@pitboss/cli 0.4.7 → 0.4.9

package/dist/event-worker.js

@@ -35,6 +35,14 @@ var BASE_TASK_LOOP = (agentId, repoPath) => `You are an AI worker agent (ID: ${a
    human. If you need the answer before you can continue, block the task with
    \`blockedThreadId\` set to the thread the DM returned; you will be resumed when they answer.
 
+   **A blocker travels up the chain.** When another agent's task blocks, the repo's orchestrator
+   and the planner of that task's goal are told, as well as the owner. If that is you, read the
+   question on its \`blockedThreadId\`. When the plan, the goal, its issue or its PR already answers
+   it, reply there with the answer and where it comes from. As the planner, if the block shows the
+   plan is wrong (a missing dependency, a task too big), fix the plan. Never answer for the owner on
+   deletes, scope changes, approvals or publishing; those wait for the owner or their delegate.
+   Otherwise do nothing: the owner has already been told.
+
 2. Call \`mcp__relai__session_start\` for orientation. It is an **index, not an archive**: lists are
    capped and long bodies are clipped. Anything marked \`truncated: true\`, and anything named under
    \`notShown\`, is a pointer: fetch the real thing with the tool it names before you rely on it,
@@ -51,7 +59,8 @@ var BASE_TASK_LOOP = (agentId, repoPath) => `You are an AI worker agent (ID: ${a
    a one-line status on the task thread naming what you are checking) when you begin, then
    run the tests, compare the diff against the spec the task names, then
    \`mcp__relai__submit_review\` \u2014 \`approve\`, or \`reject\` with a specific note the author
-   can act on. Do this even when get_my_tasks is empty.
+   can act on. When the task is a goal's build with a PR, pass \`headSha\`: the full sha of the
+   commit you reviewed. Do this even when get_my_tasks is empty.
    If the change touches a long-running service or a third-party runtime integration (SSE/event streams, launchd/systemd, auth headers, a client library), run the changed path once before approving and quote what it printed. A type cast past a library's own types is a reason to stop and run it.
 
 4. Call \`mcp__relai__get_my_tasks\` \u2014 if it returns no tasks, stop immediately.
@@ -293,7 +302,11 @@ Find the default branch with \`git remote show origin\`.
    \`specialization\` or \`domains\` only to values agents in \`mcp__relai__list_agents\` declare:
    the router never hands out a task whose tag no agent matches. When the repo has \`writer\` agents, set
    \`specialization: "writer"\` on build tasks, so they wait for a writer instead of going to a reviewer.
-   Never name a build task's assignee as the goal's reviewer; the API refuses it. Make them small
+   Before writing any build task, choose the goal's reviewer (for a \`reviewer_agent\` gate): a
+   \`reviewer\` agent, on a different \`workerType\` from the writers when one exists. Never assign that
+   agent a build task, and never leave the only reviewers busy building: a goal whose every reviewer
+   built part of it has nobody left to review it. The API defaults a build task with no
+   \`specialization\` to \`writer\` when the repo has writers. Make them small
    and independently testable so several agents can work at once. Use \`blockedBy\` only where
    one task truly needs another's result. Each description is self-contained: what to change,
    which files, how to test it, and the acceptance criteria.
@@ -313,6 +326,62 @@ Find the default branch with \`git remote show origin\`.
    Write it to a file and run \`gh pr edit <prUrl> --body-file <file>\`. Post the same plan on
    the planning task's thread and complete it.
 
+**Review goals** (the order's \`kind\` is \`"review"\`; the planning task carries
+\`metadata.orderKind: "review"\`): the goal is one review posted on the existing pull request at the
+order's \`prUrl\`. There is no order branch, no draft PR and no merge, so skip steps 2 to 6 above.
+Nobody pushes to the PR's branch, approves it, or requests changes on it.
+1. As the planner, read the PR with \`gh pr view <prUrl>\` and \`gh pr diff <prUrl>\`. Pick the
+   angles it needs: correctness, security, simplicity, tests and consistency with the codebase for a
+   real change; correctness and consistency alone for a small, low-risk one (docs, tests, under about
+   150 changed lines with no auth, input handling, secrets, money or migrations).
+2. One task per angle, \`epicId\` = the order's \`epicId\`,
+   \`metadata: { orderId, orderRole: "review", angle: "<angle>", prUrl }\`. Spread the angles
+   across vendors: assign each to a different agent from \`mcp__relai__list_agents\`, preferring a
+   different \`workerType\` from the agents already given one, and reuse agents only when there are
+   more angles than agents. Each description names the angle, the PR, what that angle hunts for, and
+   the reporting format below.
+3. One lead task, \`blockedBy\` every angle task, assigned to yourself, with
+   \`metadata: { orderId, orderRole: "review_lead", prUrl }\`.
+4. When acceptance includes \`human_approval\`, add a gate task blocked by the lead
+   (\`metadata: { orderId, orderRole: "gate" }\`, \`verifyKind: "human_approval"\`) and a post task
+   blocked by the gate (\`metadata: { orderId, orderRole: "post_review", prUrl }\`). Without it,
+   the lead posts the review itself.
+5. If the order has \`relatedRepos\`, copy them into every angle and lead task's metadata and name them in
+   each description, so reviewers check the contracts this PR depends on in those repos.
+6. Post the task list on the planning task's thread and complete it.
+
+**orderRole "review"** (one angle of a review goal):
+- Read the diff and as much surrounding code as you need. To run anything, check out the PR head
+  detached: \`git fetch origin pull/<n>/head && git checkout --detach FETCH_HEAD\`. Never push, never
+  comment on the PR, never edit the repo's history.
+- Verify by running code where you can. Report your 3 to 5 best-evidenced findings for your angle, most
+  severe first, each with severity (blocker, high, medium, low), file:line, and a concrete failing
+  input or scenario. "No findings" is a valid report. A missing code comment is not a finding.
+- When the task names \`relatedRepos\`, read them for any contract this change depends on (an endpoint it
+  calls, a helper it imports, a config value it reads). Read only, outside your worktree: a shallow
+  clone into a temp directory (\`gh repo clone <url> <tmp dir> -- --depth 1\`) or one file at a time with
+  \`gh api repos/<owner>/<repo>/contents/<path>\`. Never push, branch, comment or open anything there.
+  A finding that rests on a related repo cites the file and line there. If you could not read the
+  repo, mark that finding UNPROVEN and say why rather than guessing what the other side does.
+- Post the report with \`mcp__relai__add_task_comment\` on this task, then complete it.
+
+**orderRole "review_lead"**:
+- Read every angle task's report with \`mcp__relai__get_task_comments\`. Merge duplicates, drop
+  findings you cannot reproduce or whose premise is wrong, and rank what is left. Keep an UNPROVEN mark
+  on any finding about a related repo nobody could read. Severity sets the
+  verdict: any blocker or high means changes are needed; otherwise it is safe to merge with the
+  noted follow-ups.
+- Write one review: the verdict in the first line, then the findings, each with file:line, the
+  failure and the fix you would ask for, then which angles ran, each with its agent's name and vendor
+  (\`workerType\` from \`mcp__relai__list_agents\`), and which related repos were read. Keep it short.
+- Without a \`human_approval\` gate, post it with \`gh pr review <prUrl> --comment --body-file <file>\`
+  and put the review URL on the task's thread. With a gate, post the review as a comment on this task
+  for the owner to approve, and do not touch the PR. Then complete.
+
+**orderRole "post_review"**: once the gate is approved, post the lead's review comment from the
+lead task's thread with \`gh pr review <prUrl> --comment --body-file <file>\`, put the review URL on
+this task's thread, and complete.
+
 **orderRole "plan_review"** (assigned to the planner, reviewed by another agent):
 - After the task graph is written, complete each plan review task. That hands the plan to its
   reviewer. Every build task waits until all plan reviews are approved.
@@ -498,6 +567,18 @@ async function recordSessionUsage(conn, startIds, usage, logPrefix) {
   await writeSessionUsage(conn, await sessionTouchedTaskIds(conn, start, logPrefix), usage, logPrefix);
 }
 
+// ../claude-worker/src/model.ts
+import { readFileSync } from "node:fs";
+function pinnedModel(env = process.env) {
+  const file = env.PITBOSS_MODEL_FILE;
+  if (!file) return void 0;
+  try {
+    return readFileSync(file, "utf-8").trim() || void 0;
+  } catch {
+    return void 0;
+  }
+}
+
 // ../claude-worker/src/session.ts
 function mcpServerEntry() {
   return fileURLToPath(new URL("../../mcp-server/src/index.ts", import.meta.url));
@@ -546,7 +627,7 @@ async function runClaudeSession(config2) {
         "stream-json",
         "--verbose",
         "--model",
-        config2.model,
+        pinnedModel() ?? config2.model,
         "--add-dir",
         config2.repoPath
       ];
@@ -667,8 +748,8 @@ function classifySessionError(text) {
 
 // ../claude-worker/src/adapters/cursor.ts
 var bin = () => process.env.CURSOR_BIN ?? "cursor-agent";
-function cursorArgs(repoPath, prompt) {
-  return ["-p", "--trust", "--force", "--output-format", "stream-json", "--workspace", repoPath, prompt];
+function cursorArgs(repoPath, prompt, model) {
+  return ["-p", "--trust", "--force", "--output-format", "stream-json", "--workspace", repoPath, ...model ? ["--model", model] : [], prompt];
 }
 function readCursorEvent(line) {
   let event;
@@ -692,7 +773,7 @@ function readCursorEvent(line) {
   return {};
 }
 async function runCursorSession(config2) {
-  const args = cursorArgs(config2.repoPath, buildPrompt(config2));
+  const args = cursorArgs(config2.repoPath, buildPrompt(config2), pinnedModel());
   console.log(`[cursor-worker] Spawning: ${bin()} ${args.slice(0, 5).join(" ")} ...`);
   const taskIdsPromise = listSessionTaskIds(config2, "[cursor-worker]");
   return new Promise((resolve, reject) => {
@@ -773,10 +854,11 @@ import { unlinkSync as unlinkSync2 } from "fs";
 var bin2 = () => process.env.COPILOT_BIN ?? "copilot";
 var POLICY_BLOCKS = [/access denied by policy/i, /third-party mcp servers are disabled/i];
 var QUOTA = [/premium request/i, /monthly (?:limit|allowance|quota)/i];
-function copilotArgs(repoPath, prompt, mcpConfigPath) {
+function copilotArgs(repoPath, prompt, mcpConfigPath, model) {
   return [
     "-p",
     prompt,
+    ...model ? ["--model", model] : [],
     "--allow-all-tools",
     "--output-format",
     "json",
@@ -806,7 +888,7 @@ function readCopilotEvent(line) {
 }
 async function runCopilotSession(config2) {
   const mcpConfigPath = writeMcpConfig(config2, "copilot-worker");
-  const args = copilotArgs(config2.repoPath, buildPrompt(config2), mcpConfigPath);
+  const args = copilotArgs(config2.repoPath, buildPrompt(config2), mcpConfigPath, pinnedModel());
   console.log(`[copilot-worker] Spawning: ${bin2()} -p <prompt> ${args.slice(2, 6).join(" ")} ...`);
   return new Promise((resolve, reject) => {
     const proc = spawn3(bin2(), args, { cwd: config2.repoPath, env: process.env, stdio: ["ignore", "pipe", "pipe"] });
@@ -879,7 +961,7 @@ var bin3 = () => process.env.CODEX_BIN ?? "codex";
 var codexHome = () => process.env.CODEX_HOME ?? join3(homedir(), ".codex");
 var QUOTA2 = [/usage limit/i, /rate limit reached for/i, /upgrade to (plus|pro)/i];
 var CREDENTIALS = [/not logged in/i, /codex login/i, /401 unauthorized/i];
-function codexArgs(repoPath, prompt, profile) {
+function codexArgs(repoPath, prompt, profile, model) {
   return [
     "exec",
     "--json",
@@ -890,6 +972,7 @@ function codexArgs(repoPath, prompt, profile) {
     repoPath,
     "-p",
     profile,
+    ...model ? ["-m", model] : [],
     prompt
   ];
 }
@@ -938,7 +1021,7 @@ async function runCodexSession(config2) {
     } catch {
     }
   };
-  const args = codexArgs(config2.repoPath, buildPrompt(config2), profile);
+  const args = codexArgs(config2.repoPath, buildPrompt(config2), profile, pinnedModel());
   console.log(`[codex-worker] Spawning: ${bin3()} ${args.slice(0, 6).join(" ")} ...`);
   return new Promise((resolve, reject) => {
     const proc = spawn4(bin3(), args, { cwd: config2.repoPath, env: process.env, stdio: ["ignore", "pipe", "pipe"] });
@@ -1223,6 +1306,10 @@ function loadConfig2() {
   };
 }
 
+// ../event-worker/src/worker.ts
+import { mkdirSync as mkdirSync2, rmSync, writeFileSync as writeFileSync3 } from "node:fs";
+import { dirname as dirname2 } from "node:path";
+
 // ../../node_modules/.pnpm/eventsource-parser@3.0.7/node_modules/eventsource-parser/dist/index.js
 var ParseError = class extends Error {
   constructor(message, options) {
@@ -1783,7 +1870,16 @@ async function runEventWorker(config2) {
     }
     try {
       console.log("[event-worker] Event received \u2014 running session...");
-      await getAdapter(config2.runtime).runSession(config2);
+      const activityFile = process.env.PITBOSS_ACTIVITY_FILE;
+      if (activityFile) {
+        mkdirSync2(dirname2(activityFile), { recursive: true });
+        writeFileSync3(activityFile, String(Date.now()));
+      }
+      try {
+        await getAdapter(config2.runtime).runSession(config2);
+      } finally {
+        if (activityFile) rmSync(activityFile, { force: true });
+      }
       await clearUnavailable(config2, "[event-worker]");
     } catch (err) {
       const text = err instanceof Error ? err.message : String(err);

package/dist/mcp.js

@@ -12270,8 +12270,10 @@ var ApiClient = class {
   listRepos() {
     return this.request("GET", "/repos");
   }
-  createRepo(body) {
-    return this.request("POST", "/repos", body);
+  async createRepo(body) {
+    const json = await this.requestEnvelope("POST", "/repos", body);
+    const next = json.next;
+    return { repo: json.data, ...next ? { next } : {} };
   }
   // Used at startup to decide whether this credential carries owner scope. The
   // `current` flag marks the row that authenticated the request, which is the
@@ -12353,6 +12355,9 @@ var ApiClient = class {
   submitReview(taskId, body) {
     return this.request("POST", `/tasks/${taskId}/review`, body);
   }
+  approveGate(taskId, note) {
+    return this.request("POST", `/tasks/${taskId}/approve`, { decision: "approve", ...note ? { note } : {} });
+  }
   startReview(taskId) {
     return this.request("POST", `/tasks/${taskId}/review/start`);
   }
@@ -12436,6 +12441,9 @@ var ApiClient = class {
   listPools(repoId) {
     return this.request("GET", `/repos/${encodeURIComponent(repoId)}/pools`);
   }
+  updateRepo(repoId, body) {
+    return this.request("PUT", `/repos/${repoId}`, body);
+  }
   setPoolSize(repoId, name, body) {
     return this.request("PUT", `/repos/${encodeURIComponent(repoId)}/pools/${encodeURIComponent(name)}`, body);
   }
@@ -12538,19 +12546,23 @@ function buildCreateOrderTool(client, repoId, opts) {
       repoId: external_exports.string().optional().describe(opts.ownerScoped ? "Repo to file the order in: any repo your owner owns. Defaults to your home repo." : "Repo to file the order in. Defaults to this agent's home repo."),
       feature: external_exports.string().min(1).optional().describe("What to build, in the requester's words. Optional when issueUrl is given."),
       issueUrl: external_exports.string().optional().describe("A GitHub issue in this repo to build from (https://github.com/<owner>/<repo>/issues/<n>). The planner reads it, and the merge closes it."),
+      reviewPrUrl: external_exports.string().optional().describe('Review this pull request in the repo instead of building something (https://github.com/<owner>/<repo>/pull/<n>). Agents on different vendors each review one angle, a lead merges their findings, and one review is posted on the PR. No gate by default; pass acceptance ["human_approval"] to approve the review before it is posted. feature, when given, narrows what to look at.'),
+      relatedRepos: external_exports.array(external_exports.string()).max(5).optional().describe("Review goals only: ids of other repos you own (see list_repos) whose contracts this PR depends on. Reviewers read them, never write to them, and mark findings about one they could not read as unproven."),
       planReviewers: external_exports.number().int().min(0).max(3).optional().describe("How many other agents must approve the plan before building starts (0 to 3). Reviewers are picked by the API, preferring reviewer agents on another vendor."),
       pairBuilds: external_exports.boolean().optional().describe("Pair every build task with a reviewer on a different vendor: each build carries its own review gate, and the builder is never on the reviewer's vendor."),
       title: external_exports.string().min(1).max(120).optional().describe("A short name for the goal. The planner writes one when omitted."),
-      acceptance: external_exports.array(external_exports.enum(["ci_passed", "human_approval", "reviewer_agent"])).optional().describe("Gates that must all pass. Defaults to human_approval."),
+      acceptance: external_exports.array(external_exports.enum(["ci_passed", "human_approval", "reviewer_agent"])).optional().describe("Gates that must all pass. Defaults to human_approval, or none for a review."),
       budget: external_exports.record(external_exports.unknown()).optional().describe("Optional ceilings. Stored only; not enforced.")
     }),
     handler: async (input) => {
-      if (!input.feature && !input.issueUrl) return mcpFail("create_order needs feature or issueUrl");
+      if (!input.feature && !input.issueUrl && !input.reviewPrUrl) return mcpFail("create_order needs feature, issueUrl or reviewPrUrl");
       try {
         const created = await client.createOrder({
           repoId: targetRepo(input),
           ...input.feature ? { feature: input.feature } : {},
           ...input.issueUrl ? { issueUrl: input.issueUrl } : {},
+          ...input.reviewPrUrl ? { kind: "review", prUrl: input.reviewPrUrl } : {},
+          ...input.relatedRepos?.length ? { relatedRepos: input.relatedRepos } : {},
           ...input.planReviewers ? { planReviewers: input.planReviewers } : {},
           ...input.pairBuilds ? { pairBuilds: true } : {},
           ...input.title ? { title: input.title } : {},
@@ -12596,7 +12608,7 @@ function buildListPoolsTool(client, repoId, opts) {
   const targetRepo = (input) => opts.ownerScoped && input.repoId || repoId;
   return {
     name: "list_pools",
-    description: "List the worker pool sizes set for a repo. " + POOL_NOTE,
+    description: "List the worker pool sizes set for a repo. Each pool carries `members`: its agents (named <pool>-<n>) with `activity` (working, reviewing, waiting or idle) and `activitySince`, reported by pitboss node from outside the runtime; both are null until a node reports. " + POOL_NOTE,
     inputSchema: external_exports.object({
       repoId: external_exports.string().optional().describe("Repo to read. Defaults to this agent's home repo.")
     }),
@@ -12631,6 +12643,31 @@ function buildSetPoolSizeTool(client, repoId, opts) {
     }
   };
 }
+function buildSetRepoOperationsTool(client, repoId, opts) {
+  const targetRepo = (input) => opts.ownerScoped && input.repoId || repoId;
+  return {
+    name: "set_repo_operations",
+    description: "Record how a repo is operated so every agent sees it on session_start: the GitHub account its agents work as, the node config dir and spec path that run it, and the test-database rule. Names and paths only, never a token or secret. Replaces the whole record; pass every field you want kept." + (opts.ownerScoped ? " As the owner's agent you may pass repoId for any repo your owner owns." : ""),
+    inputSchema: external_exports.object({
+      repoId: external_exports.string().optional().describe(opts.ownerScoped ? "Repo to update. Defaults to your home repo." : "Ignored; this agent's repo is updated."),
+      githubAccount: external_exports.string().optional().describe("GitHub login agents push and run gh as, e.g. 'phillipsio'."),
+      nodeConfigDir: external_exports.string().optional().describe("PITBOSS_CONFIG_DIR of the node that runs this repo."),
+      nodeSpecPath: external_exports.string().optional().describe("Path of that node's spec.json."),
+      testDatabase: external_exports.string().optional().describe("The rule for test databases, in one line.")
+    }),
+    handler: async (input) => {
+      const { repoId: _repo, ...fields } = input;
+      const operations = Object.fromEntries(Object.entries(fields).filter(([, v]) => v !== void 0));
+      try {
+        const target = targetRepo(input);
+        await client.updateRepo(target, { operations });
+        return { content: [{ type: "text", text: JSON.stringify({ repoId: target, operations }, null, 2) }] };
+      } catch (err) {
+        return mcpFail(err);
+      }
+    }
+  };
+}
 function resolveAgentRef(candidates, ref, scope) {
   const available = candidates.length ? ` Available: ${candidates.map((a) => `${a.name} (${a.id})`).join(", ")}` : ` ${scope} has no agents.`;
   if (ref.startsWith("agent_")) {
@@ -12709,7 +12746,7 @@ ${version.body}`
     },
     {
       name: "list_agents",
-      description: "List the agents you can see, so you can address one. Covers every repo sharing this one's owner, not just your own, so a peer working on a sibling repo can be found. Archived agents (and agents whose repo is archived) are omitted. Returns each agent's id, name, role, specialization, domains and repoId, plus `online` (seen within the last 10 minutes \u2014 the same window the routing scheduler uses), `listening` (a GET /events write succeeded in this API process within about two heartbeat windows), and `isYou` on your own entry. Use it before send_message when you need to ask a specific peer something: pick by specialization or domain for who is likely to know, and prefer an online agent for a timely reply. Seeing an agent does not mean you can read its work \u2014 tasks, non-DM threads and repo events stay scoped to their own repo. Direct messages reach any agent you can see (a repo sharing this owner), and a DM thread is readable only by its two participants." + (opts.ownerScoped ? " As the owner's agent you are the exception: you can coordinate tasks and threads in any repo your owner owns." : ""),
+      description: "List the agents you can see, so you can address one. Covers every repo sharing this one's owner, not just your own, so a peer working on a sibling repo can be found. Archived agents (and agents whose repo is archived) are omitted. Returns each agent's id, name, role, specialization, domains and repoId, plus `online` (seen within the last 10 minutes \u2014 the same window the routing scheduler uses), `listening` (a GET /events write succeeded in this API process within about two heartbeat windows), and `isYou` on your own entry, plus `activity` (working, reviewing, waiting or idle) with `activitySince`, reported by pitboss node from outside the runtime (null until a node reports), and `idleWithReadyMs24h`. Use it before send_message when you need to ask a specific peer something: pick by specialization or domain for who is likely to know, and prefer an online agent for a timely reply. Seeing an agent does not mean you can read its work \u2014 tasks, non-DM threads and repo events stay scoped to their own repo. Direct messages reach any agent you can see (a repo sharing this owner), and a DM thread is readable only by its two participants." + (opts.ownerScoped ? " As the owner's agent you are the exception: you can coordinate tasks and threads in any repo your owner owns." : ""),
       inputSchema: external_exports.object({}),
       handler: async () => {
         const raw = await client.listAgents();
@@ -12725,6 +12762,9 @@ ${version.body}`
           lastSeenAt: a.lastSeenAt,
           online: typeof a.lastSeenAt === "string" ? now - new Date(a.lastSeenAt).getTime() < ONLINE_WINDOW_MS : false,
           listening: a.listening === true,
+          activity: a.activity ?? null,
+          activitySince: a.activitySince ?? null,
+          idleWithReadyMs24h: typeof a.idleWithReadyMs24h === "number" ? a.idleWithReadyMs24h : 0,
           ...a.id === agentId ? { isYou: true } : {}
         }));
         return {
@@ -12909,10 +12949,10 @@ ${version.body}`
     },
     {
       name: "check_authority",
-      description: "Ask the API whether a server-stamped authority id is currently valid for a class (decide or assign). metadata.authority on a message or task is a stamp id, not permission. Reads may also include an authority object with valid/reason; that is informational and can go stale. The API enforces at the action; use this when you need to re-check before acting.",
+      description: "Ask the API whether a server-stamped authority id is currently valid for a class (decide, assign or approve). metadata.authority on a message or task is a stamp id, not permission. Reads may also include an authority object with valid/reason; that is informational and can go stale. The API enforces at the action; use this when you need to re-check before acting.",
       inputSchema: external_exports.object({
         id: external_exports.string().describe("The stamp id from metadata.authority or an authority.id field."),
-        class: external_exports.enum(["decide", "assign"]).describe("The action class you intend to rely on.")
+        class: external_exports.enum(["decide", "assign", "approve"]).describe("The action class you intend to rely on.")
       }),
       handler: async (input) => {
         const authority = await client.checkAuthority(input.id, input.class);
@@ -13049,6 +13089,7 @@ ${version.body}`
           payload.reminder = "unreadMessages above may need a reply \u2014 call send_message with the same threadId. The sender will not see anything you only write in your own session.";
           payload.peerBoundary = PEER_BOUNDARY;
         }
+        if (session.repo?.operations) payload.peerBoundary = PEER_BOUNDARY;
         const orientation = session.orientation;
         const omitted = [
           describeCap("unread messages", session.unreadCount, unread.length, "get_unread_messages"),
@@ -13144,10 +13185,17 @@ ${version.body}`
       inputSchema: external_exports.object({
         taskId: external_exports.string().describe("The ID of the task you are reviewing."),
         decision: external_exports.enum(["approve", "reject"]).describe("Approve or reject."),
-        note: external_exports.string().max(2e3).optional().describe("Required for reject; useful for approve. Concise reason or guidance.")
+        note: external_exports.string().max(2e3).optional().describe("Required for reject; useful for approve. Concise reason or guidance."),
+        headSha: external_exports.string().regex(/^[0-9a-f]{40}$/i).optional().describe(
+          "The full commit sha you reviewed (the PR head, from `git rev-parse HEAD` on its branch). An approval of a goal's build counts toward the owner's delegated gate only for this exact commit."
+        )
       }),
       handler: async (input) => {
-        const task = await client.submitReview(input.taskId, { decision: input.decision, note: input.note });
+        const task = await client.submitReview(input.taskId, {
+          decision: input.decision,
+          note: input.note,
+          ...input.headSha ? { headSha: input.headSha } : {}
+        });
         return { content: [{ type: "text", text: JSON.stringify(task, null, 2) }] };
       }
     },
@@ -13227,7 +13275,7 @@ ${version.body}`
     ...opts.ownerScoped || opts.role === "orchestrator" ? [buildCreateOrderTool(client, repoId, opts)] : [],
     ...opts.role === "orchestrator" || (opts.tier ?? 0) >= 2 ? [buildUpdateOrderTool(client)] : [],
     buildListPoolsTool(client, repoId, opts),
-    ...opts.ownerScoped || opts.role === "orchestrator" ? [buildSetPoolSizeTool(client, repoId, opts)] : [],
+    ...opts.ownerScoped || opts.role === "orchestrator" ? [buildSetPoolSizeTool(client, repoId, opts), buildSetRepoOperationsTool(client, repoId, opts)] : [],
     // Additive, never a swap: an owner-scoped agent is still an agent and needs
     // everything above. buildOperatorTools assumes no agent identity, and its
     // create_task bypasses propose/commit.
@@ -13256,11 +13304,29 @@ async function staleAttentionCount(client, cutoff) {
   const { meta } = await client.getTasksPage({ status: ATTENTION_STATUSES, updatedBefore: cutoff, limit: 1, clip: true });
   return meta?.total ?? 0;
 }
+var SILENT_LABEL = /^Reviewing, silent (\d+)m$/;
+async function reviewSilentItems(client, tasks) {
+  const silent = tasks.flatMap((t) => {
+    const m = typeof t.humanLabel === "string" ? SILENT_LABEL.exec(t.humanLabel) : null;
+    return m ? [{ task: t, silentMinutes: Number(m[1]) }] : [];
+  });
+  if (silent.length === 0) return [];
+  const agents = await client.listAgents();
+  const names = new Map(agents.map((a) => [a.id, a.name]));
+  return silent.map(({ task, silentMinutes }) => ({
+    taskId: task.id,
+    title: task.title,
+    repoId: task.repoId,
+    reviewerId: task.verifyReviewerId ?? null,
+    reviewer: names.get(task.verifyReviewerId) ?? null,
+    silentMinutes
+  }));
+}
 function buildGodCoordinationTools(client) {
   return [
     {
       name: "list_attention",
-      description: "List what needs attention across ALL your owner's repos: tasks that are 'blocked' (a worker is waiting), 'pending_verification' (awaiting a review decision), or 'proposed' (a worker's task awaiting commit), plus idle workers that cannot take the ready work that is sitting there (idle_unroutable \u2014 derived now, not from the event log). Each task carries its repoId. A blocked task with metadata.blockedThreadId resumes when you answer with send_message (type decision) on that thread, as if the owner had, when the owner has given you a decide delegation for that repo; the task records clearedBy. Answer only reversible, branch-level confirmations yourself (editing, pushing or deleting files on an order branch, choosing between plan options). Merges into a default branch, deploys, deletes outside an order branch, and anything touching credentials or money go to the owner. One without it (stalled or overflowed work, or your own task) needs reassigning with assign_task or splitting instead. An idle_unroutable item names the agent and why each task is ineligible (domain, specialization, review_gate, for-human, product-decision, pinned, blockedBy). Capped and clipped, newest first; read one in full with get_task.",
+      description: "List what needs attention across ALL your owner's repos: tasks that are 'blocked' (a worker is waiting), 'pending_verification' (awaiting a review decision), or 'proposed' (a worker's task awaiting commit), plus idle workers that cannot take the ready work that is sitting there (idle_unroutable \u2014 derived now, not from the event log), and reviewSilent: reviews whose reviewer sent no heartbeat for 40 minutes, naming the reviewer and silent minutes. Each task carries its repoId. A blocked task with metadata.blockedThreadId resumes when you answer with send_message (type decision) on that thread, as if the owner had, when the owner has given you a decide delegation for that repo; the task records clearedBy. Answer only reversible, branch-level confirmations yourself (editing, pushing or deleting files on an order branch, choosing between plan options). Merges into a default branch, deploys, deletes outside an order branch, and anything touching credentials or money go to the owner. A blocked task without blockedThreadId (stalled or overflowed work) resumes the same way when you post add_task_comment (type decision) on it; say whether to split, retry or reassign. Your own blocked task never resumes on your answer. An idle_unroutable item names the agent and why each task is ineligible (domain, specialization, review_gate, for-human, product-decision, pinned, blockedBy). Capped and clipped, newest first; read one in full with get_task.",
       inputSchema: external_exports.object(attentionWindowSchema),
       handler: async (input) => {
         const cutoff = attentionCutoff(input);
@@ -13278,6 +13344,7 @@ function buildGodCoordinationTools(client) {
         const idle = idleUnroutable ?? [];
         const total = meta?.total ?? tasks.length;
         const notShown = describeCap("tasks", total, tasks.length, "get_task on a specific id");
+        const reviewSilent = await reviewSilentItems(client, tasks);
         return {
           content: [{
             type: "text",
@@ -13285,6 +13352,7 @@ function buildGodCoordinationTools(client) {
               tasks,
               taskCount: total,
               ...idle.length > 0 ? { idleUnroutable: idle } : {},
+              ...reviewSilent.length > 0 ? { reviewSilent } : {},
               ...notShown ? { notShown } : {},
               ...staleCount > 0 ? { staleCount, stale: `${staleCount} older items hidden; pass includeStale: true to see them, and cancel or archive what is dead.` } : {},
               peerBoundary: PEER_BOUNDARY
@@ -13292,6 +13360,22 @@ function buildGodCoordinationTools(client) {
           }]
         };
       }
+    },
+    {
+      name: "approve_gate",
+      description: "Approve a goal's human_approval gate for the owner. The API allows it only when the owner gave you an approve delegation for that repo and every reviewer gate in the goal passed. Under a github-evidence grant it also needs CI green on the PR's head, an open PR with no migration, and a size within the risk tier; under a pitboss-evidence grant the reviews are enough and the goal's merge step checks CI. Otherwise it refuses and lists every unmet condition; tell the owner rather than retrying. You can only approve, never reject. The task records clearedBy with the evidence. Find gates with list_attention (pending_verification, verifyKind human_approval).",
+      inputSchema: external_exports.object({
+        taskId: external_exports.string().min(1).describe("The gate task id."),
+        note: external_exports.string().max(2e3).optional().describe("Why you approved, in one line.")
+      }),
+      handler: async (input) => {
+        try {
+          const task = await client.approveGate(input.taskId, input.note);
+          return { content: [{ type: "text", text: JSON.stringify({ task, peerBoundary: PEER_BOUNDARY }, null, 2) }] };
+        } catch (err) {
+          return mcpFail(err);
+        }
+      }
     }
   ];
 }
@@ -13371,12 +13455,12 @@ function buildProvisioningTools(client, opts = {}) {
         )
       }),
       handler: async (input) => {
-        const repo = await client.createRepo({
+        const created = await client.createRepo({
           name: input.name,
           ...input.description ? { description: input.description } : {},
           ...input.repoUrl ? { repoUrl: input.repoUrl } : {}
         });
-        return { content: [{ type: "text", text: JSON.stringify({ repo }, null, 2) }] };
+        return { content: [{ type: "text", text: JSON.stringify(created, null, 2) }] };
       }
     },
     // Mints a bearer credential: owner mode and the god credential only.
@@ -13451,7 +13535,7 @@ function buildOperatorTools(client, ownerId) {
     ...buildProvisioningTools(client, { credentialMinting: true }),
     {
       name: "list_agents",
-      description: "List agents across your repos, with a computed online field (true if seen within the last 10 minutes \u2014 the same window the routing scheduler uses) and `listening` (a GET /events write succeeded in this API process within about two heartbeat windows). Archived agents and agents in archived repos are omitted. Pass repoId to scope to one repo; omit to list across all your repos. Use this to see who is available before creating a task or posting a message.",
+      description: "List agents across your repos, with a computed online field (true if seen within the last 10 minutes \u2014 the same window the routing scheduler uses) and `listening` (a GET /events write succeeded in this API process within about two heartbeat windows), plus `activity` (working, reviewing, waiting or idle) with `activitySince`, reported by pitboss node from outside the runtime (null until a node reports), and `idleWithReadyMs24h`. Archived agents and agents in archived repos are omitted. Pass repoId to scope to one repo; omit to list across all your repos. Use this to see who is available before creating a task or posting a message.",
       inputSchema: external_exports.object({
         repoId: external_exports.string().optional().describe("Scope to a specific repo. Omit to list across all your repos.")
       }),
@@ -13467,7 +13551,10 @@ function buildOperatorTools(client, ownerId) {
           repoId: a.repoId,
           lastSeenAt: a.lastSeenAt,
           online: typeof a.lastSeenAt === "string" ? now - new Date(a.lastSeenAt).getTime() < ONLINE_WINDOW_MS : false,
-          listening: a.listening === true
+          listening: a.listening === true,
+          activity: a.activity ?? null,
+          activitySince: a.activitySince ?? null,
+          idleWithReadyMs24h: typeof a.idleWithReadyMs24h === "number" ? a.idleWithReadyMs24h : 0
         }));
         return {
           content: [{
@@ -13557,7 +13644,7 @@ function buildOperatorTools(client, ownerId) {
     },
     {
       name: "list_attention",
-      description: "List everything across ALL your projects that needs you right now: tasks that are 'blocked' (a worker is waiting on your input), 'pending_verification' (awaiting a review decision), or 'proposed' (a worker's task awaiting your commit), plus idle workers that cannot take the ready work sitting there (idle_unroutable). Call this first to see what to act on. Each task carries its repoId and, for blocked tasks, metadata.blockedThreadId \u2014 the thread to post a reply on (via reply_human) to resume the worker. An idle_unroutable item names the agent and why each task is ineligible.",
+      description: "List everything across ALL your projects that needs you right now: tasks that are 'blocked' (a worker is waiting on your input), 'pending_verification' (awaiting a review decision), or 'proposed' (a worker's task awaiting your commit), plus idle workers that cannot take the ready work sitting there (idle_unroutable), and reviewSilent: reviews whose reviewer has sent no heartbeat for 40 minutes, with the reviewer and silent minutes. Call this first to see what to act on. Each task carries its repoId and, for blocked tasks, metadata.blockedThreadId \u2014 the thread to post a reply on (via reply_human) to resume the worker. An idle_unroutable item names the agent and why each task is ineligible.",
       inputSchema: external_exports.object(attentionWindowSchema),
       handler: async (input) => {
         const cutoff = attentionCutoff(input);
@@ -13567,12 +13654,14 @@ function buildOperatorTools(client, ownerId) {
           staleAttentionCount(client, cutoff)
         ]);
         const idle = idleUnroutable ?? [];
+        const reviewSilent = await reviewSilentItems(client, tasks);
         return {
           content: [{
             type: "text",
             text: tasks.length === 0 && idle.length === 0 && staleCount === 0 ? "Nothing needs your attention across your projects right now." : JSON.stringify({
               tasks,
               ...idle.length > 0 ? { idleUnroutable: idle } : {},
+              ...reviewSilent.length > 0 ? { reviewSilent } : {},
               ...staleCount > 0 ? { staleCount, stale: `${staleCount} older items hidden; pass includeStale: true to see them, and cancel or archive what is dead.` } : {}
             }, null, 2)
           }]
@@ -13845,7 +13934,8 @@ function attentionStateOf(task) {
 function describe(task, state) {
   const title = (task.title ?? task.id).slice(0, 80);
   const where = task.repoId ? ` [${task.repoId}]` : "";
-  const thread = state === "blocked" && typeof task.metadata?.blockedThreadId === "string" ? ` Reply on thread ${task.metadata.blockedThreadId} to unblock it.` : "";
+  const replyOn = typeof task.metadata?.blockedThreadId === "string" ? task.metadata.blockedThreadId : task.threadId;
+  const thread = state !== "blocked" ? "" : replyOn ? ` Reply on thread ${replyOn} to unblock it.` : ` Answer with add_task_comment on ${task.id} to unblock it.`;
   const next = state === "proposed" ? " Use commit_proposal." : state === "pending_verification" ? " Use review_task." : state === "stalled" ? " Nobody is coming; reassign or cancel it." : "";
   return `relai: "${title}" is ${LABEL[state]}${where} (${task.id}).${thread}${next}`;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pitboss/cli",
-  "version": "0.4.7",
+  "version": "0.4.9",
   "private": false,
   "description": "Connect your coding agents to a pitboss instance",
   "keywords": [