@monoes/monomindcli 1.9.16 → 1.10.0

package/.claude/skills/mastermind/agent-detail.md

@@ -0,0 +1,242 @@
+---
+name: mastermind-agent-detail
+description: Mastermind agent-detail — deep per-agent inspection: show config, run history, budget usage, heartbeat status, assigned skills, and reset/reconfigure a single agent within an org.
+type: domain-skill
+default_mode: auto
+---
+
+# Mastermind Agent Detail
+
+This skill is invoked by `mastermind:agent-detail` or directly via `/mastermind:agent-detail`.
+
+---
+
+## Inputs
+
+- `brain_context`: BRAIN CONTEXT block (injected by command, or loaded below if standalone)
+- `org_name`: org the agent belongs to (required)
+- `agent_id`: agent slug/id (required)
+- `action`: show | runs | config | budget | heartbeat | skills | reset
+- `days`: lookback window for run history (default 7)
+- `caller`: command | master
+
+---
+
+## Step 0 — Brain Load (standalone only)
+
+If `caller` is not "command", load brain context following _protocol.md Brain Load Procedure with namespace: `ops`.
+
+---
+
+## Step 1 — Load Agent Data
+
+```bash
+orgFile=".monomind/orgs/${org_name}.json"
+[ ! -f "$orgFile" ] && { echo "ERROR: Org '${org_name}' not found."; exit 1; }
+
+agentDef=$(jq -r --arg id "$agent_id" '.roles[] | select(.id == $id)' "$orgFile")
+[ -z "$agentDef" ] && { echo "ERROR: Agent '$agent_id' not found in org '$org_name'."; exit 1; }
+
+stateFile=".monomind/orgs/${org_name}-state.json"
+agentState="{}"
+[ -f "$stateFile" ] && agentState=$(jq -r --arg id "$agent_id" '.agents[$id] // {}' "$stateFile")
+
+activityFile=".monomind/orgs/${org_name}-activity.jsonl"
+days=${days:-7}
+cutoff=$(date -u -v-${days}d +%Y-%m-%dT%H:%M:%SZ 2>/dev/null || date -u -d "${days} days ago" +%Y-%m-%dT%H:%M:%SZ 2>/dev/null || echo "")
+```
+
+---
+
+## Step 2 — Execute Action
+
+### show (default)
+
+```bash
+echo "AGENT DETAIL — $agent_id @ $org_name"
+echo "────────────────────────────────────────────────────────"
+
+echo "$agentDef" | jq -r '
+  "  ID:          \(.id)",
+  "  Title:       \(.title // "-")",
+  "  Reports to:  \(.reports_to // "(top)")",
+  "  Governance:  \(.governance // "inherit")",
+  "  Model:       \(.adapter.model // "default")",
+  "  Max tokens:  \((.adapter.max_tokens // 8192) | tostring)",
+  "  Heartbeat:   \(if (.heartbeat.enabled // false) then "enabled (" + ((.heartbeat.interval // 900) | tostring) + "s)" else "disabled" end)"
+'
+
+status=$(echo "$agentState" | jq -r '.status // "unknown"')
+lastRun=$(echo "$agentState" | jq -r '.last_run // "-"')
+totalRuns=$(echo "$agentState" | jq -r '.total_runs // 0')
+tokenUsed=$(echo "$agentState" | jq -r '.tokens_used // 0')
+
+echo ""
+echo "  Status:      $status"
+echo "  Last run:    $lastRun"
+echo "  Total runs:  $totalRuns"
+echo "  Tokens used: $tokenUsed"
+
+# Skills
+skillCount=$(echo "$agentDef" | jq -r '(.skills // []) | length')
+echo ""
+echo "  Skills: $skillCount assigned"
+echo "$agentDef" | jq -r '(.skills // [])[] | "    · \(.)"'
+```
+
+### runs
+
+```bash
+echo "RUN HISTORY — $agent_id (last ${days} days)"
+echo "────────────────────────────────────────────────────────"
+printf "%-26s %-10s %-8s %-12s %s\n" "TIMESTAMP" "STATUS" "TOKENS" "DURATION" "TASK"
+echo "────────────────────────────────────────────────────────"
+
+found=0
+if [ -f "$activityFile" ]; then
+  while IFS= read -r line; do
+    agId=$(echo "$line" | jq -r '.agent // ""')
+    [ "$agId" != "$agent_id" ] && continue
+    ts=$(echo "$line" | jq -r '.ts // ""')
+    [ -n "$cutoff" ] && [ "$ts" \< "$cutoff" ] && continue
+    st=$(echo "$line" | jq -r '.status // "-"')
+    tok=$(echo "$line" | jq -r '.tokens // "-"')
+    dur=$(echo "$line" | jq -r '.duration_ms // "-"')
+    task=$(echo "$line" | jq -r '.task // "-"' | cut -c1-40)
+    printf "%-26s %-10s %-8s %-12s %s\n" "$ts" "$st" "$tok" "${dur}ms" "$task"
+    found=$((found + 1))
+  done < "$activityFile"
+fi
+
+[ "$found" -eq 0 ] && echo "  No runs in the last $days days."
+
+# 7-day summary bar
+echo ""
+echo "ACTIVITY SUMMARY (last 7 days)"
+for d in 6 5 4 3 2 1 0; do
+  dayLabel=$(date -u -v-${d}d +%Y-%m-%d 2>/dev/null || date -u -d "${d} days ago" +%Y-%m-%d 2>/dev/null || echo "?")
+  count=0
+  if [ -f "$activityFile" ]; then
+    count=$(grep "\"agent\":\"${agent_id}\"" "$activityFile" | grep "\"$dayLabel" | wc -l | tr -d ' ')
+  fi
+  bar=$(printf '%0.s█' $(seq 1 $((count > 10 ? 10 : count))))
+  printf "  %s  %-10s %s\n" "$dayLabel" "$bar" "($count)"
+done
+```
+
+### config
+
+```bash
+echo "ADAPTER CONFIG — $agent_id"
+echo "────────────────────────────────────────────────────────"
+echo "$agentDef" | jq '.adapter // {"model":"default","max_tokens":8192}'
+echo ""
+echo "RUNTIME CONFIG"
+echo "$agentDef" | jq '.runtimeConfig // {}'
+echo ""
+echo "HEARTBEAT CONFIG"
+echo "$agentDef" | jq '.heartbeat // {"enabled":false}'
+```
+
+### budget
+
+```bash
+echo "BUDGET — $agent_id @ $org_name"
+echo "────────────────────────────────────────────────────────"
+
+orgBudget=$(jq -r '.budget_tokens // 0' "$orgFile")
+agentBudget=$(echo "$agentDef" | jq -r '.budget_tokens // null')
+tokensUsed=$(echo "$agentState" | jq -r '.tokens_used // 0')
+
+echo "  Org budget:     $orgBudget tokens/day"
+[ "$agentBudget" != "null" ] && echo "  Agent cap:      $agentBudget tokens" || echo "  Agent cap:      (inherits org)"
+echo "  Used today:     $tokensUsed tokens"
+
+if [ "$orgBudget" -gt 0 ] && [ "$tokensUsed" -gt 0 ]; then
+  pct=$((tokensUsed * 100 / orgBudget))
+  echo "  Utilization:    ${pct}%"
+  [ "$pct" -ge 80 ] && echo "  WARNING: Agent has used ${pct}% of org daily budget."
+fi
+
+# Per-day breakdown from activity
+echo ""
+echo "DAILY USAGE (last 7 days)"
+for d in 6 5 4 3 2 1 0; do
+  dayLabel=$(date -u -v-${d}d +%Y-%m-%d 2>/dev/null || date -u -d "${d} days ago" +%Y-%m-%d 2>/dev/null || echo "?")
+  dayTok=0
+  if [ -f "$activityFile" ]; then
+    dayTok=$(grep "\"agent\":\"${agent_id}\"" "$activityFile" | grep "\"$dayLabel" | \
+      jq -rs '[.[].tokens // 0] | add // 0' 2>/dev/null || echo 0)
+  fi
+  printf "  %s  %s tokens\n" "$dayLabel" "$dayTok"
+done
+```
+
+### heartbeat
+
+```bash
+echo "HEARTBEAT CONFIG — $agent_id"
+echo "────────────────────────────────────────────────────────"
+enabled=$(echo "$agentDef" | jq -r '.heartbeat.enabled // false')
+interval=$(echo "$agentDef" | jq -r '.heartbeat.interval // 900')
+lastHb=$(echo "$agentState" | jq -r '.last_heartbeat // "-"')
+
+echo "  Enabled:   $enabled"
+echo "  Interval:  ${interval}s"
+echo "  Last beat: $lastHb"
+echo ""
+echo "To toggle: /mastermind:instance --action toggle-heartbeat --org $org_name --agent-id $agent_id"
+```
+
+### skills
+
+```bash
+echo "SKILLS — $agent_id"
+echo "────────────────────────────────────────────────────────"
+skillList=$(echo "$agentDef" | jq -r '(.skills // [])[]' 2>/dev/null)
+
+if [ -z "$skillList" ]; then
+  echo "  No skills assigned. Use /mastermind:skills to map skills to this agent."
+else
+  while IFS= read -r sk; do
+    skillFile=".claude/skills/${sk//:///}.md"
+    [ -f "$skillFile" ] && desc=$(head -5 "$skillFile" | grep 'description:' | sed 's/description: //') || desc="(skill file not found)"
+    printf "  %-30s %s\n" "$sk" "$desc"
+  done <<< "$skillList"
+fi
+```
+
+### reset
+
+```bash
+echo "Resetting agent state for '$agent_id'…"
+
+tmp="${stateFile}.tmp"
+if [ -f "$stateFile" ]; then
+  jq --arg id "$agent_id" \
+    '.agents[$id] = {"status":"idle","total_runs":0,"tokens_used":0,"last_run":null,"last_heartbeat":null}' \
+    "$stateFile" > "$tmp" && mv "$tmp" "$stateFile"
+fi
+
+echo "Agent '$agent_id' state reset. Run history is preserved in activity log."
+echo "To reconfigure adapter: edit the role in /mastermind:org --action show (then edit org config)."
+```
+
+---
+
+## Step 3 — Return Output
+
+```yaml
+domain: ops
+status: complete
+action: <action>
+org: <org_name>
+agent_id: <agent_id>
+agent_status: <status>
+```
+
+---
+
+## Step 4 — Brain Write (standalone only)
+
+If `caller` is not "command", follow _protocol.md Brain Write Procedure for domain `ops`.

package/.claude/skills/mastermind/agents.md

@@ -0,0 +1,178 @@
+---
+name: mastermind-agents
+description: Mastermind agents — list, inspect, hire, pause, and remove agents in a running org. Shows status, last heartbeat, adapter config, and burn rate per agent.
+type: domain-skill
+default_mode: confirm
+---
+
+# Mastermind Agents
+
+This skill is invoked by `mastermind:agents` or directly via `/mastermind:agents`.
+
+---
+
+## Inputs
+
+- `brain_context`: BRAIN CONTEXT block (injected by command, or loaded below if standalone)
+- `org_name`: org to inspect (optional — lists all orgs if omitted)
+- `action`: list | hire | pause | resume | remove | inspect
+- `agent_id`: role id or agent slug (required for inspect/pause/resume/remove)
+- `caller`: command | master
+
+---
+
+## Step 0 — Brain Load (standalone only)
+
+If `caller` is not "command", load brain context following _protocol.md Brain Load Procedure with namespace: `ops`.
+
+---
+
+## Step 1 — Resolve Org
+
+If `org_name` is provided, load `.monomind/orgs/<org_name>.json`. Otherwise list all orgs:
+
+```bash
+ls .monomind/orgs/*.json 2>/dev/null | xargs -I{} basename {} .json
+```
+
+If no orgs exist, print: "No orgs found. Run /mastermind:createorg to define one."
+
+---
+
+## Step 2 — Execute Action
+
+### list (default)
+
+Display all agents in the org with status from state file:
+
+```bash
+orgFile=".monomind/orgs/${org_name}.json"
+stateFile=".monomind/orgs/${org_name}-state.json"
+
+jq -r '.roles[] | "• [\(.id)] \(.title)  agent=\(.agent_type)  reports_to=\(.reports_to // "none")"' "$orgFile"
+
+# Overlay runtime status from state file if present
+if [ -f "$stateFile" ]; then
+  echo ""
+  echo "RUNTIME STATUS:"
+  jq -r '.agents // {} | to_entries[] | "  \(.key): \(.value.status // "unknown")  last_beat=\(.value.last_heartbeat // "never")"' "$stateFile" 2>/dev/null || true
+fi
+```
+
+Render as table:
+
+```
+AGENTS — org: <org_name>
+──────────────────────────────────────────────────────
+ID              TITLE              AGENT TYPE          STATUS        LAST HEARTBEAT
+boss            CEO / Boss         coordinator         running       2 min ago
+content-writer  Content Writer     Content Creator     idle          8 min ago
+reviewer        Content Reviewer   reviewer            waiting       8 min ago
+...
+```
+
+### inspect
+
+Show full config + responsibilities + communication edges for a single agent:
+
+```bash
+jq --arg id "$agent_id" '.roles[] | select(.id == $id)' "$orgFile"
+jq --arg id "$agent_id" '.communication[] | select(.from == $id or .to == $id)' "$orgFile"
+```
+
+### hire
+
+Add a new role to the org. Prompt the user for:
+- `id` (slug, e.g. `seo-lead`), `title` (display name), `agent_type` (from mapping table in createorg.md), `responsibilities` (comma-separated), `reports_to` (role id or null)
+
+**Adapter/model selection** — present this picker:
+
+```
+ADAPTER / MODEL
+───────────────
+Available Claude models:
+  1. claude-sonnet-4-6    → balanced capability + speed (Recommended)
+  2. claude-opus-4-7      → highest capability, slower
+  3. claude-haiku-4-5     → fastest, lowest cost
+
+Enter choice [1]:
+```
+
+Set `adapter_config.model` from selection. Default: `claude-sonnet-4-6`.
+
+Append to `.monomind/orgs/<org_name>.json` roles array using jq:
+
+```bash
+# model from adapter picker (default: claude-sonnet-4-6)
+adapter_model="${selected_model:-claude-sonnet-4-6}"
+
+tmp="${orgFile}.tmp"
+jq --arg id "$agent_id" \
+   --arg title "$title" \
+   --arg agent_type "$agent_type" \
+   --arg reports_to "${reports_to:-}" \
+   --arg model "$adapter_model" \
+   --argjson resp "$(echo "$responsibilities" | jq -R 'split(",") | map(ltrimstr(" "))')" \
+   '.roles += [{"id":$id,"title":$title,"agent_type":$agent_type,
+     "responsibilities":$resp,
+     "reports_to":($reports_to|if .=="" then null else . end),
+     "adapter_config":{"model":$model,"max_tokens":8192}}]' \
+   "$orgFile" > "$tmp" && mv "$tmp" "$orgFile"
+echo "Hired: $title ($agent_type) → adapter: $adapter_model"
+```
+
+Then emit `org:agent:hired` event to dashboard:
+
+```bash
+REPO_ROOT=$(git rev-parse --show-toplevel 2>/dev/null || pwd)
+CTRL_URL=$(jq -r '.url // "http://localhost:4242"' "$REPO_ROOT/.monomind/control.json" 2>/dev/null || echo "http://localhost:4242")
+curl -s -X POST "${CTRL_URL}/api/mastermind/event" \
+  -H "Content-Type: application/json" \
+  -d "$(jq -cn --arg org "$org_name" --arg role "$agent_id" --arg title "$title" \
+    '{type:"org:agent:hired",org:$org,role:$role,title:$title,ts:(now*1000|floor)}')" || true
+```
+
+### pause / resume
+
+Update state file:
+
+```bash
+stateFile=".monomind/orgs/${org_name}-state.json"
+[ ! -f "$stateFile" ] && echo '{"agents":{}}' > "$stateFile"
+tmp="${stateFile}.tmp"
+jq --arg id "$agent_id" --arg status "paused" \
+  '.agents[$id].status = $status | .agents[$id].updated_at = (now|todate)' \
+  "$stateFile" > "$tmp" && mv "$tmp" "$stateFile"
+```
+
+Emit `org:agent:paused` / `org:agent:resumed` event.
+
+### remove
+
+Confirm with user, then remove role from org config:
+
+```bash
+tmp="${orgFile}.tmp"
+jq --arg id "$agent_id" '.roles = [.roles[] | select(.id != $id)] | .communication = [.communication[] | select(.from != $id and .to != $id)]' \
+  "$orgFile" > "$tmp" && mv "$tmp" "$orgFile"
+```
+
+---
+
+## Step 3 — Return Output
+
+```yaml
+domain: ops
+status: complete
+action: <action>
+org: <org_name>
+agents_count: <N>
+```
+
+Print summary and any suggested next actions (e.g. "Run /mastermind:heartbeat to trigger a manual heartbeat for this agent").
+
+---
+
+## Step 4 — Brain Write (standalone only)
+
+If `caller` is not "command", follow _protocol.md Brain Write Procedure for domain `ops`.

package/.claude/skills/mastermind/approval-detail.md

@@ -0,0 +1,259 @@
+---
+name: mastermind-approval-detail
+description: Mastermind approval-detail — deep inspection and action on a single approval request. View approval metadata, payload, comments, linked issues, and perform approve/reject/revision/resubmit actions. Mirrors ApprovalDetail.tsx.
+type: domain-skill
+default_mode: confirm
+---
+
+# Mastermind Approval Detail
+
+This skill is invoked by `mastermind:approval-detail` or directly via `/mastermind:approval-detail`.
+
+---
+
+## Inputs
+
+- `brain_context`: BRAIN CONTEXT block (injected by command, or loaded below if standalone)
+- `org_name`: org the approval belongs to (required)
+- `approval_id`: approval id or short prefix (required)
+- `action`: show | comments | linked-issues | comment | approve | reject | request-revision | resubmit
+- `comment_body`: comment text (for comment action)
+- `caller`: command | master
+
+---
+
+## Approval Statuses
+
+| Status | Meaning |
+|--------|---------|
+| `pending` | Awaiting review — actionable |
+| `approved` | Approved and resolved |
+| `rejected` | Rejected and resolved |
+| `revision_requested` | Agent asked to revise — still actionable |
+| `resubmitted` | Agent resubmitted after revision |
+
+---
+
+## Approval Types
+
+| Type | Description |
+|------|-------------|
+| `budget_override_required` | Agent needs to exceed budget cap |
+| `agent_hire` | Agent is requesting to hire another agent |
+| `tool_grant` | Agent requests a new tool permission |
+| `action_confirm` | Agent requests confirmation before a destructive action |
+| `custom` | Plugin-defined approval type |
+
+---
+
+## Step 0 — Brain Load (standalone only)
+
+If `caller` is not "command", load brain context following _protocol.md Brain Load Procedure with namespace: `ops`.
+
+---
+
+## Step 1 — Load Approval
+
+```bash
+orgFile=".monomind/orgs/${org_name}.json"
+[ ! -f "$orgFile" ] && { echo "ERROR: Org '${org_name}' not found."; exit 1; }
+
+approvalsFile=".monomind/orgs/${org_name}-approvals.json"
+[ ! -f "$approvalsFile" ] && { echo "ERROR: No approvals file for org '${org_name}'."; exit 1; }
+
+# Find approval by full id or prefix
+approvalDef=$(jq -r --arg id "$approval_id" \
+  '.approvals[] | select(.id == $id or (.id | startswith($id)))' \
+  "$approvalsFile" | head -1)
+[ -z "$approvalDef" ] && { echo "ERROR: Approval '${approval_id}' not found."; exit 1; }
+
+approvalId=$(echo "$approvalDef" | jq -r '.id')
+commentsFile=".monomind/orgs/${org_name}-approval-comments.jsonl"
+```
+
+---
+
+## Step 2 — Execute Action
+
+### show (default)
+
+```bash
+echo "APPROVAL — ${approvalId}"
+echo "────────────────────────────────────────────────────────"
+
+echo "$approvalDef" | jq -r '
+  "  ID:         \(.id)",
+  "  Type:       \(.type // "unknown")",
+  "  Status:     \(.status // "pending")",
+  "  Agent:      \(.agentId // "(unknown)")",
+  "  Created:    \(.createdAt // "-")",
+  "  Resolved:   \(.resolvedAt // "-")"
+'
+
+echo ""
+echo "PAYLOAD"
+echo "────────────────────────────────────────────────────────"
+echo "$approvalDef" | jq -r '.payload // {}' | jq .
+
+status=$(echo "$approvalDef" | jq -r '.status // "pending"')
+if [ "$status" = "pending" ] || [ "$status" = "revision_requested" ]; then
+  echo ""
+  echo "ACTIONS AVAILABLE"
+  echo "  approve:          --action approve"
+  echo "  reject:           --action reject"
+  echo "  request revision: --action request-revision"
+  echo "  add comment:      --action comment --comment-body 'your notes'"
+fi
+```
+
+### comments
+
+```bash
+echo "COMMENTS — ${approvalId}"
+echo "────────────────────────────────────────────────────────"
+
+if [ ! -f "$commentsFile" ]; then
+  echo "  No comments."
+else
+  count=$(grep -c "\"approvalId\":\"${approvalId}\"" "$commentsFile" 2>/dev/null || echo 0)
+  echo "  Total: $count"
+  echo ""
+  grep "\"approvalId\":\"${approvalId}\"" "$commentsFile" 2>/dev/null | while IFS= read -r line; do
+    author=$(echo "$line" | jq -r '.authorType // "user"')
+    body=$(echo "$line" | jq -r '.body // ""')
+    ts=$(echo "$line" | jq -r '.createdAt // "-"')
+    echo "  [$ts] ($author)"
+    echo "  $body"
+    echo ""
+  done
+fi
+```
+
+### linked-issues
+
+```bash
+issuesFile=".monomind/orgs/${org_name}-issues.json"
+echo "LINKED ISSUES — ${approvalId}"
+echo "────────────────────────────────────────────────────────"
+printf "%-24s %-12s %s\n" "ID" "STATUS" "TITLE"
+echo "────────────────────────────────────────────────────────"
+
+linkedIds=$(echo "$approvalDef" | jq -r '(.linkedIssueIds // [])[]')
+if [ -z "$linkedIds" ]; then
+  echo "  No linked issues."
+else
+  if [ -f "$issuesFile" ]; then
+    echo "$linkedIds" | while read -r iid; do
+      row=$(jq -r --arg id "$iid" '.issues[] | select(.id == $id) | [.id, (.status // "open"), (.title // "(no title)")] | @tsv' "$issuesFile")
+      [ -n "$row" ] && echo "$row" | while IFS=$'\t' read -r id st title; do
+        printf "%-24s %-12s %s\n" "$id" "$st" "$title"
+      done || printf "%-24s %-12s %s\n" "$iid" "(unknown)" "(not found)"
+    done
+  fi
+fi
+```
+
+### comment
+
+```bash
+[ -z "$comment_body" ] && { echo "ERROR: --comment-body required."; exit 1; }
+
+ts=$(date -u +%Y-%m-%dT%H:%M:%SZ)
+entry=$(jq -n \
+  --arg aid "$approvalId" \
+  --arg org "$org_name" \
+  --arg body "$comment_body" \
+  --arg ts "$ts" \
+  '{"approvalId":$aid,"org":$org,"authorType":"operator","body":$body,"createdAt":$ts}')
+
+echo "$entry" >> "$commentsFile"
+
+echo "Comment added to approval ${approvalId}."
+echo "  Body: $comment_body"
+echo "  At:   $ts"
+```
+
+### approve
+
+```bash
+status=$(echo "$approvalDef" | jq -r '.status // "pending"')
+if [ "$status" != "pending" ] && [ "$status" != "revision_requested" ]; then
+  echo "ERROR: Approval is in status '$status' — cannot approve."
+  exit 1
+fi
+
+ts=$(date -u +%Y-%m-%dT%H:%M:%SZ)
+tmp="${approvalsFile}.tmp"
+jq --arg id "$approvalId" --arg ts "$ts" \
+  '.approvals = [.approvals[] | if .id == $id then
+     .status = "approved" | .resolvedAt = $ts | .resolvedBy = "operator"
+   else . end]' \
+  "$approvalsFile" > "$tmp" && mv "$tmp" "$approvalsFile"
+
+echo "Approval '${approvalId}' APPROVED."
+echo "  Resolved at: $ts"
+echo "  Agent will be notified to proceed."
+```
+
+### reject
+
+```bash
+ts=$(date -u +%Y-%m-%dT%H:%M:%SZ)
+tmp="${approvalsFile}.tmp"
+jq --arg id "$approvalId" --arg ts "$ts" \
+  '.approvals = [.approvals[] | if .id == $id then
+     .status = "rejected" | .resolvedAt = $ts | .resolvedBy = "operator"
+   else . end]' \
+  "$approvalsFile" > "$tmp" && mv "$tmp" "$approvalsFile"
+
+echo "Approval '${approvalId}' REJECTED."
+echo "  Resolved at: $ts"
+```
+
+### request-revision
+
+```bash
+ts=$(date -u +%Y-%m-%dT%H:%M:%SZ)
+tmp="${approvalsFile}.tmp"
+jq --arg id "$approvalId" --arg ts "$ts" \
+  '.approvals = [.approvals[] | if .id == $id then
+     .status = "revision_requested" | .revisionRequestedAt = $ts
+   else . end]' \
+  "$approvalsFile" > "$tmp" && mv "$tmp" "$approvalsFile"
+
+echo "Revision requested for approval '${approvalId}'."
+echo "  Agent will be notified to revise and resubmit."
+```
+
+### resubmit
+
+```bash
+ts=$(date -u +%Y-%m-%dT%H:%M:%SZ)
+tmp="${approvalsFile}.tmp"
+jq --arg id "$approvalId" --arg ts "$ts" \
+  '.approvals = [.approvals[] | if .id == $id then
+     .status = "pending" | .resubmittedAt = $ts
+   else . end]' \
+  "$approvalsFile" > "$tmp" && mv "$tmp" "$approvalsFile"
+
+echo "Approval '${approvalId}' resubmitted (status reset to pending)."
+```
+
+---
+
+## Step 3 — Return Output
+
+```yaml
+domain: ops
+status: complete
+action: <action>
+org: <org_name>
+approval_id: <approval_id>
+approval_status: <status>
+```
+
+---
+
+## Step 4 — Brain Write (standalone only)
+
+If `caller` is not "command", follow _protocol.md Brain Write Procedure for domain `ops`.