@drisp/cli 0.7.7 → 0.7.8

package/dist/{WorkflowInstallWizard-VVEEJW25.js → WorkflowInstallWizard-IOJD3YOA.js}

@@ -8,7 +8,7 @@ import {
   installWorkflowPlugins,
   resolveWorkflow,
   writeGlobalConfig
-} from "./chunk-HZ6GRLOM.js";
+} from "./chunk-OYUBT6RS.js";
 import "./chunk-G3PMV62Z.js";
 
 // src/setup/steps/WorkflowInstallWizard.tsx
@@ -93,4 +93,4 @@ function WorkflowInstallWizard({ source, onDone }) {
 export {
   WorkflowInstallWizard as default
 };
-//# sourceMappingURL=WorkflowInstallWizard-VVEEJW25.js.map
+//# sourceMappingURL=WorkflowInstallWizard-IOJD3YOA.js.map

package/dist/{chunk-D246FR4I.js → chunk-HGMJ3YL2.js}

@@ -21,6 +21,7 @@ import {
   LAYOUT_MARKERS,
   ORCHESTRATOR_LOOP,
   WAITING_ON_CHILDREN_STOP_REASON,
+  budgetTokens,
   compileWorkflowPlan,
   createSteerQueue,
   createWorkflowRunner,
@@ -54,7 +55,7 @@ import {
   verifyRendered,
   wakesFreshAfterHandover,
   workflowRegistryDir
-} from "./chunk-HZ6GRLOM.js";
+} from "./chunk-OYUBT6RS.js";
 import {
   __commonJS,
   __toESM
@@ -12688,7 +12689,7 @@ var RUN_EXIT_CODE = {
 import { existsSync as existsSync4 } from "fs";
 import { link, mkdir as mkdir6, readdir as readdir3, readFile as readFile5, unlink as unlink3, writeFile as writeFile4 } from "fs/promises";
 import { homedir as homedir5 } from "os";
-import { dirname as dirname5, join as join10 } from "path";
+import { dirname as dirname5, join as join11 } from "path";
 
 // ../../modules/runtime/src/runner-service.ts
 import { execFile } from "child_process";
@@ -12880,7 +12881,7 @@ WantedBy=default.target
 // ../../modules/runtime/src/service.ts
 import { mkdir as mkdir5, readFile as readFile4, unlink as unlink2 } from "fs/promises";
 import { homedir as homedir4 } from "os";
-import { join as join9, resolve as resolve6 } from "path";
+import { join as join10, resolve as resolve6 } from "path";
 
 // ../../packages/protocol/src/domain.ts
 var RunStatusSchema = external_exports.enum([
@@ -14892,7 +14893,7 @@ async function restoreCheckpoint(store, input) {
 
 // ../../modules/runtime/src/software-version.ts
 import "fs";
-var runnerSoftwareVersion = true ? "0.7.7" : JSON.parse(readFileSync2(new URL("../../../apps/cli/package.json", import.meta.url), "utf8")).version;
+var runnerSoftwareVersion = true ? "0.7.8" : JSON.parse(readFileSync2(new URL("../../../apps/cli/package.json", import.meta.url), "utf8")).version;
 
 // ../../modules/runtime/src/connection.ts
 var RunnerDisconnectedError = class extends Error {
@@ -20149,8 +20150,8 @@ function sessionStore(store, runId, options = {}) {
 
 // ../../modules/runtime/src/workflow-executor.ts
 import { execFileSync as execFileSync9 } from "child_process";
-import { statSync as statSync3, writeFileSync as writeFileSync4 } from "fs";
-import { join as join8 } from "path";
+import { statSync as statSync3, writeFileSync as writeFileSync5 } from "fs";
+import { join as join9 } from "path";
 
 // src/core/build/workspace.ts
 import { execFileSync as execFileSync5 } from "child_process";
@@ -20204,6 +20205,11 @@ var fillSchema = external_exports.strictObject({
     )
   ).min(1).optional(),
   sizeClass: external_exports.enum(["S", "M", "L"]),
+  /**
+   * Who merges the pull request (root ADR-0009): `agent`, the default when absent, or `you`, which makes the Merge
+   * step a Sign-off the member answers in the child's Thread. Filled from the member's words before Start.
+   */
+  merge: external_exports.enum(["agent", "you"]).optional(),
   instructions: external_exports.string().min(1).max(6e3).refine((text) => !TEMPLATE_STRUCTURE.test(text), {
     error: INSTRUCTIONS_MESSAGE
   }),
@@ -20293,6 +20299,8 @@ var issueEntrySchema = external_exports.strictObject({
   mcpServers: external_exports.array(external_exports.string()),
   instructionsSummary: external_exports.string(),
   gates: external_exports.array(external_exports.string()),
+  /** Who merges, from the fill; absent means agents merge (root ADR-0009). */
+  merge: external_exports.enum(["agent", "you"]).optional(),
   workflowName: external_exports.string().max(128)
 });
 var buildPlanSchema = external_exports.strictObject({
@@ -20504,6 +20512,7 @@ function scopeFingerprint(issue) {
 }
 
 // src/core/build/planner.ts
+var MIXED_MERGE = "The fills disagree on merge. Write the same value in every fill: you when the member asked to merge themselves, else agent.";
 function skipReason(issue, pullRequests) {
   const prs = issue.branchName ? pullRequests[issue.branchName] : void 0;
   if (issue.labels.includes("ready-for-human")) return "ready-for-human";
@@ -20563,7 +20572,8 @@ function shownFromFill(fill) {
     skills: renderedSkills(fill),
     mcpServers: renderedMcpServers(fill),
     instructionsSummary: summarizeInstructions(fill.instructions),
-    gates: gateTitles(fill)
+    gates: gateTitles(fill),
+    ...fill.merge ? { merge: fill.merge } : {}
   };
 }
 function blockingGraph(entries) {
@@ -20629,6 +20639,16 @@ function planBuild(context) {
       });
   }
   if (missing.length > 0) return { status: "needs_fills", fills: missing };
+  if (new Set([...fills.values()].map((fill) => fill.merge ?? "agent")).size > 1)
+    return {
+      status: "needs_fills",
+      fills: entries.map(({ identifier, title, url }) => ({
+        identifier,
+        title,
+        url
+      })),
+      reason: MIXED_MERGE
+    };
   const hasSubIssues = new Set(input.issues.map((issue) => issue.parentId));
   const parentOnly = new Set(
     entries.filter(
@@ -20942,7 +20962,8 @@ function validateChildRun(grant, store, paths) {
   if (!verified.ok) throw mismatch(`its ${verified.file} does not re-render from its fill`);
   const shown = approval.plan.entries?.[name];
   const derived = shownFromFill(fill.data);
-  if (!shown || !Object.entries(derived).every(([key, value]) => isDeepStrictEqual2(shown[key], value)))
+  const sameMerge = (shown?.merge ?? "agent") === (fill.data.merge ?? "agent");
+  if (!shown || !sameMerge || !Object.entries(derived).every(([key, value]) => isDeepStrictEqual2(shown[key], value)))
     throw mismatch("the plan the member approved showed something else for it");
   return { permissions: renderedPermissions(fill.data) };
 }
@@ -21337,6 +21358,50 @@ function runArtifactEmitter(directory, record, midTurnMinGapMs = MID_TURN_MIN_GA
   };
 }
 
+// ../../modules/runtime/src/run-usage.ts
+import { readFileSync as readFileSync5, renameSync, writeFileSync as writeFileSync4 } from "fs";
+import { join as join8 } from "path";
+var isMark = (value) => {
+  const mark = value;
+  return !!mark && Number.isInteger(mark.index) && typeof mark.title === "string" && typeof mark.tokens === "number" && Number.isFinite(mark.tokens) && mark.tokens >= 0;
+};
+var read2 = (path23) => {
+  try {
+    return JSON.parse(readFileSync5(path23, "utf8"));
+  } catch {
+    return void 0;
+  }
+};
+function stepUsageRecorder(directory, counted) {
+  const path23 = join8(directory, "usage.json");
+  const stored = read2(path23);
+  const marks = Array.isArray(stored) ? stored.filter(isMark) : [];
+  return ({ closing = false } = {}) => {
+    const step = read2(join8(directory, "step.json"));
+    if (!step || !Number.isInteger(step.index) || typeof step.title !== "string") return;
+    const figure = counted();
+    if (figure === null) return;
+    const last = marks.at(-1);
+    const tokens = Math.max(figure, last?.tokens ?? 0);
+    const sameStep = last?.index === step.index && last?.title === step.title;
+    if (sameStep && !(closing && tokens > last.tokens)) return;
+    marks.push({ index: step.index, title: step.title, tokens });
+    let json = JSON.stringify(marks);
+    if (Buffer.byteLength(json) > ARTIFACT_MAX_BYTES) {
+      for (let i = marks.length - 2; i > 0; i--) {
+        if (marks[i].index === marks[i - 1].index && marks[i].title === marks[i - 1].title) marks.splice(i, 1);
+      }
+      json = JSON.stringify(marks);
+      if (Buffer.byteLength(json) > ARTIFACT_MAX_BYTES) {
+        marks.pop();
+        return;
+      }
+    }
+    writeFileSync4(`${path23}.tmp`, json);
+    renameSync(`${path23}.tmp`, path23);
+  };
+}
+
 // ../../modules/runtime/src/workflow-executor.ts
 var isBuildCloseReason = (code) => buildCloseReasonSchema.safeParse(code).success;
 var continuationSchema = external_exports.discriminatedUnion("kind", [
@@ -21458,7 +21523,7 @@ function createWorkflowExecutor(dependencies = {}) {
           dependencies.dataDirectory ?? runnerDataDirectory(store.sql.database.name),
           grant.runId
         );
-        const emitArtifacts2 = runArtifactEmitter(artifacts, record, (dependencies.artifactIntervalMs ?? 2e3) * 2.5);
+        const emitArtifacts = runArtifactEmitter(artifacts, record, (dependencies.artifactIntervalMs ?? 2e3) * 2.5);
         const loop = bootstrapped.workflow?.loop;
         const childLoop = grant.parent && loop ? { ...loop, maxRunTokens: Math.min(loop.maxRunTokens ?? Infinity, grant.parent.tokenCap) } : loop;
         const config2 = {
@@ -21491,6 +21556,17 @@ function createWorkflowExecutor(dependencies = {}) {
             }
           } : {}
         });
+        const recordUsage = stepUsageRecorder(artifacts, () => {
+          const memory = deserializeRunMemory(view2.getLatestRun()?.runMemoryJson);
+          return memory ? budgetTokens(memory) : null;
+        });
+        const sweepArtifacts2 = (midTurn = false, closing = false) => {
+          try {
+            recordUsage({ closing });
+          } catch {
+          }
+          emitArtifacts(midTurn);
+        };
         const previous = view2.getLatestRun();
         const predecessor = grant.previousRun ? store.sessionValues(grant.sessionId, "workflow").find((snapshot) => snapshot.id === grant.previousRun.runId) : void 0;
         const adapterResumeSessionId2 = grant.purpose === "resume" ? previous?.adapterSessionId : predecessor?.adapterSessionId;
@@ -21498,12 +21574,12 @@ function createWorkflowExecutor(dependencies = {}) {
         if (continuation?.kind === "answer") {
           const pending2 = pendingApproval(store, grant.runId);
           if (pending2) {
-            writeFileSync4(join8(artifacts, "answer.json"), JSON.stringify(continuation.answer));
+            writeFileSync5(join9(artifacts, "answer.json"), JSON.stringify(continuation.answer));
             record(APPROVAL_ANSWERED, { answer: continuation.answer, plan: pending2.plan });
           }
         }
         const guidedPlan = continuation?.kind === "resume" && continuation.guidance?.trim() && pendingApproval(store, grant.runId) ? continuation.guidance : void 0;
-        if (guidedPlan !== void 0) writeFileSync4(join8(artifacts, "answer.json"), JSON.stringify(guidedPlan));
+        if (guidedPlan !== void 0) writeFileSync5(join9(artifacts, "answer.json"), JSON.stringify(guidedPlan));
         let storedAnswer2;
         if (continuation?.kind === "answer") {
           const answer = permissionAnswerSchema.safeParse(continuation.answer);
@@ -21534,7 +21610,7 @@ ${JSON.stringify(continuation.answer)}` : grant.spec.prompt;
 Current human request:
 ${prompt2}`;
         }
-        return { workingDirectory: workingDirectory2, config: config2, view: view2, adapterResumeSessionId: adapterResumeSessionId2, storedAnswer: storedAnswer2, prompt: prompt2, displayText: displayText2, emitArtifacts: emitArtifacts2 };
+        return { workingDirectory: workingDirectory2, config: config2, view: view2, adapterResumeSessionId: adapterResumeSessionId2, storedAnswer: storedAnswer2, prompt: prompt2, displayText: displayText2, sweepArtifacts: sweepArtifacts2 };
       };
       let setup2;
       try {
@@ -21546,12 +21622,12 @@ ${prompt2}`;
         if (error instanceof RunSetupError && isBuildCloseReason(error.code)) return { status: "failed", reason: error.code };
         return { status: "failed" };
       }
-      const { workingDirectory, config, view, adapterResumeSessionId, storedAnswer, prompt, displayText, emitArtifacts } = setup2;
+      const { workingDirectory, config, view, adapterResumeSessionId, storedAnswer, prompt, displayText, sweepArtifacts } = setup2;
       const queue = createSteerQueue();
       queues.set(grant.runId, queue);
       const sweep = setInterval(() => {
         try {
-          emitArtifacts(true);
+          sweepArtifacts(true);
         } catch {
         }
       }, dependencies.artifactIntervalMs ?? 2e3);
@@ -21587,14 +21663,14 @@ ${prompt2}`;
             }
           });
         },
-        onTurnComplete: emitArtifacts,
+        onTurnComplete: () => sweepArtifacts(false, true),
         stdout: { write: () => true },
         stderr: { write: (text) => process.stderr.write(text) },
         json: false
       })).finally(() => {
         queues.delete(grant.runId);
         clearInterval(sweep);
-        emitArtifacts();
+        sweepArtifacts(false, true);
       });
       if (!result.workflowOutcome)
         throw new Error(result.failure?.message ?? "Workflow returned no authoritative outcome");
@@ -21730,8 +21806,8 @@ var runnerConfigSchema = external_exports.object({
   /** The Runner's name in the Team, as Connect recorded it (hostname by default). */
   name: external_exports.string().optional()
 });
-var defaultConfigPath = () => process.env.DRISP_RUNNER_CONFIG ?? join9(homedir4(), ".config", "drisp", "runner-v2.json");
-var expandHome = (value) => resolve6(value.startsWith("~/") ? join9(homedir4(), value.slice(2)) : value);
+var defaultConfigPath = () => process.env.DRISP_RUNNER_CONFIG ?? join10(homedir4(), ".config", "drisp", "runner-v2.json");
+var expandHome = (value) => resolve6(value.startsWith("~/") ? join10(homedir4(), value.slice(2)) : value);
 async function readRunnerConfig(path23 = defaultConfigPath()) {
   const config = runnerConfigSchema.parse(JSON.parse(await readFile4(expandHome(path23), "utf8")));
   return { ...config, dataDirectory: expandHome(config.dataDirectory) };
@@ -21740,7 +21816,7 @@ async function startConfiguredRunner(path23 = defaultConfigPath()) {
   const config = await readRunnerConfig(path23);
   await mkdir5(config.dataDirectory, { recursive: true, mode: 448 });
   const store = new ExecutionStore(
-    join9(config.dataDirectory, "execution.sqlite"),
+    join10(config.dataDirectory, "execution.sqlite"),
     {
       orgId: config.orgId,
       runnerId: config.runnerId,
@@ -21829,17 +21905,17 @@ async function runConfiguredRunners(paths, abort, { whenAllDisconnected } = {})
 }
 
 // ../../modules/runtime/src/identities.ts
-var runnerConfigDirectory = () => join10(homedir5(), ".config", "drisp");
-var teamIdentityPath = (hub, orgId, directory = runnerConfigDirectory()) => join10(directory, "runners", encodeURIComponent(hub.host), `${encodeURIComponent(orgId)}.json`);
+var runnerConfigDirectory = () => join11(homedir5(), ".config", "drisp");
+var teamIdentityPath = (hub, orgId, directory = runnerConfigDirectory()) => join11(directory, "runners", encodeURIComponent(hub.host), `${encodeURIComponent(orgId)}.json`);
 function identityHubOrigin({ endpoint }) {
   const url = new URL(endpoint);
   url.protocol = url.protocol === "wss:" ? "https:" : "http:";
   return url.origin;
 }
-var legacyIdentityPath = (directory) => join10(directory, "runner-v2.json");
+var legacyIdentityPath = (directory) => join11(directory, "runner-v2.json");
 var overriddenIdentityPath = () => process.env.DRISP_RUNNER_CONFIG;
 async function machineInstallationId(directory = runnerConfigDirectory()) {
-  const path23 = join10(directory, "installation-id");
+  const path23 = join11(directory, "installation-id");
   const existing = await readFile5(path23, "utf8").then((text) => text.trim(), () => "");
   if (existing) return existing;
   let installationId = crypto.randomUUID();
@@ -21859,13 +21935,13 @@ async function machineInstallationId(directory = runnerConfigDirectory()) {
 }
 async function runnerIdentities(directory = runnerConfigDirectory()) {
   const override = overriddenIdentityPath();
-  const runners = join10(directory, "runners");
-  const identityFiles = async (folder) => (await readdir3(folder).catch(() => [])).filter((name) => name.endsWith(".json")).sort().map((name) => join10(folder, name));
+  const runners = join11(directory, "runners");
+  const identityFiles = async (folder) => (await readdir3(folder).catch(() => [])).filter((name) => name.endsWith(".json")).sort().map((name) => join11(folder, name));
   const hubs = (await readdir3(runners, { withFileTypes: true }).catch(() => [])).filter((entry) => entry.isDirectory()).map((entry) => entry.name).sort();
   const paths = override ? [expandHome(override)] : [
     legacyIdentityPath(directory),
     ...await identityFiles(runners),
-    ...(await Promise.all(hubs.map((hub) => identityFiles(join10(runners, hub))))).flat()
+    ...(await Promise.all(hubs.map((hub) => identityFiles(join11(runners, hub))))).flat()
   ];
   const present = paths.filter((path23) => existsSync4(path23));
   return Promise.all(present.map(async (path23) => ({ path: path23, config: await readRunnerConfig(path23) })));
@@ -22045,4 +22121,4 @@ export {
   runMachineRunners,
   writeIdentityOnce
 };
-//# sourceMappingURL=chunk-D246FR4I.js.map
+//# sourceMappingURL=chunk-HGMJ3YL2.js.map

package/dist/{chunk-HZ6GRLOM.js → chunk-OYUBT6RS.js}

@@ -21227,6 +21227,11 @@ var BUILD_STRINGS = {
   templatePark: "Drisp was updated during this Build. Build again to re-plan.",
   notStarted: "Not started",
   waiting: "Waiting for child Runs.",
+  /**
+   * The Merge step's Sign-off when the member merges (`merge: you`, root ADR-0009): the `NEEDS_HUMAN` text a child
+   * parks with, `{sha}` being the full head SHA it asks about. The app reads it as "Blocked · Your merge".
+   */
+  mergeSignOff: "Your merge: this pull request is ready to merge at {sha}. Reply in this Thread to sign off on that commit, or say what to change.",
   notAGitHubRepository: "The project folder is not a git repository with a GitHub origin.",
   cycle: (identifiers) => `These issues block each other in Linear: ${identifiers.join(", ")}.`,
   /** The comment the Orchestrator posts with its one Linear write, moving a merged issue to Done. */
@@ -21255,7 +21260,7 @@ var GATES = [
   },
   {
     title: "Checks",
-    passesWhen: "{install}{checks} pass",
+    passesWhen: "{install}{checks} pass, each check run through `drisp build check <name> -- <command>` (for example `drisp build check typecheck -- make typecheck`), which records its outcome for the Build page",
     cannotPass: "This issue's checks still fail after repeated fixes. Open the Thread to see the failing output."
   },
   {
@@ -21281,7 +21286,7 @@ var GATES = [
 ];
 
 // src/core/workflows/builtins/orchestrator/workflow.md
-var workflow_default = '# Orchestrator: plan and run a Build\n\nYou plan and run a Drisp Build of one Plan: the open issues of one Linear project. The Run\'s prompt names the\nLinear project, the Plan key and the project folder, which is your working directory. You never write code here:\neach issue is built by its own child Run, which `drisp build tick` starts.\n\nThe Runner sets these for you:\n\n- `DRISP_RUN_ARTIFACTS`: this Run\'s artifact directory. Files you write there are shown to the member.\n- `DRISP_RUN_ID`, `DRISP_RUNNER_ID`, `DRISP_RUN_TOKEN`, `DRISP_HUB_URL`: this Run, its Runner and its right to start\n  child Runs; `drisp build` reads them itself.\n\n## 1. Read Linear (first Turn)\n\nWith the `linear` MCP server, read the project and every issue in it, then write\n`$DRISP_RUN_ARTIFACTS/input/plan-input.json` (create the `input` directory) in exactly this shape. Every issue carries\nevery field, empty when it has none. `readAt` is the output of\n`node -e "console.log(new Date().toISOString())"` run just before you read Linear; never write a time yourself:\n\n```json\n{\n	"version": 1,\n	"readAt": "<the command\'s output, e.g. 2026-10-11T09:30:00.000Z>",\n	"project": {\n		"id": "<the project\'s `uuid`, not its `id`>",\n		"name": "<the project\'s `name`>",\n		"slugId": "<the last `-`-separated part of the project\'s `url`>"\n	},\n	"issues": [\n		{\n			"id": "<the issue\'s `uuid`, not its `id`>",\n			"identifier": "<the issue\'s `id`, e.g. DRI-12>",\n			"title": "<the issue\'s `title`>",\n			"description": "<full current description>",\n			"acceptanceCriteria": "<acceptance criteria, empty when included in description>",\n			"external": false,\n			"url": "<the issue\'s `url`>",\n			"branchName": "<the issue\'s `gitBranchName`, or null>",\n			"state": {\n				"type": "<the issue\'s `statusType`: backlog|unstarted|started|completed|canceled|triage>",\n				"name": "<the issue\'s `status`>"\n			},\n			"labels": ["<each of the issue\'s `labels`>"],\n			"parentId": "<the parent issue\'s `uuid`, or null>",\n			"blockedBy": ["<the `uuid` of each issue in `relations.blockedBy`>"],\n			"prioritySortOrder": 0\n		}\n	]\n}\n```\n\nLinear\'s MCP names fields differently from this file, and the difference matters: the app finds each issue\'s row by\nits UUID, so a plan that carries identifiers shows no Build state on any row.\n\n- The MCP\'s `id` is the readable identifier (`DRI-12`, or `P-DRI-7` for a project); the UUID is in `uuid`. Every\n  `id`, `parentId` and `blockedBy` value in `plan-input.json` is a UUID (`7f7b03f7-accf-46b2-98fb-abadfed76594`).\n- An issue\'s `parentId` and `relations.blockedBy` from the MCP name issues by identifier. Look each one up: use the\n  `uuid` of the project\'s issue with that identifier, or `get_issue` it when it is outside the project.\n- Read relations with `get_issue` and `includeRelations: true`; read the project\'s issues with `list_issues` and\n  `fields` including `uuid`.\n- The project\'s `url` ends in its `slugId` (`\u2026/project/build-sandbox-b7640301cd64` \u2192 `b7640301cd64`).\n\n`drisp build plan` rejects a plan with an identifier where a UUID belongs and names the field to fix.\n\nAlso include every referenced blocker outside the project, with `external: true`, its current status and UUID. Follow blocker relations recursively; deduplicate by UUID. Never mark a project issue external. External issues are read only and never scheduled. Preserve actual prioritySortOrder when available.\n\nOnly ready-for-agent issues without conflicting ready-for-human, needs-info, needs-triage or wontfix labels are eligible. Do not invent or change labels to make an issue eligible.\n\nInclude every issue of the project, done and canceled ones too: the plan decides what to skip. Then run:\n\n```sh\ndrisp build plan --input "$DRISP_RUN_ARTIFACTS/input/plan-input.json"\n```\n\nIt prints one JSON object. Act on its `status`.\n\n## 2. `needs_fills`\n\n`fills` lists issues that need a `fill.json` (`identifier`, `title`, `url`, `path`) and `templateVersion` is the value\neach fill must carry. For each listed issue: read it through `linear` (description, acceptance criteria, comments) and\nthe repo\'s ADRs and CONTEXT files it touches, then write its `fill.json` at `path`:\n\n```json\n{\n	"version": 1,\n	"templateVersion": "<templateVersion, copied exactly>",\n	"areas": ["macos|web|cli|hub|protocol|docs", "\u2026"],\n	"qa": "none|web|macos|both",\n	"profile": "implementation|documentation|investigation",\n	"rationale": "<why these steps are appropriate>",\n	"acceptanceEvidence": [\n		"<each acceptance criterion and the evidence that demonstrates it>"\n	],\n	"sizeClass": "S|M|L",\n	"instructions": "<what the child needs beyond the issue>",\n	"ownWork": true\n}\n```\n\n- `areas`: the parts of the repo the change touches, each once.\n- `profile`: implementation for behavior changes, documentation for prose-only repository changes, investigation for findings with no repository changes. Implementation defaults to TDD and two-reviewer code review; documentation and investigation omit these by default. Choose the profile from the actual deliverable, not the issue size.\n- Optional `testFirst` and `review`: `{ "enabled": true|false, "reason": "<issue-specific justification>" }`. Retain tests and review for behavioral changes; omit only when not applicable and explain why. These selections also control required skills.\n- Optional `checks`: a nonempty list of actual validation commands from the repo, using the supported npm, vitest, make or git diff command families. Read repository tooling and add the relevant test/build checks: typechecking alone does not prove behavior. If a necessary command is unsupported, state that limitation in instructions and require human attention, never claim validation passed.\n- `acceptanceEvidence`: cover every criterion, including the method and expected outcome.\n- `qa`: `both` when both interfaces change, `web` when the change shows in a web page, `macos` when it shows in the macOS app, else `none`.\n- `sizeClass`: `S` for a change of a file or two, `M` for a feature across a few modules, `L` for a large or risky\n  change.\n- `instructions` (at most 6000 characters): start with one short paragraph saying what to build, then restate the\n  acceptance criteria, name the ADRs it touches and the parts of the codebase involved. Plain prose and `-` lists\n  only: no headings, code fences or HTML comments (`drisp build plan` rejects them).\n- `ownWork`: `false` only for an issue with sub-issues whose own description asks for nothing beyond them, such as\n  a PRD above its slices; the plan then skips it and waits for its sub-issues instead. Otherwise `true`.\n\nThen run `drisp build plan` again with the same `--input` path.\n\n## 3. `planned` or `failed`\n\nOn `planned` the Build plan is written and shown to the member, who decides whether to start it: end the Turn with\n`<!-- AWAITING_APPROVAL -->` as the Journal\'s last line. On `failed` the reason is shown instead: end with\n`<!-- WORKFLOW_COMPLETE -->`.\n\n## 4. Every later wake: tick\n\nYou are woken when the member answers the approval question (with Start, or with words of their own before it) and whenever one of your child Runs closes or parks.\nEach time: read Linear again into `$DRISP_RUN_ARTIFACTS/input/plan-input.json` as in step 1 (with a new `readAt`),\nincluding full descriptions, acceptance criteria, labels and external blocker status. A scope change holds the affected issue for a fresh Build and approval. Then run:\n\n```sh\ndrisp build tick --input "$DRISP_RUN_ARTIFACTS/input/plan-input.json"\n```\n\nIt prints one JSON object. Act on its `action`, and repeat until an action ends the Turn:\n\n- `refresh_input`: read Linear into the input again (a newer `readAt`) and tick again.\n- `replan`: the member wrote words before starting, and `guidance` lists every round of them, oldest first. Plan again\n  with them as the member\'s wishes: read the issues they concern (and the repo) as in step 2, rewrite the `fill.json`\n  of each issue the guidance changes (`instructions`, `areas`, `qa`, `sizeClass`, or `ownWork` to leave an issue out),\n  and run `drisp build plan` again with the same `--input` path. Then end as in step 3: with\n  `<!-- AWAITING_APPROVAL -->` on `planned`, `<!-- WORKFLOW_COMPLETE -->` on `failed`. Write nothing but those\n  `fill.json` files.\n- `repair`: for each of `issues`, read it in Linear first and skip an issue Linear now shows Done or Canceled (its\n  child got there first); otherwise move it to Done and post its `comment` verbatim through `linear`. Then read\n  Linear into the input again and tick again.\n- `rebase`: for each of `items`, in its `worktree`: `git rebase origin/main`, resolve the conflicts, then\n  `git push --force-with-lease origin <branch>` (the item\'s `branch`) if the branch is on the remote. Never push any\n  other branch. If a rebase cannot be resolved, `git rebase --abort`.\n  Then read Linear into the input again and tick again, adding `--rebase-failed <identifier>` for each that failed.\n- `wait`: end the Turn with `<!-- WAITING_ON_CHILDREN -->` as the Journal\'s last line.\n- `park`: end the Turn with `<!-- NEEDS_HUMAN: <message> -->` as the Journal\'s last line, copying `message`\n  verbatim.\n- `complete`: end the Turn with `<!-- WORKFLOW_COMPLETE -->` as the Journal\'s last line.\n\n## Rules\n\n- Never start, cancel or edit Runs, Workflows, worktrees or branches except as an action says; `drisp build` does\n  what is needed.\n- Never write to Linear except a `repair`; never open a pull request.\n- Write only `plan-input.json` and the `fill.json` files `drisp build plan` asks for. Never write `answer.json`.\n';
+var workflow_default = '# Orchestrator: plan and run a Build\n\nYou plan and run a Drisp Build of one Plan: the open issues of one Linear project. The Run\'s prompt names the\nLinear project, the Plan key and the project folder, which is your working directory. You never write code here:\neach issue is built by its own child Run, which `drisp build tick` starts.\n\nThe Runner sets these for you:\n\n- `DRISP_RUN_ARTIFACTS`: this Run\'s artifact directory. Files you write there are shown to the member.\n- `DRISP_RUN_ID`, `DRISP_RUNNER_ID`, `DRISP_RUN_TOKEN`, `DRISP_HUB_URL`: this Run, its Runner and its right to start\n  child Runs; `drisp build` reads them itself.\n\n## 1. Read Linear (first Turn)\n\nWith the `linear` MCP server, read the project and every issue in it, then write\n`$DRISP_RUN_ARTIFACTS/input/plan-input.json` (create the `input` directory) in exactly this shape. Every issue carries\nevery field, empty when it has none. `readAt` is the output of\n`node -e "console.log(new Date().toISOString())"` run just before you read Linear; never write a time yourself:\n\n```json\n{\n	"version": 1,\n	"readAt": "<the command\'s output, e.g. 2026-10-11T09:30:00.000Z>",\n	"project": {\n		"id": "<the project\'s `uuid`, not its `id`>",\n		"name": "<the project\'s `name`>",\n		"slugId": "<the last `-`-separated part of the project\'s `url`>"\n	},\n	"issues": [\n		{\n			"id": "<the issue\'s `uuid`, not its `id`>",\n			"identifier": "<the issue\'s `id`, e.g. DRI-12>",\n			"title": "<the issue\'s `title`>",\n			"description": "<full current description>",\n			"acceptanceCriteria": "<acceptance criteria, empty when included in description>",\n			"external": false,\n			"url": "<the issue\'s `url`>",\n			"branchName": "<the issue\'s `gitBranchName`, or null>",\n			"state": {\n				"type": "<the issue\'s `statusType`: backlog|unstarted|started|completed|canceled|triage>",\n				"name": "<the issue\'s `status`>"\n			},\n			"labels": ["<each of the issue\'s `labels`>"],\n			"parentId": "<the parent issue\'s `uuid`, or null>",\n			"blockedBy": ["<the `uuid` of each issue in `relations.blockedBy`>"],\n			"prioritySortOrder": 0\n		}\n	]\n}\n```\n\nLinear\'s MCP names fields differently from this file, and the difference matters: the app finds each issue\'s row by\nits UUID, so a plan that carries identifiers shows no Build state on any row.\n\n- The MCP\'s `id` is the readable identifier (`DRI-12`, or `P-DRI-7` for a project); the UUID is in `uuid`. Every\n  `id`, `parentId` and `blockedBy` value in `plan-input.json` is a UUID (`7f7b03f7-accf-46b2-98fb-abadfed76594`).\n- An issue\'s `parentId` and `relations.blockedBy` from the MCP name issues by identifier. Look each one up: use the\n  `uuid` of the project\'s issue with that identifier, or `get_issue` it when it is outside the project.\n- Read relations with `get_issue` and `includeRelations: true`; read the project\'s issues with `list_issues` and\n  `fields` including `uuid`.\n- The project\'s `url` ends in its `slugId` (`\u2026/project/build-sandbox-b7640301cd64` \u2192 `b7640301cd64`).\n\n`drisp build plan` rejects a plan with an identifier where a UUID belongs and names the field to fix.\n\nAlso include every referenced blocker outside the project, with `external: true`, its current status and UUID. Follow blocker relations recursively; deduplicate by UUID. Never mark a project issue external. External issues are read only and never scheduled. Preserve actual prioritySortOrder when available.\n\nOnly ready-for-agent issues without conflicting ready-for-human, needs-info, needs-triage or wontfix labels are eligible. Do not invent or change labels to make an issue eligible.\n\nInclude every issue of the project, done and canceled ones too: the plan decides what to skip. Then run:\n\n```sh\ndrisp build plan --input "$DRISP_RUN_ARTIFACTS/input/plan-input.json"\n```\n\nIt prints one JSON object. Act on its `status`.\n\n## 2. `needs_fills`\n\n`fills` lists issues that need a `fill.json` (`identifier`, `title`, `url`, `path`) and `templateVersion` is the value\neach fill must carry. A `reason`, when present, says what to correct in the listed fills (fills that disagree on\n`merge`, say); fix that and keep the rest of each fill. For each listed issue: read it through `linear` (description,\nacceptance criteria, comments) and the repo\'s ADRs and CONTEXT files it touches, then write its `fill.json` at `path`:\n\n```json\n{\n	"version": 1,\n	"templateVersion": "<templateVersion, copied exactly>",\n	"areas": ["macos|web|cli|hub|protocol|docs", "\u2026"],\n	"qa": "none|web|macos|both",\n	"profile": "implementation|documentation|investigation",\n	"rationale": "<why these steps are appropriate>",\n	"acceptanceEvidence": [\n		"<each acceptance criterion and the evidence that demonstrates it>"\n	],\n	"sizeClass": "S|M|L",\n	"merge": "agent|you",\n	"instructions": "<what the child needs beyond the issue>",\n	"ownWork": true\n}\n```\n\n- `areas`: the parts of the repo the change touches, each once.\n- `profile`: implementation for behavior changes, documentation for prose-only repository changes, investigation for findings with no repository changes. Implementation defaults to TDD and two-reviewer code review; documentation and investigation omit these by default. Choose the profile from the actual deliverable, not the issue size.\n- Optional `testFirst` and `review`: `{ "enabled": true|false, "reason": "<issue-specific justification>" }`. Retain tests and review for behavioral changes; omit only when not applicable and explain why. These selections also control required skills.\n- Optional `checks`: a nonempty list of actual validation commands from the repo, using the supported npm, vitest, make or git diff command families. Read repository tooling and add the relevant test/build checks: typechecking alone does not prove behavior. If a necessary command is unsupported, state that limitation in instructions and require human attention, never claim validation passed.\n- `acceptanceEvidence`: cover every criterion, including the method and expected outcome.\n- `qa`: `both` when both interfaces change, `web` when the change shows in a web page, `macos` when it shows in the macOS app, else `none`.\n- `sizeClass`: `S` for a change of a file or two, `M` for a feature across a few modules, `L` for a large or risky\n  change.\n- `merge`: who merges each pull request. `agent` (the default) unless the member\'s own words in this chat, in the\n  Run\'s prompt or a guidance reply, ask to merge themselves ("ask me before merging", "I\'ll merge"): then `you`, and\n  the child\'s Merge step waits for the member\'s Sign-off in its Thread. It is one choice for the whole Build: write the\n  same value in every fill. It is fixed once the member presses Start: if they ask to change it after Start, tell\n  them to Cancel the Build and Build again.\n- `instructions` (at most 6000 characters): start with one short paragraph saying what to build, then restate the\n  acceptance criteria, name the ADRs it touches and the parts of the codebase involved. Plain prose and `-` lists\n  only: no headings, code fences or HTML comments (`drisp build plan` rejects them).\n- `ownWork`: `false` only for an issue with sub-issues whose own description asks for nothing beyond them, such as\n  a PRD above its slices; the plan then skips it and waits for its sub-issues instead. Otherwise `true`.\n\nThen run `drisp build plan` again with the same `--input` path.\n\n## 3. `planned` or `failed`\n\nOn `planned` the Build plan is written and shown to the member, who decides whether to start it: end the Turn with\n`<!-- AWAITING_APPROVAL -->` as the Journal\'s last line. On `failed` the reason is shown instead: end with\n`<!-- WORKFLOW_COMPLETE -->`.\n\n## 4. Every later wake: tick\n\nYou are woken when the member answers the approval question (with Start, or with words of their own before it) and whenever one of your child Runs closes or parks.\nEach time: read Linear again into `$DRISP_RUN_ARTIFACTS/input/plan-input.json` as in step 1 (with a new `readAt`),\nincluding full descriptions, acceptance criteria, labels and external blocker status. A scope change holds the affected issue for a fresh Build and approval. Then run:\n\n```sh\ndrisp build tick --input "$DRISP_RUN_ARTIFACTS/input/plan-input.json"\n```\n\nIt prints one JSON object. Act on its `action`, and repeat until an action ends the Turn:\n\n- `refresh_input`: read Linear into the input again (a newer `readAt`) and tick again.\n- `replan`: the member wrote words before starting, and `guidance` lists every round of them, oldest first. Plan again\n  with them as the member\'s wishes: read the issues they concern (and the repo) as in step 2, rewrite the `fill.json`\n  of each issue the guidance changes (`instructions`, `areas`, `qa`, `sizeClass`, `merge` in every fill when the\n  member says who merges, or `ownWork` to leave an issue out),\n  and run `drisp build plan` again with the same `--input` path. Then end as in step 3: with\n  `<!-- AWAITING_APPROVAL -->` on `planned`, `<!-- WORKFLOW_COMPLETE -->` on `failed`. Write nothing but those\n  `fill.json` files.\n- `repair`: for each of `issues`, read it in Linear first and skip an issue Linear now shows Done or Canceled (its\n  child got there first); otherwise move it to Done and post its `comment` verbatim through `linear`. Then read\n  Linear into the input again and tick again.\n- `rebase`: for each of `items`, in its `worktree`: `git rebase origin/main`, resolve the conflicts, then\n  `git push --force-with-lease origin <branch>` (the item\'s `branch`) if the branch is on the remote. Never push any\n  other branch. If a rebase cannot be resolved, `git rebase --abort`.\n  Then read Linear into the input again and tick again, adding `--rebase-failed <identifier>` for each that failed.\n- `wait`: end the Turn with `<!-- WAITING_ON_CHILDREN -->` as the Journal\'s last line.\n- `park`: end the Turn with `<!-- NEEDS_HUMAN: <message> -->` as the Journal\'s last line, copying `message`\n  verbatim.\n- `complete`: end the Turn with `<!-- WORKFLOW_COMPLETE -->` as the Journal\'s last line.\n\n## Rules\n\n- Never start, cancel or edit Runs, Workflows, worktrees or branches except as an action says; `drisp build` does\n  what is needed.\n- Never write to Linear except a `repair`; never open a pull request.\n- Write only `plan-input.json` and the `fill.json` files `drisp build plan` asks for. Never write `answer.json`.\n';
 
 // src/core/workflows/builtins/orchestrator/index.ts
 var ORCHESTRATOR_WORKFLOW_NAME = "orchestrator";
@@ -21472,7 +21477,7 @@ is in \`ignored\`: it does not block the merge and its name goes in the evidence
 empty, wait a minute and run it again. When \`failed\` is not empty, fix the change; if it still fails, the Merge gate
 cannot pass. Never judge a check by its timing.
 
-Immediately before merging, verify the current revision again: {mergeVerify}. If evidence is stale, rerun the
+{signOff}Immediately before merging, verify the current revision again: {mergeVerify}. If evidence is stale, rerun the
 selected validation steps and record fresh receipts before continuing.
 
 Merge with \`gh pr merge --squash --delete-branch --match-head-commit <sha>\`, where \`<sha>\` is HEAD after the last
@@ -21503,6 +21508,18 @@ Evidence. Never create issues and never edit an issue's title or description.
 
 When every gate has passed, end with \`<!-- WORKFLOW_COMPLETE -->\` as the Journal's last line.
 `;
+var MERGE_SIGN_OFF = {
+  passesWhen: "the merge gate below holds, with the member\u2019s Sign-off on HEAD",
+  section: `Sign-off: this Build's member merges, so the merge waits for their Sign-off on the exact head commit. When
+everything above holds and HEAD is pushed, end the Turn with \`<!-- NEEDS_HUMAN: {signOffText} -->\` as the Journal's
+last line, where \`<sha>\` is the full \`git rev-parse HEAD\`. The member answers in this Thread. When their reply signs
+off on that commit, record it with \`{signOffCommand}\`, which refuses any SHA but HEAD; it is your attestation of
+their reply, so never record one they did not give. Any other reply is guidance: act on it, then ask again. A
+Sign-off names one commit: after a rebase or any new commit, ask again before merging.
+When \`gh pr merge\` fails because the branch is protected, the Merge gate cannot pass.
+
+`
+};
 var STAGE_TEMPLATE = `### {n}. {title}
 
 Start: run \`{stepCommand}\`.
@@ -21584,6 +21601,7 @@ var RENDERER_RULES = {
   permissions: {
     edit: ["Edit(./**)"],
     shell: [
+      "drisp build check",
       "drisp build checks",
       "drisp build step",
       "drisp build merged",
@@ -21721,11 +21739,11 @@ function selectedGates(fill) {
   ).map(
     (gate) => fill.profile === "investigation" && gate.title === "Checks" ? {
       ...gate,
-      passesWhen: "{install}{checks} pass; each finding is supported by a source or reproducible observation and each acceptance criterion has evidence; unresolved questions are stated explicitly"
+      passesWhen: "{install}{checks} pass, each check run through `drisp build check <name> -- <command>`; each finding is supported by a source or reproducible observation and each acceptance criterion has evidence; unresolved questions are stated explicitly"
     } : fill.profile === "investigation" && gate.title === "Evidence" ? {
       ...gate,
       passesWhen: "findings and evidence for each acceptance criterion are posted on the Linear issue, with unresolved questions explicitly stated; the issue is moved to Done only when all acceptance criteria are satisfied"
-    } : gate
+    } : fill.merge === "you" && gate.title === "Merge" ? { ...gate, passesWhen: MERGE_SIGN_OFF.passesWhen } : gate
   );
   if (!usesTestFirst(fill))
     gates.splice(1, 0, {
@@ -21753,6 +21771,7 @@ var fillSlots = (template, slots) => template.replace(/\{(\w+)\}/g, (whole, key)
 function selectionFlags(fill) {
   return `${fill.profile ? ` --profile ${fill.profile}` : ""}${fill.testFirst ? ` --test-first ${fill.testFirst.enabled}` : ""}${fill.review ? ` --review ${fill.review.enabled}` : ""}`;
 }
+var mergeFlag = (fill) => fill.merge === "you" ? " --merge you" : "";
 function renderStages(fill, checks, install) {
   const gates = selectedGates(fill);
   return gates.map((gate, index) => {
@@ -21768,11 +21787,12 @@ function renderStages(fill, checks, install) {
       stepCommand: command,
       passesWhen
     });
+    const finish = `${command}${gate.title === "Merge" ? mergeFlag(fill) : ""}`;
     return stage + (["Merge", "Evidence"].includes(gate.title) ? `
 
 Before doing this step: run \`${command} --verify\`. Missing or stale evidence must be refreshed first.` : "") + `
 
-Finish: write the actual result and supporting paths to \`.athena/evidence/step-${index + 1}.md\`, then run \`${command} --complete --evidence .athena/evidence/step-${index + 1}.md\`. This records an agent attestation, not independent verification.` + (gate.cannotPass ? fillSlots(CANNOT_PASS_TEMPLATE, { cannotPass: gate.cannotPass }) : NO_GATE_TEXT_TEMPLATE);
+Finish: write the actual result and supporting paths to \`.athena/evidence/step-${index + 1}.md\`, then run \`${finish} --complete --evidence .athena/evidence/step-${index + 1}.md\`. This records an agent attestation, not independent verification.` + (gate.cannotPass ? fillSlots(CANNOT_PASS_TEMPLATE, { cannotPass: gate.cannotPass }) : NO_GATE_TEXT_TEMPLATE);
   }).join("\n\n");
 }
 function render(fill, workflowName, layout) {
@@ -21818,6 +21838,7 @@ function render(fill, workflowName, layout) {
       "Your Linear writes are In Progress in Explore, findings and evidence, and Done in Evidence."
     );
   }
+  const mergeCommand = `drisp build step ${gateTitles(fill).indexOf("Merge") + 1} --qa ${fill.qa}${selectionFlags(fill)}`;
   const workflowMd = fillSlots(template, {
     identifier: parsed.identifier,
     instructions: [
@@ -21830,7 +21851,11 @@ function render(fill, workflowName, layout) {
       )
     ].filter(Boolean).join("\n\n"),
     gates: renderStages(fill, checks, installCommand(fill, layout)),
-    mergeVerify: `\`drisp build step ${gateTitles(fill).indexOf("Merge") + 1} --qa ${fill.qa}${selectionFlags(fill)} --verify\``,
+    signOff: fill.merge === "you" ? fillSlots(MERGE_SIGN_OFF.section, {
+      signOffText: BUILD_STRINGS.mergeSignOff.replace("{sha}", "<sha>"),
+      signOffCommand: `${mergeCommand} --merge you --sign-off <sha>`
+    }) : "",
+    mergeVerify: `\`${mergeCommand}${mergeFlag(fill)} --verify\``,
     checksEvidence: checks.map((command) => `${command} \u2713`).join(" \xB7 "),
     shellCommands: checksText(shellCommands(fill))
   });
@@ -24282,6 +24307,7 @@ function collectMcpServersWithOptions(pluginDirs) {
 export {
   WAITING_ON_CHILDREN_STOP_REASON,
   AWAITING_APPROVAL_STOP_REASON,
+  budgetTokens,
   createSteerQueue,
   DEFAULT_PERMISSION_GRACE_MS,
   serializeRunMemory,
@@ -24321,6 +24347,7 @@ export {
   DESCRIPTION_TEMPLATE,
   QA_SECTIONS,
   WORKFLOW_MD_TEMPLATE,
+  MERGE_SIGN_OFF,
   STAGE_TEMPLATE,
   CANNOT_PASS_TEMPLATE,
   NO_GATE_TEXT_TEMPLATE,
@@ -24347,4 +24374,4 @@ export {
   compileWorkflowPlan,
   collectMcpServersWithOptions
 };
-//# sourceMappingURL=chunk-HZ6GRLOM.js.map
+//# sourceMappingURL=chunk-OYUBT6RS.js.map

package/dist/{chunk-D5VZT7M3.js → chunk-TBUUNMC6.js}

@@ -1,6 +1,6 @@
 import {
   runMachineRunners
-} from "./chunk-D246FR4I.js";
+} from "./chunk-HGMJ3YL2.js";
 
 // src/app/entry/runnerDaemon.ts
 if (process.argv.includes("--help")) {
@@ -13,4 +13,4 @@ if (process.argv.includes("--help")) {
     process.exitCode = 1;
   });
 }
-//# sourceMappingURL=chunk-D5VZT7M3.js.map
+//# sourceMappingURL=chunk-TBUUNMC6.js.map

package/dist/cli.js

@@ -142,7 +142,7 @@ import {
   visualPositionToOffset,
   wrapText,
   writeIdentityOnce
-} from "./chunk-D246FR4I.js";
+} from "./chunk-HGMJ3YL2.js";
 import {
   generateId as generateId2
 } from "./chunk-PQIB66SG.js";
@@ -161,6 +161,7 @@ import {
   DESCRIPTION_TEMPLATE,
   GATES,
   LAYOUT_MARKERS,
+  MERGE_SIGN_OFF,
   NO_GATE_TEXT_TEMPLATE,
   ORCHESTRATOR_LIMITS,
   QA_SECTIONS,
@@ -200,7 +201,7 @@ import {
   workflowRegistryDir,
   writeGlobalConfig,
   writeProjectConfig
-} from "./chunk-HZ6GRLOM.js";
+} from "./chunk-OYUBT6RS.js";
 import {
   __toESM
 } from "./chunk-G3PMV62Z.js";
@@ -208,10 +209,10 @@ import {
 // src/app/entry/cli.tsx
 import { render } from "ink";
 import meow from "meow";
-import fs11 from "fs";
+import fs12 from "fs";
 import { createRequire } from "module";
 import os5 from "os";
-import path11 from "path";
+import path12 from "path";
 import { fileURLToPath } from "url";
 
 // src/app/shell/sessionUiState.ts
@@ -5330,14 +5331,14 @@ function extractWebSearch(_input, response) {
   return { type: "text", content: extractTextContent(response), maxLines: 10 };
 }
 function extractNotebookEdit(input, _response) {
-  const path12 = typeof input["notebook_path"] === "string" ? input["notebook_path"] : "";
+  const path13 = typeof input["notebook_path"] === "string" ? input["notebook_path"] : "";
   const mode = typeof input["edit_mode"] === "string" ? input["edit_mode"] : "replace";
   const source = typeof input["new_source"] === "string" ? input["new_source"] : "";
-  if (!source) return { type: "text", content: `${mode} cell in ${path12}` };
+  if (!source) return { type: "text", content: `${mode} cell in ${path13}` };
   return {
     type: "code",
     content: source,
-    language: detectLanguage(path12),
+    language: detectLanguage(path13),
     maxLines: 10
   };
 }
@@ -5863,10 +5864,10 @@ function extractToolSubject(toolName, toolInput) {
       const parts = [];
       const pattern = str(input, "pattern");
       const glob = str(input, "glob");
-      const path12 = str(input, "path");
+      const path13 = str(input, "path");
       if (pattern) parts.push(`"${pattern}"`);
       if (glob) parts.push(glob);
-      if (path12) parts.push(`in ${path12}`);
+      if (path13) parts.push(`in ${path13}`);
       return parts.length > 0 ? parts.join("  ") : void 0;
     }
     case "Skill":
@@ -13097,7 +13098,7 @@ var thisMachine = (installationId) => ({
   os: `${platform()} ${release()}`.slice(0, 64),
   softwareVersion: runnerSoftwareVersion
 });
-var post = (origin, path12, body) => fetch(new URL(path12, origin), {
+var post = (origin, path13, body) => fetch(new URL(path13, origin), {
   method: "POST",
   headers: { "Content-Type": "application/json" },
   body: JSON.stringify(body)
@@ -13116,8 +13117,8 @@ async function alreadyConnected(existing, { forTeam, ownIdentity }) {
   const problem = own ? await credentialAccepted(own.config) ? void 0 : "lapsed" : forTeam(existing.orgId).length ? "other_runner" : "missing";
   const runner = { orgId: existing.orgId, runnerId: existing.runnerId, name: existing.name };
   if (own && problem === void 0) return { status: "already_connected", ...runner, path: own.path };
-  const path12 = (own ?? forTeam(existing.orgId)[0])?.path;
-  return { status: "identity_unusable", ...runner, problem, ...path12 ? { path: path12 } : {} };
+  const path13 = (own ?? forTeam(existing.orgId)[0])?.path;
+  return { status: "identity_unusable", ...runner, problem, ...path13 ? { path: path13 } : {} };
 }
 async function connectWithCode({
   code,
@@ -13189,20 +13190,20 @@ async function saveIdentity(origin, credential, { single, forTeam }, directory)
     name: credential.name
   });
   const replaced = [];
-  for (const { path: path13 } of forTeam(credential.orgId)) {
-    const aside = `${path13}.replaced-${Date.now()}`;
-    await rename(path13, aside);
+  for (const { path: path14 } of forTeam(credential.orgId)) {
+    const aside = `${path14}.replaced-${Date.now()}`;
+    await rename(path14, aside);
     replaced.push(aside);
   }
-  const path12 = single ?? teamIdentityPath(origin, credential.orgId, directory);
+  const path13 = single ?? teamIdentityPath(origin, credential.orgId, directory);
   try {
-    await writeIdentityOnce(path12, JSON.stringify(config, null, 2) + "\n");
+    await writeIdentityOnce(path13, JSON.stringify(config, null, 2) + "\n");
   } catch (error) {
     if (error.code === "EEXIST")
-      throw new Error(`Another Connect wrote a Runner identity for this Team at ${path12} meanwhile; it was left unchanged.`);
+      throw new Error(`Another Connect wrote a Runner identity for this Team at ${path13} meanwhile; it was left unchanged.`);
     throw error;
   }
-  return { status: "connected", config, path: path12, replaced };
+  return { status: "connected", config, path: path13, replaced };
 }
 function pathSegment(value) {
   const segment = encodeURIComponent(value);
@@ -13242,7 +13243,7 @@ async function refuseExisting(target) {
   throw new Error(`This machine already has a Runner${name ? ` (${name})` : ""} configured at ${target}.`);
 }
 async function disconnectRunner({
-  identity: { path: path12, config },
+  identity: { path: path13, config },
   serviceManager,
   othersRemain
 }) {
@@ -13275,7 +13276,7 @@ async function disconnectRunner({
     await restore();
     throw new Error(`The Hub refused to disconnect ${name} (${body.error ?? response.status}); it is still connected.`);
   }
-  await forgetRunner(path12);
+  await forgetRunner(path13);
   if (othersRemain) await restore();
   else await serviceManager?.remove();
   return result;
@@ -13428,18 +13429,18 @@ async function runRunnerCommandV2(input, options = {}) {
             `This machine is already connected to this Team as ${outcome.name}, but ${why}. ` + (code ? `The code was not used: connect a new Runner in its place with ${retry}. ` : `Connect a new Runner in its place with a Connect code from Settings \u2192 Runners: ${retry}. `) + `The old ${outcome.name} stays listed in Settings \u2192 Runners, offline.`
           );
         }
-        const { config, path: path12, replaced } = outcome;
+        const { config, path: path13, replaced } = outcome;
         for (const aside of replaced)
           process.stdout.write(
             `The Hub no longer recognised this machine's earlier identity for this Team; it was moved aside to ${aside}.
 `
           );
         process.stdout.write(
-          `Connected as ${config.name ?? config.runnerId}. Identity saved to ${path12}.
+          `Connected as ${config.name ?? config.runnerId}. Identity saved to ${path13}.
 `
         );
         if (services) {
-          const service = await ensureService(services, config, path12);
+          const service = await ensureService(services, config, path13);
           process.stdout.write(`${serviceStarted(service)}
 `);
           return 0;
@@ -13448,7 +13449,7 @@ async function runRunnerCommandV2(input, options = {}) {
           process.stdout.write(
             "No launchd or systemd here to run the Runner as a background service; running it in the foreground instead.\n"
           );
-        await runConfiguredRunner(path12, options.signal);
+        await runConfiguredRunner(path13, options.signal);
         return 0;
       }
       case "disconnect": {
@@ -13519,9 +13520,9 @@ async function runRunnerCommandV2(input, options = {}) {
               configured: true,
               // One entry per Team this machine serves; credentials are never printed.
               teams: identities.map(
-                ({ path: path12, config: { token: _token, ...config } }) => ({
+                ({ path: path13, config: { token: _token, ...config } }) => ({
                   ...config,
-                  path: path12
+                  path: path13
                 })
               ),
               service: service ? {
@@ -13677,7 +13678,9 @@ function computeTemplateVersion() {
     JSON.stringify(QA_SECTIONS),
     JSON.stringify(GATES),
     JSON.stringify(RENDERER_RULES),
-    JSON.stringify(LAYOUT_MARKERS)
+    JSON.stringify(LAYOUT_MARKERS),
+    JSON.stringify(MERGE_SIGN_OFF),
+    BUILD_STRINGS.mergeSignOff
   ];
   const hash = createHash("sha256");
   for (const part of parts) hash.update(`${part.length}:${part}`);
@@ -13782,7 +13785,8 @@ function runBuildPlan(deps) {
         fills: result.fills.map((fill) => ({
           ...fill,
           path: fillPath(fill.identifier)
-        }))
+        })),
+        ...result.reason ? { reason: result.reason } : {}
       };
     const host = deps.hostCapabilities();
     for (const workflow of result.workflows) {
@@ -13866,9 +13870,9 @@ var DrispClient = class _DrispClient {
     if (!match) throw new Error("invalid_hub_url");
     return new _DrispClient(url.origin, decodeURIComponent(match[1]), async () => token);
   }
-  async request(path12, body) {
+  async request(path13, body) {
     const response = await fetch(
-      `${this.baseUrl}/v2/orgs/${encodeURIComponent(this.orgId)}${path12}`,
+      `${this.baseUrl}/v2/orgs/${encodeURIComponent(this.orgId)}${path13}`,
       {
         method: body === void 0 ? "GET" : "POST",
         headers: {
@@ -14776,6 +14780,15 @@ var receiptSchema = external_exports.strictObject({
   evidence: external_exports.string().min(1).max(16e3),
   kind: external_exports.literal("agent-attestation")
 });
+var COMMIT_SHA = /^[0-9a-f]{40}$/;
+var gateEvidenceSchema = external_exports.strictObject({
+  receipts: external_exports.array(receiptSchema).max(100),
+  /**
+   * The Sign-off on the Merge step (`merge: you`): the head commit the child attests the member signed off on in
+   * its Thread. Like the receipts, an agent attestation.
+   */
+  signOff: external_exports.strictObject({ sha: external_exports.string().regex(COMMIT_SHA) }).optional()
+});
 var QA_KINDS = fillSchema.shape.qa.options;
 function runBuildStep(input) {
   const directory = requireEnv(input.env, "DRISP_RUN_ARTIFACTS");
@@ -14805,19 +14818,57 @@ function runBuildStep(input) {
     throw new BuildUsageError(
       `Step must be a whole number between 1 and ${titles.length}, not "${input.n ?? ""}".`
     );
+  if (input.merge !== void 0 && input.merge !== "agent" && input.merge !== "you")
+    throw new BuildUsageError("--merge must be agent or you.");
+  const mergeStep = titles.indexOf("Merge") + 1;
+  const signsOff = input.merge === "you" && index === mergeStep;
+  if (input.signOff !== void 0) {
+    if (input.merge !== "you")
+      throw new BuildUsageError(
+        "--sign-off needs --merge you: agents merge this pull request."
+      );
+    if (mergeStep === 0)
+      throw new BuildUsageError(
+        "--sign-off is for the Merge step, and this workflow has none."
+      );
+    if (!signsOff)
+      throw new BuildUsageError(
+        `--sign-off is for the Merge step (${mergeStep}), not step ${index}.`
+      );
+    if (!COMMIT_SHA.test(input.signOff))
+      throw new BuildUsageError(
+        "--sign-off needs the full 40-character commit SHA the member signed off on."
+      );
+  }
   if (!fs8.statSync(directory, { throwIfNoEntry: false })?.isDirectory())
     throw new BuildUsageError(
       `DRISP_RUN_ARTIFACTS (${directory}) is not a directory.`
     );
   const receiptsPath = path8.join(directory, "gate_evidence.json");
   let receipts = [];
+  let signOff;
   if (fs8.existsSync(receiptsPath)) {
     try {
-      receipts = external_exports.strictObject({ receipts: external_exports.array(receiptSchema).max(100) }).parse(JSON.parse(fs8.readFileSync(receiptsPath, "utf8"))).receipts;
+      ({ receipts, signOff } = gateEvidenceSchema.parse(
+        JSON.parse(fs8.readFileSync(receiptsPath, "utf8"))
+      ));
     } catch {
       throw new BuildUsageError("Gate evidence is invalid.");
     }
   }
+  const save = () => fs8.writeFileSync(
+    receiptsPath,
+    JSON.stringify({ receipts, ...signOff ? { signOff } : {} }) + "\n"
+  );
+  const head = signsOff && (input.signOff || input.verify) ? headCommit(input.cwd ?? process.cwd()) : "";
+  if (input.signOff !== void 0) {
+    if (input.signOff !== head)
+      throw new BuildUsageError(
+        `The Sign-off names ${input.signOff}, but HEAD is ${head}. ${askForSignOff(head)}`
+      );
+    signOff = { sha: head };
+    save();
+  }
   const revision = receipts.length || input.complete || input.verify ? workRevision(input.cwd ?? process.cwd()) : "";
   const fresh = (receipt) => ["Explore", "Pull request", "Evidence", "Merge"].includes(receipt.title) || receipt.revision === revision;
   if (input.verify || input.complete && titles[index - 1] === "Evidence") {
@@ -14827,6 +14878,20 @@ function runBuildStep(input) {
         `Missing or stale evidence: ${missing.join(", ")}. Repeat those steps on the current revision.`
       );
   }
+  if (signsOff && input.verify) {
+    if (!signOff)
+      throw new BuildUsageError(
+        `No Sign-off on HEAD (${head}) yet. ${askForSignOff(head)}`
+      );
+    if (signOff.sha !== head)
+      throw new BuildUsageError(
+        `The Sign-off names ${signOff.sha}, but HEAD is now ${head}. ${askForSignOff(head)}`
+      );
+  }
+  if (signsOff && input.complete && !signOff)
+    throw new BuildUsageError(
+      "No Sign-off was recorded: verify and merge only after the member signs off on HEAD."
+    );
   if (input.complete) {
     if (!input.evidence)
       throw new BuildUsageError(
@@ -14850,7 +14915,7 @@ function runBuildStep(input) {
       evidence,
       kind: "agent-attestation"
     });
-    fs8.writeFileSync(receiptsPath, JSON.stringify({ receipts }) + "\n");
+    save();
   }
   const artifact = {
     index,
@@ -14867,12 +14932,23 @@ function runBuildStep(input) {
   );
   return artifact;
 }
+function askForSignOff(sha) {
+  return `Ask the member: end the Turn with <!-- NEEDS_HUMAN: ${BUILD_STRINGS.mergeSignOff.replace("{sha}", sha)} -->`;
+}
+var gitIn = (cwd) => (...args) => execFileSync("git", args, {
+  cwd,
+  encoding: "utf8",
+  stdio: ["ignore", "pipe", "pipe"]
+});
+function headCommit(cwd) {
+  try {
+    return gitIn(cwd)("rev-parse", "HEAD").trim();
+  } catch {
+    throw new BuildUsageError("A Sign-off must be recorded in a git worktree.");
+  }
+}
 function workRevision(cwd) {
-  const git2 = (...args) => execFileSync("git", args, {
-    cwd,
-    encoding: "utf8",
-    stdio: ["ignore", "pipe", "pipe"]
-  });
+  const git2 = gitIn(cwd);
   try {
     const hash = createHash2("sha256").update(git2("rev-parse", "HEAD")).update(git2("diff", "HEAD", "--", ".", ":!.athena/evidence"));
     for (const name of git2("ls-files", "--others", "--exclude-standard", "-z").split("\0").filter(Boolean).sort()) {
@@ -14939,22 +15015,87 @@ function runBuildMerged(input) {
   return parsed.data;
 }
 
+// src/core/build/check.ts
+import { spawnSync } from "child_process";
+import fs10 from "fs";
+import path10 from "path";
+var checkRecordSchema = external_exports.strictObject({
+  name: external_exports.string().trim().min(1).max(64),
+  outcome: external_exports.enum(["passed", "failed"])
+});
+var NAME_PATTERN = /^[^\p{Cc}]+$/u;
+var MAX_RECORDS = 50;
+function spawnCheck(command, cwd, onOutput) {
+  const [program, ...args] = command;
+  const result = spawnSync(program, args, {
+    cwd,
+    stdio: onOutput ? ["inherit", "pipe", "inherit"] : "inherit",
+    maxBuffer: 64 * 1024 * 1024
+  });
+  if (onOutput) onOutput(result.stdout);
+  if (result.error) return 127;
+  return result.status ?? 1;
+}
+function readRecords(file) {
+  try {
+    const parsed = external_exports.array(checkRecordSchema).safeParse(JSON.parse(fs10.readFileSync(file, "utf8")));
+    return parsed.success ? parsed.data : [];
+  } catch {
+    return [];
+  }
+}
+function runBuildCheck(input) {
+  const directory = requireEnv(input.env, "DRISP_RUN_ARTIFACTS");
+  const name = (input.name ?? "").trim();
+  if (!name || name.length > 64 || !NAME_PATTERN.test(name))
+    throw new BuildUsageError(
+      "A check needs a name of 1 to 64 characters on one line."
+    );
+  if (input.command.length === 0 || input.command.some((token) => !token))
+    throw new BuildUsageError("A check needs a command after `--`.");
+  if (!fs10.statSync(directory, { throwIfNoEntry: false })?.isDirectory())
+    throw new BuildUsageError(
+      `DRISP_RUN_ARTIFACTS (${directory}) is not a directory.`
+    );
+  const code = input.run(input.command, input.cwd);
+  const file = path10.join(directory, "checks.json");
+  const record = { name, outcome: code === 0 ? "passed" : "failed" };
+  const records = readRecords(file);
+  const at = records.findIndex((existing) => existing.name === name);
+  if (at >= 0) records[at] = record;
+  else records.push(record);
+  const temporary = `${file}.${process.pid}.tmp`;
+  fs10.writeFileSync(
+    temporary,
+    `${JSON.stringify(records.slice(-MAX_RECORDS))}
+`
+  );
+  fs10.renameSync(temporary, file);
+  return code;
+}
+
 // src/app/entry/buildCommand.ts
 var USAGE3 = `Usage: drisp build plan --input <path>
        drisp build tick --input <path> [--rebase-failed <IDENTIFIER>]...
        drisp build checks
        drisp build step <n> [--qa none|web|macos|both] [--profile implementation|documentation|investigation]
-       [--test-first true|false] [--review true|false] [--complete --evidence <file>] [--verify]
+       [--test-first true|false] [--review true|false] [--merge agent|you] [--sign-off <sha>]
+       [--complete --evidence <file>] [--verify]
        drisp build merged [<pr url or number>]
+       drisp build check <name> -- <command>
 plan and tick run inside an Orchestrator Run (DRISP_RUN_ID, DRISP_RUNNER_ID and DRISP_RUN_ARTIFACTS set; tick also
 DRISP_RUN_TOKEN and DRISP_HUB_URL). DRISP_BUILD_PLAN_INPUT=<path> stands in for plan's --input, with
 fills/<IDENTIFIER>.json beside it. checks runs in a child's worktree: the merge gate's verdict on HEAD's GitHub runs.
 step runs in any Run with DRISP_RUN_ARTIFACTS set: it writes the step artifact {index, title, total} for gate <n> of the
 selected build-child profile (QA is a gate unless --qa none) and refuses an index outside the list.
 --complete --evidence <file> records an agent attestation bound to the source revision; --verify requires fresh
-receipts for all preceding steps. Keep evidence files under .athena/evidence/.
+receipts for all preceding steps. Keep evidence files under .athena/evidence/. With --merge you, the Merge step's
+--verify also needs the member's Sign-off on HEAD (--complete one at all), which --sign-off <sha> records for that full
+SHA only.
 merged runs in a child's worktree after its pull request merged: it writes the pull_request artifact
-{url, number, sha, mergedAt} and refuses a pull request that is not merged.`;
+{url, number, sha, mergedAt} and refuses a pull request that is not merged.
+check runs <command>, passes its output through, exits with its code and records {name, outcome} in the checks run artifact
+(DRISP_RUN_ARTIFACTS set); it refuses a missing name or command before running anything.`;
 function githubPullRequests(folder, branch) {
   const output = execFileSync2(
     "gh",
@@ -15072,6 +15213,16 @@ async function runBuildCommand(input) {
       case "checks":
         output = runBuildChecks(input.cwd, input.checks ?? defaultChecks);
         break;
+      case "check": {
+        const code = runBuildCheck({
+          env: env2,
+          cwd: input.cwd,
+          name: input.positional?.[0],
+          command: input.command ?? [],
+          run: input.checkRunner ?? spawnCheck
+        });
+        return code;
+      }
       case "merged":
         output = runBuildMerged({
           env: env2,
@@ -15088,6 +15239,8 @@ async function runBuildCommand(input) {
           profile: input.flags.profile,
           testFirst: input.flags.testFirst,
           review: input.flags.review,
+          merge: input.flags.merge,
+          signOff: input.flags.signOff,
           complete: input.flags.complete,
           verify: input.flags.verify,
           evidence: input.flags.evidence,
@@ -15116,9 +15269,9 @@ import process7 from "process";
 
 // src/harnesses/claude/system/doctorEnvironment.ts
 import { execFileSync as execFileSync3 } from "child_process";
-import * as fs10 from "fs";
+import * as fs11 from "fs";
 import * as os4 from "os";
-import * as path10 from "path";
+import * as path11 from "path";
 var MANAGED_POLICY_KEYS = [
   "forceLoginMethod",
   "forceLoginOrgUUID",
@@ -15222,8 +15375,8 @@ function collectEnvironment(options = {}) {
   const detectVersion = options.detectClaudeVersionFn ?? detectClaudeVersion;
   const runAuthStatus = options.runClaudeAuthStatusFn ?? runClaudeAuthStatus;
   const resolveForwarder = options.resolveHookForwarderCommandFn ?? resolveHookForwarderCommand;
-  const statFn = options.statFn ?? ((p) => fs10.statSync(p));
-  const readFileFn = options.readFileFn ?? ((p) => fs10.readFileSync(p, "utf8"));
+  const statFn = options.statFn ?? ((p) => fs11.statSync(p));
+  const readFileFn = options.readFileFn ?? ((p) => fs11.readFileSync(p, "utf8"));
   const settingsPaths = resolveClaudeSettingsSurfacePaths(
     homeDir,
     cwd,
@@ -15268,7 +15421,7 @@ function collectEnvironment(options = {}) {
   });
   let globalConfigPresent = false;
   try {
-    statFn(path10.join(homeDir, ".claude.json"));
+    statFn(path11.join(homeDir, ".claude.json"));
     globalConfigPresent = true;
   } catch {
     globalConfigPresent = false;
@@ -15748,13 +15901,13 @@ function runRunsCommand(input) {
 // src/app/entry/cli.tsx
 import { jsx as jsx24 } from "react/jsx-runtime";
 function resolvePackageJsonPath(entryUrl) {
-  let currentDir = path11.dirname(fileURLToPath(entryUrl));
+  let currentDir = path12.dirname(fileURLToPath(entryUrl));
   for (; ; ) {
-    const candidatePath = path11.join(currentDir, "package.json");
-    if (fs11.existsSync(candidatePath)) {
+    const candidatePath = path12.join(currentDir, "package.json");
+    if (fs12.existsSync(candidatePath)) {
       return candidatePath;
     }
-    const parentDir = path11.dirname(currentDir);
+    const parentDir = path12.dirname(currentDir);
     if (parentDir === currentDir) {
       throw new Error("Could not locate package.json for CLI metadata.");
     }
@@ -15926,7 +16079,8 @@ var cli = meow(
 			build plan --input <path>  Plan a Build inside an Orchestrator Run (prints one JSON object)
 			build tick --input <path>  Run one step of a started Build (prints the next action; [--rebase-failed <ID>]...)
 			build checks               The merge gate's verdict on HEAD's GitHub runs (in a child's worktree)
-			build step <n>             Report the Run's current step: writes the step run artifact ([--qa none|web|macos|both], --profile, --complete --evidence, --verify)
+			build step <n>             Report the Run's current step: writes the step run artifact ([--qa none|web|macos|both], --profile, --merge you, --sign-off <sha>, --complete --evidence, --verify)
+			build check <name> -- <cmd> Run a command and record its outcome: writes the checks run artifact
 			build merged               Record the merged pull request: writes the pull_request run artifact
 			telemetry [action]    Manage anonymous telemetry (enable/disable/status)
 			doctor                Diagnose Claude headless setup (use with --harness=claude)
@@ -16068,6 +16222,8 @@ var cli = meow(
       profile: { type: "string" },
       testFirst: { type: "string" },
       review: { type: "string" },
+      merge: { type: "string" },
+      signOff: { type: "string" },
       complete: { type: "boolean" },
       verify: { type: "boolean" },
       evidence: { type: "string" },
@@ -16113,7 +16269,7 @@ var cli = meow(
   }
 );
 async function main() {
-  const projectDir = path11.resolve(cli.flags.projectDir);
+  const projectDir = path12.resolve(cli.flags.projectDir);
   const [command, ...commandArgs] = cli.input;
   const isRunCommand = command === "run" || command === "exec";
   if (command && !KNOWN_COMMANDS.has(command)) {
@@ -16167,7 +16323,7 @@ Available commands: ${[...KNOWN_COMMANDS].join(", ")}`
         await exitWith(1);
         return;
       }
-      const { default: WorkflowInstallWizard } = await import("./WorkflowInstallWizard-VVEEJW25.js");
+      const { default: WorkflowInstallWizard } = await import("./WorkflowInstallWizard-IOJD3YOA.js");
       const { waitUntilExit } = render(
         /* @__PURE__ */ jsx24(
           WorkflowInstallWizard,
@@ -16246,16 +16402,23 @@ Available commands: ${[...KNOWN_COMMANDS].join(", ")}`
     return;
   }
   if (command === "build") {
-    const [subcommand = "", ...buildArgs] = commandArgs;
+    const rawArgs = process.argv.slice(2);
+    const dashIdx = rawArgs.indexOf("--");
+    const checkTokens = dashIdx >= 0 ? rawArgs.slice(dashIdx + 1) : [];
+    const cleanArgs = checkTokens.length > 0 ? commandArgs.slice(0, commandArgs.length - checkTokens.length) : commandArgs;
+    const [subcommand = "", ...buildArgs] = cleanArgs;
     await exitWith(
       await runBuildCommand({
         subcommand,
         positional: buildArgs,
+        command: checkTokens,
         flags: {
           ...typeof cli.flags.qa === "string" ? { qa: cli.flags.qa } : {},
           profile: cli.flags.profile,
           testFirst: cli.flags.testFirst,
           review: cli.flags.review,
+          merge: cli.flags.merge,
+          signOff: cli.flags.signOff,
           complete: cli.flags.complete,
           verify: cli.flags.verify,
           evidence: cli.flags.evidence,
@@ -16340,8 +16503,8 @@ Available commands: ${[...KNOWN_COMMANDS].join(", ")}`
   const showSetup = isRunCommand ? false : shouldShowSetup({
     cliInput: cli.input,
     setupComplete: globalConfig.setupComplete,
-    globalConfigExists: fs11.existsSync(
-      path11.join(os5.homedir(), ".config", "athena", "config.json")
+    globalConfigExists: fs12.existsSync(
+      path12.join(os5.homedir(), ".config", "athena", "config.json")
     )
   });
   let runtimeConfig;

package/dist/dashboard-daemon.js

@@ -1,6 +1,6 @@
-import "./chunk-D5VZT7M3.js";
-import "./chunk-D246FR4I.js";
+import "./chunk-TBUUNMC6.js";
+import "./chunk-HGMJ3YL2.js";
 import "./chunk-PQIB66SG.js";
-import "./chunk-HZ6GRLOM.js";
+import "./chunk-OYUBT6RS.js";
 import "./chunk-G3PMV62Z.js";
 //# sourceMappingURL=dashboard-daemon.js.map

package/dist/runner.js

@@ -1,6 +1,6 @@
-import "./chunk-D5VZT7M3.js";
-import "./chunk-D246FR4I.js";
+import "./chunk-TBUUNMC6.js";
+import "./chunk-HGMJ3YL2.js";
 import "./chunk-PQIB66SG.js";
-import "./chunk-HZ6GRLOM.js";
+import "./chunk-OYUBT6RS.js";
 import "./chunk-G3PMV62Z.js";
 //# sourceMappingURL=runner.js.map

package/package.json

@@ -17,7 +17,7 @@
 		"hooks",
 		"dashboard"
 	],
-	"version": "0.7.7",
+	"version": "0.7.8",
 	"license": "MIT",
 	"bin": {
 		"athena": "dist/cli.js",