Big day. Renamed Client to Workspace across the agency schema, added the identity tables (Person, ContactMethod, Membership, Invite, Profile) and a rights catalog so the API can resolve a principal from a Better Auth session instead of trusting a body-supplied id. Swapped the singleton-lock runtime for a claim-coordinated one with leases and claimedBy, so bumping numReplicas in Railway just works. Also lifted the Concierge policy to the vertical, made VendorScout and the code researcher real subagents, fixed a reply-routing bug where a content-bearing revision was being read as a brand-new request and dropped, and added a hard stop on Claude Code retries and budget so a hung run can't burn the day.

19 commits across 1 repo (belo-works: 19). 149 files changed; 2 skipped. Diff was truncated for summarization.