@pitboss/cli 0.4.8 → 0.4.9

package/dist/event-worker.js

@@ -59,7 +59,8 @@ var BASE_TASK_LOOP = (agentId, repoPath) => `You are an AI worker agent (ID: ${a
    a one-line status on the task thread naming what you are checking) when you begin, then
    run the tests, compare the diff against the spec the task names, then
    \`mcp__relai__submit_review\` \u2014 \`approve\`, or \`reject\` with a specific note the author
-   can act on. Do this even when get_my_tasks is empty.
+   can act on. When the task is a goal's build with a PR, pass \`headSha\`: the full sha of the
+   commit you reviewed. Do this even when get_my_tasks is empty.
    If the change touches a long-running service or a third-party runtime integration (SSE/event streams, launchd/systemd, auth headers, a client library), run the changed path once before approving and quote what it printed. A type cast past a library's own types is a reason to stop and run it.
 
 4. Call \`mcp__relai__get_my_tasks\` \u2014 if it returns no tasks, stop immediately.
@@ -301,7 +302,11 @@ Find the default branch with \`git remote show origin\`.
    \`specialization\` or \`domains\` only to values agents in \`mcp__relai__list_agents\` declare:
    the router never hands out a task whose tag no agent matches. When the repo has \`writer\` agents, set
    \`specialization: "writer"\` on build tasks, so they wait for a writer instead of going to a reviewer.
-   Never name a build task's assignee as the goal's reviewer; the API refuses it. Make them small
+   Before writing any build task, choose the goal's reviewer (for a \`reviewer_agent\` gate): a
+   \`reviewer\` agent, on a different \`workerType\` from the writers when one exists. Never assign that
+   agent a build task, and never leave the only reviewers busy building: a goal whose every reviewer
+   built part of it has nobody left to review it. The API defaults a build task with no
+   \`specialization\` to \`writer\` when the repo has writers. Make them small
    and independently testable so several agents can work at once. Use \`blockedBy\` only where
    one task truly needs another's result. Each description is self-contained: what to change,
    which files, how to test it, and the acceptance criteria.
@@ -562,6 +567,18 @@ async function recordSessionUsage(conn, startIds, usage, logPrefix) {
   await writeSessionUsage(conn, await sessionTouchedTaskIds(conn, start, logPrefix), usage, logPrefix);
 }
 
+// ../claude-worker/src/model.ts
+import { readFileSync } from "node:fs";
+function pinnedModel(env = process.env) {
+  const file = env.PITBOSS_MODEL_FILE;
+  if (!file) return void 0;
+  try {
+    return readFileSync(file, "utf-8").trim() || void 0;
+  } catch {
+    return void 0;
+  }
+}
+
 // ../claude-worker/src/session.ts
 function mcpServerEntry() {
   return fileURLToPath(new URL("../../mcp-server/src/index.ts", import.meta.url));
@@ -610,7 +627,7 @@ async function runClaudeSession(config2) {
         "stream-json",
         "--verbose",
         "--model",
-        config2.model,
+        pinnedModel() ?? config2.model,
         "--add-dir",
         config2.repoPath
       ];
@@ -731,8 +748,8 @@ function classifySessionError(text) {
 
 // ../claude-worker/src/adapters/cursor.ts
 var bin = () => process.env.CURSOR_BIN ?? "cursor-agent";
-function cursorArgs(repoPath, prompt) {
-  return ["-p", "--trust", "--force", "--output-format", "stream-json", "--workspace", repoPath, prompt];
+function cursorArgs(repoPath, prompt, model) {
+  return ["-p", "--trust", "--force", "--output-format", "stream-json", "--workspace", repoPath, ...model ? ["--model", model] : [], prompt];
 }
 function readCursorEvent(line) {
   let event;
@@ -756,7 +773,7 @@ function readCursorEvent(line) {
   return {};
 }
 async function runCursorSession(config2) {
-  const args = cursorArgs(config2.repoPath, buildPrompt(config2));
+  const args = cursorArgs(config2.repoPath, buildPrompt(config2), pinnedModel());
   console.log(`[cursor-worker] Spawning: ${bin()} ${args.slice(0, 5).join(" ")} ...`);
   const taskIdsPromise = listSessionTaskIds(config2, "[cursor-worker]");
   return new Promise((resolve, reject) => {
@@ -837,10 +854,11 @@ import { unlinkSync as unlinkSync2 } from "fs";
 var bin2 = () => process.env.COPILOT_BIN ?? "copilot";
 var POLICY_BLOCKS = [/access denied by policy/i, /third-party mcp servers are disabled/i];
 var QUOTA = [/premium request/i, /monthly (?:limit|allowance|quota)/i];
-function copilotArgs(repoPath, prompt, mcpConfigPath) {
+function copilotArgs(repoPath, prompt, mcpConfigPath, model) {
   return [
     "-p",
     prompt,
+    ...model ? ["--model", model] : [],
     "--allow-all-tools",
     "--output-format",
     "json",
@@ -870,7 +888,7 @@ function readCopilotEvent(line) {
 }
 async function runCopilotSession(config2) {
   const mcpConfigPath = writeMcpConfig(config2, "copilot-worker");
-  const args = copilotArgs(config2.repoPath, buildPrompt(config2), mcpConfigPath);
+  const args = copilotArgs(config2.repoPath, buildPrompt(config2), mcpConfigPath, pinnedModel());
   console.log(`[copilot-worker] Spawning: ${bin2()} -p <prompt> ${args.slice(2, 6).join(" ")} ...`);
   return new Promise((resolve, reject) => {
     const proc = spawn3(bin2(), args, { cwd: config2.repoPath, env: process.env, stdio: ["ignore", "pipe", "pipe"] });
@@ -943,7 +961,7 @@ var bin3 = () => process.env.CODEX_BIN ?? "codex";
 var codexHome = () => process.env.CODEX_HOME ?? join3(homedir(), ".codex");
 var QUOTA2 = [/usage limit/i, /rate limit reached for/i, /upgrade to (plus|pro)/i];
 var CREDENTIALS = [/not logged in/i, /codex login/i, /401 unauthorized/i];
-function codexArgs(repoPath, prompt, profile) {
+function codexArgs(repoPath, prompt, profile, model) {
   return [
     "exec",
     "--json",
@@ -954,6 +972,7 @@ function codexArgs(repoPath, prompt, profile) {
     repoPath,
     "-p",
     profile,
+    ...model ? ["-m", model] : [],
     prompt
   ];
 }
@@ -1002,7 +1021,7 @@ async function runCodexSession(config2) {
     } catch {
     }
   };
-  const args = codexArgs(config2.repoPath, buildPrompt(config2), profile);
+  const args = codexArgs(config2.repoPath, buildPrompt(config2), profile, pinnedModel());
   console.log(`[codex-worker] Spawning: ${bin3()} ${args.slice(0, 6).join(" ")} ...`);
   return new Promise((resolve, reject) => {
     const proc = spawn4(bin3(), args, { cwd: config2.repoPath, env: process.env, stdio: ["ignore", "pipe", "pipe"] });
@@ -1287,6 +1306,10 @@ function loadConfig2() {
   };
 }
 
+// ../event-worker/src/worker.ts
+import { mkdirSync as mkdirSync2, rmSync, writeFileSync as writeFileSync3 } from "node:fs";
+import { dirname as dirname2 } from "node:path";
+
 // ../../node_modules/.pnpm/eventsource-parser@3.0.7/node_modules/eventsource-parser/dist/index.js
 var ParseError = class extends Error {
   constructor(message, options) {
@@ -1847,7 +1870,16 @@ async function runEventWorker(config2) {
     }
     try {
       console.log("[event-worker] Event received \u2014 running session...");
-      await getAdapter(config2.runtime).runSession(config2);
+      const activityFile = process.env.PITBOSS_ACTIVITY_FILE;
+      if (activityFile) {
+        mkdirSync2(dirname2(activityFile), { recursive: true });
+        writeFileSync3(activityFile, String(Date.now()));
+      }
+      try {
+        await getAdapter(config2.runtime).runSession(config2);
+      } finally {
+        if (activityFile) rmSync(activityFile, { force: true });
+      }
       await clearUnavailable(config2, "[event-worker]");
     } catch (err) {
       const text = err instanceof Error ? err.message : String(err);

package/dist/mcp.js

@@ -12270,8 +12270,10 @@ var ApiClient = class {
   listRepos() {
     return this.request("GET", "/repos");
   }
-  createRepo(body) {
-    return this.request("POST", "/repos", body);
+  async createRepo(body) {
+    const json = await this.requestEnvelope("POST", "/repos", body);
+    const next = json.next;
+    return { repo: json.data, ...next ? { next } : {} };
   }
   // Used at startup to decide whether this credential carries owner scope. The
   // `current` flag marks the row that authenticated the request, which is the
@@ -12353,6 +12355,9 @@ var ApiClient = class {
   submitReview(taskId, body) {
     return this.request("POST", `/tasks/${taskId}/review`, body);
   }
+  approveGate(taskId, note) {
+    return this.request("POST", `/tasks/${taskId}/approve`, { decision: "approve", ...note ? { note } : {} });
+  }
   startReview(taskId) {
     return this.request("POST", `/tasks/${taskId}/review/start`);
   }
@@ -12436,6 +12441,9 @@ var ApiClient = class {
   listPools(repoId) {
     return this.request("GET", `/repos/${encodeURIComponent(repoId)}/pools`);
   }
+  updateRepo(repoId, body) {
+    return this.request("PUT", `/repos/${repoId}`, body);
+  }
   setPoolSize(repoId, name, body) {
     return this.request("PUT", `/repos/${encodeURIComponent(repoId)}/pools/${encodeURIComponent(name)}`, body);
   }
@@ -12600,7 +12608,7 @@ function buildListPoolsTool(client, repoId, opts) {
   const targetRepo = (input) => opts.ownerScoped && input.repoId || repoId;
   return {
     name: "list_pools",
-    description: "List the worker pool sizes set for a repo. " + POOL_NOTE,
+    description: "List the worker pool sizes set for a repo. Each pool carries `members`: its agents (named <pool>-<n>) with `activity` (working, reviewing, waiting or idle) and `activitySince`, reported by pitboss node from outside the runtime; both are null until a node reports. " + POOL_NOTE,
     inputSchema: external_exports.object({
       repoId: external_exports.string().optional().describe("Repo to read. Defaults to this agent's home repo.")
     }),
@@ -12635,6 +12643,31 @@ function buildSetPoolSizeTool(client, repoId, opts) {
     }
   };
 }
+function buildSetRepoOperationsTool(client, repoId, opts) {
+  const targetRepo = (input) => opts.ownerScoped && input.repoId || repoId;
+  return {
+    name: "set_repo_operations",
+    description: "Record how a repo is operated so every agent sees it on session_start: the GitHub account its agents work as, the node config dir and spec path that run it, and the test-database rule. Names and paths only, never a token or secret. Replaces the whole record; pass every field you want kept." + (opts.ownerScoped ? " As the owner's agent you may pass repoId for any repo your owner owns." : ""),
+    inputSchema: external_exports.object({
+      repoId: external_exports.string().optional().describe(opts.ownerScoped ? "Repo to update. Defaults to your home repo." : "Ignored; this agent's repo is updated."),
+      githubAccount: external_exports.string().optional().describe("GitHub login agents push and run gh as, e.g. 'phillipsio'."),
+      nodeConfigDir: external_exports.string().optional().describe("PITBOSS_CONFIG_DIR of the node that runs this repo."),
+      nodeSpecPath: external_exports.string().optional().describe("Path of that node's spec.json."),
+      testDatabase: external_exports.string().optional().describe("The rule for test databases, in one line.")
+    }),
+    handler: async (input) => {
+      const { repoId: _repo, ...fields } = input;
+      const operations = Object.fromEntries(Object.entries(fields).filter(([, v]) => v !== void 0));
+      try {
+        const target = targetRepo(input);
+        await client.updateRepo(target, { operations });
+        return { content: [{ type: "text", text: JSON.stringify({ repoId: target, operations }, null, 2) }] };
+      } catch (err) {
+        return mcpFail(err);
+      }
+    }
+  };
+}
 function resolveAgentRef(candidates, ref, scope) {
   const available = candidates.length ? ` Available: ${candidates.map((a) => `${a.name} (${a.id})`).join(", ")}` : ` ${scope} has no agents.`;
   if (ref.startsWith("agent_")) {
@@ -12713,7 +12746,7 @@ ${version.body}`
     },
     {
       name: "list_agents",
-      description: "List the agents you can see, so you can address one. Covers every repo sharing this one's owner, not just your own, so a peer working on a sibling repo can be found. Archived agents (and agents whose repo is archived) are omitted. Returns each agent's id, name, role, specialization, domains and repoId, plus `online` (seen within the last 10 minutes \u2014 the same window the routing scheduler uses), `listening` (a GET /events write succeeded in this API process within about two heartbeat windows), and `isYou` on your own entry. Use it before send_message when you need to ask a specific peer something: pick by specialization or domain for who is likely to know, and prefer an online agent for a timely reply. Seeing an agent does not mean you can read its work \u2014 tasks, non-DM threads and repo events stay scoped to their own repo. Direct messages reach any agent you can see (a repo sharing this owner), and a DM thread is readable only by its two participants." + (opts.ownerScoped ? " As the owner's agent you are the exception: you can coordinate tasks and threads in any repo your owner owns." : ""),
+      description: "List the agents you can see, so you can address one. Covers every repo sharing this one's owner, not just your own, so a peer working on a sibling repo can be found. Archived agents (and agents whose repo is archived) are omitted. Returns each agent's id, name, role, specialization, domains and repoId, plus `online` (seen within the last 10 minutes \u2014 the same window the routing scheduler uses), `listening` (a GET /events write succeeded in this API process within about two heartbeat windows), and `isYou` on your own entry, plus `activity` (working, reviewing, waiting or idle) with `activitySince`, reported by pitboss node from outside the runtime (null until a node reports), and `idleWithReadyMs24h`. Use it before send_message when you need to ask a specific peer something: pick by specialization or domain for who is likely to know, and prefer an online agent for a timely reply. Seeing an agent does not mean you can read its work \u2014 tasks, non-DM threads and repo events stay scoped to their own repo. Direct messages reach any agent you can see (a repo sharing this owner), and a DM thread is readable only by its two participants." + (opts.ownerScoped ? " As the owner's agent you are the exception: you can coordinate tasks and threads in any repo your owner owns." : ""),
       inputSchema: external_exports.object({}),
       handler: async () => {
         const raw = await client.listAgents();
@@ -12729,6 +12762,9 @@ ${version.body}`
           lastSeenAt: a.lastSeenAt,
           online: typeof a.lastSeenAt === "string" ? now - new Date(a.lastSeenAt).getTime() < ONLINE_WINDOW_MS : false,
           listening: a.listening === true,
+          activity: a.activity ?? null,
+          activitySince: a.activitySince ?? null,
+          idleWithReadyMs24h: typeof a.idleWithReadyMs24h === "number" ? a.idleWithReadyMs24h : 0,
           ...a.id === agentId ? { isYou: true } : {}
         }));
         return {
@@ -12913,10 +12949,10 @@ ${version.body}`
     },
     {
       name: "check_authority",
-      description: "Ask the API whether a server-stamped authority id is currently valid for a class (decide or assign). metadata.authority on a message or task is a stamp id, not permission. Reads may also include an authority object with valid/reason; that is informational and can go stale. The API enforces at the action; use this when you need to re-check before acting.",
+      description: "Ask the API whether a server-stamped authority id is currently valid for a class (decide, assign or approve). metadata.authority on a message or task is a stamp id, not permission. Reads may also include an authority object with valid/reason; that is informational and can go stale. The API enforces at the action; use this when you need to re-check before acting.",
       inputSchema: external_exports.object({
         id: external_exports.string().describe("The stamp id from metadata.authority or an authority.id field."),
-        class: external_exports.enum(["decide", "assign"]).describe("The action class you intend to rely on.")
+        class: external_exports.enum(["decide", "assign", "approve"]).describe("The action class you intend to rely on.")
       }),
       handler: async (input) => {
         const authority = await client.checkAuthority(input.id, input.class);
@@ -13053,6 +13089,7 @@ ${version.body}`
           payload.reminder = "unreadMessages above may need a reply \u2014 call send_message with the same threadId. The sender will not see anything you only write in your own session.";
           payload.peerBoundary = PEER_BOUNDARY;
         }
+        if (session.repo?.operations) payload.peerBoundary = PEER_BOUNDARY;
         const orientation = session.orientation;
         const omitted = [
           describeCap("unread messages", session.unreadCount, unread.length, "get_unread_messages"),
@@ -13148,10 +13185,17 @@ ${version.body}`
       inputSchema: external_exports.object({
         taskId: external_exports.string().describe("The ID of the task you are reviewing."),
         decision: external_exports.enum(["approve", "reject"]).describe("Approve or reject."),
-        note: external_exports.string().max(2e3).optional().describe("Required for reject; useful for approve. Concise reason or guidance.")
+        note: external_exports.string().max(2e3).optional().describe("Required for reject; useful for approve. Concise reason or guidance."),
+        headSha: external_exports.string().regex(/^[0-9a-f]{40}$/i).optional().describe(
+          "The full commit sha you reviewed (the PR head, from `git rev-parse HEAD` on its branch). An approval of a goal's build counts toward the owner's delegated gate only for this exact commit."
+        )
       }),
       handler: async (input) => {
-        const task = await client.submitReview(input.taskId, { decision: input.decision, note: input.note });
+        const task = await client.submitReview(input.taskId, {
+          decision: input.decision,
+          note: input.note,
+          ...input.headSha ? { headSha: input.headSha } : {}
+        });
         return { content: [{ type: "text", text: JSON.stringify(task, null, 2) }] };
       }
     },
@@ -13231,7 +13275,7 @@ ${version.body}`
     ...opts.ownerScoped || opts.role === "orchestrator" ? [buildCreateOrderTool(client, repoId, opts)] : [],
     ...opts.role === "orchestrator" || (opts.tier ?? 0) >= 2 ? [buildUpdateOrderTool(client)] : [],
     buildListPoolsTool(client, repoId, opts),
-    ...opts.ownerScoped || opts.role === "orchestrator" ? [buildSetPoolSizeTool(client, repoId, opts)] : [],
+    ...opts.ownerScoped || opts.role === "orchestrator" ? [buildSetPoolSizeTool(client, repoId, opts), buildSetRepoOperationsTool(client, repoId, opts)] : [],
     // Additive, never a swap: an owner-scoped agent is still an agent and needs
     // everything above. buildOperatorTools assumes no agent identity, and its
     // create_task bypasses propose/commit.
@@ -13260,11 +13304,29 @@ async function staleAttentionCount(client, cutoff) {
   const { meta } = await client.getTasksPage({ status: ATTENTION_STATUSES, updatedBefore: cutoff, limit: 1, clip: true });
   return meta?.total ?? 0;
 }
+var SILENT_LABEL = /^Reviewing, silent (\d+)m$/;
+async function reviewSilentItems(client, tasks) {
+  const silent = tasks.flatMap((t) => {
+    const m = typeof t.humanLabel === "string" ? SILENT_LABEL.exec(t.humanLabel) : null;
+    return m ? [{ task: t, silentMinutes: Number(m[1]) }] : [];
+  });
+  if (silent.length === 0) return [];
+  const agents = await client.listAgents();
+  const names = new Map(agents.map((a) => [a.id, a.name]));
+  return silent.map(({ task, silentMinutes }) => ({
+    taskId: task.id,
+    title: task.title,
+    repoId: task.repoId,
+    reviewerId: task.verifyReviewerId ?? null,
+    reviewer: names.get(task.verifyReviewerId) ?? null,
+    silentMinutes
+  }));
+}
 function buildGodCoordinationTools(client) {
   return [
     {
       name: "list_attention",
-      description: "List what needs attention across ALL your owner's repos: tasks that are 'blocked' (a worker is waiting), 'pending_verification' (awaiting a review decision), or 'proposed' (a worker's task awaiting commit), plus idle workers that cannot take the ready work that is sitting there (idle_unroutable \u2014 derived now, not from the event log). Each task carries its repoId. A blocked task with metadata.blockedThreadId resumes when you answer with send_message (type decision) on that thread, as if the owner had, when the owner has given you a decide delegation for that repo; the task records clearedBy. Answer only reversible, branch-level confirmations yourself (editing, pushing or deleting files on an order branch, choosing between plan options). Merges into a default branch, deploys, deletes outside an order branch, and anything touching credentials or money go to the owner. A blocked task without blockedThreadId (stalled or overflowed work) resumes the same way when you post add_task_comment (type decision) on it; say whether to split, retry or reassign. Your own blocked task never resumes on your answer. An idle_unroutable item names the agent and why each task is ineligible (domain, specialization, review_gate, for-human, product-decision, pinned, blockedBy). Capped and clipped, newest first; read one in full with get_task.",
+      description: "List what needs attention across ALL your owner's repos: tasks that are 'blocked' (a worker is waiting), 'pending_verification' (awaiting a review decision), or 'proposed' (a worker's task awaiting commit), plus idle workers that cannot take the ready work that is sitting there (idle_unroutable \u2014 derived now, not from the event log), and reviewSilent: reviews whose reviewer sent no heartbeat for 40 minutes, naming the reviewer and silent minutes. Each task carries its repoId. A blocked task with metadata.blockedThreadId resumes when you answer with send_message (type decision) on that thread, as if the owner had, when the owner has given you a decide delegation for that repo; the task records clearedBy. Answer only reversible, branch-level confirmations yourself (editing, pushing or deleting files on an order branch, choosing between plan options). Merges into a default branch, deploys, deletes outside an order branch, and anything touching credentials or money go to the owner. A blocked task without blockedThreadId (stalled or overflowed work) resumes the same way when you post add_task_comment (type decision) on it; say whether to split, retry or reassign. Your own blocked task never resumes on your answer. An idle_unroutable item names the agent and why each task is ineligible (domain, specialization, review_gate, for-human, product-decision, pinned, blockedBy). Capped and clipped, newest first; read one in full with get_task.",
       inputSchema: external_exports.object(attentionWindowSchema),
       handler: async (input) => {
         const cutoff = attentionCutoff(input);
@@ -13282,6 +13344,7 @@ function buildGodCoordinationTools(client) {
         const idle = idleUnroutable ?? [];
         const total = meta?.total ?? tasks.length;
         const notShown = describeCap("tasks", total, tasks.length, "get_task on a specific id");
+        const reviewSilent = await reviewSilentItems(client, tasks);
         return {
           content: [{
             type: "text",
@@ -13289,6 +13352,7 @@ function buildGodCoordinationTools(client) {
               tasks,
               taskCount: total,
               ...idle.length > 0 ? { idleUnroutable: idle } : {},
+              ...reviewSilent.length > 0 ? { reviewSilent } : {},
               ...notShown ? { notShown } : {},
               ...staleCount > 0 ? { staleCount, stale: `${staleCount} older items hidden; pass includeStale: true to see them, and cancel or archive what is dead.` } : {},
               peerBoundary: PEER_BOUNDARY
@@ -13296,6 +13360,22 @@ function buildGodCoordinationTools(client) {
           }]
         };
       }
+    },
+    {
+      name: "approve_gate",
+      description: "Approve a goal's human_approval gate for the owner. The API allows it only when the owner gave you an approve delegation for that repo and every reviewer gate in the goal passed. Under a github-evidence grant it also needs CI green on the PR's head, an open PR with no migration, and a size within the risk tier; under a pitboss-evidence grant the reviews are enough and the goal's merge step checks CI. Otherwise it refuses and lists every unmet condition; tell the owner rather than retrying. You can only approve, never reject. The task records clearedBy with the evidence. Find gates with list_attention (pending_verification, verifyKind human_approval).",
+      inputSchema: external_exports.object({
+        taskId: external_exports.string().min(1).describe("The gate task id."),
+        note: external_exports.string().max(2e3).optional().describe("Why you approved, in one line.")
+      }),
+      handler: async (input) => {
+        try {
+          const task = await client.approveGate(input.taskId, input.note);
+          return { content: [{ type: "text", text: JSON.stringify({ task, peerBoundary: PEER_BOUNDARY }, null, 2) }] };
+        } catch (err) {
+          return mcpFail(err);
+        }
+      }
     }
   ];
 }
@@ -13375,12 +13455,12 @@ function buildProvisioningTools(client, opts = {}) {
         )
       }),
       handler: async (input) => {
-        const repo = await client.createRepo({
+        const created = await client.createRepo({
           name: input.name,
           ...input.description ? { description: input.description } : {},
           ...input.repoUrl ? { repoUrl: input.repoUrl } : {}
         });
-        return { content: [{ type: "text", text: JSON.stringify({ repo }, null, 2) }] };
+        return { content: [{ type: "text", text: JSON.stringify(created, null, 2) }] };
       }
     },
     // Mints a bearer credential: owner mode and the god credential only.
@@ -13455,7 +13535,7 @@ function buildOperatorTools(client, ownerId) {
     ...buildProvisioningTools(client, { credentialMinting: true }),
     {
       name: "list_agents",
-      description: "List agents across your repos, with a computed online field (true if seen within the last 10 minutes \u2014 the same window the routing scheduler uses) and `listening` (a GET /events write succeeded in this API process within about two heartbeat windows). Archived agents and agents in archived repos are omitted. Pass repoId to scope to one repo; omit to list across all your repos. Use this to see who is available before creating a task or posting a message.",
+      description: "List agents across your repos, with a computed online field (true if seen within the last 10 minutes \u2014 the same window the routing scheduler uses) and `listening` (a GET /events write succeeded in this API process within about two heartbeat windows), plus `activity` (working, reviewing, waiting or idle) with `activitySince`, reported by pitboss node from outside the runtime (null until a node reports), and `idleWithReadyMs24h`. Archived agents and agents in archived repos are omitted. Pass repoId to scope to one repo; omit to list across all your repos. Use this to see who is available before creating a task or posting a message.",
       inputSchema: external_exports.object({
         repoId: external_exports.string().optional().describe("Scope to a specific repo. Omit to list across all your repos.")
       }),
@@ -13471,7 +13551,10 @@ function buildOperatorTools(client, ownerId) {
           repoId: a.repoId,
           lastSeenAt: a.lastSeenAt,
           online: typeof a.lastSeenAt === "string" ? now - new Date(a.lastSeenAt).getTime() < ONLINE_WINDOW_MS : false,
-          listening: a.listening === true
+          listening: a.listening === true,
+          activity: a.activity ?? null,
+          activitySince: a.activitySince ?? null,
+          idleWithReadyMs24h: typeof a.idleWithReadyMs24h === "number" ? a.idleWithReadyMs24h : 0
         }));
         return {
           content: [{
@@ -13561,7 +13644,7 @@ function buildOperatorTools(client, ownerId) {
     },
     {
       name: "list_attention",
-      description: "List everything across ALL your projects that needs you right now: tasks that are 'blocked' (a worker is waiting on your input), 'pending_verification' (awaiting a review decision), or 'proposed' (a worker's task awaiting your commit), plus idle workers that cannot take the ready work sitting there (idle_unroutable). Call this first to see what to act on. Each task carries its repoId and, for blocked tasks, metadata.blockedThreadId \u2014 the thread to post a reply on (via reply_human) to resume the worker. An idle_unroutable item names the agent and why each task is ineligible.",
+      description: "List everything across ALL your projects that needs you right now: tasks that are 'blocked' (a worker is waiting on your input), 'pending_verification' (awaiting a review decision), or 'proposed' (a worker's task awaiting your commit), plus idle workers that cannot take the ready work sitting there (idle_unroutable), and reviewSilent: reviews whose reviewer has sent no heartbeat for 40 minutes, with the reviewer and silent minutes. Call this first to see what to act on. Each task carries its repoId and, for blocked tasks, metadata.blockedThreadId \u2014 the thread to post a reply on (via reply_human) to resume the worker. An idle_unroutable item names the agent and why each task is ineligible.",
       inputSchema: external_exports.object(attentionWindowSchema),
       handler: async (input) => {
         const cutoff = attentionCutoff(input);
@@ -13571,12 +13654,14 @@ function buildOperatorTools(client, ownerId) {
           staleAttentionCount(client, cutoff)
         ]);
         const idle = idleUnroutable ?? [];
+        const reviewSilent = await reviewSilentItems(client, tasks);
         return {
           content: [{
             type: "text",
             text: tasks.length === 0 && idle.length === 0 && staleCount === 0 ? "Nothing needs your attention across your projects right now." : JSON.stringify({
               tasks,
               ...idle.length > 0 ? { idleUnroutable: idle } : {},
+              ...reviewSilent.length > 0 ? { reviewSilent } : {},
               ...staleCount > 0 ? { staleCount, stale: `${staleCount} older items hidden; pass includeStale: true to see them, and cancel or archive what is dead.` } : {}
             }, null, 2)
           }]

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pitboss/cli",
-  "version": "0.4.8",
+  "version": "0.4.9",
   "private": false,
   "description": "Connect your coding agents to a pitboss instance",
   "keywords": [