@mattstack/rt-client 0.13.0 → 0.15.0

package/dist/client.d.ts

@@ -186,3 +186,15 @@ export declare function paneSend(a: Commands["pane:send"]["payload"], o?: RtClie
 /** Brings a herdr pane to the front. The daemon routes this to the tray, which
     owns the herdr focus and the native terminal-window raise. */
 export declare function paneFocus(a: Commands["pane:focus"]["payload"], o?: RtClientOptions): Promise<RtResponse<Commands["pane:focus"]["data"]>>;
+export declare function gateOpen(a: Commands["gate:open"]["payload"], o?: RtClientOptions): Promise<RtResponse<Commands["gate:open"]["data"]>>;
+export declare function gateAnswer(a: Commands["gate:answer"]["payload"], o?: RtClientOptions): Promise<RtResponse<Commands["gate:answer"]["data"]>>;
+/** Daemon clamps its own wait to 240s (gates-store.ts); the client abort
+    must outlive that cap, same +10s buffer as commands/events.ts's
+    IPC_TIMEOUT_MS over DAEMON_WAIT_MS. */
+export declare function gateWait(a: Commands["gate:wait"]["payload"], o?: RtClientOptions): Promise<RtResponse<Commands["gate:wait"]["data"]>>;
+export declare function gateList(a: Commands["gate:list"]["payload"], o?: RtClientOptions): Promise<RtResponse<Commands["gate:list"]["data"]>>;
+export declare function gatePark(a: Commands["gate:park"]["payload"], o?: RtClientOptions): Promise<RtResponse<Commands["gate:park"]["data"]>>;
+export declare function gateClose(a: Commands["gate:close"]["payload"], o?: RtClientOptions): Promise<RtResponse<Commands["gate:close"]["data"]>>;
+export declare function gateSubscribe(a: Commands["gate:subscribe"]["payload"], o?: RtClientOptions): Promise<RtResponse<Commands["gate:subscribe"]["data"]>>;
+export declare function gateUnsubscribe(a: Commands["gate:unsubscribe"]["payload"], o?: RtClientOptions): Promise<RtResponse<Commands["gate:unsubscribe"]["data"]>>;
+export declare function gateSubscriptions(a: Commands["gate:subscriptions"]["payload"], o?: RtClientOptions): Promise<RtResponse<Commands["gate:subscriptions"]["data"]>>;

package/dist/commands.d.ts

@@ -91,6 +91,65 @@ export interface EventsBusEvent {
     payload: unknown;
     emittedAt: number;
 }
+/**
+ * Duplicated shape on purpose, same reasoning as EventsBusEvent above:
+ * these mirror lib/daemon/gates-store.ts's types, which rt-client cannot
+ * import. gates-store.ts imports them back FROM this package (Commands
+ * already flows daemon -> rt-client, e.g. handlers/events.ts), so this is
+ * the single source of truth for the wire shape.
+ */
+/** The `by` value a pane spells when it answers its own gate: the only
+    value gates-store.ts's release tracking (CAS winner or loser) reacts to. */
+export declare const GATE_BY_PANE = "pane";
+export type GateStatus = "open" | "answered" | "parked" | "closed";
+export interface GateQuestion {
+    id: string;
+    label: string;
+    multi: boolean;
+    options: string[];
+}
+export interface GateAnswer {
+    answers: Record<string, string | string[] | {
+        value: string | string[];
+        note?: string;
+    }>;
+    by: string;
+    answeredAt: number;
+}
+export interface GateRow {
+    id: string;
+    subject: string;
+    kind: string;
+    questions: GateQuestion[];
+    meta: Record<string, unknown> | null;
+    status: GateStatus;
+    answer: GateAnswer | null;
+    openedAt: number;
+    parkedAt: number | null;
+    closedAt: number | null;
+    closedReason: "abandoned" | "superseded" | "pruned" | null;
+    agent: string | null;
+    pane: string | null;
+    nudge: {
+        session: string;
+    } | null;
+    delivery: {
+        outcome: "delivered" | "dead-pane";
+        at: number;
+    } | null;
+    released: boolean;
+}
+export interface GateSubscription {
+    id: string;
+    subjectPrefix: string;
+    session: string;
+    createdAt: number;
+    lastDelivery: {
+        outcome: "delivered" | "failed";
+        at: number;
+    } | null;
+    dead: boolean;
+}
 /**
  * Duplicated shape on purpose, same reasoning as EventsBusEvent above:
  * these mirror lib/state/chat-store.ts's types, which rt-client cannot
@@ -1205,6 +1264,114 @@ export interface Commands {
         payload: Record<string, never>;
         data: unknown;
     };
+    "gate:open": {
+        payload: {
+            subject: string;
+            kind: string;
+            questions: GateQuestion[];
+            meta?: Record<string, unknown>;
+            agent?: string;
+            pane?: string;
+            nudge?: {
+                session: string;
+            };
+        };
+        data: {
+            id: string;
+            supersededId: string | null;
+        };
+    };
+    /**
+     * A CAS loss is a DEFINED OUTCOME, not an error: `ok:true` with
+     * `conflict:true` and the WINNING row, so every consumer gets the winner
+     * typed with no envelope hacks. `ok:false` is reserved for
+     * not-found/closed/validation failures.
+     */
+    "gate:answer": {
+        payload: {
+            id: string;
+            answers: GateAnswer["answers"];
+            by: string;
+        };
+        data: {
+            row: GateRow;
+            conflict?: true;
+        };
+    };
+    /** `ok:false "not-found"` on an unknown id is terminal; the CLI loop must not re-enter on it.
+     *  `timeout` carries no row (nothing settled); `answered`/`closed` always carry the settled row. */
+    "gate:wait": {
+        payload: {
+            id: string;
+            waitMs?: number;
+        };
+        data: {
+            status: "timeout";
+        } | {
+            status: "answered" | "closed";
+            row: GateRow;
+        };
+    };
+    /** Paged like events:list: an omitted `limit` clamps daemon-side rather than
+     *  forcing a full-table read; `cursor` is the paging rowid to resume from. */
+    "gate:list": {
+        payload: {
+            open?: boolean;
+            subjectPrefix?: string;
+            kind?: string;
+            limit?: number;
+            cursor?: number;
+        };
+        data: {
+            gates: GateRow[];
+            cursor: number;
+        };
+    };
+    "gate:park": {
+        payload: {
+            id: string;
+        };
+        data: {
+            ok: true;
+        };
+    };
+    "gate:close": {
+        payload: {
+            id: string;
+            reason: "abandoned" | "superseded" | "pruned";
+        };
+        data: {
+            ok: true;
+        };
+    };
+    "gate:subscribe": {
+        payload: {
+            subjectPrefix: string;
+            session: string;
+        };
+        data: {
+            id: string;
+        };
+    };
+    "gate:unsubscribe": {
+        payload: {
+            id: string;
+        };
+        data: {
+            removed: boolean;
+        };
+    };
+    /** The shepherd's gap-recovery liveness check and the observability window
+     *  onto delivery outcomes (dead marks included). */
+    "gate:subscriptions": {
+        payload: {
+            session?: string;
+            live?: boolean;
+        };
+        data: {
+            subscriptions: GateSubscription[];
+        };
+    };
     /** Wire reply on success is always `{ok:true, repaired}` (no `data`
      *  wrapper) — `data` here documents the extra field the same way PingData
      *  does for `ping`, not the literal wire nesting (R3). */

package/dist/index.d.ts

@@ -1,8 +1,8 @@
 export { rtCommand, DEFAULT_SOCK } from "./transport.ts";
 export type { RtResponse, RtClientOptions } from "./transport.ts";
-export { readProjectMRs, readDiscussions, readMrsByBranch, readBranchCache, resolveForgeToken, listRuns, getRun, abandonRun, chatJoin, chatLeave, chatAck, chatClaim, chatRelease, chatPost, chatRead, chatRooms, chatWho, chatMark, chatMessages, chatSignIn, chatSignOut, chatAway, chatBack, chatBuddies, chatDm, chatArchive, chatDmOpen, eventsHead, eventsEmit, eventsWait, eventsList, agentStart, agentResume, agentGet, agentList, paneList, panePeek, paneSpawn, paneAccounts, paneDirectories, chatInvite, paneSend, paneFocus, } from "./client.ts";
-export { COMMAND_NAMES } from "./commands.ts";
-export type { Discussion, DemandDecl, ProjectMRsScope, ProjectMRsData, DiscussionsData, MrByBranchEntry, MrByBranchData, BranchEnrichment, Commands, CommandName, ForgeSlug, ForgeTokenData, Attention, RunSummary, RunStageRow, RunFieldRow, RunDecisionRow, RunDetail, WakeMode, ChatMember, ChatMessage, ChatClaimOutcome, RoomSummary, BuddyStatus, PresenceRow, AgentRecord, AgentSurface, AgentStatus, ChatPane, PaneAccount, PaneDirectory, InviteResult, PaneDelivery, PaneSendResult, PaneFocusResult, } from "./commands.ts";
+export { readProjectMRs, readDiscussions, readMrsByBranch, readBranchCache, resolveForgeToken, listRuns, getRun, abandonRun, chatJoin, chatLeave, chatAck, chatClaim, chatRelease, chatPost, chatRead, chatRooms, chatWho, chatMark, chatMessages, chatSignIn, chatSignOut, chatAway, chatBack, chatBuddies, chatDm, chatArchive, chatDmOpen, eventsHead, eventsEmit, eventsWait, eventsList, agentStart, agentResume, agentGet, agentList, paneList, panePeek, paneSpawn, paneAccounts, paneDirectories, chatInvite, paneSend, paneFocus, gateOpen, gateAnswer, gateWait, gateList, gatePark, gateClose, gateSubscribe, gateUnsubscribe, gateSubscriptions, } from "./client.ts";
+export { COMMAND_NAMES, GATE_BY_PANE } from "./commands.ts";
+export type { Discussion, DemandDecl, ProjectMRsScope, ProjectMRsData, DiscussionsData, MrByBranchEntry, MrByBranchData, BranchEnrichment, Commands, CommandName, ForgeSlug, ForgeTokenData, Attention, RunSummary, RunStageRow, RunFieldRow, RunDecisionRow, RunDetail, WakeMode, ChatMember, ChatMessage, ChatClaimOutcome, RoomSummary, BuddyStatus, PresenceRow, AgentRecord, AgentSurface, AgentStatus, ChatPane, PaneAccount, PaneDirectory, InviteResult, PaneDelivery, PaneSendResult, PaneFocusResult, GateStatus, GateQuestion, GateAnswer, GateRow, GateSubscription, } from "./commands.ts";
 export { subscribe, createRelay, DEFAULT_WS_URL } from "./relay.ts";
 export type { RelayEventType } from "./relay.ts";
 export { daemonHealth } from "./health.ts";

package/dist/index.js

@@ -268,7 +268,50 @@ function paneSend(a, o = {}) {
 function paneFocus(a, o = {}) {
   return rtCommand("pane:focus", { paneId: a.paneId }, { sockPath: o.sockPath, timeoutMs: o.timeoutMs ?? 1e4 });
 }
+function gateOpen(a, o = {}) {
+  const payload = { subject: a.subject, kind: a.kind, questions: a.questions };
+  for (const k of ["meta", "agent", "pane", "nudge"])
+    if (a[k] !== undefined)
+      payload[k] = a[k];
+  return rtCommand("gate:open", payload, { sockPath: o.sockPath, timeoutMs: o.timeoutMs ?? 1e4 });
+}
+function gateAnswer(a, o = {}) {
+  return rtCommand("gate:answer", { id: a.id, answers: a.answers, by: a.by }, { sockPath: o.sockPath, timeoutMs: o.timeoutMs ?? 1e4 });
+}
+function gateWait(a, o = {}) {
+  const payload = { id: a.id };
+  if (a.waitMs !== undefined)
+    payload.waitMs = a.waitMs;
+  return rtCommand("gate:wait", payload, { sockPath: o.sockPath, timeoutMs: o.timeoutMs ?? 250000 });
+}
+function gateList(a, o = {}) {
+  const payload = {};
+  for (const k of ["open", "subjectPrefix", "kind", "limit", "cursor"])
+    if (a[k] !== undefined)
+      payload[k] = a[k];
+  return rtCommand("gate:list", payload, { sockPath: o.sockPath, timeoutMs: o.timeoutMs ?? 1e4 });
+}
+function gatePark(a, o = {}) {
+  return rtCommand("gate:park", { id: a.id }, { sockPath: o.sockPath, timeoutMs: o.timeoutMs ?? 1e4 });
+}
+function gateClose(a, o = {}) {
+  return rtCommand("gate:close", { id: a.id, reason: a.reason }, { sockPath: o.sockPath, timeoutMs: o.timeoutMs ?? 1e4 });
+}
+function gateSubscribe(a, o = {}) {
+  return rtCommand("gate:subscribe", { subjectPrefix: a.subjectPrefix, session: a.session }, { sockPath: o.sockPath, timeoutMs: o.timeoutMs ?? 1e4 });
+}
+function gateUnsubscribe(a, o = {}) {
+  return rtCommand("gate:unsubscribe", { id: a.id }, { sockPath: o.sockPath, timeoutMs: o.timeoutMs ?? 1e4 });
+}
+function gateSubscriptions(a, o = {}) {
+  const payload = {};
+  for (const k of ["session", "live"])
+    if (a[k] !== undefined)
+      payload[k] = a[k];
+  return rtCommand("gate:subscriptions", payload, { sockPath: o.sockPath, timeoutMs: o.timeoutMs ?? 1e4 });
+}
 // src/commands.ts
+var GATE_BY_PANE = "pane";
 var COMMAND_NAMES = [
   "project-mrs:read",
   "discussions:read",
@@ -337,6 +380,15 @@ var COMMAND_NAMES = [
   "endpoint:status",
   "repos:locate",
   "freshness:reconcile",
+  "gate:open",
+  "gate:answer",
+  "gate:wait",
+  "gate:list",
+  "gate:park",
+  "gate:close",
+  "gate:subscribe",
+  "gate:unsubscribe",
+  "gate:subscriptions",
   "hooks:repair",
   "hooks:watch",
   "sdm:catalog",
@@ -630,6 +682,14 @@ var REGISTRY = [
     migrated: true,
     description: "Desktop notification preferences (which events notify, sound on/off)."
   },
+  {
+    key: "rt.notify.eventBridges",
+    type: "array",
+    scopes: ["user"],
+    default: [],
+    merge: "replace",
+    description: "Event-bus glob rules that raise a desktop notification: [{pattern, category, title, message}]. pattern is matched against the events-bus topic (Bun.Glob semantics); title/message may interpolate `{field}` from the event payload. A fresh key, not an ownership-latch port, so a default is fine here."
+  },
   {
     key: "rt.cron",
     type: "object",
@@ -680,6 +740,15 @@ var REGISTRY = [
     migrated: true,
     description: "Home-repo snapshot daemon config: enabled, debounce/push delays, and the janitor threshold/interval for zones left dirty too long."
   },
+  {
+    key: "rt.teamSnapshot",
+    type: "object",
+    scopes: ["machine"],
+    default: { enabled: true, debounceSec: 20, pushDelaySec: 60, janitorThresholdHours: 6, janitorIntervalMin: 30, pullIntervalSec: 300 },
+    merge: "deep",
+    migrated: true,
+    description: "Team-clone snapshot daemon config: the home snapshot's fields plus pullIntervalSec, the fast-forward/rebase pull cadence for every clone under ~/.mattstack/teams."
+  },
   {
     key: "rt.sync",
     type: "object",
@@ -947,6 +1016,13 @@ var REGISTRY = [
     merge: "replace",
     description: "Days of MR inactivity before the board flags it stale, for this developer."
   },
+  {
+    key: "board.gateGraceMinutes",
+    type: "number",
+    scopes: ["user"],
+    merge: "replace",
+    description: "Minutes an unanswered review gate stays open before the board parks the review (closes the pane, keeps the gate open). Default 90."
+  },
   {
     key: "board.workspaces",
     type: "object",
@@ -976,11 +1052,25 @@ var REGISTRY = [
     description: "This developer's triage user-intent flags (which triage sweeps run automatically); a sibling flat key of board.triage.doctorSkill, not its container — the board reader assembles the two independently."
   },
   {
-    key: "board.claudeCommand",
+    key: "board.agent.account",
     type: "string",
-    scopes: ["machine"],
+    scopes: ["user", "machine"],
+    merge: "replace",
+    description: "cswap account the board's review/respond/doctor panes launch under; unset uses the default claude profile. Replaces the retired board.claudeCommand."
+  },
+  {
+    key: "board.agent.model",
+    type: "string",
+    scopes: ["user", "machine"],
+    merge: "replace",
+    description: "Default --model for the board's review/respond/doctor panes; unset omits the flag."
+  },
+  {
+    key: "board.agent.effort",
+    type: "string",
+    scopes: ["user", "machine"],
     merge: "replace",
-    description: "Local command used to launch Claude Code for the board's review/respond/doctor panes."
+    description: "Default --effort for the board's review/respond/doctor panes; unset omits the flag."
   },
   {
     key: "board.cwds",
@@ -2002,6 +2092,15 @@ export {
   getSetting,
   getRun,
   getDef,
+  gateWait,
+  gateUnsubscribe,
+  gateSubscriptions,
+  gateSubscribe,
+  gatePark,
+  gateOpen,
+  gateList,
+  gateClose,
+  gateAnswer,
   explainSetting,
   expandVariables,
   eventsWait,
@@ -2041,6 +2140,7 @@ export {
   abandonRun,
   SCOPE_ORDER,
   REGISTRY,
+  GATE_BY_PANE,
   DEFAULT_WS_URL,
   DEFAULT_SOCK,
   COMMAND_NAMES

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mattstack/rt-client",
-  "version": "0.13.0",
+  "version": "0.15.0",
   "type": "module",
   "exports": {
     ".": {
@@ -18,7 +18,7 @@
     "./test/fake-daemon.ts": "./test/fake-daemon.ts"
   },
   "peerDependencies": {
-    "@mattstack/glance": ">=0.23.0"
+    "@mattstack/glance": ">=0.24.0"
   },
   "dependencies": {
     "jsonc-parser": "^3.3.1"

package/src/client.ts

@@ -442,3 +442,79 @@ export function paneFocus(
 ): Promise<RtResponse<Commands["pane:focus"]["data"]>> {
   return rtCommand<Commands["pane:focus"]["data"]>("pane:focus", { paneId: a.paneId }, { sockPath: o.sockPath, timeoutMs: o.timeoutMs ?? 10_000 });
 }
+
+// ─── Gates (BOARD-20/21 gate facility) ─────────────────────────────────────
+
+export function gateOpen(
+  a: Commands["gate:open"]["payload"],
+  o: RtClientOptions = {},
+): Promise<RtResponse<Commands["gate:open"]["data"]>> {
+  const payload: Record<string, unknown> = { subject: a.subject, kind: a.kind, questions: a.questions };
+  for (const k of ["meta", "agent", "pane", "nudge"] as const) if (a[k] !== undefined) payload[k] = a[k];
+  return rtCommand<Commands["gate:open"]["data"]>("gate:open", payload, { sockPath: o.sockPath, timeoutMs: o.timeoutMs ?? 10_000 });
+}
+
+export function gateAnswer(
+  a: Commands["gate:answer"]["payload"],
+  o: RtClientOptions = {},
+): Promise<RtResponse<Commands["gate:answer"]["data"]>> {
+  return rtCommand<Commands["gate:answer"]["data"]>("gate:answer", { id: a.id, answers: a.answers, by: a.by }, { sockPath: o.sockPath, timeoutMs: o.timeoutMs ?? 10_000 });
+}
+
+/** Daemon clamps its own wait to 240s (gates-store.ts); the client abort
+    must outlive that cap, same +10s buffer as commands/events.ts's
+    IPC_TIMEOUT_MS over DAEMON_WAIT_MS. */
+export function gateWait(
+  a: Commands["gate:wait"]["payload"],
+  o: RtClientOptions = {},
+): Promise<RtResponse<Commands["gate:wait"]["data"]>> {
+  const payload: Record<string, unknown> = { id: a.id };
+  if (a.waitMs !== undefined) payload.waitMs = a.waitMs;
+  return rtCommand<Commands["gate:wait"]["data"]>("gate:wait", payload, { sockPath: o.sockPath, timeoutMs: o.timeoutMs ?? 250_000 });
+}
+
+export function gateList(
+  a: Commands["gate:list"]["payload"],
+  o: RtClientOptions = {},
+): Promise<RtResponse<Commands["gate:list"]["data"]>> {
+  const payload: Record<string, unknown> = {};
+  for (const k of ["open", "subjectPrefix", "kind", "limit", "cursor"] as const) if (a[k] !== undefined) payload[k] = a[k];
+  return rtCommand<Commands["gate:list"]["data"]>("gate:list", payload, { sockPath: o.sockPath, timeoutMs: o.timeoutMs ?? 10_000 });
+}
+
+export function gatePark(
+  a: Commands["gate:park"]["payload"],
+  o: RtClientOptions = {},
+): Promise<RtResponse<Commands["gate:park"]["data"]>> {
+  return rtCommand<Commands["gate:park"]["data"]>("gate:park", { id: a.id }, { sockPath: o.sockPath, timeoutMs: o.timeoutMs ?? 10_000 });
+}
+
+export function gateClose(
+  a: Commands["gate:close"]["payload"],
+  o: RtClientOptions = {},
+): Promise<RtResponse<Commands["gate:close"]["data"]>> {
+  return rtCommand<Commands["gate:close"]["data"]>("gate:close", { id: a.id, reason: a.reason }, { sockPath: o.sockPath, timeoutMs: o.timeoutMs ?? 10_000 });
+}
+
+export function gateSubscribe(
+  a: Commands["gate:subscribe"]["payload"],
+  o: RtClientOptions = {},
+): Promise<RtResponse<Commands["gate:subscribe"]["data"]>> {
+  return rtCommand<Commands["gate:subscribe"]["data"]>("gate:subscribe", { subjectPrefix: a.subjectPrefix, session: a.session }, { sockPath: o.sockPath, timeoutMs: o.timeoutMs ?? 10_000 });
+}
+
+export function gateUnsubscribe(
+  a: Commands["gate:unsubscribe"]["payload"],
+  o: RtClientOptions = {},
+): Promise<RtResponse<Commands["gate:unsubscribe"]["data"]>> {
+  return rtCommand<Commands["gate:unsubscribe"]["data"]>("gate:unsubscribe", { id: a.id }, { sockPath: o.sockPath, timeoutMs: o.timeoutMs ?? 10_000 });
+}
+
+export function gateSubscriptions(
+  a: Commands["gate:subscriptions"]["payload"],
+  o: RtClientOptions = {},
+): Promise<RtResponse<Commands["gate:subscriptions"]["data"]>> {
+  const payload: Record<string, unknown> = {};
+  for (const k of ["session", "live"] as const) if (a[k] !== undefined) payload[k] = a[k];
+  return rtCommand<Commands["gate:subscriptions"]["data"]>("gate:subscriptions", payload, { sockPath: o.sockPath, timeoutMs: o.timeoutMs ?? 10_000 });
+}

package/src/commands.ts

@@ -83,6 +83,41 @@ export interface ForgeTokenData {
  */
 export interface EventsBusEvent { id: number; topic: string; payload: unknown; emittedAt: number }
 
+/**
+ * Duplicated shape on purpose, same reasoning as EventsBusEvent above:
+ * these mirror lib/daemon/gates-store.ts's types, which rt-client cannot
+ * import. gates-store.ts imports them back FROM this package (Commands
+ * already flows daemon -> rt-client, e.g. handlers/events.ts), so this is
+ * the single source of truth for the wire shape.
+ */
+/** The `by` value a pane spells when it answers its own gate: the only
+    value gates-store.ts's release tracking (CAS winner or loser) reacts to. */
+export const GATE_BY_PANE = "pane";
+
+export type GateStatus = "open" | "answered" | "parked" | "closed";
+export interface GateQuestion { id: string; label: string; multi: boolean; options: string[] }
+export interface GateAnswer { answers: Record<string, string | string[] | { value: string | string[]; note?: string }>; by: string; answeredAt: number }
+export interface GateRow {
+  id: string; subject: string; kind: string;
+  questions: GateQuestion[]; meta: Record<string, unknown> | null;
+  status: GateStatus; answer: GateAnswer | null;
+  openedAt: number; parkedAt: number | null; closedAt: number | null;
+  closedReason: "abandoned" | "superseded" | "pruned" | null;
+  agent: string | null; pane: string | null;
+  nudge: { session: string } | null;
+  delivery: { outcome: "delivered" | "dead-pane"; at: number } | null;
+  released: boolean;
+}
+
+export interface GateSubscription {
+  id: string;
+  subjectPrefix: string;
+  session: string;
+  createdAt: number;
+  lastDelivery: { outcome: "delivered" | "failed"; at: number } | null;
+  dead: boolean;
+}
+
 /**
  * Duplicated shape on purpose, same reasoning as EventsBusEvent above:
  * these mirror lib/state/chat-store.ts's types, which rt-client cannot
@@ -538,6 +573,29 @@ export interface Commands {
   "repos:locate": { payload: { newPath: string; repo?: string; dryRun?: boolean }; data: unknown };
   "freshness:reconcile": { payload: Record<string, never>; data: unknown };
 
+  // ─── Gate facility (BOARD-20/21) ─────────────────────────────────────────
+  "gate:open": { payload: { subject: string; kind: string; questions: GateQuestion[]; meta?: Record<string, unknown>; agent?: string; pane?: string; nudge?: { session: string } }; data: { id: string; supersededId: string | null } };
+  /**
+   * A CAS loss is a DEFINED OUTCOME, not an error: `ok:true` with
+   * `conflict:true` and the WINNING row, so every consumer gets the winner
+   * typed with no envelope hacks. `ok:false` is reserved for
+   * not-found/closed/validation failures.
+   */
+  "gate:answer": { payload: { id: string; answers: GateAnswer["answers"]; by: string }; data: { row: GateRow; conflict?: true } };
+  /** `ok:false "not-found"` on an unknown id is terminal; the CLI loop must not re-enter on it.
+   *  `timeout` carries no row (nothing settled); `answered`/`closed` always carry the settled row. */
+  "gate:wait": { payload: { id: string; waitMs?: number }; data: { status: "timeout" } | { status: "answered" | "closed"; row: GateRow } };
+  /** Paged like events:list: an omitted `limit` clamps daemon-side rather than
+   *  forcing a full-table read; `cursor` is the paging rowid to resume from. */
+  "gate:list": { payload: { open?: boolean; subjectPrefix?: string; kind?: string; limit?: number; cursor?: number }; data: { gates: GateRow[]; cursor: number } };
+  "gate:park": { payload: { id: string }; data: { ok: true } };
+  "gate:close": { payload: { id: string; reason: "abandoned" | "superseded" | "pruned" }; data: { ok: true } };
+  "gate:subscribe": { payload: { subjectPrefix: string; session: string }; data: { id: string } };
+  "gate:unsubscribe": { payload: { id: string }; data: { removed: boolean } };
+  /** The shepherd's gap-recovery liveness check and the observability window
+   *  onto delivery outcomes (dead marks included). */
+  "gate:subscriptions": { payload: { session?: string; live?: boolean }; data: { subscriptions: GateSubscription[] } };
+
   /** Wire reply on success is always `{ok:true, repaired}` (no `data`
    *  wrapper) — `data` here documents the extra field the same way PingData
    *  does for `ping`, not the literal wire nesting (R3). */
@@ -632,6 +690,15 @@ export const COMMAND_NAMES: readonly CommandName[] = [
   "endpoint:status",
   "repos:locate",
   "freshness:reconcile",
+  "gate:open",
+  "gate:answer",
+  "gate:wait",
+  "gate:list",
+  "gate:park",
+  "gate:close",
+  "gate:subscribe",
+  "gate:unsubscribe",
+  "gate:subscriptions",
   "hooks:repair",
   "hooks:watch",
   "sdm:catalog",

package/src/index.ts

@@ -45,9 +45,18 @@ export {
   chatInvite,
   paneSend,
   paneFocus,
+  gateOpen,
+  gateAnswer,
+  gateWait,
+  gateList,
+  gatePark,
+  gateClose,
+  gateSubscribe,
+  gateUnsubscribe,
+  gateSubscriptions,
 } from "./client.ts";
 
-export { COMMAND_NAMES } from "./commands.ts";
+export { COMMAND_NAMES, GATE_BY_PANE } from "./commands.ts";
 export type {
   Discussion,
   DemandDecl,
@@ -84,6 +93,11 @@ export type {
   PaneDelivery,
   PaneSendResult,
   PaneFocusResult,
+  GateStatus,
+  GateQuestion,
+  GateAnswer,
+  GateRow,
+  GateSubscription,
 } from "./commands.ts";
 
 export { subscribe, createRelay, DEFAULT_WS_URL } from "./relay.ts";

package/src/settings/registry-defs.ts

@@ -79,6 +79,14 @@ export const REGISTRY: readonly SettingDef[] = [
     migrated: true,
     description: "Desktop notification preferences (which events notify, sound on/off).",
   },
+  {
+    key: "rt.notify.eventBridges",
+    type: "array",
+    scopes: ["user"],
+    default: [],
+    merge: "replace",
+    description: "Event-bus glob rules that raise a desktop notification: [{pattern, category, title, message}]. pattern is matched against the events-bus topic (Bun.Glob semantics); title/message may interpolate `{field}` from the event payload. A fresh key, not an ownership-latch port, so a default is fine here.",
+  },
   {
     key: "rt.cron",
     type: "object",
@@ -129,6 +137,15 @@ export const REGISTRY: readonly SettingDef[] = [
     migrated: true,
     description: "Home-repo snapshot daemon config: enabled, debounce/push delays, and the janitor threshold/interval for zones left dirty too long.",
   },
+  {
+    key: "rt.teamSnapshot",
+    type: "object",
+    scopes: ["machine"],
+    default: { enabled: true, debounceSec: 20, pushDelaySec: 60, janitorThresholdHours: 6, janitorIntervalMin: 30, pullIntervalSec: 300 },
+    merge: "deep",
+    migrated: true,
+    description: "Team-clone snapshot daemon config: the home snapshot's fields plus pullIntervalSec, the fast-forward/rebase pull cadence for every clone under ~/.mattstack/teams.",
+  },
   {
     key: "rt.sync",
     type: "object",
@@ -421,6 +438,13 @@ export const REGISTRY: readonly SettingDef[] = [
     merge: "replace",
     description: "Days of MR inactivity before the board flags it stale, for this developer.",
   },
+  {
+    key: "board.gateGraceMinutes",
+    type: "number",
+    scopes: ["user"],
+    merge: "replace",
+    description: "Minutes an unanswered review gate stays open before the board parks the review (closes the pane, keeps the gate open). Default 90.",
+  },
   {
     key: "board.workspaces",
     type: "object",
@@ -452,11 +476,25 @@ export const REGISTRY: readonly SettingDef[] = [
 
   // --- board (machine) ---------------------------------------------------
   {
-    key: "board.claudeCommand",
+    key: "board.agent.account",
     type: "string",
-    scopes: ["machine"],
+    scopes: ["user", "machine"],
+    merge: "replace",
+    description: "cswap account the board's review/respond/doctor panes launch under; unset uses the default claude profile. Replaces the retired board.claudeCommand.",
+  },
+  {
+    key: "board.agent.model",
+    type: "string",
+    scopes: ["user", "machine"],
+    merge: "replace",
+    description: "Default --model for the board's review/respond/doctor panes; unset omits the flag.",
+  },
+  {
+    key: "board.agent.effort",
+    type: "string",
+    scopes: ["user", "machine"],
     merge: "replace",
-    description: "Local command used to launch Claude Code for the board's review/respond/doctor panes.",
+    description: "Default --effort for the board's review/respond/doctor panes; unset omits the flag.",
   },
   {
     key: "board.cwds",