@usenaive-sdk/vetta-cli 0.5.0 → 0.6.0

package/dist/index.js

@@ -5358,10 +5358,10 @@ var require_cst_scalar = __commonJS({
         case "|":
         case ">": {
           const he = source.indexOf("\n");
-          const head = source.substring(0, he);
+          const head4 = source.substring(0, he);
           const body2 = source.substring(he + 1) + "\n";
           const props = [
-            { type: "block-scalar-header", offset, indent, source: head }
+            { type: "block-scalar-header", offset, indent, source: head4 }
           ];
           if (!addEndtoBlockProps(props, end))
             props.push({ type: "newline", offset: -1, indent, source: "\n" });
@@ -5421,19 +5421,19 @@ var require_cst_scalar = __commonJS({
     }
     function setBlockScalarValue(token, source) {
       const he = source.indexOf("\n");
-      const head = source.substring(0, he);
+      const head4 = source.substring(0, he);
       const body2 = source.substring(he + 1) + "\n";
       if (token.type === "block-scalar") {
         const header = token.props[0];
         if (header.type !== "block-scalar-header")
           throw new Error("Invalid block scalar header");
-        header.source = head;
+        header.source = head4;
         token.source = body2;
       } else {
         const { offset } = token;
         const indent = "indent" in token ? token.indent : -1;
         const props = [
-          { type: "block-scalar-header", offset, indent, source: head }
+          { type: "block-scalar-header", offset, indent, source: head4 }
         ];
         if (!addEndtoBlockProps(props, "end" in token ? token.end : void 0))
           props.push({ type: "newline", offset: -1, indent, source: "\n" });
@@ -7485,19 +7485,19 @@ var SWITCHES = /* @__PURE__ */ new Set([
 ]);
 var SHORT = { f: "file" };
 function parseLine(argv) {
-  const { head, rest } = splitAtRest(argv);
+  const { head: head4, rest } = splitAtRest(argv);
   const flags = {};
-  const words = [];
-  for (let index = 0; index < head.length; index += 1) {
-    const token = head[index] ?? "";
+  const words4 = [];
+  for (let index = 0; index < head4.length; index += 1) {
+    const token = head4[index] ?? "";
     const short = token.startsWith("-") && !token.startsWith("--") ? SHORT[token.slice(1)] : void 0;
     if (!token.startsWith("--") && short === void 0) {
-      words.push(token);
+      words4.push(token);
       continue;
     }
     const equals = short === void 0 ? token.indexOf("=") : -1;
     const name = short ?? (equals === -1 ? token.slice(2) : token.slice(2, equals));
-    const next = head[index + 1];
+    const next = head4[index + 1];
     const values = flags[name] ??= [];
     if (equals !== -1) values.push(token.slice(equals + 1));
     else if (!SWITCHES.has(name) && next !== void 0 && !next.startsWith("--")) {
@@ -7505,7 +7505,7 @@ function parseLine(argv) {
       index += 1;
     } else values.push(true);
   }
-  return { words, args: (from) => new Args(words.slice(from), flags, rest) };
+  return { words: words4, args: (from) => new Args(words4.slice(from), flags, rest) };
 }
 
 // src/config.ts
@@ -7556,9 +7556,9 @@ var ALPHABET = "0123456789abcdefghjkmnpqrstvwxyz";
 var SUFFIX_LENGTH = 26;
 var SUFFIX_PATTERN = new RegExp(`^[${ALPHABET}]{${SUFFIX_LENGTH},}$`);
 function isId(prefix, value) {
-  const head = `${prefix}_`;
-  if (!value.startsWith(head)) return false;
-  return SUFFIX_PATTERN.test(value.slice(head.length).toLowerCase());
+  const head4 = `${prefix}_`;
+  if (!value.startsWith(head4)) return false;
+  return SUFFIX_PATTERN.test(value.slice(head4.length).toLowerCase());
 }
 
 // ../../packages/core/src/errors.ts
@@ -7568,6 +7568,8 @@ var CODES = {
   unauthorized: ["authentication", 401],
   forbidden: ["permission", 403],
   not_found: ["not_found", 404],
+  /** The path exists; the method does not. The response carries `Allow` (§3). */
+  method_not_allowed: ["invalid_request", 405],
   budget_exceeded: ["quota", 402],
   insufficient_credits: ["quota", 402],
   /**
@@ -7713,6 +7715,8 @@ var AUDIT_ACTIONS_P1 = [
   "computer.resumed",
   "computer.snapshot_created",
   "computer.updated",
+  "computer.taken_over",
+  "computer.handed_back",
   "browser.live_view_opened",
   "deployment.created",
   "deployment.updated",
@@ -18891,10 +18895,10 @@ function _slugify() {
   return /* @__PURE__ */ _overwrite((input) => slugify(input));
 }
 // @__NO_SIDE_EFFECTS__
-function _array(Class2, element, params) {
+function _array(Class2, element4, params) {
   return new Class2({
     type: "array",
-    element,
+    element: element4,
     // get element() {
     //   return element;
     // },
@@ -20541,14 +20545,14 @@ function _installLazyMethods(inst, group, methods) {
       configurable: true,
       enumerable: false,
       get() {
-        const bound = fn.bind(this);
+        const bound4 = fn.bind(this);
         Object.defineProperty(this, key2, {
           configurable: true,
           writable: true,
           enumerable: true,
-          value: bound
+          value: bound4
         });
-        return bound;
+        return bound4;
       },
       set(v) {
         Object.defineProperty(this, key2, {
@@ -21176,8 +21180,8 @@ var ZodArray = /* @__PURE__ */ $constructor("ZodArray", (inst, def) => {
     }
   });
 });
-function array(element, params) {
-  return _array(ZodArray, element, params);
+function array(element4, params) {
+  return _array(ZodArray, element4, params);
 }
 function keyof(schema) {
   const shape = schema._zod.def.shape;
@@ -22214,8 +22218,8 @@ function convertBaseSchema(schema, ctx) {
           zodSchema = zodSchema.check(z.maxLength(schema.maxItems));
         }
       } else if (items !== void 0) {
-        const element = convertSchema(items, ctx);
-        let arraySchema = z.array(element);
+        const element4 = convertSchema(items, ctx);
+        let arraySchema = z.array(element4);
         if (typeof schema.minItems === "number") {
           arraySchema = arraySchema.min(schema.minItems);
         }
@@ -22361,7 +22365,7 @@ var JsonSchemaDocument = external_exports.record(external_exports.string(), exte
 var WindowSchema = external_exports.enum(["immediate", "priority", "loose"]);
 var TOKEN_TIERS = ["input", "cache_write", "cache_read", "output", "reasoning"];
 var TokenTierSchema = external_exports.enum(TOKEN_TIERS);
-var TOOL_TIERS = ["search", "media", "social", "browser", "storage"];
+var TOOL_TIERS = ["search", "media", "social", "browser", "storage", "email"];
 var LINE_ITEM_TIERS = [...TOKEN_TIERS, "computer", ...TOOL_TIERS];
 var LineItemTierSchema = external_exports.enum(LINE_ITEM_TIERS);
 var TokenUsageSchema = external_exports.object({
@@ -22388,11 +22392,41 @@ function parseHarness(value) {
 }
 
 // ../../packages/core/src/schema/org.ts
+var DEFAULT_ORG_TIMEZONE = "America/New_York";
+function canonicalZone(name) {
+  if (!name.includes("/") && name !== "UTC") return void 0;
+  try {
+    const zone = new Intl.DateTimeFormat("en-US", { timeZone: name }).resolvedOptions().timeZone;
+    return zone === "UTC" || Intl.supportedValuesOf("timeZone").includes(zone) ? zone : void 0;
+  } catch {
+    return void 0;
+  }
+}
+var TimezoneSchema = external_exports.string().transform((name, ctx) => {
+  const zone = canonicalZone(name);
+  if (zone === void 0) {
+    ctx.addIssue({ code: "custom", message: "not a timezone; use an IANA name such as America/Los_Angeles" });
+    return external_exports.NEVER;
+  }
+  return zone;
+});
 var OrganizationSchema = external_exports.object({
   id: idOf("org"),
   object: external_exports.literal("organization"),
   name: external_exports.string(),
   balance_micro_usd: MicroUsdField,
+  /**
+   * The company's timezone, an IANA name (`America/New_York`, §20.6). Times the company chooses or
+   * reads are in it: a new routine's zone, when a post goes out. `America/New_York` until changed.
+   * Defaulted so a reply from a control plane older than 0088 (or a rolled-back Worker) still parses
+   * in a newer SDK/CLI rather than throwing on every `orgs.get/list/update`.
+   */
+  timezone: external_exports.string().min(1).default(DEFAULT_ORG_TIMEZONE),
+  /**
+   * The company's logo, an SVG a person or an agent drew (§20.7), passed by `checkLogoSvg`. `null`
+   * until one is set. Defaulted so a reply from a control plane older than 0093 still parses.
+   */
+  logo_svg: external_exports.string().nullable().default(null),
   created_at: Timestamp
 });
 var RoleSchema = external_exports.enum(["owner", "admin", "member"]);
@@ -22725,7 +22759,14 @@ var BUILTIN_TOOLS = [
   // `publish_file`, and the first way anything the platform itself produced could be read back.
   "fetch_file",
   "find_stock_photo",
-  "session_spend"
+  "session_spend",
+  // A view the chat draws — spend, post views, the roadmap, the week ahead — read by code (§48).
+  "show",
+  // A card the model lays out, every number bound to a source code reads (§49).
+  "compose",
+  // Plan mode's two (§7.5): offered only to a session in plan mode or holding a plan.
+  "write_plan",
+  "propose_plan"
 ];
 var isToolName = (name) => BUILTIN_TOOLS.includes(name) || /^[a-z0-9_-]+(\.[a-z0-9_-]+)+$/i.test(name);
 var ToolConfigSchema = external_exports.object({
@@ -22826,6 +22867,22 @@ var SessionStatusSchema = external_exports.enum([
   "failed",
   "cancelled"
 ]);
+var SessionModeSchema = external_exports.enum(["plan", "build"]);
+var PLAN_MAX_CHARS = 2e4;
+var PlanSchema = external_exports.object({
+  object: external_exports.literal("plan"),
+  markdown: external_exports.string().max(PLAN_MAX_CHARS),
+  version: external_exports.number().int().nonnegative(),
+  by: external_exports.enum(["agent", "owner"]).nullable()
+});
+var PlanWriteSchema = external_exports.object({
+  markdown: external_exports.string().max(PLAN_MAX_CHARS),
+  base_version: external_exports.number().int().nonnegative()
+});
+var ProposePlanSchema = external_exports.object({
+  version: external_exports.number().int().positive(),
+  spends_or_publishes: external_exports.array(external_exports.string().min(1).max(200)).max(10).optional()
+});
 var StopReasonSchema = external_exports.enum([
   "end_turn",
   "awaiting_input",
@@ -22918,16 +22975,26 @@ var QuestionFieldSchema = external_exports.discriminatedUnion("type", [
     other: external_exports.boolean().default(true)
   })
 ]);
+var QUESTION_FIELDS_MAX = 3;
 var QuestionSchema = external_exports.object({
   prompt: external_exports.string().min(1).max(1e3),
-  fields: external_exports.array(QuestionFieldSchema).min(1).max(3)
+  fields: external_exports.array(QuestionFieldSchema).min(1).max(QUESTION_FIELDS_MAX, {
+    message: `a question has at most ${QUESTION_FIELDS_MAX} fields \u2014 ask the rest in a second question once these are answered`
+  })
 });
-var AnswersSchema = external_exports.record(
+var answersOf = (max, message4) => external_exports.record(
   external_exports.string().min(1).max(64),
   external_exports.union([external_exports.string().max(2e3), external_exports.array(external_exports.string().max(2e3)).min(1).max(12)])
-).refine((answers) => Object.keys(answers).length <= 3, {
-  message: "a question has at most 3 fields, so an answer has at most 3 keys"
-});
+).refine((answers) => Object.keys(answers).length <= max, { message: message4 });
+var AnswersSchema = answersOf(
+  QUESTION_FIELDS_MAX,
+  `a question has at most ${QUESTION_FIELDS_MAX} fields, so an answer has at most ${QUESTION_FIELDS_MAX} keys`
+);
+var TEMPLATE_QUESTIONS_MAX = 4;
+var InstallAnswersSchema = answersOf(
+  TEMPLATE_QUESTIONS_MAX,
+  `a template asks at most ${TEMPLATE_QUESTIONS_MAX} questions, so an install has at most ${TEMPLATE_QUESTIONS_MAX} answers`
+);
 var PendingActionSchema = external_exports.object({
   kind: external_exports.enum(["tool", "question"]).default("tool"),
   tool_call_id: external_exports.string(),
@@ -22968,6 +23035,13 @@ var SessionSchema = external_exports.object({
   parent_session_id: idOf("ses").nullable(),
   root_session_id: idOf("ses").nullable(),
   thread_role: ThreadRoleSchema.nullable(),
+  /**
+   * The model the latest send picked (§7 `model`), or `null` when none has and the session runs its
+   * pinned version's model (§10, ADR-0832). Defaulted so a reply from an older control plane parses.
+   */
+  model: external_exports.string().nullable().default(null),
+  /** Plan mode (§7.5, §10): defaulted so a reply from an older control plane parses as `build`. */
+  mode: SessionModeSchema.default("build"),
   status: SessionStatusSchema,
   stop_reason: StopReasonSchema.nullable(),
   window: WindowSchema,
@@ -22987,6 +23061,10 @@ var SendMessageSchema = external_exports.object({
   message: external_exports.string(),
   interrupt: external_exports.boolean().optional(),
   queue: external_exports.boolean().optional(),
+  /** A catalogue id: this session runs on it from this message's turn on (§7, ADR-0832). */
+  model: external_exports.string().min(1).optional(),
+  /** Plan mode from this message's turn on (§7.5, ADR-0905). */
+  mode: SessionModeSchema.optional(),
   idempotency_key: external_exports.string().optional()
 }).refine((body2) => !(body2.interrupt === true && body2.queue === true), {
   message: "a send is either an interrupt or queued, not both",
@@ -23001,7 +23079,14 @@ var ToolConfirmationSchema = external_exports.object({
   tool_call_id: external_exports.string(),
   decision: external_exports.enum(["allow", "deny"]),
   reason: external_exports.string().optional(),
-  scope: external_exports.enum(["call", "session"]).default("call")
+  scope: external_exports.enum(["call", "session"]).default("call"),
+  /**
+   * THE PERSON'S OWN ANSWERS for a template install they approve (ADR-1030): the call runs with
+   * these in place of the `answers` the agent proposed, and with nothing else changed. A modifier on
+   * `allow`, like `scope`: absent is the call as proposed. The route refuses it on a deny, on a session
+   * grant, on any other tool, and on answers the template's questions refuse (`answerProblems`).
+   */
+  answers: InstallAnswersSchema.optional()
 });
 var SessionAnswerSchema = external_exports.object({
   tool_call_id: external_exports.string(),
@@ -23011,6 +23096,11 @@ var SessionAnswerSchema = external_exports.object({
 // ../../packages/core/src/schema/event.ts
 var EventTypeSchema = external_exports.enum([
   "message.delta",
+  /**
+   * The agent's answer (no `role`), or a user row `{ role: "user", content, client_message_id? }` (§8).
+   * A user row the runtime wrote itself — a media job's result, a tool grant — carries
+   * `from: "platform"` and is the platform's notice, not a caller's words (§8, ADR-0870).
+   */
   "message.completed",
   /** A caller's message, durable in the inbox and not yet admitted to a turn (§7, §8): `{ client_message_id, content }`. */
   "message.accepted",
@@ -23021,19 +23111,26 @@ var EventTypeSchema = external_exports.enum([
   "tool.confirm",
   /** A person's decision on a parked call, stamped with the inbox write that delivers it (§8, ADR-0764). */
   "tool.confirm.resolved",
+  /** A person's answer to a parked question, stamped the same way (§7.1, §8, ADR-1049). */
+  "tool.confirm.answered",
   "session.running",
   "session.usage",
   "session.idle",
   /** A failed attempt the loop will retry (§8): `{ attempt, in_ms, code }`. */
   "session.retrying",
+  /** The session's mode changed (§7.5): `{ mode: "plan" | "build" }`. */
+  "session.mode",
+  /** A write to the session's plan, by the agent or its owner (§7.5): the plan object. */
+  "plan.updated",
   /**
    * The turn ran, but without something it needed (§8): `{ reason, detail? }`.
    *
    * Emitted for a turn whose sandbox could not be woken. That turn used to be indistinguishable
    * from a success — the model was handed the failure as a tool result, answered around it from the
    * transcript, and the session ended `idle`/`end_turn` with no field anywhere saying the
-   * filesystem had been unavailable. This is the field. `reason` is open on purpose; today the only
-   * value is `"sandbox_unavailable"`.
+   * filesystem had been unavailable. This is the field. `reason` is open on purpose; today it is
+   * `"sandbox_unavailable"`, `"vendor_resume_unavailable"`, or `"app_tools_unavailable"` — an app the
+   * agent's toolset names gave no tools this turn (§29.5, `runtime-do app-mcp-tools.ts`).
    *
    * `detail` is the boot failure's own message, and it is here because `reason` alone reads the
    * same for a vendor outage and for a fault of ours. Staging round 3 spent its whole budget
@@ -23131,6 +23228,11 @@ var ToolConfirmResolvedDataSchema = external_exports.object({
   proposed_args: external_exports.record(external_exports.string(), external_exports.unknown()).nullable(),
   final_args: external_exports.record(external_exports.string(), external_exports.unknown()).nullable()
 });
+var ToolConfirmAnsweredDataSchema = external_exports.object({
+  tool_call_id: external_exports.string(),
+  answers: AnswersSchema,
+  answered_at: Timestamp
+});
 var SessionUsageDataSchema = external_exports.object({
   token_usage: TokenUsageSchema,
   consumed_micro_usd: MicroUsdField.nonnegative(),
@@ -23229,7 +23331,10 @@ var FileSourceTypeSchema = external_exports.enum(FILE_SOURCE_TYPES);
 var FileSourceSchema = external_exports.object({
   type: FileSourceTypeSchema,
   job_id: external_exports.union([idOf("med"), idOf("clj")]).nullable(),
-  url: external_exports.string().url().nullable()
+  url: external_exports.string().url().nullable(),
+  /** What a generator was asked with (§36.1, ADR-0886); absent on every other writer's row. */
+  model: external_exports.string().nullable().optional(),
+  prompt: external_exports.string().nullable().optional()
 });
 var FileTagsSchema = external_exports.array(external_exports.string().min(1).max(64)).max(32);
 var FileLibraryFieldsSchema = external_exports.object({
@@ -23274,6 +23379,11 @@ var ComputerSchema = external_exports.object({
   browser: BrowserOptionsSchema.nullable(),
   volume: VolumeSchema.nullable(),
   snapshot_id: idOf("snp").nullable(),
+  /**
+   * The agent this computer belongs to (§41.8, ADR-0849); `null` for one made by `POST /v1/computers`.
+   * Defaulted so a reply from an older control plane parses.
+   */
+  agent_id: idOf("agt").nullable().default(null),
   created_at: Timestamp
 });
 var SnapshotSchema = external_exports.object({
@@ -23382,7 +23492,9 @@ var FileSchema = external_exports.object({
   sha256: external_exports.string().regex(/^[0-9a-f]{64}$/),
   created_at: Timestamp,
   // The asset-library fields (`canonical-spec §36.1`), all nullable or defaulted.
-  ...FileLibraryFieldsSchema.shape
+  ...FileLibraryFieldsSchema.shape,
+  /** The agent of `session_id`, joined at read (§36.1, ADR-0887); a writer never sets it. */
+  agent_id: idOf("agt").nullable().optional()
 });
 var ScheduleStatusSchema = external_exports.enum(["scheduled", "paused", "unscheduled"]);
 var DeploymentSchema = external_exports.object({
@@ -23503,7 +23615,27 @@ var InboundMessageSchema = external_exports.object({
   auth: external_exports.record(external_exports.string(), external_exports.string()),
   /** The session this message woke. Null until the wake seam lands (see ADR-0120). */
   session_id: idOf("ses").nullable(),
-  received_at: Timestamp
+  received_at: Timestamp,
+  /**
+   * When a person marked it read (`POST …/messages/{mid}/read`); `null` is unread. Defaulted so a
+   * reply from an older control plane parses (ADR-1076).
+   */
+  read_at: Timestamp.nullable().default(null)
+});
+var OutboundMessageSchema = external_exports.object({
+  id: idOf("out"),
+  object: external_exports.literal("outbound_message"),
+  channel: InboundMessageSchema.shape.channel,
+  identity_id: idOf("idn"),
+  /** The `eml_` endpoint it was sent from. */
+  endpoint_id: external_exports.string(),
+  from: external_exports.string(),
+  to: external_exports.array(external_exports.string()),
+  subject: external_exports.string().nullable(),
+  text: external_exports.string(),
+  sent_by_agent_id: idOf("agt").nullable(),
+  actor: PrincipalSchema.nullable(),
+  sent_at: Timestamp
 });
 
 // ../../packages/core/src/schema/app.ts
@@ -23580,6 +23712,11 @@ var AppDomainSchema = external_exports.object({
   status: AppDomainStatusSchema,
   created_at: Timestamp
 });
+var AppPermissionsSchema = external_exports.object({
+  object: external_exports.literal("app_permissions"),
+  app_id: idOf("app"),
+  scopes: external_exports.array(external_exports.string())
+});
 
 // ../../packages/core/src/schema/install.ts
 var BlueprintInstallSourceSchema = external_exports.enum(["studio", "cli"]);
@@ -23678,7 +23815,10 @@ var BlueprintInstallSchema = external_exports.object({
    */
   report: BlueprintReportSchema.nullable(),
   status: BlueprintInstallStatusSchema,
-  /** Why a `failed` run threw, in one sentence; `null` on every other row. Never a stack or a key. */
+  /**
+   * Why a `failed` run threw, in one sentence — or, on an `applied` row, which `required` agent or
+   * app the apply refused and why (§29.6). `null` otherwise. Never a stack or a key.
+   */
   failure: external_exports.string().nullable(),
   /**
    * The `selection` the apply carried, or `null` — every row written before §31.2 and every apply
@@ -23794,6 +23934,39 @@ var SocialCommentSchema = external_exports.object({
   posted_at: Timestamp.nullable(),
   data: external_exports.unknown()
 });
+var POST_STATUSES = ["pending", "scheduled", "posted", "failed"];
+var PostStatusSchema = external_exports.enum(POST_STATUSES);
+var PostSchema = external_exports.object({
+  object: external_exports.literal("post"),
+  id: external_exports.string().min(1),
+  status: PostStatusSchema,
+  identity_id: external_exports.string().nullable(),
+  agent_id: external_exports.string().nullable(),
+  session_id: external_exports.string().nullable(),
+  tool_call_id: external_exports.string().nullable(),
+  content: external_exports.string().nullable(),
+  platforms: external_exports.array(external_exports.string()),
+  file_ids: external_exports.array(external_exports.string()),
+  media_urls: external_exports.array(external_exports.string()),
+  visibility: SocialVisibilitySchema.nullable(),
+  scheduled_at: Timestamp.nullable(),
+  posted_at: Timestamp.nullable(),
+  url: external_exports.string().nullable(),
+  error: external_exports.string().nullable(),
+  /** The latest stored reading, `{metric: value}`; `null` before `social.post_metrics` read any. */
+  metrics: external_exports.record(external_exports.string(), external_exports.number()).nullable(),
+  measured_at: Timestamp.nullable(),
+  /** Pending only: the earlier post this call would repeat — same identity, network and file. */
+  duplicate_of: external_exports.object({
+    id: external_exports.string(),
+    status: PostStatusSchema,
+    platform: external_exports.string(),
+    at: Timestamp.nullable(),
+    agent_id: external_exports.string().nullable(),
+    session_id: external_exports.string().nullable()
+  }).nullable(),
+  created_at: Timestamp
+});
 
 // ../../packages/core/src/schema/blueprint.ts
 var BlueprintScheduleSchema = external_exports.object({
@@ -23827,16 +24000,9 @@ var BlueprintAppSchema = external_exports.object({
   /** Whether an install may deselect it (§31.2). Optional: the rollout argument above. */
   required: external_exports.boolean().optional()
 });
-var BlueprintIdentityConnectionsSchema = external_exports.object({
-  social: external_exports.object({
-    from: external_exports.string().min(1),
-    map: external_exports.record(external_exports.string().min(1), SocialPlatformSchema)
-  }).optional()
-});
 var BlueprintIdentitySchema = external_exports.object({
   name: external_exports.string().min(1),
-  description: external_exports.string().nullable(),
-  connections: BlueprintIdentityConnectionsSchema.optional()
+  description: external_exports.string().nullable()
 });
 var ContentHashSchema = external_exports.string().regex(/^[0-9a-f]{64}$/, "a lowercase sha-256 hex digest");
 var BlueprintTreeSchema = external_exports.object({
@@ -23854,11 +24020,18 @@ var BlueprintArtifactSchema = external_exports.object({
   /** The blueprint repository's own released version. Stored, never parsed (ADR-0401). */
   version: external_exports.string().min(1),
   /**
-   * The built trees, one per deployable app, ordered as the declaration orders its apps. Never
-   * empty: an artifact that built nothing is not an artifact, and the column behind it says so
-   * (migration 0040) exactly as the single `content_hash` it replaces was `not null`.
+   * What a person calls the template, one line on what its crew does, and the networks it publishes
+   * to — printed, never provisioned (§31.5, ADR-0921). `platforms` is decoration: where the crew
+   * posts is the accounts connected to its persona. Optional for the §31.5 rollout reason.
+   */
+  title: external_exports.string().min(1).optional(),
+  description: external_exports.string().min(1).optional(),
+  platforms: external_exports.array(SocialPlatformSchema).optional(),
+  /**
+   * The built trees, one per deployable app, ordered as the declaration orders its apps. Empty for
+   * a data-only blueprint: it declares no app, builds nothing, and still ships a crew (ADR-0900).
    */
-  trees: external_exports.array(BlueprintTreeSchema).min(1),
+  trees: external_exports.array(BlueprintTreeSchema),
   /**
    * The setup questions, asked by the studio **before** provisioning. `QuestionField` (§7.1) is
    * reused rather than restated: a setup question and a question a parked agent asks are the same
@@ -23968,6 +24141,205 @@ var ChannelPostSchema = external_exports.object({
   queued: external_exports.boolean()
 });
 
+// ../../packages/core/src/schema/show.ts
+var SHOW_SOURCES = ["spend_by_day", "post_views", "roadmap", "schedule"];
+var ShowSourceSchema = external_exports.enum(SHOW_SOURCES);
+var ShowArgsSchema = external_exports.object({
+  source: ShowSourceSchema.describe(
+    "What to show: spend_by_day (company spend per day, a line), post_views (views per recent post, bars), roadmap (the board's work by status), schedule (routines and scheduled posts over the next 7 days)."
+  ),
+  days: external_exports.number().int().min(2).max(30).optional().describe("spend_by_day only: days back, today included. Default 14.")
+});
+var Day = external_exports.string().regex(/^\d{4}-\d{2}-\d{2}$/);
+var Count = external_exports.number().int().nonnegative();
+var head = { title: external_exports.string().min(1), as_of: Timestamp, timezone: external_exports.string().min(1) };
+var SpendByDayViewSchema = external_exports.object({
+  source: external_exports.literal("spend_by_day"),
+  ...head,
+  days: external_exports.array(external_exports.object({ day: Day, micro_usd: Count })).min(2).max(30)
+});
+var PostViewsViewSchema = external_exports.object({
+  source: external_exports.literal("post_views"),
+  ...head,
+  posts: external_exports.array(external_exports.object({ post_id: external_exports.string().min(1), label: external_exports.string(), networks: external_exports.array(external_exports.string()), posted_at: Timestamp, views: Count })).max(12)
+});
+var RoadmapViewSchema = external_exports.object({
+  source: external_exports.literal("roadmap"),
+  ...head,
+  groups: external_exports.array(
+    external_exports.object({
+      status: BoardStatusSchema,
+      count: Count,
+      cards: external_exports.array(external_exports.object({ title: external_exports.string(), assignee: external_exports.string().nullable(), waits_on: external_exports.array(external_exports.string()) })).max(5)
+    })
+  )
+});
+var ScheduleViewSchema = external_exports.object({
+  source: external_exports.literal("schedule"),
+  ...head,
+  days: external_exports.array(
+    external_exports.object({
+      day: Day,
+      count: Count,
+      items: external_exports.array(
+        external_exports.discriminatedUnion("kind", [
+          external_exports.object({ kind: external_exports.literal("routine"), at: Timestamp, agent: external_exports.string(), text: external_exports.string(), runs: external_exports.number().int().min(1).max(100) }),
+          external_exports.object({ kind: external_exports.literal("post"), at: Timestamp, networks: external_exports.array(external_exports.string()), text: external_exports.string() })
+        ])
+      ).max(8)
+    })
+  ).max(7)
+});
+var ShowViewSchema = external_exports.discriminatedUnion("source", [
+  SpendByDayViewSchema,
+  PostViewsViewSchema,
+  RoadmapViewSchema,
+  ScheduleViewSchema
+]);
+
+// ../../packages/core/src/schema/catalog.ts
+var Key = external_exports.string().regex(/^[A-Za-z][A-Za-z0-9_-]{0,39}$/, "an element key is a short name: a letter, then letters, digits, - or _");
+var Count2 = external_exports.number().int().nonnegative();
+var DIGIT = "words only: a digit is refused, because every number on the card is read by code from a $source binding";
+var words = (max) => external_exports.string().trim().min(1).max(max).regex(/^[^0-9]*$/, DIGIT).refine((text2) => !new RegExp("\\p{N}", "u").test(text2), DIGIT);
+var Days = external_exports.number().int().min(1).max(30).default(7).describe("The window: today and the days before it, on the company's clock. Default 7.");
+function bound(sources2, shape) {
+  const example = JSON.stringify({ $source: sources2[0] });
+  return external_exports.strictObject(
+    { $source: external_exports.enum(sources2), ...shape },
+    { error: (issue2) => issue2.code === "invalid_type" ? `must be a binding such as ${example}: a literal value is refused, code reads every number` : void 0 }
+  );
+}
+var Bound = {
+  value: bound(["views_total", "spend_total"], { days: Days }).describe(
+    "views_total: the latest views of the posts published in the window. spend_total: the company's spend in the window (the CEO only)."
+  ),
+  delta: bound(["views_change"], {}).describe(
+    "views_change: the value's views_total against the same number of days before it, as a percentage. Its window is the value's."
+  ),
+  series: bound(["spend_by_day"], { days: external_exports.number().int().min(2).max(30).default(14) }).describe("spend_by_day: the company's spend per day (the CEO only)."),
+  bars: bound(["post_views"], { limit: external_exports.number().int().min(1).max(12).default(5).describe("How many posts, newest first. Default 5.") }).describe(
+    "post_views: each recent post's latest views, newest first."
+  ),
+  progress: bound(["posts_this_week"], {}).describe("posts_this_week: posts published since Monday against the weekly cadence from the company's setup."),
+  board: bound(["roadmap"], {}).describe("roadmap: the board's work by status."),
+  week: bound(["schedule"], {}).describe("schedule: routines and scheduled posts over the next 7 days."),
+  media: external_exports.union([bound(["latest_media"], { count: external_exports.number().int().min(1).max(4).default(1) }), external_exports.array(idOf("fil")).min(1).max(4)]).describe('{"$source":"latest_media","count":1} for the newest posted pictures or clips, or up to 4 fil_ ids.')
+};
+var SpendDay = external_exports.strictObject({ day: external_exports.string().regex(/^\d{4}-\d{2}-\d{2}$/), micro_usd: Count2 });
+var Resolved = {
+  value: external_exports.discriminatedUnion("$source", [
+    external_exports.strictObject({ $source: external_exports.literal("views_total"), days: external_exports.number().int(), value: Count2, posts: Count2 }),
+    external_exports.strictObject({ $source: external_exports.literal("spend_total"), days: external_exports.number().int(), value: Count2 })
+  ]),
+  delta: external_exports.strictObject({ $source: external_exports.literal("views_change"), days: external_exports.number().int(), current: Count2, previous: Count2 }),
+  series: external_exports.strictObject({ $source: external_exports.literal("spend_by_day"), days: external_exports.number().int(), points: external_exports.array(SpendDay).min(2).max(30) }),
+  bars: external_exports.strictObject({ $source: external_exports.literal("post_views"), limit: external_exports.number().int(), posts: PostViewsViewSchema.shape.posts }),
+  progress: external_exports.strictObject({ $source: external_exports.literal("posts_this_week"), value: Count2, max: external_exports.number().int().positive(), cadence: external_exports.string() }),
+  board: external_exports.strictObject({ $source: external_exports.literal("roadmap"), groups: RoadmapViewSchema.shape.groups }),
+  week: external_exports.strictObject({ $source: external_exports.literal("schedule"), days: ScheduleViewSchema.shape.days }),
+  media: external_exports.array(external_exports.strictObject({ id: idOf("fil"), kind: external_exports.enum(["image", "video"]) })).min(1).max(4)
+};
+var box = { children: external_exports.array(Key).min(1).max(12) };
+var leaf = { children: external_exports.array(Key).max(0).optional() };
+var label = words(40).optional();
+var element = (type, props, children, about) => external_exports.strictObject({ type: external_exports.literal(type), props: external_exports.strictObject(props), ...children }).describe(about);
+function catalog(slot) {
+  return {
+    Card: element("Card", { title: words(60) }, box, "The card, with a short title. It is the root, and only the root."),
+    Stack: element("Stack", {}, box, "Children one under another."),
+    Grid: element("Grid", { columns: external_exports.literal([1, 2, 3]) }, box, "Children side by side, 1 to 3 columns."),
+    Metric: element("Metric", { label: words(40), value: slot.value, delta: slot.delta.optional() }, leaf, "One big number with a label, and optionally its change."),
+    LineChart: element("LineChart", { label, series: slot.series }, leaf, "A line over days."),
+    BarList: element("BarList", { label, bars: slot.bars }, leaf, "One bar per post."),
+    Progress: element("Progress", { label: words(40), progress: slot.progress }, leaf, "A value against its goal, as a bar."),
+    Roadmap: element("Roadmap", { label, board: slot.board }, leaf, "The board grouped by status."),
+    Schedule: element("Schedule", { label, week: slot.week }, leaf, "The week ahead, day by day."),
+    Media: element("Media", { label, files: slot.media }, leaf, "Pictures or clips the company holds."),
+    Text: element("Text", { text: words(240) }, leaf, "A short note in words.")
+  };
+}
+var unknownComponent = (names2) => ({
+  error: (issue2) => issue2.code === "invalid_union" ? `unknown component: use one of ${names2.join(", ")}` : void 0
+});
+function tree(rootType, max, spec4, ctx) {
+  const refuse2 = (message4, path = []) => ctx.addIssue({ code: "custom", message: message4, path });
+  const keys3 = Object.keys(spec4.elements);
+  const has = (key2) => Object.hasOwn(spec4.elements, key2);
+  if (keys3.length > max) return refuse2(`at most ${max} elements`, ["elements"]);
+  const root = has(spec4.root) ? spec4.elements[spec4.root] : void 0;
+  if (!root) return refuse2(`root names "${spec4.root}", which is not in elements`, ["root"]);
+  if (root.type !== rootType) return refuse2(`the root must be a ${rootType}`, ["root"]);
+  const parent = /* @__PURE__ */ new Map();
+  for (const key2 of keys3) {
+    for (const child of spec4.elements[key2].children ?? []) {
+      if (!has(child)) return refuse2(`"${child}" is not in elements`, ["elements", key2, "children"]);
+      if (child === spec4.root || parent.has(child)) return refuse2(`"${child}" has more than one parent`, ["elements", key2, "children"]);
+      if (spec4.elements[child].type === rootType) return refuse2(`a ${rootType} is the root only; group with Stack or Grid`, ["elements", child, "type"]);
+      parent.set(child, key2);
+    }
+  }
+  const reached = /* @__PURE__ */ new Set([spec4.root]);
+  for (const key2 of reached) for (const child of spec4.elements[key2].children ?? []) reached.add(child);
+  const lost = keys3.find((key2) => !reached.has(key2));
+  if (lost) refuse2(`"${lost}" is not under the root`, ["elements", lost]);
+}
+var spec = (element4, rootType, max) => external_exports.strictObject({ root: Key, elements: external_exports.record(Key, element4) }).superRefine((value, ctx) => tree(rootType, max, value, ctx));
+
+// ../../packages/core/src/schema/compose.ts
+var COMPOSE_COMPONENTS = ["Card", "Stack", "Grid", "Metric", "LineChart", "BarList", "Progress", "Roadmap", "Schedule", "Media", "Text"];
+var MAX_COMPOSE_ELEMENTS = 24;
+var BoundComponents = catalog(Bound);
+var ComposeSpecSchema = spec(
+  external_exports.discriminatedUnion(
+    "type",
+    [
+      BoundComponents.Card,
+      BoundComponents.Stack,
+      BoundComponents.Grid,
+      BoundComponents.Metric,
+      BoundComponents.LineChart,
+      BoundComponents.BarList,
+      BoundComponents.Progress,
+      BoundComponents.Roadmap,
+      BoundComponents.Schedule,
+      BoundComponents.Media,
+      BoundComponents.Text
+    ],
+    unknownComponent(COMPOSE_COMPONENTS)
+  ),
+  "Card",
+  MAX_COMPOSE_ELEMENTS
+);
+var ComposeArgsSchema = external_exports.object({
+  spec: ComposeSpecSchema.describe(
+    'A json-render spec: { "root": key, "elements": { key: { "type", "props", "children"? } } }. The root is one Card.'
+  )
+});
+var ComposedComponents = catalog(Resolved);
+var ComposedSpecSchema = spec(
+  external_exports.discriminatedUnion(
+    "type",
+    [
+      ComposedComponents.Card,
+      ComposedComponents.Stack,
+      ComposedComponents.Grid,
+      ComposedComponents.Metric,
+      ComposedComponents.LineChart,
+      ComposedComponents.BarList,
+      ComposedComponents.Progress,
+      ComposedComponents.Roadmap,
+      ComposedComponents.Schedule,
+      ComposedComponents.Media,
+      ComposedComponents.Text
+    ],
+    unknownComponent(COMPOSE_COMPONENTS)
+  ),
+  "Card",
+  MAX_COMPOSE_ELEMENTS
+);
+var ComposedSchema = external_exports.object({ as_of: Timestamp, timezone: external_exports.string().min(1), spec: ComposedSpecSchema });
+
 // ../../packages/core/src/schema/media.ts
 var MEDIA_MODEL_KINDS = ["image", "video", "stt", "tts", "s2s"];
 var isMediaModelKind = (value) => MEDIA_MODEL_KINDS.some((kind) => kind === value);
@@ -24037,9 +24409,12 @@ var ImageRequestSchema = external_exports.object({
   n: external_exports.number().int().min(1).max(4).default(1)
 });
 var VideoRequestSchema = external_exports.object({
-  model: external_exports.string().min(1),
+  /** Omitted: the platform's video default while the catalogue publishes it (`resolveModel`, §33.2). */
+  model: external_exports.string().min(1).optional(),
   prompt: external_exports.string().min(1),
   image_urls: external_exports.array(PublicUrl).max(1).optional(),
+  /** The source clip of a video-to-video edit (ADR-0814). */
+  video_url: PublicUrl.optional(),
   aspect_ratio: external_exports.string().optional(),
   seed: external_exports.number().int().optional(),
   seconds: external_exports.number().int().min(1).max(60).optional()
@@ -24331,18 +24706,18 @@ var ReferralClickSchema = external_exports.object({
   creator: external_exports.object({ display_name: external_exports.string().min(1) }),
   expires_at: Timestamp
 });
-var Day = external_exports.iso.date();
+var Day2 = external_exports.iso.date();
 var CreatorAnalyticsSchema = external_exports.object({
   object: external_exports.literal("creator_analytics"),
   days: external_exports.number().int().min(1).max(90),
-  from: Day,
-  to: Day,
+  from: Day2,
+  to: Day2,
   clicks: external_exports.number().int().nonnegative(),
   referrals: external_exports.number().int().nonnegative(),
   installs: external_exports.number().int().nonnegative(),
   active_installs: external_exports.number().int().nonnegative(),
   usage_by_day: external_exports.array(
-    external_exports.object({ day: Day, debit_micro_usd: MicroUsdField.nonnegative() })
+    external_exports.object({ day: Day2, debit_micro_usd: MicroUsdField.nonnegative() })
   ),
   commission_micro_usd: external_exports.object({
     pending: MicroUsdField.nonnegative(),
@@ -24357,7 +24732,7 @@ var CreatorAnalyticsSchema = external_exports.object({
     })
   ),
   /** Every install covered, newest first: the day it was created and the day its twelve months end. */
-  install_windows: external_exports.array(external_exports.object({ install_id: idOf("bpi"), from: Day, until: Day }))
+  install_windows: external_exports.array(external_exports.object({ install_id: idOf("bpi"), from: Day2, until: Day2 }))
 });
 
 // ../../packages/core/src/schema/legal.ts
@@ -24803,6 +25178,155 @@ var CreateReviewSchema = external_exports.object({
   after: Fields
 });
 
+// ../../packages/core/src/schema/mini-app.ts
+var PAGE_BLOCKS = [
+  "Page",
+  "Section",
+  "Stack",
+  "Grid",
+  "Metric",
+  "LineChart",
+  "BarList",
+  "Progress",
+  "Roadmap",
+  "Schedule",
+  "Media",
+  "Text",
+  "Needs",
+  "Activity",
+  "Accounts",
+  "Posts",
+  "Answers",
+  "MediaLibrary"
+];
+var MAX_PAGE_ELEMENTS = 48;
+var MINI_APP_ICONS = ["grid", "list", "chart", "calendar", "play"];
+var MiniAppIconSchema = external_exports.enum(MINI_APP_ICONS);
+var SLUG = "[a-z][a-z0-9-]{0,39}";
+var MiniAppSlugSchema = external_exports.string().regex(new RegExp(`^${SLUG}$`), "a slug is lowercase letters, digits and -");
+var Place = external_exports.string().regex(new RegExp(`^/(board|connections|apps/${SLUG}(\\?page=${SLUG})?)$`), "a section links to /board, /connections or /apps/<slug>[?page=<slug>]");
+var POSTS = ["waiting", "scheduled", "posted"];
+var PostStatus = external_exports.enum(POSTS);
+var PostLayout = external_exports.enum(["list", "row", "grid"]);
+var PostStatuses = external_exports.union([PostStatus, external_exports.array(PostStatus).min(1).max(3).refine((all) => new Set(all).size === all.length, "each status once")]);
+var PageBound = {
+  ...Bound,
+  board: bound(["roadmap"], { per_group: external_exports.number().int().min(1).max(5).default(5) }),
+  media: bound(["latest_media", "newest_media"], { count: external_exports.number().int().min(1).max(6).default(4) })
+};
+var PageResolved = {
+  ...Resolved,
+  board: external_exports.strictObject({ $source: external_exports.literal("roadmap"), per_group: external_exports.number().int(), groups: RoadmapViewSchema.shape.groups }),
+  media: external_exports.array(external_exports.strictObject({ id: external_exports.string(), kind: external_exports.enum(["image", "video"]) })).max(6)
+};
+function pageBlocks(slot) {
+  return {
+    Page: element("Page", {}, box, "The page itself, the root and only the root."),
+    Section: element("Section", { title: words(40), to: Place.optional(), hide_empty: external_exports.boolean().optional() }, box, "A titled part of the page; hidden when every block in it is empty, if asked."),
+    Needs: element("Needs", { label, needs: slot.needs }, leaf, "What waits on a person: approvals, questions, spent caps."),
+    Activity: element("Activity", { label, agents: slot.agents }, leaf, "The agents working or waiting, and on what."),
+    Accounts: element("Accounts", { accounts: slot.accounts }, leaf, "The template's networks: connected with a handle, or not."),
+    Posts: element(
+      "Posts",
+      { label, layout: PostLayout.optional(), posts: slot.posts },
+      leaf,
+      "Posts waiting on a person, scheduled, or posted; several statuses make one list. Drawn as rows (list, the default), one sideways row of cards (row), or a picture grid (grid)."
+    ),
+    Answers: element("Answers", { answers: slot.answers }, leaf, "The setup's answers in one line, linking to the setup."),
+    // No binding: the studio's gallery reads and pages the company's files itself (ADR-0987).
+    MediaLibrary: element("MediaLibrary", {}, leaf, "Every picture and clip the company's agents made, with filters, sort and a viewer.")
+  };
+}
+var OwnBound = pageBlocks({
+  needs: bound(["needs"], {}),
+  agents: bound(["agents_activity"], {}),
+  accounts: bound(["accounts"], {}),
+  posts: bound(["posts"], { status: PostStatuses, limit: external_exports.number().int().min(1).max(50).default(10) }),
+  answers: bound(["answers"], { keys: external_exports.array(Key).min(1).max(TEMPLATE_QUESTIONS_MAX) })
+});
+var Need = external_exports.object({
+  session_id: external_exports.string(),
+  agent_id: external_exports.string(),
+  agent: external_exports.string(),
+  since: Timestamp,
+  /** The chat's stored title, or `null`: the studio names it by when it began. */
+  title: external_exports.string().nullable(),
+  kind: external_exports.enum(["tool", "question", "budget"]),
+  /** The call or question it is held on; `null` for a spent cap. */
+  action: PendingActionSchema.nullable()
+});
+var Working = external_exports.object({
+  agent_id: external_exports.string(),
+  agent: external_exports.string(),
+  state: external_exports.enum(["working", "waiting"]),
+  session_id: external_exports.string().nullable(),
+  title: external_exports.string().nullable(),
+  at: Timestamp
+});
+var OwnResolved = pageBlocks({
+  needs: external_exports.strictObject({ $source: external_exports.literal("needs"), items: external_exports.array(Need) }),
+  agents: external_exports.strictObject({ $source: external_exports.literal("agents_activity"), agents: external_exports.array(Working) }),
+  accounts: external_exports.strictObject({
+    $source: external_exports.literal("accounts"),
+    accounts: external_exports.array(external_exports.object({ platform: SocialPlatformSchema, connected: external_exports.boolean(), handle: external_exports.string().nullable() }))
+  }),
+  posts: external_exports.strictObject({ $source: external_exports.literal("posts"), status: external_exports.union([PostStatus, external_exports.array(PostStatus)]), limit: external_exports.number().int(), posts: external_exports.array(PostSchema), more: external_exports.boolean() }),
+  answers: external_exports.strictObject({
+    $source: external_exports.literal("answers"),
+    keys: external_exports.array(external_exports.string()),
+    values: external_exports.array(external_exports.string()),
+    template: external_exports.object({ blueprint: external_exports.string(), template: external_exports.string() }).nullable()
+  })
+});
+var BoundBlocks = { ...catalog(PageBound), ...OwnBound };
+var ResolvedBlocks = { ...catalog(PageResolved), ...OwnResolved };
+var Unread = element("Unread", { of: external_exports.string(), label: external_exports.string().nullable(), reason: external_exports.string() }, leaf, "A block that could not be read.");
+var B = BoundBlocks;
+var PageSpecSchema = spec(
+  external_exports.discriminatedUnion(
+    "type",
+    [B.Page, B.Section, B.Stack, B.Grid, B.Metric, B.LineChart, B.BarList, B.Progress, B.Roadmap, B.Schedule, B.Media, B.Text, B.Needs, B.Activity, B.Accounts, B.Posts, B.Answers, B.MediaLibrary],
+    unknownComponent(PAGE_BLOCKS)
+  ),
+  "Page",
+  MAX_PAGE_ELEMENTS
+);
+var R = ResolvedBlocks;
+var ResolvedPageElementSchema = external_exports.discriminatedUnion(
+  "type",
+  [R.Page, R.Section, R.Stack, R.Grid, R.Metric, R.LineChart, R.BarList, R.Progress, R.Roadmap, R.Schedule, R.Media, R.Text, R.Needs, R.Activity, R.Accounts, R.Posts, R.Answers, R.MediaLibrary, Unread],
+  unknownComponent(PAGE_BLOCKS)
+);
+var ResolvedPageSpecSchema = spec(ResolvedPageElementSchema, "Page", MAX_PAGE_ELEMENTS);
+var unique = (items) => new Set(items.map((item) => item.slug)).size === items.length;
+var MiniAppPageSchema = external_exports.strictObject({ slug: MiniAppSlugSchema, title: words(24), spec: PageSpecSchema });
+var MiniAppDeclSchema = external_exports.strictObject({
+  slug: MiniAppSlugSchema,
+  name: words(40),
+  icon: MiniAppIconSchema,
+  pages: external_exports.array(MiniAppPageSchema).min(1).max(6).refine(unique, "each page's slug is its own")
+});
+var MiniAppDeclsSchema = external_exports.array(MiniAppDeclSchema).max(8).refine(unique, "each mini app's slug is its own");
+var MiniAppSummarySchema = external_exports.object({
+  object: external_exports.literal("mini_app"),
+  slug: MiniAppSlugSchema,
+  name: external_exports.string(),
+  icon: MiniAppIconSchema,
+  pages: external_exports.array(external_exports.object({ slug: MiniAppSlugSchema, title: external_exports.string() })).min(1),
+  /** What it reads (`miniAppReads`). Absent from an older API: the Studio then claims nothing it cannot see. */
+  reads: external_exports.array(external_exports.string()).optional()
+});
+var MiniAppSchema = MiniAppSummarySchema.extend({
+  networks: external_exports.array(external_exports.object({ platform: SocialPlatformSchema, connected: external_exports.boolean().nullable() })),
+  page: MiniAppSlugSchema,
+  as_of: Timestamp,
+  timezone: external_exports.string().min(1),
+  spec: ResolvedPageSpecSchema
+});
+
+// ../../packages/core/src/logo-svg.ts
+var MAX_BYTES = 16 * 1024;
+
 // ../../packages/core/src/file-url.ts
 var encoder2 = new TextEncoder();
 var SESSION_FILE_URL_TTL_MS = 15 * 6e4;
@@ -24812,9 +25336,9 @@ var ALPHABET2 = "0123456789abcdefghjkmnpqrstvwxyz";
 var SUFFIX_LENGTH2 = 26;
 var SUFFIX_PATTERN2 = new RegExp(`^[${ALPHABET2}]{${SUFFIX_LENGTH2},}$`);
 function isId2(prefix, value) {
-  const head = `${prefix}_`;
-  if (!value.startsWith(head)) return false;
-  return SUFFIX_PATTERN2.test(value.slice(head.length).toLowerCase());
+  const head22 = `${prefix}_`;
+  if (!value.startsWith(head22)) return false;
+  return SUFFIX_PATTERN2.test(value.slice(head22.length).toLowerCase());
 }
 var SESSION_TTL_SECONDS2 = 30 * 24 * 60 * 60;
 var encoder3 = new TextEncoder();
@@ -24842,6 +25366,8 @@ var AUDIT_ACTIONS_P12 = [
   "computer.resumed",
   "computer.snapshot_created",
   "computer.updated",
+  "computer.taken_over",
+  "computer.handed_back",
   "browser.live_view_opened",
   "deployment.created",
   "deployment.updated",
@@ -24974,7 +25500,7 @@ var JsonSchemaDocument2 = external_exports.record(external_exports.string(), ext
 var WindowSchema2 = external_exports.enum(["immediate", "priority", "loose"]);
 var TOKEN_TIERS2 = ["input", "cache_write", "cache_read", "output", "reasoning"];
 var TokenTierSchema2 = external_exports.enum(TOKEN_TIERS2);
-var TOOL_TIERS2 = ["search", "media", "social", "browser", "storage"];
+var TOOL_TIERS2 = ["search", "media", "social", "browser", "storage", "email"];
 var LINE_ITEM_TIERS2 = [...TOKEN_TIERS2, "computer", ...TOOL_TIERS2];
 var LineItemTierSchema2 = external_exports.enum(LINE_ITEM_TIERS2);
 var TokenUsageSchema2 = external_exports.object({
@@ -24994,11 +25520,41 @@ var page = (item) => external_exports.object({ data: external_exports.array(item
 var API_VERSION2 = "2026-09-01";
 var HARNESS_IDS2 = ["pi", "claude_code", "vetta", "hermes"];
 var HarnessIdSchema2 = external_exports.enum(HARNESS_IDS2);
+var DEFAULT_ORG_TIMEZONE2 = "America/New_York";
+function canonicalZone2(name) {
+  if (!name.includes("/") && name !== "UTC") return void 0;
+  try {
+    const zone = new Intl.DateTimeFormat("en-US", { timeZone: name }).resolvedOptions().timeZone;
+    return zone === "UTC" || Intl.supportedValuesOf("timeZone").includes(zone) ? zone : void 0;
+  } catch {
+    return void 0;
+  }
+}
+var TimezoneSchema2 = external_exports.string().transform((name, ctx) => {
+  const zone = canonicalZone2(name);
+  if (zone === void 0) {
+    ctx.addIssue({ code: "custom", message: "not a timezone; use an IANA name such as America/Los_Angeles" });
+    return external_exports.NEVER;
+  }
+  return zone;
+});
 var OrganizationSchema2 = external_exports.object({
   id: idOf2("org"),
   object: external_exports.literal("organization"),
   name: external_exports.string(),
   balance_micro_usd: MicroUsdField2,
+  /**
+   * The company's timezone, an IANA name (`America/New_York`, §20.6). Times the company chooses or
+   * reads are in it: a new routine's zone, when a post goes out. `America/New_York` until changed.
+   * Defaulted so a reply from a control plane older than 0088 (or a rolled-back Worker) still parses
+   * in a newer SDK/CLI rather than throwing on every `orgs.get/list/update`.
+   */
+  timezone: external_exports.string().min(1).default(DEFAULT_ORG_TIMEZONE2),
+  /**
+   * The company's logo, an SVG a person or an agent drew (§20.7), passed by `checkLogoSvg`. `null`
+   * until one is set. Defaulted so a reply from a control plane older than 0093 still parses.
+   */
+  logo_svg: external_exports.string().nullable().default(null),
   created_at: Timestamp2
 });
 var RoleSchema2 = external_exports.enum(["owner", "admin", "member"]);
@@ -25325,7 +25881,14 @@ var BUILTIN_TOOLS2 = [
   // `publish_file`, and the first way anything the platform itself produced could be read back.
   "fetch_file",
   "find_stock_photo",
-  "session_spend"
+  "session_spend",
+  // A view the chat draws — spend, post views, the roadmap, the week ahead — read by code (§48).
+  "show",
+  // A card the model lays out, every number bound to a source code reads (§49).
+  "compose",
+  // Plan mode's two (§7.5): offered only to a session in plan mode or holding a plan.
+  "write_plan",
+  "propose_plan"
 ];
 var isToolName2 = (name) => BUILTIN_TOOLS2.includes(name) || /^[a-z0-9_-]+(\.[a-z0-9_-]+)+$/i.test(name);
 var ToolConfigSchema2 = external_exports.object({
@@ -25419,6 +25982,22 @@ var SessionStatusSchema2 = external_exports.enum([
   "failed",
   "cancelled"
 ]);
+var SessionModeSchema2 = external_exports.enum(["plan", "build"]);
+var PLAN_MAX_CHARS2 = 2e4;
+var PlanSchema2 = external_exports.object({
+  object: external_exports.literal("plan"),
+  markdown: external_exports.string().max(PLAN_MAX_CHARS2),
+  version: external_exports.number().int().nonnegative(),
+  by: external_exports.enum(["agent", "owner"]).nullable()
+});
+var PlanWriteSchema2 = external_exports.object({
+  markdown: external_exports.string().max(PLAN_MAX_CHARS2),
+  base_version: external_exports.number().int().nonnegative()
+});
+var ProposePlanSchema2 = external_exports.object({
+  version: external_exports.number().int().positive(),
+  spends_or_publishes: external_exports.array(external_exports.string().min(1).max(200)).max(10).optional()
+});
 var StopReasonSchema2 = external_exports.enum([
   "end_turn",
   "awaiting_input",
@@ -25511,16 +26090,26 @@ var QuestionFieldSchema2 = external_exports.discriminatedUnion("type", [
     other: external_exports.boolean().default(true)
   })
 ]);
+var QUESTION_FIELDS_MAX2 = 3;
 var QuestionSchema2 = external_exports.object({
   prompt: external_exports.string().min(1).max(1e3),
-  fields: external_exports.array(QuestionFieldSchema2).min(1).max(3)
+  fields: external_exports.array(QuestionFieldSchema2).min(1).max(QUESTION_FIELDS_MAX2, {
+    message: `a question has at most ${QUESTION_FIELDS_MAX2} fields \u2014 ask the rest in a second question once these are answered`
+  })
 });
-var AnswersSchema2 = external_exports.record(
+var answersOf2 = (max, message4) => external_exports.record(
   external_exports.string().min(1).max(64),
   external_exports.union([external_exports.string().max(2e3), external_exports.array(external_exports.string().max(2e3)).min(1).max(12)])
-).refine((answers) => Object.keys(answers).length <= 3, {
-  message: "a question has at most 3 fields, so an answer has at most 3 keys"
-});
+).refine((answers) => Object.keys(answers).length <= max, { message: message4 });
+var AnswersSchema2 = answersOf2(
+  QUESTION_FIELDS_MAX2,
+  `a question has at most ${QUESTION_FIELDS_MAX2} fields, so an answer has at most ${QUESTION_FIELDS_MAX2} keys`
+);
+var TEMPLATE_QUESTIONS_MAX2 = 4;
+var InstallAnswersSchema2 = answersOf2(
+  TEMPLATE_QUESTIONS_MAX2,
+  `a template asks at most ${TEMPLATE_QUESTIONS_MAX2} questions, so an install has at most ${TEMPLATE_QUESTIONS_MAX2} answers`
+);
 var PendingActionSchema2 = external_exports.object({
   kind: external_exports.enum(["tool", "question"]).default("tool"),
   tool_call_id: external_exports.string(),
@@ -25561,6 +26150,13 @@ var SessionSchema2 = external_exports.object({
   parent_session_id: idOf2("ses").nullable(),
   root_session_id: idOf2("ses").nullable(),
   thread_role: ThreadRoleSchema2.nullable(),
+  /**
+   * The model the latest send picked (§7 `model`), or `null` when none has and the session runs its
+   * pinned version's model (§10, ADR-0832). Defaulted so a reply from an older control plane parses.
+   */
+  model: external_exports.string().nullable().default(null),
+  /** Plan mode (§7.5, §10): defaulted so a reply from an older control plane parses as `build`. */
+  mode: SessionModeSchema2.default("build"),
   status: SessionStatusSchema2,
   stop_reason: StopReasonSchema2.nullable(),
   window: WindowSchema2,
@@ -25580,6 +26176,10 @@ var SendMessageSchema2 = external_exports.object({
   message: external_exports.string(),
   interrupt: external_exports.boolean().optional(),
   queue: external_exports.boolean().optional(),
+  /** A catalogue id: this session runs on it from this message's turn on (§7, ADR-0832). */
+  model: external_exports.string().min(1).optional(),
+  /** Plan mode from this message's turn on (§7.5, ADR-0905). */
+  mode: SessionModeSchema2.optional(),
   idempotency_key: external_exports.string().optional()
 }).refine((body2) => !(body2.interrupt === true && body2.queue === true), {
   message: "a send is either an interrupt or queued, not both",
@@ -25594,7 +26194,14 @@ var ToolConfirmationSchema2 = external_exports.object({
   tool_call_id: external_exports.string(),
   decision: external_exports.enum(["allow", "deny"]),
   reason: external_exports.string().optional(),
-  scope: external_exports.enum(["call", "session"]).default("call")
+  scope: external_exports.enum(["call", "session"]).default("call"),
+  /**
+   * THE PERSON'S OWN ANSWERS for a template install they approve (ADR-1030): the call runs with
+   * these in place of the `answers` the agent proposed, and with nothing else changed. A modifier on
+   * `allow`, like `scope`: absent is the call as proposed. The route refuses it on a deny, on a session
+   * grant, on any other tool, and on answers the template's questions refuse (`answerProblems`).
+   */
+  answers: InstallAnswersSchema2.optional()
 });
 var SessionAnswerSchema2 = external_exports.object({
   tool_call_id: external_exports.string(),
@@ -25602,6 +26209,11 @@ var SessionAnswerSchema2 = external_exports.object({
 });
 var EventTypeSchema2 = external_exports.enum([
   "message.delta",
+  /**
+   * The agent's answer (no `role`), or a user row `{ role: "user", content, client_message_id? }` (§8).
+   * A user row the runtime wrote itself — a media job's result, a tool grant — carries
+   * `from: "platform"` and is the platform's notice, not a caller's words (§8, ADR-0870).
+   */
   "message.completed",
   /** A caller's message, durable in the inbox and not yet admitted to a turn (§7, §8): `{ client_message_id, content }`. */
   "message.accepted",
@@ -25612,19 +26224,26 @@ var EventTypeSchema2 = external_exports.enum([
   "tool.confirm",
   /** A person's decision on a parked call, stamped with the inbox write that delivers it (§8, ADR-0764). */
   "tool.confirm.resolved",
+  /** A person's answer to a parked question, stamped the same way (§7.1, §8, ADR-1049). */
+  "tool.confirm.answered",
   "session.running",
   "session.usage",
   "session.idle",
   /** A failed attempt the loop will retry (§8): `{ attempt, in_ms, code }`. */
   "session.retrying",
+  /** The session's mode changed (§7.5): `{ mode: "plan" | "build" }`. */
+  "session.mode",
+  /** A write to the session's plan, by the agent or its owner (§7.5): the plan object. */
+  "plan.updated",
   /**
    * The turn ran, but without something it needed (§8): `{ reason, detail? }`.
    *
    * Emitted for a turn whose sandbox could not be woken. That turn used to be indistinguishable
    * from a success — the model was handed the failure as a tool result, answered around it from the
    * transcript, and the session ended `idle`/`end_turn` with no field anywhere saying the
-   * filesystem had been unavailable. This is the field. `reason` is open on purpose; today the only
-   * value is `"sandbox_unavailable"`.
+   * filesystem had been unavailable. This is the field. `reason` is open on purpose; today it is
+   * `"sandbox_unavailable"`, `"vendor_resume_unavailable"`, or `"app_tools_unavailable"` — an app the
+   * agent's toolset names gave no tools this turn (§29.5, `runtime-do app-mcp-tools.ts`).
    *
    * `detail` is the boot failure's own message, and it is here because `reason` alone reads the
    * same for a vendor outage and for a fault of ours. Staging round 3 spent its whole budget
@@ -25722,6 +26341,11 @@ var ToolConfirmResolvedDataSchema2 = external_exports.object({
   proposed_args: external_exports.record(external_exports.string(), external_exports.unknown()).nullable(),
   final_args: external_exports.record(external_exports.string(), external_exports.unknown()).nullable()
 });
+var ToolConfirmAnsweredDataSchema2 = external_exports.object({
+  tool_call_id: external_exports.string(),
+  answers: AnswersSchema2,
+  answered_at: Timestamp2
+});
 var SessionUsageDataSchema2 = external_exports.object({
   token_usage: TokenUsageSchema2,
   consumed_micro_usd: MicroUsdField2.nonnegative(),
@@ -25814,7 +26438,10 @@ var FileSourceTypeSchema2 = external_exports.enum(FILE_SOURCE_TYPES2);
 var FileSourceSchema2 = external_exports.object({
   type: FileSourceTypeSchema2,
   job_id: external_exports.union([idOf2("med"), idOf2("clj")]).nullable(),
-  url: external_exports.string().url().nullable()
+  url: external_exports.string().url().nullable(),
+  /** What a generator was asked with (§36.1, ADR-0886); absent on every other writer's row. */
+  model: external_exports.string().nullable().optional(),
+  prompt: external_exports.string().nullable().optional()
 });
 var FileTagsSchema2 = external_exports.array(external_exports.string().min(1).max(64)).max(32);
 var FileLibraryFieldsSchema2 = external_exports.object({
@@ -25857,6 +26484,11 @@ var ComputerSchema2 = external_exports.object({
   browser: BrowserOptionsSchema2.nullable(),
   volume: VolumeSchema2.nullable(),
   snapshot_id: idOf2("snp").nullable(),
+  /**
+   * The agent this computer belongs to (§41.8, ADR-0849); `null` for one made by `POST /v1/computers`.
+   * Defaulted so a reply from an older control plane parses.
+   */
+  agent_id: idOf2("agt").nullable().default(null),
   created_at: Timestamp2
 });
 var SnapshotSchema2 = external_exports.object({
@@ -25965,7 +26597,9 @@ var FileSchema2 = external_exports.object({
   sha256: external_exports.string().regex(/^[0-9a-f]{64}$/),
   created_at: Timestamp2,
   // The asset-library fields (`canonical-spec §36.1`), all nullable or defaulted.
-  ...FileLibraryFieldsSchema2.shape
+  ...FileLibraryFieldsSchema2.shape,
+  /** The agent of `session_id`, joined at read (§36.1, ADR-0887); a writer never sets it. */
+  agent_id: idOf2("agt").nullable().optional()
 });
 var ScheduleStatusSchema2 = external_exports.enum(["scheduled", "paused", "unscheduled"]);
 var DeploymentSchema2 = external_exports.object({
@@ -26084,7 +26718,27 @@ var InboundMessageSchema2 = external_exports.object({
   auth: external_exports.record(external_exports.string(), external_exports.string()),
   /** The session this message woke. Null until the wake seam lands (see ADR-0120). */
   session_id: idOf2("ses").nullable(),
-  received_at: Timestamp2
+  received_at: Timestamp2,
+  /**
+   * When a person marked it read (`POST …/messages/{mid}/read`); `null` is unread. Defaulted so a
+   * reply from an older control plane parses (ADR-1076).
+   */
+  read_at: Timestamp2.nullable().default(null)
+});
+var OutboundMessageSchema2 = external_exports.object({
+  id: idOf2("out"),
+  object: external_exports.literal("outbound_message"),
+  channel: InboundMessageSchema2.shape.channel,
+  identity_id: idOf2("idn"),
+  /** The `eml_` endpoint it was sent from. */
+  endpoint_id: external_exports.string(),
+  from: external_exports.string(),
+  to: external_exports.array(external_exports.string()),
+  subject: external_exports.string().nullable(),
+  text: external_exports.string(),
+  sent_by_agent_id: idOf2("agt").nullable(),
+  actor: PrincipalSchema2.nullable(),
+  sent_at: Timestamp2
 });
 var AppTypeSchema2 = external_exports.enum(["frontend_only", "fullstack"]);
 var AppStatusSchema2 = external_exports.enum(["provisioning", "active", "error"]);
@@ -26159,6 +26813,11 @@ var AppDomainSchema2 = external_exports.object({
   status: AppDomainStatusSchema2,
   created_at: Timestamp2
 });
+var AppPermissionsSchema2 = external_exports.object({
+  object: external_exports.literal("app_permissions"),
+  app_id: idOf2("app"),
+  scopes: external_exports.array(external_exports.string())
+});
 var BlueprintInstallSourceSchema2 = external_exports.enum(["studio", "cli"]);
 var BlueprintInstallStatusSchema2 = external_exports.enum(["pending", "applied", "failed"]);
 var ResourceActionSchema2 = external_exports.enum(["created", "updated", "unchanged", "deleted", "refused"]);
@@ -26255,7 +26914,10 @@ var BlueprintInstallSchema2 = external_exports.object({
    */
   report: BlueprintReportSchema2.nullable(),
   status: BlueprintInstallStatusSchema2,
-  /** Why a `failed` run threw, in one sentence; `null` on every other row. Never a stack or a key. */
+  /**
+   * Why a `failed` run threw, in one sentence — or, on an `applied` row, which `required` agent or
+   * app the apply refused and why (§29.6). `null` otherwise. Never a stack or a key.
+   */
   failure: external_exports.string().nullable(),
   /**
    * The `selection` the apply carried, or `null` — every row written before §31.2 and every apply
@@ -26369,6 +27031,39 @@ var SocialCommentSchema2 = external_exports.object({
   posted_at: Timestamp2.nullable(),
   data: external_exports.unknown()
 });
+var POST_STATUSES2 = ["pending", "scheduled", "posted", "failed"];
+var PostStatusSchema2 = external_exports.enum(POST_STATUSES2);
+var PostSchema2 = external_exports.object({
+  object: external_exports.literal("post"),
+  id: external_exports.string().min(1),
+  status: PostStatusSchema2,
+  identity_id: external_exports.string().nullable(),
+  agent_id: external_exports.string().nullable(),
+  session_id: external_exports.string().nullable(),
+  tool_call_id: external_exports.string().nullable(),
+  content: external_exports.string().nullable(),
+  platforms: external_exports.array(external_exports.string()),
+  file_ids: external_exports.array(external_exports.string()),
+  media_urls: external_exports.array(external_exports.string()),
+  visibility: SocialVisibilitySchema2.nullable(),
+  scheduled_at: Timestamp2.nullable(),
+  posted_at: Timestamp2.nullable(),
+  url: external_exports.string().nullable(),
+  error: external_exports.string().nullable(),
+  /** The latest stored reading, `{metric: value}`; `null` before `social.post_metrics` read any. */
+  metrics: external_exports.record(external_exports.string(), external_exports.number()).nullable(),
+  measured_at: Timestamp2.nullable(),
+  /** Pending only: the earlier post this call would repeat — same identity, network and file. */
+  duplicate_of: external_exports.object({
+    id: external_exports.string(),
+    status: PostStatusSchema2,
+    platform: external_exports.string(),
+    at: Timestamp2.nullable(),
+    agent_id: external_exports.string().nullable(),
+    session_id: external_exports.string().nullable()
+  }).nullable(),
+  created_at: Timestamp2
+});
 var BlueprintScheduleSchema2 = external_exports.object({
   agent: external_exports.string().min(1),
   cron: external_exports.string().min(1),
@@ -26400,16 +27095,9 @@ var BlueprintAppSchema2 = external_exports.object({
   /** Whether an install may deselect it (§31.2). Optional: the rollout argument above. */
   required: external_exports.boolean().optional()
 });
-var BlueprintIdentityConnectionsSchema2 = external_exports.object({
-  social: external_exports.object({
-    from: external_exports.string().min(1),
-    map: external_exports.record(external_exports.string().min(1), SocialPlatformSchema2)
-  }).optional()
-});
 var BlueprintIdentitySchema2 = external_exports.object({
   name: external_exports.string().min(1),
-  description: external_exports.string().nullable(),
-  connections: BlueprintIdentityConnectionsSchema2.optional()
+  description: external_exports.string().nullable()
 });
 var ContentHashSchema2 = external_exports.string().regex(/^[0-9a-f]{64}$/, "a lowercase sha-256 hex digest");
 var BlueprintTreeSchema2 = external_exports.object({
@@ -26427,11 +27115,18 @@ var BlueprintArtifactSchema2 = external_exports.object({
   /** The blueprint repository's own released version. Stored, never parsed (ADR-0401). */
   version: external_exports.string().min(1),
   /**
-   * The built trees, one per deployable app, ordered as the declaration orders its apps. Never
-   * empty: an artifact that built nothing is not an artifact, and the column behind it says so
-   * (migration 0040) exactly as the single `content_hash` it replaces was `not null`.
+   * What a person calls the template, one line on what its crew does, and the networks it publishes
+   * to — printed, never provisioned (§31.5, ADR-0921). `platforms` is decoration: where the crew
+   * posts is the accounts connected to its persona. Optional for the §31.5 rollout reason.
    */
-  trees: external_exports.array(BlueprintTreeSchema2).min(1),
+  title: external_exports.string().min(1).optional(),
+  description: external_exports.string().min(1).optional(),
+  platforms: external_exports.array(SocialPlatformSchema2).optional(),
+  /**
+   * The built trees, one per deployable app, ordered as the declaration orders its apps. Empty for
+   * a data-only blueprint: it declares no app, builds nothing, and still ships a crew (ADR-0900).
+   */
+  trees: external_exports.array(BlueprintTreeSchema2),
   /**
    * The setup questions, asked by the studio **before** provisioning. `QuestionField` (§7.1) is
    * reused rather than restated: a setup question and a question a parked agent asks are the same
@@ -26536,6 +27231,199 @@ var ChannelPostSchema2 = external_exports.object({
   root_session_id: idOf2("ses"),
   queued: external_exports.boolean()
 });
+var SHOW_SOURCES2 = ["spend_by_day", "post_views", "roadmap", "schedule"];
+var ShowSourceSchema2 = external_exports.enum(SHOW_SOURCES2);
+var ShowArgsSchema2 = external_exports.object({
+  source: ShowSourceSchema2.describe(
+    "What to show: spend_by_day (company spend per day, a line), post_views (views per recent post, bars), roadmap (the board's work by status), schedule (routines and scheduled posts over the next 7 days)."
+  ),
+  days: external_exports.number().int().min(2).max(30).optional().describe("spend_by_day only: days back, today included. Default 14.")
+});
+var Day3 = external_exports.string().regex(/^\d{4}-\d{2}-\d{2}$/);
+var Count3 = external_exports.number().int().nonnegative();
+var head2 = { title: external_exports.string().min(1), as_of: Timestamp2, timezone: external_exports.string().min(1) };
+var SpendByDayViewSchema2 = external_exports.object({
+  source: external_exports.literal("spend_by_day"),
+  ...head2,
+  days: external_exports.array(external_exports.object({ day: Day3, micro_usd: Count3 })).min(2).max(30)
+});
+var PostViewsViewSchema2 = external_exports.object({
+  source: external_exports.literal("post_views"),
+  ...head2,
+  posts: external_exports.array(external_exports.object({ post_id: external_exports.string().min(1), label: external_exports.string(), networks: external_exports.array(external_exports.string()), posted_at: Timestamp2, views: Count3 })).max(12)
+});
+var RoadmapViewSchema2 = external_exports.object({
+  source: external_exports.literal("roadmap"),
+  ...head2,
+  groups: external_exports.array(
+    external_exports.object({
+      status: BoardStatusSchema2,
+      count: Count3,
+      cards: external_exports.array(external_exports.object({ title: external_exports.string(), assignee: external_exports.string().nullable(), waits_on: external_exports.array(external_exports.string()) })).max(5)
+    })
+  )
+});
+var ScheduleViewSchema2 = external_exports.object({
+  source: external_exports.literal("schedule"),
+  ...head2,
+  days: external_exports.array(
+    external_exports.object({
+      day: Day3,
+      count: Count3,
+      items: external_exports.array(
+        external_exports.discriminatedUnion("kind", [
+          external_exports.object({ kind: external_exports.literal("routine"), at: Timestamp2, agent: external_exports.string(), text: external_exports.string(), runs: external_exports.number().int().min(1).max(100) }),
+          external_exports.object({ kind: external_exports.literal("post"), at: Timestamp2, networks: external_exports.array(external_exports.string()), text: external_exports.string() })
+        ])
+      ).max(8)
+    })
+  ).max(7)
+});
+var ShowViewSchema2 = external_exports.discriminatedUnion("source", [
+  SpendByDayViewSchema2,
+  PostViewsViewSchema2,
+  RoadmapViewSchema2,
+  ScheduleViewSchema2
+]);
+var Key2 = external_exports.string().regex(/^[A-Za-z][A-Za-z0-9_-]{0,39}$/, "an element key is a short name: a letter, then letters, digits, - or _");
+var Count22 = external_exports.number().int().nonnegative();
+var DIGIT2 = "words only: a digit is refused, because every number on the card is read by code from a $source binding";
+var words2 = (max) => external_exports.string().trim().min(1).max(max).regex(/^[^0-9]*$/, DIGIT2).refine((text2) => !new RegExp("\\p{N}", "u").test(text2), DIGIT2);
+var Days2 = external_exports.number().int().min(1).max(30).default(7).describe("The window: today and the days before it, on the company's clock. Default 7.");
+function bound2(sources2, shape) {
+  const example = JSON.stringify({ $source: sources2[0] });
+  return external_exports.strictObject(
+    { $source: external_exports.enum(sources2), ...shape },
+    { error: (issue2) => issue2.code === "invalid_type" ? `must be a binding such as ${example}: a literal value is refused, code reads every number` : void 0 }
+  );
+}
+var Bound2 = {
+  value: bound2(["views_total", "spend_total"], { days: Days2 }).describe(
+    "views_total: the latest views of the posts published in the window. spend_total: the company's spend in the window (the CEO only)."
+  ),
+  delta: bound2(["views_change"], {}).describe(
+    "views_change: the value's views_total against the same number of days before it, as a percentage. Its window is the value's."
+  ),
+  series: bound2(["spend_by_day"], { days: external_exports.number().int().min(2).max(30).default(14) }).describe("spend_by_day: the company's spend per day (the CEO only)."),
+  bars: bound2(["post_views"], { limit: external_exports.number().int().min(1).max(12).default(5).describe("How many posts, newest first. Default 5.") }).describe(
+    "post_views: each recent post's latest views, newest first."
+  ),
+  progress: bound2(["posts_this_week"], {}).describe("posts_this_week: posts published since Monday against the weekly cadence from the company's setup."),
+  board: bound2(["roadmap"], {}).describe("roadmap: the board's work by status."),
+  week: bound2(["schedule"], {}).describe("schedule: routines and scheduled posts over the next 7 days."),
+  media: external_exports.union([bound2(["latest_media"], { count: external_exports.number().int().min(1).max(4).default(1) }), external_exports.array(idOf2("fil")).min(1).max(4)]).describe('{"$source":"latest_media","count":1} for the newest posted pictures or clips, or up to 4 fil_ ids.')
+};
+var SpendDay2 = external_exports.strictObject({ day: external_exports.string().regex(/^\d{4}-\d{2}-\d{2}$/), micro_usd: Count22 });
+var Resolved2 = {
+  value: external_exports.discriminatedUnion("$source", [
+    external_exports.strictObject({ $source: external_exports.literal("views_total"), days: external_exports.number().int(), value: Count22, posts: Count22 }),
+    external_exports.strictObject({ $source: external_exports.literal("spend_total"), days: external_exports.number().int(), value: Count22 })
+  ]),
+  delta: external_exports.strictObject({ $source: external_exports.literal("views_change"), days: external_exports.number().int(), current: Count22, previous: Count22 }),
+  series: external_exports.strictObject({ $source: external_exports.literal("spend_by_day"), days: external_exports.number().int(), points: external_exports.array(SpendDay2).min(2).max(30) }),
+  bars: external_exports.strictObject({ $source: external_exports.literal("post_views"), limit: external_exports.number().int(), posts: PostViewsViewSchema2.shape.posts }),
+  progress: external_exports.strictObject({ $source: external_exports.literal("posts_this_week"), value: Count22, max: external_exports.number().int().positive(), cadence: external_exports.string() }),
+  board: external_exports.strictObject({ $source: external_exports.literal("roadmap"), groups: RoadmapViewSchema2.shape.groups }),
+  week: external_exports.strictObject({ $source: external_exports.literal("schedule"), days: ScheduleViewSchema2.shape.days }),
+  media: external_exports.array(external_exports.strictObject({ id: idOf2("fil"), kind: external_exports.enum(["image", "video"]) })).min(1).max(4)
+};
+var box2 = { children: external_exports.array(Key2).min(1).max(12) };
+var leaf2 = { children: external_exports.array(Key2).max(0).optional() };
+var label2 = words2(40).optional();
+var element2 = (type, props, children, about) => external_exports.strictObject({ type: external_exports.literal(type), props: external_exports.strictObject(props), ...children }).describe(about);
+function catalog2(slot) {
+  return {
+    Card: element2("Card", { title: words2(60) }, box2, "The card, with a short title. It is the root, and only the root."),
+    Stack: element2("Stack", {}, box2, "Children one under another."),
+    Grid: element2("Grid", { columns: external_exports.literal([1, 2, 3]) }, box2, "Children side by side, 1 to 3 columns."),
+    Metric: element2("Metric", { label: words2(40), value: slot.value, delta: slot.delta.optional() }, leaf2, "One big number with a label, and optionally its change."),
+    LineChart: element2("LineChart", { label: label2, series: slot.series }, leaf2, "A line over days."),
+    BarList: element2("BarList", { label: label2, bars: slot.bars }, leaf2, "One bar per post."),
+    Progress: element2("Progress", { label: words2(40), progress: slot.progress }, leaf2, "A value against its goal, as a bar."),
+    Roadmap: element2("Roadmap", { label: label2, board: slot.board }, leaf2, "The board grouped by status."),
+    Schedule: element2("Schedule", { label: label2, week: slot.week }, leaf2, "The week ahead, day by day."),
+    Media: element2("Media", { label: label2, files: slot.media }, leaf2, "Pictures or clips the company holds."),
+    Text: element2("Text", { text: words2(240) }, leaf2, "A short note in words.")
+  };
+}
+var unknownComponent2 = (names2) => ({
+  error: (issue2) => issue2.code === "invalid_union" ? `unknown component: use one of ${names2.join(", ")}` : void 0
+});
+function tree2(rootType, max, spec22, ctx) {
+  const refuse2 = (message4, path = []) => ctx.addIssue({ code: "custom", message: message4, path });
+  const keys22 = Object.keys(spec22.elements);
+  const has = (key2) => Object.hasOwn(spec22.elements, key2);
+  if (keys22.length > max) return refuse2(`at most ${max} elements`, ["elements"]);
+  const root = has(spec22.root) ? spec22.elements[spec22.root] : void 0;
+  if (!root) return refuse2(`root names "${spec22.root}", which is not in elements`, ["root"]);
+  if (root.type !== rootType) return refuse2(`the root must be a ${rootType}`, ["root"]);
+  const parent = /* @__PURE__ */ new Map();
+  for (const key2 of keys22) {
+    for (const child of spec22.elements[key2].children ?? []) {
+      if (!has(child)) return refuse2(`"${child}" is not in elements`, ["elements", key2, "children"]);
+      if (child === spec22.root || parent.has(child)) return refuse2(`"${child}" has more than one parent`, ["elements", key2, "children"]);
+      if (spec22.elements[child].type === rootType) return refuse2(`a ${rootType} is the root only; group with Stack or Grid`, ["elements", child, "type"]);
+      parent.set(child, key2);
+    }
+  }
+  const reached = /* @__PURE__ */ new Set([spec22.root]);
+  for (const key2 of reached) for (const child of spec22.elements[key2].children ?? []) reached.add(child);
+  const lost = keys22.find((key2) => !reached.has(key2));
+  if (lost) refuse2(`"${lost}" is not under the root`, ["elements", lost]);
+}
+var spec2 = (element22, rootType, max) => external_exports.strictObject({ root: Key2, elements: external_exports.record(Key2, element22) }).superRefine((value, ctx) => tree2(rootType, max, value, ctx));
+var COMPOSE_COMPONENTS2 = ["Card", "Stack", "Grid", "Metric", "LineChart", "BarList", "Progress", "Roadmap", "Schedule", "Media", "Text"];
+var MAX_COMPOSE_ELEMENTS2 = 24;
+var BoundComponents2 = catalog2(Bound2);
+var ComposeSpecSchema2 = spec2(
+  external_exports.discriminatedUnion(
+    "type",
+    [
+      BoundComponents2.Card,
+      BoundComponents2.Stack,
+      BoundComponents2.Grid,
+      BoundComponents2.Metric,
+      BoundComponents2.LineChart,
+      BoundComponents2.BarList,
+      BoundComponents2.Progress,
+      BoundComponents2.Roadmap,
+      BoundComponents2.Schedule,
+      BoundComponents2.Media,
+      BoundComponents2.Text
+    ],
+    unknownComponent2(COMPOSE_COMPONENTS2)
+  ),
+  "Card",
+  MAX_COMPOSE_ELEMENTS2
+);
+var ComposeArgsSchema2 = external_exports.object({
+  spec: ComposeSpecSchema2.describe(
+    'A json-render spec: { "root": key, "elements": { key: { "type", "props", "children"? } } }. The root is one Card.'
+  )
+});
+var ComposedComponents2 = catalog2(Resolved2);
+var ComposedSpecSchema2 = spec2(
+  external_exports.discriminatedUnion(
+    "type",
+    [
+      ComposedComponents2.Card,
+      ComposedComponents2.Stack,
+      ComposedComponents2.Grid,
+      ComposedComponents2.Metric,
+      ComposedComponents2.LineChart,
+      ComposedComponents2.BarList,
+      ComposedComponents2.Progress,
+      ComposedComponents2.Roadmap,
+      ComposedComponents2.Schedule,
+      ComposedComponents2.Media,
+      ComposedComponents2.Text
+    ],
+    unknownComponent2(COMPOSE_COMPONENTS2)
+  ),
+  "Card",
+  MAX_COMPOSE_ELEMENTS2
+);
+var ComposedSchema2 = external_exports.object({ as_of: Timestamp2, timezone: external_exports.string().min(1), spec: ComposedSpecSchema2 });
 var MEDIA_MODEL_KINDS2 = ["image", "video", "stt", "tts", "s2s"];
 var MEDIA_JOB_KINDS2 = ["video", "clip", "transcription"];
 var MediaJobKindSchema2 = external_exports.enum(MEDIA_JOB_KINDS2);
@@ -26603,9 +27491,12 @@ var ImageRequestSchema2 = external_exports.object({
   n: external_exports.number().int().min(1).max(4).default(1)
 });
 var VideoRequestSchema2 = external_exports.object({
-  model: external_exports.string().min(1),
+  /** Omitted: the platform's video default while the catalogue publishes it (`resolveModel`, §33.2). */
+  model: external_exports.string().min(1).optional(),
   prompt: external_exports.string().min(1),
   image_urls: external_exports.array(PublicUrl2).max(1).optional(),
+  /** The source clip of a video-to-video edit (ADR-0814). */
+  video_url: PublicUrl2.optional(),
   aspect_ratio: external_exports.string().optional(),
   seed: external_exports.number().int().optional(),
   seconds: external_exports.number().int().min(1).max(60).optional()
@@ -26891,18 +27782,18 @@ var ReferralClickSchema2 = external_exports.object({
   creator: external_exports.object({ display_name: external_exports.string().min(1) }),
   expires_at: Timestamp2
 });
-var Day2 = external_exports.iso.date();
+var Day22 = external_exports.iso.date();
 var CreatorAnalyticsSchema2 = external_exports.object({
   object: external_exports.literal("creator_analytics"),
   days: external_exports.number().int().min(1).max(90),
-  from: Day2,
-  to: Day2,
+  from: Day22,
+  to: Day22,
   clicks: external_exports.number().int().nonnegative(),
   referrals: external_exports.number().int().nonnegative(),
   installs: external_exports.number().int().nonnegative(),
   active_installs: external_exports.number().int().nonnegative(),
   usage_by_day: external_exports.array(
-    external_exports.object({ day: Day2, debit_micro_usd: MicroUsdField2.nonnegative() })
+    external_exports.object({ day: Day22, debit_micro_usd: MicroUsdField2.nonnegative() })
   ),
   commission_micro_usd: external_exports.object({
     pending: MicroUsdField2.nonnegative(),
@@ -26917,7 +27808,7 @@ var CreatorAnalyticsSchema2 = external_exports.object({
     })
   ),
   /** Every install covered, newest first: the day it was created and the day its twelve months end. */
-  install_windows: external_exports.array(external_exports.object({ install_id: idOf2("bpi"), from: Day2, until: Day2 }))
+  install_windows: external_exports.array(external_exports.object({ install_id: idOf2("bpi"), from: Day22, until: Day22 }))
 });
 var LEGAL_MEMBER_STATUSES2 = [
   "pending",
@@ -27348,6 +28239,151 @@ var CreateReviewSchema2 = external_exports.object({
   before: Fields2,
   after: Fields2
 });
+var PAGE_BLOCKS2 = [
+  "Page",
+  "Section",
+  "Stack",
+  "Grid",
+  "Metric",
+  "LineChart",
+  "BarList",
+  "Progress",
+  "Roadmap",
+  "Schedule",
+  "Media",
+  "Text",
+  "Needs",
+  "Activity",
+  "Accounts",
+  "Posts",
+  "Answers",
+  "MediaLibrary"
+];
+var MAX_PAGE_ELEMENTS2 = 48;
+var MINI_APP_ICONS2 = ["grid", "list", "chart", "calendar", "play"];
+var MiniAppIconSchema2 = external_exports.enum(MINI_APP_ICONS2);
+var SLUG2 = "[a-z][a-z0-9-]{0,39}";
+var MiniAppSlugSchema2 = external_exports.string().regex(new RegExp(`^${SLUG2}$`), "a slug is lowercase letters, digits and -");
+var Place2 = external_exports.string().regex(new RegExp(`^/(board|connections|apps/${SLUG2}(\\?page=${SLUG2})?)$`), "a section links to /board, /connections or /apps/<slug>[?page=<slug>]");
+var POSTS2 = ["waiting", "scheduled", "posted"];
+var PostStatus2 = external_exports.enum(POSTS2);
+var PostLayout2 = external_exports.enum(["list", "row", "grid"]);
+var PostStatuses2 = external_exports.union([PostStatus2, external_exports.array(PostStatus2).min(1).max(3).refine((all) => new Set(all).size === all.length, "each status once")]);
+var PageBound2 = {
+  ...Bound2,
+  board: bound2(["roadmap"], { per_group: external_exports.number().int().min(1).max(5).default(5) }),
+  media: bound2(["latest_media", "newest_media"], { count: external_exports.number().int().min(1).max(6).default(4) })
+};
+var PageResolved2 = {
+  ...Resolved2,
+  board: external_exports.strictObject({ $source: external_exports.literal("roadmap"), per_group: external_exports.number().int(), groups: RoadmapViewSchema2.shape.groups }),
+  media: external_exports.array(external_exports.strictObject({ id: external_exports.string(), kind: external_exports.enum(["image", "video"]) })).max(6)
+};
+function pageBlocks2(slot) {
+  return {
+    Page: element2("Page", {}, box2, "The page itself, the root and only the root."),
+    Section: element2("Section", { title: words2(40), to: Place2.optional(), hide_empty: external_exports.boolean().optional() }, box2, "A titled part of the page; hidden when every block in it is empty, if asked."),
+    Needs: element2("Needs", { label: label2, needs: slot.needs }, leaf2, "What waits on a person: approvals, questions, spent caps."),
+    Activity: element2("Activity", { label: label2, agents: slot.agents }, leaf2, "The agents working or waiting, and on what."),
+    Accounts: element2("Accounts", { accounts: slot.accounts }, leaf2, "The template's networks: connected with a handle, or not."),
+    Posts: element2(
+      "Posts",
+      { label: label2, layout: PostLayout2.optional(), posts: slot.posts },
+      leaf2,
+      "Posts waiting on a person, scheduled, or posted; several statuses make one list. Drawn as rows (list, the default), one sideways row of cards (row), or a picture grid (grid)."
+    ),
+    Answers: element2("Answers", { answers: slot.answers }, leaf2, "The setup's answers in one line, linking to the setup."),
+    // No binding: the studio's gallery reads and pages the company's files itself (ADR-0987).
+    MediaLibrary: element2("MediaLibrary", {}, leaf2, "Every picture and clip the company's agents made, with filters, sort and a viewer.")
+  };
+}
+var OwnBound2 = pageBlocks2({
+  needs: bound2(["needs"], {}),
+  agents: bound2(["agents_activity"], {}),
+  accounts: bound2(["accounts"], {}),
+  posts: bound2(["posts"], { status: PostStatuses2, limit: external_exports.number().int().min(1).max(50).default(10) }),
+  answers: bound2(["answers"], { keys: external_exports.array(Key2).min(1).max(TEMPLATE_QUESTIONS_MAX2) })
+});
+var Need2 = external_exports.object({
+  session_id: external_exports.string(),
+  agent_id: external_exports.string(),
+  agent: external_exports.string(),
+  since: Timestamp2,
+  /** The chat's stored title, or `null`: the studio names it by when it began. */
+  title: external_exports.string().nullable(),
+  kind: external_exports.enum(["tool", "question", "budget"]),
+  /** The call or question it is held on; `null` for a spent cap. */
+  action: PendingActionSchema2.nullable()
+});
+var Working2 = external_exports.object({
+  agent_id: external_exports.string(),
+  agent: external_exports.string(),
+  state: external_exports.enum(["working", "waiting"]),
+  session_id: external_exports.string().nullable(),
+  title: external_exports.string().nullable(),
+  at: Timestamp2
+});
+var OwnResolved2 = pageBlocks2({
+  needs: external_exports.strictObject({ $source: external_exports.literal("needs"), items: external_exports.array(Need2) }),
+  agents: external_exports.strictObject({ $source: external_exports.literal("agents_activity"), agents: external_exports.array(Working2) }),
+  accounts: external_exports.strictObject({
+    $source: external_exports.literal("accounts"),
+    accounts: external_exports.array(external_exports.object({ platform: SocialPlatformSchema2, connected: external_exports.boolean(), handle: external_exports.string().nullable() }))
+  }),
+  posts: external_exports.strictObject({ $source: external_exports.literal("posts"), status: external_exports.union([PostStatus2, external_exports.array(PostStatus2)]), limit: external_exports.number().int(), posts: external_exports.array(PostSchema2), more: external_exports.boolean() }),
+  answers: external_exports.strictObject({
+    $source: external_exports.literal("answers"),
+    keys: external_exports.array(external_exports.string()),
+    values: external_exports.array(external_exports.string()),
+    template: external_exports.object({ blueprint: external_exports.string(), template: external_exports.string() }).nullable()
+  })
+});
+var BoundBlocks2 = { ...catalog2(PageBound2), ...OwnBound2 };
+var ResolvedBlocks2 = { ...catalog2(PageResolved2), ...OwnResolved2 };
+var Unread2 = element2("Unread", { of: external_exports.string(), label: external_exports.string().nullable(), reason: external_exports.string() }, leaf2, "A block that could not be read.");
+var B2 = BoundBlocks2;
+var PageSpecSchema2 = spec2(
+  external_exports.discriminatedUnion(
+    "type",
+    [B2.Page, B2.Section, B2.Stack, B2.Grid, B2.Metric, B2.LineChart, B2.BarList, B2.Progress, B2.Roadmap, B2.Schedule, B2.Media, B2.Text, B2.Needs, B2.Activity, B2.Accounts, B2.Posts, B2.Answers, B2.MediaLibrary],
+    unknownComponent2(PAGE_BLOCKS2)
+  ),
+  "Page",
+  MAX_PAGE_ELEMENTS2
+);
+var R2 = ResolvedBlocks2;
+var ResolvedPageElementSchema2 = external_exports.discriminatedUnion(
+  "type",
+  [R2.Page, R2.Section, R2.Stack, R2.Grid, R2.Metric, R2.LineChart, R2.BarList, R2.Progress, R2.Roadmap, R2.Schedule, R2.Media, R2.Text, R2.Needs, R2.Activity, R2.Accounts, R2.Posts, R2.Answers, R2.MediaLibrary, Unread2],
+  unknownComponent2(PAGE_BLOCKS2)
+);
+var ResolvedPageSpecSchema2 = spec2(ResolvedPageElementSchema2, "Page", MAX_PAGE_ELEMENTS2);
+var unique2 = (items) => new Set(items.map((item) => item.slug)).size === items.length;
+var MiniAppPageSchema2 = external_exports.strictObject({ slug: MiniAppSlugSchema2, title: words2(24), spec: PageSpecSchema2 });
+var MiniAppDeclSchema2 = external_exports.strictObject({
+  slug: MiniAppSlugSchema2,
+  name: words2(40),
+  icon: MiniAppIconSchema2,
+  pages: external_exports.array(MiniAppPageSchema2).min(1).max(6).refine(unique2, "each page's slug is its own")
+});
+var MiniAppDeclsSchema2 = external_exports.array(MiniAppDeclSchema2).max(8).refine(unique2, "each mini app's slug is its own");
+var MiniAppSummarySchema2 = external_exports.object({
+  object: external_exports.literal("mini_app"),
+  slug: MiniAppSlugSchema2,
+  name: external_exports.string(),
+  icon: MiniAppIconSchema2,
+  pages: external_exports.array(external_exports.object({ slug: MiniAppSlugSchema2, title: external_exports.string() })).min(1),
+  /** What it reads (`miniAppReads`). Absent from an older API: the Studio then claims nothing it cannot see. */
+  reads: external_exports.array(external_exports.string()).optional()
+});
+var MiniAppSchema2 = MiniAppSummarySchema2.extend({
+  networks: external_exports.array(external_exports.object({ platform: SocialPlatformSchema2, connected: external_exports.boolean().nullable() })),
+  page: MiniAppSlugSchema2,
+  as_of: Timestamp2,
+  timezone: external_exports.string().min(1),
+  spec: ResolvedPageSpecSchema2
+});
+var MAX_BYTES2 = 16 * 1024;
 var encoder22 = new TextEncoder();
 var SESSION_FILE_URL_TTL_MS2 = 15 * 6e4;
 var MUTATING = /* @__PURE__ */ new Set(["POST", "PATCH", "PUT", "DELETE"]);
@@ -27541,6 +28577,7 @@ var orgs = (config2) => ({
   /** Creates a new organization and answers a working key for it, secret shown once (§20.3). */
   create: (body2) => request(config2, CreatedOrganizationSchema, { method: "POST", path: "/v1/organizations", body: body2 }),
   get: (id) => request(config2, OrganizationSchema2, { method: "GET", path: `/v1/organizations/${id}` }),
+  /** A rename, a new timezone (IANA, §20.6), a logo (SVG, §20.7; `null` clears it), or any together. */
   update: (id, body2) => request(config2, OrganizationSchema2, { method: "PATCH", path: `/v1/organizations/${id}`, body: body2 }),
   members: (id, query = {}) => request(config2, page(MemberSchema2), {
     method: "GET",
@@ -27666,6 +28703,8 @@ var apps = (config2) => ({
    * thirty days of `/api/*`. Rotating is revoking, and it signs out every browser already signed
    * in. Hand the value to a person; never put it in a URL or a log.
    */
+  /** What the app's own key lets it do with Naive: its scopes, never the key (§29.10, ADR-1048). */
+  permissions: (id) => request(config2, AppPermissionsSchema2, { method: "GET", path: `/v1/apps/${id}/permissions` }),
   access: (id) => request(config2, AppAccessSchema2, { method: "GET", path: `/v1/apps/${id}/access` }),
   rotateAccess: (id) => request(config2, AppAccessSchema2, { method: "POST", path: `/v1/apps/${id}/access` }),
   /** The domain must already exist at `/v1/domains`; connecting is pointing, never registering. */
@@ -27717,9 +28756,12 @@ var apps = (config2) => ({
    * artifact is what is applied and the install is the record that it was. `blueprint` and
    * `template` narrow it, and an apply of one of these rows sends that pair in place of a
    * declaration it was never given.
+   *
+   * The page is parsed leniently (`tolerantPage`): a row this build cannot read — a data-only
+   * blueprint's empty `trees` (ADR-0900) met a build that required one — is skipped, not thrown.
    */
   artifacts: {
-    list: (query = {}) => request(config2, page(BlueprintArtifactSchema2), {
+    list: (query = {}) => request(config2, tolerantPage(BlueprintArtifactSchema2), {
       method: "GET",
       path: "/v1/blueprints/artifacts",
       query
@@ -27994,6 +29036,18 @@ var emails = (config2) => ({
     method: "GET",
     path: `/v1/identities/${identityId}/messages`,
     query
+  }),
+  /** Mark one arrived message read or unread; a message already read keeps its first time. */
+  markRead: (identityId, messageId, read) => request(config2, InboundMessageSchema2, {
+    method: "POST",
+    path: `/v1/identities/${identityId}/messages/${messageId}/read`,
+    body: { read }
+  }),
+  /** What the persona sent, newest first — through the API and through its agent alike. */
+  sent: (identityId, query = {}) => request(config2, page(OutboundMessageSchema2), {
+    method: "GET",
+    path: `/v1/identities/${identityId}/sent`,
+    query
   })
 });
 var phones = (config2) => ({
@@ -28227,6 +29281,8 @@ var agents = (config2) => ({
   rollback: (id, body2) => request(config2, AgentSchema2, { method: "POST", path: `/v1/agents/${id}/rollback`, body: body2 }),
   /** Metered spend for the agent's current budget period; `by: "component"` adds the breakdown. */
   spend: (id, query = {}) => request(config2, AgentSpendSchema, { method: "GET", path: `/v1/agents/${id}/spend`, query }),
+  /** The agent's one computer (§41.8), or `null` before any session has needed one. */
+  computer: (id) => request(config2, ComputerSchema2.nullable(), { method: "GET", path: `/v1/agents/${id}/computer` }),
   delete: (id) => request(config2, DeletedSchema, { method: "DELETE", path: `/v1/agents/${id}` })
 });
 var models = (config2) => ({
@@ -28313,7 +29369,9 @@ var sessions = (config2) => ({
   get: (id) => request(config2, SessionSchema2, { method: "GET", path: `/v1/sessions/${id}` }),
   /**
    * `interrupt:true` steers a running session; `queue:true` holds the message for the turn after
-   * this one; neither, a running session is `session_running` (§7).
+   * this one; neither, a running session is `session_running` (§7). `model` runs the session on that
+   * catalogue id from this message's turn on. `mode: "plan"` runs it read-only until the person
+   * approves the plan; `"build"` leaves plan mode (§7.5).
    */
   send: (id, body2, opts = {}) => request(config2, SendAcceptedSchema2, {
     method: "POST",
@@ -28331,6 +29389,7 @@ var sessions = (config2) => ({
   /**
    * `scope: "session"` turns an `allow` into a grant: that TOOL NAME runs without a card for the
    * rest of this session, and nothing else does. Omitted — the default — is one call, one decision.
+   * `answers` on an allow of a template install runs it with the person's own answers (ADR-1030).
    */
   confirmTool: (id, body2) => request(config2, SessionSchema2, {
     method: "POST",
@@ -28350,6 +29409,10 @@ var sessions = (config2) => ({
     path: `/v1/sessions/${id}/budget`,
     body: { cap_micro_usd: capMicroUsd }
   }),
+  /** The session's living plan (§7.5): version 0 and empty until one is written. */
+  plan: (id) => request(config2, PlanSchema2, { method: "GET", path: `/v1/sessions/${id}/plan` }),
+  /** The owner's edit, a compare-and-set: a stale `base_version` is `version_conflict` (409). */
+  writePlan: (id, body2) => request(config2, PlanSchema2, { method: "PUT", path: `/v1/sessions/${id}/plan`, body: body2 }),
   /**
    * The sessions this one delegated to (`canonical-spec §28.5`). A thread is a session, so every
    * method above works on one by its own id; delegated children are kept out of `list`, which is
@@ -28697,21 +29760,31 @@ var publishing = (config2) => ({
     path: `/v1/identities/${identity3}/social/posts`,
     body: body2
   }),
-  getPost: (identity3, post) => request(config2, SocialPostSchema2, {
+  getPost: (identity3, post2) => request(config2, SocialPostSchema2, {
     method: "GET",
-    path: `/v1/identities/${identity3}/social/posts/${post}`
+    path: `/v1/identities/${identity3}/social/posts/${post2}`
   }),
-  deletePost: (identity3, post) => request(config2, DeletedSchema, {
+  deletePost: (identity3, post2) => request(config2, DeletedSchema, {
     method: "DELETE",
-    path: `/v1/identities/${identity3}/social/posts/${post}`
+    path: `/v1/identities/${identity3}/social/posts/${post2}`
+  }),
+  postAnalytics: (identity3, post2) => request(config2, SocialAnalyticsSchema2, {
+    method: "GET",
+    path: `/v1/identities/${identity3}/social/posts/${post2}/analytics`
   }),
-  postAnalytics: (identity3, post) => request(config2, SocialAnalyticsSchema2, {
+  /**
+   * `GET /v1/posts` — every post the company files, across identities and sessions (§27.1): the
+   * `social.post` calls waiting on a person (`pending`), and the ones sent, with their latest numbers.
+   * `reconcile: false` lists what is stored without asking the provider about due posts first.
+   */
+  listPosts: ({ reconcile, ...query } = {}) => request(config2, page(PostSchema2), {
     method: "GET",
-    path: `/v1/identities/${identity3}/social/posts/${post}/analytics`
+    path: "/v1/posts",
+    query: { ...query, ...reconcile === void 0 ? {} : { reconcile: String(reconcile) } }
   }),
-  comments: (identity3, post, query = {}) => request(config2, page(SocialCommentSchema2), {
+  comments: (identity3, post2, query = {}) => request(config2, page(SocialCommentSchema2), {
     method: "GET",
-    path: `/v1/identities/${identity3}/social/posts/${post}/comments`,
+    path: `/v1/identities/${identity3}/social/posts/${post2}/comments`,
     query
   })
 });
@@ -28917,6 +29990,9 @@ var computers = (config2) => ({
   /** Paused bills storage only — the first efficiency lever (`memory/context.md`). */
   pause: (id) => request(config2, ComputerSchema2, { method: "POST", path: `/v1/computers/${id}/pause`, body: {} }),
   resume: (id) => request(config2, ComputerSchema2, { method: "POST", path: `/v1/computers/${id}/resume`, body: {} }),
+  /** An agent's computer only (§41.8): a person holds it, and its sessions wait until it is handed back. */
+  takeOver: (id) => request(config2, ComputerSchema2, { method: "POST", path: `/v1/computers/${id}/takeover`, body: {} }),
+  handBack: (id) => request(config2, ComputerSchema2, { method: "DELETE", path: `/v1/computers/${id}/takeover` }),
   snapshot: (id) => request(config2, SnapshotSchema2, {
     method: "POST",
     path: `/v1/computers/${id}/snapshot`,
@@ -29025,6 +30101,11 @@ var vaults = (config2) => ({
     })
   }
 });
+var MiniAppList = external_exports.object({ data: external_exports.array(MiniAppSummarySchema2), has_more: external_exports.boolean(), next_cursor: external_exports.string().nullable() });
+var miniApps = (config2) => ({
+  list: () => request(config2, MiniAppList, { method: "GET", path: "/v1/mini-apps" }),
+  get: (slug, page2) => request(config2, MiniAppSchema2, { method: "GET", path: `/v1/mini-apps/${encodeURIComponent(slug)}`, ...page2 ? { query: { page: page2 } } : {} })
+});
 function withTool(tools2, name, settings) {
   if (!isToolName2(name)) {
     throw new TypeError(
@@ -29057,6 +30138,7 @@ function createClient(config2) {
     // core-gaps: U9-storage
     storage: storage(config2),
     vaults: vaults(config2),
+    miniApps: miniApps(config2),
     domains: domains(config2),
     emails: emails(config2),
     phones: phones(config2),
@@ -29555,7 +30637,9 @@ var agent = {
    * only the persona side was, so "what can this agent send as?" had no command.
    */
   identities: async ({ client, args }) => ({ out: await client.identities.held(args.at(0, "agent-id")) }),
-  delete: async ({ client, args }) => ({ out: await client.agents.delete(args.at(0, "agent-id")) })
+  delete: async ({ client, args }) => ({ out: await client.agents.delete(args.at(0, "agent-id")) }),
+  /** The agent's one computer (§41.8), or `null` before any session has needed one. */
+  computer: async ({ client, args }) => ({ out: await client.agents.computer(args.at(0, "agent-id")) })
 };
 
 // ../../packages/blueprints/dist/index.js
@@ -29576,9 +30660,9 @@ var ALPHABET3 = "0123456789abcdefghjkmnpqrstvwxyz";
 var SUFFIX_LENGTH3 = 26;
 var SUFFIX_PATTERN3 = new RegExp(`^[${ALPHABET3}]{${SUFFIX_LENGTH3},}$`);
 function isId3(prefix, value) {
-  const head = `${prefix}_`;
-  if (!value.startsWith(head)) return false;
-  return SUFFIX_PATTERN3.test(value.slice(head.length).toLowerCase());
+  const head22 = `${prefix}_`;
+  if (!value.startsWith(head22)) return false;
+  return SUFFIX_PATTERN3.test(value.slice(head22.length).toLowerCase());
 }
 var CODES2 = {
   window_unavailable: ["invalid_request", 400],
@@ -29586,6 +30670,8 @@ var CODES2 = {
   unauthorized: ["authentication", 401],
   forbidden: ["permission", 403],
   not_found: ["not_found", 404],
+  /** The path exists; the method does not. The response carries `Allow` (§3). */
+  method_not_allowed: ["invalid_request", 405],
   budget_exceeded: ["quota", 402],
   insufficient_credits: ["quota", 402],
   /**
@@ -29708,6 +30794,8 @@ var AUDIT_ACTIONS_P13 = [
   "computer.resumed",
   "computer.snapshot_created",
   "computer.updated",
+  "computer.taken_over",
+  "computer.handed_back",
   "browser.live_view_opened",
   "deployment.created",
   "deployment.updated",
@@ -29840,7 +30928,7 @@ var JsonSchemaDocument3 = external_exports.record(external_exports.string(), ext
 var WindowSchema3 = external_exports.enum(["immediate", "priority", "loose"]);
 var TOKEN_TIERS3 = ["input", "cache_write", "cache_read", "output", "reasoning"];
 var TokenTierSchema3 = external_exports.enum(TOKEN_TIERS3);
-var TOOL_TIERS3 = ["search", "media", "social", "browser", "storage"];
+var TOOL_TIERS3 = ["search", "media", "social", "browser", "storage", "email"];
 var LINE_ITEM_TIERS3 = [...TOKEN_TIERS3, "computer", ...TOOL_TIERS3];
 var LineItemTierSchema3 = external_exports.enum(LINE_ITEM_TIERS3);
 var TokenUsageSchema3 = external_exports.object({
@@ -29858,11 +30946,41 @@ var PrincipalSchema3 = external_exports.discriminatedUnion("type", [
 var AuditActionSchema3 = external_exports.enum(AUDIT_ACTIONS3);
 var HARNESS_IDS3 = ["pi", "claude_code", "vetta", "hermes"];
 var HarnessIdSchema3 = external_exports.enum(HARNESS_IDS3);
+var DEFAULT_ORG_TIMEZONE3 = "America/New_York";
+function canonicalZone3(name) {
+  if (!name.includes("/") && name !== "UTC") return void 0;
+  try {
+    const zone = new Intl.DateTimeFormat("en-US", { timeZone: name }).resolvedOptions().timeZone;
+    return zone === "UTC" || Intl.supportedValuesOf("timeZone").includes(zone) ? zone : void 0;
+  } catch {
+    return void 0;
+  }
+}
+var TimezoneSchema3 = external_exports.string().transform((name, ctx) => {
+  const zone = canonicalZone3(name);
+  if (zone === void 0) {
+    ctx.addIssue({ code: "custom", message: "not a timezone; use an IANA name such as America/Los_Angeles" });
+    return external_exports.NEVER;
+  }
+  return zone;
+});
 var OrganizationSchema3 = external_exports.object({
   id: idOf3("org"),
   object: external_exports.literal("organization"),
   name: external_exports.string(),
   balance_micro_usd: MicroUsdField3,
+  /**
+   * The company's timezone, an IANA name (`America/New_York`, §20.6). Times the company chooses or
+   * reads are in it: a new routine's zone, when a post goes out. `America/New_York` until changed.
+   * Defaulted so a reply from a control plane older than 0088 (or a rolled-back Worker) still parses
+   * in a newer SDK/CLI rather than throwing on every `orgs.get/list/update`.
+   */
+  timezone: external_exports.string().min(1).default(DEFAULT_ORG_TIMEZONE3),
+  /**
+   * The company's logo, an SVG a person or an agent drew (§20.7), passed by `checkLogoSvg`. `null`
+   * until one is set. Defaulted so a reply from a control plane older than 0093 still parses.
+   */
+  logo_svg: external_exports.string().nullable().default(null),
   created_at: Timestamp3
 });
 var RoleSchema3 = external_exports.enum(["owner", "admin", "member"]);
@@ -30207,7 +31325,7 @@ function normaliseMultiagent2(value) {
 }
 var HandoffsField3 = external_exports.union([external_exports.boolean(), external_exports.literal("team"), external_exports.array(external_exports.string().min(1)).max(50)]);
 var handoffsOf = (config2) => config2.handoffs ?? true;
-var handoffsEnabled = (handoffs2) => handoffs2 === true || handoffs2 === "team" || handoffs2 !== false && handoffs2.length > 0;
+var handoffsEnabled = (handoffs2) => handoffs2 !== false;
 var agentConfigShape3 = {
   model: external_exports.string(),
   window: WindowSchema3,
@@ -30250,6 +31368,22 @@ var SessionStatusSchema3 = external_exports.enum([
   "failed",
   "cancelled"
 ]);
+var SessionModeSchema3 = external_exports.enum(["plan", "build"]);
+var PLAN_MAX_CHARS3 = 2e4;
+var PlanSchema3 = external_exports.object({
+  object: external_exports.literal("plan"),
+  markdown: external_exports.string().max(PLAN_MAX_CHARS3),
+  version: external_exports.number().int().nonnegative(),
+  by: external_exports.enum(["agent", "owner"]).nullable()
+});
+var PlanWriteSchema3 = external_exports.object({
+  markdown: external_exports.string().max(PLAN_MAX_CHARS3),
+  base_version: external_exports.number().int().nonnegative()
+});
+var ProposePlanSchema3 = external_exports.object({
+  version: external_exports.number().int().positive(),
+  spends_or_publishes: external_exports.array(external_exports.string().min(1).max(200)).max(10).optional()
+});
 var StopReasonSchema3 = external_exports.enum([
   "end_turn",
   "awaiting_input",
@@ -30342,16 +31476,26 @@ var QuestionFieldSchema3 = external_exports.discriminatedUnion("type", [
     other: external_exports.boolean().default(true)
   })
 ]);
+var QUESTION_FIELDS_MAX3 = 3;
 var QuestionSchema3 = external_exports.object({
   prompt: external_exports.string().min(1).max(1e3),
-  fields: external_exports.array(QuestionFieldSchema3).min(1).max(3)
+  fields: external_exports.array(QuestionFieldSchema3).min(1).max(QUESTION_FIELDS_MAX3, {
+    message: `a question has at most ${QUESTION_FIELDS_MAX3} fields \u2014 ask the rest in a second question once these are answered`
+  })
 });
-var AnswersSchema3 = external_exports.record(
+var answersOf3 = (max, message32) => external_exports.record(
   external_exports.string().min(1).max(64),
   external_exports.union([external_exports.string().max(2e3), external_exports.array(external_exports.string().max(2e3)).min(1).max(12)])
-).refine((answers) => Object.keys(answers).length <= 3, {
-  message: "a question has at most 3 fields, so an answer has at most 3 keys"
-});
+).refine((answers) => Object.keys(answers).length <= max, { message: message32 });
+var AnswersSchema3 = answersOf3(
+  QUESTION_FIELDS_MAX3,
+  `a question has at most ${QUESTION_FIELDS_MAX3} fields, so an answer has at most ${QUESTION_FIELDS_MAX3} keys`
+);
+var TEMPLATE_QUESTIONS_MAX3 = 4;
+var InstallAnswersSchema3 = answersOf3(
+  TEMPLATE_QUESTIONS_MAX3,
+  `a template asks at most ${TEMPLATE_QUESTIONS_MAX3} questions, so an install has at most ${TEMPLATE_QUESTIONS_MAX3} answers`
+);
 var PendingActionSchema3 = external_exports.object({
   kind: external_exports.enum(["tool", "question"]).default("tool"),
   tool_call_id: external_exports.string(),
@@ -30392,6 +31536,13 @@ var SessionSchema3 = external_exports.object({
   parent_session_id: idOf3("ses").nullable(),
   root_session_id: idOf3("ses").nullable(),
   thread_role: ThreadRoleSchema3.nullable(),
+  /**
+   * The model the latest send picked (§7 `model`), or `null` when none has and the session runs its
+   * pinned version's model (§10, ADR-0832). Defaulted so a reply from an older control plane parses.
+   */
+  model: external_exports.string().nullable().default(null),
+  /** Plan mode (§7.5, §10): defaulted so a reply from an older control plane parses as `build`. */
+  mode: SessionModeSchema3.default("build"),
   status: SessionStatusSchema3,
   stop_reason: StopReasonSchema3.nullable(),
   window: WindowSchema3,
@@ -30411,6 +31562,10 @@ var SendMessageSchema3 = external_exports.object({
   message: external_exports.string(),
   interrupt: external_exports.boolean().optional(),
   queue: external_exports.boolean().optional(),
+  /** A catalogue id: this session runs on it from this message's turn on (§7, ADR-0832). */
+  model: external_exports.string().min(1).optional(),
+  /** Plan mode from this message's turn on (§7.5, ADR-0905). */
+  mode: SessionModeSchema3.optional(),
   idempotency_key: external_exports.string().optional()
 }).refine((body2) => !(body2.interrupt === true && body2.queue === true), {
   message: "a send is either an interrupt or queued, not both",
@@ -30425,7 +31580,14 @@ var ToolConfirmationSchema3 = external_exports.object({
   tool_call_id: external_exports.string(),
   decision: external_exports.enum(["allow", "deny"]),
   reason: external_exports.string().optional(),
-  scope: external_exports.enum(["call", "session"]).default("call")
+  scope: external_exports.enum(["call", "session"]).default("call"),
+  /**
+   * THE PERSON'S OWN ANSWERS for a template install they approve (ADR-1030): the call runs with
+   * these in place of the `answers` the agent proposed, and with nothing else changed. A modifier on
+   * `allow`, like `scope`: absent is the call as proposed. The route refuses it on a deny, on a session
+   * grant, on any other tool, and on answers the template's questions refuse (`answerProblems`).
+   */
+  answers: InstallAnswersSchema3.optional()
 });
 var SessionAnswerSchema3 = external_exports.object({
   tool_call_id: external_exports.string(),
@@ -30433,6 +31595,11 @@ var SessionAnswerSchema3 = external_exports.object({
 });
 var EventTypeSchema3 = external_exports.enum([
   "message.delta",
+  /**
+   * The agent's answer (no `role`), or a user row `{ role: "user", content, client_message_id? }` (§8).
+   * A user row the runtime wrote itself — a media job's result, a tool grant — carries
+   * `from: "platform"` and is the platform's notice, not a caller's words (§8, ADR-0870).
+   */
   "message.completed",
   /** A caller's message, durable in the inbox and not yet admitted to a turn (§7, §8): `{ client_message_id, content }`. */
   "message.accepted",
@@ -30443,19 +31610,26 @@ var EventTypeSchema3 = external_exports.enum([
   "tool.confirm",
   /** A person's decision on a parked call, stamped with the inbox write that delivers it (§8, ADR-0764). */
   "tool.confirm.resolved",
+  /** A person's answer to a parked question, stamped the same way (§7.1, §8, ADR-1049). */
+  "tool.confirm.answered",
   "session.running",
   "session.usage",
   "session.idle",
   /** A failed attempt the loop will retry (§8): `{ attempt, in_ms, code }`. */
   "session.retrying",
+  /** The session's mode changed (§7.5): `{ mode: "plan" | "build" }`. */
+  "session.mode",
+  /** A write to the session's plan, by the agent or its owner (§7.5): the plan object. */
+  "plan.updated",
   /**
    * The turn ran, but without something it needed (§8): `{ reason, detail? }`.
    *
    * Emitted for a turn whose sandbox could not be woken. That turn used to be indistinguishable
    * from a success — the model was handed the failure as a tool result, answered around it from the
    * transcript, and the session ended `idle`/`end_turn` with no field anywhere saying the
-   * filesystem had been unavailable. This is the field. `reason` is open on purpose; today the only
-   * value is `"sandbox_unavailable"`.
+   * filesystem had been unavailable. This is the field. `reason` is open on purpose; today it is
+   * `"sandbox_unavailable"`, `"vendor_resume_unavailable"`, or `"app_tools_unavailable"` — an app the
+   * agent's toolset names gave no tools this turn (§29.5, `runtime-do app-mcp-tools.ts`).
    *
    * `detail` is the boot failure's own message, and it is here because `reason` alone reads the
    * same for a vendor outage and for a fault of ours. Staging round 3 spent its whole budget
@@ -30553,6 +31727,11 @@ var ToolConfirmResolvedDataSchema3 = external_exports.object({
   proposed_args: external_exports.record(external_exports.string(), external_exports.unknown()).nullable(),
   final_args: external_exports.record(external_exports.string(), external_exports.unknown()).nullable()
 });
+var ToolConfirmAnsweredDataSchema3 = external_exports.object({
+  tool_call_id: external_exports.string(),
+  answers: AnswersSchema3,
+  answered_at: Timestamp3
+});
 var SessionUsageDataSchema3 = external_exports.object({
   token_usage: TokenUsageSchema3,
   consumed_micro_usd: MicroUsdField3.nonnegative(),
@@ -30645,7 +31824,10 @@ var FileSourceTypeSchema3 = external_exports.enum(FILE_SOURCE_TYPES3);
 var FileSourceSchema3 = external_exports.object({
   type: FileSourceTypeSchema3,
   job_id: external_exports.union([idOf3("med"), idOf3("clj")]).nullable(),
-  url: external_exports.string().url().nullable()
+  url: external_exports.string().url().nullable(),
+  /** What a generator was asked with (§36.1, ADR-0886); absent on every other writer's row. */
+  model: external_exports.string().nullable().optional(),
+  prompt: external_exports.string().nullable().optional()
 });
 var FileTagsSchema3 = external_exports.array(external_exports.string().min(1).max(64)).max(32);
 var FileLibraryFieldsSchema3 = external_exports.object({
@@ -30688,6 +31870,11 @@ var ComputerSchema3 = external_exports.object({
   browser: BrowserOptionsSchema3.nullable(),
   volume: VolumeSchema3.nullable(),
   snapshot_id: idOf3("snp").nullable(),
+  /**
+   * The agent this computer belongs to (§41.8, ADR-0849); `null` for one made by `POST /v1/computers`.
+   * Defaulted so a reply from an older control plane parses.
+   */
+  agent_id: idOf3("agt").nullable().default(null),
   created_at: Timestamp3
 });
 var SnapshotSchema3 = external_exports.object({
@@ -30796,7 +31983,9 @@ var FileSchema3 = external_exports.object({
   sha256: external_exports.string().regex(/^[0-9a-f]{64}$/),
   created_at: Timestamp3,
   // The asset-library fields (`canonical-spec §36.1`), all nullable or defaulted.
-  ...FileLibraryFieldsSchema3.shape
+  ...FileLibraryFieldsSchema3.shape,
+  /** The agent of `session_id`, joined at read (§36.1, ADR-0887); a writer never sets it. */
+  agent_id: idOf3("agt").nullable().optional()
 });
 var ScheduleStatusSchema3 = external_exports.enum(["scheduled", "paused", "unscheduled"]);
 var DeploymentSchema3 = external_exports.object({
@@ -30915,8 +32104,28 @@ var InboundMessageSchema3 = external_exports.object({
   auth: external_exports.record(external_exports.string(), external_exports.string()),
   /** The session this message woke. Null until the wake seam lands (see ADR-0120). */
   session_id: idOf3("ses").nullable(),
-  received_at: Timestamp3
-});
+  received_at: Timestamp3,
+  /**
+   * When a person marked it read (`POST …/messages/{mid}/read`); `null` is unread. Defaulted so a
+   * reply from an older control plane parses (ADR-1076).
+   */
+  read_at: Timestamp3.nullable().default(null)
+});
+var OutboundMessageSchema3 = external_exports.object({
+  id: idOf3("out"),
+  object: external_exports.literal("outbound_message"),
+  channel: InboundMessageSchema3.shape.channel,
+  identity_id: idOf3("idn"),
+  /** The `eml_` endpoint it was sent from. */
+  endpoint_id: external_exports.string(),
+  from: external_exports.string(),
+  to: external_exports.array(external_exports.string()),
+  subject: external_exports.string().nullable(),
+  text: external_exports.string(),
+  sent_by_agent_id: idOf3("agt").nullable(),
+  actor: PrincipalSchema3.nullable(),
+  sent_at: Timestamp3
+});
 var AppTypeSchema3 = external_exports.enum(["frontend_only", "fullstack"]);
 var AppStatusSchema3 = external_exports.enum(["provisioning", "active", "error"]);
 var AppMcpPathSchema3 = external_exports.string().regex(/^\/\S*$/, "must be an absolute path beginning with /").max(128);
@@ -30992,6 +32201,11 @@ var AppDomainSchema3 = external_exports.object({
 });
 var ENV_NAME = /^[A-Z_][A-Z0-9_]*$/;
 var APP_NAME = /^[a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?$/;
+var AppPermissionsSchema3 = external_exports.object({
+  object: external_exports.literal("app_permissions"),
+  app_id: idOf3("app"),
+  scopes: external_exports.array(external_exports.string())
+});
 var BlueprintInstallSourceSchema3 = external_exports.enum(["studio", "cli"]);
 var BlueprintInstallStatusSchema3 = external_exports.enum(["pending", "applied", "failed"]);
 var ResourceActionSchema3 = external_exports.enum(["created", "updated", "unchanged", "deleted", "refused"]);
@@ -31088,7 +32302,10 @@ var BlueprintInstallSchema3 = external_exports.object({
    */
   report: BlueprintReportSchema3.nullable(),
   status: BlueprintInstallStatusSchema3,
-  /** Why a `failed` run threw, in one sentence; `null` on every other row. Never a stack or a key. */
+  /**
+   * Why a `failed` run threw, in one sentence — or, on an `applied` row, which `required` agent or
+   * app the apply refused and why (§29.6). `null` otherwise. Never a stack or a key.
+   */
   failure: external_exports.string().nullable(),
   /**
    * The `selection` the apply carried, or `null` — every row written before §31.2 and every apply
@@ -31202,6 +32419,39 @@ var SocialCommentSchema3 = external_exports.object({
   posted_at: Timestamp3.nullable(),
   data: external_exports.unknown()
 });
+var POST_STATUSES3 = ["pending", "scheduled", "posted", "failed"];
+var PostStatusSchema3 = external_exports.enum(POST_STATUSES3);
+var PostSchema3 = external_exports.object({
+  object: external_exports.literal("post"),
+  id: external_exports.string().min(1),
+  status: PostStatusSchema3,
+  identity_id: external_exports.string().nullable(),
+  agent_id: external_exports.string().nullable(),
+  session_id: external_exports.string().nullable(),
+  tool_call_id: external_exports.string().nullable(),
+  content: external_exports.string().nullable(),
+  platforms: external_exports.array(external_exports.string()),
+  file_ids: external_exports.array(external_exports.string()),
+  media_urls: external_exports.array(external_exports.string()),
+  visibility: SocialVisibilitySchema3.nullable(),
+  scheduled_at: Timestamp3.nullable(),
+  posted_at: Timestamp3.nullable(),
+  url: external_exports.string().nullable(),
+  error: external_exports.string().nullable(),
+  /** The latest stored reading, `{metric: value}`; `null` before `social.post_metrics` read any. */
+  metrics: external_exports.record(external_exports.string(), external_exports.number()).nullable(),
+  measured_at: Timestamp3.nullable(),
+  /** Pending only: the earlier post this call would repeat — same identity, network and file. */
+  duplicate_of: external_exports.object({
+    id: external_exports.string(),
+    status: PostStatusSchema3,
+    platform: external_exports.string(),
+    at: Timestamp3.nullable(),
+    agent_id: external_exports.string().nullable(),
+    session_id: external_exports.string().nullable()
+  }).nullable(),
+  created_at: Timestamp3
+});
 var BlueprintScheduleSchema3 = external_exports.object({
   agent: external_exports.string().min(1),
   cron: external_exports.string().min(1),
@@ -31233,16 +32483,9 @@ var BlueprintAppSchema3 = external_exports.object({
   /** Whether an install may deselect it (§31.2). Optional: the rollout argument above. */
   required: external_exports.boolean().optional()
 });
-var BlueprintIdentityConnectionsSchema3 = external_exports.object({
-  social: external_exports.object({
-    from: external_exports.string().min(1),
-    map: external_exports.record(external_exports.string().min(1), SocialPlatformSchema3)
-  }).optional()
-});
 var BlueprintIdentitySchema3 = external_exports.object({
   name: external_exports.string().min(1),
-  description: external_exports.string().nullable(),
-  connections: BlueprintIdentityConnectionsSchema3.optional()
+  description: external_exports.string().nullable()
 });
 var ContentHashSchema3 = external_exports.string().regex(/^[0-9a-f]{64}$/, "a lowercase sha-256 hex digest");
 var BlueprintTreeSchema3 = external_exports.object({
@@ -31260,11 +32503,18 @@ var BlueprintArtifactSchema3 = external_exports.object({
   /** The blueprint repository's own released version. Stored, never parsed (ADR-0401). */
   version: external_exports.string().min(1),
   /**
-   * The built trees, one per deployable app, ordered as the declaration orders its apps. Never
-   * empty: an artifact that built nothing is not an artifact, and the column behind it says so
-   * (migration 0040) exactly as the single `content_hash` it replaces was `not null`.
+   * What a person calls the template, one line on what its crew does, and the networks it publishes
+   * to — printed, never provisioned (§31.5, ADR-0921). `platforms` is decoration: where the crew
+   * posts is the accounts connected to its persona. Optional for the §31.5 rollout reason.
+   */
+  title: external_exports.string().min(1).optional(),
+  description: external_exports.string().min(1).optional(),
+  platforms: external_exports.array(SocialPlatformSchema3).optional(),
+  /**
+   * The built trees, one per deployable app, ordered as the declaration orders its apps. Empty for
+   * a data-only blueprint: it declares no app, builds nothing, and still ships a crew (ADR-0900).
    */
-  trees: external_exports.array(BlueprintTreeSchema3).min(1),
+  trees: external_exports.array(BlueprintTreeSchema3),
   /**
    * The setup questions, asked by the studio **before** provisioning. `QuestionField` (§7.1) is
    * reused rather than restated: a setup question and a question a parked agent asks are the same
@@ -31369,6 +32619,199 @@ var ChannelPostSchema3 = external_exports.object({
   root_session_id: idOf3("ses"),
   queued: external_exports.boolean()
 });
+var SHOW_SOURCES3 = ["spend_by_day", "post_views", "roadmap", "schedule"];
+var ShowSourceSchema3 = external_exports.enum(SHOW_SOURCES3);
+var ShowArgsSchema3 = external_exports.object({
+  source: ShowSourceSchema3.describe(
+    "What to show: spend_by_day (company spend per day, a line), post_views (views per recent post, bars), roadmap (the board's work by status), schedule (routines and scheduled posts over the next 7 days)."
+  ),
+  days: external_exports.number().int().min(2).max(30).optional().describe("spend_by_day only: days back, today included. Default 14.")
+});
+var Day4 = external_exports.string().regex(/^\d{4}-\d{2}-\d{2}$/);
+var Count4 = external_exports.number().int().nonnegative();
+var head3 = { title: external_exports.string().min(1), as_of: Timestamp3, timezone: external_exports.string().min(1) };
+var SpendByDayViewSchema3 = external_exports.object({
+  source: external_exports.literal("spend_by_day"),
+  ...head3,
+  days: external_exports.array(external_exports.object({ day: Day4, micro_usd: Count4 })).min(2).max(30)
+});
+var PostViewsViewSchema3 = external_exports.object({
+  source: external_exports.literal("post_views"),
+  ...head3,
+  posts: external_exports.array(external_exports.object({ post_id: external_exports.string().min(1), label: external_exports.string(), networks: external_exports.array(external_exports.string()), posted_at: Timestamp3, views: Count4 })).max(12)
+});
+var RoadmapViewSchema3 = external_exports.object({
+  source: external_exports.literal("roadmap"),
+  ...head3,
+  groups: external_exports.array(
+    external_exports.object({
+      status: BoardStatusSchema3,
+      count: Count4,
+      cards: external_exports.array(external_exports.object({ title: external_exports.string(), assignee: external_exports.string().nullable(), waits_on: external_exports.array(external_exports.string()) })).max(5)
+    })
+  )
+});
+var ScheduleViewSchema3 = external_exports.object({
+  source: external_exports.literal("schedule"),
+  ...head3,
+  days: external_exports.array(
+    external_exports.object({
+      day: Day4,
+      count: Count4,
+      items: external_exports.array(
+        external_exports.discriminatedUnion("kind", [
+          external_exports.object({ kind: external_exports.literal("routine"), at: Timestamp3, agent: external_exports.string(), text: external_exports.string(), runs: external_exports.number().int().min(1).max(100) }),
+          external_exports.object({ kind: external_exports.literal("post"), at: Timestamp3, networks: external_exports.array(external_exports.string()), text: external_exports.string() })
+        ])
+      ).max(8)
+    })
+  ).max(7)
+});
+var ShowViewSchema3 = external_exports.discriminatedUnion("source", [
+  SpendByDayViewSchema3,
+  PostViewsViewSchema3,
+  RoadmapViewSchema3,
+  ScheduleViewSchema3
+]);
+var Key3 = external_exports.string().regex(/^[A-Za-z][A-Za-z0-9_-]{0,39}$/, "an element key is a short name: a letter, then letters, digits, - or _");
+var Count23 = external_exports.number().int().nonnegative();
+var DIGIT3 = "words only: a digit is refused, because every number on the card is read by code from a $source binding";
+var words3 = (max) => external_exports.string().trim().min(1).max(max).regex(/^[^0-9]*$/, DIGIT3).refine((text2) => !new RegExp("\\p{N}", "u").test(text2), DIGIT3);
+var Days3 = external_exports.number().int().min(1).max(30).default(7).describe("The window: today and the days before it, on the company's clock. Default 7.");
+function bound3(sources2, shape) {
+  const example = JSON.stringify({ $source: sources2[0] });
+  return external_exports.strictObject(
+    { $source: external_exports.enum(sources2), ...shape },
+    { error: (issue2) => issue2.code === "invalid_type" ? `must be a binding such as ${example}: a literal value is refused, code reads every number` : void 0 }
+  );
+}
+var Bound3 = {
+  value: bound3(["views_total", "spend_total"], { days: Days3 }).describe(
+    "views_total: the latest views of the posts published in the window. spend_total: the company's spend in the window (the CEO only)."
+  ),
+  delta: bound3(["views_change"], {}).describe(
+    "views_change: the value's views_total against the same number of days before it, as a percentage. Its window is the value's."
+  ),
+  series: bound3(["spend_by_day"], { days: external_exports.number().int().min(2).max(30).default(14) }).describe("spend_by_day: the company's spend per day (the CEO only)."),
+  bars: bound3(["post_views"], { limit: external_exports.number().int().min(1).max(12).default(5).describe("How many posts, newest first. Default 5.") }).describe(
+    "post_views: each recent post's latest views, newest first."
+  ),
+  progress: bound3(["posts_this_week"], {}).describe("posts_this_week: posts published since Monday against the weekly cadence from the company's setup."),
+  board: bound3(["roadmap"], {}).describe("roadmap: the board's work by status."),
+  week: bound3(["schedule"], {}).describe("schedule: routines and scheduled posts over the next 7 days."),
+  media: external_exports.union([bound3(["latest_media"], { count: external_exports.number().int().min(1).max(4).default(1) }), external_exports.array(idOf3("fil")).min(1).max(4)]).describe('{"$source":"latest_media","count":1} for the newest posted pictures or clips, or up to 4 fil_ ids.')
+};
+var SpendDay3 = external_exports.strictObject({ day: external_exports.string().regex(/^\d{4}-\d{2}-\d{2}$/), micro_usd: Count23 });
+var Resolved3 = {
+  value: external_exports.discriminatedUnion("$source", [
+    external_exports.strictObject({ $source: external_exports.literal("views_total"), days: external_exports.number().int(), value: Count23, posts: Count23 }),
+    external_exports.strictObject({ $source: external_exports.literal("spend_total"), days: external_exports.number().int(), value: Count23 })
+  ]),
+  delta: external_exports.strictObject({ $source: external_exports.literal("views_change"), days: external_exports.number().int(), current: Count23, previous: Count23 }),
+  series: external_exports.strictObject({ $source: external_exports.literal("spend_by_day"), days: external_exports.number().int(), points: external_exports.array(SpendDay3).min(2).max(30) }),
+  bars: external_exports.strictObject({ $source: external_exports.literal("post_views"), limit: external_exports.number().int(), posts: PostViewsViewSchema3.shape.posts }),
+  progress: external_exports.strictObject({ $source: external_exports.literal("posts_this_week"), value: Count23, max: external_exports.number().int().positive(), cadence: external_exports.string() }),
+  board: external_exports.strictObject({ $source: external_exports.literal("roadmap"), groups: RoadmapViewSchema3.shape.groups }),
+  week: external_exports.strictObject({ $source: external_exports.literal("schedule"), days: ScheduleViewSchema3.shape.days }),
+  media: external_exports.array(external_exports.strictObject({ id: idOf3("fil"), kind: external_exports.enum(["image", "video"]) })).min(1).max(4)
+};
+var box3 = { children: external_exports.array(Key3).min(1).max(12) };
+var leaf3 = { children: external_exports.array(Key3).max(0).optional() };
+var label3 = words3(40).optional();
+var element3 = (type, props, children, about) => external_exports.strictObject({ type: external_exports.literal(type), props: external_exports.strictObject(props), ...children }).describe(about);
+function catalog3(slot) {
+  return {
+    Card: element3("Card", { title: words3(60) }, box3, "The card, with a short title. It is the root, and only the root."),
+    Stack: element3("Stack", {}, box3, "Children one under another."),
+    Grid: element3("Grid", { columns: external_exports.literal([1, 2, 3]) }, box3, "Children side by side, 1 to 3 columns."),
+    Metric: element3("Metric", { label: words3(40), value: slot.value, delta: slot.delta.optional() }, leaf3, "One big number with a label, and optionally its change."),
+    LineChart: element3("LineChart", { label: label3, series: slot.series }, leaf3, "A line over days."),
+    BarList: element3("BarList", { label: label3, bars: slot.bars }, leaf3, "One bar per post."),
+    Progress: element3("Progress", { label: words3(40), progress: slot.progress }, leaf3, "A value against its goal, as a bar."),
+    Roadmap: element3("Roadmap", { label: label3, board: slot.board }, leaf3, "The board grouped by status."),
+    Schedule: element3("Schedule", { label: label3, week: slot.week }, leaf3, "The week ahead, day by day."),
+    Media: element3("Media", { label: label3, files: slot.media }, leaf3, "Pictures or clips the company holds."),
+    Text: element3("Text", { text: words3(240) }, leaf3, "A short note in words.")
+  };
+}
+var unknownComponent3 = (names2) => ({
+  error: (issue2) => issue2.code === "invalid_union" ? `unknown component: use one of ${names2.join(", ")}` : void 0
+});
+function tree3(rootType, max, spec22, ctx) {
+  const refuse2 = (message32, path = []) => ctx.addIssue({ code: "custom", message: message32, path });
+  const keys3 = Object.keys(spec22.elements);
+  const has = (key2) => Object.hasOwn(spec22.elements, key2);
+  if (keys3.length > max) return refuse2(`at most ${max} elements`, ["elements"]);
+  const root = has(spec22.root) ? spec22.elements[spec22.root] : void 0;
+  if (!root) return refuse2(`root names "${spec22.root}", which is not in elements`, ["root"]);
+  if (root.type !== rootType) return refuse2(`the root must be a ${rootType}`, ["root"]);
+  const parent = /* @__PURE__ */ new Map();
+  for (const key2 of keys3) {
+    for (const child of spec22.elements[key2].children ?? []) {
+      if (!has(child)) return refuse2(`"${child}" is not in elements`, ["elements", key2, "children"]);
+      if (child === spec22.root || parent.has(child)) return refuse2(`"${child}" has more than one parent`, ["elements", key2, "children"]);
+      if (spec22.elements[child].type === rootType) return refuse2(`a ${rootType} is the root only; group with Stack or Grid`, ["elements", child, "type"]);
+      parent.set(child, key2);
+    }
+  }
+  const reached = /* @__PURE__ */ new Set([spec22.root]);
+  for (const key2 of reached) for (const child of spec22.elements[key2].children ?? []) reached.add(child);
+  const lost = keys3.find((key2) => !reached.has(key2));
+  if (lost) refuse2(`"${lost}" is not under the root`, ["elements", lost]);
+}
+var spec3 = (element22, rootType, max) => external_exports.strictObject({ root: Key3, elements: external_exports.record(Key3, element22) }).superRefine((value, ctx) => tree3(rootType, max, value, ctx));
+var COMPOSE_COMPONENTS3 = ["Card", "Stack", "Grid", "Metric", "LineChart", "BarList", "Progress", "Roadmap", "Schedule", "Media", "Text"];
+var MAX_COMPOSE_ELEMENTS3 = 24;
+var BoundComponents3 = catalog3(Bound3);
+var ComposeSpecSchema3 = spec3(
+  external_exports.discriminatedUnion(
+    "type",
+    [
+      BoundComponents3.Card,
+      BoundComponents3.Stack,
+      BoundComponents3.Grid,
+      BoundComponents3.Metric,
+      BoundComponents3.LineChart,
+      BoundComponents3.BarList,
+      BoundComponents3.Progress,
+      BoundComponents3.Roadmap,
+      BoundComponents3.Schedule,
+      BoundComponents3.Media,
+      BoundComponents3.Text
+    ],
+    unknownComponent3(COMPOSE_COMPONENTS3)
+  ),
+  "Card",
+  MAX_COMPOSE_ELEMENTS3
+);
+var ComposeArgsSchema3 = external_exports.object({
+  spec: ComposeSpecSchema3.describe(
+    'A json-render spec: { "root": key, "elements": { key: { "type", "props", "children"? } } }. The root is one Card.'
+  )
+});
+var ComposedComponents3 = catalog3(Resolved3);
+var ComposedSpecSchema3 = spec3(
+  external_exports.discriminatedUnion(
+    "type",
+    [
+      ComposedComponents3.Card,
+      ComposedComponents3.Stack,
+      ComposedComponents3.Grid,
+      ComposedComponents3.Metric,
+      ComposedComponents3.LineChart,
+      ComposedComponents3.BarList,
+      ComposedComponents3.Progress,
+      ComposedComponents3.Roadmap,
+      ComposedComponents3.Schedule,
+      ComposedComponents3.Media,
+      ComposedComponents3.Text
+    ],
+    unknownComponent3(COMPOSE_COMPONENTS3)
+  ),
+  "Card",
+  MAX_COMPOSE_ELEMENTS3
+);
+var ComposedSchema3 = external_exports.object({ as_of: Timestamp3, timezone: external_exports.string().min(1), spec: ComposedSpecSchema3 });
 var MEDIA_JOB_KINDS3 = ["video", "clip", "transcription"];
 var MediaJobKindSchema3 = external_exports.enum(MEDIA_JOB_KINDS3);
 var MediaJobStatusSchema3 = external_exports.enum(["queued", "processing", "completed", "failed"]);
@@ -31435,9 +32878,12 @@ var ImageRequestSchema3 = external_exports.object({
   n: external_exports.number().int().min(1).max(4).default(1)
 });
 var VideoRequestSchema3 = external_exports.object({
-  model: external_exports.string().min(1),
+  /** Omitted: the platform's video default while the catalogue publishes it (`resolveModel`, §33.2). */
+  model: external_exports.string().min(1).optional(),
   prompt: external_exports.string().min(1),
   image_urls: external_exports.array(PublicUrl3).max(1).optional(),
+  /** The source clip of a video-to-video edit (ADR-0814). */
+  video_url: PublicUrl3.optional(),
   aspect_ratio: external_exports.string().optional(),
   seed: external_exports.number().int().optional(),
   seconds: external_exports.number().int().min(1).max(60).optional()
@@ -31723,18 +33169,18 @@ var ReferralClickSchema3 = external_exports.object({
   creator: external_exports.object({ display_name: external_exports.string().min(1) }),
   expires_at: Timestamp3
 });
-var Day3 = external_exports.iso.date();
+var Day23 = external_exports.iso.date();
 var CreatorAnalyticsSchema3 = external_exports.object({
   object: external_exports.literal("creator_analytics"),
   days: external_exports.number().int().min(1).max(90),
-  from: Day3,
-  to: Day3,
+  from: Day23,
+  to: Day23,
   clicks: external_exports.number().int().nonnegative(),
   referrals: external_exports.number().int().nonnegative(),
   installs: external_exports.number().int().nonnegative(),
   active_installs: external_exports.number().int().nonnegative(),
   usage_by_day: external_exports.array(
-    external_exports.object({ day: Day3, debit_micro_usd: MicroUsdField3.nonnegative() })
+    external_exports.object({ day: Day23, debit_micro_usd: MicroUsdField3.nonnegative() })
   ),
   commission_micro_usd: external_exports.object({
     pending: MicroUsdField3.nonnegative(),
@@ -31749,7 +33195,7 @@ var CreatorAnalyticsSchema3 = external_exports.object({
     })
   ),
   /** Every install covered, newest first: the day it was created and the day its twelve months end. */
-  install_windows: external_exports.array(external_exports.object({ install_id: idOf3("bpi"), from: Day3, until: Day3 }))
+  install_windows: external_exports.array(external_exports.object({ install_id: idOf3("bpi"), from: Day23, until: Day23 }))
 });
 var LEGAL_MEMBER_STATUSES3 = [
   "pending",
@@ -32187,6 +33633,151 @@ var CreateReviewSchema3 = external_exports.object({
   before: Fields3,
   after: Fields3
 });
+var PAGE_BLOCKS3 = [
+  "Page",
+  "Section",
+  "Stack",
+  "Grid",
+  "Metric",
+  "LineChart",
+  "BarList",
+  "Progress",
+  "Roadmap",
+  "Schedule",
+  "Media",
+  "Text",
+  "Needs",
+  "Activity",
+  "Accounts",
+  "Posts",
+  "Answers",
+  "MediaLibrary"
+];
+var MAX_PAGE_ELEMENTS3 = 48;
+var MINI_APP_ICONS3 = ["grid", "list", "chart", "calendar", "play"];
+var MiniAppIconSchema3 = external_exports.enum(MINI_APP_ICONS3);
+var SLUG3 = "[a-z][a-z0-9-]{0,39}";
+var MiniAppSlugSchema3 = external_exports.string().regex(new RegExp(`^${SLUG3}$`), "a slug is lowercase letters, digits and -");
+var Place3 = external_exports.string().regex(new RegExp(`^/(board|connections|apps/${SLUG3}(\\?page=${SLUG3})?)$`), "a section links to /board, /connections or /apps/<slug>[?page=<slug>]");
+var POSTS3 = ["waiting", "scheduled", "posted"];
+var PostStatus3 = external_exports.enum(POSTS3);
+var PostLayout3 = external_exports.enum(["list", "row", "grid"]);
+var PostStatuses3 = external_exports.union([PostStatus3, external_exports.array(PostStatus3).min(1).max(3).refine((all) => new Set(all).size === all.length, "each status once")]);
+var PageBound3 = {
+  ...Bound3,
+  board: bound3(["roadmap"], { per_group: external_exports.number().int().min(1).max(5).default(5) }),
+  media: bound3(["latest_media", "newest_media"], { count: external_exports.number().int().min(1).max(6).default(4) })
+};
+var PageResolved3 = {
+  ...Resolved3,
+  board: external_exports.strictObject({ $source: external_exports.literal("roadmap"), per_group: external_exports.number().int(), groups: RoadmapViewSchema3.shape.groups }),
+  media: external_exports.array(external_exports.strictObject({ id: external_exports.string(), kind: external_exports.enum(["image", "video"]) })).max(6)
+};
+function pageBlocks3(slot) {
+  return {
+    Page: element3("Page", {}, box3, "The page itself, the root and only the root."),
+    Section: element3("Section", { title: words3(40), to: Place3.optional(), hide_empty: external_exports.boolean().optional() }, box3, "A titled part of the page; hidden when every block in it is empty, if asked."),
+    Needs: element3("Needs", { label: label3, needs: slot.needs }, leaf3, "What waits on a person: approvals, questions, spent caps."),
+    Activity: element3("Activity", { label: label3, agents: slot.agents }, leaf3, "The agents working or waiting, and on what."),
+    Accounts: element3("Accounts", { accounts: slot.accounts }, leaf3, "The template's networks: connected with a handle, or not."),
+    Posts: element3(
+      "Posts",
+      { label: label3, layout: PostLayout3.optional(), posts: slot.posts },
+      leaf3,
+      "Posts waiting on a person, scheduled, or posted; several statuses make one list. Drawn as rows (list, the default), one sideways row of cards (row), or a picture grid (grid)."
+    ),
+    Answers: element3("Answers", { answers: slot.answers }, leaf3, "The setup's answers in one line, linking to the setup."),
+    // No binding: the studio's gallery reads and pages the company's files itself (ADR-0987).
+    MediaLibrary: element3("MediaLibrary", {}, leaf3, "Every picture and clip the company's agents made, with filters, sort and a viewer.")
+  };
+}
+var OwnBound3 = pageBlocks3({
+  needs: bound3(["needs"], {}),
+  agents: bound3(["agents_activity"], {}),
+  accounts: bound3(["accounts"], {}),
+  posts: bound3(["posts"], { status: PostStatuses3, limit: external_exports.number().int().min(1).max(50).default(10) }),
+  answers: bound3(["answers"], { keys: external_exports.array(Key3).min(1).max(TEMPLATE_QUESTIONS_MAX3) })
+});
+var Need3 = external_exports.object({
+  session_id: external_exports.string(),
+  agent_id: external_exports.string(),
+  agent: external_exports.string(),
+  since: Timestamp3,
+  /** The chat's stored title, or `null`: the studio names it by when it began. */
+  title: external_exports.string().nullable(),
+  kind: external_exports.enum(["tool", "question", "budget"]),
+  /** The call or question it is held on; `null` for a spent cap. */
+  action: PendingActionSchema3.nullable()
+});
+var Working3 = external_exports.object({
+  agent_id: external_exports.string(),
+  agent: external_exports.string(),
+  state: external_exports.enum(["working", "waiting"]),
+  session_id: external_exports.string().nullable(),
+  title: external_exports.string().nullable(),
+  at: Timestamp3
+});
+var OwnResolved3 = pageBlocks3({
+  needs: external_exports.strictObject({ $source: external_exports.literal("needs"), items: external_exports.array(Need3) }),
+  agents: external_exports.strictObject({ $source: external_exports.literal("agents_activity"), agents: external_exports.array(Working3) }),
+  accounts: external_exports.strictObject({
+    $source: external_exports.literal("accounts"),
+    accounts: external_exports.array(external_exports.object({ platform: SocialPlatformSchema3, connected: external_exports.boolean(), handle: external_exports.string().nullable() }))
+  }),
+  posts: external_exports.strictObject({ $source: external_exports.literal("posts"), status: external_exports.union([PostStatus3, external_exports.array(PostStatus3)]), limit: external_exports.number().int(), posts: external_exports.array(PostSchema3), more: external_exports.boolean() }),
+  answers: external_exports.strictObject({
+    $source: external_exports.literal("answers"),
+    keys: external_exports.array(external_exports.string()),
+    values: external_exports.array(external_exports.string()),
+    template: external_exports.object({ blueprint: external_exports.string(), template: external_exports.string() }).nullable()
+  })
+});
+var BoundBlocks3 = { ...catalog3(PageBound3), ...OwnBound3 };
+var ResolvedBlocks3 = { ...catalog3(PageResolved3), ...OwnResolved3 };
+var Unread3 = element3("Unread", { of: external_exports.string(), label: external_exports.string().nullable(), reason: external_exports.string() }, leaf3, "A block that could not be read.");
+var B3 = BoundBlocks3;
+var PageSpecSchema3 = spec3(
+  external_exports.discriminatedUnion(
+    "type",
+    [B3.Page, B3.Section, B3.Stack, B3.Grid, B3.Metric, B3.LineChart, B3.BarList, B3.Progress, B3.Roadmap, B3.Schedule, B3.Media, B3.Text, B3.Needs, B3.Activity, B3.Accounts, B3.Posts, B3.Answers, B3.MediaLibrary],
+    unknownComponent3(PAGE_BLOCKS3)
+  ),
+  "Page",
+  MAX_PAGE_ELEMENTS3
+);
+var R3 = ResolvedBlocks3;
+var ResolvedPageElementSchema3 = external_exports.discriminatedUnion(
+  "type",
+  [R3.Page, R3.Section, R3.Stack, R3.Grid, R3.Metric, R3.LineChart, R3.BarList, R3.Progress, R3.Roadmap, R3.Schedule, R3.Media, R3.Text, R3.Needs, R3.Activity, R3.Accounts, R3.Posts, R3.Answers, R3.MediaLibrary, Unread3],
+  unknownComponent3(PAGE_BLOCKS3)
+);
+var ResolvedPageSpecSchema3 = spec3(ResolvedPageElementSchema3, "Page", MAX_PAGE_ELEMENTS3);
+var unique3 = (items) => new Set(items.map((item) => item.slug)).size === items.length;
+var MiniAppPageSchema3 = external_exports.strictObject({ slug: MiniAppSlugSchema3, title: words3(24), spec: PageSpecSchema3 });
+var MiniAppDeclSchema3 = external_exports.strictObject({
+  slug: MiniAppSlugSchema3,
+  name: words3(40),
+  icon: MiniAppIconSchema3,
+  pages: external_exports.array(MiniAppPageSchema3).min(1).max(6).refine(unique3, "each page's slug is its own")
+});
+var MiniAppDeclsSchema3 = external_exports.array(MiniAppDeclSchema3).max(8).refine(unique3, "each mini app's slug is its own");
+var MiniAppSummarySchema3 = external_exports.object({
+  object: external_exports.literal("mini_app"),
+  slug: MiniAppSlugSchema3,
+  name: external_exports.string(),
+  icon: MiniAppIconSchema3,
+  pages: external_exports.array(external_exports.object({ slug: MiniAppSlugSchema3, title: external_exports.string() })).min(1),
+  /** What it reads (`miniAppReads`). Absent from an older API: the Studio then claims nothing it cannot see. */
+  reads: external_exports.array(external_exports.string()).optional()
+});
+var MiniAppSchema3 = MiniAppSummarySchema3.extend({
+  networks: external_exports.array(external_exports.object({ platform: SocialPlatformSchema3, connected: external_exports.boolean().nullable() })),
+  page: MiniAppSlugSchema3,
+  as_of: Timestamp3,
+  timezone: external_exports.string().min(1),
+  spec: ResolvedPageSpecSchema3
+});
+var MAX_BYTES3 = 16 * 1024;
 var encoder23 = new TextEncoder();
 var SESSION_FILE_URL_TTL_MS3 = 15 * 6e4;
 function message(error51) {
@@ -32237,8 +33828,8 @@ var PageShape = external_exports.object({
 });
 function rowLabel(row) {
   const { object: object2, id } = row ?? {};
-  const words = [object2, id].filter((one) => typeof one === "string");
-  return words.length > 0 ? words.join(" ") : "a row";
+  const words22 = [object2, id].filter((one) => typeof one === "string");
+  return words22.length > 0 ? words22.join(" ") : "a row";
 }
 var why = (error51) => error51.issues.map((issue2) => `${issue2.path.join(".") || "(root)"}: ${issue2.message}`).join("; ");
 async function listAll(config2, path, item, skipped, query = {}) {
@@ -32474,7 +34065,6 @@ var WalletDeclSchema = CreateWalletSchema3.or(
 );
 var CardDeclSchema = IssueCardSchema3;
 var IdentityDeclSchema = IdentitySchema3.pick({ name: true, description: true }).partial({ description: true }).extend({
-  connections: BlueprintIdentityConnectionsSchema3.optional(),
   legal: external_exports.array(LegalDeclSchema).optional(),
   wallet: WalletDeclSchema.optional(),
   cards: external_exports.array(CardDeclSchema).optional()
@@ -32500,6 +34090,20 @@ var ProjectSchema = external_exports.object({
   blueprint: external_exports.string().min(1).optional(),
   /** Which of that blueprint's templates provides the crew; a blueprint with a default may omit it. */
   template: external_exports.string().min(1).optional(),
+  /**
+   * What a person calls this template, one line on what its crew does, and the networks it
+   * publishes to (`canonical-spec §31.5`). Printed on the artifact and never provisioned: where the
+   * crew posts is the accounts connected to its persona, not this list.
+   */
+  title: external_exports.string().min(1).max(80).optional(),
+  description: external_exports.string().min(1).max(280).optional(),
+  platforms: external_exports.array(SocialPlatformSchema3).optional(),
+  /**
+   * The company's mini apps (`canonical-spec §50`): each a name, an icon and pages of the platform's
+   * blocks — data only, checked with the platform's catalog here and again when a page is read. The
+   * studio draws every one with one general UI, under Apps.
+   */
+  mini_apps: MiniAppDeclsSchema3.optional(),
   /**
    * What a person is asked BEFORE the crew is provisioned (`canonical-spec §31.2`).
    *
@@ -32580,8 +34184,8 @@ function parseProject(input) {
   }
   const config2 = parsed.data;
   applyChoice(config2);
-  if (config2.template !== void 0 && config2.questions.length > 4) {
-    refuse(`template "${config2.template}" asks ${config2.questions.length} questions, but a template asks at most 4 before anything is provisioned \u2014 a fifth belongs to the crew's first conversation`);
+  if (config2.template !== void 0 && config2.questions.length > TEMPLATE_QUESTIONS_MAX3) {
+    refuse(`template "${config2.template}" asks ${config2.questions.length} questions, but a template asks at most ${TEMPLATE_QUESTIONS_MAX3} before anything is provisioned \u2014 a fifth belongs to the crew's first conversation`);
   }
   assertUniqueNames("app", [...config2.apps.map((a) => a.name), ...config2.removed.apps]);
   assertUniqueNames("agent", [...config2.agents.map((a) => a.name), ...config2.removed.agents, ...config2.kept.agents]);
@@ -32602,20 +34206,6 @@ function parseProject(input) {
     assertUniqueNames("bucket", (app3.buckets ?? []).map((bucket) => bucket.name));
   }
   const identityNames = new Set(config2.identities.map((i) => i.name));
-  const connectable = config2.identities.filter((i) => i.connections !== void 0).map((i) => i.name);
-  if (connectable.length > 1) {
-    refuse(`identities ${connectable.map((n) => `"${n}"`).join(", ")} each declare connections, but the studio's Add connections step connects one persona \u2014 declare connections on the one the crew publishes through`);
-  }
-  for (const identity3 of config2.identities) {
-    const social3 = identity3.connections?.social;
-    if (social3 === void 0) continue;
-    const question = config2.questions.find((q) => q.key === social3.from);
-    if (question === void 0) refuse(`identity "${identity3.name}": connections.social.from names "${social3.from}", but no question with that key is declared in this project`);
-    if (question.type !== "choice") refuse(`identity "${identity3.name}": connections.social.from names "${social3.from}", which is a ${question.type} question \u2014 the map is keyed by a choice question's options`);
-    for (const label of Object.keys(social3.map)) {
-      if (!question.options.includes(label)) refuse(`identity "${identity3.name}": connections.social.map names "${label}", which is not one of question "${social3.from}"'s options \u2014 a key no answer can equal is a row nobody can reach`);
-    }
-  }
   for (const vault2 of config2.vaults) {
     if (vault2.identity !== void 0 && !identityNames.has(vault2.identity)) {
       refuse(`vault "${vault2.name}": identity names "${vault2.identity}", but no identity with that name is declared in this project`);
@@ -32789,165 +34379,6 @@ function contentHash(files2) {
   }
   return hash2.digest("hex");
 }
-var PROJECT_CONTEXT_PREAMBLE = "Before anything else, read the project context with the `project_context` tool. The answers in it are the client's own \u2014 never invent, assume or restate them from memory; what the context does not say, you ask. Use the context's own words for the company, its offer and its audience.";
-function desiredMetadata(decl, of, current) {
-  if (of.template === void 0) return decl.metadata;
-  return {
-    ...current?.metadata,
-    ...decl.metadata,
-    project: of.project,
-    ...of.blueprint !== void 0 ? { blueprint: of.blueprint } : {},
-    template: of.template,
-    group: of.template
-  };
-}
-function desiredSystem(decl, of) {
-  if (of.template === void 0) return decl.system;
-  return decl.system === void 0 ? PROJECT_CONTEXT_PREAMBLE : `${PROJECT_CONTEXT_PREAMBLE}
-
-${decl.system}`;
-}
-function desiredTools(decl, current, ids) {
-  const handoff = decl.handoffs !== void 0 && handoffsEnabled(decl.handoffs);
-  if (ids === void 0 && !handoff) return decl.tools;
-  const base = decl.tools ?? current?.tools ?? { default_config: { permission: "allow" }, configs: {} };
-  const appsTool = base.configs["apps"] ?? { enabled: true, permission: base.default_config.permission };
-  const allowed = { enabled: true, permission: "allow" };
-  return {
-    default_config: base.default_config,
-    configs: {
-      ...base.configs,
-      ...ids !== void 0 ? { apps: { ...appsTool, config: { ...appsTool.config, allowed_apps: ids } } } : {},
-      ...handoff ? { send_to_agent: allowed, list_agents: allowed } : {}
-    }
-  };
-}
-async function createAgent(client, decl, tools2, team2, identityId, system, metadata) {
-  const created = await client.agents.create({
-    name: decl.name,
-    model: decl.model,
-    budget: decl.budget,
-    ...decl.description !== void 0 ? { description: decl.description } : {},
-    ...system !== void 0 ? { system } : {},
-    ...decl.skills !== void 0 ? { skills: decl.skills } : {},
-    ...decl.mcp_servers !== void 0 ? { mcp_servers: decl.mcp_servers } : {},
-    ...tools2 !== void 0 ? { tools: tools2 } : {},
-    ...decl.window !== void 0 ? { window: decl.window } : {},
-    ...team2 !== void 0 ? { multiagent: team2 } : {},
-    ...decl.handoffs !== void 0 ? { handoffs: decl.handoffs } : {},
-    ...decl.output_schema !== void 0 ? { output_schema: decl.output_schema } : {},
-    ...decl.structured_output_required !== void 0 ? { structured_output_required: decl.structured_output_required } : {},
-    ...metadata !== void 0 ? { metadata } : {}
-  });
-  if (identityId !== void 0) await client.identities.attach(created.id, identityId);
-  return { name: decl.name, action: "created", id: created.id };
-}
-async function upsertAgent(client, decl, existing, ids, dryRun, scoped, of) {
-  const unresolved = (decl.allowed_apps ?? []).filter((name) => !ids.apps.has(name));
-  const identityId = decl.identity === void 0 ? void 0 : ids.identities.get(decl.identity);
-  const missing = unresolved.length > 0 ? `allowed_apps needs app "${unresolved[0]}"` : decl.identity !== void 0 && identityId === void 0 ? `identity needs "${decl.identity}"` : null;
-  if (missing !== null && !dryRun) {
-    return { name: decl.name, action: "refused", reason: `${missing}, which was not provisioned in this run` };
-  }
-  const appIds = decl.allowed_apps !== void 0 ? decl.allowed_apps.flatMap((name) => ids.apps.get(name) ?? []) : scoped;
-  const current = existing.find((agent2) => agent2.name === decl.name) ?? null;
-  const tools2 = desiredTools(decl, current, appIds);
-  const team2 = teamWithoutRoster(decl.multiagent);
-  const system = desiredSystem(decl, of);
-  const metadata = desiredMetadata(decl, of, current);
-  if (!current) {
-    return dryRun ? { name: decl.name, action: "created" } : createAgent(client, decl, tools2, team2, identityId, system, metadata);
-  }
-  const patch3 = drift(decl, current, tools2, team2, system, metadata);
-  const held = identityId === void 0 ? [] : (await client.identities.held(current.id)).data;
-  const grant = identityId === void 0 || held.some((one) => one.id === identityId) ? null : identityId;
-  const drifted = Object.keys(patch3).length > 0 || missing !== null || grant !== null;
-  if (!drifted) return { name: decl.name, action: "unchanged", id: current.id };
-  if (!dryRun) {
-    if (Object.keys(patch3).length > 0) await client.agents.update(current.id, patch3);
-    if (grant !== null) await client.identities.attach(current.id, grant);
-  }
-  return { name: decl.name, action: "updated", id: current.id };
-}
-function drift(decl, current, tools2, team2, system, metadata) {
-  const patch3 = {};
-  if (changed(decl.model, current.model)) patch3.model = decl.model;
-  if (changed(decl.budget, current.budget)) patch3.budget = decl.budget;
-  if (changed(decl.description, current.description)) patch3.description = decl.description;
-  if (changed(system, current.system)) patch3.system = system;
-  if (changed(decl.skills, current.skills)) patch3.skills = decl.skills;
-  if (changed(decl.mcp_servers, current.mcp_servers)) patch3.mcp_servers = decl.mcp_servers;
-  if (changed(tools2, current.tools)) patch3.tools = tools2;
-  if (changed(decl.window, current.window)) patch3.window = decl.window;
-  if (team2 !== void 0 && changed(normaliseMultiagent2(team2), normaliseMultiagent2(current.multiagent))) patch3.multiagent = team2;
-  if (changed(decl.handoffs, handoffsOf(current))) patch3.handoffs = decl.handoffs;
-  if (changed(decl.output_schema, current.output_schema)) patch3.output_schema = decl.output_schema;
-  if (changed(decl.structured_output_required, current.structured_output_required)) patch3.structured_output_required = decl.structured_output_required;
-  if (changed(metadata, current.metadata)) patch3.metadata = metadata;
-  return patch3;
-}
-async function openIntake(client, agent2, decl, dryRun) {
-  if (dryRun || agent2.id === void 0) return { name: agent2.name, action: "created" };
-  const started = await client.sessions.create({
-    agent_id: agent2.id,
-    message: decl.message,
-    ...decl.budget_micro_usd !== void 0 ? { budget_micro_usd: decl.budget_micro_usd } : {}
-  });
-  return { name: agent2.name, action: "created", id: started.id };
-}
-function brief(input) {
-  const first = input.trim().split(/(?<=[.!?])\s|\n/)[0]?.trim() ?? "";
-  const text2 = first.replace(/[.\s]+$/, "");
-  return text2.length > 72 ? `${text2.slice(0, 71).trimEnd()}\u2026` : text2;
-}
-async function upsertSchedule(client, agent2, decl, current, identityIds, dryRun) {
-  const name = `${agent2.name} @ ${decl.cron}`;
-  if (agent2.action === "refused") throw new Error(`agent "${agent2.name}" was not provisioned in this run`);
-  const identity3 = decl.identity === void 0 ? void 0 : identityIds.get(decl.identity);
-  const unresolved = decl.identity !== void 0 && identity3 === void 0;
-  if (unresolved && !dryRun) throw new Error(`identity needs "${decl.identity}", which was not provisioned in this run`);
-  if (!current) {
-    if (dryRun || agent2.id === void 0) return { name, action: "created" };
-    const created = await client.deployments.create({
-      agent_id: agent2.id,
-      cron: decl.cron,
-      input_template: decl.input,
-      budget_micro_usd: decl.budget_micro_usd,
-      ...decl.timezone !== void 0 ? { timezone: decl.timezone } : {},
-      ...identity3 !== void 0 ? { identity: identity3 } : {},
-      ...decl.enabled !== void 0 ? { enabled: decl.enabled } : {}
-    });
-    return { name, action: "created", id: created.id };
-  }
-  const patch3 = {};
-  if (changed(decl.timezone, current.timezone)) patch3.timezone = decl.timezone;
-  if (changed(decl.input, current.input_template)) patch3.input_template = decl.input;
-  if (changed(decl.budget_micro_usd, current.budget_micro_usd)) patch3.budget_micro_usd = decl.budget_micro_usd;
-  if (changed(identity3, current.identity)) patch3.identity = identity3;
-  if (changed(decl.enabled, current.enabled)) patch3.enabled = decl.enabled;
-  if (Object.keys(patch3).length === 0 && !unresolved) return { name, action: "unchanged", id: current.id };
-  if (!dryRun) await client.deployments.update(current.id, patch3);
-  return { name, action: "updated", id: current.id };
-}
-async function reconcileSchedules(client, agent2, declared, live, identityIds, dryRun, into) {
-  const rows2 = live.filter((row) => row.agent_id === agent2.id);
-  into.push(
-    ...await eachInFlight(declared, async (decl) => ({
-      ...await line(
-        `${agent2.name} @ ${decl.cron}`,
-        () => upsertSchedule(client, agent2, decl, rows2.find((row) => row.cron === decl.cron), identityIds, dryRun)
-      ),
-      // `<agent> @ <cron>` says WHEN a timer runs and nothing about what it does, so the dashboard's
-      // opening message could only ever draw a timetable from these lines. The brief's first
-      // sentence is what turns that timetable into a roadmap (§29.6).
-      summary: brief(decl.input)
-    }))
-  );
-  for (const row of rows2.filter((row2) => !declared.some((decl) => decl.cron === row2.cron))) {
-    const name = `${agent2.name} @ ${row.cron}`;
-    await attempt(into, name, () => tombstone(name, row, (id) => client.deployments.delete(id), dryRun));
-  }
-}
 async function applyBuckets(client, appId, buckets) {
   const live = new Set((await client.storage.buckets.list({ app: appId })).data.map((row) => row.name));
   const missing = buckets.filter((bucket) => !live.has(bucket.name));
@@ -32996,10 +34427,10 @@ async function findApp(client, name, skipped) {
   const rows2 = await listAll(client.config, "/v1/apps", AppSchema3, skipped, { name });
   return rows2.find((app3) => app3.name === name) ?? null;
 }
-function ownershipRefusal(name, project, owner) {
+function ownershipRefusal(name, project, owner, kind = "app") {
   const held = owner === null ? "no project (it was created outside a blueprint)" : `project "${owner}"`;
   const verb = owner === null ? "take" : "transfer";
-  return `app "${name}" is owned by ${held}; this project is "${project}". Rename the app in your config, or re-run \`naive up --adopt\` to ${verb} it.`;
+  return `${kind} "${name}" is owned by ${held}; this project is "${project}". Rename the ${kind} in your config, or re-run \`naive up --adopt\` to ${verb} it.`;
 }
 var ensureApp = (client, body2) => client.apps.create(body2);
 var PLATFORM_ENV = {
@@ -33103,13 +34534,13 @@ function builtTree(decl, opts) {
   const files2 = collectFiles(hosted?.[decl.name] ?? resolve3(opts.dir, decl.deploy_dir));
   return { files: files2, hash: contentHash(files2) };
 }
-async function writeApp(client, id, env, tree) {
+async function writeApp(client, id, env, tree22) {
   await eachInFlight(
     Object.entries(env),
     ([name, value]) => client.apps.setSecret(id, { name, value, value_hash: secretHash(name, value) })
   );
-  if (!tree) return;
-  await client.apps.deploy(id, tree.files, tree.hash);
+  if (!tree22) return;
+  await client.apps.deploy(id, tree22.files, tree22.hash);
   await settleDeploy(client, id);
 }
 var SETTLE_TRIES = 30;
@@ -33121,7 +34552,7 @@ async function settleDeploy(client, id) {
     await new Promise((resolve5) => setTimeout(resolve5, SETTLE_MS));
   }
 }
-async function createApp(client, decl, env, tree, migrations, opts, appIds) {
+async function createApp(client, decl, env, tree22, migrations, opts, appIds) {
   const created = await ensureApp(client, {
     name: decl.name,
     type: decl.type,
@@ -33130,7 +34561,7 @@ async function createApp(client, decl, env, tree, migrations, opts, appIds) {
     ...decl.mcp !== void 0 ? { mcp: decl.mcp } : {}
   });
   appIds.set(decl.name, created.id);
-  await writeApp(client, created.id, withAppId(env, decl, opts, created.id), tree);
+  await writeApp(client, created.id, withAppId(env, decl, opts, created.id), tree22);
   const notes = [];
   if (migrations.length > 0) notes.push((await applyMigrations(client, created.id, migrations)).note);
   if (decl.buckets !== void 0) notes.push((await applyBuckets(client, created.id, decl.buckets)).note);
@@ -33201,9 +34632,9 @@ async function upsertApp(client, decl, opts, appIds) {
     ...(decl.mcp ?? null) !== current.mcp ? { mcp: decl.mcp ?? null } : {}
   };
   const drifted = Object.keys(patch3).length > 0;
-  const tree = builtTree(decl, opts);
-  const newest = tree ? (await client.apps.deployments(current.id, { limit: 1 })).data[0] : void 0;
-  const stale = tree !== null && newest?.content_hash !== tree.hash;
+  const tree22 = builtTree(decl, opts);
+  const newest = tree22 ? (await client.apps.deployments(current.id, { limit: 1 })).data[0] : void 0;
+  const stale = tree22 !== null && newest?.content_hash !== tree22.hash;
   let action = !owned || drifted || stale || staleNames.length > 0 ? "updated" : "unchanged";
   const plan2 = opts.dryRun ? [
     ...staleNames.length > 0 ? [`will set ${staleNames.join(", ")}`] : [],
@@ -33214,7 +34645,7 @@ async function upsertApp(client, decl, opts, appIds) {
   ] : [];
   if (!opts.dryRun) {
     if (drifted) await client.apps.update(current.id, { ...patch3, project: opts.project });
-    await writeApp(client, current.id, staleEnv, stale ? tree : null);
+    await writeApp(client, current.id, staleEnv, stale ? tree22 : null);
     const migrations = declaredMigrations(decl, opts);
     if (migrations.length > 0) {
       const { fresh, note: note2 } = await applyMigrations(client, current.id, migrations);
@@ -33236,6 +34667,169 @@ async function upsertApp(client, decl, opts, appIds) {
     ...note([...adoption, ...plan2, ...unmanaged.length > 0 ? [`unmanaged secrets: ${unmanaged.join(", ")}`] : []])
   };
 }
+var PROJECT_CONTEXT_PREAMBLE = "Before anything else, read the project context with the `project_context` tool. The answers in it are the client's own \u2014 never invent, assume or restate them from memory; what the context does not say, you ask. Use the context's own words for the company, its offer and its audience.";
+function desiredMetadata(decl, of, current) {
+  if (of.template === void 0) return decl.metadata;
+  return {
+    ...current?.metadata,
+    ...decl.metadata,
+    project: of.project,
+    ...of.blueprint !== void 0 ? { blueprint: of.blueprint } : {},
+    template: of.template,
+    group: of.template
+  };
+}
+function desiredSystem(decl, of) {
+  if (of.template === void 0) return decl.system;
+  return decl.system === void 0 ? PROJECT_CONTEXT_PREAMBLE : `${PROJECT_CONTEXT_PREAMBLE}
+
+${decl.system}`;
+}
+function desiredTools(decl, current, ids) {
+  const handoff = decl.handoffs !== void 0 && handoffsEnabled(decl.handoffs);
+  if (ids === void 0 && !handoff) return decl.tools;
+  const base = decl.tools ?? current?.tools ?? { default_config: { permission: "allow" }, configs: {} };
+  const appsTool = base.configs["apps"] ?? { enabled: true, permission: base.default_config.permission };
+  const allowed = { enabled: true, permission: "allow" };
+  return {
+    default_config: base.default_config,
+    configs: {
+      ...base.configs,
+      ...ids !== void 0 ? { apps: { ...appsTool, config: { ...appsTool.config, allowed_apps: ids } } } : {},
+      ...handoff ? { send_to_agent: allowed, list_agents: allowed } : {}
+    }
+  };
+}
+async function createAgent(client, decl, tools2, team2, identityId, system, metadata) {
+  const created = await client.agents.create({
+    name: decl.name,
+    model: decl.model,
+    budget: decl.budget,
+    ...decl.description !== void 0 ? { description: decl.description } : {},
+    ...system !== void 0 ? { system } : {},
+    ...decl.skills !== void 0 ? { skills: decl.skills } : {},
+    ...decl.mcp_servers !== void 0 ? { mcp_servers: decl.mcp_servers } : {},
+    ...tools2 !== void 0 ? { tools: tools2 } : {},
+    ...decl.window !== void 0 ? { window: decl.window } : {},
+    ...team2 !== void 0 ? { multiagent: team2 } : {},
+    ...decl.handoffs !== void 0 ? { handoffs: decl.handoffs } : {},
+    ...decl.output_schema !== void 0 ? { output_schema: decl.output_schema } : {},
+    ...decl.structured_output_required !== void 0 ? { structured_output_required: decl.structured_output_required } : {},
+    ...metadata !== void 0 ? { metadata } : {}
+  });
+  if (identityId !== void 0) await client.identities.attach(created.id, identityId);
+  return { name: decl.name, action: "created", id: created.id };
+}
+async function upsertAgent(client, decl, existing, ids, dryRun, scoped, of) {
+  const unresolved = (decl.allowed_apps ?? []).filter((name) => !ids.apps.has(name));
+  const identityId = decl.identity === void 0 ? void 0 : ids.identities.get(decl.identity);
+  const missing = unresolved.length > 0 ? `allowed_apps needs app "${unresolved[0]}"` : decl.identity !== void 0 && identityId === void 0 ? `identity needs "${decl.identity}"` : null;
+  if (missing !== null && !dryRun) {
+    return { name: decl.name, action: "refused", reason: `${missing}, which was not provisioned in this run` };
+  }
+  const appIds = decl.allowed_apps !== void 0 ? decl.allowed_apps.flatMap((name) => ids.apps.get(name) ?? []) : scoped;
+  const current = existing.find((agent2) => agent2.name === decl.name) ?? null;
+  const owner = typeof current?.metadata?.["project"] === "string" ? current.metadata["project"] : null;
+  if (current && of.template !== void 0 && owner !== null && owner !== of.project && !of.adopt) {
+    return { name: decl.name, action: "refused", id: current.id, reason: ownershipRefusal(decl.name, of.project, owner, "agent") };
+  }
+  const tools2 = desiredTools(decl, current, appIds);
+  const team2 = teamWithoutRoster(decl.multiagent);
+  const system = desiredSystem(decl, of);
+  const metadata = desiredMetadata(decl, of, current);
+  if (!current) {
+    return dryRun ? { name: decl.name, action: "created" } : createAgent(client, decl, tools2, team2, identityId, system, metadata);
+  }
+  const patch3 = drift(decl, current, tools2, team2, system, metadata);
+  const held = identityId === void 0 ? [] : (await client.identities.held(current.id)).data;
+  const grant = identityId === void 0 || held.some((one) => one.id === identityId) ? null : identityId;
+  const drifted = Object.keys(patch3).length > 0 || missing !== null || grant !== null;
+  if (!drifted) return { name: decl.name, action: "unchanged", id: current.id };
+  if (!dryRun) {
+    if (Object.keys(patch3).length > 0) await client.agents.update(current.id, patch3);
+    if (grant !== null) await client.identities.attach(current.id, grant);
+  }
+  return { name: decl.name, action: "updated", id: current.id };
+}
+function drift(decl, current, tools2, team2, system, metadata) {
+  const patch3 = {};
+  if (changed(decl.model, current.model)) patch3.model = decl.model;
+  if (changed(decl.budget, current.budget)) patch3.budget = decl.budget;
+  if (changed(decl.description, current.description)) patch3.description = decl.description;
+  if (changed(system, current.system)) patch3.system = system;
+  if (changed(decl.skills, current.skills)) patch3.skills = decl.skills;
+  if (changed(decl.mcp_servers, current.mcp_servers)) patch3.mcp_servers = decl.mcp_servers;
+  if (changed(tools2, current.tools)) patch3.tools = tools2;
+  if (changed(decl.window, current.window)) patch3.window = decl.window;
+  if (team2 !== void 0 && changed(normaliseMultiagent2(team2), normaliseMultiagent2(current.multiagent))) patch3.multiagent = team2;
+  if (changed(decl.handoffs, handoffsOf(current))) patch3.handoffs = decl.handoffs;
+  if (changed(decl.output_schema, current.output_schema)) patch3.output_schema = decl.output_schema;
+  if (changed(decl.structured_output_required, current.structured_output_required)) patch3.structured_output_required = decl.structured_output_required;
+  if (changed(metadata, current.metadata)) patch3.metadata = metadata;
+  return patch3;
+}
+async function openIntake(client, agent2, decl, dryRun) {
+  if (dryRun || agent2.id === void 0) return { name: agent2.name, action: "created" };
+  const started = await client.sessions.create({
+    agent_id: agent2.id,
+    message: decl.message,
+    ...decl.budget_micro_usd !== void 0 ? { budget_micro_usd: decl.budget_micro_usd } : {}
+  });
+  return { name: agent2.name, action: "created", id: started.id };
+}
+function brief(input) {
+  const first = input.trim().split(/(?<=[.!?])\s|\n/)[0]?.trim() ?? "";
+  const text2 = first.replace(/[.\s]+$/, "");
+  return text2.length > 72 ? `${text2.slice(0, 71).trimEnd()}\u2026` : text2;
+}
+async function upsertSchedule(client, agent2, decl, current, identityIds, dryRun) {
+  const name = `${agent2.name} @ ${decl.cron}`;
+  if (agent2.action === "refused") throw new Error(`agent "${agent2.name}" was not provisioned in this run`);
+  const identity3 = decl.identity === void 0 ? void 0 : identityIds.get(decl.identity);
+  const unresolved = decl.identity !== void 0 && identity3 === void 0;
+  if (unresolved && !dryRun) throw new Error(`identity needs "${decl.identity}", which was not provisioned in this run`);
+  if (!current) {
+    if (dryRun || agent2.id === void 0) return { name, action: "created" };
+    const created = await client.deployments.create({
+      agent_id: agent2.id,
+      cron: decl.cron,
+      input_template: decl.input,
+      budget_micro_usd: decl.budget_micro_usd,
+      ...decl.timezone !== void 0 ? { timezone: decl.timezone } : {},
+      ...identity3 !== void 0 ? { identity: identity3 } : {},
+      ...decl.enabled !== void 0 ? { enabled: decl.enabled } : {}
+    });
+    return { name, action: "created", id: created.id };
+  }
+  const patch3 = {};
+  if (changed(decl.timezone, current.timezone)) patch3.timezone = decl.timezone;
+  if (changed(decl.input, current.input_template)) patch3.input_template = decl.input;
+  if (changed(decl.budget_micro_usd, current.budget_micro_usd)) patch3.budget_micro_usd = decl.budget_micro_usd;
+  if (changed(identity3, current.identity)) patch3.identity = identity3;
+  if (changed(decl.enabled, current.enabled)) patch3.enabled = decl.enabled;
+  if (Object.keys(patch3).length === 0 && !unresolved) return { name, action: "unchanged", id: current.id };
+  if (!dryRun) await client.deployments.update(current.id, patch3);
+  return { name, action: "updated", id: current.id };
+}
+async function reconcileSchedules(client, agent2, declared, live, identityIds, dryRun, into) {
+  const rows2 = live.filter((row) => row.agent_id === agent2.id);
+  into.push(
+    ...await eachInFlight(declared, async (decl) => ({
+      ...await line(
+        `${agent2.name} @ ${decl.cron}`,
+        () => upsertSchedule(client, agent2, decl, rows2.find((row) => row.cron === decl.cron), identityIds, dryRun)
+      ),
+      // `<agent> @ <cron>` says WHEN a timer runs and nothing about what it does, so the dashboard's
+      // opening message could only ever draw a timetable from these lines. The brief's first
+      // sentence is what turns that timetable into a roadmap (§29.6).
+      summary: brief(decl.input)
+    }))
+  );
+  for (const row of rows2.filter((row2) => !declared.some((decl) => decl.cron === row2.cron))) {
+    const name = `${agent2.name} @ ${row.cron}`;
+    await attempt(into, name, () => tombstone(name, row, (id) => client.deployments.delete(id), dryRun));
+  }
+}
 var LIVE = /* @__PURE__ */ new Set(["pending_payment", "issuing", "active"]);
 var nameOf = (identity3, decl) => `${identity3} / card ${decl.label}`;
 async function upsertCard(client, identityId, decl, live, dryRun, name) {
@@ -33681,7 +35275,7 @@ async function up(config2, client, opts = {}) {
   const deployments2 = taken.agents.some((decl) => decl.schedules !== void 0) ? await listAll(client.config, "/v1/deployments", DeploymentSchema3, report2.skipped) : [];
   const scoped = config2.apps.length > 0 ? [...ids.apps.values()] : void 0;
   const crew = await eachInFlight(taken.agents, async (decl) => {
-    const agent2 = await line(decl.name, () => upsertAgent(client, decl, existing, ids, dryRun, scoped, { project: opts.project ?? config2.name, ...applied(config2) }));
+    const agent2 = await line(decl.name, () => upsertAgent(client, decl, existing, ids, dryRun, scoped, { project: opts.project ?? config2.name, ...applied(config2), adopt: opts.adopt ?? false }));
     const schedules = [];
     if (decl.schedules !== void 0) {
       await reconcileSchedules(client, agent2, decl.schedules, deployments2, ids.identities, dryRun, schedules);
@@ -33737,6 +35331,8 @@ var app2 = {
   /** Names and value hashes only: a secret's value is write-only and never comes back (§29.2). */
   secrets: async ({ client, args }) => ({ out: await client.apps.secrets(args.at(0, "app-id")) }),
   domains: async ({ client, args }) => ({ out: await client.apps.domains(args.at(0, "app-id")) }),
+  /** What the app's own key lets it do: its scopes, never the key (ADR-1048). */
+  permissions: async ({ client, args }) => ({ out: await client.apps.permissions(args.at(0, "app-id")) }),
   // core-gaps: U8-database
   /** Idempotent on the name (§29.2): creating an app that exists returns it. */
   create: async ({ client, args }) => {
@@ -34426,12 +36022,8 @@ var media5 = {
       };
     }
     if (kind !== "video") throw new UsageError("--kind must be image or video");
-    const { model: model2 } = body2;
-    if (model2 === void 0)
-      throw new UsageError("--model is required for a video");
     const queued = await client.media.videos.generate({
       ...body2,
-      model: model2,
       seconds: args.int("seconds")
     });
     if (!args.bool("wait")) return { out: queued };
@@ -34538,7 +36130,15 @@ var email3 = {
         limit: args.int("limit")
       })
     };
-  }
+  },
+  /** Mark an arrived message read, or back to unread with `--unread` (ADR-1076). */
+  read: async ({ client, args }) => ({
+    out: await client.emails.markRead(who(args), args.str("message") ?? args.at(1, "message-id"), !args.bool("unread"))
+  }),
+  /** What the persona sent, newest first — through the API and through its agent alike. */
+  sent: async ({ client, args }) => ({
+    out: await client.emails.sent(who(args), { limit: args.int("limit") })
+  })
 };
 
 // src/commands/computer.ts
@@ -34806,6 +36406,13 @@ function oneOf3(args, flag, allowed) {
   if (allowed.includes(value)) return value;
   throw new UsageError(`--${flag} must be one of: ${allowed.join(", ")}`);
 }
+function kinds(args, flag) {
+  const value = args.str(flag);
+  if (value === void 0) return void 0;
+  const bad = value.split(",").filter((one) => !FILE_KINDS.includes(one.trim()));
+  if (bad.length > 0) throw new UsageError(`--${flag} must be one or more of: ${FILE_KINDS.join(", ")}`);
+  return value;
+}
 var tags = (args) => args.has("tag") ? args.list("tag").flatMap((one) => one.split(",")).map((one) => one.trim()).filter(Boolean) : void 0;
 var file2 = {
   upload: async ({ client, args, readBytes }) => {
@@ -34825,10 +36432,14 @@ var file2 = {
     out: await client.files.list({
       scope: scope(args),
       session_id: args.str("session"),
-      kind: oneOf3(args, "kind", FILE_KINDS),
+      kind: kinds(args, "kind"),
       source: oneOf3(args, "source", FILE_SOURCE_TYPES),
       tag: args.str("tag"),
       search: args.str("search"),
+      exclude_kind: kinds(args, "exclude-kind"),
+      agent_id: args.str("agent"),
+      ids: args.str("ids"),
+      order: oneOf3(args, "order", ["desc", "asc"]),
       limit: args.int("limit"),
       after: args.str("after")
     })
@@ -35014,6 +36625,17 @@ async function loadProject(cmd) {
   }
   return { dir, config: load.config };
 }
+async function recordApply(cmd, config2) {
+  const [held] = (await cmd.client.apps.installs.list({ project: config2.name })).data;
+  await cmd.client.apps.installs.apply({
+    project: config2.name,
+    declaration: { questions: config2.questions, agents: config2.agents.map(({ name, role: role2 }) => ({ name, role: role2 })) },
+    blueprint: config2.blueprint ?? null,
+    template: config2.template ?? null,
+    answers: held?.answers ?? {},
+    source: "cli"
+  });
+}
 async function context(cmd) {
   const { config: config2 } = await loadProject(cmd);
   const cleared = new Set(cmd.args.list("clear"));
@@ -35137,14 +36759,12 @@ var naive = {
   up: async (cmd) => {
     const { dir, config: config2 } = await loadProject(cmd);
     const selected = select(config2, names(cmd.args.list("only")), names(cmd.args.list("without")));
+    const dryRun = cmd.args.bool("dry-run");
     const report2 = {
-      ...await up(selected.config, cmd.client, {
-        dry_run: cmd.args.bool("dry-run"),
-        dir,
-        adopt: cmd.args.bool("adopt")
-      }),
+      ...await up(selected.config, cmd.client, { dry_run: dryRun, dir, adopt: cmd.args.bool("adopt") }),
       deselected: selected.deselected
     };
+    if (!dryRun) await recordApply(cmd, config2);
     const refused = [
       ...report2.skills,
       ...report2.identities,
@@ -35354,9 +36974,22 @@ var org = {
     return { out: { profile: cmd.config.profile, org_id: id } };
   },
   show: async (cmd) => ({ out: await cmd.client.orgs.get(orgId(cmd)) }),
-  update: async (cmd) => ({
-    out: await cmd.client.orgs.update(orgId(cmd), { name: cmd.args.need("name") })
-  }),
+  /** `--name`, `--timezone` (IANA, §20.6), `--logo-file` (an SVG file, §20.7), or any together; one is needed. */
+  update: async (cmd) => {
+    const name = cmd.args.str("name");
+    const timezone = cmd.args.str("timezone");
+    const logoFile = cmd.args.str("logo-file");
+    if (name === void 0 && timezone === void 0 && logoFile === void 0) {
+      throw new UsageError("org update needs --name, --timezone or --logo-file");
+    }
+    return {
+      out: await cmd.client.orgs.update(orgId(cmd), {
+        ...name === void 0 ? {} : { name },
+        ...timezone === void 0 ? {} : { timezone },
+        ...logoFile === void 0 ? {} : { logo_svg: cmd.readFile(logoFile) }
+      })
+    };
+  },
   members: async (cmd) => ({
     out: await cmd.client.orgs.members(orgId(cmd), { limit: cmd.args.int("limit") })
   }),
@@ -35900,13 +37533,13 @@ var social2 = {
   }),
   /** `--post` or `--account`, whichever side of the numbers is wanted. */
   analytics: async ({ client, args }) => {
-    const post = args.str("post");
+    const post2 = args.str("post");
     const account = args.str("account");
-    if (post === void 0 === (account === void 0)) {
+    if (post2 === void 0 === (account === void 0)) {
       throw new UsageError("pass exactly one of --post <id> or --account <id>");
     }
     return {
-      out: post === void 0 ? await client.social.accountAnalytics(ref4(args), account ?? "") : await client.social.postAnalytics(ref4(args), post)
+      out: post2 === void 0 ? await client.social.accountAnalytics(ref4(args), account ?? "") : await client.social.postAnalytics(ref4(args), post2)
     };
   },
   comments: async ({ client, args }) => ({
@@ -35916,6 +37549,22 @@ var social2 = {
     })
   })
 };
+var post = {
+  list: async ({ client, args }) => {
+    const status3 = args.str("status");
+    const identity3 = args.str("identity");
+    const agent2 = args.str("agent");
+    return {
+      out: await client.social.listPosts({
+        ...status3 === void 0 ? {} : { status: status3 },
+        ...identity3 === void 0 ? {} : { identity_id: identity3 },
+        ...agent2 === void 0 ? {} : { agent_id: agent2 },
+        limit: args.int("limit"),
+        after: args.str("after")
+      })
+    };
+  }
+};
 
 // src/commands/storage.ts
 function split(path, keyRequired) {
@@ -36321,7 +37970,8 @@ var FLAGS = {
     tools: "tool enable disable permission allow-domain block-domain max-content-tokens model",
     identities: "",
     delete: "",
-    spend: "by"
+    spend: "by",
+    computer: ""
   },
   /**
    * The roster on one coordinator (§28). Every write is a read-modify-write of one agent under
@@ -36428,6 +38078,7 @@ var FLAGS = {
     deployments: "limit",
     secrets: "",
     domains: "",
+    permissions: "",
     // core-gaps: U8-database
     create: "type",
     deploy: ""
@@ -36453,7 +38104,9 @@ var FLAGS = {
     list: "identity limit",
     send: "identity inbox to subject text message",
     rm: "identity inbox",
-    messages: "identity channel limit"
+    messages: "identity channel limit",
+    read: "identity message unread",
+    sent: "identity limit"
   },
   connections: {
     apps: "search limit after",
@@ -36482,6 +38135,8 @@ var FLAGS = {
     analytics: "identity post account",
     comments: "identity post limit after"
   },
+  /** The company's posts across identities (§27.1); `--identity` and `--agent` narrow it. */
+  post: { list: "status identity agent limit after" },
   /** `legal`, `wallet`, `cards`: `vetta identity legal|wallet|card …` (canonical-spec §43–§45). */
   legal: {
     verifications: "identity limit after",
@@ -36581,7 +38236,7 @@ var FLAGS = {
   },
   file: {
     upload: "file name scope session title description tag",
-    list: "scope session kind source tag search limit after",
+    list: "scope session kind source tag search exclude-kind agent ids order limit after",
     show: "",
     download: "",
     publish: "",
@@ -36618,7 +38273,7 @@ var FLAGS = {
     create: "name use",
     use: "",
     show: "",
-    update: "name",
+    update: "name timezone logo-file",
     members: "limit",
     invite: "email role",
     "set-role": "role",
@@ -36655,6 +38310,7 @@ var GROUPS = {
   email: email3,
   phone,
   social: social2,
+  post,
   legal: legal2,
   wallet: wallet2,
   cards: cards2,
@@ -36695,7 +38351,7 @@ var ALIASES = {
 };
 
 // src/cli.ts
-var VERSION = true ? "0.5.0" : "0.0.0-dev";
+var VERSION = true ? "0.6.0" : "0.0.0-dev";
 var GLOBAL_FLAGS_HELP = "global flags: --json (default) --human --profile <name> --api-key <key> --org <org_id> --api-base-url <url>";
 function usage() {
   const groups = [...Object.keys(GROUPS), ...Object.keys(ALIASES)].sort().join(", ");