: uuidSchema19,
   type: external_exports.literal("status")
 }).strict();
 var duplicateFrictionCandidateSchema = external_exports.object({
-  issue_id: uuidSchema18,
+  issue_id: uuidSchema19,
   summary: external_exports.string().min(1),
   // pg_trgm similarity in [0, 1]; higher is more similar.
   similarity: external_exports.number().min(0).max(1)
 }).strict();
 var frictionFileIssueOutputSchema = external_exports.object({
-  event_id: uuidSchema18,
-  issue_id: uuidSchema18,
+  event_id: uuidSchema19,
+  issue_id: uuidSchema19,
   type: external_exports.literal("issue"),
   // DER-1522: likely-duplicate candidates detected before creation. Recommend,
   // never block — filing always proceeds; empty when nothing crossed the
@@ -45606,12 +45879,12 @@ var workLogInputSchema = external_exports.object({
   note: external_exports.string().min(1)
 }).strict();
 var workLogOutputSchema = external_exports.object({
-  event_id: uuidSchema18,
+  event_id: uuidSchema19,
   type: external_exports.literal("task")
 }).strict();
 var escalationRaiseOutputSchema = external_exports.object({
-  event_id: uuidSchema18,
-  escalation_id: uuidSchema18,
+  event_id: uuidSchema19,
+  escalation_id: uuidSchema19,
   type: external_exports.literal("escalation")
 }).strict();
 var deliverableKindSchema2 = external_exports.enum(["brief", "work_evidence", "artifact", "report", "other"]);
@@ -45659,7 +45932,7 @@ var deliverableAcceptOutputSchema = external_exports.object({
 }).strict();
 
 // ../../packages/protocol/src/steward.ts
-var uuidSchema19 = external_exports.string().uuid();
+var uuidSchema20 = external_exports.string().uuid();
 var escalationStatusSchema = external_exports.enum([
   "open",
   "approved",
@@ -45667,21 +45940,21 @@ var escalationStatusSchema = external_exports.enum([
   "converted_to_issue"
 ]);
 var stewardEscalationSchema = external_exports.object({
-  id: uuidSchema19,
-  seat_id: uuidSchema19,
+  id: uuidSchema20,
+  seat_id: uuidSchema20,
   seat_name: external_exports.string(),
   seat_type: external_exports.enum(["human", "agent", "hybrid"]),
-  steward_seat_id: uuidSchema19,
+  steward_seat_id: uuidSchema20,
   steward_seat_name: external_exports.string(),
   reason: external_exports.string(),
   charter_clause: external_exports.string(),
   recommended_action: external_exports.string().nullable(),
   status: escalationStatusSchema,
-  decided_by: uuidSchema19.nullable(),
+  decided_by: uuidSchema20.nullable(),
   decided_by_name: external_exports.string().nullable(),
   decided_at: external_exports.string().nullable(),
   decision_note: external_exports.string().nullable(),
-  issue_id: uuidSchema19.nullable(),
+  issue_id: uuidSchema20.nullable(),
   created_at: external_exports.string(),
   updated_at: external_exports.string()
 }).strict();
@@ -45692,27 +45965,27 @@ var escalationListOutputSchema = external_exports.object({
   escalations: external_exports.array(stewardEscalationSchema)
 }).strict();
 var escalationGetInputSchema = external_exports.object({
-  id: uuidSchema19
+  id: uuidSchema20
 }).strict();
 var escalationGetOutputSchema = external_exports.object({
   escalation: stewardEscalationSchema
 }).strict();
 var escalationResolveActionSchema = external_exports.enum(["approve", "convert_to_issue"]);
 var escalationResolveInputSchema = external_exports.object({
-  id: uuidSchema19,
+  id: uuidSchema20,
   action: escalationResolveActionSchema.optional(),
   rationale: external_exports.string().trim().min(1).optional()
 }).strict();
 var escalationRejectInputSchema = external_exports.object({
-  id: uuidSchema19,
+  id: uuidSchema20,
   rationale: external_exports.string().trim().min(1).optional()
 }).strict();
 var escalationDecisionOutputSchema = external_exports.object({
-  escalation_id: uuidSchema19,
+  escalation_id: uuidSchema20,
   status: escalationStatusSchema,
-  decision_id: uuidSchema19,
-  decided_by: uuidSchema19,
-  issue_id: uuidSchema19.nullable(),
+  decision_id: uuidSchema20,
+  decided_by: uuidSchema20,
+  issue_id: uuidSchema20.nullable(),
   // DER-1478: true when the resolved escalation carries a durable replay_action
   // (an approval-gated connector write) that the approvals path should actuate
   // after this decision is recorded. Omitted (not false) for non-connector
@@ -45734,7 +46007,7 @@ var eventTypes = [
   "task"
 ];
 var publicMessageTypes = ["status", "handoff", "escalation", "issue"];
-var uuidSchema20 = external_exports.string().uuid();
+var uuidSchema21 = external_exports.string().uuid();
 var evidenceSchema2 = external_exports.array(external_exports.unknown());
 var internalEventPayloadSchema = external_exports.record(external_exports.string(), external_exports.unknown()).refine((payload) => !Array.isArray(payload), "Internal event payload must be an object");
 var handoffEventPayloadSchema = external_exports.object({
@@ -45744,24 +46017,24 @@ var handoffEventPayloadSchema = external_exports.object({
     acceptance_criteria: external_exports.array(external_exports.string().min(1)),
     due: external_exports.string().datetime({ offset: true })
   }).strict(),
-  to_seat_id: uuidSchema20
+  to_seat_id: uuidSchema21
 }).strict();
 var intakeEventPayloadSchema = external_exports.discriminatedUnion("action", [
   external_exports.object({
     action: external_exports.literal("uploaded"),
-    document_id: uuidSchema20,
+    document_id: uuidSchema21,
     storage_ref: external_exports.string().min(1)
   }).strict(),
   external_exports.object({
     action: external_exports.literal("parsed"),
-    document_id: uuidSchema20,
+    document_id: uuidSchema21,
     mode: external_exports.enum(["source_tree", "function_first"]),
     seat_count: external_exports.number().int().nonnegative(),
     edge_count: external_exports.number().int().nonnegative()
   }).strict(),
   external_exports.object({
     action: external_exports.literal("failed"),
-    document_id: uuidSchema20,
+    document_id: uuidSchema21,
     reason: external_exports.string().min(1)
   }).strict(),
   external_exports.object({
@@ -45867,9 +46140,9 @@ var publicMessageTypeSchema = external_exports.enum(publicMessageTypes);
 var eventEnvelopeBaseSchema = external_exports.object({
   protocol: external_exports.literal(EVENT_PROTOCOL),
   type: eventTypeSchema,
-  seat_id: uuidSchema20.nullable(),
+  seat_id: uuidSchema21.nullable(),
   occurred_at: external_exports.string().datetime({ offset: true }),
-  goal_ancestry: external_exports.array(uuidSchema20)
+  goal_ancestry: external_exports.array(uuidSchema21)
 }).strict();
 var statusEventEnvelopeSchema = eventEnvelopeBaseSchema.extend({
   type: external_exports.literal("status"),
@@ -46143,7 +46416,7 @@ The Compass is drafted, then activated by a human through supersession.
     order: 15,
     title: "AICOS chat guide",
     summary: "How the AI Chief of Staff chat works in the authenticated app shell and what it can safely do today.",
-    version: "2026-07-11.1",
+    version: "2026-07-13.1",
     public: true,
     audiences: ["human", "in_app_agent"],
     stages: ["company_setup", "operating_rhythm"],
@@ -46206,6 +46479,8 @@ The repair action ensures the same structure new companies receive: a Founder/CE
 
 Settings is the infrastructure surface for AICOS. Use it to confirm foundation status, inspect the current lane, see whether a seat-scoped MCP token exists, and choose **Cloud**, **Runner**, or **MCP** when the server-side readiness checks allow it. The AICOS seat has its own operations panel instead of the normal **Staff this seat** setup tabs, because AICOS is the company's governed AI Chief of Staff foundation rather than a generic agent to restaff from stock, custom design, or runner pairing controls. Use that panel to reach AICOS Settings, its Charter, runner readiness, MCP token management, and Trust Card run evidence.
 
+The same Settings area shows AICOS authority and launch recovery in customer language. AICOS starts with connected company capabilities at maximum available access and Trusted posture, but tenant dial-backs and always-human boundaries remain authoritative. Launch-credit status shows 50%, 80%, and exhaustion posture plus Billing and BYOK recovery links; BYOK reduces managed inference cost only and does not replace the required subscription after launch access ends.
+
 ## What context AICOS receives
 
 Each turn carries server-normalized page context: route template, current path, safe search state, selected seat or object ids when authorized, onboarding state when relevant, and the current tenant clock. AICOS treats the supplied clock as authoritative for today's date and time instead of guessing from model priors. The server derives tenant and user authority from the authenticated session. Client-supplied tenant context is never accepted as authority.
@@ -46295,7 +46570,7 @@ Treat AICOS as a coordinator over the operating system. It can become more usefu
     order: 20,
     title: "Responsibility Graph playbook",
     summary: "How to build a functions-first graph with seats, owners, Stewards, vacancies, and clean authority.",
-    version: "2026-07-10.6",
+    version: "2026-07-13.2",
     public: true,
     audiences: ["human", "cli", "mcp", "in_app_agent"],
     stages: ["graph_design", "staffing"],
@@ -46378,7 +46653,7 @@ A staffed non-AICOS agent's seat page uses one profile shell with eight URL-addr
 
 The **Charter** tab renders the accepted Charter as a document \u2014 purpose, responsibilities, decision authority \u2014 with its version chip and signer, plus a structured edit drawer for quick purpose/responsibilities/decision-authority changes. The drawer prefills from the active Charter (or an open amendment draft, if one exists) and stages the edited slice through the same audited commands as any other Charter change; sensitive fields (permission manifest, budget, measurables, escalation rules) never round-trip through the client, and a save fails closed with an explicit conflict message if the Charter changed underneath the drawer since it opened. An **Amend** action stays next to the drawer for changes it does not cover, opening the same draft-and-confirm flow as the Charter Builder.
 
-An owner or Steward manages the agent's capabilities in context from the **Tools & connections** and **Skills** tabs, no separate editor page. On **Skills**, assign or revoke a Skill directly; each change stages a confirmation envelope for the human to approve in \`/approvals\` \u2014 never a silent write. On **Tools & connections**, granted tools are read-only on this page; a change routes to the governed Charter re-sign flow (tool grants live in the signed, active Charter, so they change by supersession, never in place), and a missing provider links straight to Settings connections with a return link back to this tab. Viewers without manage authority see the same tabs with an explanation instead of controls; every write still re-asserts seat authority server-side regardless of what the client shows.
+An owner or Steward manages the agent's capabilities in context from the **Tools & connections** and **Skills** tabs, no separate editor page. On **Skills**, assign or revoke a Skill directly; each change stages a confirmation envelope for the human to approve in \`/approvals\` \u2014 never a silent write. On **Tools & connections**, capability setup uses the production access language: **Off**, **Read**, and **Read & act**. Deterministic suggestions from the template or Charter are labelled, unavailable provider scopes are disabled instead of hidden, and human overrides stay visible until saved. Saving a capability change stages the governed \`tool_grants.agent.update\` path; selection alone never grants a tool call. The activation review then builds one receipt from the current scope digest, budget, lane, cadence, capabilities, and always-human boundaries. Signing Ask-first or creating a bounded Trusted grant uses that digest, so widening scopes or changing budget requires rebuilding and re-signing. A missing provider links straight to Settings connections with a return link back to this tab. Viewers without manage authority see the same tabs with an explanation instead of controls; every write still re-asserts seat authority server-side regardless of what the client shows.
 
 Agent creation at \`/agents/new\` begins with four doors: **Describe the job** opens the existing in-app builder, **Start from a template** opens the stock-template picker, **Build manually** opens the custom setup path, and **Import** opens an in-app format explainer. Definition-file import is roadmap-only and never opens a bare file picker; operators can instead continue to the existing-agent pairing flow. Setup is the detail page filling in: creating a seat from any door hands off to that agent's detail page in draft mode (\`/seats/{seatId}\`) \u2014 there is no separate wizard shell or tab vocabulary. Draft mode renders the exact same eight tabs the live seat uses; **Overview** and **Activity** stay locked until the first run has something to show, and the other six own the editable draft (Charter, Tools & connections, Skills, Autonomy, Outcomes & Signals, Settings). The shared **GateRail** review rail (sign manifest \u2192 sandbox dry run \u2192 go-live) and the server's \`next_action\` stay the sole lifecycle truth throughout, unaffected by which door you entered through. The door only changes how the one canonical form gets filled in: manual is the blank form, template pre-populates it, chat opens an AICOS setup assistant beside the form that proposes typed field changes grouped by section for review before anything durable saves, and import maps a definition file into the same fields and reports what did not map \u2014 never credentials. Existing \`?mode=template|custom|existing\` links open the matching door, and a \`?seat=\` resume link redirects straight to the draft detail page.
 
@@ -46532,7 +46807,7 @@ Drafting can be assisted by agents. Activation is a human decision. When authori
     order: 40,
     title: "Agent staffing playbook",
     summary: "How to decide whether a seat should be human, agent, or hybrid, and how to go live safely.",
-    version: "2026-07-05.1",
+    version: "2026-07-13.1",
     public: true,
     audiences: ["human", "cli", "mcp", "in_app_agent"],
     stages: ["staffing"],
@@ -46591,7 +46866,7 @@ Two creation paths, both draft-first. Read the stock-agents guide for templates
 - Custom: \`agent_setup.start\` / \`rost_start_agent_setup\` (returns a \`setup_id\`), iterate with \`agent_setup.get\` and \`agent_setup.update\`, then \`agent.create_custom\` / \`rost_create_custom_agent\`. Stage tools with \`agent.configure_tools\` (vault refs only) and sandbox with \`agent.run_dry_run\`.
 - Inspect runtime: \`agent.status\` / \`rost_get_agent_status\` with \`{"seat_id":"<seat-id>"}\` returns lane, live state, steward chain, dry-run result, and Runner availability.
 - Run on demand: \`{{cli}} agent run-now --seat-id <seat-id>\` / \`agent.run_now\` / \`rost_run_agent_now\` queues an immediate live run without changing the saved schedule. Cloud agents dispatch to the Inngest executor; runner agents queue work for the paired runner. The command is ungated but still requires a live staffed agent and the normal server-side tool guard.
-- Audit what an agent did (Trust Card): \`{{cli}} command agent.list_runs --json '{"seat_id":"<seat-id>"}'\` / \`rost_list_agent_runs\` returns the seat's run history with per-run Skill activation counts plus tool-call and guard-held counts; \`{{cli}} agent get-run --seat-id <seat-id> --run-id <run-id>\` / \`agent.get_run\` / \`rost_get_agent_run_diagnostics\` reads one run's transcript reference, token/cost usage, outcome, product-visible run errors, and any Skill versions/files loaded for that run. Loaded Skill file hashes and sizes identify the immutable source package; the runtime may still bound or truncate prompt text before sending it to the model. \`{{cli}} command agent.list_tool_calls --json '{"seat_id":"<seat-id>"}'\` / \`rost_list_agent_tool_calls\` returns the tool-call ledger with each call's guard result. Both list commands include a \`denied_tool_call_count\` rollup \u2014 the actions held because they exceeded the charter. Pass \`{"seat_id":"<seat-id>","held_only":true}\` to \`agent.list_tool_calls\` for only the held calls. The web seat page shows the same facts as a Trust Card.
+- Audit what an agent did (Trust Card): \`{{cli}} command agent.list_runs --json '{"seat_id":"<seat-id>"}'\` / \`rost_list_agent_runs\` returns the seat's run history with per-run Skill activation counts plus tool-call and guard-held counts; \`{{cli}} agent get-run --seat-id <seat-id> --run-id <run-id>\` / \`agent.get_run\` / \`rost_get_agent_run_diagnostics\` reads one run's transcript reference, token/cost usage, outcome, product-visible run errors, and any Skill versions/files loaded for that run. Pass \`--transcript\` (\`{"transcript":true}\`) to also return the persisted, secret-scrubbed session transcript for that run when one exists \u2014 cloud-lane and runner turns persist a bounded transcript at turn end. Final run outcomes are no longer chopped to a short summary; the full report survives. Loaded Skill file hashes and sizes identify the immutable source package; the runtime may still bound or truncate prompt text before sending it to the model. \`{{cli}} command agent.list_tool_calls --json '{"seat_id":"<seat-id>"}'\` / \`rost_list_agent_tool_calls\` returns the tool-call ledger with each call's guard result. Both list commands include a \`denied_tool_call_count\` rollup \u2014 the actions held because they exceeded the charter. Pass \`{"seat_id":"<seat-id>","held_only":true}\` to \`agent.list_tool_calls\` for only the held calls. The web seat page shows the same facts as a Trust Card.
 
 ## Review readiness before go-live
 
@@ -47117,7 +47392,7 @@ External connectors are being rolled out provider by provider, conservatively (r
     order: 48,
     title: "CLI and MCP installation guide",
     summary: "Install the public CLI, register remote token-backed MCP clients, and find the full command and tool catalog.",
-    version: "2026-07-13.4",
+    version: "2026-07-13.6",
     public: true,
     audiences: ["human", "cli", "mcp", "in_app_agent"],
     stages: ["company_setup", "staffing"],
@@ -47908,6 +48183,15 @@ Forge Vercel access is through a tenant-bound OAuth connection, never a browser-
 
 Preview deployment creation is a governed command. \`software_factory.vercel.deploy_preview\` requires an active Vercel project link, a Vercel OAuth vault-ref connection, active \`deploy_preview\` Forge authority for the requesting seat when a seat is supplied, and any requested preview secret/config grants. It writes the deployment id, URL, commit SHA, checks, status, and error metadata into \`software_vercel_deployments\`; build-request deployments also write a Forge artifact and event. Raw OAuth tokens and vault refs are never returned.
 
+#### Secret broker grants (tenant-level)
+
+Generalized brokered-secret egress beyond Forge (DER-1738). A human grants an agent seat a scoped secret the \`secret.broker\` egress tool and the \`baserow.read\`/\`baserow.write\` tools (DER-1739) resolve server-side; Postgres stores only a vault-ref pointer, never secret material. A seat agent asks for and lists its own grants through the seat-scoped \`secret_grant.request\` / \`secret_grant.list\` tools (in Seat-scoped operating tools below); a human grants and revokes here. Baserow authenticates with an \`Authorization: Token <key>\` header, so a Baserow grant uses \`injection_mode: "header"\`, \`injection_name: "Authorization"\`, and stores the full \`Token <key>\` string as its vault secret.
+
+| Tool | Command | What it does | Scope | Notes |
+|---|---|---|---|---|
+| \`rost_grant_a_brokered_secret\` | \`secret_grant.grant\` | A human grants a seat scoped brokered-secret access by vault ref (host, path prefix, methods, injection). Postgres stores only the pointer, never secret material. Owner-only and human-gated; the secret.broker and baserow.* tools resolve it server-side and the secret never enters agent context. | Tenant-admin | Call with {"seat_id":"<seat-id>","grant_key":"baserow","provider":"baserow","allowed_host":"baserow.example.com","allowed_path_prefix":"/api/database/rows/","allowed_methods":["GET","POST","PATCH"],"scope_tier":"write","injection_mode":"header","injection_name":"Authorization","vault_ref":"infisical://prod/baserow-token"}. |
+| \`rost_revoke_a_brokered_secret_grant\` | \`secret_grant.revoke\` | Revoke a brokered secret grant (teardown \u2014 cut a compromised or over-scoped seat egress immediately; the next broker call fails closed). Owner-only and human-gated. | Tenant-admin | Call with {"grant_id":"<grant-id>"}; non-interactive callers receive a confirmation handoff. |
+
 ### Seat-scoped operating tools
 
 Seat-scoped MCP tokens expose the operating protocol below. The server still checks the seat's permission manifest, Charter, task ownership, and tenant boundary. These are the **seat-token equivalents** of the CLI \`{{cli}} task\` / \`{{cli}} signal\` / \`{{cli}} friction\` wrappers and the tenant-admin task tools above: \`rost_get_tasks\`, \`{{cli}} task list\`, and \`task.list\` are the same operation reached three different ways. The command-id column makes the mapping explicit.
@@ -47928,6 +48212,8 @@ Seat-scoped MCP tokens expose the operating protocol below. The server still che
 | \`rost_attach_agent_deliverable\` | \`deliverable.attach\` | Attach a scrubbed deliverable to a source run, task, or work order after server-side seat validation. | Seat | Call with title, kind, and the source ids that belong to the acting seat. |
 | \`rost_request_a_forge_secret_grant\` | \`software_factory.secret.request\` | Request access to a project secret by key. It creates a durable credential request and approval Task, never accepts a secret value, and does not grant access by itself. | Seat | Call with \`{"software_project_id":"<project-id>","environment":"preview","seat_id":"<seat-id>","action":"test.run","key_name":"OPENAI_API_KEY"}\`. |
 | \`rost_verify_forge_secret_broker_access\` | \`software_factory.secret.use\` | Verify broker authorization for a Forge secret without opening the vault. Missing grants create or reuse a credential request + approval Task; allowed grants return a redacted authorization summary only. Runtime vault use happens runner-side. | Seat | Call with \`{"software_project_id":"<project-id>","environment":"preview","seat_id":"<seat-id>","action":"test.run","key_name":"OPENAI_API_KEY","operation":"test_execution"}\`. |
+| \`rost_request_a_brokered_secret_grant\` | \`secret_grant.request\` | A seat agent requests a scoped brokered-secret grant (for secret.broker / baserow.*) by naming the host, path prefix, methods, and scope it needs. Draft-and-confirm: no secret and no vault ref; returns an event id for a human to grant via secret_grant.grant. | Seat | Call with {"seat_id":"<seat-id>","grant_key":"baserow","provider":"baserow","allowed_host":"baserow.example.com","allowed_path_prefix":"/api/database/rows/","allowed_methods":["GET"],"scope_tier":"read"}. |
+| \`rost_list_brokered_secret_grants\` | \`secret_grant.list\` | List the seat's own brokered secret grants. Returns egress allowlist metadata only (host, path prefix, methods, scope, status), never the vault ref or any secret. | Seat | Call with {} (an agent is server-pinned to its own seat). |
 | \`rost_record_forge_conformance_findings\` | \`software_factory.conformance.record_findings\` | A Forge review seat (plan conformance, security, or QA) records structured findings as reviewer evidence. Set \`changeset_id\` on a finding that targets a specific changeset. Open findings route the request back to implementation; accepting a gap remains a separate human gate. Requires the seat's signed manifest grant. | Seat | Call with \`{"build_request_id":"<request-id>","findings":[{"severity":"major","category":"scope_gap","summary":"Missing migration verification","changeset_id":"<changeset-id>"}]}\`. |
 | \`rost_resolve_forge_conformance_finding\` | \`software_factory.conformance.resolve_finding\` | A Forge review seat marks a prior open finding resolved after re-reviewing the changeset and verifying it is fixed (reviewer verification, not human gap-acceptance). A resolved finding stops routing the request back to implementation, so the recycle loop converges. Requires the seat's signed manifest grant. | Seat | Call with \`{"build_request_id":"<request-id>","finding_ids":["<finding-id>"]}\`. |
 
@@ -48819,7 +49105,7 @@ Stop before: approving a Charter, signing a manifest, connecting a tool or crede
     order: 71,
     title: "Billing and pricing guide",
     summary: "How {{brand}} packages company-wide access, Stripe billing, and governed-agent usage without per-human-seat pricing.",
-    version: "2026-07-13.1",
+    version: "2026-07-13.2",
     public: true,
     audiences: ["human", "cli", "mcp", "in_app_agent"],
     stages: ["company_setup", "staffing", "operating_rhythm"],
@@ -48877,7 +49163,7 @@ Billable true-up is service-owned and runs after a period is closed. The tenant-
 
 ## Launch credits and recovery access
 
-Eligible launch tenants can receive one configured launch credit for {{brand}}-managed variable costs. Managed LLM, Exa, browser, and sandbox costs are estimated before the provider call, reserved atomically against the active launch credit, and then settled to actual usage or released if the call does not complete. BYOK model calls do not draw down launch credit, but they still keep their ordinary audit and usage records.
+Eligible launch tenants can receive one configured launch credit for {{brand}}-managed variable costs. Managed LLM, Exa, browser, and sandbox costs are estimated before the provider call, reserved atomically against the active launch credit, and then settled to actual usage or released if the call does not complete. BYOK model calls do not draw down launch credit, but they still keep their ordinary audit and usage records. Settings surfaces 50%, 80%, and exhaustion posture so a tenant can choose subscription recovery, BYOK cost reduction, export, cancel, or delete before operations pause.
 
 Launch-credit notifications are informational and idempotent: owners may see threshold, exhaustion, or expiry notices with recovery actions when the remaining credit drops or the credit approaches its expiry window.
 
@@ -49237,7 +49523,7 @@ The runner should not store raw credentials in local notes, prompts, or logs. It
     order: 76,
     title: "Stock agents guide",
     summary: "How to use stock agent templates as starting points while preserving seat-specific Charters and human approval.",
-    version: "2026-07-04.1",
+    version: "2026-07-13.5",
     public: true,
     audiences: ["human", "cli", "mcp", "in_app_agent"],
     stages: ["staffing"],
@@ -49264,7 +49550,7 @@ Before dry run, review the template's responsibilities, tool assumptions, escala
 
 ## Template catalog
 
-Eight stock templates ship today. Every one is draft-first, escalates the actions in its safety boundaries, and keeps spend, external sends, and credential scope human-owned until a Steward sets a threshold. Read the live list with \`agent_template.list\` / \`rost_list_agent_templates\` or the \`rost://agents/templates\` resource.
+Nine stock templates ship today. Every one is draft-first, escalates the actions in its safety boundaries, and keeps spend, external sends, and credential scope human-owned until a Steward sets a threshold. Read the live list with \`agent_template.list\` / \`rost_list_agent_templates\` or the \`rost://agents/templates\` resource.
 
 ### AP Clerk \u2014 \`stock/ap-clerk\`
 
@@ -49273,6 +49559,13 @@ Eight stock templates ship today. Every one is draft-first, escalates the action
 - Default tools: Accounting bills read/write drafts; AP inbox read/draft.
 - Safety boundary: vendor bank changes, payment release, disputed or duplicate invoices, and unclear approval chains escalate before action.
 
+### Vendor Follow-up Coordinator \u2014 \`stock/vendor-follow-up-coordinator\`
+
+- Function: Finance. Tier: \`1 \xB7 Launch\`.
+- Responsibilities: Work the approved vendor follow-up queue on weekdays; Draft and send the routine follow-up message; Update the approved Sheet range and escalate any drift.
+- Default tools: Gmail read/draft/send; Sheets read/write approved range.
+- Safety boundary: new or changed recipients, attachments, nonroutine copy, out-of-range Sheet writes, and revoked authority escalate; only the approved weekday follow-up contract may run.
+
 ### AR & Collections Clerk \u2014 \`stock/ar-collections-clerk\`
 
 - Function: Finance. Tier: \`1 \xB7 Launch\`.
@@ -51054,7 +51347,7 @@ var COMMAND_MANIFEST = [
   { "id": "agent.create_from_template", "namespace": "agent", "action": "create_from_template", "title": "Create agent from template", "description": "Create a draft stock agent and draft Charter from a stock template. Creates the agent occupancy only when a human steward chain resolves; the agent stays draft until a signed manifest, a passed dry run, and human go-live.", "requiredScope": "tenant", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": true }, { "name": "template_slug", "flag": "template-slug", "type": "string", "required": true }, { "name": "expected_template_version", "flag": "expected-template-version", "type": "string", "required": false }], "hasComplexInput": false, "help": "Create a draft stock agent and draft Charter from a template; the agent occupancy is created only when a human steward chain resolves, and the agent stays draft until a signed manifest, a passed dry run, and human go-live." },
   { "id": "agent.decommission", "namespace": "agent", "action": "decommission", "title": "Decommission agent", "description": "Retire an agent occupancy safely. Blocks if it would leave another live agent without a human steward chain.", "requiredScope": "tenant", "confirmation": "dangerous", "exposeOverMcp": true, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": true }, { "name": "reason", "flag": "reason", "type": "string", "required": false }], "hasComplexInput": false, "help": "Retire an agent occupancy safely; the no-orphan guard blocks any decommission that would leave another live agent without a human steward chain." },
   { "id": "agent.fleet_digest", "namespace": "agent", "action": "fleet_digest", "title": "Get dogfood fleet health digest", "description": "Return a daily tenant fleet health digest with live/idle state, run counts, spend, failed runs, unresolved product errors, notification errors, and next actions.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "window_hours", "flag": "window-hours", "type": "integer", "required": false }, { "name": "error_limit", "flag": "error-limit", "type": "integer", "required": false }], "hasComplexInput": false, "help": "Capture a daily dogfood fleet health digest with fleet state, run counts, spend, failed runs, unresolved errors, failed notifications, and next actions." },
-  { "id": "agent.get_run", "namespace": "agent", "action": "get_run", "title": "Get agent run diagnostics", "description": "Return one seat run's diagnostic record: run status, transcript reference, token/cost usage, outcome, and linked product-visible run errors.", "requiredScope": "seat", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": true }, { "name": "run_id", "flag": "run-id", "type": "string", "required": true }], "hasComplexInput": false, "help": "Read one run's diagnostic record, transcript reference, token/cost usage, outcome, and linked product-visible errors." },
+  { "id": "agent.get_run", "namespace": "agent", "action": "get_run", "title": "Get agent run diagnostics", "description": "Return one seat run's diagnostic record: run status, transcript reference, token/cost usage, outcome, and linked product-visible run errors.", "requiredScope": "seat", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": true }, { "name": "run_id", "flag": "run-id", "type": "string", "required": true }, { "name": "transcript", "flag": "transcript", "type": "boolean", "required": false }], "hasComplexInput": false, "help": "Read one run's diagnostic record, transcript reference, token/cost usage, outcome, and linked product-visible errors." },
   { "id": "agent.go_live", "namespace": "agent", "action": "go_live", "title": "Go live", "description": "Promote a dry-run agent seat to live after the human approval gate.", "requiredScope": "seat", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": true }, { "name": "charter_version_id", "flag": "charter-version-id", "type": "string", "required": true }], "hasComplexInput": false, "help": "Move an agent live only after dry-run evidence, signed permissions, and a human Steward chain are clear.", "example": { "seat_id": "0190aaaa-aaaa-7aaa-8aaa-aaaaaaaaaaaa", "charter_version_id": "0190cccc-cccc-7ccc-8ccc-cccccccccccc" } },
   { "id": "agent.list_fleet", "namespace": "agent", "action": "list_fleet", "title": "List agent fleet", "description": "Return every agent-occupied seat with lane, live state, last real turn, recent turn counts, top measurable status, open escalations, and 7-day real-run spend.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [], "hasComplexInput": false, "help": "Read every agent-occupied seat at once: lane, live state, last real turn, 24h/7d turns, measurable status, escalations, and spend." },
   { "id": "agent.list_runs", "namespace": "agent", "action": "list_runs", "title": "List agent runs", "description": "Return a seat's agent run history (status, lane, model, cost, per-run tool-call and guard-denial counts) plus the seat's run/tool-call rollup with held-action count.", "requiredScope": "seat", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": true }, { "name": "limit", "flag": "limit", "type": "integer", "required": false }], "hasComplexInput": false, "help": "Audit a seat's agent run history with per-run tool-call and guard-held counts (the Trust Card)." },
@@ -51179,6 +51472,10 @@ var COMMAND_MANIFEST = [
   { "id": "seat.rename", "namespace": "seat", "action": "rename", "title": "Rename seat", "description": "Rename a Responsibility Graph seat.", "requiredScope": "seat", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": true }, { "name": "name", "flag": "name", "type": "string", "required": true }], "hasComplexInput": false, "help": "Seat names should describe the function and accountability clearly." },
   { "id": "seat.reparent", "namespace": "seat", "action": "reparent", "title": "Reparent seat", "description": "Move a Responsibility Graph seat under a new parent.", "requiredScope": "seat", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": true }, { "name": "new_parent_seat_id", "flag": "new-parent-seat-id", "type": "string", "required": true }], "hasComplexInput": false, "help": "Reparent seats only when it clarifies accountable structure and preserves a clean graph." },
   { "id": "seat.set_type", "namespace": "seat", "action": "set_type", "title": "Set seat type", "description": "Set a Responsibility Graph seat type.", "requiredScope": "seat", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": true }, { "name": "seat_type", "flag": "seat-type", "type": "enum", "required": true, "enumValues": ["human", "agent", "hybrid"] }], "hasComplexInput": false, "help": "Seat type should follow the work, risk, measurable, and stewardship model." },
+  { "id": "secret_grant.grant", "namespace": "secret_grant", "action": "grant", "title": "Grant a brokered secret", "description": "A human grants a seat scoped access to a brokered secret by VAULT REF (host + path prefix + methods + scope + injection). Postgres stores only the pointer \u2014 never secret material (invariant #5). Owner-only, human-gated. The secret.broker/baserow.* tools resolve this grant server-side; the secret never enters agent context.", "requiredScope": "tenant_admin", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": true }, { "name": "grant_key", "flag": "grant-key", "type": "string", "required": true }, { "name": "vault_ref", "flag": "vault-ref", "type": "string", "required": true }, { "name": "provider", "flag": "provider", "type": "string", "required": true }, { "name": "allowed_host", "flag": "allowed-host", "type": "string", "required": true }, { "name": "allowed_path_prefix", "flag": "allowed-path-prefix", "type": "string", "required": false }, { "name": "allowed_methods", "flag": "allowed-methods", "type": "array", "required": true, "itemType": "string" }, { "name": "scope_tier", "flag": "scope-tier", "type": "enum", "required": true, "enumValues": ["read", "write"] }, { "name": "injection_mode", "flag": "injection-mode", "type": "enum", "required": false, "enumValues": ["header_bearer", "header", "query"] }, { "name": "injection_name", "flag": "injection-name", "type": "string", "required": false }, { "name": "expires_at", "flag": "expires-at", "type": "string", "required": false }], "hasComplexInput": false, "help": "A human grants a seat a scoped brokered secret by vault ref (host + path prefix + methods + injection). Postgres stores only the pointer, never secret material. Owner-only and human-gated; the secret.broker/baserow.* tools resolve it server-side." },
+  { "id": "secret_grant.list", "namespace": "secret_grant", "action": "list", "title": "List brokered secret grants", "description": "List brokered secret grants for the tenant (or one seat). Returns the egress allowlist metadata only (host, path prefix, methods, scope, status) \u2014 never the vault ref or any secret. An agent sees only its own seat's grants.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": false }, { "name": "include_revoked", "flag": "include-revoked", "type": "boolean", "required": false }], "hasComplexInput": false, "help": "List brokered secret grants for the tenant (or one seat). Returns the egress allowlist metadata only \u2014 host, path prefix, methods, scope, status \u2014 never the vault ref or any secret." },
+  { "id": "secret_grant.request", "namespace": "secret_grant", "action": "request", "title": "Request a brokered secret grant", "description": "An agent or user REQUESTS a scoped brokered-secret grant by naming the egress it needs (grant key, host, path prefix, methods, scope). No secret and no vault ref are ever accepted (invariant #5) \u2014 this only records a durable ask for a human to grant.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": true }, { "name": "grant_key", "flag": "grant-key", "type": "string", "required": true }, { "name": "provider", "flag": "provider", "type": "string", "required": true }, { "name": "allowed_host", "flag": "allowed-host", "type": "string", "required": true }, { "name": "allowed_path_prefix", "flag": "allowed-path-prefix", "type": "string", "required": false }, { "name": "allowed_methods", "flag": "allowed-methods", "type": "array", "required": true, "itemType": "string" }, { "name": "scope_tier", "flag": "scope-tier", "type": "enum", "required": true, "enumValues": ["read", "write"] }, { "name": "reason", "flag": "reason", "type": "string", "required": false }], "hasComplexInput": false, "help": "An agent or user requests a brokered-secret egress grant by naming the host, path prefix, methods, and scope it needs. Draft-and-confirm: no secret or vault ref is accepted; a human grants it." },
+  { "id": "secret_grant.revoke", "namespace": "secret_grant", "action": "revoke", "title": "Revoke a brokered secret grant", "description": "Revoke a brokered secret grant \u2014 a compromised or over-scoped seat's egress access can be cut immediately; the next broker call resolves no grant and fails closed. Owner-only, human-gated.", "requiredScope": "tenant_admin", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "grant_id", "flag": "grant-id", "type": "string", "required": true }], "hasComplexInput": false, "help": "Revoke a brokered secret grant (teardown \u2014 cut a compromised or over-scoped seat's egress immediately; the next broker call fails closed). Owner-only and human-gated." },
   { "id": "settings.agent_policy.get", "namespace": "settings", "action": "agent_policy.get", "title": "Get company autonomy ceiling", "description": "Read this company's Company Guardrails ceiling (ADR-0007): the profile, enforcement mode, and the most an agent may do autonomously (max_autonomous_risk). Returns metadata only.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [], "hasComplexInput": false, "help": "Read this company's autonomy ceiling (Company Guardrails, ADR-0007): profile, enforcement mode, and the most an agent may do autonomously." },
   { "id": "settings.agent_policy.update", "namespace": "settings", "action": "agent_policy.update", "title": "Set company autonomy ceiling", "description": "Set the Company Guardrails ceiling (ADR-0007): a named profile (locked_down, balanced, high_autonomy) or custom + max_autonomous_risk. Tenant-admin and human-gated. An explicitly set ceiling is ENFORCED by default; pass enforcement=observe to stage a change without blocking.", "requiredScope": "tenant_admin", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "profile", "flag": "profile", "type": "enum", "required": true, "enumValues": ["locked_down", "balanced", "high_autonomy", "custom"] }, { "name": "max_autonomous_risk", "flag": "max-autonomous-risk", "type": "enum", "required": false, "enumValues": ["low", "medium", "high", "critical"] }, { "name": "enforcement", "flag": "enforcement", "type": "enum", "required": false, "enumValues": ["observe", "enforce"] }], "hasComplexInput": false, "help": "Set the company autonomy ceiling: a profile (locked_down, balanced, high_autonomy) or custom + max_autonomous_risk. Owner-only, human-gated, and enforced by default." },
   { "id": "settings.confirmation_policy.get", "namespace": "settings", "action": "confirmation_policy.get", "title": "Get CLI confirmation mode", "description": "Read this company's CLI confirmation mode (DER-1490): careful (the strict default \u2014 the CLI cannot silently auto-approve a confirmation) or trusted_operator (an owner opt-in permitting silent auto-approval of non-dangerous confirmations). Returns metadata only.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [], "hasComplexInput": false, "help": "Read this company's CLI confirmation mode: careful (the strict default \u2014 the CLI cannot silently auto-approve a confirmation) or trusted_operator (an owner opt-in permitting silent auto-approval of non-dangerous confirmations)." },