@usenaive-sdk/blueprints 0.9.0 → 0.10.0

package/dist/index.js

@@ -116,10 +116,6 @@ function decimalStringFromMicro(amount) {
   return `${amount < 0 ? "-" : ""}${absolute / BigInt(USD)}.${fraction}`;
 }
 
-// ../core/src/session-token.ts
-var SESSION_TTL_SECONDS = 30 * 24 * 60 * 60;
-var encoder = new TextEncoder();
-
 // ../core/src/schema/audit-actions.ts
 var AUDIT_ACTIONS_SHIPPED = [
   "agent.updated",
@@ -185,6 +181,8 @@ var AUDIT_ACTIONS_P2 = [
   "connection.auth_config_created",
   "connection.auth_config_deleted",
   "domain.created",
+  "domain.purchased",
+  "domain.purchase_refunded",
   "domain.verified",
   "domain.deleted",
   "email.created",
@@ -735,8 +733,131 @@ var AgentSchema = z6.object({
 });
 
 // ../core/src/schema/session.ts
+import { z as z8 } from "zod";
+
+// ../core/src/schema/social.ts
 import { z as z7 } from "zod";
-var SessionStatusSchema = z7.enum([
+var SOCIAL_PLATFORMS = [
+  "bluesky",
+  "facebook",
+  "instagram",
+  "linkedin",
+  "mastodon",
+  "pinterest",
+  "reddit",
+  "threads",
+  "tiktok",
+  "x",
+  "youtube"
+];
+var SOCIAL_APPS = /* @__PURE__ */ new Set([...SOCIAL_PLATFORMS, "twitter"]);
+var SOCIAL_TEXT_PLATFORMS = [
+  "bluesky",
+  "facebook",
+  "linkedin",
+  "mastodon",
+  "threads",
+  "x"
+];
+var SOCIAL_MEDIA_PLATFORMS = ["instagram", "tiktok", "youtube"];
+var SOCIAL_VISIBILITIES = ["public", "unlisted", "private"];
+var SOCIAL_VISIBILITY_PLATFORMS = ["mastodon", "youtube"];
+var SocialVisibilitySchema = z7.enum(SOCIAL_VISIBILITIES);
+var SOCIAL_VISIBILITY_RULE = `visibility is ${SOCIAL_VISIBILITIES.join(", ")} and only ${SOCIAL_VISIBILITY_PLATFORMS.join(" and ")} accept it; omit it and the post publishes at the account's own default, which on a video channel is normally public`;
+var SocialPlatformSchema = z7.enum(SOCIAL_PLATFORMS);
+var SocialTextPlatformSchema = z7.enum(SOCIAL_TEXT_PLATFORMS);
+var isText = (platform) => SOCIAL_TEXT_PLATFORMS.includes(platform);
+var isMedia = (platform) => SOCIAL_MEDIA_PLATFORMS.includes(platform);
+var SOCIAL_PLATFORM_RULE = `${SOCIAL_TEXT_PLATFORMS.join(", ")} take a text-only post; ${SOCIAL_MEDIA_PLATFORMS.join(", ")} may be named only when the post carries media_urls or file_ids; ${SOCIAL_PLATFORMS.filter((platform) => !isText(platform) && !isMedia(platform)).join(", ")} cannot be posted to`;
+var SocialAccountSchema = z7.object({
+  id: z7.string().min(1),
+  object: z7.literal("social_account"),
+  identity_id: idOf("idn"),
+  platform: SocialPlatformSchema,
+  username: z7.string().nullable(),
+  display_name: z7.string().nullable(),
+  avatar_url: z7.url().nullable(),
+  connected_at: Timestamp.nullable()
+});
+var SocialPostStatusSchema = z7.enum([
+  "draft",
+  "scheduled",
+  "processing",
+  "posted",
+  "failed",
+  "deleted"
+]);
+var SocialPostSchema = z7.object({
+  id: z7.string().min(1),
+  object: z7.literal("social_post"),
+  identity_id: idOf("idn"),
+  title: z7.string(),
+  platforms: z7.array(SocialPlatformSchema),
+  status: SocialPostStatusSchema,
+  scheduled_at: Timestamp.nullable(),
+  posted_at: Timestamp.nullable(),
+  error: z7.string().nullable()
+});
+var SocialUploadSchema = z7.object({
+  id: z7.string().min(1),
+  object: z7.literal("social_upload"),
+  identity_id: idOf("idn"),
+  type: z7.enum(["image", "video", "document"]),
+  url: z7.url().nullable()
+});
+var SocialAnalyticsSchema = z7.object({
+  object: z7.literal("social_analytics"),
+  identity_id: idOf("idn"),
+  resource_id: z7.string().min(1),
+  platform: SocialPlatformSchema.nullable(),
+  data: z7.unknown()
+});
+var SocialCommentSchema = z7.object({
+  id: z7.string().min(1),
+  object: z7.literal("social_comment"),
+  identity_id: idOf("idn"),
+  post_id: z7.string().min(1),
+  platforms: z7.array(SocialPlatformSchema),
+  status: SocialPostStatusSchema,
+  posted_at: Timestamp.nullable(),
+  data: z7.unknown()
+});
+var POST_STATUSES = ["pending", "scheduled", "posted", "failed"];
+var PostStatusSchema = z7.enum(POST_STATUSES);
+var PostSchema = z7.object({
+  object: z7.literal("post"),
+  id: z7.string().min(1),
+  status: PostStatusSchema,
+  identity_id: z7.string().nullable(),
+  agent_id: z7.string().nullable(),
+  session_id: z7.string().nullable(),
+  tool_call_id: z7.string().nullable(),
+  content: z7.string().nullable(),
+  platforms: z7.array(z7.string()),
+  file_ids: z7.array(z7.string()),
+  media_urls: z7.array(z7.string()),
+  visibility: SocialVisibilitySchema.nullable(),
+  scheduled_at: Timestamp.nullable(),
+  posted_at: Timestamp.nullable(),
+  url: z7.string().nullable(),
+  error: z7.string().nullable(),
+  /** The latest stored reading, `{metric: value}`; `null` before `social.post_metrics` read any. */
+  metrics: z7.record(z7.string(), z7.number()).nullable(),
+  measured_at: Timestamp.nullable(),
+  /** Pending only: the earlier post this call would repeat — same identity, network and file. */
+  duplicate_of: z7.object({
+    id: z7.string(),
+    status: PostStatusSchema,
+    platform: z7.string(),
+    at: Timestamp.nullable(),
+    agent_id: z7.string().nullable(),
+    session_id: z7.string().nullable()
+  }).nullable(),
+  created_at: Timestamp
+});
+
+// ../core/src/schema/session.ts
+var SessionStatusSchema = z8.enum([
   "queued",
   "running",
   "idle",
@@ -744,23 +865,23 @@ var SessionStatusSchema = z7.enum([
   "failed",
   "cancelled"
 ]);
-var SessionModeSchema = z7.enum(["plan", "build"]);
+var SessionModeSchema = z8.enum(["plan", "build"]);
 var PLAN_MAX_CHARS = 2e4;
-var PlanSchema = z7.object({
-  object: z7.literal("plan"),
-  markdown: z7.string().max(PLAN_MAX_CHARS),
-  version: z7.number().int().nonnegative(),
-  by: z7.enum(["agent", "owner"]).nullable()
+var PlanSchema = z8.object({
+  object: z8.literal("plan"),
+  markdown: z8.string().max(PLAN_MAX_CHARS),
+  version: z8.number().int().nonnegative(),
+  by: z8.enum(["agent", "owner"]).nullable()
 });
-var PlanWriteSchema = z7.object({
-  markdown: z7.string().max(PLAN_MAX_CHARS),
-  base_version: z7.number().int().nonnegative()
+var PlanWriteSchema = z8.object({
+  markdown: z8.string().max(PLAN_MAX_CHARS),
+  base_version: z8.number().int().nonnegative()
 });
-var ProposePlanSchema = z7.object({
-  version: z7.number().int().positive(),
-  spends_or_publishes: z7.array(z7.string().min(1).max(200)).max(10).optional()
+var ProposePlanSchema = z8.object({
+  version: z8.number().int().positive(),
+  spends_or_publishes: z8.array(z8.string().min(1).max(200)).max(10).optional()
 });
-var StopReasonSchema = z7.enum([
+var StopReasonSchema = z8.enum([
   "end_turn",
   "awaiting_input",
   "awaiting_approval",
@@ -786,27 +907,27 @@ var StopReasonSchema = z7.enum([
    */
   "awaiting_answer"
 ]);
-var ThreadRoleSchema = z7.enum(["coordinator", "member"]);
-var MessageSchema = z7.object({
-  role: z7.enum(["system", "user", "assistant", "tool"]),
-  content: z7.string(),
-  tool_call_id: z7.string().optional()
+var ThreadRoleSchema = z8.enum(["coordinator", "member"]);
+var MessageSchema = z8.object({
+  role: z8.enum(["system", "user", "assistant", "tool"]),
+  content: z8.string(),
+  tool_call_id: z8.string().optional()
 });
-var ToolImageSchema = z7.object({
+var ToolImageSchema = z8.object({
   file_id: idOf("fil"),
-  url: z7.string().url().describe("A short-lived signed read for the file's bytes."),
-  media_type: z7.enum(["image/png", "image/jpeg", "image/gif", "image/webp"])
+  url: z8.string().url().describe("A short-lived signed read for the file's bytes."),
+  media_type: z8.enum(["image/png", "image/jpeg", "image/gif", "image/webp"])
 });
-var ToolResultSchema = z7.object({
-  output: z7.unknown(),
-  is_error: z7.boolean().optional(),
-  content: z7.string().optional(),
-  images: z7.array(ToolImageSchema).max(12).optional()
+var ToolResultSchema = z8.object({
+  output: z8.unknown(),
+  is_error: z8.boolean().optional(),
+  content: z8.string().optional(),
+  images: z8.array(ToolImageSchema).max(12).optional()
 });
 var QuestionFieldBase = {
-  key: z7.string().min(1).max(64),
-  label: z7.string().min(1).max(200),
-  help: z7.string().max(500).optional(),
+  key: z8.string().min(1).max(64),
+  label: z8.string().min(1).max(200),
+  help: z8.string().max(500).optional(),
   /**
    * A field that may be left blank, and it defaults to **false** — the rule "every field must be
    * answered" (`assertAnswers`) is still the rule, and this is the one documented way out of it.
@@ -826,42 +947,79 @@ var QuestionFieldBase = {
    * required on the OUTPUT type — so every hand-written `QuestionField` in the codebase, and every
    * one written after it, would have to spell out the flag it does not use.
    */
-  optional: z7.boolean().optional()
+  optional: z8.boolean().optional()
 };
-var QuestionFieldSchema = z7.discriminatedUnion("type", [
-  z7.object({
+var QuestionFieldSchema = z8.discriminatedUnion("type", [
+  z8.object({
     ...QuestionFieldBase,
-    type: z7.literal("text"),
-    placeholder: z7.string().max(200).optional()
+    type: z8.literal("text"),
+    placeholder: z8.string().max(200).optional()
   }),
-  z7.object({
+  z8.object({
     ...QuestionFieldBase,
-    type: z7.literal("choice"),
+    type: z8.literal("choice"),
     /**
      * Plain strings: the option is both the value and the label, because the answer is read back by
      * a model, which wants the words and not an id. Fewer than two is not a choice, and more than
      * twelve is a list — which belongs in the prompt.
      */
-    options: z7.array(z7.string().min(1).max(200)).min(2).max(12),
-    multiple: z7.boolean().default(false),
+    options: z8.array(z8.string().min(1).max(200)).min(2).max(12),
+    multiple: z8.boolean().default(false),
     /**
      * The free-text escape, and it defaults to **true** on purpose: the agent wrote the options and
      * the agent is the one that does not know the answer, so an operator must always be able to say
      * something it did not think of. A question that truly admits only its list opts out explicitly.
      */
-    other: z7.boolean().default(true)
+    other: z8.boolean().default(true),
+    /**
+     * A PICTURE OR A LINE FOR AN OPTION (ADR-1103): a template's "how it looks" shows its looks, and
+     * a niche says what it means in one line. Each names its option by its words; one naming no
+     * option is ignored, never refused. With a picture on any option the dashboard draws the choice
+     * as a grid of pictures. `image` is `https://`, or a path on the dashboard itself. An array
+     * and not a map, because a model's tool schema cannot always take a map. An older reader drops
+     * it and draws the plain list.
+     */
+    details: z8.array(
+      z8.object({
+        option: z8.string().min(1).max(200),
+        note: z8.string().min(1).max(120).optional(),
+        image: z8.string().max(500).regex(/^\/(?!\/)/, "an image is a path on the dashboard").optional()
+      })
+    ).max(12).optional()
+  }),
+  /**
+   * THE PERSON'S OWN MEDIA (ADR-1103): "show us what you like". The dashboard offers an upload for
+   * images or a video, which land in the organization's files, and a box for a link. The answer is
+   * the list: `fil_` ids and `https://` links, which an agent opens with `files_get`, `view_image`
+   * or the browser. `placeholder` is the link box's.
+   */
+  z8.object({
+    ...QuestionFieldBase,
+    type: z8.literal("media"),
+    placeholder: z8.string().max(200).optional()
   })
 ]);
+var ConnectFieldSchema = z8.object({
+  ...QuestionFieldBase,
+  type: z8.literal("connect"),
+  platforms: z8.array(SocialPlatformSchema).min(1).max(6)
+});
+var AskFieldSchema = z8.discriminatedUnion("type", [...QuestionFieldSchema.options, ConnectFieldSchema]);
 var QUESTION_FIELDS_MAX = 3;
-var QuestionSchema = z7.object({
-  prompt: z7.string().min(1).max(1e3),
-  fields: z7.array(QuestionFieldSchema).min(1).max(QUESTION_FIELDS_MAX, {
+var QuestionSchema = z8.object({
+  prompt: z8.string().min(1).max(1e3),
+  fields: z8.array(AskFieldSchema).min(1).max(QUESTION_FIELDS_MAX, {
     message: `a question has at most ${QUESTION_FIELDS_MAX} fields \u2014 ask the rest in a second question once these are answered`
   })
-});
-var answersOf = (max, message3) => z7.record(
-  z7.string().min(1).max(64),
-  z7.union([z7.string().max(2e3), z7.array(z7.string().max(2e3)).min(1).max(12)])
+}).refine((question) => question.fields.length === 1 || question.fields.every((field) => field.type !== "connect"), {
+  // A connect card answers itself when the accounts land (ADR-1102); a field beside it would need
+  // a Send the card does not have.
+  message: "a connect field is a question of its own: ask anything else in a separate question",
+  path: ["fields"]
+});
+var answersOf = (max, message3) => z8.record(
+  z8.string().min(1).max(64),
+  z8.union([z8.string().max(2e3), z8.array(z8.string().max(2e3)).min(1).max(12)])
 ).refine((answers) => Object.keys(answers).length <= max, { message: message3 });
 var AnswersSchema = answersOf(
   QUESTION_FIELDS_MAX,
@@ -872,24 +1030,29 @@ var InstallAnswersSchema = answersOf(
   TEMPLATE_QUESTIONS_MAX,
   `a template asks at most ${TEMPLATE_QUESTIONS_MAX} questions, so an install has at most ${TEMPLATE_QUESTIONS_MAX} answers`
 );
-var PendingActionSchema = z7.object({
-  kind: z7.enum(["tool", "question"]).default("tool"),
-  tool_call_id: z7.string(),
-  name: z7.string(),
-  args: z7.record(z7.string(), z7.unknown()),
+var PendingActionSchema = z8.object({
+  kind: z8.enum(["tool", "question"]).default("tool"),
+  tool_call_id: z8.string(),
+  name: z8.string(),
+  args: z8.record(z8.string(), z8.unknown()),
   /**
    * Present iff `kind` is `"question"`, and it is the parse of `args` rather than a second source
    * of truth: `args` is what the model called and therefore what replays byte-identically, while
    * `question` is what a renderer reads without having to know that `ask_operator`'s arguments
    * happen to be the question. Same content, two jobs.
    */
-  question: QuestionSchema.optional()
+  question: QuestionSchema.optional(),
+  /**
+   * The helper's thread a coordinator adopted this call from (§28, B-3; ADR-1101): the dashboard
+   * marks that helper as waiting on you. Absent on the session's own calls.
+   */
+  thread_id: idOf("ses").optional()
 });
-var SessionSchema = z7.object({
+var SessionSchema = z8.object({
   id: idOf("ses"),
-  object: z7.literal("session"),
+  object: z8.literal("session"),
   agent_id: idOf("agt"),
-  agent_version: z7.number().int().positive(),
+  agent_version: z8.number().int().positive(),
   deployment_id: idOf("dep").nullable(),
   /**
    * The persona this session acts as (`canonical-spec §22`). Chosen per task from the personas the
@@ -916,7 +1079,7 @@ var SessionSchema = z7.object({
    * The model the latest send picked (§7 `model`), or `null` when none has and the session runs its
    * pinned version's model (§10, ADR-0832). Defaulted so a reply from an older control plane parses.
    */
-  model: z7.string().nullable().default(null),
+  model: z8.string().nullable().default(null),
   /** Plan mode (§7.5, §10): defaulted so a reply from an older control plane parses as `build`. */
   mode: SessionModeSchema.default("build"),
   status: SessionStatusSchema,
@@ -925,38 +1088,38 @@ var SessionSchema = z7.object({
   budget_micro_usd: MicroUsdField.nonnegative(),
   consumed_micro_usd: MicroUsdField.nonnegative(),
   token_usage: TokenUsageSchema,
-  pending_actions: z7.array(PendingActionSchema),
+  pending_actions: z8.array(PendingActionSchema),
   output_schema: JsonSchemaDocument.nullable(),
-  structured_output: z7.record(z7.string(), z7.unknown()).nullable(),
-  last_seq: z7.number().int().nonnegative(),
+  structured_output: z8.record(z8.string(), z8.unknown()).nullable(),
+  last_seq: z8.number().int().nonnegative(),
   metadata: Metadata,
   started_at: Timestamp.nullable(),
   ended_at: Timestamp.nullable(),
   created_at: Timestamp
 });
-var SendMessageSchema = z7.object({
-  message: z7.string(),
-  interrupt: z7.boolean().optional(),
-  queue: z7.boolean().optional(),
+var SendMessageSchema = z8.object({
+  message: z8.string(),
+  interrupt: z8.boolean().optional(),
+  queue: z8.boolean().optional(),
   /** A catalogue id: this session runs on it from this message's turn on (§7, ADR-0832). */
-  model: z7.string().min(1).optional(),
+  model: z8.string().min(1).optional(),
   /** Plan mode from this message's turn on (§7.5, ADR-0905). */
   mode: SessionModeSchema.optional(),
-  idempotency_key: z7.string().optional()
+  idempotency_key: z8.string().optional()
 }).refine((body) => !(body.interrupt === true && body.queue === true), {
   message: "a send is either an interrupt or queued, not both",
   path: ["queue"]
 });
-var SendAcceptedSchema = z7.object({
-  session_id: z7.string(),
+var SendAcceptedSchema = z8.object({
+  session_id: z8.string(),
   status: SessionStatusSchema,
-  accepted_seq: z7.number().int().nonnegative()
+  accepted_seq: z8.number().int().nonnegative()
 });
-var ToolConfirmationSchema = z7.object({
-  tool_call_id: z7.string(),
-  decision: z7.enum(["allow", "deny"]),
-  reason: z7.string().optional(),
-  scope: z7.enum(["call", "session"]).default("call"),
+var ToolConfirmationSchema = z8.object({
+  tool_call_id: z8.string(),
+  decision: z8.enum(["allow", "deny"]),
+  reason: z8.string().optional(),
+  scope: z8.enum(["call", "session"]).default("call"),
   /**
    * THE PERSON'S OWN ANSWERS for a template install they approve (ADR-1030): the call runs with
    * these in place of the `answers` the agent proposed, and with nothing else changed. A modifier on
@@ -965,14 +1128,14 @@ var ToolConfirmationSchema = z7.object({
    */
   answers: InstallAnswersSchema.optional()
 });
-var SessionAnswerSchema = z7.object({
-  tool_call_id: z7.string(),
-  answers: z7.record(z7.string(), z7.union([z7.string(), z7.array(z7.string())]))
+var SessionAnswerSchema = z8.object({
+  tool_call_id: z8.string(),
+  answers: z8.record(z8.string(), z8.union([z8.string(), z8.array(z8.string())]))
 });
 
 // ../core/src/schema/event.ts
-import { z as z8 } from "zod";
-var EventTypeSchema = z8.enum([
+import { z as z9 } from "zod";
+var EventTypeSchema = z9.enum([
   "message.delta",
   /**
    * The agent's answer (no `role`), or a user row `{ role: "user", content, client_message_id? }` (§8).
@@ -1087,78 +1250,78 @@ var EventTypeSchema = z8.enum([
   "card.refunded",
   "card.credentials_revealed"
 ]);
-var EventSchema = z8.object({
+var EventSchema = z9.object({
   id: idOf("evt"),
-  seq: z8.number().int().positive(),
+  seq: z9.number().int().positive(),
   type: EventTypeSchema,
   session_id: idOf("ses"),
-  data: z8.record(z8.string(), z8.unknown()),
+  data: z9.record(z9.string(), z9.unknown()),
   created_at: Timestamp
 });
-var ThreadEventDataSchema = z8.looseObject({ thread_id: idOf("ses") });
-var ToolConfirmResolvedDataSchema = z8.object({
-  tool_call_id: z8.string(),
-  decision: z8.enum(["allow", "deny"]),
-  reason: z8.string().nullable(),
-  scope: z8.enum(["call", "session"]),
+var ThreadEventDataSchema = z9.looseObject({ thread_id: idOf("ses") });
+var ToolConfirmResolvedDataSchema = z9.object({
+  tool_call_id: z9.string(),
+  decision: z9.enum(["allow", "deny"]),
+  reason: z9.string().nullable(),
+  scope: z9.enum(["call", "session"]),
   actor: PrincipalSchema.nullable(),
   decided_at: Timestamp,
-  proposed_args: z8.record(z8.string(), z8.unknown()).nullable(),
-  final_args: z8.record(z8.string(), z8.unknown()).nullable()
+  proposed_args: z9.record(z9.string(), z9.unknown()).nullable(),
+  final_args: z9.record(z9.string(), z9.unknown()).nullable()
 });
-var ToolConfirmAnsweredDataSchema = z8.object({
-  tool_call_id: z8.string(),
+var ToolConfirmAnsweredDataSchema = z9.object({
+  tool_call_id: z9.string(),
   answers: AnswersSchema,
   answered_at: Timestamp
 });
-var SessionUsageDataSchema = z8.object({
+var SessionUsageDataSchema = z9.object({
   token_usage: TokenUsageSchema,
   consumed_micro_usd: MicroUsdField.nonnegative(),
-  active_seconds: z8.number().nonnegative(),
-  tool_calls: z8.number().int().nonnegative()
+  active_seconds: z9.number().nonnegative(),
+  tool_calls: z9.number().int().nonnegative()
 });
 
 // ../core/src/schema/board.ts
-import { z as z9 } from "zod";
+import { z as z10 } from "zod";
 var BOARD_STATUSES = ["todo", "doing", "blocked", "done"];
-var BoardStatusSchema = z9.enum(BOARD_STATUSES);
-var BoardCountsSchema = z9.object({
-  todo: z9.number().int().nonnegative(),
-  doing: z9.number().int().nonnegative(),
-  blocked: z9.number().int().nonnegative(),
-  done: z9.number().int().nonnegative()
-});
-var BoardSchema = z9.object({
+var BoardStatusSchema = z10.enum(BOARD_STATUSES);
+var BoardCountsSchema = z10.object({
+  todo: z10.number().int().nonnegative(),
+  doing: z10.number().int().nonnegative(),
+  blocked: z10.number().int().nonnegative(),
+  done: z10.number().int().nonnegative()
+});
+var BoardSchema = z10.object({
   id: idOf("brd"),
-  object: z9.literal("board"),
+  object: z10.literal("board"),
   agent_id: idOf("agt"),
   cards: BoardCountsSchema,
   created_at: Timestamp
 });
-var BoardCardSchema = z9.object({
+var BoardCardSchema = z10.object({
   id: idOf("crd"),
-  object: z9.literal("board_card"),
+  object: z10.literal("board_card"),
   board_id: idOf("brd"),
-  title: z9.string().min(1),
+  title: z10.string().min(1),
   /** The brief — what was asked. */
-  body: z9.string(),
+  body: z10.string(),
   /** What the holder wrote back; a `done` carries one. */
-  note: z9.string().nullable().default(null),
+  note: z10.string().nullable().default(null),
   status: BoardStatusSchema,
-  assignee: z9.string().nullable(),
+  assignee: z10.string().nullable(),
   /** The cards this one waits on. A `blocked` card with an empty list is stuck on the world. */
-  blocked_by: z9.array(idOf("crd")),
+  blocked_by: z10.array(idOf("crd")),
   // The wake fields default on read: a reader whose API predates one still gets the card (§28.11).
   woken_session_id: idOf("ses").nullable().default(null),
   reported_status: BoardStatusSchema.nullable().default(null),
   /** Sessions the board has started for this card; the third is its last (§28.18). */
-  wake_count: z9.number().int().nonnegative().default(0),
+  wake_count: z10.number().int().nonnegative().default(0),
   created_at: Timestamp,
   updated_at: Timestamp
 });
-var BoardCommentSchema = z9.object({
+var BoardCommentSchema = z10.object({
   id: idOf("bcm"),
-  object: z9.literal("board_comment"),
+  object: z10.literal("board_comment"),
   card_id: idOf("crd"),
   /**
    * Who wrote it, as an id the server derived — never a name the caller supplied. A member's
@@ -1166,42 +1329,42 @@ var BoardCommentSchema = z9.object({
    * `key_` principal. The prefix is what lets a reader tell an agent's comment from a person's,
    * which is the distinction a free-text author field could not make and could be used to forge.
    */
-  author: z9.string(),
-  body: z9.string(),
+  author: z10.string(),
+  body: z10.string(),
   created_at: Timestamp
 });
 
 // ../core/src/schema/identity.ts
-import { z as z10 } from "zod";
+import { z as z11 } from "zod";
 var IDENTITY_NAME_MAX = 128;
 var IDENTITY_DESCRIPTION_MAX = 1024;
-var IdentitySchema = z10.object({
+var IdentitySchema = z11.object({
   id: idOf("idn"),
-  object: z10.literal("identity"),
+  object: z11.literal("identity"),
   /** Human-facing persona name. Surfaced to the model so it acts in character. */
-  name: z10.string().min(1).max(IDENTITY_NAME_MAX),
+  name: z11.string().min(1).max(IDENTITY_NAME_MAX),
   /** What the persona is for. The model reads it to choose tone, scope and endpoint. */
-  description: z10.string().max(IDENTITY_DESCRIPTION_MAX).nullable(),
+  description: z11.string().max(IDENTITY_DESCRIPTION_MAX).nullable(),
   /** Inbox addresses (`localpart@domain`) this identity owns. */
-  emails: z10.array(z10.string()),
+  emails: z11.array(z11.string()),
   /** Provisioned numbers in E.164. */
-  phones: z10.array(z10.string()),
+  phones: z11.array(z11.string()),
   /** Verified web domains reachable through this identity's inboxes. */
-  domains: z10.array(z10.string()),
+  domains: z11.array(z11.string()),
   /** `conn_` ids of authorized third-party connections. */
-  connections: z10.array(z10.string()),
+  connections: z11.array(z11.string()),
   metadata: Metadata,
   created_at: Timestamp,
   updated_at: Timestamp
 });
 
 // ../core/src/schema/resource.ts
-import { z as z12 } from "zod";
+import { z as z13 } from "zod";
 
 // ../core/src/schema/files-library.ts
-import { z as z11 } from "zod";
+import { z as z12 } from "zod";
 var FILE_KINDS = ["image", "video", "audio", "document", "other"];
-var FileKindSchema = z11.enum(FILE_KINDS);
+var FileKindSchema = z12.enum(FILE_KINDS);
 var FILE_SOURCE_TYPES = [
   "upload",
   "url_import",
@@ -1211,53 +1374,53 @@ var FILE_SOURCE_TYPES = [
   "screenshot",
   "speech_generation"
 ];
-var FileSourceTypeSchema = z11.enum(FILE_SOURCE_TYPES);
-var FileSourceSchema = z11.object({
+var FileSourceTypeSchema = z12.enum(FILE_SOURCE_TYPES);
+var FileSourceSchema = z12.object({
   type: FileSourceTypeSchema,
-  job_id: z11.union([idOf("med"), idOf("clj")]).nullable(),
-  url: z11.string().url().nullable(),
+  job_id: z12.union([idOf("med"), idOf("clj")]).nullable(),
+  url: z12.string().url().nullable(),
   /** What a generator was asked with (§36.1, ADR-0886); absent on every other writer's row. */
-  model: z11.string().nullable().optional(),
-  prompt: z11.string().nullable().optional()
+  model: z12.string().nullable().optional(),
+  prompt: z12.string().nullable().optional()
 });
-var FileTagsSchema = z11.array(z11.string().min(1).max(64)).max(32);
-var FileLibraryFieldsSchema = z11.object({
-  title: z11.string().max(256).nullable().default(null),
-  description: z11.string().max(4096).nullable().default(null),
+var FileTagsSchema = z12.array(z12.string().min(1).max(64)).max(32);
+var FileLibraryFieldsSchema = z12.object({
+  title: z12.string().max(256).nullable().default(null),
+  description: z12.string().max(4096).nullable().default(null),
   tags: FileTagsSchema.default([]),
   kind: FileKindSchema.default("other"),
   source: FileSourceSchema.nullable().default(null),
   thumbnail_file_id: idOf("fil").nullable().default(null),
-  width: z11.number().int().positive().nullable().default(null),
-  height: z11.number().int().positive().nullable().default(null),
-  duration_seconds: z11.number().nonnegative().nullable().default(null)
+  width: z12.number().int().positive().nullable().default(null),
+  height: z12.number().int().positive().nullable().default(null),
+  duration_seconds: z12.number().nonnegative().nullable().default(null)
 });
-var UpdateFileSchema = z11.object({
-  title: z11.string().max(256).nullable().optional(),
-  description: z11.string().max(4096).nullable().optional(),
+var UpdateFileSchema = z12.object({
+  title: z12.string().max(256).nullable().optional(),
+  description: z12.string().max(4096).nullable().optional(),
   tags: FileTagsSchema.optional()
 });
-var ImportFileSchema = z11.object({
-  url: z11.string().url().startsWith("http"),
-  title: z11.string().max(256).optional(),
-  description: z11.string().max(4096).optional(),
+var ImportFileSchema = z12.object({
+  url: z12.string().url().startsWith("http"),
+  title: z12.string().max(256).optional(),
+  description: z12.string().max(4096).optional(),
   tags: FileTagsSchema.optional()
 });
 
 // ../core/src/schema/resource.ts
-var ComputerStatusSchema = z12.enum(["creating", "running", "paused", "failed", "destroyed"]);
-var VolumeSchema = z12.object({
+var ComputerStatusSchema = z13.enum(["creating", "running", "paused", "failed", "destroyed"]);
+var VolumeSchema = z13.object({
   id: idOf("vol"),
-  size_gb: z12.number().int().positive(),
-  mount_path: z12.string()
+  size_gb: z13.number().int().positive(),
+  mount_path: z13.string()
 });
-var ComputerSchema = z12.object({
+var ComputerSchema = z13.object({
   id: idOf("cmp"),
-  object: z12.literal("computer"),
-  name: z12.string(),
-  vcpu: z12.number().int().positive(),
-  memory_mb: z12.number().int().positive(),
-  disk_gb: z12.number().int().positive(),
+  object: z13.literal("computer"),
+  name: z13.string(),
+  vcpu: z13.number().int().positive(),
+  memory_mb: z13.number().int().positive(),
+  disk_gb: z13.number().int().positive(),
   status: ComputerStatusSchema,
   // core-gaps: U2-browser-api — the whole option object (§32.2); `{ allowed_domains }` still parses.
   browser: BrowserOptionsSchema.nullable(),
@@ -1270,127 +1433,127 @@ var ComputerSchema = z12.object({
   agent_id: idOf("agt").nullable().default(null),
   created_at: Timestamp
 });
-var SnapshotSchema = z12.object({
+var SnapshotSchema = z13.object({
   snapshot_id: idOf("snp"),
   computer_id: idOf("cmp"),
   created_at: Timestamp
 });
-var ComputerProbeSchema = z12.object({
+var ComputerProbeSchema = z13.object({
   sampled_at: Timestamp,
-  uptime_seconds: z12.number().int().nonnegative(),
-  processes: z12.number().int().nonnegative(),
-  load_1m: z12.number().nonnegative(),
-  memory_used_mb: z12.number().int().nonnegative(),
-  memory_total_mb: z12.number().int().positive(),
-  disk_used_gb: z12.number().nonnegative(),
-  disk_total_gb: z12.number().positive()
-});
-var ComputerInspectSchema = z12.object({
-  object: z12.literal("computer_inspect"),
+  uptime_seconds: z13.number().int().nonnegative(),
+  processes: z13.number().int().nonnegative(),
+  load_1m: z13.number().nonnegative(),
+  memory_used_mb: z13.number().int().nonnegative(),
+  memory_total_mb: z13.number().int().positive(),
+  disk_used_gb: z13.number().nonnegative(),
+  disk_total_gb: z13.number().positive()
+});
+var ComputerInspectSchema = z13.object({
+  object: z13.literal("computer_inspect"),
   id: idOf("cmp"),
   status: ComputerStatusSchema,
   last_active_at: Timestamp.nullable(),
   /** Where the provider's file API is rooted (§41.1); `null` when it does not say. */
-  home: z12.string().min(1).nullable(),
+  home: z13.string().min(1).nullable(),
   probe: ComputerProbeSchema.nullable()
 });
 var COMMAND_OUTPUT_CAP = 65536;
-var ComputerCommandSchema = z12.object({
+var ComputerCommandSchema = z13.object({
   id: idOf("cmd"),
-  object: z12.literal("computer_command"),
+  object: z13.literal("computer_command"),
   computer_id: idOf("cmp"),
-  command: z12.string(),
-  exit_code: z12.number().int().nullable(),
-  timed_out: z12.boolean(),
-  duration_ms: z12.number().int().nonnegative(),
-  stdout: z12.string().max(COMMAND_OUTPUT_CAP),
-  stderr: z12.string().max(COMMAND_OUTPUT_CAP),
-  truncated: z12.boolean(),
+  command: z13.string(),
+  exit_code: z13.number().int().nullable(),
+  timed_out: z13.boolean(),
+  duration_ms: z13.number().int().nonnegative(),
+  stdout: z13.string().max(COMMAND_OUTPUT_CAP),
+  stderr: z13.string().max(COMMAND_OUTPUT_CAP),
+  truncated: z13.boolean(),
   actor: PrincipalSchema,
   created_at: Timestamp
 });
-var ExecStreamFrameSchema = z12.union([
-  z12.object({ stdout: z12.string() }),
-  z12.object({ stderr: z12.string() }),
-  z12.object({
-    exit: z12.object({
-      exit_code: z12.number().int().nullable(),
-      timed_out: z12.boolean(),
-      duration_ms: z12.number().int().nonnegative(),
+var ExecStreamFrameSchema = z13.union([
+  z13.object({ stdout: z13.string() }),
+  z13.object({ stderr: z13.string() }),
+  z13.object({
+    exit: z13.object({
+      exit_code: z13.number().int().nullable(),
+      timed_out: z13.boolean(),
+      duration_ms: z13.number().int().nonnegative(),
       command_id: idOf("cmd")
     })
   })
 ]);
-var FileEntryTypeSchema = z12.enum(["file", "directory", "symlink", "other"]);
-var FileEntrySchema = z12.object({
-  name: z12.string().min(1),
-  path: z12.string().min(1),
+var FileEntryTypeSchema = z13.enum(["file", "directory", "symlink", "other"]);
+var FileEntrySchema = z13.object({
+  name: z13.string().min(1),
+  path: z13.string().min(1),
   type: FileEntryTypeSchema,
-  size_bytes: z12.number().int().nonnegative(),
+  size_bytes: z13.number().int().nonnegative(),
   /** POSIX `st_mode`. */
-  mode: z12.number().int().nonnegative(),
+  mode: z13.number().int().nonnegative(),
   modified_at: Timestamp.nullable()
 });
-var ComputerUpdateSchema = z12.strictObject({ name: z12.string().min(1).max(200) });
-var SkillSchema = z12.object({
+var ComputerUpdateSchema = z13.strictObject({ name: z13.string().min(1).max(200) });
+var SkillSchema = z13.object({
   id: idOf("skl"),
-  object: z12.literal("skill"),
-  name: z12.string(),
-  description: z12.string().nullable(),
-  latest_version: z12.number().int().positive(),
+  object: z13.literal("skill"),
+  name: z13.string(),
+  description: z13.string().nullable(),
+  latest_version: z13.number().int().positive(),
   created_at: Timestamp
 });
-var ResolvedSkillRefSchema = z12.object({
+var ResolvedSkillRefSchema = z13.object({
   /** The reference exactly as the agent version wrote it: `slug` or `slug@N`. */
-  ref: z12.string().min(1),
-  slug: z12.string().min(1),
-  version: z12.number().int().positive(),
-  description: z12.string(),
-  storage_key: z12.string().min(1)
-});
-var SkillVersionSchema = z12.object({
-  version: z12.number().int().positive(),
-  sha256: z12.string().regex(/^[0-9a-f]{64}$/),
-  size_bytes: z12.number().int().nonnegative(),
+  ref: z13.string().min(1),
+  slug: z13.string().min(1),
+  version: z13.number().int().positive(),
+  description: z13.string(),
+  storage_key: z13.string().min(1)
+});
+var SkillVersionSchema = z13.object({
+  version: z13.number().int().positive(),
+  sha256: z13.string().regex(/^[0-9a-f]{64}$/),
+  size_bytes: z13.number().int().nonnegative(),
   created_at: Timestamp
 });
-var SkillCatalogEntrySchema = z12.object({
-  object: z12.literal("skill_catalog_entry"),
-  slug: z12.string().regex(/^[a-z0-9][a-z0-9-]*$/),
-  version: z12.number().int().positive(),
-  name: z12.string().min(1),
-  description: z12.string(),
-  tags: z12.array(z12.string().min(1)),
-  content_hash: z12.string().regex(/^[0-9a-f]{64}$/),
+var SkillCatalogEntrySchema = z13.object({
+  object: z13.literal("skill_catalog_entry"),
+  slug: z13.string().regex(/^[a-z0-9][a-z0-9-]*$/),
+  version: z13.number().int().positive(),
+  name: z13.string().min(1),
+  description: z13.string(),
+  tags: z13.array(z13.string().min(1)),
+  content_hash: z13.string().regex(/^[0-9a-f]{64}$/),
   published_at: Timestamp
 });
-var SkillCatalogVersionSchema = SkillCatalogEntrySchema.extend({ content: z12.string() });
-var FileSchema = z12.object({
+var SkillCatalogVersionSchema = SkillCatalogEntrySchema.extend({ content: z13.string() });
+var FileSchema = z13.object({
   id: idOf("fil"),
-  object: z12.literal("file"),
-  name: z12.string(),
-  content_type: z12.string(),
-  size_bytes: z12.number().int().nonnegative(),
-  scope: z12.enum(["session", "published"]),
+  object: z13.literal("file"),
+  name: z13.string(),
+  content_type: z13.string(),
+  size_bytes: z13.number().int().nonnegative(),
+  scope: z13.enum(["session", "published"]),
   session_id: idOf("ses").nullable(),
-  sha256: z12.string().regex(/^[0-9a-f]{64}$/),
+  sha256: z13.string().regex(/^[0-9a-f]{64}$/),
   created_at: Timestamp,
   // The asset-library fields (`canonical-spec §36.1`), all nullable or defaulted.
   ...FileLibraryFieldsSchema.shape,
   /** The agent of `session_id`, joined at read (§36.1, ADR-0887); a writer never sets it. */
   agent_id: idOf("agt").nullable().optional()
 });
-var ScheduleStatusSchema = z12.enum(["scheduled", "paused", "unscheduled"]);
-var DeploymentSchema = z12.object({
+var ScheduleStatusSchema = z13.enum(["scheduled", "paused", "unscheduled"]);
+var DeploymentSchema = z13.object({
   id: idOf("dep"),
-  object: z12.literal("deployment"),
+  object: z13.literal("deployment"),
   agent_id: idOf("agt"),
   /** A pin. `null` tracks the agent's `current_version` on every fire (§12). */
-  agent_version: z12.number().int().positive().nullable(),
-  cron: z12.string(),
+  agent_version: z13.number().int().positive().nullable(),
+  cron: z13.string(),
   /** IANA zone the `cron` is read in. "0 9 * * 1" means 09:00 *here*, across DST (ADR-0074). */
-  timezone: z12.string(),
-  input_template: z12.string(),
+  timezone: z13.string(),
+  input_template: z13.string(),
   budget_micro_usd: MicroUsdField.nonnegative(),
   window: WindowSchema,
   /**
@@ -1400,21 +1563,21 @@ var DeploymentSchema = z12.object({
    * those endpoints, and a signed delivery over cleartext is not a delivery. Until the push was
    * wired this field went nowhere, so nothing can be relying on an `http://` value (ADR-0161).
    */
-  on_idle: z12.url().startsWith("https://", { error: "a webhook URL must be https" }).nullable(),
+  on_idle: z13.url().startsWith("https://", { error: "a webhook URL must be https" }).nullable(),
   /**
    * The persona every fire speaks as, or `null` to run as nobody (§22). Written as an `idn_` id
    * **or** the persona's name, the way a session names one, and always echoed as the id: a fire at
    * 3am must not be silenced by someone renaming the persona at noon.
    */
   identity: idOf("idn").nullable(),
-  enabled: z12.boolean(),
+  enabled: z13.boolean(),
   /** Derived per deploy, never stored — the row cannot know whether a clock is watching it. */
   schedule_status: ScheduleStatusSchema,
   /** The next fire, or `null` when nothing will fire it (`schedule_status` says which). */
   next_run_at: Timestamp.nullable(),
   created_at: Timestamp
 });
-var DeploymentRunSchema = z12.object({
+var DeploymentRunSchema = z13.object({
   id: idOf("run"),
   session_id: idOf("ses"),
   status: SessionStatusSchema,
@@ -1422,62 +1585,62 @@ var DeploymentRunSchema = z12.object({
 });
 
 // ../core/src/schema/comms.ts
-import { z as z13 } from "zod";
-var DomainKindSchema = z13.enum(["system", "external", "purchased"]);
-var DomainStatusSchema = z13.enum(["pending_dns", "active", "failed"]);
-var DomainDnsStatusSchema = z13.enum(["pending_verification", "provisioned", "failed"]);
-var DomainInboundStatusSchema = z13.enum(["pending", "verified", "failed"]);
-var DomainAppConnectStatusSchema = z13.enum(["pending", "connected", "failed"]);
-var DnsRecordSchema = z13.object({
-  type: z13.enum(["TXT", "CNAME", "MX"]),
-  host: z13.string(),
-  value: z13.string(),
-  priority: z13.number().int().nullable(),
+import { z as z14 } from "zod";
+var DomainKindSchema = z14.enum(["system", "external", "purchased"]);
+var DomainStatusSchema = z14.enum(["pending_dns", "active", "failed"]);
+var DomainDnsStatusSchema = z14.enum(["pending_verification", "provisioned", "failed"]);
+var DomainInboundStatusSchema = z14.enum(["pending", "verified", "failed"]);
+var DomainAppConnectStatusSchema = z14.enum(["pending", "connected", "failed"]);
+var DnsRecordSchema = z14.object({
+  type: z14.enum(["TXT", "CNAME", "MX"]),
+  host: z14.string(),
+  value: z14.string(),
+  priority: z14.number().int().nullable(),
   /** Vetta owns this record: `_dmarc`, DKIM, inbound MX. The agent may read it, never write it. */
-  managed: z13.boolean()
+  managed: z14.boolean()
 });
-var DomainSchema = z13.object({
+var DomainSchema = z14.object({
   id: idOf("dom"),
-  object: z13.literal("domain"),
+  object: z14.literal("domain"),
   /** A domain belongs to the **organization**, not to one identity: two identities share one. */
-  name: z13.string(),
+  name: z14.string(),
   kind: DomainKindSchema,
   status: DomainStatusSchema,
   dns_status: DomainDnsStatusSchema,
   inbound_status: DomainInboundStatusSchema,
   app_connect_status: DomainAppConnectStatusSchema,
-  records: z13.array(DnsRecordSchema),
+  records: z14.array(DnsRecordSchema),
   last_verified_at: Timestamp.nullable(),
   created_at: Timestamp
 });
-var EmailInboxSchema = z13.object({
+var EmailInboxSchema = z14.object({
   id: idOf("eml"),
-  object: z13.literal("email_inbox"),
+  object: z14.literal("email_inbox"),
   identity_id: idOf("idn"),
   domain_id: idOf("dom"),
-  address: z13.string(),
-  localpart: z13.string(),
+  address: z14.string(),
+  localpart: z14.string(),
   /** Inbound routing keys off this: mail to the address wakes exactly this agent. */
   owning_agent_id: idOf("agt"),
-  status: z13.enum(["active", "disabled"]),
+  status: z14.enum(["active", "disabled"]),
   created_at: Timestamp
 });
-var PhoneTierSchema = z13.enum(["sole_prop", "standard"]);
-var BrandStatusSchema = z13.enum(["none", "pending_verification", "verified", "rejected"]);
-var CampaignStatusSchema = z13.enum(["none", "pending", "approved", "rejected"]);
-var PhoneNumberSchema = z13.object({
+var PhoneTierSchema = z14.enum(["sole_prop", "standard"]);
+var BrandStatusSchema = z14.enum(["none", "pending_verification", "verified", "rejected"]);
+var CampaignStatusSchema = z14.enum(["none", "pending", "approved", "rejected"]);
+var PhoneNumberSchema = z14.object({
   id: idOf("pho"),
-  object: z13.literal("phone_number"),
+  object: z14.literal("phone_number"),
   identity_id: idOf("idn"),
-  e164: z13.string(),
-  country: z13.string(),
-  capabilities: z13.object({
+  e164: z14.string(),
+  country: z14.string(),
+  capabilities: z14.object({
     /** Live the moment the number is bought — inbound never waits on carrier registration. */
-    sms_inbound: z13.boolean(),
+    sms_inbound: z14.boolean(),
     /** True **iff** `campaign_status === "approved"`. Nothing else may set it. */
-    sms_outbound: z13.boolean(),
+    sms_outbound: z14.boolean(),
     /** Voice is not a P2 capability; the field exists so its absence is explicit. */
-    voice: z13.literal(false)
+    voice: z14.literal(false)
   }),
   tier: PhoneTierSchema,
   brand_status: BrandStatusSchema,
@@ -1485,19 +1648,19 @@ var PhoneNumberSchema = z13.object({
   provisioned_at: Timestamp.nullable(),
   created_at: Timestamp
 });
-var InboundMessageSchema = z13.object({
+var InboundMessageSchema = z14.object({
   id: idOf("inb"),
-  object: z13.literal("inbound_message"),
-  channel: z13.enum(["email", "sms"]),
+  object: z14.literal("inbound_message"),
+  channel: z14.enum(["email", "sms"]),
   identity_id: idOf("idn"),
   /** The `eml_`/`pho_` endpoint it arrived at — the persona is decided by *where*, not by *who*. */
-  endpoint_id: z13.string(),
-  from: z13.string(),
-  to: z13.string(),
-  subject: z13.string().nullable(),
-  text: z13.string(),
+  endpoint_id: z14.string(),
+  from: z14.string(),
+  to: z14.string(),
+  subject: z14.string().nullable(),
+  text: z14.string(),
   /** SPF/DKIM/DMARC for mail, carrier origin for SMS. Kept for the audit of why it was accepted. */
-  auth: z13.record(z13.string(), z13.string()),
+  auth: z14.record(z14.string(), z14.string()),
   /** The session this message woke. Null until the wake seam lands (see ADR-0120). */
   session_id: idOf("ses").nullable(),
   received_at: Timestamp,
@@ -1507,44 +1670,44 @@ var InboundMessageSchema = z13.object({
    */
   read_at: Timestamp.nullable().default(null)
 });
-var OutboundMessageSchema = z13.object({
+var OutboundMessageSchema = z14.object({
   id: idOf("out"),
-  object: z13.literal("outbound_message"),
+  object: z14.literal("outbound_message"),
   channel: InboundMessageSchema.shape.channel,
   identity_id: idOf("idn"),
   /** The `eml_` endpoint it was sent from. */
-  endpoint_id: z13.string(),
-  from: z13.string(),
-  to: z13.array(z13.string()),
-  subject: z13.string().nullable(),
-  text: z13.string(),
+  endpoint_id: z14.string(),
+  from: z14.string(),
+  to: z14.array(z14.string()),
+  subject: z14.string().nullable(),
+  text: z14.string(),
   sent_by_agent_id: idOf("agt").nullable(),
   actor: PrincipalSchema.nullable(),
   sent_at: Timestamp
 });
 
 // ../core/src/schema/app.ts
-import { z as z14 } from "zod";
-var AppTypeSchema = z14.enum(["frontend_only", "fullstack"]);
-var AppStatusSchema = z14.enum(["provisioning", "active", "error"]);
-var AppMcpPathSchema = z14.string().regex(/^\/\S*$/, "must be an absolute path beginning with /").max(128);
-var AppSchema = z14.object({
+import { z as z15 } from "zod";
+var AppTypeSchema = z15.enum(["frontend_only", "fullstack"]);
+var AppStatusSchema = z15.enum(["provisioning", "active", "error"]);
+var AppMcpPathSchema = z15.string().regex(/^\/\S*$/, "must be an absolute path beginning with /").max(128);
+var AppSchema = z15.object({
   id: idOf("app"),
-  object: z14.literal("app"),
-  name: z14.string(),
-  description: z14.string().nullable(),
+  object: z15.literal("app"),
+  name: z15.string(),
+  description: z15.string().nullable(),
   type: AppTypeSchema,
   /**
    * The customer's own project name that made this app, or `null` for one made outside a project
    * (ADR-0375). Customer-visible, unlike the provider handles: it is the word the customer typed,
    * and the refusal that guards a name quotes it.
    */
-  project: z14.string().nullable(),
+  project: z15.string().nullable(),
   status: AppStatusSchema,
   /** The address the app answers on — platform hostname until a custom domain connects. */
-  url: z14.string().nullable(),
+  url: z15.string().nullable(),
   /** White-label words when `status` is `error`; never the provider's. */
-  error: z14.string().nullable(),
+  error: z15.string().nullable(),
   /** Where the app serves MCP, or `null`. The bearer token for it is a server column. */
   mcp: AppMcpPathSchema.nullable(),
   /**
@@ -1552,80 +1715,80 @@ var AppSchema = z14.object({
    * than linking its `url` (`§29.1`)? True when the platform holds the app's `DASHBOARD_TOKEN`
    * or a secret of that name exists on the app; derived on read, never stored.
    */
-  dashboard: z14.boolean(),
+  dashboard: z15.boolean(),
   created_at: Timestamp
 });
-var AppDeploymentStatusSchema = z14.enum(["queued", "building", "ready", "error"]);
-var AppDeploymentSchema = z14.object({
+var AppDeploymentStatusSchema = z15.enum(["queued", "building", "ready", "error"]);
+var AppDeploymentSchema = z15.object({
   id: idOf("apd"),
-  object: z14.literal("app_deployment"),
+  object: z15.literal("app_deployment"),
   app_id: idOf("app"),
   status: AppDeploymentStatusSchema,
-  url: z14.string().nullable(),
-  error: z14.string().nullable(),
+  url: z15.string().nullable(),
+  error: z15.string().nullable(),
   /** The client's opaque digest of the files, echoed verbatim so it can skip an unchanged deploy. */
-  content_hash: z14.string().nullable(),
+  content_hash: z15.string().nullable(),
   created_at: Timestamp
 });
-var AppDeploymentFilesSchema = z14.object({
-  object: z14.literal("app_deployment_files"),
+var AppDeploymentFilesSchema = z15.object({
+  object: z15.literal("app_deployment_files"),
   deployment_id: idOf("apd"),
-  files: z14.record(z14.string().min(1), z14.string())
+  files: z15.record(z15.string().min(1), z15.string())
 });
-var AppSecretSchema = z14.object({
-  object: z14.literal("app_secret"),
-  name: z14.string(),
+var AppSecretSchema = z15.object({
+  object: z15.literal("app_secret"),
+  name: z15.string(),
   /** The client's opaque digest of the value, echoed verbatim so it can skip an unchanged write. */
-  value_hash: z14.string().nullable(),
+  value_hash: z15.string().nullable(),
   created_at: Timestamp
 });
-var AppEntrySchema = z14.object({
-  object: z14.literal("app_entry"),
-  url: z14.string(),
-  ticket: z14.string()
+var AppEntrySchema = z15.object({
+  object: z15.literal("app_entry"),
+  url: z15.string(),
+  ticket: z15.string()
 });
-var AppAccessSchema = z14.object({
-  object: z14.literal("app_access"),
-  url: z14.string().nullable(),
-  password: z14.string().nullable()
+var AppAccessSchema = z15.object({
+  object: z15.literal("app_access"),
+  url: z15.string().nullable(),
+  password: z15.string().nullable()
 });
-var AppDomainStatusSchema = z14.enum(["pending", "connected", "failed"]);
-var AppDomainSchema = z14.object({
-  object: z14.literal("app_domain"),
+var AppDomainStatusSchema = z15.enum(["pending", "connected", "failed"]);
+var AppDomainSchema = z15.object({
+  object: z15.literal("app_domain"),
   app_id: idOf("app"),
   domain_id: idOf("dom"),
-  domain: z14.string(),
+  domain: z15.string(),
   status: AppDomainStatusSchema,
   created_at: Timestamp
 });
 var ENV_NAME = /^[A-Z_][A-Z0-9_]*$/;
 var APP_NAME = /^[a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?$/;
-var AppPermissionsSchema = z14.object({
-  object: z14.literal("app_permissions"),
+var AppPermissionsSchema = z15.object({
+  object: z15.literal("app_permissions"),
   app_id: idOf("app"),
-  scopes: z14.array(z14.string())
+  scopes: z15.array(z15.string())
 });
 
 // ../core/src/schema/install.ts
-import { z as z15 } from "zod";
-var BlueprintInstallSourceSchema = z15.enum(["studio", "cli"]);
-var BlueprintInstallStatusSchema = z15.enum(["pending", "applied", "failed"]);
-var ResourceActionSchema = z15.enum(["created", "updated", "unchanged", "deleted", "refused"]);
-var ResourceReportSchema = z15.object({
-  name: z15.string().min(1),
+import { z as z16 } from "zod";
+var BlueprintInstallSourceSchema = z16.enum(["studio", "cli"]);
+var BlueprintInstallStatusSchema = z16.enum(["pending", "applied", "failed"]);
+var ResourceActionSchema = z16.enum(["created", "updated", "unchanged", "deleted", "refused"]);
+var ResourceReportSchema = z16.object({
+  name: z16.string().min(1),
   action: ResourceActionSchema,
   /** The `agt_`/`app_`/`ses_`… the line resolved to. Absent on a refusal that never got an id. */
-  id: z15.string().optional(),
+  id: z16.string().optional(),
   /** An app's hostname once its build went live; `null` while it has none. Apps only. */
-  url: z15.string().nullable().optional(),
+  url: z16.string().nullable().optional(),
   /**
    * What a TASK is called and who owes it. `name` is the declaration key (`first-render`), which is
    * how a re-apply finds the same card and is not a sentence anybody wants read to them. The
    * dashboard's opening message lists the team's work, so it needs the title the board shows and the
    * seat that holds it. Tasks only.
    */
-  title: z15.string().optional(),
-  assignee: z15.string().optional(),
+  title: z16.string().optional(),
+  assignee: z16.string().optional(),
   /**
    * A SCHEDULE'S brief, in one short line — the opening sentence of its `input_template`. A
    * schedules line is named `<agent> @ <cron>`, which says when something runs and nothing at all
@@ -1633,50 +1796,50 @@ var ResourceReportSchema = z15.object({
    * Written here rather than read back from the deployment so the receipt stays the one read the
    * welcome needs. Schedules only.
    */
-  summary: z15.string().optional(),
-  reason: z15.string().optional()
-});
-var BlueprintReportSchema = z15.object({
-  skills: z15.array(ResourceReportSchema),
-  identities: z15.array(ResourceReportSchema),
-  vaults: z15.array(ResourceReportSchema),
-  apps: z15.array(ResourceReportSchema),
-  agents: z15.array(ResourceReportSchema),
-  schedules: z15.array(ResourceReportSchema),
-  intake: z15.array(ResourceReportSchema),
+  summary: z16.string().optional(),
+  reason: z16.string().optional()
+});
+var BlueprintReportSchema = z16.object({
+  skills: z16.array(ResourceReportSchema),
+  identities: z16.array(ResourceReportSchema),
+  vaults: z16.array(ResourceReportSchema),
+  apps: z16.array(ResourceReportSchema),
+  agents: z16.array(ResourceReportSchema),
+  schedules: z16.array(ResourceReportSchema),
+  intake: z16.array(ResourceReportSchema),
   /** One line per declared task (§31.11), `id` the card's `crd_`. Defaulted so older rows parse. */
-  tasks: z15.array(ResourceReportSchema).default([]),
-  skipped: z15.array(z15.string()),
-  deselected: z15.array(z15.string()).default([])
+  tasks: z16.array(ResourceReportSchema).default([]),
+  skipped: z16.array(z16.string()),
+  deselected: z16.array(z16.string()).default([])
 });
-var BlueprintSelectionSchema = z15.object({
-  agents: z15.array(z15.string().min(1)),
-  apps: z15.array(z15.string().min(1))
+var BlueprintSelectionSchema = z16.object({
+  agents: z16.array(z16.string().min(1)),
+  apps: z16.array(z16.string().min(1))
 });
-var BlueprintInstallSchema = z15.object({
+var BlueprintInstallSchema = z16.object({
   id: idOf("bpi"),
-  object: z15.literal("blueprint_install"),
+  object: z16.literal("blueprint_install"),
   /** The customer's own `defineProject({ name })` — the same word `app.project` stamps (§29.2). */
-  project: z15.string().min(1),
+  project: z16.string().min(1),
   /** The pair the declaration resolved to; `null` for a declaration that names no blueprint. */
-  blueprint: z15.string().nullable(),
-  template: z15.string().nullable(),
+  blueprint: z16.string().nullable(),
+  template: z16.string().nullable(),
   /**
    * Applies, not versions of anything: 1 on the first apply, +1 on each one after, whichever writer
    * made it. It is not an agent version and it never rolls back.
    */
-  revision: z15.number().int().positive(),
+  revision: z16.number().int().positive(),
   /**
    * The blueprint artifact version this came from, or `null` when it was applied from a working
    * tree — an operator editing a clone has no version to name.
    */
-  artifact_version: z15.string().nullable(),
+  artifact_version: z16.string().nullable(),
   /**
    * The setup answers this project was configured with (§7.1 fields, keyed by their `key`), so a
    * re-apply does not re-ask and both writers configure from the same answers. Configuration only:
    * a secret is a vault credential (§23) or an app secret (§29.2), and neither is ever an answer.
    */
-  answers: z15.record(z15.string(), z15.unknown()),
+  answers: z16.record(z16.string(), z16.unknown()),
   /**
    * NO `declaration` ON THE WIRE, and that is the reconciliation of §29.6 with §31.1.
    *
@@ -1708,7 +1871,7 @@ var BlueprintInstallSchema = z15.object({
    * Why a `failed` run threw, in one sentence — or, on an `applied` row, which `required` agent or
    * app the apply refused and why (§29.6). `null` otherwise. Never a stack or a key.
    */
-  failure: z15.string().nullable(),
+  failure: z16.string().nullable(),
   /**
    * The `selection` the apply carried, or `null` — every row written before §31.2 and every apply
    * that omitted it, both meaning "everything". Defaulted so those rows parse unchanged.
@@ -1716,152 +1879,37 @@ var BlueprintInstallSchema = z15.object({
   selection: BlueprintSelectionSchema.nullable().default(null),
   /** When the answers were last edited through `PATCH …/installs/{id}` (§31.8); `null` if never. */
   context_updated_at: Timestamp.nullable().default(null),
+  /**
+   * What this install's agent, app, identity and vault names start with (§29.6, ADR-1104): `""`
+   * when its template's names were free in the organization, `"<project>-"` when any was already
+   * another project's. Decided once, by the apply that created the row, and never again. `null` is
+   * an install from before that rule, or one a working tree recorded: its names are the template's.
+   * Optional only so a Worker from before the field still parses; this API always sends it.
+   */
+  name_prefix: z16.string().nullable().optional(),
   applied_at: Timestamp,
   created_at: Timestamp
 });
-var ProjectContextAnswerSchema = z15.object({
-  key: z15.string().min(1),
-  label: z15.string(),
-  value: z15.union([z15.string(), z15.array(z15.string())])
-});
-var ProjectContextSchema = z15.object({
-  object: z15.literal("project_context"),
-  project: z15.string().min(1),
-  blueprint: z15.string().nullable(),
-  template: z15.string().nullable(),
-  artifact_version: z15.string().nullable(),
-  answers: z15.array(ProjectContextAnswerSchema),
-  apps: z15.array(z15.object({ name: z15.string().min(1), url: z15.string().nullable() })),
-  agents: z15.array(z15.object({ name: z15.string().min(1), role: z15.string().nullable() })),
+var ProjectContextAnswerSchema = z16.object({
+  key: z16.string().min(1),
+  label: z16.string(),
+  value: z16.union([z16.string(), z16.array(z16.string())])
+});
+var ProjectContextSchema = z16.object({
+  object: z16.literal("project_context"),
+  project: z16.string().min(1),
+  blueprint: z16.string().nullable(),
+  template: z16.string().nullable(),
+  artifact_version: z16.string().nullable(),
+  answers: z16.array(ProjectContextAnswerSchema),
+  apps: z16.array(z16.object({ name: z16.string().min(1), url: z16.string().nullable() })),
+  agents: z16.array(z16.object({ name: z16.string().min(1), role: z16.string().nullable() })),
   /** `context_updated_at` once the answers have been edited, `applied_at` until then. */
   updated_at: Timestamp
 });
 
 // ../core/src/schema/blueprint.ts
 import { z as z17 } from "zod";
-
-// ../core/src/schema/social.ts
-import { z as z16 } from "zod";
-var SOCIAL_PLATFORMS = [
-  "bluesky",
-  "facebook",
-  "instagram",
-  "linkedin",
-  "mastodon",
-  "pinterest",
-  "reddit",
-  "threads",
-  "tiktok",
-  "x",
-  "youtube"
-];
-var SOCIAL_APPS = /* @__PURE__ */ new Set([...SOCIAL_PLATFORMS, "twitter"]);
-var SOCIAL_TEXT_PLATFORMS = [
-  "bluesky",
-  "facebook",
-  "linkedin",
-  "mastodon",
-  "threads",
-  "x"
-];
-var SOCIAL_MEDIA_PLATFORMS = ["instagram", "tiktok", "youtube"];
-var SOCIAL_VISIBILITIES = ["public", "unlisted", "private"];
-var SOCIAL_VISIBILITY_PLATFORMS = ["mastodon", "youtube"];
-var SocialVisibilitySchema = z16.enum(SOCIAL_VISIBILITIES);
-var SOCIAL_VISIBILITY_RULE = `visibility is ${SOCIAL_VISIBILITIES.join(", ")} and only ${SOCIAL_VISIBILITY_PLATFORMS.join(" and ")} accept it; omit it and the post publishes at the account's own default, which on a video channel is normally public`;
-var SocialPlatformSchema = z16.enum(SOCIAL_PLATFORMS);
-var SocialTextPlatformSchema = z16.enum(SOCIAL_TEXT_PLATFORMS);
-var isText = (platform) => SOCIAL_TEXT_PLATFORMS.includes(platform);
-var isMedia = (platform) => SOCIAL_MEDIA_PLATFORMS.includes(platform);
-var SOCIAL_PLATFORM_RULE = `${SOCIAL_TEXT_PLATFORMS.join(", ")} take a text-only post; ${SOCIAL_MEDIA_PLATFORMS.join(", ")} may be named only when the post carries media_urls or file_ids; ${SOCIAL_PLATFORMS.filter((platform) => !isText(platform) && !isMedia(platform)).join(", ")} cannot be posted to`;
-var SocialAccountSchema = z16.object({
-  id: z16.string().min(1),
-  object: z16.literal("social_account"),
-  identity_id: idOf("idn"),
-  platform: SocialPlatformSchema,
-  username: z16.string().nullable(),
-  display_name: z16.string().nullable(),
-  avatar_url: z16.url().nullable(),
-  connected_at: Timestamp.nullable()
-});
-var SocialPostStatusSchema = z16.enum([
-  "draft",
-  "scheduled",
-  "processing",
-  "posted",
-  "failed",
-  "deleted"
-]);
-var SocialPostSchema = z16.object({
-  id: z16.string().min(1),
-  object: z16.literal("social_post"),
-  identity_id: idOf("idn"),
-  title: z16.string(),
-  platforms: z16.array(SocialPlatformSchema),
-  status: SocialPostStatusSchema,
-  scheduled_at: Timestamp.nullable(),
-  posted_at: Timestamp.nullable(),
-  error: z16.string().nullable()
-});
-var SocialUploadSchema = z16.object({
-  id: z16.string().min(1),
-  object: z16.literal("social_upload"),
-  identity_id: idOf("idn"),
-  type: z16.enum(["image", "video", "document"]),
-  url: z16.url().nullable()
-});
-var SocialAnalyticsSchema = z16.object({
-  object: z16.literal("social_analytics"),
-  identity_id: idOf("idn"),
-  resource_id: z16.string().min(1),
-  platform: SocialPlatformSchema.nullable(),
-  data: z16.unknown()
-});
-var SocialCommentSchema = z16.object({
-  id: z16.string().min(1),
-  object: z16.literal("social_comment"),
-  identity_id: idOf("idn"),
-  post_id: z16.string().min(1),
-  platforms: z16.array(SocialPlatformSchema),
-  status: SocialPostStatusSchema,
-  posted_at: Timestamp.nullable(),
-  data: z16.unknown()
-});
-var POST_STATUSES = ["pending", "scheduled", "posted", "failed"];
-var PostStatusSchema = z16.enum(POST_STATUSES);
-var PostSchema = z16.object({
-  object: z16.literal("post"),
-  id: z16.string().min(1),
-  status: PostStatusSchema,
-  identity_id: z16.string().nullable(),
-  agent_id: z16.string().nullable(),
-  session_id: z16.string().nullable(),
-  tool_call_id: z16.string().nullable(),
-  content: z16.string().nullable(),
-  platforms: z16.array(z16.string()),
-  file_ids: z16.array(z16.string()),
-  media_urls: z16.array(z16.string()),
-  visibility: SocialVisibilitySchema.nullable(),
-  scheduled_at: Timestamp.nullable(),
-  posted_at: Timestamp.nullable(),
-  url: z16.string().nullable(),
-  error: z16.string().nullable(),
-  /** The latest stored reading, `{metric: value}`; `null` before `social.post_metrics` read any. */
-  metrics: z16.record(z16.string(), z16.number()).nullable(),
-  measured_at: Timestamp.nullable(),
-  /** Pending only: the earlier post this call would repeat — same identity, network and file. */
-  duplicate_of: z16.object({
-    id: z16.string(),
-    status: PostStatusSchema,
-    platform: z16.string(),
-    at: Timestamp.nullable(),
-    agent_id: z16.string().nullable(),
-    session_id: z16.string().nullable()
-  }).nullable(),
-  created_at: Timestamp
-});
-
-// ../core/src/schema/blueprint.ts
 var BlueprintScheduleSchema = z17.object({
   agent: z17.string().min(1),
   cron: z17.string().min(1),
@@ -1978,6 +2026,13 @@ var VaultCredentialSchema = z18.object({
   host: z18.string().nullable(),
   /** The exact MCP server URL an `mcp_*` token is matched to. */
   mcp_server_url: z18.url().nullable(),
+  /**
+   * The one agent this credential may be injected into (ADR-1097). `null` is any agent that
+   * declares `mcp_server_url` — except the platform's own `/v1/mcp`, whose key is never injected
+   * unbound. Set at create, by `admin`, and immutable like the rest. Defaults to `null` so a
+   * client reading a control plane older than the field still parses the row.
+   */
+  agent_id: idOf("agt").nullable().default(null),
   placeholder_ref: z18.string(),
   expires_at: Timestamp.nullable(),
   last_injected_at: Timestamp.nullable(),
@@ -2025,7 +2080,12 @@ var SessionHandoffSchema = z19.object({
 var ChannelBriefSchema = z19.object({
   root_session_id: idOf("ses"),
   name: z19.string().min(1),
-  members: z19.array(z19.string().min(1))
+  members: z19.array(z19.string().min(1)),
+  /**
+   * The receiver's own name, so it can tell the part of a post addressed to it from a teammate's
+   * (ADR-1099). Optional: a brief pinned before it existed still parses.
+   */
+  you: z19.string().min(1).optional()
 });
 var ChannelPostRequestSchema = z19.object({
   message: z19.string().min(1).max(2e4)
@@ -3235,6 +3295,10 @@ var MiniAppSchema = MiniAppSummarySchema.extend({
   spec: ResolvedPageSpecSchema
 });
 
+// ../core/src/session-token.ts
+var SESSION_TTL_SECONDS = 30 * 24 * 60 * 60;
+var encoder = new TextEncoder();
+
 // ../core/src/logo-svg.ts
 var MAX_BYTES = 16 * 1024;
 
@@ -3394,8 +3458,14 @@ var BLUEPRINTS = {
    * Post queue, accounts, calendar, analytics. The wire ids are frozen: `install.template` is a
    * stored string on every provisioned org, so the display names moved ("Naive Short Form v1",
    * "Naive Long Form v1", "Naive Clipping v1") and these did not.
+   *
+   * The first three are the base crews. The six after them are NICHE CHANNEL TEMPLATES (ADR-1115,
+   * ADR-1119): each is a thin template that reuses a base crew (`gaming-clips`/`news`/`sports` on
+   * `clipping`; `ufc`/`history`/`animal-feast` on `faceless`) and pins `naive/channel-template-<niche>`
+   * in every seat's `skills[]`. They are ordinary templates of this blueprint, so they publish, install
+   * and switch through the exact paths the base three do — the whole point of a template being data.
    */
-  media: { templates: ["faceless", "longform", "clipping"] },
+  media: { templates: ["faceless", "longform", "clipping", "gaming-clips", "news", "sports", "ufc", "history", "animal-feast"] },
   /** Pages, posts, forms, analytics — a published site with a crew behind it (`usenaive/web-blueprint`). */
   web: { templates: ["publisher"], default: "publisher" }
 };
@@ -4203,7 +4273,7 @@ function desiredMetadata(decl, of, current) {
     project: of.project,
     ...of.blueprint !== void 0 ? { blueprint: of.blueprint } : {},
     template: of.template,
-    group: of.template
+    group: of.group ?? of.template
   };
 }
 function desiredSystem(decl, of) {
@@ -4247,14 +4317,14 @@ async function createAgent(client, decl, tools, team, identityId, system, metada
   if (identityId !== void 0) await client.identities.attach(created.id, identityId);
   return { name: decl.name, action: "created", id: created.id };
 }
-async function upsertAgent(client, decl, existing, ids, dryRun, scoped, of) {
+async function upsertAgent(client, decl, existing, ids, dryRun, scoped2, of) {
   const unresolved = (decl.allowed_apps ?? []).filter((name) => !ids.apps.has(name));
   const identityId = decl.identity === void 0 ? void 0 : ids.identities.get(decl.identity);
   const missing = unresolved.length > 0 ? `allowed_apps needs app "${unresolved[0]}"` : decl.identity !== void 0 && identityId === void 0 ? `identity needs "${decl.identity}"` : null;
   if (missing !== null && !dryRun) {
     return { name: decl.name, action: "refused", reason: `${missing}, which was not provisioned in this run` };
   }
-  const appIds = decl.allowed_apps !== void 0 ? decl.allowed_apps.flatMap((name) => ids.apps.get(name) ?? []) : scoped;
+  const appIds = decl.allowed_apps !== void 0 ? decl.allowed_apps.flatMap((name) => ids.apps.get(name) ?? []) : scoped2;
   const current = existing.find((agent) => agent.name === decl.name) ?? null;
   const owner = typeof current?.metadata?.["project"] === "string" ? current.metadata["project"] : null;
   if (current && of.template !== void 0 && owner !== null && owner !== of.project && !of.adopt) {
@@ -4352,6 +4422,7 @@ async function reconcileSchedules(client, agent, declared, live, identityIds, dr
       summary: brief(decl.input)
     }))
   );
+  if (agent.action === "refused") return;
   for (const row of rows.filter((row2) => !declared.some((decl) => decl.cron === row2.cron))) {
     const name = `${agent.name} @ ${row.cron}`;
     await attempt(into, name, () => tombstone(name, row, (id) => client.deployments.delete(id), dryRun));
@@ -4672,17 +4743,22 @@ async function upsertSkill(client, decl, opts) {
   const pushed = await client.skills.push({ slug: decl.slug, content, sha256 });
   return { name: decl.slug, action, id: pushed.id };
 }
-async function upsertIdentity(client, decl, dryRun, identityIds) {
+async function upsertIdentity(client, decl, dryRun, identityIds, owner) {
   const current = await absent(client.identities.get(decl.name));
   if (!current) {
     if (dryRun) return { name: decl.name, action: "created" };
     const created = await client.identities.create({
       name: decl.name,
-      ...decl.description !== void 0 ? { description: decl.description } : {}
+      ...decl.description !== void 0 ? { description: decl.description } : {},
+      ...owner !== void 0 ? { metadata: { project: owner } } : {}
     });
     identityIds.set(decl.name, created.id);
     return { name: decl.name, action: "created", id: created.id };
   }
+  const held = typeof current.metadata["project"] === "string" ? current.metadata["project"] : null;
+  if (owner !== void 0 && held !== owner) {
+    return { name: decl.name, action: "refused", id: current.id, reason: ownershipRefusal(decl.name, owner, held, "identity") };
+  }
   identityIds.set(decl.name, current.id);
   const drifted = decl.description !== void 0 && decl.description !== current.description;
   if (drifted && !dryRun) await client.identities.update(current.id, { description: decl.description ?? null });
@@ -4745,12 +4821,14 @@ async function up(config, client, opts = {}) {
   const taken = selectCrew(config, opts.select);
   const report2 = { dry_run: dryRun, ...applied(config), skills: [], identities: [], vaults: [], apps: [], agents: [], schedules: [], intake: [], tasks: [], skipped: [], deselected: taken.deselected };
   const owner = { project: config.name, adopt: opts.adopt ?? false, skipped: report2.skipped };
+  const project = opts.project ?? config.name;
+  const isolated = opts.isolated === true ? project : void 0;
   const hosted = opts.trees !== void 0;
   for (const decl of config.skills) {
     await attempt(report2.skills, decl.slug, () => upsertSkill(client, decl, { dryRun, dir, hosted, skills: opts.skills ?? {} }));
   }
   for (const decl of config.identities) {
-    await attempt(report2.identities, decl.name, () => upsertIdentity(client, decl, dryRun, ids.identities));
+    await attempt(report2.identities, decl.name, () => upsertIdentity(client, decl, dryRun, ids.identities, isolated));
     const identityId = ids.identities.get(decl.name);
     report2.identities.push(...await reportLegal(client, decl.legal ?? [], identityId, report2.skipped));
     for (const wallet of decl.wallet === void 0 ? [] : Array.isArray(decl.wallet) ? decl.wallet : [decl.wallet]) {
@@ -4779,7 +4857,7 @@ async function up(config, client, opts = {}) {
     ...opts.platform,
     known: {
       ...opts.platform.known,
-      [PLATFORM_ENV.project]: opts.project ?? config.name,
+      [PLATFORM_ENV.project]: project,
       ...identityEnv(config, ids.identities)
     }
   };
@@ -4812,9 +4890,10 @@ async function up(config, client, opts = {}) {
   );
   const existing = taken.agents.length > 0 || config.removed.agents.length > 0 || config.kept.agents.length > 0 || config.tasks.length > 0 ? await listAll(client.config, "/v1/agents", AgentSchema, report2.skipped) : [];
   const deployments = taken.agents.some((decl) => decl.schedules !== void 0) ? await listAll(client.config, "/v1/deployments", DeploymentSchema, report2.skipped) : [];
-  const scoped = config.apps.length > 0 ? [...ids.apps.values()] : void 0;
+  const scoped2 = config.apps.length > 0 ? [...ids.apps.values()] : void 0;
   const crew = await eachInFlight(taken.agents, async (decl) => {
-    const agent = await line(decl.name, () => upsertAgent(client, decl, existing, ids, dryRun, scoped, { project: opts.project ?? config.name, ...applied(config), adopt: opts.adopt ?? false }));
+    const of = { project, ...applied(config), adopt: opts.adopt ?? false, ...isolated === void 0 ? {} : { group: project } };
+    const agent = await line(decl.name, () => upsertAgent(client, decl, existing, ids, dryRun, scoped2, of));
     const schedules = [];
     if (decl.schedules !== void 0) {
       await reconcileSchedules(client, agent, decl.schedules, deployments, ids.identities, dryRun, schedules);
@@ -4851,6 +4930,56 @@ async function up(config, client, opts = {}) {
   );
   return report2;
 }
+
+// src/scoped.ts
+function scoped(config, prefix, project) {
+  const removed = { ...config.removed, skills: [] };
+  if (prefix === "") return { ...config, name: project, removed };
+  const as = (name) => prefix + name;
+  const apps = new Set(config.apps.map((app) => app.name));
+  const tool = (key) => {
+    const app = key.split(".")[0] ?? "";
+    return key.includes(".") && apps.has(app) ? as(key) : key;
+  };
+  const team = teamLine(config, as);
+  const agent = (decl) => ({
+    ...decl,
+    name: as(decl.name),
+    system: decl.system === void 0 ? team : `${decl.system}
+
+${team}`,
+    ...decl.tools === void 0 ? {} : { tools: { ...decl.tools, configs: Object.fromEntries(Object.entries(decl.tools.configs).map(([key, one]) => [tool(key), one])) } },
+    ...decl.allowed_apps === void 0 ? {} : { allowed_apps: decl.allowed_apps.map(as) },
+    ...decl.identity === void 0 ? {} : { identity: as(decl.identity) },
+    ...Array.isArray(decl.handoffs) ? { handoffs: decl.handoffs.map(as) } : {},
+    ...hasRoster(decl.multiagent) ? { multiagent: { ...decl.multiagent, agents: decl.multiagent.agents.map((one) => one.type === "agent" ? { ...one, name: as(one.name) } : one) } } : {},
+    ...decl.schedules === void 0 ? {} : { schedules: decl.schedules.map((one) => one.identity === void 0 ? one : { ...one, identity: as(one.identity) }) }
+  });
+  return {
+    ...config,
+    name: project,
+    identities: config.identities.map((one) => ({ ...one, name: as(one.name) })),
+    vaults: config.vaults.map((one) => ({ ...one, name: as(one.name), ...one.identity === void 0 ? {} : { identity: as(one.identity) } })),
+    apps: config.apps.map((one) => ({ ...one, name: as(one.name) })),
+    agents: config.agents.map(agent),
+    tasks: config.tasks.map((one) => one.assignee === void 0 ? one : { ...one, assignee: as(one.assignee) }),
+    removed: {
+      ...removed,
+      apps: config.removed.apps.map(as),
+      agents: config.removed.agents.map(as),
+      identities: config.removed.identities.map(as),
+      vaults: config.removed.vaults.map(as)
+    },
+    kept: { agents: config.kept.agents.map(as) }
+  };
+}
+function teamLine(config, as) {
+  const names = [
+    ...config.agents.map((one) => `${one.name} is ${as(one.name)}`),
+    ...config.apps.map((one) => `the app ${one.name} is ${as(one.name)} (its tools are ${as(one.name)}.*)`)
+  ];
+  return `Your team's names here: ${names.join("; ")}.`;
+}
 export {
   BLUEPRINTS,
   BlueprintRefusal,
@@ -4867,6 +4996,7 @@ export {
   loadConfig,
   migrationFiles,
   parseProject,
+  scoped,
   selectCrew,
   up
 };