@agent-compose/sdk 0.8.4 → 0.8.6

package/dist/client.d.ts

@@ -1,28 +1,17 @@
-/**
- * AgentComposeClient — HTTP client for the agent-compose server API.
- *
- * Templates always live inside a factory (project). Methods that touch a
- * specific template (`register`, `invoke`, `setSecret`, `listSecrets`,
- * `deleteSecret`) take an optional `factorySlug`; when omitted, they target
- * the team's auto-created `default` factory. There is no second URL space
- * for "templates without a factory" — every workflow belongs to exactly one.
- *
- * `register()` accepts pre-built sources — use the CLI (`agent-compose
- * register`) or build sources yourself and pass them directly.
- */
+import type { ConversationRow, CreateChatInput, ChannelIvyState, DriveSharesView, IvyConnectionsView, ListingPage } from "./types/api-conversations.js";
 import type { RunEvent } from "./types/events.js";
 import type { ConversationStreamEvent } from "./types/conversation-stream.js";
 import type { InvokeWorkflowOptions, InvokeAndWaitOptions, InvokeResult, StreamRunLogsOptions, InlineWorkflowPayload, InvokeInlineOptions, InvokeInlineAndWaitOptions, RunStatus, ResumePauseOptions, ResumePauseResponse, AnswerSteerOptions, RequestAgentPauseOptions, RequestAgentPauseResponse, SendAgentMessageOptions, SendAgentMessageResponse, RunDetail, RunListEntry, ListRunsOptions, TimelineEvent, RunFundingResponse, RunStepUsageResponse, EventRow, ReportEventInput, ListEventsOptions, ListEventsResult, RunArtifactRow, RunLogLine, ListRunLogsOptions, CancelRunResponse, ListSnapshotsOptions, SnapshotListResponse, SnapshotListEntry, RunSnapshotEntry } from "./types/api-runs.js";
-import type { TeamMember, Mention, CreateMentionsInput, ConversationsPage, SessionsPage, ConversationDetail, ConversationThread, CreateCloudSessionInput, CloudSessionCreated, SessionPreview, PreviewOpened, OpenPreviewInput, SessionForked, BackgroundWorkHeld, SessionChangeSet, SessionMergeGated, SessionMergeReport, SessionDiscardReport, SessionChangePreflight, SessionRebaseReport, SessionAutoRebaseState, ReviewSuggestionInput, ReviewNotesPublished, ReviewGitCredential, SendConversationMessageInput, SendConversationMessageResult, ChannelSessionRow, SessionChannelMessagePosted, SessionDirectMessageSent, BranchClaimGranted, BranchClaimsReleased, BranchClaimState, ConversationPresenceSnapshot, StreamConversationOptions, AgentListRow, SessionPerfHistoryPage } from "./types/api-conversations.js";
+import type { TeamMember, Mention, CreateMentionsInput, ConversationsPage, SessionsPage, ConversationDetail, ConversationThread, CreateCloudSessionInput, CloudSessionCreated, SessionPreview, PreviewOpened, OpenPreviewInput, SessionForked, BackgroundWorkHeld, BackgroundWorkChildDecl, BackgroundWorkStatus, MachineUpsizeOutcome, CreateSessionWaitInput, SessionWait, SessionWaitCreated, SessionWaitList, SessionChangeSet, SessionFilePlane, SessionMergeGated, SessionMergeReport, SessionDiscardReport, SessionChangePreflight, SessionRebaseReport, ReviewSuggestionInput, ReviewNotesPublished, ReviewGitCredential, SendConversationMessageInput, SendConversationMessageResult, ChannelSessionRow, SessionDirectMessageSent, BranchClaimGranted, BranchClaimsReleased, BranchClaimState, ConversationPresenceSnapshot, StreamConversationOptions, AgentListRow, SessionPerfHistoryPage } from "./types/api-conversations.js";
 import type { ConversationMemberRole, ConversationMember, ArtifactScope, SetScopeGrantsInput, SetTemplateScopeInput } from "./types/api-scopes.js";
-import type { Project, ProjectsPage, ProjectRole, ProjectMember, ProjectObjectsPage, ProjectAddPreview, AddProjectObjectInput, AddProjectObjectResult, RefreshProjectObjectResult } from "./types/api-projects.js";
-import type { RegisterResult, RegisterWorkflowInput, TemplateRow, TemplateDetail, ListTemplatesOptions, SearchFactoryFilesOptions, FactoryFileSearchResult, FactoryFileWriteResult, ListFactoryFilesOptions, FactoryFileListPage, FactoryRow, CreateFactoryInput, UpdateFactoryInput, FactoryPerfSummary, ScheduleRow, CreateScheduleInput, SecretOptions, SetSecretResult, SecretListEntry, SessionSecretEntry, SessionSecretInput, SessionSecretRequestCreated, SessionSecretRequestStatus, CreateApiKeyInput, ApiKeyCreated, ListApiKeysOptions, ApiKeyPage, UsageResponse, DriveRepoLink, CreateDriveRepoLinkInput, DriveMountSession, CreateDriveMountSessionInput } from "./types/api-factory.js";
+import type { Project, ProjectUpdate, ProjectsPage, ProjectRole, ProjectMember, ProjectObject, ProjectObjectsPage, ProjectObjectCounts, ProjectAddPreview, AddProjectObjectInput, AddProjectObjectResult, RefreshProjectObjectResult, ProjectStatus, ThreadStatus, MeStatus } from "./types/api-projects.js";
+import type { RegisterResult, RegisterWorkflowInput, TemplateRow, TemplateDetail, ListTemplatesOptions, SearchFactoryFilesOptions, FactoryFileSearchResult, FactoryFileWriteResult, ListFactoryFilesOptions, FactoryFileListPage, FactoryFileConflict, FactoryFileConflictList, ProjectSecretList, FactoryRow, CreateFactoryInput, UpdateFactoryInput, FactoryPerfSummary, ScheduleRow, CreateScheduleInput, SecretOptions, SetSecretResult, SecretListEntry, SessionSecretEntry, SessionSecretInput, SessionSecretRequestCreated, SessionSecretRequestStatus, SessionSecretRequestSummary, VaultRequestKind, VaultKeyShape, VaultCatalogEntry, RequestedVaultEntry, CreateApiKeyInput, ApiKeyCreated, ListApiKeysOptions, ApiKeyPage, UsageResponse, DriveRepoLink, CreateDriveRepoLinkInput, CreateNativeRepoInput, CreateNativeRepoResult, DriveMountSession, CreateDriveMountSessionInput, ConnectorGrantSummary } from "./types/api-factory.js";
 import type { ComplianceSession, RequestComplianceSessionInput, ListComplianceSessionsOptions, ComplianceSessionsPage, ListComplianceAccessesOptions, ComplianceAccessesPage } from "./types/api-compliance.js";
 export type { RunState, InvokeWorkflowOptions, InvokeAndWaitOptions, InvokeResult, FundingChoice, StreamRunLogsOptions, InlineWorkflowPayload, InvokeInlineOptions, InvokeInlineAndWaitOptions, RunStatus, ResumePauseActor, ResumePauseSuccess, ResumePausePending, ResumePauseResponse, ResumePauseOptions, RequestAgentPauseOptions, AnswerSteerOptions, RequestAgentPauseResponse, SendAgentMessageOptions, SendAgentMessageResponse, RunDetail, RunListEntry, ListRunsOptions, TimelineEvent, FundingLane, RunFundingStamp, RunFundingUsageRow, RunFundingResponse, RunStepUsage, RunStepUsageResponse, EventSubjectType, EventRow, RunArtifactRow, ReportEventInput, ListEventsOptions, ListEventsResult, RunLogLine, ListRunLogsOptions, CancelRunResponse, ListSnapshotsOptions, SnapshotListEntry, SnapshotListResponse, RunSnapshotEntry, } from "./types/api-runs.js";
-export type { TeamMember, Mention, CreateMentionsInput, ConversationMessagePart, ConversationRow, ConversationMessageRow, ConversationsPage, SessionsPage, ConversationDetail, CreateCloudSessionInput, CloudSessionCreated, ConversationThread, SessionPreview, PreviewOpened, OpenPreviewInput, SessionForked, BackgroundWorkHeld, SessionFileChange, SessionChangeSet, SessionChangeStats, SessionDiffReviewBound, ReviewSuggestion, ReviewSuggestionInput, ReviewNotesPublished, ReviewGitCredential, SessionReviewDocument, ReviewSuggestionDecision, ReviewSuggestionDecisions, SessionMergeReportDetail, SessionMergeReport, SessionMergeGated, SessionDiscardReport, SessionPreflightFileRow, SessionChangePreflight, SessionRebaseReport, SessionAutoRebaseState, ConversationPageContext, SendConversationMessageInput, ConversationTurnState, SendConversationMessageResult, UnnotifiedMention, ConversationPresenceSnapshot, AgentListRow, StreamConversationOptions, ChannelSessionStatus, ChannelSessionRow, ChannelSessionsResponse, SessionChannelMessagePosted, SessionDirectMessageSent, BranchClaimInfo, BranchClaimGranted, BranchClaimsReleased, BranchClaimState, SessionPerfBucket, SessionPerfHistoryPage, } from "./types/api-conversations.js";
+export type { TeamMember, Mention, CreateMentionsInput, CreateChatInput, ChannelIvyState, IvyConnection, HiddenIvyConnection, IvyConnectionsView, IvyConnectionScope, ListingPage, DriveShareItem, DriveShare, HiddenDriveShare, DriveSharesView, WorkspaceConnection, WorkspaceConnectionAudienceEntry, WorkspaceConnectionsScopeView, ConversationMessagePart, ConversationRow, ConversationProject, ConversationMessageRow, ConversationsPage, SessionsPage, ConversationDetail, CreateCloudSessionInput, CloudSessionCreated, ConversationThread, ConversationUnreadSummary, ConversationUnreadThreads, ConversationReadInput, ConversationReadResult, SessionPreview, PreviewOpened, OpenPreviewInput, SessionForked, BackgroundWorkHeld, BackgroundWorkChildDecl, BackgroundWorkStatus, MachineUpsizeOutcome, SessionWaitKind, SessionWaitState, CreateSessionWaitInput, SessionWait, SessionWaitCheck, SessionWaitCheckResult, SessionWaitCheckReview, SessionWaitCreated, SessionWaitList, SessionFileChange, SessionChangeSet, SessionChangeStats, SessionDiffReviewBound, ReviewSuggestion, SessionFileHold, SessionFilePlane, ReviewSuggestionInput, ReviewNotesPublished, ReviewGitCredential, SessionReviewDocument, ReviewSuggestionDecision, ReviewSuggestionDecisions, SessionMergeReportDetail, SessionMergeReport, SessionMergeGated, SessionDiscardReport, SessionPreflightFileRow, SessionChangePreflight, SessionRebaseReport, ConversationPageContext, SendConversationMessageInput, ConversationTurnState, SendConversationMessageResult, UnnotifiedMention, ConversationPresenceSnapshot, AgentListRow, StreamConversationOptions, ChannelSessionStatus, ChannelSessionRow, ChannelWorkerFacts, ChannelSessionsResponse, SessionDirectMessageSent, BranchClaimInfo, BranchClaimGranted, BranchClaimsReleased, BranchClaimState, SessionPerfBucket, SessionPerfHistoryPage, } from "./types/api-conversations.js";
 export type { ConversationMemberRole, ConversationMember, DocumentCapability, TemplateCapability, ScopeGrant, ArtifactScope, RunContext, SetScopeGrantsInput, SetTemplateScopeInput, } from "./types/api-scopes.js";
-export type { Project, ProjectsPage, ProjectRole, ProjectMember, ProjectObject, ProjectObjectsPage, ProjectSkippedFile, ProjectPreviewFile, ProjectAddPreview, AddProjectObjectInput, AddProjectObjectResult, RefreshProjectObjectResult, } from "./types/api-projects.js";
-export type { RegisterResult, RegisteredRuntime, RuntimeSourceInput, TemplateSourceRef, RegisterWorkflowInput, TemplateRow, TemplateDetail, ListTemplatesOptions, FactoryFileSearchRow, FactoryFolderSearchRow, SearchFactoryFilesOptions, FactoryFileSearchResult, FactoryFileWriteResult, FactoryFileListRow, ListFactoryFilesOptions, FactoryFileListPage, PublicFileLinkState, FactoryRow, CreateFactoryInput, UpdateFactoryInput, FactoryPerfSummary, ScheduleRow, CreateScheduleInput, SecretOptions, SetSecretResult, SecretListEntry, SessionSecretEntry, SessionSecretInput, SessionSecretRequestCreated, SessionSecretRequestStatus, CreateApiKeyInput, ApiKey, ApiKeyCreated, ListApiKeysOptions, ApiKeyPage, UsageRollupRow, UsageResponse, DriveRepoLink, CreateDriveRepoLinkInput, DriveMountSession, CreateDriveMountSessionInput, } from "./types/api-factory.js";
+export type { Project, ProjectUpdate, ProjectsPage, ProjectRole, ProjectMember, ProjectObject, ProjectObjectsPage, ProjectObjectCounts, ProjectSkippedFile, ProjectPreviewFile, ProjectAddPreview, AddProjectObjectInput, AddProjectObjectResult, RefreshProjectObjectResult, ProjectStatus, ProjectStatusThread, ProjectStatusTask, ProjectStatusPerson, ProjectStatusWorker, ProjectStatusActivity, ProjectStatusActivityKind, ProjectStatusWaitingOn, ProjectStatusWaitingCount, ProjectStatusCounts, ThreadStatus, ThreadStatusWorker, ThreadStatusWorkerState, ThreadStatusWorkerEffort, ThreadStatusTodo, ThreadStatusDirector, ThreadStatusOutput, ThreadStatusEvent, ChatWork, ChatWorkThread, ThreadStatusWaitingOn, ThreadStatusAssignee, ThreadStatusTodoActivity, ChatTodoPatch, ChatTodoComment, MeStatus, MeStatusCounts, } from "./types/api-projects.js";
+export type { RegisterResult, RegisteredRuntime, RuntimeSourceInput, TemplateSourceRef, RegisterWorkflowInput, TemplateRow, TemplateDetail, ListTemplatesOptions, FactoryFileSearchRow, FactoryFolderSearchRow, SearchFactoryFilesOptions, FactoryFileSearchResult, FactoryFileWriteResult, FactoryFileListRow, ListFactoryFilesOptions, FactoryFileListPage, FactoryFileConflict, FactoryFileConflictList, ProjectSecretMeta, ProjectSecretList, PublicFileLinkState, FactoryRow, CreateFactoryInput, UpdateFactoryInput, FactoryPerfSummary, ScheduleRow, CreateScheduleInput, SecretOptions, SetSecretResult, SecretListEntry, SessionSecretEntry, SessionSecretInput, SessionSecretRequestCreated, SessionSecretRequestStatus, SessionSecretRequestSummary, VaultRequestKind, VaultKeyShape, VaultCatalogEntry, RequestedVaultEntry, VaultCardHint, CreateApiKeyInput, ApiKey, ApiKeyCreated, ListApiKeysOptions, ApiKeyPage, UsageRollupRow, UsageResponse, DriveRepoLink, CreateDriveRepoLinkInput, CreateNativeRepoInput, CreateNativeRepoResult, DriveMountSession, CreateDriveMountSessionInput, ConnectorGrantSummary, } from "./types/api-factory.js";
 export type { ComplianceScopeKind, ComplianceStatus, ComplianceSession, ComplianceAccess, RequestComplianceSessionInput, ListComplianceSessionsOptions, ComplianceSessionsPage, ListComplianceAccessesOptions, ComplianceAccessesPage, } from "./types/api-compliance.js";
 export interface AgentComposeClientOptions {
     /** Your team's API key — minted from the dashboard or `agentc keys create`.
@@ -218,6 +207,38 @@ export declare class AgentComposeClient {
         factorySlug?: string;
         contentType?: string;
     }): Promise<FactoryFileWriteResult>;
+    /** Bounded, cursor-paginated conflicts. A session filter is applied in the database. */
+    /** Project secrets (the group tier) — names + metadata, project members only. */
+    listProjectSecrets(projectId: string): Promise<ProjectSecretList>;
+    /** Upsert a project secret. Human credential required (a session toolbelt
+     * key is refused). Values are write-only — never echoed. */
+    upsertProjectSecret(projectId: string, secret: {
+        key: string;
+        value: string;
+        delivery?: "injected" | "brokered";
+        brokerHost?: string;
+        brokerHeaderName?: string;
+        brokerHeaderScheme?: string;
+    }): Promise<{
+        key: string;
+        delivery: "injected" | "brokered";
+    }>;
+    deleteProjectSecret(projectId: string, key: string): Promise<void>;
+    listFactoryFileConflicts(factorySlug: string, opts?: {
+        limit?: number;
+        cursor?: string;
+        conversationId?: string;
+    }): Promise<FactoryFileConflictList>;
+    getFactoryFileConflictContent(factorySlug: string, id: string): Promise<Uint8Array>;
+    /** Records a decision about the exact inspected versions. Stale arms refuse. */
+    resolveFactoryFileConflict(factorySlug: string, id: string, decision: {
+        status: "resolved" | "dismissed";
+        settle: "branch" | "main";
+        expectedOursHash: string | null;
+        expectedTheirsHash: string | null;
+    }): Promise<FactoryFileConflict & {
+        settled: "branch" | "main" | "row";
+    }>;
     /** Read one file's current content (or a specific revision) as RAW BYTES —
      *  byte-exact for any content type. This is the wire truth; `getFactoryFile`
      *  is a UTF-8 decode over it. Binaries (images, archives) MUST come through
@@ -251,6 +272,18 @@ export declare class AgentComposeClient {
     }): Promise<{
         released: boolean;
     }>;
+    /** Create a shared chat, including its own Ivy by default. */
+    createChat(input: CreateChatInput): Promise<ConversationRow>;
+    getChannelIvy(id: string): Promise<ChannelIvyState>;
+    /** A project's GitHub grants: its own, and the workspace's it inherits,
+     *  one page at a time (pass the previous page's `nextCursor`). A
+     *  project's access is its members' (and the workspace admins'): a
+     *  member of the workspace who can see a public project without being in
+     *  it gets a 403 `project_member_required`. */
+    listProjectIvyConnections(id: string, page?: ListingPage): Promise<IvyConnectionsView>;
+    /** A project's Drive shares: its own, and the workspace's it inherits,
+     *  one page at a time. Members only, as listProjectIvyConnections. */
+    listProjectDriveShares(id: string, page?: ListingPage): Promise<DriveSharesView>;
     /** List conversations the caller can access, newest-activity first.
      *  Cursor-paginated: pass the previous page's `next_cursor`. */
     listConversations(opts?: {
@@ -307,19 +340,6 @@ export declare class AgentComposeClient {
      *  members lose the derived access; relay rows already in the session
      *  transcript stay; explicit shares survive. 404 when not attached. */
     detachChannelSession(channelId: string, sessionConversationId: string): Promise<void>;
-    /** Post one message into a channel AS the calling session (ADR-0057 Seam
-     *  4) — progress, results, questions, attributed to the session (title +
-     *  runtime mark). Session toolbelt credential ONLY (the calling session
-     *  resolves from the key server-side — 403 `session_credential_required`
-     *  otherwise); the session must be attached (409 `not_attached`). By
-     *  default the post lands in the thread of the message that last
-     *  addressed the session from that channel (the room when none);
-     *  `threadRootId` overrides it — must be a root message in the channel
-     *  (400 `invalid_thread_root`). The post never triggers any turn. */
-    postSessionChannelMessage(channelId: string, input: {
-        text: string;
-        threadRootId?: string;
-    }): Promise<SessionChannelMessagePosted>;
     /** Message ANOTHER session's conversation AS the calling session
      *  (`agentc session message @alias`). Session toolbelt credential ONLY —
      *  the sender resolves from the key. `target` is an @alias (team-scoped)
@@ -370,13 +390,47 @@ export declare class AgentComposeClient {
      *  background-work busy lease: while it is live, the between-turns
      *  park/suspend leaves the session's VM running so work the turn left
      *  behind keeps executing. The lease lapses on its own — re-hold to
-     *  extend past `minutes` (server-capped). Write-tier. */
+     *  extend past `minutes` (server-capped). `children` descriptors
+     *  ({pid, journalPath, label}) register the DETACHED processes the hold
+     *  vouches for, so the platform can verify and reattach them after a
+     *  park (task #63). Write-tier. */
     holdBackgroundWork(conversationId: string, input?: {
         minutes?: number;
+        children?: BackgroundWorkChildDecl[];
     }): Promise<BackgroundWorkHeld>;
+    /** Declare one wait (`agentc wait`): `POST /sessions/:id/waits`. */
+    createSessionWait(conversationId: string, input: CreateSessionWaitInput): Promise<SessionWaitCreated>;
+    /** This session's waits, newest first; open only unless `all`. */
+    listSessionWaits(conversationId: string, opts?: {
+        all?: boolean;
+    }): Promise<SessionWaitList>;
+    /** Cancel an open wait (`agentc wait cancel`): open -> cancelled. */
+    cancelSessionWait(conversationId: string, waitId: string): Promise<SessionWait>;
+    /** Request ONE machine size up for a cloud session (task #110 — the
+     *  auto-resize policy's agent door). The platform arbitrates: within the
+     *  team's daily cap the upsize is auto-granted (and executes the moment
+     *  no live turn / background work holds the machine — home essentials
+     *  carry over); past the cap it becomes an owner approval card.
+     *  Deliberately not `resize`: the in-sandbox toolbelt key may call THIS,
+     *  because the kill only ever happens under platform policy or human
+     *  approval. Refusals (memory ceiling, template-pinned, ended) arrive as
+     *  HTTP 409s carrying `code`. Write-tier. */
+    requestMachineUpsize(conversationId: string, input?: {
+        reason?: string;
+    }): Promise<MachineUpsizeOutcome>;
+    /** The session's background-work status: the lease deadline, the declared
+     *  children, and the owed-report marker a mid-work park leaves behind.
+     *  Read-tier. */
+    getBackgroundWork(conversationId: string): Promise<BackgroundWorkStatus>;
     /** Release the session's background-work lease (the work finished).
-     *  Idempotent — `released` is false when no lease was held. */
-    releaseBackgroundWork(conversationId: string): Promise<boolean>;
+     *  Idempotent — `released` is false when no lease was held. `pid` scopes
+     *  the release to ONE declared child (what a `--while-pid` holder passes
+     *  when its watched process dies): the child is pruned from the declared
+     *  registry, and the lease clears only when it was the last — a sibling's
+     *  death never erases the other holders' declarations. */
+    releaseBackgroundWork(conversationId: string, opts?: {
+        pid?: number;
+    }): Promise<boolean>;
     /** Fork a cloud session from HEAD: snapshot the VM + branch the drive + seed
      *  a new conversation from the transcript so far, booting from both. Returns
      *  the child conversation id to switch to. Write-tier; "Branch from here." */
@@ -402,17 +456,24 @@ export declare class AgentComposeClient {
     getSessionChangeContent(conversationId: string, path: string, opts?: {
         side?: "base";
     }): Promise<Uint8Array>;
+    /** Where ONE path's current version lives for a session
+     *  (`GET /conversations/:id/changes/file`): `main` when the main drive
+     *  holds the session branch's version (landed, or never changed on the
+     *  branch), else `branch` with `why` naming what keeps it off main. The
+     *  answer a `file:<path>?session=<id>` link resolves when it is opened.
+     *  404 = missing path or no access (uniform, no existence oracle). */
+    getSessionFilePlane(conversationId: string, path: string): Promise<SessionFilePlane>;
     /** Publish a diff review's WHOLE document — prose notes plus structured
      *  suggestions, FULL REPLACE on every call (`POST
      *  /conversations/:id/review-notes`; `agentc review publish`). Callable
-     *  ONLY with the bound review session's own toolbelt credential — any
-     *  other key (another session, a human cookie, a plain API key) refuses
-     *  403. `conversationId` is the REVIEWED session's conversation (in a
-     *  review sandbox: `AGENT_COMPOSE_REVIEW_OF_CONVERSATION_ID`).
+     *  ONLY with the toolbelt credential of a review session spawned for this
+     *  diff, which replaces its own document — any other key (another
+     *  session, a human cookie, a plain API key) refuses 403.
+     *  `conversationId` is the REVIEWED session's conversation (in a review
+     *  sandbox: `AGENT_COMPOSE_REVIEW_OF_CONVERSATION_ID`).
      *
-     *  Failures: 403 `session_credential_required` | `not_review_session` |
-     *  `review_superseded` (a newer review replaced this one); 400
-     *  `suggestion_path_not_in_change_set` (naming the offenders); 409
+     *  Failures: 403 `session_credential_required` | `not_review_session`;
+     *  400 `suggestion_path_not_in_change_set` (naming the offenders); 409
      *  `review_disabled`. */
     publishReviewNotes(conversationId: string, input: {
         notes: string;
@@ -430,6 +491,43 @@ export declare class AgentComposeClient {
      *  409 `review_disabled` | `git_remote_unavailable` (legacy plane — read
      *  the proposal through `getSessionChanges` instead). */
     getReviewGitCredential(conversationId: string): Promise<ReviewGitCredential>;
+    /** Mint a short-lived native-git credential for a linked repo's MIRROR
+     *  namespace (`POST /:slug/repo-links/:id/git-credential`, git-door
+     *  slice 4). mode "fetch" (default) reads the mirror — gated on link
+     *  visibility; mode "mirror" pushes real GitHub history through the
+     *  closure-verified door — gated on the repo_link WRITE capability.
+     *  409 `git_remote_unavailable` when no git plane serves the factory. */
+    getRepoLinkGitCredential(linkId: string, opts?: {
+        mode?: "fetch" | "mirror" | "github" | "native";
+        factorySlug?: string;
+    }): Promise<{
+        url: string;
+        username: string;
+        password: string;
+        repoUrl: string;
+        /** Absent in `github` mode (the credential targets github.com, not the platform git plane). */
+        namespace?: string;
+        expiresAt: string;
+        mode: string;
+        /** `github` mode only: the host the credential is for. */
+        host?: string;
+        /** `github` mode only: the token's ceiling — "write" (contents:write,
+         *  push-capable) for viewers with write capability on the link,
+         *  "read" (clone/fetch only) otherwise. */
+        access?: "read" | "write";
+        /** `github` mode only: the GRANTED permission map GitHub echoed at
+         *  mint (e.g. `{contents:"write", pulls:"write"}`). A capability
+         *  missing here (pulls, issues) means the App installation does not
+         *  carry it — the OWNER must widen the installation; retrying can
+         *  never help. */
+        permissions?: Record<string, string>;
+        /** `github` mode only: the INSTALLATION's recorded grant ledger
+         *  (`key:level` strings, probe-synced). A capability present here
+         *  but missing from `permissions` is a platform downscope; missing
+         *  from both layers, an App-installation gap only the owner can
+         *  widen. Empty = not yet recorded (reconnect or next probe). */
+        installationScopes?: string[];
+    }>;
     /** Approve the session's proposed changes: 3-way merge its branch into
      *  `main`, then continue the session on a fresh branch off post-merge
      *  `main`. Write-tier + human caller. Pass `opts.branch` (the branch you
@@ -440,9 +538,14 @@ export declare class AgentComposeClient {
      *  converged on) a kind='merge' approval routed to the session's
      *  approvers. Discriminate on `object`.
      *
-     *  Failures: 403 `role_read_only` (read-only member) or a plain 403 for
-     *  session toolbelt keys (agents cannot self-approve); 409 `turn_active`
-     *  (a turn is running — retry when idle) | `branch_changed`; 400
+     *  Failures: 403 `role_read_only` (read-only member); 403 `not_own_branch`
+     *  (a session toolbelt key merges ONLY its own bound session's branch —
+     *  the agent self-merge door, owner ruling 2026-08-31); 403 `merge_gated`
+     *  (a gated session's self-merge — a designated approver merges from the
+     *  Changes panel instead, and no card is minted); 409 `turn_active` (a
+     *  turn is running — retry when idle; a session's OWN self-merge is
+     *  exempt) | `branch_changed` | `branch_claimed` (a teammate session
+     *  holds the branch claim — merge after it releases); 400
      *  `no_branch` (session predates branching); 502 `quiesce_failed`
      *  (nothing changed — safe to retry) | `merge_failed` (branch retained,
      *  named in the body) | `rebranch_failed` (merge landed; retry safe). */
@@ -480,16 +583,6 @@ export declare class AgentComposeClient {
     rebaseSessionChanges(conversationId: string, opts?: {
         branch?: string;
     }): Promise<SessionRebaseReport>;
-    /** Arm/disarm the OPT-IN main-advance auto-rebase reflex for a session
-     *  (default OFF): when armed and the drive's main moves, the platform
-     *  preflights and — only on a provably clean fold (zero conflicts) —
-     *  rebases the session's branch from main headlessly, posting a quiet
-     *  receipt. Trade-off (why default OFF): the agent's view of files it
-     *  did not touch can change mid-task. Human, write-tier act.
-     *
-     *  Failures: 409 `review_session_scratch` | `plane_unsupported`; 403
-     *  (needs a user-bound human caller with write access). */
-    setSessionAutoRebase(conversationId: string, enabled: boolean): Promise<SessionAutoRebaseState>;
     /** The conversation's member roster with roles. Solo conversations
      *  return an empty roster; a dm returns the pair. */
     getConversationMembers(conversationId: string): Promise<ConversationMember[]>;
@@ -500,8 +593,10 @@ export declare class AgentComposeClient {
         userId: string;
         role?: "write" | "read";
     }>): Promise<ConversationMember[]>;
-    /** Remove a member (conversation `owner` or team admin only).
-     *  Throws 400 `last_owner` when the target is the roster's last owner. */
+    /** Remove a member (conversation `owner` or team admin), or leave the
+     *  chat yourself: `userId` "me" (or your own id) is the self-leave door.
+     *  Throws 400 `last_owner` when the target is the roster's last owner and
+     *  400 `creator_cannot_leave` when the chat's creator tries to leave it. */
     removeConversationMember(conversationId: string, userId: string): Promise<ConversationMember[]>;
     /** Change a member's role (conversation `owner` or team admin only).
      *  Throws 400 `last_owner` when demoting the roster's last owner. */
@@ -570,6 +665,9 @@ export declare class AgentComposeClient {
      *  time travel, with `branch` + `at` pinning a graph branch instead. A
      *  garbage-collected/unknown head throws 410 `at_unavailable`. */
     listFactoryFiles(opts?: ListFactoryFilesOptions): Promise<FactoryFileListPage>;
+    /** The credential's user role on the active team; null for a creator-less
+     * key or a user with no membership. */
+    getTeamRole(): Promise<string | null>;
     /** List the human members of your team — the people you (or an agent) can
      *  @-flag with `createMentions`. Each row's `userId` is what
      *  `mentionedUserIds` expects. */
@@ -647,6 +745,10 @@ export declare class AgentComposeClient {
     getProject(id: string): Promise<Project>;
     /** Rename a project (requires `write` role). */
     renameProject(id: string, name: string): Promise<Project>;
+    /** Change a project's name, tier, description or dates (one PATCH; see
+     *  ProjectUpdate for who may set what). 400 `date_order` when the target
+     *  date would come before the start date. */
+    updateProject(id: string, patch: ProjectUpdate): Promise<Project>;
     /** Delete a project (owner or team admin). Revokes every derived grant. */
     deleteProject(id: string): Promise<void>;
     /** The project's member roster with roles (member only). */
@@ -658,16 +760,53 @@ export declare class AgentComposeClient {
         userId: string;
         role?: "write" | "read";
     }>): Promise<ProjectMember[]>;
-    /** Remove a member — project owner/team admin, or self-leave. Throws 400
+    /** Remove a member — project owner/team admin, or self-leave (`me`).
+     *  Leaving a project takes its chats with it: the person loses their row
+     *  in every chat filed in the project, public and private, except a chat
+     *  they reach through another project they remain in, the home room, a
+     *  chat they created, and a chat they are the last owner of. Throws 400
      *  `last_owner` when the target is the roster's last owner. */
     removeProjectMember(id: string, userId: string): Promise<ProjectMember[]>;
+    /** What leaving the project would take from the caller: the chats they
+     *  lose with it, and the project's shared files and folders. */
+    leaveProjectPreview(id: string): Promise<{
+        chats: number;
+        files: number;
+    }>;
     /** Change a member's role (project owner or team admin). Throws 400
      *  `last_owner` when demoting the roster's last owner. */
     setProjectMemberRole(id: string, userId: string, role: ProjectRole): Promise<ProjectMember[]>;
-    /** List a project's objects (member only), newest first. Cursor-paginated. */
+    /** List a project's objects (member only), newest first. Cursor-paginated.
+     *  `type` narrows to one object kind at the server, under the same
+     *  cursor — `"conversation"` is a project's chats alone, however many
+     *  files it holds. */
     listProjectObjects(id: string, opts?: {
         cursor?: string;
+        type?: ProjectObject["type"];
     }): Promise<ProjectObjectsPage>;
+    /** How many objects of each kind the project holds for the caller
+     *  (member only): the whole project's counts, where a page of
+     *  `listProjectObjects` holds at most fifty. */
+    getProjectObjectCounts(id: string): Promise<ProjectObjectCounts>;
+    /** The project status view (member only): its outcome threads with their
+     *  plans, workers, people and next dates, the project's progress, finish
+     *  line and next check-in, and what moved lately. `threads` is
+     *  cursor-paginated; `recentlyClosed` rides the first page. */
+    getProjectStatus(id: string, opts?: {
+        cursor?: string;
+        limit?: number;
+    }): Promise<ProjectStatus>;
+    /** One thread's status for the inline expansion of a status row: its
+     *  summary, workers by state, to-dos and last events. 404 for a thread
+     *  the caller cannot read. */
+    getThreadStatus(threadId: string): Promise<ThreadStatus>;
+    /** The caller's personal status in the current workspace: the threads
+     *  relevant to them (posted, mentioned, asked, a to-do, or in the chat),
+     *  grouped client-side by project. `threads` is cursor-paginated. */
+    getMeStatus(opts?: {
+        cursor?: string;
+        limit?: number;
+    }): Promise<MeStatus>;
     /** DRY-RUN preview of a session add: the files that WOULD be shared (from
      *  the caller's owned scopes) + any owned-but-skipped entries (paths
      *  concealed from the caller are omitted). Powers the consent dialog. Same
@@ -735,6 +874,18 @@ export declare class AgentComposeClient {
     createRepoLink(input: CreateDriveRepoLinkInput, opts?: {
         factorySlug?: string;
     }): Promise<DriveRepoLink[]>;
+    /** Create a repo whose origin IS Agent Compose (`manage` scope) — no
+     *  GitHub behind it; clone/fetch/push ride the platform git door. 409
+     *  names the missing prerequisite (graph drive, git plane) or an
+     *  overlapping placement. */
+    createNativeRepo(input: CreateNativeRepoInput, opts?: {
+        factorySlug?: string;
+    }): Promise<CreateNativeRepoResult>;
+    /** The caller's own connector grants and the workspace's GitHub
+     *  installations (metadata only — never tokens; a teammate's other
+     *  accounts never come back). Used by `agentc repos link` to default
+     *  `--grant` when the team holds exactly one active GitHub grant. */
+    listConnectorGrants(): Promise<ConnectorGrantSummary[]>;
     /** Unlink (§6.3: the prefix's files and history stay on the drive). */
     deleteRepoLink(linkId: string, opts?: {
         factorySlug?: string;
@@ -760,13 +911,53 @@ export declare class AgentComposeClient {
      *  writer. */
     requestSessionSecrets(conversationId: string, keys: string[], opts?: {
         reason?: string;
+        setLabel?: string;
+        kind?: VaultRequestKind;
+        shapes?: Record<string, VaultKeyShape>;
+        savedEntry?: RequestedVaultEntry;
+        /** A REPLACEMENT: the keys are held already and did not work; the card
+         *  asks for a new value of the same key. */
+        replace?: boolean;
+        /** A different credential of a kind the work already holds under
+         *  another name (the server refuses such an ask without it). */
+        distinct?: boolean;
     }): Promise<SessionSecretRequestCreated>;
+    /** The session's STANDING-vault catalog (2026-08-31): entries the vault
+     *  could grant to this session — labels, kinds, field NAMES, last-used.
+     *  Values are write-only and never on this wire. Query it BEFORE asking
+     *  the human for a credential: a matching entry means the ask is a GRANT
+     *  ask naming it, never a blank re-entry form. For the session's own key
+     *  it also carries `reaches`: what the session already reaches with no
+     *  credential asked for (`agentc access`), so a need met there is never
+     *  a vault ask. */
+    getSessionVaultCatalog(conversationId: string): Promise<{
+        entries: VaultCatalogEntry[];
+        note?: string;
+        reaches?: string;
+    }>;
     /** Poll a vault link's status (`pending` → `fulfilled`; `expired` when the
-     *  clock ran out). The in-sandbox `agentc secrets request --wait` loop. */
+     *  clock ran out; `cancelled` when the human denied it or the requester
+     *  withdrew it — attribution rides the answer). The in-sandbox
+     *  `agentc secrets session request --wait` loop. */
     getSessionSecretRequest(conversationId: string, requestId: string): Promise<SessionSecretRequestStatus>;
+    /** List a session's OPEN vault requests (pending + unexpired), newest
+     *  first — receipts only (keys, reason, clocks). The cancel verb's
+     *  `--all` enumeration. */
+    listSessionSecretRequests(conversationId: string): Promise<SessionSecretRequestSummary[]>;
+    /** Cancel one vault request (task #111). The requesting agent withdraws
+     *  its own ask (session toolbelt key), or a session writer denies it.
+     *  409 `request_not_pending` when it already settled. */
+    cancelSessionSecretRequest(conversationId: string, requestId: string, opts?: {
+        reason?: string;
+    }): Promise<{
+        requestId: string;
+        status: "cancelled";
+    }>;
     /** Create a new API key on the caller's team. The plaintext `key` is
      *  returned once — it cannot be retrieved later.
      *
+     *  `scopes` omitted mints `read` alone; every scope asked for must be one
+     *  the caller holds (a key carries no more than whoever mints it).
      *  When `factorySlug` is set, the new key is restricted to that factory.
      *  Factory-scoped keys can only mint other keys bound to the same factory. */
     createApiKey(input: CreateApiKeyInput): Promise<ApiKeyCreated>;

package/dist/directives.d.ts

@@ -88,6 +88,17 @@ export type CloudDirective =
         id: string;
         label: string;
     }>;
+}
+/** Offer the human the desktop takeover door (`show_computer` handing the
+ *  screen over): the server captures the current screen and posts a card
+ *  with a signed takeover link — "You can take over from here." Grants nothing
+ *  by itself: the link's viewer must still be a signed-in member with
+ *  write access to THIS session (the server re-checks on every resolve).
+ *  ONLY for structurally-human walls (a CAPTCHA, human-only verification)
+ *  or when the user asked to do it themselves. */
+ | {
+    kind: "takeover";
+    note?: string;
 };
 /** Revision selectors the `file_diff` directive accepts: a literal
  *  `factory_file_revisions.id`, `head`, `prev`, or `head~N` (N ≤ 999).
@@ -101,6 +112,9 @@ export declare const ASK_DIRECTIVE_OPTION_ID_MAX = 50;
 export declare const ASK_DIRECTIVE_OPTION_LABEL_MAX = 60;
 export declare const ASK_APPROVER_MIN = 3;
 export declare const ASK_APPROVER_MAX = 320;
+/** Takeover-note bound — one line naming what the human must do on the
+ *  screen (mirrors the display-desktop caption cap). */
+export declare const TAKEOVER_NOTE_MAX_CHARS = 200;
 /** One marker line for `agentc` to print. */
 export declare function renderDirectiveMarker(directive: CloudDirective): string;
 /**

package/dist/display.d.ts

@@ -272,4 +272,11 @@ export interface DisplayPromoter {
         isError?: boolean;
     }): PromotedPart[] | null;
 }
+/** Every platform tool name `createDisplayPromoter` can put on a promoted
+ *  `tool_call` — the closed set a local bridge daemon may legitimately post
+ *  under a platform-owned name. The server's part-POST door
+ *  (routes/bridge.ts) refuses every other platform tool name from a daemon,
+ *  so a local agent cannot forge an approval, vault or takeover card. Kept
+ *  beside the promoter so the two cannot drift. */
+export declare const DISPLAY_PROMOTED_TOOL_NAMES: ReadonlySet<string>;
 export declare function createDisplayPromoter(ctx?: DisplayPromoterContext): DisplayPromoter;

package/dist/errors.d.ts

@@ -1,7 +1,7 @@
 /** Stable machine-readable denial codes on membership/capability-gated
  *  mutations (ADR-0045). Reads never carry a code — a visibility denial is
  *  a plain 404, indistinguishable from a missing id. */
-export type AuthzErrorCode = "role_read_only" | "owner_required" | "capability_required" | "membership_required" | "last_owner" | "approver_only";
+export type AuthzErrorCode = "role_read_only" | "owner_required" | "capability_required" | "membership_required" | "last_owner" | "creator_cannot_leave" | "approver_only";
 /** Thrown by AgentComposeClient when the server returns a non-2xx response. */
 export declare class AgentComposeError extends Error {
     readonly status: number;

package/dist/generated/agentc-commands.d.ts

@@ -0,0 +1,34 @@
+/**
+ * GENERATED FILE — DO NOT EDIT.
+ *
+ * Regenerate with `cd cli && bun run generate:commands` (the CLI build chains
+ * it). Source of truth: the commander registry in `cli/src/program.ts`.
+ * Generator: `cli/scripts/generate-command-list.ts`.
+ *
+ * This is the complete list of `agentc` verbs, shipped verbatim into every
+ * agent-facing context — the cloud-session system prompt
+ * (server/src/agent/cloud-executor.ts) and the in-sandbox platform manual
+ * (sdk/src/agent/agent-context.ts). It exists because a hand-maintained
+ * subset drifted: an agent told its owner the CLI "has no cancel verb"
+ * while `agentc cancel` had shipped long before. A lockstep test
+ * (cli/src/__tests__/command-list.test.ts) fails the build if a registered
+ * command is missing here, so the drift cannot recur.
+ */
+/** One top-level verb, one subcommand level deep. `args` is a leaf verb's
+ *  typed shape (positional args + mandatory options); subcommand entries
+ *  carry their own signatures inline. */
+export interface AgentcCommand {
+    name: string;
+    aliases: readonly string[];
+    args: string;
+    description: string;
+    subcommands: readonly string[];
+}
+/** Every registered top-level verb, sorted by name. */
+export declare const AGENTC_COMMANDS: readonly AgentcCommand[];
+/** The rendered block: title, one framing line, then one line per verb.
+ *  Ships verbatim in the server's cloud-session system prompt. */
+export declare const AGENTC_COMMAND_LIST = "agentc verbs \u2014 the complete list:\nGenerated from the CLI's own registry \u2014 if a verb is listed here it EXISTS on your PATH; run `agentc <verb> --help` for its flags, and never tell anyone a capability is missing without checking this list first.\n- agentc access \u2014 What this session can reach, by scope (workspace, project, personal):\u2026\n- agentc auth login <key>, logout, status \u2014 Manage authentication\n- agentc branch claim <target>, rebase [target], release [target], status \u2014 Session drive branches: claim/release write authority, rebase on main\n- agentc bridge login --agent <kind>, status, logout \u2014 Connect a local coding agent (Claude Code / OpenCode) to\u2026\n- agentc calendar \u2014 Check your owner's calendar\n- agentc cancel <run-id> \u2014 Cancel an in-progress run\n- agentc compliance request --scope <kind> --reason <text> --ttl <duration>, approve <session-id>, revoke <session-id>, list, accesses <session-id> \u2014 Break-glass compliance sessions\n- agentc connect \u2014 Connect this machine: sign in if needed (one browser approval),\u2026\n- agentc consent <id> \u2014 Verify a consent id the platform named\n- agentc conv list, read <conversationId>, members <conversationId>, invite <conversationId> <users...>, role \u2014 List and read conversations\n- agentc display run <runId>, changes <runId>, document <drive-path>, plan --entries <json>, image <drive-path>, desktop, preview <drive-path>, table, chart --data <json> --kind <kind>, diff <drive-path> --from <rev> --to <rev>, ask --prompt <text> \u2014 Render a rich card into the conversation transcript\n- agentc events send <run-id> <name>, list [run-id] \u2014 Send or list run events\n- agentc factory list, create <slug>, use <slug>, delete <slug>, show \u2014 Manage factories\n- agentc files conflicts, mount [dir], unmount, mounts, merge, flush, put <local-file> <drive-path>, ls [prefix], read <drive-path>, write <drive-path>, pull <drive-path>, get <drive-path> \u2014 Read/write documents on a factory's drive\n- agentc import \u2014 Move a local Claude Code session into Agent Compose: history,\u2026\n- agentc init \u2014 Install agentc skills\n- agentc invoke [template] \u2014 Invoke a registered workflow template or a platform default\n- agentc keys create <name>, list \u2014 Manage API keys\n- agentc list \u2014 List workflow templates you can invoke\n- agentc login \u2014 Log in via your browser\n- agentc logout \u2014 Clear this machine's browser-login credentials\n- agentc logs <run-id> \u2014 Stream logs for a run\n- agentc machine upsize \u2014 Resize this session's machine\n- agentc mail search [query...], read <message-id>, sent <message-id> \u2014 Check your owner's email\n- agentc members list, notify --user <id-or-email> --text <message> \u2014 List teammates and flag them for attention\n- agentc merge \u2014 Merge THIS session's own drive branch into the shared drive's\u2026\n- agentc navigate <path> \u2014 Take the user's dashboard to a page\n- agentc notify [need...] \u2014 Push a need to your owner: `agentc notify \"Want the\u2026\n- agentc pause --reason <text> \u2014 Ask the human a question and block until they answer\n- agentc preview open|announce <port>, list, close <port> \u2014 Expose a dev-server port on a hosted, member-gated URL\n- agentc project create <name>, list, show <ref>, delete <ref>, members <ref>, invite <ref>, role, remove-member <ref> <user>, leave <ref>, objects <ref>, add <ref> <objectRef>, refresh <ref> <sessionRef>, remove <ref> <objectRef> \u2014 Create and manage projects\n- agentc register <workflow> \u2014 Register a workflow with the server\n- agentc repos link <repoFullName> --prefix <dir>, create <name>, links, unlink <linkId>, clone <link>, restore, setup, gh-token [link], git-credential [op], mirror <link> \u2014 Link factory-drive directories to GitHub repositories\n- agentc review findings, publish --notes <file>, git-credential <action>, changes, file <path> \u2014 In-sandbox toolbelt for a spawned diff-review session\n- agentc run dispatch <templateName> --input <json>, get <runId>, watch <runId>, list, artifacts <runId> [path], latest \u2014 Dispatch workflows and check run status\n- agentc schedule create <name> --workflow <name> --cron <expr>, list, delete <id> \u2014 Manage cron schedules attached to registered workflows\n- agentc search <query> \u2014 Search factory files\n- agentc secrets set <workflow> <key> <value>, list <workflow>, delete <workflow> <key>, factory, session \u2014 Manage secrets\n- agentc services list, add <name> --command <cmd>, remove <name>, restore [names...] \u2014 Durable services manifest\n- agentc session|chat login, logout, add, import, resume <conversationId>, terminal <conversationId>, fork [conversationId], share <conversationId>, unshare <conversationId>, attach <channelId> [conversationId], detach <channelId> [conversationId], share-file <conversationId> <path>, unshare-file <conversationId> <path>, message <target> [text], read, ask [question], post [text] \u2014 Interactive terminal chat on a conversation\n- agentc setup \u2014 Set this machine up so any agent on it can\u2026\n- agentc share <ref> \u2014 Share a drive document or a workflow template\n- agentc skills import, list, show <name>, adopt <name>, rm <name>, share <name>, unshare <name> \u2014 Bring your own skills: import local Claude Code skills into\u2026\n- agentc snapshot list, delete <run-id> [snapshot-id], show <run-id> \u2014 Manage captured sandbox snapshots\n- agentc takeover \u2014 Offer the human this desktop\n- agentc thread progress [note...] \u2014 Read this session's thread queue on your owner's board\n- agentc upgrade \u2014 Update the agentc CLI to the latest published version\n- agentc usage \u2014 Show billable usage\n- agentc wait list, cancel <id> \u2014 Declare what this session is waiting for\n- agentc watch \u2014 Connect the claude-code session already running in this directory to\u2026\n- agentc web <query...> \u2014 Search the web\n- agentc work hold/release \u2014 Hold or release this session's background-work busy lease";
+/** The same block as a markdown `##` section — ships verbatim inside the
+ *  in-sandbox platform manual (`AGENT_COMPOSE_MANUAL`). Same verb lines. */
+export declare const AGENTC_COMMAND_LIST_MD = "## agentc verbs \u2014 the complete list\n\nGenerated from the CLI's own registry \u2014 if a verb is listed here it EXISTS on your PATH; run `agentc <verb> --help` for its flags, and never tell anyone a capability is missing without checking this list first.\n\n- agentc access \u2014 What this session can reach, by scope (workspace, project, personal):\u2026\n- agentc auth login <key>, logout, status \u2014 Manage authentication\n- agentc branch claim <target>, rebase [target], release [target], status \u2014 Session drive branches: claim/release write authority, rebase on main\n- agentc bridge login --agent <kind>, status, logout \u2014 Connect a local coding agent (Claude Code / OpenCode) to\u2026\n- agentc calendar \u2014 Check your owner's calendar\n- agentc cancel <run-id> \u2014 Cancel an in-progress run\n- agentc compliance request --scope <kind> --reason <text> --ttl <duration>, approve <session-id>, revoke <session-id>, list, accesses <session-id> \u2014 Break-glass compliance sessions\n- agentc connect \u2014 Connect this machine: sign in if needed (one browser approval),\u2026\n- agentc consent <id> \u2014 Verify a consent id the platform named\n- agentc conv list, read <conversationId>, members <conversationId>, invite <conversationId> <users...>, role \u2014 List and read conversations\n- agentc display run <runId>, changes <runId>, document <drive-path>, plan --entries <json>, image <drive-path>, desktop, preview <drive-path>, table, chart --data <json> --kind <kind>, diff <drive-path> --from <rev> --to <rev>, ask --prompt <text> \u2014 Render a rich card into the conversation transcript\n- agentc events send <run-id> <name>, list [run-id] \u2014 Send or list run events\n- agentc factory list, create <slug>, use <slug>, delete <slug>, show \u2014 Manage factories\n- agentc files conflicts, mount [dir], unmount, mounts, merge, flush, put <local-file> <drive-path>, ls [prefix], read <drive-path>, write <drive-path>, pull <drive-path>, get <drive-path> \u2014 Read/write documents on a factory's drive\n- agentc import \u2014 Move a local Claude Code session into Agent Compose: history,\u2026\n- agentc init \u2014 Install agentc skills\n- agentc invoke [template] \u2014 Invoke a registered workflow template or a platform default\n- agentc keys create <name>, list \u2014 Manage API keys\n- agentc list \u2014 List workflow templates you can invoke\n- agentc login \u2014 Log in via your browser\n- agentc logout \u2014 Clear this machine's browser-login credentials\n- agentc logs <run-id> \u2014 Stream logs for a run\n- agentc machine upsize \u2014 Resize this session's machine\n- agentc mail search [query...], read <message-id>, sent <message-id> \u2014 Check your owner's email\n- agentc members list, notify --user <id-or-email> --text <message> \u2014 List teammates and flag them for attention\n- agentc merge \u2014 Merge THIS session's own drive branch into the shared drive's\u2026\n- agentc navigate <path> \u2014 Take the user's dashboard to a page\n- agentc notify [need...] \u2014 Push a need to your owner: `agentc notify \"Want the\u2026\n- agentc pause --reason <text> \u2014 Ask the human a question and block until they answer\n- agentc preview open|announce <port>, list, close <port> \u2014 Expose a dev-server port on a hosted, member-gated URL\n- agentc project create <name>, list, show <ref>, delete <ref>, members <ref>, invite <ref>, role, remove-member <ref> <user>, leave <ref>, objects <ref>, add <ref> <objectRef>, refresh <ref> <sessionRef>, remove <ref> <objectRef> \u2014 Create and manage projects\n- agentc register <workflow> \u2014 Register a workflow with the server\n- agentc repos link <repoFullName> --prefix <dir>, create <name>, links, unlink <linkId>, clone <link>, restore, setup, gh-token [link], git-credential [op], mirror <link> \u2014 Link factory-drive directories to GitHub repositories\n- agentc review findings, publish --notes <file>, git-credential <action>, changes, file <path> \u2014 In-sandbox toolbelt for a spawned diff-review session\n- agentc run dispatch <templateName> --input <json>, get <runId>, watch <runId>, list, artifacts <runId> [path], latest \u2014 Dispatch workflows and check run status\n- agentc schedule create <name> --workflow <name> --cron <expr>, list, delete <id> \u2014 Manage cron schedules attached to registered workflows\n- agentc search <query> \u2014 Search factory files\n- agentc secrets set <workflow> <key> <value>, list <workflow>, delete <workflow> <key>, factory, session \u2014 Manage secrets\n- agentc services list, add <name> --command <cmd>, remove <name>, restore [names...] \u2014 Durable services manifest\n- agentc session|chat login, logout, add, import, resume <conversationId>, terminal <conversationId>, fork [conversationId], share <conversationId>, unshare <conversationId>, attach <channelId> [conversationId], detach <channelId> [conversationId], share-file <conversationId> <path>, unshare-file <conversationId> <path>, message <target> [text], read, ask [question], post [text] \u2014 Interactive terminal chat on a conversation\n- agentc setup \u2014 Set this machine up so any agent on it can\u2026\n- agentc share <ref> \u2014 Share a drive document or a workflow template\n- agentc skills import, list, show <name>, adopt <name>, rm <name>, share <name>, unshare <name> \u2014 Bring your own skills: import local Claude Code skills into\u2026\n- agentc snapshot list, delete <run-id> [snapshot-id], show <run-id> \u2014 Manage captured sandbox snapshots\n- agentc takeover \u2014 Offer the human this desktop\n- agentc thread progress [note...] \u2014 Read this session's thread queue on your owner's board\n- agentc upgrade \u2014 Update the agentc CLI to the latest published version\n- agentc usage \u2014 Show billable usage\n- agentc wait list, cancel <id> \u2014 Declare what this session is waiting for\n- agentc watch \u2014 Connect the claude-code session already running in this directory to\u2026\n- agentc web <query...> \u2014 Search the web\n- agentc work hold/release \u2014 Hold or release this session's background-work busy lease";