@catalyst-cloud/cli 0.15.4 → 0.15.5

package/CHANGELOG.md

@@ -1,5 +1,9 @@
 # Changelog
 
+## 0.15.5
+
+Setup explains what running work on this computer means and lists every repository registered to your Linear team.
+
 ## 0.15.4
 
 - Setup shows a colour mark and clearer progress, with a plain display when your terminal needs it.

package/dist/onboard-headless.js

@@ -242,6 +242,9 @@ export function planOnboardHeadless(args, ctx) {
     delete flags["key-file"];
     delete flags.runner;
     delete flags["no-runner"];
+    // CATALYST_ONBOARD_HEADLESS=1 alone leaves the flag unset; the plan names the headless input
+    // rather than a --no-runner nobody typed (CTC-4739).
+    flags.headless = true;
     if (runner === "yes")
         flags.runner = true;
     if (runner === "no")

package/dist/onboard-repositories.js

@@ -97,6 +97,17 @@ export async function readOnboardRepositoryInventory(ctx, journal, signal) {
     const teamId = selectedOnboardTeam(journal);
     if (!teamId)
         return { reason: "team_selection_unverified" };
+    // CTC-4742: the per-person repository list names every project a repository belongs to, so a
+    // team that uses several repositories shows all of them. A member's list is narrowed to their
+    // own access by the server. An older server without the route falls back to the one-per-team
+    // registry below.
+    const agent = await readExistingOnboardJson(ctx, "/api/v1/agent/repos", signal);
+    if (!sameIdentity())
+        return { reason: "repository_identity_unverified" };
+    if (!("reason" in agent))
+        return teamRepositories(ctx, journal, teamId, agent.body, sameIdentity, signal);
+    if (agent.status !== 404)
+        return { reason: "repository_read_unavailable" };
     const read = await readExistingOnboardJson(ctx, "/api/v1/repos", signal);
     if (!sameIdentity())
         return { reason: "repository_identity_unverified" };
@@ -171,6 +182,162 @@ export async function readOnboardRepositoryInventory(ctx, journal, signal) {
     }
     return { repositories };
 }
+/** The saved login is still the person, account and origin this run started with (and, when
+ *  `manager`, an owner or admin). Returns that config, or null. */
+function journalIdentity(ctx, journal, manager = false) {
+    const cfg = loadConfig(ctx.home);
+    return cfg?.user &&
+        cfg.account === journal.account &&
+        cfg.user.id === journal.membershipId &&
+        !!journal.baseUrl &&
+        normalizeBaseUrl(cfg.baseUrl) === normalizeBaseUrl(journal.baseUrl) &&
+        (!manager || ["owner", "admin"].includes(cfg.user.role))
+        ? cfg
+        : null;
+}
+const REGISTER_PATH = "/api/v1/agent/project-repositories";
+/** The fresh contract's repository IDs and the repositories registered to the chosen team (by its
+ *  id), or why they can't be trusted. */
+async function contractIds(ctx, journal, teamId, sameIdentity, signal) {
+    const read = await readExistingOnboardJson(ctx, "/api/v1/agent/contract", signal);
+    if (!sameIdentity())
+        return { reason: "repository_identity_unverified" };
+    if ("reason" in read)
+        return { reason: "repository_contract_unavailable" };
+    const doc = object(read.body);
+    const account = object(doc?.account);
+    const merge = object(doc?.merge);
+    if (!doc ||
+        account?.id !== journal.account ||
+        typeof doc.contractVersion !== "string" ||
+        contractVersionInRange(doc.contractVersion, readManifest().tenantContractRange) !== true ||
+        !merge ||
+        !Array.isArray(merge.repositories) ||
+        merge.repositories.length > 10_000 ||
+        !Array.isArray(doc.teams) ||
+        doc.teams.length > 1_000)
+        return { reason: "repository_contract_unverified" };
+    // The team's repositories, keyed by the team's id (a team key can be renamed or missing).
+    const teams = doc.teams.filter((value) => object(value)?.id === teamId);
+    const names = object(object(teams[0])?.repositories)?.registered;
+    if (teams.length !== 1 ||
+        !Array.isArray(names) ||
+        names.length > 1_000 ||
+        !names.every((name) => typeof name === "string" && /^[A-Za-z0-9][A-Za-z0-9_.-]{0,99}\/[A-Za-z0-9][A-Za-z0-9_.-]{0,99}$/.test(name)))
+        return { reason: "team_selection_unverified" };
+    const registered = new Set(names.map((name) => name.toLowerCase()));
+    const ids = new Map();
+    const idNames = new Map();
+    for (const value of merge.repositories) {
+        const row = object(value);
+        if (!row ||
+            typeof row.owner !== "string" ||
+            !part.test(row.owner) ||
+            typeof row.name !== "string" ||
+            !part.test(row.name) ||
+            !isRepositoryId(row.repoId))
+            return { reason: "repository_contract_unverified" };
+        const name = key({ owner: row.owner, name: row.name });
+        if (idNames.has(row.repoId) && idNames.get(row.repoId) !== name)
+            return { reason: "repository_contract_unverified" };
+        idNames.set(row.repoId, name);
+        ids.set(name, [...(ids.get(name) ?? []), row.repoId]);
+    }
+    // Registering is offered only when this account's contract lists the route (CTC-4742).
+    const canRegister = Array.isArray(doc.routes) &&
+        doc.routes.some((value) => {
+            const route = object(value);
+            return route?.method === "POST" && route.path === REGISTER_PATH;
+        });
+    return { registered, ids, canRegister };
+}
+/** CTC-4742: every repository an active project of the chosen team uses, with its contract ID. */
+async function teamRepositories(ctx, journal, teamId, body, sameIdentity, signal) {
+    const list = object(body);
+    if (!list || !Array.isArray(list.repositories) || list.repositories.length > 10_000)
+        return { reason: "repository_inventory_shape" };
+    const contract = await contractIds(ctx, journal, teamId, sameIdentity, signal);
+    if ("reason" in contract)
+        return contract;
+    const repositories = [];
+    const seen = new Set();
+    for (const value of list.repositories) {
+        const row = object(value);
+        if (!row ||
+            typeof row.id !== "string" ||
+            typeof row.owner !== "string" ||
+            !part.test(row.owner) ||
+            typeof row.name !== "string" ||
+            !part.test(row.name))
+            return { reason: "repository_inventory_shape" };
+        // The contract says which repositories the team uses; this person's list says which of them
+        // they can see (the server narrows it for a member).
+        const name = key({ owner: row.owner, name: row.name });
+        if (!contract.registered.has(name))
+            continue;
+        if (seen.has(name))
+            return { reason: "repository_binding_ambiguous" };
+        seen.add(name);
+        const ids = contract.ids.get(name);
+        if (!ids || ids.length !== 1 || ids[0] !== row.id)
+            return { reason: "repository_id_unverified" };
+        repositories.push({ teamId, owner: row.owner, name: row.name, repoId: ids[0], registered: true });
+    }
+    return { repositories, canRegister: contract.canRegister };
+}
+/** CTC-4742: repositories the GitHub App can reach that the team does not use yet, for an owner or
+ *  admin only (only they can register one). Any read problem means no offers, never a stopped step. */
+async function offeredRepositories(ctx, journal, teamId, registered, signal) {
+    if (!journalIdentity(ctx, journal, true))
+        return [];
+    const read = await readExistingOnboardJson(ctx, "/api/v1/me/repositories/options", signal);
+    if (!journalIdentity(ctx, journal, true) || "reason" in read)
+        return [];
+    const github = object(object(read.body)?.github);
+    if (!github || github.connected !== true || !Array.isArray(github.repositories) || github.repositories.length > 10_000)
+        return [];
+    const used = new Set(registered.map(key));
+    const offers = [];
+    for (const value of github.repositories) {
+        const row = object(value);
+        if (!row || typeof row.owner !== "string" || !part.test(row.owner) || typeof row.name !== "string" || !part.test(row.name))
+            return [];
+        const name = key({ owner: row.owner, name: row.name });
+        if (used.has(name))
+            continue;
+        used.add(name);
+        offers.push({ teamId, owner: row.owner, name: row.name, repoId: null, registered: false });
+    }
+    return offers;
+}
+/** CTC-4742: register one repository to the team's project. Only adds; nothing here removes one. */
+async function registerToTeam(ctx, journal, teamId, repository, signal) {
+    // The person who answered the question is the one who registers: checked right before the write.
+    const cfg = journalIdentity(ctx, journal, true);
+    if (!cfg)
+        return "repository_identity_unverified";
+    const expiry = cfg.auth ? Date.parse(cfg.auth.expiresAt) - ctx.now().getTime() : 0;
+    const bearer = cfg.key || (cfg.auth && Number.isFinite(expiry) && expiry > 30_000 ? cfg.auth.accessToken : undefined);
+    if (!bearer)
+        return "project_login_refresh_required";
+    // Bounded like every read here, so a server that never answers can't hold setup.
+    const deadline = AbortSignal.timeout(30_000);
+    const bounded = signal ? AbortSignal.any([signal, deadline]) : deadline;
+    try {
+        const response = await ctx.fetch(`${normalizeBaseUrl(cfg.baseUrl)}${REGISTER_PATH}`, {
+            method: "POST",
+            redirect: "error",
+            signal: bounded,
+            headers: { authorization: `Bearer ${bearer}`, "content-type": "application/json", accept: "application/json" },
+            body: JSON.stringify({ teamId, repository }),
+        });
+        // A response is not evidence: the next read must show the repository on the team.
+        return response.status === 200 ? null : "repository_register_unverified";
+    }
+    catch {
+        return signal?.aborted ? "interrupted" : "repository_register_unverified";
+    }
+}
 export function existingRepositoryAdapter(args, choose) {
     let chosen;
     const requested = (repositories, journal) => {
@@ -218,7 +385,7 @@ export function existingRepositoryAdapter(args, choose) {
         return {
             state: "done",
             evidence: {
-                repository: JSON.stringify(rows),
+                repository: JSON.stringify(rows.map(({ teamId, owner, name, repoId }) => ({ teamId, owner, name, repoId }))),
                 count: rows.length,
                 checkedAt: ctx.now().getTime(),
             },
@@ -234,6 +401,14 @@ export function existingRepositoryAdapter(args, choose) {
                 return waiting("repository_inventory_empty");
             if (!choose)
                 return waiting("repository_choice_required");
+            const teamId = list.repositories[0].teamId;
+            const offers = list.canRegister
+                ? await offeredRepositories(ctx, journal, teamId, list.repositories, signal)
+                : [];
+            const choices = [
+                ...list.repositories.map((row) => ({ ...row })),
+                ...offers.map((row) => ({ ...row })),
+            ];
             let remove = () => { };
             const answer = await new Promise((resolve, reject) => {
                 const stopped = () => resolve(null);
@@ -244,9 +419,8 @@ export function existingRepositoryAdapter(args, choose) {
                 signal?.addEventListener("abort", stopped, { once: true });
                 remove = () => signal?.removeEventListener("abort", stopped);
                 Promise.resolve()
-                    .then(() => signal?.aborted
-                    ? null
-                    : choose(list.repositories.map((row) => ({ ...row }))))
+                    // The hook gets copies: changing one can never change what is matched below.
+                    .then(() => signal?.aborted ? null : choose(choices.map((row) => ({ ...row }))))
                     .then(resolve, reject);
             }).finally(() => remove());
             if (!answer || signal?.aborted)
@@ -259,9 +433,26 @@ export function existingRepositoryAdapter(args, choose) {
             const names = answer.map((name) => name.toLowerCase());
             if (new Set(names).size !== names.length)
                 return waiting("repository_selection_unverified");
-            const rows = names.map((name) => list.repositories.find((row) => key(row) === name));
-            if (!rows.every((row) => !!row))
+            const picked = names.map((name) => choices.find((row) => key(row) === name));
+            if (!picked.every((row) => !!row))
                 return waiting("repository_selection_unverified");
+            // CTC-4742: a selected offer is registered to the team. Leaving a registered repository
+            // unselected never unregisters it; nothing here removes a repository.
+            for (const row of picked) {
+                if (row.registered !== false)
+                    continue;
+                const failed = await registerToTeam(ctx, journal, teamId, `${row.owner}/${row.name}`, signal);
+                if (failed)
+                    return waiting(failed);
+            }
+            const fresh = picked.some((row) => row.registered === false)
+                ? await readOnboardRepositoryInventory(ctx, journal, signal)
+                : list;
+            if ("reason" in fresh)
+                return waiting(fresh.reason);
+            const rows = names.map((name) => fresh.repositories.find((row) => key(row) === name));
+            if (!rows.every((row) => !!row))
+                return waiting("repository_registration_visibility_pending");
             chosen = rows;
             return check(ctx, journal, signal);
         },

package/dist/onboard-standalone-copy.js

@@ -1,5 +1,8 @@
 import { setupPartHeading, setupStepView, SETUP_NUMBERS, SETUP_PART_NUMBERS, SETUP_PART_OF, } from "./setup-onboard-copy.js";
 export const COMPUTER_CHECKS = ["machine", "cli", "skills", "legacy"];
+/** The runner row when no runner was chosen up front, naming where that choice came from, so the
+ *  plan says why no question comes (CTC-4739). */
+const runnerDeclined = (by) => `this computer will not take work, because ${by}`;
 const PLAN = [
     ["On this computer", "signin", "you approve once in your browser"],
     ["On this computer", "housekeeping", "schedule the daily update"],
@@ -22,7 +25,14 @@ const PLAN = [
  * part. `json` is the plain-text plan an agent reads beside `--json` (dry run, --json on stderr,
  * headless): the older groups and the numbers JSON `actions[].number` reports (CTC-4680).
  */
-export function standalonePlan(journal, scope, runnerSelected = false, numbering = "parts") {
+export function standalonePlan(journal, scope, 
+/** `true` for --runner, `false` for --no-runner, absent when setup will ask (CTC-4739). */
+runner, numbering = "parts", 
+/** Why `runner` is false: the flag on an interactive run, the headless input otherwise. */
+declinedBy = "--no-runner was passed") {
+    const runnerSelected = runner === true;
+    const RUNNER_DECLINED = runnerDeclined(declinedBy);
+    const declined = runner === false;
     const json = numbering === "json";
     const includes = (id) => !scope || scope.includes(id);
     const steps = new Map(journal.steps.map((step) => [step.id, step]));
@@ -53,7 +63,9 @@ export function standalonePlan(journal, scope, runnerSelected = false, numbering
             if (includes("runner"))
                 row("runner", runnerSelected
                     ? "start a Catalyst runner here with Docker"
-                    : "optional; this computer takes work only if you choose it");
+                    : declined
+                        ? RUNNER_DECLINED
+                        : "optional; this computer takes work only if you choose it");
             continue;
         }
         // The terminal gives repository values their own row; the plain-text plan keeps them folded
@@ -66,9 +78,13 @@ export function standalonePlan(journal, scope, runnerSelected = false, numbering
             continue;
         const reviewedDetail = id === "capacity" && includes("runner") && runnerSelected
             ? "start a Catalyst runner here with Docker"
-            : id === "capacity" && !includes("capacity")
-                ? "review the optional runner on this machine; start only if selected"
-                : detail;
+            : id === "capacity" && includes("runner") && declined
+                ? includes("capacity")
+                    ? `${detail}; ${RUNNER_DECLINED}`
+                    : RUNNER_DECLINED
+                : id === "capacity" && !includes("capacity")
+                    ? "review the optional runner on this machine; start only if selected"
+                    : detail;
         rows.push({
             group: json ? group : setupPartHeading(SETUP_PART_OF[id], false),
             part: SETUP_PART_OF[id],

package/dist/onboard-ui.js

@@ -8,6 +8,12 @@ import { FIRST_TICKET_SAMPLE, FIRST_TICKET_SKIP, } from "./onboard-first-ticket.
 import { ONBOARD_STEPS, ONBOARD_TITLES, stepSatisfied, onboardHeaderIdentity, onboardIdentityLines, onboardNextActions, onboardReadyForWork, onboardStepAction, } from "./onboard.js";
 import { onboardStepDetail, onboardReasonText } from "./onboard-next.js";
 import { CONNECT_PAGE_PATH } from "./onboard-checklist.js";
+/** What the runner question's answers mean, said before it is asked (CTC-4739). */
+const RUNNER_EXPLAINED = [
+    "Yes makes this computer pick up tickets and run agents in Docker with your workspace's AI accounts. It uses this computer's CPU and memory while it is on, and turning it off or letting it sleep pauses that work.",
+    "No is right for a personal workstation: your workspace's runner hosts do the work.",
+    "Pass --no-runner or --runner to skip this question next time.",
+];
 export function shouldUseOnboardUi(args, stdoutTty) {
     return (stdoutTty &&
         !args.json &&
@@ -543,16 +549,35 @@ export function createClackOnboardUi(prompts, streams, deps = {}) {
         ...(prompts.multiselect
             ? {
                 async chooseRepositories(repositories) {
+                    const projectsPage = () => {
+                        try {
+                            const base = deps.baseUrl?.();
+                            return base ? ` (${new URL("/settings/projects", base).href})` : "";
+                        }
+                        catch {
+                            return "";
+                        }
+                    };
                     stop();
                     if (!repositories.length || abort.signal.aborted)
                         return null;
+                    // CTC-4742: what the team already uses starts selected. Unselecting never removes one.
+                    const selected = repositories
+                        .filter((row) => row.registered === true)
+                        .map((row) => `${row.owner}/${row.name}`);
                     const answer = await multiselect({
                         ...options,
-                        message: "Which repositories should use this Linear team?",
+                        message: selected.length
+                            ? `Which repositories should use this Linear team? Leaving a repository unselected does not remove it from this team; an admin removes one in Settings → Projects${projectsPage()}.`
+                            : "Which repositories should use this Linear team?",
                         required: true,
+                        ...(selected.length ? { initialValues: selected } : {}),
                         options: repositories.map((row) => ({
                             value: `${row.owner}/${row.name}`,
                             label: `${row.owner}/${row.name}`,
+                            ...(row.registered === false
+                                ? { hint: "not used by this team yet; selecting it adds it" }
+                                : {}),
                         })),
                     });
                     if (prompts.isCancel(answer)) {
@@ -636,9 +661,21 @@ export function createClackOnboardUi(prompts, streams, deps = {}) {
             return typeof answer === "string" ? answer : null;
         },
         async chooseRunner() {
-            stop();
             if (abort.signal.aborted)
                 return null;
+            // CTC-4739: say what each answer does to this computer before asking, and how to skip it.
+            stop();
+            if (renderer) {
+                renderer.begin(number("runner"), title("runner"), "", "ask");
+                for (const line of RUNNER_EXPLAINED)
+                    renderer.detail(line);
+                active = true;
+                questionOpen = true;
+            }
+            else
+                prompts.log.message(RUNNER_EXPLAINED.join("\n"), {
+                    output: streams.output,
+                });
             const answer = await select({
                 ...options,
                 message: "Run Catalyst's work on this machine?",

package/dist/onboard.js

@@ -600,7 +600,7 @@ function printPlan(ctx, journal, identity, options) {
             ctx.stdout(line);
     let group;
     // Beside --json and headless output: the numbers JSON actions carry (CTC-4680).
-    for (const row of standalonePlan(journal, options?.scope, options?.runner, "json")) {
+    for (const row of standalonePlan(journal, options?.scope, options?.runner, "json", options?.runnerDeclinedBy)) {
         if (row.group !== group) {
             ctx.stdout("");
             ctx.stdout(row.group);
@@ -797,7 +797,15 @@ export async function cmdOnboard(args, ctx, deps = {}, cliVersion = "0.13.1") {
         for (const id of ONBOARD_STEPS)
             reviewedScope.add(id);
     const planOptions = (journal) => ({
-        runner: args.flags.runner === true,
+        runner: args.flags.runner === true
+            ? true
+            : args.flags["no-runner"] === true
+                ? false
+                : undefined,
+        // Headless turns --runner no and CATALYST_ONBOARD_RUNNER=no into --no-runner; say which.
+        runnerDeclinedBy: args.flags.headless === true
+            ? "the headless runner input is no"
+            : "--no-runner was passed",
         localSync: args.flags["local-sync"] === true || journal.localSync === true,
         scope: ONBOARD_STEPS.filter((id) => reviewedScope.has(id)),
     });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@catalyst-cloud/cli",
-  "version": "0.15.4",
+  "version": "0.15.5",
   "description": "Set up Catalyst Cloud, check your tickets and manage your account from the command line.",
   "license": "MIT",
   "type": "module",

package/skills/catalyst-github/SKILL.md

@@ -4,7 +4,7 @@ description: >-
   Catalyst's GitHub: show a ticket's pull request with its checks, reviews and review threads, say whether it is mergeable under this repository's policy, and explain what a PR accumulates as the ticket moves (the branch, the draft, the rewrite, the force-pushes, the labels, the queue). Use when someone asks "show me the PR", "what are the checks saying", "why hasn't it merged", "what does the queue need", "what does that label mean", or wants the branch and merge conventions Catalyst follows.
 allowed-tools: Bash(catalyst:*) Bash(npx -p @catalyst-cloud/cli catalyst:*)
 ---
-<!-- vendored-from: @catalyst-cloud/catalyst-skills@0.15.4 — written in this repository for customer accounts -->
+<!-- vendored-from: @catalyst-cloud/catalyst-skills@0.15.5 — written in this repository for customer accounts -->
 
 # Catalyst's GitHub
 

package/skills/catalyst-linear/SKILL.md

@@ -4,7 +4,7 @@ description: >-
   Catalyst's view of Linear on the customer's own cloud account. Reads a ticket with its comments, relations, labels, linked pull requests and agent sessions inline, from the cloud API by default, with local replica reads available as an explicit opt-in, always naming the source; searches tickets, PRs, projects and initiatives; writes comments, card moves, labels and new tickets through the account's agent proxy as the app actor, with every route, stage id, label id and marker read from the account's contract. Knows what a ticket accumulates as Catalyst works it (phase-outcome comments, the document per phase, the agent session, the labels, the single blocks relation, the bookkeeping marker, the eyes acknowledgement). Use when a person says "show me the ticket", "what did Catalyst write on it", "comment on it", "move it", "label it" or "file a ticket". Not for raising a decision for a human (what-needs-me) and not for pull requests (catalyst-github).
 allowed-tools: Bash(catalyst:*) Bash(npx -p @catalyst-cloud/cli catalyst:*)
 ---
-<!-- vendored-from: @catalyst-cloud/catalyst-skills@0.15.4 — written in this repository for customer accounts -->
+<!-- vendored-from: @catalyst-cloud/catalyst-skills@0.15.5 — written in this repository for customer accounts -->
 
 # Catalyst Linear
 

package/skills/catalyst-onboard/SKILL.md

@@ -4,7 +4,7 @@ description: >-
   Set up Catalyst Cloud and say whether setup is working. Walks a person from nothing to their first ticket running, one step at a time: the coding account, the project, the integrations and connected accounts, each repository's settings file, then one real ticket moving. Also logs this machine in, reads the readiness verdict with who can fix each failure, and checks the optional local replica. Use when someone says "set me up", "onboard me", "I just signed up", "get me started", "what do I do first", "log me in", "which account is this machine on", "am I set up", "what is missing", "why does nothing happen" or "is the replica running", when a login expired, or when a skill script exits 2 saying this machine is not connected. Does every step a key can do through the catalyst CLI, hands over the exact page for the steps only a browser can do, and never claims a step it did not watch succeed.
 allowed-tools: Bash(catalyst:*) Bash(npx -p @catalyst-cloud/cli catalyst:*)
 ---
-<!-- vendored-from: @catalyst-cloud/catalyst-skills@0.15.4 — written in this repository for customer accounts -->
+<!-- vendored-from: @catalyst-cloud/catalyst-skills@0.15.5 — written in this repository for customer accounts -->
 
 # Onboard me
 

package/skills/run-this-project/SKILL.md

@@ -4,7 +4,7 @@ description: >-
   Own one Catalyst Cloud project end to end until it closes. Use when the person says "run this project for me", "own this until it ships", "keep this moving", or hands you a project id or a set of tickets to drive. Subscribes to the account's event stream for the scope through the catalyst CLI, reacts to each change in the same turn, makes tickets ready and moves them to dispatch, parks what should stop, chases stalls, escalates inward, and keeps one status summary current. Writes to Linear as the app actor; never polls.
 allowed-tools: Bash(catalyst:*) Bash(npx -p @catalyst-cloud/cli catalyst:*)
 ---
-<!-- vendored-from: @catalyst-cloud/catalyst-skills@0.15.4 — written in this repository for customer accounts -->
+<!-- vendored-from: @catalyst-cloud/catalyst-skills@0.15.5 — written in this repository for customer accounts -->
 
 # Run this project
 

package/skills/unstick/SKILL.md

@@ -4,7 +4,7 @@ description: >-
   Get a stuck Catalyst Cloud ticket moving again. Use when the person asks "why is this parked and can you release it?", "unpark this", "get things flowing again", "the outage is over, retry what failed", or hands you a ticket that is not moving. Reads why nothing runs and what holds the ticket through the catalyst CLI, decides whether the recorded cause is fixed, previews the release, releases every governor holding the ticket the right way (or one failure class across a team), and raises an ask only for what a person has to do. Never releases a cause it cannot show changed without saying so.
 allowed-tools: Bash(catalyst:*) Bash(npx -p @catalyst-cloud/cli catalyst:*)
 ---
-<!-- vendored-from: @catalyst-cloud/catalyst-skills@0.15.4 — written in this repository for customer accounts -->
+<!-- vendored-from: @catalyst-cloud/catalyst-skills@0.15.5 — written in this repository for customer accounts -->
 
 # Unstick
 

package/skills/what-needs-me/SKILL.md

@@ -4,7 +4,7 @@ description: >-
   The human's decision inbox on Catalyst Cloud, and the one way an agent raises a decision on their behalf. Use when the person asks "what needs me?", "what am I blocking?", or when active work is gated on a choice only they can make. Lists open asks ranked by how much open work each one holds, files an ask through the cloud's ask route with the account's own template, and records the answer so the held work releases. Never answers as the human, never duplicates an open ask.
 allowed-tools: Bash(catalyst:*) Bash(npx -p @catalyst-cloud/cli catalyst:*)
 ---
-<!-- vendored-from: @catalyst-cloud/catalyst-skills@0.15.4 — written in this repository for customer accounts -->
+<!-- vendored-from: @catalyst-cloud/catalyst-skills@0.15.5 — written in this repository for customer accounts -->
 
 # What needs me
 

package/skills/what-this-repo-needs/SKILL.md

@@ -4,7 +4,7 @@ description: >-
   What environment variable names does this repository need, and where does each one come from? Scans the repository offline (no login, no network) and lists the names in three groups (build/test, deploy-only, bindings), each with where it was found, what uses it, and where a local value would come from. Never reads a value or prints one. Also checks the environment variable table in `.catalyst/catalyst.toml` offline. Use when someone asks "what does catalyst.env.json mean", "what env vars does this repo need", "why does the container need this", or before reviewing or writing the declaration.
 allowed-tools: Bash(catalyst:*) Bash(npx -p @catalyst-cloud/cli catalyst:*)
 ---
-<!-- vendored-from: @catalyst-cloud/catalyst-skills@0.15.4 — written in this repository for customer accounts -->
+<!-- vendored-from: @catalyst-cloud/catalyst-skills@0.15.5 — written in this repository for customer accounts -->
 
 # What this repository needs
 

package/skills/whats-happening/SKILL.md

@@ -4,7 +4,7 @@ description: >-
   Use for "what's happening?", "where are we?", "why is that stuck?", "what closed?", "what's next?", "how does this work?", "why did it do that?", "how does it prioritise?" and "what does this setting do, where is it set?" in Catalyst Cloud, or asks for something to be done rather than known. Reads the contract via catalyst CLI. Read-only: route work/decisions, never answer as the human.
 allowed-tools: Bash(catalyst:*) Bash(npx -p @catalyst-cloud/cli catalyst:*)
 ---
-<!-- vendored-from: @catalyst-cloud/catalyst-skills@0.15.4 — written in this repository for customer accounts -->
+<!-- vendored-from: @catalyst-cloud/catalyst-skills@0.15.5 — written in this repository for customer accounts -->
 
 # What's happening