diff --git a/AGENTS.md b/AGENTS.md
index 3f3727e2..283c3363 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -395,7 +395,9 @@ index to jump to the right page.
   `check`, `mcp`, `execute`, `secrets`, `enable`, `disable`,
   `remove`, `list`, `status`, `run`, `audit`, `mcp-author`, `trace`,
   `inspect`, `graph`, `whatif`, `lint`, `catalog`; `configure` is a
-  deprecated hidden alias; `export-gate-schema` and `export-fact-catalog` are hidden build-time tools).
+  deprecated hidden alias; `export-gate-schema`, `export-fact-catalog`,
+  `export-ado-proxy-catalog-schema`, and `export-ado-proxy-catalog` are hidden
+  build-time tools).
 - [`docs/agency-plugin.md`](docs/agency-plugin.md) — the Agency / Claude Code
   plugin (`agency/plugins/ado-aw/`): canonical layout, six skills, `mcp-author`
   wiring, the self-contained root marketplace catalogs, `init --agency`
diff --git a/docs/cli.md b/docs/cli.md
index 29bee84f..80ed60c4 100644
--- a/docs/cli.md
+++ b/docs/cli.md
@@ -192,6 +192,14 @@ These commands are not shown in `--help` but are available for contributors work
   - `--output, -o <path>` - Write the catalog to a file instead of stdout. Parent directories are created automatically.
   - Typical use: `cargo run -- export-fact-catalog --output scripts/ado-script/src/trigger-e2e/fact-catalog.gen.json`
 
+- `export-ado-proxy-catalog-schema` - Export the `ado-proxy` catalog JSON Schema used by the `scripts/ado-script` TypeScript workspace for type codegen (`ado-proxy-catalog.types.gen.ts`).
+  - `--output, -o <path>` - Write the schema to a file instead of stdout. Parent directories are created automatically.
+  - Typical use: `cargo run -- export-ado-proxy-catalog-schema --output schema/ado-proxy-catalog.schema.json`. See [`docs/ado-script.md`](ado-script.md).
+
+- `export-ado-proxy-catalog` - Export the versioned deny-by-default `ado-proxy` read-operation catalog as JSON (`catalog.gen.json`). Drift guard between the Rust-side catalog and the bundle's committed snapshot; `catalog-drift.test.ts` re-runs the exporter and fails on any diff.
+  - `--output, -o <path>` - Write the catalog to a file instead of stdout. Parent directories are created automatically.
+  - Typical use: `cargo run -- export-ado-proxy-catalog --output src/ado-proxy/catalog.gen.json`. See [`docs/ado-script.md`](ado-script.md).
+
 ### Hidden Pipeline-Internal Commands
 
 These commands are started by the pipeline itself (or by AWF on its behalf) and are not part of the authoring surface: