diff --git a/API-COVERAGE.md b/API-COVERAGE.md
index 976a74500..c42c64a97 100644
--- a/API-COVERAGE.md
+++ b/API-COVERAGE.md
@@ -49,11 +49,9 @@ Out-of-scope sections are excluded from parity totals and scripts: chatbots (dif
 > Note: the per-row `Endpoints` column in the Coverage by Section table sums higher than the Summary totals above. The discrepancy predates the BC5 baseline; the row count (48 sections) is authoritative for the `Since` column. Reconciling endpoint counts is pre-existing maintenance, tracked separately.
 
 **SDK version:** the pin in `go.mod`, with
-`internal/version/sdk-provenance.json` authoritative for the exact commit. The
-event-feed operations are unreleased, so that pin is a basecamp-sdk `main`
-pseudo-version rather than a release tag; it builds on v0.18.0, the latest
-release. The
-command surface below largely dates to the v0.12.0 bump, which added 20 exported
+`internal/version/sdk-provenance.json` authoritative for the exact commit. That
+pin is basecamp-sdk v0.19.0, the release that ships the event-feed operations.
+The command surface below largely dates to the v0.12.0 bump, which added 20 exported
 Go methods over 13 new backend operations; the extra seven wrapped endpoints
 that already existed but were reachable only through the raw generated client,
 which the andon-cord rule forbids the CLI from calling. v0.13.0–v0.15.0
diff --git a/go.mod b/go.mod
index d84cae6bd..f7df619d9 100644
--- a/go.mod
+++ b/go.mod
@@ -6,7 +6,7 @@ require (
 	charm.land/bubbles/v2 v2.2.1
 	charm.land/bubbletea/v2 v2.0.9
 	charm.land/lipgloss/v2 v2.0.6
-	github.com/basecamp/basecamp-sdk/go v0.18.1-0.20260916210227-4523eac74cfa
+	github.com/basecamp/basecamp-sdk/go v0.19.0
 	github.com/basecamp/cli v0.2.2-0.20260828230226-767413fc712d
 	github.com/basecamp/mcp v0.0.0-20260828100356-2d6f44b51e9d
 	github.com/basecamp/surfguard/go v0.1.0
diff --git a/go.sum b/go.sum
index bc9a9b162..d13c050c3 100644
--- a/go.sum
+++ b/go.sum
@@ -87,8 +87,8 @@ github.com/aymanbagabas/go-udiff v0.4.1 h1:OEIrQ8maEeDBXQDoGCbbTTXYJMYRCRO1fnodZ
 github.com/aymanbagabas/go-udiff v0.4.1/go.mod h1:0L9PGwj20lrtmEMeyw4WKJ/TMyDtvAoK9bf2u/mNo3w=
 github.com/aymerick/douceur v0.2.0 h1:Mv+mAeH1Q+n9Fr+oyamOlAkUNPWPlA8PPGR0QAaYuPk=
 github.com/aymerick/douceur v0.2.0/go.mod h1:wlT5vV2O3h55X9m7iVYN0TBM0NH/MmbLnd30/FjWUq4=
-github.com/basecamp/basecamp-sdk/go v0.18.1-0.20260916210227-4523eac74cfa h1:efZJJSiwKn5lBih05oVfLM6S+ZYN6kB0vcH1DQmd8a8=
-github.com/basecamp/basecamp-sdk/go v0.18.1-0.20260916210227-4523eac74cfa/go.mod h1:kIBDYwPMMD59PadNGxpH0YTQuI+blFPZ8MelGI0RK5Q=
+github.com/basecamp/basecamp-sdk/go v0.19.0 h1:byygVVbJnWCZsyBNeAlztlUAV23ytLEhPx98WakNy+c=
+github.com/basecamp/basecamp-sdk/go v0.19.0/go.mod h1:kIBDYwPMMD59PadNGxpH0YTQuI+blFPZ8MelGI0RK5Q=
 github.com/basecamp/cli v0.2.2-0.20260828230226-767413fc712d h1:jAzDrCCzDpIwhbFT1xVVs0z2xpXoDEkomHfKB2bUUp8=
 github.com/basecamp/cli v0.2.2-0.20260828230226-767413fc712d/go.mod h1:iTBTaWvsPEFIcZfkxQHEfISyJ6sZ7036K6bNx0RY3EE=
 github.com/basecamp/mcp v0.0.0-20260828100356-2d6f44b51e9d h1:zEQVGq1x1nhKMZ2TudFAcSJ32CHT8richI1vQakIKz4=
diff --git a/internal/mcpserver/model/PROVENANCE.json b/internal/mcpserver/model/PROVENANCE.json
index 25c72af63..41423b4a7 100644
--- a/internal/mcpserver/model/PROVENANCE.json
+++ b/internal/mcpserver/model/PROVENANCE.json
@@ -1,7 +1,7 @@
 {
   "source": "github.com/basecamp/basecamp-sdk",
-  "commit": "4523eac74cfa6452ec85ea5f8f633baa4dc487a5",
-  "ref": "go/v0.18.0-63-g4523eac7",
+  "commit": "6abe227204a465ced72969f10e32d3a06e77bcc1",
+  "ref": "go/v0.19.0",
   "files": ["behavior-model.json", "openapi.json"],
   "synced_by": "scripts/sync-mcp-model.sh",
   "patches": "binary-upload operations dropped because the toolkit refuses their non-JSON bodies (EXCLUDED_OPERATIONS) and the stream-ticket mint dropped by policy (POLICY_EXCLUDED_OPERATIONS); no tag patches applied (PATCHED_TAGS is empty — the export tags every operation) — see the sync script"
diff --git a/internal/version/sdk-provenance.json b/internal/version/sdk-provenance.json
index 3ff436f25..d25aac38f 100644
--- a/internal/version/sdk-provenance.json
+++ b/internal/version/sdk-provenance.json
@@ -1,9 +1,9 @@
 {
   "sdk": {
     "module": "github.com/basecamp/basecamp-sdk/go",
-    "version": "v0.18.1-0.20260916210227-4523eac74cfa",
-    "revision": "4523eac74cfa",
-    "updated_at": "2026-09-16T21:02:27Z"
+    "version": "v0.19.0",
+    "revision": "6abe227204a4",
+    "updated_at": "2026-09-16T21:15:28Z"
   },
   "api": {
     "repo": "basecamp/bc3",
diff --git a/nix/package.nix b/nix/package.nix
index c68146eaf..06dd7f9a6 100644
--- a/nix/package.nix
+++ b/nix/package.nix
@@ -8,7 +8,7 @@ buildGoModule.override { go = go_1_26; } (finalAttrs: {
   src = lib.cleanSource ./..;
 
   # To update: set to lib.fakeHash, run `nix build`, use the hash from the error.
-  vendorHash = "sha256-mT0oVMMRcmpbszb0zVYd1k8cZfMHKHZRbhsy/+8GHxo=";
+  vendorHash = "sha256-uiNB0+zjvdDTI7RbC1hwiuUGNJzh7P1DFnr7rInjco0=";
 
   subPackages = [ "cmd/basecamp" ];