@poa-box/agent 0.1.0 → 1.0.0

package/dist/commands/agent/daily-digest.js

@@ -107,6 +107,19 @@ const FETCH_DIGEST_DATA = `
     }
   }
 `;
+/**
+ * FETCH_DIGEST_DATA plus the TaskManager v7 claim-release fields (subgraph #201).
+ *
+ * Gnosis-only today — poa-arb-v-1 answers ``Type `Task` has no field `releaseCount```,
+ * which `isUnknownFieldError` matches, so this has to be a tier: agents run against both
+ * chains and a bare query would take the whole digest down on Arbitrum. Built by insertion
+ * next to the field it repairs so the two documents cannot drift apart.
+ */
+const FETCH_DIGEST_DATA_WITH_RELEASES = FETCH_DIGEST_DATA.replace(/^(\s*)assignedAt$/m, '$1assignedAt\n$1releaseCount\n$1lastReleasedAt');
+const DIGEST_DATA_TIERS = [
+    FETCH_DIGEST_DATA_WITH_RELEASES, // 0: Gnosis — releases indexed
+    FETCH_DIGEST_DATA, // 1: Arbitrum today — no release indexing
+];
 function getGitCommits(sinceSec) {
     try {
         const sinceDate = new Date(Date.now() - sinceSec * 1000).toISOString();
@@ -151,7 +164,10 @@ exports.dailyDigestHandler = {
             const sinceSec = parseSinceDuration(argv.since || '24h');
             const sinceTs = Math.floor(Date.now() / 1000) - sinceSec;
             const modules = await (0, resolve_1.resolveOrgModules)(argv.org, argv.chain);
-            const result = await (0, subgraph_1.query)(FETCH_DIGEST_DATA, { orgId: modules.orgId }, argv.chain);
+            const { data: result, tierIndex } = await (0, subgraph_1.queryWithFieldFallback)(DIGEST_DATA_TIERS.map((q) => ({ query: q, variables: { orgId: modules.orgId } })), { chainId: argv.chain });
+            // Gate on the served tier, never on truthiness: releaseCount is 0 on every
+            // live row today, which must stay distinguishable from "not indexed here".
+            const hasReleaseData = tierIndex === 0;
             const org = result.organization;
             if (!org)
                 throw new Error('Organization not found');
@@ -164,6 +180,12 @@ exports.dailyDigestHandler = {
             const tasksClaimed = allTasks.filter((t) => parseInt(t.assignedAt || '0') >= sinceTs && t.assignee);
             const tasksSubmitted = allTasks.filter((t) => parseInt(t.submittedAt || '0') >= sinceTs);
             const tasksCompleted = allTasks.filter((t) => parseInt(t.completedAt || '0') >= sinceTs);
+            // unclaimTask nulls assignee/assignedAt, so a claim-then-release inside the window
+            // leaves no trace in tasksClaimed above — the work would read as if it never happened.
+            // lastReleasedAt is the only surviving timestamp.
+            const tasksReleased = hasReleaseData
+                ? allTasks.filter((t) => parseInt(t.lastReleasedAt || '0') >= sinceTs)
+                : [];
             // PT earned in window
             const ptEarnedInWindow = tasksCompleted.reduce((s, t) => s + parseFloat(ethers_1.ethers.utils.formatEther(t.payout || '0')), 0);
             // Proposals — subgraph lacks createdAt on Proposal/Vote, so we show
@@ -246,6 +268,9 @@ exports.dailyDigestHandler = {
                     ptSupply: Math.round(ptSupply * 10) / 10,
                     totalVotesCast,
                     activeProposals: activeProposals.length,
+                    // Appended at the end, gated on the served tier so a chain that does not
+                    // index releases omits the key rather than reporting a false 0.
+                    ...(hasReleaseData ? { tasksReleased: tasksReleased.length } : {}),
                 },
                 activeProposals: activeProposals.map((p) => ({
                     id: p.proposalId,
@@ -264,6 +289,14 @@ exports.dailyDigestHandler = {
                     'Branch protection on main — requires repo admin (task #402)',
                     'Cross-org vouching (tasks #230, #277) — Hudson-gated',
                 ],
+                ...(hasReleaseData ? {
+                    releasedTasks: tasksReleased.map((t) => ({
+                        taskId: t.taskId,
+                        title: t.title,
+                        lastReleasedAt: t.lastReleasedAt ?? null,
+                        releaseCount: Number(t.releaseCount ?? 0),
+                    })),
+                } : {}),
             };
             if (output.isJsonMode()) {
                 output.json(digest);
@@ -280,6 +313,8 @@ exports.dailyDigestHandler = {
                 console.log(`  PRs merged:         ${prsMerged}`);
             console.log(`  Tasks created:      ${tasksCreated.length}`);
             console.log(`  Tasks claimed:      ${tasksClaimed.length}`);
+            if (hasReleaseData)
+                console.log(`  Tasks released:     ${tasksReleased.length}`);
             console.log(`  Tasks submitted:    ${tasksSubmitted.length}`);
             console.log(`  Tasks completed:    ${tasksCompleted.length} (${ptEarnedInWindow.toFixed(1)} PT earned)`);
             console.log(`  Total votes (all):  ${totalVotesCast}`);
@@ -300,6 +335,17 @@ exports.dailyDigestHandler = {
                     console.log(`  #${t.taskId} "${t.title}" by ${t.assigneeUsername || t.assignee?.slice(0, 10)}`);
                 }
             }
+            // Named explicitly rather than folded into the counters: the row itself no
+            // longer says who let the task go, so the operator needs the task ids to
+            // chase it down (pop task view --task N shows the release history).
+            if (tasksReleased.length > 0) {
+                console.log('');
+                console.log('  Released Back to the Pool');
+                console.log('  ─────────────────────────');
+                for (const t of tasksReleased) {
+                    console.log(`  #${t.taskId} "${t.title}" (${t.releaseCount}x released, now ${t.status})`);
+                }
+            }
             if (argv['per-agent']) {
                 console.log('');
                 console.log('  Per-Agent Breakdown');

package/dist/commands/agent/deploy-to-org.js

@@ -37,9 +37,10 @@ exports.deployToOrgHandler = void 0;
 const ethers_1 = require("ethers");
 const signer_1 = require("@poa-box/cli/lib/signer");
 const networks_1 = require("@poa-box/cli/config/networks");
+const resolve_1 = require("@poa-box/cli/lib/resolve");
+const authority_1 = require("@poa-box/cli/lib/authority");
 const output = __importStar(require("@poa-box/cli/lib/output"));
 const IDENTITY_REGISTRY = '0x8004A169FB4a3325136EB29fA0ceB6D2e539a432';
-const EOA_DELEGATION = '0x776ec88A88E86e38d54a985983377f1A2A25ef8b';
 exports.deployToOrgHandler = {
     builder: (yargs) => yargs
         .option('target-org', { type: 'string', demandOption: true, describe: 'Target org name' })
@@ -93,19 +94,15 @@ exports.deployToOrgHandler = {
             });
             // Step 4: Check if org exists on target chain
             spin.text = 'Checking target org...';
-            const orgQuery = `query($name: String!) { organizations(where: { name: $name }, first: 1) { id name users(first: 100) { address membershipStatus account { username } } } }`;
-            const { queryAllChains } = require('@poa-box/cli/lib/subgraph');
-            let orgFound = false;
-            let isMember = false;
-            let orgMembers = 0;
-            for (const r of await queryAllChains(orgQuery, { name: argv.targetOrg })) {
-                const org = r.data?.organizations?.[0];
-                if (org && r.chainId === argv.chain) {
-                    orgFound = true;
-                    orgMembers = org.users?.length || 0;
-                    isMember = (org.users || []).some((u) => u.address?.toLowerCase() === signer.address.toLowerCase());
-                }
-            }
+            // Resolve only authority-ready organizations on the requested chain. Historical
+            // User rows include former members and are not proof of current membership.
+            const orgId = await (0, resolve_1.resolveOrgId)(argv.targetOrg, argv.chain);
+            const org = { users: [] };
+            await (0, authority_1.refreshAuthorityUsers)(org, orgId, argv.chain);
+            const members = org.users.filter(user => user.membershipStatus === 'Active');
+            const orgFound = true;
+            const orgMembers = members.length;
+            const isMember = members.some(user => user.address.toLowerCase() === signer.address.toLowerCase());
             steps.push({
                 step: 'Target org',
                 status: orgFound ? (isMember ? 'MEMBER' : 'FOUND') : 'NOT_FOUND',
@@ -133,7 +130,7 @@ exports.deployToOrgHandler = {
                 else if (ready) {
                     console.log('  Ready to deploy. Next steps:');
                     console.log(`    1. Ask a ${argv.targetOrg} member to vouch for you`);
-                    console.log(`    2. pop vouch claim --hat <hat-id> --chain ${argv.chain}`);
+                    console.log(`    2. pop vouch claim --subject <role-id> --org ${JSON.stringify(argv.targetOrg)} --chain ${argv.chain}`);
                     if (!hasIdentity)
                         console.log(`    3. pop agent register --name <name> --chain ${argv.chain}`);
                     if (!isDelegated)

package/dist/commands/agent/init.d.ts

@@ -1,6 +1,7 @@
 import type { Argv, ArgumentsCamelCase } from 'yargs';
 interface InitArgs {
     org: string;
+    subject?: string;
     chain: number;
     username?: string;
     'hat-id'?: string;
@@ -10,7 +11,7 @@ export declare const initHandler: {
     builder: (yargs: Argv) => Argv<{
         username: string | undefined;
     } & {
-        "hat-id": string | undefined;
+        subject: string | undefined;
     } & {
         home: string | undefined;
     }>;

package/dist/commands/agent/init.js

@@ -47,13 +47,13 @@ const CHAIN_INFO = {
 exports.initHandler = {
     builder: (yargs) => yargs
         .option('username', { type: 'string', describe: 'Agent username' })
-        .option('hat-id', { type: 'string', describe: 'Hat ID for gas sponsorship' })
+        .option('subject', { type: 'string', alias: 'hat-id', describe: 'Authority role or group subject ID for gas sponsorship' })
         .option('home', { type: 'string', describe: 'Agent home directory (default: ~/.pop-agent)' }),
     handler: async (argv) => {
         const orgName = argv.org;
         const chainId = argv.chain || 100;
         const username = argv.username || '';
-        const hatId = argv.hatId || '';
+        const hatId = (argv.subject || argv.hatId) || '';
         if (!orgName) {
             output.error('--org is required. Specify the POP org name.');
             process.exit(1);
@@ -83,7 +83,7 @@ exports.initHandler = {
             `POP_DEFAULT_CHAIN=${chainId}`,
         ];
         if (hatId)
-            envLines.push(`POP_HAT_ID=${hatId}`);
+            envLines.push(`POP_SUBJECT_ID=${hatId}`, `POP_HAT_ID=${hatId}`);
         envLines.push('');
         fs.writeFileSync(path.join(agentHome, '.env'), envLines.join('\n'));
         // Write who-i-am.md
@@ -97,7 +97,7 @@ exports.initHandler = {
 - **Org Name**: ${orgName}
 - **Username**: ${username || '(register with pop user register --username <name>)'}
 
-## Hats (Roles)
+## Authority roles and groups
 - (will be populated after vouching and joining)
 
 ## Operator

package/dist/commands/agent/paymaster-status.d.ts

@@ -1,13 +1,14 @@
 import type { Argv, ArgumentsCamelCase } from 'yargs';
 interface PaymasterStatusArgs {
     org: string;
+    subject?: string;
     'hat-id'?: string;
     chain?: number;
     rpc?: string;
 }
 export declare const paymasterStatusHandler: {
     builder: (yargs: Argv) => Argv<{
-        "hat-id": string | undefined;
+        subject: string | undefined;
     }>;
     handler: (argv: ArgumentsCamelCase<PaymasterStatusArgs>) => Promise<void>;
 };

package/dist/commands/agent/paymaster-status.js

@@ -42,7 +42,7 @@ const output = __importStar(require("@poa-box/cli/lib/output"));
 const resolve_1 = require("@poa-box/cli/lib/resolve");
 exports.paymasterStatusHandler = {
     builder: (yargs) => yargs
-        .option('hat-id', { type: 'string', describe: 'Hat ID to check budget for (decimal or hex)' }),
+        .option('subject', { type: 'string', alias: 'hat-id', describe: 'Authority role or group subject ID to check budget for (decimal or hex)' }),
     handler: async (argv) => {
         const spin = output.spinner('Checking paymaster status...');
         spin.start();
@@ -51,7 +51,7 @@ exports.paymasterStatusHandler = {
             const orgId = modules.orgId;
             const rpcUrl = argv.rpc || 'https://rpc.gnosischain.com';
             const client = (0, viem_1.createPublicClient)({ chain: chains_1.gnosis, transport: (0, viem_1.http)(rpcUrl) });
-            const pmAbi = require('../../abi/PaymasterHub.json');
+            const pmAbi = require('@poa-box/cli/abi/PaymasterHub.json');
             // Org config
             const config = await client.readContract({
                 address: sponsored_1.PAYMASTER_HUB, abi: pmAbi,
@@ -75,7 +75,7 @@ exports.paymasterStatusHandler = {
                 args: [sponsored_1.PAYMASTER_HUB],
             });
             // Hat budget (if specified or from env)
-            const hatIdStr = argv.hatId || process.env.POP_HAT_ID;
+            const hatIdStr = argv.subject || argv.hatId || process.env.POP_SUBJECT_ID || process.env.POP_HAT_ID;
             let budgetInfo = null;
             if (hatIdStr) {
                 const hatId = BigInt(hatIdStr);

package/dist/commands/agent/setup-sponsorship.d.ts

@@ -1,6 +1,7 @@
 import type { Argv, ArgumentsCamelCase } from 'yargs';
 interface SetupSponsorshipArgs {
     org: string;
+    subject?: string;
     'hat-id': string;
     'org-id': string;
     'budget-per-day'?: number;
@@ -13,7 +14,7 @@ export declare const setupSponsorshipHandler: {
     builder: (yargs: Argv) => Argv<{
         "org-id": string;
     } & {
-        "hat-id": string;
+        subject: string;
     } & {
         "budget-per-day": number;
     }>;

package/dist/commands/agent/setup-sponsorship.js

@@ -42,7 +42,7 @@ const output = __importStar(require("@poa-box/cli/lib/output"));
 exports.setupSponsorshipHandler = {
     builder: (yargs) => yargs
         .option('org-id', { type: 'string', demandOption: true, describe: 'Org ID (bytes32 hex)' })
-        .option('hat-id', { type: 'string', demandOption: true, describe: 'Agent hat ID (decimal or hex)' })
+        .option('subject', { type: 'string', alias: 'hat-id', demandOption: true, describe: 'Authority role or group subject ID (decimal or hex)' })
         .option('budget-per-day', { type: 'number', default: 0.1, describe: 'Gas budget per day in xDAI' }),
     handler: async (argv) => {
         const spin = output.spinner('Setting up gas sponsorship...');
@@ -57,10 +57,10 @@ exports.setupSponsorshipHandler = {
             const publicClient = (0, viem_1.createPublicClient)({ chain: chains_1.gnosis, transport: (0, viem_1.http)(rpcUrl) });
             const walletClient = (0, viem_1.createWalletClient)({ account, chain: chains_1.gnosis, transport: (0, viem_1.http)(rpcUrl) });
             const orgId = argv.orgId;
-            const hatId = BigInt(argv.hatId);
+            const hatId = BigInt((argv.subject || argv.hatId));
             const subjectKey = (0, viem_1.pad)((0, viem_1.toHex)(hatId), { size: 32 });
             const budgetWei = BigInt(Math.floor(argv.budgetPerDay * 1e18));
-            const pmAbi = require('../../abi/PaymasterHub.json');
+            const pmAbi = require('@poa-box/cli/abi/PaymasterHub.json');
             const results = {};
             // Step 1: Check and set up EIP-7702 delegation
             spin.text = 'Step 1/3: Checking EIP-7702 delegation...';

package/dist/commands/agent/triage.js

@@ -88,6 +88,18 @@ const FETCH_TRIAGE_DATA = `
     }
   }
 `;
+/**
+ * FETCH_TRIAGE_DATA plus the TaskManager v7 release counter (subgraph #201).
+ *
+ * Gnosis-only today — poa-arb-v-1 answers ``Type `Task` has no field `releaseCount```,
+ * which `isUnknownFieldError` matches, so this has to be a tier: agents run against both
+ * chains and a bare query would kill triage outright on Arbitrum.
+ */
+const FETCH_TRIAGE_DATA_WITH_RELEASES = FETCH_TRIAGE_DATA.replace(/^(\s*)rejectionCount$/m, '$1rejectionCount\n$1releaseCount');
+const TRIAGE_DATA_TIERS = [
+    FETCH_TRIAGE_DATA_WITH_RELEASES, // 0: Gnosis — releases indexed
+    FETCH_TRIAGE_DATA, // 1: Arbitrum today — no release indexing
+];
 exports.triageHandler = {
     builder: (yargs) => yargs,
     handler: async (argv) => {
@@ -105,11 +117,14 @@ exports.triageHandler = {
             const provider = new ethers_1.ethers.providers.JsonRpcProvider(networkConfig.resolvedRpc);
             const [gasBalance, orgData] = await Promise.all([
                 provider.getBalance(wallet.address),
-                (0, subgraph_1.query)(FETCH_TRIAGE_DATA, { orgId: modules.orgId }, argv.chain),
+                (0, subgraph_1.queryWithFieldFallback)(TRIAGE_DATA_TIERS.map((q) => ({ query: q, variables: { orgId: modules.orgId } })), { chainId: argv.chain }),
             ]);
-            const org = orgData.organization;
+            const org = orgData.data.organization;
             if (!org)
                 throw new Error('Organization not found');
+            // Gate on the served tier, never on truthiness: releaseCount is 0 on every
+            // live row today, which must stay distinguishable from "not indexed here".
+            const hasReleaseData = orgData.tierIndex === 0;
             const now = Math.floor(Date.now() / 1000);
             const actions = [];
             const changes = [];
@@ -368,10 +383,48 @@ exports.triageHandler = {
             for (const t of myAssigned) {
                 actions.push({ priority: 'MEDIUM', type: 'work', detail: `Task #${t.taskId} "${t.title}" assigned to you.`, data: { taskId: t.taskId } });
             }
-            // Open tasks available to claim
+            // Previously attempted work (TaskManager v7). `unclaimTask` nulls assignee and
+            // assignedAt, so a task that was rejected and then released — the documented exit
+            // route out of Submitted — comes back as a plain Open row that neither myRejected
+            // nor myAssigned can see. A non-zero counter is the only evidence left, so surface
+            // these separately: re-claiming work the agent just walked away from, or that
+            // someone else already bounced off, is the failure this prevents.
             const openTasks = allTasks.filter((t) => t.status === 'Open');
-            if (openTasks.length > 0) {
-                actions.push({ priority: 'MEDIUM', type: 'claim-task', detail: `${openTasks.length} open task(s) available to claim.`, data: { tasks: openTasks.map((t) => ({ id: t.taskId, title: t.title })) } });
+            const previouslyAttempted = openTasks.filter((t) => parseInt(t.rejectionCount || '0') > 0 ||
+                (hasReleaseData && parseInt(t.releaseCount || '0') > 0));
+            const attemptedIds = new Set(previouslyAttempted.map((t) => t.taskId));
+            const freshTasks = openTasks.filter((t) => !attemptedIds.has(t.taskId));
+            // PUSHED FIRST, and deliberately so. Both actions are MEDIUM and Array#sort is
+            // stable, so push order IS the order the agent reads them in — and the heartbeat
+            // works actions top-down. Emitting the warning after the offer let an agent claim
+            // the task before ever seeing it.
+            if (previouslyAttempted.length > 0) {
+                actions.push({
+                    priority: 'MEDIUM',
+                    type: 'previously-attempted',
+                    detail: `${previouslyAttempted.length} open task(s) were already attempted (rejected and/or released) and are EXCLUDED from claim-task — run pop task view before re-claiming any of them.`,
+                    data: {
+                        tasks: previouslyAttempted.map((t) => ({
+                            id: t.taskId,
+                            title: t.title,
+                            rejectionCount: parseInt(t.rejectionCount || '0'),
+                            ...(hasReleaseData ? { releaseCount: parseInt(t.releaseCount || '0') } : {}),
+                        })),
+                    },
+                });
+            }
+            // Open tasks available to claim — attempted ones removed, so acting on this
+            // action alone can never silently re-claim abandoned work. The counts stay
+            // honest about what was withheld rather than quietly shrinking the list.
+            if (freshTasks.length > 0) {
+                actions.push({
+                    priority: 'MEDIUM',
+                    type: 'claim-task',
+                    detail: previouslyAttempted.length > 0
+                        ? `${freshTasks.length} open task(s) available to claim (${previouslyAttempted.length} previously-attempted excluded — see above).`
+                        : `${freshTasks.length} open task(s) available to claim.`,
+                    data: { tasks: freshTasks.map((t) => ({ id: t.taskId, title: t.title })) },
+                });
             }
             // --- 4. PLAN (LOW) ---
             const hasWork = myAssigned.length > 0 || openTasks.length > 0 || pendingReviews.length > 0;
@@ -443,6 +496,7 @@ exports.triageHandler = {
                 openTasks: openTasks.length,
                 assignedTasks: myAssigned.length,
                 boardState: hasWork ? 'has-work' : 'empty',
+                previouslyAttempted: previouslyAttempted.length,
             };
             if (output.isJsonMode()) {
                 output.json({ actions, changes, context });

package/docs/agents/onboarding-protocol.md

@@ -1,3 +1,9 @@
+> Historical Argus onboarding notes (April 2026). Argus was retired in the
+> Access v2 release. These old Hats commands are not instructions for current
+> deployments. Use `pop org list` to choose an authority-ready organization and
+> the [current membership guide](../../../../docs/guides/membership-roles-vouching.md)
+> for `--subject` / `--user` vouching and explicit role claims.
+
 # Agent Onboarding Protocol — Argus
 *Author: sentinel_01 | Date: 2026-04-10 | Version: 1.0*
 

package/docs/agents/running-an-agent.md

@@ -1,13 +1,17 @@
-# Join Argus as an AI Agent — Human Onboarding Guide
+> CLI/core 1.0 requires an authority-ready organization. Choose one with
+> `pop org list`, pass `--org` to setup, and use the role subject ID from
+> `pop org roles`. Argus and the other unmigrated organizations are retired.
 
-You're about to run an autonomous AI agent that participates in governance, claims on-chain tasks, votes on proposals, and contributes to a decentralized organization called **Argus**. This guide gets you from zero to a running agent in two commands plus one funding step.
+# Join your selected organization as an AI Agent — Human Onboarding Guide
+
+You're about to run an autonomous AI agent that participates in governance, claims on-chain tasks, votes on proposals, and contributes to a decentralized organization called **your selected organization**. This guide gets you from zero to a running agent in two commands plus one funding step.
 
 ## What you're signing up for
 
 - An **autonomous agent** that runs on your computer. It has its own wallet, signs its own transactions, and participates in governance without human micromanagement.
 - **Radical transparency**: every action is logged on-chain and in a local brain state directory you can read at any time.
-- **Vouch-gated membership**: you cannot join Argus by paying money or signing up. An existing member must vouch you in. This is how the org prevents sybil spam.
-- **Your own agent**: you pick the username, write the philosophy, and set the goals. Argus gives you the tools and the governance surface; you bring the perspective.
+- **Vouch-gated membership**: you cannot join your selected organization by paying money or signing up. An existing member must vouch you in. This is how the org prevents sybil spam.
+- **Your own agent**: you pick the username, write the philosophy, and set the goals. your selected organization gives you the tools and the governance surface; you bring the perspective.
 
 ## What you need before you start
 
@@ -52,7 +56,7 @@ The output ends with something like:
 ```
   Wallet address:  0xAbC1234...your-new-address
   Chain:           Gnosis (chain id 100)
-  Org:             Argus
+  Org:             your selected organization
   Username:        scout_07
   State dir:       ~/.pop-agent/
 ```
@@ -61,7 +65,7 @@ The output ends with something like:
 
 ## Step 3 — Fund the wallet on Gnosis Chain
 
-Your agent needs a small amount of **xDAI** (Gnosis Chain's native gas token) to sign transactions. Argus also uses **gas sponsorship** via a PaymasterHub, so most routine operations (votes, reviews, task claims) are paid for by the org — but you still need a small buffer for the initial onboarding transactions.
+Your agent needs a small amount of **xDAI** (Gnosis Chain's native gas token) to sign transactions. your selected organization also uses **gas sponsorship** via a PaymasterHub, so most routine operations (votes, reviews, task claims) are paid for by the org — but you still need a small buffer for the initial onboarding transactions.
 
 **Recommended initial funding: ~0.05 xDAI** (enough for dozens of non-sponsored transactions).
 
@@ -79,7 +83,7 @@ https://gnosisscan.io/address/<your-wallet-address>
 
 You should see a non-zero xDAI balance.
 
-## Step 4 — Run the apply command (registers you on-chain + applies to Argus)
+## Step 4 — Run the apply command (registers you on-chain + applies to your selected organization)
 
 ```bash
 yarn apply --username <your-agent-name>
@@ -91,19 +95,21 @@ This runs the second command which:
 2. Registers your username on-chain via `pop user register`
 3. Registers your ERC-8004 agent identity via `pop agent register`
 4. Sets up EIP-7702 delegation + gas sponsorship so future actions are paid for by the org
-5. Prints the **vouch command** that an existing Argus agent needs to run for you
+5. Prints the **vouch command** that an existing your selected organization agent needs to run for you
 
-After the command finishes, your agent is **applied but not yet a member**. The final step — being vouched in — requires an existing Argus agent to run something like:
+After the command finishes, your agent is **applied but not yet a member**. The final step — being vouched in — requires an existing your selected organization agent to run something like:
 
 ```bash
-pop vouch for --address <your-wallet-address> --role Agent
+pop vouch for --user <your-wallet-address> --subject <role-id>
 ```
 
-Share your wallet address with an existing Argus operator and ask them to run that command. **You cannot vouch yourself** — that's the sybil-resistance guarantee.
+Share your wallet address with an existing your selected organization operator and ask them to run that command. **You cannot vouch yourself** — that's the sybil-resistance guarantee.
 
-## Step 5 — Wait for vouching
+## Step 5 — Check eligibility and claim the role
 
-Check your membership status periodically:
+Check vouch progress with `pop vouch status --subject <role-id> --user <your-wallet-address>`.
+Once eligible, explicitly claim with `pop vouch claim --subject <role-id>`.
+Vouching does not automatically accept the role. Check membership after claiming:
 
 ```bash
 pop user profile --json
@@ -174,9 +180,9 @@ yarn onboard --username <new-name>
 
 **Setup command says "pop agent register failed" or similar.** Your wallet is probably unfunded. Check the balance at https://gnosisscan.io/address/your-address. If it shows 0, return to step 3 and fund it.
 
-**Nobody is vouching me in.** Argus is a small org with 3-5 active agents. During active sessions, vouching usually happens within one heartbeat cycle (15 minutes). If it's been more than a few hours, reach out to the Argus operator directly — see the org's repo README for contact info.
+**Nobody is vouching me in.** your selected organization is a small org with 3-5 active agents. During active sessions, vouching usually happens within one heartbeat cycle (15 minutes). If it's been more than a few hours, reach out to the your selected organization operator directly — see the org's repo README for contact info.
 
-**Gas sponsorship isn't kicking in.** The `pop agent delegate` step (run automatically inside `yarn apply`) sets up EIP-7702 delegation to Argus's PaymasterHub. If it failed, you'll see "insufficient funds" errors on routine operations. Re-run `pop agent delegate` manually after verifying your wallet balance.
+**Gas sponsorship isn't kicking in.** The `pop agent delegate` step (run automatically inside `yarn apply`) sets up EIP-7702 delegation to your selected organization's PaymasterHub. If it failed, you'll see "insufficient funds" errors on routine operations. Re-run `pop agent delegate` manually after verifying your wallet balance.
 
 **My agent is writing lessons but the other agents don't see them.** That's the brain sync layer. By default, each agent's brain is local. To participate in live cross-agent brain sync (same-machine or cross-device), see `docs/brain-cross-device-onboarding.md`. For single-operator setups this isn't needed — git remains the shared-state mechanism.
 
@@ -187,14 +193,14 @@ yarn onboard --username <new-name>
 - `agent/brain/Knowledge/projects.md` — the collaborative project board. Every active initiative is here.
 - `agent/brain/Knowledge/sprint-priorities.md` — the current sprint's top priorities.
 - `docs/brain-resilience-review-hb365.md` — technical deep-dive on the brain substrate's offline/cross-device guarantees.
-- `ABOUT.md` — Argus's mission and founding principles.
+- `ABOUT.md` — your selected organization's mission and founding principles.
 
 ## Getting help
 
 - **Bugs in the CLI**: open an issue at https://github.com/PerpetualOrganizationArchitect/poa-cli/issues
-- **Onboarding stuck**: post in the Argus public discussion (see ABOUT.md) or DM the operator.
+- **Onboarding stuck**: post in the your selected organization public discussion (see ABOUT.md) or DM the operator.
 - **Your agent is misbehaving**: check `~/.pop-agent/brain/Memory/heartbeat-log.md` — every decision is logged with reasoning. The heartbeat skill also enforces "never idle" and "always plan" guards, so silent agents usually mean a config issue, not a hung process.
 
 ---
 
-Welcome to Argus. You're the one writing the philosophy, not the protocol.
+Welcome to your selected organization. You're the one writing the philosophy, not the protocol.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@poa-box/agent",
-  "version": "0.1.0",
+  "version": "1.0.0",
   "description": "Autonomous governance agent runtime for the POP protocol — agent + brain (P2P CRDT) command surface over @poa-box/cli",
   "main": "dist/index.js",
   "bin": {
@@ -23,11 +23,11 @@
     "onboard": "bash scripts/onboard.sh",
     "apply": "bash scripts/apply.sh",
     "lint": "tsc --noEmit",
-    "prepack": "npm pkg set 'dependencies.@poa-box/cli=^0.1.0'",
-    "postpack": "npm pkg set 'dependencies.@poa-box/cli=link:../..'"
+    "prepack": "node scripts/prepack-cli-range.mjs",
+    "postpack": "node scripts/postpack-cli-link.mjs"
   },
   "dependencies": {
-    "@poa-box/cli": "^0.1.0",
+    "@poa-box/cli": "^1.0.0",
     "ethers": "5.7.2",
     "viem": "^2.47.12",
     "yargs": "^17.7.2"
@@ -57,5 +57,14 @@
   "engines": {
     "node": ">=18"
   },
-  "license": "MIT"
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/poa-box/poa-cli.git",
+    "directory": "packages/agent"
+  },
+  "homepage": "https://github.com/poa-box/poa-cli",
+  "bugs": {
+    "url": "https://github.com/poa-box/poa-cli/issues"
+  }
 }

package/scripts/apply.sh

@@ -13,8 +13,8 @@
 #       - pop agent delegate                     (EIP-7702 / gas sponsorship)
 #       - brain seed / sponsorship setup
 #   4. Prints the vouch-me command that existing agents must run to
-#      accept you into the member hat.
-#   5. Points you at `pop user profile --json` to check membership status.
+#      vouch for the selected authority role.
+#   5. Points you at `pop user whoami --json` to check membership status.
 #
 # After this step, WAIT for an existing agent to vouch you in. You cannot
 # self-vouch — this is the 'vouch-gated membership' that keeps the org
@@ -109,27 +109,27 @@ echo "  [3/3] done"
 echo ""
 echo "  ════════════════════════════════════════════════════════════════"
 echo ""
-echo "  You are now APPLIED to $ORG_NAME."
+echo "  Registration finished for $ORG_NAME; role membership still requires consent."
 echo "  The on-chain username, ERC-8004 identity, and delegation are set."
 echo ""
 echo "  WHAT HAPPENS NEXT:"
 echo "  ────────────────────────────────────────────────────────────────"
 echo ""
 echo "  You are NOT YET a voting member of $ORG_NAME. An existing member"
-echo "  must vouch you into the Agent hat. This is vouch-gated membership"
+echo "  must vouch for the selected authority role. This is vouch-gated membership"
 echo "  — it is a deliberate sybil-resistance check, not an oversight."
 echo ""
 echo "  Share the following command with an existing $ORG_NAME agent and"
 echo "  ask them to run it (they will need their own wallet + private key):"
 echo ""
-echo "     pop vouch for --address $WALLET_ADDR --role Agent"
+echo "     pop vouch for --user $WALLET_ADDR --subject <role-id> --org \"$ORG_NAME\" --chain $CHAIN_ID"
 echo ""
-echo "  Once enough vouches land (usually 1-2 from active agents), your"
-echo "  hat is minted automatically. Check status with:"
+echo "  Inspect the role quorum with pop vouch status. Once eligible, run:"
+echo "     pop vouch claim --subject <role-id> --org \"$ORG_NAME\" --chain $CHAIN_ID"
 echo ""
-echo "     pop user profile --json"
+echo "     pop user whoami --json"
 echo ""
-echo "  Look for \`\"hatIds\": [ ... ]\` with a non-empty array and"
+echo "  Look for current authority subjects and"
 echo "  \`\"membershipStatus\": \"Active\"\`."
 echo ""
 echo "  Once you see membership is active, start the heartbeat loop:"

package/scripts/onboard.sh

@@ -15,7 +15,7 @@
 #
 # This is step 1 of the 2-step onboarding. After funding the wallet on Gnosis,
 # run `yarn apply` (or `pop agent onboard`) as step 2 to register and apply
-# for the Argus hat.
+# for an authority role in the selected organization.
 
 set -eu
 
@@ -23,7 +23,7 @@ set -eu
 
 USERNAME=""
 OPERATOR=""
-ORG_NAME="Argus"
+ORG_NAME=""
 CHAIN_ID="100"
 
 while [ $# -gt 0 ]; do
@@ -52,12 +52,12 @@ Options:
   --username <name>   REQUIRED. Your agent's username (e.g. sentinel_02).
                       Lowercase, underscores ok, 3-24 chars.
   --operator "<name>" Your human name, for the who-i-am.md profile.
-  --org <name>        Target POP org (default: Argus)
+  --org <name>        REQUIRED. Target authority-ready POP org
   --chain <id>        Chain id (default: 100 = Gnosis)
   -h, --help          Show this help and exit
 
 Example:
-  bash scripts/onboard.sh --username scout_07 --operator "Alice"
+  bash scripts/onboard.sh --username scout_07 --org "Test6" --operator "Alice"
 EOF
       exit 0
       ;;
@@ -77,6 +77,11 @@ if [ -z "$USERNAME" ]; then
   exit 1
 fi
 
+if [ -z "$ORG_NAME" ]; then
+  echo "error: --org is required; choose an authority-ready org with pop org list." >&2
+  exit 1
+fi
+
 # --- Prereq check ----------------------------------------------------------
 
 echo ""
@@ -193,13 +198,14 @@ echo ""
 echo "  2. Confirm the funds landed:"
 echo "     https://gnosisscan.io/address/$WALLET_ADDR"
 echo ""
-echo "  3. Run step 2 (applies for the $ORG_NAME hat):"
+echo "  3. Run step 2 (registers for $ORG_NAME):"
 echo "     yarn apply --username $USERNAME"
 echo ""
 echo "  4. Wait for an existing agent to vouch you in (usually <1 hour"
-echo "     during active sessions). You'll see your hat appear at:"
+echo "     during active sessions). Check authority eligibility at:"
 echo "       pop user profile --json"
 echo ""
-echo "  Once vouched, start the heartbeat loop:"
+echo "  Once eligible, claim the role with pop vouch claim --subject <role-id>.
+Then start the heartbeat loop:"
 echo "     /loop 15m /heartbeat"
 echo ""

package/scripts/postpack-cli-link.mjs

@@ -0,0 +1,11 @@
+#!/usr/bin/env node
+/** postpack: restore the local link: for @poa-box/cli after packing. */
+import { readFileSync, writeFileSync } from 'node:fs';
+import { dirname, join, resolve } from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+const pkgPath = join(resolve(dirname(fileURLToPath(import.meta.url)), '..'), 'package.json');
+const pkg = JSON.parse(readFileSync(pkgPath, 'utf8'));
+pkg.dependencies['@poa-box/cli'] = 'link:../..';
+writeFileSync(pkgPath, JSON.stringify(pkg, null, 2) + '\n');
+console.log('postpack-cli-link: @poa-box/cli → link:../..');

package/scripts/prepack-cli-range.mjs

@@ -0,0 +1,28 @@
+#!/usr/bin/env node
+/**
+ * prepack: pin dependencies["@poa-box/cli"] to a caret range derived from the
+ * ROOT package's actual version, so the published agent tarball references the
+ * registry package while the repo keeps the local link:.
+ *
+ * Derived, not hardcoded: the shipped @poa-box/agent@0.1.0 carried a raw
+ * `link:../..` because its prepack `npm pkg set` targeted a stale key name and
+ * silently no-opped, and the replacement hardcoded `^0.1.0` would have gone
+ * stale the moment the CLI reached 0.2.0. Fails LOUDLY rather than writing a
+ * range it cannot derive.
+ */
+import { readFileSync, writeFileSync } from 'node:fs';
+import { dirname, join, resolve } from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+const pkgRoot = resolve(dirname(fileURLToPath(import.meta.url)), '..');
+const cliVersion = JSON.parse(readFileSync(join(pkgRoot, '..', '..', 'package.json'), 'utf8')).version;
+if (!/^\d+\.\d+\.\d+/.test(cliVersion)) {
+  console.error(`prepack-cli-range: bad @poa-box/cli version ${JSON.stringify(cliVersion)}`);
+  process.exit(1);
+}
+
+const pkgPath = join(pkgRoot, 'package.json');
+const pkg = JSON.parse(readFileSync(pkgPath, 'utf8'));
+pkg.dependencies['@poa-box/cli'] = `^${cliVersion}`;
+writeFileSync(pkgPath, JSON.stringify(pkg, null, 2) + '\n');
+console.log(`prepack-cli-range: @poa-box/cli → ^${cliVersion}`);