nodal-agents 0.8.8 → 0.8.9

package/cli.js

@@ -11205,7 +11205,7 @@ var init_types2 = __esm({
 
 // ../../packages/shared/src/enums.ts
 import { z as z2 } from "zod";
-var JOB_CHANNELS, JobChannelSchema, JOB_STATUSES, JobStatusSchema, TASK_STATUSES, TaskStatusSchema, TASK_PRIORITIES, TaskPrioritySchema, AGENT_ROLES, AgentRoleSchema, ORCHESTRATOR_MODES, OrchestratorModeSchema, CONNECTOR_AUTH_TYPES, ConnectorAuthTypeSchema, APPROVAL_STATUSES, ApprovalStatusSchema, APPROVAL_RULE_ACTIONS, ApprovalRuleActionSchema, MEMORY_CATEGORIES, MemoryCategorySchema, MEMORY_SOURCES, MemorySourceSchema, MEMORY_LAYERS, MemoryLayerSchema, SCHEDULE_TYPES, ScheduleTypeSchema, SCHEDULE_LAST_STATUSES, ScheduleLastStatusSchema, ENTITY_MEMBER_ROLES, EntityMemberRoleSchema, ENTITY_INDUSTRIES, EntityIndustrySchema, OPERATION_RISK_LEVELS, OperationRiskLevelSchema, MCP_TRANSPORTS, McpTransportSchema;
+var JOB_CHANNELS, JobChannelSchema, JOB_STATUSES, JobStatusSchema, TASK_STATUSES, TaskStatusSchema, TASK_PRIORITIES, TaskPrioritySchema, AGENT_ROLES, AgentRoleSchema, ORCHESTRATOR_MODES, OrchestratorModeSchema, CONNECTOR_AUTH_TYPES, ConnectorAuthTypeSchema, APPROVAL_STATUSES, ApprovalStatusSchema, APPROVAL_RULE_ACTIONS, ApprovalRuleActionSchema, MEMORY_CATEGORIES, MemoryCategorySchema, MEMORY_SOURCES, MemorySourceSchema, MEMORY_LAYERS, MemoryLayerSchema, SCHEDULE_TYPES, ScheduleTypeSchema, SCHEDULE_LAST_STATUSES, ScheduleLastStatusSchema, ENTITY_MEMBER_ROLES, EntityMemberRoleSchema, ENTITY_INDUSTRIES, EntityIndustrySchema, OPERATION_RISK_LEVELS, OperationRiskLevelSchema, TOOL_CARDS, ToolCardSchema, MCP_TRANSPORTS, McpTransportSchema;
 var init_enums = __esm({
   "../../packages/shared/src/enums.ts"() {
     "use strict";
@@ -11270,56 +11270,258 @@ var init_enums = __esm({
     EntityIndustrySchema = z2.enum(ENTITY_INDUSTRIES);
     OPERATION_RISK_LEVELS = ["read", "write", "destructive"];
     OperationRiskLevelSchema = z2.enum(OPERATION_RISK_LEVELS);
+    TOOL_CARDS = [
+      "text",
+      "read",
+      "search",
+      "files",
+      "table",
+      "terminal",
+      "sent",
+      "checks",
+      "question",
+      "delegation",
+      "generic"
+    ];
+    ToolCardSchema = z2.enum(TOOL_CARDS);
     MCP_TRANSPORTS = ["http", "stdio"];
     McpTransportSchema = z2.enum(MCP_TRANSPORTS);
   }
 });
 
-// ../../packages/shared/src/ids.ts
+// ../../packages/shared/src/tool-cards.ts
 import { z as z3 } from "zod";
+var CARD_TEXT_MAX, CARD_EXCERPT_MAX, CARD_LABEL_MAX, CARD_ITEMS_MAX, CARD_ROWS_MAX, CARD_COLS_MAX, CARD_CELL_MAX, text2, TextCardSchema, ReadCardSchema, SearchCardSchema, TableEntrySchema, FilesCardSchema, TableCardSchema, TerminalCardSchema, SentCardSchema, ChecksCardSchema, DelegationCardSchema, QuestionCardSchema, GenericCardSchema, ToolCardPayloadSchema, CARDS_NEEDING_PRESENTER;
+var init_tool_cards = __esm({
+  "../../packages/shared/src/tool-cards.ts"() {
+    "use strict";
+    init_enums();
+    CARD_TEXT_MAX = 4e3;
+    CARD_EXCERPT_MAX = 2e3;
+    CARD_LABEL_MAX = 400;
+    CARD_ITEMS_MAX = 50;
+    CARD_ROWS_MAX = 50;
+    CARD_COLS_MAX = 20;
+    CARD_CELL_MAX = 200;
+    text2 = (max2) => z3.string().max(max2);
+    TextCardSchema = z3.object({
+      card: z3.literal("text"),
+      text: text2(CARD_TEXT_MAX),
+      /**
+       * Présent et vrai UNIQUEMENT quand ce texte est la raison d'un ÉCHEC posé
+       * sous une carte structurée (`failureText`). Jamais `false` : un succès n'a
+       * pas ce champ. C'est ce discriminant que `presentToolResult` exige pour
+       * admettre un `text` là où une autre carte était déclarée (revue passe 14).
+       */
+      failure: z3.literal(true).optional(),
+      /** Le texte a été coupé au plafond — absent quand il est entier. */
+      truncated: z3.boolean().optional()
+    });
+    ReadCardSchema = z3.object({
+      card: z3.literal("read"),
+      /** Chemin ou nom de la chose lue ; null quand la sortie ne le porte pas. */
+      path: z3.string().nullable(),
+      excerpt: text2(CARD_EXCERPT_MAX),
+      /** Longueur du contenu lu, en caractères — l'extrait en montre une partie. */
+      chars: z3.number().int().nonnegative(),
+      truncated: z3.boolean(),
+      /** Nombre de lignes, paragraphes ou diapositives, selon la nature du document. */
+      sections: z3.number().int().nonnegative().optional()
+    });
+    SearchCardSchema = z3.object({
+      card: z3.literal("search"),
+      query: text2(CARD_LABEL_MAX),
+      hits: z3.array(
+        z3.object({
+          title: text2(CARD_LABEL_MAX),
+          /** URL, chemin, cellule, identifiant — ce qui permet d'y retourner. */
+          ref: text2(CARD_LABEL_MAX).optional(),
+          snippet: text2(CARD_LABEL_MAX).optional()
+        })
+      ).max(CARD_ITEMS_MAX),
+      total: z3.number().int().nonnegative(),
+      truncated: z3.boolean()
+    });
+    TableEntrySchema = z3.object({
+      name: text2(CARD_LABEL_MAX).optional(),
+      columns: z3.array(text2(CARD_CELL_MAX)).max(CARD_COLS_MAX),
+      /**
+       * `columns` : les colonnes ci-dessus SONT l'en-tête. `unknown` :
+       * personne ne sait si la première ligne est un en-tête (un classeur lu
+       * tel quel) — le rendu ne le devine pas, il le dit ou le demande (P8).
+       */
+      header: z3.enum(["columns", "unknown"]),
+      rows: z3.array(z3.array(z3.union([text2(CARD_CELL_MAX), z3.number(), z3.null()])).max(CARD_COLS_MAX)).max(CARD_ROWS_MAX),
+      /** Nombre de lignes réel — `rows` en montre au plus CARD_ROWS_MAX. */
+      total: z3.number().int().nonnegative(),
+      truncated: z3.boolean(),
+      /** Au moins une cellule a été coupée au plafond CARD_CELL_MAX. */
+      clipped: z3.boolean(),
+      /**
+       * Nombre de colonnes réel — la table en montre au plus CARD_COLS_MAX. Absent
+       * sur les lignes écrites avant ce plafond : l'écran ne dit alors rien de la
+       * largeur, il ne la devine pas.
+       */
+      columnsTotal: z3.number().int().nonnegative().optional()
+    });
+    FilesCardSchema = z3.object({
+      card: z3.literal("files"),
+      files: z3.array(
+        z3.object({
+          path: text2(CARD_LABEL_MAX),
+          action: z3.enum(["created", "modified", "written", "listed"]),
+          bytes: z3.number().int().nonnegative().optional(),
+          /** Ce que l'outil dit de ce fichier (« 3 lignes ajoutées · feuille Data »). */
+          detail: text2(CARD_LABEL_MAX).optional(),
+          /**
+           * P12 — ce que le fichier CONTIENT maintenant, quand l'outil le sait :
+           * les premières lignes de la feuille qu'il vient d'écrire. Même forme
+           * qu'une table, donc mêmes plafonds et même rendu. Absent partout où
+           * l'outil n'a pas de tableau à montrer (un `.docx`, une liste de
+           * fichiers) — l'écran ne le fabrique jamais.
+           */
+          preview: TableEntrySchema.optional(),
+          /**
+           * P12 — la clé canonique du livrable que ce fichier EST, exactement
+           * celle sous laquelle `job_deliverable_verification_state` range son
+           * état : la clé du chemin rebasé sur la racine LEXICALE de l'espace
+           * de travail, pas celle du chemin réel (revue Codex PR #46, passe 46 :
+           * sous une jonction, `projectKey(realpath)` ne retrouvait aucune
+           * ligne). Écrite par l'outil, qui seul sait où il a écrit ; l'écran
+           * s'en sert pour retrouver l'état de vérification du document, jamais
+           * pour l'afficher. Absente ⇒ l'écran ne dit rien de la vérification,
+           * il n'en invente pas (invariant #4).
+           */
+          deliverableKey: text2(CARD_LABEL_MAX).optional()
+        })
+      ).max(CARD_ITEMS_MAX),
+      total: z3.number().int().nonnegative(),
+      truncated: z3.boolean()
+    });
+    TableCardSchema = z3.object({
+      card: z3.literal("table"),
+      tables: z3.array(TableEntrySchema).min(1)
+    });
+    TerminalCardSchema = z3.object({
+      card: z3.literal("terminal"),
+      command: text2(CARD_EXCERPT_MAX),
+      exitCode: z3.number().int().nullable(),
+      timedOut: z3.boolean(),
+      stdoutTail: text2(CARD_EXCERPT_MAX),
+      /** La sortie était plus longue que ce qui est gardé — la fin est là, pas le début. */
+      stdoutTruncated: z3.boolean(),
+      stderrTail: text2(CARD_EXCERPT_MAX),
+      stderrTruncated: z3.boolean(),
+      cwd: text2(CARD_LABEL_MAX).optional()
+    });
+    SentCardSchema = z3.object({
+      card: z3.literal("sent"),
+      channel: text2(CARD_LABEL_MAX),
+      kind: z3.enum(["message", "file", "image", "video", "audio", "voice", "dashboard"]),
+      /** Le destinataire tel que l'outil le connaît (chat, salon), s'il le sait. */
+      target: text2(CARD_LABEL_MAX).optional(),
+      filename: text2(CARD_LABEL_MAX).optional(),
+      bytes: z3.number().int().nonnegative().optional()
+    });
+    ChecksCardSchema = z3.object({
+      card: z3.literal("checks"),
+      verdict: z3.enum(["pass", "fail"]),
+      summary: text2(CARD_TEXT_MAX),
+      items: z3.array(
+        z3.object({
+          label: text2(CARD_LABEL_MAX),
+          ok: z3.boolean(),
+          ref: text2(CARD_LABEL_MAX).optional(),
+          severity: text2(CARD_LABEL_MAX).optional()
+        })
+      ).max(CARD_ITEMS_MAX),
+      total: z3.number().int().nonnegative()
+    });
+    DelegationCardSchema = z3.object({
+      card: z3.literal("delegation"),
+      /** Qui a travaillé : un agent, un fournisseur de CLI. */
+      to: text2(CARD_LABEL_MAX),
+      task: text2(CARD_EXCERPT_MAX),
+      ok: z3.boolean(),
+      resultText: text2(CARD_TEXT_MAX).nullable(),
+      error: text2(CARD_LABEL_MAX).nullable(),
+      durationMs: z3.number().int().nonnegative().nullable(),
+      costUsd: z3.number().nullable(),
+      sessionId: text2(CARD_LABEL_MAX).nullable().optional()
+    });
+    QuestionCardSchema = z3.object({
+      card: z3.literal("question"),
+      prompt: text2(CARD_TEXT_MAX),
+      options: z3.array(text2(CARD_LABEL_MAX)).optional(),
+      answer: text2(CARD_LABEL_MAX).nullable().optional()
+    });
+    GenericCardSchema = z3.object({
+      card: z3.literal("generic")
+    });
+    ToolCardPayloadSchema = z3.discriminatedUnion("card", [
+      TextCardSchema,
+      ReadCardSchema,
+      SearchCardSchema,
+      FilesCardSchema,
+      TableCardSchema,
+      TerminalCardSchema,
+      SentCardSchema,
+      ChecksCardSchema,
+      DelegationCardSchema,
+      QuestionCardSchema,
+      GenericCardSchema
+    ]);
+    CARDS_NEEDING_PRESENTER = TOOL_CARDS.filter(
+      (c) => c !== "text" && c !== "generic"
+    );
+  }
+});
+
+// ../../packages/shared/src/ids.ts
+import { z as z4 } from "zod";
 var EntityIdSchema, UserIdSchema, AgentIdSchema, JobIdSchema, TaskIdSchema, ConnectorIdSchema, SkillIdSchema, ToolCallIdSchema, ApprovalRequestIdSchema, ApprovalRuleIdSchema, MemoryIdSchema, WebhookTriggerIdSchema, ScheduleIdSchema, McpServerIdSchema, PluginIdSchema, LlmKeyIdSchema;
 var init_ids = __esm({
   "../../packages/shared/src/ids.ts"() {
     "use strict";
-    EntityIdSchema = z3.string().guid().brand();
-    UserIdSchema = z3.string().guid().brand();
-    AgentIdSchema = z3.string().guid().brand();
-    JobIdSchema = z3.string().guid().brand();
-    TaskIdSchema = z3.string().guid().brand();
-    ConnectorIdSchema = z3.string().guid().brand();
-    SkillIdSchema = z3.string().guid().brand();
-    ToolCallIdSchema = z3.string().guid().brand();
-    ApprovalRequestIdSchema = z3.string().guid().brand();
-    ApprovalRuleIdSchema = z3.string().guid().brand();
-    MemoryIdSchema = z3.string().guid().brand();
-    WebhookTriggerIdSchema = z3.string().guid().brand();
-    ScheduleIdSchema = z3.string().guid().brand();
-    McpServerIdSchema = z3.string().guid().brand();
-    PluginIdSchema = z3.string().guid().brand();
-    LlmKeyIdSchema = z3.string().guid().brand();
+    EntityIdSchema = z4.string().guid().brand();
+    UserIdSchema = z4.string().guid().brand();
+    AgentIdSchema = z4.string().guid().brand();
+    JobIdSchema = z4.string().guid().brand();
+    TaskIdSchema = z4.string().guid().brand();
+    ConnectorIdSchema = z4.string().guid().brand();
+    SkillIdSchema = z4.string().guid().brand();
+    ToolCallIdSchema = z4.string().guid().brand();
+    ApprovalRequestIdSchema = z4.string().guid().brand();
+    ApprovalRuleIdSchema = z4.string().guid().brand();
+    MemoryIdSchema = z4.string().guid().brand();
+    WebhookTriggerIdSchema = z4.string().guid().brand();
+    ScheduleIdSchema = z4.string().guid().brand();
+    McpServerIdSchema = z4.string().guid().brand();
+    PluginIdSchema = z4.string().guid().brand();
+    LlmKeyIdSchema = z4.string().guid().brand();
   }
 });
 
 // ../../packages/shared/src/entities/entity.ts
-import { z as z4 } from "zod";
+import { z as z5 } from "zod";
 var EntitySchema, EntityInsertSchema, EntityMemberSchema, EntityMemberInsertSchema;
 var init_entity2 = __esm({
   "../../packages/shared/src/entities/entity.ts"() {
     "use strict";
     init_enums();
     init_enums();
-    EntitySchema = z4.object({
-      id: z4.string().guid(),
-      user_id: z4.string().guid(),
-      name: z4.string().min(1).max(120),
-      slug: z4.string().min(1).max(80).regex(/^[a-z0-9-]+$/),
-      description: z4.string().max(500).nullable(),
-      icon: z4.string().max(4),
+    EntitySchema = z5.object({
+      id: z5.string().guid(),
+      user_id: z5.string().guid(),
+      name: z5.string().min(1).max(120),
+      slug: z5.string().min(1).max(80).regex(/^[a-z0-9-]+$/),
+      description: z5.string().max(500).nullable(),
+      icon: z5.string().max(4),
       industry: EntityIndustrySchema.nullable(),
-      goal: z4.string().max(1e3).nullable(),
-      mcp_token: z4.string().guid().nullable(),
-      created_at: z4.string().datetime(),
-      updated_at: z4.string().datetime()
+      goal: z5.string().max(1e3).nullable(),
+      mcp_token: z5.string().guid().nullable(),
+      created_at: z5.string().datetime(),
+      updated_at: z5.string().datetime()
     }).strict();
     EntityInsertSchema = EntitySchema.omit({
       id: true,
@@ -11327,17 +11529,17 @@ var init_entity2 = __esm({
       created_at: true,
       updated_at: true
     }).extend({
-      description: z4.string().max(500).nullable().optional(),
-      icon: z4.string().max(4).default("\u{1F3E2}"),
+      description: z5.string().max(500).nullable().optional(),
+      icon: z5.string().max(4).default("\u{1F3E2}"),
       industry: EntityIndustrySchema.nullable().optional(),
-      goal: z4.string().max(1e3).nullable().optional()
+      goal: z5.string().max(1e3).nullable().optional()
     });
-    EntityMemberSchema = z4.object({
-      id: z4.string().guid(),
-      entity_id: z4.string().guid(),
-      user_id: z4.string().guid(),
+    EntityMemberSchema = z5.object({
+      id: z5.string().guid(),
+      entity_id: z5.string().guid(),
+      user_id: z5.string().guid(),
       role: EntityMemberRoleSchema,
-      created_at: z4.string().datetime()
+      created_at: z5.string().datetime()
     }).strict();
     EntityMemberInsertSchema = EntityMemberSchema.omit({
       id: true,
@@ -11349,61 +11551,61 @@ var init_entity2 = __esm({
 });
 
 // ../../packages/shared/src/entities/user.ts
-import { z as z5 } from "zod";
+import { z as z6 } from "zod";
 var UserProfileSchema, UserProfileInsertSchema;
 var init_user = __esm({
   "../../packages/shared/src/entities/user.ts"() {
     "use strict";
-    UserProfileSchema = z5.object({
-      user_id: z5.string().guid(),
-      display_name: z5.string().max(120).nullable(),
-      avatar_url: z5.string().max(500).nullable(),
-      timezone: z5.string().max(80),
-      locale: z5.string().max(10),
-      created_at: z5.string().datetime(),
-      updated_at: z5.string().datetime()
+    UserProfileSchema = z6.object({
+      user_id: z6.string().guid(),
+      display_name: z6.string().max(120).nullable(),
+      avatar_url: z6.string().max(500).nullable(),
+      timezone: z6.string().max(80),
+      locale: z6.string().max(10),
+      created_at: z6.string().datetime(),
+      updated_at: z6.string().datetime()
     }).strict();
     UserProfileInsertSchema = UserProfileSchema.omit({
       created_at: true,
       updated_at: true
     }).extend({
-      display_name: z5.string().max(120).nullable().optional(),
-      avatar_url: z5.string().max(500).nullable().optional(),
-      timezone: z5.string().max(80).default("UTC"),
-      locale: z5.string().max(10).default("en")
+      display_name: z6.string().max(120).nullable().optional(),
+      avatar_url: z6.string().max(500).nullable().optional(),
+      timezone: z6.string().max(80).default("UTC"),
+      locale: z6.string().max(10).default("en")
     });
   }
 });
 
 // ../../packages/shared/src/entities/agent.ts
-import { z as z6 } from "zod";
+import { z as z7 } from "zod";
 var AgentSchema, AgentInsertSchema;
 var init_agent = __esm({
   "../../packages/shared/src/entities/agent.ts"() {
     "use strict";
     init_enums();
-    AgentSchema = z6.object({
-      id: z6.string().guid(),
-      entity_id: z6.string().guid().nullable(),
-      name: z6.string().min(1).max(120),
-      slug: z6.string().min(1).max(80).regex(/^[a-z0-9-]+$/),
-      personality: z6.string().min(1),
-      model: z6.string().min(1),
-      active: z6.boolean(),
-      is_default: z6.boolean(),
+    AgentSchema = z7.object({
+      id: z7.string().guid(),
+      entity_id: z7.string().guid().nullable(),
+      name: z7.string().min(1).max(120),
+      slug: z7.string().min(1).max(80).regex(/^[a-z0-9-]+$/),
+      personality: z7.string().min(1),
+      model: z7.string().min(1),
+      active: z7.boolean(),
+      is_default: z7.boolean(),
       role: AgentRoleSchema,
       orchestrator_mode: OrchestratorModeSchema.nullable(),
-      telegram_bot_token: z6.string().nullable(),
-      telegram_bot_username: z6.string().nullable(),
-      telegram_offset: z6.number().int().nonnegative().nullable(),
-      capabilities: z6.array(z6.string()),
-      task_context_template: z6.string().nullable(),
-      avatar_url: z6.string().nullable(),
-      system_agent: z6.boolean(),
+      telegram_bot_token: z7.string().nullable(),
+      telegram_bot_username: z7.string().nullable(),
+      telegram_offset: z7.number().int().nonnegative().nullable(),
+      capabilities: z7.array(z7.string()),
+      task_context_template: z7.string().nullable(),
+      avatar_url: z7.string().nullable(),
+      system_agent: z7.boolean(),
       // 0 = unlimited per DB comment
-      max_tokens_per_job: z6.number().int().min(0),
-      created_at: z6.string().datetime(),
-      updated_at: z6.string().datetime()
+      max_tokens_per_job: z7.number().int().min(0),
+      created_at: z7.string().datetime(),
+      updated_at: z7.string().datetime()
     }).strict();
     AgentInsertSchema = AgentSchema.omit({
       id: true,
@@ -11413,59 +11615,59 @@ var init_agent = __esm({
       capabilities: true,
       system_agent: true
     }).extend({
-      active: z6.boolean().default(true),
-      is_default: z6.boolean().default(false),
+      active: z7.boolean().default(true),
+      is_default: z7.boolean().default(false),
       role: AgentRoleSchema.default("agent"),
       orchestrator_mode: OrchestratorModeSchema.nullable().optional(),
-      telegram_bot_token: z6.string().nullable().optional(),
-      telegram_bot_username: z6.string().nullable().optional(),
-      task_context_template: z6.string().nullable().optional(),
-      avatar_url: z6.string().nullable().optional(),
-      max_tokens_per_job: z6.number().int().min(0).max(5e5).default(0)
+      telegram_bot_token: z7.string().nullable().optional(),
+      telegram_bot_username: z7.string().nullable().optional(),
+      task_context_template: z7.string().nullable().optional(),
+      avatar_url: z7.string().nullable().optional(),
+      max_tokens_per_job: z7.number().int().min(0).max(5e5).default(0)
     });
   }
 });
 
 // ../../packages/shared/src/entities/job.ts
-import { z as z7 } from "zod";
+import { z as z8 } from "zod";
 var ChainCountSchema, DelegationDepthSchema, AgentJobSchema, AgentJobInsertSchema;
 var init_job = __esm({
   "../../packages/shared/src/entities/job.ts"() {
     "use strict";
     init_enums();
-    ChainCountSchema = z7.number().int().min(0);
-    DelegationDepthSchema = z7.number().int().min(0);
-    AgentJobSchema = z7.object({
-      id: z7.string().guid(),
-      entity_id: z7.string().guid().nullable(),
-      agent_id: z7.string().guid().nullable(),
+    ChainCountSchema = z8.number().int().min(0);
+    DelegationDepthSchema = z8.number().int().min(0);
+    AgentJobSchema = z8.object({
+      id: z8.string().guid(),
+      entity_id: z8.string().guid().nullable(),
+      agent_id: z8.string().guid().nullable(),
       status: JobStatusSchema,
       channel: JobChannelSchema,
-      task: z7.string().min(1),
-      original_task: z7.string().nullable(),
-      chat_id: z7.string().nullable(),
+      task: z8.string().min(1),
+      original_task: z8.string().nullable(),
+      chat_id: z8.string().nullable(),
       // Groups jobs from the same conversational thread (migration 0059) — see
       // apps/runner/src/job/conversation-id.ts for the stamping rule. Null for
       // non-conversational jobs (cron/schedule/webhook with no parent).
-      conversation_id: z7.string().guid().nullable(),
-      system_prompt: z7.string().nullable(),
-      messages: z7.array(z7.record(z7.string(), z7.unknown())),
-      tools_used: z7.array(z7.string()),
-      turn: z7.number().int().min(0),
-      result: z7.string().nullable(),
-      error: z7.string().nullable(),
+      conversation_id: z8.string().guid().nullable(),
+      system_prompt: z8.string().nullable(),
+      messages: z8.array(z8.record(z8.string(), z8.unknown())),
+      tools_used: z8.array(z8.string()),
+      turn: z8.number().int().min(0),
+      result: z8.string().nullable(),
+      error: z8.string().nullable(),
       chain_count: ChainCountSchema,
-      request_id: z7.string().nullable(),
-      parent_job_id: z7.string().guid().nullable(),
-      parent_request_id: z7.string().nullable(),
-      total_duration_ms: z7.number().int().min(0),
-      input_tokens: z7.number().int().min(0),
-      output_tokens: z7.number().int().min(0),
+      request_id: z8.string().nullable(),
+      parent_job_id: z8.string().guid().nullable(),
+      parent_request_id: z8.string().nullable(),
+      total_duration_ms: z8.number().int().min(0),
+      input_tokens: z8.number().int().min(0),
+      output_tokens: z8.number().int().min(0),
       delegation_depth: DelegationDepthSchema,
-      pending_delegation: z7.record(z7.string(), z7.unknown()).nullable(),
-      completed_at: z7.string().datetime().nullable(),
-      created_at: z7.string().datetime(),
-      updated_at: z7.string().datetime()
+      pending_delegation: z8.record(z8.string(), z8.unknown()).nullable(),
+      completed_at: z8.string().datetime().nullable(),
+      created_at: z8.string().datetime(),
+      updated_at: z8.string().datetime()
     }).strict();
     AgentJobInsertSchema = AgentJobSchema.omit({
       id: true,
@@ -11486,12 +11688,12 @@ var init_job = __esm({
       parent_request_id: true
     }).extend({
       status: JobStatusSchema.default("pending"),
-      original_task: z7.string().nullable().optional(),
-      chat_id: z7.string().nullable().optional(),
-      conversation_id: z7.string().guid().nullable().optional(),
-      system_prompt: z7.string().nullable().optional(),
-      request_id: z7.string().nullable().optional(),
-      parent_job_id: z7.string().guid().nullable().optional()
+      original_task: z8.string().nullable().optional(),
+      chat_id: z8.string().nullable().optional(),
+      conversation_id: z8.string().guid().nullable().optional(),
+      system_prompt: z8.string().nullable().optional(),
+      request_id: z8.string().nullable().optional(),
+      parent_job_id: z8.string().guid().nullable().optional()
     });
   }
 });
@@ -11529,37 +11731,37 @@ var init_job_classification = __esm({
 });
 
 // ../../packages/shared/src/entities/task.ts
-import { z as z8 } from "zod";
+import { z as z9 } from "zod";
 var TaskDescriptionSchema, TaskTitleSchema, AgentTaskSchema, AgentTaskInsertSchema;
 var init_task = __esm({
   "../../packages/shared/src/entities/task.ts"() {
     "use strict";
     init_enums();
-    TaskDescriptionSchema = z8.string().max(2e3).nullable();
-    TaskTitleSchema = z8.string().min(1).max(200);
-    AgentTaskSchema = z8.object({
-      id: z8.string().guid(),
-      entity_id: z8.string().guid(),
-      orchestrator_id: z8.string().guid(),
+    TaskDescriptionSchema = z9.string().max(2e3).nullable();
+    TaskTitleSchema = z9.string().min(1).max(200);
+    AgentTaskSchema = z9.object({
+      id: z9.string().guid(),
+      entity_id: z9.string().guid(),
+      orchestrator_id: z9.string().guid(),
       title: TaskTitleSchema,
       description: TaskDescriptionSchema,
       status: TaskStatusSchema,
       priority: TaskPrioritySchema,
-      job_id: z8.string().guid().nullable(),
-      result: z8.string().nullable(),
-      created_by_agent_id: z8.string().guid().nullable(),
-      assigned_agent_id: z8.string().guid().nullable(),
-      input_tokens: z8.number().int().min(0),
-      output_tokens: z8.number().int().min(0),
-      cost_usd: z8.number().min(0),
+      job_id: z9.string().guid().nullable(),
+      result: z9.string().nullable(),
+      created_by_agent_id: z9.string().guid().nullable(),
+      assigned_agent_id: z9.string().guid().nullable(),
+      input_tokens: z9.number().int().min(0),
+      output_tokens: z9.number().int().min(0),
+      cost_usd: z9.number().min(0),
       // Array of task UUIDs this task depends on — all must be 'done' before this runs
-      depends_on: z8.array(z8.string().guid()),
-      context: z8.record(z8.string(), z8.unknown()),
-      root_job_id: z8.string().guid().nullable(),
-      locked_at: z8.string().datetime().nullable(),
-      locked_by: z8.string().nullable(),
-      created_at: z8.string().datetime(),
-      updated_at: z8.string().datetime()
+      depends_on: z9.array(z9.string().guid()),
+      context: z9.record(z9.string(), z9.unknown()),
+      root_job_id: z9.string().guid().nullable(),
+      locked_at: z9.string().datetime().nullable(),
+      locked_by: z9.string().nullable(),
+      created_at: z9.string().datetime(),
+      updated_at: z9.string().datetime()
     }).strict();
     AgentTaskInsertSchema = AgentTaskSchema.omit({
       id: true,
@@ -11581,15 +11783,15 @@ var init_task = __esm({
       status: TaskStatusSchema.default("todo"),
       priority: TaskPrioritySchema.default("medium"),
       description: TaskDescriptionSchema.optional(),
-      depends_on: z8.array(z8.string().guid()).default([]),
-      context: z8.record(z8.string(), z8.unknown()).default({}),
-      root_job_id: z8.string().guid().nullable().optional()
+      depends_on: z9.array(z9.string().guid()).default([]),
+      context: z9.record(z9.string(), z9.unknown()).default({}),
+      root_job_id: z9.string().guid().nullable().optional()
     });
   }
 });
 
 // ../../packages/shared/src/entities/credential.ts
-import { z as z9 } from "zod";
+import { z as z10 } from "zod";
 var CREDENTIAL_TYPES, CredentialSchema, GoogleOauthPayloadSchema;
 var init_credential = __esm({
   "../../packages/shared/src/entities/credential.ts"() {
@@ -11600,119 +11802,119 @@ var init_credential = __esm({
       "airtable-oauth",
       "microsoft-oauth"
     ];
-    CredentialSchema = z9.object({
-      id: z9.string().guid(),
-      owner_user_id: z9.string().guid(),
-      name: z9.string().min(1),
-      type: z9.enum(CREDENTIAL_TYPES),
-      payload: z9.string(),
+    CredentialSchema = z10.object({
+      id: z10.string().guid(),
+      owner_user_id: z10.string().guid(),
+      name: z10.string().min(1),
+      type: z10.enum(CREDENTIAL_TYPES),
+      payload: z10.string(),
       // encrypted blob; never decoded at this layer
-      created_at: z9.date().nullable(),
-      updated_at: z9.date().nullable()
+      created_at: z10.date().nullable(),
+      updated_at: z10.date().nullable()
     });
-    GoogleOauthPayloadSchema = z9.object({
-      clientId: z9.string(),
-      clientSecret: z9.string(),
-      refreshToken: z9.string().nullable(),
-      accessToken: z9.string(),
-      expiresAt: z9.string().nullable(),
+    GoogleOauthPayloadSchema = z10.object({
+      clientId: z10.string(),
+      clientSecret: z10.string(),
+      refreshToken: z10.string().nullable(),
+      accessToken: z10.string(),
+      expiresAt: z10.string().nullable(),
       // ISO 8601
-      scopes: z9.string(),
+      scopes: z10.string(),
       // space-separated
-      accountName: z9.string(),
-      tokenUrl: z9.string().url()
+      accountName: z10.string(),
+      tokenUrl: z10.string().url()
     });
   }
 });
 
 // ../../packages/shared/src/entities/connector.ts
-import { z as z10 } from "zod";
+import { z as z11 } from "zod";
 var ConnectorSchema, ConnectorInsertSchema;
 var init_connector = __esm({
   "../../packages/shared/src/entities/connector.ts"() {
     "use strict";
     init_enums();
-    ConnectorSchema = z10.object({
-      id: z10.string().guid(),
-      entity_id: z10.string().guid().nullable(),
-      name: z10.string().min(1).max(120),
-      slug: z10.string().min(1).max(80).regex(/^[a-z0-9-]+$/),
-      base_url: z10.string().nullable(),
+    ConnectorSchema = z11.object({
+      id: z11.string().guid(),
+      entity_id: z11.string().guid().nullable(),
+      name: z11.string().min(1).max(120),
+      slug: z11.string().min(1).max(80).regex(/^[a-z0-9-]+$/),
+      base_url: z11.string().nullable(),
       // audit#2026-07-07 SEC-5: this comment used to claim pgp_sym_encrypt (pgcrypto),
       // which is not used anywhere. Real encryption is application-level AES-256-GCM
       // via @nodal-agents/secrets before the value ever reaches the DB; raw value never returned.
-      api_key: z10.string().nullable(),
-      active: z10.boolean(),
+      api_key: z11.string().nullable(),
+      active: z11.boolean(),
       auth_type: ConnectorAuthTypeSchema,
       // FK to credentials table — null for api_key connectors
-      credential_id: z10.string().guid().nullable(),
-      created_at: z10.string().datetime(),
-      updated_at: z10.string().datetime()
+      credential_id: z11.string().guid().nullable(),
+      created_at: z11.string().datetime(),
+      updated_at: z11.string().datetime()
     }).strict();
     ConnectorInsertSchema = ConnectorSchema.omit({
       id: true,
       created_at: true,
       updated_at: true
     }).extend({
-      active: z10.boolean().default(true),
+      active: z11.boolean().default(true),
       auth_type: ConnectorAuthTypeSchema.default("api_key"),
-      base_url: z10.string().nullable().optional(),
-      api_key: z10.string().nullable().optional(),
-      credential_id: z10.string().guid().nullable().optional()
+      base_url: z11.string().nullable().optional(),
+      api_key: z11.string().nullable().optional(),
+      credential_id: z11.string().guid().nullable().optional()
     });
   }
 });
 
 // ../../packages/shared/src/entities/tool-call.ts
-import { z as z11 } from "zod";
+import { z as z12 } from "zod";
 var ToolCallSchema, ToolCallInsertSchema;
 var init_tool_call = __esm({
   "../../packages/shared/src/entities/tool-call.ts"() {
     "use strict";
-    ToolCallSchema = z11.object({
-      id: z11.string().guid(),
-      entity_id: z11.string().guid().nullable(),
-      job_id: z11.string().guid().nullable(),
-      tool_name: z11.string().min(1),
-      tool_input: z11.record(z11.string(), z11.unknown()).nullable(),
-      tool_output: z11.string().nullable(),
-      duration_ms: z11.number().int().min(0).nullable(),
-      turn: z11.number().int().min(0).nullable(),
-      created_at: z11.string().datetime()
+    ToolCallSchema = z12.object({
+      id: z12.string().guid(),
+      entity_id: z12.string().guid().nullable(),
+      job_id: z12.string().guid().nullable(),
+      tool_name: z12.string().min(1),
+      tool_input: z12.record(z12.string(), z12.unknown()).nullable(),
+      tool_output: z12.string().nullable(),
+      duration_ms: z12.number().int().min(0).nullable(),
+      turn: z12.number().int().min(0).nullable(),
+      created_at: z12.string().datetime()
     }).strict();
     ToolCallInsertSchema = ToolCallSchema.omit({
       id: true,
       created_at: true
     }).extend({
-      tool_input: z11.record(z11.string(), z11.unknown()).nullable().optional(),
-      tool_output: z11.string().nullable().optional(),
-      duration_ms: z11.number().int().min(0).nullable().optional(),
-      turn: z11.number().int().min(0).nullable().optional()
+      tool_input: z12.record(z12.string(), z12.unknown()).nullable().optional(),
+      tool_output: z12.string().nullable().optional(),
+      duration_ms: z12.number().int().min(0).nullable().optional(),
+      turn: z12.number().int().min(0).nullable().optional()
     });
   }
 });
 
 // ../../packages/shared/src/entities/approval.ts
-import { z as z12 } from "zod";
+import { z as z13 } from "zod";
 var ApprovalRequestSchema, ApprovalRequestInsertSchema, ApprovalRuleSchema, ApprovalRuleInsertSchema;
 var init_approval = __esm({
   "../../packages/shared/src/entities/approval.ts"() {
     "use strict";
     init_enums();
-    ApprovalRequestSchema = z12.object({
-      id: z12.string().guid(),
-      entity_id: z12.string().guid().nullable(),
-      job_id: z12.string().guid(),
-      agent_id: z12.string().guid().nullable(),
-      tool_name: z12.string().min(1),
-      tool_input: z12.record(z12.string(), z12.unknown()),
+    ApprovalRequestSchema = z13.object({
+      id: z13.string().guid(),
+      entity_id: z13.string().guid().nullable(),
+      job_id: z13.string().guid(),
+      agent_id: z13.string().guid().nullable(),
+      tool_name: z13.string().min(1),
+      tool_input: z13.record(z13.string(), z13.unknown()),
       status: ApprovalStatusSchema,
-      requested_at: z12.string().datetime(),
-      resolved_at: z12.string().datetime().nullable(),
-      resolved_by: z12.string().nullable(),
+      requested_at: z13.string().datetime(),
+      resolved_at: z13.string().datetime().nullable(),
+      resolved_by: z13.string().nullable(),
       // default: requested_at + 1 hour
-      expires_at: z12.string().datetime().nullable(),
-      notes: z12.string().nullable()
+      expires_at: z13.string().datetime().nullable(),
+      notes: z13.string().nullable()
     }).strict();
     ApprovalRequestInsertSchema = ApprovalRequestSchema.omit({
       id: true,
@@ -11722,60 +11924,60 @@ var init_approval = __esm({
       expires_at: true
     }).extend({
       status: ApprovalStatusSchema.default("pending"),
-      notes: z12.string().nullable().optional()
+      notes: z13.string().nullable().optional()
     });
-    ApprovalRuleSchema = z12.object({
-      id: z12.string().guid(),
-      entity_id: z12.string().guid().nullable(),
-      agent_id: z12.string().guid().nullable(),
-      tool_name: z12.string().min(1),
+    ApprovalRuleSchema = z13.object({
+      id: z13.string().guid(),
+      entity_id: z13.string().guid().nullable(),
+      agent_id: z13.string().guid().nullable(),
+      tool_name: z13.string().min(1),
       action: ApprovalRuleActionSchema,
-      condition_json: z12.record(z12.string(), z12.unknown()),
-      created_at: z12.string().datetime(),
-      updated_at: z12.string().datetime()
+      condition_json: z13.record(z13.string(), z13.unknown()),
+      created_at: z13.string().datetime(),
+      updated_at: z13.string().datetime()
     }).strict();
     ApprovalRuleInsertSchema = ApprovalRuleSchema.omit({
       id: true,
       created_at: true,
       updated_at: true
     }).extend({
-      agent_id: z12.string().guid().nullable().optional(),
-      condition_json: z12.record(z12.string(), z12.unknown()).default({})
+      agent_id: z13.string().guid().nullable().optional(),
+      condition_json: z13.record(z13.string(), z13.unknown()).default({})
     });
   }
 });
 
 // ../../packages/shared/src/entities/memory.ts
-import { z as z13 } from "zod";
+import { z as z14 } from "zod";
 var ImportanceSchema, AgentMemorySchema, AgentMemoryInsertSchema;
 var init_memory = __esm({
   "../../packages/shared/src/entities/memory.ts"() {
     "use strict";
     init_enums();
-    ImportanceSchema = z13.number().int().min(1).max(5);
-    AgentMemorySchema = z13.object({
-      id: z13.string().guid(),
-      entity_id: z13.string().guid().nullable(),
-      agent_id: z13.string().guid().nullable(),
-      fact: z13.string().min(1),
+    ImportanceSchema = z14.number().int().min(1).max(5);
+    AgentMemorySchema = z14.object({
+      id: z14.string().guid(),
+      entity_id: z14.string().guid().nullable(),
+      agent_id: z14.string().guid().nullable(),
+      fact: z14.string().min(1),
       category: MemoryCategorySchema,
       importance: ImportanceSchema,
       source: MemorySourceSchema,
-      skill_tags: z13.array(z13.string().max(60)),
+      skill_tags: z14.array(z14.string().max(60)),
       memory_layer: MemoryLayerSchema.nullable(),
       // temporal validity window
-      valid_from: z13.string().datetime().nullable(),
-      valid_to: z13.string().datetime().nullable(),
-      fact_hash: z13.string().nullable(),
-      archived: z13.boolean(),
+      valid_from: z14.string().datetime().nullable(),
+      valid_to: z14.string().datetime().nullable(),
+      fact_hash: z14.string().nullable(),
+      archived: z14.boolean(),
       // User override lock (migration 0053) — when true, the curator refuses to
       // re-score importance for this fact. Defaulted so rows/objects predating
       // the column still parse.
-      importance_locked: z13.boolean().default(false),
-      last_accessed_at: z13.string().datetime().nullable(),
-      access_count: z13.number().int().min(0),
-      created_at: z13.string().datetime(),
-      updated_at: z13.string().datetime()
+      importance_locked: z14.boolean().default(false),
+      last_accessed_at: z14.string().datetime().nullable(),
+      access_count: z14.number().int().min(0),
+      created_at: z14.string().datetime(),
+      updated_at: z14.string().datetime()
     }).strict();
     AgentMemoryInsertSchema = AgentMemorySchema.omit({
       id: true,
@@ -11789,35 +11991,35 @@ var init_memory = __esm({
       valid_from: true,
       valid_to: true
     }).extend({
-      agent_id: z13.string().guid().nullable().optional(),
+      agent_id: z14.string().guid().nullable().optional(),
       category: MemoryCategorySchema.default("context"),
       importance: ImportanceSchema.default(3),
       source: MemorySourceSchema.default("manual"),
-      skill_tags: z13.array(z13.string().max(60)).max(20).default([]),
+      skill_tags: z14.array(z14.string().max(60)).max(20).default([]),
       memory_layer: MemoryLayerSchema.nullable().optional()
     });
   }
 });
 
 // ../../packages/shared/src/entities/webhook-trigger.ts
-import { z as z14 } from "zod";
+import { z as z15 } from "zod";
 var WebhookTriggerSchema, WebhookTriggerInsertSchema;
 var init_webhook_trigger = __esm({
   "../../packages/shared/src/entities/webhook-trigger.ts"() {
     "use strict";
-    WebhookTriggerSchema = z14.object({
-      id: z14.string().guid(),
-      entity_id: z14.string().guid().nullable(),
-      agent_id: z14.string().guid().nullable(),
-      name: z14.string().min(1).max(120),
-      slug: z14.string().min(1).max(80).regex(/^[a-z0-9-]+$/),
-      task_template: z14.string().min(1),
-      active: z14.boolean(),
-      secret: z14.string().nullable(),
-      last_triggered_at: z14.string().datetime().nullable(),
-      trigger_count: z14.number().int().min(0),
-      created_at: z14.string().datetime(),
-      updated_at: z14.string().datetime()
+    WebhookTriggerSchema = z15.object({
+      id: z15.string().guid(),
+      entity_id: z15.string().guid().nullable(),
+      agent_id: z15.string().guid().nullable(),
+      name: z15.string().min(1).max(120),
+      slug: z15.string().min(1).max(80).regex(/^[a-z0-9-]+$/),
+      task_template: z15.string().min(1),
+      active: z15.boolean(),
+      secret: z15.string().nullable(),
+      last_triggered_at: z15.string().datetime().nullable(),
+      trigger_count: z15.number().int().min(0),
+      created_at: z15.string().datetime(),
+      updated_at: z15.string().datetime()
     }).strict();
     WebhookTriggerInsertSchema = WebhookTriggerSchema.omit({
       id: true,
@@ -11827,103 +12029,103 @@ var init_webhook_trigger = __esm({
       last_triggered_at: true,
       trigger_count: true
     }).extend({
-      active: z14.boolean().default(true)
+      active: z15.boolean().default(true)
     });
   }
 });
 
 // ../../packages/shared/src/entities/skill.ts
-import { z as z15 } from "zod";
+import { z as z16 } from "zod";
 var SkillOperationSchema, SkillRequiredConfigSchema, AgentSkillSchema, AgentSkillInsertSchema, AgentSkillAssignmentSchema, AgentSkillAssignmentInsertSchema;
 var init_skill = __esm({
   "../../packages/shared/src/entities/skill.ts"() {
     "use strict";
     init_enums();
-    SkillOperationSchema = z15.object({
-      name: z15.string().min(1),
-      slug: z15.string().min(1).regex(/^[a-z0-9-]+$/),
+    SkillOperationSchema = z16.object({
+      name: z16.string().min(1),
+      slug: z16.string().min(1).regex(/^[a-z0-9-]+$/),
       risk: OperationRiskLevelSchema,
-      requires_approval: z15.boolean()
+      requires_approval: z16.boolean()
     }).strict();
-    SkillRequiredConfigSchema = z15.object({
-      label: z15.string().min(1),
-      description: z15.string().min(1),
-      type: z15.enum(["connector_slug", "manual"]),
-      value: z15.string().optional(),
-      critical: z15.boolean()
+    SkillRequiredConfigSchema = z16.object({
+      label: z16.string().min(1),
+      description: z16.string().min(1),
+      type: z16.enum(["connector_slug", "manual"]),
+      value: z16.string().optional(),
+      critical: z16.boolean()
     }).strict();
-    AgentSkillSchema = z15.object({
-      id: z15.string().guid(),
-      entity_id: z15.string().guid().nullable(),
-      name: z15.string().min(1).max(120),
-      slug: z15.string().min(1).max(80).regex(/^[a-z0-9-]+$/),
-      content: z15.string().min(1),
-      active: z15.boolean(),
-      description: z15.string().max(300).nullable(),
-      default_content: z15.string().nullable(),
-      content_overridden: z15.boolean(),
-      required_config: z15.array(SkillRequiredConfigSchema),
-      operations: z15.array(SkillOperationSchema),
-      required_builtins: z15.array(z15.string()),
-      created_at: z15.string().datetime(),
-      updated_at: z15.string().datetime()
+    AgentSkillSchema = z16.object({
+      id: z16.string().guid(),
+      entity_id: z16.string().guid().nullable(),
+      name: z16.string().min(1).max(120),
+      slug: z16.string().min(1).max(80).regex(/^[a-z0-9-]+$/),
+      content: z16.string().min(1),
+      active: z16.boolean(),
+      description: z16.string().max(300).nullable(),
+      default_content: z16.string().nullable(),
+      content_overridden: z16.boolean(),
+      required_config: z16.array(SkillRequiredConfigSchema),
+      operations: z16.array(SkillOperationSchema),
+      required_builtins: z16.array(z16.string()),
+      created_at: z16.string().datetime(),
+      updated_at: z16.string().datetime()
     }).strict();
     AgentSkillInsertSchema = AgentSkillSchema.omit({
       id: true,
       created_at: true,
       updated_at: true
     }).extend({
-      active: z15.boolean().default(true),
-      description: z15.string().max(300).nullable().optional(),
-      default_content: z15.string().nullable().optional(),
-      content_overridden: z15.boolean().default(false),
-      required_config: z15.array(SkillRequiredConfigSchema).default([]),
-      operations: z15.array(SkillOperationSchema).default([]),
-      required_builtins: z15.array(z15.string()).default([])
+      active: z16.boolean().default(true),
+      description: z16.string().max(300).nullable().optional(),
+      default_content: z16.string().nullable().optional(),
+      content_overridden: z16.boolean().default(false),
+      required_config: z16.array(SkillRequiredConfigSchema).default([]),
+      operations: z16.array(SkillOperationSchema).default([]),
+      required_builtins: z16.array(z16.string()).default([])
     });
-    AgentSkillAssignmentSchema = z15.object({
-      id: z15.string().guid(),
-      entity_id: z15.string().guid(),
-      agent_id: z15.string().guid(),
-      skill_id: z15.string().guid(),
-      use_custom_instructions: z15.boolean(),
+    AgentSkillAssignmentSchema = z16.object({
+      id: z16.string().guid(),
+      entity_id: z16.string().guid(),
+      agent_id: z16.string().guid(),
+      skill_id: z16.string().guid(),
+      use_custom_instructions: z16.boolean(),
       // NULL = all operations enabled; [] = none enabled
-      enabled_operations: z15.array(z15.string()).nullable(),
-      created_at: z15.string().datetime()
+      enabled_operations: z16.array(z16.string()).nullable(),
+      created_at: z16.string().datetime()
     }).strict();
     AgentSkillAssignmentInsertSchema = AgentSkillAssignmentSchema.omit({
       id: true,
       created_at: true
     }).extend({
-      use_custom_instructions: z15.boolean().default(false),
-      enabled_operations: z15.array(z15.string()).nullable().optional()
+      use_custom_instructions: z16.boolean().default(false),
+      enabled_operations: z16.array(z16.string()).nullable().optional()
     });
   }
 });
 
 // ../../packages/shared/src/entities/schedule.ts
-import { z as z16 } from "zod";
+import { z as z17 } from "zod";
 var AgentScheduleSchema, AgentScheduleInsertSchema;
 var init_schedule = __esm({
   "../../packages/shared/src/entities/schedule.ts"() {
     "use strict";
     init_enums();
-    AgentScheduleSchema = z16.object({
-      id: z16.string().guid(),
-      entity_id: z16.string().guid().nullable(),
-      agent_id: z16.string().guid(),
+    AgentScheduleSchema = z17.object({
+      id: z17.string().guid(),
+      entity_id: z17.string().guid().nullable(),
+      agent_id: z17.string().guid(),
       type: ScheduleTypeSchema,
-      name: z16.string().min(1).max(120),
-      cron_expr: z16.string().min(1),
-      task: z16.string().nullable(),
-      objectives: z16.string().nullable(),
-      active: z16.boolean(),
-      last_run: z16.string().datetime().nullable(),
-      next_run: z16.string().datetime().nullable(),
+      name: z17.string().min(1).max(120),
+      cron_expr: z17.string().min(1),
+      task: z17.string().nullable(),
+      objectives: z17.string().nullable(),
+      active: z17.boolean(),
+      last_run: z17.string().datetime().nullable(),
+      next_run: z17.string().datetime().nullable(),
       last_status: ScheduleLastStatusSchema.nullable(),
-      chat_id: z16.string().nullable(),
-      created_at: z16.string().datetime(),
-      updated_at: z16.string().datetime()
+      chat_id: z17.string().nullable(),
+      created_at: z17.string().datetime(),
+      updated_at: z17.string().datetime()
     }).strict();
     AgentScheduleInsertSchema = AgentScheduleSchema.omit({
       id: true,
@@ -11934,123 +12136,123 @@ var init_schedule = __esm({
       last_status: true
     }).extend({
       type: ScheduleTypeSchema.default("cron"),
-      active: z16.boolean().default(true),
-      task: z16.string().nullable().optional(),
-      objectives: z16.string().nullable().optional(),
-      chat_id: z16.string().nullable().optional()
+      active: z17.boolean().default(true),
+      task: z17.string().nullable().optional(),
+      objectives: z17.string().nullable().optional(),
+      chat_id: z17.string().nullable().optional()
     });
   }
 });
 
 // ../../packages/shared/src/entities/llm-key.ts
-import { z as z17 } from "zod";
+import { z as z18 } from "zod";
 var EntityLlmKeySchema, EntityLlmKeyInsertSchema;
 var init_llm_key = __esm({
   "../../packages/shared/src/entities/llm-key.ts"() {
     "use strict";
-    EntityLlmKeySchema = z17.object({
-      id: z17.string().guid(),
-      entity_id: z17.string().guid(),
-      provider: z17.string().min(1),
+    EntityLlmKeySchema = z18.object({
+      id: z18.string().guid(),
+      entity_id: z18.string().guid(),
+      provider: z18.string().min(1),
       // api_key stored encrypted in DB; empty string = not yet set
-      api_key: z17.string(),
-      base_url: z17.string().nullable(),
-      nickname: z17.string().max(80).nullable(),
-      is_active: z17.boolean(),
-      created_at: z17.string().datetime(),
-      updated_at: z17.string().datetime()
+      api_key: z18.string(),
+      base_url: z18.string().nullable(),
+      nickname: z18.string().max(80).nullable(),
+      is_active: z18.boolean(),
+      created_at: z18.string().datetime(),
+      updated_at: z18.string().datetime()
     }).strict();
     EntityLlmKeyInsertSchema = EntityLlmKeySchema.omit({
       id: true,
       created_at: true,
       updated_at: true
     }).extend({
-      api_key: z17.string().default(""),
-      base_url: z17.string().nullable().optional(),
-      nickname: z17.string().max(80).nullable().optional(),
-      is_active: z17.boolean().default(true)
+      api_key: z18.string().default(""),
+      base_url: z18.string().nullable().optional(),
+      nickname: z18.string().max(80).nullable().optional(),
+      is_active: z18.boolean().default(true)
     });
   }
 });
 
 // ../../packages/shared/src/entities/channel-binding.ts
-import { z as z18 } from "zod";
+import { z as z19 } from "zod";
 var CHANNELS, ChannelSchema, ChannelBotIdentitySchema, ChannelBindingSchema, ChannelBindingInsertSchema;
 var init_channel_binding = __esm({
   "../../packages/shared/src/entities/channel-binding.ts"() {
     "use strict";
     CHANNELS = ["telegram", "discord", "slack", "whatsapp"];
-    ChannelSchema = z18.enum(CHANNELS);
-    ChannelBotIdentitySchema = z18.object({
-      id: z18.string().optional(),
-      username: z18.string().optional(),
-      displayName: z18.string().optional()
+    ChannelSchema = z19.enum(CHANNELS);
+    ChannelBotIdentitySchema = z19.object({
+      id: z19.string().optional(),
+      username: z19.string().optional(),
+      displayName: z19.string().optional()
     }).strict();
-    ChannelBindingSchema = z18.object({
-      id: z18.string().guid(),
-      entity_id: z18.string().guid().nullable(),
-      agent_id: z18.string().guid(),
+    ChannelBindingSchema = z19.object({
+      id: z19.string().guid(),
+      entity_id: z19.string().guid().nullable(),
+      agent_id: z19.string().guid(),
       channel: ChannelSchema,
       // Opaque ciphertext (or plaintext JSON during the S2 back-fill — see
       // migration 0064). Encryption happens at the writer layer;
       // @nodal-agents/db never imports @nodal-agents/secrets, so this column is
       // untyped text here.
-      credentials: z18.string(),
+      credentials: z19.string(),
       bot_identity: ChannelBotIdentitySchema.nullable(),
-      cursor: z18.string().nullable(),
-      enabled: z18.boolean(),
-      created_at: z18.string().datetime(),
-      updated_at: z18.string().datetime()
+      cursor: z19.string().nullable(),
+      enabled: z19.boolean(),
+      created_at: z19.string().datetime(),
+      updated_at: z19.string().datetime()
     }).strict();
     ChannelBindingInsertSchema = ChannelBindingSchema.omit({
       id: true,
       created_at: true,
       updated_at: true
     }).extend({
-      entity_id: z18.string().guid().nullable().optional(),
+      entity_id: z19.string().guid().nullable().optional(),
       bot_identity: ChannelBotIdentitySchema.nullable().optional(),
-      cursor: z18.string().nullable().optional(),
-      enabled: z18.boolean().default(true)
+      cursor: z19.string().nullable().optional(),
+      enabled: z19.boolean().default(true)
     });
   }
 });
 
 // ../../packages/shared/src/entities/channel-allowed-conversation.ts
-import { z as z19 } from "zod";
+import { z as z20 } from "zod";
 var CONVERSATION_KINDS, ConversationKindSchema, CHANNEL_CONVERSATION_ROLES, ChannelConversationRoleSchema, CHANNEL_CONVERSATION_STATUSES, ChannelConversationStatusSchema, ChannelAllowedConversationSchema, ChannelAllowedConversationInsertSchema;
 var init_channel_allowed_conversation = __esm({
   "../../packages/shared/src/entities/channel-allowed-conversation.ts"() {
     "use strict";
     init_channel_binding();
     CONVERSATION_KINDS = ["private", "group", "channel", "thread"];
-    ConversationKindSchema = z19.enum(CONVERSATION_KINDS);
+    ConversationKindSchema = z20.enum(CONVERSATION_KINDS);
     CHANNEL_CONVERSATION_ROLES = ["owner", "member"];
-    ChannelConversationRoleSchema = z19.enum(CHANNEL_CONVERSATION_ROLES);
+    ChannelConversationRoleSchema = z20.enum(CHANNEL_CONVERSATION_ROLES);
     CHANNEL_CONVERSATION_STATUSES = ["active", "pending"];
-    ChannelConversationStatusSchema = z19.enum(CHANNEL_CONVERSATION_STATUSES);
-    ChannelAllowedConversationSchema = z19.object({
-      id: z19.string().guid(),
-      entity_id: z19.string().guid().nullable(),
-      agent_id: z19.string().guid(),
+    ChannelConversationStatusSchema = z20.enum(CHANNEL_CONVERSATION_STATUSES);
+    ChannelAllowedConversationSchema = z20.object({
+      id: z20.string().guid(),
+      entity_id: z20.string().guid().nullable(),
+      agent_id: z20.string().guid(),
       channel: ChannelSchema,
-      conversation_id: z19.string(),
+      conversation_id: z20.string(),
       kind: ConversationKindSchema,
       role: ChannelConversationRoleSchema,
       status: ChannelConversationStatusSchema,
-      requester_name: z19.string().nullable(),
-      created_at: z19.string().datetime(),
-      updated_at: z19.string().datetime()
+      requester_name: z20.string().nullable(),
+      created_at: z20.string().datetime(),
+      updated_at: z20.string().datetime()
     }).strict();
     ChannelAllowedConversationInsertSchema = ChannelAllowedConversationSchema.omit({
       id: true,
       created_at: true,
       updated_at: true
     }).extend({
-      entity_id: z19.string().guid().nullable().optional(),
+      entity_id: z20.string().guid().nullable().optional(),
       kind: ConversationKindSchema.default("private"),
       role: ChannelConversationRoleSchema.default("member"),
       status: ChannelConversationStatusSchema.default("pending"),
-      requester_name: z19.string().nullable().optional()
+      requester_name: z20.string().nullable().optional()
     });
   }
 });
@@ -12277,24 +12479,24 @@ var init_providers = __esm({
 });
 
 // ../../packages/shared/src/root-agent.ts
-import { z as z20 } from "zod";
+import { z as z21 } from "zod";
 var AutonomyLevelSchema, RootGrantsSchema, INITIAL_AUTO_ROOT_GRANTS;
 var init_root_agent = __esm({
   "../../packages/shared/src/root-agent.ts"() {
     "use strict";
-    AutonomyLevelSchema = z20.enum(["propose_confirm", "destructive_gate", "fully_autonomous"]);
-    RootGrantsSchema = z20.object({
-      createAgent: z20.boolean(),
-      updateAgent: z20.boolean(),
-      attachAgent: z20.boolean(),
-      createSkill: z20.boolean(),
-      updateSkill: z20.boolean(),
-      assignSkill: z20.boolean(),
-      createMcp: z20.boolean(),
-      attachMcp: z20.boolean(),
-      createConnector: z20.boolean(),
-      attachConnector: z20.boolean(),
-      manageSchedules: z20.boolean(),
+    AutonomyLevelSchema = z21.enum(["propose_confirm", "destructive_gate", "fully_autonomous"]);
+    RootGrantsSchema = z21.object({
+      createAgent: z21.boolean(),
+      updateAgent: z21.boolean(),
+      attachAgent: z21.boolean(),
+      createSkill: z21.boolean(),
+      updateSkill: z21.boolean(),
+      assignSkill: z21.boolean(),
+      createMcp: z21.boolean(),
+      attachMcp: z21.boolean(),
+      createConnector: z21.boolean(),
+      attachConnector: z21.boolean(),
+      manageSchedules: z21.boolean(),
       autonomy: AutonomyLevelSchema
     });
     INITIAL_AUTO_ROOT_GRANTS = {
@@ -12405,7 +12607,11 @@ var init_model_catalog = __esm({
             }
           },
           contextWindow: 1048576,
-          pricing: { inputPerMillionUsd: 0.3, outputPerMillionUsd: 1.2 }
+          pricing: {
+            inputPerMillionUsd: 0.3,
+            outputPerMillionUsd: 1.2,
+            cacheReadPerMillionUsd: 0.06
+          }
         },
         {
           modelId: "MiniMax-M2.7",
@@ -12413,7 +12619,11 @@ var init_model_catalog = __esm({
           // Latest M2-series — non-reasoning per MiniMax docs.
           capabilities: { tools: true, forcedToolChoice: false },
           contextWindow: 2e5,
-          pricing: { inputPerMillionUsd: 0.3, outputPerMillionUsd: 1.2 }
+          pricing: {
+            inputPerMillionUsd: 0.3,
+            outputPerMillionUsd: 1.2,
+            cacheReadPerMillionUsd: 0.06
+          }
         },
         {
           modelId: "MiniMax-M2",
@@ -12421,7 +12631,10 @@ var init_model_catalog = __esm({
           // Stable previous-generation baseline — non-reasoning.
           capabilities: { tools: true, forcedToolChoice: false },
           contextWindow: 2e5,
-          pricing: { inputPerMillionUsd: 0.255, outputPerMillionUsd: 1.02 }
+          pricing: {
+            inputPerMillionUsd: 0.255,
+            outputPerMillionUsd: 1.02
+          }
         }
       ],
       // ─── Native Moonshot / Kimi (api.moonshot.ai/v1) ────────────────────────────
@@ -12449,7 +12662,11 @@ var init_model_catalog = __esm({
             reasoningControl: { kind: "onoff", mandatory: true }
           },
           contextWindow: 262144,
-          pricing: { inputPerMillionUsd: 0.95, outputPerMillionUsd: 4 }
+          pricing: {
+            inputPerMillionUsd: 0.95,
+            outputPerMillionUsd: 4,
+            cacheReadPerMillionUsd: 0.16
+          }
         },
         {
           modelId: "kimi-k2.7-code",
@@ -12461,7 +12678,11 @@ var init_model_catalog = __esm({
             reasoningControl: { kind: "onoff", mandatory: true }
           },
           contextWindow: 262144,
-          pricing: { inputPerMillionUsd: 0.7, outputPerMillionUsd: 3.5 }
+          pricing: {
+            inputPerMillionUsd: 0.7,
+            outputPerMillionUsd: 3.5,
+            cacheReadPerMillionUsd: 0.18
+          }
         },
         {
           modelId: "kimi-k3",
@@ -12480,7 +12701,11 @@ var init_model_catalog = __esm({
             reasoningControl: { kind: "effort", levels: ["max"], mandatory: true }
           },
           contextWindow: 1048576,
-          pricing: { inputPerMillionUsd: 3, outputPerMillionUsd: 15 }
+          pricing: {
+            inputPerMillionUsd: 3,
+            outputPerMillionUsd: 15,
+            cacheReadPerMillionUsd: 0.3
+          }
         }
       ],
       // Anthropic — every current Claude supports extended thinking. Auto (no
@@ -12502,7 +12727,12 @@ var init_model_catalog = __esm({
             reasoningControl: { kind: "adaptive-effort", levels: ["low", "medium", "high", "max"] }
           },
           contextWindow: 1e6,
-          pricing: { inputPerMillionUsd: 5, outputPerMillionUsd: 25 }
+          pricing: {
+            inputPerMillionUsd: 5,
+            outputPerMillionUsd: 25,
+            cacheReadPerMillionUsd: 0.5,
+            cacheWritePerMillionUsd: 6.25
+          }
         },
         {
           modelId: "claude-sonnet-5",
@@ -12514,7 +12744,12 @@ var init_model_catalog = __esm({
             reasoningControl: { kind: "adaptive-effort", levels: ["low", "medium", "high", "max"] }
           },
           contextWindow: 1e6,
-          pricing: { inputPerMillionUsd: 2, outputPerMillionUsd: 10 }
+          pricing: {
+            inputPerMillionUsd: 2,
+            outputPerMillionUsd: 10,
+            cacheReadPerMillionUsd: 0.2,
+            cacheWritePerMillionUsd: 2.5
+          }
         },
         {
           modelId: "claude-fable-5",
@@ -12526,7 +12761,12 @@ var init_model_catalog = __esm({
             reasoningControl: { kind: "adaptive-effort", levels: ["low", "medium", "high", "max"] }
           },
           contextWindow: 1e6,
-          pricing: { inputPerMillionUsd: 10, outputPerMillionUsd: 50 }
+          pricing: {
+            inputPerMillionUsd: 10,
+            outputPerMillionUsd: 50,
+            cacheReadPerMillionUsd: 1,
+            cacheWritePerMillionUsd: 12.5
+          }
         },
         {
           modelId: "claude-opus-4-8",
@@ -12538,7 +12778,12 @@ var init_model_catalog = __esm({
             reasoningControl: { kind: "adaptive-effort", levels: ["low", "medium", "high", "max"] }
           },
           contextWindow: 2e5,
-          pricing: { inputPerMillionUsd: 5, outputPerMillionUsd: 25 }
+          pricing: {
+            inputPerMillionUsd: 5,
+            outputPerMillionUsd: 25,
+            cacheReadPerMillionUsd: 0.5,
+            cacheWritePerMillionUsd: 6.25
+          }
         },
         {
           modelId: "claude-sonnet-4-6",
@@ -12550,7 +12795,12 @@ var init_model_catalog = __esm({
             reasoningControl: { kind: "adaptive-effort", levels: ["low", "medium", "high", "max"] }
           },
           contextWindow: 2e5,
-          pricing: { inputPerMillionUsd: 3, outputPerMillionUsd: 15 }
+          pricing: {
+            inputPerMillionUsd: 3,
+            outputPerMillionUsd: 15,
+            cacheReadPerMillionUsd: 0.3,
+            cacheWritePerMillionUsd: 3.75
+          }
         },
         {
           modelId: "claude-haiku-4-5-20251001",
@@ -12565,7 +12815,12 @@ var init_model_catalog = __esm({
             }
           },
           contextWindow: 2e5,
-          pricing: { inputPerMillionUsd: 1, outputPerMillionUsd: 5 }
+          pricing: {
+            inputPerMillionUsd: 1,
+            outputPerMillionUsd: 5,
+            cacheReadPerMillionUsd: 0.1,
+            cacheWritePerMillionUsd: 1.25
+          }
         }
       ],
       // OpenAI — GPT-5 line takes `reasoning_effort`. Auto = today's behavior
@@ -12582,7 +12837,11 @@ var init_model_catalog = __esm({
             reasoningControl: { kind: "effort", levels: ["low", "medium", "high"], mandatory: true }
           },
           contextWindow: 4e5,
-          pricing: { inputPerMillionUsd: 1.25, outputPerMillionUsd: 10 }
+          pricing: {
+            inputPerMillionUsd: 1.25,
+            outputPerMillionUsd: 10,
+            cacheReadPerMillionUsd: 0.125
+          }
         },
         {
           modelId: "gpt-5-mini",
@@ -12594,7 +12853,11 @@ var init_model_catalog = __esm({
             reasoningControl: { kind: "effort", levels: ["low", "medium", "high"], mandatory: true }
           },
           contextWindow: 4e5,
-          pricing: { inputPerMillionUsd: 0.25, outputPerMillionUsd: 2 }
+          pricing: {
+            inputPerMillionUsd: 0.25,
+            outputPerMillionUsd: 2,
+            cacheReadPerMillionUsd: 0.025
+          }
         }
       ],
       // ─── Native Google (generativelanguage.googleapis.com) ──────────────────────
@@ -12634,7 +12897,12 @@ var init_model_catalog = __esm({
             reasoningControl: { kind: "effort", levels: ["low", "medium", "high"], mandatory: true }
           },
           contextWindow: 1048576,
-          pricing: { inputPerMillionUsd: 0.75, outputPerMillionUsd: 3.75 }
+          pricing: {
+            inputPerMillionUsd: 0.75,
+            outputPerMillionUsd: 3.75,
+            cacheReadPerMillionUsd: 0.075,
+            cacheWritePerMillionUsd: 0.0416667
+          }
         },
         {
           modelId: "gemini-3.5-flash",
@@ -12646,7 +12914,12 @@ var init_model_catalog = __esm({
             reasoningControl: { kind: "effort", levels: ["low", "medium", "high"], mandatory: true }
           },
           contextWindow: 1048576,
-          pricing: { inputPerMillionUsd: 1.5, outputPerMillionUsd: 9 }
+          pricing: {
+            inputPerMillionUsd: 1.5,
+            outputPerMillionUsd: 9,
+            cacheReadPerMillionUsd: 0.15,
+            cacheWritePerMillionUsd: 0.0833333
+          }
         },
         {
           modelId: "gemini-3.1-pro-preview",
@@ -12658,7 +12931,12 @@ var init_model_catalog = __esm({
             reasoningControl: { kind: "effort", levels: ["low", "medium", "high"], mandatory: true }
           },
           contextWindow: 1048576,
-          pricing: { inputPerMillionUsd: 2, outputPerMillionUsd: 12 }
+          pricing: {
+            inputPerMillionUsd: 2,
+            outputPerMillionUsd: 12,
+            cacheReadPerMillionUsd: 0.2,
+            cacheWritePerMillionUsd: 0.375
+          }
         }
       ],
       // The two entries below are the catalog's only remaining unpriced models, and
@@ -12706,7 +12984,12 @@ var init_model_catalog = __esm({
             reasoningControl: { kind: "effort", levels: ["low", "medium", "high", "max"] }
           },
           contextWindow: 1e6,
-          pricing: { inputPerMillionUsd: 5, outputPerMillionUsd: 25 }
+          pricing: {
+            inputPerMillionUsd: 5,
+            outputPerMillionUsd: 25,
+            cacheReadPerMillionUsd: 0.5,
+            cacheWritePerMillionUsd: 6.25
+          }
         },
         {
           modelId: "anthropic/claude-opus-5-fast",
@@ -12728,7 +13011,12 @@ var init_model_catalog = __esm({
             reasoningControl: { kind: "effort", levels: ["low", "medium", "high", "max"] }
           },
           contextWindow: 1e6,
-          pricing: { inputPerMillionUsd: 2, outputPerMillionUsd: 10 }
+          pricing: {
+            inputPerMillionUsd: 2,
+            outputPerMillionUsd: 10,
+            cacheReadPerMillionUsd: 0.2,
+            cacheWritePerMillionUsd: 2.5
+          }
         },
         {
           modelId: "anthropic/claude-fable-5",
@@ -12739,7 +13027,12 @@ var init_model_catalog = __esm({
             reasoningControl: { kind: "effort", levels: ["low", "medium", "high", "max"] }
           },
           contextWindow: 1e6,
-          pricing: { inputPerMillionUsd: 10, outputPerMillionUsd: 50 }
+          pricing: {
+            inputPerMillionUsd: 10,
+            outputPerMillionUsd: 50,
+            cacheReadPerMillionUsd: 1,
+            cacheWritePerMillionUsd: 12.5
+          }
         },
         // ─── OpenAI ───────────────────────────────────────────────────────────────
         // OpenAI was absent from the OpenRouter list entirely — not a curation
@@ -12754,7 +13047,12 @@ var init_model_catalog = __esm({
             reasoningControl: { kind: "effort", levels: ["low", "medium", "high", "max"] }
           },
           contextWindow: 105e4,
-          pricing: { inputPerMillionUsd: 0.1, outputPerMillionUsd: 0.6 }
+          pricing: {
+            inputPerMillionUsd: 0.2,
+            outputPerMillionUsd: 1.2,
+            cacheReadPerMillionUsd: 0.02,
+            cacheWritePerMillionUsd: 0.25
+          }
         },
         {
           modelId: "openai/gpt-5.6-luna-pro",
@@ -12765,7 +13063,12 @@ var init_model_catalog = __esm({
             reasoningControl: { kind: "effort", levels: ["low", "medium", "high", "max"] }
           },
           contextWindow: 105e4,
-          pricing: { inputPerMillionUsd: 0.1, outputPerMillionUsd: 0.6 }
+          pricing: {
+            inputPerMillionUsd: 0.2,
+            outputPerMillionUsd: 1.2,
+            cacheReadPerMillionUsd: 0.02,
+            cacheWritePerMillionUsd: 0.25
+          }
         },
         {
           modelId: "openai/gpt-5.6-terra-pro",
@@ -12776,7 +13079,12 @@ var init_model_catalog = __esm({
             reasoningControl: { kind: "effort", levels: ["low", "medium", "high", "max"] }
           },
           contextWindow: 105e4,
-          pricing: { inputPerMillionUsd: 1, outputPerMillionUsd: 6 }
+          pricing: {
+            inputPerMillionUsd: 2,
+            outputPerMillionUsd: 12,
+            cacheReadPerMillionUsd: 0.2,
+            cacheWritePerMillionUsd: 2.5
+          }
         },
         // Anthropic — reasoningControl WITHOUT the `reasoning` flag, on purpose:
         // the flag would flip openrouter.ts's always-on default injection; here
@@ -12791,7 +13099,12 @@ var init_model_catalog = __esm({
             reasoningControl: { kind: "effort", levels: ["low", "medium", "high", "max"] }
           },
           contextWindow: 2e5,
-          pricing: { inputPerMillionUsd: 1, outputPerMillionUsd: 5 }
+          pricing: {
+            inputPerMillionUsd: 1,
+            outputPerMillionUsd: 5,
+            cacheReadPerMillionUsd: 0.1,
+            cacheWritePerMillionUsd: 1.25
+          }
         },
         {
           modelId: "anthropic/claude-opus-4.7",
@@ -12802,7 +13115,12 @@ var init_model_catalog = __esm({
             reasoningControl: { kind: "effort", levels: ["low", "medium", "high", "max"] }
           },
           contextWindow: 1e6,
-          pricing: { inputPerMillionUsd: 5, outputPerMillionUsd: 25 }
+          pricing: {
+            inputPerMillionUsd: 5,
+            outputPerMillionUsd: 25,
+            cacheReadPerMillionUsd: 0.5,
+            cacheWritePerMillionUsd: 6.25
+          }
         },
         {
           modelId: "anthropic/claude-opus-4.7-fast",
@@ -12824,7 +13142,12 @@ var init_model_catalog = __esm({
             reasoningControl: { kind: "effort", levels: ["low", "medium", "high", "max"] }
           },
           contextWindow: 1e6,
-          pricing: { inputPerMillionUsd: 5, outputPerMillionUsd: 25 }
+          pricing: {
+            inputPerMillionUsd: 5,
+            outputPerMillionUsd: 25,
+            cacheReadPerMillionUsd: 0.5,
+            cacheWritePerMillionUsd: 6.25
+          }
         },
         {
           modelId: "anthropic/claude-opus-4.8-fast",
@@ -12846,7 +13169,12 @@ var init_model_catalog = __esm({
             reasoningControl: { kind: "effort", levels: ["low", "medium", "high", "max"] }
           },
           contextWindow: 1e6,
-          pricing: { inputPerMillionUsd: 3, outputPerMillionUsd: 15 }
+          pricing: {
+            inputPerMillionUsd: 3,
+            outputPerMillionUsd: 15,
+            cacheReadPerMillionUsd: 0.3,
+            cacheWritePerMillionUsd: 3.75
+          }
         },
         // DeepSeek
         {
@@ -12854,7 +13182,11 @@ var init_model_catalog = __esm({
           label: "DeepSeek V3.2",
           capabilities: { tools: true, forcedToolChoice: true },
           contextWindow: 131072,
-          pricing: { inputPerMillionUsd: 0.269, outputPerMillionUsd: 0.4 }
+          pricing: {
+            inputPerMillionUsd: 0.269,
+            outputPerMillionUsd: 0.4,
+            cacheReadPerMillionUsd: 0.1345
+          }
         },
         {
           modelId: "deepseek/deepseek-v4-flash",
@@ -12873,7 +13205,11 @@ var init_model_catalog = __esm({
           },
           contextWindow: 1048576,
           providerOrder: ["deepseek"],
-          pricing: { inputPerMillionUsd: 0.14, outputPerMillionUsd: 0.28 }
+          pricing: {
+            inputPerMillionUsd: 0.08246,
+            outputPerMillionUsd: 0.16492,
+            cacheReadPerMillionUsd: 0.016492
+          }
         },
         {
           // Dated snapshot of V4 Flash, and currently the cheapest tool-capable
@@ -12888,7 +13224,11 @@ var init_model_catalog = __esm({
             reasoningControl: { kind: "effort", levels: ["low", "medium", "high", "max"] }
           },
           contextWindow: 1048576,
-          pricing: { inputPerMillionUsd: 0.09, outputPerMillionUsd: 0.18 },
+          pricing: {
+            inputPerMillionUsd: 0.065,
+            outputPerMillionUsd: 0.18,
+            cacheReadPerMillionUsd: 0.016
+          },
           providerOrder: ["deepseek"]
         },
         {
@@ -12904,7 +13244,11 @@ var init_model_catalog = __esm({
           },
           contextWindow: 1048576,
           providerOrder: ["deepseek"],
-          pricing: { inputPerMillionUsd: 0.63168, outputPerMillionUsd: 1.26336 }
+          pricing: {
+            inputPerMillionUsd: 0.778824,
+            outputPerMillionUsd: 1.55765,
+            cacheReadPerMillionUsd: 0.064902
+          }
         },
         // Google — all three are thinking models on OpenRouter (supported_parameters
         // includes "reasoning", verified via openrouter.ai/google/… 2026-07-12).
@@ -12926,7 +13270,12 @@ var init_model_catalog = __esm({
             reasoningControl: { kind: "effort", levels: ["low", "medium", "high", "max"] }
           },
           contextWindow: 1048576,
-          pricing: { inputPerMillionUsd: 0.25, outputPerMillionUsd: 1.5 }
+          pricing: {
+            inputPerMillionUsd: 0.25,
+            outputPerMillionUsd: 1.5,
+            cacheReadPerMillionUsd: 0.025,
+            cacheWritePerMillionUsd: 0.0833333
+          }
         },
         {
           modelId: "google/gemini-3.1-pro-preview",
@@ -12940,7 +13289,12 @@ var init_model_catalog = __esm({
             reasoningControl: { kind: "effort", levels: ["low", "medium", "high", "max"] }
           },
           contextWindow: 1048576,
-          pricing: { inputPerMillionUsd: 2, outputPerMillionUsd: 12 }
+          pricing: {
+            inputPerMillionUsd: 2,
+            outputPerMillionUsd: 12,
+            cacheReadPerMillionUsd: 0.2,
+            cacheWritePerMillionUsd: 0.375
+          }
         },
         {
           modelId: "google/gemini-3.5-flash",
@@ -12954,7 +13308,12 @@ var init_model_catalog = __esm({
             reasoningControl: { kind: "effort", levels: ["low", "medium", "high", "max"] }
           },
           contextWindow: 1048576,
-          pricing: { inputPerMillionUsd: 1.5, outputPerMillionUsd: 9 }
+          pricing: {
+            inputPerMillionUsd: 1.5,
+            outputPerMillionUsd: 9,
+            cacheReadPerMillionUsd: 0.15,
+            cacheWritePerMillionUsd: 0.0833333
+          }
         },
         {
           // Price corrected 2026-08-22 from GET /api/v1/models (0.00000075 /
@@ -12985,7 +13344,12 @@ var init_model_catalog = __esm({
             reasoningControl: { kind: "effort", levels: ["low", "medium", "high"], mandatory: true }
           },
           contextWindow: 1048576,
-          pricing: { inputPerMillionUsd: 0.75, outputPerMillionUsd: 3.75 }
+          pricing: {
+            inputPerMillionUsd: 0.75,
+            outputPerMillionUsd: 3.75,
+            cacheReadPerMillionUsd: 0.075,
+            cacheWritePerMillionUsd: 0.0416667
+          }
         },
         {
           // The OpenRouter twin of the native entry above. forcedToolChoice stays
@@ -13014,14 +13378,23 @@ var init_model_catalog = __esm({
             reasoningControl: { kind: "effort", levels: ["low", "medium", "high"], mandatory: true }
           },
           contextWindow: 1048576,
-          pricing: { inputPerMillionUsd: 0.375, outputPerMillionUsd: 1.875 }
+          pricing: {
+            inputPerMillionUsd: 0.75,
+            outputPerMillionUsd: 3.75,
+            cacheReadPerMillionUsd: 0.075,
+            cacheWritePerMillionUsd: 0.0416667
+          }
         },
         {
           modelId: "google/gemma-4-31b-it",
           label: "Gemma 4 31B-IT",
           capabilities: { tools: true, forcedToolChoice: true },
           contextWindow: 262144,
-          pricing: { inputPerMillionUsd: 0.1, outputPerMillionUsd: 0.34 }
+          pricing: {
+            inputPerMillionUsd: 0.09,
+            outputPerMillionUsd: 0.34,
+            cacheReadPerMillionUsd: 0.05
+          }
         },
         // MiniMax
         {
@@ -13038,7 +13411,11 @@ var init_model_catalog = __esm({
             reasoningControl: { kind: "effort", levels: ["low", "medium", "high", "max"] }
           },
           contextWindow: 1048576,
-          pricing: { inputPerMillionUsd: 0.3, outputPerMillionUsd: 1.2 }
+          pricing: {
+            inputPerMillionUsd: 0.3,
+            outputPerMillionUsd: 1.2,
+            cacheReadPerMillionUsd: 0.06
+          }
         },
         // Z.ai (GLM)
         {
@@ -13061,7 +13438,11 @@ var init_model_catalog = __esm({
             }
           },
           contextWindow: 1048576,
-          pricing: { inputPerMillionUsd: 0.76, outputPerMillionUsd: 2.42 }
+          pricing: {
+            inputPerMillionUsd: 0.966,
+            outputPerMillionUsd: 3.036,
+            cacheReadPerMillionUsd: 0.1932
+          }
         },
         {
           modelId: "z-ai/glm-5.3",
@@ -13083,7 +13464,11 @@ var init_model_catalog = __esm({
             }
           },
           contextWindow: 1048576,
-          pricing: { inputPerMillionUsd: 1.4, outputPerMillionUsd: 4.4 }
+          pricing: {
+            inputPerMillionUsd: 1.4,
+            outputPerMillionUsd: 4.4,
+            cacheReadPerMillionUsd: 0.14
+          }
         },
         {
           modelId: "z-ai/glm-5.3-flash",
@@ -13110,7 +13495,11 @@ var init_model_catalog = __esm({
             }
           },
           contextWindow: 1310720,
-          pricing: { inputPerMillionUsd: 0.075, outputPerMillionUsd: 0.25 }
+          pricing: {
+            inputPerMillionUsd: 0.075,
+            outputPerMillionUsd: 0.25,
+            cacheReadPerMillionUsd: 0.015
+          }
         },
         // Moonshot (Kimi)
         {
@@ -13135,7 +13524,11 @@ var init_model_catalog = __esm({
             }
           },
           contextWindow: 262144,
-          pricing: { inputPerMillionUsd: 0.95, outputPerMillionUsd: 4 }
+          pricing: {
+            inputPerMillionUsd: 0.95,
+            outputPerMillionUsd: 4,
+            cacheReadPerMillionUsd: 0.16
+          }
         },
         {
           modelId: "moonshotai/kimi-k2.7-code",
@@ -13155,7 +13548,11 @@ var init_model_catalog = __esm({
             }
           },
           contextWindow: 262144,
-          pricing: { inputPerMillionUsd: 0.7, outputPerMillionUsd: 3.5 }
+          pricing: {
+            inputPerMillionUsd: 0.66,
+            outputPerMillionUsd: 3.4,
+            cacheReadPerMillionUsd: 0.18
+          }
         },
         // xAI — grok-4.5 verified via OpenRouter /api/v1/models (2026-07-20):
         // 500K context, text+image, tools + tool_choice + reasoning params.
@@ -13176,7 +13573,11 @@ var init_model_catalog = __esm({
             }
           },
           contextWindow: 5e5,
-          pricing: { inputPerMillionUsd: 2, outputPerMillionUsd: 6 }
+          pricing: {
+            inputPerMillionUsd: 2,
+            outputPerMillionUsd: 6,
+            cacheReadPerMillionUsd: 0.3
+          }
         },
         // Qwen — both verified via OpenRouter /api/v1/models (2026-07-20): 1M
         // context, tools + tool_choice + reasoning params (no native
@@ -13206,7 +13607,12 @@ var init_model_catalog = __esm({
             reasoningControl: { kind: "effort", levels: ["low", "medium", "high", "max"] }
           },
           contextWindow: 1048576,
-          pricing: { inputPerMillionUsd: 1.475, outputPerMillionUsd: 4.425 }
+          pricing: {
+            inputPerMillionUsd: 1.475,
+            outputPerMillionUsd: 4.425,
+            cacheReadPerMillionUsd: 0.295,
+            cacheWritePerMillionUsd: 1.84375
+          }
         },
         {
           modelId: "qwen/qwen3.7-plus",
@@ -13217,7 +13623,12 @@ var init_model_catalog = __esm({
             reasoningControl: { kind: "effort", levels: ["low", "medium", "high", "max"] }
           },
           contextWindow: 1048576,
-          pricing: { inputPerMillionUsd: 0.32, outputPerMillionUsd: 1.28 }
+          pricing: {
+            inputPerMillionUsd: 0.32,
+            outputPerMillionUsd: 1.28,
+            cacheReadPerMillionUsd: 0.064,
+            cacheWritePerMillionUsd: 0.4
+          }
         },
         {
           modelId: "moonshotai/kimi-k3",
@@ -13239,7 +13650,11 @@ var init_model_catalog = __esm({
             }
           },
           contextWindow: 1048576,
-          pricing: { inputPerMillionUsd: 3, outputPerMillionUsd: 15 }
+          pricing: {
+            inputPerMillionUsd: 3,
+            outputPerMillionUsd: 15,
+            cacheReadPerMillionUsd: 0.3
+          }
         }
       ]
     };
@@ -13361,24 +13776,252 @@ var init_redact_transcript = __esm({
 });
 
 // ../../packages/shared/src/agent-slug.ts
-import { z as z21 } from "zod";
+import { z as z22 } from "zod";
 var AGENT_SLUG_MAX, AgentSlugSchema;
 var init_agent_slug = __esm({
   "../../packages/shared/src/agent-slug.ts"() {
     "use strict";
     AGENT_SLUG_MAX = 80;
-    AgentSlugSchema = z21.string().min(1).max(AGENT_SLUG_MAX).regex(
+    AgentSlugSchema = z22.string().min(1).max(AGENT_SLUG_MAX).regex(
       /^[a-z0-9][a-z0-9-]*$/,
       "Slug must be lowercase alphanumeric with hyphens, and must not start with a hyphen."
     );
   }
 });
 
+// ../../packages/shared/src/project-key.ts
+var init_project_key = __esm({
+  "../../packages/shared/src/project-key.ts"() {
+    "use strict";
+  }
+});
+
+// ../../packages/shared/src/group-prefix.ts
+var init_group_prefix = __esm({
+  "../../packages/shared/src/group-prefix.ts"() {
+    "use strict";
+  }
+});
+
+// ../../packages/shared/src/project-roots.ts
+var init_project_roots = __esm({
+  "../../packages/shared/src/project-roots.ts"() {
+    "use strict";
+    init_project_key();
+  }
+});
+
+// ../../packages/shared/src/project-subfolder.ts
+var init_project_subfolder = __esm({
+  "../../packages/shared/src/project-subfolder.ts"() {
+    "use strict";
+    init_project_key();
+  }
+});
+
+// ../../packages/shared/src/types/verification.ts
+import { z as z23 } from "zod";
+var DELIVERABLE_TYPES, DeliverableTypeSchema, DECISION_STATUSES, DecisionStatusSchema, ATOMIC_OUTCOMES, AtomicOutcomeSchema, RUN_VERDICTS, RunVerdictSchema, VerifyCommandSchema, VERIFY_COMMANDS_MAX, VerifyCommandsSchema;
+var init_verification = __esm({
+  "../../packages/shared/src/types/verification.ts"() {
+    "use strict";
+    DELIVERABLE_TYPES = [
+      "code_project",
+      "office_file",
+      "document",
+      "outbound_action",
+      "other"
+    ];
+    DeliverableTypeSchema = z23.enum(DELIVERABLE_TYPES);
+    DECISION_STATUSES = [
+      "dirty",
+      "green",
+      "red",
+      "pending_approval",
+      "not_configured",
+      "infra_error"
+    ];
+    DecisionStatusSchema = z23.enum(DECISION_STATUSES);
+    ATOMIC_OUTCOMES = [
+      "prepared",
+      "attempted",
+      "confirmed",
+      "rejected",
+      "outcome_unknown"
+    ];
+    AtomicOutcomeSchema = z23.enum(ATOMIC_OUTCOMES);
+    RUN_VERDICTS = ["green", "red", "infra_error"];
+    RunVerdictSchema = z23.enum(RUN_VERDICTS);
+    VerifyCommandSchema = z23.object({
+      command: z23.string().trim().min(1).max(2e3),
+      timeoutSeconds: z23.number().int().min(1).max(3600)
+    });
+    VERIFY_COMMANDS_MAX = 5;
+    VerifyCommandsSchema = z23.array(VerifyCommandSchema).min(1).max(VERIFY_COMMANDS_MAX);
+  }
+});
+
+// ../../packages/shared/src/verify-command-discovery.ts
+var init_verify_command_discovery = __esm({
+  "../../packages/shared/src/verify-command-discovery.ts"() {
+    "use strict";
+    init_verification();
+  }
+});
+
+// ../../packages/shared/src/verification-manifest.ts
+var K;
+var init_verification_manifest = __esm({
+  "../../packages/shared/src/verification-manifest.ts"() {
+    "use strict";
+    K = new Uint32Array([
+      1116352408,
+      1899447441,
+      3049323471,
+      3921009573,
+      961987163,
+      1508970993,
+      2453635748,
+      2870763221,
+      3624381080,
+      310598401,
+      607225278,
+      1426881987,
+      1925078388,
+      2162078206,
+      2614888103,
+      3248222580,
+      3835390401,
+      4022224774,
+      264347078,
+      604807628,
+      770255983,
+      1249150122,
+      1555081692,
+      1996064986,
+      2554220882,
+      2821834349,
+      2952996808,
+      3210313671,
+      3336571891,
+      3584528711,
+      113926993,
+      338241895,
+      666307205,
+      773529912,
+      1294757372,
+      1396182291,
+      1695183700,
+      1986661051,
+      2177026350,
+      2456956037,
+      2730485921,
+      2820302411,
+      3259730800,
+      3345764771,
+      3516065817,
+      3600352804,
+      4094571909,
+      275423344,
+      430227734,
+      506948616,
+      659060556,
+      883997877,
+      958139571,
+      1322822218,
+      1537002063,
+      1747873779,
+      1955562222,
+      2024104815,
+      2227730452,
+      2361852424,
+      2428436474,
+      2756734187,
+      3204031479,
+      3329325298
+    ]);
+  }
+});
+
+// ../../packages/shared/src/verification-surfaces.ts
+import { z as z24 } from "zod";
+function parseVerificationSurfaces(raw) {
+  const strict = VerificationSurfacesSchema.safeParse(raw);
+  if (strict.success) return strict.data;
+  const src = raw !== null && typeof raw === "object" && !Array.isArray(raw) ? raw : {};
+  const pick = (key) => typeof src[key] === "boolean" ? src[key] : DEFAULT_VERIFICATION_SURFACES[key];
+  return {
+    codeTask: pick("codeTask"),
+    cliRuntime: pick("cliRuntime"),
+    fileOps: pick("fileOps"),
+    shell: pick("shell")
+  };
+}
+var VerificationSurfacesSchema, DEFAULT_VERIFICATION_SURFACES, VERIFICATION_SURFACE_TOOLS;
+var init_verification_surfaces = __esm({
+  "../../packages/shared/src/verification-surfaces.ts"() {
+    "use strict";
+    VerificationSurfacesSchema = z24.object({
+      codeTask: z24.boolean(),
+      cliRuntime: z24.boolean(),
+      fileOps: z24.boolean(),
+      shell: z24.boolean()
+    });
+    DEFAULT_VERIFICATION_SURFACES = Object.freeze({
+      codeTask: true,
+      cliRuntime: true,
+      fileOps: true,
+      shell: true
+    });
+    VERIFICATION_SURFACE_TOOLS = Object.freeze({
+      codeTask: ["code_task"],
+      cliRuntime: [],
+      // Les outils Office ÉCRIVENT des fichiers du workspace (revue Codex PR #46 :
+      // ils contournaient l'intention faute de marqueur) — ce sont des outils
+      // fichiers, sur la même surface. Les lecteurs (`*_read`, `xlsx_find_cells`)
+      // n'y sont pas : ils ne mutent rien.
+      fileOps: [
+        "file_write",
+        "file_edit",
+        "docx_create",
+        "docx_append_paragraphs",
+        "docx_replace_text",
+        "pptx_create",
+        "pptx_append_slides",
+        "pptx_replace_text",
+        "xlsx_set_cell",
+        "xlsx_set_range",
+        "xlsx_append_rows",
+        "xlsx_add_sheet",
+        "xlsx_create",
+        "xlsx_delete_rows",
+        "xlsx_format_range",
+        "xlsx_insert_rows",
+        "xlsx_insert_columns",
+        "xlsx_delete_columns",
+        "xlsx_merge_cells",
+        "xlsx_unmerge_cells",
+        "xlsx_set_column_widths",
+        "xlsx_freeze_panes"
+      ],
+      shell: ["run_command", "run_skill_script"]
+    });
+  }
+});
+
+// ../../packages/shared/src/fragment-diff.ts
+var init_fragment_diff = __esm({
+  "../../packages/shared/src/fragment-diff.ts"() {
+    "use strict";
+  }
+});
+
 // ../../packages/shared/src/index.ts
 var init_src2 = __esm({
   "../../packages/shared/src/index.ts"() {
     "use strict";
     init_enums();
+    init_tool_cards();
     init_ids();
     init_entity2();
     init_user();
@@ -13414,6 +14057,15 @@ var init_src2 = __esm({
     init_redact_transcript();
     init_agent_slug();
     init_catastrophic_command();
+    init_project_key();
+    init_group_prefix();
+    init_project_roots();
+    init_project_subfolder();
+    init_verify_command_discovery();
+    init_verification();
+    init_verification_manifest();
+    init_verification_surfaces();
+    init_fragment_diff();
   }
 });
 
@@ -13551,7 +14203,15 @@ var init_entities = __esm({
          * installe. Verifie au demarrage du serveur ET a chaque appel — couper
          * l'interrupteur coupe les clients deja connectes.
          */
-        mcpServerEnabled: boolean("mcp_server_enabled").notNull().default(false)
+        mcpServerEnabled: boolean("mcp_server_enabled").notNull().default(false),
+        /**
+         * Les surfaces sous vérification (D8, plan « Vérifier & Corriger »,
+         * migration 0091) : jsonb lu par parseVerificationSurfaces() de
+         * @nodal-agents/shared. `'{}'` est VOULU — le défaut « toutes activées »
+         * vit dans le parseur, jamais deviné par un backfill (même leçon que
+         * 0084 : un réglage est un geste, pas un état inventé).
+         */
+        verificationSurfaces: jsonb("verification_surfaces").notNull().default(sql`'{}'::jsonb`)
       },
       (table) => [
         uniqueIndex("entities_mcp_token_idx").on(table.mcpToken),
@@ -13878,15 +14538,23 @@ var init_jobs = __esm({
         originalTask: text("original_task"),
         chatId: text("chat_id"),
         /**
-         * Groups jobs from the same conversational thread for the Jobs page UI
-         * (migration 0059). Purely a reporting/grouping concern — the runtime
-         * execution path (delegation, cron, task-board) never reads this column.
-         * NULL for non-conversational jobs (cron/schedule/webhook with no parent).
-         * Stamped at creation by apps/runner/src/job/conversation-id.ts, reusing
-         * the exact idle-reset session boundary thread-history.ts already uses
-         * for chat continuity — see that file for the gap rule. Delegated/
-         * task-board children inherit their creator's value; nothing else
-         * mutates it after insert.
+         * La conversation dont ce job est un tour (migration 0059, redéfinie par
+         * 0094 — P6). Ce n'est plus un uuid frappé à la volée : depuis P6, la
+         * valeur RÉFÉRENCE une ligne `conversations`, et l'identité d'un fil est
+         * « une conversation par chat, jusqu'à ce que l'utilisateur en ouvre une
+         * autre » (`/new` dans un canal, le « + » du dashboard) — plus la règle du
+         * SILENCE de 4 h, qui ne survit que comme budget de relecture dans
+         * thread-history.ts. Posée à la création par
+         * apps/runner/src/job/conversation-id.ts ; les enfants (délégation,
+         * task-board) héritent de la valeur de leur créateur ; rien d'autre ne la
+         * mute après l'insert. NULL pour un job non conversationnel (cron,
+         * webhook, sans parent).
+         *
+         * PAS DE CLÉ ÉTRANGÈRE, délibérément (0094) : 95 jobs de la base dev
+         * portent un uuid dont la conversation a été supprimée par l'utilisateur,
+         * et une FK les ramènerait à NULL — la page Runs perdrait le seul
+         * regroupement que cette colonne sert à faire. L'identité vaut pour
+         * l'avenir ; un ancien uuid orphelin reste tel quel.
          */
         conversationId: uuid("conversation_id"),
         /**
@@ -13971,6 +14639,39 @@ var init_jobs = __esm({
          */
         lastFailedDelegationSlug: text("last_failed_delegation_slug"),
         pendingDelegation: jsonb("pending_delegation"),
+        /**
+         * Marks a root job as being finalized RIGHT NOW by the delivery cron
+         * (migration 0090, plan « Vérifier & Corriger »). Set at claim time (the
+         * same instant the cron reserves the job for its finalization phase, in
+         * place of the earlier read-then-write race), cleared when finalization
+         * ends (success or failure). Lets a second concurrent tick recognize a
+         * job already being finalized and skip it, instead of racing the first
+         * tick to the terminal write. NULL outside a finalization window.
+         */
+        finalizingAt: timestamp("finalizing_at", { withTimezone: true }),
+        /**
+         * La trace FIGÉE des surfaces décochées au moment où ce run a tourné (D8,
+         * migration 0091) — un ensemble de clés VerificationSurfaceKey, chacune
+         * appendée une fois par le helper d'intention. Le détail d'un run dit
+         * « surface hors vérification » depuis CETTE colonne, jamais depuis le
+         * réglage courant de l'espace : si l'owner recoche demain, les runs d'hier
+         * doivent toujours raconter ce qui s'est passé hier.
+         */
+        verificationSkippedSurfaces: jsonb("verification_skipped_surfaces").notNull().default(sql`'[]'::jsonb`),
+        /**
+         * Le projet ENREGISTRÉ auquel ce travail s'est rattaché (0093, P5).
+         *
+         * Posé UNE SEULE FOIS, par `attachProductionToProject` : le premier projet
+         * touché gagne, et l'`UPDATE … WHERE project_id IS NULL` fait cette règle
+         * sans lecture préalable. NULL tant qu'aucune production n'est tombée dans
+         * un projet déclaré — le rattachement est un registre, jamais une garde.
+         *
+         * Pas de `.references()` ici, comme `parent_job_id` juste au-dessus : la FK
+         * (ON DELETE SET NULL vers code_projects) est posée par la migration. La
+         * déclarer côté Drizzle ferait un cycle d'import avec code-projects.ts, qui
+         * référence déjà agent_jobs pour `registered_job_id`.
+         */
+        projectId: uuid("project_id"),
         completedAt: timestamp("completed_at", { withTimezone: true }),
         createdAt: timestamp("created_at", { withTimezone: true }).defaultNow(),
         updatedAt: timestamp("updated_at", { withTimezone: true }).defaultNow()
@@ -14005,6 +14706,10 @@ var init_jobs = __esm({
         // (schedule_id + created_at range SUM) had no usable index and seq-scanned
         // the whole table. The (schedule_id, created_at) prefix serves both.
         index("idx_agent_jobs_schedule_created").on(table.scheduleId, table.createdAt),
+        // 0093 : « les travaux de ce projet » (compte et dernière activité de la
+        // liste des projets) — partiel, la colonne reste NULL sur l'immense
+        // majorité des jobs.
+        index("idx_agent_jobs_project").on(table.projectId).where(sql`${table.projectId} IS NOT NULL`),
         check(
           "agent_jobs_status_check",
           sql`${table.status} IN ('pending','processing','completed','failed','awaiting_approval','awaiting_delegation','cancelled')`
@@ -14197,13 +14902,37 @@ var init_tool_calls = __esm({
         // makes this row JOINABLE to the transcript message and to llm_calls by
         // turn — the full-copy tool_output was previously unlinkable.
         toolCallId: text("tool_call_id"),
+        // P1 (plan « De la maquette au produit ») : la carte DÉCLARÉE par l'outil
+        // et la charge utile que son present() a tirée de la sortie — persistées
+        // ici pour que l'écran lise la ligne sans rejouer l'outil ni connaître son
+        // nom. null sur les lignes antérieures à 0092 et sur celles que
+        // l'enregistreur vivant du CLI écrit sans sortie exploitable : l'écran le
+        // dit tel quel (entrée et sortie brutes), il n'invente pas une carte.
+        card: text("card"),
+        presented: jsonb("presented"),
+        // L'échec du présentateur, s'il y en a eu un : `presented` est alors NULL et
+        // CETTE colonne dit pourquoi — requêtable, pas seulement loggée (revue
+        // passe 14). NULL = aucune erreur (charge présente, ou rien à présenter).
+        presentationError: text("presentation_error"),
+        // P7 (0095) : le niveau de risque DÉCLARÉ par l'outil (`read` | `write` |
+        // `destructive`), tel quel. Pourquoi : l'écran doit dire si un tour a fait
+        // sortir quelque chose du chat, et un connecteur tiers ne déclare que la
+        // carte `generic` — la même pour une lecture et pour une écriture. Son
+        // niveau de risque est alors le seul classement possible. NULL sur les
+        // lignes antérieures à 0095 et sur les lignes `cli:*` (écrites hors
+        // registre) : l'écran dit « incertain » plutôt que de deviner.
+        riskLevel: text("risk_level"),
         createdAt: timestamp("created_at", { withTimezone: true }).defaultNow()
       },
       (table) => [
         index("idx_tool_calls_entity_id").on(table.entityId),
         index("idx_tool_calls_job").on(table.jobId),
         index("idx_tool_calls_job_created").on(table.jobId, sql`${table.createdAt} DESC`),
-        index("idx_tool_calls_recent").on(sql`${table.createdAt} DESC`)
+        index("idx_tool_calls_recent").on(sql`${table.createdAt} DESC`),
+        check(
+          "tool_calls_risk_level_check",
+          sql`${table.riskLevel} IS NULL OR ${table.riskLevel} IN ('read','write','destructive')`
+        )
       ]
     );
   }
@@ -14233,7 +14962,26 @@ var init_approvals = __esm({
         // toolName alone (a fragility documented in the runner), and stamps the
         // replayed tool_calls row with its original id.
         toolCallId: text("tool_call_id"),
+        /**
+         * Ce que cette ligne DEMANDE (0098, P10a) : 'approval' — approuver ou
+         * refuser une action — ou 'question' — choisir une option parmi celles que
+         * l'agent propose (`ask_user`).
+         *
+         * POSÉE par la porte à la création, depuis ce que l'outil déclare
+         * (`ToolDefinition.asksUser`), jamais devinée après coup par le nom de
+         * l'outil : le web, le runner et Telegram la lisent tous les trois sans
+         * avoir le registre d'outils sous la main.
+         */
+        kind: text("kind").notNull().default("approval"),
         status: text("status").default("pending"),
+        /**
+         * L'option choisie, TELLE QUELLE — le libellé, jamais l'index (0098).
+         * Posée à la résolution, et seulement sur une ligne `kind = 'question'` :
+         * l'écran et le transcript la relisent des mois plus tard, quand la liste
+         * d'options n'existe plus qu'ici, dans `tool_input`. NULL tant que
+         * personne n'a répondu, et sur un refus.
+         */
+        answer: text("answer"),
         requestedAt: timestamp("requested_at", { withTimezone: true }).defaultNow(),
         resolvedAt: timestamp("resolved_at", { withTimezone: true }),
         resolvedBy: text("resolved_by"),
@@ -14256,7 +15004,8 @@ var init_approvals = __esm({
         check(
           "approval_requests_status_check",
           sql`${table.status} IN ('pending','approved','rejected','expired')`
-        )
+        ),
+        check("approval_requests_kind_check", sql`${table.kind} IN ('approval','question')`)
       ]
     );
     approvalRules = pgTable(
@@ -14574,6 +15323,39 @@ var init_skills = __esm({
   }
 });
 
+// ../../packages/db/src/schema/schedule-state.ts
+var SCHEDULE_STATE_VALUE_MAX, SCHEDULE_STATE_KEY_MAX, SCHEDULE_STATE_MAX_KEYS, scheduleState;
+var init_schedule_state = __esm({
+  "../../packages/db/src/schema/schedule-state.ts"() {
+    "use strict";
+    init_pg_core();
+    init_drizzle_orm();
+    init_schedules();
+    SCHEDULE_STATE_VALUE_MAX = 2e3;
+    SCHEDULE_STATE_KEY_MAX = 120;
+    SCHEDULE_STATE_MAX_KEYS = 20;
+    scheduleState = pgTable(
+      "schedule_state",
+      {
+        scheduleId: uuid("schedule_id").notNull().references(() => agentSchedules.id, { onDelete: "cascade" }),
+        key: text("key").notNull(),
+        value: text("value").notNull(),
+        createdAt: timestamp("created_at", { withTimezone: true }).notNull().defaultNow(),
+        updatedAt: timestamp("updated_at", { withTimezone: true }).notNull().defaultNow()
+      },
+      (table) => [
+        primaryKey({ columns: [table.scheduleId, table.key] }),
+        index("idx_schedule_state_schedule").on(table.scheduleId),
+        // Les bornes sont EN BASE, pas seulement dans l'outil : une écriture qui
+        // passerait par un autre chemin ne doit pas pouvoir transformer l'état en
+        // dépotoir. Une clé vide n'identifie rien.
+        check("schedule_state_key_len", sql`length(${table.key}) BETWEEN 1 AND 120`),
+        check("schedule_state_value_len", sql`length(${table.value}) <= 2000`)
+      ]
+    );
+  }
+});
+
 // ../../packages/db/src/schema/mcp.ts
 var mcpServers, agentMcpServers, mcpConnections;
 var init_mcp = __esm({
@@ -14670,24 +15452,109 @@ var init_code_projects = __esm({
   "../../packages/db/src/schema/code-projects.ts"() {
     "use strict";
     init_pg_core();
+    init_drizzle_orm();
     init_entities();
+    init_users();
+    init_agents();
+    init_jobs();
     codeProjects = pgTable(
       "code_projects",
       {
         id: uuid("id").primaryKey().defaultRandom(),
         entityId: uuid("entity_id").notNull().references(() => entities.id, { onDelete: "cascade" }),
-        /** Chemin absolu slash-normalisé du projet (la clé de groupement dérivée). */
+        /** Chemin absolu slash-normalisé du projet (la valeur AFFICHÉE — jamais recasée après coup). */
         projectPath: text("project_path").notNull(),
+        /**
+         * Clé d'identité canonique — `projectKey(project_path)`. Porte la
+         * contrainte d'unicité (0088) ; `project_path` reste le texte tel qu'il a
+         * été écrit la première fois, uniquement pour l'affichage.
+         */
+        projectKey: text("project_key").notNull(),
         /** Nom choisi par le propriétaire. NULL = nom du dossier. */
         displayName: text("display_name"),
         /** Masqué de la liste ET du contexte injecté aux agents. */
         hidden: boolean("hidden").notNull().default(false),
+        /** Séquence de preuve déclarée (v5-A). NULL = livrable `not_configured`. */
+        verifyCommands: jsonb("verify_commands").$type(),
+        /** Incrémenté à chaque changement de `verify_commands` — invalide l'approbation en cours. */
+        verificationEpoch: integer("verification_epoch").notNull().default(0),
+        /** Empreinte (D1) de la révision exacte approuvée par le propriétaire. */
+        verifyApprovedManifestHash: text("verify_approved_manifest_hash"),
+        verifyApprovedAt: timestamp("verify_approved_at", { withTimezone: true }),
+        /**
+         * QUI a décidé de cette séquence de preuve : `owner` quand le propriétaire
+         * l'a saisie et approuvée, `agent` quand celui qui a construit l'a déclarée
+         * en finissant. `null` sur les lignes d'avant la migration 0102.
+         *
+         * La distinction est pour l'ÉCRAN, pas pour le moteur : une preuve déclarée
+         * par un agent s'exécute exactement comme une preuve approuvée, mais on ne
+         * la présente pas comme le choix du propriétaire.
+         */
+        verifySource: text("verify_source").$type(),
+        /** Le job qui a déclaré cette séquence, quand `verify_source = 'agent'`. */
+        verifyDeclaredByJobId: uuid("verify_declared_by_job_id"),
+        /** SET NULL : l'utilisateur approbateur peut disparaître, l'approbation reste tracée. */
+        verifyApprovedBy: uuid("verify_approved_by").references(() => users.id, {
+          onDelete: "set null"
+        }),
+        /**
+         * Ce que le projet PRODUIT — du code, ou des documents (0093).
+         *
+         * Le registre n'est pas réservé au code : un dossier de documents est un
+         * projet au même titre, avec le même terrain et le même rattachement. La
+         * colonne existe pour que l'écran le dise, jamais pour que le runtime en
+         * déduise un comportement — c'est l'outil qui déclare ce qu'il produit
+         * (`deliverableType`), pas le dossier où il écrit.
+         */
+        kind: text("kind").notNull().default("code"),
+        /**
+         * L'agent responsable : celui dont le terrain contient ce projet. SET NULL
+         * — supprimer un agent coupe le lien, il n'emporte pas le projet.
+         */
+        agentId: uuid("agent_id").references(() => agents.id, { onDelete: "set null" }),
+        /**
+         * LE discriminant du registre (0093). NULL = ligne de COMPTABILITÉ (un
+         * renommage, un masquage, une configuration de preuve, ou la ligne créée
+         * toute seule par l'intention de mutation quand une écriture atterrit dans
+         * une racine dérivée) ; NOT NULL = projet DÉCLARÉ, celui qu'un écran liste
+         * et auquel un travail se rattache.
+         *
+         * Aucun lecteur existant ne regarde cette colonne : l'onglet Code et la
+         * vérification continuent de lire la ligne par clé, exactement comme avant.
+         */
+        registeredAt: timestamp("registered_at", { withTimezone: true }),
+        /** D'où vient la déclaration : `spaces` (l'écran) ou `conversation` (P6). NULL si non enregistré. */
+        registeredFrom: text("registered_from").$type(),
+        /**
+         * Le job qui a déclaré ce projet, quand la déclaration vient d'une
+         * conversation. SET NULL : la purge des vieux jobs ne doit pas désinscrire
+         * un projet vivant.
+         */
+        registeredJobId: uuid("registered_job_id").references(() => agentJobs.id, {
+          onDelete: "set null"
+        }),
         createdAt: timestamp("created_at", { withTimezone: true }).notNull().defaultNow(),
         updatedAt: timestamp("updated_at", { withTimezone: true }).notNull().defaultNow()
       },
       (table) => [
-        unique("code_projects_entity_path_unique").on(table.entityId, table.projectPath),
-        index("idx_code_projects_entity").on(table.entityId)
+        // Remplace l'ancien code_projects_entity_path_unique (texte exact,
+        // 0086) — la migration 0088 le retire par son vrai nom Postgres
+        // (code_projects_entity_id_project_path_key, jamais nommé côté Drizzle).
+        unique("code_projects_entity_key_unique").on(table.entityId, table.projectKey),
+        index("idx_code_projects_entity").on(table.entityId),
+        // Index PARTIEL (0093) : la liste des projets ne lit que les lignes
+        // enregistrées, qui resteront minoritaires devant la comptabilité produite
+        // par les écritures.
+        index("idx_code_projects_registered").on(table.entityId).where(sql`${table.registeredAt} IS NOT NULL`),
+        check("code_projects_kind_check", sql`${table.kind} IN ('code','documents')`),
+        check(
+          "code_projects_registered_from_check",
+          sql`${table.registeredFrom} IS NULL OR ${table.registeredFrom} IN ('spaces','conversation')`
+        ),
+        check(
+          "code_projects_verify_commands_check",
+          sql`${table.verifyCommands} IS NULL OR (jsonb_typeof(${table.verifyCommands}) = 'array' AND jsonb_array_length(${table.verifyCommands}) BETWEEN 1 AND 5)`
+        )
       ]
     );
   }
@@ -14835,6 +15702,7 @@ var init_chat_messages = __esm({
     init_entities();
     init_agents();
     init_jobs();
+    init_code_projects();
     conversations = pgTable(
       "conversations",
       {
@@ -14846,14 +15714,75 @@ var init_chat_messages = __esm({
         // Stamped at CREATION time (never rewritten later) so the onboarding
         // interview conversation never leaks into the dashboard's Chats list —
         // whether the operator skips it or finishes it (migration 0065).
+        //
+        // `project` (0097) : ouverte DEPUIS la page d'un projet. C'est ce fil-là
+        // que la saisie du bas de cette page prolonge — la récence ne suffisait
+        // pas, une conversation simplement ancrée par une production finissait par
+        // évincer celle qu'on avait ouverte exprès. Elle reste une conversation de
+        // l'utilisateur partout ailleurs ; seul `onboarding` est tenu hors listes.
         origin: text("origin").notNull().default("user"),
+        /**
+         * Le canal du fil (0094). `dashboard` par DÉFAUT — c'est ce qui laisse
+         * `createConversationAction` inchangé, et ce qui donne son canal à chaque
+         * ligne existante au moment de la migration.
+         */
+        channel: text("channel").notNull().default("dashboard"),
+        /**
+         * L'identifiant du fil SUR le canal (chat Telegram, canal Slack, ...).
+         * NULL pour le dashboard, dont le fil n'existe nulle part ailleurs qu'ici.
+         */
+        chatId: text("chat_id"),
+        /**
+         * Le PROJET COURANT de la conversation (P6) : posé quand une production
+         * atterrit dans un projet enregistré (attach.ts), et redit au modèle à
+         * chaque tour dans le bloc `## Conversation`. TOUJOURS écrasé — la dernière
+         * production décide, parce qu'une conversation qui change de sujet change
+         * de dossier, et que l'utilisateur ne devrait pas avoir à le déclarer.
+         * SET NULL : désinscrire un projet retire l'ancrage, jamais la conversation.
+         */
+        currentProjectId: uuid("current_project_id").references(() => codeProjects.id, {
+          onDelete: "set null"
+        }),
         createdAt: timestamp("created_at", { withTimezone: true }).defaultNow(),
         // Bumped on each new turn — drives the recency sort in the sidebar.
         updatedAt: timestamp("updated_at", { withTimezone: true }).defaultNow()
       },
       (table) => [
         index("idx_conversations_entity_agent").on(table.entityId, table.agentId, table.updatedAt),
-        check("conversations_origin_check", sql`${table.origin} IN ('user','onboarding')`)
+        /**
+         * LA requête du runner à chaque message entrant : la ligne la plus récente
+         * du tuple (entité, agent, canal, chat).
+         */
+        // `id` en dernier : c'est le DÉPARTAGE de `resolveConversation` à date
+        // égale, et sans lui l'index ne couvre pas l'ordre entier — le moteur
+        // trie ce qui reste (revue Codex, PR #48, passe 7). Deux chemins chauds
+        // s'en servent : le runner sur chaque message entrant, et le `DISTINCT ON`
+        // qui désigne le fil courant de chaque chat pour `/chat`.
+        // `.desc()` sur les deux dernières, comme le SQL de la migration : sans
+        // elles, Drizzle déclare un index ASC là où la migration en crée un mixte,
+        // et le schéma décrit un index que la base n'a pas (revue Codex, PR #49,
+        // passe 4).
+        index("idx_conversations_thread_tiebreak").on(
+          table.entityId,
+          table.agentId,
+          table.channel,
+          table.chatId,
+          table.createdAt.desc(),
+          table.id.desc()
+        ),
+        // L'autre question de `/chat` : quels chats DEVRAIENT être listés ? Elle
+        // filtre sur l'ORIGINE, qu'aucun index ne portait (revue Codex, PR #48,
+        // passe 10). PARTIEL, avec les prédicats exacts de la requête : il ne
+        // couvre que les lignes qui peuvent répondre, et reste petit là où la
+        // table grandit surtout par les fils qu'il exclut.
+        index("idx_conversations_listable_chats").on(table.entityId, table.agentId, table.channel, table.chatId).where(
+          sql`${table.origin} IN ('user', 'project') AND ${table.channel} <> 'dashboard' AND ${table.chatId} IS NOT NULL AND ${table.chatId} <> ''`
+        ),
+        check("conversations_origin_check", sql`${table.origin} IN ('user','onboarding','project')`),
+        check(
+          "conversations_channel_check",
+          sql`${table.channel} IN ('dashboard','telegram','slack','discord','whatsapp')`
+        )
       ]
     );
     chatMessages = pgTable(
@@ -15157,6 +16086,7 @@ var init_llm_calls = __esm({
     init_entities();
     init_agents();
     init_jobs();
+    init_chat_messages();
     llmCalls = pgTable(
       "llm_calls",
       {
@@ -15165,6 +16095,15 @@ var init_llm_calls = __esm({
         // set null: an audit row must survive the deletion of its agent/job.
         agentId: uuid("agent_id").references(() => agents.id, { onDelete: "set null" }),
         jobId: uuid("job_id").references(() => agentJobs.id, { onDelete: "set null" }),
+        /**
+         * La CONVERSATION d'où vient l'appel (0100). Un tour de chat du tableau de
+         * bord ne passe pas par un job : sans cette colonne, ses appels étaient
+         * bien enregistrés mais jamais rattachables au fil, qui affichait
+         * « 0 agents, 0 tokens » sous une réponse bien réelle (Quentin, 07/09).
+         */
+        conversationId: uuid("conversation_id").references(() => conversations.id, {
+          onDelete: "set null"
+        }),
         /** Where the call came from: 'job' | 'chat' | 'curator' | 'reflection' | 'cron' | … */
         source: text("source").notNull(),
         /** Job-loop turn number when applicable (null for chat/curator). */
@@ -15203,6 +16142,7 @@ var init_llm_calls = __esm({
       },
       (table) => [
         index("idx_llm_calls_job").on(table.jobId, table.createdAt),
+        index("idx_llm_calls_conversation").on(table.conversationId, table.createdAt),
         index("idx_llm_calls_entity_created").on(table.entityId, table.createdAt),
         index("idx_llm_calls_agent_created").on(table.agentId, table.createdAt)
       ]
@@ -15210,6 +16150,220 @@ var init_llm_calls = __esm({
   }
 });
 
+// ../../packages/db/src/schema/job-deliveries.ts
+var jobDeliveries;
+var init_job_deliveries = __esm({
+  "../../packages/db/src/schema/job-deliveries.ts"() {
+    "use strict";
+    init_pg_core();
+    init_drizzle_orm();
+    init_jobs();
+    jobDeliveries = pgTable(
+      "job_deliveries",
+      {
+        id: uuid("id").primaryKey().defaultRandom(),
+        jobId: uuid("job_id").notNull().references(() => agentJobs.id, { onDelete: "cascade" }),
+        channel: text("channel").notNull(),
+        chatId: text("chat_id").notNull(),
+        payload: text("payload").notNull(),
+        outcome: text("outcome").notNull(),
+        idempotencyKey: text("idempotency_key").notNull().unique(),
+        receipt: jsonb("receipt"),
+        attempts: integer("attempts").notNull().default(0),
+        claimedBy: text("claimed_by"),
+        claimedAt: timestamp("claimed_at", { withTimezone: true }),
+        createdAt: timestamp("created_at", { withTimezone: true }).notNull().defaultNow(),
+        updatedAt: timestamp("updated_at", { withTimezone: true }).notNull().defaultNow()
+      },
+      (table) => [
+        index("idx_job_deliveries_open").on(table.outcome, table.claimedAt).where(sql`${table.outcome} IN ('prepared','attempted')`),
+        check(
+          "job_deliveries_channel_check",
+          sql`${table.channel} IN ('telegram','discord','slack','whatsapp')`
+        ),
+        check(
+          "job_deliveries_outcome_check",
+          sql`${table.outcome} IN ('prepared','attempted','confirmed','rejected')`
+        ),
+        check("job_deliveries_attempts_check", sql`${table.attempts} <= 3`)
+      ]
+    );
+  }
+});
+
+// ../../packages/db/src/schema/verification.ts
+var jobDeliverableVerificationState, verificationRuns;
+var init_verification2 = __esm({
+  "../../packages/db/src/schema/verification.ts"() {
+    "use strict";
+    init_pg_core();
+    init_drizzle_orm();
+    init_entities();
+    init_jobs();
+    jobDeliverableVerificationState = pgTable(
+      "job_deliverable_verification_state",
+      {
+        id: uuid("id").primaryKey().defaultRandom(),
+        jobId: uuid("job_id").notNull().references(() => agentJobs.id, { onDelete: "cascade" }),
+        /** DeliverableType (@nodal-agents/shared) — choisit le canonicaliseur ET la politique. */
+        deliverableType: text("deliverable_type").notNull(),
+        /** Clé stable du livrable — projectKey(path) pour code_project (T01/T09). */
+        canonicalKey: text("canonical_key").notNull(),
+        /** AtomicOutcome — livrables ATOMIQUES seulement (v6-A, sans écrivain en ①). */
+        outcome: text("outcome"),
+        /** Clé d'idempotence du livrable atomique — sans écrivain en ①. */
+        idempotencyKey: text("idempotency_key"),
+        /** Dernier chemin/étiquette affiché à l'owner, pour l'UI (snapshot, pas une FK vivante). */
+        displayPathSnapshot: text("display_path_snapshot"),
+        /** Livrables MUTABLES seulement : incrémenté à chaque écriture. */
+        dirtyGeneration: integer("dirty_generation"),
+        /** Livrables MUTABLES seulement : la génération que la preuve a validée en vert. */
+        verifiedGeneration: integer("verified_generation"),
+        /**
+         * Ce livrable a-t-il été NOMMÉ par un outil (`true`), ou entre-t-il dans le
+         * périmètre par précaution (`false`) ?
+         *
+         * La GARDE traite les deux pareil : un shell écrit où il veut, donc tout
+         * son périmètre est marqué sale. L'ÉCRAN, lui, ne montre que ce qui a été
+         * visé — sans quoi une application de recettes s'affiche avec vingt
+         * livrables non vérifiés, dont `shared/_archive` (constaté le 08/09/2026).
+         */
+        addressed: boolean("addressed").notNull().default(true),
+        /**
+         * Un outil a-t-il RÉUSSI à écrire dans ce livrable pendant ce job ?
+         *
+         * `addressed` ne peut pas répondre : l'intention est posée AVANT
+         * l'exécution, et une tentative qui échoue la laisse en place — c'est la
+         * bonne garde, mais une mauvaise autorisation. `declare_verification` s'en
+         * servait pourtant comme telle, si bien qu'un `file_edit` au `old_string`
+         * absent suffisait à déclarer la preuve d'un projet qu'on n'avait pas
+         * produit (revue Codex, PR #49, passe 2).
+         *
+         * Deux colonnes, deux questions : `addressed` est ce que l'écran MONTRE,
+         * `produced` est ce qui AUTORISE à déclarer une preuve. Défaut `false` —
+         * une autorisation ne se présume pas.
+         */
+        produced: boolean("produced").notNull().default(false),
+        /** DecisionStatus — l'état lisible affiché à l'owner. */
+        decisionStatus: text("decision_status").notNull(),
+        /** Empreinte de la dernière commande de preuve exécutée (diagnostic, pas le hash d'approbation). */
+        commandHashSnapshot: text("command_hash_snapshot"),
+        /** Rouges consécutifs — sans écrivain en ① (passes de réparation). */
+        redStreak: integer("red_streak").notNull().default(0),
+        /** Tentatives de réparation automatique — sans écrivain en ①. */
+        repairAttempts: integer("repair_attempts").notNull().default(0),
+        /** verification_epoch de code_projects au moment du dernier test (T09). */
+        testedEpoch: integer("tested_epoch"),
+        updatedAt: timestamp("updated_at", { withTimezone: true }).notNull().defaultNow()
+      },
+      (table) => [
+        unique("job_deliverable_verification_state_job_type_key_unique").on(
+          table.jobId,
+          table.deliverableType,
+          table.canonicalKey
+        ),
+        check(
+          "job_deliverable_verification_state_deliverable_type_check",
+          sql`${table.deliverableType} IN ('code_project','office_file','document','outbound_action','other')`
+        ),
+        check(
+          "job_deliverable_verification_state_outcome_check",
+          sql`${table.outcome} IS NULL OR ${table.outcome} IN ('prepared','attempted','confirmed','rejected','outcome_unknown')`
+        ),
+        check(
+          "job_deliverable_verification_state_decision_status_check",
+          sql`${table.decisionStatus} IN ('dirty','green','red','pending_approval','not_configured','infra_error')`
+        ),
+        check(
+          "job_deliverable_verification_state_generation_check",
+          sql`${table.verifiedGeneration} IS NULL OR ${table.verifiedGeneration} <= ${table.dirtyGeneration}`
+        ),
+        // La famille du livrable impose sa forme : un ATOMIQUE ne porte jamais de
+        // génération, un MUTABLE ne porte jamais d'outcome.
+        check(
+          "job_deliverable_verification_state_family_check",
+          sql`(${table.deliverableType} = 'outbound_action' AND ${table.dirtyGeneration} IS NULL AND ${table.verifiedGeneration} IS NULL AND ${table.outcome} IS NOT NULL)
+          OR (${table.deliverableType} <> 'outbound_action' AND ${table.outcome} IS NULL AND ${table.dirtyGeneration} IS NOT NULL)`
+        )
+      ]
+    );
+    verificationRuns = pgTable(
+      "verification_runs",
+      {
+        id: uuid("id").primaryKey().defaultRandom(),
+        // set null (not cascade): a proof that actually ran is an audited fact —
+        // it must survive the deletion of the job that requested it (mirrors
+        // llm_calls.job_id).
+        jobId: uuid("job_id").references(() => agentJobs.id, { onDelete: "set null" }),
+        entityId: uuid("entity_id").references(() => entities.id, { onDelete: "cascade" }),
+        deliverableType: text("deliverable_type").notNull(),
+        canonicalKey: text("canonical_key").notNull(),
+        /** Hash du manifeste (D1, @nodal-agents/shared) sous lequel cette commande a tourné. */
+        manifestHash: text("manifest_hash"),
+        /** Regroupe les commandes d'une même preuve (une exécution de runCommandSequence). */
+        sequenceId: uuid("sequence_id").notNull(),
+        commandRank: integer("command_rank").notNull(),
+        command: text("command").notNull(),
+        exitCode: integer("exit_code"),
+        outcomeKind: text("outcome_kind").notNull(),
+        /** Bornées par le code appelant (T09/T06), jamais illimitées en base. */
+        stdoutTail: text("stdout_tail"),
+        stderrTail: text("stderr_tail"),
+        durationMs: integer("duration_ms"),
+        verdict: text("verdict").notNull(),
+        /** dirty_generation testé (livrables mutables) — snapshot au moment du run. */
+        testedGeneration: integer("tested_generation"),
+        /** verification_epoch testé — snapshot au moment du run. */
+        testedEpoch: integer("tested_epoch"),
+        createdAt: timestamp("created_at", { withTimezone: true }).notNull().defaultNow()
+      },
+      (table) => [
+        index("idx_verification_runs_job_created").on(table.jobId, table.createdAt),
+        check(
+          "verification_runs_outcome_kind_check",
+          sql`${table.outcomeKind} IN ('exit','timeout','spawn_error')`
+        ),
+        check(
+          "verification_runs_verdict_check",
+          sql`${table.verdict} IN ('green','red','infra_error')`
+        )
+      ]
+    );
+  }
+});
+
+// ../../packages/db/src/schema/job-checkpoints.ts
+var jobCheckpoints;
+var init_job_checkpoints = __esm({
+  "../../packages/db/src/schema/job-checkpoints.ts"() {
+    "use strict";
+    init_pg_core();
+    init_jobs();
+    jobCheckpoints = pgTable(
+      "job_checkpoints",
+      {
+        id: uuid("id").primaryKey().defaultRandom(),
+        jobId: uuid("job_id").notNull().references(() => agentJobs.id, { onDelete: "cascade" }),
+        /** Le compteur de tour du runner — celui que `ToolContext.turn` porte. */
+        turn: integer("turn").notNull(),
+        /** Le dossier TEL QUE LE SEAM LE CONNAÎT : chemin absolu, graphie d'origine. */
+        workspace: text("workspace").notNull(),
+        /** Le commit dans le magasin fantôme — l'état d'avant de ce tour. */
+        sha: text("sha").notNull(),
+        takenAt: timestamp("taken_at", { withTimezone: true }).notNull().defaultNow()
+      },
+      (table) => [
+        unique("job_checkpoints_job_turn_workspace_unique").on(
+          table.jobId,
+          table.turn,
+          table.workspace
+        ),
+        index("idx_job_checkpoints_job").on(table.jobId)
+      ]
+    );
+  }
+});
+
 // ../../packages/db/src/schema/index.ts
 var schema_exports = {};
 __export(schema_exports, {
@@ -15228,6 +16382,9 @@ __export(schema_exports, {
   OPERATION_RISK_LEVELS: () => OPERATION_RISK_LEVELS,
   ORCHESTRATOR_MODES: () => ORCHESTRATOR_MODES,
   SCHEDULE_LAST_STATUSES: () => SCHEDULE_LAST_STATUSES,
+  SCHEDULE_STATE_KEY_MAX: () => SCHEDULE_STATE_KEY_MAX,
+  SCHEDULE_STATE_MAX_KEYS: () => SCHEDULE_STATE_MAX_KEYS,
+  SCHEDULE_STATE_VALUE_MAX: () => SCHEDULE_STATE_VALUE_MAX,
   SCHEDULE_TYPES: () => SCHEDULE_TYPES,
   TASK_PRIORITIES: () => TASK_PRIORITIES,
   TASK_STATUSES: () => TASK_STATUSES,
@@ -15260,9 +16417,13 @@ __export(schema_exports, {
   entityLlmKeys: () => entityLlmKeys,
   entityMembers: () => entityMembers,
   entitySettings: () => entitySettings,
+  jobCheckpoints: () => jobCheckpoints,
+  jobDeliverableVerificationState: () => jobDeliverableVerificationState,
+  jobDeliveries: () => jobDeliveries,
   llmCalls: () => llmCalls,
   mcpConnections: () => mcpConnections,
   mcpServers: () => mcpServers,
+  scheduleState: () => scheduleState,
   sessions: () => sessions,
   skillConnectors: () => skillConnectors,
   skillVersions: () => skillVersions,
@@ -15270,6 +16431,7 @@ __export(schema_exports, {
   toolCalls: () => toolCalls,
   userProfiles: () => userProfiles,
   users: () => users,
+  verificationRuns: () => verificationRuns,
   verifications: () => verifications,
   webhookTriggers: () => webhookTriggers,
   workspaceLocks: () => workspaceLocks
@@ -15291,6 +16453,7 @@ var init_schema2 = __esm({
     init_webhooks();
     init_skills();
     init_schedules();
+    init_schedule_state();
     init_llm_keys();
     init_mcp();
     init_code_projects();
@@ -15304,6 +16467,9 @@ var init_schema2 = __esm({
     init_channel_allowed_conversations();
     init_cli_runs();
     init_llm_calls();
+    init_job_deliveries();
+    init_verification2();
+    init_job_checkpoints();
   }
 });
 
@@ -15522,9 +16688,9 @@ async function doRefresh(dbOrTx, credentialId, row, payload) {
     throw err;
   }
   if (!response.ok) {
-    const text2 = await response.text().catch(() => "");
+    const text3 = await response.text().catch(() => "");
     throw new Error(
-      `refreshAndPersistCredential: token endpoint returned ${response.status}: ${text2}`
+      `refreshAndPersistCredential: token endpoint returned ${response.status}: ${text3}`
     );
   }
   const json2 = await response.json();
@@ -15941,19 +17107,20 @@ async function createAgentRepo(db, entityId, input) {
     );
   }
   if (input.role === "orchestrator") {
-    const [ent] = await db.select({ rootAgentId: entities.rootAgentId }).from(entities).where(eq(entities.id, entityId)).limit(1);
-    if (!ent?.rootAgentId) {
-      await db.update(entities).set({
-        rootAgentId: row.id,
-        rootGrants: INITIAL_AUTO_ROOT_GRANTS,
-        updatedAt: /* @__PURE__ */ new Date()
-      }).where(eq(entities.id, entityId));
-    } else if (ent.rootAgentId !== row.id) {
-      await db.insert(agentAssignments).values({
-        orchestratorId: ent.rootAgentId,
-        subAgentId: row.id,
-        entityId
-      });
+    const claimed = await db.update(entities).set({
+      rootAgentId: row.id,
+      rootGrants: INITIAL_AUTO_ROOT_GRANTS,
+      updatedAt: /* @__PURE__ */ new Date()
+    }).where(and(eq(entities.id, entityId), isNull(entities.rootAgentId))).returning({ rootAgentId: entities.rootAgentId });
+    if (claimed.length === 0) {
+      const [ent] = await db.select({ rootAgentId: entities.rootAgentId }).from(entities).where(eq(entities.id, entityId)).limit(1);
+      if (ent?.rootAgentId && ent.rootAgentId !== row.id) {
+        await db.insert(agentAssignments).values({
+          orchestratorId: ent.rootAgentId,
+          subAgentId: row.id,
+          entityId
+        });
+      }
     }
   }
   if (input.assignToOrchestratorId && input.assignToOrchestratorId !== row.id) {
@@ -16197,6 +17364,73 @@ var init_retention = __esm({
   }
 });
 
+// ../../packages/db/src/repos/schedule-state.ts
+async function readScheduleState(db, scheduleId) {
+  const rows = await db.select({
+    key: scheduleState.key,
+    value: scheduleState.value,
+    updatedAt: scheduleState.updatedAt
+  }).from(scheduleState).where(eq(scheduleState.scheduleId, scheduleId)).orderBy(asc(scheduleState.key));
+  return rows.map((r) => ({ key: r.key, value: r.value, updatedAt: r.updatedAt }));
+}
+async function writeScheduleState(db, scheduleId, key, value) {
+  const k = key.trim();
+  if (k === "") throw new ScheduleStateRefused("The key is empty.");
+  if (k.length > SCHEDULE_STATE_KEY_MAX) {
+    throw new ScheduleStateRefused(
+      `The key is ${k.length} characters; the limit is ${SCHEDULE_STATE_KEY_MAX}.`
+    );
+  }
+  if (value.length > SCHEDULE_STATE_VALUE_MAX) {
+    throw new ScheduleStateRefused(
+      `The value is ${value.length} characters; the limit is ${SCHEDULE_STATE_VALUE_MAX}. State is what you need to recognise this run against the last one, not a report.`
+    );
+  }
+  return db.transaction(async (tx) => {
+    await tx.execute(
+      sql`SELECT pg_advisory_xact_lock(hashtext(${`schedule_state:${scheduleId}`}))`
+    );
+    const [existing] = await tx.select({ key: scheduleState.key }).from(scheduleState).where(and(eq(scheduleState.scheduleId, scheduleId), eq(scheduleState.key, k))).limit(1);
+    if (!existing) {
+      const [{ n }] = await tx.select({ n: sql`count(*)::int` }).from(scheduleState).where(eq(scheduleState.scheduleId, scheduleId));
+      if (n >= SCHEDULE_STATE_MAX_KEYS) {
+        throw new ScheduleStateRefused(
+          `This routine already holds ${n} state keys, the maximum. Reuse one of its existing keys instead of adding another \u2014 state is not a log.`
+        );
+      }
+    }
+    const now = /* @__PURE__ */ new Date();
+    const [row] = await tx.insert(scheduleState).values({ scheduleId, key: k, value, createdAt: now, updatedAt: now }).onConflictDoUpdate({
+      target: [scheduleState.scheduleId, scheduleState.key],
+      set: { value, updatedAt: now }
+    }).returning({
+      key: scheduleState.key,
+      value: scheduleState.value,
+      updatedAt: scheduleState.updatedAt
+    });
+    if (!row) {
+      throw new Error("schedule_state_write_failed");
+    }
+    return { key: row.key, value: row.value, updatedAt: row.updatedAt };
+  });
+}
+var ScheduleStateRefused;
+var init_schedule_state2 = __esm({
+  "../../packages/db/src/repos/schedule-state.ts"() {
+    "use strict";
+    init_drizzle_orm();
+    init_schedule_state();
+    ScheduleStateRefused = class extends Error {
+      constructor(reason) {
+        super(reason);
+        this.reason = reason;
+        this.name = "ScheduleStateRefused";
+      }
+      reason;
+    };
+  }
+});
+
 // ../../packages/db/src/repos/app-settings.ts
 async function getAppSetting(db, key) {
   const [row] = await db.select({ value: appSettings.value }).from(appSettings).where(eq(appSettings.key, key)).limit(1);
@@ -16231,6 +17465,21 @@ var init_app_settings2 = __esm({
   }
 });
 
+// ../../packages/db/src/repos/verification-surfaces.ts
+async function getVerificationSurfaces(db, entityId) {
+  const [row] = await db.select({ verificationSurfaces: entities.verificationSurfaces }).from(entities).where(eq(entities.id, entityId)).limit(1);
+  if (!row) throw new Error(`ENTITY_NOT_FOUND: ${entityId}`);
+  return parseVerificationSurfaces(row.verificationSurfaces);
+}
+var init_verification_surfaces2 = __esm({
+  "../../packages/db/src/repos/verification-surfaces.ts"() {
+    "use strict";
+    init_drizzle_orm();
+    init_src2();
+    init_schema2();
+  }
+});
+
 // ../../packages/db/src/index.ts
 var src_exports = {};
 __export(src_exports, {
@@ -16250,7 +17499,11 @@ __export(src_exports, {
   OPERATION_RISK_LEVELS: () => OPERATION_RISK_LEVELS,
   ORCHESTRATOR_MODES: () => ORCHESTRATOR_MODES,
   SCHEDULE_LAST_STATUSES: () => SCHEDULE_LAST_STATUSES,
+  SCHEDULE_STATE_KEY_MAX: () => SCHEDULE_STATE_KEY_MAX,
+  SCHEDULE_STATE_MAX_KEYS: () => SCHEDULE_STATE_MAX_KEYS,
+  SCHEDULE_STATE_VALUE_MAX: () => SCHEDULE_STATE_VALUE_MAX,
   SCHEDULE_TYPES: () => SCHEDULE_TYPES,
+  ScheduleStateRefused: () => ScheduleStateRefused,
   TASK_PRIORITIES: () => TASK_PRIORITIES,
   TASK_STATUSES: () => TASK_STATUSES,
   accounts: () => accounts,
@@ -16308,6 +17561,7 @@ __export(src_exports, {
   getEntitySetting: () => getEntitySetting,
   getInstallNotes: () => getInstallNotes,
   getMcpApprovalContext: () => getMcpApprovalContext,
+  getVerificationSurfaces: () => getVerificationSurfaces,
   gt: () => gt,
   gte: () => gte,
   ilike: () => ilike,
@@ -16316,6 +17570,9 @@ __export(src_exports, {
   isConversationAllowed: () => isConversationAllowed,
   isNotNull: () => isNotNull,
   isNull: () => isNull,
+  jobCheckpoints: () => jobCheckpoints,
+  jobDeliverableVerificationState: () => jobDeliverableVerificationState,
+  jobDeliveries: () => jobDeliveries,
   like: () => like,
   listAllowedConversations: () => listAllowedConversations,
   listChannelBindings: () => listChannelBindings,
@@ -16331,9 +17588,11 @@ __export(src_exports, {
   notInArray: () => notInArray,
   or: () => or,
   pruneOldJobs: () => pruneOldJobs,
+  readScheduleState: () => readScheduleState,
   refreshAndPersistCredential: () => refreshAndPersistCredential,
   resolveOwnerChatId: () => resolveOwnerChatId,
   resolveOwnerConversation: () => resolveOwnerConversation,
+  scheduleState: () => scheduleState,
   sessions: () => sessions,
   setAppSetting: () => setAppSetting,
   setEntitySetting: () => setEntitySetting,
@@ -16352,10 +17611,12 @@ __export(src_exports, {
   updateSkillRepo: () => updateSkillRepo,
   userProfiles: () => userProfiles,
   users: () => users,
+  verificationRuns: () => verificationRuns,
   verifications: () => verifications,
   webhookTriggers: () => webhookTriggers,
   withTransaction: () => withTransaction,
-  workspaceLocks: () => workspaceLocks
+  workspaceLocks: () => workspaceLocks,
+  writeScheduleState: () => writeScheduleState
 });
 var init_src4 = __esm({
   "../../packages/db/src/index.ts"() {
@@ -16372,7 +17633,9 @@ var init_src4 = __esm({
     init_agents2();
     init_skills2();
     init_retention();
+    init_schedule_state2();
     init_app_settings2();
+    init_verification_surfaces2();
     init_drizzle_orm();
   }
 });
@@ -17990,9 +19253,9 @@ var init_logs = __esm({
 });
 
 // ../../packages/checkpoints/src/checkpoints.ts
-import { execFile } from "child_process";
-import { createHash as createHash3 } from "crypto";
-import { mkdir, writeFile } from "fs/promises";
+import { execFile, spawn } from "child_process";
+import { createHash as createHash3, randomBytes as randomBytes6 } from "crypto";
+import { mkdir, rm, writeFile } from "fs/promises";
 import { existsSync as existsSync11 } from "fs";
 import { join as join10 } from "path";
 import { promisify } from "util";
@@ -18004,28 +19267,32 @@ function workspaceKey(workspace) {
   norm = norm.replace(/[\\/]+$/, "");
   return createHash3("sha256").update(norm).digest("hex").slice(0, 16);
 }
-async function git(store, workspace, args) {
+function gitEnv(store, workspace, indexFile) {
   const key = workspaceKey(workspace);
+  return {
+    ...process.env,
+    GIT_DIR: join10(store, "store"),
+    GIT_WORK_TREE: workspace,
+    // A per-workspace index: two workspaces snapshotting at once must not
+    // stomp on each other's staging area. A READ (diffFile) brings its own
+    // temporary index instead — see diffFile — so it never touches this one.
+    GIT_INDEX_FILE: indexFile ?? join10(store, "indexes", key),
+    // A checkpoint is machinery, not authorship. Identity is fixed so it can
+    // never depend on — or leak — the owner's git config.
+    GIT_AUTHOR_NAME: "Nodal checkpoints",
+    GIT_AUTHOR_EMAIL: "checkpoints@nodal.local",
+    GIT_COMMITTER_NAME: "Nodal checkpoints",
+    GIT_COMMITTER_EMAIL: "checkpoints@nodal.local",
+    // The owner's global config must not change what we store or how.
+    GIT_CONFIG_GLOBAL: join10(store, "gitconfig"),
+    GIT_CONFIG_SYSTEM: join10(store, "gitconfig")
+  };
+}
+async function git(store, workspace, args, indexFile) {
   const { stdout } = await run("git", args, {
     timeout: GIT_TIMEOUT_MS,
     windowsHide: true,
-    env: {
-      ...process.env,
-      GIT_DIR: join10(store, "store"),
-      GIT_WORK_TREE: workspace,
-      // A per-workspace index: two workspaces snapshotting at once must not
-      // stomp on each other's staging area.
-      GIT_INDEX_FILE: join10(store, "indexes", key),
-      // A checkpoint is machinery, not authorship. Identity is fixed so it can
-      // never depend on — or leak — the owner's git config.
-      GIT_AUTHOR_NAME: "Nodal checkpoints",
-      GIT_AUTHOR_EMAIL: "checkpoints@nodal.local",
-      GIT_COMMITTER_NAME: "Nodal checkpoints",
-      GIT_COMMITTER_EMAIL: "checkpoints@nodal.local",
-      // The owner's global config must not change what we store or how.
-      GIT_CONFIG_GLOBAL: join10(store, "gitconfig"),
-      GIT_CONFIG_SYSTEM: join10(store, "gitconfig")
-    }
+    env: gitEnv(store, workspace, indexFile)
   });
   return stdout.trim();
 }
@@ -18352,7 +19619,7 @@ var init_zod_compat = __esm({
 });
 
 // ../../node_modules/.pnpm/@modelcontextprotocol+sdk@1.29.0_zod@4.4.3/node_modules/@modelcontextprotocol/sdk/dist/esm/types.js
-import * as z22 from "zod/v4";
+import * as z25 from "zod/v4";
 function assertCompleteRequestPrompt(request) {
   if (request.params.ref.type !== "ref/prompt") {
     throw new TypeError(`Expected CompleteRequestPrompt, but got ${request.params.ref.type}`);
@@ -18373,26 +19640,26 @@ var init_types3 = __esm({
     SUPPORTED_PROTOCOL_VERSIONS = [LATEST_PROTOCOL_VERSION, "2025-06-18", "2025-03-26", "2024-11-05", "2024-10-07"];
     RELATED_TASK_META_KEY = "io.modelcontextprotocol/related-task";
     JSONRPC_VERSION = "2.0";
-    AssertObjectSchema = z22.custom((v) => v !== null && (typeof v === "object" || typeof v === "function"));
-    ProgressTokenSchema = z22.union([z22.string(), z22.number().int()]);
-    CursorSchema = z22.string();
-    TaskCreationParamsSchema = z22.looseObject({
+    AssertObjectSchema = z25.custom((v) => v !== null && (typeof v === "object" || typeof v === "function"));
+    ProgressTokenSchema = z25.union([z25.string(), z25.number().int()]);
+    CursorSchema = z25.string();
+    TaskCreationParamsSchema = z25.looseObject({
       /**
        * Requested duration in milliseconds to retain task from creation.
        */
-      ttl: z22.number().optional(),
+      ttl: z25.number().optional(),
       /**
        * Time in milliseconds to wait between task status requests.
        */
-      pollInterval: z22.number().optional()
+      pollInterval: z25.number().optional()
     });
-    TaskMetadataSchema = z22.object({
-      ttl: z22.number().optional()
+    TaskMetadataSchema = z25.object({
+      ttl: z25.number().optional()
     });
-    RelatedTaskMetadataSchema = z22.object({
-      taskId: z22.string()
+    RelatedTaskMetadataSchema = z25.object({
+      taskId: z25.string()
     });
-    RequestMetaSchema = z22.looseObject({
+    RequestMetaSchema = z25.looseObject({
       /**
        * If specified, the caller is requesting out-of-band progress notifications for this request (as represented by notifications/progress). The value of this parameter is an opaque token that will be attached to any subsequent notifications. The receiver is not obligated to provide these notifications.
        */
@@ -18402,7 +19669,7 @@ var init_types3 = __esm({
        */
       [RELATED_TASK_META_KEY]: RelatedTaskMetadataSchema.optional()
     });
-    BaseRequestParamsSchema = z22.object({
+    BaseRequestParamsSchema = z25.object({
       /**
        * See [General fields: `_meta`](/specification/draft/basic/index#meta) for notes on `_meta` usage.
        */
@@ -18420,42 +19687,42 @@ var init_types3 = __esm({
       task: TaskMetadataSchema.optional()
     });
     isTaskAugmentedRequestParams = (value) => TaskAugmentedRequestParamsSchema.safeParse(value).success;
-    RequestSchema = z22.object({
-      method: z22.string(),
+    RequestSchema = z25.object({
+      method: z25.string(),
       params: BaseRequestParamsSchema.loose().optional()
     });
-    NotificationsParamsSchema = z22.object({
+    NotificationsParamsSchema = z25.object({
       /**
        * See [MCP specification](https://github.com/modelcontextprotocol/modelcontextprotocol/blob/47339c03c143bb4ec01a26e721a1b8fe66634ebe/docs/specification/draft/basic/index.mdx#general-fields)
        * for notes on _meta usage.
        */
       _meta: RequestMetaSchema.optional()
     });
-    NotificationSchema = z22.object({
-      method: z22.string(),
+    NotificationSchema = z25.object({
+      method: z25.string(),
       params: NotificationsParamsSchema.loose().optional()
     });
-    ResultSchema = z22.looseObject({
+    ResultSchema = z25.looseObject({
       /**
        * See [MCP specification](https://github.com/modelcontextprotocol/modelcontextprotocol/blob/47339c03c143bb4ec01a26e721a1b8fe66634ebe/docs/specification/draft/basic/index.mdx#general-fields)
        * for notes on _meta usage.
        */
       _meta: RequestMetaSchema.optional()
     });
-    RequestIdSchema = z22.union([z22.string(), z22.number().int()]);
-    JSONRPCRequestSchema = z22.object({
-      jsonrpc: z22.literal(JSONRPC_VERSION),
+    RequestIdSchema = z25.union([z25.string(), z25.number().int()]);
+    JSONRPCRequestSchema = z25.object({
+      jsonrpc: z25.literal(JSONRPC_VERSION),
       id: RequestIdSchema,
       ...RequestSchema.shape
     }).strict();
     isJSONRPCRequest = (value) => JSONRPCRequestSchema.safeParse(value).success;
-    JSONRPCNotificationSchema = z22.object({
-      jsonrpc: z22.literal(JSONRPC_VERSION),
+    JSONRPCNotificationSchema = z25.object({
+      jsonrpc: z25.literal(JSONRPC_VERSION),
       ...NotificationSchema.shape
     }).strict();
     isJSONRPCNotification = (value) => JSONRPCNotificationSchema.safeParse(value).success;
-    JSONRPCResultResponseSchema = z22.object({
-      jsonrpc: z22.literal(JSONRPC_VERSION),
+    JSONRPCResultResponseSchema = z25.object({
+      jsonrpc: z25.literal(JSONRPC_VERSION),
       id: RequestIdSchema,
       result: ResultSchema
     }).strict();
@@ -18470,32 +19737,32 @@ var init_types3 = __esm({
       ErrorCode2[ErrorCode2["InternalError"] = -32603] = "InternalError";
       ErrorCode2[ErrorCode2["UrlElicitationRequired"] = -32042] = "UrlElicitationRequired";
     })(ErrorCode || (ErrorCode = {}));
-    JSONRPCErrorResponseSchema = z22.object({
-      jsonrpc: z22.literal(JSONRPC_VERSION),
+    JSONRPCErrorResponseSchema = z25.object({
+      jsonrpc: z25.literal(JSONRPC_VERSION),
       id: RequestIdSchema.optional(),
-      error: z22.object({
+      error: z25.object({
         /**
          * The error type that occurred.
          */
-        code: z22.number().int(),
+        code: z25.number().int(),
         /**
          * A short description of the error. The message SHOULD be limited to a concise single sentence.
          */
-        message: z22.string(),
+        message: z25.string(),
         /**
          * Additional information about the error. The value of this member is defined by the sender (e.g. detailed error information, nested errors etc.).
          */
-        data: z22.unknown().optional()
+        data: z25.unknown().optional()
       })
     }).strict();
     isJSONRPCErrorResponse = (value) => JSONRPCErrorResponseSchema.safeParse(value).success;
-    JSONRPCMessageSchema = z22.union([
+    JSONRPCMessageSchema = z25.union([
       JSONRPCRequestSchema,
       JSONRPCNotificationSchema,
       JSONRPCResultResponseSchema,
       JSONRPCErrorResponseSchema
     ]);
-    JSONRPCResponseSchema = z22.union([JSONRPCResultResponseSchema, JSONRPCErrorResponseSchema]);
+    JSONRPCResponseSchema = z25.union([JSONRPCResultResponseSchema, JSONRPCErrorResponseSchema]);
     EmptyResultSchema = ResultSchema.strict();
     CancelledNotificationParamsSchema = NotificationsParamsSchema.extend({
       /**
@@ -18507,28 +19774,28 @@ var init_types3 = __esm({
       /**
        * An optional string describing the reason for the cancellation. This MAY be logged or presented to the user.
        */
-      reason: z22.string().optional()
+      reason: z25.string().optional()
     });
     CancelledNotificationSchema = NotificationSchema.extend({
-      method: z22.literal("notifications/cancelled"),
+      method: z25.literal("notifications/cancelled"),
       params: CancelledNotificationParamsSchema
     });
-    IconSchema = z22.object({
+    IconSchema = z25.object({
       /**
        * URL or data URI for the icon.
        */
-      src: z22.string(),
+      src: z25.string(),
       /**
        * Optional MIME type for the icon.
        */
-      mimeType: z22.string().optional(),
+      mimeType: z25.string().optional(),
       /**
        * Optional array of strings that specify sizes at which the icon can be used.
        * Each string should be in WxH format (e.g., `"48x48"`, `"96x96"`) or `"any"` for scalable formats like SVG.
        *
        * If not provided, the client should assume that the icon can be used at any size.
        */
-      sizes: z22.array(z22.string()).optional(),
+      sizes: z25.array(z25.string()).optional(),
       /**
        * Optional specifier for the theme this icon is designed for. `light` indicates
        * the icon is designed to be used with a light background, and `dark` indicates
@@ -18536,9 +19803,9 @@ var init_types3 = __esm({
        *
        * If not provided, the client should assume the icon can be used with any theme.
        */
-      theme: z22.enum(["light", "dark"]).optional()
+      theme: z25.enum(["light", "dark"]).optional()
     });
-    IconsSchema = z22.object({
+    IconsSchema = z25.object({
       /**
        * Optional set of sized icons that the client can display in a user interface.
        *
@@ -18550,11 +19817,11 @@ var init_types3 = __esm({
        * - `image/svg+xml` - SVG images (scalable but requires security precautions)
        * - `image/webp` - WebP images (modern, efficient format)
        */
-      icons: z22.array(IconSchema).optional()
+      icons: z25.array(IconSchema).optional()
     });
-    BaseMetadataSchema = z22.object({
+    BaseMetadataSchema = z25.object({
       /** Intended for programmatic or logical use, but used as a display name in past specs or fallback */
-      name: z22.string(),
+      name: z25.string(),
       /**
        * Intended for UI and end-user contexts — optimized to be human-readable and easily understood,
        * even by those unfamiliar with domain-specific terminology.
@@ -18563,16 +19830,16 @@ var init_types3 = __esm({
        * where `annotations.title` should be given precedence over using `name`,
        * if present).
        */
-      title: z22.string().optional()
+      title: z25.string().optional()
     });
     ImplementationSchema = BaseMetadataSchema.extend({
       ...BaseMetadataSchema.shape,
       ...IconsSchema.shape,
-      version: z22.string(),
+      version: z25.string(),
       /**
        * An optional URL of the website for this implementation.
        */
-      websiteUrl: z22.string().optional(),
+      websiteUrl: z25.string().optional(),
       /**
        * An optional human-readable description of what this implementation does.
        *
@@ -18580,23 +19847,23 @@ var init_types3 = __esm({
        * and capabilities. For example, a server might describe the types of resources
        * or tools it provides, while a client might describe its intended use case.
        */
-      description: z22.string().optional()
+      description: z25.string().optional()
     });
-    FormElicitationCapabilitySchema = z22.intersection(z22.object({
-      applyDefaults: z22.boolean().optional()
-    }), z22.record(z22.string(), z22.unknown()));
-    ElicitationCapabilitySchema = z22.preprocess((value) => {
+    FormElicitationCapabilitySchema = z25.intersection(z25.object({
+      applyDefaults: z25.boolean().optional()
+    }), z25.record(z25.string(), z25.unknown()));
+    ElicitationCapabilitySchema = z25.preprocess((value) => {
       if (value && typeof value === "object" && !Array.isArray(value)) {
         if (Object.keys(value).length === 0) {
           return { form: {} };
         }
       }
       return value;
-    }, z22.intersection(z22.object({
+    }, z25.intersection(z25.object({
       form: FormElicitationCapabilitySchema.optional(),
       url: AssertObjectSchema.optional()
-    }), z22.record(z22.string(), z22.unknown()).optional()));
-    ClientTasksCapabilitySchema = z22.looseObject({
+    }), z25.record(z25.string(), z25.unknown()).optional()));
+    ClientTasksCapabilitySchema = z25.looseObject({
       /**
        * Present if the client supports listing tasks.
        */
@@ -18608,22 +19875,22 @@ var init_types3 = __esm({
       /**
        * Capabilities for task creation on specific request types.
        */
-      requests: z22.looseObject({
+      requests: z25.looseObject({
         /**
          * Task support for sampling requests.
          */
-        sampling: z22.looseObject({
+        sampling: z25.looseObject({
           createMessage: AssertObjectSchema.optional()
         }).optional(),
         /**
          * Task support for elicitation requests.
          */
-        elicitation: z22.looseObject({
+        elicitation: z25.looseObject({
           create: AssertObjectSchema.optional()
         }).optional()
       }).optional()
     });
-    ServerTasksCapabilitySchema = z22.looseObject({
+    ServerTasksCapabilitySchema = z25.looseObject({
       /**
        * Present if the server supports listing tasks.
        */
@@ -18635,24 +19902,24 @@ var init_types3 = __esm({
       /**
        * Capabilities for task creation on specific request types.
        */
-      requests: z22.looseObject({
+      requests: z25.looseObject({
         /**
          * Task support for tool requests.
          */
-        tools: z22.looseObject({
+        tools: z25.looseObject({
           call: AssertObjectSchema.optional()
         }).optional()
       }).optional()
     });
-    ClientCapabilitiesSchema = z22.object({
+    ClientCapabilitiesSchema = z25.object({
       /**
        * Experimental, non-standard capabilities that the client supports.
        */
-      experimental: z22.record(z22.string(), AssertObjectSchema).optional(),
+      experimental: z25.record(z25.string(), AssertObjectSchema).optional(),
       /**
        * Present if the client supports sampling from an LLM.
        */
-      sampling: z22.object({
+      sampling: z25.object({
         /**
          * Present if the client supports context inclusion via includeContext parameter.
          * If not declared, servers SHOULD only use `includeContext: "none"` (or omit it).
@@ -18670,11 +19937,11 @@ var init_types3 = __esm({
       /**
        * Present if the client supports listing roots.
        */
-      roots: z22.object({
+      roots: z25.object({
         /**
          * Whether the client supports issuing notifications for changes to the roots list.
          */
-        listChanged: z22.boolean().optional()
+        listChanged: z25.boolean().optional()
       }).optional(),
       /**
        * Present if the client supports task creation.
@@ -18683,25 +19950,25 @@ var init_types3 = __esm({
       /**
        * Extensions that the client supports. Keys are extension identifiers (vendor-prefix/extension-name).
        */
-      extensions: z22.record(z22.string(), AssertObjectSchema).optional()
+      extensions: z25.record(z25.string(), AssertObjectSchema).optional()
     });
     InitializeRequestParamsSchema = BaseRequestParamsSchema.extend({
       /**
        * The latest version of the Model Context Protocol that the client supports. The client MAY decide to support older versions as well.
        */
-      protocolVersion: z22.string(),
+      protocolVersion: z25.string(),
       capabilities: ClientCapabilitiesSchema,
       clientInfo: ImplementationSchema
     });
     InitializeRequestSchema = RequestSchema.extend({
-      method: z22.literal("initialize"),
+      method: z25.literal("initialize"),
       params: InitializeRequestParamsSchema
     });
-    ServerCapabilitiesSchema = z22.object({
+    ServerCapabilitiesSchema = z25.object({
       /**
        * Experimental, non-standard capabilities that the server supports.
        */
-      experimental: z22.record(z22.string(), AssertObjectSchema).optional(),
+      experimental: z25.record(z25.string(), AssertObjectSchema).optional(),
       /**
        * Present if the server supports sending log messages to the client.
        */
@@ -18713,33 +19980,33 @@ var init_types3 = __esm({
       /**
        * Present if the server offers any prompt templates.
        */
-      prompts: z22.object({
+      prompts: z25.object({
         /**
          * Whether this server supports issuing notifications for changes to the prompt list.
          */
-        listChanged: z22.boolean().optional()
+        listChanged: z25.boolean().optional()
       }).optional(),
       /**
        * Present if the server offers any resources to read.
        */
-      resources: z22.object({
+      resources: z25.object({
         /**
          * Whether this server supports clients subscribing to resource updates.
          */
-        subscribe: z22.boolean().optional(),
+        subscribe: z25.boolean().optional(),
         /**
          * Whether this server supports issuing notifications for changes to the resource list.
          */
-        listChanged: z22.boolean().optional()
+        listChanged: z25.boolean().optional()
       }).optional(),
       /**
        * Present if the server offers any tools to call.
        */
-      tools: z22.object({
+      tools: z25.object({
         /**
          * Whether this server supports issuing notifications for changes to the tool list.
          */
-        listChanged: z22.boolean().optional()
+        listChanged: z25.boolean().optional()
       }).optional(),
       /**
        * Present if the server supports task creation.
@@ -18748,13 +20015,13 @@ var init_types3 = __esm({
       /**
        * Extensions that the server supports. Keys are extension identifiers (vendor-prefix/extension-name).
        */
-      extensions: z22.record(z22.string(), AssertObjectSchema).optional()
+      extensions: z25.record(z25.string(), AssertObjectSchema).optional()
     });
     InitializeResultSchema = ResultSchema.extend({
       /**
        * The version of the Model Context Protocol that the server wants to use. This may not match the version that the client requested. If the client cannot support this version, it MUST disconnect.
        */
-      protocolVersion: z22.string(),
+      protocolVersion: z25.string(),
       capabilities: ServerCapabilitiesSchema,
       serverInfo: ImplementationSchema,
       /**
@@ -18762,31 +20029,31 @@ var init_types3 = __esm({
        *
        * This can be used by clients to improve the LLM's understanding of available tools, resources, etc. It can be thought of like a "hint" to the model. For example, this information MAY be added to the system prompt.
        */
-      instructions: z22.string().optional()
+      instructions: z25.string().optional()
     });
     InitializedNotificationSchema = NotificationSchema.extend({
-      method: z22.literal("notifications/initialized"),
+      method: z25.literal("notifications/initialized"),
       params: NotificationsParamsSchema.optional()
     });
     PingRequestSchema = RequestSchema.extend({
-      method: z22.literal("ping"),
+      method: z25.literal("ping"),
       params: BaseRequestParamsSchema.optional()
     });
-    ProgressSchema = z22.object({
+    ProgressSchema = z25.object({
       /**
        * The progress thus far. This should increase every time progress is made, even if the total is unknown.
        */
-      progress: z22.number(),
+      progress: z25.number(),
       /**
        * Total number of items to process (or total progress required), if known.
        */
-      total: z22.optional(z22.number()),
+      total: z25.optional(z25.number()),
       /**
        * An optional message describing the current progress.
        */
-      message: z22.optional(z22.string())
+      message: z25.optional(z25.string())
     });
-    ProgressNotificationParamsSchema = z22.object({
+    ProgressNotificationParamsSchema = z25.object({
       ...NotificationsParamsSchema.shape,
       ...ProgressSchema.shape,
       /**
@@ -18795,7 +20062,7 @@ var init_types3 = __esm({
       progressToken: ProgressTokenSchema
     });
     ProgressNotificationSchema = NotificationSchema.extend({
-      method: z22.literal("notifications/progress"),
+      method: z25.literal("notifications/progress"),
       params: ProgressNotificationParamsSchema
     });
     PaginatedRequestParamsSchema = BaseRequestParamsSchema.extend({
@@ -18815,86 +20082,86 @@ var init_types3 = __esm({
        */
       nextCursor: CursorSchema.optional()
     });
-    TaskStatusSchema2 = z22.enum(["working", "input_required", "completed", "failed", "cancelled"]);
-    TaskSchema = z22.object({
-      taskId: z22.string(),
+    TaskStatusSchema2 = z25.enum(["working", "input_required", "completed", "failed", "cancelled"]);
+    TaskSchema = z25.object({
+      taskId: z25.string(),
       status: TaskStatusSchema2,
       /**
        * Time in milliseconds to keep task results available after completion.
        * If null, the task has unlimited lifetime until manually cleaned up.
        */
-      ttl: z22.union([z22.number(), z22.null()]),
+      ttl: z25.union([z25.number(), z25.null()]),
       /**
        * ISO 8601 timestamp when the task was created.
        */
-      createdAt: z22.string(),
+      createdAt: z25.string(),
       /**
        * ISO 8601 timestamp when the task was last updated.
        */
-      lastUpdatedAt: z22.string(),
-      pollInterval: z22.optional(z22.number()),
+      lastUpdatedAt: z25.string(),
+      pollInterval: z25.optional(z25.number()),
       /**
        * Optional diagnostic message for failed tasks or other status information.
        */
-      statusMessage: z22.optional(z22.string())
+      statusMessage: z25.optional(z25.string())
     });
     CreateTaskResultSchema = ResultSchema.extend({
       task: TaskSchema
     });
     TaskStatusNotificationParamsSchema = NotificationsParamsSchema.merge(TaskSchema);
     TaskStatusNotificationSchema = NotificationSchema.extend({
-      method: z22.literal("notifications/tasks/status"),
+      method: z25.literal("notifications/tasks/status"),
       params: TaskStatusNotificationParamsSchema
     });
     GetTaskRequestSchema = RequestSchema.extend({
-      method: z22.literal("tasks/get"),
+      method: z25.literal("tasks/get"),
       params: BaseRequestParamsSchema.extend({
-        taskId: z22.string()
+        taskId: z25.string()
       })
     });
     GetTaskResultSchema = ResultSchema.merge(TaskSchema);
     GetTaskPayloadRequestSchema = RequestSchema.extend({
-      method: z22.literal("tasks/result"),
+      method: z25.literal("tasks/result"),
       params: BaseRequestParamsSchema.extend({
-        taskId: z22.string()
+        taskId: z25.string()
       })
     });
     GetTaskPayloadResultSchema = ResultSchema.loose();
     ListTasksRequestSchema = PaginatedRequestSchema.extend({
-      method: z22.literal("tasks/list")
+      method: z25.literal("tasks/list")
     });
     ListTasksResultSchema = PaginatedResultSchema.extend({
-      tasks: z22.array(TaskSchema)
+      tasks: z25.array(TaskSchema)
     });
     CancelTaskRequestSchema = RequestSchema.extend({
-      method: z22.literal("tasks/cancel"),
+      method: z25.literal("tasks/cancel"),
       params: BaseRequestParamsSchema.extend({
-        taskId: z22.string()
+        taskId: z25.string()
       })
     });
     CancelTaskResultSchema = ResultSchema.merge(TaskSchema);
-    ResourceContentsSchema = z22.object({
+    ResourceContentsSchema = z25.object({
       /**
        * The URI of this resource.
        */
-      uri: z22.string(),
+      uri: z25.string(),
       /**
        * The MIME type of this resource, if known.
        */
-      mimeType: z22.optional(z22.string()),
+      mimeType: z25.optional(z25.string()),
       /**
        * See [MCP specification](https://github.com/modelcontextprotocol/modelcontextprotocol/blob/47339c03c143bb4ec01a26e721a1b8fe66634ebe/docs/specification/draft/basic/index.mdx#general-fields)
        * for notes on _meta usage.
        */
-      _meta: z22.record(z22.string(), z22.unknown()).optional()
+      _meta: z25.record(z25.string(), z25.unknown()).optional()
     });
     TextResourceContentsSchema = ResourceContentsSchema.extend({
       /**
        * The text of the item. This must only be set if the item can actually be represented as text (not binary data).
        */
-      text: z22.string()
+      text: z25.string()
     });
-    Base64Schema = z22.string().refine((val) => {
+    Base64Schema = z25.string().refine((val) => {
       try {
         atob(val);
         return true;
@@ -18908,44 +20175,44 @@ var init_types3 = __esm({
        */
       blob: Base64Schema
     });
-    RoleSchema = z22.enum(["user", "assistant"]);
-    AnnotationsSchema = z22.object({
+    RoleSchema = z25.enum(["user", "assistant"]);
+    AnnotationsSchema = z25.object({
       /**
        * Intended audience(s) for the resource.
        */
-      audience: z22.array(RoleSchema).optional(),
+      audience: z25.array(RoleSchema).optional(),
       /**
        * Importance hint for the resource, from 0 (least) to 1 (most).
        */
-      priority: z22.number().min(0).max(1).optional(),
+      priority: z25.number().min(0).max(1).optional(),
       /**
        * ISO 8601 timestamp for the most recent modification.
        */
-      lastModified: z22.iso.datetime({ offset: true }).optional()
+      lastModified: z25.iso.datetime({ offset: true }).optional()
     });
-    ResourceSchema = z22.object({
+    ResourceSchema = z25.object({
       ...BaseMetadataSchema.shape,
       ...IconsSchema.shape,
       /**
        * The URI of this resource.
        */
-      uri: z22.string(),
+      uri: z25.string(),
       /**
        * A description of what this resource represents.
        *
        * This can be used by clients to improve the LLM's understanding of available resources. It can be thought of like a "hint" to the model.
        */
-      description: z22.optional(z22.string()),
+      description: z25.optional(z25.string()),
       /**
        * The MIME type of this resource, if known.
        */
-      mimeType: z22.optional(z22.string()),
+      mimeType: z25.optional(z25.string()),
       /**
        * The size of the raw resource content, in bytes (i.e., before base64 encoding or any tokenization), if known.
        *
        * This can be used by Hosts to display file sizes and estimate context window usage.
        */
-      size: z22.optional(z22.number()),
+      size: z25.optional(z25.number()),
       /**
        * Optional annotations for the client.
        */
@@ -18954,25 +20221,25 @@ var init_types3 = __esm({
        * See [MCP specification](https://github.com/modelcontextprotocol/modelcontextprotocol/blob/47339c03c143bb4ec01a26e721a1b8fe66634ebe/docs/specification/draft/basic/index.mdx#general-fields)
        * for notes on _meta usage.
        */
-      _meta: z22.optional(z22.looseObject({}))
+      _meta: z25.optional(z25.looseObject({}))
     });
-    ResourceTemplateSchema = z22.object({
+    ResourceTemplateSchema = z25.object({
       ...BaseMetadataSchema.shape,
       ...IconsSchema.shape,
       /**
        * A URI template (according to RFC 6570) that can be used to construct resource URIs.
        */
-      uriTemplate: z22.string(),
+      uriTemplate: z25.string(),
       /**
        * A description of what this template is for.
        *
        * This can be used by clients to improve the LLM's understanding of available resources. It can be thought of like a "hint" to the model.
        */
-      description: z22.optional(z22.string()),
+      description: z25.optional(z25.string()),
       /**
        * The MIME type for all resources that match this template. This should only be included if all resources matching this template have the same type.
        */
-      mimeType: z22.optional(z22.string()),
+      mimeType: z25.optional(z25.string()),
       /**
        * Optional annotations for the client.
        */
@@ -18981,19 +20248,19 @@ var init_types3 = __esm({
        * See [MCP specification](https://github.com/modelcontextprotocol/modelcontextprotocol/blob/47339c03c143bb4ec01a26e721a1b8fe66634ebe/docs/specification/draft/basic/index.mdx#general-fields)
        * for notes on _meta usage.
        */
-      _meta: z22.optional(z22.looseObject({}))
+      _meta: z25.optional(z25.looseObject({}))
     });
     ListResourcesRequestSchema = PaginatedRequestSchema.extend({
-      method: z22.literal("resources/list")
+      method: z25.literal("resources/list")
     });
     ListResourcesResultSchema = PaginatedResultSchema.extend({
-      resources: z22.array(ResourceSchema)
+      resources: z25.array(ResourceSchema)
     });
     ListResourceTemplatesRequestSchema = PaginatedRequestSchema.extend({
-      method: z22.literal("resources/templates/list")
+      method: z25.literal("resources/templates/list")
     });
     ListResourceTemplatesResultSchema = PaginatedResultSchema.extend({
-      resourceTemplates: z22.array(ResourceTemplateSchema)
+      resourceTemplates: z25.array(ResourceTemplateSchema)
     });
     ResourceRequestParamsSchema = BaseRequestParamsSchema.extend({
       /**
@@ -19001,97 +20268,97 @@ var init_types3 = __esm({
        *
        * @format uri
        */
-      uri: z22.string()
+      uri: z25.string()
     });
     ReadResourceRequestParamsSchema = ResourceRequestParamsSchema;
     ReadResourceRequestSchema = RequestSchema.extend({
-      method: z22.literal("resources/read"),
+      method: z25.literal("resources/read"),
       params: ReadResourceRequestParamsSchema
     });
     ReadResourceResultSchema = ResultSchema.extend({
-      contents: z22.array(z22.union([TextResourceContentsSchema, BlobResourceContentsSchema]))
+      contents: z25.array(z25.union([TextResourceContentsSchema, BlobResourceContentsSchema]))
     });
     ResourceListChangedNotificationSchema = NotificationSchema.extend({
-      method: z22.literal("notifications/resources/list_changed"),
+      method: z25.literal("notifications/resources/list_changed"),
       params: NotificationsParamsSchema.optional()
     });
     SubscribeRequestParamsSchema = ResourceRequestParamsSchema;
     SubscribeRequestSchema = RequestSchema.extend({
-      method: z22.literal("resources/subscribe"),
+      method: z25.literal("resources/subscribe"),
       params: SubscribeRequestParamsSchema
     });
     UnsubscribeRequestParamsSchema = ResourceRequestParamsSchema;
     UnsubscribeRequestSchema = RequestSchema.extend({
-      method: z22.literal("resources/unsubscribe"),
+      method: z25.literal("resources/unsubscribe"),
       params: UnsubscribeRequestParamsSchema
     });
     ResourceUpdatedNotificationParamsSchema = NotificationsParamsSchema.extend({
       /**
        * The URI of the resource that has been updated. This might be a sub-resource of the one that the client actually subscribed to.
        */
-      uri: z22.string()
+      uri: z25.string()
     });
     ResourceUpdatedNotificationSchema = NotificationSchema.extend({
-      method: z22.literal("notifications/resources/updated"),
+      method: z25.literal("notifications/resources/updated"),
       params: ResourceUpdatedNotificationParamsSchema
     });
-    PromptArgumentSchema = z22.object({
+    PromptArgumentSchema = z25.object({
       /**
        * The name of the argument.
        */
-      name: z22.string(),
+      name: z25.string(),
       /**
        * A human-readable description of the argument.
        */
-      description: z22.optional(z22.string()),
+      description: z25.optional(z25.string()),
       /**
        * Whether this argument must be provided.
        */
-      required: z22.optional(z22.boolean())
+      required: z25.optional(z25.boolean())
     });
-    PromptSchema = z22.object({
+    PromptSchema = z25.object({
       ...BaseMetadataSchema.shape,
       ...IconsSchema.shape,
       /**
        * An optional description of what this prompt provides
        */
-      description: z22.optional(z22.string()),
+      description: z25.optional(z25.string()),
       /**
        * A list of arguments to use for templating the prompt.
        */
-      arguments: z22.optional(z22.array(PromptArgumentSchema)),
+      arguments: z25.optional(z25.array(PromptArgumentSchema)),
       /**
        * See [MCP specification](https://github.com/modelcontextprotocol/modelcontextprotocol/blob/47339c03c143bb4ec01a26e721a1b8fe66634ebe/docs/specification/draft/basic/index.mdx#general-fields)
        * for notes on _meta usage.
        */
-      _meta: z22.optional(z22.looseObject({}))
+      _meta: z25.optional(z25.looseObject({}))
     });
     ListPromptsRequestSchema = PaginatedRequestSchema.extend({
-      method: z22.literal("prompts/list")
+      method: z25.literal("prompts/list")
     });
     ListPromptsResultSchema = PaginatedResultSchema.extend({
-      prompts: z22.array(PromptSchema)
+      prompts: z25.array(PromptSchema)
     });
     GetPromptRequestParamsSchema = BaseRequestParamsSchema.extend({
       /**
        * The name of the prompt or prompt template.
        */
-      name: z22.string(),
+      name: z25.string(),
       /**
        * Arguments to use for templating the prompt.
        */
-      arguments: z22.record(z22.string(), z22.string()).optional()
+      arguments: z25.record(z25.string(), z25.string()).optional()
     });
     GetPromptRequestSchema = RequestSchema.extend({
-      method: z22.literal("prompts/get"),
+      method: z25.literal("prompts/get"),
       params: GetPromptRequestParamsSchema
     });
-    TextContentSchema = z22.object({
-      type: z22.literal("text"),
+    TextContentSchema = z25.object({
+      type: z25.literal("text"),
       /**
        * The text content of the message.
        */
-      text: z22.string(),
+      text: z25.string(),
       /**
        * Optional annotations for the client.
        */
@@ -19100,10 +20367,10 @@ var init_types3 = __esm({
        * See [MCP specification](https://github.com/modelcontextprotocol/modelcontextprotocol/blob/47339c03c143bb4ec01a26e721a1b8fe66634ebe/docs/specification/draft/basic/index.mdx#general-fields)
        * for notes on _meta usage.
        */
-      _meta: z22.record(z22.string(), z22.unknown()).optional()
+      _meta: z25.record(z25.string(), z25.unknown()).optional()
     });
-    ImageContentSchema = z22.object({
-      type: z22.literal("image"),
+    ImageContentSchema = z25.object({
+      type: z25.literal("image"),
       /**
        * The base64-encoded image data.
        */
@@ -19111,7 +20378,7 @@ var init_types3 = __esm({
       /**
        * The MIME type of the image. Different providers may support different image types.
        */
-      mimeType: z22.string(),
+      mimeType: z25.string(),
       /**
        * Optional annotations for the client.
        */
@@ -19120,10 +20387,10 @@ var init_types3 = __esm({
        * See [MCP specification](https://github.com/modelcontextprotocol/modelcontextprotocol/blob/47339c03c143bb4ec01a26e721a1b8fe66634ebe/docs/specification/draft/basic/index.mdx#general-fields)
        * for notes on _meta usage.
        */
-      _meta: z22.record(z22.string(), z22.unknown()).optional()
+      _meta: z25.record(z25.string(), z25.unknown()).optional()
     });
-    AudioContentSchema = z22.object({
-      type: z22.literal("audio"),
+    AudioContentSchema = z25.object({
+      type: z25.literal("audio"),
       /**
        * The base64-encoded audio data.
        */
@@ -19131,7 +20398,7 @@ var init_types3 = __esm({
       /**
        * The MIME type of the audio. Different providers may support different audio types.
        */
-      mimeType: z22.string(),
+      mimeType: z25.string(),
       /**
        * Optional annotations for the client.
        */
@@ -19140,34 +20407,34 @@ var init_types3 = __esm({
        * See [MCP specification](https://github.com/modelcontextprotocol/modelcontextprotocol/blob/47339c03c143bb4ec01a26e721a1b8fe66634ebe/docs/specification/draft/basic/index.mdx#general-fields)
        * for notes on _meta usage.
        */
-      _meta: z22.record(z22.string(), z22.unknown()).optional()
+      _meta: z25.record(z25.string(), z25.unknown()).optional()
     });
-    ToolUseContentSchema = z22.object({
-      type: z22.literal("tool_use"),
+    ToolUseContentSchema = z25.object({
+      type: z25.literal("tool_use"),
       /**
        * The name of the tool to invoke.
        * Must match a tool name from the request's tools array.
        */
-      name: z22.string(),
+      name: z25.string(),
       /**
        * Unique identifier for this tool call.
        * Used to correlate with ToolResultContent in subsequent messages.
        */
-      id: z22.string(),
+      id: z25.string(),
       /**
        * Arguments to pass to the tool.
        * Must conform to the tool's inputSchema.
        */
-      input: z22.record(z22.string(), z22.unknown()),
+      input: z25.record(z25.string(), z25.unknown()),
       /**
        * See [MCP specification](https://github.com/modelcontextprotocol/modelcontextprotocol/blob/47339c03c143bb4ec01a26e721a1b8fe66634ebe/docs/specification/draft/basic/index.mdx#general-fields)
        * for notes on _meta usage.
        */
-      _meta: z22.record(z22.string(), z22.unknown()).optional()
+      _meta: z25.record(z25.string(), z25.unknown()).optional()
     });
-    EmbeddedResourceSchema = z22.object({
-      type: z22.literal("resource"),
-      resource: z22.union([TextResourceContentsSchema, BlobResourceContentsSchema]),
+    EmbeddedResourceSchema = z25.object({
+      type: z25.literal("resource"),
+      resource: z25.union([TextResourceContentsSchema, BlobResourceContentsSchema]),
       /**
        * Optional annotations for the client.
        */
@@ -19176,19 +20443,19 @@ var init_types3 = __esm({
        * See [MCP specification](https://github.com/modelcontextprotocol/modelcontextprotocol/blob/47339c03c143bb4ec01a26e721a1b8fe66634ebe/docs/specification/draft/basic/index.mdx#general-fields)
        * for notes on _meta usage.
        */
-      _meta: z22.record(z22.string(), z22.unknown()).optional()
+      _meta: z25.record(z25.string(), z25.unknown()).optional()
     });
     ResourceLinkSchema = ResourceSchema.extend({
-      type: z22.literal("resource_link")
+      type: z25.literal("resource_link")
     });
-    ContentBlockSchema = z22.union([
+    ContentBlockSchema = z25.union([
       TextContentSchema,
       ImageContentSchema,
       AudioContentSchema,
       ResourceLinkSchema,
       EmbeddedResourceSchema
     ]);
-    PromptMessageSchema = z22.object({
+    PromptMessageSchema = z25.object({
       role: RoleSchema,
       content: ContentBlockSchema
     });
@@ -19196,24 +20463,24 @@ var init_types3 = __esm({
       /**
        * An optional description for the prompt.
        */
-      description: z22.string().optional(),
-      messages: z22.array(PromptMessageSchema)
+      description: z25.string().optional(),
+      messages: z25.array(PromptMessageSchema)
     });
     PromptListChangedNotificationSchema = NotificationSchema.extend({
-      method: z22.literal("notifications/prompts/list_changed"),
+      method: z25.literal("notifications/prompts/list_changed"),
       params: NotificationsParamsSchema.optional()
     });
-    ToolAnnotationsSchema = z22.object({
+    ToolAnnotationsSchema = z25.object({
       /**
        * A human-readable title for the tool.
        */
-      title: z22.string().optional(),
+      title: z25.string().optional(),
       /**
        * If true, the tool does not modify its environment.
        *
        * Default: false
        */
-      readOnlyHint: z22.boolean().optional(),
+      readOnlyHint: z25.boolean().optional(),
       /**
        * If true, the tool may perform destructive updates to its environment.
        * If false, the tool performs only additive updates.
@@ -19222,7 +20489,7 @@ var init_types3 = __esm({
        *
        * Default: true
        */
-      destructiveHint: z22.boolean().optional(),
+      destructiveHint: z25.boolean().optional(),
       /**
        * If true, calling the tool repeatedly with the same arguments
        * will have no additional effect on the its environment.
@@ -19231,7 +20498,7 @@ var init_types3 = __esm({
        *
        * Default: false
        */
-      idempotentHint: z22.boolean().optional(),
+      idempotentHint: z25.boolean().optional(),
       /**
        * If true, this tool may interact with an "open world" of external
        * entities. If false, the tool's domain of interaction is closed.
@@ -19240,9 +20507,9 @@ var init_types3 = __esm({
        *
        * Default: true
        */
-      openWorldHint: z22.boolean().optional()
+      openWorldHint: z25.boolean().optional()
     });
-    ToolExecutionSchema = z22.object({
+    ToolExecutionSchema = z25.object({
       /**
        * Indicates the tool's preference for task-augmented execution.
        * - "required": Clients MUST invoke the tool as a task
@@ -19251,34 +20518,34 @@ var init_types3 = __esm({
        *
        * If not present, defaults to "forbidden".
        */
-      taskSupport: z22.enum(["required", "optional", "forbidden"]).optional()
+      taskSupport: z25.enum(["required", "optional", "forbidden"]).optional()
     });
-    ToolSchema = z22.object({
+    ToolSchema = z25.object({
       ...BaseMetadataSchema.shape,
       ...IconsSchema.shape,
       /**
        * A human-readable description of the tool.
        */
-      description: z22.string().optional(),
+      description: z25.string().optional(),
       /**
        * A JSON Schema 2020-12 object defining the expected parameters for the tool.
        * Must have type: 'object' at the root level per MCP spec.
        */
-      inputSchema: z22.object({
-        type: z22.literal("object"),
-        properties: z22.record(z22.string(), AssertObjectSchema).optional(),
-        required: z22.array(z22.string()).optional()
-      }).catchall(z22.unknown()),
+      inputSchema: z25.object({
+        type: z25.literal("object"),
+        properties: z25.record(z25.string(), AssertObjectSchema).optional(),
+        required: z25.array(z25.string()).optional()
+      }).catchall(z25.unknown()),
       /**
        * An optional JSON Schema 2020-12 object defining the structure of the tool's output
        * returned in the structuredContent field of a CallToolResult.
        * Must have type: 'object' at the root level per MCP spec.
        */
-      outputSchema: z22.object({
-        type: z22.literal("object"),
-        properties: z22.record(z22.string(), AssertObjectSchema).optional(),
-        required: z22.array(z22.string()).optional()
-      }).catchall(z22.unknown()).optional(),
+      outputSchema: z25.object({
+        type: z25.literal("object"),
+        properties: z25.record(z25.string(), AssertObjectSchema).optional(),
+        required: z25.array(z25.string()).optional()
+      }).catchall(z25.unknown()).optional(),
       /**
        * Optional additional tool information.
        */
@@ -19291,13 +20558,13 @@ var init_types3 = __esm({
        * See [MCP specification](https://github.com/modelcontextprotocol/modelcontextprotocol/blob/47339c03c143bb4ec01a26e721a1b8fe66634ebe/docs/specification/draft/basic/index.mdx#general-fields)
        * for notes on _meta usage.
        */
-      _meta: z22.record(z22.string(), z22.unknown()).optional()
+      _meta: z25.record(z25.string(), z25.unknown()).optional()
     });
     ListToolsRequestSchema = PaginatedRequestSchema.extend({
-      method: z22.literal("tools/list")
+      method: z25.literal("tools/list")
     });
     ListToolsResultSchema = PaginatedResultSchema.extend({
-      tools: z22.array(ToolSchema)
+      tools: z25.array(ToolSchema)
     });
     CallToolResultSchema = ResultSchema.extend({
       /**
@@ -19306,13 +20573,13 @@ var init_types3 = __esm({
        * If the Tool does not define an outputSchema, this field MUST be present in the result.
        * For backwards compatibility, this field is always present, but it may be empty.
        */
-      content: z22.array(ContentBlockSchema).default([]),
+      content: z25.array(ContentBlockSchema).default([]),
       /**
        * An object containing structured tool output.
        *
        * If the Tool defines an outputSchema, this field MUST be present in the result, and contain a JSON object that matches the schema.
        */
-      structuredContent: z22.record(z22.string(), z22.unknown()).optional(),
+      structuredContent: z25.record(z25.string(), z25.unknown()).optional(),
       /**
        * Whether the tool call ended in an error.
        *
@@ -19327,30 +20594,30 @@ var init_types3 = __esm({
        * server does not support tool calls, or any other exceptional conditions,
        * should be reported as an MCP error response.
        */
-      isError: z22.boolean().optional()
+      isError: z25.boolean().optional()
     });
     CompatibilityCallToolResultSchema = CallToolResultSchema.or(ResultSchema.extend({
-      toolResult: z22.unknown()
+      toolResult: z25.unknown()
     }));
     CallToolRequestParamsSchema = TaskAugmentedRequestParamsSchema.extend({
       /**
        * The name of the tool to call.
        */
-      name: z22.string(),
+      name: z25.string(),
       /**
        * Arguments to pass to the tool.
        */
-      arguments: z22.record(z22.string(), z22.unknown()).optional()
+      arguments: z25.record(z25.string(), z25.unknown()).optional()
     });
     CallToolRequestSchema = RequestSchema.extend({
-      method: z22.literal("tools/call"),
+      method: z25.literal("tools/call"),
       params: CallToolRequestParamsSchema
     });
     ToolListChangedNotificationSchema = NotificationSchema.extend({
-      method: z22.literal("notifications/tools/list_changed"),
+      method: z25.literal("notifications/tools/list_changed"),
       params: NotificationsParamsSchema.optional()
     });
-    ListChangedOptionsBaseSchema = z22.object({
+    ListChangedOptionsBaseSchema = z25.object({
       /**
        * If true, the list will be refreshed automatically when a list changed notification is received.
        * The callback will be called with the updated list.
@@ -19359,7 +20626,7 @@ var init_types3 = __esm({
        *
        * @default true
        */
-      autoRefresh: z22.boolean().default(true),
+      autoRefresh: z25.boolean().default(true),
       /**
        * Debounce time in milliseconds for list changed notification processing.
        *
@@ -19368,9 +20635,9 @@ var init_types3 = __esm({
        *
        * @default 300
        */
-      debounceMs: z22.number().int().nonnegative().default(300)
+      debounceMs: z25.number().int().nonnegative().default(300)
     });
-    LoggingLevelSchema = z22.enum(["debug", "info", "notice", "warning", "error", "critical", "alert", "emergency"]);
+    LoggingLevelSchema = z25.enum(["debug", "info", "notice", "warning", "error", "critical", "alert", "emergency"]);
     SetLevelRequestParamsSchema = BaseRequestParamsSchema.extend({
       /**
        * The level of logging that the client wants to receive from the server. The server should send all logs at this level and higher (i.e., more severe) to the client as notifications/logging/message.
@@ -19378,7 +20645,7 @@ var init_types3 = __esm({
       level: LoggingLevelSchema
     });
     SetLevelRequestSchema = RequestSchema.extend({
-      method: z22.literal("logging/setLevel"),
+      method: z25.literal("logging/setLevel"),
       params: SetLevelRequestParamsSchema
     });
     LoggingMessageNotificationParamsSchema = NotificationsParamsSchema.extend({
@@ -19389,80 +20656,80 @@ var init_types3 = __esm({
       /**
        * An optional name of the logger issuing this message.
        */
-      logger: z22.string().optional(),
+      logger: z25.string().optional(),
       /**
        * The data to be logged, such as a string message or an object. Any JSON serializable type is allowed here.
        */
-      data: z22.unknown()
+      data: z25.unknown()
     });
     LoggingMessageNotificationSchema = NotificationSchema.extend({
-      method: z22.literal("notifications/message"),
+      method: z25.literal("notifications/message"),
       params: LoggingMessageNotificationParamsSchema
     });
-    ModelHintSchema = z22.object({
+    ModelHintSchema = z25.object({
       /**
        * A hint for a model name.
        */
-      name: z22.string().optional()
+      name: z25.string().optional()
     });
-    ModelPreferencesSchema = z22.object({
+    ModelPreferencesSchema = z25.object({
       /**
        * Optional hints to use for model selection.
        */
-      hints: z22.array(ModelHintSchema).optional(),
+      hints: z25.array(ModelHintSchema).optional(),
       /**
        * How much to prioritize cost when selecting a model.
        */
-      costPriority: z22.number().min(0).max(1).optional(),
+      costPriority: z25.number().min(0).max(1).optional(),
       /**
        * How much to prioritize sampling speed (latency) when selecting a model.
        */
-      speedPriority: z22.number().min(0).max(1).optional(),
+      speedPriority: z25.number().min(0).max(1).optional(),
       /**
        * How much to prioritize intelligence and capabilities when selecting a model.
        */
-      intelligencePriority: z22.number().min(0).max(1).optional()
+      intelligencePriority: z25.number().min(0).max(1).optional()
     });
-    ToolChoiceSchema = z22.object({
+    ToolChoiceSchema = z25.object({
       /**
        * Controls when tools are used:
        * - "auto": Model decides whether to use tools (default)
        * - "required": Model MUST use at least one tool before completing
        * - "none": Model MUST NOT use any tools
        */
-      mode: z22.enum(["auto", "required", "none"]).optional()
+      mode: z25.enum(["auto", "required", "none"]).optional()
     });
-    ToolResultContentSchema = z22.object({
-      type: z22.literal("tool_result"),
-      toolUseId: z22.string().describe("The unique identifier for the corresponding tool call."),
-      content: z22.array(ContentBlockSchema).default([]),
-      structuredContent: z22.object({}).loose().optional(),
-      isError: z22.boolean().optional(),
+    ToolResultContentSchema = z25.object({
+      type: z25.literal("tool_result"),
+      toolUseId: z25.string().describe("The unique identifier for the corresponding tool call."),
+      content: z25.array(ContentBlockSchema).default([]),
+      structuredContent: z25.object({}).loose().optional(),
+      isError: z25.boolean().optional(),
       /**
        * See [MCP specification](https://github.com/modelcontextprotocol/modelcontextprotocol/blob/47339c03c143bb4ec01a26e721a1b8fe66634ebe/docs/specification/draft/basic/index.mdx#general-fields)
        * for notes on _meta usage.
        */
-      _meta: z22.record(z22.string(), z22.unknown()).optional()
+      _meta: z25.record(z25.string(), z25.unknown()).optional()
     });
-    SamplingContentSchema = z22.discriminatedUnion("type", [TextContentSchema, ImageContentSchema, AudioContentSchema]);
-    SamplingMessageContentBlockSchema = z22.discriminatedUnion("type", [
+    SamplingContentSchema = z25.discriminatedUnion("type", [TextContentSchema, ImageContentSchema, AudioContentSchema]);
+    SamplingMessageContentBlockSchema = z25.discriminatedUnion("type", [
       TextContentSchema,
       ImageContentSchema,
       AudioContentSchema,
       ToolUseContentSchema,
       ToolResultContentSchema
     ]);
-    SamplingMessageSchema = z22.object({
+    SamplingMessageSchema = z25.object({
       role: RoleSchema,
-      content: z22.union([SamplingMessageContentBlockSchema, z22.array(SamplingMessageContentBlockSchema)]),
+      content: z25.union([SamplingMessageContentBlockSchema, z25.array(SamplingMessageContentBlockSchema)]),
       /**
        * See [MCP specification](https://github.com/modelcontextprotocol/modelcontextprotocol/blob/47339c03c143bb4ec01a26e721a1b8fe66634ebe/docs/specification/draft/basic/index.mdx#general-fields)
        * for notes on _meta usage.
        */
-      _meta: z22.record(z22.string(), z22.unknown()).optional()
+      _meta: z25.record(z25.string(), z25.unknown()).optional()
     });
     CreateMessageRequestParamsSchema = TaskAugmentedRequestParamsSchema.extend({
-      messages: z22.array(SamplingMessageSchema),
+      messages: z25.array(SamplingMessageSchema),
       /**
        * The server's preferences for which model to select. The client MAY modify or omit this request.
        */
@@ -19470,7 +20737,7 @@ var init_types3 = __esm({
       /**
        * An optional system prompt the server wants to use for sampling. The client MAY modify or omit this prompt.
        */
-      systemPrompt: z22.string().optional(),
+      systemPrompt: z25.string().optional(),
       /**
        * A request to include context from one or more MCP servers (including the caller), to be attached to the prompt.
        * The client MAY ignore this request.
@@ -19478,15 +20745,15 @@ var init_types3 = __esm({
        * Default is "none". Values "thisServer" and "allServers" are soft-deprecated. Servers SHOULD only use these values if the client
        * declares ClientCapabilities.sampling.context. These values may be removed in future spec releases.
        */
-      includeContext: z22.enum(["none", "thisServer", "allServers"]).optional(),
-      temperature: z22.number().optional(),
+      includeContext: z25.enum(["none", "thisServer", "allServers"]).optional(),
+      temperature: z25.number().optional(),
       /**
        * The requested maximum number of tokens to sample (to prevent runaway completions).
        *
        * The client MAY choose to sample fewer tokens than the requested maximum.
        */
-      maxTokens: z22.number().int(),
-      stopSequences: z22.array(z22.string()).optional(),
+      maxTokens: z25.number().int(),
+      stopSequences: z25.array(z25.string()).optional(),
       /**
        * Optional metadata to pass through to the LLM provider. The format of this metadata is provider-specific.
        */
@@ -19495,7 +20762,7 @@ var init_types3 = __esm({
        * Tools that the model may use during generation.
        * The client MUST return an error if this field is provided but ClientCapabilities.sampling.tools is not declared.
        */
-      tools: z22.array(ToolSchema).optional(),
+      tools: z25.array(ToolSchema).optional(),
       /**
        * Controls how the model uses tools.
        * The client MUST return an error if this field is provided but ClientCapabilities.sampling.tools is not declared.
@@ -19504,14 +20771,14 @@ var init_types3 = __esm({
       toolChoice: ToolChoiceSchema.optional()
     });
     CreateMessageRequestSchema = RequestSchema.extend({
-      method: z22.literal("sampling/createMessage"),
+      method: z25.literal("sampling/createMessage"),
       params: CreateMessageRequestParamsSchema
     });
     CreateMessageResultSchema = ResultSchema.extend({
       /**
        * The name of the model that generated the message.
        */
-      model: z22.string(),
+      model: z25.string(),
       /**
        * The reason why sampling stopped, if known.
        *
@@ -19522,7 +20789,7 @@ var init_types3 = __esm({
        *
        * This field is an open string to allow for provider-specific stop reasons.
        */
-      stopReason: z22.optional(z22.enum(["endTurn", "stopSequence", "maxTokens"]).or(z22.string())),
+      stopReason: z25.optional(z25.enum(["endTurn", "stopSequence", "maxTokens"]).or(z25.string())),
       role: RoleSchema,
       /**
        * Response content. Single content block (text, image, or audio).
@@ -19533,7 +20800,7 @@ var init_types3 = __esm({
       /**
        * The name of the model that generated the message.
        */
-      model: z22.string(),
+      model: z25.string(),
       /**
        * The reason why sampling stopped, if known.
        *
@@ -19545,144 +20812,144 @@ var init_types3 = __esm({
        *
        * This field is an open string to allow for provider-specific stop reasons.
        */
-      stopReason: z22.optional(z22.enum(["endTurn", "stopSequence", "maxTokens", "toolUse"]).or(z22.string())),
+      stopReason: z25.optional(z25.enum(["endTurn", "stopSequence", "maxTokens", "toolUse"]).or(z25.string())),
       role: RoleSchema,
       /**
        * Response content. May be a single block or array. May include ToolUseContent if stopReason is "toolUse".
        */
-      content: z22.union([SamplingMessageContentBlockSchema, z22.array(SamplingMessageContentBlockSchema)])
+      content: z25.union([SamplingMessageContentBlockSchema, z25.array(SamplingMessageContentBlockSchema)])
     });
-    BooleanSchemaSchema = z22.object({
-      type: z22.literal("boolean"),
-      title: z22.string().optional(),
-      description: z22.string().optional(),
-      default: z22.boolean().optional()
+    BooleanSchemaSchema = z25.object({
+      type: z25.literal("boolean"),
+      title: z25.string().optional(),
+      description: z25.string().optional(),
+      default: z25.boolean().optional()
     });
-    StringSchemaSchema = z22.object({
-      type: z22.literal("string"),
-      title: z22.string().optional(),
-      description: z22.string().optional(),
-      minLength: z22.number().optional(),
-      maxLength: z22.number().optional(),
-      format: z22.enum(["email", "uri", "date", "date-time"]).optional(),
-      default: z22.string().optional()
+    StringSchemaSchema = z25.object({
+      type: z25.literal("string"),
+      title: z25.string().optional(),
+      description: z25.string().optional(),
+      minLength: z25.number().optional(),
+      maxLength: z25.number().optional(),
+      format: z25.enum(["email", "uri", "date", "date-time"]).optional(),
+      default: z25.string().optional()
     });
-    NumberSchemaSchema = z22.object({
-      type: z22.enum(["number", "integer"]),
-      title: z22.string().optional(),
-      description: z22.string().optional(),
-      minimum: z22.number().optional(),
-      maximum: z22.number().optional(),
-      default: z22.number().optional()
+    NumberSchemaSchema = z25.object({
+      type: z25.enum(["number", "integer"]),
+      title: z25.string().optional(),
+      description: z25.string().optional(),
+      minimum: z25.number().optional(),
+      maximum: z25.number().optional(),
+      default: z25.number().optional()
     });
-    UntitledSingleSelectEnumSchemaSchema = z22.object({
-      type: z22.literal("string"),
-      title: z22.string().optional(),
-      description: z22.string().optional(),
-      enum: z22.array(z22.string()),
-      default: z22.string().optional()
+    UntitledSingleSelectEnumSchemaSchema = z25.object({
+      type: z25.literal("string"),
+      title: z25.string().optional(),
+      description: z25.string().optional(),
+      enum: z25.array(z25.string()),
+      default: z25.string().optional()
     });
-    TitledSingleSelectEnumSchemaSchema = z22.object({
-      type: z22.literal("string"),
-      title: z22.string().optional(),
-      description: z22.string().optional(),
-      oneOf: z22.array(z22.object({
-        const: z22.string(),
-        title: z22.string()
+    TitledSingleSelectEnumSchemaSchema = z25.object({
+      type: z25.literal("string"),
+      title: z25.string().optional(),
+      description: z25.string().optional(),
+      oneOf: z25.array(z25.object({
+        const: z25.string(),
+        title: z25.string()
       })),
-      default: z22.string().optional()
+      default: z25.string().optional()
     });
-    LegacyTitledEnumSchemaSchema = z22.object({
-      type: z22.literal("string"),
-      title: z22.string().optional(),
-      description: z22.string().optional(),
-      enum: z22.array(z22.string()),
-      enumNames: z22.array(z22.string()).optional(),
-      default: z22.string().optional()
+    LegacyTitledEnumSchemaSchema = z25.object({
+      type: z25.literal("string"),
+      title: z25.string().optional(),
+      description: z25.string().optional(),
+      enum: z25.array(z25.string()),
+      enumNames: z25.array(z25.string()).optional(),
+      default: z25.string().optional()
     });
-    SingleSelectEnumSchemaSchema = z22.union([UntitledSingleSelectEnumSchemaSchema, TitledSingleSelectEnumSchemaSchema]);
-    UntitledMultiSelectEnumSchemaSchema = z22.object({
-      type: z22.literal("array"),
-      title: z22.string().optional(),
-      description: z22.string().optional(),
-      minItems: z22.number().optional(),
-      maxItems: z22.number().optional(),
-      items: z22.object({
-        type: z22.literal("string"),
-        enum: z22.array(z22.string())
+    SingleSelectEnumSchemaSchema = z25.union([UntitledSingleSelectEnumSchemaSchema, TitledSingleSelectEnumSchemaSchema]);
+    UntitledMultiSelectEnumSchemaSchema = z25.object({
+      type: z25.literal("array"),
+      title: z25.string().optional(),
+      description: z25.string().optional(),
+      minItems: z25.number().optional(),
+      maxItems: z25.number().optional(),
+      items: z25.object({
+        type: z25.literal("string"),
+        enum: z25.array(z25.string())
       }),
-      default: z22.array(z22.string()).optional()
+      default: z25.array(z25.string()).optional()
     });
-    TitledMultiSelectEnumSchemaSchema = z22.object({
-      type: z22.literal("array"),
-      title: z22.string().optional(),
-      description: z22.string().optional(),
-      minItems: z22.number().optional(),
-      maxItems: z22.number().optional(),
-      items: z22.object({
-        anyOf: z22.array(z22.object({
-          const: z22.string(),
-          title: z22.string()
+    TitledMultiSelectEnumSchemaSchema = z25.object({
+      type: z25.literal("array"),
+      title: z25.string().optional(),
+      description: z25.string().optional(),
+      minItems: z25.number().optional(),
+      maxItems: z25.number().optional(),
+      items: z25.object({
+        anyOf: z25.array(z25.object({
+          const: z25.string(),
+          title: z25.string()
         }))
       }),
-      default: z22.array(z22.string()).optional()
+      default: z25.array(z25.string()).optional()
     });
-    MultiSelectEnumSchemaSchema = z22.union([UntitledMultiSelectEnumSchemaSchema, TitledMultiSelectEnumSchemaSchema]);
-    EnumSchemaSchema = z22.union([LegacyTitledEnumSchemaSchema, SingleSelectEnumSchemaSchema, MultiSelectEnumSchemaSchema]);
-    PrimitiveSchemaDefinitionSchema = z22.union([EnumSchemaSchema, BooleanSchemaSchema, StringSchemaSchema, NumberSchemaSchema]);
+    MultiSelectEnumSchemaSchema = z25.union([UntitledMultiSelectEnumSchemaSchema, TitledMultiSelectEnumSchemaSchema]);
+    EnumSchemaSchema = z25.union([LegacyTitledEnumSchemaSchema, SingleSelectEnumSchemaSchema, MultiSelectEnumSchemaSchema]);
+    PrimitiveSchemaDefinitionSchema = z25.union([EnumSchemaSchema, BooleanSchemaSchema, StringSchemaSchema, NumberSchemaSchema]);
     ElicitRequestFormParamsSchema = TaskAugmentedRequestParamsSchema.extend({
       /**
        * The elicitation mode.
        *
        * Optional for backward compatibility. Clients MUST treat missing mode as "form".
        */
-      mode: z22.literal("form").optional(),
+      mode: z25.literal("form").optional(),
       /**
        * The message to present to the user describing what information is being requested.
        */
-      message: z22.string(),
+      message: z25.string(),
       /**
        * A restricted subset of JSON Schema.
        * Only top-level properties are allowed, without nesting.
        */
-      requestedSchema: z22.object({
-        type: z22.literal("object"),
-        properties: z22.record(z22.string(), PrimitiveSchemaDefinitionSchema),
-        required: z22.array(z22.string()).optional()
+      requestedSchema: z25.object({
+        type: z25.literal("object"),
+        properties: z25.record(z25.string(), PrimitiveSchemaDefinitionSchema),
+        required: z25.array(z25.string()).optional()
       })
     });
     ElicitRequestURLParamsSchema = TaskAugmentedRequestParamsSchema.extend({
       /**
        * The elicitation mode.
        */
-      mode: z22.literal("url"),
+      mode: z25.literal("url"),
       /**
        * The message to present to the user explaining why the interaction is needed.
        */
-      message: z22.string(),
+      message: z25.string(),
       /**
        * The ID of the elicitation, which must be unique within the context of the server.
        * The client MUST treat this ID as an opaque value.
        */
-      elicitationId: z22.string(),
+      elicitationId: z25.string(),
       /**
        * The URL that the user should navigate to.
        */
-      url: z22.string().url()
+      url: z25.string().url()
     });
-    ElicitRequestParamsSchema = z22.union([ElicitRequestFormParamsSchema, ElicitRequestURLParamsSchema]);
+    ElicitRequestParamsSchema = z25.union([ElicitRequestFormParamsSchema, ElicitRequestURLParamsSchema]);
     ElicitRequestSchema = RequestSchema.extend({
-      method: z22.literal("elicitation/create"),
+      method: z25.literal("elicitation/create"),
       params: ElicitRequestParamsSchema
     });
     ElicitationCompleteNotificationParamsSchema = NotificationsParamsSchema.extend({
       /**
        * The ID of the elicitation that completed.
        */
-      elicitationId: z22.string()
+      elicitationId: z25.string()
     });
     ElicitationCompleteNotificationSchema = NotificationSchema.extend({
-      method: z22.literal("notifications/elicitation/complete"),
+      method: z25.literal("notifications/elicitation/complete"),
       params: ElicitationCompleteNotificationParamsSchema
     });
     ElicitResultSchema = ResultSchema.extend({
@@ -19692,98 +20959,98 @@ var init_types3 = __esm({
        * - "decline": User explicitly decline the action
        * - "cancel": User dismissed without making an explicit choice
        */
-      action: z22.enum(["accept", "decline", "cancel"]),
+      action: z25.enum(["accept", "decline", "cancel"]),
       /**
        * The submitted form data, only present when action is "accept".
        * Contains values matching the requested schema.
        * Per MCP spec, content is "typically omitted" for decline/cancel actions.
        * We normalize null to undefined for leniency while maintaining type compatibility.
        */
-      content: z22.preprocess((val) => val === null ? void 0 : val, z22.record(z22.string(), z22.union([z22.string(), z22.number(), z22.boolean(), z22.array(z22.string())])).optional())
+      content: z25.preprocess((val) => val === null ? void 0 : val, z25.record(z25.string(), z25.union([z25.string(), z25.number(), z25.boolean(), z25.array(z25.string())])).optional())
     });
-    ResourceTemplateReferenceSchema = z22.object({
-      type: z22.literal("ref/resource"),
+    ResourceTemplateReferenceSchema = z25.object({
+      type: z25.literal("ref/resource"),
       /**
        * The URI or URI template of the resource.
        */
-      uri: z22.string()
+      uri: z25.string()
     });
-    PromptReferenceSchema = z22.object({
-      type: z22.literal("ref/prompt"),
+    PromptReferenceSchema = z25.object({
+      type: z25.literal("ref/prompt"),
       /**
        * The name of the prompt or prompt template
        */
-      name: z22.string()
+      name: z25.string()
     });
     CompleteRequestParamsSchema = BaseRequestParamsSchema.extend({
-      ref: z22.union([PromptReferenceSchema, ResourceTemplateReferenceSchema]),
+      ref: z25.union([PromptReferenceSchema, ResourceTemplateReferenceSchema]),
       /**
        * The argument's information
        */
-      argument: z22.object({
+      argument: z25.object({
         /**
          * The name of the argument
          */
-        name: z22.string(),
+        name: z25.string(),
         /**
          * The value of the argument to use for completion matching.
          */
-        value: z22.string()
+        value: z25.string()
       }),
-      context: z22.object({
+      context: z25.object({
         /**
          * Previously-resolved variables in a URI template or prompt.
          */
-        arguments: z22.record(z22.string(), z22.string()).optional()
+        arguments: z25.record(z25.string(), z25.string()).optional()
       }).optional()
     });
     CompleteRequestSchema = RequestSchema.extend({
-      method: z22.literal("completion/complete"),
+      method: z25.literal("completion/complete"),
       params: CompleteRequestParamsSchema
     });
     CompleteResultSchema = ResultSchema.extend({
-      completion: z22.looseObject({
+      completion: z25.looseObject({
         /**
          * An array of completion values. Must not exceed 100 items.
          */
-        values: z22.array(z22.string()).max(100),
+        values: z25.array(z25.string()).max(100),
         /**
          * The total number of completion options available. This can exceed the number of values actually sent in the response.
          */
-        total: z22.optional(z22.number().int()),
+        total: z25.optional(z25.number().int()),
         /**
          * Indicates whether there are additional completion options beyond those provided in the current response, even if the exact total is unknown.
          */
-        hasMore: z22.optional(z22.boolean())
+        hasMore: z25.optional(z25.boolean())
       })
     });
-    RootSchema = z22.object({
+    RootSchema = z25.object({
       /**
        * The URI identifying the root. This *must* start with file:// for now.
        */
-      uri: z22.string().startsWith("file://"),
+      uri: z25.string().startsWith("file://"),
       /**
        * An optional name for the root.
        */
-      name: z22.string().optional(),
+      name: z25.string().optional(),
       /**
        * See [MCP specification](https://github.com/modelcontextprotocol/modelcontextprotocol/blob/47339c03c143bb4ec01a26e721a1b8fe66634ebe/docs/specification/draft/basic/index.mdx#general-fields)
        * for notes on _meta usage.
        */
-      _meta: z22.record(z22.string(), z22.unknown()).optional()
+      _meta: z25.record(z25.string(), z25.unknown()).optional()
     });
     ListRootsRequestSchema = RequestSchema.extend({
-      method: z22.literal("roots/list"),
+      method: z25.literal("roots/list"),
       params: BaseRequestParamsSchema.optional()
     });
     ListRootsResultSchema = ResultSchema.extend({
-      roots: z22.array(RootSchema)
+      roots: z25.array(RootSchema)
     });
     RootsListChangedNotificationSchema = NotificationSchema.extend({
-      method: z22.literal("notifications/roots/list_changed"),
+      method: z25.literal("notifications/roots/list_changed"),
       params: NotificationsParamsSchema.optional()
     });
-    ClientRequestSchema = z22.union([
+    ClientRequestSchema = z25.union([
       PingRequestSchema,
       InitializeRequestSchema,
       CompleteRequestSchema,
@@ -19802,14 +21069,14 @@ var init_types3 = __esm({
       ListTasksRequestSchema,
       CancelTaskRequestSchema
     ]);
-    ClientNotificationSchema = z22.union([
+    ClientNotificationSchema = z25.union([
       CancelledNotificationSchema,
       ProgressNotificationSchema,
       InitializedNotificationSchema,
       RootsListChangedNotificationSchema,
       TaskStatusNotificationSchema
     ]);
-    ClientResultSchema = z22.union([
+    ClientResultSchema = z25.union([
       EmptyResultSchema,
       CreateMessageResultSchema,
       CreateMessageResultWithToolsSchema,
@@ -19819,7 +21086,7 @@ var init_types3 = __esm({
       ListTasksResultSchema,
       CreateTaskResultSchema
     ]);
-    ServerRequestSchema = z22.union([
+    ServerRequestSchema = z25.union([
       PingRequestSchema,
       CreateMessageRequestSchema,
       ElicitRequestSchema,
@@ -19829,7 +21096,7 @@ var init_types3 = __esm({
       ListTasksRequestSchema,
       CancelTaskRequestSchema
     ]);
-    ServerNotificationSchema = z22.union([
+    ServerNotificationSchema = z25.union([
       CancelledNotificationSchema,
       ProgressNotificationSchema,
       LoggingMessageNotificationSchema,
@@ -19840,7 +21107,7 @@ var init_types3 = __esm({
       TaskStatusNotificationSchema,
       ElicitationCompleteNotificationSchema
     ]);
-    ServerResultSchema = z22.union([
+    ServerResultSchema = z25.union([
       EmptyResultSchema,
       InitializeResultSchema,
       CompleteResultSchema,
@@ -26806,7 +28073,7 @@ var require_core = __commonJS({
       errorsText(errors = this.errors, { separator = ", ", dataVar = "data" } = {}) {
         if (!errors || errors.length === 0)
           return "No errors";
-        return errors.map((e) => `${dataVar}${e.instancePath} ${e.message}`).reduce((text2, msg) => text2 + separator + msg);
+        return errors.map((e) => `${dataVar}${e.instancePath} ${e.message}`).reduce((text3, msg) => text3 + separator + msg);
       }
       $dataMetaSchema(metaSchema, keywordsJsonPointers) {
         const rules = this.RULES.all;
@@ -31129,22 +32396,22 @@ var init_stdio2 = __esm({
 });
 
 // ../../packages/mcp-server/src/tools.ts
-import { z as z23 } from "zod";
+import { z as z26 } from "zod";
 var runTaskInputSchema, RUN_TASK_DESCRIPTION;
 var init_tools = __esm({
   "../../packages/mcp-server/src/tools.ts"() {
     "use strict";
     init_src2();
-    runTaskInputSchema = z23.object({
+    runTaskInputSchema = z26.object({
       // LE contrat partage du slug (shared/agent-slug.ts) — la review a montre
       // que trois definitions divergentes rendaient un agent valide inciblable.
       agent: AgentSlugSchema.optional().describe(
         "Optional TARGET agent, by slug, resolved INSIDE this workspace only. Omit to address the workspace root agent. Choosing a target is the same power as choosing which chat to type in \u2014 the job runs under THAT agent's tools, approval rules and budgets, and MCP jobs never get the configuration tools regardless of target."
       ),
-      caller: z23.string().min(1).max(120).regex(/^[\w .:@/-]+$/, "caller must be a plain label (letters, digits, spaces, .:@/-_ only)").optional().describe(
+      caller: z26.string().min(1).max(120).regex(/^[\w .:@/-]+$/, "caller must be a plain label (letters, digits, spaces, .:@/-_ only)").optional().describe(
         'Optional label naming WHO is asking (e.g. "agent-dev-a", "quentin-terminal"). Purely declarative \u2014 recorded as provenance on the job, shown on the Runs page, and NEVER used for authorization: the job runs under the rules of the agent this server was launched for, whatever this says.'
       ),
-      instruction: z23.string().min(1).max(16e3).describe(
+      instruction: z26.string().min(1).max(16e3).describe(
         "La demande, en clair et auto-suffisante : l'agent qui l'ex\xE9cute ne voit RIEN de cette session MCP. Il travaille avec ses propres outils, skills et sous-agents, sous ses propres r\xE8gles d approbation."
       )
     });