@zaip-ai/cli 1.4.3 → 2.2.0

package/templates/.agents/config/clients/codex/agents/zaip-agent-security-auditor.toml

@@ -10,8 +10,8 @@ Operate as Codex agent zaip-agent-security-auditor (ZAIP catalog id agent-securi
 Perform independent read-only technical security audits and prioritized recommendations.
 Capabilities: security-audit, security-review, risk-assessment.
 Allowed tools: shell-read, test-runner, package-inspector.
-Required skills: zaip-skill-review, zaip-skill-security.
-Model policy: gpt-5.6-sol; select model and reasoning effort once when this Agent Run starts and keep both immutable until it finishes.
+Available skills: zaip-skill-review, zaip-skill-security; load matching skills only. Change/execution skills apply to persistent delivery; Meta Ads applies only to Meta work.
+Keep the invoked model and reasoning effort immutable for this Run; report unavailable effective configuration as unavailable.
 Write scopes: read-only.
 This role is read-only. Do not create, modify, move, or delete workspace files.
 Inputs: audit-scope, evidence-manifest, release-candidate.
@@ -21,11 +21,8 @@ Use when: Security audit, sensitive change, or release requires independent asse
 Do not use when: Implementation, remediation authorship, or deployment..
 You are a worker selected by zaip-agent-orchestrator. Do not dispatch peer catalog roles; return your bounded result to the orchestrator, which exclusively controls further delegation.
 Escalate only to catalog identities: zaip-agent-orchestrator.
-When delegating to a Codex subagent, select only a registered zaip-agent-NOME identity from the ZAIP catalog; never select default, worker, explorer, or an ad-hoc type.
-For Codex delegation, a ZAIP Sub-Run exists only when started with the native collaboration subagent mechanism (`spawn_agent`). `create_thread` and `fork_thread` create independent chats and require an explicit user request; never use either as a Sub-Run, fallback, retry, or evidence of delegation. If native delegation is unavailable, report the limitation rather than create an independent chat. A catalog name, task_name, title, or prompt never proves native ancestry. Before retrying the same bounded dispatch, await or reuse its pending child; do not duplicate an unresolved startup. Capture only ancestry and metadata observed from native host spawn/terminal results or SubagentStart/SubagentStop events.
+Do not spawn children or create independent chats. Native ancestry and usage require observed host metadata, never names or prompt claims.
 When this agent is delegated, agent_type must be exactly zaip-agent-security-auditor and task_name must be exactly luiz_security_auditor_zaip_agent.
-For every further delegation, read both exact values from the selected catalog entry: agent_type uses codex_name and task_name uses codex_task_name. Never add a work title, purpose label, or other suffix.
-Codex may render task_name in its Subagents pane. The cataloged codex_task_name is therefore mandatory; do not use a task-specific label or claim that the UI label can be forced to include hyphens.
 Accept only concrete bounded delegated work. Preserve parent requirements and return a concise result with evidence locators.
 You may approve only roles outside: auditor.
 """

package/templates/.agents/config/clients/codex/agents/zaip-agent-task-executor.toml

@@ -10,8 +10,8 @@ Operate as Codex agent zaip-agent-task-executor (ZAIP catalog id agent-task-exec
 Execute one bounded generic Task, including dashboard or local scope, and return verification evidence to the orchestrator.
 Capabilities: task-delivery, verification, evidence-production.
 Allowed tools: apply-patch, shell-read, test-runner.
-Required skills: zaip-skill-change.
-Model policy: gpt-5.6-terra; select model and reasoning effort once when this Agent Run starts and keep both immutable until it finishes.
+Available skills: zaip-skill-change; load matching skills only. Change/execution skills apply to persistent delivery; Meta Ads applies only to Meta work.
+Keep the invoked model and reasoning effort immutable for this Run; report unavailable effective configuration as unavailable.
 Write scopes: declared-write-scope.
 The Codex host grants workspace-write at the workspace boundary, not per-path. Treat the declared write scopes as mandatory: do not modify files outside them; report any required expansion to the parent before writing.
 Inputs: task, requirements, context-pack.
@@ -22,11 +22,8 @@ Do not use when: Macro planning, coordination, or independent review..
 Execute generic dashboard/local Tasks only when their scopes do not select a mandatory specialist.
 You are a worker selected by zaip-agent-orchestrator. Do not dispatch peer catalog roles; return your bounded result to the orchestrator, which exclusively controls further delegation.
 Escalate only to catalog identities: zaip-agent-orchestrator.
-When delegating to a Codex subagent, select only a registered zaip-agent-NOME identity from the ZAIP catalog; never select default, worker, explorer, or an ad-hoc type.
-For Codex delegation, a ZAIP Sub-Run exists only when started with the native collaboration subagent mechanism (`spawn_agent`). `create_thread` and `fork_thread` create independent chats and require an explicit user request; never use either as a Sub-Run, fallback, retry, or evidence of delegation. If native delegation is unavailable, report the limitation rather than create an independent chat. A catalog name, task_name, title, or prompt never proves native ancestry. Before retrying the same bounded dispatch, await or reuse its pending child; do not duplicate an unresolved startup. Capture only ancestry and metadata observed from native host spawn/terminal results or SubagentStart/SubagentStop events.
+Do not spawn children or create independent chats. Native ancestry and usage require observed host metadata, never names or prompt claims.
 When this agent is delegated, agent_type must be exactly zaip-agent-task-executor and task_name must be exactly leo_software_engineer_zaip_agent.
-For every further delegation, read both exact values from the selected catalog entry: agent_type uses codex_name and task_name uses codex_task_name. Never add a work title, purpose label, or other suffix.
-Codex may render task_name in its Subagents pane. The cataloged codex_task_name is therefore mandatory; do not use a task-specific label or claim that the UI label can be forced to include hyphens.
 Accept only concrete bounded delegated work. Preserve parent requirements and return a concise result with evidence locators.
 You cannot approve your own work or issue final approval.
 """

package/templates/.agents/config/clients/codex/agents/zaip-agent-website-developer.toml

@@ -10,8 +10,8 @@ Operate as Codex agent zaip-agent-website-developer (ZAIP catalog id agent-websi
 Build website experiences with design-system, SEO, GEO, Markdown for Agents, and Agent Readiness awareness.
 Capabilities: website-delivery, design-system, seo, geo, markdown-for-agents, agent-readiness, meta-devtools-access.
 Allowed tools: apply-patch, shell-read, test-runner, meta-devtools-mcp.
-Required skills: zaip-skill-change, zaip-skill-website-readiness, zaip-skill-meta-devtools-api-integration.
-Model policy: gpt-5.6-terra; select model and reasoning effort once when this Agent Run starts and keep both immutable until it finishes.
+Available skills: zaip-skill-change, zaip-skill-website-readiness, zaip-skill-meta-devtools-api-integration; load matching skills only. Change/execution skills apply to persistent delivery; Meta Ads applies only to Meta work.
+Keep the invoked model and reasoning effort immutable for this Run; report unavailable effective configuration as unavailable.
 Write scopes: apps/site/*.
 The Codex host grants workspace-write at the workspace boundary, not per-path. Treat the declared write scopes as mandatory: do not modify files outside them; report any required expansion to the parent before writing.
 Inputs: task, requirements, website-context.
@@ -21,11 +21,8 @@ Use when: apps/site/**, institutional site, landing page, SEO, GEO, or Markdown
 Do not use when: Product app, backend, or central design-rule changes..
 You are a worker selected by zaip-agent-orchestrator. Do not dispatch peer catalog roles; return your bounded result to the orchestrator, which exclusively controls further delegation.
 Escalate only to catalog identities: zaip-agent-orchestrator.
-When delegating to a Codex subagent, select only a registered zaip-agent-NOME identity from the ZAIP catalog; never select default, worker, explorer, or an ad-hoc type.
-For Codex delegation, a ZAIP Sub-Run exists only when started with the native collaboration subagent mechanism (`spawn_agent`). `create_thread` and `fork_thread` create independent chats and require an explicit user request; never use either as a Sub-Run, fallback, retry, or evidence of delegation. If native delegation is unavailable, report the limitation rather than create an independent chat. A catalog name, task_name, title, or prompt never proves native ancestry. Before retrying the same bounded dispatch, await or reuse its pending child; do not duplicate an unresolved startup. Capture only ancestry and metadata observed from native host spawn/terminal results or SubagentStart/SubagentStop events.
+Do not spawn children or create independent chats. Native ancestry and usage require observed host metadata, never names or prompt claims.
 When this agent is delegated, agent_type must be exactly zaip-agent-website-developer and task_name must be exactly jonny_website_developer_zaip_agent.
-For every further delegation, read both exact values from the selected catalog entry: agent_type uses codex_name and task_name uses codex_task_name. Never add a work title, purpose label, or other suffix.
-Codex may render task_name in its Subagents pane. The cataloged codex_task_name is therefore mandatory; do not use a task-specific label or claim that the UI label can be forced to include hyphens.
 Accept only concrete bounded delegated work. Preserve parent requirements and return a concise result with evidence locators.
 You cannot approve your own work or issue final approval.
 """

package/templates/.agents/config/clients/codex/agents/zaip-agent-writer.toml

@@ -10,8 +10,8 @@ Operate as Codex agent zaip-agent-writer (ZAIP catalog id agent-text-summarizer)
 Produce faithful summaries, timestamp-aware transcript analyses, and source-grounded documentation for a declared audience without unsupported claims.
 Capabilities: faithful-summarization, timestamped-transcript-analysis, source-grounded-documentation.
 Allowed tools: apply-patch, shell-read, test-runner.
-Required skills: zaip-skill-context, zaip-skill-change, zaip-skill-text-encoding.
-Model policy: gpt-5.6-terra; select model and reasoning effort once when this Agent Run starts and keep both immutable until it finishes.
+Available skills: zaip-skill-context, zaip-skill-change, zaip-skill-text-encoding; load matching skills only. Change/execution skills apply to persistent delivery; Meta Ads applies only to Meta work.
+Keep the invoked model and reasoning effort immutable for this Run; report unavailable effective configuration as unavailable.
 Write scopes: declared-write-scope.
 The Codex host grants workspace-write at the workspace boundary, not per-path. Treat the declared write scopes as mandatory: do not modify files outside them; report any required expansion to the parent before writing.
 Inputs: task, source-material, audience, output-constraints.
@@ -23,11 +23,8 @@ Select exactly one writing mode per bounded unit. For a faithful summary, preser
 For delivery documentation, write only inside the declared scope; validate links, referenced commands, and UTF-8 encoding, then return source-grounding evidence. For interaction-only work, do not mutate the workspace.
 You are a worker selected by zaip-agent-orchestrator. Do not dispatch peer catalog roles; return your bounded result to the orchestrator, which exclusively controls further delegation.
 Escalate only to catalog identities: zaip-agent-orchestrator.
-When delegating to a Codex subagent, select only a registered zaip-agent-NOME identity from the ZAIP catalog; never select default, worker, explorer, or an ad-hoc type.
-For Codex delegation, a ZAIP Sub-Run exists only when started with the native collaboration subagent mechanism (`spawn_agent`). `create_thread` and `fork_thread` create independent chats and require an explicit user request; never use either as a Sub-Run, fallback, retry, or evidence of delegation. If native delegation is unavailable, report the limitation rather than create an independent chat. A catalog name, task_name, title, or prompt never proves native ancestry. Before retrying the same bounded dispatch, await or reuse its pending child; do not duplicate an unresolved startup. Capture only ancestry and metadata observed from native host spawn/terminal results or SubagentStart/SubagentStop events.
+Do not spawn children or create independent chats. Native ancestry and usage require observed host metadata, never names or prompt claims.
 When this agent is delegated, agent_type must be exactly zaip-agent-writer and task_name must be exactly lia_technical_writer_zaip_agent.
-For every further delegation, read both exact values from the selected catalog entry: agent_type uses codex_name and task_name uses codex_task_name. Never add a work title, purpose label, or other suffix.
-Codex may render task_name in its Subagents pane. The cataloged codex_task_name is therefore mandatory; do not use a task-specific label or claim that the UI label can be forced to include hyphens.
 Accept only concrete bounded delegated work. Preserve parent requirements and return a concise result with evidence locators.
 You cannot approve your own work or issue final approval.
 """

package/templates/.agents/config/pricing/models.json

@@ -1,6 +1,6 @@
 {
   "schema_version": 1,
-  "updated_at": "2026-09-05T02:45:00.000Z",
+  "updated_at": "2026-09-06T15:04:18.000Z",
   "source": "official-provider-pricing",
   "disclaimer": "Estimated equivalent API cost using standard token pricing. This is not an invoice or account charge.",
   "models": [
@@ -23,23 +23,27 @@
       "source_label": "OpenAI API Pricing (Standard)",
       "source_url": "https://developers.openai.com/api/docs/pricing",
       "notes": [
+        "Verified against official OpenAI API pricing on 2026-09-06; equivalent API estimate, not historical billing.",
         "Reasoning is a subset of output and uses the output rate.",
         "Requests above 272K input tokens use 2x input and 1.5x output pricing.",
-        "Priority/Fast pricing uses the official 2x Standard rates."
-      ]
+        "Cache-write tokens are a subset of total OpenAI input, charged once at 1.25x ordinary input. Missing observed cache writes leave the full estimate unavailable.",
+        "Fast/Priority short-context rates are 2x Standard."
+      ],
+      "cache_write_input_per_million_usd": 12.5,
+      "priority_cache_write_input_per_million_usd": 25
     },
     {
       "id": "gpt-5.6-sol",
       "provider": "openai",
       "aliases": [],
-      "input_per_million_usd": 5,
-      "cached_input_per_million_usd": 0.5,
-      "output_per_million_usd": 30,
-      "reasoning_per_million_usd": 30,
-      "priority_input_per_million_usd": 10,
-      "priority_cached_input_per_million_usd": 1,
-      "priority_output_per_million_usd": 60,
-      "priority_reasoning_per_million_usd": 60,
+      "input_per_million_usd": 4,
+      "cached_input_per_million_usd": 0.4,
+      "output_per_million_usd": 20,
+      "reasoning_per_million_usd": 20,
+      "priority_input_per_million_usd": 8,
+      "priority_cached_input_per_million_usd": 0.8,
+      "priority_output_per_million_usd": 40,
+      "priority_reasoning_per_million_usd": 40,
       "reasoning_billed_separately": false,
       "long_context_threshold_tokens": 272000,
       "long_context_input_multiplier": 2,
@@ -47,22 +51,28 @@
       "source_label": "OpenAI API Pricing (Standard)",
       "source_url": "https://developers.openai.com/api/docs/pricing",
       "notes": [
+        "Verified against official OpenAI API pricing on 2026-09-06; equivalent API estimate, not historical billing.",
         "Reasoning is a subset of output and uses the output rate.",
-        "Requests above 272K input tokens use 2x input and 1.5x output pricing."
-      ]
+        "Requests above 272K input tokens use 2x input and 1.5x output pricing.",
+        "Cache-write tokens are a subset of total OpenAI input, charged once at 1.25x ordinary input. Missing observed cache writes leave the full estimate unavailable.",
+        "Fast/Priority short-context rates are 2x Standard.",
+        "OpenAI states promotional pricing is available at least through 2026-11-21; reverify before future pricing changes."
+      ],
+      "cache_write_input_per_million_usd": 5,
+      "priority_cache_write_input_per_million_usd": 10
     },
     {
       "id": "gpt-5.6-terra",
       "provider": "openai",
       "aliases": [],
-      "input_per_million_usd": 2.5,
-      "cached_input_per_million_usd": 0.25,
-      "output_per_million_usd": 15,
-      "reasoning_per_million_usd": 15,
-      "priority_input_per_million_usd": 5,
-      "priority_cached_input_per_million_usd": 0.5,
-      "priority_output_per_million_usd": 30,
-      "priority_reasoning_per_million_usd": 30,
+      "input_per_million_usd": 2,
+      "cached_input_per_million_usd": 0.2,
+      "output_per_million_usd": 12,
+      "reasoning_per_million_usd": 12,
+      "priority_input_per_million_usd": 4,
+      "priority_cached_input_per_million_usd": 0.4,
+      "priority_output_per_million_usd": 24,
+      "priority_reasoning_per_million_usd": 24,
       "reasoning_billed_separately": false,
       "long_context_threshold_tokens": 272000,
       "long_context_input_multiplier": 2,
@@ -70,22 +80,27 @@
       "source_label": "OpenAI API Pricing (Standard)",
       "source_url": "https://developers.openai.com/api/docs/pricing",
       "notes": [
+        "Verified against official OpenAI API pricing on 2026-09-06; equivalent API estimate, not historical billing.",
         "Reasoning is a subset of output and uses the output rate.",
-        "Requests above 272K input tokens use 2x input and 1.5x output pricing."
-      ]
+        "Requests above 272K input tokens use 2x input and 1.5x output pricing.",
+        "Cache-write tokens are a subset of total OpenAI input, charged once at 1.25x ordinary input. Missing observed cache writes leave the full estimate unavailable.",
+        "Fast/Priority short-context rates are 2x Standard."
+      ],
+      "cache_write_input_per_million_usd": 2.5,
+      "priority_cache_write_input_per_million_usd": 5
     },
     {
       "id": "gpt-5.6-luna",
       "provider": "openai",
       "aliases": [],
-      "input_per_million_usd": 1,
-      "cached_input_per_million_usd": 0.1,
-      "output_per_million_usd": 6,
-      "reasoning_per_million_usd": 6,
-      "priority_input_per_million_usd": 2,
-      "priority_cached_input_per_million_usd": 0.2,
-      "priority_output_per_million_usd": 12,
-      "priority_reasoning_per_million_usd": 12,
+      "input_per_million_usd": 0.2,
+      "cached_input_per_million_usd": 0.02,
+      "output_per_million_usd": 1.2,
+      "reasoning_per_million_usd": 1.2,
+      "priority_input_per_million_usd": 0.4,
+      "priority_cached_input_per_million_usd": 0.04,
+      "priority_output_per_million_usd": 2.4,
+      "priority_reasoning_per_million_usd": 2.4,
       "reasoning_billed_separately": false,
       "long_context_threshold_tokens": 272000,
       "long_context_input_multiplier": 2,
@@ -93,9 +108,14 @@
       "source_label": "OpenAI API Pricing (Standard)",
       "source_url": "https://developers.openai.com/api/docs/pricing",
       "notes": [
+        "Verified against official OpenAI API pricing on 2026-09-06; equivalent API estimate, not historical billing.",
         "Reasoning is a subset of output and uses the output rate.",
-        "Requests above 272K input tokens use 2x input and 1.5x output pricing."
-      ]
+        "Requests above 272K input tokens use 2x input and 1.5x output pricing.",
+        "Cache-write tokens are a subset of total OpenAI input, charged once at 1.25x ordinary input. Missing observed cache writes leave the full estimate unavailable.",
+        "Fast/Priority short-context rates are 2x Standard."
+      ],
+      "cache_write_input_per_million_usd": 0.25,
+      "priority_cache_write_input_per_million_usd": 0.5
     },
     {
       "id": "gpt-5.5",

package/templates/.agents/dashboard/.zaip-managed.json

@@ -1,6 +1,6 @@
 {
   "schemaVersion": 1,
-  "version": "1.3.0",
+  "version": "2.2.0",
   "files": [
     {
       "path": "DATA-DICTIONARY.md",
@@ -15,12 +15,12 @@
       "sha256": "4d6ee4c8ade44afe21ece51922a4b3656c67496250c1cf16add770aef81363aa"
     },
     {
-      "path": "apps/frontend/dist/assets/DashboardHelpDialog-Je5nK-Et.css",
-      "sha256": "aafa708825ff8417d2de8ce9f45b94c899aa9ae5c5068bf5ce4def13e9c00643"
+      "path": "apps/frontend/dist/assets/DashboardHelpDialog-DaSllaJp.js",
+      "sha256": "0231d65c16107a76ecba1e330d55341c9e8f0681265d86097cc52d63e366ad33"
     },
     {
-      "path": "apps/frontend/dist/assets/DashboardHelpDialog-oZVlf-l5.js",
-      "sha256": "5793bc34ec7c9eca238a4c7247aa407aa64af3e202bfdc5b4ae767b0402d4f4c"
+      "path": "apps/frontend/dist/assets/DashboardHelpDialog-Je5nK-Et.css",
+      "sha256": "aafa708825ff8417d2de8ce9f45b94c899aa9ae5c5068bf5ce4def13e9c00643"
     },
     {
       "path": "apps/frontend/dist/assets/PricingSettingsDialog-BPtVUGgs.js",
@@ -35,8 +35,8 @@
       "sha256": "8f5830a272707f2bf1922a4f80b967a5da589e667bc9d66debf3735f58970e77"
     },
     {
-      "path": "apps/frontend/dist/assets/TraceabilityWorkspace-BYjVOHI_.js",
-      "sha256": "2ced0b542baf83c7b624e1e6c02f8d5d3b8680ea13c201d74658592085c84a12"
+      "path": "apps/frontend/dist/assets/TraceabilityWorkspace-BCvZFMEf.js",
+      "sha256": "f12f85ce344c8266ce0df0054d60c43e79ccbd3b14655b6b74eacab496368143"
     },
     {
       "path": "apps/frontend/dist/assets/TraceabilityWorkspace-DvvavDLY.css",
@@ -63,8 +63,8 @@
       "sha256": "555bd23c75cfa58812d58124f31c3897a581f6b94c7998ec9db7aff9fa8ddd29"
     },
     {
-      "path": "apps/frontend/dist/assets/index-ZJFXmK7m.js",
-      "sha256": "a33a7344672e6ceef671fdb4e4d7f7534c37b64d73a38b46ebeed7eec503e580"
+      "path": "apps/frontend/dist/assets/index-_MEktQNM.js",
+      "sha256": "4761d4dcc51f9684ee3aba9b8cded501cd3f7866ff042aeeb35e0bff29e069bc"
     },
     {
       "path": "apps/frontend/dist/assets/logo_novo_azul-BBx5pA2B.png",
@@ -92,7 +92,7 @@
     },
     {
       "path": "apps/frontend/dist/index.html",
-      "sha256": "7173d026c68ea6bc41e422003df0c4678347eedf407363084fcf17a99fde1aa4"
+      "sha256": "96f2a7724d6639bc0ec6280be9132f2a9dac7873b164cf550b75b05097dd9b70"
     },
     {
       "path": "apps/frontend/dist/logo_novo_azul.png",
@@ -100,11 +100,11 @@
     },
     {
       "path": "apps/frontend/index.html",
-      "sha256": "96f9b9391238f3707c01e631b479be3913cea3fb3ac2ceaca0572ebf059352b8"
+      "sha256": "9acc63f0ec41cc091d2dada870e644281d9abc09a5f1deca52281801c3ced977"
     },
     {
       "path": "apps/frontend/package.json",
-      "sha256": "9cf757e6b95df0be0792cf36c14b42c66891003b52efc58e3a4b86333ab37606"
+      "sha256": "5024543285061acea67faa17f94fdf00aa5c6e2f84ff556bd8fdd3e40c55b989"
     },
     {
       "path": "apps/frontend/playwright.dom.config.ts",
@@ -120,7 +120,7 @@
     },
     {
       "path": "apps/frontend/src/App.tsx",
-      "sha256": "6c6021d7a70e8a83ea7f0b852b95bc6304c473320beeb119323f728ba0db379f"
+      "sha256": "65caa0fbed2f39fe5839dd9f9e66584ecef498c33f208d537cb46e2a89670eb6"
     },
     {
       "path": "apps/frontend/src/AppLoadingBoundary.tsx",
@@ -220,11 +220,11 @@
     },
     {
       "path": "apps/frontend/src/dashboard-api.test.ts",
-      "sha256": "c3a83cdde850531abf62cdbd57082902c075f9228bdfd5a5c4b5868f245e4997"
+      "sha256": "e4affe613feb06070909c2dedd9b007a295c4a5165ff3a227876fa0bb05d8d07"
     },
     {
       "path": "apps/frontend/src/dashboard-api.ts",
-      "sha256": "0e901aeb6376c6c2d0ee16115866964c334b54eda8623d476fd259348d74504a"
+      "sha256": "909bb32a3b45c86d835f212e6bc9fe3de4898d9a0796c5d5d26f90d3f971d1c1"
     },
     {
       "path": "apps/frontend/src/dashboard-capability-nav.css",
@@ -234,6 +234,14 @@
       "path": "apps/frontend/src/dashboard-help-dialog.css",
       "sha256": "2a04e63d719b5748965e55e3d0324570143c68d2086208a1c3529a97e758a39a"
     },
+    {
+      "path": "apps/frontend/src/dashboard-identity.test.ts",
+      "sha256": "50a178c2d7cd101cdb2a35be8f448da46547b78f904d35a0f8c228f5e8c4f50d"
+    },
+    {
+      "path": "apps/frontend/src/dashboard-identity.ts",
+      "sha256": "a45b3ebf7b7722563eea22b703bcfaa3395b1b9cb267fc702ba74e6b66e8ed81"
+    },
     {
       "path": "apps/frontend/src/dashboard-localization.test.ts",
       "sha256": "7822f4b3b83e9d5bedd0eef9389617ffd9659a05f63477f76e2a8b1c1c86b3e9"
@@ -242,6 +250,10 @@
       "path": "apps/frontend/src/dashboard-localization.ts",
       "sha256": "de0792a3d944995c6fd669e9afefedced8901442c9f2f31793a6af2161967324"
     },
+    {
+      "path": "apps/frontend/src/dashboard-project-overview.ts",
+      "sha256": "9cc4b66d4b8f6a44599966a9257a903a7362c4867a44f0afb6e228fb99f70b87"
+    },
     {
       "path": "apps/frontend/src/loading-feedback.css",
       "sha256": "ff22a708e6bddea9504fd430dffaa09a210fffd3fd92a27f19a9d8a081c97f9c"
@@ -304,7 +316,7 @@
     },
     {
       "path": "apps/frontend/src/project-settings.test.ts",
-      "sha256": "658c50c5c2351b032a0707cfbd52ced6b7c0791571610cbf528a8dcee7ca40b9"
+      "sha256": "e565c27e786e52635cd73dd39162cb43e7494c4329679b0aff9ca56fc7557264"
     },
     {
       "path": "apps/frontend/src/project-stack-versions.css",
@@ -420,7 +432,7 @@
     },
     {
       "path": "modules/cost-monitor/package.json",
-      "sha256": "a93a98eb9f553179040fe40825d2356e32a55efc0e7ec509b0246554ff28d0ac"
+      "sha256": "9383718b2001cee3c3178cdd739f63aa49cd189ba6e0e55fa090934e8a6c241d"
     },
     {
       "path": "modules/cost-monitor/src/agent-groups.test.ts",
@@ -744,7 +756,7 @@
     },
     {
       "path": "modules/operations/package.json",
-      "sha256": "68e50d9f9fad3d07cab3fbec9479fc0171a2c7dede54be60369282a46e7a2829"
+      "sha256": "53e165481da7f595bd477960cd5bc5d056106f564b13508e46824b53b6cca229"
     },
     {
       "path": "modules/operations/src/contracts.ts",
@@ -1368,11 +1380,11 @@
     },
     {
       "path": "modules/traceability/package.json",
-      "sha256": "eb9c5969507f930e1f10387f5a1fc6cc5d82f0b6d7e339d0552b4e40ea99c74a"
+      "sha256": "645c69773051f44d33623cd4cc68903758bd4ceb7a70ecee3545672fb51ee26d"
     },
     {
       "path": "modules/traceability/src/contracts.ts",
-      "sha256": "4ae232c33021a73256a51a53caf2f252acdd33b63db68071798f790917b70355"
+      "sha256": "dec37b15af6d90ffe3bb52558d8928dcb53255d80854f3207c1b67af587611bd"
     },
     {
       "path": "modules/traceability/src/react/TaskTracePanel.test.ts",
@@ -1440,11 +1452,11 @@
     },
     {
       "path": "packages/branding/package.json",
-      "sha256": "12cfc84dc8dc6cc543541eeb20de267dc209e0750e284a8d9789e801f68aa26a"
+      "sha256": "1fd35a1b7cfa35e040d0b05ab5b0f5ee99f1930e2f18641fbbaabd5fb01ef279"
     },
     {
       "path": "packages/branding/src/index.ts",
-      "sha256": "6ab3f262347af2f19f6c7471543def7d7126f331540f231aaea85284cb952076"
+      "sha256": "a41ada1a3f5d20a589035345ad8d949037db944b1705da9a2164acf14a67d577"
     },
     {
       "path": "packages/branding/tsconfig.json",
@@ -1452,7 +1464,7 @@
     },
     {
       "path": "packages/contracts/package.json",
-      "sha256": "94db308fa17641b83d363cc1407ed41ff5d7a321297177794a3873cf306be004"
+      "sha256": "371c97ec3bca815e3120d58f40ab065e7c608568e3c120f3a183d75bc19a49ae"
     },
     {
       "path": "packages/contracts/src/export.ts",
@@ -1472,7 +1484,7 @@
     },
     {
       "path": "packages/data-export/package.json",
-      "sha256": "d8bca1ac073fd7c58b0afa4205200b3b91f2e8ed9280ae91a6b9c908f2d99ece"
+      "sha256": "545fb1befc39f2041ebad780721369e4313a1fd505e2a2e237b3c9e99ac7ebf0"
     },
     {
       "path": "packages/data-export/src/index.test.ts",
@@ -1496,15 +1508,15 @@
     },
     {
       "path": "packages/local-runtime/dist/server.cjs",
-      "sha256": "34abb3a8704f41fa50bf7a5c83c9b0738b84c3ec91ec8786164ff47838e7458b"
+      "sha256": "8bb8fa2e828ea14629780c14d302e59f200d37db1da3180db040e5ed3a78e1e6"
     },
     {
       "path": "packages/local-runtime/dist/sqlite-read-model.cjs",
-      "sha256": "5e20e48c092c4f08055bc5235b772bf2c2a4bae89fb0df64c5952a5e12dee370"
+      "sha256": "b4c0d09018b6584f4f1d53e4764cbe4f5545c91098b7b4013ea477a1a5b2ea06"
     },
     {
       "path": "packages/local-runtime/package.json",
-      "sha256": "664792d79c0b662d5f4638fb39471703b7a5b8953d23752560e81f2592ad8e6d"
+      "sha256": "d0c6081546cd503b4027d87b2bf95e43953b6ab1c274c49ba880a9759432d10b"
     },
     {
       "path": "packages/local-runtime/scripts/build-sqlite-dashboard.mjs",
@@ -1540,7 +1552,7 @@
     },
     {
       "path": "packages/local-runtime/server.mjs",
-      "sha256": "7b769217f6f3bf921521b3dd781e2f5e398d110831c3bfc980ee67776270c882"
+      "sha256": "919bcefafde07c90536bc685ba510aff64be6625e68903d0f497ced156c6330d"
     },
     {
       "path": "packages/local-runtime/src/agent-adapter-sync.ts",
@@ -1610,6 +1622,10 @@
       "path": "packages/local-runtime/src/server-daily-read-models.ts",
       "sha256": "0ae5b787fc3e5534d90ace6a06a8e39999d292c93eb9ddfff5660f2653403e16"
     },
+    {
+      "path": "packages/local-runtime/src/server-identity.test.ts",
+      "sha256": "33dc43fef48314eb9d419a20137f962b10b9c0574735aa6c7918d31ab162b89c"
+    },
     {
       "path": "packages/local-runtime/src/server-operations-pages.test.ts",
       "sha256": "575e3b875f0f1f970c0f430217a355aecf96daa6d239923649e164efc2160140"
@@ -1686,17 +1702,21 @@
       "path": "packages/local-runtime/src/server-snapshot-revision.ts",
       "sha256": "93e6872af40da4f393929ef7f80c6e5c96f43f430fa2fb43320a4e9cb6794712"
     },
+    {
+      "path": "packages/local-runtime/src/server-snapshot-synchronization.test.ts",
+      "sha256": "1a08c8cc7b4196e1b2f72374e1a53111cab4800a46ea2da5ff2fcef3799fa633"
+    },
     {
       "path": "packages/local-runtime/src/server-snapshot-synchronization.ts",
-      "sha256": "49aa5dbd5271d38801f337032c6132c2c4b3168b77464374c1f265a32d98d69f"
+      "sha256": "7fca3d4d867316f02f1599b258b1e5f92965fb8176eedbad8dbbb73710a363a7"
     },
     {
       "path": "packages/local-runtime/src/server-snapshot.test.ts",
-      "sha256": "b60a67ee06ff3d21c11c5ee8f50eb25b55d644bc5332d6b931dda566a84cd886"
+      "sha256": "a1605fc55e125749917b71058486f9ed808999dd8d49097a554960972b9a2212"
     },
     {
       "path": "packages/local-runtime/src/server-sqlite-task-trace.ts",
-      "sha256": "695497ff2ad829608956ccaaff1cdc13e7d9320cd45739cf25e2a2bd783bd2ab"
+      "sha256": "a38d6ac7b50252bf52c37a2fabf944bfb63fb7e71abdc70ea10e5ca0f57ea0cf"
     },
     {
       "path": "packages/local-runtime/src/server-startup.ts",
@@ -1716,19 +1736,19 @@
     },
     {
       "path": "packages/local-runtime/src/server-workspace.ts",
-      "sha256": "8b3c8cddecc3469bf2a9d087ed96259c68a7d7d19ff24be6fe17c4b97285b1ae"
+      "sha256": "ee8d5340bb9dc15f439a50fad1e2931ff27dec5c60b1daa4bfde14e7dd7204a0"
     },
     {
       "path": "packages/local-runtime/src/server.test-fixtures.ts",
-      "sha256": "83723af259eeeb9620f67a0b45e217fa396b06dbdf8c7b606f0cc04b8a048411"
+      "sha256": "fb39821b80086363fb912a77c65355302cc199fc97735d274105f45582ccec76"
     },
     {
       "path": "packages/local-runtime/src/server.test.ts",
-      "sha256": "b2844973f9f4049c4a7e8fef0fbb77758ff7a3b84b9c9678d370ecd789b75287"
+      "sha256": "81f0eaf2a59b76de538e2fdeef9a48ae4028e8b810ab782b43ff51417d38f7fb"
     },
     {
       "path": "packages/local-runtime/src/server.ts",
-      "sha256": "bf409cb40f6531c67241894ed7e9a398b0850e01f5073581492a4f0c33c90de0"
+      "sha256": "de787731a94f80b7b6401a319e3986fa76c8e76170ab2f89014008bf5b041081"
     },
     {
       "path": "packages/local-runtime/src/sqlite-agent-productivity.test.ts",
@@ -1816,7 +1836,7 @@
     },
     {
       "path": "packages/local-runtime/src/sqlite-incremental-refresh.test.ts",
-      "sha256": "27d7890db67d8e2bb6f1df028a3e8f22d1a6db8cf295bf8763cf0240be936277"
+      "sha256": "b9a96d8f4c81ffc85a39bc57dfe4cad86bf99dc397185585c09c6107f8d2df1d"
     },
     {
       "path": "packages/local-runtime/src/sqlite-metric-contract.test.ts",
@@ -1848,7 +1868,7 @@
     },
     {
       "path": "packages/local-runtime/src/sqlite-read-model-canonical.ts",
-      "sha256": "0c519d9a7c34122924c8d05483b911b7377c900bdf16a92786001aeee7a132a2"
+      "sha256": "12b9a6e464e167177fe1cc2382e657bd525c3d170fc090ad6ff6b25e9a476d3c"
     },
     {
       "path": "packages/local-runtime/src/sqlite-read-model-first-fold-types.ts",
@@ -1872,19 +1892,19 @@
     },
     {
       "path": "packages/local-runtime/src/sqlite-read-model-source-fingerprint.test.ts",
-      "sha256": "c5aa1b5609459f4d912a3a64c5b4436ee6ca94eadcf39af651598a2ba455df71"
+      "sha256": "e3f28fd8e4704c103a7e177ab49bbd028887de895776d89565a4653a3603766d"
     },
     {
       "path": "packages/local-runtime/src/sqlite-read-model-source-fingerprint.ts",
-      "sha256": "e344f3803ced8c29f8d73f9a333d95a39ae3448e0c24e0f4bdd75c7023914fcc"
+      "sha256": "163c90c76ba5735fce74454ad9d876ca2396f5ef39b274ba1d87435d56d1b1b8"
     },
     {
       "path": "packages/local-runtime/src/sqlite-read-model.test.ts",
-      "sha256": "ed0a33a3bc1dc8629ea5b172e006598db919c24cf8534b48f52107dbc154cf12"
+      "sha256": "fda1e9d56246884a081d2e9532064c784479e70be3220801ebfad6e424ea0a4c"
     },
     {
       "path": "packages/local-runtime/src/sqlite-read-model.ts",
-      "sha256": "76cfaa5c721ad8645fdd9e0c2f795022e925076cbc5840d8eb4ebbf1dcadb9ca"
+      "sha256": "cd035435eb77a50843e8f4a9dbb63ae0df84ac330a7f1e446e052d44dd2c41fa"
     },
     {
       "path": "packages/local-runtime/src/sqlite-snapshot-cache.ts",
@@ -1900,7 +1920,7 @@
     },
     {
       "path": "packages/local-runtime/src/sqlite-snapshot-seed.test.ts",
-      "sha256": "8f9d4205163bd48c9bb336d8ae4dc04be284eaf957ebb97458b72a8dbd2b5d73"
+      "sha256": "430f135117ed6d4019ce5e3a8815f8833c87bf2ba619abfe946b70ce9fe4f742"
     },
     {
       "path": "packages/local-runtime/src/sqlite-work-item-index.test.ts",
@@ -1980,7 +2000,7 @@
     },
     {
       "path": "packages/ui/package.json",
-      "sha256": "b7b639f7d0f7f5fcb94fac4f4845e811f470102b35b4370f86e7c28ba9e5ec18"
+      "sha256": "c76d5b424a7d65b197f07a3c7031277c130daae3bd2b72f3592212a45aa5cc79"
     },
     {
       "path": "packages/ui/src/DashboardHeader.test.mjs",
@@ -2064,7 +2084,7 @@
     },
     {
       "path": "tests/e2e/package.json",
-      "sha256": "22a98f7809edf19e35711dd14fc1b0c6722c0089b425394bbffdc4dc956f8032"
+      "sha256": "e065780a87081a3c176355e2691c6b7c26f4e1328cbfc7b6f262440b7e23346a"
     },
     {
       "path": "tests/e2e/playwright.config.ts",