@higherdev/cli 0.15.0 → 0.15.3

package/README.md

@@ -26,7 +26,8 @@ workspace-map config shapes are migrated automatically when they are read.
 | `hd status` | Show workspace, ticket, run, and decision status |
 | `hd ticket list` | List tickets |
 | `hd ticket show KEY` | Show one ticket |
-| `hd ticket new --title TITLE [--acceptance TEXT] [options]` | Create a ticket |
+| `hd ticket new [PATH.md]` | Create a ticket from the guided form or a Markdown spec |
+| `hd ticket new --title TITLE [--acceptance TEXT] [options]` | Create a ticket non-interactively |
 | `hd ticket queue KEY` | Queue a complete ticket now |
 | `hd ticket cancel KEY` | Cancel a ticket |
 | `hd epic new PATH [--title TITLE]` | Create an epic from a Markdown spec |
@@ -39,6 +40,7 @@ workspace-map config shapes are migrated automatically when they are read.
 | `hd workspace new --name NAME --repo OWNER/NAME [options]` | Preflight GitHub, wire the runner, and create a paused workspace |
 | `hd workspace set [options]` | Update settings; max turns uses `--max-turns KIND=N[,KIND=N...]` |
 | `hd workspace rotate-key` | Rotate the shared API key and save it locally |
+| `hd workspace grant-runner-access [--runner-user USER]` | Grant and confirm write-or-better access for the workspace runner |
 | `hd agents` | List agents |
 | `hd agents add ROLE --provider P --model M [options]` | Add an agent |
 | `hd agents rm ROLE\|ID` | Remove an unambiguous agent |
@@ -65,11 +67,24 @@ elsewhere. If the runner environment or service unit already exists, inspect the
 pass `--force` only when replacing that host configuration is intentional.
 
 `hd workspace new` uses the operator's authenticated `gh`, defaults to the repository's real default
-branch, bootstraps an empty repository unless `--no-bootstrap` is set, and invites `mel-ilotus` as an admin unless
-`--runner-user USER` overrides it. On a terminal, missing name or repo flags start a guided wizard. If
+branch, bootstraps an empty repository unless `--no-bootstrap` is set, and invites `mel-ilotus` with push
+access for user-owned repositories or admin for organization-owned repositories unless `--runner-user USER`
+overrides it. On a terminal, missing name or repo flags start a guided wizard. If
 the repository is missing, approve private creation interactively, use `--create` to force it, or
 `--no-create` to fail. Fully flagged calls remain non-interactive for scripts and Mel.
 
+On a terminal, `hd ticket new` opens a guided form. It defaults the area from the newest ticket and
+offers the enabled builder providers. Body and acceptance accept Markdown lines until a blank line,
+then the form confirms creation and optionally queues the new ticket. `hd ticket new PATH.md` reads
+the first `#` heading as the title, optional `area` and `provider` front matter, and a
+`## Acceptance` section as the acceptance criteria. Fully flagged ticket creation skips all prompts.
+
+For workspaces created before runner access was wired automatically, run
+`hd workspace grant-runner-access`. It uses the operator's authenticated `gh` account, defaults to
+`mel-ilotus`, grants push on user-owned repositories or admin on organization-owned repositories, and
+confirms write-or-better access through GitHub's collaborator permission endpoint. The old
+`grant-runner-admin` name remains an alias.
+
 `hd env set` and `hd env rm` also update GitHub Actions secrets on the current workspace repository.
 They require the operator's authenticated `gh` account to have repository admin permission. Secret values are sent
 to `gh` through stdin and are never printed.
@@ -77,8 +92,8 @@ to `gh` through stdin and are never printed.
 Use `hd host env set SUPABASE_ACCESS_TOKEN=... SUPABASE_ORG_ID=...` once to let the runner provision
 Supabase for workspaces assigned to that host. Host values are never passed to builder processes.
 
-Inside the TUI, use `/board`, `/inbox`, `/ticket`, `/queue`, `/cancel`, `/epic new`,
-`/epic approve`, `/epics`, `/architect` (or `/plan`), `/decide`, `/agents add`, `/agents rm`, `/env`, `/settings`, `/workspace`,
-`/workspace new`, `/workspace set`, `/workspace rotate-key`, `/feed`,
+Inside the TUI, use `/board`, `/inbox`, `/ticket`, `/ticket new [PATH.md]`, `/queue`, `/cancel`, `/msg`, `/logs`, `/epic new`,
+`/epic approve`, `/epic rm`, `/epics`, `/architect` (or `/plan`), `/decide`, `/agents add`, `/agents rm`, `/env`, `/settings`, `/workspace`,
+`/workspace new`, `/workspace set`, `/workspace rotate-key`, `/workspace grant-runner-access`, `/feed`,
 `/on`, `/off`, `/orchestrator`, `/refresh`, `/help`, or `/exit`. The display refreshes from
 the HDX API every five seconds.

package/dist/index.js

@@ -1,14 +1,15 @@
 #!/usr/bin/env node
 import { realpathSync } from "node:fs";
 import { pathToFileURL } from "node:url";
-import { approveEpic, answerDecision, cancelTicket, createAgent, createEpic, createTicket, deleteAgent, deleteEpic, getStatus, listAgents, listEpics, listHostEnv, listWorkspaceEnv, listTicketEvents, listTickets, listWorkspaces, postMessage, queueTicket, removeWorkspaceEnv, removeHostEnv, setPaused, setWorkspaceEnv, setHostEnv, showTicket, updateAgent, updateCaps, } from "./api.js";
+import { approveEpic, answerDecision, cancelTicket, createAgent, createEpic, deleteAgent, deleteEpic, getStatus, listAgents, listEpics, listHostEnv, listWorkspaceEnv, listTicketEvents, listTickets, listWorkspaces, postMessage, queueTicket, removeWorkspaceEnv, removeHostEnv, setPaused, setWorkspaceEnv, setHostEnv, showTicket, updateAgent, updateCaps, } from "./api.js";
 import { initHost, parseHostFlags } from "./host.js";
 import { login, parseLoginFlags } from "./login.js";
 import { loadConfig } from "./config.js";
 import { epicProgressRows, readEpicSpec } from "./epics.js";
 import { banner, c, statusChip, table, truncate, usage } from "./out.js";
-import { WORKSPACE_USAGE, workspaceNew, workspaceRotateKey, workspaceSet, workspaceUse } from "./workspace-commands.js";
-import { defaultGh, requireAdminRepo } from "./workspace-preflight.js";
+import { ticketNew } from "./ticket-commands.js";
+import { WORKSPACE_USAGE, workspaceGrantRunnerAccess, workspaceNew, workspaceRotateKey, workspaceSet, workspaceUse } from "./workspace-commands.js";
+import { defaultGh, hasWriteRepoPermission, HDX_RUNNER_GH_USER, requireAdminRepo, runnerRepoPermission } from "./workspace-preflight.js";
 function fail(message) {
     console.error(message);
     process.exit(1);
@@ -70,7 +71,7 @@ async function cmdStatus() {
         console.log(`\n${c.yellow(String(data.decisions.length))} open decision${data.decisions.length === 1 ? "" : "s"}`);
     }
 }
-async function cmdTicket(argv) {
+async function cmdTicket(argv, deps = {}) {
     const [action, ...rest] = argv;
     if (action === "list") {
         const data = await listTickets();
@@ -98,18 +99,8 @@ async function cmdTicket(argv) {
         return;
     }
     if (action === "new") {
-        const { opts } = flags(rest);
-        if (!opts.title)
-            fail("usage: hd ticket new --title TITLE [--body TEXT] [--acceptance TEXT] [--area TAG] [--provider NAME] [--epic ID]");
-        const { ticket } = await createTicket({
-            title: opts.title,
-            body_md: opts.body,
-            acceptance_md: opts.acceptance,
-            area: opts.area,
-            provider: opts.provider,
-            epic_id: opts.epic,
-        });
-        console.log(`${c.bold(ticket.key)}  ${statusChip(ticket.status)}  ${ticket.title}`);
+        const { ticket, queued } = await ticketNew(rest, deps);
+        console.log(`${c.bold(ticket.key)}  ${statusChip(queued ? "queued" : ticket.status)}  ${ticket.title}`);
         return;
     }
     if (action === "queue") {
@@ -258,6 +249,11 @@ async function cmdWorkspace(argv, deps = {}) {
         console.log(`${workspace.slug}  ${workspace.name}  ${workspace.repo}`);
         return;
     }
+    if (action === "grant-runner-access" || action === "grant-runner-admin") {
+        const result = await workspaceGrantRunnerAccess(rest, deps);
+        console.log(`${result.runnerUser}  ${result.permission}  ${result.repo}`);
+        return;
+    }
     if (action === "rotate-key") {
         if (rest.length)
             fail(WORKSPACE_USAGE);
@@ -269,6 +265,13 @@ async function cmdWorkspace(argv, deps = {}) {
     if (action === "set") {
         const workspace = await workspaceSet(rest);
         console.log(`${workspace.slug}  ${workspace.name}  ${workspace.repo}`);
+        try {
+            const permission = await runnerRepoPermission(workspace.repo, HDX_RUNNER_GH_USER, deps.gh ?? defaultGh);
+            if (!hasWriteRepoPermission(permission)) {
+                console.log(`hint: runner ${HDX_RUNNER_GH_USER} has ${permission} permission; run hd workspace grant-runner-access`);
+            }
+        }
+        catch { }
         return;
     }
     if (action !== "new")
@@ -468,7 +471,7 @@ export async function main(argv = process.argv.slice(2), deps = {}) {
             return;
         }
         if (cmd === "ticket") {
-            await cmdTicket(rest);
+            await cmdTicket(rest, deps);
             return;
         }
         if (cmd === "epic") {

package/dist/out.js

@@ -64,10 +64,10 @@ export function usage() {
     return [
         c.bold("Usage"),
         `  ${c.blue("hd status")}                         workspace overview`,
-        `  ${c.blue("hd ticket list | show | new | queue | cancel")} ticket operations`,
+        `  ${c.blue("hd ticket list | show | new [PATH] | queue | cancel")} ticket operations`,
         `  ${c.blue("hd epic new PATH | list | approve | rm")} epic operations`,
         `  ${c.blue("hd plan")}                           use /architect in the TUI`,
-        `  ${c.blue("hd workspace ls | use | new | set | rotate-key")} workspace operations`,
+        `  ${c.blue("hd workspace ls | use | new | set | rotate-key | grant-runner-access")} workspace operations`,
         `  ${c.blue("hd agents [add | rm | set]")}         manage agents`,
         `  ${c.blue("hd caps [set PROVIDER N]")}           provider concurrency`,
         `  ${c.blue("hd env ls | set | rm")}               workspace environment`,

package/dist/ticket-commands.js

@@ -0,0 +1,149 @@
+import { readFile } from "node:fs/promises";
+import { createTicket, listAgents, listTickets, queueTicket } from "./api.js";
+import { promptOnStdin } from "./prompt.js";
+export const TICKET_NEW_USAGE = "usage: hd ticket new [PATH.md] | --title TITLE [--body TEXT] [--acceptance TEXT] [--area TAG] [--provider NAME] [--epic ID]";
+function parseArgs(argv) {
+    const opts = {};
+    const bools = new Set();
+    const rest = [];
+    for (let i = 0; i < argv.length; i += 1) {
+        const arg = argv[i];
+        if (!arg.startsWith("--")) {
+            rest.push(arg);
+            continue;
+        }
+        const next = argv[i + 1];
+        if (next && !next.startsWith("--")) {
+            opts[arg.slice(2)] = next;
+            i += 1;
+        }
+        else
+            bools.add(arg.slice(2));
+    }
+    return { opts, bools, rest };
+}
+function metadata(lines) {
+    const copy = [...lines];
+    const values = {};
+    let indexes = [];
+    if (copy[0]?.trim() === "---") {
+        const end = copy.slice(1).findIndex((line) => line.trim() === "---");
+        if (end < 0)
+            throw new Error("Ticket spec front matter is not closed.");
+        indexes = Array.from({ length: end + 2 }, (_, index) => index);
+    }
+    else {
+        let at = 0;
+        while (copy[at]?.trim() === "")
+            at += 1;
+        while (/^(area|provider)\s*:/i.test(copy[at] ?? "")) {
+            indexes.push(at);
+            at += 1;
+        }
+    }
+    for (const index of indexes) {
+        const match = copy[index].match(/^(area|provider)\s*:\s*(.+?)\s*$/i);
+        if (match)
+            values[match[1].toLowerCase()] = match[2];
+        copy[index] = "";
+    }
+    return { ...values, lines: copy };
+}
+export function parseTicketSpec(markdown) {
+    const parsed = metadata(markdown.replace(/^\uFEFF/, "").replaceAll("\r\n", "\n").split("\n"));
+    const titleAt = parsed.lines.findIndex((line) => /^#\s+\S/.test(line));
+    if (titleAt < 0)
+        throw new Error("Ticket spec needs a # title heading.");
+    const title = parsed.lines[titleAt].replace(/^#\s+/, "").trim();
+    const acceptanceAt = parsed.lines.findIndex((line) => /^##\s+Acceptance\s*$/i.test(line.trim()));
+    let acceptanceEnd = parsed.lines.length;
+    if (acceptanceAt >= 0) {
+        const nextHeading = parsed.lines.slice(acceptanceAt + 1)
+            .findIndex((line) => /^#{1,2}\s+/.test(line));
+        if (nextHeading >= 0)
+            acceptanceEnd = acceptanceAt + 1 + nextHeading;
+    }
+    const body = parsed.lines.filter((_, index) => index !== titleAt
+        && index !== acceptanceAt && !(acceptanceAt >= 0 && index > acceptanceAt && index < acceptanceEnd));
+    const acceptance = acceptanceAt < 0 ? [] : parsed.lines.slice(acceptanceAt + 1, acceptanceEnd);
+    return {
+        title,
+        body_md: body.join("\n").trim(),
+        acceptance_md: acceptance.join("\n").trim(),
+        ...(parsed.area ? { area: parsed.area } : {}),
+        ...(parsed.provider ? { provider: parsed.provider } : {}),
+    };
+}
+export async function readTicketSpec(path) {
+    return parseTicketSpec(await readFile(path, "utf8"));
+}
+const yes = (answer) => !["n", "no"].includes(answer.trim().toLowerCase());
+const queueNow = (answer) => ["y", "yes"].includes(answer.trim().toLowerCase());
+async function lines(prompt, label) {
+    const result = [];
+    let question = `${label} (Markdown is fine; enter a blank line to finish):\n> `;
+    for (;;) {
+        const line = await prompt(question);
+        if (!line)
+            return result.join("\n").trim();
+        result.push(line);
+        question = "> ";
+    }
+}
+async function guided(deps, config) {
+    const prompt = deps.prompt ?? promptOnStdin;
+    const [{ tickets }, { agents }] = await Promise.all([
+        (deps.listTickets ?? listTickets)(config), (deps.listAgents ?? listAgents)(config),
+    ]);
+    const title = (await prompt("Title: ")).trim();
+    if (!title)
+        throw new Error("Title is required.");
+    const last = [...tickets].sort((a, b) => a.created_at.localeCompare(b.created_at)).at(-1);
+    const defaultArea = last?.area ?? "";
+    const area = (await prompt(`Area${defaultArea ? ` [${defaultArea}]` : ""}: `)).trim() || defaultArea;
+    const providers = [...new Set(agents.filter((agent) => agent.enabled && agent.role === "builder")
+            .map((agent) => agent.provider))];
+    if (!providers.length)
+        throw new Error("No enabled builder providers are available.");
+    const choice = (await prompt(`Provider (${providers.map((provider, index) => `${index + 1}=${provider}`).join(", ")}) [${providers[0]}]: `)).trim();
+    const provider = /^\d+$/.test(choice) ? providers[Number(choice) - 1] : choice || providers[0];
+    if (!provider || !providers.includes(provider))
+        throw new Error(`Choose a provider from: ${providers.join(", ")}.`);
+    return { title, area, provider, body_md: await lines(prompt, "Body"),
+        acceptance_md: await lines(prompt, "Acceptance") };
+}
+export async function ticketNew(argv, deps = {}) {
+    const { opts, bools, rest } = parseArgs(argv);
+    const hasFlags = Object.keys(opts).length > 0 || bools.size > 0;
+    const interactive = deps.isTTY ?? Boolean(process.stdin.isTTY && process.stdout.isTTY);
+    let fields;
+    let offerQueue = false;
+    if (hasFlags) {
+        if (rest.length || bools.size || !opts.title)
+            throw new Error(TICKET_NEW_USAGE);
+        fields = { title: opts.title, body_md: opts.body, acceptance_md: opts.acceptance,
+            area: opts.area, provider: opts.provider, epic_id: opts.epic };
+    }
+    else if (rest.length === 1) {
+        fields = await readTicketSpec(rest[0]);
+        offerQueue = interactive;
+    }
+    else if (rest.length === 0 && interactive) {
+        fields = await guided(deps, deps.config);
+        const summary = `${fields.title} | area ${fields.area || "-"} | provider ${fields.provider || "-"}`;
+        if (!yes(await (deps.prompt ?? promptOnStdin)(`${summary}\nCreate? [Y/n] `))) {
+            throw new Error("Ticket creation cancelled.");
+        }
+        offerQueue = true;
+    }
+    else {
+        throw new Error(TICKET_NEW_USAGE);
+    }
+    const created = await (deps.createTicket ?? createTicket)(fields, deps.config);
+    let queued = false;
+    if (offerQueue && queueNow(await (deps.prompt ?? promptOnStdin)("Queue it now? [y/N] "))) {
+        await (deps.queueTicket ?? queueTicket)(created.ticket.key, deps.config);
+        queued = true;
+    }
+    return { ticket: created.ticket, queued };
+}

package/dist/tui/App.js

@@ -4,7 +4,8 @@ import { Box, Static, Text, useApp, useInput, useStdout } from "ink";
 import { loadConfig } from "../config.js";
 import { epicProgressRows } from "../epics.js";
 import { promptOnStdin } from "../prompt.js";
-import { workspaceNew, workspaceRotateKey, workspaceSet } from "../workspace-commands.js";
+import { ticketNew } from "../ticket-commands.js";
+import { workspaceGrantRunnerAccess, workspaceNew, workspaceRotateKey, workspaceSet } from "../workspace-commands.js";
 import { Banner } from "./Banner.js";
 import { Bubble } from "./Bubble.js";
 import { Cockpit, StreamPanel, boardTicketIds, nextCursor } from "./Dashboard.js";
@@ -18,7 +19,7 @@ import { alertOnce } from "./alert.js";
 import { bubbleRows } from "./height.js";
 import { planLayout, splitPanels } from "./layout.js";
 import { parseLine } from "./parse.js";
-import { configuredSlugs, acknowledgeInbox, approveEpic, cancelTicket, createAgent, createEpicFromFile, decisionOptions, deleteAgent, loadLiveEvents, listWorkspaceEnv, loadTicketDetail, pollSnapshot, postAgentMessage, queueTicket, resolveDecision, setWorkspacePaused, switchWorkspace, updateAgent, updateProviderCap, updateWorkspace, waitForReply, } from "./data.js";
+import { configuredSlugs, acknowledgeInbox, approveEpic, cancelTicket, createAgent, createEpicFromFile, decisionOptions, deleteAgent, deleteEpic, loadLiveEvents, listWorkspaceEnv, loadTicketDetail, pollSnapshot, postAgentMessage, postTicketMessage, queueTicket, resolveDecision, selectDecision, setWorkspacePaused, switchWorkspace, updateAgent, updateProviderCap, updateWorkspace, waitForReply, } from "./data.js";
 import { inputActive, promptPlaceholder, QUEUED_STEP, REPLY_WAIT_MS, settleChatReply } from "./chat-wait.js";
 import { editFor, editableKeys, nextValue, seedFor, settingsRows } from "./settings-model.js";
 import { appendLines, runLabels, toStreamLines } from "./stream.js";
@@ -47,6 +48,7 @@ export function App({ initial }) {
     const [ticketKey, setTicketKey] = useState(null);
     const [ready, setReady] = useState(false);
     const [stream, setStream] = useState([]);
+    const [logsFilter, setLogsFilter] = useState(null);
     const [cursor, setCursor] = useState(null);
     const [started, setStarted] = useState(false);
     const [field, setField] = useState(null);
@@ -99,19 +101,26 @@ export function App({ initial }) {
     const labels = useMemo(() => runLabels(board), [board]);
     const liveRunIds = [...labels.keys()].sort().join(",");
     useEffect(() => {
-        if (!liveRunIds) {
+        if (!liveRunIds && !logsFilter) {
             setStream([]);
             return;
         }
         const token = loads.current.start(workspace.id);
-        void loadLiveEvents(config, board)
+        void loadLiveEvents(config, board, logsFilter)
             .then((events) => {
             if (!loads.current.isCurrent(token))
                 return;
-            setStream((prior) => appendLines(prior, toStreamLines(events, labels)));
+            const eventLabels = new Map(labels);
+            if (logsFilter)
+                for (const event of events)
+                    if (!eventLabels.has(event.run_id)) {
+                        eventLabels.set(event.run_id, { runId: event.run_id, agent: logsFilter, ticket: logsFilter });
+                    }
+            setStream((prior) => appendLines(prior, toStreamLines(events, eventLabels)));
         })
             .catch(() => { });
-    }, [liveRunIds, board, config, labels, workspace.id]);
+    }, [liveRunIds, board, config, labels, workspace.id, logsFilter]);
+    useEffect(() => setStream([]), [logsFilter]);
     const say = useCallback((speaker, body, steps) => {
         setMessages((prior) => [...prior, { id: nextId(), speaker, body, steps, done: true }]);
     }, []);
@@ -201,6 +210,7 @@ export function App({ initial }) {
             setBoard(snapshot.board);
             setFeed(snapshot.feed);
             setStream([]);
+            setLogsFilter(null);
             acknowledgedMessages.current.clear();
             setCursor(null);
             selectedRef.current = null;
@@ -341,11 +351,37 @@ export function App({ initial }) {
                         say("system", `Updated ${updated.slug}: ${updated.name} (${updated.repo}).`);
                         await refresh();
                     }
-                    else {
+                    else if (action.command === "rotate-key") {
                         const rotated = await workspaceRotateKey();
                         setConfig(loadConfig());
                         say("system", `API key: ${rotated.apiKey}\nSaved locally. Run hd login with the new key on other machines.`);
                     }
+                    else {
+                        let granted;
+                        await suspendTerminal(async () => { granted = await workspaceGrantRunnerAccess(action.args); });
+                        if (!granted)
+                            throw new Error("Runner access command did not finish.");
+                        say("system", `${granted.runnerUser} has ${granted.permission} access to ${granted.repo}.`);
+                    }
+                }
+                catch (error) {
+                    setNotice(error instanceof Error ? error.message : String(error));
+                }
+                finally {
+                    setBusy(false);
+                }
+                return;
+            case "ticket-new":
+                setBusy(true);
+                try {
+                    let result;
+                    await suspendTerminal(async () => {
+                        result = await ticketNew(action.args, { config, isTTY: true, prompt: tuiPrompt });
+                    });
+                    if (!result)
+                        throw new Error("Ticket creation did not finish.");
+                    say("system", `Created ${result.ticket.key}: ${result.ticket.title}${result.queued ? " and queued it" : ""}.`);
+                    await refresh();
                 }
                 catch (error) {
                     setNotice(error instanceof Error ? error.message : String(error));
@@ -400,6 +436,20 @@ export function App({ initial }) {
                     setBusy(false);
                 }
                 return;
+            case "epic-rm":
+                setBusy(true);
+                try {
+                    await deleteEpic(config, action.id);
+                    say("system", `Removed draft epic ${action.id}.`);
+                    await refresh();
+                }
+                catch (error) {
+                    setNotice(error instanceof Error ? error.message : String(error));
+                }
+                finally {
+                    setBusy(false);
+                }
+                return;
             case "epics": {
                 const rows = epicProgressRows(board.epics, board.tickets);
                 say("system", rows.length
@@ -497,10 +547,28 @@ export function App({ initial }) {
                     setBusy(false);
                 }
                 return;
+            case "message":
+                setBusy(true);
+                try {
+                    await postTicketMessage(config, action.key, action.text);
+                    say("system", `Sent a builder message on ${action.key}.`);
+                }
+                catch (error) {
+                    setNotice(error instanceof Error ? error.message : String(error));
+                }
+                finally {
+                    setBusy(false);
+                }
+                return;
+            case "logs":
+                setLogsFilter(action.key);
+                say("system", action.key ? `Activity filtered to ${action.key}.` : "Activity filter cleared.");
+                return;
             case "decide": {
-                const decision = board.decisions[0];
+                const focused = inbox[inboxFocus]?.key.split(":")[0] ?? null;
+                const decision = selectDecision(board.decisions, action.target, focused);
                 if (!decision) {
-                    setNotice("Nothing is waiting on a decision.");
+                    setNotice(action.target ? `No decision matches ${action.target}.` : "Nothing is waiting on a decision.");
                     return;
                 }
                 if (action.dismiss) {
@@ -544,7 +612,7 @@ export function App({ initial }) {
                 return;
         }
     }, [view, settings, applyEdit, board, browsing, mode, say, askAgent, order, settingsOrder, changeWorkspace,
-        config, refresh, suspendTerminal, exit]);
+        config, refresh, suspendTerminal, exit, inbox, inboxFocus]);
     useInput((input, key) => {
         if (key.ctrl && input === "c")
             exit();
@@ -582,7 +650,7 @@ export function App({ initial }) {
                     return _jsx(Bubble, { message: item.message, width: width }, item.key);
                 } }), splash ? (_jsx(Splash, { columns: columns, rows: rows, width: width, ready: ready, helpFull: plan.helpFull, animate: plan.fits, onDone: () => setReady(true) })) : null, _jsxs(Box, { flexDirection: "column", width: width, children: [view === "board" && plan.panels > 0 ? _jsx(BoardPanel, { board: board, width: width, rows: plan.panels, cursor: cursor }) : null, view === "agents" && plan.panels > 0 ? (_jsxs(Box, { flexDirection: "column", children: [_jsx(AgentsPanel, { board: board, width: width, rows: agentsView.top }), agentsView.bottom > 0 ? _jsxs(_Fragment, { children: [_jsx(Box, { height: 1 }), _jsx(StreamPanel, { lines: stream, width: width, rows: agentsView.bottom, live: running > 0 })] }) : null] })) : null, view === "feed" && plan.panels > 0 ? _jsx(FeedPanel, { entries: feed, width: width, rows: plan.panels }) : null, view === "settings" && plan.panels > 0 ? _jsx(SettingsPanel, { entries: settings, width: width, rows: plan.panels, title: "Settings", cursor: field, editing: editing }) : null, view === "inbox" && plan.panels > 0 ? _jsx(InboxPanel, { board: board, width: width, rows: plan.panels, focus: inboxFocus }) : null, view === "ticket" && plan.panels > 0 ? ticket
                         ? _jsx(TicketPanel, { ticket: ticket, width: width, rows: plan.panels })
-                        : _jsxs(Text, { color: UI.warn, children: ["No ticket ", ticketKey, " here."] }) : null, view === "home" && plan.cockpit > 0 ? (_jsxs(Box, { flexDirection: "column", children: [_jsx(Cockpit, { board: board, width: width, rows: plan.cockpit, cursor: cursor }), _jsx(Box, { height: 1 }), _jsx(StreamPanel, { lines: stream, width: width, rows: plan.stream, live: running > 0 })] })) : null, inFlight.map((message) => _jsx(Bubble, { message: message, width: width }, message.id)), _jsx(DecisionPanel, { decisions: decisions, board: board, width: width, rows: plan.decision }), notice ? _jsx(Box, { marginBottom: 1, children: _jsx(Text, { color: UI.warn, children: notice }) }) : null, _jsxs(Box, { marginTop: 1, children: [_jsx(Text, { color: UI.text, bold: true, children: workspace.slug }), _jsxs(Text, { color: UI.dim, children: [" ", workspace.repo, " "] }), _jsx(Text, { color: live === "live" ? UI.accent : UI.dim, children: "\u25CF " }), _jsxs(Text, { color: UI.dim, children: [live === "live" ? "5s poll" : live, " "] }), _jsx(Text, { color: UI.dim, children: running ? `${running} running ` : "" }), board.decisions.length ? _jsxs(Text, { color: UI.warn, children: [board.decisions.length, " decisions "] }) : null, workspace.paused ? _jsx(Text, { color: UI.warn, children: "paused " }) : null, _jsxs(Text, { color: UI.dim, wrap: "truncate", children: ["\u00B7 ", mode, view === "inbox" ? " ↑↓ scroll" : cursor && selected ? ` ${selected.key} ↑↓ move · enter opens · esc leaves` : ""] })] }), _jsx(Box, { children: _jsx(TextInput, { value: draft, onChange: (next) => {
+                        : _jsxs(Text, { color: UI.warn, children: ["No ticket ", ticketKey, " here."] }) : null, view === "home" && plan.cockpit > 0 ? (_jsxs(Box, { flexDirection: "column", children: [_jsx(Cockpit, { board: board, width: width, rows: plan.cockpit, cursor: cursor }), _jsx(Box, { height: 1 }), _jsx(StreamPanel, { lines: stream, width: width, rows: plan.stream, live: running > 0 })] })) : null, inFlight.map((message) => _jsx(Bubble, { message: message, width: width }, message.id)), _jsx(DecisionPanel, { decisions: decisions, board: board, width: width, rows: plan.decision }), notice ? _jsx(Box, { marginBottom: 1, children: _jsx(Text, { color: UI.warn, children: notice }) }) : null, _jsxs(Box, { marginTop: 1, children: [_jsx(Text, { color: UI.text, bold: true, children: workspace.slug }), _jsxs(Text, { color: UI.dim, children: [" ", workspace.repo, " "] }), _jsx(Text, { color: live === "live" ? UI.accent : UI.dim, children: "\u25CF " }), _jsxs(Text, { color: UI.dim, children: [live === "live" ? "5s poll" : live, " "] }), _jsx(Text, { color: UI.dim, children: running ? `${running} running ` : "" }), board.decisions.length ? _jsxs(Text, { color: UI.warn, children: [board.decisions.length, " decisions "] }) : null, workspace.paused ? _jsx(Text, { color: UI.warn, children: "paused " }) : null, logsFilter ? _jsxs(Text, { color: UI.warn, children: ["logs ", logsFilter, " "] }) : null, _jsxs(Text, { color: UI.dim, wrap: "truncate", children: ["\u00B7 ", mode, view === "inbox" ? " ↑↓ scroll" : cursor && selected ? ` ${selected.key} ↑↓ move · enter opens · esc leaves` : ""] })] }), _jsx(Box, { children: _jsx(TextInput, { value: draft, onChange: (next) => {
                                 setDraft(next);
                                 if (editingRef.current)
                                     setEditing({ key: editingRef.current.key, draft: next });

package/dist/tui/Help.js

@@ -7,18 +7,20 @@ export const HELP_FOOTER = "Anything not starting with / goes to whoever you are
 export const COMMANDS = [
     { name: "/board", help: "the kanban board" },
     { name: "/inbox", help: "decisions and messages waiting on you" },
-    { name: "/ticket", args: "HD-12", help: "open one ticket" },
+    { name: "/ticket", args: "HD-12 | new [PATH.md]", help: "open or create a ticket" },
     { name: "/queue", args: "HD-12", help: "queue a complete ticket now" },
     { name: "/cancel", args: "HD-12", help: "cancel a ticket" },
-    { name: "/epic", args: "new PATH | approve ID", help: "create or approve a draft epic" },
+    { name: "/msg", args: "HD-12 TEXT", help: "message a ticket's builder" },
+    { name: "/logs", args: "[HD-12]", help: "filter or clear the activity stream" },
+    { name: "/epic", args: "new PATH | approve ID | rm ID", help: "create, approve, or remove a draft epic" },
     { name: "/epics", help: "list epics and ticket progress" },
     { name: "/architect", help: "talk to the agent that shapes draft epics" },
     { name: "/plan", help: "alias for /architect" },
-    { name: "/decide", args: "2 | text", help: "answer the decision on screen" },
+    { name: "/decide", args: "[N|ID] answer", help: "answer a targeted or focused decision" },
     { name: "/agents", args: "[add ... | rm ROLE|ID]", help: "view or manage agents" },
     { name: "/env", help: "list workspace environment variable names" },
     { name: "/settings", help: "change provider caps and agent settings" },
-    { name: "/workspace", args: "[slug | new | set | rotate-key]", help: "list, switch, create, or configure" },
+    { name: "/workspace", args: "[slug | new | set | rotate-key | grant-runner-access]", help: "list, switch, create, or configure" },
     { name: "/on", help: "turn on the current workspace" },
     { name: "/off", help: "turn off the current workspace" },
     { name: "/feed", help: "what just happened" },

package/dist/tui/data.js

@@ -1,4 +1,4 @@
-import { approveEpic as approveEpicNow, answerDecision, cancelTicket as cancelTicketNow, createAgent as postAgent, createEpic as postEpic, getStatus, getWorkspace, listAgents, listEpics, listFeed, listMessages, markMessagesDelivered, listWorkspaceEnv as getWorkspaceEnv, listTicketEvents, listTickets, listWorkspaces, postMessage as sendMessage, queueTicket as queueTicketNow, setPaused as setPausedNow, showTicket, updateAgent as patchAgent, updateCaps, updateWorkspace as patchWorkspace, deleteAgent as removeAgent, } from "../api.js";
+import { approveEpic as approveEpicNow, answerDecision, cancelTicket as cancelTicketNow, createAgent as postAgent, createEpic as postEpic, deleteEpic as removeEpic, getStatus, getWorkspace, listAgents, listEpics, listFeed, listMessages, markMessagesDelivered, listWorkspaceEnv as getWorkspaceEnv, listTicketEvents, listTickets, listWorkspaces, postMessage as sendMessage, queueTicket as queueTicketNow, setPaused as setPausedNow, showTicket, updateAgent as patchAgent, updateCaps, updateWorkspace as patchWorkspace, deleteAgent as removeAgent, } from "../api.js";
 import { loadConfig, switchWorkspace as selectWorkspace, } from "../config.js";
 import { readEpicSpec } from "../epics.js";
 export const POLL_MS = 5_000;
@@ -120,6 +120,12 @@ export async function createEpicFromFile(config, path) {
 export async function approveEpic(config, id) {
     return approveEpicNow(id, config);
 }
+export async function deleteEpic(config, id) {
+    return removeEpic(id, config);
+}
+export async function postTicketMessage(config, key, body) {
+    return sendMessage({ ticket_key: key, body_md: body, to_role: "builder", delivery: "queue" }, config);
+}
 export async function queueTicket(config, key) {
     return queueTicketNow(key, config);
 }
@@ -166,7 +172,10 @@ export async function updateProviderCap(config, provider, cap) {
 export async function updateWorkspace(config, fields) {
     return patchWorkspace(fields, config);
 }
-export async function loadLiveEvents(config, board) {
+export async function loadLiveEvents(config, board, ticketKey) {
+    if (ticketKey)
+        return (await listTicketEvents(ticketKey, undefined, undefined, config)).events
+            .sort((left, right) => left.at.localeCompare(right.at) || left.seq - right.seq);
     const liveIds = new Set(board.runs.filter((run) => run.status === "running").map((run) => run.id));
     const keys = new Set(board.runs
         .filter((run) => liveIds.has(run.id) && run.ticket_id)
@@ -183,6 +192,14 @@ export function decisionOptions(decision) {
         return decision.options.filter((value) => typeof value === "string");
     return [];
 }
+export function selectDecision(decisions, target, focusedId) {
+    if (!target)
+        return decisions.find((decision) => decision.id === focusedId) ?? decisions[0] ?? null;
+    if (/^\d+$/.test(target))
+        return decisions[Number(target) - 1] ?? null;
+    const matches = decisions.filter((decision) => decision.id.toLowerCase().startsWith(target.toLowerCase()));
+    return matches.length === 1 ? matches[0] : null;
+}
 export function statusLabel(status) {
     return status.replaceAll("_", " ");
 }

package/dist/tui/parse.js

@@ -44,12 +44,16 @@ export function parseLine(raw) {
         case "workspace":
         case "ws": {
             const command = rest[0]?.toLowerCase();
-            if (command && ["new", "set", "rotate-key"].includes(command)) {
+            if (command && ["new", "set", "rotate-key", "grant-runner-access"].includes(command)) {
                 return { kind: "workspace-command", command: command, args: rest.slice(1) };
             }
             return { kind: "workspace", slug: argument || null };
         }
         case "ticket":
+            if (rest[0]?.toLowerCase() === "new") {
+                const args = rest.slice(1);
+                return { kind: "ticket-new", args: args.some((arg) => arg.startsWith("--")) ? args : args.length ? [args.join(" ")] : [] };
+            }
             return argument
                 ? { kind: "ticket", key: argument.toUpperCase() }
                 : { kind: "unknown", command: "ticket needs a key" };
@@ -59,7 +63,9 @@ export function parseLine(raw) {
             }
             return rest[0]?.toLowerCase() === "approve" && rest.length === 2
                 ? { kind: "epic-approve", id: rest[1] }
-                : { kind: "unknown", command: "epic needs new PATH or approve ID" };
+                : rest[0]?.toLowerCase() === "rm" && rest.length === 2
+                    ? { kind: "epic-rm", id: rest[1] }
+                    : { kind: "unknown", command: "epic needs new PATH, approve ID, or rm ID" };
         case "epics":
             return { kind: "epics" };
         case "on":
@@ -75,12 +81,21 @@ export function parseLine(raw) {
                 : { kind: "unknown", command: "cancel needs a key" };
         case "decide": {
             const dismiss = /(^|\s)--(skip|dismiss)(\s|$)/.test(argument);
+            const words = argument.replace(/(^|\s)--(skip|dismiss)(\s|$)/g, " ").trim().split(/\s+/).filter(Boolean);
+            const targeted = words.length > 1 && (/^\d+$/.test(words[0]) || /^[0-9a-f][0-9a-f-]*$/i.test(words[0]));
             return {
                 kind: "decide",
-                answer: argument.replace(/(^|\s)--(skip|dismiss)(\s|$)/g, " ").trim(),
+                target: targeted ? words[0] : null,
+                answer: targeted ? words.slice(1).join(" ") : words.join(" "),
                 dismiss,
             };
         }
+        case "msg":
+            return rest.length >= 2 ? { kind: "message", key: rest[0].toUpperCase(), text: rest.slice(1).join(" ") }
+                : { kind: "unknown", command: "msg needs KEY TEXT" };
+        case "logs":
+            return rest.length <= 1 ? { kind: "logs", key: rest[0]?.toUpperCase() ?? null }
+                : { kind: "unknown", command: "logs takes one ticket key" };
         case "refresh":
             return { kind: "refresh" };
         case "exit":

package/dist/workspace-commands.js

@@ -1,8 +1,8 @@
 import { createWorkspace, listWorkspaces, rotateWorkspaceApiKey, updateWorkspace } from "./api.js";
 import { loadConfig, switchWorkspace, writeHdConfig } from "./config.js";
 import { promptOnStdin } from "./prompt.js";
-import { defaultGh, HDX_RUNNER_GH_USER, preflightWorkspace } from "./workspace-preflight.js";
-export const WORKSPACE_USAGE = "usage: hd workspace ls | use SLUG | new --name NAME --repo OWNER/NAME [--create|--no-create] [flags] | set [flags] | rotate-key";
+import { defaultGh, hasWriteRepoPermission, HDX_RUNNER_GH_USER, preflightWorkspace, runnerAccessForRepoOwner, runnerRepoPermission } from "./workspace-preflight.js";
+export const WORKSPACE_USAGE = "usage: hd workspace ls | use SLUG | new --name NAME --repo OWNER/NAME [--create|--no-create] [flags] | set [flags] | rotate-key | grant-runner-access [--runner-user USER]";
 function flags(argv) {
     const opts = {};
     const bools = new Set();
@@ -165,6 +165,33 @@ export async function workspaceUse(argv) {
     switchWorkspace(selected.slug);
     return selected;
 }
+export async function workspaceGrantRunnerAccess(argv, deps = {}) {
+    const { opts, bools, rest } = flags(argv);
+    if (rest.length || bools.size || Object.keys(opts).some((name) => name !== "runner-user")) {
+        throw new Error(WORKSPACE_USAGE);
+    }
+    const runnerUser = opts["runner-user"] ?? HDX_RUNNER_GH_USER;
+    const current = loadConfig().slug;
+    const workspace = (await listWorkspaces()).find((item) => item.slug === current);
+    if (!workspace)
+        throw new Error(`No workspace ${current}.`);
+    const gh = deps.gh ?? defaultGh;
+    try {
+        await gh(["--version"]);
+    }
+    catch {
+        throw new Error("GitHub CLI is unavailable. Install it if needed, then run `gh auth login`.");
+    }
+    const access = await runnerAccessForRepoOwner(workspace.repo, gh);
+    await gh(["api", "-X", "PUT", `repos/${workspace.repo}/collaborators/${runnerUser}`,
+        "-f", `permission=${access}`]);
+    const permission = await runnerRepoPermission(workspace.repo, runnerUser, gh);
+    if (!hasWriteRepoPermission(permission)) {
+        throw new Error(`Runner ${runnerUser} has ${permission} permission on ${workspace.repo}, expected write or better.`);
+    }
+    return { repo: workspace.repo, runnerUser, permission, requestedPermission: access };
+}
+export const workspaceGrantRunnerAdmin = workspaceGrantRunnerAccess;
 export async function workspaceRotateKey() {
     const config = loadConfig();
     const { api_key } = await rotateWorkspaceApiKey(config);

package/dist/workspace-preflight.js

@@ -52,6 +52,25 @@ export async function requireAdminRepo(repo, gh = defaultGh) {
         throw new Error(`Repository admin permission is required; viewer has ${permission || "none"}.`);
     }
 }
+export async function runnerRepoPermission(repo, runnerUser = HDX_RUNNER_GH_USER, gh = defaultGh) {
+    try {
+        const result = JSON.parse(await gh(["api", `repos/${repo}/collaborators/${runnerUser}/permission`]));
+        return result.permission ?? "none";
+    }
+    catch (error) {
+        if (/404|not found/i.test(errorMessage(error)))
+            return "none";
+        throw error;
+    }
+}
+export function hasWriteRepoPermission(permission) {
+    return ["admin", "maintain", "write", "push"].includes(permission.toLowerCase());
+}
+export async function runnerAccessForRepoOwner(repo, gh = defaultGh) {
+    const owner = repo.split("/")[0];
+    const ownerType = (await gh(["api", `users/${owner}`, "--jq", ".type"])).trim();
+    return ownerType.toLowerCase() === "organization" ? "admin" : "push";
+}
 async function repoView(repo, gh) {
     return JSON.parse(await gh(["repo", "view", repo, "--json", "defaultBranchRef,isEmpty,viewerPermission"]));
 }
@@ -82,18 +101,11 @@ export async function preflightWorkspace(input, gh = defaultGh) {
     if (!branch)
         throw new Error(`GitHub repository ${input.repo} has no default branch.`);
     const runnerUser = input.runnerUser || HDX_RUNNER_GH_USER;
-    let permission = "none";
-    try {
-        const result = JSON.parse(await gh(["api", `repos/${input.repo}/collaborators/${runnerUser}/permission`]));
-        permission = result.permission ?? "none";
-    }
-    catch (error) {
-        if (!/404|not found/i.test(errorMessage(error)))
-            throw error;
-    }
-    const invitationPending = permission.toLowerCase() !== "admin";
+    const permission = await runnerRepoPermission(input.repo, runnerUser, gh);
+    const invitationPending = !hasWriteRepoPermission(permission);
     if (invitationPending) {
-        await gh(["api", "-X", "PUT", `repos/${input.repo}/collaborators/${runnerUser}`, "-f", "permission=admin"]);
+        const access = await runnerAccessForRepoOwner(input.repo, gh);
+        await gh(["api", "-X", "PUT", `repos/${input.repo}/collaborators/${runnerUser}`, "-f", `permission=${access}`]);
     }
     return { branch, invitationPending };
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@higherdev/cli",
-  "version": "0.15.0",
+  "version": "0.15.3",
   "type": "module",
   "bin": {
     "hd": "dist/index.js"