@drisp/cli 0.6.11 → 0.7.1

package/dist/{WorkflowInstallWizard-NZFBSBLY.js → WorkflowInstallWizard-BVWAIVBH.js}

@@ -8,7 +8,7 @@ import {
   installWorkflowPlugins,
   resolveWorkflow,
   writeGlobalConfig
-} from "./chunk-YUVMVYUF.js";
+} from "./chunk-TRNUPQQJ.js";
 import "./chunk-G3PMV62Z.js";
 
 // src/setup/steps/WorkflowInstallWizard.tsx
@@ -93,4 +93,4 @@ function WorkflowInstallWizard({ source, onDone }) {
 export {
   WorkflowInstallWizard as default
 };
-//# sourceMappingURL=WorkflowInstallWizard-NZFBSBLY.js.map
+//# sourceMappingURL=WorkflowInstallWizard-BVWAIVBH.js.map

package/dist/{chunk-D7QQIZDI.js → chunk-CPU4RLSW.js}

@@ -55,7 +55,7 @@ import {
   verifyRendered,
   wakesFreshAfterHandover,
   workflowRegistryDir
-} from "./chunk-YUVMVYUF.js";
+} from "./chunk-TRNUPQQJ.js";
 import {
   __commonJS,
   __toESM
@@ -14868,7 +14868,7 @@ async function restoreCheckpoint(store, input) {
 
 // ../../modules/runtime/src/software-version.ts
 import "fs";
-var runnerSoftwareVersion = true ? "0.6.11" : JSON.parse(readFileSync2(new URL("../../../apps/cli/package.json", import.meta.url), "utf8")).version;
+var runnerSoftwareVersion = true ? "0.7.1" : JSON.parse(readFileSync2(new URL("../../../apps/cli/package.json", import.meta.url), "utf8")).version;
 
 // ../../modules/runtime/src/connection.ts
 var RunnerDisconnectedError = class extends Error {
@@ -20236,9 +20236,9 @@ var issueEntrySchema = external_exports.strictObject({
   workflowName: external_exports.string().max(128)
 });
 var buildPlanSchema = external_exports.strictObject({
-  version: external_exports.literal(1),
+  version: external_exports.literal(2),
   orchestratorRunId: external_exports.string().min(1),
-  designKey: external_exports.string().regex(/^design:.+$/),
+  planKey: external_exports.string().regex(/^plan:.+$/),
   projectId: external_exports.string().min(1),
   folder: external_exports.string().min(1),
   runnerId: external_exports.string().min(1),
@@ -20594,9 +20594,9 @@ function planBuild(context) {
     status: "planned",
     workflows,
     plan: {
-      version: 1,
+      version: 2,
       orchestratorRunId: context.orchestratorRunId,
-      designKey: `design:${input.project.id}`,
+      planKey: `plan:${input.project.id}`,
       projectId: input.project.id,
       folder: context.folder,
       runnerId: context.runnerId,
@@ -21852,6 +21852,7 @@ export {
   ExecutionStore,
   hubHttpUrl,
   runnerSoftwareVersion,
+  fillSchema,
   planInputSchema,
   buildPlanSchema,
   git2 as git,
@@ -21886,4 +21887,4 @@ export {
   runMachineRunners,
   writeIdentityOnce
 };
-//# sourceMappingURL=chunk-D7QQIZDI.js.map
+//# sourceMappingURL=chunk-CPU4RLSW.js.map

package/dist/{chunk-PGMV5I7Y.js → chunk-LCT645C4.js}

@@ -1,6 +1,6 @@
 import {
   runMachineRunners
-} from "./chunk-D7QQIZDI.js";
+} from "./chunk-CPU4RLSW.js";
 
 // src/app/entry/runnerDaemon.ts
 if (process.argv.includes("--help")) {
@@ -13,4 +13,4 @@ if (process.argv.includes("--help")) {
     process.exitCode = 1;
   });
 }
-//# sourceMappingURL=chunk-PGMV5I7Y.js.map
+//# sourceMappingURL=chunk-LCT645C4.js.map

package/dist/{chunk-YUVMVYUF.js → chunk-TRNUPQQJ.js}

@@ -21281,7 +21281,7 @@ var GATES = [
 ];
 
 // src/core/workflows/builtins/orchestrator/workflow.md
-var workflow_default = '# Orchestrator: plan and run a Build\n\nYou plan and run a Drisp Build of one Design: the open issues of one Linear project. The Run\'s prompt names the\nLinear project, the Design key and the project folder, which is your working directory. You never write code here:\neach issue is built by its own child Run, which `drisp build tick` starts.\n\nThe Runner sets these for you:\n\n- `DRISP_RUN_ARTIFACTS`: this Run\'s artifact directory. Files you write there are shown to the member.\n- `DRISP_RUN_ID`, `DRISP_RUNNER_ID`, `DRISP_RUN_TOKEN`, `DRISP_HUB_URL`: this Run, its Runner and its right to start\n  child Runs; `drisp build` reads them itself.\n\n## 1. Read Linear (first Turn)\n\nWith the `linear` MCP server, read the project and every issue in it, then write\n`$DRISP_RUN_ARTIFACTS/input/plan-input.json` (create the `input` directory) in exactly this shape. Every issue carries\nevery field, empty when it has none. `readAt` is the output of\n`node -e "console.log(new Date().toISOString())"` run just before you read Linear; never write a time yourself:\n\n```json\n{\n	"version": 1,\n	"readAt": "<the command\'s output, e.g. 2026-10-11T09:30:00.000Z>",\n	"project": {\n		"id": "<the project\'s `uuid`, not its `id`>",\n		"name": "<the project\'s `name`>",\n		"slugId": "<the last `-`-separated part of the project\'s `url`>"\n	},\n	"issues": [\n		{\n			"id": "<the issue\'s `uuid`, not its `id`>",\n			"identifier": "<the issue\'s `id`, e.g. DRI-12>",\n			"title": "<the issue\'s `title`>",\n			"url": "<the issue\'s `url`>",\n			"branchName": "<the issue\'s `gitBranchName`, or null>",\n			"state": {\n				"type": "<the issue\'s `statusType`: backlog|unstarted|started|completed|canceled|triage>",\n				"name": "<the issue\'s `status`>"\n			},\n			"labels": ["<each of the issue\'s `labels`>"],\n			"parentId": "<the parent issue\'s `uuid`, or null>",\n			"blockedBy": ["<the `uuid` of each issue in `relations.blockedBy`>"],\n			"prioritySortOrder": 0\n		}\n	]\n}\n```\n\nLinear\'s MCP names fields differently from this file, and the difference matters: the app finds each issue\'s row by\nits UUID, so a plan that carries identifiers shows no Build state on any row.\n\n- The MCP\'s `id` is the readable identifier (`DRI-12`, or `P-DRI-7` for a project); the UUID is in `uuid`. Every\n  `id`, `parentId` and `blockedBy` value in `plan-input.json` is a UUID (`7f7b03f7-accf-46b2-98fb-abadfed76594`).\n- An issue\'s `parentId` and `relations.blockedBy` from the MCP name issues by identifier. Look each one up: use the\n  `uuid` of the project\'s issue with that identifier, or `get_issue` it when it is outside the project.\n- Read relations with `get_issue` and `includeRelations: true`; read the project\'s issues with `list_issues` and\n  `fields` including `uuid`.\n- The project\'s `url` ends in its `slugId` (`\u2026/project/build-sandbox-b7640301cd64` \u2192 `b7640301cd64`).\n\n`drisp build plan` rejects a plan with an identifier where a UUID belongs and names the field to fix.\n\nInclude every issue of the project, done and canceled ones too: the plan decides what to skip. Then run:\n\n```sh\ndrisp build plan --input "$DRISP_RUN_ARTIFACTS/input/plan-input.json"\n```\n\nIt prints one JSON object. Act on its `status`.\n\n## 2. `needs_fills`\n\n`fills` lists issues that need a `fill.json` (`identifier`, `title`, `url`, `path`) and `templateVersion` is the value\neach fill must carry. For each listed issue: read it through `linear` (description, acceptance criteria, comments) and\nthe repo\'s ADRs and CONTEXT files it touches, then write its `fill.json` at `path`:\n\n```json\n{\n	"version": 1,\n	"templateVersion": "<templateVersion, copied exactly>",\n	"areas": ["macos|web|cli|hub|protocol|docs", "\u2026"],\n	"qa": "none|web|macos",\n	"sizeClass": "S|M|L",\n	"instructions": "<what the child needs beyond the issue>",\n	"ownWork": true\n}\n```\n\n- `areas`: the parts of the repo the change touches, each once.\n- `qa`: `web` when the change shows in a web page, `macos` when it shows in the macOS app, else `none`.\n- `sizeClass`: `S` for a change of a file or two, `M` for a feature across a few modules, `L` for a large or risky\n  change.\n- `instructions` (at most 6000 characters): start with one short paragraph saying what to build, then restate the\n  acceptance criteria, name the ADRs it touches and the parts of the codebase involved. Plain prose and `-` lists\n  only: no headings, code fences or HTML comments (`drisp build plan` rejects them).\n- `ownWork`: `false` only for an issue with sub-issues whose own description asks for nothing beyond them, such as\n  a PRD above its slices; the plan then skips it and waits for its sub-issues instead. Otherwise `true`.\n\nThen run `drisp build plan` again with the same `--input` path.\n\n## 3. `planned` or `failed`\n\nOn `planned` the Run plan is written and shown to the member, who decides whether to start it: end the Turn with\n`<!-- AWAITING_APPROVAL -->` as the Journal\'s last line. On `failed` the reason is shown instead: end with\n`<!-- WORKFLOW_COMPLETE -->`.\n\n## 4. Every later wake: tick\n\nYou are woken when the member answers the approval question and whenever one of your child Runs closes or parks.\nEach time: read Linear again into `$DRISP_RUN_ARTIFACTS/input/plan-input.json` as in step 1 (with a new `readAt`),\nthen run:\n\n```sh\ndrisp build tick --input "$DRISP_RUN_ARTIFACTS/input/plan-input.json"\n```\n\nIt prints one JSON object. Act on its `action`, and repeat until an action ends the Turn:\n\n- `refresh_input`: read Linear into the input again (a newer `readAt`) and tick again.\n- `repair`: for each of `issues`, read it in Linear first and skip an issue Linear now shows Done or Canceled (its\n  child got there first); otherwise move it to Done and post its `comment` verbatim through `linear`. Then read\n  Linear into the input again and tick again.\n- `rebase`: for each of `items`, in its `worktree`: `git rebase origin/main`, resolve the conflicts, then\n  `git push --force-with-lease origin <branch>` (the item\'s `branch`) if the branch is on the remote. Never push any\n  other branch. If a rebase cannot be resolved, `git rebase --abort`.\n  Then read Linear into the input again and tick again, adding `--rebase-failed <identifier>` for each that failed.\n- `wait`: end the Turn with `<!-- WAITING_ON_CHILDREN -->` as the Journal\'s last line.\n- `park`: end the Turn with `<!-- NEEDS_HUMAN: <message> -->` as the Journal\'s last line, copying `message`\n  verbatim.\n- `complete`: end the Turn with `<!-- WORKFLOW_COMPLETE -->` as the Journal\'s last line.\n\n## Rules\n\n- Never start, cancel or edit Runs, Workflows, worktrees or branches except as an action says; `drisp build` does\n  what is needed.\n- Never write to Linear except a `repair`; never open a pull request.\n- Write only `plan-input.json` and the `fill.json` files `drisp build plan` asks for. Never write `answer.json`.\n';
+var workflow_default = '# Orchestrator: plan and run a Build\n\nYou plan and run a Drisp Build of one Plan: the open issues of one Linear project. The Run\'s prompt names the\nLinear project, the Plan key and the project folder, which is your working directory. You never write code here:\neach issue is built by its own child Run, which `drisp build tick` starts.\n\nThe Runner sets these for you:\n\n- `DRISP_RUN_ARTIFACTS`: this Run\'s artifact directory. Files you write there are shown to the member.\n- `DRISP_RUN_ID`, `DRISP_RUNNER_ID`, `DRISP_RUN_TOKEN`, `DRISP_HUB_URL`: this Run, its Runner and its right to start\n  child Runs; `drisp build` reads them itself.\n\n## 1. Read Linear (first Turn)\n\nWith the `linear` MCP server, read the project and every issue in it, then write\n`$DRISP_RUN_ARTIFACTS/input/plan-input.json` (create the `input` directory) in exactly this shape. Every issue carries\nevery field, empty when it has none. `readAt` is the output of\n`node -e "console.log(new Date().toISOString())"` run just before you read Linear; never write a time yourself:\n\n```json\n{\n	"version": 1,\n	"readAt": "<the command\'s output, e.g. 2026-10-11T09:30:00.000Z>",\n	"project": {\n		"id": "<the project\'s `uuid`, not its `id`>",\n		"name": "<the project\'s `name`>",\n		"slugId": "<the last `-`-separated part of the project\'s `url`>"\n	},\n	"issues": [\n		{\n			"id": "<the issue\'s `uuid`, not its `id`>",\n			"identifier": "<the issue\'s `id`, e.g. DRI-12>",\n			"title": "<the issue\'s `title`>",\n			"url": "<the issue\'s `url`>",\n			"branchName": "<the issue\'s `gitBranchName`, or null>",\n			"state": {\n				"type": "<the issue\'s `statusType`: backlog|unstarted|started|completed|canceled|triage>",\n				"name": "<the issue\'s `status`>"\n			},\n			"labels": ["<each of the issue\'s `labels`>"],\n			"parentId": "<the parent issue\'s `uuid`, or null>",\n			"blockedBy": ["<the `uuid` of each issue in `relations.blockedBy`>"],\n			"prioritySortOrder": 0\n		}\n	]\n}\n```\n\nLinear\'s MCP names fields differently from this file, and the difference matters: the app finds each issue\'s row by\nits UUID, so a plan that carries identifiers shows no Build state on any row.\n\n- The MCP\'s `id` is the readable identifier (`DRI-12`, or `P-DRI-7` for a project); the UUID is in `uuid`. Every\n  `id`, `parentId` and `blockedBy` value in `plan-input.json` is a UUID (`7f7b03f7-accf-46b2-98fb-abadfed76594`).\n- An issue\'s `parentId` and `relations.blockedBy` from the MCP name issues by identifier. Look each one up: use the\n  `uuid` of the project\'s issue with that identifier, or `get_issue` it when it is outside the project.\n- Read relations with `get_issue` and `includeRelations: true`; read the project\'s issues with `list_issues` and\n  `fields` including `uuid`.\n- The project\'s `url` ends in its `slugId` (`\u2026/project/build-sandbox-b7640301cd64` \u2192 `b7640301cd64`).\n\n`drisp build plan` rejects a plan with an identifier where a UUID belongs and names the field to fix.\n\nInclude every issue of the project, done and canceled ones too: the plan decides what to skip. Then run:\n\n```sh\ndrisp build plan --input "$DRISP_RUN_ARTIFACTS/input/plan-input.json"\n```\n\nIt prints one JSON object. Act on its `status`.\n\n## 2. `needs_fills`\n\n`fills` lists issues that need a `fill.json` (`identifier`, `title`, `url`, `path`) and `templateVersion` is the value\neach fill must carry. For each listed issue: read it through `linear` (description, acceptance criteria, comments) and\nthe repo\'s ADRs and CONTEXT files it touches, then write its `fill.json` at `path`:\n\n```json\n{\n	"version": 1,\n	"templateVersion": "<templateVersion, copied exactly>",\n	"areas": ["macos|web|cli|hub|protocol|docs", "\u2026"],\n	"qa": "none|web|macos",\n	"sizeClass": "S|M|L",\n	"instructions": "<what the child needs beyond the issue>",\n	"ownWork": true\n}\n```\n\n- `areas`: the parts of the repo the change touches, each once.\n- `qa`: `web` when the change shows in a web page, `macos` when it shows in the macOS app, else `none`.\n- `sizeClass`: `S` for a change of a file or two, `M` for a feature across a few modules, `L` for a large or risky\n  change.\n- `instructions` (at most 6000 characters): start with one short paragraph saying what to build, then restate the\n  acceptance criteria, name the ADRs it touches and the parts of the codebase involved. Plain prose and `-` lists\n  only: no headings, code fences or HTML comments (`drisp build plan` rejects them).\n- `ownWork`: `false` only for an issue with sub-issues whose own description asks for nothing beyond them, such as\n  a PRD above its slices; the plan then skips it and waits for its sub-issues instead. Otherwise `true`.\n\nThen run `drisp build plan` again with the same `--input` path.\n\n## 3. `planned` or `failed`\n\nOn `planned` the Build plan is written and shown to the member, who decides whether to start it: end the Turn with\n`<!-- AWAITING_APPROVAL -->` as the Journal\'s last line. On `failed` the reason is shown instead: end with\n`<!-- WORKFLOW_COMPLETE -->`.\n\n## 4. Every later wake: tick\n\nYou are woken when the member answers the approval question and whenever one of your child Runs closes or parks.\nEach time: read Linear again into `$DRISP_RUN_ARTIFACTS/input/plan-input.json` as in step 1 (with a new `readAt`),\nthen run:\n\n```sh\ndrisp build tick --input "$DRISP_RUN_ARTIFACTS/input/plan-input.json"\n```\n\nIt prints one JSON object. Act on its `action`, and repeat until an action ends the Turn:\n\n- `refresh_input`: read Linear into the input again (a newer `readAt`) and tick again.\n- `repair`: for each of `issues`, read it in Linear first and skip an issue Linear now shows Done or Canceled (its\n  child got there first); otherwise move it to Done and post its `comment` verbatim through `linear`. Then read\n  Linear into the input again and tick again.\n- `rebase`: for each of `items`, in its `worktree`: `git rebase origin/main`, resolve the conflicts, then\n  `git push --force-with-lease origin <branch>` (the item\'s `branch`) if the branch is on the remote. Never push any\n  other branch. If a rebase cannot be resolved, `git rebase --abort`.\n  Then read Linear into the input again and tick again, adding `--rebase-failed <identifier>` for each that failed.\n- `wait`: end the Turn with `<!-- WAITING_ON_CHILDREN -->` as the Journal\'s last line.\n- `park`: end the Turn with `<!-- NEEDS_HUMAN: <message> -->` as the Journal\'s last line, copying `message`\n  verbatim.\n- `complete`: end the Turn with `<!-- WORKFLOW_COMPLETE -->` as the Journal\'s last line.\n\n## Rules\n\n- Never start, cancel or edit Runs, Workflows, worktrees or branches except as an action says; `drisp build` does\n  what is needed.\n- Never write to Linear except a `repair`; never open a pull request.\n- Write only `plan-input.json` and the `fill.json` files `drisp build plan` asks for. Never write `answer.json`.\n';
 
 // src/core/workflows/builtins/orchestrator/index.ts
 var ORCHESTRATOR_WORKFLOW_NAME = "orchestrator";
@@ -21300,7 +21300,7 @@ var ORCHESTRATOR_INSTRUCTIONS = workflow_default;
 function orchestratorWorkflow(workflowFile) {
   return {
     name: ORCHESTRATOR_WORKFLOW_NAME,
-    description: "Plans a Design's open Linear issues into a Run plan, one Generated Workflow per issue, then builds them as child Runs in dependency order once the member starts it",
+    description: "Plans a Plan's open Linear issues into a Build plan, one Generated Workflow per issue, then builds them as child Runs in dependency order once the member starts it",
     promptTemplate: "{input}",
     plugins: [],
     model: "sonnet",
@@ -21432,7 +21432,7 @@ Commands that only read (\`ls\`, \`cat\`, \`grep\`) need no grant; anything else
 Write and Edit tools, never through shell redirection or a heredoc, and keep \`\${\u2026}\` and \`$(\u2026)\` expansions out of
 shell commands.
 
-A refused tool call is not a stage that cannot pass: never answer one with a stage's "cannot pass" line. Do the work
+A refused tool call is not a gate that cannot pass: never answer one with a gate's "cannot pass" line. Do the work
 another way within these limits; when there is none, end the Turn with
 \`<!-- NEEDS_HUMAN: A tool this Build does not allow was refused. Open the Thread to see which one. -->\` as the
 Journal's last line.
@@ -21441,27 +21441,28 @@ Journal's last line.
 
 {instructions}
 
-## Stages
+## Gates
 
-Work through the stages in this order. Record each stage in the Journal before moving on. Never skip a stage and never
-reorder them. When a stage's gate cannot pass, end the Turn with its "cannot pass" line exactly as written here,
-inside \`<!-- NEEDS_HUMAN: \u2026 -->\`, as the Journal's last line; never write your own reason.
+Work through the gates in this order. Start each gate by running the command its "Start" line gives, which reports the
+gate to the Build page, then record the gate in the Journal before moving on. Never skip a gate and never reorder
+them. When a gate cannot pass, end the Turn with its "cannot pass" line exactly as written here, inside
+\`<!-- NEEDS_HUMAN: \u2026 -->\`, as the Journal's last line; never write your own reason.
 
-{stages}
+{gates}
 
 ## Merge gate
 
-After the last rebase, in this Run: Checks pass; both reviewers pass; QA passes when it is a stage; no remote check
+After the last rebase, in this Run: Checks pass; both reviewers pass; QA passes when it is a gate; no remote check
 failed after its job started.
 
 Before merging: \`git fetch origin\`; if \`origin/main\` is not an ancestor of HEAD, \`git rebase origin/main\`, run
-Checks again and \`git push --force-with-lease\` to this branch. Repeat at most 3 times; then the Merge stage cannot
+Checks again and \`git push --force-with-lease\` to this branch. Repeat at most 3 times; then the Merge gate cannot
 pass.
 
 Then run \`drisp build checks\` in this worktree. It reads the GitHub runs on HEAD (\`gh run view <id> --json jobs\` for
 each failed one) and prints \`{"ok", "failed", "ignored", "pending"}\`. A failed run whose failed jobs ran zero steps
 is in \`ignored\`: it does not block the merge and its name goes in the evidence comment. While \`pending\` is not
-empty, wait a minute and run it again. When \`failed\` is not empty, fix the change; if it still fails, the Merge stage
+empty, wait a minute and run it again. When \`failed\` is not empty, fix the change; if it still fails, the Merge gate
 cannot pass. Never judge a check by its timing.
 
 Merge with \`gh pr merge --squash --delete-branch --match-head-commit <sha>\`, where \`<sha>\` is HEAD after the last
@@ -21486,10 +21487,12 @@ Ignored checks (no steps ran): <names> | none
 Your Linear writes are exactly: In Progress in Explore, \`PR: <url>\` in Pull request, the evidence comment and Done in
 Evidence. Never create issues and never edit an issue's title or description.
 
-When every stage has passed, end with \`<!-- WORKFLOW_COMPLETE -->\` as the Journal's last line.
+When every gate has passed, end with \`<!-- WORKFLOW_COMPLETE -->\` as the Journal's last line.
 `;
 var STAGE_TEMPLATE = `### {n}. {title}
 
+Start: run \`{stepCommand}\`.
+
 Passes when: {passesWhen}.`;
 var CANNOT_PASS_TEMPLATE = `
 
@@ -21567,6 +21570,7 @@ var RENDERER_RULES = {
     edit: ["Edit(./**)"],
     shell: [
       "drisp build checks",
+      "drisp build step",
       "gh pr checks",
       "gh pr create",
       "gh pr list",
@@ -21697,6 +21701,7 @@ function renderStages(fill, checks, install) {
     const stage = fillSlots(STAGE_TEMPLATE, {
       n: String(index + 1),
       title: gate.title,
+      stepCommand: `drisp build step ${index + 1} --qa ${fill.qa}`,
       passesWhen
     });
     return stage + (gate.cannotPass ? fillSlots(CANNOT_PASS_TEMPLATE, { cannotPass: gate.cannotPass }) : NO_GATE_TEXT_TEMPLATE);
@@ -21729,7 +21734,7 @@ function render(fill, workflowName, layout) {
   const workflowMd = fillSlots(WORKFLOW_MD_TEMPLATE, {
     identifier: parsed.identifier,
     instructions: fill.instructions.trim(),
-    stages: renderStages(fill, checks, installCommand(fill, layout)),
+    gates: renderStages(fill, checks, installCommand(fill, layout)),
     checksEvidence: checks.map((command) => `${command} \u2713`).join(" \xB7 "),
     shellCommands: checksText([...RENDERER_RULES.permissions.shell])
   });
@@ -24242,4 +24247,4 @@ export {
   compileWorkflowPlan,
   collectMcpServersWithOptions
 };
-//# sourceMappingURL=chunk-YUVMVYUF.js.map
+//# sourceMappingURL=chunk-TRNUPQQJ.js.map

package/dist/cli.js

@@ -42,6 +42,7 @@ import {
   extractFriendlyServerName,
   extractPermissionSnapshot,
   fallbackBranch,
+  fillSchema,
   finalizePlan,
   fit,
   fitAnsi,
@@ -137,7 +138,7 @@ import {
   visualPositionToOffset,
   wrapText,
   writeIdentityOnce
-} from "./chunk-D7QQIZDI.js";
+} from "./chunk-CPU4RLSW.js";
 import {
   generateId as generateId2
 } from "./chunk-PQIB66SG.js";
@@ -167,6 +168,7 @@ import {
   deserializeRunMemory,
   external_exports,
   findMarketplaceRepoDir,
+  gateTitles,
   gatherMarketplaceWorkflowSources,
   hasProjectWorkflow,
   installWorkflowFromSource,
@@ -194,7 +196,7 @@ import {
   workflowRegistryDir,
   writeGlobalConfig,
   writeProjectConfig
-} from "./chunk-YUVMVYUF.js";
+} from "./chunk-TRNUPQQJ.js";
 import {
   __toESM
 } from "./chunk-G3PMV62Z.js";
@@ -202,10 +204,10 @@ import {
 // src/app/entry/cli.tsx
 import { render } from "ink";
 import meow from "meow";
-import fs9 from "fs";
+import fs10 from "fs";
 import { createRequire } from "module";
 import os5 from "os";
-import path9 from "path";
+import path10 from "path";
 import { fileURLToPath } from "url";
 
 // src/app/shell/sessionUiState.ts
@@ -5324,14 +5326,14 @@ function extractWebSearch(_input, response) {
   return { type: "text", content: extractTextContent(response), maxLines: 10 };
 }
 function extractNotebookEdit(input, _response) {
-  const path10 = typeof input["notebook_path"] === "string" ? input["notebook_path"] : "";
+  const path11 = typeof input["notebook_path"] === "string" ? input["notebook_path"] : "";
   const mode = typeof input["edit_mode"] === "string" ? input["edit_mode"] : "replace";
   const source = typeof input["new_source"] === "string" ? input["new_source"] : "";
-  if (!source) return { type: "text", content: `${mode} cell in ${path10}` };
+  if (!source) return { type: "text", content: `${mode} cell in ${path11}` };
   return {
     type: "code",
     content: source,
-    language: detectLanguage(path10),
+    language: detectLanguage(path11),
     maxLines: 10
   };
 }
@@ -5857,10 +5859,10 @@ function extractToolSubject(toolName, toolInput) {
       const parts = [];
       const pattern = str(input, "pattern");
       const glob = str(input, "glob");
-      const path10 = str(input, "path");
+      const path11 = str(input, "path");
       if (pattern) parts.push(`"${pattern}"`);
       if (glob) parts.push(glob);
-      if (path10) parts.push(`in ${path10}`);
+      if (path11) parts.push(`in ${path11}`);
       return parts.length > 0 ? parts.join("  ") : void 0;
     }
     case "Skill":
@@ -13091,7 +13093,7 @@ var thisMachine = (installationId) => ({
   os: `${platform()} ${release()}`.slice(0, 64),
   softwareVersion: runnerSoftwareVersion
 });
-var post = (origin, path10, body) => fetch(new URL(path10, origin), {
+var post = (origin, path11, body) => fetch(new URL(path11, origin), {
   method: "POST",
   headers: { "Content-Type": "application/json" },
   body: JSON.stringify(body)
@@ -13110,8 +13112,8 @@ async function alreadyConnected(existing, { forTeam, ownIdentity }) {
   const problem = own ? await credentialAccepted(own.config) ? void 0 : "lapsed" : forTeam(existing.orgId).length ? "other_runner" : "missing";
   const runner = { orgId: existing.orgId, runnerId: existing.runnerId, name: existing.name };
   if (own && problem === void 0) return { status: "already_connected", ...runner, path: own.path };
-  const path10 = (own ?? forTeam(existing.orgId)[0])?.path;
-  return { status: "identity_unusable", ...runner, problem, ...path10 ? { path: path10 } : {} };
+  const path11 = (own ?? forTeam(existing.orgId)[0])?.path;
+  return { status: "identity_unusable", ...runner, problem, ...path11 ? { path: path11 } : {} };
 }
 async function connectWithCode({
   code,
@@ -13183,20 +13185,20 @@ async function saveIdentity(origin, credential, { single, forTeam }, directory)
     name: credential.name
   });
   const replaced = [];
-  for (const { path: path11 } of forTeam(credential.orgId)) {
-    const aside = `${path11}.replaced-${Date.now()}`;
-    await rename(path11, aside);
+  for (const { path: path12 } of forTeam(credential.orgId)) {
+    const aside = `${path12}.replaced-${Date.now()}`;
+    await rename(path12, aside);
     replaced.push(aside);
   }
-  const path10 = single ?? teamIdentityPath(origin, credential.orgId, directory);
+  const path11 = single ?? teamIdentityPath(origin, credential.orgId, directory);
   try {
-    await writeIdentityOnce(path10, JSON.stringify(config, null, 2) + "\n");
+    await writeIdentityOnce(path11, JSON.stringify(config, null, 2) + "\n");
   } catch (error) {
     if (error.code === "EEXIST")
-      throw new Error(`Another Connect wrote a Runner identity for this Team at ${path10} meanwhile; it was left unchanged.`);
+      throw new Error(`Another Connect wrote a Runner identity for this Team at ${path11} meanwhile; it was left unchanged.`);
     throw error;
   }
-  return { status: "connected", config, path: path10, replaced };
+  return { status: "connected", config, path: path11, replaced };
 }
 function pathSegment(value) {
   const segment = encodeURIComponent(value);
@@ -13236,7 +13238,7 @@ async function refuseExisting(target) {
   throw new Error(`This machine already has a Runner${name ? ` (${name})` : ""} configured at ${target}.`);
 }
 async function disconnectRunner({
-  identity: { path: path10, config },
+  identity: { path: path11, config },
   serviceManager,
   othersRemain
 }) {
@@ -13269,7 +13271,7 @@ async function disconnectRunner({
     await restore();
     throw new Error(`The Hub refused to disconnect ${name} (${body.error ?? response.status}); it is still connected.`);
   }
-  await forgetRunner(path10);
+  await forgetRunner(path11);
   if (othersRemain) await restore();
   else await serviceManager?.remove();
   return result;
@@ -13422,18 +13424,18 @@ async function runRunnerCommandV2(input, options = {}) {
             `This machine is already connected to this Team as ${outcome.name}, but ${why}. ` + (code ? `The code was not used: connect a new Runner in its place with ${retry}. ` : `Connect a new Runner in its place with a Connect code from Settings \u2192 Runners: ${retry}. `) + `The old ${outcome.name} stays listed in Settings \u2192 Runners, offline.`
           );
         }
-        const { config, path: path10, replaced } = outcome;
+        const { config, path: path11, replaced } = outcome;
         for (const aside of replaced)
           process.stdout.write(
             `The Hub no longer recognised this machine's earlier identity for this Team; it was moved aside to ${aside}.
 `
           );
         process.stdout.write(
-          `Connected as ${config.name ?? config.runnerId}. Identity saved to ${path10}.
+          `Connected as ${config.name ?? config.runnerId}. Identity saved to ${path11}.
 `
         );
         if (services) {
-          const service = await ensureService(services, config, path10);
+          const service = await ensureService(services, config, path11);
           process.stdout.write(`${serviceStarted(service)}
 `);
           return 0;
@@ -13442,7 +13444,7 @@ async function runRunnerCommandV2(input, options = {}) {
           process.stdout.write(
             "No launchd or systemd here to run the Runner as a background service; running it in the foreground instead.\n"
           );
-        await runConfiguredRunner(path10, options.signal);
+        await runConfiguredRunner(path11, options.signal);
         return 0;
       }
       case "disconnect": {
@@ -13513,9 +13515,9 @@ async function runRunnerCommandV2(input, options = {}) {
               configured: true,
               // One entry per Team this machine serves; credentials are never printed.
               teams: identities.map(
-                ({ path: path10, config: { token: _token, ...config } }) => ({
+                ({ path: path11, config: { token: _token, ...config } }) => ({
                   ...config,
-                  path: path10
+                  path: path11
                 })
               ),
               service: service ? {
@@ -13732,15 +13734,15 @@ function runBuildPlan(deps) {
       slugId: input.project.slugId,
       worktreesRoot: deps.worktreesRoot
     });
-    const designDir = path6.join(
+    const planDir = path6.join(
       worktree.path,
       ".athena",
       "workflows",
       input.project.slugId
     );
-    writeFile(path6.join(designDir, "plan-input.json"), json(input));
+    writeFile(path6.join(planDir, "plan-input.json"), json(input));
     const fixtureDir = fixtureInput ? path6.dirname(path6.resolve(fixtureInput)) : void 0;
-    const fillPath = (identifier) => path6.join(designDir, identifier, "fill.json");
+    const fillPath = (identifier) => path6.join(planDir, identifier, "fill.json");
     const fills = Object.fromEntries(
       input.issues.map((issue) => {
         const fixture = fixtureDir ? path6.join(fixtureDir, "fills", `${issue.identifier}.json`) : void 0;
@@ -13780,27 +13782,27 @@ function runBuildPlan(deps) {
       };
     const host = deps.hostCapabilities();
     for (const workflow of result.workflows) {
-      const directory = path6.join(designDir, workflow.identifier);
+      const directory = path6.join(planDir, workflow.identifier);
       writeFile(path6.join(directory, "fill.json"), json(workflow.fill));
       writeFile(path6.join(directory, "workflow.json"), workflow.workflowJson);
       writeFile(path6.join(directory, "workflow.md"), workflow.workflowMd);
       checkGenerated(directory, workflow, host, layout);
     }
-    const relativeDesignDir = path6.relative(worktree.path, designDir);
+    const relativePlanDir = path6.relative(worktree.path, planDir);
     commitBuildFiles(
       worktree.path,
-      [relativeDesignDir],
+      [relativePlanDir],
       `drisp build: Generated Workflows for ${input.project.slugId}`
     );
-    const commit = lastCommitTouching(worktree.path, relativeDesignDir, [
-      path6.join(relativeDesignDir, "plan.json")
+    const commit = lastCommitTouching(worktree.path, relativePlanDir, [
+      path6.join(relativePlanDir, "plan.json")
     ]);
     const plan = finalizePlan(result.plan, commit);
-    writeFile(path6.join(designDir, "plan.json"), json(plan));
+    writeFile(path6.join(planDir, "plan.json"), json(plan));
     commitBuildFiles(
       worktree.path,
-      [path6.join(relativeDesignDir, "plan.json")],
-      `drisp build: Run plan for ${input.project.slugId}`
+      [path6.join(relativePlanDir, "plan.json")],
+      `drisp build: Build plan for ${input.project.slugId}`
     );
     writeFile(path6.join(artifacts, "build_plan.json"), json(plan));
     return {
@@ -13860,9 +13862,9 @@ var DrispClient = class _DrispClient {
     if (!match) throw new Error("invalid_hub_url");
     return new _DrispClient(url.origin, decodeURIComponent(match[1]), async () => token);
   }
-  async request(path10, body) {
+  async request(path11, body) {
     const response = await fetch(
-      `${this.baseUrl}/v2/orgs/${encodeURIComponent(this.orgId)}${path10}`,
+      `${this.baseUrl}/v2/orgs/${encodeURIComponent(this.orgId)}${path11}`,
       {
         method: body === void 0 ? "GET" : "POST",
         headers: {
@@ -14458,15 +14460,15 @@ async function runBuildTick(deps) {
     slugId: input.project.slugId,
     worktreesRoot: deps.worktreesRoot
   });
-  const designDir = path7.join(
+  const planDir = path7.join(
     worktree.path,
     ".athena",
     "workflows",
     input.project.slugId
   );
-  const relativeDesignDir = path7.relative(worktree.path, designDir);
-  const statePath = path7.join(designDir, "build-state.json");
-  const planPath = path7.join(designDir, "plan.json");
+  const relativePlanDir = path7.relative(worktree.path, planDir);
+  const statePath = path7.join(planDir, "build-state.json");
+  const planPath = path7.join(planDir, "plan.json");
   const parsedPlan = buildPlanSchema.safeParse(readJson(planPath));
   if (!parsedPlan.success || parsedPlan.data.orchestratorRunId !== orchestratorRunId)
     return notStarted();
@@ -14522,12 +14524,12 @@ async function runBuildTick(deps) {
   let parkReason = assessment.parkReason;
   const record = () => {
     writeFile(statePath, json(state));
-    const files = [path7.join(relativeDesignDir, "build-state.json")];
+    const files = [path7.join(relativePlanDir, "build-state.json")];
     const emitted = json(currentPlan(plan, state));
     if (emitted !== fs7.readFileSync(planPath, "utf-8")) {
       writeFile(planPath, emitted);
       writeFile(path7.join(artifacts, "build_plan.json"), emitted);
-      files.push(path7.join(relativeDesignDir, "plan.json"));
+      files.push(path7.join(relativePlanDir, "plan.json"));
     }
     if (commitBuildFiles(
       worktree.path,
@@ -14566,7 +14568,7 @@ async function runBuildTick(deps) {
         });
         continue;
       }
-      const entryDir = path7.join(relativeDesignDir, entry.identifier);
+      const entryDir = path7.join(relativePlanDir, entry.identifier);
       git(worktree.path, ["checkout", plan.commit, "--", entryDir]);
       installWorkflowFromSource(
         {
@@ -14703,13 +14705,50 @@ function evaluateRemoteChecks(runs) {
   return verdict;
 }
 
+// src/core/build/step.ts
+import fs8 from "fs";
+import path8 from "path";
+var QA_KINDS = fillSchema.shape.qa.options;
+function runBuildStep(input) {
+  const directory = requireEnv(input.env, "DRISP_RUN_ARTIFACTS");
+  const qa = input.qa ?? "web";
+  if (!QA_KINDS.includes(qa))
+    throw new BuildUsageError(
+      `--qa must be one of ${QA_KINDS.join(", ")}, not "${qa}".`
+    );
+  const titles = gateTitles({ qa });
+  const index = /^[0-9]+$/.test(input.n ?? "") ? Number(input.n) : 0;
+  if (index < 1 || index > titles.length)
+    throw new BuildUsageError(
+      `Step must be a whole number between 1 and ${titles.length}, not "${input.n ?? ""}".`
+    );
+  if (!fs8.statSync(directory, { throwIfNoEntry: false })?.isDirectory())
+    throw new BuildUsageError(
+      `DRISP_RUN_ARTIFACTS (${directory}) is not a directory.`
+    );
+  const artifact = {
+    index,
+    title: titles[index - 1],
+    total: titles.length
+  };
+  fs8.writeFileSync(
+    path8.join(directory, "step.json"),
+    `${JSON.stringify(artifact)}
+`
+  );
+  return artifact;
+}
+
 // src/app/entry/buildCommand.ts
 var USAGE3 = `Usage: drisp build plan --input <path>
        drisp build tick --input <path> [--rebase-failed <IDENTIFIER>]...
        drisp build checks
+       drisp build step <n> [--qa none|web|macos]
 plan and tick run inside an Orchestrator Run (DRISP_RUN_ID, DRISP_RUNNER_ID and DRISP_RUN_ARTIFACTS set; tick also
 DRISP_RUN_TOKEN and DRISP_HUB_URL). DRISP_BUILD_PLAN_INPUT=<path> stands in for plan's --input, with
-fills/<IDENTIFIER>.json beside it. checks runs in a child's worktree: the merge gate's verdict on HEAD's GitHub runs.`;
+fills/<IDENTIFIER>.json beside it. checks runs in a child's worktree: the merge gate's verdict on HEAD's GitHub runs.
+step runs in any Run with DRISP_RUN_ARTIFACTS set: it writes the step artifact {index, title, total} for gate <n> of the
+build-child template (QA is a gate unless --qa none) and refuses an index outside the list.`;
 function githubPullRequests(folder, branch) {
   const output = execFileSync(
     "gh",
@@ -14827,6 +14866,13 @@ async function runBuildCommand(input) {
       case "checks":
         output = runBuildChecks(input.cwd, input.checks ?? defaultChecks);
         break;
+      case "step":
+        output = runBuildStep({
+          env: env2,
+          n: input.positional?.[0],
+          ...input.flags.qa ? { qa: input.flags.qa } : {}
+        });
+        break;
       default:
         stderr.write(`${USAGE3}
 `);
@@ -14849,9 +14895,9 @@ import process7 from "process";
 
 // src/harnesses/claude/system/doctorEnvironment.ts
 import { execFileSync as execFileSync2 } from "child_process";
-import * as fs8 from "fs";
+import * as fs9 from "fs";
 import * as os4 from "os";
-import * as path8 from "path";
+import * as path9 from "path";
 var MANAGED_POLICY_KEYS = [
   "forceLoginMethod",
   "forceLoginOrgUUID",
@@ -14955,8 +15001,8 @@ function collectEnvironment(options = {}) {
   const detectVersion = options.detectClaudeVersionFn ?? detectClaudeVersion;
   const runAuthStatus = options.runClaudeAuthStatusFn ?? runClaudeAuthStatus;
   const resolveForwarder = options.resolveHookForwarderCommandFn ?? resolveHookForwarderCommand;
-  const statFn = options.statFn ?? ((p) => fs8.statSync(p));
-  const readFileFn = options.readFileFn ?? ((p) => fs8.readFileSync(p, "utf8"));
+  const statFn = options.statFn ?? ((p) => fs9.statSync(p));
+  const readFileFn = options.readFileFn ?? ((p) => fs9.readFileSync(p, "utf8"));
   const settingsPaths = resolveClaudeSettingsSurfacePaths(
     homeDir,
     cwd,
@@ -15001,7 +15047,7 @@ function collectEnvironment(options = {}) {
   });
   let globalConfigPresent = false;
   try {
-    statFn(path8.join(homeDir, ".claude.json"));
+    statFn(path9.join(homeDir, ".claude.json"));
     globalConfigPresent = true;
   } catch {
     globalConfigPresent = false;
@@ -15481,13 +15527,13 @@ function runRunsCommand(input) {
 // src/app/entry/cli.tsx
 import { jsx as jsx24 } from "react/jsx-runtime";
 function resolvePackageJsonPath(entryUrl) {
-  let currentDir = path9.dirname(fileURLToPath(entryUrl));
+  let currentDir = path10.dirname(fileURLToPath(entryUrl));
   for (; ; ) {
-    const candidatePath = path9.join(currentDir, "package.json");
-    if (fs9.existsSync(candidatePath)) {
+    const candidatePath = path10.join(currentDir, "package.json");
+    if (fs10.existsSync(candidatePath)) {
       return candidatePath;
     }
-    const parentDir = path9.dirname(currentDir);
+    const parentDir = path10.dirname(currentDir);
     if (parentDir === currentDir) {
       throw new Error("Could not locate package.json for CLI metadata.");
     }
@@ -15659,6 +15705,7 @@ var cli = meow(
 			build plan --input <path>  Plan a Build inside an Orchestrator Run (prints one JSON object)
 			build tick --input <path>  Run one step of a started Build (prints the next action; [--rebase-failed <ID>]...)
 			build checks               The merge gate's verdict on HEAD's GitHub runs (in a child's worktree)
+			build step <n>             Report the Run's current step: writes the step run artifact ([--qa none|web|macos])
 			telemetry [action]    Manage anonymous telemetry (enable/disable/status)
 			doctor                Diagnose Claude headless setup (use with --harness=claude)
 
@@ -15796,6 +15843,9 @@ var cli = meow(
         type: "string",
         isMultiple: true
       },
+      qa: {
+        type: "string"
+      },
       foreground: {
         type: "boolean",
         default: false
@@ -15835,7 +15885,7 @@ var cli = meow(
   }
 );
 async function main() {
-  const projectDir = path9.resolve(cli.flags.projectDir);
+  const projectDir = path10.resolve(cli.flags.projectDir);
   const [command, ...commandArgs] = cli.input;
   const isRunCommand = command === "run" || command === "exec";
   if (command && !KNOWN_COMMANDS.has(command)) {
@@ -15889,7 +15939,7 @@ Available commands: ${[...KNOWN_COMMANDS].join(", ")}`
         await exitWith(1);
         return;
       }
-      const { default: WorkflowInstallWizard } = await import("./WorkflowInstallWizard-NZFBSBLY.js");
+      const { default: WorkflowInstallWizard } = await import("./WorkflowInstallWizard-BVWAIVBH.js");
       const { waitUntilExit } = render(
         /* @__PURE__ */ jsx24(
           WorkflowInstallWizard,
@@ -15968,11 +16018,13 @@ Available commands: ${[...KNOWN_COMMANDS].join(", ")}`
     return;
   }
   if (command === "build") {
-    const [subcommand = ""] = commandArgs;
+    const [subcommand = "", ...buildArgs] = commandArgs;
     await exitWith(
       await runBuildCommand({
         subcommand,
+        positional: buildArgs,
         flags: {
+          ...typeof cli.flags.qa === "string" ? { qa: cli.flags.qa } : {},
           ...typeof cli.flags.input === "string" ? { input: cli.flags.input } : {},
           ...cli.flags.rebaseFailed?.length ? { rebaseFailed: cli.flags.rebaseFailed } : {}
         },
@@ -16054,8 +16106,8 @@ Available commands: ${[...KNOWN_COMMANDS].join(", ")}`
   const showSetup = isRunCommand ? false : shouldShowSetup({
     cliInput: cli.input,
     setupComplete: globalConfig.setupComplete,
-    globalConfigExists: fs9.existsSync(
-      path9.join(os5.homedir(), ".config", "athena", "config.json")
+    globalConfigExists: fs10.existsSync(
+      path10.join(os5.homedir(), ".config", "athena", "config.json")
     )
   });
   let runtimeConfig;

package/dist/dashboard-daemon.js

@@ -1,6 +1,6 @@
-import "./chunk-PGMV5I7Y.js";
-import "./chunk-D7QQIZDI.js";
+import "./chunk-LCT645C4.js";
+import "./chunk-CPU4RLSW.js";
 import "./chunk-PQIB66SG.js";
-import "./chunk-YUVMVYUF.js";
+import "./chunk-TRNUPQQJ.js";
 import "./chunk-G3PMV62Z.js";
 //# sourceMappingURL=dashboard-daemon.js.map

package/dist/runner.js

@@ -1,6 +1,6 @@
-import "./chunk-PGMV5I7Y.js";
-import "./chunk-D7QQIZDI.js";
+import "./chunk-LCT645C4.js";
+import "./chunk-CPU4RLSW.js";
 import "./chunk-PQIB66SG.js";
-import "./chunk-YUVMVYUF.js";
+import "./chunk-TRNUPQQJ.js";
 import "./chunk-G3PMV62Z.js";
 //# sourceMappingURL=runner.js.map

package/package.json

@@ -17,7 +17,7 @@
 		"hooks",
 		"dashboard"
 	],
-	"version": "0.6.11",
+	"version": "0.7.1",
 	"license": "MIT",
 	"bin": {
 		"athena": "dist/cli.js",