@apexops/cli 0.10.0-next.4 → 0.10.0-next.5

package/assets/customizations/.github/mcp.json

@@ -11,17 +11,22 @@
         "capabilityStatus",
         "nextTask",
         "taskContext",
+        "readTaskInput",
         "recordInput",
         "projectCreate",
         "projectList",
         "projectUse",
         "projectDelete",
         "gateDecide",
+        "reviewDecide",
         "stageArtifact",
         "stageFile",
         "generateIac",
         "validateTask",
         "completeTask",
+        "requirementsComplete",
+        "architectureComplete",
+        "reviewComplete",
         "planComplete",
         "preview",
         "reconcile",

package/assets/customizations/.github/skills/apex-requirements/SKILL.md

@@ -24,10 +24,13 @@ Use this skill only for an active requirements task.
 4. Submit that request only through `apex/recordInput`, preserving its request ID, expected journal head, and owner
    epoch.
 5. Call `apex/nextTask` again and repeat until it returns a requirements `task`; only then read `apex/taskContext`.
-6. Treat the service-preferences round as a preference boundary. Capture retained, prohibited, and preferred services,
-   SKU preferences, and environment overrides without selecting architecture, SKUs, or implementation details.
-7. Stage the task-context-defined requirements output, complete the requirements task, and wait for the required review
-   result before reporting that Gate 1 is ready. Only the kernel opens or evaluates Gate 1.
+6. Treat service questions in the workload panel as a preference boundary. Present the kernel recommendation, then
+   capture retained, prohibited, and preferred services, SKU preferences, and environment overrides without selecting
+   architecture, SKUs, or implementation details.
+7. Submit the task-context-defined output through `apex/requirementsComplete`, invoke the required Reviewer, and handle
+   `needs_review` through one native findings panel and `apex/reviewDecide`.
+8. After a clean or fully dispositioned review, ask for explicit Gate 1 approval. Call `apex/gateDecide` only after the
+   user chooses Proceed, then continue to Architecture in the same turn.
 
 The kernel catalog and its versioned input contracts are authoritative. Do not choose architecture, SKUs, or
 implementation details while gathering requirements.

package/assets/customizations/manifest.json

@@ -1,5 +1,5 @@
 {
-  "version": "0.10.0-next.4",
+  "version": "0.10.0-next.5",
   "bundle": {
     "id": "apex-managed-workspace",
     "authority": "npm:@apexops/cli",

package/assets/manifest.json

@@ -1,7 +1,7 @@
 {
   "version": 1,
   "sources": {
-    "customizations": "0.10.0-next.4",
+    "customizations": "0.10.0-next.5",
     "config": "1.0.0"
   },
   "composition": {
@@ -190,7 +190,7 @@
         "client-projections/github-copilot-cli/.github/skills/apex-terraform-test/references/test-design.md",
         "client-projections/github-copilot-cli/.github/skills/apex-workflow/SKILL.md"
       ],
-      "digest": "f0890a928676c476f4de0e3260b65ab95cf89c34e45c5a8b66ff394ed88fdb09"
+      "digest": "87f5d74109a94f0014cb832441c4e02bb5b7c5ce97f7a43f80959e55b96052ec"
     },
     {
       "id": "github-copilot-vscode",
@@ -338,7 +338,7 @@
         "client-projections/github-copilot-vscode/.github/skills/apex-workflow/SKILL.md",
         "client-projections/github-copilot-vscode/.vscode/mcp.json"
       ],
-      "digest": "2fc2af31e4f004f6ec5803f88c8d440896f960b45bed8af535d8e5b655a44e22"
+      "digest": "a6387c778c2f2fddbda8453960f113ec4522bca784a7aeaa0a113fa18e9da7db"
     }
   ],
   "files": [
@@ -378,8 +378,8 @@
         "path": "tools/registry/copilot-cli-agent-tools.json",
         "mapping": "copilot-cli-tool-inventory"
       },
-      "sha256": "a6278e6ab4784d81f84b3b036a360e517e72844478b1ba74718b18903a268fdc",
-      "bytes": 3094
+      "sha256": "e67b7d9ca1c28956c13e8817c5f8ae2173d2070f4855ff71098690516e40d1fc",
+      "bytes": 3310
     },
     {
       "path": "client-projections/github-copilot-cli/.github/agents/apex-architect.agent.md",
@@ -388,13 +388,13 @@
         "composition": "client-projections",
         "roleId": "architecture",
         "sourcePath": ".github/agents/apex-architect.agent.md",
-        "sourceHash": "0620b04dc8a48db7f5af148044ed8d040079f887add3b16b3c0e9fdcc022cca0",
+        "sourceHash": "47e6edf792c88ea633cd3bc66c59fba00a3c13020f8771d3635d5e2cc3414e70",
         "clientId": "github-copilot-cli",
         "target": ".github/agents/apex-architect.agent.md",
         "adapterVersion": "1.1.0"
       },
-      "sha256": "3d58237f0006a983daf33bb96049e006d4c1dfd301088d306bc16491b5569c74",
-      "bytes": 5408
+      "sha256": "9c194b0877b6dabcb5a5775c1e719bf851ea194206a183a582200f645b74dfc8",
+      "bytes": 5362
     },
     {
       "path": "client-projections/github-copilot-cli/.github/agents/apex-operator.agent.md",
@@ -418,13 +418,13 @@
         "composition": "client-projections",
         "roleId": "planning",
         "sourcePath": ".github/agents/apex-planner.agent.md",
-        "sourceHash": "9a6bb99cd4784f7afc84f49168933ff8ae0f234386a55ad962382272cb5083ec",
+        "sourceHash": "b33471f0ef586ace4847b9eecfd5363c1d8b269dd9eba460022498ff488c509c",
         "clientId": "github-copilot-cli",
         "target": ".github/agents/apex-planner.agent.md",
         "adapterVersion": "1.1.0"
       },
-      "sha256": "92a748d52adf590387cd819f565172cd4a023390afb17337a571e6feb784de17",
-      "bytes": 4724
+      "sha256": "e1e7a3790dc13628214ba19d5b28d1ab8a522fff07868e5c962a3ad985b690f5",
+      "bytes": 4868
     },
     {
       "path": "client-projections/github-copilot-cli/.github/agents/apex-requirements.agent.md",
@@ -433,13 +433,13 @@
         "composition": "client-projections",
         "roleId": "requirements",
         "sourcePath": ".github/agents/apex-requirements.agent.md",
-        "sourceHash": "87ac351f363c7b782ebbdeda40f15d6e8a7faabc2f400ffadcb0bca4ce66b2f3",
+        "sourceHash": "4bb98532f4c277424689eab261779a33dd0790faf6764a8487848afb5ffb9225",
         "clientId": "github-copilot-cli",
         "target": ".github/agents/apex-requirements.agent.md",
         "adapterVersion": "1.1.0"
       },
-      "sha256": "6843fcf9f5ff5f7a764eb9bc8253ab2baa06195ea20f1febcf38f366839639a9",
-      "bytes": 5432
+      "sha256": "6bd816e8b228ca0fd5b46e55949495286316b5cc406d11f0cefd9cd5bf0b3b0d",
+      "bytes": 6044
     },
     {
       "path": "client-projections/github-copilot-cli/.github/agents/apex.agent.md",
@@ -773,10 +773,10 @@
         "target": ".github/mcp.json",
         "adapterVersion": "1.1.0",
         "sourcePath": ".github/mcp.json",
-        "sourceHash": "dda22ba7b91f17796dc5bc723bdcd66a1ba5f9b971bddb080b21d68062d19a8c"
+        "sourceHash": "21d86c077f0f304e59433f7b7f5063948f60b41ec961f71d50eccf94c340fea9"
       },
-      "sha256": "dda22ba7b91f17796dc5bc723bdcd66a1ba5f9b971bddb080b21d68062d19a8c",
-      "bytes": 1396
+      "sha256": "21d86c077f0f304e59433f7b7f5063948f60b41ec961f71d50eccf94c340fea9",
+      "bytes": 1535
     },
     {
       "path": "client-projections/github-copilot-cli/.github/skills/apex-architecture/SKILL.md",
@@ -2089,10 +2089,10 @@
         "target": ".github/skills/apex-requirements/SKILL.md",
         "adapterVersion": "1.1.0",
         "sourcePath": ".github/skills/apex-requirements/SKILL.md",
-        "sourceHash": "846fd892c70658a956b6657eebc06557619f7483cf690acf0e2d18ad9c616884"
+        "sourceHash": "0b5076218e79d165efaa2d4a00d5f6014804e6f04666d223947a4e8c9f9512f5"
       },
-      "sha256": "846fd892c70658a956b6657eebc06557619f7483cf690acf0e2d18ad9c616884",
-      "bytes": 2187
+      "sha256": "0b5076218e79d165efaa2d4a00d5f6014804e6f04666d223947a4e8c9f9512f5",
+      "bytes": 2418
     },
     {
       "path": "client-projections/github-copilot-cli/.github/skills/apex-terraform-import/SKILL.md",
@@ -2339,13 +2339,13 @@
         "composition": "client-projections",
         "roleId": "architecture",
         "sourcePath": ".github/agents/apex-architect.agent.md",
-        "sourceHash": "0620b04dc8a48db7f5af148044ed8d040079f887add3b16b3c0e9fdcc022cca0",
+        "sourceHash": "47e6edf792c88ea633cd3bc66c59fba00a3c13020f8771d3635d5e2cc3414e70",
         "clientId": "github-copilot-vscode",
         "target": ".github/agents/apex-architect.agent.md",
         "adapterVersion": "1.1.0"
       },
-      "sha256": "d1cb288b989e3ad488e6ae26b0c1cb83b39692058bd6f12fbfe5215a016ad368",
-      "bytes": 5693
+      "sha256": "f4e8363fd82309494f2d3a54371abd824e6862323c4db6f52c8b8fe657bf0745",
+      "bytes": 5647
     },
     {
       "path": "client-projections/github-copilot-vscode/.github/agents/apex-codegen.agent.md",
@@ -2384,13 +2384,13 @@
         "composition": "client-projections",
         "roleId": "planning",
         "sourcePath": ".github/agents/apex-planner.agent.md",
-        "sourceHash": "9a6bb99cd4784f7afc84f49168933ff8ae0f234386a55ad962382272cb5083ec",
+        "sourceHash": "b33471f0ef586ace4847b9eecfd5363c1d8b269dd9eba460022498ff488c509c",
         "clientId": "github-copilot-vscode",
         "target": ".github/agents/apex-planner.agent.md",
         "adapterVersion": "1.1.0"
       },
-      "sha256": "d62130949707e65501d62452a3cec09918781abed2bd266d64383d9e6717478e",
-      "bytes": 5032
+      "sha256": "1133d3020cdf6b5a787df091730e9efa7de9076290dd760fe58864478d7fbec4",
+      "bytes": 5176
     },
     {
       "path": "client-projections/github-copilot-vscode/.github/agents/apex-requirements.agent.md",
@@ -2399,13 +2399,13 @@
         "composition": "client-projections",
         "roleId": "requirements",
         "sourcePath": ".github/agents/apex-requirements.agent.md",
-        "sourceHash": "87ac351f363c7b782ebbdeda40f15d6e8a7faabc2f400ffadcb0bca4ce66b2f3",
+        "sourceHash": "4bb98532f4c277424689eab261779a33dd0790faf6764a8487848afb5ffb9225",
         "clientId": "github-copilot-vscode",
         "target": ".github/agents/apex-requirements.agent.md",
         "adapterVersion": "1.1.0"
       },
-      "sha256": "e69cce296049d7f9ac411889e8c094cb4278957fb4d35520e9ebb4b24a036e61",
-      "bytes": 5736
+      "sha256": "70e254ca0b7a8cef6f44fc93c5558d6983c6d0bee71b616dc467f5010a687165",
+      "bytes": 6348
     },
     {
       "path": "client-projections/github-copilot-vscode/.github/agents/apex-reviewer.agent.md",
@@ -2414,13 +2414,13 @@
         "composition": "client-projections",
         "roleId": "review",
         "sourcePath": ".github/agents/apex-reviewer.agent.md",
-        "sourceHash": "b76a003f0147584974175f47e5d1a28d68c45f5153d12a8c5fa5e4552872ae13",
+        "sourceHash": "aa2c8064d102f8e2e69eaccc15894455abfcc56892e61bde46d6ece0cbc3c7cd",
         "clientId": "github-copilot-vscode",
         "target": ".github/agents/apex-reviewer.agent.md",
         "adapterVersion": "1.1.0"
       },
-      "sha256": "55dbe78ed39469d87e6a223c3b986986f78a7f66d4058690bd69457e5e7da12d",
-      "bytes": 2635
+      "sha256": "4be66c1a357ea492c20eaada3431c9b7184f33618bfd69f2725c0c83a2f3f8e7",
+      "bytes": 2976
     },
     {
       "path": "client-projections/github-copilot-vscode/.github/agents/apex-validator.agent.md",
@@ -4071,10 +4071,10 @@
         "target": ".github/skills/apex-requirements/SKILL.md",
         "adapterVersion": "1.1.0",
         "sourcePath": ".github/skills/apex-requirements/SKILL.md",
-        "sourceHash": "846fd892c70658a956b6657eebc06557619f7483cf690acf0e2d18ad9c616884"
+        "sourceHash": "0b5076218e79d165efaa2d4a00d5f6014804e6f04666d223947a4e8c9f9512f5"
       },
-      "sha256": "846fd892c70658a956b6657eebc06557619f7483cf690acf0e2d18ad9c616884",
-      "bytes": 2187
+      "sha256": "0b5076218e79d165efaa2d4a00d5f6014804e6f04666d223947a4e8c9f9512f5",
+      "bytes": 2418
     },
     {
       "path": "client-projections/github-copilot-vscode/.github/skills/apex-terraform-import/SKILL.md",
@@ -4385,7 +4385,7 @@
         "path": "config/runtime-bundle.v1.json",
         "mapping": "config"
       },
-      "sha256": "50c39bd12f0ac738fb2ac7b2dc63a761ccd4392dfc7cff57c991b43629473674",
+      "sha256": "7f90c32650d60c10143c298896b404b204427c77a5a746a8778a9bdf1229fd30",
       "bytes": 2039
     },
     {
@@ -4415,8 +4415,8 @@
         "path": "customizations/.github/agents/apex-architect.agent.md",
         "mapping": "customizations"
       },
-      "sha256": "0620b04dc8a48db7f5af148044ed8d040079f887add3b16b3c0e9fdcc022cca0",
-      "bytes": 5509
+      "sha256": "47e6edf792c88ea633cd3bc66c59fba00a3c13020f8771d3635d5e2cc3414e70",
+      "bytes": 5463
     },
     {
       "path": "customizations/.github/agents/apex-codegen.agent.md",
@@ -4445,8 +4445,8 @@
         "path": "customizations/.github/agents/apex-planner.agent.md",
         "mapping": "customizations"
       },
-      "sha256": "9a6bb99cd4784f7afc84f49168933ff8ae0f234386a55ad962382272cb5083ec",
-      "bytes": 4848
+      "sha256": "b33471f0ef586ace4847b9eecfd5363c1d8b269dd9eba460022498ff488c509c",
+      "bytes": 4992
     },
     {
       "path": "customizations/.github/agents/apex-requirements.agent.md",
@@ -4455,8 +4455,8 @@
         "path": "customizations/.github/agents/apex-requirements.agent.md",
         "mapping": "customizations"
       },
-      "sha256": "87ac351f363c7b782ebbdeda40f15d6e8a7faabc2f400ffadcb0bca4ce66b2f3",
-      "bytes": 5552
+      "sha256": "4bb98532f4c277424689eab261779a33dd0790faf6764a8487848afb5ffb9225",
+      "bytes": 6164
     },
     {
       "path": "customizations/.github/agents/apex-reviewer.agent.md",
@@ -4465,8 +4465,8 @@
         "path": "customizations/.github/agents/apex-reviewer.agent.md",
         "mapping": "customizations"
       },
-      "sha256": "b76a003f0147584974175f47e5d1a28d68c45f5153d12a8c5fa5e4552872ae13",
-      "bytes": 2594
+      "sha256": "aa2c8064d102f8e2e69eaccc15894455abfcc56892e61bde46d6ece0cbc3c7cd",
+      "bytes": 2935
     },
     {
       "path": "customizations/.github/agents/apex-validator.agent.md",
@@ -4715,8 +4715,8 @@
         "path": "customizations/.github/mcp.json",
         "mapping": "customizations"
       },
-      "sha256": "dda22ba7b91f17796dc5bc723bdcd66a1ba5f9b971bddb080b21d68062d19a8c",
-      "bytes": 1396
+      "sha256": "21d86c077f0f304e59433f7b7f5063948f60b41ec961f71d50eccf94c340fea9",
+      "bytes": 1535
     },
     {
       "path": "customizations/.github/skills/apex-architecture/SKILL.md",
@@ -5655,8 +5655,8 @@
         "path": "customizations/.github/skills/apex-requirements/SKILL.md",
         "mapping": "customizations"
       },
-      "sha256": "846fd892c70658a956b6657eebc06557619f7483cf690acf0e2d18ad9c616884",
-      "bytes": 2187
+      "sha256": "0b5076218e79d165efaa2d4a00d5f6014804e6f04666d223947a4e8c9f9512f5",
+      "bytes": 2418
     },
     {
       "path": "customizations/.github/skills/apex-terraform-import/SKILL.md",
@@ -5855,13 +5855,13 @@
         "path": "customizations/manifest.json",
         "mapping": "customizations"
       },
-      "sha256": "f1a21469470732feaf9cfda73e6e6b74ba573555548cf08eb23a5f3e0a415ae7",
+      "sha256": "c6f64975501baddd9d1712a7a5169b70ab61a4328fdcba9444c0b20800d05ade",
       "bytes": 14078
     }
   ],
   "lock": {
     "algorithm": "sha256",
     "canonicalization": "apex-bundled-assets-v1",
-    "digest": "20492f37396ff14048903cf57ebb86fe1177f22aca509d51d37b45a8afa1be93"
+    "digest": "455ee4805ee6e1635feea04cd73745cd358679a791360ba7f6ae24180785a05d"
   }
 }

package/dist/cli.d.ts

@@ -1,4 +1,5 @@
 #!/usr/bin/env node
 import { type ServiceOptions } from "./service.js";
 export declare function execute(argv: string[], root?: string, options?: ServiceOptions): Promise<unknown>;
+export declare function formatHumanResult(args: string[], result: unknown): string;
 //# sourceMappingURL=cli.d.ts.map

package/dist/cli.js

@@ -624,12 +624,14 @@ export async function execute(argv, root = process.cwd(), options = {}) {
 }
 async function main() {
     const json = process.argv.includes("--json");
+    const verbose = process.argv.includes("--verbose");
+    const args = process.argv.slice(2);
     try {
-        const result = await execute(process.argv.slice(2));
+        const result = await execute(args);
         if (result !== undefined)
             process.stdout.write(json
                 ? `${JSON.stringify({ ok: true, result })}\n`
-                : `${typeof result === "string" ? result : JSON.stringify(result, null, 2)}\n`);
+                : `${verbose ? (typeof result === "string" ? result : JSON.stringify(result, null, 2)) : formatHumanResult(args, result)}\n`);
     }
     catch (error) {
         const normalized = normalizeError(error);
@@ -641,6 +643,44 @@ async function main() {
         process.exitCode = normalized.exitCode;
     }
 }
+export function formatHumanResult(args, result) {
+    const command = args.find((argument) => !argument.startsWith("--"));
+    if (command === "status" && result !== null && typeof result === "object") {
+        const status = result;
+        const task = status.task ?? null;
+        const stage = task?.startsWith("requirements")
+            ? "Requirements"
+            : task?.startsWith("architecture") || task?.startsWith("governance")
+                ? "Architecture"
+                : task?.startsWith("plan")
+                    ? "Planning"
+                    : task?.startsWith("codegen") || task?.startsWith("validation")
+                        ? "Build and validate"
+                        : task?.startsWith("preview") || task?.startsWith("deploy") || task === "inventory"
+                            ? "Operations"
+                            : "Ready for next decision";
+        const blocker = status.blockers?.[0] ?? "None";
+        const next = task !== null ? `Continue ${stage}` : blocker !== "None" ? blocker : "Ask APEX to continue";
+        return [
+            `Project: ${status.run?.projectId ?? "unknown"} (${status.run?.environment ?? "unknown"})`,
+            `Stage: ${stage}`,
+            `Blocker: ${blocker}`,
+            `Next: ${next}`,
+        ].join("\n");
+    }
+    if (command === "doctor" && result !== null && typeof result === "object") {
+        const doctor = result;
+        const passed = doctor.checks?.filter(({ ok }) => ok).length ?? 0;
+        const total = doctor.checks?.length ?? 0;
+        const remaining = doctor.remedies?.length ?? 0;
+        return [
+            `Status: ${doctor.healthy ? "Ready" : "Setup incomplete"} (${passed}/${total} checks ready)`,
+            `Next: ${doctor.nextAction ?? "No action required"}`,
+            ...(remaining > 1 ? [`Later: ${remaining - 1} additional setup item${remaining === 2 ? "" : "s"}`] : []),
+        ].join("\n");
+    }
+    return typeof result === "string" ? result : JSON.stringify(result, null, 2);
+}
 if (process.argv[1] !== undefined && (await realpath(process.argv[1])) === (await realpath(new URL(import.meta.url))))
     await main();
 //# sourceMappingURL=cli.js.map

package/dist/mcp.js

@@ -5,6 +5,14 @@ import { ApexService, SUPPORTED_ARTIFACT_KINDS } from "./service.js";
 import { APEX_VERSION } from "./version.js";
 const artifactKind = z.enum(SUPPORTED_ARTIFACT_KINDS);
 const taskOutput = z.object({ kind: artifactKind, value: z.unknown(), summary: z.string().optional() });
+const reviewFinding = z
+    .object({
+    id: z.string().min(1),
+    severity: z.enum(["critical", "high", "medium", "low", "info"]),
+    title: z.string().min(1),
+    detail: z.string().min(1),
+})
+    .strict();
 const uniqueStrings = z
     .array(z.string().min(1))
     .min(1)
@@ -88,6 +96,21 @@ const gateDecisionInput = z
     confirm: z.literal(true),
 })
     .strict();
+const reviewDecisionInput = z
+    .object({
+    reviewHash: z.string().regex(/^[0-9a-f]{64}$/),
+    decisions: z
+        .array(z
+        .object({
+        findingId: z.string().min(1),
+        action: z.enum(["revise", "accept-risk"]),
+        rationale: z.string().min(1),
+        expiresAt: z.string().datetime().optional(),
+    })
+        .strict())
+        .min(1),
+})
+    .strict();
 const normalizeOutputs = (outputs) => outputs.map(({ kind, value, summary }) => ({
     kind,
     value,
@@ -109,6 +132,14 @@ export function createMcpServer(service) {
         description: "Read context only for the exact task.taskId returned by nextTask with status=task.",
         inputSchema: { taskId: z.string() },
     }, async ({ taskId }) => result(await service.taskContext(taskId)));
+    server.registerTool("readTaskInput", {
+        description: "Read a bounded chunk of the accepted source artifact for an active review task.",
+        inputSchema: {
+            taskId: z.string(),
+            offset: z.number().int().nonnegative().optional(),
+            limit: z.number().int().min(1).max(6_000).optional(),
+        },
+    }, async ({ taskId, offset, limit }) => result(await service.readTaskInput(taskId, offset, limit)));
     server.registerTool("recordInput", { description: "Record answers for the exact pending kernel input request", inputSchema: inputSubmission }, async (input) => result(await service.recordInput(input)));
     server.registerTool("projectCreate", {
         description: "Create and select a new project with its initial environment run",
@@ -124,6 +155,13 @@ export function createMcpServer(service) {
         description: "Record an explicitly confirmed human decision for Gate 1, 2, or 3 using the local OS username as actor. Gate 4 remains CLI-only.",
         inputSchema: gateDecisionInput,
     }, async ({ gate, decision }) => result(await service.decideInteractiveGate(gate, decision)));
+    server.registerTool("reviewDecide", {
+        description: "Resolve all current review findings atomically by requesting revision or accepting permitted time-bound risk.",
+        inputSchema: reviewDecisionInput,
+    }, async ({ reviewHash, decisions }) => result(await service.decideReview(reviewHash, decisions.map(({ expiresAt, ...decision }) => ({
+        ...decision,
+        ...(expiresAt === undefined ? {} : { expiresAt }),
+    })))));
     server.registerTool("stageArtifact", {
         inputSchema: {
             taskId: z.string(),
@@ -178,25 +216,29 @@ export function createMcpServer(service) {
             : { kind, value, ...(summary === undefined ? {} : { summary }) }
         : normalizeOutputs(outputs))));
     server.registerTool("completeTask", {
-        description: "Complete a task atomically. Supply outputs[] for every task with multiple required output kinds.",
+        description: "Complete a task atomically with a nonempty outputs[] bundle.",
         inputSchema: {
             taskId: z.string(),
-            kind: artifactKind.optional(),
-            value: z.unknown().optional(),
-            summary: z.string().optional(),
-            outputs: z.array(taskOutput).optional(),
+            outputs: z.array(taskOutput).min(1),
         },
-    }, async ({ taskId, kind, value, summary, outputs }) => {
-        if (outputs !== undefined)
-            return result(await service.completeTaskOutputs(taskId, normalizeOutputs(outputs)));
-        if (kind === undefined)
-            throw new Error("completeTask requires kind/value or outputs[]");
-        const context = await service.taskContext(taskId);
-        if (context.task.allowedOutputKinds.length > 1) {
-            throw new Error("completeTask requires outputs[] when the task has multiple required output kinds");
-        }
-        return result(await service.completeTask(taskId, { kind, value, ...(summary === undefined ? {} : { summary }) }));
-    });
+    }, async ({ taskId, outputs }) => result(await service.completeTaskOutputs(taskId, normalizeOutputs(outputs))));
+    server.registerTool("requirementsComplete", {
+        description: "Complete the active Requirements task atomically.",
+        inputSchema: { taskId: z.string(), requirements: z.unknown() },
+    }, async ({ taskId, requirements }) => result(await service.completeRequirements(taskId, requirements)));
+    server.registerTool("architectureComplete", {
+        description: "Complete the active Architecture task atomically with all required outputs.",
+        inputSchema: {
+            taskId: z.string(),
+            architecture: z.unknown(),
+            costEstimate: z.unknown(),
+            decisionManifest: z.unknown(),
+        },
+    }, async ({ taskId, architecture, costEstimate, decisionManifest }) => result(await service.completeArchitecture(taskId, architecture, costEstimate, decisionManifest)));
+    server.registerTool("reviewComplete", {
+        description: "Complete the active review task; APEX derives subject identity, hash, timestamp, and evidence binding.",
+        inputSchema: { taskId: z.string(), findings: z.array(reviewFinding) },
+    }, async ({ taskId, findings }) => result(await service.completeReview(taskId, findings)));
     server.registerTool("planComplete", {
         description: "Atomically complete a plan. Derives the canonical implementation intent hash for the binding; do not supply intentHash.",
         inputSchema: planCompletionInput,

package/dist/service.d.ts

@@ -1,4 +1,4 @@
-import { type ApprovalEvidenceV1, type ArchitectureAvailabilityV1, type DeploymentPreviewV1, type EnvironmentInputsV1, type IacBindingV1, type InputRequestV1, type InputValueV1, type InputSubmissionV1, type ImprovementCategory, type ImprovementDecisionV1, type ImprovementObservationV1, type ImprovementPolicyV1, type ImprovementProposalV1, type ImprovementSource, type ImplementationIntentV1, type Operation, type ProjectId, type ResourceInventoryV1, type RunConfigV1, type RunId, type TaskEnvelopeV1 } from "@apexops/contracts";
+import { type ApprovalEvidenceV1, type ArchitectureAvailabilityV1, type ArchitectureV1, type CostEstimateV1, type DeploymentPreviewV1, type EnvironmentInputsV1, type IacBindingV1, type InputRequestV1, type InputValueV1, type InputSubmissionV1, type ImprovementCategory, type ImprovementDecisionV1, type ImprovementObservationV1, type ImprovementPolicyV1, type ImprovementProposalV1, type ImprovementSource, type ImplementationIntentV1, type Operation, type ProjectId, type ResourceInventoryV1, type ReviewFindingsV1, type RequirementsV1, type RunConfigV1, type RunId, type WorkloadDecisionManifestV1, type TaskEnvelopeV1 } from "@apexops/contracts";
 import { type CapabilityPackInstallOptions, type IacProvider, type ProcessRunnerLike } from "@apexops/capabilities";
 import { type JsonValue } from "@apexops/kernel";
 import { type BundledClientProjection } from "./assets.js";
@@ -52,6 +52,12 @@ export interface ReviewResolution {
     expiresAt?: string;
     dependencyHash: string;
 }
+export interface ReviewDecision {
+    findingId: string;
+    action: "revise" | "accept-risk";
+    rationale: string;
+    expiresAt?: string;
+}
 export interface ServiceOptions {
     clock?: () => Date;
     idSource?: () => string;
@@ -618,6 +624,9 @@ export declare class ApexService {
     nextTask(): Promise<{
         status: "needs_input";
         request: InputRequestV1;
+    } | {
+        status: "needs_review";
+        review: Awaited<ReturnType<ApexService["pendingReview"]>>;
     } | {
         status: "task";
         task: TaskEnvelopeV1;
@@ -638,6 +647,13 @@ export declare class ApexService {
         status: string;
         blockers: string[];
     }>;
+    readTaskInput(taskId: string, offset?: number, limit?: number): Promise<{
+        subjectHash: string;
+        content: string;
+        offset: number;
+        nextOffset?: number;
+        outputTemplate?: unknown;
+    }>;
     stageArtifact(taskId: string, output: TaskOutput): Promise<StagedArtifact>;
     stageFile(taskId: string, relativePath: string, content: string | Uint8Array, expectedSha?: string): Promise<StagedFile>;
     generateIac(taskId: string, options?: GenerateIacOptions): Promise<{
@@ -658,10 +674,23 @@ export declare class ApexService {
         outputHashes: Partial<Record<ArtifactKind, string>>;
         summary: string;
     }>;
+    completeRequirements(taskId: string, requirements: RequirementsV1): Promise<{
+        outputHashes: Partial<Record<ArtifactKind, string>>;
+        summary: string;
+    }>;
+    completeArchitecture(taskId: string, architecture: ArchitectureV1, costEstimate: CostEstimateV1, decisionManifest: WorkloadDecisionManifestV1): Promise<{
+        outputHashes: Partial<Record<ArtifactKind, string>>;
+        summary: string;
+    }>;
+    completeReview(taskId: string, findings: Array<Pick<ReviewFindingsV1["findings"][number], "id" | "severity" | "title" | "detail">>): Promise<{
+        outputHashes: Partial<Record<ArtifactKind, string>>;
+        summary: string;
+    }>;
     completePlan(taskId: string, intent: ImplementationIntentV1, binding: Omit<IacBindingV1, "intentHash">, environmentInputs: EnvironmentInputsV1): Promise<{
         outputHashes: Partial<Record<ArtifactKind, string>>;
         summary: string;
     }>;
+    private assertTaskType;
     private acceptTaskOutputs;
     private renderRequirementsDocument;
     private requirementsReviewDirectory;
@@ -680,6 +709,11 @@ export declare class ApexService {
     private requirementsDocumentTemplateContent;
     cancelTask(taskId: string): Promise<void>;
     resolveReview(resolution: ReviewResolution): Promise<void>;
+    decideReview(reviewHash: string, decisions: ReviewDecision[]): Promise<{
+        status: "revision_requested" | "resolved";
+    }>;
+    private pendingReview;
+    private reviseReview;
     private assertReviewResolution;
     decideGateNumber(gateNumber: number, decision: "approved" | "rejected", actor: string, options?: GateDecisionOptions): Promise<ApprovalEvidenceV1>;
     decideInteractiveGate(gateNumber: 1 | 2 | 3, decision: "approved" | "rejected"): Promise<ApprovalEvidenceV1>;
@@ -754,8 +788,12 @@ export declare class ApexService {
     private architectureDecisionValues;
     private issueArchitectureDecision;
     private nextRequirementsIntakeRound;
+    private requirementsIntakeCatalog;
     private issueRequirementsInput;
     private requirementsIntakeQuestions;
+    private recommendedWorkloadPattern;
+    private workloadScalePrompt;
+    private recommendedServiceCandidates;
     private append;
     private journal;
     private runPath;
@@ -806,6 +844,8 @@ export declare class ApexService {
     private customizationSelection;
     private assertCleanInitialization;
     private createRuntimeLock;
+    private installRuntimeGeneration;
+    private runtimeRootForRun;
     private capabilityPacks;
     private runtimeLockChecks;
     private ensureLocalGitBoundary;