@rudderhq/cli 0.7.2-canary.0 → 0.7.2

package/dist/index.js

@@ -50,7 +50,7 @@ var init_chat_work_manifest = __esm({
 });
 
 // ../packages/shared/dist/constants.js
-var ORGANIZATION_STATUSES, ORGANIZATION_INTELLIGENCE_PROFILE_PURPOSES, ORGANIZATION_INTELLIGENCE_PROFILE_STATUSES, DEPLOYMENT_MODES, DEPLOYMENT_EXPOSURES, AUTH_BASE_URL_MODES, AGENT_STATUSES, AGENT_RUNTIME_TYPES, AGENT_ROLES, AGENT_ICON_NAMES, AGENT_OREO_ICON_PREFIX, AGENT_OREO_SHAPE_IDS, AGENT_OREO_PALETTE_IDS, AGENT_DICEBEAR_NOTIONISTS_ICON_PREFIX, AGENT_AVATAR_BACKGROUND_PRESET_IDS, ISSUE_STATUSES, ISSUE_PRIORITIES, AGENT_INTEGRATION_PROVIDERS, AGENT_INTEGRATION_STATUSES, AGENT_INTEGRATION_TRANSPORTS, AGENT_INTEGRATION_PROVIDER_REGIONS, AGENT_INTEGRATION_CHAT_TYPES, AGENT_INTEGRATION_DROP_REASONS, AGENT_INTEGRATION_OUTBOUND_STATUSES, RUDDER_AGENT_V1_MCP_TOOL_NAMES, RUDDER_BROWSER_MCP_TOOL_NAMES2, RUDDER_CORE_MCP_TOOL_NAMES2, CUSTOM_INTEGRATION_KINDS, CUSTOM_INTEGRATION_SCOPES, CUSTOM_INTEGRATION_STATUSES, CUSTOM_INTEGRATION_TOOL_STATUSES, CUSTOM_INTEGRATION_BINDING_STATUSES, CUSTOM_INTEGRATION_TOOL_CALL_STATUSES, MCP_CONNECTION_PROVIDERS, MCP_CONNECTION_TRANSPORTS, MCP_CONNECTION_SCOPES, MCP_CONNECTION_ACCESS_MODES, MCP_AGENT_ACCESS_MODES, MCP_CONNECTION_CANONICAL_STATES, MCP_PROVIDER_SCOPE_MODES, MCP_PROVIDER_ORGANIZATION_STATES, MCP_TOOL_CAPABILITY_CLASSES, MCP_CONNECTION_STATUSES, MCP_OAUTH_GRANT_STATUSES, MCP_AGENT_BINDING_STATUSES, MCP_OAUTH_SESSION_TTL_MS, MCP_PROVIDER_CATALOG, CALENDAR_SOURCE_TYPES, CALENDAR_OWNER_TYPES, CALENDAR_VISIBILITIES, CALENDAR_SOURCE_STATUSES, CALENDAR_EVENT_KINDS, CALENDAR_EVENT_STATUSES, CALENDAR_SOURCE_MODES, CHAT_CONVERSATION_STATUSES, CHAT_ISSUE_CREATION_MODES, CHAT_MESSAGE_ROLES, CHAT_MESSAGE_KINDS, CHAT_MESSAGE_STATUSES, CHAT_CONTEXT_ENTITY_TYPES, GOAL_LEVELS, GOAL_STATUSES, PROJECT_STATUSES, ORGANIZATION_RESOURCE_KINDS, ORGANIZATION_RESOURCE_SOURCE_TYPES, PROJECT_RESOURCE_ATTACHMENT_ROLES, AUTOMATION_STATUSES, AUTOMATION_CONCURRENCY_POLICIES, AUTOMATION_CATCH_UP_POLICIES, AUTOMATION_OUTPUT_MODES, AUTOMATION_TRIGGER_SIGNING_MODES, PROJECT_COLORS, PROJECT_ICONS, APPROVAL_TYPES, SECRET_PROVIDERS, STORAGE_PROVIDERS, BILLING_TYPES, FINANCE_EVENT_KINDS, FINANCE_DIRECTIONS, FINANCE_UNITS, BUDGET_SCOPE_TYPES, BUDGET_METRICS, BUDGET_WINDOW_KINDS, BUDGET_INCIDENT_RESOLUTION_ACTIONS, INVITE_JOIN_TYPES, JOIN_REQUEST_TYPES, JOIN_REQUEST_STATUSES, PERMISSION_KEYS, PLUGIN_STATUSES, PLUGIN_CATEGORIES, PLUGIN_CAPABILITIES, PLUGIN_UI_SLOT_TYPES, PLUGIN_RESERVED_COMPANY_ROUTE_SEGMENTS, PLUGIN_LAUNCHER_PLACEMENT_ZONES, PLUGIN_LAUNCHER_ACTIONS, PLUGIN_LAUNCHER_BOUNDS, PLUGIN_LAUNCHER_RENDER_ENVIRONMENTS, PLUGIN_UI_SLOT_ENTITY_TYPES, PLUGIN_STATE_SCOPE_KINDS;
+var ORGANIZATION_STATUSES, ORGANIZATION_INTELLIGENCE_PROFILE_PURPOSES, ORGANIZATION_INTELLIGENCE_PROFILE_STATUSES, DEPLOYMENT_MODES, DEPLOYMENT_EXPOSURES, AUTH_BASE_URL_MODES, AGENT_STATUSES, AGENT_RUNTIME_TYPES, AGENT_ROLES, AGENT_ICON_NAMES, AGENT_OREO_ICON_PREFIX, AGENT_OREO_SHAPE_IDS, AGENT_OREO_PALETTE_IDS, AGENT_DICEBEAR_NOTIONISTS_ICON_PREFIX, AGENT_AVATAR_BACKGROUND_PRESET_IDS, ISSUE_STATUSES, ISSUE_PRIORITIES, AGENT_INTEGRATION_PROVIDERS, AGENT_INTEGRATION_STATUSES, AGENT_INTEGRATION_TRANSPORTS, AGENT_INTEGRATION_PROVIDER_REGIONS, AGENT_INTEGRATION_CHAT_TYPES, AGENT_INTEGRATION_DROP_REASONS, AGENT_INTEGRATION_OUTBOUND_STATUSES, RUDDER_AGENT_V1_MCP_TOOL_NAMES, RUDDER_BROWSER_MCP_TOOL_NAMES2, RUDDER_CORE_MCP_TOOL_NAMES2, CUSTOM_INTEGRATION_KINDS, CUSTOM_INTEGRATION_SCOPES, CUSTOM_INTEGRATION_STATUSES, CUSTOM_INTEGRATION_TOOL_STATUSES, CUSTOM_INTEGRATION_BINDING_STATUSES, CUSTOM_INTEGRATION_TOOL_CALL_STATUSES, MCP_CONNECTION_PROVIDERS, MCP_CONNECTION_TRANSPORTS, MCP_CONNECTION_SCOPES, MCP_CONNECTION_ACCESS_MODES, MCP_AGENT_ACCESS_MODES, MCP_CONNECTION_CANONICAL_STATES, MCP_PROVIDER_SCOPE_MODES, MCP_PROVIDER_CREDENTIAL_MODES, MCP_PROVIDER_ORGANIZATION_STATES, MCP_TOOL_CAPABILITY_CLASSES, MCP_CONNECTION_STATUSES, MCP_OAUTH_GRANT_STATUSES, MCP_AGENT_BINDING_STATUSES, MCP_OAUTH_SESSION_TTL_MS, MCP_PROVIDER_CATALOG, CALENDAR_SOURCE_TYPES, CALENDAR_OWNER_TYPES, CALENDAR_VISIBILITIES, CALENDAR_SOURCE_STATUSES, CALENDAR_EVENT_KINDS, CALENDAR_EVENT_STATUSES, CALENDAR_SOURCE_MODES, CHAT_CONVERSATION_STATUSES, CHAT_ISSUE_CREATION_MODES, CHAT_MESSAGE_ROLES, CHAT_MESSAGE_KINDS, CHAT_MESSAGE_STATUSES, CHAT_CONTEXT_ENTITY_TYPES, GOAL_OBJECTIVE_MODES, GOAL_EVALUATOR_KINDS, GOAL_CONTINUATION_KINDS, GOAL_ACTIVITY_KINDS, GOAL_FEEDBACK_KINDS, PROJECT_STATUSES, ORGANIZATION_RESOURCE_KINDS, ORGANIZATION_RESOURCE_SOURCE_TYPES, PROJECT_RESOURCE_ATTACHMENT_ROLES, AUTOMATION_STATUSES, AUTOMATION_CONCURRENCY_POLICIES, AUTOMATION_CATCH_UP_POLICIES, AUTOMATION_OUTPUT_MODES, AUTOMATION_TRIGGER_SIGNING_MODES, PROJECT_COLORS, PROJECT_ICONS, APPROVAL_TYPES, SECRET_PROVIDERS, STORAGE_PROVIDERS, BILLING_TYPES, FINANCE_EVENT_KINDS, FINANCE_DIRECTIONS, FINANCE_UNITS, BUDGET_SCOPE_TYPES, BUDGET_METRICS, BUDGET_WINDOW_KINDS, BUDGET_INCIDENT_RESOLUTION_ACTIONS, AGENT_ISSUE_CREATION_REQUEST_STATUSES, INVITE_JOIN_TYPES, JOIN_REQUEST_TYPES, JOIN_REQUEST_STATUSES, PERMISSION_KEYS, PLUGIN_STATUSES, PLUGIN_CATEGORIES, PLUGIN_CAPABILITIES, PLUGIN_UI_SLOT_TYPES, PLUGIN_RESERVED_COMPANY_ROUTE_SEGMENTS, PLUGIN_LAUNCHER_PLACEMENT_ZONES, PLUGIN_LAUNCHER_ACTIONS, PLUGIN_LAUNCHER_BOUNDS, PLUGIN_LAUNCHER_RENDER_ENVIRONMENTS, PLUGIN_UI_SLOT_ENTITY_TYPES, PLUGIN_STATE_SCOPE_KINDS;
 var init_constants = __esm({
   "../packages/shared/dist/constants.js"() {
     "use strict";
@@ -79,6 +79,7 @@ var init_constants = __esm({
       "pi_local",
       "cursor",
       "openclaw_gateway",
+      "hermes_gateway",
       "hermes_local"
     ];
     AGENT_ROLES = [
@@ -328,7 +329,7 @@ var init_constants = __esm({
     CUSTOM_INTEGRATION_TOOL_STATUSES = ["active", "disabled", "error", "removed"];
     CUSTOM_INTEGRATION_BINDING_STATUSES = ["active", "revoked"];
     CUSTOM_INTEGRATION_TOOL_CALL_STATUSES = ["success", "error", "blocked"];
-    MCP_CONNECTION_PROVIDERS = ["supabase", "linear", "notion", "custom"];
+    MCP_CONNECTION_PROVIDERS = ["supabase", "linear", "notion", "github", "custom"];
     MCP_CONNECTION_TRANSPORTS = ["stdio", "streamable_http", "legacy_manual"];
     MCP_CONNECTION_SCOPES = ["organization", "agent"];
     MCP_CONNECTION_ACCESS_MODES = ["provider_default", "read_only", "read_write"];
@@ -341,6 +342,7 @@ var init_constants = __esm({
     ];
     MCP_CONNECTION_CANONICAL_STATES = ["canonical", "superseded"];
     MCP_PROVIDER_SCOPE_MODES = ["account", "workspace", "legacy_project"];
+    MCP_PROVIDER_CREDENTIAL_MODES = ["oauth", "pat", "custom"];
     MCP_PROVIDER_ORGANIZATION_STATES = [
       "not_connected",
       "connecting",
@@ -374,6 +376,7 @@ var init_constants = __esm({
         label: "Supabase",
         curated: true,
         requiresOAuth: true,
+        credentialMode: "oauth",
         requiresScopeSelection: false,
         scopeLabel: "Account",
         transports: ["streamable_http"],
@@ -385,6 +388,7 @@ var init_constants = __esm({
         label: "Linear",
         curated: true,
         requiresOAuth: true,
+        credentialMode: "oauth",
         requiresScopeSelection: false,
         scopeLabel: "Workspace",
         transports: ["streamable_http"],
@@ -396,17 +400,31 @@ var init_constants = __esm({
         label: "Notion",
         curated: true,
         requiresOAuth: true,
+        credentialMode: "oauth",
         requiresScopeSelection: false,
         scopeLabel: "Workspace",
         transports: ["streamable_http"],
         accessModes: ["provider_default"],
         defaultAccessMode: "provider_default"
       },
+      {
+        id: "github",
+        label: "GitHub",
+        curated: true,
+        requiresOAuth: false,
+        credentialMode: "pat",
+        requiresScopeSelection: false,
+        scopeLabel: "Account",
+        transports: ["streamable_http"],
+        accessModes: ["read_only", "read_write"],
+        defaultAccessMode: "read_only"
+      },
       {
         id: "custom",
         label: "Custom MCP",
         curated: false,
         requiresOAuth: false,
+        credentialMode: "custom",
         requiresScopeSelection: false,
         scopeLabel: "Server",
         transports: ["stdio", "streamable_http"],
@@ -433,8 +451,18 @@ var init_constants = __esm({
     ];
     CHAT_MESSAGE_STATUSES = ["streaming", "completed", "stopped", "failed", "interrupted"];
     CHAT_CONTEXT_ENTITY_TYPES = ["issue", "project", "agent"];
-    GOAL_LEVELS = ["organization", "team", "agent", "task"];
-    GOAL_STATUSES = ["planned", "active", "achieved", "cancelled"];
+    GOAL_OBJECTIVE_MODES = ["target", "maximize", "maintain", "decide"];
+    GOAL_EVALUATOR_KINDS = ["artifact", "metric", "policy", "human"];
+    GOAL_CONTINUATION_KINDS = ["commitment", "wait", "decision", "verification"];
+    GOAL_ACTIVITY_KINDS = [
+      "progress",
+      "closeout",
+      "evidence",
+      "decision_requested",
+      "bottleneck",
+      "checkpoint"
+    ];
+    GOAL_FEEDBACK_KINDS = ["ordinary", "consequential"];
     PROJECT_STATUSES = [
       "backlog",
       "planned",
@@ -531,7 +559,9 @@ var init_constants = __esm({
       "approve_ceo_strategy",
       "budget_override_required",
       "chat_issue_creation",
-      "chat_operation"
+      "chat_operation",
+      "agent_runtime",
+      "goal_change"
     ];
     SECRET_PROVIDERS = [
       "local_encrypted",
@@ -585,6 +615,14 @@ var init_constants = __esm({
       "keep_paused",
       "raise_budget_and_resume"
     ];
+    AGENT_ISSUE_CREATION_REQUEST_STATUSES = [
+      "queued",
+      "running",
+      "deferred",
+      "succeeded",
+      "failed",
+      "cancelled"
+    ];
     INVITE_JOIN_TYPES = ["human", "agent", "both"];
     JOIN_REQUEST_TYPES = ["human", "agent"];
     JOIN_REQUEST_STATUSES = ["pending_approval", "approved", "rejected"];
@@ -932,6 +970,8 @@ function defaultAccessMode(provider) {
     return "read_write";
   if (provider === "linear")
     return "read_write";
+  if (provider === "github")
+    return "read_only";
   return "provider_default";
 }
 function sameNames(left, right, caseInsensitive = false) {
@@ -950,6 +990,23 @@ function validateSafeConnectionConfig(value, ctx, options = {}) {
       message: `${value.provider ?? "Unknown"} does not support ${accessMode}`
     });
   }
+  if (value.provider === "github") {
+    if (value.transport !== "streamable_http") {
+      ctx.addIssue({
+        code: z3.ZodIssueCode.custom,
+        path: ["transport"],
+        message: "GitHub MCP uses Rudder-managed Streamable HTTP"
+      });
+    }
+    if (!mcpGitHubSafeConfigSchema.safeParse(value.safeConfig).success) {
+      ctx.addIssue({
+        code: z3.ZodIssueCode.custom,
+        path: ["safeConfig"],
+        message: "GitHub connections require the managed GitHub account configuration"
+      });
+    }
+    return;
+  }
   if (value.provider !== "custom") {
     if (value.transport !== "streamable_http") {
       ctx.addIssue({
@@ -1038,6 +1095,16 @@ function validateSafeConnectionConfig(value, ctx, options = {}) {
   }
 }
 function validateConnectionSecretMutation(value, ctx) {
+  if (value.provider === "github") {
+    if (value.secrets && !mcpGitHubSecretsMutationSchema.safeParse(value.secrets).success) {
+      ctx.addIssue({
+        code: z3.ZodIssueCode.custom,
+        path: ["secrets"],
+        message: "GitHub connections accept only a fine-grained or legacy PAT"
+      });
+    }
+    return;
+  }
   if (value.provider !== "custom")
     return;
   if (value.transport === "stdio") {
@@ -1079,7 +1146,7 @@ function validateConnectionSecretMutation(value, ctx) {
     }
   }
 }
-var uuidSchema, timestampSchema, connectionNameSchema, reservedMcpConnectionNames, environmentNameSchema, externalMcpToolNameSchema, externalMcpToolFilterSchema, mcpConnectionProviderSchema, mcpConnectionScopeSchema, mcpConnectionTransportSchema, mcpConnectionAccessModeSchema, mcpAgentAccessModeSchema, mcpConnectionCanonicalStateSchema, mcpProviderScopeModeSchema, mcpProviderOrganizationStateSchema, mcpToolCapabilityClassSchema, mcpProviderMaxAccessSchema, mcpConnectionStatusSchema, mcpOAuthGrantStatusSchema, mcpAgentBindingStatusSchema, stringMapSchema, environmentValueMapSchema, safeHeaderSchema, mcpStdioSafeConfigSchema, mcpStreamableHttpSafeConfigSchema, mcpConnectionSecretsMutationSchema, mcpLegacyManualSafeConfigSchema, mcpCuratedSafeConfigSchema, mcpConnectionSafeConfigSchema, mcpConnectionInputFields, providerAccessModes, createMcpConnectionSchema, updateMcpConnectionSchema, mcpConnectionMergedConfigFields, mcpConnectionMergedConfigSchema, mcpConnectionMutationConfigSchema, mcpConnectionSummarySchema, mcpProviderCatalogEntrySchema, mcpProviderCatalogSchema, mcpOAuthStartSchema, mcpOAuthStartResponseSchema, mcpOAuthCallbackSchema, mcpScopeSelectionSchema, mcpExternalScopeOptionSchema, mcpOAuthGrantSummarySchema, mcpDiscoveredToolSchema, mcpAgentBindingSchema, mcpAgentConnectionSummarySchema, upsertMcpAgentBindingSchema, updateMcpAgentBindingSchema, managedExternalMcpBindingSchema, managedExternalMcpBindingsSchema, mcpProviderAvailabilitySchema;
+var uuidSchema, timestampSchema, connectionNameSchema, reservedMcpConnectionNames, environmentNameSchema, externalMcpToolNameSchema, externalMcpToolFilterSchema, mcpConnectionProviderSchema, mcpConnectionScopeSchema, mcpConnectionTransportSchema, mcpConnectionAccessModeSchema, mcpAgentAccessModeSchema, mcpConnectionCanonicalStateSchema, mcpProviderScopeModeSchema, mcpProviderCredentialModeSchema, mcpProviderOrganizationStateSchema, mcpToolCapabilityClassSchema, mcpProviderMaxAccessSchema, mcpConnectionStatusSchema, mcpOAuthGrantStatusSchema, mcpAgentBindingStatusSchema, stringMapSchema, environmentValueMapSchema, safeHeaderSchema, mcpStdioSafeConfigSchema, mcpStreamableHttpSafeConfigSchema, mcpConnectionSecretsMutationSchema, mcpLegacyManualSafeConfigSchema, mcpCuratedSafeConfigSchema, mcpGitHubSafeConfigSchema, mcpGitHubPatSchema, mcpGitHubSecretsMutationSchema, mcpConnectionSafeConfigSchema, mcpConnectionInputFields, providerAccessModes, createMcpConnectionSchema, updateMcpConnectionSchema, mcpConnectionMergedConfigFields, mcpConnectionMergedConfigSchema, mcpConnectionMutationConfigSchema, mcpConnectionSummarySchema, mcpProviderCatalogEntrySchema, mcpProviderCatalogSchema, mcpOAuthStartSchema, mcpOAuthStartResponseSchema, mcpOAuthCallbackSchema, mcpScopeSelectionSchema, mcpExternalScopeOptionSchema, mcpOAuthGrantSummarySchema, mcpDiscoveredToolSchema, mcpAgentBindingSchema, mcpAgentConnectionSummarySchema, upsertMcpAgentBindingSchema, updateMcpAgentBindingSchema, managedExternalMcpBindingSchema, managedExternalMcpBindingsSchema, mcpProviderAvailabilitySchema;
 var init_mcp = __esm({
   "../packages/shared/dist/validators/mcp.js"() {
     "use strict";
@@ -1098,6 +1165,7 @@ var init_mcp = __esm({
     mcpAgentAccessModeSchema = z3.enum(MCP_AGENT_ACCESS_MODES);
     mcpConnectionCanonicalStateSchema = z3.enum(MCP_CONNECTION_CANONICAL_STATES);
     mcpProviderScopeModeSchema = z3.enum(MCP_PROVIDER_SCOPE_MODES);
+    mcpProviderCredentialModeSchema = z3.enum(MCP_PROVIDER_CREDENTIAL_MODES);
     mcpProviderOrganizationStateSchema = z3.enum(MCP_PROVIDER_ORGANIZATION_STATES);
     mcpToolCapabilityClassSchema = z3.enum(MCP_TOOL_CAPABILITY_CLASSES);
     mcpProviderMaxAccessSchema = z3.enum(["read_only", "read_write", "provider_granted"]);
@@ -1196,10 +1264,19 @@ var init_mcp = __esm({
         excluded: z3.array(z3.string().min(1).max(120)).max(100)
       }).strict()
     }).strict();
+    mcpGitHubSafeConfigSchema = z3.object({
+      endpoint: z3.literal("https://api.githubcopilot.com/mcp/"),
+      scopeMode: z3.literal("account")
+    }).strict();
+    mcpGitHubPatSchema = z3.string().trim().min(20).max(255).regex(/^(?:github_pat_|ghp_)[A-Za-z0-9_]+$/, "Use a GitHub fine-grained or legacy PAT");
+    mcpGitHubSecretsMutationSchema = z3.object({
+      bearerToken: mcpGitHubPatSchema
+    }).strict();
     mcpConnectionSafeConfigSchema = z3.union([
       mcpStdioSafeConfigSchema,
       mcpStreamableHttpSafeConfigSchema,
       mcpLegacyManualSafeConfigSchema,
+      mcpGitHubSafeConfigSchema,
       mcpCuratedSafeConfigSchema
     ]);
     mcpConnectionInputFields = {
@@ -1222,9 +1299,13 @@ var init_mcp = __esm({
       supabase: ["read_only", "read_write"],
       linear: ["read_only", "read_write"],
       notion: ["provider_default"],
+      github: ["read_only", "read_write"],
       custom: ["provider_default", "read_only", "read_write"]
     };
-    createMcpConnectionSchema = z3.object(mcpConnectionInputFields).strict().superRefine((value, ctx) => {
+    createMcpConnectionSchema = z3.object({
+      ...mcpConnectionInputFields,
+      provider: z3.literal("custom")
+    }).strict().superRefine((value, ctx) => {
       if (value.scope === "organization" && value.ownerAgentId) {
         ctx.addIssue({
           code: z3.ZodIssueCode.custom,
@@ -1310,6 +1391,7 @@ var init_mcp = __esm({
       label: z3.string().min(1),
       curated: z3.boolean(),
       requiresOAuth: z3.boolean(),
+      credentialMode: mcpProviderCredentialModeSchema,
       requiresScopeSelection: z3.boolean(),
       scopeLabel: z3.string().min(1),
       transports: z3.array(mcpConnectionTransportSchema).min(1),
@@ -1427,7 +1509,7 @@ var init_mcp = __esm({
     }).strict();
     managedExternalMcpBindingsSchema = z3.array(managedExternalMcpBindingSchema).max(100);
     mcpProviderAvailabilitySchema = z3.object({
-      provider: z3.enum(["supabase", "linear", "notion"]),
+      provider: z3.enum(["supabase", "linear", "notion", "github"]),
       organization: z3.object({
         state: mcpProviderOrganizationStateSchema,
         connectionId: uuidSchema.nullable(),
@@ -1476,7 +1558,7 @@ var init_mcp = __esm({
         });
       }
       const scopeMode = value.organization.scopeMode;
-      const validScope = scopeMode === null || (value.provider === "supabase" ? scopeMode === "account" || scopeMode === "legacy_project" : scopeMode === "workspace");
+      const validScope = scopeMode === null || (value.provider === "supabase" ? scopeMode === "account" || scopeMode === "legacy_project" : value.provider === "github" ? scopeMode === "account" : scopeMode === "workspace");
       if (!validScope) {
         ctx.addIssue({
           code: z3.ZodIssueCode.custom,
@@ -2382,8 +2464,28 @@ var init_local_account_auth = __esm({
   }
 });
 
-// ../packages/shared/dist/validators/instance.js
+// ../packages/shared/dist/validators/agent-issue-creation.js
 import { z as z7 } from "zod";
+var agentIssueCreationRequestStatusSchema, createAgentIssueCreationRequestSchema;
+var init_agent_issue_creation = __esm({
+  "../packages/shared/dist/validators/agent-issue-creation.js"() {
+    "use strict";
+    init_constants();
+    agentIssueCreationRequestStatusSchema = z7.enum(AGENT_ISSUE_CREATION_REQUEST_STATUSES);
+    createAgentIssueCreationRequestSchema = z7.object({
+      agentId: z7.string().uuid(),
+      instruction: z7.string().trim().min(1).max(2e4),
+      projectId: z7.string().uuid().optional().nullable(),
+      goalId: z7.string().uuid().optional().nullable(),
+      parentId: z7.string().uuid().optional().nullable(),
+      contextSnapshot: z7.record(z7.unknown()).optional().nullable(),
+      idempotencyKey: z7.string().trim().min(1).max(255)
+    });
+  }
+});
+
+// ../packages/shared/dist/validators/instance.js
+import { z as z8 } from "zod";
 var DEFAULT_INSTANCE_BROWSER_SETTINGS, instanceBrowserSettingsSchema, patchInstanceBrowserSettingsSchema, instanceLocaleSchema, instanceGeneralSettingsSchema, patchInstanceGeneralSettingsSchema, instanceNotificationSettingsSchema, patchInstanceNotificationSettingsSchema, OPERATOR_PROFILE_MORE_ABOUT_YOU_MAX_LENGTH, operatorProfileSettingsSchema, patchOperatorProfileSettingsSchema, KEYBOARD_SHORTCUT_ACTION_IDS, keyboardShortcutActionIdSchema, keyboardShortcutBindingSchema, keyboardShortcutPreferenceSchema, keyboardShortcutSettingsSchema, instancePathPickerSelectionTypeSchema, instancePathPickerRequestSchema, instancePathPickerResultSchema;
 var init_instance = __esm({
   "../packages/shared/dist/validators/instance.js"() {
@@ -2392,35 +2494,36 @@ var init_instance = __esm({
       enabled: true,
       openLinksIn: "built_in"
     };
-    instanceBrowserSettingsSchema = z7.object({
-      enabled: z7.boolean().default(DEFAULT_INSTANCE_BROWSER_SETTINGS.enabled),
-      openLinksIn: z7.enum(["built_in", "default_browser"]).default(DEFAULT_INSTANCE_BROWSER_SETTINGS.openLinksIn)
+    instanceBrowserSettingsSchema = z8.object({
+      enabled: z8.boolean().default(DEFAULT_INSTANCE_BROWSER_SETTINGS.enabled),
+      openLinksIn: z8.enum(["built_in", "default_browser"]).default(DEFAULT_INSTANCE_BROWSER_SETTINGS.openLinksIn)
     }).strict();
-    patchInstanceBrowserSettingsSchema = z7.object({
-      enabled: z7.boolean().optional(),
-      openLinksIn: z7.enum(["built_in", "default_browser"]).optional()
+    patchInstanceBrowserSettingsSchema = z8.object({
+      enabled: z8.boolean().optional(),
+      openLinksIn: z8.enum(["built_in", "default_browser"]).optional()
     }).strict();
-    instanceLocaleSchema = z7.enum(["en", "zh-CN"]);
-    instanceGeneralSettingsSchema = z7.object({
-      censorUsernameInLogs: z7.boolean().default(false),
-      showDeveloperDiagnostics: z7.boolean().default(false),
-      experimentalSitesEnabled: z7.boolean().default(false),
+    instanceLocaleSchema = z8.enum(["en", "zh-CN"]);
+    instanceGeneralSettingsSchema = z8.object({
+      censorUsernameInLogs: z8.boolean().default(false),
+      showDeveloperDiagnostics: z8.boolean().default(false),
+      experimentalSitesEnabled: z8.boolean().default(false),
+      experimentalGoalsEnabled: z8.boolean().default(false),
       locale: instanceLocaleSchema.default("en"),
-      productAnalyticsMode: z7.enum(["off", "anonymous", "account_linked"]).default("off"),
-      productAnalyticsConsentEpoch: z7.number().int().min(1).default(1)
+      productAnalyticsMode: z8.enum(["off", "anonymous", "account_linked"]).default("off"),
+      productAnalyticsConsentEpoch: z8.number().int().min(1).default(1)
     }).strict();
     patchInstanceGeneralSettingsSchema = instanceGeneralSettingsSchema.partial();
-    instanceNotificationSettingsSchema = z7.object({
-      desktopInboxNotifications: z7.boolean().default(true),
-      desktopDockBadge: z7.boolean().default(true),
-      desktopIssueNotifications: z7.boolean().default(true),
-      desktopChatNotifications: z7.boolean().default(true)
+    instanceNotificationSettingsSchema = z8.object({
+      desktopInboxNotifications: z8.boolean().default(true),
+      desktopDockBadge: z8.boolean().default(true),
+      desktopIssueNotifications: z8.boolean().default(true),
+      desktopChatNotifications: z8.boolean().default(true)
     }).strict();
     patchInstanceNotificationSettingsSchema = instanceNotificationSettingsSchema.partial();
     OPERATOR_PROFILE_MORE_ABOUT_YOU_MAX_LENGTH = 8e3;
-    operatorProfileSettingsSchema = z7.object({
-      nickname: z7.string().max(80).default(""),
-      moreAboutYou: z7.string().max(OPERATOR_PROFILE_MORE_ABOUT_YOU_MAX_LENGTH).default("")
+    operatorProfileSettingsSchema = z8.object({
+      nickname: z8.string().max(80).default(""),
+      moreAboutYou: z8.string().max(OPERATOR_PROFILE_MORE_ABOUT_YOU_MAX_LENGTH).default("")
     }).strict();
     patchOperatorProfileSettingsSchema = operatorProfileSettingsSchema.partial();
     KEYBOARD_SHORTCUT_ACTION_IDS = [
@@ -2431,28 +2534,28 @@ var init_instance = __esm({
       "sidebar.toggle",
       "panel.toggle"
     ];
-    keyboardShortcutActionIdSchema = z7.enum(KEYBOARD_SHORTCUT_ACTION_IDS);
-    keyboardShortcutBindingSchema = z7.object({
-      key: z7.string().trim().min(1).max(64),
-      code: z7.string().trim().min(1).max(80).optional(),
-      metaKey: z7.boolean().optional(),
-      ctrlKey: z7.boolean().optional(),
-      altKey: z7.boolean().optional(),
-      shiftKey: z7.boolean().optional()
+    keyboardShortcutActionIdSchema = z8.enum(KEYBOARD_SHORTCUT_ACTION_IDS);
+    keyboardShortcutBindingSchema = z8.object({
+      key: z8.string().trim().min(1).max(64),
+      code: z8.string().trim().min(1).max(80).optional(),
+      metaKey: z8.boolean().optional(),
+      ctrlKey: z8.boolean().optional(),
+      altKey: z8.boolean().optional(),
+      shiftKey: z8.boolean().optional()
     }).strict();
-    keyboardShortcutPreferenceSchema = z7.object({
+    keyboardShortcutPreferenceSchema = z8.object({
       actionId: keyboardShortcutActionIdSchema,
-      bindings: z7.array(keyboardShortcutBindingSchema).max(4).optional(),
-      disabled: z7.boolean().optional()
+      bindings: z8.array(keyboardShortcutBindingSchema).max(4).optional(),
+      disabled: z8.boolean().optional()
     }).strict();
-    keyboardShortcutSettingsSchema = z7.object({
-      shortcuts: z7.array(keyboardShortcutPreferenceSchema).max(KEYBOARD_SHORTCUT_ACTION_IDS.length).default([])
+    keyboardShortcutSettingsSchema = z8.object({
+      shortcuts: z8.array(keyboardShortcutPreferenceSchema).max(KEYBOARD_SHORTCUT_ACTION_IDS.length).default([])
     }).strict().superRefine((value, ctx) => {
       const seen = /* @__PURE__ */ new Set();
       value.shortcuts.forEach((shortcut, index) => {
         if (seen.has(shortcut.actionId)) {
           ctx.addIssue({
-            code: z7.ZodIssueCode.custom,
+            code: z8.ZodIssueCode.custom,
             message: `Duplicate shortcut action id: ${shortcut.actionId}`,
             path: ["shortcuts", index, "actionId"]
           });
@@ -2461,43 +2564,43 @@ var init_instance = __esm({
         seen.add(shortcut.actionId);
       });
     });
-    instancePathPickerSelectionTypeSchema = z7.enum(["file", "directory"]);
-    instancePathPickerRequestSchema = z7.object({
+    instancePathPickerSelectionTypeSchema = z8.enum(["file", "directory"]);
+    instancePathPickerRequestSchema = z8.object({
       selectionType: instancePathPickerSelectionTypeSchema
     }).strict();
-    instancePathPickerResultSchema = z7.object({
-      path: z7.string().nullable(),
-      cancelled: z7.boolean()
+    instancePathPickerResultSchema = z8.object({
+      path: z8.string().nullable(),
+      cancelled: z8.boolean()
     }).strict();
   }
 });
 
 // ../packages/shared/dist/validators/budget.js
-import { z as z8 } from "zod";
+import { z as z9 } from "zod";
 var upsertBudgetPolicySchema, resolveBudgetIncidentSchema;
 var init_budget = __esm({
   "../packages/shared/dist/validators/budget.js"() {
     "use strict";
     init_constants();
-    upsertBudgetPolicySchema = z8.object({
-      scopeType: z8.enum(BUDGET_SCOPE_TYPES),
-      scopeId: z8.string().uuid(),
-      metric: z8.enum(BUDGET_METRICS).optional().default("billed_cents"),
-      windowKind: z8.enum(BUDGET_WINDOW_KINDS).optional().default("calendar_month_utc"),
-      amount: z8.number().int().nonnegative(),
-      warnPercent: z8.number().int().min(1).max(99).optional().default(80),
-      hardStopEnabled: z8.boolean().optional().default(true),
-      notifyEnabled: z8.boolean().optional().default(true),
-      isActive: z8.boolean().optional().default(true)
+    upsertBudgetPolicySchema = z9.object({
+      scopeType: z9.enum(BUDGET_SCOPE_TYPES),
+      scopeId: z9.string().uuid(),
+      metric: z9.enum(BUDGET_METRICS).optional().default("billed_cents"),
+      windowKind: z9.enum(BUDGET_WINDOW_KINDS).optional().default("calendar_month_utc"),
+      amount: z9.number().int().nonnegative(),
+      warnPercent: z9.number().int().min(1).max(99).optional().default(80),
+      hardStopEnabled: z9.boolean().optional().default(true),
+      notifyEnabled: z9.boolean().optional().default(true),
+      isActive: z9.boolean().optional().default(true)
     });
-    resolveBudgetIncidentSchema = z8.object({
-      action: z8.enum(BUDGET_INCIDENT_RESOLUTION_ACTIONS),
-      amount: z8.number().int().nonnegative().optional(),
-      decisionNote: z8.string().optional().nullable()
+    resolveBudgetIncidentSchema = z9.object({
+      action: z9.enum(BUDGET_INCIDENT_RESOLUTION_ACTIONS),
+      amount: z9.number().int().nonnegative().optional(),
+      decisionNote: z9.string().optional().nullable()
     }).superRefine((value, ctx) => {
       if (value.action === "raise_budget_and_resume" && typeof value.amount !== "number") {
         ctx.addIssue({
-          code: z8.ZodIssueCode.custom,
+          code: z9.ZodIssueCode.custom,
           message: "amount is required when raising a budget",
           path: ["amount"]
         });
@@ -2507,12 +2610,12 @@ var init_budget = __esm({
 });
 
 // ../packages/shared/dist/validators/adapter-skills.js
-import { z as z9 } from "zod";
+import { z as z10 } from "zod";
 var agentSkillStateSchema, agentSkillOriginSchema, agentSkillSourceClassSchema, agentSkillSyncModeSchema, agentSkillEntrySchema, agentSkillSnapshotSchema, agentSkillSyncSchema, agentSkillEnableSchema;
 var init_adapter_skills = __esm({
   "../packages/shared/dist/validators/adapter-skills.js"() {
     "use strict";
-    agentSkillStateSchema = z9.enum([
+    agentSkillStateSchema = z10.enum([
       "available",
       "configured",
       "installed",
@@ -2520,71 +2623,71 @@ var init_adapter_skills = __esm({
       "stale",
       "external"
     ]);
-    agentSkillOriginSchema = z9.preprocess((value) => {
+    agentSkillOriginSchema = z10.preprocess((value) => {
       if (value === "company_managed")
         return "organization_managed";
       return value;
-    }, z9.enum([
+    }, z10.enum([
       "organization_managed",
       "user_installed",
       "external_unknown"
     ]));
-    agentSkillSourceClassSchema = z9.enum([
+    agentSkillSourceClassSchema = z10.enum([
       "bundled",
       "organization",
       "agent_home",
       "global",
       "adapter_home"
     ]);
-    agentSkillSyncModeSchema = z9.enum([
+    agentSkillSyncModeSchema = z10.enum([
       "unsupported",
       "persistent",
       "ephemeral"
     ]);
-    agentSkillEntrySchema = z9.object({
-      key: z9.string().min(1),
-      selectionKey: z9.string().min(1),
-      runtimeName: z9.string().min(1).nullable(),
-      description: z9.string().nullable().optional(),
-      desired: z9.boolean(),
-      configurable: z9.boolean(),
-      alwaysEnabled: z9.boolean(),
-      managed: z9.boolean(),
+    agentSkillEntrySchema = z10.object({
+      key: z10.string().min(1),
+      selectionKey: z10.string().min(1),
+      runtimeName: z10.string().min(1).nullable(),
+      description: z10.string().nullable().optional(),
+      desired: z10.boolean(),
+      configurable: z10.boolean(),
+      alwaysEnabled: z10.boolean(),
+      managed: z10.boolean(),
       state: agentSkillStateSchema,
       sourceClass: agentSkillSourceClassSchema,
       origin: agentSkillOriginSchema.optional(),
-      originLabel: z9.string().nullable().optional(),
-      locationLabel: z9.string().nullable().optional(),
-      readOnly: z9.boolean().optional(),
-      sourcePath: z9.string().nullable().optional(),
-      targetPath: z9.string().nullable().optional(),
-      workspaceEditPath: z9.string().nullable().optional(),
-      detail: z9.string().nullable().optional()
+      originLabel: z10.string().nullable().optional(),
+      locationLabel: z10.string().nullable().optional(),
+      readOnly: z10.boolean().optional(),
+      sourcePath: z10.string().nullable().optional(),
+      targetPath: z10.string().nullable().optional(),
+      workspaceEditPath: z10.string().nullable().optional(),
+      detail: z10.string().nullable().optional()
     });
-    agentSkillSnapshotSchema = z9.object({
-      agentRuntimeType: z9.string().min(1),
-      supported: z9.boolean(),
+    agentSkillSnapshotSchema = z10.object({
+      agentRuntimeType: z10.string().min(1),
+      supported: z10.boolean(),
       mode: agentSkillSyncModeSchema,
-      desiredSkills: z9.array(z9.string().min(1)),
-      entries: z9.array(agentSkillEntrySchema),
-      warnings: z9.array(z9.string())
+      desiredSkills: z10.array(z10.string().min(1)),
+      entries: z10.array(agentSkillEntrySchema),
+      warnings: z10.array(z10.string())
     });
-    agentSkillSyncSchema = z9.object({
-      desiredSkills: z9.array(z9.string().min(1))
+    agentSkillSyncSchema = z10.object({
+      desiredSkills: z10.array(z10.string().min(1))
     });
-    agentSkillEnableSchema = z9.object({
-      skills: z9.array(z9.string().min(1)).min(1)
+    agentSkillEnableSchema = z10.object({
+      skills: z10.array(z10.string().min(1)).min(1)
     });
   }
 });
 
 // ../packages/shared/dist/validators/ai-search.js
-import { z as z10 } from "zod";
+import { z as z11 } from "zod";
 var aiSearchScopeSchema, aiSearchRequestSchema;
 var init_ai_search = __esm({
   "../packages/shared/dist/validators/ai-search.js"() {
     "use strict";
-    aiSearchScopeSchema = z10.enum([
+    aiSearchScopeSchema = z11.enum([
       "issue",
       "chat",
       "project",
@@ -2592,56 +2695,56 @@ var init_ai_search = __esm({
       "skill",
       "library"
     ]);
-    aiSearchRequestSchema = z10.object({
-      query: z10.string().trim().min(2).max(240),
+    aiSearchRequestSchema = z11.object({
+      query: z11.string().trim().min(2).max(240),
       scope: aiSearchScopeSchema.optional()
     });
   }
 });
 
 // ../packages/shared/dist/validators/secret.js
-import { z as z11 } from "zod";
+import { z as z12 } from "zod";
 var envBindingPlainSchema, envBindingSecretRefSchema, envBindingSchema, envConfigSchema, createSecretSchema, rotateSecretSchema, updateSecretSchema;
 var init_secret = __esm({
   "../packages/shared/dist/validators/secret.js"() {
     "use strict";
     init_constants();
-    envBindingPlainSchema = z11.object({
-      type: z11.literal("plain"),
-      value: z11.string()
+    envBindingPlainSchema = z12.object({
+      type: z12.literal("plain"),
+      value: z12.string()
     });
-    envBindingSecretRefSchema = z11.object({
-      type: z11.literal("secret_ref"),
-      secretId: z11.string().uuid(),
-      version: z11.union([z11.literal("latest"), z11.number().int().positive()]).optional()
+    envBindingSecretRefSchema = z12.object({
+      type: z12.literal("secret_ref"),
+      secretId: z12.string().uuid(),
+      version: z12.union([z12.literal("latest"), z12.number().int().positive()]).optional()
     });
-    envBindingSchema = z11.union([
-      z11.string(),
+    envBindingSchema = z12.union([
+      z12.string(),
       envBindingPlainSchema,
       envBindingSecretRefSchema
     ]);
-    envConfigSchema = z11.record(envBindingSchema);
-    createSecretSchema = z11.object({
-      name: z11.string().min(1),
-      provider: z11.enum(SECRET_PROVIDERS).optional(),
-      value: z11.string().min(1),
-      description: z11.string().optional().nullable(),
-      externalRef: z11.string().optional().nullable()
+    envConfigSchema = z12.record(envBindingSchema);
+    createSecretSchema = z12.object({
+      name: z12.string().min(1),
+      provider: z12.enum(SECRET_PROVIDERS).optional(),
+      value: z12.string().min(1),
+      description: z12.string().optional().nullable(),
+      externalRef: z12.string().optional().nullable()
     }).strict();
-    rotateSecretSchema = z11.object({
-      value: z11.string().min(1),
-      externalRef: z11.string().optional().nullable()
+    rotateSecretSchema = z12.object({
+      value: z12.string().min(1),
+      externalRef: z12.string().optional().nullable()
     }).strict();
-    updateSecretSchema = z11.object({
-      name: z11.string().min(1).optional(),
-      description: z11.string().optional().nullable(),
-      externalRef: z11.string().optional().nullable()
+    updateSecretSchema = z12.object({
+      name: z12.string().min(1).optional(),
+      description: z12.string().optional().nullable(),
+      externalRef: z12.string().optional().nullable()
     }).strict();
   }
 });
 
 // ../packages/shared/dist/validators/model-fallbacks.js
-import { z as z12 } from "zod";
+import { z as z13 } from "zod";
 function isRecord(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
@@ -2651,7 +2754,7 @@ function validateModelFallbacksConfig(value, ctx, pathPrefix) {
     return;
   if (!Array.isArray(fallbackModels)) {
     ctx.addIssue({
-      code: z12.ZodIssueCode.custom,
+      code: z13.ZodIssueCode.custom,
       message: "modelFallbacks must be an array",
       path: [...pathPrefix, "modelFallbacks"]
     });
@@ -2661,7 +2764,7 @@ function validateModelFallbacksConfig(value, ctx, pathPrefix) {
     if (typeof fallback === "string") {
       if (fallback.trim().length === 0) {
         ctx.addIssue({
-          code: z12.ZodIssueCode.custom,
+          code: z13.ZodIssueCode.custom,
           message: "modelFallbacks string entries must be non-empty",
           path: [...pathPrefix, "modelFallbacks", index]
         });
@@ -2670,7 +2773,7 @@ function validateModelFallbacksConfig(value, ctx, pathPrefix) {
     }
     if (!isRecord(fallback)) {
       ctx.addIssue({
-        code: z12.ZodIssueCode.custom,
+        code: z13.ZodIssueCode.custom,
         message: "modelFallbacks entries must be strings or runtime/model objects",
         path: [...pathPrefix, "modelFallbacks", index]
       });
@@ -2678,27 +2781,27 @@ function validateModelFallbacksConfig(value, ctx, pathPrefix) {
     }
     if (typeof fallback.agentRuntimeType !== "string" || fallback.agentRuntimeType.trim().length === 0) {
       ctx.addIssue({
-        code: z12.ZodIssueCode.custom,
+        code: z13.ZodIssueCode.custom,
         message: "modelFallbacks entries must include agentRuntimeType",
         path: [...pathPrefix, "modelFallbacks", index, "agentRuntimeType"]
       });
     } else if (!agentRuntimeTypes.has(fallback.agentRuntimeType)) {
       ctx.addIssue({
-        code: z12.ZodIssueCode.custom,
+        code: z13.ZodIssueCode.custom,
         message: "modelFallbacks entries must include a valid agentRuntimeType",
         path: [...pathPrefix, "modelFallbacks", index, "agentRuntimeType"]
       });
     }
     if (typeof fallback.model !== "string" || fallback.model.trim().length === 0) {
       ctx.addIssue({
-        code: z12.ZodIssueCode.custom,
+        code: z13.ZodIssueCode.custom,
         message: "modelFallbacks entries must include model",
         path: [...pathPrefix, "modelFallbacks", index, "model"]
       });
     }
     if (fallback.config !== void 0 && !isRecord(fallback.config)) {
       ctx.addIssue({
-        code: z12.ZodIssueCode.custom,
+        code: z13.ZodIssueCode.custom,
         message: "modelFallbacks entry config must be an object",
         path: [...pathPrefix, "modelFallbacks", index, "config"]
       });
@@ -2706,7 +2809,7 @@ function validateModelFallbacksConfig(value, ctx, pathPrefix) {
       const parsed = envConfigSchema.safeParse(fallback.config.env);
       if (!parsed.success) {
         ctx.addIssue({
-          code: z12.ZodIssueCode.custom,
+          code: z13.ZodIssueCode.custom,
           message: "modelFallbacks entry config.env must be a map of valid env bindings",
           path: [...pathPrefix, "modelFallbacks", index, "config", "env"]
         });
@@ -2725,7 +2828,7 @@ var init_model_fallbacks = __esm({
 });
 
 // ../packages/shared/dist/validators/organization-intelligence-profile.js
-import { z as z13 } from "zod";
+import { z as z14 } from "zod";
 var organizationIntelligenceProfilePurposeSchema, organizationIntelligenceProfileStatusSchema, organizationIntelligenceProfileConfigSchema, upsertOrganizationIntelligenceProfileSchema;
 var init_organization_intelligence_profile = __esm({
   "../packages/shared/dist/validators/organization-intelligence-profile.js"() {
@@ -2733,15 +2836,15 @@ var init_organization_intelligence_profile = __esm({
     init_constants();
     init_model_fallbacks();
     init_secret();
-    organizationIntelligenceProfilePurposeSchema = z13.enum(ORGANIZATION_INTELLIGENCE_PROFILE_PURPOSES);
-    organizationIntelligenceProfileStatusSchema = z13.enum(ORGANIZATION_INTELLIGENCE_PROFILE_STATUSES);
-    organizationIntelligenceProfileConfigSchema = z13.record(z13.unknown()).superRefine((value, ctx) => {
+    organizationIntelligenceProfilePurposeSchema = z14.enum(ORGANIZATION_INTELLIGENCE_PROFILE_PURPOSES);
+    organizationIntelligenceProfileStatusSchema = z14.enum(ORGANIZATION_INTELLIGENCE_PROFILE_STATUSES);
+    organizationIntelligenceProfileConfigSchema = z14.record(z14.unknown()).superRefine((value, ctx) => {
       const envValue = value.env;
       if (envValue !== void 0) {
         const parsed = envConfigSchema.safeParse(envValue);
         if (!parsed.success) {
           ctx.addIssue({
-            code: z13.ZodIssueCode.custom,
+            code: z14.ZodIssueCode.custom,
             message: "agentRuntimeConfig.env must be a map of valid env bindings",
             path: ["env"]
           });
@@ -2749,8 +2852,8 @@ var init_organization_intelligence_profile = __esm({
       }
       validateModelFallbacksConfig(value, ctx, []);
     });
-    upsertOrganizationIntelligenceProfileSchema = z13.object({
-      agentRuntimeType: z13.enum(AGENT_RUNTIME_TYPES),
+    upsertOrganizationIntelligenceProfileSchema = z14.object({
+      agentRuntimeType: z14.enum(AGENT_RUNTIME_TYPES),
       agentRuntimeConfig: organizationIntelligenceProfileConfigSchema.default({}),
       status: organizationIntelligenceProfileStatusSchema.optional().default("disabled")
     });
@@ -2768,296 +2871,296 @@ var init_organization_issue_key = __esm({
 });
 
 // ../packages/shared/dist/validators/organization.js
-import { z as z14 } from "zod";
+import { z as z15 } from "zod";
 var logoAssetIdSchema, brandColorSchema, organizationIssueKeySchema, createOrganizationSchema, updateOrganizationSchema, updateOrganizationBrandingSchema, updateOrganizationWorkspaceFileSchema, workspaceWebPreviewNetworkModeSchema, createOrganizationWorkspaceWebPreviewSessionSchema, createOrganizationWorkspaceFileSchema, createOrganizationWorkspaceDirectorySchema, renameOrganizationWorkspaceEntrySchema, moveOrganizationWorkspaceEntrySchema, copyOrganizationWorkspaceEntrySchema;
 var init_organization = __esm({
   "../packages/shared/dist/validators/organization.js"() {
     "use strict";
     init_constants();
     init_organization_issue_key();
-    logoAssetIdSchema = z14.string().uuid().nullable().optional();
-    brandColorSchema = z14.string().regex(/^#[0-9a-fA-F]{6}$/).nullable().optional();
-    organizationIssueKeySchema = z14.string().trim().min(1).max(ORGANIZATION_ISSUE_KEY_MAX_LENGTH).transform((value) => value.toUpperCase()).refine((value) => ORGANIZATION_ISSUE_KEY_PATTERN.test(value), {
+    logoAssetIdSchema = z15.string().uuid().nullable().optional();
+    brandColorSchema = z15.string().regex(/^#[0-9a-fA-F]{6}$/).nullable().optional();
+    organizationIssueKeySchema = z15.string().trim().min(1).max(ORGANIZATION_ISSUE_KEY_MAX_LENGTH).transform((value) => value.toUpperCase()).refine((value) => ORGANIZATION_ISSUE_KEY_PATTERN.test(value), {
       message: "Issue key must start with a letter and contain only letters and numbers"
     });
-    createOrganizationSchema = z14.object({
-      name: z14.string().min(1),
+    createOrganizationSchema = z15.object({
+      name: z15.string().min(1),
       issuePrefix: organizationIssueKeySchema.optional(),
-      description: z14.string().optional().nullable(),
-      budgetMonthlyCents: z14.number().int().nonnegative().optional().default(0),
-      defaultChatIssueCreationMode: z14.enum(CHAT_ISSUE_CREATION_MODES).optional().default("manual_approval"),
+      description: z15.string().optional().nullable(),
+      budgetMonthlyCents: z15.number().int().nonnegative().optional().default(0),
+      defaultChatIssueCreationMode: z15.enum(CHAT_ISSUE_CREATION_MODES).optional().default("manual_approval"),
       brandColor: brandColorSchema,
-      requireBoardApprovalForNewAgents: z14.boolean().optional()
+      requireBoardApprovalForNewAgents: z15.boolean().optional()
     });
     updateOrganizationSchema = createOrganizationSchema.partial().extend({
-      status: z14.enum(ORGANIZATION_STATUSES).optional(),
-      spentMonthlyCents: z14.number().int().nonnegative().optional(),
-      requireBoardApprovalForNewAgents: z14.boolean().optional(),
-      defaultChatIssueCreationMode: z14.enum(CHAT_ISSUE_CREATION_MODES).optional(),
+      status: z15.enum(ORGANIZATION_STATUSES).optional(),
+      spentMonthlyCents: z15.number().int().nonnegative().optional(),
+      requireBoardApprovalForNewAgents: z15.boolean().optional(),
+      defaultChatIssueCreationMode: z15.enum(CHAT_ISSUE_CREATION_MODES).optional(),
       brandColor: brandColorSchema,
       logoAssetId: logoAssetIdSchema
     });
-    updateOrganizationBrandingSchema = z14.object({
-      name: z14.string().min(1).optional(),
-      description: z14.string().nullable().optional(),
+    updateOrganizationBrandingSchema = z15.object({
+      name: z15.string().min(1).optional(),
+      description: z15.string().nullable().optional(),
       brandColor: brandColorSchema,
       logoAssetId: logoAssetIdSchema
     }).strict().refine((value) => value.name !== void 0 || value.description !== void 0 || value.brandColor !== void 0 || value.logoAssetId !== void 0, "At least one branding field must be provided");
-    updateOrganizationWorkspaceFileSchema = z14.object({
-      content: z14.string(),
-      expectedContent: z14.string().optional()
+    updateOrganizationWorkspaceFileSchema = z15.object({
+      content: z15.string(),
+      expectedContent: z15.string().optional()
     });
-    workspaceWebPreviewNetworkModeSchema = z14.enum(["offline", "connected"]);
-    createOrganizationWorkspaceWebPreviewSessionSchema = z14.object({
-      entryPath: z14.string().trim().min(1).max(1e3),
+    workspaceWebPreviewNetworkModeSchema = z15.enum(["offline", "connected"]);
+    createOrganizationWorkspaceWebPreviewSessionSchema = z15.object({
+      entryPath: z15.string().trim().min(1).max(1e3),
       networkMode: workspaceWebPreviewNetworkModeSchema,
-      htmlContent: z14.string().optional()
+      htmlContent: z15.string().optional()
     });
-    createOrganizationWorkspaceFileSchema = z14.object({
-      filePath: z14.string().trim().min(1).max(1e3),
-      content: z14.string().optional().default("")
+    createOrganizationWorkspaceFileSchema = z15.object({
+      filePath: z15.string().trim().min(1).max(1e3),
+      content: z15.string().optional().default("")
     });
-    createOrganizationWorkspaceDirectorySchema = z14.object({
-      directoryPath: z14.string().trim().min(1).max(1e3)
+    createOrganizationWorkspaceDirectorySchema = z15.object({
+      directoryPath: z15.string().trim().min(1).max(1e3)
     });
-    renameOrganizationWorkspaceEntrySchema = z14.object({
-      name: z14.string().trim().min(1).max(255)
+    renameOrganizationWorkspaceEntrySchema = z15.object({
+      name: z15.string().trim().min(1).max(255)
     });
-    moveOrganizationWorkspaceEntrySchema = z14.object({
-      destinationDirectoryPath: z14.string().trim().max(1e3).default("")
+    moveOrganizationWorkspaceEntrySchema = z15.object({
+      destinationDirectoryPath: z15.string().trim().max(1e3).default("")
     });
-    copyOrganizationWorkspaceEntrySchema = z14.object({
-      destinationDirectoryPath: z14.string().trim().max(1e3).optional()
+    copyOrganizationWorkspaceEntrySchema = z15.object({
+      destinationDirectoryPath: z15.string().trim().max(1e3).optional()
     });
   }
 });
 
 // ../packages/shared/dist/validators/organization-portability.js
-import { z as z15 } from "zod";
+import { z as z16 } from "zod";
 var portabilityIncludeSchema, portabilityEnvInputSchema, portabilityFileEntrySchema, portabilityOrganizationManifestEntrySchema, portabilitySidebarOrderSchema, portabilityAgentManifestEntrySchema, portabilitySkillManifestEntrySchema, portabilityProjectManifestEntrySchema, portabilityIssueAutomationTriggerManifestEntrySchema, portabilityIssueAutomationManifestEntrySchema, portabilityIssueManifestEntrySchema, portabilityManifestSchema, portabilitySourceSchema, portabilityTargetSchema, portabilityAgentSelectionSchema, portabilityCollisionStrategySchema, organizationPortabilityExportSchema, organizationPortabilityPreviewSchema, portabilityAdapterOverrideSchema, organizationPortabilityImportSchema;
 var init_organization_portability = __esm({
   "../packages/shared/dist/validators/organization-portability.js"() {
     "use strict";
     init_organization();
-    portabilityIncludeSchema = z15.object({
-      organization: z15.boolean().optional(),
-      agents: z15.boolean().optional(),
-      projects: z15.boolean().optional(),
-      issues: z15.boolean().optional(),
-      skills: z15.boolean().optional()
+    portabilityIncludeSchema = z16.object({
+      organization: z16.boolean().optional(),
+      agents: z16.boolean().optional(),
+      projects: z16.boolean().optional(),
+      issues: z16.boolean().optional(),
+      skills: z16.boolean().optional()
     }).partial();
-    portabilityEnvInputSchema = z15.object({
-      key: z15.string().min(1),
-      description: z15.string().nullable(),
-      agentSlug: z15.string().min(1).nullable(),
-      kind: z15.enum(["secret", "plain"]),
-      requirement: z15.enum(["required", "optional"]),
-      defaultValue: z15.string().nullable(),
-      portability: z15.enum(["portable", "system_dependent"])
+    portabilityEnvInputSchema = z16.object({
+      key: z16.string().min(1),
+      description: z16.string().nullable(),
+      agentSlug: z16.string().min(1).nullable(),
+      kind: z16.enum(["secret", "plain"]),
+      requirement: z16.enum(["required", "optional"]),
+      defaultValue: z16.string().nullable(),
+      portability: z16.enum(["portable", "system_dependent"])
     });
-    portabilityFileEntrySchema = z15.union([
-      z15.string(),
-      z15.object({
-        encoding: z15.literal("base64"),
-        data: z15.string(),
-        contentType: z15.string().min(1).optional().nullable()
+    portabilityFileEntrySchema = z16.union([
+      z16.string(),
+      z16.object({
+        encoding: z16.literal("base64"),
+        data: z16.string(),
+        contentType: z16.string().min(1).optional().nullable()
       })
     ]);
-    portabilityOrganizationManifestEntrySchema = z15.object({
-      path: z15.string().min(1),
-      name: z15.string().min(1),
-      description: z15.string().nullable(),
-      brandColor: z15.string().nullable(),
-      logoPath: z15.string().nullable(),
-      requireBoardApprovalForNewAgents: z15.boolean()
+    portabilityOrganizationManifestEntrySchema = z16.object({
+      path: z16.string().min(1),
+      name: z16.string().min(1),
+      description: z16.string().nullable(),
+      brandColor: z16.string().nullable(),
+      logoPath: z16.string().nullable(),
+      requireBoardApprovalForNewAgents: z16.boolean()
     });
-    portabilitySidebarOrderSchema = z15.object({
-      agents: z15.array(z15.string().min(1)).default([]),
-      projects: z15.array(z15.string().min(1)).default([])
+    portabilitySidebarOrderSchema = z16.object({
+      agents: z16.array(z16.string().min(1)).default([]),
+      projects: z16.array(z16.string().min(1)).default([])
     });
-    portabilityAgentManifestEntrySchema = z15.object({
-      slug: z15.string().min(1),
-      name: z15.string().min(1),
-      path: z15.string().min(1),
-      skills: z15.array(z15.string().min(1)).default([]),
-      role: z15.string().min(1),
-      title: z15.string().nullable(),
-      icon: z15.string().nullable(),
-      capabilities: z15.string().nullable(),
-      reportsToSlug: z15.string().min(1).nullable().optional().default(null),
-      agentRuntimeType: z15.string().min(1),
-      agentRuntimeConfig: z15.record(z15.unknown()),
-      runtimeConfig: z15.record(z15.unknown()),
-      permissions: z15.record(z15.unknown()),
-      budgetMonthlyCents: z15.number().int().nonnegative(),
-      metadata: z15.record(z15.unknown()).nullable()
+    portabilityAgentManifestEntrySchema = z16.object({
+      slug: z16.string().min(1),
+      name: z16.string().min(1),
+      path: z16.string().min(1),
+      skills: z16.array(z16.string().min(1)).default([]),
+      role: z16.string().min(1),
+      title: z16.string().nullable(),
+      icon: z16.string().nullable(),
+      capabilities: z16.string().nullable(),
+      reportsToSlug: z16.string().min(1).nullable().optional().default(null),
+      agentRuntimeType: z16.string().min(1),
+      agentRuntimeConfig: z16.record(z16.unknown()),
+      runtimeConfig: z16.record(z16.unknown()),
+      permissions: z16.record(z16.unknown()),
+      budgetMonthlyCents: z16.number().int().nonnegative(),
+      metadata: z16.record(z16.unknown()).nullable()
     });
-    portabilitySkillManifestEntrySchema = z15.object({
-      key: z15.string().min(1),
-      slug: z15.string().min(1),
-      name: z15.string().min(1),
-      path: z15.string().min(1),
-      description: z15.string().nullable(),
-      sourceType: z15.string().min(1),
-      sourceLocator: z15.string().nullable(),
-      sourceRef: z15.string().nullable(),
-      trustLevel: z15.string().nullable(),
-      compatibility: z15.string().nullable(),
-      metadata: z15.record(z15.unknown()).nullable(),
-      fileInventory: z15.array(z15.object({
-        path: z15.string().min(1),
-        kind: z15.string().min(1)
+    portabilitySkillManifestEntrySchema = z16.object({
+      key: z16.string().min(1),
+      slug: z16.string().min(1),
+      name: z16.string().min(1),
+      path: z16.string().min(1),
+      description: z16.string().nullable(),
+      sourceType: z16.string().min(1),
+      sourceLocator: z16.string().nullable(),
+      sourceRef: z16.string().nullable(),
+      trustLevel: z16.string().nullable(),
+      compatibility: z16.string().nullable(),
+      metadata: z16.record(z16.unknown()).nullable(),
+      fileInventory: z16.array(z16.object({
+        path: z16.string().min(1),
+        kind: z16.string().min(1)
       })).default([])
     });
-    portabilityProjectManifestEntrySchema = z15.object({
-      slug: z15.string().min(1),
-      name: z15.string().min(1),
-      path: z15.string().min(1),
-      description: z15.string().nullable(),
-      ownerAgentSlug: z15.string().min(1).nullable(),
-      leadAgentSlug: z15.string().min(1).nullable(),
-      targetDate: z15.string().nullable(),
-      color: z15.string().nullable(),
-      status: z15.string().nullable(),
-      executionWorkspacePolicy: z15.record(z15.unknown()).nullable(),
-      workspaces: z15.array(z15.object({
-        key: z15.string().min(1),
-        name: z15.string().min(1),
-        sourceType: z15.string().nullable(),
-        repoUrl: z15.string().nullable(),
-        repoRef: z15.string().nullable(),
-        defaultRef: z15.string().nullable(),
-        visibility: z15.string().nullable(),
-        setupCommand: z15.string().nullable(),
-        cleanupCommand: z15.string().nullable(),
-        metadata: z15.record(z15.unknown()).nullable(),
-        isPrimary: z15.boolean()
+    portabilityProjectManifestEntrySchema = z16.object({
+      slug: z16.string().min(1),
+      name: z16.string().min(1),
+      path: z16.string().min(1),
+      description: z16.string().nullable(),
+      ownerAgentSlug: z16.string().min(1).nullable(),
+      leadAgentSlug: z16.string().min(1).nullable(),
+      targetDate: z16.string().nullable(),
+      color: z16.string().nullable(),
+      status: z16.string().nullable(),
+      executionWorkspacePolicy: z16.record(z16.unknown()).nullable(),
+      workspaces: z16.array(z16.object({
+        key: z16.string().min(1),
+        name: z16.string().min(1),
+        sourceType: z16.string().nullable(),
+        repoUrl: z16.string().nullable(),
+        repoRef: z16.string().nullable(),
+        defaultRef: z16.string().nullable(),
+        visibility: z16.string().nullable(),
+        setupCommand: z16.string().nullable(),
+        cleanupCommand: z16.string().nullable(),
+        metadata: z16.record(z16.unknown()).nullable(),
+        isPrimary: z16.boolean()
       })).default([]),
-      metadata: z15.record(z15.unknown()).nullable()
+      metadata: z16.record(z16.unknown()).nullable()
     });
-    portabilityIssueAutomationTriggerManifestEntrySchema = z15.object({
-      kind: z15.string().min(1),
-      label: z15.string().nullable(),
-      enabled: z15.boolean(),
-      cronExpression: z15.string().nullable(),
-      timezone: z15.string().nullable(),
-      signingMode: z15.string().nullable(),
-      replayWindowSec: z15.number().int().nullable()
+    portabilityIssueAutomationTriggerManifestEntrySchema = z16.object({
+      kind: z16.string().min(1),
+      label: z16.string().nullable(),
+      enabled: z16.boolean(),
+      cronExpression: z16.string().nullable(),
+      timezone: z16.string().nullable(),
+      signingMode: z16.string().nullable(),
+      replayWindowSec: z16.number().int().nullable()
     });
-    portabilityIssueAutomationManifestEntrySchema = z15.object({
-      concurrencyPolicy: z15.string().nullable(),
-      catchUpPolicy: z15.string().nullable(),
-      triggers: z15.array(portabilityIssueAutomationTriggerManifestEntrySchema).default([])
+    portabilityIssueAutomationManifestEntrySchema = z16.object({
+      concurrencyPolicy: z16.string().nullable(),
+      catchUpPolicy: z16.string().nullable(),
+      triggers: z16.array(portabilityIssueAutomationTriggerManifestEntrySchema).default([])
     });
-    portabilityIssueManifestEntrySchema = z15.object({
-      slug: z15.string().min(1),
-      identifier: z15.string().min(1).nullable(),
-      title: z15.string().min(1),
-      path: z15.string().min(1),
-      projectSlug: z15.string().min(1).nullable(),
-      projectWorkspaceKey: z15.string().min(1).nullable(),
-      assigneeAgentSlug: z15.string().min(1).nullable(),
-      description: z15.string().nullable(),
-      recurring: z15.boolean().default(false),
+    portabilityIssueManifestEntrySchema = z16.object({
+      slug: z16.string().min(1),
+      identifier: z16.string().min(1).nullable(),
+      title: z16.string().min(1),
+      path: z16.string().min(1),
+      projectSlug: z16.string().min(1).nullable(),
+      projectWorkspaceKey: z16.string().min(1).nullable(),
+      assigneeAgentSlug: z16.string().min(1).nullable(),
+      description: z16.string().nullable(),
+      recurring: z16.boolean().default(false),
       automation: portabilityIssueAutomationManifestEntrySchema.nullable(),
-      legacyRecurrence: z15.record(z15.unknown()).nullable(),
-      status: z15.string().nullable(),
-      priority: z15.string().nullable(),
-      labelIds: z15.array(z15.string().min(1)).default([]),
-      billingCode: z15.string().nullable(),
-      executionWorkspaceSettings: z15.record(z15.unknown()).nullable(),
-      assigneeAgentRuntimeOverrides: z15.record(z15.unknown()).nullable(),
-      metadata: z15.record(z15.unknown()).nullable()
+      legacyRecurrence: z16.record(z16.unknown()).nullable(),
+      status: z16.string().nullable(),
+      priority: z16.string().nullable(),
+      labelIds: z16.array(z16.string().min(1)).default([]),
+      billingCode: z16.string().nullable(),
+      executionWorkspaceSettings: z16.record(z16.unknown()).nullable(),
+      assigneeAgentRuntimeOverrides: z16.record(z16.unknown()).nullable(),
+      metadata: z16.record(z16.unknown()).nullable()
     });
-    portabilityManifestSchema = z15.object({
-      schemaVersion: z15.number().int().positive(),
-      generatedAt: z15.string().datetime(),
-      source: z15.object({
-        orgId: z15.string().uuid(),
-        organizationName: z15.string().min(1)
+    portabilityManifestSchema = z16.object({
+      schemaVersion: z16.number().int().positive(),
+      generatedAt: z16.string().datetime(),
+      source: z16.object({
+        orgId: z16.string().uuid(),
+        organizationName: z16.string().min(1)
       }).nullable(),
-      includes: z15.object({
-        organization: z15.boolean(),
-        agents: z15.boolean(),
-        projects: z15.boolean(),
-        issues: z15.boolean(),
-        skills: z15.boolean()
+      includes: z16.object({
+        organization: z16.boolean(),
+        agents: z16.boolean(),
+        projects: z16.boolean(),
+        issues: z16.boolean(),
+        skills: z16.boolean()
       }),
       organization: portabilityOrganizationManifestEntrySchema.nullable(),
       sidebar: portabilitySidebarOrderSchema.nullable(),
-      agents: z15.array(portabilityAgentManifestEntrySchema),
-      skills: z15.array(portabilitySkillManifestEntrySchema).default([]),
-      projects: z15.array(portabilityProjectManifestEntrySchema).default([]),
-      issues: z15.array(portabilityIssueManifestEntrySchema).default([]),
-      envInputs: z15.array(portabilityEnvInputSchema).default([])
+      agents: z16.array(portabilityAgentManifestEntrySchema),
+      skills: z16.array(portabilitySkillManifestEntrySchema).default([]),
+      projects: z16.array(portabilityProjectManifestEntrySchema).default([]),
+      issues: z16.array(portabilityIssueManifestEntrySchema).default([]),
+      envInputs: z16.array(portabilityEnvInputSchema).default([])
     });
-    portabilitySourceSchema = z15.discriminatedUnion("type", [
-      z15.object({
-        type: z15.literal("inline"),
-        rootPath: z15.string().min(1).optional().nullable(),
-        files: z15.record(portabilityFileEntrySchema)
+    portabilitySourceSchema = z16.discriminatedUnion("type", [
+      z16.object({
+        type: z16.literal("inline"),
+        rootPath: z16.string().min(1).optional().nullable(),
+        files: z16.record(portabilityFileEntrySchema)
       }),
-      z15.object({
-        type: z15.literal("github"),
-        url: z15.string().url()
+      z16.object({
+        type: z16.literal("github"),
+        url: z16.string().url()
       })
     ]);
-    portabilityTargetSchema = z15.discriminatedUnion("mode", [
-      z15.object({
-        mode: z15.literal("new_organization"),
-        newOrganizationName: z15.string().min(1).optional().nullable(),
+    portabilityTargetSchema = z16.discriminatedUnion("mode", [
+      z16.object({
+        mode: z16.literal("new_organization"),
+        newOrganizationName: z16.string().min(1).optional().nullable(),
         newOrganizationIssueKey: organizationIssueKeySchema.optional().nullable()
       }),
-      z15.object({
-        mode: z15.literal("existing_organization"),
-        orgId: z15.string().uuid()
+      z16.object({
+        mode: z16.literal("existing_organization"),
+        orgId: z16.string().uuid()
       })
     ]);
-    portabilityAgentSelectionSchema = z15.union([
-      z15.literal("all"),
-      z15.array(z15.string().min(1))
+    portabilityAgentSelectionSchema = z16.union([
+      z16.literal("all"),
+      z16.array(z16.string().min(1))
     ]);
-    portabilityCollisionStrategySchema = z15.enum(["rename", "skip", "replace"]);
-    organizationPortabilityExportSchema = z15.object({
+    portabilityCollisionStrategySchema = z16.enum(["rename", "skip", "replace"]);
+    organizationPortabilityExportSchema = z16.object({
       include: portabilityIncludeSchema.optional(),
-      agents: z15.array(z15.string().min(1)).optional(),
-      skills: z15.array(z15.string().min(1)).optional(),
-      projects: z15.array(z15.string().min(1)).optional(),
-      issues: z15.array(z15.string().min(1)).optional(),
-      projectIssues: z15.array(z15.string().min(1)).optional(),
-      selectedFiles: z15.array(z15.string().min(1)).optional(),
-      expandReferencedSkills: z15.boolean().optional(),
+      agents: z16.array(z16.string().min(1)).optional(),
+      skills: z16.array(z16.string().min(1)).optional(),
+      projects: z16.array(z16.string().min(1)).optional(),
+      issues: z16.array(z16.string().min(1)).optional(),
+      projectIssues: z16.array(z16.string().min(1)).optional(),
+      selectedFiles: z16.array(z16.string().min(1)).optional(),
+      expandReferencedSkills: z16.boolean().optional(),
       sidebarOrder: portabilitySidebarOrderSchema.partial().optional()
     });
-    organizationPortabilityPreviewSchema = z15.object({
+    organizationPortabilityPreviewSchema = z16.object({
       source: portabilitySourceSchema,
       include: portabilityIncludeSchema.optional(),
       target: portabilityTargetSchema,
       agents: portabilityAgentSelectionSchema.optional(),
       collisionStrategy: portabilityCollisionStrategySchema.optional(),
-      nameOverrides: z15.record(z15.string().min(1), z15.string().min(1)).optional(),
-      selectedFiles: z15.array(z15.string().min(1)).optional()
+      nameOverrides: z16.record(z16.string().min(1), z16.string().min(1)).optional(),
+      selectedFiles: z16.array(z16.string().min(1)).optional()
     });
-    portabilityAdapterOverrideSchema = z15.object({
-      agentRuntimeType: z15.string().min(1),
-      agentRuntimeConfig: z15.record(z15.unknown()).optional()
+    portabilityAdapterOverrideSchema = z16.object({
+      agentRuntimeType: z16.string().min(1),
+      agentRuntimeConfig: z16.record(z16.unknown()).optional()
     });
     organizationPortabilityImportSchema = organizationPortabilityPreviewSchema.extend({
-      agentRuntimeOverrides: z15.record(z15.string().min(1), portabilityAdapterOverrideSchema).optional()
+      agentRuntimeOverrides: z16.record(z16.string().min(1), portabilityAdapterOverrideSchema).optional()
     });
   }
 });
 
 // ../packages/shared/dist/validators/organization-skill.js
-import { z as z16 } from "zod";
+import { z as z17 } from "zod";
 var organizationSkillSourceTypeSchema, organizationSkillTrustLevelSchema, organizationSkillCompatibilitySchema, organizationSkillSourceBadgeSchema, organizationSkillFileInventoryEntrySchema, organizationSkillSchema, organizationSkillListItemSchema, organizationSkillUsageAgentSchema, organizationSkillDetailSchema, organizationSkillUpdateStatusSchema, organizationSkillImportSchema, organizationSkillProjectScanRequestSchema, organizationSkillProjectScanSkippedSchema, organizationSkillProjectScanConflictSchema, organizationSkillProjectScanResultSchema, organizationSkillLocalScanRequestSchema, organizationSkillLocalScanSkippedSchema, organizationSkillLocalScanConflictSchema, organizationSkillLocalScanResultSchema, organizationSkillCreateSchema, organizationSkillFileDetailSchema, organizationSkillFileUpdateSchema;
 var init_organization_skill = __esm({
   "../packages/shared/dist/validators/organization-skill.js"() {
     "use strict";
-    organizationSkillSourceTypeSchema = z16.enum(["local_path", "github", "url", "catalog", "skills_sh"]);
-    organizationSkillTrustLevelSchema = z16.enum(["markdown_only", "assets", "scripts_executables"]);
-    organizationSkillCompatibilitySchema = z16.enum(["compatible", "unknown", "invalid"]);
-    organizationSkillSourceBadgeSchema = z16.enum([
+    organizationSkillSourceTypeSchema = z17.enum(["local_path", "github", "url", "catalog", "skills_sh"]);
+    organizationSkillTrustLevelSchema = z17.enum(["markdown_only", "assets", "scripts_executables"]);
+    organizationSkillCompatibilitySchema = z17.enum(["compatible", "unknown", "invalid"]);
+    organizationSkillSourceBadgeSchema = z17.enum([
       "rudder",
       "community",
       "github",
@@ -3066,152 +3169,152 @@ var init_organization_skill = __esm({
       "catalog",
       "skills_sh"
     ]);
-    organizationSkillFileInventoryEntrySchema = z16.object({
-      path: z16.string().min(1),
-      kind: z16.enum(["skill", "markdown", "reference", "script", "asset", "other"])
+    organizationSkillFileInventoryEntrySchema = z17.object({
+      path: z17.string().min(1),
+      kind: z17.enum(["skill", "markdown", "reference", "script", "asset", "other"])
     });
-    organizationSkillSchema = z16.object({
-      id: z16.string().uuid(),
-      orgId: z16.string().uuid(),
-      key: z16.string().min(1),
-      slug: z16.string().min(1),
-      name: z16.string().min(1),
-      description: z16.string().nullable(),
-      markdown: z16.string(),
+    organizationSkillSchema = z17.object({
+      id: z17.string().uuid(),
+      orgId: z17.string().uuid(),
+      key: z17.string().min(1),
+      slug: z17.string().min(1),
+      name: z17.string().min(1),
+      description: z17.string().nullable(),
+      markdown: z17.string(),
       sourceType: organizationSkillSourceTypeSchema,
-      sourceLocator: z16.string().nullable(),
-      sourceRef: z16.string().nullable(),
+      sourceLocator: z17.string().nullable(),
+      sourceRef: z17.string().nullable(),
       trustLevel: organizationSkillTrustLevelSchema,
       compatibility: organizationSkillCompatibilitySchema,
-      fileInventory: z16.array(organizationSkillFileInventoryEntrySchema).default([]),
-      metadata: z16.record(z16.unknown()).nullable(),
-      createdAt: z16.coerce.date(),
-      updatedAt: z16.coerce.date()
+      fileInventory: z17.array(organizationSkillFileInventoryEntrySchema).default([]),
+      metadata: z17.record(z17.unknown()).nullable(),
+      createdAt: z17.coerce.date(),
+      updatedAt: z17.coerce.date()
     });
     organizationSkillListItemSchema = organizationSkillSchema.extend({
-      attachedAgentCount: z16.number().int().nonnegative(),
-      editable: z16.boolean(),
-      editableReason: z16.string().nullable(),
-      sourceLabel: z16.string().nullable(),
+      attachedAgentCount: z17.number().int().nonnegative(),
+      editable: z17.boolean(),
+      editableReason: z17.string().nullable(),
+      sourceLabel: z17.string().nullable(),
       sourceBadge: organizationSkillSourceBadgeSchema,
-      sourcePath: z16.string().nullable(),
-      workspaceEditPath: z16.string().nullable()
+      sourcePath: z17.string().nullable(),
+      workspaceEditPath: z17.string().nullable()
     });
-    organizationSkillUsageAgentSchema = z16.object({
-      id: z16.string().uuid(),
-      name: z16.string().min(1),
-      urlKey: z16.string().min(1),
-      agentRuntimeType: z16.string().min(1),
-      desired: z16.boolean(),
-      actualState: z16.string().nullable()
+    organizationSkillUsageAgentSchema = z17.object({
+      id: z17.string().uuid(),
+      name: z17.string().min(1),
+      urlKey: z17.string().min(1),
+      agentRuntimeType: z17.string().min(1),
+      desired: z17.boolean(),
+      actualState: z17.string().nullable()
     });
     organizationSkillDetailSchema = organizationSkillSchema.extend({
-      attachedAgentCount: z16.number().int().nonnegative(),
-      usedByAgents: z16.array(organizationSkillUsageAgentSchema).default([]),
-      editable: z16.boolean(),
-      editableReason: z16.string().nullable(),
-      sourceLabel: z16.string().nullable(),
+      attachedAgentCount: z17.number().int().nonnegative(),
+      usedByAgents: z17.array(organizationSkillUsageAgentSchema).default([]),
+      editable: z17.boolean(),
+      editableReason: z17.string().nullable(),
+      sourceLabel: z17.string().nullable(),
       sourceBadge: organizationSkillSourceBadgeSchema,
-      sourcePath: z16.string().nullable(),
-      workspaceEditPath: z16.string().nullable()
+      sourcePath: z17.string().nullable(),
+      workspaceEditPath: z17.string().nullable()
     });
-    organizationSkillUpdateStatusSchema = z16.object({
-      supported: z16.boolean(),
-      reason: z16.string().nullable(),
-      trackingRef: z16.string().nullable(),
-      currentRef: z16.string().nullable(),
-      latestRef: z16.string().nullable(),
-      hasUpdate: z16.boolean()
+    organizationSkillUpdateStatusSchema = z17.object({
+      supported: z17.boolean(),
+      reason: z17.string().nullable(),
+      trackingRef: z17.string().nullable(),
+      currentRef: z17.string().nullable(),
+      latestRef: z17.string().nullable(),
+      hasUpdate: z17.boolean()
     });
-    organizationSkillImportSchema = z16.object({
-      source: z16.string().min(1)
+    organizationSkillImportSchema = z17.object({
+      source: z17.string().min(1)
     });
-    organizationSkillProjectScanRequestSchema = z16.object({
-      projectIds: z16.array(z16.string().uuid()).optional(),
-      workspaceIds: z16.array(z16.string().uuid()).optional()
+    organizationSkillProjectScanRequestSchema = z17.object({
+      projectIds: z17.array(z17.string().uuid()).optional(),
+      workspaceIds: z17.array(z17.string().uuid()).optional()
     });
-    organizationSkillProjectScanSkippedSchema = z16.object({
-      projectId: z16.string().uuid(),
-      projectName: z16.string().min(1),
-      workspaceId: z16.string().uuid().nullable(),
-      workspaceName: z16.string().nullable(),
-      path: z16.string().nullable(),
-      reason: z16.string().min(1)
+    organizationSkillProjectScanSkippedSchema = z17.object({
+      projectId: z17.string().uuid(),
+      projectName: z17.string().min(1),
+      workspaceId: z17.string().uuid().nullable(),
+      workspaceName: z17.string().nullable(),
+      path: z17.string().nullable(),
+      reason: z17.string().min(1)
     });
-    organizationSkillProjectScanConflictSchema = z16.object({
-      slug: z16.string().min(1),
-      key: z16.string().min(1),
-      projectId: z16.string().uuid(),
-      projectName: z16.string().min(1),
-      workspaceId: z16.string().uuid(),
-      workspaceName: z16.string().min(1),
-      path: z16.string().min(1),
-      existingSkillId: z16.string().uuid(),
-      existingSkillKey: z16.string().min(1),
-      existingSourceLocator: z16.string().nullable(),
-      reason: z16.string().min(1)
+    organizationSkillProjectScanConflictSchema = z17.object({
+      slug: z17.string().min(1),
+      key: z17.string().min(1),
+      projectId: z17.string().uuid(),
+      projectName: z17.string().min(1),
+      workspaceId: z17.string().uuid(),
+      workspaceName: z17.string().min(1),
+      path: z17.string().min(1),
+      existingSkillId: z17.string().uuid(),
+      existingSkillKey: z17.string().min(1),
+      existingSourceLocator: z17.string().nullable(),
+      reason: z17.string().min(1)
     });
-    organizationSkillProjectScanResultSchema = z16.object({
-      scannedProjects: z16.number().int().nonnegative(),
-      scannedWorkspaces: z16.number().int().nonnegative(),
-      discovered: z16.number().int().nonnegative(),
-      imported: z16.array(organizationSkillSchema),
-      updated: z16.array(organizationSkillSchema),
-      skipped: z16.array(organizationSkillProjectScanSkippedSchema),
-      conflicts: z16.array(organizationSkillProjectScanConflictSchema),
-      warnings: z16.array(z16.string())
+    organizationSkillProjectScanResultSchema = z17.object({
+      scannedProjects: z17.number().int().nonnegative(),
+      scannedWorkspaces: z17.number().int().nonnegative(),
+      discovered: z17.number().int().nonnegative(),
+      imported: z17.array(organizationSkillSchema),
+      updated: z17.array(organizationSkillSchema),
+      skipped: z17.array(organizationSkillProjectScanSkippedSchema),
+      conflicts: z17.array(organizationSkillProjectScanConflictSchema),
+      warnings: z17.array(z17.string())
     });
-    organizationSkillLocalScanRequestSchema = z16.object({
-      roots: z16.array(z16.string().min(1)).optional()
+    organizationSkillLocalScanRequestSchema = z17.object({
+      roots: z17.array(z17.string().min(1)).optional()
     });
-    organizationSkillLocalScanSkippedSchema = z16.object({
-      root: z16.string().min(1),
-      path: z16.string().nullable(),
-      reason: z16.string().min(1)
+    organizationSkillLocalScanSkippedSchema = z17.object({
+      root: z17.string().min(1),
+      path: z17.string().nullable(),
+      reason: z17.string().min(1)
     });
-    organizationSkillLocalScanConflictSchema = z16.object({
-      root: z16.string().min(1),
-      path: z16.string().min(1),
-      slug: z16.string().min(1),
-      key: z16.string().min(1),
-      existingSkillId: z16.string().uuid(),
-      existingSkillKey: z16.string().min(1),
-      existingSourceLocator: z16.string().nullable(),
-      reason: z16.string().min(1)
+    organizationSkillLocalScanConflictSchema = z17.object({
+      root: z17.string().min(1),
+      path: z17.string().min(1),
+      slug: z17.string().min(1),
+      key: z17.string().min(1),
+      existingSkillId: z17.string().uuid(),
+      existingSkillKey: z17.string().min(1),
+      existingSourceLocator: z17.string().nullable(),
+      reason: z17.string().min(1)
     });
-    organizationSkillLocalScanResultSchema = z16.object({
-      scannedRoots: z16.number().int().nonnegative(),
-      discovered: z16.number().int().nonnegative(),
-      imported: z16.array(organizationSkillSchema),
-      updated: z16.array(organizationSkillSchema),
-      skipped: z16.array(organizationSkillLocalScanSkippedSchema),
-      conflicts: z16.array(organizationSkillLocalScanConflictSchema),
-      warnings: z16.array(z16.string())
+    organizationSkillLocalScanResultSchema = z17.object({
+      scannedRoots: z17.number().int().nonnegative(),
+      discovered: z17.number().int().nonnegative(),
+      imported: z17.array(organizationSkillSchema),
+      updated: z17.array(organizationSkillSchema),
+      skipped: z17.array(organizationSkillLocalScanSkippedSchema),
+      conflicts: z17.array(organizationSkillLocalScanConflictSchema),
+      warnings: z17.array(z17.string())
     });
-    organizationSkillCreateSchema = z16.object({
-      name: z16.string().min(1),
-      slug: z16.string().min(1).nullable().optional(),
-      description: z16.string().nullable().optional(),
-      markdown: z16.string().nullable().optional()
+    organizationSkillCreateSchema = z17.object({
+      name: z17.string().min(1),
+      slug: z17.string().min(1).nullable().optional(),
+      description: z17.string().nullable().optional(),
+      markdown: z17.string().nullable().optional()
     });
-    organizationSkillFileDetailSchema = z16.object({
-      skillId: z16.string().uuid(),
-      path: z16.string().min(1),
-      kind: z16.enum(["skill", "markdown", "reference", "script", "asset", "other"]),
-      content: z16.string(),
-      language: z16.string().nullable(),
-      markdown: z16.boolean(),
-      editable: z16.boolean()
+    organizationSkillFileDetailSchema = z17.object({
+      skillId: z17.string().uuid(),
+      path: z17.string().min(1),
+      kind: z17.enum(["skill", "markdown", "reference", "script", "asset", "other"]),
+      content: z17.string(),
+      language: z17.string().nullable(),
+      markdown: z17.boolean(),
+      editable: z17.boolean()
     });
-    organizationSkillFileUpdateSchema = z16.object({
-      path: z16.string().min(1),
-      content: z16.string()
+    organizationSkillFileUpdateSchema = z17.object({
+      path: z17.string().min(1),
+      content: z17.string()
     });
   }
 });
 
 // ../packages/shared/dist/validators/resource.js
-import { z as z17 } from "zod";
+import { z as z18 } from "zod";
 function isValidLibraryProjectPath(locator, kind) {
   const trimmed = locator.trim();
   if (!trimmed)
@@ -3234,14 +3337,14 @@ function validateLibraryResourceContract(value, ctx) {
     return;
   if (value.kind !== void 0 && value.kind !== "file" && value.kind !== "directory") {
     ctx.addIssue({
-      code: z17.ZodIssueCode.custom,
+      code: z18.ZodIssueCode.custom,
       message: "Library resources must be file or directory resources.",
       path: ["kind"]
     });
   }
   if (value.locator !== void 0 && !isValidLibraryProjectPath(value.locator, value.kind)) {
     ctx.addIssue({
-      code: z17.ZodIssueCode.custom,
+      code: z18.ZodIssueCode.custom,
       message: "Library resource locator must be a normalized project Library path.",
       path: ["locator"]
     });
@@ -3252,48 +3355,48 @@ var init_resource = __esm({
   "../packages/shared/dist/validators/resource.js"() {
     "use strict";
     init_constants();
-    organizationResourceKindSchema = z17.enum(ORGANIZATION_RESOURCE_KINDS);
-    organizationResourceSourceTypeSchema = z17.enum(ORGANIZATION_RESOURCE_SOURCE_TYPES);
-    projectResourceAttachmentRoleSchema = z17.enum(PROJECT_RESOURCE_ATTACHMENT_ROLES);
+    organizationResourceKindSchema = z18.enum(ORGANIZATION_RESOURCE_KINDS);
+    organizationResourceSourceTypeSchema = z18.enum(ORGANIZATION_RESOURCE_SOURCE_TYPES);
+    projectResourceAttachmentRoleSchema = z18.enum(PROJECT_RESOURCE_ATTACHMENT_ROLES);
     LIBRARY_PATH_SCHEME_RE = /^[a-z][a-z0-9+.-]*:/i;
-    createOrganizationResourceBaseSchema = z17.object({
-      name: z17.string().min(1),
+    createOrganizationResourceBaseSchema = z18.object({
+      name: z18.string().min(1),
       kind: organizationResourceKindSchema,
       sourceType: organizationResourceSourceTypeSchema.optional().default("external"),
-      locator: z17.string().min(1),
-      description: z17.string().optional().nullable(),
-      metadata: z17.record(z17.unknown()).optional().nullable()
+      locator: z18.string().min(1),
+      description: z18.string().optional().nullable(),
+      metadata: z18.record(z18.unknown()).optional().nullable()
     });
     createOrganizationResourceSchema = createOrganizationResourceBaseSchema.superRefine(validateLibraryResourceContract);
-    updateOrganizationResourceSchema = z17.object({
-      name: z17.string().min(1).optional(),
+    updateOrganizationResourceSchema = z18.object({
+      name: z18.string().min(1).optional(),
       kind: organizationResourceKindSchema.optional(),
       sourceType: organizationResourceSourceTypeSchema.optional(),
-      locator: z17.string().min(1).optional(),
-      description: z17.string().optional().nullable(),
-      metadata: z17.record(z17.unknown()).optional().nullable()
+      locator: z18.string().min(1).optional(),
+      description: z18.string().optional().nullable(),
+      metadata: z18.record(z18.unknown()).optional().nullable()
     }).strict().superRefine(validateLibraryResourceContract);
-    projectResourceAttachmentInputSchema = z17.object({
-      resourceId: z17.string().uuid(),
+    projectResourceAttachmentInputSchema = z18.object({
+      resourceId: z18.string().uuid(),
       role: projectResourceAttachmentRoleSchema.optional(),
-      note: z17.string().optional().nullable(),
-      sortOrder: z17.number().int().nonnegative().optional()
+      note: z18.string().optional().nullable(),
+      sortOrder: z18.number().int().nonnegative().optional()
     }).strict();
-    updateProjectResourceAttachmentSchema = z17.object({
+    updateProjectResourceAttachmentSchema = z18.object({
       role: projectResourceAttachmentRoleSchema.optional(),
-      note: z17.string().optional().nullable(),
-      sortOrder: z17.number().int().nonnegative().optional()
+      note: z18.string().optional().nullable(),
+      sortOrder: z18.number().int().nonnegative().optional()
     }).strict();
     createProjectInlineResourceSchema = createOrganizationResourceBaseSchema.extend({
       role: projectResourceAttachmentRoleSchema.optional(),
-      note: z17.string().optional().nullable(),
-      sortOrder: z17.number().int().nonnegative().optional()
+      note: z18.string().optional().nullable(),
+      sortOrder: z18.number().int().nonnegative().optional()
     }).strict().superRefine(validateLibraryResourceContract);
   }
 });
 
 // ../packages/shared/dist/validators/agent.js
-import { z as z18 } from "zod";
+import { z as z19 } from "zod";
 var agentPermissionsSchema, agentInstructionsBundleModeSchema, updateAgentInstructionsBundleSchema, upsertAgentInstructionsFileSchema, agentRuntimeConfigSchema, optionalAgentNameSchema, uploadedAgentIconSchema, diceBearNotionistsAgentIconSchema, oreoAgentIconSchema, agentIconSchema, createAgentSchema, createAgentHireSchema, updateAgentSchema, updateAgentInstructionsPathSchema, createAgentKeySchema, wakeAgentSchema, resetAgentSessionSchema, testAgentRuntimeEnvironmentSchema, updateAgentPermissionsSchema;
 var init_agent = __esm({
   "../packages/shared/dist/validators/agent.js"() {
@@ -3301,29 +3404,29 @@ var init_agent = __esm({
     init_constants();
     init_model_fallbacks();
     init_secret();
-    agentPermissionsSchema = z18.object({
-      canCreateAgents: z18.boolean().optional().default(true),
-      canManageSkills: z18.boolean().optional().default(true)
+    agentPermissionsSchema = z19.object({
+      canCreateAgents: z19.boolean().optional().default(true),
+      canManageSkills: z19.boolean().optional().default(true)
     });
-    agentInstructionsBundleModeSchema = z18.enum(["managed", "external"]);
-    updateAgentInstructionsBundleSchema = z18.object({
+    agentInstructionsBundleModeSchema = z19.enum(["managed", "external"]);
+    updateAgentInstructionsBundleSchema = z19.object({
       mode: agentInstructionsBundleModeSchema.optional(),
-      rootPath: z18.string().trim().min(1).nullable().optional(),
-      entryFile: z18.string().trim().min(1).optional(),
-      clearLegacyPromptTemplate: z18.boolean().optional().default(false)
+      rootPath: z19.string().trim().min(1).nullable().optional(),
+      entryFile: z19.string().trim().min(1).optional(),
+      clearLegacyPromptTemplate: z19.boolean().optional().default(false)
     });
-    upsertAgentInstructionsFileSchema = z18.object({
-      path: z18.string().trim().min(1),
-      content: z18.string(),
-      clearLegacyPromptTemplate: z18.boolean().optional().default(false)
+    upsertAgentInstructionsFileSchema = z19.object({
+      path: z19.string().trim().min(1),
+      content: z19.string(),
+      clearLegacyPromptTemplate: z19.boolean().optional().default(false)
     });
-    agentRuntimeConfigSchema = z18.record(z18.unknown()).superRefine((value, ctx) => {
+    agentRuntimeConfigSchema = z19.record(z19.unknown()).superRefine((value, ctx) => {
       const envValue = value.env;
       if (envValue !== void 0) {
         const parsed = envConfigSchema.safeParse(envValue);
         if (!parsed.success) {
           ctx.addIssue({
-            code: z18.ZodIssueCode.custom,
+            code: z19.ZodIssueCode.custom,
             message: "agentRuntimeConfig.env must be a map of valid env bindings",
             path: ["env"]
           });
@@ -3331,167 +3434,167 @@ var init_agent = __esm({
       }
       validateModelFallbacksConfig(value, ctx, []);
     });
-    optionalAgentNameSchema = z18.preprocess((value) => {
+    optionalAgentNameSchema = z19.preprocess((value) => {
       if (typeof value !== "string")
         return value;
       const trimmed = value.trim();
       return trimmed.length > 0 ? trimmed : void 0;
-    }, z18.string().trim().min(1).optional());
-    uploadedAgentIconSchema = z18.string().regex(new RegExp(`^asset:[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}(?:\\?bg=(?:${AGENT_AVATAR_BACKGROUND_PRESET_IDS.join("|")}))?$`, "i"), "Invalid uploaded avatar reference");
-    diceBearNotionistsAgentIconSchema = z18.string().regex(new RegExp(`^${AGENT_DICEBEAR_NOTIONISTS_ICON_PREFIX}[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}(?:\\?bg=(?:${AGENT_AVATAR_BACKGROUND_PRESET_IDS.join("|")}))?$`, "i"), "Invalid DiceBear avatar reference");
-    oreoAgentIconSchema = z18.string().regex(new RegExp(`^${AGENT_OREO_ICON_PREFIX}(?:${AGENT_OREO_SHAPE_IDS.join("|")}):(?:${AGENT_OREO_PALETTE_IDS.join("|")}):[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$`, "i"), "Invalid Oreo avatar reference");
-    agentIconSchema = z18.preprocess((value) => {
+    }, z19.string().trim().min(1).optional());
+    uploadedAgentIconSchema = z19.string().regex(new RegExp(`^asset:[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}(?:\\?bg=(?:${AGENT_AVATAR_BACKGROUND_PRESET_IDS.join("|")}))?$`, "i"), "Invalid uploaded avatar reference");
+    diceBearNotionistsAgentIconSchema = z19.string().regex(new RegExp(`^${AGENT_DICEBEAR_NOTIONISTS_ICON_PREFIX}[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}(?:\\?bg=(?:${AGENT_AVATAR_BACKGROUND_PRESET_IDS.join("|")}))?$`, "i"), "Invalid DiceBear avatar reference");
+    oreoAgentIconSchema = z19.string().regex(new RegExp(`^${AGENT_OREO_ICON_PREFIX}(?:${AGENT_OREO_SHAPE_IDS.join("|")}):(?:${AGENT_OREO_PALETTE_IDS.join("|")}):[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$`, "i"), "Invalid Oreo avatar reference");
+    agentIconSchema = z19.preprocess((value) => {
       if (typeof value !== "string")
         return value;
       const trimmed = value.trim();
       return trimmed.length > 0 ? trimmed : null;
-    }, z18.union([
-      z18.enum(AGENT_ICON_NAMES),
+    }, z19.union([
+      z19.enum(AGENT_ICON_NAMES),
       oreoAgentIconSchema,
       uploadedAgentIconSchema,
       diceBearNotionistsAgentIconSchema
     ]).nullable());
-    createAgentSchema = z18.object({
+    createAgentSchema = z19.object({
       name: optionalAgentNameSchema,
-      role: z18.enum(AGENT_ROLES).optional().default("general"),
-      title: z18.string().optional().nullable(),
+      role: z19.enum(AGENT_ROLES).optional().default("general"),
+      title: z19.string().optional().nullable(),
       icon: agentIconSchema.optional(),
-      capabilities: z18.string().optional().nullable(),
-      desiredSkills: z18.array(z18.string().min(1)).optional(),
-      agentRuntimeType: z18.enum(AGENT_RUNTIME_TYPES).optional().default("process"),
+      capabilities: z19.string().optional().nullable(),
+      desiredSkills: z19.array(z19.string().min(1)).optional(),
+      agentRuntimeType: z19.enum(AGENT_RUNTIME_TYPES).optional().default("process"),
       agentRuntimeConfig: agentRuntimeConfigSchema.optional().default({}),
-      runtimeConfig: z18.record(z18.unknown()).optional().default({}),
-      budgetMonthlyCents: z18.number().int().nonnegative().optional().default(0),
+      runtimeConfig: z19.record(z19.unknown()).optional().default({}),
+      budgetMonthlyCents: z19.number().int().nonnegative().optional().default(0),
       permissions: agentPermissionsSchema.optional(),
-      metadata: z18.record(z18.unknown()).optional().nullable(),
-      seedOrganizationIntelligenceDefaults: z18.boolean().optional().default(false)
+      metadata: z19.record(z19.unknown()).optional().nullable(),
+      seedOrganizationIntelligenceDefaults: z19.boolean().optional().default(false)
     });
     createAgentHireSchema = createAgentSchema.omit({ seedOrganizationIntelligenceDefaults: true }).extend({
-      sourceIssueId: z18.string().uuid().optional().nullable(),
-      sourceIssueIds: z18.array(z18.string().uuid()).optional()
+      sourceIssueId: z19.string().uuid().optional().nullable(),
+      sourceIssueIds: z19.array(z19.string().uuid()).optional()
     });
     updateAgentSchema = createAgentSchema.omit({ permissions: true, seedOrganizationIntelligenceDefaults: true }).partial().extend({
-      permissions: z18.never().optional(),
-      replaceAgentRuntimeConfig: z18.boolean().optional(),
-      status: z18.enum(AGENT_STATUSES).optional(),
-      spentMonthlyCents: z18.number().int().nonnegative().optional()
+      permissions: z19.never().optional(),
+      replaceAgentRuntimeConfig: z19.boolean().optional(),
+      status: z19.enum(AGENT_STATUSES).optional(),
+      spentMonthlyCents: z19.number().int().nonnegative().optional()
     });
-    updateAgentInstructionsPathSchema = z18.object({
-      path: z18.string().trim().min(1).nullable(),
-      agentRuntimeConfigKey: z18.string().trim().min(1).optional()
+    updateAgentInstructionsPathSchema = z19.object({
+      path: z19.string().trim().min(1).nullable(),
+      agentRuntimeConfigKey: z19.string().trim().min(1).optional()
     });
-    createAgentKeySchema = z18.object({
-      name: z18.string().min(1).default("default")
+    createAgentKeySchema = z19.object({
+      name: z19.string().min(1).default("default")
     });
-    wakeAgentSchema = z18.object({
-      source: z18.enum(["timer", "assignment", "review", "on_demand", "automation"]).optional().default("on_demand"),
-      triggerDetail: z18.enum(["manual", "ping", "callback", "system"]).optional(),
-      reason: z18.string().optional().nullable(),
-      payload: z18.record(z18.unknown()).optional().nullable(),
-      idempotencyKey: z18.string().optional().nullable(),
-      forceFreshSession: z18.preprocess((value) => value === null ? void 0 : value, z18.boolean().optional().default(false))
+    wakeAgentSchema = z19.object({
+      source: z19.enum(["timer", "assignment", "review", "on_demand", "automation"]).optional().default("on_demand"),
+      triggerDetail: z19.enum(["manual", "ping", "callback", "system"]).optional(),
+      reason: z19.string().optional().nullable(),
+      payload: z19.record(z19.unknown()).optional().nullable(),
+      idempotencyKey: z19.string().optional().nullable(),
+      forceFreshSession: z19.preprocess((value) => value === null ? void 0 : value, z19.boolean().optional().default(false))
     });
-    resetAgentSessionSchema = z18.object({
-      taskKey: z18.string().min(1).optional().nullable()
+    resetAgentSessionSchema = z19.object({
+      taskKey: z19.string().min(1).optional().nullable()
     });
-    testAgentRuntimeEnvironmentSchema = z18.object({
+    testAgentRuntimeEnvironmentSchema = z19.object({
       agentRuntimeConfig: agentRuntimeConfigSchema.optional().default({})
     });
-    updateAgentPermissionsSchema = z18.object({
-      canCreateAgents: z18.boolean(),
-      canManageSkills: z18.boolean().optional(),
-      canAssignTasks: z18.boolean()
+    updateAgentPermissionsSchema = z19.object({
+      canCreateAgents: z19.boolean(),
+      canManageSkills: z19.boolean().optional(),
+      canAssignTasks: z19.boolean()
     });
   }
 });
 
 // ../packages/shared/dist/validators/agent-integration.js
-import { z as z19 } from "zod";
+import { z as z20 } from "zod";
 var agentIntegrationProviderSchema, agentIntegrationStatusSchema, agentIntegrationTransportSchema, agentIntegrationProviderRegionSchema, agentIntegrationChatTypeSchema, agentIntegrationDropReasonSchema, agentIntegrationOutboundStatusSchema, createAgentIntegrationSchema, connectAgentIntegrationSchema, feishuIntegrationSettingsSchema, agentIntegrationSettingsSchema, updateAgentIntegrationSettingsSchema, feishuEventHeaderSchema, feishuSenderIdSchema, feishuMessageMentionSchema, feishuMessageSchema, feishuEventSchema, mockFeishuInboundEventSchema;
 var init_agent_integration = __esm({
   "../packages/shared/dist/validators/agent-integration.js"() {
     "use strict";
     init_constants();
-    agentIntegrationProviderSchema = z19.enum(AGENT_INTEGRATION_PROVIDERS);
-    agentIntegrationStatusSchema = z19.enum(AGENT_INTEGRATION_STATUSES);
-    agentIntegrationTransportSchema = z19.enum(AGENT_INTEGRATION_TRANSPORTS);
-    agentIntegrationProviderRegionSchema = z19.enum(AGENT_INTEGRATION_PROVIDER_REGIONS);
-    agentIntegrationChatTypeSchema = z19.enum(AGENT_INTEGRATION_CHAT_TYPES);
-    agentIntegrationDropReasonSchema = z19.enum(AGENT_INTEGRATION_DROP_REASONS);
-    agentIntegrationOutboundStatusSchema = z19.enum(AGENT_INTEGRATION_OUTBOUND_STATUSES);
-    createAgentIntegrationSchema = z19.object({
-      agentId: z19.string().uuid(),
+    agentIntegrationProviderSchema = z20.enum(AGENT_INTEGRATION_PROVIDERS);
+    agentIntegrationStatusSchema = z20.enum(AGENT_INTEGRATION_STATUSES);
+    agentIntegrationTransportSchema = z20.enum(AGENT_INTEGRATION_TRANSPORTS);
+    agentIntegrationProviderRegionSchema = z20.enum(AGENT_INTEGRATION_PROVIDER_REGIONS);
+    agentIntegrationChatTypeSchema = z20.enum(AGENT_INTEGRATION_CHAT_TYPES);
+    agentIntegrationDropReasonSchema = z20.enum(AGENT_INTEGRATION_DROP_REASONS);
+    agentIntegrationOutboundStatusSchema = z20.enum(AGENT_INTEGRATION_OUTBOUND_STATUSES);
+    createAgentIntegrationSchema = z20.object({
+      agentId: z20.string().uuid(),
       provider: agentIntegrationProviderSchema.default("feishu"),
       transport: agentIntegrationTransportSchema.default("long_connection"),
       providerRegion: agentIntegrationProviderRegionSchema.default("feishu_cn"),
-      appCredentialSecretId: z19.string().uuid(),
-      externalAppId: z19.string().min(1),
-      externalBotOpenId: z19.string().min(1).optional().nullable(),
-      externalTenantKey: z19.string().min(1).optional().nullable(),
-      installerUserId: z19.string().min(1).optional().nullable(),
-      manageUrl: z19.string().url().optional().nullable()
+      appCredentialSecretId: z20.string().uuid(),
+      externalAppId: z20.string().min(1),
+      externalBotOpenId: z20.string().min(1).optional().nullable(),
+      externalTenantKey: z20.string().min(1).optional().nullable(),
+      installerUserId: z20.string().min(1).optional().nullable(),
+      manageUrl: z20.string().url().optional().nullable()
     });
     connectAgentIntegrationSchema = createAgentIntegrationSchema.omit({ agentId: true });
-    feishuIntegrationSettingsSchema = z19.object({
-      dailySessionRolloverEnabled: z19.boolean().default(true),
-      dailySessionRolloverHours: z19.number().int().min(1).max(168).default(24),
-      dailySessionRolloverNotifyFeishu: z19.boolean().default(true)
+    feishuIntegrationSettingsSchema = z20.object({
+      dailySessionRolloverEnabled: z20.boolean().default(true),
+      dailySessionRolloverHours: z20.number().int().min(1).max(168).default(24),
+      dailySessionRolloverNotifyFeishu: z20.boolean().default(true)
     });
-    agentIntegrationSettingsSchema = z19.object({
+    agentIntegrationSettingsSchema = z20.object({
       feishu: feishuIntegrationSettingsSchema.optional()
     }).default({});
-    updateAgentIntegrationSettingsSchema = z19.object({
+    updateAgentIntegrationSettingsSchema = z20.object({
       settings: agentIntegrationSettingsSchema
     });
-    feishuEventHeaderSchema = z19.object({
-      event_id: z19.string().min(1).optional(),
-      app_id: z19.string().min(1).optional(),
-      token: z19.string().min(1).optional(),
-      create_time: z19.string().min(1).optional()
+    feishuEventHeaderSchema = z20.object({
+      event_id: z20.string().min(1).optional(),
+      app_id: z20.string().min(1).optional(),
+      token: z20.string().min(1).optional(),
+      create_time: z20.string().min(1).optional()
     }).passthrough();
-    feishuSenderIdSchema = z19.object({
-      open_id: z19.string().min(1).optional(),
-      union_id: z19.string().min(1).optional()
+    feishuSenderIdSchema = z20.object({
+      open_id: z20.string().min(1).optional(),
+      union_id: z20.string().min(1).optional()
     }).passthrough();
-    feishuMessageMentionSchema = z19.object({
-      key: z19.string().optional(),
+    feishuMessageMentionSchema = z20.object({
+      key: z20.string().optional(),
       id: feishuSenderIdSchema.optional()
     }).passthrough();
-    feishuMessageSchema = z19.object({
-      message_id: z19.string().min(1).optional(),
-      chat_id: z19.string().min(1).optional(),
+    feishuMessageSchema = z20.object({
+      message_id: z20.string().min(1).optional(),
+      chat_id: z20.string().min(1).optional(),
       chat_type: agentIntegrationChatTypeSchema.optional(),
-      message_type: z19.string().min(1).optional(),
-      content: z19.string().optional(),
-      mentions: z19.array(feishuMessageMentionSchema).optional(),
-      parent_id: z19.string().min(1).optional().nullable()
+      message_type: z20.string().min(1).optional(),
+      content: z20.string().optional(),
+      mentions: z20.array(feishuMessageMentionSchema).optional(),
+      parent_id: z20.string().min(1).optional().nullable()
     }).passthrough();
-    feishuEventSchema = z19.object({
-      sender: z19.object({
+    feishuEventSchema = z20.object({
+      sender: z20.object({
         sender_id: feishuSenderIdSchema.optional()
       }).passthrough().optional(),
       message: feishuMessageSchema.optional()
     }).passthrough();
-    mockFeishuInboundEventSchema = z19.object({
-      type: z19.string().min(1).optional(),
-      token: z19.string().min(1).optional(),
-      challenge: z19.string().min(1).optional(),
-      mockVerificationToken: z19.string().min(1).optional(),
-      mockEncryptKey: z19.string().min(1).optional(),
-      eventId: z19.string().min(1).optional(),
-      appId: z19.string().min(1).optional(),
-      botOpenId: z19.string().min(1).optional().nullable(),
-      chatId: z19.string().min(1).optional(),
+    mockFeishuInboundEventSchema = z20.object({
+      type: z20.string().min(1).optional(),
+      token: z20.string().min(1).optional(),
+      challenge: z20.string().min(1).optional(),
+      mockVerificationToken: z20.string().min(1).optional(),
+      mockEncryptKey: z20.string().min(1).optional(),
+      eventId: z20.string().min(1).optional(),
+      appId: z20.string().min(1).optional(),
+      botOpenId: z20.string().min(1).optional().nullable(),
+      chatId: z20.string().min(1).optional(),
       chatType: agentIntegrationChatTypeSchema.optional(),
-      messageId: z19.string().min(1).optional(),
-      senderOpenId: z19.string().min(1).optional(),
-      senderUnionId: z19.string().min(1).optional().nullable(),
-      body: z19.string().optional(),
-      commandBody: z19.string().optional(),
-      addressedToBot: z19.boolean().optional(),
-      messageType: z19.string().min(1).optional(),
-      parentMessageId: z19.string().min(1).optional().nullable(),
-      receivedAt: z19.string().datetime().optional(),
+      messageId: z20.string().min(1).optional(),
+      senderOpenId: z20.string().min(1).optional(),
+      senderUnionId: z20.string().min(1).optional().nullable(),
+      body: z20.string().optional(),
+      commandBody: z20.string().optional(),
+      addressedToBot: z20.boolean().optional(),
+      messageType: z20.string().min(1).optional(),
+      parentMessageId: z20.string().min(1).optional().nullable(),
+      receivedAt: z20.string().datetime().optional(),
       header: feishuEventHeaderSchema.optional(),
       event: feishuEventSchema.optional()
     }).passthrough();
@@ -3499,7 +3602,7 @@ var init_agent_integration = __esm({
 });
 
 // ../packages/shared/dist/validators/project.js
-import { z as z20 } from "zod";
+import { z as z21 } from "zod";
 function validateProjectWorkspace(value, ctx) {
   const sourceType = value.sourceType ?? "local_path";
   const hasCwd = typeof value.cwd === "string" && value.cwd.trim().length > 0;
@@ -3508,7 +3611,7 @@ function validateProjectWorkspace(value, ctx) {
   if (sourceType === "remote_managed") {
     if (!hasRemoteRef && !hasRepo) {
       ctx.addIssue({
-        code: z20.ZodIssueCode.custom,
+        code: z21.ZodIssueCode.custom,
         message: "Remote-managed workspace requires remoteWorkspaceRef or repoUrl.",
         path: ["remoteWorkspaceRef"]
       });
@@ -3517,7 +3620,7 @@ function validateProjectWorkspace(value, ctx) {
   }
   if (!hasCwd && !hasRepo) {
     ctx.addIssue({
-      code: z20.ZodIssueCode.custom,
+      code: z21.ZodIssueCode.custom,
       message: "Workspace requires at least one of cwd or repoUrl.",
       path: ["cwd"]
     });
@@ -3529,120 +3632,120 @@ var init_project = __esm({
     "use strict";
     init_constants();
     init_resource();
-    executionWorkspaceStrategySchema = z20.object({
-      type: z20.enum(["project_primary", "git_worktree", "adapter_managed", "cloud_sandbox"]).optional(),
-      baseRef: z20.string().optional().nullable(),
-      branchTemplate: z20.string().optional().nullable(),
-      worktreeParentDir: z20.string().optional().nullable(),
-      provisionCommand: z20.string().optional().nullable(),
-      teardownCommand: z20.string().optional().nullable()
+    executionWorkspaceStrategySchema = z21.object({
+      type: z21.enum(["project_primary", "git_worktree", "adapter_managed", "cloud_sandbox"]).optional(),
+      baseRef: z21.string().optional().nullable(),
+      branchTemplate: z21.string().optional().nullable(),
+      worktreeParentDir: z21.string().optional().nullable(),
+      provisionCommand: z21.string().optional().nullable(),
+      teardownCommand: z21.string().optional().nullable()
     }).strict();
-    projectExecutionWorkspacePolicySchema = z20.object({
-      enabled: z20.boolean(),
-      defaultMode: z20.enum(["shared_workspace", "isolated_workspace", "operator_branch", "adapter_default"]).optional(),
-      allowIssueOverride: z20.boolean().optional(),
-      defaultProjectWorkspaceId: z20.string().uuid().optional().nullable(),
+    projectExecutionWorkspacePolicySchema = z21.object({
+      enabled: z21.boolean(),
+      defaultMode: z21.enum(["shared_workspace", "isolated_workspace", "operator_branch", "adapter_default"]).optional(),
+      allowIssueOverride: z21.boolean().optional(),
+      defaultProjectWorkspaceId: z21.string().uuid().optional().nullable(),
       workspaceStrategy: executionWorkspaceStrategySchema.optional().nullable(),
-      workspaceRuntime: z20.record(z20.unknown()).optional().nullable(),
-      branchPolicy: z20.record(z20.unknown()).optional().nullable(),
-      pullRequestPolicy: z20.record(z20.unknown()).optional().nullable(),
-      runtimePolicy: z20.record(z20.unknown()).optional().nullable(),
-      cleanupPolicy: z20.record(z20.unknown()).optional().nullable()
+      workspaceRuntime: z21.record(z21.unknown()).optional().nullable(),
+      branchPolicy: z21.record(z21.unknown()).optional().nullable(),
+      pullRequestPolicy: z21.record(z21.unknown()).optional().nullable(),
+      runtimePolicy: z21.record(z21.unknown()).optional().nullable(),
+      cleanupPolicy: z21.record(z21.unknown()).optional().nullable()
     }).strict();
-    projectWorkspaceSourceTypeSchema = z20.enum(["local_path", "git_repo", "remote_managed", "non_git_path"]);
-    projectWorkspaceVisibilitySchema = z20.enum(["default", "advanced"]);
+    projectWorkspaceSourceTypeSchema = z21.enum(["local_path", "git_repo", "remote_managed", "non_git_path"]);
+    projectWorkspaceVisibilitySchema = z21.enum(["default", "advanced"]);
     projectWorkspaceFields = {
-      name: z20.string().min(1).optional(),
+      name: z21.string().min(1).optional(),
       sourceType: projectWorkspaceSourceTypeSchema.optional(),
-      cwd: z20.string().min(1).optional().nullable(),
-      repoUrl: z20.string().url().optional().nullable(),
-      repoRef: z20.string().optional().nullable(),
-      defaultRef: z20.string().optional().nullable(),
+      cwd: z21.string().min(1).optional().nullable(),
+      repoUrl: z21.string().url().optional().nullable(),
+      repoRef: z21.string().optional().nullable(),
+      defaultRef: z21.string().optional().nullable(),
       visibility: projectWorkspaceVisibilitySchema.optional(),
-      setupCommand: z20.string().optional().nullable(),
-      cleanupCommand: z20.string().optional().nullable(),
-      remoteProvider: z20.string().optional().nullable(),
-      remoteWorkspaceRef: z20.string().optional().nullable(),
-      sharedWorkspaceKey: z20.string().optional().nullable(),
-      metadata: z20.record(z20.unknown()).optional().nullable()
+      setupCommand: z21.string().optional().nullable(),
+      cleanupCommand: z21.string().optional().nullable(),
+      remoteProvider: z21.string().optional().nullable(),
+      remoteWorkspaceRef: z21.string().optional().nullable(),
+      sharedWorkspaceKey: z21.string().optional().nullable(),
+      metadata: z21.record(z21.unknown()).optional().nullable()
     };
     projectColorValues = new Set(PROJECT_COLORS);
-    legacyProjectColorSchema = z20.string().regex(/^#[0-9a-fA-F]{6}$/);
-    projectColorSchema = z20.string().refine((value) => legacyProjectColorSchema.safeParse(value).success || projectColorValues.has(value), "Color must be a 6-digit hex value or a supported project gradient");
-    projectIconSchema = z20.enum(PROJECT_ICONS);
-    createProjectWorkspaceSchema = z20.object({
+    legacyProjectColorSchema = z21.string().regex(/^#[0-9a-fA-F]{6}$/);
+    projectColorSchema = z21.string().refine((value) => legacyProjectColorSchema.safeParse(value).success || projectColorValues.has(value), "Color must be a 6-digit hex value or a supported project gradient");
+    projectIconSchema = z21.enum(PROJECT_ICONS);
+    createProjectWorkspaceSchema = z21.object({
       ...projectWorkspaceFields,
-      isPrimary: z20.boolean().optional().default(false)
+      isPrimary: z21.boolean().optional().default(false)
     }).superRefine(validateProjectWorkspace);
-    updateProjectWorkspaceSchema = z20.object({
+    updateProjectWorkspaceSchema = z21.object({
       ...projectWorkspaceFields,
-      isPrimary: z20.boolean().optional()
+      isPrimary: z21.boolean().optional()
     }).partial();
     projectFields = {
       /** @deprecated Use goalIds instead */
-      goalId: z20.string().uuid().optional().nullable(),
-      goalIds: z20.array(z20.string().uuid()).optional(),
-      name: z20.string().min(1),
-      description: z20.string().optional().nullable(),
-      status: z20.enum(PROJECT_STATUSES).optional().default("backlog"),
-      leadAgentId: z20.string().uuid().optional().nullable(),
-      targetDate: z20.string().optional().nullable(),
+      goalId: z21.string().uuid().optional().nullable(),
+      goalIds: z21.array(z21.string().uuid()).optional(),
+      name: z21.string().min(1),
+      description: z21.string().optional().nullable(),
+      status: z21.enum(PROJECT_STATUSES).optional().default("backlog"),
+      leadAgentId: z21.string().uuid().optional().nullable(),
+      targetDate: z21.string().optional().nullable(),
       color: projectColorSchema.optional().nullable(),
       icon: projectIconSchema.optional().nullable(),
       executionWorkspacePolicy: projectExecutionWorkspacePolicySchema.optional().nullable(),
-      resourceAttachments: z20.array(projectResourceAttachmentInputSchema).optional(),
-      newResources: z20.array(createProjectInlineResourceSchema).optional(),
-      archivedAt: z20.string().datetime().optional().nullable()
+      resourceAttachments: z21.array(projectResourceAttachmentInputSchema).optional(),
+      newResources: z21.array(createProjectInlineResourceSchema).optional(),
+      archivedAt: z21.string().datetime().optional().nullable()
     };
-    createProjectSchema = z20.object({
+    createProjectSchema = z21.object({
       ...projectFields
     });
-    updateProjectSchema = z20.object(projectFields).partial();
+    updateProjectSchema = z21.object(projectFields).partial();
   }
 });
 
 // ../packages/shared/dist/validators/issue.js
-import { z as z21 } from "zod";
+import { z as z22 } from "zod";
 var runWorkspaceStrategySchema, issueRunWorkspaceSettingsSchema, issueAssigneeAdapterOverridesSchema, createIssueSchema, createIssueLabelSchema, updateIssueLabelSchema, updateIssueSchema, reorderIssueSchema, checkoutIssueSchema, addIssueCommentSchema, updateIssueCommentSchema, reportIssueCommitSchema, linkIssueApprovalSchema, createIssueAttachmentMetadataSchema, createIssueWorkspaceAttachmentSchema, ISSUE_DOCUMENT_FORMATS, issueDocumentFormatSchema, createLibraryDocumentSchema, updateLibraryDocumentSchema, restoreLibraryDocumentRevisionSchema;
 var init_issue = __esm({
   "../packages/shared/dist/validators/issue.js"() {
     "use strict";
     init_constants();
-    runWorkspaceStrategySchema = z21.object({
-      type: z21.enum(["project_primary", "git_worktree", "adapter_managed", "cloud_sandbox"]).optional(),
-      baseRef: z21.string().optional().nullable(),
-      branchTemplate: z21.string().optional().nullable(),
-      worktreeParentDir: z21.string().optional().nullable(),
-      provisionCommand: z21.string().optional().nullable(),
-      teardownCommand: z21.string().optional().nullable()
+    runWorkspaceStrategySchema = z22.object({
+      type: z22.enum(["project_primary", "git_worktree", "adapter_managed", "cloud_sandbox"]).optional(),
+      baseRef: z22.string().optional().nullable(),
+      branchTemplate: z22.string().optional().nullable(),
+      worktreeParentDir: z22.string().optional().nullable(),
+      provisionCommand: z22.string().optional().nullable(),
+      teardownCommand: z22.string().optional().nullable()
     }).strict();
-    issueRunWorkspaceSettingsSchema = z21.object({
-      mode: z21.enum(["inherit", "shared_workspace", "isolated_workspace", "operator_branch", "reuse_existing", "agent_default"]).optional(),
+    issueRunWorkspaceSettingsSchema = z22.object({
+      mode: z22.enum(["inherit", "shared_workspace", "isolated_workspace", "operator_branch", "reuse_existing", "agent_default"]).optional(),
       workspaceStrategy: runWorkspaceStrategySchema.optional().nullable(),
-      workspaceRuntime: z21.record(z21.unknown()).optional().nullable()
+      workspaceRuntime: z22.record(z22.unknown()).optional().nullable()
     }).strict();
-    issueAssigneeAdapterOverridesSchema = z21.object({
-      agentRuntimeConfig: z21.record(z21.unknown()).optional(),
-      useProjectWorkspace: z21.boolean().optional()
+    issueAssigneeAdapterOverridesSchema = z22.object({
+      agentRuntimeConfig: z22.record(z22.unknown()).optional(),
+      useProjectWorkspace: z22.boolean().optional()
     }).strict();
-    createIssueSchema = z21.object({
-      projectId: z21.string().uuid().optional().nullable(),
-      projectWorkspaceId: z21.string().uuid().optional().nullable(),
-      goalId: z21.string().uuid().optional().nullable(),
-      parentId: z21.string().uuid().optional().nullable(),
-      title: z21.string().min(1),
-      description: z21.string().optional().nullable(),
-      status: z21.enum(ISSUE_STATUSES).optional().default("backlog"),
-      priority: z21.enum(ISSUE_PRIORITIES).optional().default("medium"),
-      assigneeAgentId: z21.string().uuid().optional().nullable(),
-      assigneeUserId: z21.string().optional().nullable(),
-      reviewerAgentId: z21.string().uuid().optional().nullable(),
-      reviewerUserId: z21.string().optional().nullable(),
-      requestDepth: z21.number().int().nonnegative().optional().default(0),
-      billingCode: z21.string().optional().nullable(),
+    createIssueSchema = z22.object({
+      projectId: z22.string().uuid().optional().nullable(),
+      projectWorkspaceId: z22.string().uuid().optional().nullable(),
+      goalId: z22.string().uuid().optional().nullable(),
+      parentId: z22.string().uuid().optional().nullable(),
+      title: z22.string().min(1),
+      description: z22.string().optional().nullable(),
+      status: z22.enum(ISSUE_STATUSES).optional().default("backlog"),
+      priority: z22.enum(ISSUE_PRIORITIES).optional().default("medium"),
+      assigneeAgentId: z22.string().uuid().optional().nullable(),
+      assigneeUserId: z22.string().optional().nullable(),
+      reviewerAgentId: z22.string().uuid().optional().nullable(),
+      reviewerUserId: z22.string().optional().nullable(),
+      requestDepth: z22.number().int().nonnegative().optional().default(0),
+      billingCode: z22.string().optional().nullable(),
       assigneeAgentRuntimeOverrides: issueAssigneeAdapterOverridesSchema.optional().nullable(),
-      runWorkspaceId: z21.string().uuid().optional().nullable(),
-      runWorkspacePreference: z21.enum([
+      runWorkspaceId: z22.string().uuid().optional().nullable(),
+      runWorkspacePreference: z22.enum([
         "inherit",
         "shared_workspace",
         "isolated_workspace",
@@ -3652,9 +3755,9 @@ var init_issue = __esm({
       ]).optional().nullable(),
       runWorkspaceSettings: issueRunWorkspaceSettingsSchema.optional().nullable(),
       /** @deprecated Use runWorkspaceId. */
-      executionWorkspaceId: z21.string().uuid().optional().nullable(),
+      executionWorkspaceId: z22.string().uuid().optional().nullable(),
       /** @deprecated Use runWorkspacePreference. */
-      executionWorkspacePreference: z21.enum([
+      executionWorkspacePreference: z22.enum([
         "inherit",
         "shared_workspace",
         "isolated_workspace",
@@ -3664,88 +3767,88 @@ var init_issue = __esm({
       ]).optional().nullable(),
       /** @deprecated Use runWorkspaceSettings. */
       executionWorkspaceSettings: issueRunWorkspaceSettingsSchema.optional().nullable(),
-      labelIds: z21.array(z21.string().uuid()).optional()
+      labelIds: z22.array(z22.string().uuid()).optional()
     });
-    createIssueLabelSchema = z21.object({
-      name: z21.string().trim().min(1).max(48),
-      color: z21.string().regex(/^#(?:[0-9a-fA-F]{6})$/, "Color must be a 6-digit hex value")
+    createIssueLabelSchema = z22.object({
+      name: z22.string().trim().min(1).max(48),
+      color: z22.string().regex(/^#(?:[0-9a-fA-F]{6})$/, "Color must be a 6-digit hex value")
     });
     updateIssueLabelSchema = createIssueLabelSchema.partial().refine((value) => value.name !== void 0 || value.color !== void 0, {
       message: "At least one label field must be provided"
     });
     updateIssueSchema = createIssueSchema.partial().extend({
-      comment: z21.string().min(1).optional(),
-      reopen: z21.boolean().optional(),
-      hiddenAt: z21.string().datetime().nullable().optional(),
-      reviewDecision: z21.enum(["approve", "request_changes", "needs_followup", "blocked"]).optional()
+      comment: z22.string().min(1).optional(),
+      reopen: z22.boolean().optional(),
+      hiddenAt: z22.string().datetime().nullable().optional(),
+      reviewDecision: z22.enum(["approve", "request_changes", "needs_followup", "blocked"]).optional()
     });
-    reorderIssueSchema = z21.object({
-      issueId: z21.string().uuid(),
-      targetStatus: z21.enum(ISSUE_STATUSES),
-      previousIssueId: z21.string().uuid().optional().nullable(),
-      nextIssueId: z21.string().uuid().optional().nullable(),
-      position: z21.enum(["start", "end"]).optional()
+    reorderIssueSchema = z22.object({
+      issueId: z22.string().uuid(),
+      targetStatus: z22.enum(ISSUE_STATUSES),
+      previousIssueId: z22.string().uuid().optional().nullable(),
+      nextIssueId: z22.string().uuid().optional().nullable(),
+      position: z22.enum(["start", "end"]).optional()
     }).refine((value) => !(value.previousIssueId && value.nextIssueId && value.previousIssueId === value.nextIssueId), {
       message: "previousIssueId and nextIssueId must be different"
     });
-    checkoutIssueSchema = z21.object({
-      agentId: z21.string().uuid(),
-      expectedStatuses: z21.array(z21.enum(ISSUE_STATUSES)).nonempty()
+    checkoutIssueSchema = z22.object({
+      agentId: z22.string().uuid(),
+      expectedStatuses: z22.array(z22.enum(ISSUE_STATUSES)).nonempty()
     });
-    addIssueCommentSchema = z21.object({
-      body: z21.string().min(1),
-      reopen: z21.boolean().optional(),
-      interrupt: z21.boolean().optional()
+    addIssueCommentSchema = z22.object({
+      body: z22.string().min(1),
+      reopen: z22.boolean().optional(),
+      interrupt: z22.boolean().optional()
     });
-    updateIssueCommentSchema = z21.object({
-      body: z21.string().trim().min(1)
+    updateIssueCommentSchema = z22.object({
+      body: z22.string().trim().min(1)
     });
-    reportIssueCommitSchema = z21.object({
-      sha: z21.string().trim().regex(/^[0-9a-f]{7,64}$/i, "Commit SHA must be 7 to 64 hexadecimal characters"),
-      message: z21.string().trim().min(1).max(500),
-      branch: z21.string().trim().min(1).max(255).optional().nullable(),
-      repoPath: z21.string().trim().min(1).max(2048).optional().nullable(),
-      workspacePath: z21.string().trim().min(1).max(2048).optional().nullable(),
-      commitCount: z21.number().int().positive().max(1e3).optional()
+    reportIssueCommitSchema = z22.object({
+      sha: z22.string().trim().regex(/^[0-9a-f]{7,64}$/i, "Commit SHA must be 7 to 64 hexadecimal characters"),
+      message: z22.string().trim().min(1).max(500),
+      branch: z22.string().trim().min(1).max(255).optional().nullable(),
+      repoPath: z22.string().trim().min(1).max(2048).optional().nullable(),
+      workspacePath: z22.string().trim().min(1).max(2048).optional().nullable(),
+      commitCount: z22.number().int().positive().max(1e3).optional()
     });
-    linkIssueApprovalSchema = z21.object({
-      approvalId: z21.string().uuid()
+    linkIssueApprovalSchema = z22.object({
+      approvalId: z22.string().uuid()
     });
-    createIssueAttachmentMetadataSchema = z21.object({
-      issueCommentId: z21.string().uuid().optional().nullable(),
-      usage: z21.enum(["issue", "description_inline", "document_inline", "comment_inline", "comment_attachment"]).optional()
+    createIssueAttachmentMetadataSchema = z22.object({
+      issueCommentId: z22.string().uuid().optional().nullable(),
+      usage: z22.enum(["issue", "description_inline", "document_inline", "comment_inline", "comment_attachment"]).optional()
     });
-    createIssueWorkspaceAttachmentSchema = z21.object({
-      path: z21.string().trim().min(1).max(2048)
+    createIssueWorkspaceAttachmentSchema = z22.object({
+      path: z22.string().trim().min(1).max(2048)
     });
     ISSUE_DOCUMENT_FORMATS = ["markdown"];
-    issueDocumentFormatSchema = z21.enum(ISSUE_DOCUMENT_FORMATS);
-    createLibraryDocumentSchema = z21.object({
-      title: z21.string().trim().max(200).nullable().optional(),
+    issueDocumentFormatSchema = z22.enum(ISSUE_DOCUMENT_FORMATS);
+    createLibraryDocumentSchema = z22.object({
+      title: z22.string().trim().max(200).nullable().optional(),
       format: issueDocumentFormatSchema.optional().default("markdown"),
-      body: z21.string().max(524288).optional().default(""),
-      changeSummary: z21.string().trim().max(500).nullable().optional()
+      body: z22.string().max(524288).optional().default(""),
+      changeSummary: z22.string().trim().max(500).nullable().optional()
     });
-    updateLibraryDocumentSchema = z21.object({
-      title: z21.string().trim().max(200).nullable().optional(),
+    updateLibraryDocumentSchema = z22.object({
+      title: z22.string().trim().max(200).nullable().optional(),
       format: issueDocumentFormatSchema.optional().default("markdown"),
-      body: z21.string().max(524288),
-      changeSummary: z21.string().trim().max(500).nullable().optional(),
-      baseRevisionId: z21.string().uuid().nullable().optional()
+      body: z22.string().max(524288),
+      changeSummary: z22.string().trim().max(500).nullable().optional(),
+      baseRevisionId: z22.string().uuid().nullable().optional()
     });
-    restoreLibraryDocumentRevisionSchema = z21.object({
-      changeSummary: z21.string().trim().max(500).nullable().optional()
+    restoreLibraryDocumentRevisionSchema = z22.object({
+      changeSummary: z22.string().trim().max(500).nullable().optional()
     });
   }
 });
 
 // ../packages/shared/dist/validators/work-product.js
-import { z as z22 } from "zod";
+import { z as z23 } from "zod";
 var issueWorkProductTypeSchema, issueWorkProductStatusSchema, issueWorkProductReviewStateSchema, createIssueWorkProductSchema, updateIssueWorkProductSchema;
 var init_work_product = __esm({
   "../packages/shared/dist/validators/work-product.js"() {
     "use strict";
-    issueWorkProductTypeSchema = z22.enum([
+    issueWorkProductTypeSchema = z23.enum([
       "preview_url",
       "runtime_service",
       "pull_request",
@@ -3754,7 +3857,7 @@ var init_work_product = __esm({
       "artifact",
       "document"
     ]);
-    issueWorkProductStatusSchema = z22.enum([
+    issueWorkProductStatusSchema = z23.enum([
       "active",
       "ready_for_review",
       "approved",
@@ -3765,125 +3868,301 @@ var init_work_product = __esm({
       "archived",
       "draft"
     ]);
-    issueWorkProductReviewStateSchema = z22.enum([
+    issueWorkProductReviewStateSchema = z23.enum([
       "none",
       "needs_board_review",
       "approved",
       "changes_requested"
     ]);
-    createIssueWorkProductSchema = z22.object({
-      projectId: z22.string().uuid().optional().nullable(),
-      runWorkspaceId: z22.string().uuid().optional().nullable(),
+    createIssueWorkProductSchema = z23.object({
+      projectId: z23.string().uuid().optional().nullable(),
+      runWorkspaceId: z23.string().uuid().optional().nullable(),
       /** @deprecated Use runWorkspaceId. */
-      executionWorkspaceId: z22.string().uuid().optional().nullable(),
-      runtimeServiceId: z22.string().uuid().optional().nullable(),
+      executionWorkspaceId: z23.string().uuid().optional().nullable(),
+      runtimeServiceId: z23.string().uuid().optional().nullable(),
       type: issueWorkProductTypeSchema,
-      provider: z22.string().min(1),
-      externalId: z22.string().optional().nullable(),
-      title: z22.string().min(1),
-      url: z22.string().url().optional().nullable(),
+      provider: z23.string().min(1),
+      externalId: z23.string().optional().nullable(),
+      title: z23.string().min(1),
+      url: z23.string().url().optional().nullable(),
       status: issueWorkProductStatusSchema.default("active"),
       reviewState: issueWorkProductReviewStateSchema.optional().default("none"),
-      isPrimary: z22.boolean().optional().default(false),
-      healthStatus: z22.enum(["unknown", "healthy", "unhealthy"]).optional().default("unknown"),
-      summary: z22.string().optional().nullable(),
-      metadata: z22.record(z22.unknown()).optional().nullable(),
-      createdByRunId: z22.string().uuid().optional().nullable()
+      isPrimary: z23.boolean().optional().default(false),
+      healthStatus: z23.enum(["unknown", "healthy", "unhealthy"]).optional().default("unknown"),
+      summary: z23.string().optional().nullable(),
+      metadata: z23.record(z23.unknown()).optional().nullable(),
+      createdByRunId: z23.string().uuid().optional().nullable()
     });
     updateIssueWorkProductSchema = createIssueWorkProductSchema.partial();
   }
 });
 
 // ../packages/shared/dist/validators/execution-workspace.js
-import { z as z23 } from "zod";
+import { z as z24 } from "zod";
 var runWorkspaceStatusSchema, updateRunWorkspaceSchema;
 var init_execution_workspace = __esm({
   "../packages/shared/dist/validators/execution-workspace.js"() {
     "use strict";
-    runWorkspaceStatusSchema = z23.enum([
+    runWorkspaceStatusSchema = z24.enum([
       "active",
       "idle",
       "in_review",
       "archived",
       "cleanup_failed"
     ]);
-    updateRunWorkspaceSchema = z23.object({
+    updateRunWorkspaceSchema = z24.object({
       status: runWorkspaceStatusSchema.optional(),
-      cleanupEligibleAt: z23.string().datetime().optional().nullable(),
-      cleanupReason: z23.string().optional().nullable(),
-      metadata: z23.record(z23.unknown()).optional().nullable()
+      cleanupEligibleAt: z24.string().datetime().optional().nullable(),
+      cleanupReason: z24.string().optional().nullable(),
+      metadata: z24.record(z24.unknown()).optional().nullable()
     }).strict();
   }
 });
 
 // ../packages/shared/dist/validators/workspace-backup.js
-import { z as z24 } from "zod";
+import { z as z25 } from "zod";
 var workspaceBackupTriggerSourceSchema, createWorkspaceBackupSchema, restoreWorkspaceBackupSchema;
 var init_workspace_backup2 = __esm({
   "../packages/shared/dist/validators/workspace-backup.js"() {
     "use strict";
-    workspaceBackupTriggerSourceSchema = z24.enum(["manual", "scheduled", "pre_restore"]);
-    createWorkspaceBackupSchema = z24.object({
+    workspaceBackupTriggerSourceSchema = z25.enum(["manual", "scheduled", "pre_restore"]);
+    createWorkspaceBackupSchema = z25.object({
       triggerSource: workspaceBackupTriggerSourceSchema.optional().default("manual")
     }).strict();
-    restoreWorkspaceBackupSchema = z24.object({
-      confirm: z24.literal(true)
+    restoreWorkspaceBackupSchema = z25.object({
+      confirm: z25.literal(true)
     }).strict();
   }
 });
 
 // ../packages/shared/dist/validators/goal.js
-import { z as z25 } from "zod";
-var createGoalSchema, updateGoalSchema;
+import { z as z26 } from "zod";
+var jsonRecord, evidenceRefSchema, sha256HexSchema, criterionSchema, continuationSchema, planPayloadSchema, createGoalSchema, updateGoalSchema, activateGoalSchema, goalStartPacketSchema, previewGoalStartSchema, startGoalSchema, createGoalActivitySchema, assignGoalOwnerSchema, goalFeedbackAttachmentSchema, createGoalFeedbackSchema, goalContractPatchSchema, createGoalChangeProposalSchema, decideGoalChangeProposalSchema, goalEvaluationCandidateFields, goalEvaluationCandidateSchema, createGoalResultProposalSchema, acceptGoalResultProposalSchema, rejectGoalResultProposalSchema, evaluateGoalSchema, setGoalFocusSchema;
 var init_goal = __esm({
   "../packages/shared/dist/validators/goal.js"() {
     "use strict";
     init_constants();
-    createGoalSchema = z25.object({
-      title: z25.string().min(1),
-      description: z25.string().optional().nullable(),
-      level: z25.enum(GOAL_LEVELS).optional().default("task"),
-      status: z25.enum(GOAL_STATUSES).optional().default("planned"),
-      parentId: z25.string().uuid().optional().nullable(),
-      ownerAgentId: z25.string().uuid().optional().nullable()
+    jsonRecord = z26.record(z26.string(), z26.unknown());
+    evidenceRefSchema = z26.string().trim().min(1).regex(/^[a-z][a-z0-9+.-]*:[^\s]+$/i, "Evidence references must use a URI-like scheme");
+    sha256HexSchema = z26.string().regex(/^[a-f0-9]{64}$/, "Expected a SHA-256 hex digest");
+    criterionSchema = z26.object({
+      id: z26.string().trim().min(1),
+      label: z26.string().trim().min(1),
+      evaluator: z26.enum(GOAL_EVALUATOR_KINDS),
+      evidenceRequirements: z26.array(evidenceRefSchema).optional()
+    });
+    continuationSchema = z26.object({
+      kind: z26.enum(GOAL_CONTINUATION_KINDS),
+      summary: z26.string().trim().min(1),
+      wakeCondition: z26.string().trim().min(1).optional().nullable()
     });
-    updateGoalSchema = createGoalSchema.partial();
+    planPayloadSchema = z26.object({
+      summary: z26.string().trim().min(1),
+      hypotheses: z26.array(z26.unknown()).optional().default([]),
+      selectedPaths: z26.array(z26.unknown()).optional().default([]),
+      rejectedPaths: z26.array(z26.unknown()).optional().default([]),
+      sequencing: z26.array(z26.unknown()).optional().default([]),
+      budgetAllocations: jsonRecord.optional().default({}),
+      invalidationConditions: z26.array(z26.unknown()).optional().default([])
+    });
+    createGoalSchema = z26.object({
+      title: z26.string().trim().min(1),
+      description: z26.string().optional().nullable(),
+      alignmentQuestion: z26.string().trim().min(1).optional().nullable(),
+      /** Accepted for legacy clients but intentionally ignored by the canonical create command. */
+      level: z26.string().optional(),
+      status: z26.string().optional(),
+      parentId: z26.string().uuid().optional().nullable(),
+      ownerAgentId: z26.string().uuid().optional().nullable()
+    });
+    updateGoalSchema = z26.object({
+      title: z26.string().trim().min(1).optional(),
+      description: z26.string().optional().nullable(),
+      alignmentQuestion: z26.string().trim().min(1).optional().nullable()
+    }).strict();
+    activateGoalSchema = z26.object({
+      confirmed: z26.literal(true),
+      ownerAgentId: z26.string().uuid(),
+      outcomeStatement: z26.string().trim().min(1),
+      objectiveMode: z26.enum(GOAL_OBJECTIVE_MODES),
+      criteria: z26.array(criterionSchema).min(1),
+      autonomyEnvelope: jsonRecord.optional().default({}),
+      humanAuthorities: jsonRecord.optional().default({}),
+      evaluationPolicy: jsonRecord.optional().default({}),
+      actionDeadline: z26.coerce.date().optional().nullable(),
+      evaluationDeadline: z26.coerce.date().optional().nullable(),
+      initialContinuation: continuationSchema,
+      initialPlan: planPayloadSchema
+    }).superRefine((value, ctx) => {
+      if (value.evaluationDeadline && value.actionDeadline && value.evaluationDeadline < value.actionDeadline) {
+        ctx.addIssue({ code: z26.ZodIssueCode.custom, path: ["evaluationDeadline"], message: "Evaluation deadline must not precede action deadline" });
+      }
+      const criterionIds = /* @__PURE__ */ new Set();
+      for (const [index, criterion] of value.criteria.entries()) {
+        if (criterionIds.has(criterion.id)) {
+          ctx.addIssue({ code: z26.ZodIssueCode.custom, path: ["criteria", index, "id"], message: "Criterion IDs must be unique" });
+        }
+        criterionIds.add(criterion.id);
+      }
+    });
+    goalStartPacketSchema = z26.object({
+      version: z26.literal(1),
+      title: z26.string().trim().min(1),
+      description: z26.string().nullable(),
+      ownerAgentId: z26.string().uuid(),
+      activation: activateGoalSchema
+    }).strict().superRefine((value, ctx) => {
+      if (value.ownerAgentId !== value.activation.ownerAgentId) {
+        ctx.addIssue({
+          code: z26.ZodIssueCode.custom,
+          path: ["activation", "ownerAgentId"],
+          message: "Activation owner must match the packet owner"
+        });
+      }
+    });
+    previewGoalStartSchema = z26.object({
+      title: z26.string().trim().min(1),
+      context: z26.string().nullable(),
+      ownerAgentId: z26.string().uuid().nullable(),
+      targetTime: z26.coerce.date().nullable()
+    }).strict();
+    startGoalSchema = z26.object({
+      requestKey: z26.string().trim().min(1),
+      packetHash: sha256HexSchema,
+      packet: goalStartPacketSchema,
+      draftGoalId: z26.string().uuid().optional()
+    }).strict();
+    createGoalActivitySchema = z26.object({
+      summary: z26.string().trim().min(1),
+      activityKind: z26.enum(GOAL_ACTIVITY_KINDS).optional().nullable(),
+      commitmentRef: z26.string().trim().min(1).optional().nullable(),
+      runRef: z26.string().uuid().optional().nullable(),
+      evidenceRefs: z26.array(evidenceRefSchema).optional().default([]),
+      idempotencyKey: z26.string().trim().min(1).optional().nullable(),
+      occurredAt: z26.coerce.date().optional()
+    }).strict().superRefine((value, ctx) => {
+      if (value.activityKind === "closeout" && !value.runRef) {
+        ctx.addIssue({ code: z26.ZodIssueCode.custom, path: ["runRef"], message: "Closeout Activity requires a Run reference" });
+      }
+    });
+    assignGoalOwnerSchema = z26.object({
+      agentId: z26.string().uuid(),
+      authorityRef: z26.string().trim().min(1).optional().nullable()
+    }).strict();
+    goalFeedbackAttachmentSchema = z26.object({
+      name: z26.string().trim().min(1),
+      uri: evidenceRefSchema,
+      mimeType: z26.string().trim().min(1).optional(),
+      size: z26.number().int().nonnegative().optional()
+    }).strict();
+    createGoalFeedbackSchema = z26.object({
+      body: z26.string().trim().min(1),
+      attachments: z26.array(goalFeedbackAttachmentSchema).optional().default([]),
+      feedbackKind: z26.enum(GOAL_FEEDBACK_KINDS).optional().default("ordinary"),
+      idempotencyKey: z26.string().trim().min(1)
+    }).strict();
+    goalContractPatchSchema = z26.object({
+      outcomeStatement: z26.string().trim().min(1).optional(),
+      objectiveMode: z26.enum(GOAL_OBJECTIVE_MODES).optional(),
+      criteria: z26.array(criterionSchema).min(1).optional(),
+      autonomyEnvelope: jsonRecord.optional(),
+      humanAuthorities: jsonRecord.optional(),
+      evaluationPolicy: jsonRecord.optional(),
+      actionDeadline: z26.coerce.date().nullable().optional(),
+      evaluationDeadline: z26.coerce.date().nullable().optional()
+    }).strict().superRefine((value, ctx) => {
+      if (Object.keys(value).length === 0) {
+        ctx.addIssue({ code: z26.ZodIssueCode.custom, message: "At least one Contract field must change" });
+      }
+      if (value.evaluationDeadline && value.actionDeadline && value.evaluationDeadline < value.actionDeadline) {
+        ctx.addIssue({
+          code: z26.ZodIssueCode.custom,
+          path: ["evaluationDeadline"],
+          message: "Evaluation deadline must not precede action deadline"
+        });
+      }
+    });
+    createGoalChangeProposalSchema = z26.object({
+      expectedContractRevision: z26.number().int().positive(),
+      afterContract: goalContractPatchSchema,
+      rationale: z26.string().trim().min(1),
+      evidenceRefs: z26.array(evidenceRefSchema).optional().default([]),
+      approvalId: z26.string().uuid().optional().nullable(),
+      idempotencyKey: z26.string().trim().min(1)
+    }).strict();
+    decideGoalChangeProposalSchema = z26.object({
+      decision: z26.enum(["approve", "reject"]),
+      note: z26.string().trim().min(1).optional().nullable()
+    }).strict();
+    goalEvaluationCandidateFields = {
+      criteria: z26.array(z26.object({
+        id: z26.string().min(1),
+        status: z26.enum(["met", "unmet", "breached", "unknown"])
+      })).optional().default([]),
+      resultValue: z26.union([z26.string().trim().min(1), z26.number().finite(), z26.boolean()]).optional(),
+      decision: z26.string().trim().min(1).optional(),
+      resultPayload: jsonRecord.optional().default({})
+    };
+    goalEvaluationCandidateSchema = z26.object({
+      evidenceRefs: z26.array(evidenceRefSchema).min(1),
+      ...goalEvaluationCandidateFields
+    }).strict();
+    createGoalResultProposalSchema = z26.object({
+      evidenceRefs: z26.array(evidenceRefSchema),
+      ...goalEvaluationCandidateFields,
+      contractRevision: z26.number().int().positive(),
+      riskSummary: z26.string().trim().min(1),
+      idempotencyKey: z26.string().trim().min(1)
+    }).strict();
+    acceptGoalResultProposalSchema = z26.object({
+      idempotencyKey: z26.string().trim().min(1)
+    }).strict();
+    rejectGoalResultProposalSchema = z26.object({
+      idempotencyKey: z26.string().trim().min(1),
+      feedback: z26.string().trim().min(1)
+    }).strict();
+    evaluateGoalSchema = goalEvaluationCandidateSchema.extend({
+      resultProposalId: z26.string().uuid().optional()
+    });
+    setGoalFocusSchema = z26.object({
+      focus: z26.boolean()
+    }).strict();
   }
 });
 
 // ../packages/shared/dist/validators/approval.js
-import { z as z26 } from "zod";
+import { z as z27 } from "zod";
 var createApprovalSchema, resolveApprovalSchema, requestApprovalRevisionSchema, resubmitApprovalSchema, addApprovalCommentSchema;
 var init_approval = __esm({
   "../packages/shared/dist/validators/approval.js"() {
     "use strict";
     init_constants();
-    createApprovalSchema = z26.object({
-      type: z26.enum(APPROVAL_TYPES),
-      requestedByAgentId: z26.string().uuid().optional().nullable(),
-      payload: z26.record(z26.unknown()),
-      issueIds: z26.array(z26.string().uuid()).optional()
+    createApprovalSchema = z27.object({
+      type: z27.enum(APPROVAL_TYPES),
+      requestedByAgentId: z27.string().uuid().optional().nullable(),
+      payload: z27.record(z27.unknown()),
+      issueIds: z27.array(z27.string().uuid()).optional()
     });
-    resolveApprovalSchema = z26.object({
-      decisionNote: z26.string().optional().nullable(),
-      decidedByUserId: z26.string().optional().default("board"),
-      payload: z26.record(z26.unknown()).optional()
+    resolveApprovalSchema = z27.object({
+      decisionNote: z27.string().optional().nullable(),
+      decidedByUserId: z27.string().optional().default("board"),
+      payload: z27.record(z27.unknown()).optional()
     });
-    requestApprovalRevisionSchema = z26.object({
-      decisionNote: z26.string().optional().nullable(),
-      decidedByUserId: z26.string().optional().default("board")
+    requestApprovalRevisionSchema = z27.object({
+      decisionNote: z27.string().optional().nullable(),
+      decidedByUserId: z27.string().optional().default("board")
     });
-    resubmitApprovalSchema = z26.object({
-      payload: z26.record(z26.unknown()).optional()
+    resubmitApprovalSchema = z27.object({
+      payload: z27.record(z27.unknown()).optional()
     });
-    addApprovalCommentSchema = z26.object({
-      body: z26.string().min(1)
+    addApprovalCommentSchema = z27.object({
+      body: z27.string().min(1)
     });
   }
 });
 
 // ../packages/shared/dist/validators/automation.js
-import { z as z27 } from "zod";
+import { z as z28 } from "zod";
 function normalizeAutomationInstructions(value) {
   const { instructions, ...rest } = value;
   return {
@@ -3902,28 +4181,28 @@ var init_automation = __esm({
     "use strict";
     init_constants();
     init_issue();
-    automationTextFieldSchema = z27.string().optional().nullable();
-    automationBodyFieldsSchema = z27.object({
-      projectId: z27.string().uuid().optional().nullable().default(null),
-      goalId: z27.string().uuid().optional().nullable(),
-      parentIssueId: z27.string().uuid().optional().nullable(),
-      title: z27.string().trim().min(1).max(200),
+    automationTextFieldSchema = z28.string().optional().nullable();
+    automationBodyFieldsSchema = z28.object({
+      projectId: z28.string().uuid().optional().nullable().default(null),
+      goalId: z28.string().uuid().optional().nullable(),
+      parentIssueId: z28.string().uuid().optional().nullable(),
+      title: z28.string().trim().min(1).max(200),
       instructions: automationTextFieldSchema,
       description: automationTextFieldSchema,
-      assigneeAgentId: z27.string().uuid(),
+      assigneeAgentId: z28.string().uuid(),
       assigneeAgentRuntimeOverrides: issueAssigneeAdapterOverridesSchema.optional().nullable(),
-      priority: z27.enum(ISSUE_PRIORITIES).optional().default("medium"),
-      status: z27.enum(AUTOMATION_STATUSES).optional().default("active"),
-      concurrencyPolicy: z27.enum(AUTOMATION_CONCURRENCY_POLICIES).optional().default("coalesce_if_active"),
-      catchUpPolicy: z27.enum(AUTOMATION_CATCH_UP_POLICIES).optional().default("skip_missed"),
-      outputMode: z27.enum(AUTOMATION_OUTPUT_MODES).optional().default("track_issue"),
-      chatConversationId: z27.string().uuid().optional().nullable().default(null),
-      notifyOnIssueCreated: z27.boolean().optional().default(false)
+      priority: z28.enum(ISSUE_PRIORITIES).optional().default("medium"),
+      status: z28.enum(AUTOMATION_STATUSES).optional().default("active"),
+      concurrencyPolicy: z28.enum(AUTOMATION_CONCURRENCY_POLICIES).optional().default("coalesce_if_active"),
+      catchUpPolicy: z28.enum(AUTOMATION_CATCH_UP_POLICIES).optional().default("skip_missed"),
+      outputMode: z28.enum(AUTOMATION_OUTPUT_MODES).optional().default("track_issue"),
+      chatConversationId: z28.string().uuid().optional().nullable().default(null),
+      notifyOnIssueCreated: z28.boolean().optional().default(false)
     });
     createAutomationSchema = automationBodyFieldsSchema.superRefine((value, ctx) => {
       if (value.chatConversationId) {
         ctx.addIssue({
-          code: z27.ZodIssueCode.custom,
+          code: z28.ZodIssueCode.custom,
           path: ["chatConversationId"],
           message: "Chat output creates an automation-owned conversation; existing chats cannot be selected"
         });
@@ -3932,185 +4211,185 @@ var init_automation = __esm({
     updateAutomationSchema = automationBodyFieldsSchema.partial().superRefine((value, ctx) => {
       if (value.chatConversationId) {
         ctx.addIssue({
-          code: z27.ZodIssueCode.custom,
+          code: z28.ZodIssueCode.custom,
           path: ["chatConversationId"],
           message: "Chat output creates an automation-owned conversation; existing chats cannot be selected"
         });
       }
     }).transform(normalizeAutomationInstructions).transform(normalizeAutomationNotifications);
-    baseTriggerSchema = z27.object({
-      label: z27.string().trim().max(120).optional().nullable(),
-      enabled: z27.boolean().optional().default(true)
+    baseTriggerSchema = z28.object({
+      label: z28.string().trim().max(120).optional().nullable(),
+      enabled: z28.boolean().optional().default(true)
     });
-    createAutomationTriggerSchema = z27.discriminatedUnion("kind", [
+    createAutomationTriggerSchema = z28.discriminatedUnion("kind", [
       baseTriggerSchema.extend({
-        kind: z27.literal("schedule"),
-        cronExpression: z27.string().trim().min(1),
-        timezone: z27.string().trim().min(1).default("UTC")
+        kind: z28.literal("schedule"),
+        cronExpression: z28.string().trim().min(1),
+        timezone: z28.string().trim().min(1).default("UTC")
       }),
       baseTriggerSchema.extend({
-        kind: z27.literal("webhook"),
-        signingMode: z27.enum(AUTOMATION_TRIGGER_SIGNING_MODES).optional().default("bearer"),
-        replayWindowSec: z27.number().int().min(30).max(86400).optional().default(300)
+        kind: z28.literal("webhook"),
+        signingMode: z28.enum(AUTOMATION_TRIGGER_SIGNING_MODES).optional().default("bearer"),
+        replayWindowSec: z28.number().int().min(30).max(86400).optional().default(300)
       }),
       baseTriggerSchema.extend({
-        kind: z27.literal("api")
+        kind: z28.literal("api")
       })
     ]);
-    updateAutomationTriggerSchema = z27.object({
-      label: z27.string().trim().max(120).optional().nullable(),
-      enabled: z27.boolean().optional(),
-      cronExpression: z27.string().trim().min(1).optional().nullable(),
-      timezone: z27.string().trim().min(1).optional().nullable(),
-      signingMode: z27.enum(AUTOMATION_TRIGGER_SIGNING_MODES).optional().nullable(),
-      replayWindowSec: z27.number().int().min(30).max(86400).optional().nullable()
+    updateAutomationTriggerSchema = z28.object({
+      label: z28.string().trim().max(120).optional().nullable(),
+      enabled: z28.boolean().optional(),
+      cronExpression: z28.string().trim().min(1).optional().nullable(),
+      timezone: z28.string().trim().min(1).optional().nullable(),
+      signingMode: z28.enum(AUTOMATION_TRIGGER_SIGNING_MODES).optional().nullable(),
+      replayWindowSec: z28.number().int().min(30).max(86400).optional().nullable()
     });
-    runAutomationSchema = z27.object({
-      triggerId: z27.string().uuid().optional().nullable(),
-      payload: z27.record(z27.unknown()).optional().nullable(),
-      idempotencyKey: z27.string().trim().max(255).optional().nullable(),
-      source: z27.enum(["manual", "api"]).optional().default("manual")
+    runAutomationSchema = z28.object({
+      triggerId: z28.string().uuid().optional().nullable(),
+      payload: z28.record(z28.unknown()).optional().nullable(),
+      idempotencyKey: z28.string().trim().max(255).optional().nullable(),
+      source: z28.enum(["manual", "api"]).optional().default("manual")
     });
-    rotateAutomationTriggerSecretSchema = z27.object({});
+    rotateAutomationTriggerSecretSchema = z28.object({});
   }
 });
 
 // ../packages/shared/dist/validators/calendar.js
-import { z as z28 } from "zod";
+import { z as z29 } from "zod";
 var nullableUuid, createCalendarSourceSchema, updateCalendarSourceSchema, calendarEventBaseSchema, createCalendarEventSchema, updateCalendarEventSchema, calendarEventListQuerySchema, googleCalendarSyncSchema, updateGoogleCalendarOAuthConfigSchema;
 var init_calendar = __esm({
   "../packages/shared/dist/validators/calendar.js"() {
     "use strict";
     init_constants();
-    nullableUuid = z28.string().uuid().optional().nullable();
-    createCalendarSourceSchema = z28.object({
-      type: z28.enum(CALENDAR_SOURCE_TYPES).optional().default("rudder_local"),
-      name: z28.string().trim().min(1).max(160),
-      ownerType: z28.enum(CALENDAR_OWNER_TYPES).optional().default("user"),
-      ownerUserId: z28.string().trim().min(1).optional().nullable(),
+    nullableUuid = z29.string().uuid().optional().nullable();
+    createCalendarSourceSchema = z29.object({
+      type: z29.enum(CALENDAR_SOURCE_TYPES).optional().default("rudder_local"),
+      name: z29.string().trim().min(1).max(160),
+      ownerType: z29.enum(CALENDAR_OWNER_TYPES).optional().default("user"),
+      ownerUserId: z29.string().trim().min(1).optional().nullable(),
       ownerAgentId: nullableUuid,
-      externalProvider: z28.string().trim().min(1).max(80).optional().nullable(),
-      externalCalendarId: z28.string().trim().min(1).max(512).optional().nullable(),
-      visibilityDefault: z28.enum(CALENDAR_VISIBILITIES).optional().default("full"),
-      status: z28.enum(CALENDAR_SOURCE_STATUSES).optional().default("active"),
-      syncCursorJson: z28.record(z28.unknown()).optional().nullable()
+      externalProvider: z29.string().trim().min(1).max(80).optional().nullable(),
+      externalCalendarId: z29.string().trim().min(1).max(512).optional().nullable(),
+      visibilityDefault: z29.enum(CALENDAR_VISIBILITIES).optional().default("full"),
+      status: z29.enum(CALENDAR_SOURCE_STATUSES).optional().default("active"),
+      syncCursorJson: z29.record(z29.unknown()).optional().nullable()
     });
     updateCalendarSourceSchema = createCalendarSourceSchema.partial().extend({
-      lastSyncedAt: z28.coerce.date().optional().nullable()
+      lastSyncedAt: z29.coerce.date().optional().nullable()
     });
-    calendarEventBaseSchema = z28.object({
+    calendarEventBaseSchema = z29.object({
       sourceId: nullableUuid,
-      eventKind: z28.enum(CALENDAR_EVENT_KINDS),
-      eventStatus: z28.enum(CALENDAR_EVENT_STATUSES).optional().default("planned"),
-      ownerType: z28.enum(CALENDAR_OWNER_TYPES),
-      ownerUserId: z28.string().trim().min(1).optional().nullable(),
+      eventKind: z29.enum(CALENDAR_EVENT_KINDS),
+      eventStatus: z29.enum(CALENDAR_EVENT_STATUSES).optional().default("planned"),
+      ownerType: z29.enum(CALENDAR_OWNER_TYPES),
+      ownerUserId: z29.string().trim().min(1).optional().nullable(),
       ownerAgentId: nullableUuid,
-      title: z28.string().trim().min(1).max(240),
-      description: z28.string().optional().nullable(),
-      startAt: z28.coerce.date(),
-      endAt: z28.coerce.date(),
-      timezone: z28.string().trim().min(1).max(80).optional().default("UTC"),
-      allDay: z28.boolean().optional().default(false),
-      visibility: z28.enum(CALENDAR_VISIBILITIES).optional().default("full"),
+      title: z29.string().trim().min(1).max(240),
+      description: z29.string().optional().nullable(),
+      startAt: z29.coerce.date(),
+      endAt: z29.coerce.date(),
+      timezone: z29.string().trim().min(1).max(80).optional().default("UTC"),
+      allDay: z29.boolean().optional().default(false),
+      visibility: z29.enum(CALENDAR_VISIBILITIES).optional().default("full"),
       issueId: nullableUuid,
       projectId: nullableUuid,
       goalId: nullableUuid,
       approvalId: nullableUuid,
       heartbeatRunId: nullableUuid,
       activityId: nullableUuid,
-      sourceMode: z28.enum(CALENDAR_SOURCE_MODES).optional().default("manual"),
-      externalProvider: z28.string().trim().min(1).max(80).optional().nullable(),
-      externalCalendarId: z28.string().trim().min(1).max(512).optional().nullable(),
-      externalEventId: z28.string().trim().min(1).max(512).optional().nullable(),
-      externalEtag: z28.string().trim().min(1).max(512).optional().nullable(),
-      externalUpdatedAt: z28.coerce.date().optional().nullable()
+      sourceMode: z29.enum(CALENDAR_SOURCE_MODES).optional().default("manual"),
+      externalProvider: z29.string().trim().min(1).max(80).optional().nullable(),
+      externalCalendarId: z29.string().trim().min(1).max(512).optional().nullable(),
+      externalEventId: z29.string().trim().min(1).max(512).optional().nullable(),
+      externalEtag: z29.string().trim().min(1).max(512).optional().nullable(),
+      externalUpdatedAt: z29.coerce.date().optional().nullable()
     });
     createCalendarEventSchema = calendarEventBaseSchema.refine((value) => value.endAt.getTime() > value.startAt.getTime(), { path: ["endAt"], message: "End time must be after start time" });
     updateCalendarEventSchema = calendarEventBaseSchema.partial().refine((value) => value.startAt === void 0 || value.endAt === void 0 || value.endAt.getTime() > value.startAt.getTime(), { path: ["endAt"], message: "End time must be after start time" });
-    calendarEventListQuerySchema = z28.object({
-      start: z28.coerce.date(),
-      end: z28.coerce.date(),
-      agentIds: z28.string().optional(),
-      sourceIds: z28.string().optional(),
-      eventKinds: z28.string().optional(),
-      statuses: z28.string().optional()
+    calendarEventListQuerySchema = z29.object({
+      start: z29.coerce.date(),
+      end: z29.coerce.date(),
+      agentIds: z29.string().optional(),
+      sourceIds: z29.string().optional(),
+      eventKinds: z29.string().optional(),
+      statuses: z29.string().optional()
     }).refine((value) => value.end.getTime() > value.start.getTime(), { path: ["end"], message: "End time must be after start time" });
-    googleCalendarSyncSchema = z28.object({
-      sourceId: z28.string().uuid().optional().nullable()
+    googleCalendarSyncSchema = z29.object({
+      sourceId: z29.string().uuid().optional().nullable()
     });
-    updateGoogleCalendarOAuthConfigSchema = z28.object({
-      clientId: z28.string().trim().min(1).max(512).optional(),
-      clientSecret: z28.string().trim().min(1).max(2048).optional(),
-      clear: z28.boolean().optional().default(false)
+    updateGoogleCalendarOAuthConfigSchema = z29.object({
+      clientId: z29.string().trim().min(1).max(512).optional(),
+      clientSecret: z29.string().trim().min(1).max(2048).optional(),
+      clear: z29.boolean().optional().default(false)
     }).refine((value) => value.clear || value.clientId !== void 0 || value.clientSecret !== void 0, { message: "Provide credentials or clear the stored Google Calendar OAuth configuration" });
   }
 });
 
 // ../packages/shared/dist/validators/cost.js
-import { z as z29 } from "zod";
+import { z as z30 } from "zod";
 var createCostEventSchema, updateBudgetSchema;
 var init_cost = __esm({
   "../packages/shared/dist/validators/cost.js"() {
     "use strict";
     init_constants();
-    createCostEventSchema = z29.object({
-      agentId: z29.string().uuid(),
-      issueId: z29.string().uuid().optional().nullable(),
-      projectId: z29.string().uuid().optional().nullable(),
-      goalId: z29.string().uuid().optional().nullable(),
-      heartbeatRunId: z29.string().uuid().optional().nullable(),
-      billingCode: z29.string().optional().nullable(),
-      provider: z29.string().min(1),
-      biller: z29.string().min(1).optional(),
-      billingType: z29.enum(BILLING_TYPES).optional().default("unknown"),
-      model: z29.string().min(1),
-      inputTokens: z29.number().int().nonnegative().optional().default(0),
-      cachedInputTokens: z29.number().int().nonnegative().optional().default(0),
-      outputTokens: z29.number().int().nonnegative().optional().default(0),
-      costCents: z29.number().int().nonnegative(),
-      occurredAt: z29.string().datetime()
+    createCostEventSchema = z30.object({
+      agentId: z30.string().uuid(),
+      issueId: z30.string().uuid().optional().nullable(),
+      projectId: z30.string().uuid().optional().nullable(),
+      goalId: z30.string().uuid().optional().nullable(),
+      heartbeatRunId: z30.string().uuid().optional().nullable(),
+      billingCode: z30.string().optional().nullable(),
+      provider: z30.string().min(1),
+      biller: z30.string().min(1).optional(),
+      billingType: z30.enum(BILLING_TYPES).optional().default("unknown"),
+      model: z30.string().min(1),
+      inputTokens: z30.number().int().nonnegative().optional().default(0),
+      cachedInputTokens: z30.number().int().nonnegative().optional().default(0),
+      outputTokens: z30.number().int().nonnegative().optional().default(0),
+      costCents: z30.number().int().nonnegative(),
+      occurredAt: z30.string().datetime()
     }).transform((value) => ({
       ...value,
       biller: value.biller ?? value.provider
     }));
-    updateBudgetSchema = z29.object({
-      budgetMonthlyCents: z29.number().int().nonnegative()
+    updateBudgetSchema = z30.object({
+      budgetMonthlyCents: z30.number().int().nonnegative()
     });
   }
 });
 
 // ../packages/shared/dist/validators/finance.js
-import { z as z30 } from "zod";
+import { z as z31 } from "zod";
 var createFinanceEventSchema;
 var init_finance = __esm({
   "../packages/shared/dist/validators/finance.js"() {
     "use strict";
     init_constants();
-    createFinanceEventSchema = z30.object({
-      agentId: z30.string().uuid().optional().nullable(),
-      issueId: z30.string().uuid().optional().nullable(),
-      projectId: z30.string().uuid().optional().nullable(),
-      goalId: z30.string().uuid().optional().nullable(),
-      heartbeatRunId: z30.string().uuid().optional().nullable(),
-      costEventId: z30.string().uuid().optional().nullable(),
-      billingCode: z30.string().optional().nullable(),
-      description: z30.string().max(500).optional().nullable(),
-      eventKind: z30.enum(FINANCE_EVENT_KINDS),
-      direction: z30.enum(FINANCE_DIRECTIONS).optional().default("debit"),
-      biller: z30.string().min(1),
-      provider: z30.string().min(1).optional().nullable(),
-      executionAgentRuntimeType: z30.enum(AGENT_RUNTIME_TYPES).optional().nullable(),
-      pricingTier: z30.string().min(1).optional().nullable(),
-      region: z30.string().min(1).optional().nullable(),
-      model: z30.string().min(1).optional().nullable(),
-      quantity: z30.number().int().nonnegative().optional().nullable(),
-      unit: z30.enum(FINANCE_UNITS).optional().nullable(),
-      amountCents: z30.number().int().nonnegative(),
-      currency: z30.string().length(3).optional().default("USD"),
-      estimated: z30.boolean().optional().default(false),
-      externalInvoiceId: z30.string().optional().nullable(),
-      metadataJson: z30.record(z30.string(), z30.unknown()).optional().nullable(),
-      occurredAt: z30.string().datetime()
+    createFinanceEventSchema = z31.object({
+      agentId: z31.string().uuid().optional().nullable(),
+      issueId: z31.string().uuid().optional().nullable(),
+      projectId: z31.string().uuid().optional().nullable(),
+      goalId: z31.string().uuid().optional().nullable(),
+      heartbeatRunId: z31.string().uuid().optional().nullable(),
+      costEventId: z31.string().uuid().optional().nullable(),
+      billingCode: z31.string().optional().nullable(),
+      description: z31.string().max(500).optional().nullable(),
+      eventKind: z31.enum(FINANCE_EVENT_KINDS),
+      direction: z31.enum(FINANCE_DIRECTIONS).optional().default("debit"),
+      biller: z31.string().min(1),
+      provider: z31.string().min(1).optional().nullable(),
+      executionAgentRuntimeType: z31.enum(AGENT_RUNTIME_TYPES).optional().nullable(),
+      pricingTier: z31.string().min(1).optional().nullable(),
+      region: z31.string().min(1).optional().nullable(),
+      model: z31.string().min(1).optional().nullable(),
+      quantity: z31.number().int().nonnegative().optional().nullable(),
+      unit: z31.enum(FINANCE_UNITS).optional().nullable(),
+      amountCents: z31.number().int().nonnegative(),
+      currency: z31.string().length(3).optional().default("USD"),
+      estimated: z31.boolean().optional().default(false),
+      externalInvoiceId: z31.string().optional().nullable(),
+      metadataJson: z31.record(z31.string(), z31.unknown()).optional().nullable(),
+      occurredAt: z31.string().datetime()
     }).transform((value) => ({
       ...value,
       currency: value.currency.toUpperCase()
@@ -4119,79 +4398,79 @@ var init_finance = __esm({
 });
 
 // ../packages/shared/dist/validators/asset.js
-import { z as z31 } from "zod";
+import { z as z32 } from "zod";
 var createAssetImageMetadataSchema;
 var init_asset = __esm({
   "../packages/shared/dist/validators/asset.js"() {
     "use strict";
-    createAssetImageMetadataSchema = z31.object({
-      namespace: z31.string().trim().min(1).max(120).regex(/^[a-zA-Z0-9/_-]+$/).optional()
+    createAssetImageMetadataSchema = z32.object({
+      namespace: z32.string().trim().min(1).max(120).regex(/^[a-zA-Z0-9/_-]+$/).optional()
     });
   }
 });
 
 // ../packages/shared/dist/validators/access.js
-import { z as z32 } from "zod";
+import { z as z33 } from "zod";
 var createCompanyInviteSchema, createOpenClawInvitePromptSchema, acceptInviteSchema, listJoinRequestsQuerySchema, claimJoinRequestApiKeySchema, boardCliAuthAccessLevelSchema, createCliAuthChallengeSchema, resolveCliAuthChallengeSchema, updateMemberPermissionsSchema, updateUserCompanyAccessSchema;
 var init_access = __esm({
   "../packages/shared/dist/validators/access.js"() {
     "use strict";
     init_constants();
-    createCompanyInviteSchema = z32.object({
-      allowedJoinTypes: z32.enum(INVITE_JOIN_TYPES).default("both"),
-      defaultsPayload: z32.record(z32.string(), z32.unknown()).optional().nullable(),
-      agentMessage: z32.string().max(4e3).optional().nullable()
+    createCompanyInviteSchema = z33.object({
+      allowedJoinTypes: z33.enum(INVITE_JOIN_TYPES).default("both"),
+      defaultsPayload: z33.record(z33.string(), z33.unknown()).optional().nullable(),
+      agentMessage: z33.string().max(4e3).optional().nullable()
     });
-    createOpenClawInvitePromptSchema = z32.object({
-      agentMessage: z32.string().max(4e3).optional().nullable()
+    createOpenClawInvitePromptSchema = z33.object({
+      agentMessage: z33.string().max(4e3).optional().nullable()
     });
-    acceptInviteSchema = z32.object({
-      requestType: z32.enum(JOIN_REQUEST_TYPES),
-      agentName: z32.string().min(1).max(120).optional(),
-      agentRuntimeType: z32.enum(AGENT_RUNTIME_TYPES).optional(),
-      capabilities: z32.string().max(4e3).optional().nullable(),
-      agentDefaultsPayload: z32.record(z32.string(), z32.unknown()).optional().nullable(),
+    acceptInviteSchema = z33.object({
+      requestType: z33.enum(JOIN_REQUEST_TYPES),
+      agentName: z33.string().min(1).max(120).optional(),
+      agentRuntimeType: z33.enum(AGENT_RUNTIME_TYPES).optional(),
+      capabilities: z33.string().max(4e3).optional().nullable(),
+      agentDefaultsPayload: z33.record(z33.string(), z33.unknown()).optional().nullable(),
       // OpenClaw join compatibility fields accepted at top level.
-      responsesWebhookUrl: z32.string().max(4e3).optional().nullable(),
-      responsesWebhookMethod: z32.string().max(32).optional().nullable(),
-      responsesWebhookHeaders: z32.record(z32.string(), z32.unknown()).optional().nullable(),
-      rudderApiUrl: z32.string().max(4e3).optional().nullable(),
-      webhookAuthHeader: z32.string().max(4e3).optional().nullable()
+      responsesWebhookUrl: z33.string().max(4e3).optional().nullable(),
+      responsesWebhookMethod: z33.string().max(32).optional().nullable(),
+      responsesWebhookHeaders: z33.record(z33.string(), z33.unknown()).optional().nullable(),
+      rudderApiUrl: z33.string().max(4e3).optional().nullable(),
+      webhookAuthHeader: z33.string().max(4e3).optional().nullable()
     });
-    listJoinRequestsQuerySchema = z32.object({
-      status: z32.enum(JOIN_REQUEST_STATUSES).optional(),
-      requestType: z32.enum(JOIN_REQUEST_TYPES).optional()
+    listJoinRequestsQuerySchema = z33.object({
+      status: z33.enum(JOIN_REQUEST_STATUSES).optional(),
+      requestType: z33.enum(JOIN_REQUEST_TYPES).optional()
     });
-    claimJoinRequestApiKeySchema = z32.object({
-      claimSecret: z32.string().min(16).max(256)
+    claimJoinRequestApiKeySchema = z33.object({
+      claimSecret: z33.string().min(16).max(256)
     });
-    boardCliAuthAccessLevelSchema = z32.enum([
+    boardCliAuthAccessLevelSchema = z33.enum([
       "board",
       "instance_admin_required"
     ]);
-    createCliAuthChallengeSchema = z32.object({
-      command: z32.string().min(1).max(240),
-      clientName: z32.string().max(120).optional().nullable(),
+    createCliAuthChallengeSchema = z33.object({
+      command: z33.string().min(1).max(240),
+      clientName: z33.string().max(120).optional().nullable(),
       requestedAccess: boardCliAuthAccessLevelSchema.default("board"),
-      requestedCompanyId: z32.string().uuid().optional().nullable()
+      requestedCompanyId: z33.string().uuid().optional().nullable()
     });
-    resolveCliAuthChallengeSchema = z32.object({
-      token: z32.string().min(16).max(256)
+    resolveCliAuthChallengeSchema = z33.object({
+      token: z33.string().min(16).max(256)
     });
-    updateMemberPermissionsSchema = z32.object({
-      grants: z32.array(z32.object({
-        permissionKey: z32.enum(PERMISSION_KEYS),
-        scope: z32.record(z32.string(), z32.unknown()).optional().nullable()
+    updateMemberPermissionsSchema = z33.object({
+      grants: z33.array(z33.object({
+        permissionKey: z33.enum(PERMISSION_KEYS),
+        scope: z33.record(z33.string(), z33.unknown()).optional().nullable()
       }))
     });
-    updateUserCompanyAccessSchema = z32.object({
-      orgIds: z32.array(z32.string().uuid()).default([])
+    updateUserCompanyAccessSchema = z33.object({
+      orgIds: z33.array(z33.string().uuid()).default([])
     });
   }
 });
 
 // ../packages/shared/dist/validators/plugin.js
-import { z as z33 } from "zod";
+import { z as z34 } from "zod";
 function isValidCronExpression(expression) {
   const trimmed = expression.trim();
   if (!trimmed)
@@ -4206,79 +4485,79 @@ var init_plugin = __esm({
   "../packages/shared/dist/validators/plugin.js"() {
     "use strict";
     init_constants();
-    jsonSchemaSchema = z33.record(z33.unknown()).refine((val) => {
+    jsonSchemaSchema = z34.record(z34.unknown()).refine((val) => {
       if (Object.keys(val).length === 0)
         return true;
       return typeof val.type === "string" || val.$ref !== void 0 || val.oneOf !== void 0 || val.anyOf !== void 0 || val.allOf !== void 0;
     }, { message: "Must be a valid JSON Schema object (requires at least a 'type', '$ref', or composition keyword)" });
     CRON_FIELD_PATTERN = /^(\*(?:\/[0-9]+)?|[0-9]+(?:-[0-9]+)?(?:\/[0-9]+)?)(?:,(\*(?:\/[0-9]+)?|[0-9]+(?:-[0-9]+)?(?:\/[0-9]+)?))*$/;
-    pluginJobDeclarationSchema = z33.object({
-      jobKey: z33.string().min(1),
-      displayName: z33.string().min(1),
-      description: z33.string().optional(),
-      schedule: z33.string().refine((val) => isValidCronExpression(val), { message: "schedule must be a valid 5-field cron expression (e.g. '*/15 * * * *')" }).optional()
+    pluginJobDeclarationSchema = z34.object({
+      jobKey: z34.string().min(1),
+      displayName: z34.string().min(1),
+      description: z34.string().optional(),
+      schedule: z34.string().refine((val) => isValidCronExpression(val), { message: "schedule must be a valid 5-field cron expression (e.g. '*/15 * * * *')" }).optional()
     });
-    pluginWebhookDeclarationSchema = z33.object({
-      endpointKey: z33.string().min(1),
-      displayName: z33.string().min(1),
-      description: z33.string().optional()
+    pluginWebhookDeclarationSchema = z34.object({
+      endpointKey: z34.string().min(1),
+      displayName: z34.string().min(1),
+      description: z34.string().optional()
     });
-    pluginToolDeclarationSchema = z33.object({
-      name: z33.string().min(1),
-      displayName: z33.string().min(1),
-      description: z33.string().min(1),
+    pluginToolDeclarationSchema = z34.object({
+      name: z34.string().min(1),
+      displayName: z34.string().min(1),
+      description: z34.string().min(1),
       parametersSchema: jsonSchemaSchema
     });
-    pluginUiSlotDeclarationSchema = z33.object({
-      type: z33.enum(PLUGIN_UI_SLOT_TYPES),
-      id: z33.string().min(1),
-      displayName: z33.string().min(1),
-      exportName: z33.string().min(1),
-      entityTypes: z33.array(z33.enum(PLUGIN_UI_SLOT_ENTITY_TYPES)).optional(),
-      routePath: z33.string().regex(/^[a-z0-9][a-z0-9-]*$/, {
+    pluginUiSlotDeclarationSchema = z34.object({
+      type: z34.enum(PLUGIN_UI_SLOT_TYPES),
+      id: z34.string().min(1),
+      displayName: z34.string().min(1),
+      exportName: z34.string().min(1),
+      entityTypes: z34.array(z34.enum(PLUGIN_UI_SLOT_ENTITY_TYPES)).optional(),
+      routePath: z34.string().regex(/^[a-z0-9][a-z0-9-]*$/, {
         message: "routePath must be a lowercase single-segment slug (letters, numbers, hyphens)"
       }).optional(),
-      order: z33.number().int().optional()
+      order: z34.number().int().optional()
     }).superRefine((value, ctx) => {
       const entityScopedTypes = ["detailTab", "taskDetailView", "contextMenuItem", "commentAnnotation", "commentContextMenuItem", "projectSidebarItem"];
       if (entityScopedTypes.includes(value.type) && (!value.entityTypes || value.entityTypes.length === 0)) {
         ctx.addIssue({
-          code: z33.ZodIssueCode.custom,
+          code: z34.ZodIssueCode.custom,
           message: `${value.type} slots require at least one entityType`,
           path: ["entityTypes"]
         });
       }
       if (value.type === "projectSidebarItem" && value.entityTypes && !value.entityTypes.includes("project")) {
         ctx.addIssue({
-          code: z33.ZodIssueCode.custom,
+          code: z34.ZodIssueCode.custom,
           message: 'projectSidebarItem slots require entityTypes to include "project"',
           path: ["entityTypes"]
         });
       }
       if (value.type === "commentAnnotation" && value.entityTypes && !value.entityTypes.includes("comment")) {
         ctx.addIssue({
-          code: z33.ZodIssueCode.custom,
+          code: z34.ZodIssueCode.custom,
           message: 'commentAnnotation slots require entityTypes to include "comment"',
           path: ["entityTypes"]
         });
       }
       if (value.type === "commentContextMenuItem" && value.entityTypes && !value.entityTypes.includes("comment")) {
         ctx.addIssue({
-          code: z33.ZodIssueCode.custom,
+          code: z34.ZodIssueCode.custom,
           message: 'commentContextMenuItem slots require entityTypes to include "comment"',
           path: ["entityTypes"]
         });
       }
       if (value.routePath && value.type !== "page") {
         ctx.addIssue({
-          code: z33.ZodIssueCode.custom,
+          code: z34.ZodIssueCode.custom,
           message: "routePath is only supported for page slots",
           path: ["routePath"]
         });
       }
       if (value.routePath && PLUGIN_RESERVED_COMPANY_ROUTE_SEGMENTS.includes(value.routePath)) {
         ctx.addIssue({
-          code: z33.ZodIssueCode.custom,
+          code: z34.ZodIssueCode.custom,
           message: `routePath "${value.routePath}" is reserved by the host`,
           path: ["routePath"]
         });
@@ -4299,29 +4578,29 @@ var init_plugin = __esm({
       external: [],
       iframe: ["compact", "default", "wide", "full"]
     };
-    pluginLauncherActionDeclarationSchema = z33.object({
-      type: z33.enum(PLUGIN_LAUNCHER_ACTIONS),
-      target: z33.string().min(1),
-      params: z33.record(z33.unknown()).optional()
+    pluginLauncherActionDeclarationSchema = z34.object({
+      type: z34.enum(PLUGIN_LAUNCHER_ACTIONS),
+      target: z34.string().min(1),
+      params: z34.record(z34.unknown()).optional()
     }).superRefine((value, ctx) => {
       if (value.type === "performAction" && value.target.includes("/")) {
         ctx.addIssue({
-          code: z33.ZodIssueCode.custom,
+          code: z34.ZodIssueCode.custom,
           message: "performAction launchers must target an action key, not a route or URL",
           path: ["target"]
         });
       }
       if (value.type === "navigate" && /^https?:\/\//.test(value.target)) {
         ctx.addIssue({
-          code: z33.ZodIssueCode.custom,
+          code: z34.ZodIssueCode.custom,
           message: "navigate launchers must target a host route, not an absolute URL",
           path: ["target"]
         });
       }
     });
-    pluginLauncherRenderDeclarationSchema = z33.object({
-      environment: z33.enum(PLUGIN_LAUNCHER_RENDER_ENVIRONMENTS),
-      bounds: z33.enum(PLUGIN_LAUNCHER_BOUNDS).optional()
+    pluginLauncherRenderDeclarationSchema = z34.object({
+      environment: z34.enum(PLUGIN_LAUNCHER_RENDER_ENVIRONMENTS),
+      bounds: z34.enum(PLUGIN_LAUNCHER_BOUNDS).optional()
     }).superRefine((value, ctx) => {
       if (!value.bounds) {
         return;
@@ -4329,110 +4608,110 @@ var init_plugin = __esm({
       const supportedBounds = launcherBoundsByEnvironment[value.environment];
       if (!supportedBounds.includes(value.bounds)) {
         ctx.addIssue({
-          code: z33.ZodIssueCode.custom,
+          code: z34.ZodIssueCode.custom,
           message: `bounds "${value.bounds}" is not supported for render environment "${value.environment}"`,
           path: ["bounds"]
         });
       }
     });
-    pluginLauncherDeclarationSchema = z33.object({
-      id: z33.string().min(1),
-      displayName: z33.string().min(1),
-      description: z33.string().optional(),
-      placementZone: z33.enum(PLUGIN_LAUNCHER_PLACEMENT_ZONES),
-      exportName: z33.string().min(1).optional(),
-      entityTypes: z33.array(z33.enum(PLUGIN_UI_SLOT_ENTITY_TYPES)).optional(),
-      order: z33.number().int().optional(),
+    pluginLauncherDeclarationSchema = z34.object({
+      id: z34.string().min(1),
+      displayName: z34.string().min(1),
+      description: z34.string().optional(),
+      placementZone: z34.enum(PLUGIN_LAUNCHER_PLACEMENT_ZONES),
+      exportName: z34.string().min(1).optional(),
+      entityTypes: z34.array(z34.enum(PLUGIN_UI_SLOT_ENTITY_TYPES)).optional(),
+      order: z34.number().int().optional(),
       action: pluginLauncherActionDeclarationSchema,
       render: pluginLauncherRenderDeclarationSchema.optional()
     }).superRefine((value, ctx) => {
       if (entityScopedLauncherPlacementZones.some((zone) => zone === value.placementZone) && (!value.entityTypes || value.entityTypes.length === 0)) {
         ctx.addIssue({
-          code: z33.ZodIssueCode.custom,
+          code: z34.ZodIssueCode.custom,
           message: `${value.placementZone} launchers require at least one entityType`,
           path: ["entityTypes"]
         });
       }
       if (value.placementZone === "projectSidebarItem" && value.entityTypes && !value.entityTypes.includes("project")) {
         ctx.addIssue({
-          code: z33.ZodIssueCode.custom,
+          code: z34.ZodIssueCode.custom,
           message: 'projectSidebarItem launchers require entityTypes to include "project"',
           path: ["entityTypes"]
         });
       }
       if (value.action.type === "performAction" && value.render) {
         ctx.addIssue({
-          code: z33.ZodIssueCode.custom,
+          code: z34.ZodIssueCode.custom,
           message: "performAction launchers cannot declare render hints",
           path: ["render"]
         });
       }
       if (["openModal", "openDrawer", "openPopover"].includes(value.action.type) && !value.render) {
         ctx.addIssue({
-          code: z33.ZodIssueCode.custom,
+          code: z34.ZodIssueCode.custom,
           message: `${value.action.type} launchers require render metadata`,
           path: ["render"]
         });
       }
       if (value.action.type === "openModal" && value.render?.environment === "hostInline") {
         ctx.addIssue({
-          code: z33.ZodIssueCode.custom,
+          code: z34.ZodIssueCode.custom,
           message: "openModal launchers cannot use the hostInline render environment",
           path: ["render", "environment"]
         });
       }
       if (value.action.type === "openDrawer" && value.render && !["hostOverlay", "iframe"].includes(value.render.environment)) {
         ctx.addIssue({
-          code: z33.ZodIssueCode.custom,
+          code: z34.ZodIssueCode.custom,
           message: "openDrawer launchers must use hostOverlay or iframe render environments",
           path: ["render", "environment"]
         });
       }
       if (value.action.type === "openPopover" && value.render?.environment === "hostRoute") {
         ctx.addIssue({
-          code: z33.ZodIssueCode.custom,
+          code: z34.ZodIssueCode.custom,
           message: "openPopover launchers cannot use the hostRoute render environment",
           path: ["render", "environment"]
         });
       }
     });
-    pluginManifestV1Schema = z33.object({
-      id: z33.string().min(1).regex(/^[a-z0-9][a-z0-9._-]*$/, "Plugin id must start with a lowercase alphanumeric and contain only lowercase letters, digits, dots, hyphens, or underscores"),
-      apiVersion: z33.literal(1),
-      version: z33.string().min(1).regex(/^\d+\.\d+\.\d+(-[0-9A-Za-z-]+(\.[0-9A-Za-z-]+)*)?(\+[0-9A-Za-z-]+(\.[0-9A-Za-z-]+)*)?$/, "Version must follow semver (e.g. 1.0.0 or 1.0.0-beta.1)"),
-      displayName: z33.string().min(1).max(100),
-      description: z33.string().min(1).max(500),
-      author: z33.string().min(1).max(200),
-      categories: z33.array(z33.enum(PLUGIN_CATEGORIES)).min(1),
-      minimumHostVersion: z33.string().regex(/^\d+\.\d+\.\d+(-[0-9A-Za-z-]+(\.[0-9A-Za-z-]+)*)?(\+[0-9A-Za-z-]+(\.[0-9A-Za-z-]+)*)?$/, "minimumHostVersion must follow semver (e.g. 1.0.0)").optional(),
-      minimumPaperclipVersion: z33.string().regex(/^\d+\.\d+\.\d+(-[0-9A-Za-z-]+(\.[0-9A-Za-z-]+)*)?(\+[0-9A-Za-z-]+(\.[0-9A-Za-z-]+)*)?$/, "minimumPaperclipVersion must follow semver (e.g. 1.0.0)").optional(),
-      capabilities: z33.array(z33.enum(PLUGIN_CAPABILITIES)).min(1),
-      entrypoints: z33.object({
-        worker: z33.string().min(1),
-        ui: z33.string().min(1).optional()
+    pluginManifestV1Schema = z34.object({
+      id: z34.string().min(1).regex(/^[a-z0-9][a-z0-9._-]*$/, "Plugin id must start with a lowercase alphanumeric and contain only lowercase letters, digits, dots, hyphens, or underscores"),
+      apiVersion: z34.literal(1),
+      version: z34.string().min(1).regex(/^\d+\.\d+\.\d+(-[0-9A-Za-z-]+(\.[0-9A-Za-z-]+)*)?(\+[0-9A-Za-z-]+(\.[0-9A-Za-z-]+)*)?$/, "Version must follow semver (e.g. 1.0.0 or 1.0.0-beta.1)"),
+      displayName: z34.string().min(1).max(100),
+      description: z34.string().min(1).max(500),
+      author: z34.string().min(1).max(200),
+      categories: z34.array(z34.enum(PLUGIN_CATEGORIES)).min(1),
+      minimumHostVersion: z34.string().regex(/^\d+\.\d+\.\d+(-[0-9A-Za-z-]+(\.[0-9A-Za-z-]+)*)?(\+[0-9A-Za-z-]+(\.[0-9A-Za-z-]+)*)?$/, "minimumHostVersion must follow semver (e.g. 1.0.0)").optional(),
+      minimumPaperclipVersion: z34.string().regex(/^\d+\.\d+\.\d+(-[0-9A-Za-z-]+(\.[0-9A-Za-z-]+)*)?(\+[0-9A-Za-z-]+(\.[0-9A-Za-z-]+)*)?$/, "minimumPaperclipVersion must follow semver (e.g. 1.0.0)").optional(),
+      capabilities: z34.array(z34.enum(PLUGIN_CAPABILITIES)).min(1),
+      entrypoints: z34.object({
+        worker: z34.string().min(1),
+        ui: z34.string().min(1).optional()
       }),
       instanceConfigSchema: jsonSchemaSchema.optional(),
-      jobs: z33.array(pluginJobDeclarationSchema).optional(),
-      webhooks: z33.array(pluginWebhookDeclarationSchema).optional(),
-      tools: z33.array(pluginToolDeclarationSchema).optional(),
-      launchers: z33.array(pluginLauncherDeclarationSchema).optional(),
-      ui: z33.object({
-        slots: z33.array(pluginUiSlotDeclarationSchema).min(1).optional(),
-        launchers: z33.array(pluginLauncherDeclarationSchema).optional()
+      jobs: z34.array(pluginJobDeclarationSchema).optional(),
+      webhooks: z34.array(pluginWebhookDeclarationSchema).optional(),
+      tools: z34.array(pluginToolDeclarationSchema).optional(),
+      launchers: z34.array(pluginLauncherDeclarationSchema).optional(),
+      ui: z34.object({
+        slots: z34.array(pluginUiSlotDeclarationSchema).min(1).optional(),
+        launchers: z34.array(pluginLauncherDeclarationSchema).optional()
       }).optional()
     }).superRefine((manifest, ctx) => {
       const hasUiSlots = (manifest.ui?.slots?.length ?? 0) > 0;
       const hasUiLaunchers = (manifest.ui?.launchers?.length ?? 0) > 0;
       if ((hasUiSlots || hasUiLaunchers) && !manifest.entrypoints.ui) {
         ctx.addIssue({
-          code: z33.ZodIssueCode.custom,
+          code: z34.ZodIssueCode.custom,
           message: "entrypoints.ui is required when ui.slots or ui.launchers are declared",
           path: ["entrypoints", "ui"]
         });
       }
       if (manifest.minimumHostVersion && manifest.minimumPaperclipVersion && manifest.minimumHostVersion !== manifest.minimumPaperclipVersion) {
         ctx.addIssue({
-          code: z33.ZodIssueCode.custom,
+          code: z34.ZodIssueCode.custom,
           message: "minimumHostVersion and minimumPaperclipVersion must match when both are declared",
           path: ["minimumHostVersion"]
         });
@@ -4440,7 +4719,7 @@ var init_plugin = __esm({
       if (manifest.tools && manifest.tools.length > 0) {
         if (!manifest.capabilities.includes("agent.tools.register")) {
           ctx.addIssue({
-            code: z33.ZodIssueCode.custom,
+            code: z34.ZodIssueCode.custom,
             message: "Capability 'agent.tools.register' is required when tools are declared",
             path: ["capabilities"]
           });
@@ -4449,7 +4728,7 @@ var init_plugin = __esm({
       if (manifest.jobs && manifest.jobs.length > 0) {
         if (!manifest.capabilities.includes("jobs.schedule")) {
           ctx.addIssue({
-            code: z33.ZodIssueCode.custom,
+            code: z34.ZodIssueCode.custom,
             message: "Capability 'jobs.schedule' is required when jobs are declared",
             path: ["capabilities"]
           });
@@ -4458,7 +4737,7 @@ var init_plugin = __esm({
       if (manifest.webhooks && manifest.webhooks.length > 0) {
         if (!manifest.capabilities.includes("webhooks.receive")) {
           ctx.addIssue({
-            code: z33.ZodIssueCode.custom,
+            code: z34.ZodIssueCode.custom,
             message: "Capability 'webhooks.receive' is required when webhooks are declared",
             path: ["capabilities"]
           });
@@ -4469,7 +4748,7 @@ var init_plugin = __esm({
         const duplicates = jobKeys.filter((key, i) => jobKeys.indexOf(key) !== i);
         if (duplicates.length > 0) {
           ctx.addIssue({
-            code: z33.ZodIssueCode.custom,
+            code: z34.ZodIssueCode.custom,
             message: `Duplicate job keys: ${[...new Set(duplicates)].join(", ")}`,
             path: ["jobs"]
           });
@@ -4480,7 +4759,7 @@ var init_plugin = __esm({
         const duplicates = endpointKeys.filter((key, i) => endpointKeys.indexOf(key) !== i);
         if (duplicates.length > 0) {
           ctx.addIssue({
-            code: z33.ZodIssueCode.custom,
+            code: z34.ZodIssueCode.custom,
             message: `Duplicate webhook endpoint keys: ${[...new Set(duplicates)].join(", ")}`,
             path: ["webhooks"]
           });
@@ -4491,7 +4770,7 @@ var init_plugin = __esm({
         const duplicates = toolNames.filter((name, i) => toolNames.indexOf(name) !== i);
         if (duplicates.length > 0) {
           ctx.addIssue({
-            code: z33.ZodIssueCode.custom,
+            code: z34.ZodIssueCode.custom,
             message: `Duplicate tool names: ${[...new Set(duplicates)].join(", ")}`,
             path: ["tools"]
           });
@@ -4503,7 +4782,7 @@ var init_plugin = __esm({
           const duplicates = slotIds.filter((id, i) => slotIds.indexOf(id) !== i);
           if (duplicates.length > 0) {
             ctx.addIssue({
-              code: z33.ZodIssueCode.custom,
+              code: z34.ZodIssueCode.custom,
               message: `Duplicate UI slot ids: ${[...new Set(duplicates)].join(", ")}`,
               path: ["ui", "slots"]
             });
@@ -4519,50 +4798,50 @@ var init_plugin = __esm({
         const duplicates = launcherIds.filter((id, i) => launcherIds.indexOf(id) !== i);
         if (duplicates.length > 0) {
           ctx.addIssue({
-            code: z33.ZodIssueCode.custom,
+            code: z34.ZodIssueCode.custom,
             message: `Duplicate launcher ids: ${[...new Set(duplicates)].join(", ")}`,
             path: manifest.ui?.launchers ? ["ui", "launchers"] : ["launchers"]
           });
         }
       }
     });
-    installPluginSchema = z33.object({
-      packageName: z33.string().min(1),
-      version: z33.string().min(1).optional(),
+    installPluginSchema = z34.object({
+      packageName: z34.string().min(1),
+      version: z34.string().min(1).optional(),
       /** Set by loader for local-path installs so the worker can be resolved. */
-      packagePath: z33.string().min(1).optional()
+      packagePath: z34.string().min(1).optional()
     });
-    upsertPluginConfigSchema = z33.object({
-      configJson: z33.record(z33.unknown())
+    upsertPluginConfigSchema = z34.object({
+      configJson: z34.record(z34.unknown())
     });
-    patchPluginConfigSchema = z33.object({
-      configJson: z33.record(z33.unknown())
+    patchPluginConfigSchema = z34.object({
+      configJson: z34.record(z34.unknown())
     });
-    updatePluginStatusSchema = z33.object({
-      status: z33.enum(PLUGIN_STATUSES),
-      lastError: z33.string().nullable().optional()
+    updatePluginStatusSchema = z34.object({
+      status: z34.enum(PLUGIN_STATUSES),
+      lastError: z34.string().nullable().optional()
     });
-    uninstallPluginSchema = z33.object({
-      removeData: z33.boolean().optional().default(false)
+    uninstallPluginSchema = z34.object({
+      removeData: z34.boolean().optional().default(false)
     });
-    pluginStateScopeKeySchema = z33.object({
-      scopeKind: z33.enum(PLUGIN_STATE_SCOPE_KINDS),
-      scopeId: z33.string().min(1).optional(),
-      namespace: z33.string().min(1).optional(),
-      stateKey: z33.string().min(1)
+    pluginStateScopeKeySchema = z34.object({
+      scopeKind: z34.enum(PLUGIN_STATE_SCOPE_KINDS),
+      scopeId: z34.string().min(1).optional(),
+      namespace: z34.string().min(1).optional(),
+      stateKey: z34.string().min(1)
     });
-    setPluginStateSchema = z33.object({
-      scopeKind: z33.enum(PLUGIN_STATE_SCOPE_KINDS),
-      scopeId: z33.string().min(1).optional(),
-      namespace: z33.string().min(1).optional(),
-      stateKey: z33.string().min(1),
+    setPluginStateSchema = z34.object({
+      scopeKind: z34.enum(PLUGIN_STATE_SCOPE_KINDS),
+      scopeId: z34.string().min(1).optional(),
+      namespace: z34.string().min(1).optional(),
+      stateKey: z34.string().min(1),
       /** JSON-serializable value to store. */
-      value: z33.unknown()
+      value: z34.unknown()
     });
-    listPluginStateSchema = z33.object({
-      scopeKind: z33.enum(PLUGIN_STATE_SCOPE_KINDS).optional(),
-      scopeId: z33.string().min(1).optional(),
-      namespace: z33.string().min(1).optional()
+    listPluginStateSchema = z34.object({
+      scopeKind: z34.enum(PLUGIN_STATE_SCOPE_KINDS).optional(),
+      scopeId: z34.string().min(1).optional(),
+      namespace: z34.string().min(1).optional()
     });
   }
 });
@@ -4575,6 +4854,7 @@ var init_validators = __esm({
     init_app_builder();
     init_budget();
     init_adapter_skills();
+    init_agent_issue_creation();
     init_ai_search();
     init_chat();
     init_messenger();
@@ -4767,34 +5047,34 @@ var init_issue_activity = __esm({
 });
 
 // ../packages/shared/dist/config-schema.js
-import { z as z34 } from "zod";
+import { z as z35 } from "zod";
 var DEFAULT_DATABASE_BACKUP_MAX_ESTIMATED_BYTES, configMetaSchema, llmConfigSchema, databaseBackupConfigSchema, databaseConfigSchema, loggingConfigSchema, serverConfigSchema, authConfigSchema, storageLocalDiskConfigSchema, storageS3ConfigSchema, storageConfigSchema, secretsLocalEncryptedConfigSchema, secretsConfigSchema, rudderConfigSchema;
 var init_config_schema = __esm({
   "../packages/shared/dist/config-schema.js"() {
     "use strict";
     init_constants();
     DEFAULT_DATABASE_BACKUP_MAX_ESTIMATED_BYTES = 256 * 1024 * 1024;
-    configMetaSchema = z34.object({
-      version: z34.literal(1),
-      updatedAt: z34.string(),
-      source: z34.enum(["onboard", "configure", "doctor"])
+    configMetaSchema = z35.object({
+      version: z35.literal(1),
+      updatedAt: z35.string(),
+      source: z35.enum(["onboard", "configure", "doctor"])
     });
-    llmConfigSchema = z34.object({
-      provider: z34.enum(["claude", "openai"]),
-      apiKey: z34.string().optional()
+    llmConfigSchema = z35.object({
+      provider: z35.enum(["claude", "openai"]),
+      apiKey: z35.string().optional()
     });
-    databaseBackupConfigSchema = z34.object({
-      enabled: z34.boolean().default(true),
-      intervalMinutes: z34.number().int().min(1).max(7 * 24 * 60).default(60),
-      retentionDays: z34.number().int().min(1).max(3650).default(30),
-      maxEstimatedBytes: z34.number().int().min(1).default(DEFAULT_DATABASE_BACKUP_MAX_ESTIMATED_BYTES),
-      dir: z34.string().default("~/.rudder/instances/default/data/backups")
+    databaseBackupConfigSchema = z35.object({
+      enabled: z35.boolean().default(true),
+      intervalMinutes: z35.number().int().min(1).max(7 * 24 * 60).default(60),
+      retentionDays: z35.number().int().min(1).max(3650).default(30),
+      maxEstimatedBytes: z35.number().int().min(1).default(DEFAULT_DATABASE_BACKUP_MAX_ESTIMATED_BYTES),
+      dir: z35.string().default("~/.rudder/instances/default/data/backups")
     });
-    databaseConfigSchema = z34.object({
-      mode: z34.enum(["embedded-postgres", "postgres"]).default("embedded-postgres"),
-      connectionString: z34.string().optional(),
-      embeddedPostgresDataDir: z34.string().default("~/.rudder/instances/default/db"),
-      embeddedPostgresPort: z34.number().int().min(1).max(65535).default(54329),
+    databaseConfigSchema = z35.object({
+      mode: z35.enum(["embedded-postgres", "postgres"]).default("embedded-postgres"),
+      connectionString: z35.string().optional(),
+      embeddedPostgresDataDir: z35.string().default("~/.rudder/instances/default/db"),
+      embeddedPostgresPort: z35.number().int().min(1).max(65535).default(54329),
       backup: databaseBackupConfigSchema.default({
         enabled: true,
         intervalMinutes: 60,
@@ -4803,35 +5083,35 @@ var init_config_schema = __esm({
         dir: "~/.rudder/instances/default/data/backups"
       })
     });
-    loggingConfigSchema = z34.object({
-      mode: z34.enum(["file", "cloud"]),
-      logDir: z34.string().default("~/.rudder/instances/default/logs")
+    loggingConfigSchema = z35.object({
+      mode: z35.enum(["file", "cloud"]),
+      logDir: z35.string().default("~/.rudder/instances/default/logs")
     });
-    serverConfigSchema = z34.object({
-      deploymentMode: z34.enum(DEPLOYMENT_MODES).default("local_trusted"),
-      exposure: z34.enum(DEPLOYMENT_EXPOSURES).default("private"),
-      host: z34.string().default("127.0.0.1"),
-      port: z34.number().int().min(1).max(65535).default(3100),
-      allowedHostnames: z34.array(z34.string().min(1)).default([]),
-      serveUi: z34.boolean().default(true)
+    serverConfigSchema = z35.object({
+      deploymentMode: z35.enum(DEPLOYMENT_MODES).default("local_trusted"),
+      exposure: z35.enum(DEPLOYMENT_EXPOSURES).default("private"),
+      host: z35.string().default("127.0.0.1"),
+      port: z35.number().int().min(1).max(65535).default(3100),
+      allowedHostnames: z35.array(z35.string().min(1)).default([]),
+      serveUi: z35.boolean().default(true)
     });
-    authConfigSchema = z34.object({
-      baseUrlMode: z34.enum(AUTH_BASE_URL_MODES).default("auto"),
-      publicBaseUrl: z34.string().url().optional(),
-      disableSignUp: z34.boolean().default(false)
+    authConfigSchema = z35.object({
+      baseUrlMode: z35.enum(AUTH_BASE_URL_MODES).default("auto"),
+      publicBaseUrl: z35.string().url().optional(),
+      disableSignUp: z35.boolean().default(false)
     });
-    storageLocalDiskConfigSchema = z34.object({
-      baseDir: z34.string().default("~/.rudder/instances/default/data/storage")
+    storageLocalDiskConfigSchema = z35.object({
+      baseDir: z35.string().default("~/.rudder/instances/default/data/storage")
     });
-    storageS3ConfigSchema = z34.object({
-      bucket: z34.string().min(1).default("rudder"),
-      region: z34.string().min(1).default("us-east-1"),
-      endpoint: z34.string().optional(),
-      prefix: z34.string().default(""),
-      forcePathStyle: z34.boolean().default(false)
+    storageS3ConfigSchema = z35.object({
+      bucket: z35.string().min(1).default("rudder"),
+      region: z35.string().min(1).default("us-east-1"),
+      endpoint: z35.string().optional(),
+      prefix: z35.string().default(""),
+      forcePathStyle: z35.boolean().default(false)
     });
-    storageConfigSchema = z34.object({
-      provider: z34.enum(STORAGE_PROVIDERS).default("local_disk"),
+    storageConfigSchema = z35.object({
+      provider: z35.enum(STORAGE_PROVIDERS).default("local_disk"),
       localDisk: storageLocalDiskConfigSchema.default({
         baseDir: "~/.rudder/instances/default/data/storage"
       }),
@@ -4842,17 +5122,17 @@ var init_config_schema = __esm({
         forcePathStyle: false
       })
     });
-    secretsLocalEncryptedConfigSchema = z34.object({
-      keyFilePath: z34.string().default("~/.rudder/instances/default/secrets/master.key")
+    secretsLocalEncryptedConfigSchema = z35.object({
+      keyFilePath: z35.string().default("~/.rudder/instances/default/secrets/master.key")
     });
-    secretsConfigSchema = z34.object({
-      provider: z34.enum(SECRET_PROVIDERS).default("local_encrypted"),
-      strictMode: z34.boolean().default(false),
+    secretsConfigSchema = z35.object({
+      provider: z35.enum(SECRET_PROVIDERS).default("local_encrypted"),
+      strictMode: z35.boolean().default(false),
       localEncrypted: secretsLocalEncryptedConfigSchema.default({
         keyFilePath: "~/.rudder/instances/default/secrets/master.key"
       })
     });
-    rudderConfigSchema = z34.object({
+    rudderConfigSchema = z35.object({
       $meta: configMetaSchema,
       llm: llmConfigSchema.optional(),
       database: databaseConfigSchema,
@@ -4885,7 +5165,7 @@ var init_config_schema = __esm({
       if (value.server.deploymentMode === "local_trusted") {
         if (value.server.exposure !== "private") {
           ctx.addIssue({
-            code: z34.ZodIssueCode.custom,
+            code: z35.ZodIssueCode.custom,
             message: "server.exposure must be private when deploymentMode is local_trusted",
             path: ["server", "exposure"]
           });
@@ -4894,21 +5174,21 @@ var init_config_schema = __esm({
       }
       if (value.auth.baseUrlMode === "explicit" && !value.auth.publicBaseUrl) {
         ctx.addIssue({
-          code: z34.ZodIssueCode.custom,
+          code: z35.ZodIssueCode.custom,
           message: "auth.publicBaseUrl is required when auth.baseUrlMode is explicit",
           path: ["auth", "publicBaseUrl"]
         });
       }
       if (value.server.exposure === "public" && value.auth.baseUrlMode !== "explicit") {
         ctx.addIssue({
-          code: z34.ZodIssueCode.custom,
+          code: z35.ZodIssueCode.custom,
           message: "auth.baseUrlMode must be explicit when deploymentMode=authenticated and exposure=public",
           path: ["auth", "baseUrlMode"]
         });
       }
       if (value.server.exposure === "public" && !value.auth.publicBaseUrl) {
         ctx.addIssue({
-          code: z34.ZodIssueCode.custom,
+          code: z35.ZodIssueCode.custom,
           message: "auth.publicBaseUrl is required when deploymentMode=authenticated and exposure=public",
           path: ["auth", "publicBaseUrl"]
         });
@@ -4936,6 +5216,8 @@ var init_dist = __esm({
     init_chat();
     init_messenger();
     init_local_account_auth();
+    init_constants();
+    init_agent_issue_creation();
     init_validators();
     init_validators();
     init_agent_url_key();