@rosthq/cli 0.5.32 → 0.6.0

package/dist/index.js

@@ -42261,7 +42261,7 @@ Use the lower-level commands after health names a finding: \`agent.get_run\` for
     order: 46,
     title: "Tool access and vault",
     summary: "How to give agents access to tools without exposing raw credentials or expanding authority by accident.",
-    version: "2026-06-30.1",
+    version: "2026-06-30.2",
     public: true,
     audiences: ["human", "cli", "mcp", "in_app_agent"],
     stages: ["staffing"],
@@ -42319,7 +42319,7 @@ Google can be connected from Settings once the workspace OAuth app is configured
 
 CLI and MCP can inspect connector readiness without seeing secrets: \`integration.list\` / \`rost_list_integrations\` lists connected providers and health metadata, \`integration.status\` / \`rost_get_integration_status\` reads one provider by id or name, and \`integration.test\` / \`rost_test_integration_connection\` runs the installed provider-specific health check. For Google, the test refreshes the vaulted OAuth credential and reads the Gmail profile, then records only account, scope, and health metadata.
 
-\`integration.readiness\` / \`{{cli}} integration readiness --provider google --json\` / \`rost_check_integration_readiness\` returns the same setup checklist Settings shows: OAuth env and callback status, tenant connection state, granted scopes, latest test state, the demo-safe partner path, external verification/CASA caveats, handler availability, and the next Linear issue or action. The checklist is metadata-only. It never returns access tokens, refresh tokens, client secrets, vault refs, or raw provider responses.
+\`integration.readiness\` / \`{{cli}} integration readiness --provider google --json\` / \`rost_check_integration_readiness\` returns the operator setup checklist: app configuration status, tenant connection state, granted scopes, latest test state, the demo-safe partner path, external verification/CASA caveats, handler availability, and the next operator action. The checklist is metadata-only. It never returns access tokens, refresh tokens, client secrets, vault refs, or raw provider responses. Settings deliberately keeps the live Google card narrower: connected account, last successful test, granted capabilities, and connect/reconnect/test actions.
 
 ## One write-only credential flow across every surface
 
@@ -42403,7 +42403,7 @@ External connectors are being rolled out provider by provider, conservatively (r
     order: 48,
     title: "CLI and MCP installation guide",
     summary: "Install the public CLI, register remote token-backed MCP clients, and find the full command and tool catalog.",
-    version: "2026-06-30.3",
+    version: "2026-06-30.6",
     public: true,
     audiences: ["human", "cli", "mcp", "in_app_agent"],
     stages: ["company_setup", "staffing"],
@@ -42511,6 +42511,8 @@ A headless agent cannot complete setup unattended. Two things always require a h
 
 Treat these as blocking prerequisites: the agent prepares the request and waits for the human approver.
 
+- **Secrets never travel through the CLI.** Raw-secret sinks (\`credential.ingress\`, \`tenant.anthropic_key.save\`) are refused on every CLI path \u2014 an ergonomic verb, \`--input\`, and \`{{cli}} command <id> --json\` all stop with guidance instead of accepting the secret, because a value in argv lands in shell history and process arguments before any redaction. Provide the secret through the vault-backed flow (web Settings or the integration connect flow); the CLI only ever carries the non-secret credential *name*, scope, and provider.
+
 ## Placeholder legend
 
 Commands below use angle-bracket placeholders. The CLI prints the real, fully-resolved values at runtime \u2014 read them from the terminal, do not hand-construct them:
@@ -42843,6 +42845,8 @@ Ergonomic subcommands for everyday operation. Each wrapper is sugar over the sam
 
 These ergonomic wrappers (including the \`{{cli}} agent\` group) require **{{cli}} 0.2.0 or newer** \u2014 run \`npx {{cliPackage}}@latest \u2026\` to get them. Older versions can still reach every command through the \`{{cli}} command <id> --json\` floor, since command execution is server-side.
 
+**Generated verbs (0.6.0+).** Every registry command now has a first-class \`{{cli}} <namespace> <action>\` verb, projected directly from the command's input schema \u2014 so namespaces that previously had no ergonomic wrapper (for example \`{{cli}} measurable create\`, \`{{cli}} work_order enqueue\`, \`{{cli}} mcp_token create\`) are usable without dropping to the raw \`command <id>\` path. Flags follow the schema field names (\`--seat-id\`, \`--name\`, \u2026); read a command's exact input offline with \`{{cli}} <namespace> <action> --schema\` before calling it, and pass a nested payload with \`--input '<json>'\` when a field is a complex object. \`--json\` still selects machine output, \`--seat <id>\` still sets seat scope, and \`{{cli}} command <id> --json '<body>'\` remains the universal fallback.
+
 The signed-in app exposes the same Skill command surface under **Skills** in the left sidebar. Use \`/skills\` to filter the tenant library, \`/skills/new\` to build canonical \`SKILL.md\` frontmatter with \`tool.catalog\` dependencies, \`/skills/import\` for bounded GitHub or upload imports, and each Skill detail page to review validation, publish, check Seat dependencies, and assign a published version. During \`/agents/new\`, \`agent_setup.get\` can return \`next_action: "choose_skills"\`; selected Skills are proposed immutable-version assignments and required Skill tools block sign-off/go-live until tool configuration is ready.
 
 | Command | Command ids | Purpose | Scope | Safe example |
@@ -43051,6 +43055,7 @@ Several rows here are seat-operating commands (\`task.create\`, the \`signal.*\`
 | \`rost_confirm_signal_reading\` | \`signal.confirm_reading\` | Confirm an unconfirmed reading as human-verified. | Seat or tenant-admin | Humans confirm; call with \`{"reading_id":"<id>"}\`. |
 | \`rost_correct_signal_reading\` | \`signal.correct_reading\` | Overwrite a reading with a human-confirmed value. | Seat or tenant-admin | Manual correction; expect confirmation. |
 | \`rost_add_a_measurable\` | \`measurable.create\` | Add a measurable a seat owns (name, unit, direction, target, cadence). | Seat or tenant-admin | Call with \`{"seat_id":"<id>","name":"...","unit":"...","direction":"up_good","target":0,"cadence":"weekly"}\`. |
+| \`rost_import_signals_from_csv\` | \`signal.import\` | Bulk-import measurable definitions + trailing historical readings from a parsed scorecard export (e.g. a ninety CSV). Owners resolve to seats; readings are human-confirmed; re-import upserts by (measurable, period, cadence); a cross-cadence row is reported and skipped, not overwritten. | Tenant | Call with the parsed \`measurables\` array. |
 | \`rost_list_cascade_goals\` | \`goal.list\` | List Cascade goals, optionally by cycle or seat. | Seat or tenant-admin | Call with \`{}\` or \`{"cycle_id":"<id>"}\`. |
 | \`rost_create_cascade_goal\` | \`goal.create\` | Create a cycle goal under an objective. | Tenant | Call with cycle, seat, parent, title, definition of done. |
 | \`rost_update_cascade_goal\` | \`goal.update\` | Update a goal's title or definition of done. | Tenant | Call with \`goal_id\` and the changed fields. |
@@ -43065,6 +43070,7 @@ Several rows here are seat-operating commands (\`task.create\`, the \`signal.*\`
 | \`rost_resolve_friction_issue\` | \`friction.resolve\` | Resolve an issue with a root cause and remediation task. | Tenant | Human decision; expect confirmation. |
 | \`rost_link_task_to_friction_issue\` | \`friction.link_task\` | Attach an existing task as an issue's action task. | Seat or tenant-admin | Call with \`issue_id\` and \`task_id\`. |
 | \`rost_create_task\` | \`task.create\` | Create a task (a commitment between seats). | Seat or tenant-admin | \`none\` \u2014 created directly; the owning seat accepts or declines. |
+| \`rost_update_task\` | \`task.update\` | Reschedule, reassign, or edit a non-terminal task. | Owner (tenant-admin) | Pass \`task_id\` plus at least one of \`due_on\`/\`owner_seat_id\`/\`title\`/\`description\`; terminal tasks reject. |
 | \`rost_compile_sync_brief\` | \`sync.brief.compile\` | Compile the weekly Sync Brief (idempotent per period). | Tenant | Call with \`{}\`. |
 | \`rost_get_sync_brief\` | \`sync.brief.get\` | Read the latest or a specific Sync Brief and agenda. | Seat or tenant-admin | Call with \`{}\` or \`{"sync_brief_id":"<id>"}\`. |
 | \`rost_start_sync_run\` | \`sync.run.start\` | Ensure a Sync Brief exists so the meeting can begin. | Tenant | Call with \`{}\`. |
@@ -43649,7 +43655,7 @@ Agents can suggest commitments and report progress. They should not create a new
     order: 61,
     title: "Signal guide",
     summary: "How to define and read measurables so the company runs on evidence instead of status theater.",
-    version: "2026-06-18.2",
+    version: "2026-06-30.1",
     public: true,
     audiences: ["human", "cli", "mcp", "in_app_agent"],
     stages: ["operating_rhythm"],
@@ -43661,7 +43667,8 @@ Agents can suggest commitments and report progress. They should not create a new
       "signal.get",
       "signal.confirm_reading",
       "signal.correct_reading",
-      "measurable.create"
+      "measurable.create",
+      "signal.import"
     ],
     legal: {
       publicRisk: "low",
@@ -43703,6 +43710,10 @@ Avoid vanity numbers, manual-only status fields, and metrics nobody can act on.
 
 A human can run the whole loop from the Signal page. Each measurable has a "Log this period's number" control that records a human reading (the same \`signal.correct_reading\` path), and an "Add a measurable" form creates one against a seat (the \`measurable.create\` path). You do not need an agent to keep Signal current.
 
+## Import a scorecard from CSV
+
+To move off a spreadsheet or another operating tool, upload a scorecard export from the Signal page "Import from CSV" panel (the \`signal.import\` command, also available on CLI/MCP). Each row becomes a measurable owned by the seat whose name matches the row's owner, with its target, unit, direction, cadence, and trailing readings. Import is idempotent \u2014 re-importing upserts by period \u2014 and a row whose cadence conflicts with an existing measurable is reported and skipped, not overwritten.
+
 ## When to stop for confirmation
 
 \`signal.correct_reading\` is \`human_required\`; overwriting a recorded measurable is a human judgment. \`signal.confirm_reading\` is \`none\`, so a seat can confirm its own readings directly. \`measurable.create\` is \`none\` \u2014 defining a measurable is not gated. An agent records readings with evidence; a human corrects when a value is wrong.
@@ -43918,7 +43929,7 @@ Stop before: approving a Charter, signing a manifest, connecting a tool or crede
     order: 72,
     title: "Settings guide",
     summary: "How to use Settings as the control plane for company access, channels, providers, tokens, and operating defaults.",
-    version: "2026-06-29.1",
+    version: "2026-06-30.1",
     public: true,
     audiences: ["human", "cli", "mcp", "in_app_agent"],
     stages: ["company_setup", "staffing"],
@@ -43957,7 +43968,9 @@ When a settings source is temporarily unavailable, the app keeps the route open
 
 ## Integration health
 
-\`integration.list\` lists connector metadata for CLI and MCP operators, \`integration.readiness\` returns the setup checklist, \`integration.status\` reads one provider or integration id, and \`integration.test\` runs the installed provider-specific health check. These commands return account labels, scopes, capabilities, timestamps, checklist status, DER-coded next actions, and health only; they never return vault references, access tokens, refresh tokens, client secrets, or raw provider responses. Google's test refreshes the vaulted OAuth credential and reads the Gmail profile as the minimal live check. Settings exposes the same Google readiness facts and test action beside Connect/Reconnect, showing whether OAuth env, callback registration, tenant connection, scopes, tests, Google verification/CASA, and Gmail/Sheets handlers are ready or still waiting on DER-880, DER-881, DER-866, or DER-867.
+\`integration.list\` lists connector metadata for CLI and MCP operators, \`integration.readiness\` returns the setup checklist, \`integration.status\` reads one provider or integration id, and \`integration.test\` runs the installed provider-specific health check. These commands return account labels, scopes, capabilities, timestamps, checklist status, and health only; they never return vault references, access tokens, refresh tokens, client secrets, or raw provider responses. Google's test refreshes the vaulted OAuth credential and reads the Gmail profile as the minimal live check. Settings keeps the client-facing Google card narrower: connected account, last successful test, granted capabilities, and connect, reconnect, or test actions.
+
+Google production verification is a roadmap item planned after the first 100 users. Until then, live external Gmail send remains approval-gated and partner demos should use connected-account tests, sandbox previews, drafts, and approval-held examples rather than claiming unrestricted Google production send.
 
 Reconnects keep historical rows for audit, but provider status in Settings, CLI, and MCP prefers the current connected row first, then the latest error or disconnected row.
 
@@ -44710,7 +44723,7 @@ Agents should not teach EOS as EOS. They should use {{brand}}'s method. When a u
     order: 11,
     title: "Compass authoring guide",
     summary: "Field-by-field guidance for authoring a strong Compass document directly, with the full JSON contract and worked examples.",
-    version: "2026-06-20.1",
+    version: "2026-06-30.1",
     public: true,
     audiences: ["cli", "mcp", "in_app_agent"],
     stages: ["company_setup"],
@@ -44765,7 +44778,7 @@ Each direction field (purpose, each principle, each goal title and definition of
 
 - **purpose** \u2014 why the company exists, beyond making money. Good: "Help small manufacturers ship quality products on time." Weak: "Be the best in our industry" (no one is served, nothing is testable).
 - **principles** (1\u20135) \u2014 the few operating beliefs that actually decide trade-offs. Good: "Customers feel the quality of every order." Weak: "Integrity" (a value label, not a decision rule). Keep it to the handful that change behavior; more than five dilutes them.
-- **horizon_goals.three_year** and **horizon_goals.one_year** \u2014 each a goal object with a \`title\` and a \`definition_of_done\`, both "field" objects, plus a \`horizon\` of \`"three_year"\` or \`"one_year"\`. The definition of done must be checkable: "Trailing-12-month ARR \u2265 $3M and on-time delivery \u2265 99% for two consecutive quarters," not "grow a lot."
+- **horizon_goals.ten_year** (optional, schema_version 2), **horizon_goals.three_year**, and **horizon_goals.one_year** \u2014 each a goal object with a \`title\` and a \`definition_of_done\`, both "field" objects, plus a \`horizon\` of \`"ten_year"\`, \`"three_year"\`, or \`"one_year"\`. The 10-year horizon is additive: a human adds it through a new, superseding Compass version \u2014 never by editing an accepted doc. The definition of done must be checkable: "Trailing-12-month ARR \u2265 $3M and on-time delivery \u2265 99% for two consecutive quarters," not "grow a lot."
 - **cycle_objectives** (1\u20133) \u2014 the goals for the current cycle, each a goal object with \`horizon: "cycle"\`. These are what the company is actually working on now and should ladder up to the one-year goal.
 - **gaps** \u2014 questions the documents did not answer. Each gap has an \`id\`, the \`field\` it blocks, a \`question\`, a \`severity\` (\`required\` or \`recommended\`), and a \`reason\`. Record a gap rather than fabricating a value.
 - **follow_up_tasks** \u2014 concrete tasks that close a gap, each tied to a \`gap_id\` with \`acceptance_criteria\`.
@@ -44775,13 +44788,18 @@ Each direction field (purpose, each principle, each goal title and definition of
 
 \`\`\`json
 {
-  "schema_version": 1,
+  "schema_version": 2,
   "purpose": { "value": "Help small manufacturers ship quality products on time.", "citations": [], "confidence": 0.9, "placeholder": false },
   "principles": [
     { "value": "Bias to action; decide with the information we have.", "citations": [], "confidence": 0.9, "placeholder": false },
     { "value": "Customers feel the quality of every order.", "citations": [], "confidence": 0.9, "placeholder": false }
   ],
   "horizon_goals": {
+    "ten_year": {
+      "title": { "value": "Reach $250M enterprise value", "citations": [], "confidence": 0.6, "placeholder": false },
+      "definition_of_done": { "value": "An independent valuation is at or above $250M.", "citations": [], "confidence": 0.6, "placeholder": false },
+      "horizon": "ten_year"
+    },
     "three_year": {
       "title": { "value": "Reach $10M ARR with a 25-person team", "citations": [], "confidence": 0.8, "placeholder": false },
       "definition_of_done": { "value": "ARR is at or above $10M and headcount is 25 with no key-role gaps.", "citations": [], "confidence": 0.8, "placeholder": false },
@@ -45829,10 +45847,188 @@ function parseSemver(value) {
   };
 }
 
-// src/operations.ts
+// src/generated/command-manifest.ts
+var COMMAND_MANIFEST = [
+  { "id": "agent_setup.get", "namespace": "agent_setup", "action": "get", "title": "Get agent setup", "description": "Read the resumable agent-setup state: mode, parent, steward, template, lane, schedule, tool decisions, dry run, and next action.", "requiredScope": "seat", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": false }, { "name": "setup_id", "flag": "setup-id", "type": "string", "required": false }], "hasComplexInput": false, "help": "Read the resumable setup state: mode, parent, steward, lane, schedule, tool decisions, dry-run blockers, and the next action." },
+  { "id": "agent_setup.start", "namespace": "agent_setup", "action": "start", "title": "Start agent setup", "description": "Start (or resume) a draft agent setup for a seat in template, custom, or existing mode.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": true }, { "name": "mode", "flag": "mode", "type": "enum", "required": true, "enumValues": ["template", "custom", "existing"] }, { "name": "template_slug", "flag": "template-slug", "type": "string", "required": false }], "hasComplexInput": false, "help": "Start a draft agent setup from a template, custom, or existing mode; the setup resumes from the draft agent and Charter, not a fresh start." },
+  { "id": "agent_setup.update", "namespace": "agent_setup", "action": "update", "title": "Update agent setup", "description": "Update the draft agent's parent, steward, lane, schedule, operational answers, and tool decisions.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": true }, { "name": "parent_seat_id", "flag": "parent-seat-id", "type": "string", "required": false }, { "name": "steward_seat_id", "flag": "steward-seat-id", "type": "string", "required": false }, { "name": "lane", "flag": "lane", "type": "enum", "required": false, "enumValues": ["cloud", "mcp_session", "runner"] }, { "name": "schedule_cron", "flag": "schedule-cron", "type": "string", "required": false }, { "name": "answers", "flag": "answers", "type": "array", "required": false, "itemType": "string" }], "hasComplexInput": true, "help": "Update parent, steward, lane, schedule, answers, or tool decisions on the draft; steward and parent changes keep the no-orphan chain explicit." },
+  { "id": "agent_template.list", "namespace": "agent_template", "action": "list", "title": "List agent templates", "description": "List stock agent templates and their responsibilities, default tools, and dry-run rehearsal.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [], "hasComplexInput": false, "help": "List stock agent templates and their default tools and safety boundaries before starting a template setup." },
+  { "id": "agent.configure_tools", "namespace": "agent", "action": "configure_tools", "title": "Configure agent tools", "description": "Save tool proposals, declines, and credential-ingress requests for a draft agent. Never stores or echoes secret material; vault refs only.", "requiredScope": "seat", "confirmation": "credential_flow", "exposeOverMcp": true, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": true }], "hasComplexInput": true, "help": "Connect or decline proposed tools and stage credential-ingress requests; never place raw secrets here \u2014 secrets flow through vault-backed credential.ingress as vault refs only.", "example": { "seat_id": "0190aaaa-aaaa-7aaa-8aaa-aaaaaaaaaaaa", "tool_decisions": [{ "tool": "ap.invoices.read", "decision": "connect" }, { "tool": "email.draft", "decision": "connect" }] } },
+  { "id": "agent.create_custom", "namespace": "agent", "action": "create_custom", "title": "Create custom agent", "description": "Create a draft custom agent shell and a draft Charter seed from operational answers (what it owns, success, never-do-alone, steward).", "requiredScope": "tenant", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": true }, { "name": "steward_seat_id", "flag": "steward-seat-id", "type": "string", "required": false }, { "name": "lane", "flag": "lane", "type": "enum", "required": false, "enumValues": ["cloud", "mcp_session", "runner"] }, { "name": "what_it_owns", "flag": "what-it-owns", "type": "string", "required": false }, { "name": "what_success_looks_like", "flag": "what-success-looks-like", "type": "string", "required": false }, { "name": "what_it_must_never_do_alone", "flag": "what-it-must-never-do-alone", "type": "string", "required": false }], "hasComplexInput": true, "help": "Create a draft custom agent from operational answers (what it owns, success, never-do-alone, steward); the Charter Builder owns the contract and go-live stays human-gated.", "example": { "seat_id": "0190aaaa-aaaa-7aaa-8aaa-aaaaaaaaaaaa", "steward_seat_id": "0190bbbb-bbbb-7bbb-8bbb-bbbbbbbbbbbb", "lane": "cloud", "what_it_owns": "Drafting AP invoice entries from inbound vendor emails for human review.", "what_success_looks_like": "Every inbound invoice is drafted within one business day with the correct GL coding.", "what_it_must_never_do_alone": "Never send payment or approve an invoice without a human sign-off." } },
+  { "id": "agent.create_from_template", "namespace": "agent", "action": "create_from_template", "title": "Create agent from template", "description": "Create a draft stock agent and draft Charter from a stock template. Creates the agent occupancy only when a human steward chain resolves; the agent stays draft until a signed manifest, a passed dry run, and human go-live.", "requiredScope": "tenant", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": true }, { "name": "template_slug", "flag": "template-slug", "type": "string", "required": true }, { "name": "expected_template_version", "flag": "expected-template-version", "type": "string", "required": false }], "hasComplexInput": false, "help": "Create a draft stock agent and draft Charter from a template; the agent occupancy is created only when a human steward chain resolves, and the agent stays draft until a signed manifest, a passed dry run, and human go-live." },
+  { "id": "agent.decommission", "namespace": "agent", "action": "decommission", "title": "Decommission agent", "description": "Retire an agent occupancy safely. Blocks if it would leave another live agent without a human steward chain.", "requiredScope": "tenant", "confirmation": "dangerous", "exposeOverMcp": true, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": true }, { "name": "reason", "flag": "reason", "type": "string", "required": false }], "hasComplexInput": false, "help": "Retire an agent occupancy safely; the no-orphan guard blocks any decommission that would leave another live agent without a human steward chain." },
+  { "id": "agent.fleet_digest", "namespace": "agent", "action": "fleet_digest", "title": "Get dogfood fleet health digest", "description": "Return a daily tenant fleet health digest with live/idle state, run counts, spend, failed runs, unresolved product errors, notification errors, and next actions.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "window_hours", "flag": "window-hours", "type": "integer", "required": false }, { "name": "error_limit", "flag": "error-limit", "type": "integer", "required": false }], "hasComplexInput": false, "help": "Capture a daily dogfood fleet health digest with fleet state, run counts, spend, failed runs, unresolved errors, failed notifications, and next actions." },
+  { "id": "agent.get_run", "namespace": "agent", "action": "get_run", "title": "Get agent run diagnostics", "description": "Return one seat run's diagnostic record: run status, transcript reference, token/cost usage, outcome, and linked product-visible run errors.", "requiredScope": "seat", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": true }, { "name": "run_id", "flag": "run-id", "type": "string", "required": true }], "hasComplexInput": false, "help": "Read one run's diagnostic record, transcript reference, token/cost usage, outcome, and linked product-visible errors." },
+  { "id": "agent.go_live", "namespace": "agent", "action": "go_live", "title": "Go live", "description": "Promote a dry-run agent seat to live after the human approval gate.", "requiredScope": "seat", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": true }, { "name": "charter_version_id", "flag": "charter-version-id", "type": "string", "required": true }], "hasComplexInput": false, "help": "Move an agent live only after dry-run evidence, signed permissions, and a human Steward chain are clear.", "example": { "seat_id": "0190aaaa-aaaa-7aaa-8aaa-aaaaaaaaaaaa", "charter_version_id": "0190cccc-cccc-7ccc-8ccc-cccccccccccc" } },
+  { "id": "agent.list_fleet", "namespace": "agent", "action": "list_fleet", "title": "List agent fleet", "description": "Return every agent-occupied seat with lane, live state, last real turn, recent turn counts, top measurable status, open escalations, and 7-day real-run spend.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [], "hasComplexInput": false, "help": "Read every agent-occupied seat at once: lane, live state, last real turn, 24h/7d turns, measurable status, escalations, and spend." },
+  { "id": "agent.list_runs", "namespace": "agent", "action": "list_runs", "title": "List agent runs", "description": "Return a seat's agent run history (status, lane, model, cost, per-run tool-call and guard-denial counts) plus the seat's run/tool-call rollup with held-action count.", "requiredScope": "seat", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": true }, { "name": "limit", "flag": "limit", "type": "integer", "required": false }], "hasComplexInput": false, "help": "Audit a seat's agent run history with per-run tool-call and guard-held counts (the Trust Card)." },
+  { "id": "agent.list_tool_calls", "namespace": "agent", "action": "list_tool_calls", "title": "List agent tool calls", "description": "Return a seat's tool-call ledger (tool name, guard result, manifest clause, outcome) with the held-action count as the hero metric. Pass held_only to return only guard-held calls. Never returns argument summaries or secret material.", "requiredScope": "seat", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": true }, { "name": "limit", "flag": "limit", "type": "integer", "required": false }, { "name": "held_only", "flag": "held-only", "type": "boolean", "required": false }], "hasComplexInput": false, "help": "Audit a seat's tool-call ledger with each call's guard result; held actions are the hero metric." },
+  { "id": "agent.pause", "namespace": "agent", "action": "pause", "title": "Pause agent", "description": "Pause a live agent so it stops scheduled and on-demand runs. Reversible with agent.resume.", "requiredScope": "tenant", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": true }, { "name": "reason", "flag": "reason", "type": "string", "required": false }], "hasComplexInput": false, "help": "Pause a live agent so it stops scheduled and on-demand runs; queued work orders are expired and a paused agent refuses to run until resumed. Reversible, unlike agent.decommission." },
+  { "id": "agent.resume", "namespace": "agent", "action": "resume", "title": "Resume agent", "description": "Resume a paused agent back to live. Blocks if the steward chain no longer resolves to a human.", "requiredScope": "tenant", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": true }, { "name": "reason", "flag": "reason", "type": "string", "required": false }], "hasComplexInput": false, "help": "Resume a paused agent back to live; the no-orphan guard blocks a resume whose steward chain no longer resolves to a human." },
+  { "id": "agent.run_dry_run", "namespace": "agent", "action": "run_dry_run", "title": "Run agent dry run", "description": "Run the sandbox dry run for a draft agent. Durable and idempotent per Charter version; a passed result is reused, never re-run.", "requiredScope": "seat", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": true }, { "name": "charter_version_id", "flag": "charter-version-id", "type": "string", "required": true }], "hasComplexInput": false, "help": "Run the sandbox dry run for a draft agent after the manifest is signed; the result is durable and idempotent per Charter version, and a passed run is reused.", "example": { "seat_id": "0190aaaa-aaaa-7aaa-8aaa-aaaaaaaaaaaa", "charter_version_id": "0190cccc-cccc-7ccc-8ccc-cccccccccccc" } },
+  { "id": "agent.run_now", "namespace": "agent", "action": "run_now", "title": "Run agent now", "description": "Queue and dispatch an immediate work order for a live cloud or runner agent on a seat.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": true }, { "name": "task_id", "flag": "task-id", "type": "string", "required": false }], "hasComplexInput": false, "help": "Queue and dispatch an immediate live agent run without changing the agent's saved schedule." },
+  { "id": "agent.show_markdown", "namespace": "agent", "action": "show_markdown", "title": "Show agent setup as markdown", "description": "Compose a seat's agent setup, steward, model, tools, and Charter into a clean, human-skimmable markdown card for review.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": true }], "hasComplexInput": false, "help": "Render a seat's agent setup, model, steward, tools, and Charter as a clean markdown card to show your human a quick review." },
+  { "id": "agent.status", "namespace": "agent", "action": "status", "title": "Get agent status", "description": "Return the agent occupancy, lane, schedule, live/offline state, steward chain, dry-run result, and Runner availability for a seat.", "requiredScope": "seat", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": true }], "hasComplexInput": false, "help": "Check an agent's lane, live state, steward chain, dry-run result, and Runner availability before relying on it." },
+  { "id": "agent.update_schedule", "namespace": "agent", "action": "update_schedule", "title": "Update agent schedule", "description": "Set or clear the scheduled execution cron for a draft or live agent on a seat.", "requiredScope": "tenant", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": true }, { "name": "schedule_cron", "flag": "schedule-cron", "type": "string", "required": true }], "hasComplexInput": false, "help": "Set or clear an agent's scheduled execution; a live scheduled agent must keep a steward chain resolving to a human." },
+  { "id": "charter.apply_seat_type_recommendation", "namespace": "charter", "action": "apply_seat_type_recommendation", "title": "Apply Charter seat-type recommendation", "description": "Apply the seat-type recommendation from a draft Charter.", "requiredScope": "seat", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "charter_version_id", "flag": "charter-version-id", "type": "string", "required": true }], "hasComplexInput": false, "help": "Apply seat-type recommendations only after the Charter clarifies work shape, risk, and Steward accountability." },
+  { "id": "charter.approve", "namespace": "charter", "action": "approve", "title": "Approve charter", "description": "Approve a draft Charter as a human owner.", "requiredScope": "seat", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": false }, { "name": "charter_version_id", "flag": "charter-version-id", "type": "string", "required": false }, { "name": "apply_seat_type", "flag": "apply-seat-type", "type": "boolean", "required": false }], "hasComplexInput": true, "help": "Charter approval is a human decision that activates the seat's operating contract." },
+  { "id": "charter.draft", "namespace": "charter", "action": "draft", "title": "Draft charter", "description": "Create or fetch a draft Charter for a seat.", "requiredScope": "seat", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": true }], "hasComplexInput": false, "help": "Draft Charters that define purpose, responsibilities, decision authority, measurables, tools, budget, and escalation; the charter authoring deep-dive shows what good looks like per field." },
+  { "id": "charter.draft_all", "namespace": "charter", "action": "draft_all", "title": "Draft all charters", "description": "Draft Charters for every eligible seat in a tenant.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [], "hasComplexInput": false, "help": "Draft Charters in onboarding order after the Responsibility Graph has enough seat clarity.", "example": {} },
+  { "id": "charter.get", "namespace": "charter", "action": "get", "title": "Get Charter", "description": "Return a Charter version with its supersession history and latest dry-run status.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "charter_version_id", "flag": "charter-version-id", "type": "string", "required": true }], "hasComplexInput": false, "help": "Read a Charter with its supersession history and dry-run status before approving or signing a manifest." },
+  { "id": "charter.list", "namespace": "charter", "action": "list", "title": "List Charters", "description": "List Charter versions in the tenant, optionally filtered by seat or status.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": false }, { "name": "status", "flag": "status", "type": "enum", "required": false, "enumValues": ["draft", "active", "superseded"] }], "hasComplexInput": false, "help": "List Charter versions to find the right draft or active version id before reading or amending it." },
+  { "id": "charter.set", "namespace": "charter", "action": "set", "title": "Set charter", "description": "Create or replace a seat's draft Charter from a full document in one call; approve activates it as a human owner.", "requiredScope": "seat", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": true }, { "name": "approve", "flag": "approve", "type": "boolean", "required": false }], "hasComplexInput": true, "help": "Create or replace a seat's draft Charter from a full document in one call; read the charter authoring deep-dive first. Approving activates the seat's contract and is a human decision.", "example": { "seat_id": "0190aaaa-aaaa-7aaa-8aaa-aaaaaaaaaaaa", "doc": { "payload_version": 1, "purpose": "AP intake clerk: draft accounts-payable invoice entries from inbound vendor emails for human review.", "accountabilities": [{ "title": "Draft every inbound invoice", "description": "Convert each inbound vendor invoice into a draft AP entry with the correct vendor, amount, and GL coding within one business day." }, { "title": "Flag discrepancies", "description": "Surface duplicate, mismatched, or out-of-policy invoices as Friction issues instead of drafting them silently." }], "decision_authority": { "autonomous": [{ "action": "Draft AP entries and propose GL coding from inbound invoices", "condition": "Allowed when the vendor is known and the amount is within the standard purchase range.", "rationale": "Drafting is reversible and reviewed by a human before posting.", "unanswered_boundary": false }], "approval": [{ "action": "Post an invoice or send any vendor-facing message", "condition": "Require explicit human approval before posting or sending.", "rationale": "Posting and sending are durable, money-moving actions.", "unanswered_boundary": false }], "escalate": [{ "action": "Unknown vendor, payment over the approval threshold, or a suspected duplicate", "condition": "Always escalate to the Steward before acting.", "rationale": "Conservative default for ambiguous, irreversible, or financial exposure.", "unanswered_boundary": true }] }, "escalation_rules": ["Escalate any invoice over $5,000 or from a vendor not already in the ledger.", "Escalate when an invoice appears to duplicate one already drafted or posted."], "measurables": [{ "name": "Invoices drafted within one business day", "target": "100%", "cadence": "weekly", "source": "agent" }, { "name": "Discrepancies caught before posting", "target": "\u2265 95%", "cadence": "monthly", "source": "human" }], "permission_manifest": [{ "tool": "ap.invoices.read", "scope": "Read inbound invoices and the vendor ledger.", "granted": true, "rationale": "Needed to draft entries from source invoices." }, { "tool": "email.draft", "scope": "Draft vendor replies for human review; never send.", "granted": true, "rationale": "Lets the seat prepare clarifications without taking a send action." }], "budget": { "monthly_usd": null, "approval_required_over_usd": 0, "notes": "No autonomous spend; any spend requires Steward approval until a budget is set." }, "unanswered_boundaries": ["Approval threshold for auto-posting", "Vendor onboarding authority"], "seat_type_recommendation": { "recommendation": "agent", "rationale": "The work is high-volume, rule-bound, and fully reviewable, which suits a draft-and-confirm agent under a human Steward.", "confidence": 0.8 } }, "approve": false } },
+  { "id": "charter.show_markdown", "namespace": "charter", "action": "show_markdown", "title": "Show Charter as markdown", "description": "Compose a seat's active or latest Charter into a clean, human-skimmable markdown card for review.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": true }], "hasComplexInput": false, "help": "Render a seat's active or latest Charter as a clean markdown card to show your human a quick review." },
+  { "id": "charter.sign_manifest", "namespace": "charter", "action": "sign_manifest", "title": "Sign charter manifest", "description": "Request human confirmation for a Charter permission manifest.", "requiredScope": "seat", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "charter_version_id", "flag": "charter-version-id", "type": "string", "required": true }], "hasComplexInput": false, "help": "Sign tool manifests only when the Charter explains why the tool is needed and how it is bounded." },
+  { "id": "charter.skip", "namespace": "charter", "action": "skip", "title": "Skip charter draft", "description": "Mark a draft Charter as skipped.", "requiredScope": "seat", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "charter_version_id", "flag": "charter-version-id", "type": "string", "required": true }], "hasComplexInput": false, "help": "Skip a Charter only when the seat is intentionally out of scope for the current onboarding pass." },
+  { "id": "charter.update_draft", "namespace": "charter", "action": "update_draft", "title": "Update charter draft", "description": "Update a draft Charter document.", "requiredScope": "seat", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "charter_version_id", "flag": "charter-version-id", "type": "string", "required": true }], "hasComplexInput": true, "help": "Submit the full Charter document directly (purpose, decision_authority, escalation_rules, measurables, budget, permission_manifest); read the charter authoring deep-dive for what good looks like per field. Durable authority changes still need human approval.", "example": { "charter_version_id": "0190cccc-cccc-7ccc-8ccc-cccccccccccc", "doc": { "payload_version": 1, "purpose": "AP intake clerk: draft accounts-payable invoice entries from inbound vendor emails for human review.", "accountabilities": [{ "title": "Draft every inbound invoice", "description": "Convert each inbound vendor invoice into a draft AP entry with the correct vendor, amount, and GL coding within one business day." }, { "title": "Flag discrepancies", "description": "Surface duplicate, mismatched, or out-of-policy invoices as Friction issues instead of drafting them silently." }], "decision_authority": { "autonomous": [{ "action": "Draft AP entries and propose GL coding from inbound invoices", "condition": "Allowed when the vendor is known and the amount is within the standard purchase range.", "rationale": "Drafting is reversible and reviewed by a human before posting.", "unanswered_boundary": false }], "approval": [{ "action": "Post an invoice or send any vendor-facing message", "condition": "Require explicit human approval before posting or sending.", "rationale": "Posting and sending are durable, money-moving actions.", "unanswered_boundary": false }], "escalate": [{ "action": "Unknown vendor, payment over the approval threshold, or a suspected duplicate", "condition": "Always escalate to the Steward before acting.", "rationale": "Conservative default for ambiguous, irreversible, or financial exposure.", "unanswered_boundary": true }] }, "escalation_rules": ["Escalate any invoice over $5,000 or from a vendor not already in the ledger.", "Escalate when an invoice appears to duplicate one already drafted or posted."], "measurables": [{ "name": "Invoices drafted within one business day", "target": "100%", "cadence": "weekly", "source": "agent" }, { "name": "Discrepancies caught before posting", "target": "\u2265 95%", "cadence": "monthly", "source": "human" }], "permission_manifest": [{ "tool": "ap.invoices.read", "scope": "Read inbound invoices and the vendor ledger.", "granted": true, "rationale": "Needed to draft entries from source invoices." }, { "tool": "email.draft", "scope": "Draft vendor replies for human review; never send.", "granted": true, "rationale": "Lets the seat prepare clarifications without taking a send action." }], "budget": { "monthly_usd": null, "approval_required_over_usd": 0, "notes": "No autonomous spend; any spend requires Steward approval until a budget is set." }, "unanswered_boundaries": ["Approval threshold for auto-posting", "Vendor onboarding authority"], "seat_type_recommendation": { "recommendation": "agent", "rationale": "The work is high-volume, rule-bound, and fully reviewable, which suits a draft-and-confirm agent under a human Steward.", "confidence": 0.8 } } } },
+  { "id": "coach.draft_guide", "namespace": "coach", "action": "draft_guide", "title": "Draft accountability discussion guide", "description": "Draft a private discussion guide for the accountable human about a seat's commitment pattern. Read-only and human-only \u2014 it is never delivered, sent, or written to the coached person's record.", "requiredScope": "tenant_admin", "confirmation": "none", "exposeOverMcp": false, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": true }], "hasComplexInput": false, "help": "Draft a private accountability discussion guide for the accountable human from a seat's commitment pattern. Never delivered or written to the coached person's record." },
+  { "id": "command.describe", "namespace": "command", "action": "describe", "title": "Describe command", "description": "Return a command's exact input/output JSON Schema, scope, confirmation gate, help pointer, guides, a validated example, and related commands. Run this before calling a mutating command.", "requiredScope": "user", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "id", "flag": "id", "type": "string", "required": true }], "hasComplexInput": false, "help": "Run command.describe before calling a mutating command to read its exact input/output schema and a worked example; on a failure, read the error's help field and run the command it names." },
+  { "id": "command.list", "namespace": "command", "action": "list", "title": "List commands", "description": "List every callable command id with its title, required scope, confirmation gate, and onboarding stages. Use 'command.describe' for a single command's full contract.", "requiredScope": "user", "confirmation": "none", "exposeOverMcp": true, "fields": [], "hasComplexInput": false, "help": "List the callable command surface, then use command.describe for the exact contract of the one you need." },
+  { "id": "compass.alignment", "namespace": "compass", "action": "alignment", "title": "Check Compass alignment", "description": "Advisory drift check: scores whether cycle goals still ladder up to the active vision and flags orphan/contradictory goals. Read-only \u2014 it never edits the Compass or any goal.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [], "hasComplexInput": false, "help": "Advisory drift check: scores whether cycle goals still ladder to the active vision and flags orphan/contradictory goals. Read-only." },
+  { "id": "compass.answer_gap", "namespace": "compass", "action": "answer_gap", "title": "Answer Compass gap", "description": "Record a human answer for a Compass gap and create a replacement draft.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "gap_id", "flag": "gap-id", "type": "string", "required": true }, { "name": "answer", "flag": "answer", "type": "string", "required": true }], "hasComplexInput": false, "help": "Answer Compass gaps with explicit human input before turning direction into graph, Charter, or Cascade decisions." },
+  { "id": "compass.approve_version", "namespace": "compass", "action": "approve_version", "title": "Approve Compass version", "description": "Activate a Compass version by supersession.", "requiredScope": "tenant", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "draft_id", "flag": "draft-id", "type": "string", "required": true }], "hasComplexInput": false, "help": "Compass approval is a human decision and should anchor later Cascade commitments." },
+  { "id": "compass.draft", "namespace": "compass", "action": "draft", "title": "Draft Compass", "description": "Create a Compass draft version.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [], "hasComplexInput": true, "help": "Submit a full Compass document; read the Compass authoring guide for the field-by-field contract and worked examples before drafting. Drafting is safe for an agent; approving a version is a human act.", "example": { "doc": { "schema_version": 1, "purpose": { "value": "Help small manufacturers ship quality products on time.", "citations": [], "confidence": 0.9, "placeholder": false }, "principles": [{ "value": "Bias to action; decide with the information we have.", "citations": [], "confidence": 0.9, "placeholder": false }, { "value": "Customers feel the quality of every order.", "citations": [], "confidence": 0.9, "placeholder": false }], "horizon_goals": { "three_year": { "title": { "value": "Reach $10M ARR with a 25-person team", "citations": [], "confidence": 0.9, "placeholder": false }, "definition_of_done": { "value": "ARR is at or above $10M and team headcount is 25 with no key-role gaps.", "citations": [], "confidence": 0.9, "placeholder": false }, "horizon": "three_year" }, "one_year": { "title": { "value": "Hit $3M ARR and 99% on-time delivery", "citations": [], "confidence": 0.9, "placeholder": false }, "definition_of_done": { "value": "Trailing-12-month ARR \u2265 $3M and on-time delivery rate \u2265 99% for two consecutive quarters.", "citations": [], "confidence": 0.9, "placeholder": false }, "horizon": "one_year" } }, "cycle_objectives": [{ "title": { "value": "Cut order-to-ship cycle time by 20%", "citations": [], "confidence": 0.9, "placeholder": false }, "definition_of_done": { "value": "Median order-to-ship time is 20% lower than the prior cycle baseline.", "citations": [], "confidence": 0.9, "placeholder": false }, "horizon": "cycle" }], "gaps": [], "follow_up_tasks": [], "source_ids": [] } } },
+  { "id": "compass.get_current", "namespace": "compass", "action": "get_current", "title": "Get current Compass", "description": "Return the active and draft Compass versions plus the source documents that informed them.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [], "hasComplexInput": false, "help": "Read the active and draft Compass before drafting goals or recommending direction changes." },
+  { "id": "compass.list_gaps", "namespace": "compass", "action": "list_gaps", "title": "List Compass gaps", "description": "Return unanswered and answered Compass context gaps for the latest draft or active version.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [], "hasComplexInput": false, "help": "List unanswered Compass gaps so a human can answer them before direction anchors graph or Cascade work." },
+  { "id": "compass.reject_draft", "namespace": "compass", "action": "reject_draft", "title": "Reject Compass draft", "description": "Reject and remove a draft Compass version.", "requiredScope": "tenant", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "draft_id", "flag": "draft-id", "type": "string", "required": true }], "hasComplexInput": false, "help": "Reject Compass drafts when the direction, language, or company intent is not ready to anchor implementation." },
+  { "id": "compass.set", "namespace": "compass", "action": "set", "title": "Set Compass", "description": "Compatibility command for the DER-626 MCP Compass tool.", "requiredScope": "tenant", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "draft_id", "flag": "draft-id", "type": "string", "required": false }, { "name": "approve", "flag": "approve", "type": "boolean", "required": false }], "hasComplexInput": true, "help": "Set Compass drafts in the product's own vocabulary and approve only with explicit human confirmation." },
+  { "id": "compass.show_markdown", "namespace": "compass", "action": "show_markdown", "title": "Show Compass as markdown", "description": "Compose the current Compass and its open gaps into a clean, human-skimmable markdown card for review.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [], "hasComplexInput": false, "help": "Render the current Compass and its open gaps as a clean markdown card to show your human a quick review." },
+  { "id": "compass.update_draft", "namespace": "compass", "action": "update_draft", "title": "Update Compass draft", "description": "Replace a draft Compass document.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "draft_id", "flag": "draft-id", "type": "string", "required": true }], "hasComplexInput": true, "help": "Pass the compass_version_id returned by compass.draft as draft_id; update_draft replaces only an unpublished draft in this tenant." },
+  { "id": "confirmation.approve", "namespace": "confirmation", "action": "approve", "title": "Approve pending confirmation", "description": "Approve an in-flight confirmation and execute the original command as the approving human.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "confirmation_id", "flag": "confirmation-id", "type": "string", "required": true }], "hasComplexInput": false, "help": "Approve pending confirmations only when the requested durable change is clear to the human owner." },
+  { "id": "confirmation.reject", "namespace": "confirmation", "action": "reject", "title": "Reject pending confirmation", "description": "Reject an in-flight confirmation without executing the original command.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "confirmation_id", "flag": "confirmation-id", "type": "string", "required": true }, { "name": "reason", "flag": "reason", "type": "string", "required": false }], "hasComplexInput": false, "help": "Reject pending confirmations when authority, evidence, or human intent is unclear." },
+  { "id": "credential.ingress", "namespace": "credential", "action": "ingress", "title": "Store credential", "description": "Store a secret through the vault and persist only the credential vault reference.", "requiredScope": "seat", "confirmation": "credential_flow", "exposeOverMcp": true, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": false }, { "name": "provider", "flag": "provider", "type": "string", "required": true }, { "name": "scope_description", "flag": "scope-description", "type": "string", "required": true }, { "name": "secret_name", "flag": "secret-name", "type": "string", "required": true }], "hasComplexInput": false, "secretBlocked": true, "help": "Ingress credentials only through vault-backed flows; never place raw secrets in prompts, logs, or docs." },
+  { "id": "deliverable.accept", "namespace": "deliverable", "action": "accept", "title": "Accept deliverable value", "description": "Record a human-confirmed accepted value (USD) on a deliverable. Humans decide; agents cannot self-accept. Re-accepting records a correction as a new event; prior events are never mutated.", "requiredScope": "tenant_admin", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "deliverable_id", "flag": "deliverable-id", "type": "string", "required": true }, { "name": "impact_value_usd", "flag": "impact-value-usd", "type": "number", "required": true }], "hasComplexInput": false, "help": "Record a human-confirmed accepted value (USD) on a deliverable; owner-only and human-gated. Humans decide \u2014 agents cannot self-accept. Re-accepting records a correction as a new event." },
+  { "id": "deliverable.attach", "namespace": "deliverable", "action": "attach", "title": "Attach agent deliverable", "description": "Attach a deliverable to a source run, task, or work order for the acting seat. Source refs are validated server-side.", "requiredScope": "seat", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "run_id", "flag": "run-id", "type": "string", "required": false }, { "name": "task_id", "flag": "task-id", "type": "string", "required": false }, { "name": "work_order_id", "flag": "work-order-id", "type": "string", "required": false }, { "name": "kind", "flag": "kind", "type": "enum", "required": false, "enumValues": ["brief", "work_evidence", "artifact", "report", "other"] }, { "name": "title", "flag": "title", "type": "string", "required": true }, { "name": "summary", "flag": "summary", "type": "string", "required": false }, { "name": "content", "flag": "content", "type": "string", "required": false }], "hasComplexInput": true, "help": "Attach a scrubbed deliverable to a source run, task, or work order that belongs to the acting seat." },
+  { "id": "deliverable.create", "namespace": "deliverable", "action": "create", "title": "Create agent deliverable", "description": "Create an agent deliverable for the acting seat. The deliverable is scrubbed for secrets before storage.", "requiredScope": "seat", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "kind", "flag": "kind", "type": "enum", "required": false, "enumValues": ["brief", "work_evidence", "artifact", "report", "other"] }, { "name": "title", "flag": "title", "type": "string", "required": true }, { "name": "summary", "flag": "summary", "type": "string", "required": false }, { "name": "content", "flag": "content", "type": "string", "required": false }, { "name": "delivered_at", "flag": "delivered-at", "type": "string", "required": false }], "hasComplexInput": true, "help": "Create a scrubbed durable work output for the acting seat without making a durable company decision." },
+  { "id": "deliverable.get", "namespace": "deliverable", "action": "get", "title": "Get agent deliverable", "description": "Return one agent deliverable by id for a seat.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": true }], "hasComplexInput": true, "help": "Read one durable agent deliverable by id after checking seat-scoped access." },
+  { "id": "deliverable.list", "namespace": "deliverable", "action": "list", "title": "List agent deliverables", "description": "Return agent deliverables for a seat, including derived entries from succeeded runs with outcome summaries.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": true }], "hasComplexInput": false, "help": "List durable agent deliverables for a seat, including explicit outputs and successful-run summaries." },
+  { "id": "error_log.list", "namespace": "error_log", "action": "list", "title": "List error logs", "description": "List tenant error logs with optional filtering by seat, source, severity, and resolved state.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": false }, { "name": "source", "flag": "source", "type": "enum", "required": false, "enumValues": ["run", "llm", "tool", "mcp", "runner", "integration", "job", "web"] }, { "name": "severity", "flag": "severity", "type": "enum", "required": false, "enumValues": ["warning", "error", "critical"] }, { "name": "resolved", "flag": "resolved", "type": "enum", "required": false, "enumValues": ["active", "acknowledged", "resolved", "all"] }, { "name": "limit", "flag": "limit", "type": "integer", "required": false }], "hasComplexInput": false, "help": "List product-visible error logs by source, severity, seat, and active/resolved disposition before closing stale failures." },
+  { "id": "error_log.resolve", "namespace": "error_log", "action": "resolve", "title": "Resolve error log", "description": "Acknowledge or resolve an error log with a required reason and optional linked task, Friction issue, or PR reference.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "error_log_id", "flag": "error-log-id", "type": "string", "required": true }, { "name": "reason", "flag": "reason", "type": "string", "required": true }, { "name": "disposition", "flag": "disposition", "type": "enum", "required": false, "enumValues": ["acknowledged", "resolved"] }, { "name": "linked_task_id", "flag": "linked-task-id", "type": "string", "required": false }, { "name": "linked_issue_id", "flag": "linked-issue-id", "type": "string", "required": false }, { "name": "linked_pr_ref", "flag": "linked-pr-ref", "type": "string", "required": false }], "hasComplexInput": false, "help": "Acknowledge or resolve a stale error log with a required human reason and optional task, issue, or PR evidence." },
+  { "id": "error_log.supersede", "namespace": "error_log", "action": "supersede", "title": "Supersede error log", "description": "Mark an error log as superseded by a newer error log. Links the old error to the new one and records the reason.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "error_log_id", "flag": "error-log-id", "type": "string", "required": true }, { "name": "new_error_log_id", "flag": "new-error-log-id", "type": "string", "required": true }, { "name": "reason", "flag": "reason", "type": "string", "required": true }, { "name": "linked_task_id", "flag": "linked-task-id", "type": "string", "required": false }, { "name": "linked_issue_id", "flag": "linked-issue-id", "type": "string", "required": false }, { "name": "linked_pr_ref", "flag": "linked-pr-ref", "type": "string", "required": false }], "hasComplexInput": false, "help": "Mark an older error log as superseded by a newer same-tenant error log while preserving history." },
+  { "id": "escalation.get", "namespace": "escalation", "action": "get", "title": "Get escalation", "description": "Read a single escalation the caller is allowed to see (own steward chain for humans, own seat for agents).", "requiredScope": "seat", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "id", "flag": "id", "type": "string", "required": true }], "hasComplexInput": false, "help": "Read one escalation's evidence and recommendation before a human resolves or rejects it." },
+  { "id": "escalation.list", "namespace": "escalation", "action": "list", "title": "List escalations", "description": "List Steward queue escalations routed to the caller's steward chain (human) or raised by the caller's seat (agent).", "requiredScope": "seat", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "include_decided", "flag": "include-decided", "type": "boolean", "required": false }], "hasComplexInput": false, "help": "List Steward queue escalations (own chain for humans, own seat for agents) before resolving or routing them." },
+  { "id": "escalation.raise", "namespace": "escalation", "action": "raise", "title": "Raise escalation", "description": "Emit an escalation event and open a Steward queue item for the acting seat.", "requiredScope": "seat", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "reason", "flag": "reason", "type": "string", "required": true }, { "name": "charter_clause", "flag": "charter-clause", "type": "string", "required": true }, { "name": "recommended_action", "flag": "recommended-action", "type": "string", "required": false }], "hasComplexInput": true, "help": "Raise an escalation to the seat's Steward when a decision exceeds the seat's authority; humans decide." },
+  { "id": "escalation.reject", "namespace": "escalation", "action": "reject", "title": "Reject escalation", "description": "Override an open escalation so the agent must not proceed. Writes a human decision; agents cannot reject.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": false, "fields": [{ "name": "id", "flag": "id", "type": "string", "required": true }, { "name": "rationale", "flag": "rationale", "type": "string", "required": false }], "hasComplexInput": false, "help": "Reject (override) an escalation so the agent must not proceed; the decision records the human decider. Agents cannot reject." },
+  { "id": "escalation.resolve", "namespace": "escalation", "action": "resolve", "title": "Resolve escalation", "description": "Approve an open escalation (or convert it to Friction). Writes a human decision; agents cannot resolve.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": false, "fields": [{ "name": "id", "flag": "id", "type": "string", "required": true }, { "name": "action", "flag": "action", "type": "enum", "required": false, "enumValues": ["approve", "convert_to_issue"] }, { "name": "rationale", "flag": "rationale", "type": "string", "required": false }], "hasComplexInput": false, "help": "Resolve an escalation as a human Steward; the decision records decided_by as the approving human. Agents cannot resolve." },
+  { "id": "friction.assist", "namespace": "friction", "action": "assist", "title": "Assist Friction issue", "description": "Advisory IDS assist for an issue: the most-similar prior resolved issues with their root causes and decisions, a recurring-pattern flag, and recommended options. Read-only \u2014 it never resolves the issue.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "issue_id", "flag": "issue-id", "type": "string", "required": true }, { "name": "limit", "flag": "limit", "type": "integer", "required": false }], "hasComplexInput": false, "help": "Advisory IDS assist: the most-similar prior resolved issues with their root causes and decisions, plus a recurring-pattern flag. Read-only \u2014 it never resolves the issue." },
+  { "id": "friction.file_issue", "namespace": "friction", "action": "file_issue", "title": "File Friction issue", "description": "Emit an issue event and open a Friction issue raised by the acting seat.", "requiredScope": "seat", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "summary", "flag": "summary", "type": "string", "required": true }, { "name": "blocking_goal_id", "flag": "blocking-goal-id", "type": "string", "required": false }, { "name": "broken_measurable_id", "flag": "broken-measurable-id", "type": "string", "required": false }, { "name": "severity", "flag": "severity", "type": "enum", "required": true, "enumValues": ["low", "med", "high", "critical"] }], "hasComplexInput": true, "help": "File a Friction issue with evidence when a goal or measurable is blocked or broken." },
+  { "id": "friction.link_task", "namespace": "friction", "action": "link_task", "title": "Link task to Friction issue", "description": "Attach an existing tenant task as the action task for a non-terminal issue. Both ids must belong to the tenant.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "issue_id", "flag": "issue-id", "type": "string", "required": true }, { "name": "task_id", "flag": "task-id", "type": "string", "required": true }], "hasComplexInput": false, "help": "Attach an existing task as the action task for a non-terminal issue." },
+  { "id": "friction.list", "namespace": "friction", "action": "list", "title": "List Friction issues", "description": "List Friction issues ranked by status, impact, and severity. Defaults to active (open + diagnosing).", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "status", "flag": "status", "type": "enum", "required": false, "enumValues": ["open", "diagnosing", "resolved", "dropped", "active", "all"] }], "hasComplexInput": false, "help": "List Friction issues ranked by impact and severity to find the issue id before updating or resolving it." },
+  { "id": "friction.resolve", "namespace": "friction", "action": "resolve", "title": "Resolve Friction issue", "description": "Resolve an issue with a root cause and remediation task. This records a human decision (decided_by) and creates the follow-up task in one transaction.", "requiredScope": "tenant_admin", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "issue_id", "flag": "issue-id", "type": "string", "required": true }, { "name": "root_cause", "flag": "root-cause", "type": "string", "required": true }, { "name": "owner_seat_id", "flag": "owner-seat-id", "type": "string", "required": true }, { "name": "task_title", "flag": "task-title", "type": "string", "required": true }, { "name": "task_description", "flag": "task-description", "type": "string", "required": true }, { "name": "done_by", "flag": "done-by", "type": "string", "required": true }, { "name": "resolving_seat_id", "flag": "resolving-seat-id", "type": "string", "required": false }], "hasComplexInput": false, "help": "Resolve an issue with a root cause and remediation task; resolution is a human decision." },
+  { "id": "friction.update_status", "namespace": "friction", "action": "update_status", "title": "Update Friction issue status", "description": "Move a non-terminal issue between open and diagnosing. Terminal issues (resolved/dropped) cannot be reopened here.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "issue_id", "flag": "issue-id", "type": "string", "required": true }, { "name": "status", "flag": "status", "type": "enum", "required": true, "enumValues": ["open", "diagnosing"] }], "hasComplexInput": false, "help": "Move a non-terminal issue between open and diagnosing while it is being worked." },
+  { "id": "goal.create", "namespace": "goal", "action": "create", "title": "Create Cascade goal", "description": "Create a cycle goal under an existing objective. The parent chain must terminate at a Compass objective in the same cycle (enforced server-side).", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "cycle_id", "flag": "cycle-id", "type": "string", "required": true }, { "name": "seat_id", "flag": "seat-id", "type": "string", "required": true }, { "name": "parent_goal_id", "flag": "parent-goal-id", "type": "string", "required": true }, { "name": "title", "flag": "title", "type": "string", "required": true }, { "name": "definition_of_done", "flag": "definition-of-done", "type": "string", "required": true }, { "name": "status", "flag": "status", "type": "enum", "required": false, "enumValues": ["on", "off"] }], "hasComplexInput": false, "help": "Create cycle goals under an existing objective; the parent chain must terminate at a Compass objective." },
+  { "id": "goal.drop", "namespace": "goal", "action": "drop", "title": "Drop Cascade goal", "description": "Drop (retire) a goal by setting status to dropped. Dropping retires the commitment, so it is human-gated. The row is retained for audit (never deleted).", "requiredScope": "tenant_admin", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "goal_id", "flag": "goal-id", "type": "string", "required": true }], "hasComplexInput": false, "help": "Drop a goal to retire a commitment; the goal is retained for audit and dropping is human-gated." },
+  { "id": "goal.list", "namespace": "goal", "action": "list", "title": "List Cascade goals", "description": "List goals in the tenant, optionally filtered by cycle or seat. Seat-scoped callers see only their own seat's goals.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "cycle_id", "flag": "cycle-id", "type": "string", "required": false }, { "name": "seat_id", "flag": "seat-id", "type": "string", "required": false }], "hasComplexInput": false, "help": "List Cascade goals to find goal ids, parentage, and seat ownership before mutating the tree." },
+  { "id": "goal.list_at_risk", "namespace": "goal", "action": "list_at_risk", "title": "List at-risk Cascade goals", "description": "List goals projected to miss their cycle pace (at-risk or projected-miss), with how many days behind pace. Read-only; status-only goals (no progress) are excluded.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [], "hasComplexInput": false, "help": "List goals projected off pace (at-risk or projected-miss), with how many days behind pace. Read-only; status-only goals are excluded." },
+  { "id": "goal.reparent", "namespace": "goal", "action": "reparent", "title": "Reparent Cascade goal", "description": "Move a goal under a different parent. Reparenting changes accountable structure, so it is human-gated. One-root and no-cycle are enforced server-side.", "requiredScope": "tenant_admin", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "goal_id", "flag": "goal-id", "type": "string", "required": true }, { "name": "parent_goal_id", "flag": "parent-goal-id", "type": "string", "required": true }], "hasComplexInput": false, "help": "Reparent a goal only when it clarifies accountable structure; reparenting changes authority and is human-gated." },
+  { "id": "goal.set_progress", "namespace": "goal", "action": "set_progress", "title": "Set Cascade goal progress", "description": "Set a goal's quantified progress (0\u2013100). Seat-scoped callers may set progress only for their own goals. An agent's progress is a proposal a human approves before it lands.", "requiredScope": "seat", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "goal_id", "flag": "goal-id", "type": "string", "required": true }, { "name": "progress_pct", "flag": "progress-pct", "type": "integer", "required": true }], "hasComplexInput": false, "help": "Report a goal's quantified progress (0-100). An agent's progress is a proposal a human approves before the goal moves." },
+  { "id": "goal.set_status", "namespace": "goal", "action": "set_status", "title": "Set Cascade goal status", "description": "Set a goal's status (on/off/done). Seat-scoped callers may set status only for their own goals.", "requiredScope": "seat", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "goal_id", "flag": "goal-id", "type": "string", "required": true }, { "name": "status", "flag": "status", "type": "enum", "required": true, "enumValues": ["on", "off", "done"] }], "hasComplexInput": false, "help": "Set a goal's status; seat tokens may only set status for their own goals." },
+  { "id": "goal.update", "namespace": "goal", "action": "update", "title": "Update Cascade goal", "description": "Update a goal's title or definition of done. Topology (parent/seat) and status have dedicated commands.", "requiredScope": "tenant_admin", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "goal_id", "flag": "goal-id", "type": "string", "required": true }, { "name": "title", "flag": "title", "type": "string", "required": false }, { "name": "definition_of_done", "flag": "definition-of-done", "type": "string", "required": false }], "hasComplexInput": false, "help": "Update a goal's title or definition of done; topology and status have dedicated commands." },
+  { "id": "graph.get", "namespace": "graph", "action": "get", "title": "Get Responsibility Graph", "description": "Return the tenant's Responsibility Graph: seats, edges, root, occupants, and status rollups.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [], "hasComplexInput": false, "help": "Read the Responsibility Graph to discover seat ids, parentage, occupants, and status before mutating or routing work." },
+  { "id": "integration.list", "namespace": "integration", "action": "list", "title": "List integrations", "description": "List tenant integration metadata and health status. Returns account/scopes/capabilities only; never secrets or vault refs.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "provider", "flag": "provider", "type": "string", "required": false }], "hasComplexInput": false, "help": "List connected integrations and their metadata-only health state before enabling a connector-backed tool." },
+  { "id": "integration.readiness", "namespace": "integration", "action": "readiness", "title": "Check integration readiness", "description": "Return a safe connector setup checklist for operators and agents. Starts with Google and exposes no secrets.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "provider", "flag": "provider", "type": "enum", "required": false, "enumValues": ["google"] }], "hasComplexInput": false, "help": "Read the connector setup checklist before relying on Google-backed agent work; the checklist names missing config, connection, scopes, external verification, and handler blockers." },
+  { "id": "integration.status", "namespace": "integration", "action": "status", "title": "Get integration status", "description": "Read one integration's metadata and latest health status. Returns no secret material.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "provider", "flag": "provider", "type": "string", "required": false }, { "name": "integration_id", "flag": "integration-id", "type": "string", "required": false }], "hasComplexInput": false, "help": "Read one integration's metadata-only status by provider or integration id." },
+  { "id": "integration.test", "namespace": "integration", "action": "test", "title": "Test integration connection", "description": "Run the installed provider-specific connection test and update integration health. The command returns bounded metadata only.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "provider", "flag": "provider", "type": "string", "required": false }, { "name": "integration_id", "flag": "integration-id", "type": "string", "required": false }], "hasComplexInput": false, "help": "Run the provider-specific connection test and update integration health without exposing credentials." },
+  { "id": "mcp_token.create", "namespace": "mcp_token", "action": "create", "title": "Create MCP token", "description": "Mint a tenant-admin or seat-scoped MCP token.", "requiredScope": "tenant", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "scope", "flag": "scope", "type": "enum", "required": true, "enumValues": ["tenant_admin", "seat"] }, { "name": "seat_id", "flag": "seat-id", "type": "string", "required": false }, { "name": "expires_at", "flag": "expires-at", "type": "string", "required": false }, { "name": "expires_in_days", "flag": "expires-in-days", "type": "integer", "required": false }], "hasComplexInput": false, "help": "Create MCP tokens with the narrowest scope needed, and tell agents where to retrieve reference docs." },
+  { "id": "mcp_token.list", "namespace": "mcp_token", "action": "list", "title": "List MCP tokens", "description": "List MCP token metadata (id, scope, seat, created/last-used/revoked). Never returns token material.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "include_revoked", "flag": "include-revoked", "type": "boolean", "required": false }, { "name": "seat_id", "flag": "seat-id", "type": "string", "required": false }], "hasComplexInput": false, "help": "List MCP token metadata (never token material) to audit which seats hold active sessions." },
+  { "id": "mcp_token.revoke", "namespace": "mcp_token", "action": "revoke", "title": "Revoke MCP token", "description": "Revoke an MCP token immediately.", "requiredScope": "tenant", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "token_id", "flag": "token-id", "type": "string", "required": true }, { "name": "seat_id", "flag": "seat-id", "type": "string", "required": false }], "hasComplexInput": false, "help": "Revoke MCP access when a local session ends or seat authority changes." },
+  { "id": "measurable.create", "namespace": "measurable", "action": "create", "title": "Add a measurable", "description": "Create a measurable (a Signal a seat owns) with its target, unit, direction, and cadence. The seat owns it; readings attach to the measurable. Source is 'human' \u2014 a human-defined measurable a human logs.", "requiredScope": "seat", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": true }, { "name": "name", "flag": "name", "type": "string", "required": true }, { "name": "unit", "flag": "unit", "type": "string", "required": true }, { "name": "direction", "flag": "direction", "type": "enum", "required": true, "enumValues": ["up_good", "down_good"] }, { "name": "target", "flag": "target", "type": "number", "required": true }, { "name": "cadence", "flag": "cadence", "type": "enum", "required": true, "enumValues": ["daily", "weekly"] }], "hasComplexInput": false, "help": "Add a measurable a seat owns (name, unit, direction, target, cadence) before recording readings against it." },
+  { "id": "member.invite", "namespace": "member", "action": "invite", "title": "Invite member", "description": "Create a pending tenant invite for a human teammate. The acceptance link is delivered out of band, not in the command result.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "email", "flag": "email", "type": "string", "required": true }, { "name": "role", "flag": "role", "type": "enum", "required": true, "enumValues": ["owner", "steward", "member"] }, { "name": "byo_key", "flag": "byo-key", "type": "boolean", "required": false }], "hasComplexInput": false, "help": "Invite humans to the company by seat-aware role; the invite token is never returned over CLI or MCP." },
+  { "id": "member.remove", "namespace": "member", "action": "remove", "title": "Remove member", "description": "Remove a tenant member. Blocked when it would orphan an agent steward chain.", "requiredScope": "tenant", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "member_id", "flag": "member-id", "type": "string", "required": true }], "hasComplexInput": false, "help": "Remove a member; the no-orphan-agent guard blocks removing the only steward in an agent chain." },
+  { "id": "member.update", "namespace": "member", "action": "update", "title": "Update member role", "description": "Change a tenant member's role.", "requiredScope": "tenant", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "member_id", "flag": "member-id", "type": "string", "required": true }, { "name": "role", "flag": "role", "type": "enum", "required": true, "enumValues": ["owner", "steward", "member"] }], "hasComplexInput": false, "help": "Change a member's role; role changes are human-gated." },
+  { "id": "model.catalog", "namespace": "model", "action": "catalog", "title": "List model catalog", "description": "List the guided model tiers the agent builder reads \u2014 recommendation, token prices, cost band, effort, model id, and when to choose or avoid each tier.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [], "hasComplexInput": false, "help": "List guided model tiers with recommendations, token prices, cost bands, best-fit work, and model ids before choosing --model for an agent." },
+  { "id": "notification.list_errors", "namespace": "notification", "action": "list_errors", "title": "List notification errors", "description": "List recent failed notification deliveries for the tenant.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "limit", "flag": "limit", "type": "integer", "required": false }], "hasComplexInput": false, "help": "List recent failed notification deliveries when diagnosing missed escalations or briefs." },
+  { "id": "notification.settings.get", "namespace": "notification", "action": "settings.get", "title": "Get notification settings", "description": "Read tenant notification preferences (escalations, Sync brief, default channel).", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [], "hasComplexInput": false, "help": "Read notification preferences before changing escalation or Sync brief delivery." },
+  { "id": "notification.settings.update", "namespace": "notification", "action": "settings.update", "title": "Update notification settings", "description": "Update tenant notification preferences.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "escalations_enabled", "flag": "escalations-enabled", "type": "boolean", "required": false }, { "name": "sync_brief_enabled", "flag": "sync-brief-enabled", "type": "boolean", "required": false }, { "name": "default_channel", "flag": "default-channel", "type": "enum", "required": false, "enumValues": ["slack", "email", "in_app"] }], "hasComplexInput": false, "help": "Update notification preferences for escalations, Sync briefs, and the default channel." },
+  { "id": "notification.test", "namespace": "notification", "action": "test", "title": "Send test notification", "description": "Emit an in-app test notification to the acting human to verify delivery is wired.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [], "hasComplexInput": false, "help": "Send an in-app test notification to confirm the delivery path is wired." },
+  { "id": "onboarding.advance_step", "namespace": "onboarding", "action": "advance_step", "title": "Advance onboarding step", "description": "Persist the current onboarding step after server-side validation.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "step", "flag": "step", "type": "string", "required": true }, { "name": "completed", "flag": "completed", "type": "boolean", "required": false }], "hasComplexInput": true, "help": "Advance onboarding only after the current setup step is represented in the tenant state." },
+  { "id": "onboarding.attach_reference", "namespace": "onboarding", "action": "attach_reference", "title": "Attach reference document", "description": "Attach a company reference document (text/markdown) so Compass and Charters can cite it. Reference-only \u2014 it does not build a Compass; convert each meaningful doc to markdown and attach it with a title, kind, and source.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "text", "flag": "text", "type": "string", "required": true }, { "name": "filename", "flag": "filename", "type": "string", "required": false }, { "name": "mime_type", "flag": "mime-type", "type": "enum", "required": false, "enumValues": ["text/plain", "text/markdown", "text/csv"] }, { "name": "title", "flag": "title", "type": "string", "required": false }, { "name": "kind", "flag": "kind", "type": "enum", "required": false, "enumValues": ["plan", "financial", "org_chart", "process"] }, { "name": "source", "flag": "source", "type": "string", "required": false }], "hasComplexInput": false, "help": "Convert each meaningful company doc to markdown and attach it as a reference (title, kind, source) so Compass and Charters can cite it; this attaches a reference, it does not build a Compass \u2014 author Compass directly.", "example": { "text": "# Company handbook\n\nWe build precision components for the aerospace supply chain.", "filename": "handbook.md", "mime_type": "text/markdown", "title": "Company handbook", "kind": "plan", "source": "handbook/overview.md" } },
+  { "id": "onboarding.create_invite", "namespace": "onboarding", "action": "create_invite", "title": "Create onboarding invite", "description": "Create a pending invite for an onboarding team member.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "email", "flag": "email", "type": "string", "required": true }, { "name": "role", "flag": "role", "type": "enum", "required": false, "enumValues": ["owner", "steward", "member"] }], "hasComplexInput": true, "help": "Invites should give humans access to the company without assigning work directly to people instead of seats." },
+  { "id": "onboarding.finish", "namespace": "onboarding", "action": "finish", "title": "Finish onboarding", "description": "Mark onboarding complete after the existing onboarding requirements pass.", "requiredScope": "tenant", "confirmation": "human_required", "exposeOverMcp": true, "fields": [], "hasComplexInput": false, "help": "Finish onboarding when the graph, at least one Charter, and the first operating rhythm are clear." },
+  { "id": "onboarding.status", "namespace": "onboarding", "action": "status", "title": "Onboard status", "description": "Return current onboarding progress, graph summary, and the next recommended actions.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [], "hasComplexInput": false, "help": "Start by checking onboarding status, then use the implementation method guide to choose the next setup step." },
+  { "id": "onboarding.upload_context", "namespace": "onboarding", "action": "upload_context", "title": "Upload org context", "description": "Compatibility alias for onboarding.attach_reference: attach a company reference document (text/markdown) that Compass and Charters can cite. Reference-only \u2014 it does not build a Compass.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "text", "flag": "text", "type": "string", "required": true }, { "name": "filename", "flag": "filename", "type": "string", "required": false }, { "name": "mime_type", "flag": "mime-type", "type": "enum", "required": false, "enumValues": ["text/plain", "text/markdown", "text/csv"] }, { "name": "title", "flag": "title", "type": "string", "required": false }, { "name": "kind", "flag": "kind", "type": "enum", "required": false, "enumValues": ["plan", "financial", "org_chart", "process"] }, { "name": "source", "flag": "source", "type": "string", "required": false }], "hasComplexInput": false, "help": "Compatibility alias for onboarding.attach_reference: attach a company reference document so Compass and Charters can cite it. It does not build a Compass.", "example": { "text": "# Company handbook\n\nWe build precision components for the aerospace supply chain.", "filename": "handbook.md", "mime_type": "text/markdown", "title": "Company handbook", "kind": "plan", "source": "handbook/overview.md" } },
+  { "id": "runner.diagnose", "namespace": "runner", "action": "diagnose", "title": "Diagnose runner", "description": "Returns a runner's health, capabilities, and repair guidance without exposing secrets.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "runner_id", "flag": "runner-id", "type": "string", "required": true }], "hasComplexInput": false, "help": "Inspect a runner's health, capabilities, and get repair guidance without exposing secrets." },
+  { "id": "runner.list", "namespace": "runner", "action": "list", "title": "List runners", "description": "List local runners registered to the tenant with online/offline/revoked state.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "include_revoked", "flag": "include-revoked", "type": "boolean", "required": false }], "hasComplexInput": false, "help": "List local runners and their online/offline/revoked state before queueing runner work." },
+  { "id": "runner.pairing.start", "namespace": "runner", "action": "pairing.start", "title": "Start runner pairing", "description": "Open a runner pairing session and return the human pairing code and URL. The runner bearer secret is never returned here.", "requiredScope": "tenant_admin", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "name", "flag": "name", "type": "string", "required": true }, { "name": "platform", "flag": "platform", "type": "string", "required": true }], "hasComplexInput": false, "help": "Open a runner pairing session and share the user code; the runner bearer secret is never surfaced here." },
+  { "id": "runner.repair", "namespace": "runner", "action": "repair", "title": "Runner repair guidance", "description": "Returns actionable repair steps for a runner: restart, re-pair, revoke stale, or install missing CLI runtime. No secrets exposed.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "runner_id", "flag": "runner-id", "type": "string", "required": true }, { "name": "issue", "flag": "issue", "type": "enum", "required": false, "enumValues": ["restart", "re_pair", "revoke_stale", "missing_cli_runtime"] }], "hasComplexInput": false, "help": "Get focused repair steps for a runner: restart, re-pair, revoke a stale runner, or install missing CLI runtime." },
+  { "id": "runner.revoke", "namespace": "runner", "action": "revoke", "title": "Revoke runner", "description": "Revoke a runner so it can no longer authenticate or claim work.", "requiredScope": "tenant", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "runner_id", "flag": "runner-id", "type": "string", "required": true }], "hasComplexInput": false, "help": "Revoke a runner when a machine should no longer authenticate or claim work; this is a human-gated action." },
+  { "id": "runner.status", "namespace": "runner", "action": "status", "title": "Runner status", "description": "Read a single runner's capability and online/offline/revoked state.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "runner_id", "flag": "runner-id", "type": "string", "required": true }], "hasComplexInput": false, "help": "Check a runner's capability and heartbeat state when diagnosing offline work." },
+  { "id": "seat.create", "namespace": "seat", "action": "create", "title": "Create seat", "description": "Create a Responsibility Graph seat.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "name", "flag": "name", "type": "string", "required": true }, { "name": "parent_seat_id", "flag": "parent-seat-id", "type": "string", "required": false }, { "name": "seat_type", "flag": "seat-type", "type": "enum", "required": false, "enumValues": ["human", "agent", "hybrid"] }], "hasComplexInput": false, "help": "Create seats from functions before assigning people or agents." },
+  { "id": "seat.decommission", "namespace": "seat", "action": "decommission", "title": "Decommission seat", "description": "Retire a seat: end occupancies, archive the active charter, revoke seat tokens/credentials, cancel schedules, and emit a tombstone event. Blocks if it would leave another live agent without a human steward chain.", "requiredScope": "seat", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": true }], "hasComplexInput": false, "help": "Retiring a seat ends occupancies, archives the active Charter, revokes seat tokens and credentials, and emits a tombstone event. No-orphan guarded. To retire only the agent and keep the seat, use agent.decommission." },
+  { "id": "seat.decommission_preview", "namespace": "seat", "action": "decommission_preview", "title": "Preview seat decommission", "description": "Show exactly what retiring a seat would end, revoke, archive, or expire without mutating state. The no-orphan steward guard is still checked when the real decommission executes.", "requiredScope": "seat", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": true }], "hasComplexInput": false, "help": "Preview the occupancies, agents, Charter versions, tokens, credentials, work orders, and schedules that seat.decommission would affect without mutating state." },
+  { "id": "seat.get", "namespace": "seat", "action": "get", "title": "Get seat detail", "description": "Return seat profile, steward chain, occupancy, Charter ids, agent status, token metadata, and open-work counts.", "requiredScope": "seat", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": true }], "hasComplexInput": false, "help": "Inspect a seat's Charter ids, steward chain, occupancy, agent status, token metadata, and open-work counts before acting on it." },
+  { "id": "seat.rename", "namespace": "seat", "action": "rename", "title": "Rename seat", "description": "Rename a Responsibility Graph seat.", "requiredScope": "seat", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": true }, { "name": "name", "flag": "name", "type": "string", "required": true }], "hasComplexInput": false, "help": "Seat names should describe the function and accountability clearly." },
+  { "id": "seat.reparent", "namespace": "seat", "action": "reparent", "title": "Reparent seat", "description": "Move a Responsibility Graph seat under a new parent.", "requiredScope": "seat", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": true }, { "name": "new_parent_seat_id", "flag": "new-parent-seat-id", "type": "string", "required": true }], "hasComplexInput": false, "help": "Reparent seats only when it clarifies accountable structure and preserves a clean graph." },
+  { "id": "seat.set_type", "namespace": "seat", "action": "set_type", "title": "Set seat type", "description": "Set a Responsibility Graph seat type.", "requiredScope": "seat", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": true }, { "name": "seat_type", "flag": "seat-type", "type": "enum", "required": true, "enumValues": ["human", "agent", "hybrid"] }], "hasComplexInput": false, "help": "Seat type should follow the work, risk, measurable, and stewardship model." },
+  { "id": "settings.agent_policy.get", "namespace": "settings", "action": "agent_policy.get", "title": "Get company autonomy ceiling", "description": "Read this company's Company Guardrails ceiling (ADR-0007): the profile, enforcement mode, and the most an agent may do autonomously (max_autonomous_risk). Returns metadata only.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [], "hasComplexInput": false, "help": "Read this company's autonomy ceiling (Company Guardrails, ADR-0007): profile, enforcement mode, and the most an agent may do autonomously." },
+  { "id": "settings.agent_policy.update", "namespace": "settings", "action": "agent_policy.update", "title": "Set company autonomy ceiling", "description": "Set the Company Guardrails ceiling (ADR-0007): a named profile (locked_down, balanced, high_autonomy) or custom + max_autonomous_risk. Tenant-admin and human-gated. An explicitly set ceiling is ENFORCED by default; pass enforcement=observe to stage a change without blocking.", "requiredScope": "tenant_admin", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "profile", "flag": "profile", "type": "enum", "required": true, "enumValues": ["locked_down", "balanced", "high_autonomy", "custom"] }, { "name": "max_autonomous_risk", "flag": "max-autonomous-risk", "type": "enum", "required": false, "enumValues": ["low", "medium", "high", "critical"] }, { "name": "enforcement", "flag": "enforcement", "type": "enum", "required": false, "enumValues": ["observe", "enforce"] }], "hasComplexInput": false, "help": "Set the company autonomy ceiling: a profile (locked_down, balanced, high_autonomy) or custom + max_autonomous_risk. Owner-only, human-gated, and enforced by default." },
+  { "id": "settings.get", "namespace": "settings", "action": "get", "title": "Get tenant settings", "description": "Read tenant operating settings: plan, status, spend/budgets, integration status, and notification preferences. Returns metadata only.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [], "hasComplexInput": false, "help": "Read tenant operating settings: plan, spend, budgets, integration status, and notification preferences. No secrets." },
+  { "id": "settings.product_learning.get", "namespace": "settings", "action": "product_learning.get", "title": "Get product-learning policy", "description": "Read whether product/page/recommendation analytics may be recorded for this tenant. Security and audit logs remain enabled in every mode.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [], "hasComplexInput": false, "help": "Read whether product/page/recommendation analytics are allowed for the tenant; security and audit logs always stay enabled." },
+  { "id": "settings.product_learning.update", "namespace": "settings", "action": "product_learning.update", "title": "Update product-learning policy", "description": "Set tenant product-learning participation. Disabled and enterprise-contract modes block generic product analytics writes, but not security/audit logs.", "requiredScope": "tenant_admin", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "mode", "flag": "mode", "type": "enum", "required": true, "enumValues": ["enabled", "disabled", "enterprise_contract"] }], "hasComplexInput": false, "help": "Set tenant product-learning mode to enabled, disabled, or enterprise_contract; the change is human-gated." },
+  { "id": "settings.sync_brief_scope.get", "namespace": "settings", "action": "sync_brief_scope.get", "title": "Get Sync Brief scope", "description": "Read the tenant's Sync Brief scope: company_wide (one weekly brief) or per_cluster (one brief per cluster).", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [], "hasComplexInput": false, "help": "Read whether weekly Sync Briefs compile company-wide (one brief) or per cluster (one brief per cluster)." },
+  { "id": "settings.sync_brief_scope.update", "namespace": "settings", "action": "sync_brief_scope.update", "title": "Update Sync Brief scope", "description": "Set the tenant's Sync Brief scope (company_wide or per_cluster). Per_cluster falls back to company-wide when the tenant has no clusters.", "requiredScope": "tenant_admin", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "sync_brief_scope", "flag": "sync-brief-scope", "type": "enum", "required": true, "enumValues": ["company_wide", "per_cluster"] }], "hasComplexInput": false, "help": "Set Sync Brief scope to company_wide or per_cluster; per_cluster falls back to company-wide when no clusters exist." },
+  { "id": "settings.update", "namespace": "settings", "action": "update", "title": "Update tenant settings", "description": "Update tenant AI budget caps (soft/hard, USD). Budget changes are dangerous and gated.", "requiredScope": "tenant", "confirmation": "dangerous", "exposeOverMcp": true, "fields": [{ "name": "soft_cap_usd", "flag": "soft-cap-usd", "type": "string", "required": false }, { "name": "hard_cap_usd", "flag": "hard-cap-usd", "type": "string", "required": false }], "hasComplexInput": false, "help": "Update tenant AI budget caps; budget changes are dangerous and require human confirmation." },
+  { "id": "signal.confirm_reading", "namespace": "signal", "action": "confirm_reading", "title": "Confirm Signal reading", "description": "Confirm an unconfirmed reading as human-verified. Humans confirm; agents cannot. Idempotent on an already-confirmed reading.", "requiredScope": "seat", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "reading_id", "flag": "reading-id", "type": "string", "required": true }], "hasComplexInput": false, "help": "Confirm an unconfirmed reading as human-verified; confirmation is a human act, not an agent one." },
+  { "id": "signal.correct_reading", "namespace": "signal", "action": "correct_reading", "title": "Correct Signal reading", "description": "Overwrite a reading for a period with a human-confirmed value. A manual correction is a human decision and is gated behind confirmation.", "requiredScope": "seat", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "measurable_id", "flag": "measurable-id", "type": "string", "required": true }, { "name": "period_start", "flag": "period-start", "type": "string", "required": true }, { "name": "value", "flag": "value", "type": "number", "required": true }], "hasComplexInput": false, "help": "Correct a reading only as a human; manual corrections that change confirmed data require confirmation." },
+  { "id": "signal.get", "namespace": "signal", "action": "get", "title": "Get Signal", "description": "Return a measurable definition with its full reading history (confirmed and unconfirmed).", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "measurable_id", "flag": "measurable-id", "type": "string", "required": true }], "hasComplexInput": false, "help": "Read a measurable's full reading history before confirming or correcting a value." },
+  { "id": "signal.import", "namespace": "signal", "action": "import", "title": "Import Signals from CSV", "description": "Bulk-import measurable definitions and their historical readings from a parsed scorecard export (e.g. a ninety CSV). Owners are seat names resolved to seats; readings are human-confirmed. Idempotent \u2014 re-import upserts by (measurable, period, cadence). Re-importing a measurable at a different cadence is rejected, not overwritten.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "dry_run", "flag": "dry-run", "type": "boolean", "required": false }], "hasComplexInput": true, "help": "Bulk-import measurables + historical readings from a parsed scorecard export (owners resolve to seats); idempotent, human-confirmed, re-import upserts by period." },
+  { "id": "signal.list", "namespace": "signal", "action": "list", "title": "List Signals", "description": "List measurable definitions with their latest reading and on/off-track state. Seat-scoped callers see only their own seat.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": false }], "hasComplexInput": false, "help": "List Signals to find measurable ids and current on/off-track state before recording or correcting readings." },
+  { "id": "signup.provision_tenant", "namespace": "signup", "action": "provision_tenant", "title": "Create company", "description": "Provision a new company (tenant) for the authenticated CLI user with no web step.", "requiredScope": "user", "confirmation": "none", "exposeOverMcp": false, "fields": [{ "name": "company_name", "flag": "company-name", "type": "string", "required": true }], "hasComplexInput": false, "help": "Create the company headlessly when the CLI session has no tenant yet; it becomes the user's active tenant so the rest of setup runs with no web step." },
+  { "id": "skill.assign_to_seat", "namespace": "skill", "action": "assign_to_seat", "title": "Assign skill to seat", "description": "Propose or human-approve a published immutable skill version for a Seat after checking required and optional tool dependencies.", "requiredScope": "seat", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": true }, { "name": "slug", "flag": "slug", "type": "string", "required": false }, { "name": "skill_version_id", "flag": "skill-version-id", "type": "string", "required": false }, { "name": "status", "flag": "status", "type": "enum", "required": false, "enumValues": ["proposed", "approved"] }, { "name": "rationale", "flag": "rationale", "type": "string", "required": true }, { "name": "allow_blocked_proposal", "flag": "allow-blocked-proposal", "type": "boolean", "required": false }], "hasComplexInput": false, "help": "Propose or human-approve a published Skill for a Seat after dependency checks. Missing required tools block approval; optional tools are warnings only." },
+  { "id": "skill.assigned.list", "namespace": "skill", "action": "assigned.list", "title": "List assigned skills", "description": "List approved skill assignments for a Seat, including immutable version, dependency status, rationale, and approval time. Seat-scoped callers can only read their own assignments.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": false }], "hasComplexInput": false, "help": "List approved Skills assigned to a Seat before loading instructions into a run. A seat-scoped token can only read its own assigned Skills." },
+  { "id": "skill.catalog", "namespace": "skill", "action": "catalog", "title": "List ROST skill catalog", "description": "List ROST-maintained catalog skills the active tenant is entitled to see. Private source URLs are never returned.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "query", "flag": "query", "type": "string", "required": false }, { "name": "include_unentitled", "flag": "include-unentitled", "type": "boolean", "required": false }], "hasComplexInput": false, "help": "List entitled ROST catalog Skills. Private catalog source locations stay server-side; agents install from ROST APIs, not private GitHub." },
+  { "id": "skill.check_dependencies", "namespace": "skill", "action": "check_dependencies", "title": "Check skill dependencies", "description": "Compare a skill version's required and optional tools against a Seat's active or draft Charter permission manifest. Returns ready, blocked, or warning plus suggested agent.configure_tools input; it does not grant permissions.", "requiredScope": "seat", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "skill_version_id", "flag": "skill-version-id", "type": "string", "required": false }, { "name": "slug", "flag": "slug", "type": "string", "required": false }, { "name": "seat_id", "flag": "seat-id", "type": "string", "required": true }], "hasComplexInput": false, "help": "Compare a Skill's required and optional tools with a Seat's signed Charter manifest. Missing tools must be connected through agent.configure_tools; the Skill never grants authority." },
+  { "id": "skill.create", "namespace": "skill", "action": "create", "title": "Create skill", "description": "Create a tenant skill draft or pending-review skill from a bounded SKILL.md package. Skills store reusable know-how only; they do not grant tools.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "status", "flag": "status", "type": "enum", "required": false, "enumValues": ["draft", "pending_review"] }], "hasComplexInput": true, "help": "Create a draft Skill from a bounded SKILL.md package only when the procedure is reusable operating know-how, not authorization or one-off task context." },
+  { "id": "skill.enable_catalog", "namespace": "skill", "action": "enable_catalog", "title": "Enable ROST catalog skill", "description": "Human-gated enablement of an entitled ROST catalog skill into the tenant-owned Skills library, preserving catalog provenance and content hash.", "requiredScope": "tenant_admin", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "slug", "flag": "slug", "type": "string", "required": true }], "hasComplexInput": false, "help": "Enable an entitled ROST catalog Skill into the company library with human confirmation, preserving catalog provenance and immutable content hash." },
+  { "id": "skill.file.get", "namespace": "skill", "action": "file.get", "title": "Get skill file", "description": "Read stored skill package file content by slug and package path. The path is resolved only inside the stored package payload; it never reads the server filesystem.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "slug", "flag": "slug", "type": "string", "required": true }, { "name": "path", "flag": "path", "type": "string", "required": true }], "hasComplexInput": false, "help": "Read a stored Skill package file by package path only; use SKILL.md for full instructions and supporting files only when the descriptor says they are needed." },
+  { "id": "skill.get", "namespace": "skill", "action": "get", "title": "Get skill", "description": "Read one skill descriptor and latest stored version metadata. Seat-scoped callers can read only approved assigned published skills.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "slug", "flag": "slug", "type": "string", "required": true }], "hasComplexInput": false, "help": "Read a Skill descriptor and latest version metadata before deciding whether to reuse it, inspect its files, or create a new Skill." },
+  { "id": "skill.import_github", "namespace": "skill", "action": "import_github", "title": "Import GitHub skill", "description": "Import a public GitHub skill package into pending review or draft after bounded package validation.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "url", "flag": "url", "type": "string", "required": true }, { "name": "ref", "flag": "ref", "type": "string", "required": false }, { "name": "path", "flag": "path", "type": "string", "required": false }, { "name": "status", "flag": "status", "type": "enum", "required": false, "enumValues": ["draft", "pending_review"] }], "hasComplexInput": false, "help": "Import a public GitHub Skill package into draft or pending review after validation; imported Skills are untrusted until reviewed and published." },
+  { "id": "skill.import_upload", "namespace": "skill", "action": "import_upload", "title": "Import uploaded skill", "description": "Import a bounded text skill package into the tenant library as a draft or pending-review skill.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "status", "flag": "status", "type": "enum", "required": false, "enumValues": ["draft", "pending_review"] }], "hasComplexInput": true, "help": "Import a bounded text Skill package; never include secrets, private one-off task context, or authority rules that belong in the Charter." },
+  { "id": "skill.install_local", "namespace": "skill", "action": "install_local", "title": "Install skill locally", "description": "Resolve an approved company skill or entitled ROST catalog skill for local CLI installation. The server returns package files; it never exposes private GitHub URLs or tokens.", "requiredScope": "tenant", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "slug", "flag": "slug", "type": "string", "required": true }, { "name": "seat_id", "flag": "seat-id", "type": "string", "required": false }, { "name": "client", "flag": "client", "type": "enum", "required": true, "enumValues": ["claude-code", "codex", "cursor"] }, { "name": "version", "flag": "version", "type": "integer", "required": false }, { "name": "local_only", "flag": "local-only", "type": "boolean", "required": false }], "hasComplexInput": false, "help": "Resolve company or entitled ROST catalog Skill files for local CLI installation. The returned package comes from ROST APIs and never includes private GitHub tokens or URLs." },
+  { "id": "skill.list", "namespace": "skill", "action": "list", "title": "List skills", "description": "List tenant skills with application descriptors, dependency metadata, source status, latest version, and assigned Seat count. Seat-scoped callers see only approved assigned published skills.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "status", "flag": "status", "type": "enum", "required": false, "enumValues": ["draft", "pending_review", "published", "archived"] }, { "name": "visibility", "flag": "visibility", "type": "enum", "required": false, "enumValues": ["private", "seat", "tenant"] }, { "name": "query", "flag": "query", "type": "string", "required": false }, { "name": "include_archived", "flag": "include-archived", "type": "boolean", "required": false }], "hasComplexInput": false, "help": "List reusable Skills before creating or assigning new agent operating knowledge. Seat-scoped callers only see assigned, approved, published Skills." },
+  { "id": "skill.publish", "namespace": "skill", "action": "publish", "title": "Publish skill", "description": "Human-gated publication of a reviewed skill version. Published versions become immutable and can be assigned to Seats.", "requiredScope": "tenant_admin", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "slug", "flag": "slug", "type": "string", "required": false }, { "name": "skill_version_id", "flag": "skill-version-id", "type": "string", "required": false }, { "name": "allow_warnings", "flag": "allow-warnings", "type": "boolean", "required": false }], "hasComplexInput": false, "help": "Publish a reviewed Skill version only with human confirmation. Publishing makes the version immutable and assignable, but it still grants no tools." },
+  { "id": "skill.revoke_from_seat", "namespace": "skill", "action": "revoke_from_seat", "title": "Revoke skill from seat", "description": "Human-gated revocation of a Seat skill assignment. Revocation stops future skill use without deleting historical run activations.", "requiredScope": "seat", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "assignment_id", "flag": "assignment-id", "type": "string", "required": false }, { "name": "seat_id", "flag": "seat-id", "type": "string", "required": false }, { "name": "slug", "flag": "slug", "type": "string", "required": false }, { "name": "skill_version_id", "flag": "skill-version-id", "type": "string", "required": false }, { "name": "rationale", "flag": "rationale", "type": "string", "required": false }], "hasComplexInput": false, "help": "Revoke future use of an assigned Skill with human confirmation while preserving historical run activation records." },
+  { "id": "skill.sync_local", "namespace": "skill", "action": "sync_local", "title": "Sync assigned skills locally", "description": "Resolve all approved published skills assigned to a Seat for local CLI installation. Revoked assignments are reported so the client can mark stale local copies.", "requiredScope": "seat", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": true }, { "name": "client", "flag": "client", "type": "enum", "required": true, "enumValues": ["claude-code", "codex", "cursor"] }], "hasComplexInput": false, "help": "Resolve all approved Skills assigned to a local agent Seat so the CLI can install or update unchanged-by-hash local copies." },
+  { "id": "skill.update_draft", "namespace": "skill", "action": "update_draft", "title": "Update skill draft", "description": "Replace or create the current unpublished draft version for an existing skill from a bounded SKILL.md package.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "slug", "flag": "slug", "type": "string", "required": true }, { "name": "status", "flag": "status", "type": "enum", "required": false, "enumValues": ["draft", "pending_review"] }], "hasComplexInput": true, "help": "Update the current unpublished Skill draft; published versions stay immutable, so durable corrections should become reviewed new versions." },
+  { "id": "staffing.assign", "namespace": "staffing", "action": "assign", "title": "Staff seat", "description": "Compatibility command for the DER-626 MCP staffing tool.", "requiredScope": "seat", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": true }], "hasComplexInput": true, "help": "Staff a seat only after the function, Charter, and human accountability are clear." },
+  { "id": "staffing.assign_agent_dry_run", "namespace": "staffing", "action": "assign_agent_dry_run", "title": "Assign dry-run agent to seat", "description": "Assign an agent occupancy while the agent remains in dry-run.", "requiredScope": "seat", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": true }, { "name": "agent_id", "flag": "agent-id", "type": "string", "required": true }], "hasComplexInput": false, "help": "Start agent staffing with dry runs and a named human Steward." },
+  { "id": "staffing.assign_user", "namespace": "staffing", "action": "assign_user", "title": "Assign user to seat", "description": "Assign a human user occupancy to a seat.", "requiredScope": "seat", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": true }, { "name": "user_id", "flag": "user-id", "type": "string", "required": true }], "hasComplexInput": false, "help": "Assign humans to seats after the seat accountability is clear." },
+  { "id": "status.record", "namespace": "status", "action": "record", "title": "Record status", "description": "Record a status event and readings/goal status for the acting seat's Signals and goals.", "requiredScope": "seat", "confirmation": "none", "exposeOverMcp": true, "fields": [], "hasComplexInput": true, "help": "Record Signal readings and goal status only for measurables and goals the seat owns; agent readings stay unconfirmed." },
+  { "id": "sync.brief.compile", "namespace": "sync", "action": "brief.compile", "title": "Compile Sync Brief", "description": "Compile (or recompile) the weekly Sync Brief for the current period. Idempotent per (tenant, period, cluster): a second compile updates the existing brief.", "requiredScope": "tenant_admin", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "cluster_id", "flag": "cluster-id", "type": "string", "required": false }], "hasComplexInput": false, "help": "Compile the weekly Sync Brief; compiling is idempotent per period." },
+  { "id": "sync.brief.get", "namespace": "sync", "action": "brief.get", "title": "Get Sync Brief", "description": "Return a Sync Brief (a specific id, or the latest for the tenant) including its compiled agenda document.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "sync_brief_id", "flag": "sync-brief-id", "type": "string", "required": false }], "hasComplexInput": false, "help": "Read the latest or a specific Sync Brief and its agenda before running the meeting." },
+  { "id": "sync.item.assign", "namespace": "sync", "action": "item.assign", "title": "Assign Sync follow-up", "description": "Create a follow-up task (a seat commitment) from a Sync agenda item. The brief and owner seat must belong to the tenant.", "requiredScope": "tenant_admin", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "sync_brief_id", "flag": "sync-brief-id", "type": "string", "required": true }, { "name": "owner_seat_id", "flag": "owner-seat-id", "type": "string", "required": true }, { "name": "title", "flag": "title", "type": "string", "required": true }, { "name": "description", "flag": "description", "type": "string", "required": true }, { "name": "due_on", "flag": "due-on", "type": "string", "required": false }], "hasComplexInput": false, "help": "Create a follow-up task from a Sync agenda item so a seat owns the commitment." },
+  { "id": "sync.run.complete", "namespace": "sync", "action": "run.complete", "title": "Complete Sync run", "description": "Record that the weekly Sync meeting completed against a brief, capturing the decisions and tasks created since it compiled. Idempotent: a second completion does not write a duplicate event.", "requiredScope": "tenant_admin", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "sync_brief_id", "flag": "sync-brief-id", "type": "string", "required": true }], "hasComplexInput": false, "help": "Record that the Sync meeting completed; completion is idempotent per brief." },
+  { "id": "sync.run.start", "namespace": "sync", "action": "run.start", "title": "Start Sync run", "description": "Ensure a Sync Brief exists for the current period so the meeting can begin. Compiles the brief if needed (idempotent).", "requiredScope": "tenant_admin", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "cluster_id", "flag": "cluster-id", "type": "string", "required": false }], "hasComplexInput": false, "help": "Ensure a Sync Brief exists for the current period so the weekly meeting can begin." },
+  { "id": "system.health", "namespace": "system", "action": "health", "title": "System health", "description": "Return a scoped health snapshot for agent runs, errors, Signals, Cascade setup, work loop, integrations, runners, notifications, and Sync Brief readiness.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": false }], "hasComplexInput": false, "help": "Read a scoped system health snapshot across agent runs, errors, Signals, Cascade setup, work loop, integrations, runners, notifications, and Sync Brief readiness." },
+  { "id": "task.accept", "namespace": "task", "action": "accept", "title": "Accept task", "description": "Accept an offered handoff task owned by the acting seat.", "requiredScope": "seat", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "id", "flag": "id", "type": "string", "required": true }], "hasComplexInput": false, "help": "Accept an offered task only when the seat can deliver it within its Charter." },
+  { "id": "task.complete", "namespace": "task", "action": "complete", "title": "Complete task", "description": "Complete an accepted handoff task and emit a handoff event back to the requesting seat.", "requiredScope": "seat", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "id", "flag": "id", "type": "string", "required": true }, { "name": "summary", "flag": "summary", "type": "string", "required": true }], "hasComplexInput": true, "help": "Complete an accepted task with a summary so the requesting seat receives the handoff." },
+  { "id": "task.create", "namespace": "task", "action": "create", "title": "Create task", "description": "Create a task (a commitment between seats). Agent-created tasks land in draft for human confirmation; human-created tasks are offered (handoff) or in progress.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "owner_seat_id", "flag": "owner-seat-id", "type": "string", "required": true }, { "name": "from_seat_id", "flag": "from-seat-id", "type": "string", "required": false }, { "name": "title", "flag": "title", "type": "string", "required": true }, { "name": "description", "flag": "description", "type": "string", "required": true }, { "name": "goal_id", "flag": "goal-id", "type": "string", "required": false }, { "name": "acceptance_criteria", "flag": "acceptance-criteria", "type": "array", "required": false, "itemType": "string" }, { "name": "due_on", "flag": "due-on", "type": "string", "required": false }], "hasComplexInput": false, "help": "Create a task as a commitment between seats; agent proposals land in draft for human confirmation.", "example": { "owner_seat_id": "0190dddd-dddd-7ddd-8ddd-dddddddddddd", "from_seat_id": "0190eeee-eeee-7eee-8eee-eeeeeeeeeeee", "title": "Reconcile the March vendor statements", "description": "Match every March vendor statement line to a recorded invoice and flag discrepancies.", "goal_id": "0190ffff-ffff-7fff-8fff-ffffffffffff", "acceptance_criteria": ["All March statements reconciled", "Discrepancies filed as Friction issues"], "due_on": "2026-04-15" } },
+  { "id": "task.decline", "namespace": "task", "action": "decline", "title": "Decline task", "description": "Decline an offered handoff task owned by the acting seat with a reason.", "requiredScope": "seat", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "id", "flag": "id", "type": "string", "required": true }, { "name": "reason", "flag": "reason", "type": "string", "required": true }], "hasComplexInput": false, "help": "Decline an offered task with a clear reason when it is out of scope for the seat." },
+  { "id": "task.list", "namespace": "task", "action": "list", "title": "List seat tasks", "description": "List open handoff tasks owned by the acting seat.", "requiredScope": "seat", "confirmation": "none", "exposeOverMcp": true, "fields": [], "hasComplexInput": false, "help": "List the seat's open handoff tasks before accepting, declining, or completing work." },
+  { "id": "task.update", "namespace": "task", "action": "update", "title": "Update task", "description": "Reschedule (due date), reassign (owner seat), or edit a non-terminal task's title, description, or acceptance criteria. Terminal tasks cannot be edited \u2014 a correction is a new task.", "requiredScope": "tenant_admin", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "task_id", "flag": "task-id", "type": "string", "required": true }, { "name": "owner_seat_id", "flag": "owner-seat-id", "type": "string", "required": false }, { "name": "due_on", "flag": "due-on", "type": "string", "required": false }, { "name": "title", "flag": "title", "type": "string", "required": false }, { "name": "description", "flag": "description", "type": "string", "required": false }, { "name": "acceptance_criteria", "flag": "acceptance-criteria", "type": "array", "required": false, "itemType": "string" }], "hasComplexInput": false, "help": "Reschedule, reassign, or edit a non-terminal task; terminal tasks are immutable (a correction is a new task)." },
+  { "id": "team.health_score", "namespace": "team", "action": "health_score", "title": "Team health score", "description": "Return the single rolled-up 0\u2013100 team-health score (latest month) with its band (green/yellow/red) and label. Honest insufficient-data state when no metrics exist yet.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [], "hasComplexInput": false, "help": "Read the single rolled-up 0-100 team-health score (latest month) with its band and label." },
+  { "id": "tenant.anthropic_key.save", "namespace": "tenant", "action": "anthropic_key.save", "title": "Save tenant Anthropic key", "description": "Store a tenant-scoped Anthropic key in the configured vault.", "requiredScope": "tenant", "confirmation": "credential_flow", "exposeOverMcp": true, "fields": [], "hasComplexInput": false, "secretBlocked": true, "help": "Save model-provider credentials only through vault-backed flows and keep raw keys out of prompts, logs, and command metadata." },
+  { "id": "tenant.create", "namespace": "tenant", "action": "create", "title": "Create additional company", "description": "Create a new clean company for an already-provisioned account after checking tenant.create.additional entitlement.", "requiredScope": "tenant_admin", "confirmation": "none", "exposeOverMcp": false, "fields": [{ "name": "company_name", "flag": "company-name", "type": "string", "required": true }], "hasComplexInput": false, "help": "Create an additional clean company from an existing company session. Requires tenant.create.additional entitlement; first-company bootstrap stays signup.provision_tenant." },
+  { "id": "tenant.rename", "namespace": "tenant", "action": "rename", "title": "Rename company", "description": "Rename the current tenant/company. The rename is human-gated and writes an audit event.", "requiredScope": "tenant_admin", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "company_name", "flag": "company-name", "type": "string", "required": true }], "hasComplexInput": false, "help": "Rename the current company; owner-only, human-gated, and audited as an event." },
+  { "id": "tool.catalog", "namespace": "tool", "action": "catalog", "title": "List tool catalog", "description": "List the discoverable tool catalog the agent builder reads \u2014 tool id, title, provider, prescriptive description, default scope tiers, credential requirement, access policy, and execution-boundary guidance.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "provider", "flag": "provider", "type": "string", "required": false }], "hasComplexInput": false, "help": "List the tool catalog the builder reads \u2014 id, prescriptive description, scope tiers, credential requirement, access policy, and execution-boundary guidance." },
+  { "id": "usage.report", "namespace": "usage", "action": "report", "title": "AI-workforce ROI report", "description": "Return the tenant's immutable per-period usage snapshots \u2014 agents ran, outputs, token/run cost, human-accepted value, exceptions, and approvals \u2014 for the AI-workforce ROI report.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "limit", "flag": "limit", "type": "integer", "required": false }], "hasComplexInput": false, "help": "Read the AI-workforce ROI report \u2014 per-period agents/outputs/token+run cost, human-accepted value, exceptions, and approvals \u2014 from immutable usage snapshots." },
+  { "id": "usage.snapshot", "namespace": "usage", "action": "snapshot", "title": "Capture usage period snapshot", "description": "Freeze the current (or a given) period's usage and accepted-value totals into an immutable snapshot for the ROI report. Insert-only and idempotent \u2014 re-running a captured period changes nothing.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [], "hasComplexInput": true, "help": "Freeze the current period's usage and accepted-value totals into an immutable snapshot for the ROI report; insert-only and idempotent, so re-running a captured period changes nothing." },
+  { "id": "user.tenants", "namespace": "user", "action": "tenants", "title": "List tenants", "description": "List tenants accessible to the authenticated CLI user.", "requiredScope": "user", "confirmation": "none", "exposeOverMcp": false, "fields": [], "hasComplexInput": false, "help": "List available companies before choosing the tenant where setup work should happen." },
+  { "id": "user.use_tenant", "namespace": "user", "action": "use_tenant", "title": "Select tenant", "description": "Validate and return an active tenant selection for the authenticated CLI user.", "requiredScope": "user", "confirmation": "none", "exposeOverMcp": false, "fields": [{ "name": "tenant", "flag": "tenant", "type": "string", "required": true }], "hasComplexInput": false, "help": "Set the active tenant explicitly before running onboarding, graph, Charter, or staffing commands." },
+  { "id": "user.whoami", "namespace": "user", "action": "whoami", "title": "Who am I", "description": "Return the authenticated CLI user and accessible tenant roles.", "requiredScope": "user", "confirmation": "none", "exposeOverMcp": false, "fields": [], "hasComplexInput": false, "help": "Use session identity checks before making tenant-scoped recommendations or setup changes." },
+  { "id": "work_order.cancel", "namespace": "work_order", "action": "cancel", "title": "Cancel work order", "description": "Cancel a queued, claimed, or running work order. Already-terminal orders return a stable error.", "requiredScope": "tenant", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "work_order_id", "flag": "work-order-id", "type": "string", "required": true }], "hasComplexInput": false, "help": "Cancel a queued, claimed, or running work order; this is a human-gated action." },
+  { "id": "work_order.enqueue", "namespace": "work_order", "action": "enqueue", "title": "Enqueue work order", "description": "Queue a work order for a live scheduled agent. Idempotent per (agent, scheduled time).", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "agent_id", "flag": "agent-id", "type": "string", "required": true }, { "name": "scheduled_for", "flag": "scheduled-for", "type": "string", "required": false }, { "name": "task_id", "flag": "task-id", "type": "string", "required": false }], "hasComplexInput": false, "help": "Queue a work order for a live scheduled agent; enqueue is idempotent per agent and scheduled time." },
+  { "id": "work_order.list", "namespace": "work_order", "action": "list", "title": "List work orders", "description": "List runner/cloud work orders for the tenant, optionally filtered by status, agent, or runner.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "status", "flag": "status", "type": "enum", "required": false, "enumValues": ["queued", "claimed", "running", "done", "failed", "expired"] }, { "name": "agent_id", "flag": "agent-id", "type": "string", "required": false }, { "name": "runner_id", "flag": "runner-id", "type": "string", "required": false }, { "name": "limit", "flag": "limit", "type": "integer", "required": false }], "hasComplexInput": false, "help": "Inspect queued, claimed, running, and expired work orders to understand runner activity." },
+  { "id": "work.log", "namespace": "work", "action": "log", "title": "Log work", "description": "Write a lightweight activity breadcrumb event for the acting seat.", "requiredScope": "seat", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "note", "flag": "note", "type": "string", "required": true }], "hasComplexInput": false, "help": "Log a lightweight work breadcrumb so the seat's activity is visible without durable side effects." }
+];
+
+// src/generator/groups.ts
 import { readFileSync as readFileSync2 } from "node:fs";
+
+// src/generator/runtime.ts
 var UsageError = class extends Error {
 };
+var SECRET_ARGV_GUIDANCE = "This command stores a secret and cannot accept it from the command line. Provide the secret through the vault-backed flow \u2014 web Settings or the integration connect flow \u2014 never as a CLI argument (a flag, --input, or --json body would expose it in shell history and process arguments).";
 function parseFlags(args, booleanFlags = /* @__PURE__ */ new Set()) {
   const values = /* @__PURE__ */ new Map();
   const flags = /* @__PURE__ */ new Set();
@@ -45885,17 +46081,6 @@ function optionalValue(parsed, key) {
   const value = parsed.values.get(key);
   return value === void 0 || value.length === 0 ? void 0 : value;
 }
-function optionalNumber(parsed, key) {
-  const raw = optionalValue(parsed, key);
-  if (raw === void 0) {
-    return void 0;
-  }
-  const parsedNumber = Number(raw);
-  if (!Number.isSafeInteger(parsedNumber)) {
-    throw new UsageError(`--${key} must be an integer.`);
-  }
-  return parsedNumber;
-}
 function parseNumber(parsed, key, options) {
   const raw = parsed.values.get(key);
   if (raw === void 0 || raw.length === 0) {
@@ -45939,6 +46124,53 @@ function field(record2, key) {
   }
   return String(value);
 }
+function usageWithSchemaFooter(usage2, bin) {
+  return `${usage2}
+discover a command's exact input with: ${bin} command schema <id>`;
+}
+async function dispatch(context, group, args, actions, usage2) {
+  const usageText = usageWithSchemaFooter(usage2, context.binName);
+  const action = args[0];
+  if (action === "--help" || action === "-h" || action === "help") {
+    context.io.stdout.write(`${usageText}
+`);
+    return 0;
+  }
+  const handler = action === void 0 ? void 0 : actions[action];
+  if (!handler) {
+    context.io.stderr.write(`${usageText}
+`);
+    return 1;
+  }
+  try {
+    return await handler(context, args.slice(1));
+  } catch (error51) {
+    if (error51 instanceof UsageError) {
+      context.io.stderr.write(`${error51.message}
+${usageText}
+`);
+      return 1;
+    }
+    throw error51;
+  }
+}
+function execute(context, parsed, commandId, body, format) {
+  const autoConfirm = parsed.flags.has("yes") || parsed.flags.has("y");
+  const options = {
+    ...parsed.seat === void 0 ? {} : { targetSeatId: parsed.seat },
+    ...autoConfirm ? { autoConfirm: true } : {}
+  };
+  if (parsed.json) {
+    return context.run(context.client, commandId, body, void 0, options);
+  }
+  return context.run(context.client, commandId, body, format, options);
+}
+
+// src/generator/render.ts
+function markdownLine(output) {
+  const markdown = asRecord(output).markdown;
+  return typeof markdown === "string" ? markdown : JSON.stringify(output, null, 2);
+}
 function dryRunToolActionLabel(status) {
   switch (status) {
     case "intended":
@@ -45969,10 +46201,62 @@ function formatDryRunTranscript(value) {
   });
   return ["rehearsal:", ...lines, ...toolPreview.length > 0 ? ["tool preview:", ...toolPreview] : []].join("\n");
 }
-function markdownLine(output) {
-  const markdown = asRecord(output).markdown;
-  return typeof markdown === "string" ? markdown : JSON.stringify(output, null, 2);
+function isScalar(value) {
+  return value === null || ["string", "number", "boolean"].includes(typeof value);
+}
+function orderedEntries(record2) {
+  const entries = Object.entries(record2);
+  const idLike = (key) => key === "id" || key.endsWith("_id");
+  return [...entries.filter(([key]) => idLike(key)), ...entries.filter(([key]) => !idLike(key))];
+}
+function renderRow(record2) {
+  const parts = orderedEntries(record2).filter(([, value]) => isScalar(value)).map(([key, value]) => `${key}=${value === null ? "\u2014" : String(value)}`);
+  return parts.join("  ");
+}
+function humanize(name) {
+  return name.replace(/_/g, " ");
+}
+function renderCommandOutput(output) {
+  if (Array.isArray(output)) {
+    if (output.length === 0) {
+      return "No results.";
+    }
+    return output.map((entry) => isScalar(entry) ? String(entry) : renderRow(asRecord(entry))).join("\n");
+  }
+  const record2 = asRecord(output);
+  if (typeof record2.markdown === "string") {
+    return record2.markdown;
+  }
+  const arrayEntries = Object.entries(record2).filter(([, value]) => Array.isArray(value));
+  const scalarEntries = Object.entries(record2).filter(([, value]) => isScalar(value));
+  if (arrayEntries.length === 1 && scalarEntries.length === 0) {
+    const [name, list] = arrayEntries[0];
+    if (list.length === 0) {
+      return `No ${humanize(name)}.`;
+    }
+    return list.map((entry) => isScalar(entry) ? String(entry) : renderRow(asRecord(entry))).join("\n");
+  }
+  const lines = [];
+  for (const [key, value] of orderedEntries(record2)) {
+    if (isScalar(value)) {
+      lines.push(`${key}=${value === null ? "\u2014" : String(value)}`);
+    } else if (Array.isArray(value)) {
+      lines.push(`${key}:`);
+      if (value.length === 0) {
+        lines.push(`  (none)`);
+      } else {
+        for (const entry of value) {
+          lines.push(`  ${isScalar(entry) ? String(entry) : renderRow(asRecord(entry))}`);
+        }
+      }
+    } else {
+      lines.push(`${key}: ${renderRow(asRecord(value))}`);
+    }
+  }
+  return lines.length > 0 ? lines.join("\n") : JSON.stringify(output, null, 2);
 }
+
+// src/generator/groups.ts
 var CLI_MODEL_TIER_MAP = {
   triage: { model: "claude-haiku-4-5", effort: "low" },
   balanced: { model: "claude-sonnet-4-6", effort: "medium" },
@@ -45992,58 +46276,36 @@ function resolveModelConfig(model, effort) {
     ...resolvedEffort ? { effort: resolvedEffort } : {}
   };
 }
-function usageWithSchemaFooter(usage2, bin) {
-  return `${usage2}
-discover a command's exact input with: ${bin} command schema <id>`;
-}
-async function dispatch(context, group, args, actions, usage2) {
-  const usageText = usageWithSchemaFooter(usage2, context.binName);
-  const action = args[0];
-  if (action === "--help" || action === "-h" || action === "help") {
-    context.io.stdout.write(`${usageText}
-`);
-    return 0;
-  }
-  const handler = action === void 0 ? void 0 : actions[action];
-  if (!handler) {
-    context.io.stderr.write(`${usageText}
-`);
-    return 1;
-  }
-  try {
-    return await handler(context, args.slice(1));
-  } catch (error51) {
-    if (error51 instanceof UsageError) {
-      context.io.stderr.write(`${error51.message}
-${usageText}
-`);
-      return 1;
-    }
-    throw error51;
+function renderTaskList(output) {
+  const tasks = asArray(asRecord(output).tasks);
+  if (tasks.length === 0) {
+    return "No tasks in this seat's queue.";
   }
+  return tasks.map((task) => {
+    const record2 = asRecord(task);
+    return `${field(record2, "id")}  ${field(record2, "status")}  ${field(record2, "title")}`;
+  }).join("\n");
 }
-function execute(context, parsed, commandId, body, format) {
-  const autoConfirm = parsed.flags.has("yes") || parsed.flags.has("y");
-  const options = {
-    ...parsed.seat === void 0 ? {} : { targetSeatId: parsed.seat },
-    ...autoConfirm ? { autoConfirm: true } : {}
-  };
-  if (parsed.json) {
-    return context.run(context.client, commandId, body, void 0, options);
-  }
-  return context.run(context.client, commandId, body, format, options);
+function renderTaskAccept(output) {
+  const task = asRecord(asRecord(output).task);
+  return `Accepted task ${field(task, "id")} (status ${field(task, "status")}).`;
 }
-var graphWrapper = (context, args) => dispatch(context, "graph", args, {
-  show: (ctx, rest) => {
-    const parsed = parseFlags(rest);
-    return execute(ctx, parsed, "graph.get", {}, formatGraph);
-  },
-  get: (ctx, rest) => {
-    const parsed = parseFlags(rest);
-    return execute(ctx, parsed, "graph.get", {}, formatGraph);
-  }
-}, graphUsage(context.binName));
-function formatGraph(output) {
+function renderTaskDecline(output) {
+  const task = asRecord(asRecord(output).task);
+  return `Declined task ${field(task, "id")} (status ${field(task, "status")}).`;
+}
+function renderTaskComplete(output) {
+  const record2 = asRecord(output);
+  return `Completed task ${field(record2, "task_id")} (event ${field(record2, "event_id")}).`;
+}
+function renderTaskCreate(output) {
+  const record2 = asRecord(output);
+  return `Created task ${field(record2, "task_id")} for seat ${field(record2, "owner_seat_id")} (status ${field(record2, "status")}).`;
+}
+function renderStatusRecord(output) {
+  return `Recorded status event ${field(asRecord(output), "event_id")}.`;
+}
+function renderGraph(output) {
   const record2 = asRecord(output);
   const nodes = asArray(record2.nodes);
   if (nodes.length === 0) {
@@ -46059,57 +46321,7 @@ function formatGraph(output) {
   }
   return lines.join("\n");
 }
-function graphUsage(bin) {
-  return `Usage: ${bin} graph show|get [--json]
-  ${bin} graph show`;
-}
-var seatWrapper = (context, args) => dispatch(context, "seat", args, {
-  list: (ctx, rest) => {
-    const parsed = parseFlags(rest);
-    return execute(ctx, parsed, "graph.get", {}, formatSeatList);
-  },
-  get: (ctx, rest) => {
-    const parsed = parseFlags(rest);
-    const seatId = requireValue2(parsed, "seat-id");
-    return execute(ctx, parsed, "seat.get", { seat_id: seatId }, formatSeatDetail);
-  },
-  create: (ctx, rest) => {
-    const parsed = parseFlags(rest);
-    const body = withOptional({
-      name: requireValue2(parsed, "name"),
-      seat_type: requireValue2(parsed, "type")
-    }, {
-      parent_seat_id: optionalValue(parsed, "parent-seat-id")
-    });
-    return execute(ctx, parsed, "seat.create", body, formatSeatMutation);
-  },
-  rename: (ctx, rest) => {
-    const parsed = parseFlags(rest);
-    return execute(ctx, parsed, "seat.rename", {
-      seat_id: requireValue2(parsed, "seat-id"),
-      name: requireValue2(parsed, "name")
-    }, formatSeatMutation);
-  },
-  reparent: (ctx, rest) => {
-    const parsed = parseFlags(rest);
-    return execute(ctx, parsed, "seat.reparent", {
-      seat_id: requireValue2(parsed, "seat-id"),
-      new_parent_seat_id: requireValue2(parsed, "parent-seat-id")
-    }, formatSeatMutation);
-  },
-  decommission: (ctx, rest) => {
-    const parsed = parseFlags(rest, /* @__PURE__ */ new Set(["dry-run", "preview"]));
-    if (parsed.flags.has("dry-run") || parsed.flags.has("preview")) {
-      return execute(ctx, parsed, "seat.decommission_preview", {
-        seat_id: requireValue2(parsed, "seat-id")
-      }, formatSeatDecommissionPreview);
-    }
-    return execute(ctx, parsed, "seat.decommission", {
-      seat_id: requireValue2(parsed, "seat-id")
-    }, formatSeatMutation);
-  }
-}, seatUsage(context.binName));
-function formatSeatList(output) {
+function renderSeatList(output) {
   const nodes = asArray(asRecord(output).nodes);
   if (nodes.length === 0) {
     return "No seats.";
@@ -46119,7 +46331,7 @@ function formatSeatList(output) {
     return `seat_id=${field(row, "seat_id")} parent_seat_id=${field(row, "parent_seat_id")} type=${field(row, "seat_type")} status=${field(row, "status")} name=${field(row, "name")}`;
   }).join("\n");
 }
-function formatSeatDetail(output) {
+function renderSeatDetail(output) {
   const record2 = asRecord(output);
   const counts = asRecord(record2.counts);
   return [
@@ -46129,11 +46341,10 @@ function formatSeatDetail(output) {
     `counts: open_tasks=${field(counts, "open_tasks")} owned_goals=${field(counts, "owned_goals")} active_measurables=${field(counts, "active_measurables")} open_issues=${field(counts, "open_issues")}`
   ].join("\n");
 }
-function formatSeatMutation(output) {
-  const record2 = asRecord(output);
-  return `seat_id=${field(record2, "seat_id")}`;
+function renderSeatMutation(output) {
+  return `seat_id=${field(asRecord(output), "seat_id")}`;
 }
-function formatSeatDecommissionPreview(output) {
+function renderSeatDecommissionPreview(output) {
   const record2 = asRecord(output);
   const effects = asArray(record2.effects).map((effect) => `- ${String(effect)}`);
   return [
@@ -46145,629 +46356,224 @@ function formatSeatDecommissionPreview(output) {
     ...effects
   ].join("\n");
 }
-function seatUsage(bin) {
-  return `Usage: ${bin} seat list|get|create|rename|reparent|decommission [--json] [--yes]
-  ${bin} seat list
-  ${bin} seat get --seat-id <id>
-  ${bin} seat create --name <text> --type human|agent|hybrid [--parent-seat-id <id>]
-  ${bin} seat rename --seat-id <id> --name <text>
-  ${bin} seat reparent --seat-id <id> --parent-seat-id <id> [--yes]
-  ${bin} seat decommission --seat-id <id> [--dry-run] [--yes]`;
-}
-var taskWrapper = (context, args) => dispatch(context, "task", args, {
-  list: (ctx, rest) => {
-    const parsed = parseFlags(rest);
-    return execute(ctx, parsed, "task.list", {}, (output) => {
-      const tasks = asArray(asRecord(output).tasks);
-      if (tasks.length === 0) {
-        return "No tasks in this seat's queue.";
-      }
-      return tasks.map((task) => {
-        const record2 = asRecord(task);
-        return `${field(record2, "id")}  ${field(record2, "status")}  ${field(record2, "title")}`;
-      }).join("\n");
-    });
-  },
-  accept: (ctx, rest) => {
-    const parsed = parseFlags(rest);
-    const id = requireValue2(parsed, "id");
-    return execute(ctx, parsed, "task.accept", { id }, (output) => {
-      const task = asRecord(asRecord(output).task);
-      return `Accepted task ${field(task, "id")} (status ${field(task, "status")}).`;
-    });
-  },
-  decline: (ctx, rest) => {
-    const parsed = parseFlags(rest);
-    const id = requireValue2(parsed, "id");
-    const reason = requireValue2(parsed, "reason");
-    return execute(ctx, parsed, "task.decline", { id, reason }, (output) => {
-      const task = asRecord(asRecord(output).task);
-      return `Declined task ${field(task, "id")} (status ${field(task, "status")}).`;
-    });
-  },
-  complete: (ctx, rest) => {
-    const parsed = parseFlags(rest);
-    const id = requireValue2(parsed, "id");
-    const summary = requireValue2(parsed, "summary");
-    const body = withOptional({ id, summary }, {
-      artifacts: parseList(parsed, "artifacts")
-    });
-    return execute(ctx, parsed, "task.complete", body, (output) => {
-      const record2 = asRecord(output);
-      return `Completed task ${field(record2, "task_id")} (event ${field(record2, "event_id")}).`;
-    });
-  },
-  create: (ctx, rest) => {
-    const parsed = parseFlags(rest);
-    const body = withOptional({
-      owner_seat_id: requireValue2(parsed, "owner-seat-id"),
-      title: requireValue2(parsed, "title"),
-      description: requireValue2(parsed, "description")
-    }, {
-      from_seat_id: optionalValue(parsed, "from-seat-id"),
-      goal_id: optionalValue(parsed, "goal-id"),
-      due_on: optionalValue(parsed, "due-on"),
-      acceptance_criteria: parseList(parsed, "acceptance-criteria")
-    });
-    return execute(ctx, parsed, "task.create", body, (output) => {
-      const record2 = asRecord(output);
-      return `Created task ${field(record2, "task_id")} for seat ${field(record2, "owner_seat_id")} (status ${field(record2, "status")}).`;
-    });
-  }
-}, taskUsage(context.binName));
-function taskUsage(bin) {
-  return `Usage: ${bin} task list|accept|decline|complete|create [--seat <id>] [--json]
-  ${bin} task list [--seat <id>]
-  ${bin} task accept --id <task-id> [--seat <id>]
-  ${bin} task decline --id <task-id> --reason <text> [--seat <id>]
-  ${bin} task complete --id <task-id> --summary <text> [--artifacts a,b] [--seat <id>]
-  ${bin} task create --owner-seat-id <id> --title <t> --description <d> [--from-seat-id <id>] [--goal-id <id>] [--due-on YYYY-MM-DD] [--acceptance-criteria a,b]`;
-}
-var statusWrapper = (context, args) => dispatch(context, "status", args, {
-  record: (ctx, rest) => {
-    const parsed = parseFlags(rest);
-    const measurableId = optionalValue(parsed, "measurable-id");
-    const goalId = optionalValue(parsed, "goal-id");
-    const body = {};
-    if (measurableId !== void 0) {
-      const value = parseNumber(parsed, "value", { required: true });
-      body.measurables = [{ id: measurableId, value }];
-    }
-    if (goalId !== void 0) {
-      const state = requireValue2(parsed, "goal-state");
-      if (state !== "on" && state !== "off") {
-        throw new UsageError("--goal-state must be on or off.");
-      }
-      const note = optionalValue(parsed, "goal-note");
-      body.goals = [withOptional({ id: goalId, state }, { note })];
-    }
-    if (measurableId === void 0 && goalId === void 0) {
-      throw new UsageError("Provide --measurable-id (with --value) and/or --goal-id (with --goal-state).");
-    }
-    return execute(ctx, parsed, "status.record", body, (output) => {
-      const record2 = asRecord(output);
-      return `Recorded status event ${field(record2, "event_id")}.`;
-    });
+function renderSignalList(output) {
+  const signals = asArray(asRecord(output).signals);
+  if (signals.length === 0) {
+    return "No Signals defined.";
   }
-}, statusUsage(context.binName));
-function statusUsage(bin) {
-  return `Usage: ${bin} status record [--seat <id>] [--json]
-  ${bin} status record --measurable-id <id> --value <n> [--seat <id>]
-  ${bin} status record --goal-id <id> --goal-state on|off [--goal-note <text>] [--seat <id>]`;
-}
-var signalWrapper = (context, args) => dispatch(context, "signal", args, {
-  list: (ctx, rest) => {
-    const parsed = parseFlags(rest);
-    const body = withOptional({}, { seat_id: optionalValue(parsed, "seat-id") });
-    return execute(ctx, parsed, "signal.list", body, (output) => {
-      const signals = asArray(asRecord(output).signals);
-      if (signals.length === 0) {
-        return "No Signals defined.";
-      }
-      return signals.map((signal) => {
-        const record2 = asRecord(signal);
-        return `${field(record2, "measurable_id")}  ${field(record2, "state")}  ${field(record2, "name")} (latest ${field(record2, "latest_value")} / target ${field(record2, "target")})`;
-      }).join("\n");
-    });
-  },
-  get: (ctx, rest) => {
-    const parsed = parseFlags(rest);
-    const measurableId = requireValue2(parsed, "measurable-id");
-    return execute(ctx, parsed, "signal.get", { measurable_id: measurableId }, (output) => {
-      const record2 = asRecord(output);
-      const readings = asArray(record2.readings);
-      const head2 = `${field(record2, "measurable_id")}  ${field(record2, "state")}  ${field(record2, "name")} (target ${field(record2, "target")})`;
-      const lines = readings.map((reading) => {
-        const r = asRecord(reading);
-        return `  ${field(r, "reading_id")}  ${field(r, "period_start")}  ${field(r, "value")}  confirmed=${field(r, "confirmed")}`;
-      });
-      return [head2, ...lines].join("\n");
-    });
-  },
-  confirm: (ctx, rest) => {
-    const parsed = parseFlags(rest);
-    const readingId = requireValue2(parsed, "reading-id");
-    return execute(ctx, parsed, "signal.confirm_reading", { reading_id: readingId }, (output) => {
-      const record2 = asRecord(output);
-      return `Confirmed reading ${field(record2, "reading_id")}.`;
-    });
-  },
-  correct: (ctx, rest) => {
-    const parsed = parseFlags(rest);
-    const body = {
-      measurable_id: requireValue2(parsed, "measurable-id"),
-      period_start: requireValue2(parsed, "period-start"),
-      value: parseNumber(parsed, "value", { required: true })
-    };
-    return execute(ctx, parsed, "signal.correct_reading", body, (output) => {
-      const record2 = asRecord(output);
-      return `Corrected reading ${field(record2, "reading_id")} for measurable ${field(record2, "measurable_id")} (${field(record2, "period_start")} = ${field(record2, "value")}).`;
-    });
+  return signals.map((signal) => {
+    const record2 = asRecord(signal);
+    return `${field(record2, "measurable_id")}  ${field(record2, "state")}  ${field(record2, "name")} (latest ${field(record2, "latest_value")} / target ${field(record2, "target")})`;
+  }).join("\n");
+}
+function renderSignalGet(output) {
+  const record2 = asRecord(output);
+  const readings = asArray(record2.readings);
+  const head2 = `${field(record2, "measurable_id")}  ${field(record2, "state")}  ${field(record2, "name")} (target ${field(record2, "target")})`;
+  const lines = readings.map((reading) => {
+    const r = asRecord(reading);
+    return `  ${field(r, "reading_id")}  ${field(r, "period_start")}  ${field(r, "value")}  confirmed=${field(r, "confirmed")}`;
+  });
+  return [head2, ...lines].join("\n");
+}
+function renderSignalConfirm(output) {
+  return `Confirmed reading ${field(asRecord(output), "reading_id")}.`;
+}
+function renderSignalCorrect(output) {
+  const record2 = asRecord(output);
+  return `Corrected reading ${field(record2, "reading_id")} for measurable ${field(record2, "measurable_id")} (${field(record2, "period_start")} = ${field(record2, "value")}).`;
+}
+function renderGoalList(output) {
+  const goals = asArray(asRecord(output).goals);
+  if (goals.length === 0) {
+    return "No goals in this Cascade.";
   }
-}, signalUsage(context.binName));
-function signalUsage(bin) {
-  return `Usage: ${bin} signal list|get|confirm|correct [--json]
-  ${bin} signal list [--seat-id <id>]
-  ${bin} signal get --measurable-id <id>
-  ${bin} signal confirm --reading-id <id>
-  ${bin} signal correct --measurable-id <id> --period-start YYYY-MM-DD --value <n>`;
-}
-var goalWrapper = (context, args) => dispatch(context, "goal", args, {
-  list: (ctx, rest) => {
-    const parsed = parseFlags(rest);
-    const body = withOptional({}, {
-      cycle_id: optionalValue(parsed, "cycle-id"),
-      seat_id: optionalValue(parsed, "seat-id")
-    });
-    return execute(ctx, parsed, "goal.list", body, (output) => {
-      const goals = asArray(asRecord(output).goals);
-      if (goals.length === 0) {
-        return "No goals in this Cascade.";
-      }
-      return goals.map((goal) => {
-        const record2 = asRecord(goal);
-        return `${field(record2, "goal_id")}  ${field(record2, "status")}  ${field(record2, "title")}`;
-      }).join("\n");
-    });
-  },
-  create: (ctx, rest) => {
-    const parsed = parseFlags(rest);
-    const body = withOptional({
-      cycle_id: requireValue2(parsed, "cycle-id"),
-      seat_id: requireValue2(parsed, "seat-id"),
-      parent_goal_id: requireValue2(parsed, "parent-goal-id"),
-      title: requireValue2(parsed, "title"),
-      definition_of_done: requireValue2(parsed, "definition-of-done")
-    }, {
-      status: optionalValue(parsed, "status")
-    });
-    return execute(ctx, parsed, "goal.create", body, (output) => {
-      const record2 = asRecord(output);
-      return `Created goal ${field(record2, "goal_id")} (status ${field(record2, "status")}).`;
-    });
-  },
-  update: (ctx, rest) => {
-    const parsed = parseFlags(rest);
-    const rejectBlank = (key, label) => {
-      const raw = parsed.values.get(key);
-      if (raw !== void 0 && raw.trim().length === 0) {
-        throw new UsageError(`${label} must not be empty.`);
-      }
-    };
-    rejectBlank("title", "--title");
-    rejectBlank("definition-of-done", "--definition-of-done");
-    const title = optionalValue(parsed, "title");
-    const definitionOfDone = optionalValue(parsed, "definition-of-done");
-    if (title === void 0 && definitionOfDone === void 0) {
-      throw new UsageError("Provide --title and/or --definition-of-done.");
-    }
-    const body = withOptional({
-      goal_id: requireValue2(parsed, "goal-id")
-    }, {
-      title,
-      definition_of_done: definitionOfDone
-    });
-    return execute(ctx, parsed, "goal.update", body, (output) => {
-      const record2 = asRecord(output);
-      return `Updated goal ${field(record2, "goal_id")}.`;
-    });
-  },
-  status: (ctx, rest) => {
-    const parsed = parseFlags(rest);
-    const body = {
-      goal_id: requireValue2(parsed, "goal-id"),
-      status: requireValue2(parsed, "status")
-    };
-    return execute(ctx, parsed, "goal.set_status", body, (output) => {
-      const record2 = asRecord(output);
-      return `Goal ${field(record2, "goal_id")} status set to ${field(record2, "status")}.`;
-    });
-  },
-  reparent: (ctx, rest) => {
-    const parsed = parseFlags(rest);
-    const body = {
-      goal_id: requireValue2(parsed, "goal-id"),
-      parent_goal_id: requireValue2(parsed, "parent-goal-id")
-    };
-    return execute(ctx, parsed, "goal.reparent", body, (output) => {
-      const record2 = asRecord(output);
-      return `Goal ${field(record2, "goal_id")} reparented under ${field(record2, "parent_goal_id")}.`;
-    });
-  },
-  drop: (ctx, rest) => {
-    const parsed = parseFlags(rest);
-    const body = { goal_id: requireValue2(parsed, "goal-id") };
-    return execute(ctx, parsed, "goal.drop", body, (output) => {
-      const record2 = asRecord(output);
-      return `Dropped goal ${field(record2, "goal_id")} (status ${field(record2, "status")}).`;
-    });
+  return goals.map((goal) => {
+    const record2 = asRecord(goal);
+    return `${field(record2, "goal_id")}  ${field(record2, "status")}  ${field(record2, "title")}`;
+  }).join("\n");
+}
+function renderGoalCreate(output) {
+  const record2 = asRecord(output);
+  return `Created goal ${field(record2, "goal_id")} (status ${field(record2, "status")}).`;
+}
+function renderGoalUpdate(output) {
+  return `Updated goal ${field(asRecord(output), "goal_id")}.`;
+}
+function renderGoalStatus(output) {
+  const record2 = asRecord(output);
+  return `Goal ${field(record2, "goal_id")} status set to ${field(record2, "status")}.`;
+}
+function renderGoalReparent(output) {
+  const record2 = asRecord(output);
+  return `Goal ${field(record2, "goal_id")} reparented under ${field(record2, "parent_goal_id")}.`;
+}
+function renderGoalDrop(output) {
+  const record2 = asRecord(output);
+  return `Dropped goal ${field(record2, "goal_id")} (status ${field(record2, "status")}).`;
+}
+function renderFrictionList(output) {
+  const issues = asArray(asRecord(output).issues);
+  if (issues.length === 0) {
+    return "No Friction issues.";
   }
-}, goalUsage(context.binName));
-function goalUsage(bin) {
-  return `Usage: ${bin} goal list|create|update|status|reparent|drop [--json]
-  ${bin} goal list [--cycle-id <id>] [--seat-id <id>]
-  ${bin} goal create --cycle-id <id> --seat-id <id> --parent-goal-id <id> --title <t> --definition-of-done <d> [--status on|off]
-  ${bin} goal update --goal-id <id> [--title <t>] [--definition-of-done <d>]
-  ${bin} goal status --goal-id <id> --status on|off|done
-  ${bin} goal reparent --goal-id <id> --parent-goal-id <id>
-  ${bin} goal drop --goal-id <id>`;
-}
-var frictionWrapper = (context, args) => dispatch(context, "friction", args, {
-  list: (ctx, rest) => {
-    const parsed = parseFlags(rest);
-    const body = withOptional({}, { status: optionalValue(parsed, "status") });
-    return execute(ctx, parsed, "friction.list", body, (output) => {
-      const issues = asArray(asRecord(output).issues);
-      if (issues.length === 0) {
-        return "No Friction issues.";
-      }
-      return issues.map((issue2) => {
-        const record2 = asRecord(issue2);
-        return `${field(record2, "issue_id")}  ${field(record2, "status")}  ${field(record2, "severity")}  ${field(record2, "summary")}`;
-      }).join("\n");
-    });
-  },
-  file: (ctx, rest) => {
-    const parsed = parseFlags(rest);
-    const body = withOptional({
-      summary: requireValue2(parsed, "summary"),
-      severity: requireValue2(parsed, "severity"),
-      evidence: parseList(parsed, "evidence") ?? []
-    }, {
-      blocking_goal_id: optionalValue(parsed, "blocking-goal-id"),
-      broken_measurable_id: optionalValue(parsed, "broken-measurable-id")
-    });
-    return execute(ctx, parsed, "friction.file_issue", body, (output) => {
-      const record2 = asRecord(output);
-      return `Filed Friction issue ${field(record2, "issue_id")} (event ${field(record2, "event_id")}).`;
-    });
-  },
-  resolve: (ctx, rest) => {
-    const parsed = parseFlags(rest);
-    const body = withOptional({
-      issue_id: requireValue2(parsed, "issue-id"),
-      root_cause: requireValue2(parsed, "root-cause"),
-      owner_seat_id: requireValue2(parsed, "owner-seat-id"),
-      task_title: requireValue2(parsed, "task-title"),
-      task_description: requireValue2(parsed, "task-description"),
-      done_by: requireValue2(parsed, "done-by")
-    }, {
-      resolving_seat_id: optionalValue(parsed, "resolving-seat-id")
-    });
-    return execute(ctx, parsed, "friction.resolve", body, (output) => {
-      const record2 = asRecord(output);
-      return `Resolved issue ${field(record2, "issue_id")} \u2192 action task ${field(record2, "action_task_id")} (decision ${field(record2, "decision_id")}).`;
-    });
-  },
-  link: (ctx, rest) => {
-    const parsed = parseFlags(rest);
-    const body = {
-      issue_id: requireValue2(parsed, "issue-id"),
-      task_id: requireValue2(parsed, "task-id")
-    };
-    return execute(ctx, parsed, "friction.link_task", body, (output) => {
-      const record2 = asRecord(output);
-      return `Linked task ${field(record2, "action_task_id")} to issue ${field(record2, "issue_id")}.`;
-    });
+  return issues.map((issue2) => {
+    const record2 = asRecord(issue2);
+    return `${field(record2, "issue_id")}  ${field(record2, "status")}  ${field(record2, "severity")}  ${field(record2, "summary")}`;
+  }).join("\n");
+}
+function renderFrictionFile(output) {
+  const record2 = asRecord(output);
+  return `Filed Friction issue ${field(record2, "issue_id")} (event ${field(record2, "event_id")}).`;
+}
+function renderFrictionResolve(output) {
+  const record2 = asRecord(output);
+  return `Resolved issue ${field(record2, "issue_id")} \u2192 action task ${field(record2, "action_task_id")} (decision ${field(record2, "decision_id")}).`;
+}
+function renderFrictionLink(output) {
+  const record2 = asRecord(output);
+  return `Linked task ${field(record2, "action_task_id")} to issue ${field(record2, "issue_id")}.`;
+}
+function renderEscalationList(output) {
+  const escalations = asArray(asRecord(output).escalations);
+  if (escalations.length === 0) {
+    return "No escalations on this steward chain.";
   }
-}, frictionUsage(context.binName));
-function frictionUsage(bin) {
-  return `Usage: ${bin} friction list|file|resolve|link [--json]
-  ${bin} friction list [--status open|diagnosing|resolved|dropped|active|all]
-  ${bin} friction file --summary <text> --severity low|med|high|critical [--evidence a,b] [--blocking-goal-id <id>] [--broken-measurable-id <id>]
-  ${bin} friction resolve --issue-id <id> --root-cause <text> --owner-seat-id <id> --task-title <t> --task-description <d> --done-by YYYY-MM-DD [--resolving-seat-id <id>]
-  ${bin} friction link --issue-id <id> --task-id <id>`;
-}
-var escalationWrapper = (context, args) => dispatch(context, "escalation", args, {
-  list: (ctx, rest) => {
-    const parsed = parseFlags(rest, /* @__PURE__ */ new Set(["include-decided"]));
-    const body = parsed.flags.has("include-decided") ? { include_decided: true } : {};
-    return execute(ctx, parsed, "escalation.list", body, (output) => {
-      const escalations = asArray(asRecord(output).escalations);
-      if (escalations.length === 0) {
-        return "No escalations on this steward chain.";
-      }
-      return escalations.map((escalation) => {
-        const record2 = asRecord(escalation);
-        return `${field(record2, "id")}  ${field(record2, "status")}  ${field(record2, "seat_name")}: ${field(record2, "reason")}`;
-      }).join("\n");
-    });
-  },
-  get: (ctx, rest) => {
-    const parsed = parseFlags(rest);
-    const id = requireValue2(parsed, "id");
-    return execute(ctx, parsed, "escalation.get", { id }, (output) => {
-      const record2 = asRecord(asRecord(output).escalation);
-      return `${field(record2, "id")}  ${field(record2, "status")}  ${field(record2, "seat_name")}
+  return escalations.map((escalation) => {
+    const record2 = asRecord(escalation);
+    return `${field(record2, "id")}  ${field(record2, "status")}  ${field(record2, "seat_name")}: ${field(record2, "reason")}`;
+  }).join("\n");
+}
+function renderEscalationGet(output) {
+  const record2 = asRecord(asRecord(output).escalation);
+  return `${field(record2, "id")}  ${field(record2, "status")}  ${field(record2, "seat_name")}
 reason: ${field(record2, "reason")}
 recommended: ${field(record2, "recommended_action")}`;
-    });
-  },
-  resolve: (ctx, rest) => {
-    const parsed = parseFlags(rest);
-    const body = withOptional({ id: requireValue2(parsed, "id") }, {
-      action: optionalValue(parsed, "action"),
-      rationale: optionalValue(parsed, "rationale")
-    });
-    return execute(ctx, parsed, "escalation.resolve", body, (output) => {
-      const record2 = asRecord(output);
-      return `Resolved escalation ${field(record2, "escalation_id")} (status ${field(record2, "status")}, decision ${field(record2, "decision_id")}).`;
-    });
-  },
-  reject: (ctx, rest) => {
-    const parsed = parseFlags(rest);
-    const body = withOptional({ id: requireValue2(parsed, "id") }, {
-      rationale: optionalValue(parsed, "rationale")
-    });
-    return execute(ctx, parsed, "escalation.reject", body, (output) => {
-      const record2 = asRecord(output);
-      return `Rejected escalation ${field(record2, "escalation_id")} (status ${field(record2, "status")}, decision ${field(record2, "decision_id")}).`;
-    });
-  }
-}, escalationUsage(context.binName));
-function escalationUsage(bin) {
-  return `Usage: ${bin} escalation list|get|resolve|reject [--json]
-  ${bin} escalation list [--include-decided]
-  ${bin} escalation get --id <id>
-  ${bin} escalation resolve --id <id> [--action approve|convert_to_issue] [--rationale <text>]
-  ${bin} escalation reject --id <id> [--rationale <text>]`;
-}
-var syncWrapper = (context, args) => dispatch(context, "sync", args, {
-  brief: (ctx, rest) => {
-    const parsed = parseFlags(rest);
-    const body = withOptional({}, { sync_brief_id: optionalValue(parsed, "sync-brief-id") });
-    return execute(ctx, parsed, "sync.brief.get", body, (output) => {
-      const record2 = asRecord(output);
-      return `Sync brief ${field(record2, "sync_brief_id")} (${field(record2, "period_start")} \u2192 ${field(record2, "period_end")})
+}
+function renderEscalationResolve(output) {
+  const record2 = asRecord(output);
+  return `Resolved escalation ${field(record2, "escalation_id")} (status ${field(record2, "status")}, decision ${field(record2, "decision_id")}).`;
+}
+function renderEscalationReject(output) {
+  const record2 = asRecord(output);
+  return `Rejected escalation ${field(record2, "escalation_id")} (status ${field(record2, "status")}, decision ${field(record2, "decision_id")}).`;
+}
+function renderSyncBrief(output) {
+  const record2 = asRecord(output);
+  return `Sync brief ${field(record2, "sync_brief_id")} (${field(record2, "period_start")} \u2192 ${field(record2, "period_end")})
 ${field(record2, "summary")}`;
-    });
-  },
-  compile: (ctx, rest) => {
-    const parsed = parseFlags(rest);
-    const body = withOptional({}, { cluster_id: optionalValue(parsed, "cluster-id") });
-    return execute(ctx, parsed, "sync.brief.compile", body, (output) => {
-      const record2 = asRecord(output);
-      return `Compiled sync brief ${field(record2, "sync_brief_id")} (${field(record2, "period_start")} \u2192 ${field(record2, "period_end")}, degraded=${field(record2, "degraded")}).`;
-    });
-  },
-  complete: (ctx, rest) => {
-    const parsed = parseFlags(rest);
-    const body = { sync_brief_id: requireValue2(parsed, "sync-brief-id") };
-    return execute(ctx, parsed, "sync.run.complete", body, (output) => {
-      const record2 = asRecord(output);
-      const decisions = asArray(record2.decision_ids).length;
-      const tasks = asArray(record2.task_ids).length;
-      return `Completed sync run for brief ${field(record2, "sync_brief_id")} (event ${field(record2, "event_id")}, ${decisions} decisions, ${tasks} tasks).`;
+}
+function renderSyncCompile(output) {
+  const record2 = asRecord(output);
+  return `Compiled sync brief ${field(record2, "sync_brief_id")} (${field(record2, "period_start")} \u2192 ${field(record2, "period_end")}, degraded=${field(record2, "degraded")}).`;
+}
+function renderSyncComplete(output) {
+  const record2 = asRecord(output);
+  const decisions = asArray(record2.decision_ids).length;
+  const tasks = asArray(record2.task_ids).length;
+  return `Completed sync run for brief ${field(record2, "sync_brief_id")} (event ${field(record2, "event_id")}, ${decisions} decisions, ${tasks} tasks).`;
+}
+function renderRunnerList(output) {
+  const runners = asArray(asRecord(output).runners);
+  if (runners.length === 0) {
+    return "No runners paired.";
+  }
+  return runners.map((runner) => {
+    const record2 = asRecord(runner);
+    return `${field(record2, "id")}  ${field(record2, "health")}  ${field(record2, "name")} (${field(record2, "platform")})`;
+  }).join("\n");
+}
+function renderRunnerStatus(output) {
+  const record2 = asRecord(output);
+  return `${field(record2, "id")}  ${field(record2, "health")}  ${field(record2, "name")} (last heartbeat ${field(record2, "last_heartbeat_at")}).`;
+}
+function renderRunnerDiagnose(output) {
+  const record2 = asRecord(output);
+  const guidance = asArray(record2.repair_guidance);
+  const lines = [
+    `Runner ${field(record2, "name")} (${field(record2, "id")})`,
+    `health: ${field(record2, "health")}  platform: ${field(record2, "platform")}`,
+    `paired_at: ${field(record2, "paired_at")}  last_heartbeat: ${field(record2, "last_heartbeat_at")}`,
+    `capabilities: claude=${String(asRecord(record2.capabilities).claude)} codex=${String(asRecord(record2.capabilities).codex)}`,
+    `revocation_state: ${field(record2, "revocation_state")}`
+  ];
+  if (guidance.length > 0) {
+    lines.push("repair_guidance:");
+    guidance.forEach((step) => {
+      const s = asRecord(step);
+      lines.push(`  ${field(s, "action")}: ${field(s, "detail")}`);
     });
   }
-}, syncUsage(context.binName));
-function syncUsage(bin) {
-  return `Usage: ${bin} sync brief|compile|complete [--json]
-  ${bin} sync brief [--sync-brief-id <id>]
-  ${bin} sync compile [--cluster-id <id>]
-  ${bin} sync complete --sync-brief-id <id>`;
-}
-var runnerWrapper = (context, args) => dispatch(context, "runner", args, {
-  list: (ctx, rest) => {
-    const parsed = parseFlags(rest, /* @__PURE__ */ new Set(["include-revoked"]));
-    const body = parsed.flags.has("include-revoked") ? { include_revoked: true } : {};
-    return execute(ctx, parsed, "runner.list", body, (output) => {
-      const runners = asArray(asRecord(output).runners);
-      if (runners.length === 0) {
-        return "No runners paired.";
-      }
-      return runners.map((runner) => {
-        const record2 = asRecord(runner);
-        return `${field(record2, "id")}  ${field(record2, "health")}  ${field(record2, "name")} (${field(record2, "platform")})`;
-      }).join("\n");
-    });
-  },
-  status: (ctx, rest) => {
-    const parsed = parseFlags(rest);
-    const runnerId = requireValue2(parsed, "runner-id");
-    return execute(ctx, parsed, "runner.status", { runner_id: runnerId }, (output) => {
-      const record2 = asRecord(output);
-      return `${field(record2, "id")}  ${field(record2, "health")}  ${field(record2, "name")} (last heartbeat ${field(record2, "last_heartbeat_at")}).`;
-    });
-  },
-  diagnose: (ctx, rest) => {
-    const parsed = parseFlags(rest);
-    const runnerId = requireValue2(parsed, "runner-id");
-    return execute(ctx, parsed, "runner.diagnose", { runner_id: runnerId }, (output) => {
-      const record2 = asRecord(output);
-      const guidance = asArray(record2.repair_guidance);
-      const lines = [
-        `Runner ${field(record2, "name")} (${field(record2, "id")})`,
-        `health: ${field(record2, "health")}  platform: ${field(record2, "platform")}`,
-        `paired_at: ${field(record2, "paired_at")}  last_heartbeat: ${field(record2, "last_heartbeat_at")}`,
-        `capabilities: claude=${String(asRecord(record2.capabilities).claude)} codex=${String(asRecord(record2.capabilities).codex)}`,
-        `revocation_state: ${field(record2, "revocation_state")}`
-      ];
-      if (guidance.length > 0) {
-        lines.push("repair_guidance:");
-        guidance.forEach((step) => {
-          const s = asRecord(step);
-          lines.push(`  ${field(s, "action")}: ${field(s, "detail")}`);
-        });
-      }
-      return lines.join("\n");
-    });
-  },
-  repair: (ctx, rest) => {
-    const parsed = parseFlags(rest);
-    const runnerId = requireValue2(parsed, "runner-id");
-    const issue2 = optionalValue(parsed, "issue");
-    const body = issue2 ? { runner_id: runnerId, issue: issue2 } : { runner_id: runnerId };
-    return execute(ctx, parsed, "runner.repair", body, (output) => {
-      const record2 = asRecord(output);
-      const steps = asArray(record2.repair_steps);
-      const lines = [
-        `Runner ${field(record2, "runner_name")} (${field(record2, "runner_id")}) health: ${field(record2, "runner_health")}`,
-        `requires_human: ${field(record2, "requires_human")}`
-      ];
-      if (steps.length > 0) {
-        lines.push("repair_steps:");
-        steps.forEach((step) => {
-          const s = asRecord(step);
-          lines.push(`  ${field(s, "action")}`);
-          lines.push(`    command: ${field(s, "command")}`);
-          lines.push(`    detail: ${field(s, "detail")}`);
-        });
-      }
-      return lines.join("\n");
-    });
-  },
-  "work-orders": (ctx, rest) => {
-    const parsed = parseFlags(rest);
-    const body = withOptional({}, {
-      status: optionalValue(parsed, "status"),
-      agent_id: optionalValue(parsed, "agent-id"),
-      runner_id: optionalValue(parsed, "runner-id"),
-      limit: parseNumber(parsed, "limit", { required: false })
-    });
-    return execute(ctx, parsed, "work_order.list", body, (output) => {
-      const workOrders = asArray(asRecord(output).work_orders);
-      if (workOrders.length === 0) {
-        return "No work orders.";
-      }
-      return workOrders.map((workOrder) => {
-        const record2 = asRecord(workOrder);
-        return `${field(record2, "id")}  ${field(record2, "status")}  ${field(record2, "lane")}  agent ${field(record2, "agent_id")}`;
-      }).join("\n");
-    });
-  },
-  revoke: (ctx, rest) => {
-    const parsed = parseFlags(rest);
-    const runnerId = requireValue2(parsed, "runner-id");
-    return execute(ctx, parsed, "runner.revoke", { runner_id: runnerId }, (output) => {
-      const record2 = asRecord(output);
-      return `Revoked runner ${field(record2, "runner_id")} (revoked=${field(record2, "revoked")}).`;
-    });
-  }
-}, runnerUsage(context.binName));
-function runnerUsage(bin) {
-  return `Usage: ${bin} runner list|status|diagnose|repair|work-orders|revoke|serve [--json]
-  ${bin} runner list [--include-revoked]
-  ${bin} runner status --runner-id <id>
-  ${bin} runner diagnose --runner-id <id>
-  ${bin} runner repair --runner-id <id> [--issue restart|re_pair|revoke_stale|missing_cli_runtime]
-  ${bin} runner work-orders [--status <s>] [--agent-id <id>] [--runner-id <id>] [--limit <n>]
-  ${bin} runner revoke --runner-id <id>
-  ${bin} runner serve [--name <text>] [--state-file <path>] [--heartbeat-ms <n>] [--once] [--execute]`;
-}
-var notificationWrapper = (context, args) => dispatch(context, "notification", args, {
-  settings: (ctx, rest) => {
-    const parsed = parseFlags(rest);
-    return execute(ctx, parsed, "notification.settings.get", {}, (output) => {
-      const record2 = asRecord(output);
-      return `escalations=${field(record2, "escalations_enabled")}  sync_brief=${field(record2, "sync_brief_enabled")}  default_channel=${field(record2, "default_channel")}`;
-    });
-  },
-  test: (ctx, rest) => {
-    const parsed = parseFlags(rest);
-    return execute(ctx, parsed, "notification.test", {}, (output) => {
-      const record2 = asRecord(output);
-      return `Test notification ${field(record2, "notification_id")} (delivered=${field(record2, "delivered")}).`;
-    });
-  },
-  errors: (ctx, rest) => {
-    const parsed = parseFlags(rest);
-    const body = withOptional({}, { limit: optionalNumber(parsed, "limit") });
-    return execute(ctx, parsed, "notification.list_errors", body, (output) => {
-      const errors = asArray(asRecord(output).errors);
-      if (errors.length === 0) {
-        return "No failed notification deliveries.";
-      }
-      return errors.map((entry) => {
-        const record2 = asRecord(entry);
-        return `${field(record2, "created_at")}  ${field(record2, "channel")}  source=${field(record2, "source")}  seat=${field(record2, "seat_id")}  run=${field(record2, "run_id")}  ${field(record2, "error_message")}`;
-      }).join("\n");
+  return lines.join("\n");
+}
+function renderRunnerRepair(output) {
+  const record2 = asRecord(output);
+  const steps = asArray(record2.repair_steps);
+  const lines = [
+    `Runner ${field(record2, "runner_name")} (${field(record2, "runner_id")}) health: ${field(record2, "runner_health")}`,
+    `requires_human: ${field(record2, "requires_human")}`
+  ];
+  if (steps.length > 0) {
+    lines.push("repair_steps:");
+    steps.forEach((step) => {
+      const s = asRecord(step);
+      lines.push(`  ${field(s, "action")}`);
+      lines.push(`    command: ${field(s, "command")}`);
+      lines.push(`    detail: ${field(s, "detail")}`);
     });
   }
-}, notificationUsage(context.binName));
-function notificationUsage(bin) {
-  return `Usage: ${bin} notification settings|test|errors [--json]
-  ${bin} notification settings
-  ${bin} notification test
-  ${bin} notification errors [--limit <n>]`;
-}
-var integrationWrapper = (context, args) => dispatch(context, "integration", args, {
-  list: (ctx, rest) => {
-    const parsed = parseFlags(rest);
-    const body = withOptional({}, { provider: optionalValue(parsed, "provider") });
-    return execute(ctx, parsed, "integration.list", body, (output) => {
-      const integrations = asArray(asRecord(output).integrations);
-      if (integrations.length === 0) {
-        return "No integrations are connected.";
-      }
-      return integrations.map((entry) => formatIntegrationLine(asRecord(entry))).join("\n");
-    });
-  },
-  readiness: (ctx, rest) => {
-    const parsed = parseFlags(rest);
-    const body = withOptional({}, { provider: optionalValue(parsed, "provider") });
-    return execute(ctx, parsed, "integration.readiness", body, (output) => {
-      const connectors = asArray(asRecord(output).connectors);
-      if (connectors.length === 0) {
-        return "No connector readiness facts found.";
-      }
-      return connectors.map((entry) => formatIntegrationReadiness(asRecord(entry))).join("\n\n");
-    });
-  },
-  status: (ctx, rest) => {
-    const parsed = parseFlags(rest);
-    const body = integrationLookupBody(parsed);
-    return execute(ctx, parsed, "integration.status", body, (output) => {
-      const integration = asRecord(output).integration;
-      if (integration === null) {
-        return "Integration not found.";
-      }
-      return formatIntegrationLine(asRecord(integration));
-    });
-  },
-  test: (ctx, rest) => {
-    const parsed = parseFlags(rest);
-    const body = integrationLookupBody(parsed);
-    return execute(ctx, parsed, "integration.test", body, (output) => {
-      const record2 = asRecord(output);
-      return `${field(record2, "provider")} ${field(record2, "status")} (ok=${field(record2, "ok")})  ${field(record2, "message")}`;
-    });
+  return lines.join("\n");
+}
+function renderWorkOrders(output) {
+  const workOrders = asArray(asRecord(output).work_orders);
+  if (workOrders.length === 0) {
+    return "No work orders.";
   }
-}, integrationUsage(context.binName));
-function integrationLookupBody(parsed) {
-  const body = withOptional({}, {
-    provider: optionalValue(parsed, "provider"),
-    integration_id: optionalValue(parsed, "integration-id")
-  });
-  if (Object.keys(body).length === 0) {
-    throw new UsageError("Provide --provider or --integration-id.");
+  return workOrders.map((workOrder) => {
+    const record2 = asRecord(workOrder);
+    return `${field(record2, "id")}  ${field(record2, "status")}  ${field(record2, "lane")}  agent ${field(record2, "agent_id")}`;
+  }).join("\n");
+}
+function renderRunnerRevoke(output) {
+  const record2 = asRecord(output);
+  return `Revoked runner ${field(record2, "runner_id")} (revoked=${field(record2, "revoked")}).`;
+}
+function renderNotificationSettings(output) {
+  const record2 = asRecord(output);
+  return `escalations=${field(record2, "escalations_enabled")}  sync_brief=${field(record2, "sync_brief_enabled")}  default_channel=${field(record2, "default_channel")}`;
+}
+function renderNotificationTest(output) {
+  const record2 = asRecord(output);
+  return `Test notification ${field(record2, "notification_id")} (delivered=${field(record2, "delivered")}).`;
+}
+function renderNotificationErrors(output) {
+  const errors = asArray(asRecord(output).errors);
+  if (errors.length === 0) {
+    return "No failed notification deliveries.";
   }
-  return body;
+  return errors.map((entry) => {
+    const record2 = asRecord(entry);
+    return `${field(record2, "created_at")}  ${field(record2, "channel")}  source=${field(record2, "source")}  seat=${field(record2, "seat_id")}  run=${field(record2, "run_id")}  ${field(record2, "error_message")}`;
+  }).join("\n");
 }
 function formatIntegrationLine(record2) {
   return `${field(record2, "provider")}  status=${field(record2, "status")}  account=${field(record2, "account_email")}  last_test=${field(record2, "last_test_result")}  id=${field(record2, "id")}`;
 }
-function formatIntegrationReadiness(record2) {
+function renderIntegrationList(output) {
+  const integrations = asArray(asRecord(output).integrations);
+  if (integrations.length === 0) {
+    return "No integrations are connected.";
+  }
+  return integrations.map((entry) => formatIntegrationLine(asRecord(entry))).join("\n");
+}
+function renderIntegrationReadiness(output) {
+  const connectors = asArray(asRecord(output).connectors);
+  if (connectors.length === 0) {
+    return "No connector readiness facts found.";
+  }
+  return connectors.map((entry) => formatIntegrationReadinessLine(asRecord(entry))).join("\n\n");
+}
+function formatIntegrationReadinessLine(record2) {
   const checks = asArray(record2.checks).map((entry) => {
     const check2 = asRecord(entry);
     const issue2 = field(check2, "linear_issue") === "\u2014" ? "" : ` ${field(check2, "linear_issue")}`;
@@ -46781,142 +46587,58 @@ function formatIntegrationReadiness(record2) {
     actions.length > 0 ? ["next:", ...actions].join("\n") : ""
   ].filter((line) => line.length > 0).join("\n");
 }
-function integrationUsage(bin) {
-  return `Usage: ${bin} integration list|readiness|status|test [--json]
-  ${bin} integration list [--provider <name>]
-  ${bin} integration readiness [--provider google]
-  ${bin} integration status --provider <name>
-  ${bin} integration test --provider <name>`;
-}
-var settingsWrapper = (context, args) => dispatch(context, "settings", args, {
-  "product-learning": (ctx, rest) => dispatch(ctx, "settings product-learning", rest, {
-    get: (innerCtx, innerRest) => {
-      const parsed = parseFlags(innerRest);
-      return execute(innerCtx, parsed, "settings.product_learning.get", {}, (output) => {
-        const policy = asRecord(asRecord(output).product_learning);
-        return `product_learning ${field(policy, "mode")}  product_analytics_enabled=${field(policy, "product_analytics_enabled")}  security_audit_logs_enabled=${field(policy, "security_audit_logs_enabled")}`;
-      });
-    },
-    update: (innerCtx, innerRest) => {
-      const parsed = parseFlags(innerRest);
-      const mode = optionalValue(parsed, "mode");
-      if (mode !== "enabled" && mode !== "disabled" && mode !== "enterprise_contract") {
-        throw new UsageError("Provide --mode enabled|disabled|enterprise_contract.");
-      }
-      return execute(innerCtx, parsed, "settings.product_learning.update", { mode }, (output) => {
-        const policy = asRecord(asRecord(output).product_learning);
-        return `Updated product-learning policy to ${field(policy, "mode")} (product_analytics_enabled=${field(policy, "product_analytics_enabled")}).`;
-      });
-    }
-  }, settingsUsage(ctx.binName)),
-  "agent-policy": (ctx, rest) => dispatch(ctx, "settings agent-policy", rest, {
-    get: (innerCtx, innerRest) => {
-      const parsed = parseFlags(innerRest);
-      return execute(innerCtx, parsed, "settings.agent_policy.get", {}, (output) => {
-        const policy = asRecord(asRecord(output).agent_policy);
-        return `agent_policy profile=${field(policy, "profile")}  enforcement=${field(policy, "enforcement")}  max_autonomous_risk=${field(policy, "max_autonomous_risk")}  explicit=${field(policy, "explicit")}`;
-      });
-    },
-    set: (innerCtx, innerRest) => {
-      const parsed = parseFlags(innerRest);
-      const profile = optionalValue(parsed, "profile");
-      if (profile !== "locked_down" && profile !== "balanced" && profile !== "high_autonomy" && profile !== "custom") {
-        throw new UsageError("Provide --profile locked_down|balanced|high_autonomy|custom.");
-      }
-      const body = withOptional({ profile }, {
-        max_autonomous_risk: optionalValue(parsed, "max-autonomous-risk"),
-        enforcement: optionalValue(parsed, "enforcement")
-      });
-      return execute(innerCtx, parsed, "settings.agent_policy.update", body, (output) => {
-        const policy = asRecord(asRecord(output).agent_policy);
-        return `Set company autonomy ceiling to ${field(policy, "profile")} (max_autonomous_risk=${field(policy, "max_autonomous_risk")}, enforcement=${field(policy, "enforcement")}).`;
-      });
-    }
-  }, settingsUsage(ctx.binName)),
-  get: (ctx, rest) => {
-    const parsed = parseFlags(rest);
-    return execute(ctx, parsed, "settings.get", {}, (output) => {
-      const record2 = asRecord(output);
-      const spend = asRecord(record2.spend);
-      const policy = asRecord(record2.product_learning);
-      return `tenant ${field(record2, "tenant_id")}  plan=${field(record2, "plan")}  status=${field(record2, "status")}  spend=$${field(spend, "spend_usd")}  has_anthropic_key=${field(record2, "has_anthropic_key")}  product_learning=${field(policy, "mode")}`;
-    });
-  },
-  update: (ctx, rest) => {
-    const parsed = parseFlags(rest);
-    const body = withOptional({}, {
-      soft_cap_usd: optionalValue(parsed, "soft-cap-usd"),
-      hard_cap_usd: optionalValue(parsed, "hard-cap-usd")
-    });
-    if (Object.keys(body).length === 0) {
-      throw new UsageError("Provide --soft-cap-usd and/or --hard-cap-usd.");
-    }
-    return execute(ctx, parsed, "settings.update", body, (output) => {
-      const spend = asRecord(asRecord(output).spend);
-      return `Updated budget caps (soft=$${field(spend, "soft_cap_usd")}, hard=$${field(spend, "hard_cap_usd")}).`;
-    });
-  },
-  rename: (ctx, rest) => {
-    const parsed = parseFlags(rest);
-    const companyName = optionalValue(parsed, "company");
-    if (!companyName) {
-      throw new UsageError("Provide --company <name>.");
-    }
-    return execute(ctx, parsed, "tenant.rename", { company_name: companyName }, (output) => {
-      const record2 = asRecord(output);
-      return `Renamed company from ${field(record2, "previous_name")} to ${field(record2, "name")}.`;
-    });
+function renderIntegrationStatus(output) {
+  const integration = asRecord(output).integration;
+  if (integration === null) {
+    return "Integration not found.";
   }
-}, settingsUsage(context.binName));
-function settingsUsage(bin) {
-  return `Usage: ${bin} settings get|update|product-learning|agent-policy|rename [--json]
-  ${bin} settings get
-  ${bin} settings update [--soft-cap-usd <n>] [--hard-cap-usd <n>]
-  ${bin} settings product-learning get
-  ${bin} settings product-learning update --mode enabled|disabled|enterprise_contract
-  ${bin} settings agent-policy get
-  ${bin} settings agent-policy set --profile locked_down|balanced|high_autonomy|custom [--max-autonomous-risk low|medium|high|critical] [--enforcement enforce|observe]
-  ${bin} settings rename --company <name>`;
-}
-var memberWrapper = (context, args) => dispatch(context, "member", args, {
-  invite: (ctx, rest) => {
-    const parsed = parseFlags(rest, /* @__PURE__ */ new Set(["byo-key"]));
-    const body = withOptional({
-      email: requireValue2(parsed, "email"),
-      role: requireValue2(parsed, "role")
-    }, {
-      byo_key: parsed.flags.has("byo-key") ? true : void 0
-    });
-    return execute(ctx, parsed, "member.invite", body, (output) => {
-      const record2 = asRecord(output);
-      return `Invited ${field(record2, "email")} as ${field(record2, "role")} (invite ${field(record2, "invite_id")}).`;
-    });
-  },
-  update: (ctx, rest) => {
-    const parsed = parseFlags(rest);
-    const body = {
-      member_id: requireValue2(parsed, "member-id"),
-      role: requireValue2(parsed, "role")
-    };
-    return execute(ctx, parsed, "member.update", body, (output) => {
-      const record2 = asRecord(output);
-      return `Updated member ${field(record2, "member_id")} \u2192 ${field(record2, "role")}.`;
-    });
-  },
-  remove: (ctx, rest) => {
-    const parsed = parseFlags(rest);
-    const body = { member_id: requireValue2(parsed, "member-id") };
-    return execute(ctx, parsed, "member.remove", body, (output) => {
-      const record2 = asRecord(output);
-      return `Removed member ${field(record2, "member_id")} (removed=${field(record2, "removed")}).`;
-    });
-  }
-}, memberUsage(context.binName));
-function memberUsage(bin) {
-  return `Usage: ${bin} member invite|update|remove [--json]
-  ${bin} member invite --email <email> --role owner|steward|member [--byo-key]
-  ${bin} member update --member-id <id> --role owner|steward|member
-  ${bin} member remove --member-id <id>`;
+  return formatIntegrationLine(asRecord(integration));
+}
+function renderIntegrationTest(output) {
+  const record2 = asRecord(output);
+  return `${field(record2, "provider")} ${field(record2, "status")} (ok=${field(record2, "ok")})  ${field(record2, "message")}`;
+}
+function renderSettingsGet(output) {
+  const record2 = asRecord(output);
+  const spend = asRecord(record2.spend);
+  const policy = asRecord(record2.product_learning);
+  return `tenant ${field(record2, "tenant_id")}  plan=${field(record2, "plan")}  status=${field(record2, "status")}  spend=$${field(spend, "spend_usd")}  has_anthropic_key=${field(record2, "has_anthropic_key")}  product_learning=${field(policy, "mode")}`;
+}
+function renderSettingsUpdate(output) {
+  const spend = asRecord(asRecord(output).spend);
+  return `Updated budget caps (soft=$${field(spend, "soft_cap_usd")}, hard=$${field(spend, "hard_cap_usd")}).`;
+}
+function renderTenantRename(output) {
+  const record2 = asRecord(output);
+  return `Renamed company from ${field(record2, "previous_name")} to ${field(record2, "name")}.`;
+}
+function renderProductLearningGet(output) {
+  const policy = asRecord(asRecord(output).product_learning);
+  return `product_learning ${field(policy, "mode")}  product_analytics_enabled=${field(policy, "product_analytics_enabled")}  security_audit_logs_enabled=${field(policy, "security_audit_logs_enabled")}`;
+}
+function renderProductLearningUpdate(output) {
+  const policy = asRecord(asRecord(output).product_learning);
+  return `Updated product-learning policy to ${field(policy, "mode")} (product_analytics_enabled=${field(policy, "product_analytics_enabled")}).`;
+}
+function renderAgentPolicyGet(output) {
+  const policy = asRecord(asRecord(output).agent_policy);
+  return `agent_policy profile=${field(policy, "profile")}  enforcement=${field(policy, "enforcement")}  max_autonomous_risk=${field(policy, "max_autonomous_risk")}  explicit=${field(policy, "explicit")}`;
+}
+function renderAgentPolicySet(output) {
+  const policy = asRecord(asRecord(output).agent_policy);
+  return `Set company autonomy ceiling to ${field(policy, "profile")} (max_autonomous_risk=${field(policy, "max_autonomous_risk")}, enforcement=${field(policy, "enforcement")}).`;
+}
+function renderMemberInvite(output) {
+  const record2 = asRecord(output);
+  return `Invited ${field(record2, "email")} as ${field(record2, "role")} (invite ${field(record2, "invite_id")}).`;
+}
+function renderMemberUpdate(output) {
+  const record2 = asRecord(output);
+  return `Updated member ${field(record2, "member_id")} \u2192 ${field(record2, "role")}.`;
+}
+function renderMemberRemove(output) {
+  const record2 = asRecord(output);
+  return `Removed member ${field(record2, "member_id")} (removed=${field(record2, "removed")}).`;
 }
 function agentSetupStateLine(output) {
   const record2 = asRecord(output);
@@ -46933,236 +46655,204 @@ function agentSetupStateLine(output) {
   }
   return lines.join("\n");
 }
-var agentWrapper = (context, args) => dispatch(context, "agent", args, {
-  templates: (ctx, rest) => {
-    const parsed = parseFlags(rest);
-    return execute(ctx, parsed, "agent_template.list", {}, (output) => {
-      const templates = asArray(asRecord(output).templates);
-      if (templates.length === 0) {
-        return "No stock agent templates available.";
-      }
-      return templates.map((template) => {
-        const record2 = asRecord(template);
-        return `${field(record2, "slug")}  ${field(record2, "tier")}  ${field(record2, "display_name")} \u2014 ${field(record2, "function")}`;
-      }).join("\n");
-    });
-  },
-  create: (ctx, rest) => {
-    const parsed = parseFlags(rest, /* @__PURE__ */ new Set(["custom"]));
-    const templateSlug = optionalValue(parsed, "template");
-    const seatId = requireValue2(parsed, "seat-id");
-    if (parsed.flags.has("custom")) {
-      if (templateSlug !== void 0) {
-        throw new UsageError("Use either --template <slug> or --custom, not both.");
-      }
-      const body2 = withOptional({ seat_id: seatId }, {
-        steward_seat_id: optionalValue(parsed, "steward-seat-id"),
-        lane: optionalValue(parsed, "lane"),
-        model_config: resolveModelConfig(optionalValue(parsed, "model"), optionalValue(parsed, "effort")),
-        what_it_owns: optionalValue(parsed, "owns"),
-        what_success_looks_like: optionalValue(parsed, "success"),
-        what_it_must_never_do_alone: optionalValue(parsed, "never-alone")
-      });
-      return execute(ctx, parsed, "agent.create_custom", body2, agentSetupStateLine);
-    }
-    if (templateSlug === void 0) {
-      throw new UsageError("Provide --template <slug> or --custom.");
-    }
-    const body = withOptional({ seat_id: seatId, template_slug: templateSlug }, {
-      expected_template_version: optionalValue(parsed, "expected-version")
-    });
-    return execute(ctx, parsed, "agent.create_from_template", body, agentSetupStateLine);
-  },
-  setup: (ctx, rest) => dispatch(ctx, "agent setup", rest, {
-    status: (innerCtx, innerRest) => {
-      const parsed = parseFlags(innerRest);
-      const body = withOptional({}, {
-        setup_id: optionalValue(parsed, "setup-id"),
-        seat_id: optionalValue(parsed, "seat-id")
-      });
-      if (Object.keys(body).length === 0) {
-        throw new UsageError("Provide --setup-id or --seat-id.");
-      }
-      return execute(innerCtx, parsed, "agent_setup.get", body, agentSetupStateLine);
-    },
-    answer: (innerCtx, innerRest) => {
-      const parsed = parseFlags(innerRest);
-      const body = withOptional({ seat_id: requireValue2(parsed, "seat-id") }, {
-        parent_seat_id: optionalValue(parsed, "parent-seat-id"),
-        steward_seat_id: optionalValue(parsed, "steward-seat-id"),
-        lane: optionalValue(parsed, "lane"),
-        schedule_cron: optionalValue(parsed, "schedule-cron"),
-        // DER-787 (H1): --model sets the structured model config (tier or id).
-        model_config: resolveModelConfig(optionalValue(parsed, "model"), optionalValue(parsed, "effort")),
-        answers: parseList(parsed, "answers")
-      });
-      if (Object.keys(body).length <= 1) {
-        throw new UsageError("Provide at least one of --parent-seat-id, --steward-seat-id, --lane, --schedule-cron, --model, --answers.");
-      }
-      return execute(innerCtx, parsed, "agent_setup.update", body, agentSetupStateLine);
-    }
-  }, agentSetupUsage(ctx.binName)),
-  tools: (ctx, rest) => dispatch(ctx, "agent tools", rest, {
-    connect: (innerCtx, innerRest) => agentConfigureTools(innerCtx, innerRest, "connect"),
-    decline: (innerCtx, innerRest) => agentConfigureTools(innerCtx, innerRest, "decline")
-  }, agentToolsUsage(ctx.binName)),
-  "dry-run": (ctx, rest) => {
-    const parsed = parseFlags(rest);
-    const body = {
-      seat_id: requireValue2(parsed, "seat-id"),
-      charter_version_id: requireValue2(parsed, "charter-version-id")
-    };
-    return execute(ctx, parsed, "agent.run_dry_run", body, (output) => {
-      const record2 = asRecord(output);
-      const header = `dry run for seat ${field(record2, "seat_id")} (charter ${field(record2, "charter_version_id")}): ${field(record2, "status")} (reused=${field(record2, "reused")})
+function renderAgentTemplates(output) {
+  const templates = asArray(asRecord(output).templates);
+  if (templates.length === 0) {
+    return "No stock agent templates available.";
+  }
+  return templates.map((template) => {
+    const record2 = asRecord(template);
+    return `${field(record2, "slug")}  ${field(record2, "tier")}  ${field(record2, "display_name")} \u2014 ${field(record2, "function")}`;
+  }).join("\n");
+}
+function renderAgentDryRun(output) {
+  const record2 = asRecord(output);
+  const header = `dry run for seat ${field(record2, "seat_id")} (charter ${field(record2, "charter_version_id")}): ${field(record2, "status")} (reused=${field(record2, "reused")})
 ${field(record2, "summary")}`;
-      return [header, formatDryRunTranscript(record2.transcript)].filter((part) => part.length > 0).join("\n");
-    });
-  },
-  "go-live": (ctx, rest) => {
-    const parsed = parseFlags(rest);
-    const body = {
-      seat_id: requireValue2(parsed, "seat-id"),
-      charter_version_id: requireValue2(parsed, "charter-version-id")
-    };
-    return execute(ctx, parsed, "agent.go_live", body, (output) => {
-      const record2 = asRecord(output);
-      return `agent seat ${field(record2, "seat_id")} is now ${field(record2, "status")} (charter ${field(record2, "charter_version_id")}).`;
-    });
-  },
-  status: (ctx, rest) => {
-    const parsed = parseFlags(rest);
-    const seatId = requireValue2(parsed, "seat-id");
-    return execute(ctx, parsed, "agent.status", { seat_id: seatId }, (output) => {
-      const record2 = asRecord(output);
-      return `agent seat ${field(record2, "seat_id")}  status=${field(record2, "status")}  live=${field(record2, "live")}  lane=${field(record2, "lane")}`;
-    });
-  },
-  "run-now": (ctx, rest) => {
-    const parsed = parseFlags(rest);
-    const body = withOptional({ seat_id: requireValue2(parsed, "seat-id") }, {
-      task_id: optionalValue(parsed, "task-id")
-    });
-    return execute(ctx, parsed, "agent.run_now", body, (output) => {
-      const workOrder = asRecord(asRecord(output).work_order);
-      return `queued ${field(workOrder, "lane")} work order ${field(workOrder, "id")} for agent ${field(workOrder, "agent_id")} (${field(workOrder, "status")})`;
-    });
-  },
-  "fleet-digest": (ctx, rest) => {
-    const parsed = parseFlags(rest);
-    const body = withOptional({}, {
-      window_hours: optionalNumber(parsed, "window-hours"),
-      error_limit: optionalNumber(parsed, "error-limit")
-    });
-    return execute(ctx, parsed, "agent.fleet_digest", body, (output) => {
-      const record2 = asRecord(output);
-      const summary = asRecord(record2.summary);
-      const agents = asArray(record2.agents);
-      const header = `fleet ${field(summary, "fleet_count")} seats  live=${field(summary, "live_count")}  idle=${field(summary, "idle_count")}  turns24h=${field(summary, "turns_24h")}  failed24h=${field(summary, "failed_runs_24h")}  spend7d=$${field(summary, "spend_7d_usd")}`;
-      const lines = agents.map((agent) => {
-        const r = asRecord(agent);
-        return `${field(r, "seat_name")}  ${field(r, "health_status")}  live=${field(r, "live")}  turns24h=${field(r, "turns_24h")}  failed=${field(r, "failed_runs_24h")}  next=${field(r, "suggested_next_action")}`;
-      });
-      return [header, ...lines].join("\n");
-    });
-  },
-  "get-run": (ctx, rest) => {
-    const parsed = parseFlags(rest);
-    const body = {
-      seat_id: requireValue2(parsed, "seat-id"),
-      run_id: requireValue2(parsed, "run-id")
-    };
-    return execute(ctx, parsed, "agent.get_run", body, (output) => {
-      const run2 = asRecord(asRecord(output).run);
-      const errors = asArray(run2.error_logs);
-      const errorLine = errors.length === 0 ? "errors=0" : `errors=${errors.length} first=${field(asRecord(errors[0]), "message")}`;
-      return `run ${field(run2, "run_id")}  status=${field(run2, "status")}  lane=${field(run2, "lane")}  cost=$${field(run2, "cost_usd")}
+  return [header, formatDryRunTranscript(record2.transcript)].filter((part) => part.length > 0).join("\n");
+}
+function renderAgentGoLive(output) {
+  const record2 = asRecord(output);
+  return `agent seat ${field(record2, "seat_id")} is now ${field(record2, "status")} (charter ${field(record2, "charter_version_id")}).`;
+}
+function renderAgentStatus(output) {
+  const record2 = asRecord(output);
+  return `agent seat ${field(record2, "seat_id")}  status=${field(record2, "status")}  live=${field(record2, "live")}  lane=${field(record2, "lane")}`;
+}
+function renderAgentRunNow(output) {
+  const workOrder = asRecord(asRecord(output).work_order);
+  return `queued ${field(workOrder, "lane")} work order ${field(workOrder, "id")} for agent ${field(workOrder, "agent_id")} (${field(workOrder, "status")})`;
+}
+function renderAgentFleetDigest(output) {
+  const record2 = asRecord(output);
+  const summary = asRecord(record2.summary);
+  const agents = asArray(record2.agents);
+  const header = `fleet ${field(summary, "fleet_count")} seats  live=${field(summary, "live_count")}  idle=${field(summary, "idle_count")}  turns24h=${field(summary, "turns_24h")}  failed24h=${field(summary, "failed_runs_24h")}  spend7d=$${field(summary, "spend_7d_usd")}`;
+  const lines = agents.map((agent) => {
+    const r = asRecord(agent);
+    return `${field(r, "seat_name")}  ${field(r, "health_status")}  live=${field(r, "live")}  turns24h=${field(r, "turns_24h")}  failed=${field(r, "failed_runs_24h")}  next=${field(r, "suggested_next_action")}`;
+  });
+  return [header, ...lines].join("\n");
+}
+function renderAgentGetRun(output) {
+  const run2 = asRecord(asRecord(output).run);
+  const errors = asArray(run2.error_logs);
+  const errorLine = errors.length === 0 ? "errors=0" : `errors=${errors.length} first=${field(asRecord(errors[0]), "message")}`;
+  return `run ${field(run2, "run_id")}  status=${field(run2, "status")}  lane=${field(run2, "lane")}  cost=$${field(run2, "cost_usd")}
 transcript=${field(run2, "transcript_ref")}
 ${errorLine}`;
-    });
-  },
-  // DER-787 (H8): markdown readout for a seat's agent setup. `--markdown` (or
-  // default) prints the composed card; `--json` returns the { markdown } object.
-  show: (ctx, rest) => {
-    const parsed = parseFlags(rest, /* @__PURE__ */ new Set(["markdown"]));
-    const seatId = requireValue2(parsed, "seat-id");
-    return execute(ctx, parsed, "agent.show_markdown", { seat_id: seatId }, markdownLine);
-  }
-}, agentUsage(context.binName));
-function agentConfigureTools(ctx, rest, decision) {
-  const parsed = parseFlags(rest);
-  const seatId = requireValue2(parsed, "seat-id");
-  const tool = requireValue2(parsed, "tool");
-  const body = {
-    seat_id: seatId,
-    tool_decisions: [{ tool, decision }]
-  };
-  return execute(ctx, parsed, "agent.configure_tools", body, (output) => {
-    const record2 = asRecord(output);
-    const decisions = asArray(record2.tool_decisions).map((entry) => {
-      const r = asRecord(entry);
-      return `  ${field(r, "tool")}  ${field(r, "decision")}`;
-    }).join("\n");
-    return [`Configured tools for seat ${field(record2, "seat_id")} (agent ${field(record2, "agent_id")}).`, decisions].filter((line) => line.length > 0).join("\n");
-  });
-}
-function agentUsage(bin) {
-  return `Usage: ${bin} agent templates|create|setup|tools|dry-run|go-live|status|run-now|fleet-digest|get-run|show [--json]
-  ${bin} agent templates
-  ${bin} agent create --seat-id <id> --template <slug> [--expected-version <v>]
-  ${bin} agent create --seat-id <id> --custom [--steward-seat-id <id>] [--lane cloud|mcp_session|runner] [--model triage|balanced|complex|hardest|<id>] [--effort low|medium|high|xhigh|max] [--owns <text>] [--success <text>] [--never-alone <text>]
-  ${bin} agent setup status [--setup-id <id>] [--seat-id <id>]
-  ${bin} agent setup answer --seat-id <id> [--parent-seat-id <id>] [--steward-seat-id <id>] [--lane <lane>] [--model <tier|id>] [--effort <level>] [--schedule-cron <cron>] [--answers a,b]
-  ${bin} agent tools connect|decline --seat-id <id> --tool <name>
-  ${bin} agent dry-run --seat-id <id> --charter-version-id <id>
-  ${bin} agent go-live --seat-id <id> --charter-version-id <id>
-  ${bin} agent status --seat-id <id>
-  ${bin} agent run-now --seat-id <id> [--task-id <id>]
-  ${bin} agent fleet-digest [--window-hours <n>] [--error-limit <n>]
-  ${bin} agent get-run --seat-id <id> --run-id <id>
-  ${bin} agent show --seat-id <id> [--markdown]`;
-}
-function agentSetupUsage(bin) {
-  return `Usage: ${bin} agent setup status|answer [--json]
-  ${bin} agent setup status [--setup-id <id>] [--seat-id <id>]
-  ${bin} agent setup answer --seat-id <id> [--parent-seat-id <id>] [--steward-seat-id <id>] [--lane <lane>] [--model <tier|id>] [--effort <level>] [--schedule-cron <cron>] [--answers a,b]`;
-}
-function agentToolsUsage(bin) {
-  return `Usage: ${bin} agent tools connect|decline [--json]
-  ${bin} agent tools connect --seat-id <id> --tool <name>
-  ${bin} agent tools decline --seat-id <id> --tool <name>`;
-}
-var toolsWrapper = (context, args) => dispatch(context, "tools", args, {
-  list: (ctx, rest) => {
-    const parsed = parseFlags(rest);
-    const body = withOptional({}, { provider: optionalValue(parsed, "provider") });
-    return execute(ctx, parsed, "tool.catalog", body, (output) => {
-      const record2 = asRecord(output);
-      const tools = asArray(record2.tools);
-      const header = `# Tool catalog
+}
+function renderAgentConfigureTools(output) {
+  const record2 = asRecord(output);
+  const decisions = asArray(record2.tool_decisions).map((entry) => {
+    const r = asRecord(entry);
+    return `  ${field(r, "tool")}  ${field(r, "decision")}`;
+  }).join("\n");
+  return [`Configured tools for seat ${field(record2, "seat_id")} (agent ${field(record2, "agent_id")}).`, decisions].filter((line) => line.length > 0).join("\n");
+}
+function renderToolCatalog(output) {
+  const record2 = asRecord(output);
+  const tools = asArray(record2.tools);
+  const header = `# Tool catalog
 
 ${field(record2, "note")}
 `;
-      if (tools.length === 0) {
-        return `${header}
+  if (tools.length === 0) {
+    return `${header}
 No tools in the catalog.`;
-      }
-      const lines = tools.map((entry) => {
-        const r = asRecord(entry);
-        const cred = r.credential_required === true ? " (credential required)" : "";
-        return `- \`${field(r, "id")}\` [${field(r, "provider")} \xB7 ${field(r, "default_scope_tier")} \xB7 ${field(r, "default_access_policy")}]${cred}
+  }
+  const lines = tools.map((entry) => {
+    const r = asRecord(entry);
+    const cred = r.credential_required === true ? " (credential required)" : "";
+    return `- \`${field(r, "id")}\` [${field(r, "provider")} \xB7 ${field(r, "default_scope_tier")} \xB7 ${field(r, "default_access_policy")}]${cred}
   ${field(r, "description")}`;
-      });
-      return `${header}
+  });
+  return `${header}
 ${lines.join("\n")}`;
-    });
+}
+function renderModelCatalog(output) {
+  const record2 = asRecord(output);
+  const tiers = asArray(record2.tiers);
+  const header = `# Model tiers
+
+${field(record2, "note")}
+`;
+  if (tiers.length === 0) {
+    return `${header}
+No model tiers are configured.`;
+  }
+  const defaultTier = field(record2, "default_tier");
+  const lines = tiers.map((entry) => {
+    const r = asRecord(entry);
+    const tier = field(r, "tier");
+    const recommended = r.recommended === true || tier === defaultTier ? " recommended" : "";
+    const bestFor = asArray(r.best_for).map(String).join(", ");
+    return [
+      `- \`${tier}\` [${field(r, "provider")}/${field(r, "model")} \xB7 effort ${field(r, "effort")} \xB7 cost ${field(r, "cost_band")}${recommended}]`,
+      `  ${field(r, "description")}`,
+      `  Best for: ${bestFor}`,
+      `  Price: $${field(r, "input_usd_per_million_tokens")}/1M input \xB7 $${field(r, "output_usd_per_million_tokens")}/1M output`,
+      `  Cost: ${field(r, "cost_note")}`,
+      `  Avoid for: ${field(r, "avoid_for")}`
+    ].join("\n");
+  });
+  return `${header}
+${lines.join("\n")}`;
+}
+function renderErrorList(output) {
+  const record2 = asRecord(output);
+  const errors = asArray(record2.errors);
+  if (errors.length === 0) {
+    return "No error logs matching the filter.";
+  }
+  return errors.map((entry) => {
+    const r = asRecord(entry);
+    const disposition = field(r, "disposition");
+    const marker = disposition === "active" ? "*" : " ";
+    const severityLabel = field(r, "severity").charAt(0).toUpperCase();
+    return `${marker} ${field(r, "error_log_id")}  [${severityLabel}]  ${field(r, "source")}  ${disposition}  ${field(r, "code")} ${field(r, "message")}  ${field(r, "created_at")}`;
+  }).join("\n") + (field(record2, "total") !== "" ? `
+Total: ${field(record2, "total")}` : "");
+}
+function renderErrorResolve(output) {
+  const record2 = asRecord(output);
+  return `Resolved error ${field(record2, "error_log_id")} as ${field(record2, "disposition")} at ${field(record2, "resolved_at")}.`;
+}
+function renderErrorSupersede(output) {
+  const record2 = asRecord(output);
+  return `Superseded error ${field(record2, "error_log_id")} \u2192 ${field(record2, "superseded_by_id")} at ${field(record2, "resolved_at")}.`;
+}
+function renderDeliverableList(output) {
+  const deliverables = asArray(asRecord(output).deliverables);
+  if (deliverables.length === 0) {
+    return "No deliverables for this seat.";
+  }
+  return deliverables.map((entry) => {
+    const r = asRecord(entry);
+    const summary = field(r, "summary") === "\u2014" ? "" : ` \u2014 ${field(r, "summary")}`;
+    return `${field(r, "id")}  [${field(r, "kind")}]  ${field(r, "title")}${summary}`;
+  }).join("\n");
+}
+function renderDeliverableDetail(output) {
+  const d = asRecord(asRecord(output).deliverable);
+  const links = asArray(d.links).map((entry) => {
+    const l = asRecord(entry);
+    return `  ${field(l, "kind")}: ${field(l, "label")} <${field(l, "url")}>`;
+  }).join("\n");
+  return [
+    `# ${field(d, "title")} [${field(d, "kind")}]`,
+    field(d, "id"),
+    field(d, "summary") === "\u2014" ? "" : field(d, "summary"),
+    field(d, "content") === "\u2014" ? "" : `content:
+${field(d, "content")}`,
+    `delivered: ${field(d, "delivered_at")}`,
+    `run: ${field(d, "source_run_status")} ${field(d, "source_run_model")}`,
+    `task: ${field(d, "source_task_title")}`,
+    links.length > 0 ? `links:
+${links}` : ""
+  ].filter((line) => line.length > 0).join("\n");
+}
+function renderDeliverableWrite(output) {
+  return `deliverable ${field(asRecord(output), "deliverable_id")} recorded.`;
+}
+function formatSystemHealth(output) {
+  const record2 = asRecord(output);
+  const scope = asRecord(record2.scope);
+  const sections = asRecord(record2.sections);
+  const actions = asArray(record2.top_actions);
+  const findings = asArray(record2.findings);
+  const lines = [
+    `verdict: ${field(record2, "verdict")}  scope: ${field(scope, "mode")}  seats: ${field(scope, "total_seat_count")}  findings: ${findings.length}`
+  ];
+  if (actions.length > 0) {
+    lines.push("top_actions:");
+    for (const action of actions) {
+      const item = asRecord(action);
+      lines.push(`  ${field(item, "label")}  command=${field(item, "command_id")}  schema=${field(item, "schema_ref")}  cli=${field(item, "cli")}`);
+      if (field(item, "help") !== "\u2014") {
+        lines.push(`    ${field(item, "help")}`);
+      }
+    }
   }
-}, toolsUsage(context.binName));
-function toolsUsage(bin) {
-  return `Usage: ${bin} tools list [--provider <name>] [--json]
-  ${bin} tools list \u2014 the discoverable tool catalog the builder reads; live handlers execute only behind signed manifests, guards, credentials, and bindings.`;
+  const fleet = asRecord(sections.fleet);
+  const runs = asRecord(sections.runs);
+  const signals = asRecord(sections.signals);
+  const cascade = asRecord(sections.cascade_setup);
+  const workLoop = asRecord(sections.work_loop);
+  const connectivity = asRecord(sections.connectivity);
+  const sync = asRecord(sections.sync);
+  lines.push(
+    `fleet: agents=${field(fleet, "agent_count")} live=${field(fleet, "live_count")} stale=${field(fleet, "stale_count")} setup_gaps=${field(fleet, "setup_gap_count")}`,
+    `runs: failed_24h=${field(runs, "failed_24h")} failed_7d=${field(runs, "failed_7d")} unresolved_errors=${field(runs, "unresolved_error_count")}`,
+    `signals: off_track=${field(signals, "off_track_count")} pending=${field(signals, "pending_count")}`,
+    `cascade: recommendations=${field(cascade, "recommendation_count")} warnings=${field(cascade, "warning_count")}`,
+    `work_loop: open_issues=${field(workLoop, "open_issue_count")} friction_without_task=${field(workLoop, "friction_without_task_count")} open_or_stalled_tasks=${field(workLoop, "open_or_stalled_task_count")}`,
+    `connectivity: runners=${field(connectivity, "runner_count")} offline_runners=${field(connectivity, "offline_runner_count")} not_ready_runners=${field(connectivity, "not_execute_ready_runner_count")} integrations=${field(connectivity, "integration_count")} disconnected_integrations=${field(connectivity, "disconnected_integration_count")} failed_notifications=${field(connectivity, "failed_notification_count")}`,
+    `sync: latest_brief=${field(sync, "latest_brief_at")} missing_latest_brief=${field(sync, "missing_latest_brief")} flagged_gaps=${field(sync, "flagged_gap_count")}`
+  );
+  return lines.join("\n");
 }
-function formatSkillList(output) {
+function renderSkillList(output) {
   const skills = asArray(asRecord(output).skills);
   if (skills.length === 0) {
     return "No skills found.";
@@ -47176,7 +46866,7 @@ function formatSkillList(output) {
     })
   ].join("\n");
 }
-function formatSkillDetail(output) {
+function renderSkillDetail(output) {
   const skill = asRecord(asRecord(output).skill);
   const required2 = asArray(skill.required_tools).map((entry) => field(asRecord(entry), "tool")).join(", ") || "none";
   const optional2 = asArray(skill.optional_tools).map((entry) => field(asRecord(entry), "tool")).join(", ") || "none";
@@ -47190,7 +46880,7 @@ function formatSkillDetail(output) {
     `files: SKILL.md${files === "SKILL.md" ? "" : `, ${files}`}`
   ].join("\n");
 }
-function formatAssignedSkills(output) {
+function renderAssignedSkills(output) {
   const record2 = asRecord(output);
   const assignments = asArray(record2.assignments);
   if (assignments.length === 0) {
@@ -47205,7 +46895,7 @@ function formatAssignedSkills(output) {
     })
   ].join("\n");
 }
-function formatDependencyCheck(output) {
+function renderDependencyCheck(output) {
   const record2 = asRecord(output);
   const render = (label, items) => {
     if (items.length === 0) {
@@ -47227,12 +46917,10 @@ function formatDependencyCheck(output) {
     render("optional", asArray(record2.optional))
   ].join("\n");
 }
-function packageFromSkillFile(filePath) {
-  return {
-    files: [{ path: "SKILL.md", content: readFileSync2(filePath, "utf8") }]
-  };
+function renderSkillFile(output) {
+  return field(asRecord(output), "content");
 }
-function formatSkillWrite(label) {
+function renderSkillWrite(label) {
   return (output) => {
     const skill = asRecord(asRecord(output).skill);
     const warnings = asArray(asRecord(skill.validation).warnings).length;
@@ -47244,7 +46932,7 @@ function formatSkillWrite(label) {
     ].join("\n");
   };
 }
-function formatAssignment(output) {
+function renderAssignment(output) {
   const record2 = asRecord(output);
   const assignment = asRecord(record2.assignment);
   return [
@@ -47255,7 +46943,7 @@ function formatAssignment(output) {
     `next: ${field(record2, "local_sync_next_step")}`
   ].join("\n");
 }
-function formatRevocation(output) {
+function renderRevocation(output) {
   const record2 = asRecord(output);
   return [
     `Skill assignment revoked: \`${field(record2, "slug")}\` from seat ${field(record2, "seat_id")}`,
@@ -47264,468 +46952,751 @@ function formatRevocation(output) {
     `next: ${field(record2, "local_sync_next_step")}`
   ].join("\n");
 }
-var skillsWrapper = (context, args) => dispatch(context, "skills", args, {
-  create: (ctx, rest) => {
-    const parsed = parseFlags(rest);
-    const body = withOptional({ package: packageFromSkillFile(requireValue2(parsed, "file")) }, {
-      status: optionalValue(parsed, "status")
+function packageFromSkillFile(filePath) {
+  return { files: [{ path: "SKILL.md", content: readFileSync2(filePath, "utf8") }] };
+}
+function bespoke(commandId, build, render, booleanFlags = /* @__PURE__ */ new Set()) {
+  return (context, rest) => {
+    const parsed = parseFlags(rest, /* @__PURE__ */ new Set(["yes", "y", ...booleanFlags]));
+    const body = build(parsed, rest);
+    return execute(context, parsed, commandId, body, render);
+  };
+}
+var statusRecordHandler = bespoke("status.record", (parsed) => {
+  const measurableId = optionalValue(parsed, "measurable-id");
+  const goalId = optionalValue(parsed, "goal-id");
+  const body = {};
+  if (measurableId !== void 0) {
+    const value = parseNumber(parsed, "value", { required: true });
+    body.measurables = [{ id: measurableId, value }];
+  }
+  if (goalId !== void 0) {
+    const state = requireValue2(parsed, "goal-state");
+    if (state !== "on" && state !== "off") {
+      throw new UsageError("--goal-state must be on or off.");
+    }
+    const note = optionalValue(parsed, "goal-note");
+    body.goals = [withOptional({ id: goalId, state }, { note })];
+  }
+  if (measurableId === void 0 && goalId === void 0) {
+    throw new UsageError("Provide --measurable-id (with --value) and/or --goal-id (with --goal-state).");
+  }
+  return body;
+}, renderStatusRecord);
+var agentCreateHandler = (context, rest) => {
+  const parsed = parseFlags(rest, /* @__PURE__ */ new Set(["custom", "yes", "y"]));
+  const templateSlug = optionalValue(parsed, "template");
+  const seatId = requireValue2(parsed, "seat-id");
+  if (parsed.flags.has("custom")) {
+    if (templateSlug !== void 0) {
+      throw new UsageError("Use either --template <slug> or --custom, not both.");
+    }
+    const body2 = withOptional({ seat_id: seatId }, {
+      steward_seat_id: optionalValue(parsed, "steward-seat-id"),
+      lane: optionalValue(parsed, "lane"),
+      model_config: resolveModelConfig(optionalValue(parsed, "model"), optionalValue(parsed, "effort")),
+      what_it_owns: optionalValue(parsed, "owns"),
+      what_success_looks_like: optionalValue(parsed, "success"),
+      what_it_must_never_do_alone: optionalValue(parsed, "never-alone")
     });
-    return execute(ctx, parsed, "skill.create", body, formatSkillWrite("Skill draft created"));
-  },
-  "update-draft": (ctx, rest) => {
-    const parsed = parseFlags(rest);
-    const body = withOptional({
-      slug: requireValue2(parsed, "slug"),
-      package: packageFromSkillFile(requireValue2(parsed, "file"))
-    }, {
+    return execute(context, parsed, "agent.create_custom", body2, agentSetupStateLine);
+  }
+  if (templateSlug === void 0) {
+    throw new UsageError("Provide --template <slug> or --custom.");
+  }
+  const body = withOptional({ seat_id: seatId, template_slug: templateSlug }, {
+    expected_template_version: optionalValue(parsed, "expected-version")
+  });
+  return execute(context, parsed, "agent.create_from_template", body, agentSetupStateLine);
+};
+var agentSetupAnswerHandler = bespoke("agent_setup.update", (parsed) => {
+  const body = withOptional({ seat_id: requireValue2(parsed, "seat-id") }, {
+    parent_seat_id: optionalValue(parsed, "parent-seat-id"),
+    steward_seat_id: optionalValue(parsed, "steward-seat-id"),
+    lane: optionalValue(parsed, "lane"),
+    schedule_cron: optionalValue(parsed, "schedule-cron"),
+    model_config: resolveModelConfig(optionalValue(parsed, "model"), optionalValue(parsed, "effort")),
+    answers: parseList(parsed, "answers")
+  });
+  if (Object.keys(body).length <= 1) {
+    throw new UsageError("Provide at least one of --parent-seat-id, --steward-seat-id, --lane, --schedule-cron, --model, --answers.");
+  }
+  return body;
+}, agentSetupStateLine);
+function agentConfigureToolsHandler(decision) {
+  return bespoke("agent.configure_tools", (parsed) => ({
+    seat_id: requireValue2(parsed, "seat-id"),
+    tool_decisions: [{ tool: requireValue2(parsed, "tool"), decision }]
+  }), renderAgentConfigureTools);
+}
+var skillCreateHandler = bespoke(
+  "skill.create",
+  (parsed) => withOptional({ package: packageFromSkillFile(requireValue2(parsed, "file")) }, { status: optionalValue(parsed, "status") }),
+  renderSkillWrite("Skill draft created")
+);
+var skillUpdateDraftHandler = bespoke(
+  "skill.update_draft",
+  (parsed) => withOptional({ slug: requireValue2(parsed, "slug"), package: packageFromSkillFile(requireValue2(parsed, "file")) }, { status: optionalValue(parsed, "status") }),
+  renderSkillWrite("Skill draft updated")
+);
+var skillPublishHandler = bespoke("skill.publish", (parsed) => withOptional({ allow_warnings: parsed.flags.has("allow-warnings") }, {
+  slug: optionalValue(parsed, "slug"),
+  skill_version_id: optionalValue(parsed, "skill-version-id")
+}), renderSkillWrite("Skill published"), /* @__PURE__ */ new Set(["allow-warnings"]));
+var skillImportHandler = (context, rest) => {
+  const [kind, ...remaining] = rest;
+  if (kind === "github") {
+    const parsed = parseFlags(remaining, /* @__PURE__ */ new Set(["yes", "y"]));
+    const body = withOptional({ url: requireValue2(parsed, "url") }, {
+      ref: optionalValue(parsed, "ref"),
+      path: optionalValue(parsed, "path"),
       status: optionalValue(parsed, "status")
     });
-    return execute(ctx, parsed, "skill.update_draft", body, formatSkillWrite("Skill draft updated"));
+    return execute(context, parsed, "skill.import_github", body, renderSkillWrite("GitHub skill imported"));
+  }
+  if (kind === "upload") {
+    const parsed = parseFlags(remaining, /* @__PURE__ */ new Set(["yes", "y"]));
+    const body = withOptional({ package: packageFromSkillFile(requireValue2(parsed, "file")) }, { status: optionalValue(parsed, "status") });
+    return execute(context, parsed, "skill.import_upload", body, renderSkillWrite("Uploaded skill imported"));
+  }
+  throw new UsageError(`Usage: ${context.binName} skills import github|upload ...`);
+};
+var skillAssignHandler = bespoke("skill.assign_to_seat", (parsed) => withOptional({
+  seat_id: requireValue2(parsed, "seat-id"),
+  status: parsed.flags.has("approve") ? "approved" : "proposed",
+  rationale: optionalValue(parsed, "rationale") ?? "Skill assignment requested from the CLI.",
+  allow_blocked_proposal: parsed.flags.has("allow-blocked-proposal")
+}, {
+  slug: optionalValue(parsed, "slug") ?? optionalValue(parsed, "skill"),
+  skill_version_id: optionalValue(parsed, "skill-version-id")
+}), renderAssignment, /* @__PURE__ */ new Set(["approve", "allow-blocked-proposal"]));
+var skillRevokeHandler = bespoke("skill.revoke_from_seat", (parsed) => withOptional({}, {
+  assignment_id: optionalValue(parsed, "assignment-id"),
+  seat_id: optionalValue(parsed, "seat-id"),
+  slug: optionalValue(parsed, "slug") ?? optionalValue(parsed, "skill"),
+  skill_version_id: optionalValue(parsed, "skill-version-id"),
+  rationale: optionalValue(parsed, "rationale")
+}), renderRevocation);
+var skillListHandler = bespoke("skill.list", (parsed) => withOptional({}, {
+  status: optionalValue(parsed, "status"),
+  visibility: optionalValue(parsed, "visibility"),
+  query: optionalValue(parsed, "query"),
+  include_archived: parsed.flags.has("include-archived") ? true : void 0
+}), renderSkillList, /* @__PURE__ */ new Set(["include-archived"]));
+var frictionFileHandler = bespoke("friction.file_issue", (parsed) => withOptional({
+  summary: requireValue2(parsed, "summary"),
+  severity: requireValue2(parsed, "severity"),
+  evidence: parseList(parsed, "evidence") ?? []
+}, {
+  blocking_goal_id: optionalValue(parsed, "blocking-goal-id"),
+  broken_measurable_id: optionalValue(parsed, "broken-measurable-id")
+}), renderFrictionFile);
+function integrationLookupBody(parsed) {
+  const body = withOptional({}, {
+    provider: optionalValue(parsed, "provider"),
+    integration_id: optionalValue(parsed, "integration-id")
+  });
+  if (Object.keys(body).length === 0) {
+    throw new UsageError("Provide --provider or --integration-id.");
+  }
+  return body;
+}
+var integrationStatusHandler = bespoke("integration.status", integrationLookupBody, renderIntegrationStatus);
+var integrationTestHandler = bespoke("integration.test", integrationLookupBody, renderIntegrationTest);
+var settingsUpdateHandler = bespoke("settings.update", (parsed) => {
+  const body = withOptional({}, {
+    soft_cap_usd: optionalValue(parsed, "soft-cap-usd"),
+    hard_cap_usd: optionalValue(parsed, "hard-cap-usd")
+  });
+  if (Object.keys(body).length === 0) {
+    throw new UsageError("Provide --soft-cap-usd and/or --hard-cap-usd.");
+  }
+  return body;
+}, renderSettingsUpdate);
+var settingsRenameHandler = bespoke("tenant.rename", (parsed) => {
+  const companyName = optionalValue(parsed, "company");
+  if (!companyName) {
+    throw new UsageError("Provide --company <name>.");
+  }
+  return { company_name: companyName };
+}, renderTenantRename);
+var goalUpdateHandler = bespoke("goal.update", (parsed) => {
+  const rejectBlank = (key, label) => {
+    const raw = parsed.values.get(key);
+    if (raw !== void 0 && raw.trim().length === 0) {
+      throw new UsageError(`${label} must not be empty.`);
+    }
+  };
+  rejectBlank("title", "--title");
+  rejectBlank("definition-of-done", "--definition-of-done");
+  const title = optionalValue(parsed, "title");
+  const definitionOfDone = optionalValue(parsed, "definition-of-done");
+  if (title === void 0 && definitionOfDone === void 0) {
+    throw new UsageError("Provide --title and/or --definition-of-done.");
+  }
+  return withOptional({ goal_id: requireValue2(parsed, "goal-id") }, { title, definition_of_done: definitionOfDone });
+}, renderGoalUpdate);
+var productLearningUpdateHandler = bespoke("settings.product_learning.update", (parsed) => {
+  const mode = optionalValue(parsed, "mode");
+  if (mode !== "enabled" && mode !== "disabled" && mode !== "enterprise_contract") {
+    throw new UsageError("Provide --mode enabled|disabled|enterprise_contract.");
+  }
+  return { mode };
+}, renderProductLearningUpdate);
+var agentPolicySetHandler = bespoke("settings.agent_policy.update", (parsed) => {
+  const profile = optionalValue(parsed, "profile");
+  if (profile !== "locked_down" && profile !== "balanced" && profile !== "high_autonomy" && profile !== "custom") {
+    throw new UsageError("Provide --profile locked_down|balanced|high_autonomy|custom.");
+  }
+  return withOptional({ profile }, {
+    max_autonomous_risk: optionalValue(parsed, "max-autonomous-risk"),
+    enforcement: optionalValue(parsed, "enforcement")
+  });
+}, renderAgentPolicySet);
+var seatDecommissionHandler = (context, rest) => {
+  const parsed = parseFlags(rest, /* @__PURE__ */ new Set(["dry-run", "preview", "yes", "y"]));
+  if (parsed.flags.has("dry-run") || parsed.flags.has("preview")) {
+    return execute(context, parsed, "seat.decommission_preview", { seat_id: requireValue2(parsed, "seat-id") }, renderSeatDecommissionPreview);
+  }
+  return execute(context, parsed, "seat.decommission", { seat_id: requireValue2(parsed, "seat-id") }, renderSeatMutation);
+};
+var settingsProductLearningHandler = (context, rest) => dispatch(context, "settings product-learning", rest, {
+  get: (ctx, r) => {
+    const parsed = parseFlags(r, /* @__PURE__ */ new Set(["yes", "y"]));
+    return execute(ctx, parsed, "settings.product_learning.get", {}, renderProductLearningGet);
   },
-  publish: (ctx, rest) => {
-    const parsed = parseFlags(rest, /* @__PURE__ */ new Set(["allow-warnings"]));
-    const body = withOptional({ allow_warnings: parsed.flags.has("allow-warnings") }, {
-      slug: optionalValue(parsed, "slug"),
-      skill_version_id: optionalValue(parsed, "skill-version-id")
+  update: (ctx, r) => productLearningUpdateHandler(ctx, r)
+}, `Usage: ${context.binName} settings product-learning get|update --mode enabled|disabled|enterprise_contract`);
+var settingsAgentPolicyHandler = (context, rest) => dispatch(context, "settings agent-policy", rest, {
+  get: (ctx, r) => {
+    const parsed = parseFlags(r, /* @__PURE__ */ new Set(["yes", "y"]));
+    return execute(ctx, parsed, "settings.agent_policy.get", {}, renderAgentPolicyGet);
+  },
+  set: (ctx, r) => agentPolicySetHandler(ctx, r)
+}, `Usage: ${context.binName} settings agent-policy get|set --profile locked_down|balanced|high_autonomy|custom [--max-autonomous-risk <r>] [--enforcement enforce|observe]`);
+var agentSetupHandler = (context, rest) => dispatch(context, "agent setup", rest, {
+  status: (ctx, r) => {
+    const parsed = parseFlags(r, /* @__PURE__ */ new Set(["yes", "y"]));
+    const body = withOptional({}, {
+      setup_id: optionalValue(parsed, "setup-id"),
+      seat_id: optionalValue(parsed, "seat-id")
     });
-    return execute(ctx, parsed, "skill.publish", body, formatSkillWrite("Skill published"));
+    if (Object.keys(body).length === 0) {
+      throw new UsageError("Provide --setup-id or --seat-id.");
+    }
+    return execute(ctx, parsed, "agent_setup.get", body, agentSetupStateLine);
   },
-  import: (ctx, rest) => {
-    const [kind, ...remaining] = rest;
-    if (kind === "github") {
-      const parsed = parseFlags(remaining);
-      const body = withOptional({ url: requireValue2(parsed, "url") }, {
-        ref: optionalValue(parsed, "ref"),
-        path: optionalValue(parsed, "path"),
-        status: optionalValue(parsed, "status")
-      });
-      return execute(ctx, parsed, "skill.import_github", body, formatSkillWrite("GitHub skill imported"));
+  answer: (ctx, r) => agentSetupAnswerHandler(ctx, r)
+}, `Usage: ${context.binName} agent setup status|answer ...`);
+var agentToolsHandler = (context, rest) => dispatch(context, "agent tools", rest, {
+  connect: agentConfigureToolsHandler("connect"),
+  decline: agentConfigureToolsHandler("decline")
+}, `Usage: ${context.binName} agent tools connect|decline --seat-id <id> --tool <name>`);
+var systemHealthHandler = bespoke("system.health", (parsed) => withOptional({}, { seat_id: parsed.seat }), formatSystemHealth);
+var deliverableGetHandler = bespoke("deliverable.get", (parsed) => ({
+  seat_id: requireValue2(parsed, "seat-id"),
+  deliverable_id: requireValue2(parsed, "deliverable-id")
+}), renderDeliverableDetail);
+var GROUP_SPECS = {
+  graph: {
+    verbs: {
+      show: { commandId: "graph.get", render: renderGraph },
+      get: { commandId: "graph.get", render: renderGraph }
     }
-    if (kind === "upload") {
-      const parsed = parseFlags(remaining);
-      const body = withOptional({ package: packageFromSkillFile(requireValue2(parsed, "file")) }, {
-        status: optionalValue(parsed, "status")
-      });
-      return execute(ctx, parsed, "skill.import_upload", body, formatSkillWrite("Uploaded skill imported"));
+  },
+  seat: {
+    verbs: {
+      list: { commandId: "graph.get", render: renderSeatList, usage: "seat list" },
+      get: { commandId: "seat.get", render: renderSeatDetail, primaryPositional: "seat_id" },
+      create: { commandId: "seat.create", render: renderSeatMutation, flagAliases: { type: "seat_type" } },
+      rename: { commandId: "seat.rename", render: renderSeatMutation },
+      reparent: { commandId: "seat.reparent", render: renderSeatMutation, flagAliases: { "parent-seat-id": "new_parent_seat_id" } },
+      decommission: { commandId: "seat.decommission", render: renderSeatMutation, handler: seatDecommissionHandler }
     }
-    throw new UsageError(`Usage: ${ctx.binName} skills import github|upload ...`);
   },
-  list: (ctx, rest) => {
-    const parsed = parseFlags(rest, /* @__PURE__ */ new Set(["include-archived"]));
-    const body = withOptional({}, {
-      status: optionalValue(parsed, "status"),
-      visibility: optionalValue(parsed, "visibility"),
-      query: optionalValue(parsed, "query"),
-      include_archived: parsed.flags.has("include-archived") ? true : void 0
-    });
-    return execute(ctx, parsed, "skill.list", body, formatSkillList);
+  task: {
+    verbs: {
+      list: { commandId: "task.list", render: renderTaskList },
+      accept: { commandId: "task.accept", render: renderTaskAccept, primaryPositional: "id" },
+      decline: { commandId: "task.decline", render: renderTaskDecline },
+      complete: { commandId: "task.complete", render: renderTaskComplete },
+      create: { commandId: "task.create", render: renderTaskCreate }
+    }
+  },
+  status: {
+    verbs: {
+      record: { commandId: "status.record", handler: statusRecordHandler, render: renderStatusRecord, usage: "status record --measurable-id <id> --value <n> | --goal-id <id> --goal-state on|off [--goal-note <text>]" }
+    }
   },
-  get: (ctx, rest) => {
-    const parsed = parseFlags(rest);
-    return execute(ctx, parsed, "skill.get", { slug: requireValue2(parsed, "slug") }, formatSkillDetail);
+  signal: {
+    verbs: {
+      list: { commandId: "signal.list", render: renderSignalList },
+      get: { commandId: "signal.get", render: renderSignalGet, primaryPositional: "measurable_id" },
+      confirm: { commandId: "signal.confirm_reading", render: renderSignalConfirm },
+      correct: { commandId: "signal.correct_reading", render: renderSignalCorrect }
+    }
   },
-  file: (ctx, rest) => {
-    const parsed = parseFlags(rest);
-    const body = { slug: requireValue2(parsed, "slug"), path: requireValue2(parsed, "path") };
-    return execute(ctx, parsed, "skill.file.get", body, (output) => field(asRecord(output), "content"));
+  goal: {
+    verbs: {
+      list: { commandId: "goal.list", render: renderGoalList },
+      create: { commandId: "goal.create", render: renderGoalCreate },
+      update: { commandId: "goal.update", handler: goalUpdateHandler, render: renderGoalUpdate },
+      status: { commandId: "goal.set_status", render: renderGoalStatus },
+      reparent: { commandId: "goal.reparent", render: renderGoalReparent },
+      drop: { commandId: "goal.drop", render: renderGoalDrop }
+    }
   },
-  assigned: (ctx, rest) => {
-    const parsed = parseFlags(rest);
-    const body = withOptional({}, { seat_id: optionalValue(parsed, "seat-id") });
-    return execute(ctx, parsed, "skill.assigned.list", body, formatAssignedSkills);
+  friction: {
+    verbs: {
+      list: { commandId: "friction.list", render: renderFrictionList },
+      file: { commandId: "friction.file_issue", handler: frictionFileHandler, render: renderFrictionFile },
+      resolve: { commandId: "friction.resolve", render: renderFrictionResolve },
+      link: { commandId: "friction.link_task", render: renderFrictionLink }
+    }
   },
-  "check-dependencies": (ctx, rest) => {
-    const parsed = parseFlags(rest);
-    const body = withOptional({ seat_id: requireValue2(parsed, "seat-id") }, {
-      slug: optionalValue(parsed, "slug"),
-      skill_version_id: optionalValue(parsed, "skill-version-id")
-    });
-    return execute(ctx, parsed, "skill.check_dependencies", body, formatDependencyCheck);
+  escalation: {
+    verbs: {
+      list: { commandId: "escalation.list", render: renderEscalationList },
+      get: { commandId: "escalation.get", render: renderEscalationGet, primaryPositional: "id" },
+      resolve: { commandId: "escalation.resolve", render: renderEscalationResolve },
+      reject: { commandId: "escalation.reject", render: renderEscalationReject }
+    }
   },
-  assign: (ctx, rest) => {
-    const parsed = parseFlags(rest, /* @__PURE__ */ new Set(["approve", "allow-blocked-proposal"]));
-    const body = withOptional({
-      seat_id: requireValue2(parsed, "seat-id"),
-      status: parsed.flags.has("approve") ? "approved" : "proposed",
-      rationale: optionalValue(parsed, "rationale") ?? "Skill assignment requested from the CLI.",
-      allow_blocked_proposal: parsed.flags.has("allow-blocked-proposal")
-    }, {
-      slug: optionalValue(parsed, "slug") ?? optionalValue(parsed, "skill"),
-      skill_version_id: optionalValue(parsed, "skill-version-id")
-    });
-    return execute(ctx, parsed, "skill.assign_to_seat", body, formatAssignment);
+  sync: {
+    verbs: {
+      brief: { commandId: "sync.brief.get", render: renderSyncBrief },
+      compile: { commandId: "sync.brief.compile", render: renderSyncCompile },
+      complete: { commandId: "sync.run.complete", render: renderSyncComplete }
+    }
   },
-  revoke: (ctx, rest) => {
-    const parsed = parseFlags(rest);
-    const body = withOptional({}, {
-      assignment_id: optionalValue(parsed, "assignment-id"),
-      seat_id: optionalValue(parsed, "seat-id"),
-      slug: optionalValue(parsed, "slug") ?? optionalValue(parsed, "skill"),
-      skill_version_id: optionalValue(parsed, "skill-version-id"),
-      rationale: optionalValue(parsed, "rationale")
-    });
-    return execute(ctx, parsed, "skill.revoke_from_seat", body, formatRevocation);
-  }
-}, skillsUsage(context.binName));
-function skillsUsage(bin) {
-  return `Usage: ${bin} skills create|update-draft|publish|import|list|get|file|assigned|check-dependencies|assign|revoke [--json]
-  ${bin} skills create --file ./SKILL.md [--status draft|pending_review]
-  ${bin} skills update-draft --slug <slug> --file ./SKILL.md [--status draft|pending_review]
-  ${bin} skills import github --url <github-url> [--ref <ref>] [--path <dir>] [--status draft|pending_review]
-  ${bin} skills import upload --file ./SKILL.md [--status draft|pending_review]
-  ${bin} skills publish (--slug <slug>|--skill-version-id <id>) [--allow-warnings]
-  ${bin} skills list [--status draft|pending_review|published|archived] [--visibility private|seat|tenant] [--query <text>]
-  ${bin} skills get --slug <slug>
-  ${bin} skills file --slug <slug> --path SKILL.md
-  ${bin} skills assigned [--seat-id <id>] [--seat <id>]
-  ${bin} skills check-dependencies --seat-id <id> (--slug <slug>|--skill-version-id <id>)
-  ${bin} skills assign --seat-id <id> (--slug <slug>|--skill-version-id <id>) [--approve] [--allow-blocked-proposal]
-  ${bin} skills revoke (--assignment-id <id>|--seat-id <id> --slug <slug>)`;
-}
-var modelWrapper = (context, args) => dispatch(context, "model", args, {
-  list: (ctx, rest) => {
-    const parsed = parseFlags(rest);
-    return execute(ctx, parsed, "model.catalog", {}, (output) => {
-      const record2 = asRecord(output);
-      const tiers = asArray(record2.tiers);
-      const header = `# Model tiers
+  runner: {
+    verbs: {
+      list: { commandId: "runner.list", render: renderRunnerList },
+      status: { commandId: "runner.status", render: renderRunnerStatus },
+      diagnose: { commandId: "runner.diagnose", render: renderRunnerDiagnose },
+      repair: { commandId: "runner.repair", render: renderRunnerRepair },
+      "work-orders": { commandId: "work_order.list", render: renderWorkOrders },
+      revoke: { commandId: "runner.revoke", render: renderRunnerRevoke }
+    }
+  },
+  notification: {
+    verbs: {
+      settings: { commandId: "notification.settings.get", render: renderNotificationSettings },
+      test: { commandId: "notification.test", render: renderNotificationTest },
+      errors: { commandId: "notification.list_errors", render: renderNotificationErrors }
+    }
+  },
+  integration: {
+    verbs: {
+      list: { commandId: "integration.list", render: renderIntegrationList },
+      readiness: { commandId: "integration.readiness", render: renderIntegrationReadiness },
+      status: { commandId: "integration.status", handler: integrationStatusHandler, render: renderIntegrationStatus },
+      test: { commandId: "integration.test", handler: integrationTestHandler, render: renderIntegrationTest }
+    }
+  },
+  settings: {
+    verbs: {
+      get: { commandId: "settings.get", render: renderSettingsGet },
+      update: { commandId: "settings.update", handler: settingsUpdateHandler, render: renderSettingsUpdate },
+      "product-learning": { commandId: "settings.product_learning.get", handler: settingsProductLearningHandler },
+      "agent-policy": { commandId: "settings.agent_policy.get", handler: settingsAgentPolicyHandler },
+      rename: { commandId: "tenant.rename", handler: settingsRenameHandler, render: renderTenantRename }
+    }
+  },
+  member: {
+    verbs: {
+      invite: { commandId: "member.invite", render: renderMemberInvite },
+      update: { commandId: "member.update", render: renderMemberUpdate },
+      remove: { commandId: "member.remove", render: renderMemberRemove }
+    }
+  },
+  agent: {
+    verbs: {
+      templates: { commandId: "agent_template.list", render: renderAgentTemplates },
+      create: { commandId: "agent.create_from_template", handler: agentCreateHandler, usage: "agent create --seat-id <id> (--template <slug> | --custom [--model <tier|id>] [--owns <t>] [--success <t>] [--never-alone <t>])" },
+      setup: { commandId: "agent_setup.get", handler: agentSetupHandler, usage: "agent setup status|answer ..." },
+      tools: { commandId: "agent.configure_tools", handler: agentToolsHandler, usage: "agent tools connect|decline --seat-id <id> --tool <name>" },
+      "dry-run": { commandId: "agent.run_dry_run", render: renderAgentDryRun },
+      "go-live": { commandId: "agent.go_live", render: renderAgentGoLive },
+      status: { commandId: "agent.status", render: renderAgentStatus, primaryPositional: "seat_id" },
+      "run-now": { commandId: "agent.run_now", render: renderAgentRunNow },
+      "fleet-digest": { commandId: "agent.fleet_digest", render: renderAgentFleetDigest },
+      "get-run": { commandId: "agent.get_run", render: renderAgentGetRun },
+      show: { commandId: "agent.show_markdown", render: markdownLine }
+    }
+  },
+  tools: {
+    verbs: {
+      list: { commandId: "tool.catalog", render: renderToolCatalog }
+    }
+  },
+  skills: {
+    verbs: {
+      create: { commandId: "skill.create", handler: skillCreateHandler },
+      "update-draft": { commandId: "skill.update_draft", handler: skillUpdateDraftHandler },
+      publish: { commandId: "skill.publish", handler: skillPublishHandler },
+      import: { commandId: "skill.import_upload", handler: skillImportHandler, usage: "skills import github|upload ..." },
+      list: { commandId: "skill.list", handler: skillListHandler },
+      get: { commandId: "skill.get", render: renderSkillDetail },
+      file: { commandId: "skill.file.get", render: renderSkillFile },
+      assigned: { commandId: "skill.assigned.list", render: renderAssignedSkills },
+      "check-dependencies": { commandId: "skill.check_dependencies", render: renderDependencyCheck },
+      assign: { commandId: "skill.assign_to_seat", handler: skillAssignHandler },
+      revoke: { commandId: "skill.revoke_from_seat", handler: skillRevokeHandler }
+    }
+  },
+  model: {
+    verbs: {
+      list: { commandId: "model.catalog", render: renderModelCatalog }
+    }
+  },
+  error: {
+    verbs: {
+      list: { commandId: "error_log.list", render: renderErrorList },
+      resolve: { commandId: "error_log.resolve", render: renderErrorResolve },
+      supersede: { commandId: "error_log.supersede", render: renderErrorSupersede }
+    }
+  },
+  compass: {
+    verbs: {
+      show: { commandId: "compass.show_markdown", render: markdownLine }
+    }
+  },
+  charter: {
+    verbs: {
+      show: { commandId: "charter.show_markdown", render: markdownLine }
+    }
+  },
+  deliverable: {
+    verbs: {
+      list: { commandId: "deliverable.list", render: renderDeliverableList },
+      get: { commandId: "deliverable.get", handler: deliverableGetHandler, render: renderDeliverableDetail },
+      create: { commandId: "deliverable.create", render: renderDeliverableWrite, defaults: { kind: "other" } },
+      attach: { commandId: "deliverable.attach", render: renderDeliverableWrite, defaults: { kind: "other" } }
+    }
+  },
+  system: {
+    verbs: {
+      health: { commandId: "system.health", handler: systemHealthHandler, render: formatSystemHealth }
+    }
+  }
+};
 
-${field(record2, "note")}
-`;
-      if (tiers.length === 0) {
-        return `${header}
-No model tiers are configured.`;
+// src/generator/flags.ts
+function booleanFlagsFor(entry, overrides = {}) {
+  const booleanFields = new Set(entry.fields.filter((field3) => field3.type === "boolean").map((field3) => field3.name));
+  const flags = /* @__PURE__ */ new Set(["yes", "y"]);
+  for (const field3 of entry.fields) {
+    if (field3.type === "boolean") {
+      flags.add(field3.flag);
+    }
+  }
+  for (const [aliasFlag, fieldName] of Object.entries(overrides.flagAliases ?? {})) {
+    if (booleanFields.has(fieldName)) {
+      flags.add(aliasFlag);
+    }
+  }
+  return flags;
+}
+function coerceScalar(field3, raw) {
+  switch (field3.type) {
+    case "integer": {
+      const value = Number(raw);
+      if (!Number.isSafeInteger(value)) {
+        throw new UsageError(`--${field3.flag} must be an integer.`);
       }
-      const defaultTier = field(record2, "default_tier");
-      const lines = tiers.map((entry) => {
-        const r = asRecord(entry);
-        const tier = field(r, "tier");
-        const recommended = r.recommended === true || tier === defaultTier ? " recommended" : "";
-        const bestFor = asArray(r.best_for).map(String).join(", ");
-        return [
-          `- \`${tier}\` [${field(r, "provider")}/${field(r, "model")} \xB7 effort ${field(r, "effort")} \xB7 cost ${field(r, "cost_band")}${recommended}]`,
-          `  ${field(r, "description")}`,
-          `  Best for: ${bestFor}`,
-          `  Price: $${field(r, "input_usd_per_million_tokens")}/1M input \xB7 $${field(r, "output_usd_per_million_tokens")}/1M output`,
-          `  Cost: ${field(r, "cost_note")}`,
-          `  Avoid for: ${field(r, "avoid_for")}`
-        ].join("\n");
-      });
-      return `${header}
-${lines.join("\n")}`;
-    });
+      return value;
+    }
+    case "number": {
+      const value = Number(raw);
+      if (!Number.isFinite(value)) {
+        throw new UsageError(`--${field3.flag} must be a finite number.`);
+      }
+      return value;
+    }
+    case "array":
+      return raw.split(",").map((entry) => entry.trim()).filter((entry) => entry.length > 0);
+    default:
+      return raw;
   }
-}, modelUsage(context.binName));
-function modelUsage(bin) {
-  return `Usage: ${bin} model list [--json]
-  ${bin} model list \u2014 guided model tiers with recommendations, token prices, cost bands, and model ids for --model.`;
 }
-var errorWrapper = (context, args) => dispatch(context, "error", args, {
-  list: (ctx, rest) => {
-    const parsed = parseFlags(rest);
-    const body = withOptional({}, {
-      seat_id: optionalValue(parsed, "seat-id"),
-      source: optionalValue(parsed, "source"),
-      severity: optionalValue(parsed, "severity"),
-      resolved: optionalValue(parsed, "resolved"),
-      limit: optionalNumber(parsed, "limit")
-    });
-    return execute(ctx, parsed, "error_log.list", body, (output) => {
-      const record2 = asRecord(output);
-      const errors = asArray(record2.errors);
-      if (errors.length === 0) {
-        return "No error logs matching the filter.";
+function rawValueForField(entry, field3, parsed, aliasFlags) {
+  const canonical = parsed.values.get(field3.flag);
+  if (canonical !== void 0) {
+    return canonical;
+  }
+  for (const [aliasFlag, targetField] of aliasFlags) {
+    if (targetField === field3.name) {
+      const value = parsed.values.get(aliasFlag);
+      if (value !== void 0) {
+        return value;
       }
-      return errors.map((entry) => {
-        const r = asRecord(entry);
-        const disposition = field(r, "disposition");
-        const marker = disposition === "active" ? "*" : " ";
-        const severityLabel = field(r, "severity").charAt(0).toUpperCase();
-        return `${marker} ${field(r, "error_log_id")}  [${severityLabel}]  ${field(r, "source")}  ${disposition}  ${field(r, "code")} ${field(r, "message")}  ${field(r, "created_at")}`;
-      }).join("\n") + (field(record2, "total") !== "" ? `
-Total: ${field(record2, "total")}` : "");
-    });
-  },
-  resolve: (ctx, rest) => {
-    const parsed = parseFlags(rest);
-    const errorLogId = requireValue2(parsed, "error-log-id");
-    const reason = requireValue2(parsed, "reason");
-    const body = withOptional({
-      error_log_id: errorLogId,
-      reason
-    }, {
-      disposition: optionalValue(parsed, "disposition"),
-      linked_task_id: optionalValue(parsed, "linked-task-id"),
-      linked_issue_id: optionalValue(parsed, "linked-issue-id"),
-      linked_pr_ref: optionalValue(parsed, "linked-pr-ref")
-    });
-    return execute(ctx, parsed, "error_log.resolve", body, (output) => {
-      const record2 = asRecord(output);
-      return `Resolved error ${field(record2, "error_log_id")} as ${field(record2, "disposition")} at ${field(record2, "resolved_at")}.`;
-    });
-  },
-  supersede: (ctx, rest) => {
-    const parsed = parseFlags(rest);
-    const body = withOptional({
-      error_log_id: requireValue2(parsed, "error-log-id"),
-      new_error_log_id: requireValue2(parsed, "new-error-log-id"),
-      reason: requireValue2(parsed, "reason")
-    }, {
-      linked_task_id: optionalValue(parsed, "linked-task-id"),
-      linked_issue_id: optionalValue(parsed, "linked-issue-id"),
-      linked_pr_ref: optionalValue(parsed, "linked-pr-ref")
-    });
-    return execute(ctx, parsed, "error_log.supersede", body, (output) => {
-      const record2 = asRecord(output);
-      return `Superseded error ${field(record2, "error_log_id")} \u2192 ${field(record2, "superseded_by_id")} at ${field(record2, "resolved_at")}.`;
-    });
+    }
   }
-}, errorUsage(context.binName));
-function errorUsage(bin) {
-  return `Usage: ${bin} error list|resolve|supersede [--json]
-  ${bin} error list [--seat-id <id>] [--source run|llm|tool|mcp|runner|integration|job|web] [--severity warning|error|critical] [--resolved active|acknowledged|resolved|all] [--limit <n>]
-  ${bin} error resolve --error-log-id <id> --reason <text> [--disposition acknowledged|resolved] [--linked-task-id <id>] [--linked-issue-id <id>] [--linked-pr-ref <url>]
-  ${bin} error supersede --error-log-id <id> --new-error-log-id <id> --reason <text> [--linked-task-id <id>] [--linked-issue-id <id>] [--linked-pr-ref <url>]`;
-}
-var compassWrapper = (context, args) => dispatch(context, "compass", args, {
-  show: (ctx, rest) => {
-    const parsed = parseFlags(rest, /* @__PURE__ */ new Set(["markdown"]));
-    return execute(ctx, parsed, "compass.show_markdown", {}, markdownLine);
-  }
-}, compassUsage(context.binName));
-function compassUsage(bin) {
-  return `Usage: ${bin} compass show [--markdown] [--json]
-  ${bin} compass show --markdown \u2014 render the current Compass and its open gaps as a markdown card.`;
-}
-var charterWrapper = (context, args) => dispatch(context, "charter", args, {
-  show: (ctx, rest) => {
-    const parsed = parseFlags(rest, /* @__PURE__ */ new Set(["markdown"]));
-    const seatId = requireValue2(parsed, "seat-id");
-    return execute(ctx, parsed, "charter.show_markdown", { seat_id: seatId }, markdownLine);
-  }
-}, charterUsage(context.binName));
-function charterUsage(bin) {
-  return `Usage: ${bin} charter show --seat-id <id> [--markdown] [--json]
-  ${bin} charter show --seat-id <id> --markdown \u2014 render a seat's active or latest Charter as a markdown card.`;
-}
-function formatDeliverableList(output) {
-  const deliverables = asArray(asRecord(output).deliverables);
-  if (deliverables.length === 0) {
-    return "No deliverables for this seat.";
+  return void 0;
+}
+function buildBodyFromFlags(entry, parsed, positional, overrides = {}) {
+  if (entry.secretBlocked) {
+    throw new UsageError(SECRET_ARGV_GUIDANCE);
   }
-  return deliverables.map((entry) => {
-    const r = asRecord(entry);
-    const summary = field(r, "summary") === "\u2014" ? "" : ` \u2014 ${field(r, "summary")}`;
-    return `${field(r, "id")}  [${field(r, "kind")}]  ${field(r, "title")}${summary}`;
-  }).join("\n");
+  const inputJson = parsed.values.get("input") ?? parsed.values.get("body");
+  if (inputJson !== void 0) {
+    let parsedInput;
+    try {
+      parsedInput = JSON.parse(inputJson);
+    } catch {
+      throw new UsageError("--input must be valid JSON.");
+    }
+    if (typeof parsedInput !== "object" || parsedInput === null || Array.isArray(parsedInput)) {
+      throw new UsageError("--input must be a JSON object.");
+    }
+    return parsedInput;
+  }
+  const aliasFlags = new Map(Object.entries(overrides.flagAliases ?? {}));
+  const body = {};
+  for (const field3 of entry.fields) {
+    if (field3.type === "boolean") {
+      if (parsed.flags.has(field3.flag)) {
+        body[field3.name] = true;
+      } else {
+        for (const [aliasFlag, targetField] of aliasFlags) {
+          if (targetField === field3.name && parsed.flags.has(aliasFlag)) {
+            body[field3.name] = true;
+            break;
+          }
+        }
+      }
+      continue;
+    }
+    let raw = rawValueForField(entry, field3, parsed, aliasFlags);
+    if (raw === void 0 && positional !== void 0 && overrides.primaryPositional === field3.name) {
+      raw = positional;
+    }
+    if (raw === void 0 || raw.length === 0) {
+      continue;
+    }
+    body[field3.name] = coerceScalar(field3, raw);
+  }
+  for (const [fieldName, value] of Object.entries(overrides.defaults ?? {})) {
+    if (!(fieldName in body)) {
+      body[fieldName] = value;
+    }
+  }
+  const missing = entry.fields.find((field3) => field3.required && !(field3.name in body));
+  if (missing) {
+    throw new UsageError(`Missing required --${missing.flag} value.`);
+  }
+  return body;
 }
-function formatDeliverableDetail(output) {
-  const d = asRecord(asRecord(output).deliverable);
-  const links = asArray(d.links).map((entry) => {
-    const l = asRecord(entry);
-    return `  ${field(l, "kind")}: ${field(l, "label")} <${field(l, "url")}>`;
-  }).join("\n");
-  return [
-    `# ${field(d, "title")} [${field(d, "kind")}]`,
-    field(d, "id"),
-    field(d, "summary") === "\u2014" ? "" : field(d, "summary"),
-    field(d, "content") === "\u2014" ? "" : `content:
-${field(d, "content")}`,
-    `delivered: ${field(d, "delivered_at")}`,
-    `run: ${field(d, "source_run_status")} ${field(d, "source_run_model")}`,
-    `task: ${field(d, "source_task_title")}`,
-    links.length > 0 ? `links:
-${links}` : ""
-  ].filter((line) => line.length > 0).join("\n");
+
+// src/generator/verbs.ts
+var MANIFEST_BY_ID = new Map(COMMAND_MANIFEST.map((entry) => [entry.id, entry]));
+function renderVerbSchema(entry) {
+  const lines = [
+    `${entry.id} \u2014 ${entry.title}`,
+    entry.description,
+    `scope: ${entry.requiredScope}   confirmation: ${entry.confirmation}   mcp: ${entry.exposeOverMcp}`
+  ];
+  if (entry.help) {
+    lines.push(`help: ${entry.help}`);
+  }
+  lines.push("", "input:");
+  if (entry.fields.length === 0 && !entry.hasComplexInput) {
+    lines.push("  no input fields");
+  } else {
+    for (const field3 of entry.fields) {
+      const req = field3.required ? "required" : "optional";
+      const en = field3.type === "enum" && field3.enumValues ? ` enum=${field3.enumValues.join("|")}` : "";
+      const desc = field3.description ? ` \u2014 ${field3.description}` : "";
+      lines.push(`  --${field3.flag} (${req}): ${field3.type}${en}${desc}`);
+    }
+    if (entry.hasComplexInput) {
+      lines.push("  --input '<json>' \u2014 nested payload (this command has complex input fields)");
+    }
+  }
+  if (entry.example !== void 0) {
+    lines.push("", "example input:", JSON.stringify(entry.example, null, 2));
+  }
+  return lines.join("\n");
 }
-function formatDeliverableWrite(output) {
-  const record2 = asRecord(output);
-  return `deliverable ${field(record2, "deliverable_id")} recorded.`;
+function verbUsageLine(bin, group, verb, entry) {
+  const parts = entry.fields.map((field3) => {
+    const token = field3.type === "boolean" ? `--${field3.flag}` : `--${field3.flag} <${field3.type === "enum" && field3.enumValues ? field3.enumValues.join("|") : field3.name}>`;
+    return field3.required ? token : `[${token}]`;
+  });
+  const complex = entry.hasComplexInput ? " [--input '<json>']" : "";
+  return `  ${bin} ${group} ${verb} ${parts.join(" ")}${complex}`.replace(/\s+$/, "");
 }
-var deliverableWrapper = (context, args) => dispatch(context, "deliverable", args, {
-  list: (ctx, rest) => {
-    const parsed = parseFlags(rest);
-    const seatId = requireValue2(parsed, "seat-id");
-    return execute(ctx, parsed, "deliverable.list", { seat_id: seatId }, formatDeliverableList);
-  },
-  get: (ctx, rest) => {
-    const parsed = parseFlags(rest);
-    const body = {
-      seat_id: requireValue2(parsed, "seat-id"),
-      deliverable_id: requireValue2(parsed, "deliverable-id")
+function groupUsage(bin, group, spec) {
+  const verbs = Object.keys(spec.verbs);
+  const header = spec.summary ?? `Usage: ${bin} ${group} ${verbs.join("|")} [--seat <id>] [--json]`;
+  const lines = [header];
+  for (const [verb, verbSpec] of Object.entries(spec.verbs)) {
+    const entry = MANIFEST_BY_ID.get(verbSpec.commandId);
+    if (verbSpec.usage) {
+      lines.push(`  ${verbSpec.usage}`);
+    } else if (entry) {
+      lines.push(verbUsageLine(bin, group, verb, entry));
+    }
+  }
+  return lines.join("\n");
+}
+function makeVerb(commandId, verbSpec) {
+  if (verbSpec.handler) {
+    return verbSpec.handler;
+  }
+  return (context, rest) => {
+    const entry = MANIFEST_BY_ID.get(commandId);
+    if (!entry) {
+      throw new UsageError(`Unknown command ${commandId}.`);
+    }
+    if (entry.secretBlocked) {
+      context.io.stderr.write(`${SECRET_ARGV_GUIDANCE}
+`);
+      return Promise.resolve(1);
+    }
+    if (rest.includes("--schema")) {
+      context.io.stdout.write(`${renderVerbSchema(entry)}
+`);
+      return Promise.resolve(0);
+    }
+    const overrides = {
+      ...verbSpec.flagAliases ? { flagAliases: verbSpec.flagAliases } : {},
+      ...verbSpec.defaults ? { defaults: verbSpec.defaults } : {},
+      ...verbSpec.primaryPositional ? { primaryPositional: verbSpec.primaryPositional } : {}
     };
-    return execute(ctx, parsed, "deliverable.get", body, formatDeliverableDetail);
-  },
-  create: (ctx, rest) => {
-    const parsed = parseFlags(rest, /* @__PURE__ */ new Set(["json"]));
-    const body = withOptional({
-      kind: optionalValue(parsed, "kind") ?? "other",
-      title: requireValue2(parsed, "title")
-    }, {
-      summary: optionalValue(parsed, "summary"),
-      content: optionalValue(parsed, "content"),
-      delivered_at: optionalValue(parsed, "delivered-at")
-    });
-    return execute(ctx, parsed, "deliverable.create", body, formatDeliverableWrite);
-  },
-  attach: (ctx, rest) => {
-    const parsed = parseFlags(rest);
-    const body = withOptional({
-      kind: optionalValue(parsed, "kind") ?? "other",
-      title: requireValue2(parsed, "title")
-    }, {
-      run_id: optionalValue(parsed, "run-id"),
-      task_id: optionalValue(parsed, "task-id"),
-      work_order_id: optionalValue(parsed, "work-order-id"),
-      summary: optionalValue(parsed, "summary"),
-      content: optionalValue(parsed, "content")
-    });
-    return execute(ctx, parsed, "deliverable.attach", body, formatDeliverableWrite);
+    const hasPositional = verbSpec.primaryPositional !== void 0 && rest[0] !== void 0 && !rest[0].startsWith("--");
+    const positional = hasPositional ? rest[0] : void 0;
+    const flagArgs = hasPositional ? rest.slice(1) : rest;
+    const parsed = parseFlags(flagArgs, booleanFlagsFor(entry, overrides));
+    const body = buildBodyFromFlags(entry, parsed, positional, overrides);
+    const render = verbSpec.render ?? renderCommandOutput;
+    return execute(context, parsed, commandId, body, render);
+  };
+}
+function makeGroupWrapper(group, spec) {
+  const actions = {};
+  for (const [verb, verbSpec] of Object.entries(spec.verbs)) {
+    actions[verb] = makeVerb(verbSpec.commandId, verbSpec);
   }
-}, deliverableUsage(context.binName));
-function deliverableUsage(bin) {
-  return `Usage: ${bin} deliverable list|get|create|attach [--json]
-  ${bin} deliverable list --seat-id <id>
-  ${bin} deliverable get --seat-id <id> --deliverable-id <id>
-  ${bin} deliverable create --title <text> [--kind brief|work_evidence|artifact|report|other] [--summary <text>] [--content <text>] [--delivered-at <iso>]
-  ${bin} deliverable attach --title <text> [--run-id <id>] [--task-id <id>] [--work-order-id <id>] [--kind brief|work_evidence|artifact|report|other] [--summary <text>] [--content <text>]`;
+  return (context, args) => dispatch(context, group, args, actions, groupUsage(context.binName, group, spec));
 }
-function formatSystemHealth(output) {
-  const record2 = asRecord(output);
-  const scope = asRecord(record2.scope);
-  const sections = asRecord(record2.sections);
-  const actions = asArray(record2.top_actions);
-  const findings = asArray(record2.findings);
-  const lines = [
-    `verdict: ${field(record2, "verdict")}  scope: ${field(scope, "mode")}  seats: ${field(scope, "total_seat_count")}  findings: ${findings.length}`
-  ];
-  if (actions.length > 0) {
-    lines.push("top_actions:");
-    for (const action of actions) {
-      const item = asRecord(action);
-      lines.push(`  ${field(item, "label")}  command=${field(item, "command_id")}  schema=${field(item, "schema_ref")}  cli=${field(item, "cli")}`);
-      if (field(item, "help") !== "\u2014") {
-        lines.push(`    ${field(item, "help")}`);
-      }
+
+// src/operations.ts
+var SKIP_NAMESPACES = /* @__PURE__ */ new Set([
+  "user",
+  // whoami / tenants / use
+  "command",
+  // rost command <id>
+  "signup",
+  // rost signup
+  "onboarding",
+  // rost onboard
+  "confirmation",
+  // internal confirm-replay
+  "tenant",
+  // rost tenant create / settings rename (also owns the secret-blocked tenant.anthropic_key.save)
+  "credential"
+  // DER-1046 invariant #5: credential.ingress sinks a raw secret; ingress only via the vault-backed web flow, never CLI argv
+]);
+var NAMESPACE_TO_GROUP = {
+  error_log: "error",
+  tool: "tools",
+  skill: "skills"
+};
+var EXTRA_SURFACED = /* @__PURE__ */ new Set([
+  "seat.decommission_preview",
+  // seat decommission --dry-run
+  "agent.create_custom",
+  // agent create --custom
+  "agent_setup.update",
+  // agent setup answer
+  "settings.product_learning.update",
+  // settings product-learning update
+  "settings.agent_policy.update",
+  // settings agent-policy set
+  "skill.import_github"
+  // skills import github
+]);
+function buildMergedSpecs() {
+  const merged = {};
+  for (const [group, spec] of Object.entries(GROUP_SPECS)) {
+    merged[group] = { verbs: { ...spec.verbs }, ...spec.summary ? { summary: spec.summary } : {} };
+  }
+  const surfaced = new Set(EXTRA_SURFACED);
+  for (const spec of Object.values(GROUP_SPECS)) {
+    for (const verb of Object.values(spec.verbs)) {
+      surfaced.add(verb.commandId);
     }
   }
-  const fleet = asRecord(sections.fleet);
-  const runs = asRecord(sections.runs);
-  const signals = asRecord(sections.signals);
-  const cascade = asRecord(sections.cascade_setup);
-  const workLoop = asRecord(sections.work_loop);
-  const connectivity = asRecord(sections.connectivity);
-  const sync = asRecord(sections.sync);
-  lines.push(
-    `fleet: agents=${field(fleet, "agent_count")} live=${field(fleet, "live_count")} stale=${field(fleet, "stale_count")} setup_gaps=${field(fleet, "setup_gap_count")}`,
-    `runs: failed_24h=${field(runs, "failed_24h")} failed_7d=${field(runs, "failed_7d")} unresolved_errors=${field(runs, "unresolved_error_count")}`,
-    `signals: off_track=${field(signals, "off_track_count")} pending=${field(signals, "pending_count")}`,
-    `cascade: recommendations=${field(cascade, "recommendation_count")} warnings=${field(cascade, "warning_count")}`,
-    `work_loop: open_issues=${field(workLoop, "open_issue_count")} friction_without_task=${field(workLoop, "friction_without_task_count")} open_or_stalled_tasks=${field(workLoop, "open_or_stalled_task_count")}`,
-    `connectivity: runners=${field(connectivity, "runner_count")} offline_runners=${field(connectivity, "offline_runner_count")} not_ready_runners=${field(connectivity, "not_execute_ready_runner_count")} integrations=${field(connectivity, "integration_count")} disconnected_integrations=${field(connectivity, "disconnected_integration_count")} failed_notifications=${field(connectivity, "failed_notification_count")}`,
-    `sync: latest_brief=${field(sync, "latest_brief_at")} missing_latest_brief=${field(sync, "missing_latest_brief")} flagged_gaps=${field(sync, "flagged_gap_count")}`
-  );
-  return lines.join("\n");
+  for (const entry of COMMAND_MANIFEST) {
+    if (entry.secretBlocked || surfaced.has(entry.id) || SKIP_NAMESPACES.has(entry.namespace)) {
+      continue;
+    }
+    const group = NAMESPACE_TO_GROUP[entry.namespace] ?? entry.namespace;
+    const verb = entry.action.replace(/[_.]/g, "-");
+    const spec = merged[group] ?? (merged[group] = { verbs: {} });
+    if (!(verb in spec.verbs)) {
+      const verbSpec = { commandId: entry.id };
+      spec.verbs[verb] = verbSpec;
+    }
+  }
+  return merged;
 }
-var systemWrapper = (context, args) => dispatch(context, "system", args, {
-  health: (ctx, rest) => {
-    const parsed = parseFlags(rest);
-    const body = withOptional({}, { seat_id: parsed.seat });
-    return execute(ctx, parsed, "system.health", body, formatSystemHealth);
-  }
-}, systemUsage(context.binName));
-function systemUsage(bin) {
-  return `Usage: ${bin} system health [--seat <id>] [--json]
-  ${bin} system health [--seat <id>]`;
-}
-var OPERATION_GROUPS = [
-  "task",
-  "status",
-  "signal",
-  "goal",
-  "friction",
-  "escalation",
-  "error",
-  "sync",
-  "runner",
-  "notification",
-  "integration",
-  "settings",
-  "member",
-  "agent",
-  "tools",
-  "skills",
-  "model",
-  "compass",
-  "charter",
-  "deliverable",
-  "system",
-  "graph",
-  "seat"
-];
-var wrappers = {
-  task: taskWrapper,
-  status: statusWrapper,
-  signal: signalWrapper,
-  goal: goalWrapper,
-  friction: frictionWrapper,
-  escalation: escalationWrapper,
-  error: errorWrapper,
-  sync: syncWrapper,
-  runner: runnerWrapper,
-  notification: notificationWrapper,
-  integration: integrationWrapper,
-  settings: settingsWrapper,
-  member: memberWrapper,
-  agent: agentWrapper,
-  tools: toolsWrapper,
-  skills: skillsWrapper,
-  model: modelWrapper,
-  compass: compassWrapper,
-  charter: charterWrapper,
-  deliverable: deliverableWrapper,
-  system: systemWrapper,
-  graph: graphWrapper,
-  seat: seatWrapper
-};
+var MERGED_SPECS = buildMergedSpecs();
+var WRAPPERS = {};
+for (const [group, spec] of Object.entries(MERGED_SPECS)) {
+  WRAPPERS[group] = makeGroupWrapper(group, spec);
+}
+var OPERATION_GROUPS = Object.keys(MERGED_SPECS).sort();
 function isOperationGroup(value) {
-  return value !== void 0 && OPERATION_GROUPS.includes(value);
-}
-var groupUsageBuilders = {
-  task: taskUsage,
-  status: statusUsage,
-  signal: signalUsage,
-  goal: goalUsage,
-  friction: frictionUsage,
-  escalation: escalationUsage,
-  error: errorUsage,
-  sync: syncUsage,
-  runner: runnerUsage,
-  notification: notificationUsage,
-  integration: integrationUsage,
-  settings: settingsUsage,
-  member: memberUsage,
-  agent: agentUsage,
-  tools: toolsUsage,
-  skills: skillsUsage,
-  model: modelUsage,
-  compass: compassUsage,
-  charter: charterUsage,
-  deliverable: deliverableUsage,
-  system: systemUsage,
-  graph: graphUsage,
-  seat: seatUsage
-};
+  return value !== void 0 && Object.prototype.hasOwnProperty.call(WRAPPERS, value);
+}
+var SECRET_BLOCKED_COMMAND_IDS = new Set(
+  COMMAND_MANIFEST.filter((entry) => entry.secretBlocked === true).map((entry) => entry.id)
+);
+function isSecretBlockedCommand(commandId) {
+  return commandId !== void 0 && SECRET_BLOCKED_COMMAND_IDS.has(commandId);
+}
+var SECRET_BLOCKED_NAMESPACES = (() => {
+  const totals = /* @__PURE__ */ new Map();
+  for (const entry of COMMAND_MANIFEST) {
+    const record2 = totals.get(entry.namespace) ?? { total: 0, blocked: 0 };
+    record2.total += 1;
+    if (entry.secretBlocked === true) {
+      record2.blocked += 1;
+    }
+    totals.set(entry.namespace, record2);
+  }
+  const result = /* @__PURE__ */ new Set();
+  for (const [namespace, { total, blocked }] of totals) {
+    if (blocked > 0 && blocked === total) {
+      result.add(namespace);
+    }
+  }
+  return result;
+})();
+function isSecretBlockedNamespace(namespace) {
+  return namespace !== void 0 && SECRET_BLOCKED_NAMESPACES.has(namespace);
+}
 function operationGroupUsage(group, bin) {
-  return usageWithSchemaFooter(groupUsageBuilders[group](bin), bin);
+  const spec = MERGED_SPECS[group];
+  if (!spec) {
+    return `Unknown group ${group}.`;
+  }
+  return usageWithSchemaFooter(groupUsage(bin, group, spec), bin);
 }
 async function runOperation(group, args, context) {
-  return wrappers[group]({
-    io: context.io,
-    client: context.client,
-    binName: context.binName,
-    run: context.run
-  }, args);
+  const wrapper = WRAPPERS[group];
+  if (!wrapper) {
+    context.io.stderr.write(`Unknown group ${group}.
+`);
+    return 1;
+  }
+  return wrapper(
+    { io: context.io, client: context.client, binName: context.binName, run: context.run },
+    args
+  );
 }
 function operationUsageLines(bin) {
   return [
@@ -47890,7 +47861,7 @@ import path2 from "node:path";
 var UsageError2 = class extends Error {
 };
 var CLIENTS = /* @__PURE__ */ new Set(["claude-code", "codex", "cursor"]);
-function skillsUsage2(binName = cliBrand.binName) {
+function skillsUsage(binName = cliBrand.binName) {
   return [
     `${binName} skills list [--json]`,
     `${binName} skills catalog [--json]`,
@@ -47908,7 +47879,7 @@ async function runSkills(context, args, env = process.env) {
   try {
     const [action, ...rest] = args;
     if (action === "help" || action === "--help" || action === "-h" || action === void 0) {
-      context.io.stdout.write(`${skillsUsage2(context.binName)}
+      context.io.stdout.write(`${skillsUsage(context.binName)}
 `);
       return action === void 0 ? 1 : 0;
     }
@@ -47923,7 +47894,7 @@ async function runSkills(context, args, env = process.env) {
     }
     if (action === "get") {
       const parsed = parseFlags2(rest);
-      return context.run(context.client, "skill.get", { slug: requireValue3(parsed, "slug") }, parsed.json ? void 0 : formatSkillDetail2);
+      return context.run(context.client, "skill.get", { slug: requireValue3(parsed, "slug") }, parsed.json ? void 0 : formatSkillDetail);
     }
     if (action === "file") {
       const parsed = parseFlags2(rest);
@@ -47960,7 +47931,7 @@ async function runSkills(context, args, env = process.env) {
         slug: optionalValue2(parsed, "skill") ?? optionalValue2(parsed, "slug"),
         skill_version_id: optionalValue2(parsed, "skill-version-id")
       });
-      return context.run(context.client, "skill.assign_to_seat", body, parsed.json ? void 0 : formatAssignment2, { targetSeatId: body.seat_id });
+      return context.run(context.client, "skill.assign_to_seat", body, parsed.json ? void 0 : formatAssignment, { targetSeatId: body.seat_id });
     }
     if (action === "revoke") {
       const parsed = parseFlags2(rest);
@@ -48246,7 +48217,7 @@ function formatCatalog(output) {
     return `${record2.catalog_slug} [${record2.tier}/${record2.entitlement_status}] ${record2.name}`;
   }).join("\n");
 }
-function formatSkillDetail2(output) {
+function formatSkillDetail(output) {
   const skill = asRecord2(asRecord2(output).skill);
   return `${skill.slug} v${skill.latest_version ?? "\u2014"} [${skill.status}] ${skill.name}
 ${skill.description}`;
@@ -48256,7 +48227,7 @@ function formatEnable(output) {
   const catalog = asRecord2(asRecord2(output).catalog);
   return `Enabled ${catalog.catalog_slug} as ${skill.slug} v${skill.version} (${skill.skill_version_id})`;
 }
-function formatAssignment2(output) {
+function formatAssignment(output) {
   const assignment = asRecord2(asRecord2(output).assignment);
   return `${assignment.status} ${assignment.slug} for seat ${assignment.seat_id}; sync: ${String(asRecord2(output).local_sync_next_step)}`;
 }
@@ -48742,6 +48713,11 @@ async function main(argv = process.argv.slice(2), options = {}) {
   const refreshSession = options.refreshSession ?? refreshCliSessionIfNeeded;
   const [rawCommand, ...args] = argv;
   const command = rawCommand === "--help" || rawCommand === "-h" ? "help" : rawCommand;
+  if (isSecretBlockedNamespace(command)) {
+    io.stderr.write(`${SECRET_ARGV_GUIDANCE}
+`);
+    return 1;
+  }
   if (!isCommand(command) && !isOperationGroup(command)) {
     printUsage(io);
     return command ? 1 : 0;
@@ -48991,6 +48967,11 @@ async function executeDirectCommand(io, client, args) {
     );
   }
   const commandId = first;
+  if (isSecretBlockedCommand(commandId)) {
+    io.stderr.write(`${SECRET_ARGV_GUIDANCE}
+`);
+    return 1;
+  }
   let seat;
   let autoConfirm = false;
   let rest;
@@ -49327,7 +49308,7 @@ function printUsage(io) {
     `${cliBrand.binName} mcp install --client claude-code|codex|cursor --scope tenant-admin|seat [--seat-id <id>] [--expires-in <days>|--no-expiry] [--skip-permissions]`,
     `${cliBrand.binName} mcp install --client claude-code|codex|cursor --rotate <old-token-id>  (inherits the old token's scope; no --scope)`,
     `${cliBrand.binName} mcp install ... --skip-permissions  (or ${cliBrand.envPrefix}_CLI_SKIP_PERMISSIONS=1 \u2014 auto-approves the token-mint confirmation in a non-interactive session)`,
-    skillsUsage2(cliBrand.binName),
+    skillsUsage(cliBrand.binName),
     `${cliBrand.binName} init [--client claude-code|codex|cursor]  (defaults --scope tenant-admin)`,
     `${cliBrand.binName} docs`,
     `${cliBrand.binName} reference <list|search|get> [options]`,