npm - @rosthq/cli - Versions diffs - 0.7.150 → 0.7.151 - Mend

@rosthq/cli 0.7.150 → 0.7.151

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (7) hide show

package/dist/generated/command-discovery.d.ts.map +1 -1
package/dist/generated/command-manifest.d.ts.map +1 -1
package/dist/generator/groups.d.ts.map +1 -1
package/dist/index.js +210 -129
package/dist/index.js.map +4 -4
package/package.json +1 -1
package/prompts/how-tos/human-confirmations.md +1 -0

package/dist/index.js CHANGED Viewed

@@ -13278,20 +13278,20 @@ var init_command_discovery = __esm({
       { "id": "agent_template.list", "title": "List agent templates", "description": "List stock agent templates and their responsibilities, default tools, and dry-run rehearsal.", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": {}, "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "templates": { "type": "array", "items": { "type": "object", "properties": { "slug": { "type": "string", "minLength": 1 }, "display_name": { "type": "string", "minLength": 1 }, "function": { "type": "string", "minLength": 1 }, "tier": { "type": "string", "minLength": 1 }, "responsibilities": { "type": "array", "items": { "type": "string", "minLength": 1 } }, "default_tools": { "type": "array", "items": { "type": "string", "minLength": 1 } }, "dry_run": { "type": "object", "properties": { "title": { "type": "string", "minLength": 1 }, "task": { "type": "string", "minLength": 1 }, "expected_escalation": { "type": "string", "minLength": 1 } }, "required": ["title", "task", "expected_escalation"], "additionalProperties": false } }, "required": ["slug", "display_name", "function", "tier", "responsibilities", "default_tools", "dry_run"], "additionalProperties": false } } }, "required": ["templates"], "additionalProperties": false }, "help": "List stock agent templates and their default tools and safety boundaries before starting a template setup.", "guide_slugs": ["stock-agents-guide", "agent-staffing-playbook"], "stages": ["staffing"], "related_command_ids": ["agent_setup.get", "agent_setup.relane", "agent_setup.start", "agent_setup.update", "agent.configure_tools", "agent.create_custom", "agent.create_from_template", "agent.decommission", "agent.fleet_digest", "agent.get_run", "agent.go_live", "agent.list_fleet", "agent.list_runs", "agent.list_tool_calls", "agent.pause", "agent.resume", "agent.run_dry_run", "agent.run_now", "agent.status", "agent.update_schedule", "charter.approve", "charter.draft", "compass.set", "confirmation.approve", "confirmation.reject", "deliverable.accept", "deliverable.attach", "deliverable.create", "deliverable.get", "deliverable.list", "deliverable.reject", "error_log.list", "error_log.resolve", "error_log.supersede", "escalation.get", "escalation.list", "escalation.reject", "escalation.resolve", "implementation_access.abandon", "implementation_access.complete", "implementation_access.status", "integration.list", "integration.readiness", "integration.status", "integration.test", "mcp_token.create", "mcp_token.list", "mcp_token.revoke", "onboarding.attach_reference", "onboarding.rehearse", "onboarding.resume", "onboarding.status", "onboarding.upload_context", "runner.diagnose", "runner.repair", "seat.create", "seat.create_complete", "skill.assign_to_seat", "skill.assigned.list", "skill.catalog", "skill.check_dependencies", "skill.create", "skill.enable_catalog", "skill.file.get", "skill.get", "skill.import_github", "skill.import_upload", "skill.install_local", "skill.list", "skill.publish", "skill.revoke_from_seat", "skill.sync_local", "skill.update_draft", "staffing.assign", "staffing.assign_agent_dry_run", "staffing.assign_user", "system.health", "tenant.anthropic_key.disable", "tenant.rename", "tool_grants.tenant.update", "usage.report", "usage.snapshot", "user.tenants", "user.use_tenant", "user.whoami"] },
       { "id": "agent.activation_receipt", "title": "Build agent activation receipt", "description": "Read the compiled authority receipt for one agent: effective capabilities, connection metadata, stale-scope digest, budget, and always-human boundary.", "required_scope": "seat", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "agent_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "proposed_budget_cents": { "type": "integer", "minimum": 0, "maximum": 1e7 } }, "required": ["agent_id"], "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "agent_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "steward_seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "steward_label": { "type": "string", "minLength": 1, "maxLength": 160 }, "lane": { "type": "string", "enum": ["cloud", "runner", "mcp_session"] }, "cadence": { "anyOf": [{ "type": "string", "minLength": 1, "maxLength": 120 }, { "type": "null" }] }, "budget_cents": { "type": "integer", "minimum": 0, "maximum": 1e7 }, "currency": { "type": "string", "const": "USD" }, "scope_digest": { "type": "string", "pattern": "^sha256:[0-9a-f]{64}$" }, "compiler_version": { "type": "string", "pattern": "^[a-z][a-z0-9_.-]{0,79}$" }, "classifier_version": { "type": "string", "pattern": "^[a-z][a-z0-9_.-]{0,79}$" }, "trusted_boundary": { "type": "object", "properties": { "eligible_command_count": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "always_human": { "minItems": 1, "type": "array", "items": { "type": "string", "minLength": 1 } } }, "required": ["eligible_command_count", "always_human"], "additionalProperties": false }, "ceiling_enforcement": { "default": "sign_time_only", "type": "string", "enum": ["sign_time_only", "call_time"] }, "capabilities": { "type": "array", "items": { "type": "object", "properties": { "capability_id": { "type": "string", "minLength": 1 }, "access_level": { "type": "string", "enum": ["off", "read", "draft", "write", "admin"] }, "compile_status": { "type": "string", "enum": ["compiled", "unavailable", "revoked", "off", "unsupported_lane"] }, "connection": { "type": "object", "properties": { "integration_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] }, "provider": { "anyOf": [{ "type": "string", "minLength": 1 }, { "type": "null" }] }, "account_email": { "anyOf": [{ "type": "string", "minLength": 1 }, { "type": "null" }] }, "account_label": { "anyOf": [{ "type": "string", "minLength": 1 }, { "type": "null" }] }, "status": { "anyOf": [{ "type": "string", "enum": ["connected", "error", "disconnected"] }, { "type": "null" }] } }, "required": ["integration_id", "provider", "account_email", "account_label", "status"], "additionalProperties": false } }, "required": ["capability_id", "access_level", "compile_status", "connection"], "additionalProperties": false } }, "diff": { "type": "object", "properties": { "added": { "type": "array", "items": { "type": "string", "minLength": 1 } }, "removed": { "type": "array", "items": { "type": "string", "minLength": 1 } }, "changed": { "type": "array", "items": { "type": "object", "properties": { "capability_id": { "type": "string", "minLength": 1 }, "from_access_level": { "anyOf": [{ "type": "string", "enum": ["off", "read", "draft", "write", "admin"] }, { "type": "null" }] }, "to_access_level": { "type": "string", "enum": ["off", "read", "draft", "write", "admin"] } }, "required": ["capability_id", "from_access_level", "to_access_level"], "additionalProperties": false } } }, "required": ["added", "removed", "changed"], "additionalProperties": false } }, "required": ["agent_id", "seat_id", "steward_seat_id", "steward_label", "lane", "cadence", "budget_cents", "currency", "scope_digest", "compiler_version", "classifier_version", "trusted_boundary", "capabilities", "diff"], "additionalProperties": false }, "help": "Build the current compiled activation receipt before signing or creating a Trusted grant. Rebuild it after any Charter, capability, connection, schedule, or lane change.", "guide_slugs": ["agent-staffing-playbook", "security-model-guide", "mcp-and-cli-guide"], "stages": ["staffing", "operating_rhythm"], "related_command_ids": [] },
       { "id": "agent.activation_sign", "title": "Sign agent activation receipt", "description": "Human steward/admin activation sign-off for the current compiled receipt digest. Refuses stale receipts and records a human decision plus append-only event.", "required_scope": "tenant", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["self_approval", "spend"], "rationale": "Trusted activation and grant lifecycle commands establish or change standing authority, so a human must decide." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "agent_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "expected_scope_digest": { "type": "string", "pattern": "^sha256:[0-9a-f]{64}$" }, "budget_cents": { "type": "integer", "minimum": 0, "maximum": 1e7 }, "reason": { "type": "string", "minLength": 1, "maxLength": 500 } }, "required": ["agent_id", "expected_scope_digest", "budget_cents"], "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "agent_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "scope_digest": { "type": "string", "pattern": "^sha256:[0-9a-f]{64}$" }, "decision_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "event_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "activated": { "type": "boolean" } }, "required": ["agent_id", "seat_id", "scope_digest", "decision_id", "event_id", "activated"], "additionalProperties": false }, "help": "Human steward/admin sign-off for the exact activation receipt digest. Agents can surface the pending confirmation but cannot sign their own authority.", "guide_slugs": ["agent-staffing-playbook", "security-model-guide", "confirmations-guide"], "stages": ["staffing", "operating_rhythm"], "related_command_ids": ["agent_grant_intervention.decide", "agent.go_live", "agent.trust.create", "agent.trust.expire", "agent.trust.revoke", "agent.trust.supersede", "charter.approve", "confirmation.approve", "confirmation.dismiss", "confirmation.dismiss_stale", "confirmation.list", "confirmation.reject", "confirmation.remint", "credential.ingress", "friction.resolve", "goal.reassign_owner", "goal.reparent", "mcp_token.create", "onboarding.setup", "staffing.assign_user", "task.confirm_proposal", "task.decline_proposal"] },
-      { "id": "agent.configure_tools", "title": "Configure agent tools", "description": "Save tool proposals, declines, and credential-ingress requests for a draft agent. Never stores or echoes secret material; vault refs only.", "required_scope": "seat", "confirmation": "credential_flow", "trusted_execution": { "mode": "always_human", "risk_flags": ["credential"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "tool_decisions": { "maxItems": 50, "type": "array", "items": { "type": "object", "properties": { "tool": { "type": "string", "minLength": 1, "maxLength": 200 }, "decision": { "type": "string", "enum": ["connect", "decline"] } }, "required": ["tool", "decision"], "additionalProperties": false } }, "credential_ingress_requests": { "maxItems": 20, "type": "array", "items": { "type": "object", "properties": { "provider": { "type": "string", "minLength": 1, "maxLength": 120 }, "scope_description": { "type": "string", "minLength": 1, "maxLength": 500 }, "secret_name": { "type": "string", "minLength": 1, "maxLength": 200 } }, "required": ["provider", "scope_description", "secret_name"], "additionalProperties": false } } }, "required": ["seat_id"], "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "agent_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "charter_version_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "tool_decisions": { "type": "array", "items": { "type": "object", "properties": { "tool": { "type": "string", "minLength": 1 }, "scope": { "type": "string" }, "decision": { "type": "string", "enum": ["connected", "declined", "pending"] } }, "required": ["tool", "scope", "decision"], "additionalProperties": false } }, "credential_ingress_requests": { "type": "array", "items": { "type": "object", "properties": { "provider": { "type": "string", "minLength": 1, "maxLength": 120 }, "scope_description": { "type": "string", "minLength": 1, "maxLength": 500 }, "secret_name": { "type": "string", "minLength": 1, "maxLength": 200 } }, "required": ["provider", "scope_description", "secret_name"], "additionalProperties": false } } }, "required": ["seat_id", "agent_id", "charter_version_id", "tool_decisions", "credential_ingress_requests"], "additionalProperties": false }, "example": { "seat_id": "0190aaaa-aaaa-7aaa-8aaa-aaaaaaaaaaaa", "tool_decisions": [{ "tool": "ap.invoices.read", "decision": "connect" }, { "tool": "email.draft", "decision": "connect" }] }, "help": "Connect or decline proposed tools and stage credential-ingress requests; never place raw secrets here \u2014 secrets flow through vault-backed credential.ingress as vault refs only.", "guide_slugs": ["ai-model-data-handling-guide", "tool-access-and-vault", "agent-staffing-playbook", "security-model-guide"], "stages": ["staffing"], "related_command_ids": ["agent_setup.get", "agent_setup.relane", "agent_setup.start", "agent_setup.update", "agent_template.list", "agent.create_custom", "agent.create_from_template", "agent.decommission", "agent.fleet_digest", "agent.get_run", "agent.go_live", "agent.import_definition", "agent.list_fleet", "agent.list_runs", "agent.list_tool_calls", "agent.pause", "agent.resume", "agent.run_dry_run", "agent.run_now", "agent.show_markdown", "agent.status", "agent.update_schedule", "aicos.brain_settings.get", "aicos.brain_settings.update", "charter.approve", "charter.draft", "charter.set", "charter.sign_manifest", "charter.update_draft", "command.describe", "compass.set", "confirmation.approve", "confirmation.reject", "credential.ingress", "deliverable.accept", "deliverable.attach", "deliverable.create", "deliverable.get", "deliverable.list", "deliverable.reject", "error_log.list", "error_log.resolve", "error_log.supersede", "escalation.get", "escalation.list", "escalation.reject", "escalation.resolve", "graph.get", "implementation_access.abandon", "implementation_access.complete", "implementation_access.status", "integration.connect_rest", "integration.list", "integration.readiness", "integration.status", "integration.test", "mcp_token.create", "mcp_token.list", "mcp_token.revoke", "model.catalog", "onboarding.attach_reference", "onboarding.rehearse", "onboarding.resume", "onboarding.status", "onboarding.upload_context", "runner.diagnose", "runner.list", "runner.pairing.start", "runner.repair", "seat.create", "seat.create_complete", "seat.get", "skill.assign_to_seat", "skill.assigned.list", "skill.catalog", "skill.check_dependencies", "skill.create", "skill.enable_catalog", "skill.file.get", "skill.get", "skill.import_github", "skill.import_upload", "skill.install_local", "skill.list", "skill.publish", "skill.revoke_from_seat", "skill.sync_local", "skill.update_draft", "staffing.assign", "staffing.assign_agent_dry_run", "staffing.assign_user", "system.health", "tenant.anthropic_key.disable", "tenant.anthropic_key.save", "tenant.model_gateway_policy.update", "tenant.rename", "tool_grants.tenant.update", "tool.catalog", "usage.report", "usage.snapshot", "user.tenants", "user.use_tenant", "user.whoami", "work_order.enqueue"] },
-      { "id": "agent.create_custom", "title": "Create custom agent", "description": "Create a draft custom agent shell and a draft Charter seed from operational answers (what it owns, success, never-do-alone, steward).", "required_scope": "tenant", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": [], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "steward_seat_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] }, "lane": { "type": "string", "enum": ["cloud", "mcp_session", "runner"] }, "model_config": { "type": "object", "properties": { "provider": { "type": "string", "enum": ["anthropic"] }, "model": { "type": "string", "minLength": 1, "maxLength": 120, "pattern": "^[^\\n\\r]+$" }, "effort": { "type": "string", "enum": ["low", "medium", "high", "xhigh", "max"] } }, "required": ["provider", "model"], "additionalProperties": false }, "what_it_owns": { "type": "string", "minLength": 1, "maxLength": 2e3 }, "what_success_looks_like": { "type": "string", "minLength": 1, "maxLength": 2e3 }, "what_it_must_never_do_alone": { "type": "string", "minLength": 1, "maxLength": 2e3 } }, "required": ["seat_id"], "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "setup_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "agent_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "charter_version_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "mode": { "type": "string", "enum": ["template", "custom", "existing"] }, "created": { "type": "boolean" } }, "required": ["setup_id", "seat_id", "agent_id", "charter_version_id", "mode", "created"], "additionalProperties": false }, "example": { "seat_id": "0190aaaa-aaaa-7aaa-8aaa-aaaaaaaaaaaa", "steward_seat_id": "0190bbbb-bbbb-7bbb-8bbb-bbbbbbbbbbbb", "lane": "cloud", "what_it_owns": "Drafting AP invoice entries from inbound vendor emails for human review.", "what_success_looks_like": "Every inbound invoice is drafted within one business day with the correct GL coding.", "what_it_must_never_do_alone": "Never send payment or approve an invoice without a human sign-off." }, "help": "Create a draft custom agent from operational answers (what it owns, success, never-do-alone, steward); the Charter Builder owns the contract and go-live stays human-gated.", "guide_slugs": ["agent-staffing-playbook", "charter-design-playbook", "how-agents-work"], "stages": ["staffing"], "related_command_ids": ["agent_setup.get", "agent_setup.relane", "agent_setup.start", "agent_setup.update", "agent_template.list", "agent.configure_tools", "agent.create_from_template", "agent.decommission", "agent.fleet_digest", "agent.get_run", "agent.go_live", "agent.import_definition", "agent.list_fleet", "agent.list_runs", "agent.list_tool_calls", "agent.pause", "agent.resume", "agent.run_dry_run", "agent.run_now", "agent.show_markdown", "agent.status", "agent.update_schedule", "aicos.brain_settings.get", "aicos.brain_settings.update", "charter.approve", "charter.draft", "charter.set", "charter.sign_manifest", "charter.update_draft", "command.describe", "compass.set", "confirmation.approve", "confirmation.reject", "credential.ingress", "deliverable.accept", "deliverable.attach", "deliverable.create", "deliverable.get", "deliverable.list", "deliverable.reject", "error_log.list", "error_log.resolve", "error_log.supersede", "escalation.get", "escalation.list", "escalation.reject", "escalation.resolve", "graph.get", "implementation_access.abandon", "implementation_access.complete", "implementation_access.status", "integration.list", "integration.readiness", "integration.status", "integration.test", "mcp_token.create", "mcp_token.list", "mcp_token.revoke", "model.catalog", "onboarding.attach_reference", "onboarding.rehearse", "onboarding.resume", "onboarding.status", "onboarding.upload_context", "runner.diagnose", "runner.list", "runner.repair", "seat.create", "seat.create_complete", "seat.get", "skill.assign_to_seat", "skill.assigned.list", "skill.catalog", "skill.check_dependencies", "skill.create", "skill.enable_catalog", "skill.file.get", "skill.get", "skill.import_github", "skill.import_upload", "skill.install_local", "skill.list", "skill.publish", "skill.revoke_from_seat", "skill.sync_local", "skill.update_draft", "staffing.assign", "staffing.assign_agent_dry_run", "staffing.assign_user", "system.health", "tenant.anthropic_key.disable", "tenant.model_gateway_policy.update", "tenant.rename", "tool_grants.tenant.update", "tool.catalog", "usage.report", "usage.snapshot", "user.tenants", "user.use_tenant", "user.whoami"] },
+      { "id": "agent.configure_tools", "title": "Configure agent tools", "description": "Save tool proposals, declines, and credential-ingress requests for a draft agent. Never stores or echoes secret material; vault refs only.", "required_scope": "seat", "confirmation": "credential_flow", "trusted_execution": { "mode": "always_human", "risk_flags": ["credential"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "tool_decisions": { "maxItems": 50, "type": "array", "items": { "type": "object", "properties": { "tool": { "type": "string", "minLength": 1, "maxLength": 200 }, "decision": { "type": "string", "enum": ["connect", "decline"] } }, "required": ["tool", "decision"], "additionalProperties": false } }, "credential_ingress_requests": { "maxItems": 20, "type": "array", "items": { "type": "object", "properties": { "provider": { "type": "string", "minLength": 1, "maxLength": 120 }, "scope_description": { "type": "string", "minLength": 1, "maxLength": 500 }, "secret_name": { "type": "string", "minLength": 1, "maxLength": 200 } }, "required": ["provider", "scope_description", "secret_name"], "additionalProperties": false } } }, "required": ["seat_id"], "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "agent_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "charter_version_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "tool_decisions": { "type": "array", "items": { "type": "object", "properties": { "tool": { "type": "string", "minLength": 1 }, "scope": { "type": "string" }, "decision": { "type": "string", "enum": ["connected", "declined", "pending"] } }, "required": ["tool", "scope", "decision"], "additionalProperties": false } }, "credential_ingress_requests": { "type": "array", "items": { "type": "object", "properties": { "provider": { "type": "string", "minLength": 1, "maxLength": 120 }, "scope_description": { "type": "string", "minLength": 1, "maxLength": 500 }, "secret_name": { "type": "string", "minLength": 1, "maxLength": 200 } }, "required": ["provider", "scope_description", "secret_name"], "additionalProperties": false } } }, "required": ["seat_id", "agent_id", "charter_version_id", "tool_decisions", "credential_ingress_requests"], "additionalProperties": false }, "example": { "seat_id": "0190aaaa-aaaa-7aaa-8aaa-aaaaaaaaaaaa", "tool_decisions": [{ "tool": "ap.invoices.read", "decision": "connect" }, { "tool": "email.draft", "decision": "connect" }] }, "help": "Connect or decline proposed tools and stage credential-ingress requests; never place raw secrets here \u2014 secrets flow through vault-backed credential.ingress as vault refs only.", "guide_slugs": ["ai-model-data-handling-guide", "tool-access-and-vault", "agent-staffing-playbook", "security-model-guide"], "stages": ["staffing"], "related_command_ids": ["agent_setup.get", "agent_setup.relane", "agent_setup.start", "agent_setup.update", "agent_template.list", "agent.create_custom", "agent.create_from_template", "agent.decommission", "agent.fleet_digest", "agent.get_run", "agent.go_live", "agent.import_definition", "agent.list_fleet", "agent.list_runs", "agent.list_tool_calls", "agent.pause", "agent.resume", "agent.run_dry_run", "agent.run_now", "agent.show_markdown", "agent.status", "agent.update_schedule", "aicos.brain_settings.get", "aicos.brain_settings.update", "charter.approve", "charter.backfill_stock_evidence", "charter.draft", "charter.set", "charter.sign_manifest", "charter.update_draft", "command.describe", "compass.set", "confirmation.approve", "confirmation.reject", "credential.ingress", "deliverable.accept", "deliverable.attach", "deliverable.create", "deliverable.get", "deliverable.list", "deliverable.reject", "error_log.list", "error_log.resolve", "error_log.supersede", "escalation.get", "escalation.list", "escalation.reject", "escalation.resolve", "graph.get", "implementation_access.abandon", "implementation_access.complete", "implementation_access.status", "integration.connect_rest", "integration.list", "integration.readiness", "integration.status", "integration.test", "mcp_token.create", "mcp_token.list", "mcp_token.revoke", "model.catalog", "onboarding.attach_reference", "onboarding.rehearse", "onboarding.resume", "onboarding.status", "onboarding.upload_context", "runner.diagnose", "runner.list", "runner.pairing.start", "runner.repair", "seat.create", "seat.create_complete", "seat.get", "skill.assign_to_seat", "skill.assigned.list", "skill.catalog", "skill.check_dependencies", "skill.create", "skill.enable_catalog", "skill.file.get", "skill.get", "skill.import_github", "skill.import_upload", "skill.install_local", "skill.list", "skill.publish", "skill.revoke_from_seat", "skill.sync_local", "skill.update_draft", "staffing.assign", "staffing.assign_agent_dry_run", "staffing.assign_user", "system.health", "tenant.anthropic_key.disable", "tenant.anthropic_key.save", "tenant.model_gateway_policy.update", "tenant.rename", "tool_grants.tenant.update", "tool.catalog", "usage.report", "usage.snapshot", "user.tenants", "user.use_tenant", "user.whoami", "work_order.enqueue"] },
+      { "id": "agent.create_custom", "title": "Create custom agent", "description": "Create a draft custom agent shell and a draft Charter seed from operational answers (what it owns, success, never-do-alone, steward).", "required_scope": "tenant", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": [], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "steward_seat_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] }, "lane": { "type": "string", "enum": ["cloud", "mcp_session", "runner"] }, "model_config": { "type": "object", "properties": { "provider": { "type": "string", "enum": ["anthropic"] }, "model": { "type": "string", "minLength": 1, "maxLength": 120, "pattern": "^[^\\n\\r]+$" }, "effort": { "type": "string", "enum": ["low", "medium", "high", "xhigh", "max"] } }, "required": ["provider", "model"], "additionalProperties": false }, "what_it_owns": { "type": "string", "minLength": 1, "maxLength": 2e3 }, "what_success_looks_like": { "type": "string", "minLength": 1, "maxLength": 2e3 }, "what_it_must_never_do_alone": { "type": "string", "minLength": 1, "maxLength": 2e3 } }, "required": ["seat_id"], "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "setup_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "agent_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "charter_version_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "mode": { "type": "string", "enum": ["template", "custom", "existing"] }, "created": { "type": "boolean" } }, "required": ["setup_id", "seat_id", "agent_id", "charter_version_id", "mode", "created"], "additionalProperties": false }, "example": { "seat_id": "0190aaaa-aaaa-7aaa-8aaa-aaaaaaaaaaaa", "steward_seat_id": "0190bbbb-bbbb-7bbb-8bbb-bbbbbbbbbbbb", "lane": "cloud", "what_it_owns": "Drafting AP invoice entries from inbound vendor emails for human review.", "what_success_looks_like": "Every inbound invoice is drafted within one business day with the correct GL coding.", "what_it_must_never_do_alone": "Never send payment or approve an invoice without a human sign-off." }, "help": "Create a draft custom agent from operational answers (what it owns, success, never-do-alone, steward); the Charter Builder owns the contract and go-live stays human-gated.", "guide_slugs": ["agent-staffing-playbook", "charter-design-playbook", "how-agents-work"], "stages": ["staffing"], "related_command_ids": ["agent_setup.get", "agent_setup.relane", "agent_setup.start", "agent_setup.update", "agent_template.list", "agent.configure_tools", "agent.create_from_template", "agent.decommission", "agent.fleet_digest", "agent.get_run", "agent.go_live", "agent.import_definition", "agent.list_fleet", "agent.list_runs", "agent.list_tool_calls", "agent.pause", "agent.resume", "agent.run_dry_run", "agent.run_now", "agent.show_markdown", "agent.status", "agent.update_schedule", "aicos.brain_settings.get", "aicos.brain_settings.update", "charter.approve", "charter.backfill_stock_evidence", "charter.draft", "charter.set", "charter.sign_manifest", "charter.update_draft", "command.describe", "compass.set", "confirmation.approve", "confirmation.reject", "credential.ingress", "deliverable.accept", "deliverable.attach", "deliverable.create", "deliverable.get", "deliverable.list", "deliverable.reject", "error_log.list", "error_log.resolve", "error_log.supersede", "escalation.get", "escalation.list", "escalation.reject", "escalation.resolve", "graph.get", "implementation_access.abandon", "implementation_access.complete", "implementation_access.status", "integration.list", "integration.readiness", "integration.status", "integration.test", "mcp_token.create", "mcp_token.list", "mcp_token.revoke", "model.catalog", "onboarding.attach_reference", "onboarding.rehearse", "onboarding.resume", "onboarding.status", "onboarding.upload_context", "runner.diagnose", "runner.list", "runner.repair", "seat.create", "seat.create_complete", "seat.get", "skill.assign_to_seat", "skill.assigned.list", "skill.catalog", "skill.check_dependencies", "skill.create", "skill.enable_catalog", "skill.file.get", "skill.get", "skill.import_github", "skill.import_upload", "skill.install_local", "skill.list", "skill.publish", "skill.revoke_from_seat", "skill.sync_local", "skill.update_draft", "staffing.assign", "staffing.assign_agent_dry_run", "staffing.assign_user", "system.health", "tenant.anthropic_key.disable", "tenant.model_gateway_policy.update", "tenant.rename", "tool_grants.tenant.update", "tool.catalog", "usage.report", "usage.snapshot", "user.tenants", "user.use_tenant", "user.whoami"] },
       { "id": "agent.create_from_template", "title": "Create agent from template", "description": "Create a draft stock agent and draft Charter from a stock template. Creates the agent occupancy only when a human steward chain resolves; the agent stays draft until a signed manifest, a passed dry run, and human go-live.", "required_scope": "tenant", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": [], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "template_slug": { "type": "string", "minLength": 1 }, "expected_template_version": { "type": "string", "minLength": 1, "maxLength": 64 } }, "required": ["seat_id", "template_slug"], "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "setup_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "agent_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "mode": { "type": "string", "enum": ["template", "custom", "existing"] }, "kind": { "type": "string", "enum": ["stock", "custom", "external_mcp", "runner_local"] }, "lane": { "type": "string", "enum": ["cloud", "mcp_session", "runner"] }, "status": { "type": "string", "enum": ["draft", "dry_run", "live", "paused", "decommissioned"] }, "lifecycle": { "type": "string", "enum": ["none", "draft_setup", "dry_run", "live", "paused", "decommissioned"] }, "template_slug": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "schedule_cron": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "schedule_timezone": { "type": "string", "minLength": 1, "maxLength": 100 }, "model_config": { "anyOf": [{ "type": "object", "properties": { "provider": { "type": "string", "enum": ["anthropic"] }, "model": { "type": "string", "minLength": 1, "maxLength": 120, "pattern": "^[^\\n\\r]+$" }, "effort": { "type": "string", "enum": ["low", "medium", "high", "xhigh", "max"] } }, "required": ["provider", "model"], "additionalProperties": false }, { "type": "null" }] }, "turn_timeout_seconds": { "anyOf": [{ "type": "integer", "minimum": 30, "maximum": 1800 }, { "type": "null" }] }, "charter_version_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] }, "charter_status": { "anyOf": [{ "type": "string", "enum": ["draft", "active", "superseded"] }, { "type": "null" }] }, "parent_seat_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] }, "parent_seat_archived": { "type": "boolean" }, "steward_seat_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] }, "steward_chain_resolves_to_human": { "type": "boolean" }, "has_occupancy": { "type": "boolean" }, "skill_discovery_enabled": { "type": "boolean" }, "tool_decisions": { "type": "array", "items": { "type": "object", "properties": { "tool": { "type": "string", "minLength": 1 }, "scope": { "type": "string" }, "decision": { "type": "string", "enum": ["connected", "declined", "pending"] } }, "required": ["tool", "scope", "decision"], "additionalProperties": false } }, "available_skill_recommendations": { "type": "array", "items": { "type": "object", "properties": { "skill_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "slug": { "type": "string", "pattern": "^[a-z0-9][a-z0-9-]{1,80}$" }, "name": { "type": "string", "minLength": 1, "maxLength": 120 }, "description": { "type": "string", "minLength": 1 }, "status": { "type": "string", "enum": ["draft", "pending_review", "published", "archived"] }, "visibility": { "type": "string", "enum": ["private", "seat", "tenant"] }, "application": { "type": "object", "properties": { "domain": { "type": "string", "minLength": 1, "maxLength": 80 }, "summary": { "type": "string", "minLength": 1, "maxLength": 500 }, "best_for": { "default": [], "maxItems": 20, "type": "array", "items": { "type": "string", "minLength": 1, "maxLength": 160 } }, "not_for": { "default": [], "maxItems": 20, "type": "array", "items": { "type": "string", "minLength": 1, "maxLength": 160 } } }, "required": ["summary"], "additionalProperties": false }, "source_type": { "anyOf": [{ "type": "string", "enum": ["ui", "cli", "mcp", "github", "upload", "rost_catalog_public", "rost_catalog_private"] }, { "type": "null" }] }, "latest_version_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] }, "latest_version": { "anyOf": [{ "type": "integer", "exclusiveMinimum": 0, "maximum": 9007199254740991 }, { "type": "null" }] }, "content_sha256": { "anyOf": [{ "type": "string", "pattern": "^[a-f0-9]{64}$" }, { "type": "null" }] }, "required_tools": { "type": "array", "items": { "type": "object", "properties": { "tool": { "type": "string", "minLength": 1, "maxLength": 120 }, "min_scope_tier": { "type": "string", "enum": ["read", "draft", "write_with_approval", "full"] }, "reason": { "type": "string", "minLength": 1, "maxLength": 500 } }, "required": ["tool", "min_scope_tier"], "additionalProperties": false } }, "optional_tools": { "type": "array", "items": { "type": "object", "properties": { "tool": { "type": "string", "minLength": 1, "maxLength": 120 }, "min_scope_tier": { "type": "string", "enum": ["read", "draft", "write_with_approval", "full"] }, "reason": { "type": "string", "minLength": 1, "maxLength": 500 } }, "required": ["tool", "min_scope_tier"], "additionalProperties": false } }, "assigned_seat_count": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "created_at": { "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, "updated_at": { "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, "match_score": { "type": "integer", "minimum": 0, "maximum": 100 }, "recommendation_reason": { "type": "string", "minLength": 1, "maxLength": 240 } }, "required": ["skill_id", "slug", "name", "description", "status", "visibility", "application", "source_type", "latest_version_id", "latest_version", "content_sha256", "required_tools", "optional_tools", "assigned_seat_count", "created_at", "updated_at", "match_score", "recommendation_reason"], "additionalProperties": false } }, "assigned_skills": { "type": "array", "items": { "type": "object", "properties": { "assignment_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "seat_name": { "type": "string", "minLength": 1 }, "skill_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "skill_version_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "slug": { "type": "string", "pattern": "^[a-z0-9][a-z0-9-]{1,80}$" }, "name": { "type": "string", "minLength": 1, "maxLength": 120 }, "description": { "type": "string", "minLength": 1 }, "version": { "type": "integer", "exclusiveMinimum": 0, "maximum": 9007199254740991 }, "status": { "type": "string", "enum": ["proposed", "approved", "revoked"] }, "rationale": { "type": "string", "minLength": 1 }, "dependency_status": { "type": "object", "propertyNames": { "type": "string" }, "additionalProperties": {} }, "approved_at": { "anyOf": [{ "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, { "type": "null" }] } }, "required": ["assignment_id", "seat_id", "seat_name", "skill_id", "skill_version_id", "slug", "name", "description", "version", "status", "rationale", "dependency_status", "approved_at"], "additionalProperties": false } }, "skill_dependency_status": { "type": "object", "properties": { "status": { "type": "string", "enum": ["ready", "blocked", "warning"] }, "checks": { "type": "array", "items": { "type": "object", "properties": { "status": { "type": "string", "enum": ["ready", "blocked", "warning"] }, "skill_version_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "required": { "type": "array", "items": { "type": "object", "properties": { "tool": { "type": "string", "minLength": 1 }, "min_scope_tier": { "type": "string", "enum": ["read", "draft", "write_with_approval", "full"] }, "status": { "type": "string", "enum": ["ready", "missing", "insufficient_scope", "unknown_tool"] }, "required": { "type": "boolean" }, "current_scope_tier": { "anyOf": [{ "type": "string", "enum": ["read", "draft", "write_with_approval", "full"] }, { "type": "null" }] }, "reason": { "type": "string" } }, "required": ["tool", "min_scope_tier", "status", "required", "current_scope_tier"], "additionalProperties": false } }, "optional": { "type": "array", "items": { "type": "object", "properties": { "tool": { "type": "string", "minLength": 1 }, "min_scope_tier": { "type": "string", "enum": ["read", "draft", "write_with_approval", "full"] }, "status": { "type": "string", "enum": ["ready", "missing", "insufficient_scope", "unknown_tool"] }, "required": { "type": "boolean" }, "current_scope_tier": { "anyOf": [{ "type": "string", "enum": ["read", "draft", "write_with_approval", "full"] }, { "type": "null" }] }, "reason": { "type": "string" } }, "required": ["tool", "min_scope_tier", "status", "required", "current_scope_tier"], "additionalProperties": false } }, "suggested_agent_configure_tools_input": { "type": "object", "properties": { "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "tool_decisions": { "type": "array", "items": { "type": "object", "properties": { "tool": { "type": "string", "minLength": 1 }, "decision": { "type": "string", "const": "connect" } }, "required": ["tool", "decision"], "additionalProperties": false } } }, "required": ["seat_id", "tool_decisions"], "additionalProperties": false } }, "required": ["status", "skill_version_id", "seat_id", "required", "optional", "suggested_agent_configure_tools_input"], "additionalProperties": false } } }, "required": ["status", "checks"], "additionalProperties": false }, "skill_blockers": { "type": "array", "items": { "type": "object", "properties": { "skill_version_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "slug": { "type": "string", "pattern": "^[a-z0-9][a-z0-9-]{1,80}$" }, "name": { "type": "string", "minLength": 1, "maxLength": 120 }, "required_tools": { "type": "array", "items": { "type": "string", "minLength": 1 } }, "message": { "type": "string", "minLength": 1, "maxLength": 500 } }, "required": ["skill_version_id", "slug", "name", "required_tools", "message"], "additionalProperties": false } }, "steward_remediation": { "anyOf": [{ "type": "object", "properties": { "candidates": { "type": "array", "items": { "type": "object", "properties": { "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "name": { "type": "string", "minLength": 1, "maxLength": 160 }, "has_human_occupant": { "type": "boolean" }, "recommended": { "type": "boolean" } }, "required": ["seat_id", "name", "has_human_occupant", "recommended"], "additionalProperties": false } }, "message": { "type": "string", "minLength": 1, "maxLength": 500 } }, "required": ["candidates", "message"], "additionalProperties": false }, { "type": "null" }] }, "dry_run": { "anyOf": [{ "type": "object", "properties": { "status": { "type": "string", "enum": ["passed", "failed"] }, "summary": { "type": "string" }, "transcript": { "type": "object", "properties": { "status": { "type": "string", "enum": ["passed", "failed"] }, "escalated": { "type": "boolean" }, "must_escalate_clause": { "type": "string", "minLength": 1 }, "summary": { "type": "string", "minLength": 1 }, "steps": { "minItems": 1, "type": "array", "items": { "type": "object", "properties": { "kind": { "type": "string", "enum": ["task", "message", "tool_call", "escalation", "result"] }, "text": { "type": "string", "minLength": 1 }, "tool_name": { "type": "string", "minLength": 1 }, "guard": { "type": "string", "enum": ["allowed", "denied_manifest", "escalated"] } }, "required": ["kind", "text"], "additionalProperties": false } }, "tool_preview": { "type": "array", "items": { "type": "object", "properties": { "tool_name": { "type": "string", "minLength": 1 }, "intended_action": { "type": "string", "minLength": 1 }, "status": { "type": "string", "enum": ["intended", "blocked", "escalated"] }, "guard": { "type": "string", "enum": ["allowed", "denied_manifest", "escalated"] } }, "required": ["tool_name", "intended_action", "status", "guard"], "additionalProperties": false } }, "lane": { "type": "string", "enum": ["cloud", "mcp_session", "runner"] }, "granted_tools": { "type": "array", "items": { "type": "object", "properties": { "tool_name": { "type": "string", "minLength": 1 }, "executability": { "type": "string", "enum": ["executable", "unimplemented_in_lane", "held_for_steward"] } }, "required": ["tool_name", "executability"], "additionalProperties": false } }, "run_id": { "type": "string", "minLength": 1 } }, "required": ["status", "escalated", "must_escalate_clause", "summary", "steps"], "additionalProperties": false } }, "required": ["status", "summary"], "additionalProperties": false }, { "type": "null" }] }, "readiness": { "anyOf": [{ "type": "object", "properties": { "agent_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "lifecycle_admissible": { "type": "boolean" }, "execution_ready": { "type": "boolean" }, "steward_chain_valid": { "type": "boolean" }, "requested_lane": { "type": "string", "enum": ["cloud", "mcp_session", "runner"] }, "effective_lane": { "type": "string", "enum": ["cloud", "mcp_session", "runner"] }, "runner_available": { "type": "boolean" }, "selected_runner_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] }, "selected_runner_capability": { "anyOf": [{ "type": "object", "properties": { "runner_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "capabilities": { "type": "object", "properties": { "claude": { "type": "boolean" }, "codex": { "type": "boolean" } }, "required": ["claude", "codex"], "additionalProperties": false } }, "required": ["runner_id", "capabilities"], "additionalProperties": false }, { "type": "null" }] }, "execution_modes": { "minItems": 1, "type": "array", "items": { "type": "string", "enum": ["production_manual", "production_scheduled"] } }, "rehearsal_requirement": { "oneOf": [{ "type": "object", "properties": { "kind": { "type": "string", "const": "not_required" } }, "required": ["kind"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "type": "string", "const": "onboarding_setup" }, "setup_application_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "expected_receipt_revision": { "type": "integer", "exclusiveMinimum": 0, "maximum": 9007199254740991 }, "configuration_digest": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$" } }, "required": ["kind", "setup_application_id", "expected_receipt_revision", "configuration_digest"], "additionalProperties": false }] }, "latest_rehearsal": { "anyOf": [{ "type": "object", "properties": { "receipt_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "terminal_batch_receipt_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "setup_application_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "expected_receipt_revision": { "type": "integer", "exclusiveMinimum": 0, "maximum": 9007199254740991 }, "rehearsal_run_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "configuration_digest": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$" }, "outcome": { "type": "string", "enum": ["passed", "failed"] }, "completed_at": { "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z))$" } }, "required": ["receipt_id", "terminal_batch_receipt_id", "setup_application_id", "expected_receipt_revision", "rehearsal_run_id", "configuration_digest", "outcome", "completed_at"], "additionalProperties": false }, { "type": "null" }] }, "provider": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "model": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "inference": { "type": "string", "enum": ["managed", "byok"] }, "current_spend_usd": { "type": "string" }, "hard_cap_usd": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "hard_cap_reached": { "type": "boolean" }, "schedule": { "type": "object", "properties": { "valid": { "type": "boolean" }, "cron": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "timezone": { "anyOf": [{ "type": "string" }, { "type": "null" }] } }, "required": ["valid", "cron", "timezone"], "additionalProperties": false }, "dry_run": { "type": "object", "properties": { "state": { "type": "string", "enum": ["passed", "missing", "failed", "stale_lane"] }, "run_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] } }, "required": ["state", "run_id"], "additionalProperties": false }, "sources": { "type": "object", "properties": { "ready": { "type": "boolean" }, "checked": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "required": { "type": "integer", "exclusiveMinimum": 0, "maximum": 9007199254740991 } }, "required": ["ready", "checked", "required"], "additionalProperties": false }, "manifest_evidence": { "type": "object", "properties": { "state": { "type": "string", "enum": ["verified", "missing", "stale"] }, "receipt_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] }, "revision": { "anyOf": [{ "type": "integer", "exclusiveMinimum": 0, "maximum": 9007199254740991 }, { "type": "null" }] } }, "required": ["state", "receipt_id", "revision"], "additionalProperties": false }, "checked_counts": { "type": "object", "properties": { "manifest_evidence": { "type": "object", "properties": { "checked": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "required": { "type": "integer", "exclusiveMinimum": 0, "maximum": 9007199254740991 } }, "required": ["checked", "required"], "additionalProperties": false }, "skills": { "type": "object", "properties": { "checked": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "required": { "type": "integer", "exclusiveMinimum": 0, "maximum": 9007199254740991 } }, "required": ["checked", "required"], "additionalProperties": false }, "connections": { "type": "object", "properties": { "checked": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "required": { "type": "integer", "exclusiveMinimum": 0, "maximum": 9007199254740991 } }, "required": ["checked", "required"], "additionalProperties": false }, "stewardship": { "type": "object", "properties": { "checked": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "required": { "type": "integer", "exclusiveMinimum": 0, "maximum": 9007199254740991 } }, "required": ["checked", "required"], "additionalProperties": false }, "runtime": { "type": "object", "properties": { "checked": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "required": { "type": "integer", "exclusiveMinimum": 0, "maximum": 9007199254740991 } }, "required": ["checked", "required"], "additionalProperties": false } }, "required": ["manifest_evidence", "skills", "connections", "stewardship", "runtime"], "additionalProperties": false }, "reasons": { "type": "array", "items": { "type": "string", "enum": ["agent_not_found", "manifest_evidence_missing", "manifest_evidence_stale", "steward_chain_invalid", "runner_unavailable", "mcp_token_missing", "managed_hard_cap_reached", "skill_dependency_missing", "connection_missing", "connection_scope_unverified", "dry_run_missing", "dry_run_stale_lane", "dry_run_failed", "rehearsal_missing", "rehearsal_stale", "rehearsal_failed", "rehearsal_batch_incomplete", "schedule_invalid", "zero_checked_denominator"] } }, "configuration_digest": { "anyOf": [{ "type": "string", "pattern": "^sha256:[a-f0-9]{64}$" }, { "type": "null" }] }, "configuration": { "anyOf": [{ "type": "object", "properties": { "requested_lane": { "type": "string", "enum": ["cloud", "mcp_session", "runner"] }, "model": { "anyOf": [{ "type": "object", "properties": { "provider": { "type": "string", "enum": ["anthropic"] }, "model": { "type": "string", "minLength": 1, "maxLength": 120, "pattern": "^[^\\n\\r]+$" }, "effort": { "type": "string", "enum": ["low", "medium", "high", "xhigh", "max"] } }, "required": ["provider", "model"], "additionalProperties": false }, { "type": "null" }] }, "schedule": { "type": "object", "properties": { "cron": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "timezone": { "anyOf": [{ "type": "string" }, { "type": "null" }] } }, "required": ["cron", "timezone"], "additionalProperties": false }, "charter": { "type": "object", "properties": { "version_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "manifest_digest": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$" } }, "required": ["version_id", "manifest_digest"], "additionalProperties": false }, "skills": { "type": "array", "items": { "type": "object", "properties": { "version_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "content_sha256": { "type": "string", "pattern": "^[a-f0-9]{64}$" }, "required_tools": { "type": "array", "items": { "type": "object", "properties": { "tool": { "type": "string", "minLength": 1, "maxLength": 120 }, "min_scope_tier": { "type": "string", "enum": ["read", "draft", "write_with_approval", "full"] }, "reason": { "type": "string", "minLength": 1, "maxLength": 500 } }, "required": ["tool", "min_scope_tier"], "additionalProperties": false } }, "optional_tools": { "type": "array", "items": { "type": "object", "properties": { "tool": { "type": "string", "minLength": 1, "maxLength": 120 }, "min_scope_tier": { "type": "string", "enum": ["read", "draft", "write_with_approval", "full"] }, "reason": { "type": "string", "minLength": 1, "maxLength": 500 } }, "required": ["tool", "min_scope_tier"], "additionalProperties": false } } }, "required": ["version_id", "content_sha256", "required_tools", "optional_tools"], "additionalProperties": false } }, "connections": { "type": "array", "items": { "type": "object", "properties": { "provider": { "type": "string", "minLength": 1 }, "identity": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "scopes": { "type": "array", "items": { "type": "string" } } }, "required": ["provider", "identity", "scopes"], "additionalProperties": false } }, "policy": { "type": "object", "properties": { "digest": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$" } }, "required": ["digest"], "additionalProperties": false } }, "required": ["requested_lane", "model", "schedule", "charter", "skills", "connections", "policy"], "additionalProperties": false }, { "type": "null" }] } }, "required": ["agent_id", "seat_id", "lifecycle_admissible", "execution_ready", "steward_chain_valid", "requested_lane", "effective_lane", "runner_available", "selected_runner_id", "selected_runner_capability", "execution_modes", "rehearsal_requirement", "latest_rehearsal", "provider", "model", "inference", "current_spend_usd", "hard_cap_usd", "hard_cap_reached", "schedule", "dry_run", "sources", "manifest_evidence", "checked_counts", "reasons", "configuration_digest", "configuration"], "additionalProperties": false }, { "type": "null" }] }, "blockers": { "type": "array", "items": { "type": "object", "properties": { "code": { "type": "string", "enum": ["missing_active_charter", "archived_parent", "missing_parent", "missing_steward", "missing_occupancy", "missing_goal_or_measurable", "skill_dependency_blocked"] }, "message": { "type": "string", "minLength": 1, "maxLength": 500 } }, "required": ["code", "message"], "additionalProperties": false } }, "next_action": { "type": "string", "enum": ["set_parent", "set_steward", "choose_template", "build_charter", "choose_skills", "configure_tools", "sign_manifest", "run_dry_run", "go_live", "complete", "fix_charter", "fix_reporting_line"] }, "pinned_template_slug": { "type": "string", "minLength": 1 }, "pinned_template_version": { "type": "string", "minLength": 1 }, "created": { "type": "boolean" }, "occupancy_created": { "type": "boolean" } }, "required": ["setup_id", "seat_id", "agent_id", "mode", "kind", "lane", "status", "lifecycle", "template_slug", "schedule_cron", "schedule_timezone", "model_config", "turn_timeout_seconds", "charter_version_id", "charter_status", "parent_seat_id", "parent_seat_archived", "steward_seat_id", "steward_chain_resolves_to_human", "has_occupancy", "skill_discovery_enabled", "tool_decisions", "available_skill_recommendations", "assigned_skills", "skill_dependency_status", "skill_blockers", "steward_remediation", "dry_run", "blockers", "next_action", "pinned_template_slug", "pinned_template_version", "created", "occupancy_created"], "additionalProperties": false }, "help": "Create a draft stock agent and draft Charter from a template; the agent occupancy is created only when a human steward chain resolves, and the agent stays draft until a signed manifest, a passed dry run, and human go-live.", "guide_slugs": ["stock-agents-guide", "agent-staffing-playbook", "how-agents-work"], "stages": ["staffing"], "related_command_ids": ["agent_setup.get", "agent_setup.relane", "agent_setup.start", "agent_setup.update", "agent_template.list", "agent.configure_tools", "agent.create_custom", "agent.decommission", "agent.fleet_digest", "agent.get_run", "agent.go_live", "agent.list_fleet", "agent.list_runs", "agent.list_tool_calls", "agent.pause", "agent.resume", "agent.run_dry_run", "agent.run_now", "agent.status", "agent.update_schedule", "charter.approve", "charter.draft", "compass.set", "confirmation.approve", "confirmation.reject", "deliverable.accept", "deliverable.attach", "deliverable.create", "deliverable.get", "deliverable.list", "deliverable.reject", "error_log.list", "error_log.resolve", "error_log.supersede", "escalation.get", "escalation.list", "escalation.reject", "escalation.resolve", "implementation_access.abandon", "implementation_access.complete", "implementation_access.status", "integration.list", "integration.readiness", "integration.status", "integration.test", "mcp_token.create", "mcp_token.list", "mcp_token.revoke", "onboarding.attach_reference", "onboarding.rehearse", "onboarding.resume", "onboarding.status", "onboarding.upload_context", "runner.diagnose", "runner.repair", "seat.create", "seat.create_complete", "skill.assign_to_seat", "skill.assigned.list", "skill.catalog", "skill.check_dependencies", "skill.create", "skill.enable_catalog", "skill.file.get", "skill.get", "skill.import_github", "skill.import_upload", "skill.install_local", "skill.list", "skill.publish", "skill.revoke_from_seat", "skill.sync_local", "skill.update_draft", "staffing.assign", "staffing.assign_agent_dry_run", "staffing.assign_user", "system.health", "tenant.anthropic_key.disable", "tenant.rename", "tool_grants.tenant.update", "usage.report", "usage.snapshot", "user.tenants", "user.use_tenant", "user.whoami"] },
       { "id": "agent.decommission", "title": "Decommission agent", "description": "Retire an agent occupancy safely. Blocks if it would leave another live agent without a human steward chain.", "required_scope": "tenant", "confirmation": "dangerous", "trusted_execution": { "mode": "always_human", "risk_flags": ["destructive"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "reason": { "type": "string", "minLength": 1, "maxLength": 500 } }, "required": ["seat_id"], "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "agent_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "status": { "type": "string", "const": "decommissioned" } }, "required": ["seat_id", "agent_id", "status"], "additionalProperties": false }, "help": "Retire an agent occupancy safely; the no-orphan guard blocks any decommission that would leave another live agent without a human steward chain.", "guide_slugs": ["agent-staffing-playbook", "how-agents-work", "security-model-guide"], "stages": ["operating_rhythm"], "related_command_ids": ["agent_setup.get", "agent_setup.relane", "agent_setup.start", "agent_setup.update", "agent_template.list", "agent.configure_tools", "agent.create_custom", "agent.create_from_template", "agent.fleet_digest", "agent.get_run", "agent.go_live", "agent.list_fleet", "agent.list_runs", "agent.list_tool_calls", "agent.pause", "agent.resume", "agent.run_dry_run", "agent.run_now", "agent.status", "agent.update_schedule", "confirmation.approve", "escalation.raise", "friction.file_issue", "goal.set_status", "mcp_token.create", "seat.get", "signal.confirm_reading", "staffing.assign_agent_dry_run", "staffing.assign_user", "status.record", "system.health", "task.accept", "task.complete", "task.create", "task.decline", "task.list", "team.health_score", "work.log"] },
       { "id": "agent.fleet_digest", "title": "Get dogfood fleet health digest", "description": "Return a daily tenant fleet health digest with live/idle state, run counts, spend, failed runs, unresolved product errors, notification errors, and next actions.", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "window_hours": { "default": 24, "type": "integer", "minimum": 1, "maximum": 168 }, "error_limit": { "default": 50, "type": "integer", "minimum": 1, "maximum": 100 } }, "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "generated_at": { "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, "window_hours": { "type": "integer", "minimum": 1, "maximum": 168 }, "summary": { "type": "object", "properties": { "fleet_count": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "live_count": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "idle_count": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "turns_24h": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "turns_7d": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "failed_runs_24h": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "failed_runs_7d": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "unresolved_error_count": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "acknowledged_error_count": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "resolved_error_count": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "notification_error_count": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "spend_7d_usd": { "type": "string" }, "spend_30d_usd": { "type": "string" } }, "required": ["fleet_count", "live_count", "idle_count", "turns_24h", "turns_7d", "failed_runs_24h", "failed_runs_7d", "unresolved_error_count", "acknowledged_error_count", "resolved_error_count", "notification_error_count", "spend_7d_usd", "spend_30d_usd"], "additionalProperties": false }, "agents": { "type": "array", "items": { "type": "object", "properties": { "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "seat_name": { "type": "string" }, "seat_path": { "type": "string" }, "parent_seat_name": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "lane": { "anyOf": [{ "type": "string", "enum": ["cloud", "mcp_session", "runner"] }, { "type": "null" }] }, "agent_status": { "type": "string", "enum": ["draft", "dry_run", "live", "paused", "decommissioned", "vacant"] }, "live": { "type": "boolean" }, "last_turn_at": { "anyOf": [{ "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, { "type": "null" }] }, "turns_24h": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "turns_7d": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "top_measurable_status": { "type": "string", "enum": ["on", "off", "pending", "none"] }, "open_escalations": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "spend_usd": { "type": "string" }, "health_status": { "type": "string", "enum": ["needs_review", "stale", "idle", "setup_gap", "awaiting_data", "awaiting_data_overdue", "healthy"] }, "health_reasons": { "type": "array", "items": { "type": "string" } }, "work_evidence": { "type": "object", "properties": { "status": { "type": "string", "enum": ["fresh", "stale", "missing", "queued", "blocked"] }, "label": { "type": "string" }, "detail": { "type": "string" }, "href": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "run_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] }, "linkable_run": { "type": "boolean" }, "can_run_now": { "type": "boolean" } }, "required": ["status", "label", "detail", "href", "run_id", "linkable_run", "can_run_now"], "additionalProperties": false }, "liveness": { "type": "object", "properties": { "state": { "type": "string", "enum": ["working", "idle_waiting", "resource_starved", "unresponsive", "failed_to_start", "alive_but_silent"] }, "reasons": { "type": "array", "items": { "type": "string" } }, "resource_pressure": { "anyOf": [{ "type": "string", "enum": ["ok", "elevated", "critical"] }, { "type": "null" }] } }, "required": ["state", "reasons", "resource_pressure"], "additionalProperties": false }, "host_resource": { "anyOf": [{ "type": "object", "properties": { "reporting": { "type": "boolean" }, "observed_at": { "anyOf": [{ "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, { "type": "null" }] }, "load_avg_1m": { "anyOf": [{ "type": "number" }, { "type": "null" }] }, "cpu_count": { "anyOf": [{ "type": "integer", "minimum": -9007199254740991, "maximum": 9007199254740991 }, { "type": "null" }] }, "memory_total_mb": { "anyOf": [{ "type": "number" }, { "type": "null" }] }, "memory_available_mb": { "anyOf": [{ "type": "number" }, { "type": "null" }] }, "swap_used_mb": { "anyOf": [{ "type": "number" }, { "type": "null" }] }, "swap_total_mb": { "anyOf": [{ "type": "number" }, { "type": "null" }] }, "pressure": { "anyOf": [{ "type": "string", "enum": ["ok", "elevated", "critical"] }, { "type": "null" }] } }, "required": ["reporting", "observed_at", "load_avg_1m", "cpu_count", "memory_total_mb", "memory_available_mb", "swap_used_mb", "swap_total_mb", "pressure"], "additionalProperties": false }, { "type": "null" }] }, "work_progress": { "type": "object", "properties": { "state": { "type": "string", "enum": ["not_started", "in_progress", "handed_off", "done", "failed"] }, "reasons": { "type": "array", "items": { "type": "string" } }, "claimed_state": { "anyOf": [{ "type": "string", "enum": ["not_started", "in_progress", "handed_off", "done", "failed"] }, { "type": "null" }] }, "claim_mismatch": { "type": "boolean" }, "last_activity_at": { "anyOf": [{ "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, { "type": "null" }] }, "last_durable_activity_at": { "anyOf": [{ "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, { "type": "null" }] } }, "required": ["state", "reasons", "claimed_state", "claim_mismatch", "last_activity_at", "last_durable_activity_at"], "additionalProperties": false }, "work_progress_conflict": { "type": "boolean" }, "is_system": { "type": "boolean" }, "failed_runs_24h": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "failed_runs_7d": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "open_held_actions": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "pending_readings": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "setup_gaps": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "spend_7d_usd": { "type": "string" }, "spend_30d_usd": { "type": "string" }, "cost_drift_percent": { "anyOf": [{ "type": "integer", "minimum": -9007199254740991, "maximum": 9007199254740991 }, { "type": "null" }] }, "recent_failed_runs": { "type": "array", "items": { "type": "object", "properties": { "run_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "agent_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "status": { "type": "string", "enum": ["running", "succeeded", "failed", "timeout", "cancelled"] }, "lane": { "type": "string", "enum": ["cloud", "mcp_session", "runner"] }, "model": { "type": "string" }, "started_at": { "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, "finished_at": { "anyOf": [{ "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, { "type": "null" }] }, "cost_usd": { "type": "string" }, "error_logs": { "type": "array", "items": { "type": "object", "properties": { "error_log_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "source": { "type": "string", "enum": ["run", "llm", "tool", "mcp", "runner", "integration", "job", "web"] }, "severity": { "type": "string", "enum": ["warning", "error", "critical"] }, "code": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "message": { "type": "string" }, "created_at": { "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, "resolved_at": { "anyOf": [{ "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, { "type": "null" }] } }, "required": ["error_log_id", "source", "severity", "code", "message", "created_at", "resolved_at"], "additionalProperties": false } } }, "required": ["run_id", "seat_id", "agent_id", "status", "lane", "model", "started_at", "finished_at", "cost_usd", "error_logs"], "additionalProperties": false } }, "unresolved_errors": { "type": "array", "items": { "type": "object", "properties": { "error_log_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "source": { "type": "string", "enum": ["run", "llm", "tool", "mcp", "runner", "integration", "job", "web"] }, "severity": { "type": "string", "enum": ["warning", "error", "critical"] }, "code": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "message": { "type": "string" }, "created_at": { "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, "resolved_at": { "anyOf": [{ "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, { "type": "null" }] }, "seat_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] }, "agent_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] }, "run_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] }, "disposition": { "type": "string", "enum": ["active", "acknowledged", "resolved", "superseded"] } }, "required": ["error_log_id", "source", "severity", "code", "message", "created_at", "resolved_at", "seat_id", "agent_id", "run_id", "disposition"], "additionalProperties": false } }, "notification_errors": { "type": "array", "items": { "type": "object", "properties": { "notification_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "kind": { "type": "string" }, "channel": { "type": "string" }, "status": { "type": "string" }, "provider": { "type": "string" }, "error_message": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "error_log_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] }, "source": { "anyOf": [{ "type": "string", "enum": ["run", "llm", "tool", "mcp", "runner", "integration", "job", "web"] }, { "type": "null" }] }, "seat_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] }, "run_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] }, "created_at": { "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" } }, "required": ["notification_id", "kind", "channel", "status", "provider", "error_message", "error_log_id", "source", "seat_id", "run_id", "created_at"], "additionalProperties": false } }, "suggested_next_action": { "type": "string" } }, "required": ["seat_id", "seat_name", "seat_path", "parent_seat_name", "lane", "agent_status", "live", "last_turn_at", "turns_24h", "turns_7d", "top_measurable_status", "open_escalations", "spend_usd", "health_status", "health_reasons", "work_evidence", "liveness", "host_resource", "work_progress", "work_progress_conflict", "is_system", "failed_runs_24h", "failed_runs_7d", "open_held_actions", "pending_readings", "setup_gaps", "spend_7d_usd", "spend_30d_usd", "cost_drift_percent", "recent_failed_runs", "unresolved_errors", "notification_errors", "suggested_next_action"], "additionalProperties": false } } }, "required": ["generated_at", "window_hours", "summary", "agents"], "additionalProperties": false }, "help": "Capture a daily dogfood fleet health digest with fleet state, run counts, spend, failed runs, unresolved errors, failed notifications, and next actions.", "guide_slugs": ["mcp-and-cli-guide", "how-agents-work", "troubleshooting-guide"], "stages": ["operating_rhythm"], "related_command_ids": ["agent_setup.get", "agent_setup.start", "agent_setup.update", "agent_template.list", "agent.configure_tools", "agent.create_custom", "agent.create_from_template", "agent.decommission", "agent.get_run", "agent.go_live", "agent.list_fleet", "agent.list_runs", "agent.list_tool_calls", "agent.run_dry_run", "agent.status", "charter.approve", "charter.draft", "compass.set", "confirmation.approve", "confirmation.reject", "deliverable.accept", "deliverable.attach", "deliverable.create", "deliverable.get", "deliverable.list", "deliverable.reject", "error_log.list", "error_log.resolve", "error_log.supersede", "escalation.get", "escalation.list", "escalation.raise", "escalation.reject", "escalation.resolve", "friction.file_issue", "goal.set_status", "implementation_access.abandon", "implementation_access.complete", "implementation_access.status", "integration.list", "integration.readiness", "integration.status", "integration.test", "mcp_token.create", "mcp_token.list", "mcp_token.revoke", "onboarding.attach_reference", "onboarding.rehearse", "onboarding.resume", "onboarding.status", "onboarding.upload_context", "runner.diagnose", "runner.repair", "seat.create", "seat.create_complete", "seat.get", "signal.confirm_reading", "skill.assign_to_seat", "skill.assigned.list", "skill.catalog", "skill.check_dependencies", "skill.create", "skill.enable_catalog", "skill.file.get", "skill.get", "skill.import_github", "skill.import_upload", "skill.install_local", "skill.list", "skill.publish", "skill.revoke_from_seat", "skill.sync_local", "skill.update_draft", "staffing.assign", "staffing.assign_agent_dry_run", "status.record", "system.health", "task.accept", "task.complete", "task.create", "task.decline", "task.list", "team.health_score", "tenant.anthropic_key.disable", "tenant.rename", "tool_grants.tenant.update", "usage.report", "usage.snapshot", "user.tenants", "user.use_tenant", "user.whoami", "work.log"] },
       { "id": "agent.get_run", "title": "Get agent run diagnostics", "description": "Return one seat run's diagnostic record: run status, transcript reference, token/cost usage, outcome, and linked product-visible run errors.", "required_scope": "seat", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "run_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "transcript": { "default": false, "type": "boolean" } }, "required": ["seat_id", "run_id"], "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "run": { "type": "object", "properties": { "run_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "agent_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "agent_display_name": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "status": { "type": "string", "enum": ["running", "succeeded", "failed", "timeout", "cancelled"] }, "lane": { "type": "string", "enum": ["cloud", "mcp_session", "runner"] }, "model": { "type": "string" }, "started_at": { "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, "finished_at": { "anyOf": [{ "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, { "type": "null" }] }, "cost_usd": { "type": "string" }, "tool_call_count": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "denied_tool_call_count": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "held_tool_call_count": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "skill_activation_count": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "task_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] }, "work_order_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] }, "transcript_ref": { "type": "string" }, "input_tokens": { "anyOf": [{ "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, { "type": "null" }] }, "output_tokens": { "anyOf": [{ "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, { "type": "null" }] }, "outcome": { "type": "object", "propertyNames": { "type": "string" }, "additionalProperties": {} }, "error_logs": { "type": "array", "items": { "type": "object", "properties": { "error_log_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "source": { "type": "string", "enum": ["run", "llm", "tool", "mcp", "runner", "integration", "job", "web"] }, "severity": { "type": "string", "enum": ["warning", "error", "critical"] }, "code": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "message": { "type": "string" }, "created_at": { "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, "resolved_at": { "anyOf": [{ "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, { "type": "null" }] }, "error_class": { "anyOf": [{ "type": "string" }, { "type": "null" }] } }, "required": ["error_log_id", "source", "severity", "code", "message", "created_at", "resolved_at", "error_class"], "additionalProperties": false } }, "skill_activations": { "type": "array", "items": { "type": "object", "properties": { "skill_activation_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "skill_version_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "slug": { "type": "string", "minLength": 1 }, "name": { "type": "string", "minLength": 1 }, "version": { "type": "integer", "exclusiveMinimum": 0, "maximum": 9007199254740991 }, "activation_reason": { "type": "string" }, "loaded_files": { "type": "array", "items": { "type": "object", "properties": { "path": { "type": "string", "minLength": 1 }, "content_sha256": { "type": "string", "pattern": "^[a-f0-9]{64}$" }, "size_bytes": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 } }, "required": ["path", "content_sha256", "size_bytes"], "additionalProperties": false } }, "created_at": { "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" } }, "required": ["skill_activation_id", "skill_version_id", "slug", "name", "version", "activation_reason", "loaded_files", "created_at"], "additionalProperties": false } }, "transcript": { "anyOf": [{ "type": "object", "properties": { "transcript_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "run_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] }, "lane": { "type": "string", "enum": ["cloud", "runner"] }, "format": { "type": "string", "enum": ["jsonl", "text"] }, "message_count": { "anyOf": [{ "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, { "type": "null" }] }, "truncated": { "type": "boolean" }, "char_count": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "data_classification": { "type": "string", "enum": ["customer_content", "operational", "sandbox_output"] }, "retention_class": { "type": "string", "enum": ["ephemeral_7d", "standard_90d", "durable_1y", "legal_hold"] }, "created_at": { "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, "updated_at": { "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, "transcript": { "type": "string" } }, "required": ["transcript_id", "seat_id", "run_id", "lane", "format", "message_count", "truncated", "char_count", "data_classification", "retention_class", "created_at", "updated_at", "transcript"], "additionalProperties": false }, { "type": "null" }] } }, "required": ["run_id", "agent_id", "agent_display_name", "status", "lane", "model", "started_at", "finished_at", "cost_usd", "tool_call_count", "denied_tool_call_count", "held_tool_call_count", "skill_activation_count", "task_id", "work_order_id", "transcript_ref", "input_tokens", "output_tokens", "outcome", "error_logs", "skill_activations"], "additionalProperties": false } }, "required": ["seat_id", "run"], "additionalProperties": false }, "help": "Read one run's diagnostic record, transcript reference, token/cost usage, outcome, and linked product-visible errors.", "guide_slugs": ["mcp-and-cli-guide", "how-agents-work", "security-model-guide"], "stages": ["operating_rhythm"], "related_command_ids": ["agent_setup.get", "agent_setup.relane", "agent_setup.start", "agent_setup.update", "agent_template.list", "agent.configure_tools", "agent.create_custom", "agent.create_from_template", "agent.decommission", "agent.fleet_digest", "agent.go_live", "agent.list_fleet", "agent.list_runs", "agent.list_tool_calls", "agent.pause", "agent.resume", "agent.run_dry_run", "agent.run_now", "agent.status", "agent.update_schedule", "charter.approve", "charter.draft", "charter.sign_manifest", "compass.set", "confirmation.approve", "confirmation.reject", "credential.ingress", "deliverable.accept", "deliverable.attach", "deliverable.create", "deliverable.get", "deliverable.list", "deliverable.reject", "error_log.list", "error_log.resolve", "error_log.supersede", "escalation.get", "escalation.list", "escalation.reject", "escalation.resolve", "implementation_access.abandon", "implementation_access.complete", "implementation_access.status", "integration.list", "integration.readiness", "integration.status", "integration.test", "mcp_token.create", "mcp_token.list", "mcp_token.revoke", "onboarding.attach_reference", "onboarding.rehearse", "onboarding.resume", "onboarding.status", "onboarding.upload_context", "runner.diagnose", "runner.pairing.start", "runner.repair", "seat.create", "seat.create_complete", "skill.assign_to_seat", "skill.assigned.list", "skill.catalog", "skill.check_dependencies", "skill.create", "skill.enable_catalog", "skill.file.get", "skill.get", "skill.import_github", "skill.import_upload", "skill.install_local", "skill.list", "skill.publish", "skill.revoke_from_seat", "skill.sync_local", "skill.update_draft", "staffing.assign", "staffing.assign_agent_dry_run", "staffing.assign_user", "system.health", "tenant.anthropic_key.disable", "tenant.anthropic_key.save", "tenant.rename", "tool_grants.tenant.update", "usage.report", "usage.snapshot", "user.tenants", "user.use_tenant", "user.whoami"] },
-      { "id": "agent.go_live", "title": "Go live", "description": "Promote a dry-run agent seat to live after the human approval gate.", "required_scope": "seat", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["production"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "charter_version_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" } }, "required": ["seat_id", "charter_version_id"], "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "charter_version_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "status": { "type": "string", "const": "live" } }, "required": ["seat_id", "charter_version_id", "status"], "additionalProperties": false }, "example": { "seat_id": "0190aaaa-aaaa-7aaa-8aaa-aaaaaaaaaaaa", "charter_version_id": "0190cccc-cccc-7ccc-8ccc-cccccccccccc" }, "help": "Move an agent live only after dry-run evidence, signed permissions, and a human Steward chain are clear.", "guide_slugs": ["agent-staffing-playbook", "how-agents-work", "steward-queue-guide"], "stages": ["staffing", "operating_rhythm"], "related_command_ids": ["agent_grant_intervention.decide", "agent_grant_intervention.list", "agent_grant_intervention.resume", "agent_setup.get", "agent_setup.relane", "agent_setup.start", "agent_setup.update", "agent_template.list", "agent.activation_sign", "agent.configure_tools", "agent.create_custom", "agent.create_from_template", "agent.decommission", "agent.fleet_digest", "agent.get_run", "agent.list_fleet", "agent.list_runs", "agent.list_tool_calls", "agent.pause", "agent.resume", "agent.run_dry_run", "agent.run_now", "agent.show_markdown", "agent.status", "agent.trust.create", "agent.trust.expire", "agent.trust.revoke", "agent.trust.supersede", "agent.update_schedule", "aicos.brain_settings.get", "aicos.brain_settings.update", "cascade.import", "charter.approve", "charter.draft", "charter.draft_all", "charter.set", "charter.sign_manifest", "charter.update_draft", "command.describe", "compass.answer_gap", "compass.approve_version", "compass.draft", "compass.get_current", "compass.list_gaps", "compass.reject_draft", "compass.set", "compass.update_draft", "confirmation.activation_set.list", "confirmation.approve", "confirmation.dismiss", "confirmation.dismiss_stale", "confirmation.list", "confirmation.reject", "confirmation.remint", "credential.ingress", "deliverable.accept", "deliverable.attach", "deliverable.create", "deliverable.get", "deliverable.list", "deliverable.reject", "error_log.list", "error_log.resolve", "error_log.supersede", "escalation.get", "escalation.list", "escalation.raise", "escalation.reject", "escalation.resolve", "friction.file_issue", "friction.list", "friction.resolve", "goal.reassign_owner", "goal.reparent", "goal.set_status", "graph.get", "implementation_access.abandon", "implementation_access.complete", "implementation_access.status", "integration.list", "integration.readiness", "integration.status", "integration.test", "mcp_token.create", "mcp_token.list", "mcp_token.revoke", "model.catalog", "notification.list_errors", "notification.settings.get", "notification.settings.update", "notification.test", "onboarding.activate", "onboarding.advance_step", "onboarding.attach_reference", "onboarding.create_invite", "onboarding.finish", "onboarding.rehearse", "onboarding.resume", "onboarding.setup", "onboarding.source_ingest", "onboarding.status", "onboarding.upload_context", "runner.diagnose", "runner.list", "runner.repair", "seat.create", "seat.create_complete", "seat.get", "seat.set_type", "signal.bind", "signal.confirm_reading", "signal.draft_first_readings", "signal.report", "skill.assign_to_seat", "skill.assigned.list", "skill.catalog", "skill.check_dependencies", "skill.create", "skill.enable_catalog", "skill.file.get", "skill.get", "skill.import_github", "skill.import_upload", "skill.install_local", "skill.list", "skill.publish", "skill.revoke_from_seat", "skill.sync_local", "skill.update_draft", "staffing.assign", "staffing.assign_agent_dry_run", "staffing.assign_user", "status.record", "sync.brief.compile", "sync.brief.get", "sync.item.assign", "sync.run.complete", "sync.run.start", "system.health", "task.accept", "task.complete", "task.confirm_proposal", "task.create", "task.decline", "task.decline_proposal", "task.list", "team.health_score", "tenant.anthropic_key.disable", "tenant.model_gateway_policy.update", "tenant.rename", "tool_grants.tenant.update", "tool.catalog", "usage.report", "usage.snapshot", "user.tenants", "user.use_tenant", "user.whoami", "work.log"] },
+      { "id": "agent.go_live", "title": "Go live", "description": "Promote a dry-run agent seat to live after the human approval gate.", "required_scope": "seat", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["production"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "charter_version_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" } }, "required": ["seat_id", "charter_version_id"], "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "charter_version_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "status": { "type": "string", "const": "live" } }, "required": ["seat_id", "charter_version_id", "status"], "additionalProperties": false }, "example": { "seat_id": "0190aaaa-aaaa-7aaa-8aaa-aaaaaaaaaaaa", "charter_version_id": "0190cccc-cccc-7ccc-8ccc-cccccccccccc" }, "help": "Move an agent live only after dry-run evidence, signed permissions, and a human Steward chain are clear.", "guide_slugs": ["agent-staffing-playbook", "how-agents-work", "steward-queue-guide"], "stages": ["staffing", "operating_rhythm"], "related_command_ids": ["agent_grant_intervention.decide", "agent_grant_intervention.list", "agent_grant_intervention.resume", "agent_setup.get", "agent_setup.relane", "agent_setup.start", "agent_setup.update", "agent_template.list", "agent.activation_sign", "agent.configure_tools", "agent.create_custom", "agent.create_from_template", "agent.decommission", "agent.fleet_digest", "agent.get_run", "agent.list_fleet", "agent.list_runs", "agent.list_tool_calls", "agent.pause", "agent.resume", "agent.run_dry_run", "agent.run_now", "agent.show_markdown", "agent.status", "agent.trust.create", "agent.trust.expire", "agent.trust.revoke", "agent.trust.supersede", "agent.update_schedule", "aicos.brain_settings.get", "aicos.brain_settings.update", "cascade.import", "charter.approve", "charter.backfill_stock_evidence", "charter.draft", "charter.draft_all", "charter.set", "charter.sign_manifest", "charter.update_draft", "command.describe", "compass.answer_gap", "compass.approve_version", "compass.draft", "compass.get_current", "compass.list_gaps", "compass.reject_draft", "compass.set", "compass.update_draft", "confirmation.activation_set.list", "confirmation.approve", "confirmation.dismiss", "confirmation.dismiss_stale", "confirmation.list", "confirmation.reject", "confirmation.remint", "credential.ingress", "deliverable.accept", "deliverable.attach", "deliverable.create", "deliverable.get", "deliverable.list", "deliverable.reject", "error_log.list", "error_log.resolve", "error_log.supersede", "escalation.get", "escalation.list", "escalation.raise", "escalation.reject", "escalation.resolve", "friction.file_issue", "friction.list", "friction.resolve", "goal.reassign_owner", "goal.reparent", "goal.set_status", "graph.get", "implementation_access.abandon", "implementation_access.complete", "implementation_access.status", "integration.list", "integration.readiness", "integration.status", "integration.test", "mcp_token.create", "mcp_token.list", "mcp_token.revoke", "model.catalog", "notification.list_errors", "notification.settings.get", "notification.settings.update", "notification.test", "onboarding.activate", "onboarding.advance_step", "onboarding.attach_reference", "onboarding.create_invite", "onboarding.finish", "onboarding.rehearse", "onboarding.resume", "onboarding.setup", "onboarding.source_ingest", "onboarding.status", "onboarding.upload_context", "runner.diagnose", "runner.list", "runner.repair", "seat.create", "seat.create_complete", "seat.get", "seat.set_type", "signal.bind", "signal.confirm_reading", "signal.draft_first_readings", "signal.report", "skill.assign_to_seat", "skill.assigned.list", "skill.catalog", "skill.check_dependencies", "skill.create", "skill.enable_catalog", "skill.file.get", "skill.get", "skill.import_github", "skill.import_upload", "skill.install_local", "skill.list", "skill.publish", "skill.revoke_from_seat", "skill.sync_local", "skill.update_draft", "staffing.assign", "staffing.assign_agent_dry_run", "staffing.assign_user", "status.record", "sync.brief.compile", "sync.brief.get", "sync.item.assign", "sync.run.complete", "sync.run.start", "system.health", "task.accept", "task.complete", "task.confirm_proposal", "task.create", "task.decline", "task.decline_proposal", "task.list", "team.health_score", "tenant.anthropic_key.disable", "tenant.model_gateway_policy.update", "tenant.rename", "tool_grants.tenant.update", "tool.catalog", "usage.report", "usage.snapshot", "user.tenants", "user.use_tenant", "user.whoami", "work.log"] },
       { "id": "agent.import_definition", "title": "Import agent definition", "description": "Import a versioned ROST agent definition into a draft Seat and setup state without credentials, placement identifiers, or go-live side effects.", "required_scope": "tenant", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": [], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "definition_json": { "type": "string", "minLength": 1, "maxLength": 65536 }, "idempotency_key": { "type": "string", "minLength": 1, "maxLength": 120 } }, "required": ["definition_json"], "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "setup": { "type": "object", "properties": { "setup_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "agent_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "mode": { "type": "string", "enum": ["template", "custom", "existing"] }, "kind": { "type": "string", "enum": ["stock", "custom", "external_mcp", "runner_local"] }, "lane": { "type": "string", "enum": ["cloud", "mcp_session", "runner"] }, "status": { "type": "string", "enum": ["draft", "dry_run", "live", "paused", "decommissioned"] }, "lifecycle": { "type": "string", "enum": ["none", "draft_setup", "dry_run", "live", "paused", "decommissioned"] }, "template_slug": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "schedule_cron": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "schedule_timezone": { "type": "string", "minLength": 1, "maxLength": 100 }, "model_config": { "anyOf": [{ "type": "object", "properties": { "provider": { "type": "string", "enum": ["anthropic"] }, "model": { "type": "string", "minLength": 1, "maxLength": 120, "pattern": "^[^\\n\\r]+$" }, "effort": { "type": "string", "enum": ["low", "medium", "high", "xhigh", "max"] } }, "required": ["provider", "model"], "additionalProperties": false }, { "type": "null" }] }, "turn_timeout_seconds": { "anyOf": [{ "type": "integer", "minimum": 30, "maximum": 1800 }, { "type": "null" }] }, "charter_version_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] }, "charter_status": { "anyOf": [{ "type": "string", "enum": ["draft", "active", "superseded"] }, { "type": "null" }] }, "parent_seat_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] }, "parent_seat_archived": { "type": "boolean" }, "steward_seat_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] }, "steward_chain_resolves_to_human": { "type": "boolean" }, "has_occupancy": { "type": "boolean" }, "skill_discovery_enabled": { "type": "boolean" }, "tool_decisions": { "type": "array", "items": { "type": "object", "properties": { "tool": { "type": "string", "minLength": 1 }, "scope": { "type": "string" }, "decision": { "type": "string", "enum": ["connected", "declined", "pending"] } }, "required": ["tool", "scope", "decision"], "additionalProperties": false } }, "available_skill_recommendations": { "type": "array", "items": { "type": "object", "properties": { "skill_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "slug": { "type": "string", "pattern": "^[a-z0-9][a-z0-9-]{1,80}$" }, "name": { "type": "string", "minLength": 1, "maxLength": 120 }, "description": { "type": "string", "minLength": 1 }, "status": { "type": "string", "enum": ["draft", "pending_review", "published", "archived"] }, "visibility": { "type": "string", "enum": ["private", "seat", "tenant"] }, "application": { "type": "object", "properties": { "domain": { "type": "string", "minLength": 1, "maxLength": 80 }, "summary": { "type": "string", "minLength": 1, "maxLength": 500 }, "best_for": { "default": [], "maxItems": 20, "type": "array", "items": { "type": "string", "minLength": 1, "maxLength": 160 } }, "not_for": { "default": [], "maxItems": 20, "type": "array", "items": { "type": "string", "minLength": 1, "maxLength": 160 } } }, "required": ["summary"], "additionalProperties": false }, "source_type": { "anyOf": [{ "type": "string", "enum": ["ui", "cli", "mcp", "github", "upload", "rost_catalog_public", "rost_catalog_private"] }, { "type": "null" }] }, "latest_version_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] }, "latest_version": { "anyOf": [{ "type": "integer", "exclusiveMinimum": 0, "maximum": 9007199254740991 }, { "type": "null" }] }, "content_sha256": { "anyOf": [{ "type": "string", "pattern": "^[a-f0-9]{64}$" }, { "type": "null" }] }, "required_tools": { "type": "array", "items": { "type": "object", "properties": { "tool": { "type": "string", "minLength": 1, "maxLength": 120 }, "min_scope_tier": { "type": "string", "enum": ["read", "draft", "write_with_approval", "full"] }, "reason": { "type": "string", "minLength": 1, "maxLength": 500 } }, "required": ["tool", "min_scope_tier"], "additionalProperties": false } }, "optional_tools": { "type": "array", "items": { "type": "object", "properties": { "tool": { "type": "string", "minLength": 1, "maxLength": 120 }, "min_scope_tier": { "type": "string", "enum": ["read", "draft", "write_with_approval", "full"] }, "reason": { "type": "string", "minLength": 1, "maxLength": 500 } }, "required": ["tool", "min_scope_tier"], "additionalProperties": false } }, "assigned_seat_count": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "created_at": { "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, "updated_at": { "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, "match_score": { "type": "integer", "minimum": 0, "maximum": 100 }, "recommendation_reason": { "type": "string", "minLength": 1, "maxLength": 240 } }, "required": ["skill_id", "slug", "name", "description", "status", "visibility", "application", "source_type", "latest_version_id", "latest_version", "content_sha256", "required_tools", "optional_tools", "assigned_seat_count", "created_at", "updated_at", "match_score", "recommendation_reason"], "additionalProperties": false } }, "assigned_skills": { "type": "array", "items": { "type": "object", "properties": { "assignment_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "seat_name": { "type": "string", "minLength": 1 }, "skill_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "skill_version_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "slug": { "type": "string", "pattern": "^[a-z0-9][a-z0-9-]{1,80}$" }, "name": { "type": "string", "minLength": 1, "maxLength": 120 }, "description": { "type": "string", "minLength": 1 }, "version": { "type": "integer", "exclusiveMinimum": 0, "maximum": 9007199254740991 }, "status": { "type": "string", "enum": ["proposed", "approved", "revoked"] }, "rationale": { "type": "string", "minLength": 1 }, "dependency_status": { "type": "object", "propertyNames": { "type": "string" }, "additionalProperties": {} }, "approved_at": { "anyOf": [{ "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, { "type": "null" }] } }, "required": ["assignment_id", "seat_id", "seat_name", "skill_id", "skill_version_id", "slug", "name", "description", "version", "status", "rationale", "dependency_status", "approved_at"], "additionalProperties": false } }, "skill_dependency_status": { "type": "object", "properties": { "status": { "type": "string", "enum": ["ready", "blocked", "warning"] }, "checks": { "type": "array", "items": { "type": "object", "properties": { "status": { "type": "string", "enum": ["ready", "blocked", "warning"] }, "skill_version_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "required": { "type": "array", "items": { "type": "object", "properties": { "tool": { "type": "string", "minLength": 1 }, "min_scope_tier": { "type": "string", "enum": ["read", "draft", "write_with_approval", "full"] }, "status": { "type": "string", "enum": ["ready", "missing", "insufficient_scope", "unknown_tool"] }, "required": { "type": "boolean" }, "current_scope_tier": { "anyOf": [{ "type": "string", "enum": ["read", "draft", "write_with_approval", "full"] }, { "type": "null" }] }, "reason": { "type": "string" } }, "required": ["tool", "min_scope_tier", "status", "required", "current_scope_tier"], "additionalProperties": false } }, "optional": { "type": "array", "items": { "type": "object", "properties": { "tool": { "type": "string", "minLength": 1 }, "min_scope_tier": { "type": "string", "enum": ["read", "draft", "write_with_approval", "full"] }, "status": { "type": "string", "enum": ["ready", "missing", "insufficient_scope", "unknown_tool"] }, "required": { "type": "boolean" }, "current_scope_tier": { "anyOf": [{ "type": "string", "enum": ["read", "draft", "write_with_approval", "full"] }, { "type": "null" }] }, "reason": { "type": "string" } }, "required": ["tool", "min_scope_tier", "status", "required", "current_scope_tier"], "additionalProperties": false } }, "suggested_agent_configure_tools_input": { "type": "object", "properties": { "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "tool_decisions": { "type": "array", "items": { "type": "object", "properties": { "tool": { "type": "string", "minLength": 1 }, "decision": { "type": "string", "const": "connect" } }, "required": ["tool", "decision"], "additionalProperties": false } } }, "required": ["seat_id", "tool_decisions"], "additionalProperties": false } }, "required": ["status", "skill_version_id", "seat_id", "required", "optional", "suggested_agent_configure_tools_input"], "additionalProperties": false } } }, "required": ["status", "checks"], "additionalProperties": false }, "skill_blockers": { "type": "array", "items": { "type": "object", "properties": { "skill_version_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "slug": { "type": "string", "pattern": "^[a-z0-9][a-z0-9-]{1,80}$" }, "name": { "type": "string", "minLength": 1, "maxLength": 120 }, "required_tools": { "type": "array", "items": { "type": "string", "minLength": 1 } }, "message": { "type": "string", "minLength": 1, "maxLength": 500 } }, "required": ["skill_version_id", "slug", "name", "required_tools", "message"], "additionalProperties": false } }, "steward_remediation": { "anyOf": [{ "type": "object", "properties": { "candidates": { "type": "array", "items": { "type": "object", "properties": { "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "name": { "type": "string", "minLength": 1, "maxLength": 160 }, "has_human_occupant": { "type": "boolean" }, "recommended": { "type": "boolean" } }, "required": ["seat_id", "name", "has_human_occupant", "recommended"], "additionalProperties": false } }, "message": { "type": "string", "minLength": 1, "maxLength": 500 } }, "required": ["candidates", "message"], "additionalProperties": false }, { "type": "null" }] }, "dry_run": { "anyOf": [{ "type": "object", "properties": { "status": { "type": "string", "enum": ["passed", "failed"] }, "summary": { "type": "string" }, "transcript": { "type": "object", "properties": { "status": { "type": "string", "enum": ["passed", "failed"] }, "escalated": { "type": "boolean" }, "must_escalate_clause": { "type": "string", "minLength": 1 }, "summary": { "type": "string", "minLength": 1 }, "steps": { "minItems": 1, "type": "array", "items": { "type": "object", "properties": { "kind": { "type": "string", "enum": ["task", "message", "tool_call", "escalation", "result"] }, "text": { "type": "string", "minLength": 1 }, "tool_name": { "type": "string", "minLength": 1 }, "guard": { "type": "string", "enum": ["allowed", "denied_manifest", "escalated"] } }, "required": ["kind", "text"], "additionalProperties": false } }, "tool_preview": { "type": "array", "items": { "type": "object", "properties": { "tool_name": { "type": "string", "minLength": 1 }, "intended_action": { "type": "string", "minLength": 1 }, "status": { "type": "string", "enum": ["intended", "blocked", "escalated"] }, "guard": { "type": "string", "enum": ["allowed", "denied_manifest", "escalated"] } }, "required": ["tool_name", "intended_action", "status", "guard"], "additionalProperties": false } }, "lane": { "type": "string", "enum": ["cloud", "mcp_session", "runner"] }, "granted_tools": { "type": "array", "items": { "type": "object", "properties": { "tool_name": { "type": "string", "minLength": 1 }, "executability": { "type": "string", "enum": ["executable", "unimplemented_in_lane", "held_for_steward"] } }, "required": ["tool_name", "executability"], "additionalProperties": false } }, "run_id": { "type": "string", "minLength": 1 } }, "required": ["status", "escalated", "must_escalate_clause", "summary", "steps"], "additionalProperties": false } }, "required": ["status", "summary"], "additionalProperties": false }, { "type": "null" }] }, "readiness": { "anyOf": [{ "type": "object", "properties": { "agent_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "lifecycle_admissible": { "type": "boolean" }, "execution_ready": { "type": "boolean" }, "steward_chain_valid": { "type": "boolean" }, "requested_lane": { "type": "string", "enum": ["cloud", "mcp_session", "runner"] }, "effective_lane": { "type": "string", "enum": ["cloud", "mcp_session", "runner"] }, "runner_available": { "type": "boolean" }, "selected_runner_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] }, "selected_runner_capability": { "anyOf": [{ "type": "object", "properties": { "runner_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "capabilities": { "type": "object", "properties": { "claude": { "type": "boolean" }, "codex": { "type": "boolean" } }, "required": ["claude", "codex"], "additionalProperties": false } }, "required": ["runner_id", "capabilities"], "additionalProperties": false }, { "type": "null" }] }, "execution_modes": { "minItems": 1, "type": "array", "items": { "type": "string", "enum": ["production_manual", "production_scheduled"] } }, "rehearsal_requirement": { "oneOf": [{ "type": "object", "properties": { "kind": { "type": "string", "const": "not_required" } }, "required": ["kind"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "type": "string", "const": "onboarding_setup" }, "setup_application_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "expected_receipt_revision": { "type": "integer", "exclusiveMinimum": 0, "maximum": 9007199254740991 }, "configuration_digest": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$" } }, "required": ["kind", "setup_application_id", "expected_receipt_revision", "configuration_digest"], "additionalProperties": false }] }, "latest_rehearsal": { "anyOf": [{ "type": "object", "properties": { "receipt_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "terminal_batch_receipt_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "setup_application_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "expected_receipt_revision": { "type": "integer", "exclusiveMinimum": 0, "maximum": 9007199254740991 }, "rehearsal_run_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "configuration_digest": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$" }, "outcome": { "type": "string", "enum": ["passed", "failed"] }, "completed_at": { "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z))$" } }, "required": ["receipt_id", "terminal_batch_receipt_id", "setup_application_id", "expected_receipt_revision", "rehearsal_run_id", "configuration_digest", "outcome", "completed_at"], "additionalProperties": false }, { "type": "null" }] }, "provider": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "model": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "inference": { "type": "string", "enum": ["managed", "byok"] }, "current_spend_usd": { "type": "string" }, "hard_cap_usd": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "hard_cap_reached": { "type": "boolean" }, "schedule": { "type": "object", "properties": { "valid": { "type": "boolean" }, "cron": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "timezone": { "anyOf": [{ "type": "string" }, { "type": "null" }] } }, "required": ["valid", "cron", "timezone"], "additionalProperties": false }, "dry_run": { "type": "object", "properties": { "state": { "type": "string", "enum": ["passed", "missing", "failed", "stale_lane"] }, "run_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] } }, "required": ["state", "run_id"], "additionalProperties": false }, "sources": { "type": "object", "properties": { "ready": { "type": "boolean" }, "checked": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "required": { "type": "integer", "exclusiveMinimum": 0, "maximum": 9007199254740991 } }, "required": ["ready", "checked", "required"], "additionalProperties": false }, "manifest_evidence": { "type": "object", "properties": { "state": { "type": "string", "enum": ["verified", "missing", "stale"] }, "receipt_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] }, "revision": { "anyOf": [{ "type": "integer", "exclusiveMinimum": 0, "maximum": 9007199254740991 }, { "type": "null" }] } }, "required": ["state", "receipt_id", "revision"], "additionalProperties": false }, "checked_counts": { "type": "object", "properties": { "manifest_evidence": { "type": "object", "properties": { "checked": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "required": { "type": "integer", "exclusiveMinimum": 0, "maximum": 9007199254740991 } }, "required": ["checked", "required"], "additionalProperties": false }, "skills": { "type": "object", "properties": { "checked": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "required": { "type": "integer", "exclusiveMinimum": 0, "maximum": 9007199254740991 } }, "required": ["checked", "required"], "additionalProperties": false }, "connections": { "type": "object", "properties": { "checked": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "required": { "type": "integer", "exclusiveMinimum": 0, "maximum": 9007199254740991 } }, "required": ["checked", "required"], "additionalProperties": false }, "stewardship": { "type": "object", "properties": { "checked": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "required": { "type": "integer", "exclusiveMinimum": 0, "maximum": 9007199254740991 } }, "required": ["checked", "required"], "additionalProperties": false }, "runtime": { "type": "object", "properties": { "checked": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "required": { "type": "integer", "exclusiveMinimum": 0, "maximum": 9007199254740991 } }, "required": ["checked", "required"], "additionalProperties": false } }, "required": ["manifest_evidence", "skills", "connections", "stewardship", "runtime"], "additionalProperties": false }, "reasons": { "type": "array", "items": { "type": "string", "enum": ["agent_not_found", "manifest_evidence_missing", "manifest_evidence_stale", "steward_chain_invalid", "runner_unavailable", "mcp_token_missing", "managed_hard_cap_reached", "skill_dependency_missing", "connection_missing", "connection_scope_unverified", "dry_run_missing", "dry_run_stale_lane", "dry_run_failed", "rehearsal_missing", "rehearsal_stale", "rehearsal_failed", "rehearsal_batch_incomplete", "schedule_invalid", "zero_checked_denominator"] } }, "configuration_digest": { "anyOf": [{ "type": "string", "pattern": "^sha256:[a-f0-9]{64}$" }, { "type": "null" }] }, "configuration": { "anyOf": [{ "type": "object", "properties": { "requested_lane": { "type": "string", "enum": ["cloud", "mcp_session", "runner"] }, "model": { "anyOf": [{ "type": "object", "properties": { "provider": { "type": "string", "enum": ["anthropic"] }, "model": { "type": "string", "minLength": 1, "maxLength": 120, "pattern": "^[^\\n\\r]+$" }, "effort": { "type": "string", "enum": ["low", "medium", "high", "xhigh", "max"] } }, "required": ["provider", "model"], "additionalProperties": false }, { "type": "null" }] }, "schedule": { "type": "object", "properties": { "cron": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "timezone": { "anyOf": [{ "type": "string" }, { "type": "null" }] } }, "required": ["cron", "timezone"], "additionalProperties": false }, "charter": { "type": "object", "properties": { "version_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "manifest_digest": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$" } }, "required": ["version_id", "manifest_digest"], "additionalProperties": false }, "skills": { "type": "array", "items": { "type": "object", "properties": { "version_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "content_sha256": { "type": "string", "pattern": "^[a-f0-9]{64}$" }, "required_tools": { "type": "array", "items": { "type": "object", "properties": { "tool": { "type": "string", "minLength": 1, "maxLength": 120 }, "min_scope_tier": { "type": "string", "enum": ["read", "draft", "write_with_approval", "full"] }, "reason": { "type": "string", "minLength": 1, "maxLength": 500 } }, "required": ["tool", "min_scope_tier"], "additionalProperties": false } }, "optional_tools": { "type": "array", "items": { "type": "object", "properties": { "tool": { "type": "string", "minLength": 1, "maxLength": 120 }, "min_scope_tier": { "type": "string", "enum": ["read", "draft", "write_with_approval", "full"] }, "reason": { "type": "string", "minLength": 1, "maxLength": 500 } }, "required": ["tool", "min_scope_tier"], "additionalProperties": false } } }, "required": ["version_id", "content_sha256", "required_tools", "optional_tools"], "additionalProperties": false } }, "connections": { "type": "array", "items": { "type": "object", "properties": { "provider": { "type": "string", "minLength": 1 }, "identity": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "scopes": { "type": "array", "items": { "type": "string" } } }, "required": ["provider", "identity", "scopes"], "additionalProperties": false } }, "policy": { "type": "object", "properties": { "digest": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$" } }, "required": ["digest"], "additionalProperties": false } }, "required": ["requested_lane", "model", "schedule", "charter", "skills", "connections", "policy"], "additionalProperties": false }, { "type": "null" }] } }, "required": ["agent_id", "seat_id", "lifecycle_admissible", "execution_ready", "steward_chain_valid", "requested_lane", "effective_lane", "runner_available", "selected_runner_id", "selected_runner_capability", "execution_modes", "rehearsal_requirement", "latest_rehearsal", "provider", "model", "inference", "current_spend_usd", "hard_cap_usd", "hard_cap_reached", "schedule", "dry_run", "sources", "manifest_evidence", "checked_counts", "reasons", "configuration_digest", "configuration"], "additionalProperties": false }, { "type": "null" }] }, "blockers": { "type": "array", "items": { "type": "object", "properties": { "code": { "type": "string", "enum": ["missing_active_charter", "archived_parent", "missing_parent", "missing_steward", "missing_occupancy", "missing_goal_or_measurable", "skill_dependency_blocked"] }, "message": { "type": "string", "minLength": 1, "maxLength": 500 } }, "required": ["code", "message"], "additionalProperties": false } }, "next_action": { "type": "string", "enum": ["set_parent", "set_steward", "choose_template", "build_charter", "choose_skills", "configure_tools", "sign_manifest", "run_dry_run", "go_live", "complete", "fix_charter", "fix_reporting_line"] } }, "required": ["setup_id", "seat_id", "agent_id", "mode", "kind", "lane", "status", "lifecycle", "template_slug", "schedule_cron", "schedule_timezone", "model_config", "turn_timeout_seconds", "charter_version_id", "charter_status", "parent_seat_id", "parent_seat_archived", "steward_seat_id", "steward_chain_resolves_to_human", "has_occupancy", "skill_discovery_enabled", "tool_decisions", "available_skill_recommendations", "assigned_skills", "skill_dependency_status", "skill_blockers", "steward_remediation", "dry_run", "blockers", "next_action"], "additionalProperties": false }, "mapping": { "type": "object", "properties": { "method": { "type": "string", "const": "import" }, "source_hash": { "type": "string", "minLength": 64, "maxLength": 64 }, "seat_name": { "type": "string" }, "lane": { "type": "string", "enum": ["cloud", "runner", "mcp_session"] }, "model_tier": { "anyOf": [{ "type": "string", "enum": ["triage", "balanced", "complex", "hardest"] }, { "type": "null" }] }, "requested_tools": { "type": "array", "items": { "type": "object", "properties": { "capability_id": { "type": "string", "minLength": 1, "maxLength": 160 }, "access": { "default": "read", "type": "string", "enum": ["read", "draft", "write_with_approval"] }, "rationale": { "type": "string", "maxLength": 360 } }, "required": ["capability_id"], "additionalProperties": false } }, "unsupported": { "default": [], "type": "array", "items": { "type": "object", "properties": { "field": { "type": "string" }, "reason": { "type": "string" } }, "required": ["field", "reason"], "additionalProperties": false } } }, "required": ["method", "source_hash", "seat_name", "lane", "model_tier", "requested_tools"], "additionalProperties": false }, "created": { "type": "boolean" }, "idempotency_key": { "anyOf": [{ "type": "string" }, { "type": "null" }] } }, "required": ["setup", "mapping", "created", "idempotency_key"], "additionalProperties": false }, "help": "Import a strict, versioned ROST agent definition into a canonical draft Seat/setup. The file cannot carry credentials or tenant-local placement ids; tools remain proposal-only until reviewed through setup.", "guide_slugs": ["agent-staffing-playbook", "charter-design-playbook", "tool-access-and-vault", "security-model-guide"], "stages": ["staffing"], "related_command_ids": ["agent_setup.get", "agent.configure_tools", "agent.create_custom"] },
       { "id": "agent.list_fleet", "title": "List agent fleet", "description": "Return every agent-occupied seat with lane, live state, last real turn, recent turn counts, top measurable status, open escalations, 7-day real-run spend, and the health/work-progress axes the web fleet page renders (health status, work evidence, work progress, host-resource pressure).", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": {}, "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "agents": { "type": "array", "items": { "type": "object", "properties": { "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "seat_name": { "type": "string" }, "seat_path": { "type": "string" }, "parent_seat_name": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "lane": { "anyOf": [{ "type": "string", "enum": ["cloud", "mcp_session", "runner"] }, { "type": "null" }] }, "agent_status": { "type": "string", "enum": ["draft", "dry_run", "live", "paused", "decommissioned", "vacant"] }, "live": { "type": "boolean" }, "last_turn_at": { "anyOf": [{ "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, { "type": "null" }] }, "turns_24h": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "turns_7d": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "top_measurable_status": { "type": "string", "enum": ["on", "off", "pending", "none"] }, "open_escalations": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "spend_usd": { "type": "string" }, "health_status": { "type": "string", "enum": ["needs_review", "stale", "idle", "setup_gap", "awaiting_data", "awaiting_data_overdue", "healthy"] }, "health_reasons": { "type": "array", "items": { "type": "string" } }, "work_evidence": { "type": "object", "properties": { "status": { "type": "string", "enum": ["fresh", "stale", "missing", "queued", "blocked"] }, "label": { "type": "string" }, "detail": { "type": "string" }, "href": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "run_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] }, "linkable_run": { "type": "boolean" }, "can_run_now": { "type": "boolean" } }, "required": ["status", "label", "detail", "href", "run_id", "linkable_run", "can_run_now"], "additionalProperties": false }, "liveness": { "type": "object", "properties": { "state": { "type": "string", "enum": ["working", "idle_waiting", "resource_starved", "unresponsive", "failed_to_start", "alive_but_silent"] }, "reasons": { "type": "array", "items": { "type": "string" } }, "resource_pressure": { "anyOf": [{ "type": "string", "enum": ["ok", "elevated", "critical"] }, { "type": "null" }] } }, "required": ["state", "reasons", "resource_pressure"], "additionalProperties": false }, "host_resource": { "anyOf": [{ "type": "object", "properties": { "reporting": { "type": "boolean" }, "observed_at": { "anyOf": [{ "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, { "type": "null" }] }, "load_avg_1m": { "anyOf": [{ "type": "number" }, { "type": "null" }] }, "cpu_count": { "anyOf": [{ "type": "integer", "minimum": -9007199254740991, "maximum": 9007199254740991 }, { "type": "null" }] }, "memory_total_mb": { "anyOf": [{ "type": "number" }, { "type": "null" }] }, "memory_available_mb": { "anyOf": [{ "type": "number" }, { "type": "null" }] }, "swap_used_mb": { "anyOf": [{ "type": "number" }, { "type": "null" }] }, "swap_total_mb": { "anyOf": [{ "type": "number" }, { "type": "null" }] }, "pressure": { "anyOf": [{ "type": "string", "enum": ["ok", "elevated", "critical"] }, { "type": "null" }] } }, "required": ["reporting", "observed_at", "load_avg_1m", "cpu_count", "memory_total_mb", "memory_available_mb", "swap_used_mb", "swap_total_mb", "pressure"], "additionalProperties": false }, { "type": "null" }] }, "work_progress": { "type": "object", "properties": { "state": { "type": "string", "enum": ["not_started", "in_progress", "handed_off", "done", "failed"] }, "reasons": { "type": "array", "items": { "type": "string" } }, "claimed_state": { "anyOf": [{ "type": "string", "enum": ["not_started", "in_progress", "handed_off", "done", "failed"] }, { "type": "null" }] }, "claim_mismatch": { "type": "boolean" }, "last_activity_at": { "anyOf": [{ "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, { "type": "null" }] }, "last_durable_activity_at": { "anyOf": [{ "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, { "type": "null" }] } }, "required": ["state", "reasons", "claimed_state", "claim_mismatch", "last_activity_at", "last_durable_activity_at"], "additionalProperties": false }, "work_progress_conflict": { "type": "boolean" }, "is_system": { "type": "boolean" } }, "required": ["seat_id", "seat_name", "seat_path", "parent_seat_name", "lane", "agent_status", "live", "last_turn_at", "turns_24h", "turns_7d", "top_measurable_status", "open_escalations", "spend_usd", "health_status", "health_reasons", "work_evidence", "liveness", "host_resource", "work_progress", "work_progress_conflict", "is_system"], "additionalProperties": false } } }, "required": ["agents"], "additionalProperties": false }, "help": "Read every agent-occupied seat at once: lane, live state, last real turn, 24h/7d turns, measurable status, escalations, and spend.", "guide_slugs": ["mcp-and-cli-guide", "how-agents-work"], "stages": ["operating_rhythm"], "related_command_ids": ["agent_setup.get", "agent_setup.start", "agent_setup.update", "agent_template.list", "agent.configure_tools", "agent.create_custom", "agent.create_from_template", "agent.decommission", "agent.fleet_digest", "agent.get_run", "agent.go_live", "agent.list_runs", "agent.list_tool_calls", "agent.run_dry_run", "agent.status", "charter.approve", "charter.draft", "compass.set", "confirmation.approve", "confirmation.reject", "deliverable.accept", "deliverable.attach", "deliverable.create", "deliverable.get", "deliverable.list", "deliverable.reject", "error_log.list", "error_log.resolve", "error_log.supersede", "escalation.get", "escalation.list", "escalation.raise", "escalation.reject", "escalation.resolve", "friction.file_issue", "goal.set_status", "implementation_access.abandon", "implementation_access.complete", "implementation_access.status", "integration.list", "integration.readiness", "integration.status", "integration.test", "mcp_token.create", "mcp_token.list", "mcp_token.revoke", "onboarding.attach_reference", "onboarding.rehearse", "onboarding.resume", "onboarding.status", "onboarding.upload_context", "runner.diagnose", "runner.repair", "seat.create", "seat.create_complete", "seat.get", "signal.confirm_reading", "skill.assign_to_seat", "skill.assigned.list", "skill.catalog", "skill.check_dependencies", "skill.create", "skill.enable_catalog", "skill.file.get", "skill.get", "skill.import_github", "skill.import_upload", "skill.install_local", "skill.list", "skill.publish", "skill.revoke_from_seat", "skill.sync_local", "skill.update_draft", "staffing.assign", "staffing.assign_agent_dry_run", "status.record", "system.health", "task.accept", "task.complete", "task.create", "task.decline", "task.list", "team.health_score", "tenant.anthropic_key.disable", "tenant.rename", "tool_grants.tenant.update", "usage.report", "usage.snapshot", "user.tenants", "user.use_tenant", "user.whoami", "work.log"] },
       { "id": "agent.list_runs", "title": "List agent runs", "description": "Return a seat's agent run history (status, lane, model, cost, per-run tool-call, guard-denied, and guard-held counts) plus the seat's run/tool-call rollup with held-action count.", "required_scope": "seat", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "limit": { "default": 50, "type": "integer", "minimum": 1, "maximum": 200 } }, "required": ["seat_id"], "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "summary": { "type": "object", "properties": { "run_count": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "failed_run_count": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "tool_call_count": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "denied_tool_call_count": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "held_tool_call_count": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "last_activity_at": { "anyOf": [{ "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, { "type": "null" }] } }, "required": ["run_count", "failed_run_count", "tool_call_count", "denied_tool_call_count", "held_tool_call_count", "last_activity_at"], "additionalProperties": false }, "runs": { "type": "array", "items": { "type": "object", "properties": { "run_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "agent_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "agent_display_name": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "status": { "type": "string", "enum": ["running", "succeeded", "failed", "timeout", "cancelled"] }, "lane": { "type": "string", "enum": ["cloud", "mcp_session", "runner"] }, "model": { "type": "string" }, "started_at": { "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, "finished_at": { "anyOf": [{ "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, { "type": "null" }] }, "cost_usd": { "type": "string" }, "tool_call_count": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "denied_tool_call_count": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "held_tool_call_count": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "skill_activation_count": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 } }, "required": ["run_id", "agent_id", "agent_display_name", "status", "lane", "model", "started_at", "finished_at", "cost_usd", "tool_call_count", "denied_tool_call_count", "held_tool_call_count", "skill_activation_count"], "additionalProperties": false } } }, "required": ["seat_id", "summary", "runs"], "additionalProperties": false }, "help": "Audit a seat's agent run history with per-run tool-call, guard-denied, and guard-held counts (the Trust Card).", "guide_slugs": ["mcp-and-cli-guide", "how-agents-work"], "stages": ["operating_rhythm"], "related_command_ids": ["agent_setup.get", "agent_setup.relane", "agent_setup.start", "agent_setup.update", "agent_template.list", "agent.configure_tools", "agent.create_custom", "agent.create_from_template", "agent.decommission", "agent.fleet_digest", "agent.get_run", "agent.go_live", "agent.list_fleet", "agent.list_tool_calls", "agent.pause", "agent.resume", "agent.run_dry_run", "agent.run_now", "agent.status", "agent.update_schedule", "charter.approve", "charter.draft", "compass.set", "confirmation.approve", "confirmation.reject", "deliverable.accept", "deliverable.attach", "deliverable.create", "deliverable.get", "deliverable.list", "deliverable.reject", "error_log.list", "error_log.resolve", "error_log.supersede", "escalation.get", "escalation.list", "escalation.reject", "escalation.resolve", "implementation_access.abandon", "implementation_access.complete", "implementation_access.status", "integration.list", "integration.readiness", "integration.status", "integration.test", "mcp_token.create", "mcp_token.list", "mcp_token.revoke", "onboarding.attach_reference", "onboarding.rehearse", "onboarding.resume", "onboarding.status", "onboarding.upload_context", "runner.diagnose", "runner.repair", "seat.create", "seat.create_complete", "skill.assign_to_seat", "skill.assigned.list", "skill.catalog", "skill.check_dependencies", "skill.create", "skill.enable_catalog", "skill.file.get", "skill.get", "skill.import_github", "skill.import_upload", "skill.install_local", "skill.list", "skill.publish", "skill.revoke_from_seat", "skill.sync_local", "skill.update_draft", "staffing.assign", "staffing.assign_agent_dry_run", "staffing.assign_user", "system.health", "tenant.anthropic_key.disable", "tenant.rename", "tool_grants.tenant.update", "usage.report", "usage.snapshot", "user.tenants", "user.use_tenant", "user.whoami"] },
       { "id": "agent.list_tool_calls", "title": "List agent tool calls", "description": "Return a seat's tool-call ledger (tool name, guard result, manifest clause, outcome) with the held-action count. Pass held_only to return only guard-held calls. Never returns argument summaries or secret material.", "required_scope": "seat", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "limit": { "default": 50, "type": "integer", "minimum": 1, "maximum": 200 }, "held_only": { "default": false, "type": "boolean" } }, "required": ["seat_id"], "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "summary": { "type": "object", "properties": { "run_count": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "failed_run_count": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "tool_call_count": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "denied_tool_call_count": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "held_tool_call_count": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "last_activity_at": { "anyOf": [{ "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, { "type": "null" }] } }, "required": ["run_count", "failed_run_count", "tool_call_count", "denied_tool_call_count", "held_tool_call_count", "last_activity_at"], "additionalProperties": false }, "tool_calls": { "type": "array", "items": { "type": "object", "properties": { "tool_call_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "run_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] }, "tool_name": { "type": "string" }, "guard_result": { "type": "string", "enum": ["allowed", "denied_manifest", "denied_budget", "escalated", "denied_tenant_policy"] }, "manifest_clause": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "outcome": { "type": "string" }, "started_at": { "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, "finished_at": { "anyOf": [{ "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, { "type": "null" }] } }, "required": ["tool_call_id", "run_id", "tool_name", "guard_result", "manifest_clause", "outcome", "started_at", "finished_at"], "additionalProperties": false } } }, "required": ["seat_id", "summary", "tool_calls"], "additionalProperties": false }, "help": "Audit a seat's tool-call ledger with each call's guard result; held actions are the hero metric.", "guide_slugs": ["mcp-and-cli-guide", "how-agents-work", "security-model-guide"], "stages": ["operating_rhythm"], "related_command_ids": ["agent_setup.get", "agent_setup.relane", "agent_setup.start", "agent_setup.update", "agent_template.list", "agent.configure_tools", "agent.create_custom", "agent.create_from_template", "agent.decommission", "agent.fleet_digest", "agent.get_run", "agent.go_live", "agent.list_fleet", "agent.list_runs", "agent.pause", "agent.resume", "agent.run_dry_run", "agent.run_now", "agent.status", "agent.update_schedule", "charter.approve", "charter.draft", "charter.sign_manifest", "compass.set", "confirmation.approve", "confirmation.reject", "credential.ingress", "deliverable.accept", "deliverable.attach", "deliverable.create", "deliverable.get", "deliverable.list", "deliverable.reject", "error_log.list", "error_log.resolve", "error_log.supersede", "escalation.get", "escalation.list", "escalation.reject", "escalation.resolve", "implementation_access.abandon", "implementation_access.complete", "implementation_access.status", "integration.list", "integration.readiness", "integration.status", "integration.test", "mcp_token.create", "mcp_token.list", "mcp_token.revoke", "onboarding.attach_reference", "onboarding.rehearse", "onboarding.resume", "onboarding.status", "onboarding.upload_context", "runner.diagnose", "runner.pairing.start", "runner.repair", "seat.create", "seat.create_complete", "skill.assign_to_seat", "skill.assigned.list", "skill.catalog", "skill.check_dependencies", "skill.create", "skill.enable_catalog", "skill.file.get", "skill.get", "skill.import_github", "skill.import_upload", "skill.install_local", "skill.list", "skill.publish", "skill.revoke_from_seat", "skill.sync_local", "skill.update_draft", "staffing.assign", "staffing.assign_agent_dry_run", "staffing.assign_user", "system.health", "tenant.anthropic_key.disable", "tenant.anthropic_key.save", "tenant.rename", "tool_grants.tenant.update", "usage.report", "usage.snapshot", "user.tenants", "user.use_tenant", "user.whoami"] },
       { "id": "agent.pause", "title": "Pause agent", "description": "Pause a live agent so it stops scheduled and on-demand runs. Reversible with agent.resume.", "required_scope": "tenant", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": [], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "reason": { "type": "string", "minLength": 1, "maxLength": 500 } }, "required": ["seat_id"], "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "agent_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "status": { "type": "string", "const": "paused" }, "cancelled_work_orders": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 } }, "required": ["seat_id", "agent_id", "status", "cancelled_work_orders"], "additionalProperties": false }, "help": "Pause a live agent so it stops scheduled and on-demand runs; queued work orders are expired and a paused agent refuses to run until resumed. Reversible, unlike agent.decommission.", "guide_slugs": ["agent-staffing-playbook", "how-agents-work"], "stages": ["operating_rhythm"], "related_command_ids": ["agent_setup.get", "agent_setup.relane", "agent_setup.start", "agent_setup.update", "agent_template.list", "agent.configure_tools", "agent.create_custom", "agent.create_from_template", "agent.decommission", "agent.get_run", "agent.go_live", "agent.list_runs", "agent.list_tool_calls", "agent.resume", "agent.run_dry_run", "agent.run_now", "agent.status", "agent.update_schedule", "confirmation.approve", "mcp_token.create", "staffing.assign_agent_dry_run", "staffing.assign_user"] },
       { "id": "agent.resume", "title": "Resume agent", "description": "Resume a paused agent back to live. Blocks if the steward chain no longer resolves to a human.", "required_scope": "tenant", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": [], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "reason": { "type": "string", "minLength": 1, "maxLength": 500 } }, "required": ["seat_id"], "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "agent_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "status": { "type": "string", "const": "live" } }, "required": ["seat_id", "agent_id", "status"], "additionalProperties": false }, "help": "Resume a paused agent back to live; the no-orphan guard blocks a resume whose steward chain no longer resolves to a human.", "guide_slugs": ["agent-staffing-playbook", "how-agents-work"], "stages": ["operating_rhythm"], "related_command_ids": ["agent_setup.get", "agent_setup.relane", "agent_setup.start", "agent_setup.update", "agent_template.list", "agent.configure_tools", "agent.create_custom", "agent.create_from_template", "agent.decommission", "agent.get_run", "agent.go_live", "agent.list_runs", "agent.list_tool_calls", "agent.pause", "agent.run_dry_run", "agent.run_now", "agent.status", "agent.update_schedule", "confirmation.approve", "mcp_token.create", "staffing.assign_agent_dry_run", "staffing.assign_user"] },
-      { "id": "agent.run_dry_run", "title": "Run agent dry run", "description": "Run the sandbox dry run for a draft agent. Durable and idempotent per Charter version; a passed result is reused, never re-run.", "required_scope": "seat", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "charter_version_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" } }, "required": ["seat_id", "charter_version_id"], "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "agent_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "charter_version_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "status": { "type": "string", "enum": ["passed", "failed"] }, "summary": { "type": "string", "minLength": 1 }, "reused": { "type": "boolean" }, "transcript": { "type": "object", "properties": { "status": { "type": "string", "enum": ["passed", "failed"] }, "escalated": { "type": "boolean" }, "must_escalate_clause": { "type": "string", "minLength": 1 }, "summary": { "type": "string", "minLength": 1 }, "steps": { "minItems": 1, "type": "array", "items": { "type": "object", "properties": { "kind": { "type": "string", "enum": ["task", "message", "tool_call", "escalation", "result"] }, "text": { "type": "string", "minLength": 1 }, "tool_name": { "type": "string", "minLength": 1 }, "guard": { "type": "string", "enum": ["allowed", "denied_manifest", "escalated"] } }, "required": ["kind", "text"], "additionalProperties": false } }, "tool_preview": { "type": "array", "items": { "type": "object", "properties": { "tool_name": { "type": "string", "minLength": 1 }, "intended_action": { "type": "string", "minLength": 1 }, "status": { "type": "string", "enum": ["intended", "blocked", "escalated"] }, "guard": { "type": "string", "enum": ["allowed", "denied_manifest", "escalated"] } }, "required": ["tool_name", "intended_action", "status", "guard"], "additionalProperties": false } }, "lane": { "type": "string", "enum": ["cloud", "mcp_session", "runner"] }, "granted_tools": { "type": "array", "items": { "type": "object", "properties": { "tool_name": { "type": "string", "minLength": 1 }, "executability": { "type": "string", "enum": ["executable", "unimplemented_in_lane", "held_for_steward"] } }, "required": ["tool_name", "executability"], "additionalProperties": false } }, "run_id": { "type": "string", "minLength": 1 } }, "required": ["status", "escalated", "must_escalate_clause", "summary", "steps"], "additionalProperties": false } }, "required": ["seat_id", "agent_id", "charter_version_id", "status", "summary", "reused"], "additionalProperties": false }, "example": { "seat_id": "0190aaaa-aaaa-7aaa-8aaa-aaaaaaaaaaaa", "charter_version_id": "0190cccc-cccc-7ccc-8ccc-cccccccccccc" }, "help": "Run the sandbox dry run for a draft agent after the manifest is signed; the result is durable and idempotent per Charter version, and a passed run is reused.", "guide_slugs": ["agent-staffing-playbook", "how-agents-work"], "stages": ["staffing"], "related_command_ids": ["agent_setup.get", "agent_setup.relane", "agent_setup.start", "agent_setup.update", "agent_template.list", "agent.configure_tools", "agent.create_custom", "agent.create_from_template", "agent.decommission", "agent.fleet_digest", "agent.get_run", "agent.go_live", "agent.list_fleet", "agent.list_runs", "agent.list_tool_calls", "agent.pause", "agent.resume", "agent.run_now", "agent.show_markdown", "agent.status", "agent.update_schedule", "aicos.brain_settings.get", "aicos.brain_settings.update", "cascade.import", "charter.approve", "charter.draft", "charter.draft_all", "charter.set", "charter.sign_manifest", "charter.update_draft", "command.describe", "compass.answer_gap", "compass.approve_version", "compass.draft", "compass.get_current", "compass.list_gaps", "compass.reject_draft", "compass.set", "compass.update_draft", "confirmation.activation_set.list", "confirmation.approve", "confirmation.reject", "credential.ingress", "deliverable.accept", "deliverable.attach", "deliverable.create", "deliverable.get", "deliverable.list", "deliverable.reject", "error_log.list", "error_log.resolve", "error_log.supersede", "escalation.get", "escalation.list", "escalation.reject", "escalation.resolve", "friction.file_issue", "friction.list", "friction.resolve", "graph.get", "implementation_access.abandon", "implementation_access.complete", "implementation_access.status", "integration.list", "integration.readiness", "integration.status", "integration.test", "mcp_token.create", "mcp_token.list", "mcp_token.revoke", "model.catalog", "onboarding.activate", "onboarding.advance_step", "onboarding.attach_reference", "onboarding.create_invite", "onboarding.finish", "onboarding.rehearse", "onboarding.resume", "onboarding.setup", "onboarding.source_ingest", "onboarding.status", "onboarding.upload_context", "runner.diagnose", "runner.list", "runner.repair", "seat.create", "seat.create_complete", "seat.get", "seat.set_type", "signal.bind", "signal.confirm_reading", "signal.draft_first_readings", "signal.report", "skill.assign_to_seat", "skill.assigned.list", "skill.catalog", "skill.check_dependencies", "skill.create", "skill.enable_catalog", "skill.file.get", "skill.get", "skill.import_github", "skill.import_upload", "skill.install_local", "skill.list", "skill.publish", "skill.revoke_from_seat", "skill.sync_local", "skill.update_draft", "staffing.assign", "staffing.assign_agent_dry_run", "staffing.assign_user", "sync.brief.compile", "sync.brief.get", "sync.item.assign", "sync.run.complete", "sync.run.start", "system.health", "tenant.anthropic_key.disable", "tenant.model_gateway_policy.update", "tenant.rename", "tool_grants.tenant.update", "tool.catalog", "usage.report", "usage.snapshot", "user.tenants", "user.use_tenant", "user.whoami"] },
+      { "id": "agent.run_dry_run", "title": "Run agent dry run", "description": "Run the sandbox dry run for a draft agent. Durable and idempotent per Charter version; a passed result is reused, never re-run.", "required_scope": "seat", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "charter_version_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" } }, "required": ["seat_id", "charter_version_id"], "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "agent_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "charter_version_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "status": { "type": "string", "enum": ["passed", "failed"] }, "summary": { "type": "string", "minLength": 1 }, "reused": { "type": "boolean" }, "transcript": { "type": "object", "properties": { "status": { "type": "string", "enum": ["passed", "failed"] }, "escalated": { "type": "boolean" }, "must_escalate_clause": { "type": "string", "minLength": 1 }, "summary": { "type": "string", "minLength": 1 }, "steps": { "minItems": 1, "type": "array", "items": { "type": "object", "properties": { "kind": { "type": "string", "enum": ["task", "message", "tool_call", "escalation", "result"] }, "text": { "type": "string", "minLength": 1 }, "tool_name": { "type": "string", "minLength": 1 }, "guard": { "type": "string", "enum": ["allowed", "denied_manifest", "escalated"] } }, "required": ["kind", "text"], "additionalProperties": false } }, "tool_preview": { "type": "array", "items": { "type": "object", "properties": { "tool_name": { "type": "string", "minLength": 1 }, "intended_action": { "type": "string", "minLength": 1 }, "status": { "type": "string", "enum": ["intended", "blocked", "escalated"] }, "guard": { "type": "string", "enum": ["allowed", "denied_manifest", "escalated"] } }, "required": ["tool_name", "intended_action", "status", "guard"], "additionalProperties": false } }, "lane": { "type": "string", "enum": ["cloud", "mcp_session", "runner"] }, "granted_tools": { "type": "array", "items": { "type": "object", "properties": { "tool_name": { "type": "string", "minLength": 1 }, "executability": { "type": "string", "enum": ["executable", "unimplemented_in_lane", "held_for_steward"] } }, "required": ["tool_name", "executability"], "additionalProperties": false } }, "run_id": { "type": "string", "minLength": 1 } }, "required": ["status", "escalated", "must_escalate_clause", "summary", "steps"], "additionalProperties": false } }, "required": ["seat_id", "agent_id", "charter_version_id", "status", "summary", "reused"], "additionalProperties": false }, "example": { "seat_id": "0190aaaa-aaaa-7aaa-8aaa-aaaaaaaaaaaa", "charter_version_id": "0190cccc-cccc-7ccc-8ccc-cccccccccccc" }, "help": "Run the sandbox dry run for a draft agent after the manifest is signed; the result is durable and idempotent per Charter version, and a passed run is reused.", "guide_slugs": ["agent-staffing-playbook", "how-agents-work"], "stages": ["staffing"], "related_command_ids": ["agent_setup.get", "agent_setup.relane", "agent_setup.start", "agent_setup.update", "agent_template.list", "agent.configure_tools", "agent.create_custom", "agent.create_from_template", "agent.decommission", "agent.fleet_digest", "agent.get_run", "agent.go_live", "agent.list_fleet", "agent.list_runs", "agent.list_tool_calls", "agent.pause", "agent.resume", "agent.run_now", "agent.show_markdown", "agent.status", "agent.update_schedule", "aicos.brain_settings.get", "aicos.brain_settings.update", "cascade.import", "charter.approve", "charter.backfill_stock_evidence", "charter.draft", "charter.draft_all", "charter.set", "charter.sign_manifest", "charter.update_draft", "command.describe", "compass.answer_gap", "compass.approve_version", "compass.draft", "compass.get_current", "compass.list_gaps", "compass.reject_draft", "compass.set", "compass.update_draft", "confirmation.activation_set.list", "confirmation.approve", "confirmation.reject", "credential.ingress", "deliverable.accept", "deliverable.attach", "deliverable.create", "deliverable.get", "deliverable.list", "deliverable.reject", "error_log.list", "error_log.resolve", "error_log.supersede", "escalation.get", "escalation.list", "escalation.reject", "escalation.resolve", "friction.file_issue", "friction.list", "friction.resolve", "graph.get", "implementation_access.abandon", "implementation_access.complete", "implementation_access.status", "integration.list", "integration.readiness", "integration.status", "integration.test", "mcp_token.create", "mcp_token.list", "mcp_token.revoke", "model.catalog", "onboarding.activate", "onboarding.advance_step", "onboarding.attach_reference", "onboarding.create_invite", "onboarding.finish", "onboarding.rehearse", "onboarding.resume", "onboarding.setup", "onboarding.source_ingest", "onboarding.status", "onboarding.upload_context", "runner.diagnose", "runner.list", "runner.repair", "seat.create", "seat.create_complete", "seat.get", "seat.set_type", "signal.bind", "signal.confirm_reading", "signal.draft_first_readings", "signal.report", "skill.assign_to_seat", "skill.assigned.list", "skill.catalog", "skill.check_dependencies", "skill.create", "skill.enable_catalog", "skill.file.get", "skill.get", "skill.import_github", "skill.import_upload", "skill.install_local", "skill.list", "skill.publish", "skill.revoke_from_seat", "skill.sync_local", "skill.update_draft", "staffing.assign", "staffing.assign_agent_dry_run", "staffing.assign_user", "sync.brief.compile", "sync.brief.get", "sync.item.assign", "sync.run.complete", "sync.run.start", "system.health", "tenant.anthropic_key.disable", "tenant.model_gateway_policy.update", "tenant.rename", "tool_grants.tenant.update", "tool.catalog", "usage.report", "usage.snapshot", "user.tenants", "user.use_tenant", "user.whoami"] },
       { "id": "agent.run_heartbeats", "title": "Get run heartbeats", "description": "Reads the per-seat run-heartbeat roll-up for long-running agent programs. Every roll-up is cross-checked against durable tool-call/event evidence, so a renewing lease alone never reports healthy: `state` is working, quiet_healthy, recovered, stalled, or unavailable. `unavailable` means that evidence check could not be performed \u2014 treat it as unknown, not healthy and not stalled, and branch on `state` rather than the `stalled` boolean.", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "seat_ids": { "minItems": 1, "maxItems": 200, "type": "array", "items": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" } } }, "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "seats": { "type": "array", "items": { "type": "object", "properties": { "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "state": { "type": "string", "enum": ["working", "quiet_healthy", "recovered", "stalled", "unavailable"] }, "stalled": { "type": "boolean" }, "run_count": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "stalled_run_count": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "current_phase": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "last_progress_at": { "anyOf": [{ "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, { "type": "null" }] }, "expected_next_at": { "anyOf": [{ "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, { "type": "null" }] }, "stall_after_at": { "anyOf": [{ "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, { "type": "null" }] }, "done_count": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "in_flight_count": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "queued_count": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "lease_remaining_ms": { "anyOf": [{ "type": "integer", "minimum": -9007199254740991, "maximum": 9007199254740991 }, { "type": "null" }] }, "reasons": { "type": "array", "items": { "type": "string" } } }, "required": ["seat_id", "state", "stalled", "run_count", "stalled_run_count", "current_phase", "last_progress_at", "expected_next_at", "stall_after_at", "done_count", "in_flight_count", "queued_count", "lease_remaining_ms", "reasons"], "additionalProperties": false } } }, "required": ["seats"], "additionalProperties": false }, "help": "Read the per-seat run-heartbeat roll-up to tell a quiet-but-healthy long-running agent program apart from a stalled one, or from one whose durable-evidence check could not be performed (state unavailable).", "guide_slugs": ["mcp-and-cli-guide", "how-agents-work", "troubleshooting-guide"], "stages": ["operating_rhythm"], "related_command_ids": [] },
       { "id": "agent.run_now", "title": "Run agent now", "description": "Queue and dispatch a manual production run for a live cloud or runner agent on a seat. task_id is cloud-lane only; a runner-lane agent rejects it.", "required_scope": "tenant", "confirmation": "human_required", "trusted_execution": { "mode": "eligible_bounded", "risk_flags": [], "rationale": "Re-running the acting seat's own live agent is a bounded, same-seat worker action safe to auto-apply under a standing Trusted grant." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "task_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" } }, "required": ["seat_id"], "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "execution_mode": { "type": "string", "const": "production_manual" }, "work_order": { "anyOf": [{ "type": "object", "properties": { "id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "agent_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "task_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] }, "execution_mode": { "anyOf": [{ "type": "string", "enum": ["production_manual", "production_scheduled"] }, { "type": "null" }] }, "lane": { "type": "string", "enum": ["cloud", "runner"] }, "status": { "type": "string", "enum": ["queued", "claimed", "running", "done", "failed", "expired"] }, "claimed_by_runner_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] }, "scheduled_for": { "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, "grace_deadline": { "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, "created_at": { "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, "schedule_id": { "type": "null" }, "schedule_revision": { "type": "null" }, "schedule_local_occurrence": { "type": "null" } }, "required": ["id", "agent_id", "task_id", "execution_mode", "lane", "status", "claimed_by_runner_id", "scheduled_for", "grace_deadline", "created_at", "schedule_id", "schedule_revision", "schedule_local_occurrence"], "additionalProperties": false }, { "type": "object", "properties": { "id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "agent_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "task_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] }, "execution_mode": { "anyOf": [{ "type": "string", "enum": ["production_manual", "production_scheduled"] }, { "type": "null" }] }, "lane": { "type": "string", "enum": ["cloud", "runner"] }, "status": { "type": "string", "enum": ["queued", "claimed", "running", "done", "failed", "expired"] }, "claimed_by_runner_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] }, "scheduled_for": { "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, "grace_deadline": { "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, "created_at": { "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, "schedule_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "schedule_revision": { "type": "integer", "exclusiveMinimum": 0, "maximum": 9007199254740991 }, "schedule_local_occurrence": { "type": "string", "minLength": 1, "maxLength": 80 } }, "required": ["id", "agent_id", "task_id", "execution_mode", "lane", "status", "claimed_by_runner_id", "scheduled_for", "grace_deadline", "created_at", "schedule_id", "schedule_revision", "schedule_local_occurrence"], "additionalProperties": false }] } }, "required": ["execution_mode", "work_order"], "additionalProperties": false }, "help": "Queue and dispatch a manual production run without changing the agent's saved schedule. A human with authority runs it directly; a same-Seat agent may auto-execute only under a bounded Trusted standing authorization, while a cross-Seat agent request requires a human. An implementation agent always stages a request for the owner to approve, and only for a Seat its own setup receipt created; the approved run dispatches only the agent that receipt created there. task_id is cloud-lane only; a runner-lane agent rejects it.", "guide_slugs": ["ai-model-data-handling-guide", "mcp-and-cli-guide", "how-agents-work", "runner-guide"], "stages": ["operating_rhythm"], "related_command_ids": ["agent_setup.get", "agent_setup.relane", "agent_setup.start", "agent_setup.update", "agent_template.list", "agent.configure_tools", "agent.create_custom", "agent.create_from_template", "agent.decommission", "agent.get_run", "agent.go_live", "agent.list_runs", "agent.list_tool_calls", "agent.pause", "agent.resume", "agent.run_dry_run", "agent.status", "agent.trust.create", "agent.update_schedule", "command.describe", "command.list", "confirmation.approve", "credential.ingress", "friction.resolve", "goal.bind_measurable", "mcp_token.create", "runner.pairing.start", "skill.assign_to_seat", "staffing.assign_agent_dry_run", "staffing.assign_user", "tenant.anthropic_key.disable", "tenant.anthropic_key.save", "tool.catalog", "work_order.enqueue"] },
       { "id": "agent.show_markdown", "title": "Show agent setup as markdown", "description": "Compose a seat's agent setup, steward, model, tools, and Charter into a clean, human-skimmable markdown card for review.", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" } }, "required": ["seat_id"], "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "markdown": { "type": "string", "minLength": 1 } }, "required": ["markdown"], "additionalProperties": false }, "help": "Render a seat's agent setup, model, steward, tools, and Charter as a clean markdown card to show your human a quick review.", "guide_slugs": ["agent-builder-guide", "agent-staffing-playbook"], "stages": ["staffing"], "related_command_ids": ["agent_setup.get", "agent_setup.start", "agent_setup.update", "agent.configure_tools", "agent.create_custom", "agent.go_live", "agent.run_dry_run", "charter.update_draft", "command.describe", "model.catalog", "tool.catalog"] },
@@ -13301,23 +13301,24 @@ var init_command_discovery = __esm({
       { "id": "agent.trust.inspect", "title": "Inspect agent Trusted grants", "description": "Read active or historical Trusted execution grants for one agent. Returns metadata only, never secrets.", "required_scope": "seat", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "agent_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "include_inactive": { "type": "boolean" } }, "required": ["agent_id"], "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "grants": { "type": "array", "items": { "type": "object", "properties": { "grant_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "agent_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "granted_by_user_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "scope_digest": { "type": "string", "pattern": "^sha256:[0-9a-f]{64}$" }, "classifier_version": { "type": "string", "pattern": "^[a-z][a-z0-9_.-]{0,79}$" }, "budget_cents": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "reserved_cents": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "spent_cents": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "currency": { "type": "string", "const": "USD" }, "status": { "type": "string", "enum": ["active", "revoked", "superseded", "expired"] }, "effective_at": { "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, "expires_at": { "anyOf": [{ "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, { "type": "null" }] }, "revoked_at": { "anyOf": [{ "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, { "type": "null" }] }, "supersedes_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] } }, "required": ["grant_id", "agent_id", "seat_id", "granted_by_user_id", "scope_digest", "classifier_version", "budget_cents", "reserved_cents", "spent_cents", "currency", "status", "effective_at", "expires_at", "revoked_at", "supersedes_id"], "additionalProperties": false } } }, "required": ["grants"], "additionalProperties": false }, "help": "Inspect active or historical Trusted grants for one agent. Metadata only; no secrets or vault refs.", "guide_slugs": ["security-model-guide", "mcp-and-cli-guide"], "stages": ["operating_rhythm"], "related_command_ids": [] },
       { "id": "agent.trust.revoke", "title": "Revoke agent Trusted grant", "description": "Human steward/admin revocation for an active Trusted execution grant. Preserves the historical grant row and appends an event.", "required_scope": "tenant", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["self_approval", "spend"], "rationale": "Trusted activation and grant lifecycle commands establish or change standing authority, so a human must decide." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "grant_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "reason": { "type": "string", "minLength": 1, "maxLength": 500 } }, "required": ["grant_id"], "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "grant": { "type": "object", "properties": { "grant_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "agent_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "granted_by_user_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "scope_digest": { "type": "string", "pattern": "^sha256:[0-9a-f]{64}$" }, "classifier_version": { "type": "string", "pattern": "^[a-z][a-z0-9_.-]{0,79}$" }, "budget_cents": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "reserved_cents": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "spent_cents": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "currency": { "type": "string", "const": "USD" }, "status": { "type": "string", "enum": ["active", "revoked", "superseded", "expired"] }, "effective_at": { "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, "expires_at": { "anyOf": [{ "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, { "type": "null" }] }, "revoked_at": { "anyOf": [{ "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, { "type": "null" }] }, "supersedes_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] } }, "required": ["grant_id", "agent_id", "seat_id", "granted_by_user_id", "scope_digest", "classifier_version", "budget_cents", "reserved_cents", "spent_cents", "currency", "status", "effective_at", "expires_at", "revoked_at", "supersedes_id"], "additionalProperties": false }, "event_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" } }, "required": ["grant", "event_id"], "additionalProperties": false }, "help": "Revoke an active Trusted grant while preserving history. Human steward/admin only.", "guide_slugs": ["security-model-guide", "confirmations-guide"], "stages": ["operating_rhythm"], "related_command_ids": ["agent_grant_intervention.decide", "agent.activation_sign", "agent.go_live", "agent.trust.create", "agent.trust.expire", "agent.trust.supersede", "charter.approve", "confirmation.approve", "confirmation.dismiss", "confirmation.dismiss_stale", "confirmation.list", "confirmation.reject", "confirmation.remint", "credential.ingress", "friction.resolve", "goal.reassign_owner", "goal.reparent", "mcp_token.create", "onboarding.setup", "staffing.assign_user", "task.confirm_proposal", "task.decline_proposal"] },
       { "id": "agent.trust.supersede", "title": "Supersede agent Trusted grant", "description": "Human steward/admin replacement for an active Trusted grant. Refuses stale receipt digests and requires expected_grant_id to bind the exact reviewed active row before linking the replacement. Denied unless the tenant's company autonomy ceiling permits Trusted grants; refuses when no active grant exists and never creates one.", "required_scope": "tenant", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["self_approval", "spend"], "rationale": "Trusted activation and grant lifecycle commands establish or change standing authority, so a human must decide." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "agent_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "expected_scope_digest": { "type": "string", "pattern": "^sha256:[0-9a-f]{64}$" }, "budget_cents": { "type": "integer", "minimum": 0, "maximum": 1e7 }, "expires_at": { "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, "reason": { "type": "string", "minLength": 1, "maxLength": 500 }, "expected_grant_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" } }, "required": ["agent_id", "expected_scope_digest", "budget_cents", "expected_grant_id"], "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "grant": { "type": "object", "properties": { "grant_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "agent_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "granted_by_user_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "scope_digest": { "type": "string", "pattern": "^sha256:[0-9a-f]{64}$" }, "classifier_version": { "type": "string", "pattern": "^[a-z][a-z0-9_.-]{0,79}$" }, "budget_cents": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "reserved_cents": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "spent_cents": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "currency": { "type": "string", "const": "USD" }, "status": { "type": "string", "enum": ["active", "revoked", "superseded", "expired"] }, "effective_at": { "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, "expires_at": { "anyOf": [{ "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, { "type": "null" }] }, "revoked_at": { "anyOf": [{ "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, { "type": "null" }] }, "supersedes_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] } }, "required": ["grant_id", "agent_id", "seat_id", "granted_by_user_id", "scope_digest", "classifier_version", "budget_cents", "reserved_cents", "spent_cents", "currency", "status", "effective_at", "expires_at", "revoked_at", "supersedes_id"], "additionalProperties": false }, "event_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" } }, "required": ["grant", "event_id"], "additionalProperties": false }, "help": "Replace the active Trusted grant with a fresh digest and budget. Rebuild the receipt first; stale digests are refused. Same company-autonomy-ceiling precondition as agent.trust.create; refused when no active grant exists to replace. The required expected_grant_id must match the currently active grant or the call is refused.", "guide_slugs": ["security-model-guide", "agent-staffing-playbook", "confirmations-guide"], "stages": ["operating_rhythm"], "related_command_ids": ["agent_grant_intervention.decide", "agent.activation_sign", "agent.go_live", "agent.trust.create", "agent.trust.expire", "agent.trust.revoke", "charter.approve", "confirmation.approve", "confirmation.dismiss", "confirmation.dismiss_stale", "confirmation.list", "confirmation.reject", "confirmation.remint", "credential.ingress", "friction.resolve", "goal.reassign_owner", "goal.reparent", "mcp_token.create", "onboarding.setup", "staffing.assign_user", "task.confirm_proposal", "task.decline_proposal"] },
-      { "id": "agent.update_schedule", "title": "Update agent schedule", "description": "Set or clear the scheduled execution cron for a draft or live agent on a seat.", "required_scope": "tenant", "confirmation": "human_required", "trusted_execution": { "mode": "eligible_bounded", "risk_flags": [], "rationale": "Setting or changing a seat's routine schedule is a bounded, reversible worker action safe to auto-apply under a standing Trusted grant." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "schedule_cron": { "anyOf": [{ "type": "string", "minLength": 1, "maxLength": 120 }, { "type": "null" }] }, "schedule_timezone": { "type": "string", "minLength": 1, "maxLength": 100 } }, "required": ["seat_id", "schedule_cron"], "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "agent_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "schedule_cron": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "schedule_timezone": { "type": "string" }, "schedule_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "schedule_revision": { "type": "integer", "exclusiveMinimum": 0, "maximum": 9007199254740991 } }, "required": ["seat_id", "agent_id", "schedule_cron", "schedule_timezone", "schedule_id", "schedule_revision"], "additionalProperties": false }, "help": "Set or clear an agent's scheduled execution; a live scheduled agent must keep a steward chain resolving to a human.", "guide_slugs": ["agent-staffing-playbook", "runner-guide"], "stages": ["staffing", "operating_rhythm"], "related_command_ids": ["agent_setup.get", "agent_setup.relane", "agent_setup.start", "agent_setup.update", "agent_template.list", "agent.configure_tools", "agent.create_custom", "agent.create_from_template", "agent.decommission", "agent.get_run", "agent.go_live", "agent.list_runs", "agent.list_tool_calls", "agent.pause", "agent.resume", "agent.run_dry_run", "agent.run_now", "agent.status", "agent.trust.create", "aicos.brain_settings.get", "aicos.brain_settings.update", "charter.set", "charter.sign_manifest", "command.describe", "command.list", "confirmation.approve", "friction.resolve", "goal.bind_measurable", "graph.get", "mcp_token.create", "mcp_token.list", "onboarding.status", "runner.list", "seat.get", "skill.assign_to_seat", "staffing.assign_agent_dry_run", "staffing.assign_user", "tenant.model_gateway_policy.update"] },
+      { "id": "agent.update_schedule", "title": "Update agent schedule", "description": "Set or clear the scheduled execution cron for a draft or live agent on a seat.", "required_scope": "tenant", "confirmation": "human_required", "trusted_execution": { "mode": "eligible_bounded", "risk_flags": [], "rationale": "Setting or changing a seat's routine schedule is a bounded, reversible worker action safe to auto-apply under a standing Trusted grant." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "schedule_cron": { "anyOf": [{ "type": "string", "minLength": 1, "maxLength": 120 }, { "type": "null" }] }, "schedule_timezone": { "type": "string", "minLength": 1, "maxLength": 100 } }, "required": ["seat_id", "schedule_cron"], "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "agent_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "schedule_cron": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "schedule_timezone": { "type": "string" }, "schedule_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "schedule_revision": { "type": "integer", "exclusiveMinimum": 0, "maximum": 9007199254740991 } }, "required": ["seat_id", "agent_id", "schedule_cron", "schedule_timezone", "schedule_id", "schedule_revision"], "additionalProperties": false }, "help": "Set or clear an agent's scheduled execution; a live scheduled agent must keep a steward chain resolving to a human.", "guide_slugs": ["agent-staffing-playbook", "runner-guide"], "stages": ["staffing", "operating_rhythm"], "related_command_ids": ["agent_setup.get", "agent_setup.relane", "agent_setup.start", "agent_setup.update", "agent_template.list", "agent.configure_tools", "agent.create_custom", "agent.create_from_template", "agent.decommission", "agent.get_run", "agent.go_live", "agent.list_runs", "agent.list_tool_calls", "agent.pause", "agent.resume", "agent.run_dry_run", "agent.run_now", "agent.status", "agent.trust.create", "aicos.brain_settings.get", "aicos.brain_settings.update", "charter.backfill_stock_evidence", "charter.set", "charter.sign_manifest", "command.describe", "command.list", "confirmation.approve", "friction.resolve", "goal.bind_measurable", "graph.get", "mcp_token.create", "mcp_token.list", "onboarding.status", "runner.list", "seat.get", "skill.assign_to_seat", "staffing.assign_agent_dry_run", "staffing.assign_user", "tenant.model_gateway_policy.update"] },
       { "id": "agent.watch_run", "title": "Watch agent run", "description": "Return a read-only live snapshot of one seat run: run status and lane, the derived current work-state, the run-heartbeat (quiet-but-healthy vs stalled) with current phase, the persisted session transcript, and the run's tool-call step feed (tool name, guard result, outcome). Never returns argument summaries or secret material.", "required_scope": "seat", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "run_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" } }, "required": ["seat_id", "run_id"], "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "run": { "type": "object", "properties": { "run_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "agent_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "agent_display_name": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "status": { "type": "string", "enum": ["running", "succeeded", "failed", "timeout", "cancelled"] }, "lane": { "type": "string", "enum": ["cloud", "mcp_session", "runner"] }, "model": { "type": "string" }, "started_at": { "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, "finished_at": { "anyOf": [{ "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, { "type": "null" }] }, "cost_usd": { "type": "string" }, "tool_call_count": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "denied_tool_call_count": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "held_tool_call_count": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "skill_activation_count": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 } }, "required": ["run_id", "agent_id", "agent_display_name", "status", "lane", "model", "started_at", "finished_at", "cost_usd", "tool_call_count", "denied_tool_call_count", "held_tool_call_count", "skill_activation_count"], "additionalProperties": false }, "is_live": { "type": "boolean" }, "redacted": { "type": "boolean" }, "current_state": { "type": "object", "properties": { "state": { "type": "string", "enum": ["not_started", "in_progress", "handed_off", "done", "failed"] }, "reasons": { "type": "array", "items": { "type": "string" } }, "claimed_state": { "anyOf": [{ "type": "string", "enum": ["not_started", "in_progress", "handed_off", "done", "failed"] }, { "type": "null" }] }, "claim_mismatch": { "type": "boolean" }, "last_activity_at": { "anyOf": [{ "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, { "type": "null" }] }, "last_durable_activity_at": { "anyOf": [{ "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, { "type": "null" }] } }, "required": ["state", "reasons", "claimed_state", "claim_mismatch", "last_activity_at", "last_durable_activity_at"], "additionalProperties": false }, "heartbeat": { "anyOf": [{ "type": "object", "properties": { "state": { "type": "string", "enum": ["working", "quiet_healthy", "recovered", "stalled"] }, "stalled": { "type": "boolean" }, "current_phase": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "last_progress_at": { "anyOf": [{ "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, { "type": "null" }] }, "expected_next_at": { "anyOf": [{ "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, { "type": "null" }] }, "stall_after_at": { "anyOf": [{ "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, { "type": "null" }] }, "lease_remaining_ms": { "anyOf": [{ "type": "number" }, { "type": "null" }] }, "reasons": { "type": "array", "items": { "type": "string" } } }, "required": ["state", "stalled", "current_phase", "last_progress_at", "expected_next_at", "stall_after_at", "lease_remaining_ms", "reasons"], "additionalProperties": false }, { "type": "null" }] }, "transcript": { "anyOf": [{ "type": "object", "properties": { "transcript_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "run_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] }, "lane": { "type": "string", "enum": ["cloud", "runner"] }, "format": { "type": "string", "enum": ["jsonl", "text"] }, "message_count": { "anyOf": [{ "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, { "type": "null" }] }, "truncated": { "type": "boolean" }, "char_count": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "data_classification": { "type": "string", "enum": ["customer_content", "operational", "sandbox_output"] }, "retention_class": { "type": "string", "enum": ["ephemeral_7d", "standard_90d", "durable_1y", "legal_hold"] }, "created_at": { "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, "updated_at": { "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, "transcript": { "type": "string" } }, "required": ["transcript_id", "seat_id", "run_id", "lane", "format", "message_count", "truncated", "char_count", "data_classification", "retention_class", "created_at", "updated_at", "transcript"], "additionalProperties": false }, { "type": "null" }] }, "tool_calls": { "type": "array", "items": { "type": "object", "properties": { "tool_call_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "run_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] }, "tool_name": { "type": "string" }, "guard_result": { "type": "string", "enum": ["allowed", "denied_manifest", "denied_budget", "escalated", "denied_tenant_policy"] }, "manifest_clause": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "outcome": { "type": "string" }, "started_at": { "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, "finished_at": { "anyOf": [{ "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, { "type": "null" }] } }, "required": ["tool_call_id", "run_id", "tool_name", "guard_result", "manifest_clause", "outcome", "started_at", "finished_at"], "additionalProperties": false } }, "fetched_at": { "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" } }, "required": ["seat_id", "run", "is_live", "redacted", "current_state", "heartbeat", "transcript", "tool_calls", "fetched_at"], "additionalProperties": false }, "help": "Watch one run live (read-only): run status, derived work-state, quiet-vs-stalled heartbeat, transcript, and the tool-call step feed.", "guide_slugs": ["mcp-and-cli-guide", "how-agents-work"], "stages": ["operating_rhythm"], "related_command_ids": [] },
-      { "id": "aicos.brain_settings.get", "title": "Get AICOS brain settings", "description": "Read the AICOS run lane and brain selection. Returns labels and enum settings only; no secrets or vault refs.", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": {}, "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "aicos": { "type": "object", "properties": { "lane": { "type": "string", "enum": ["cloud", "runner", "mcp"] }, "cloud_brain": { "type": "string", "enum": ["managed", "byok"] }, "runner_brain": { "type": "string", "enum": ["claude-cli", "codex-cli"] }, "effective_brain": { "type": "string", "enum": ["managed", "byok", "claude-cli", "codex-cli", "mcp-client"] }, "label": { "type": "string", "minLength": 1, "maxLength": 80 }, "cloud_model_slug": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "cloud_options": { "type": "array", "items": { "type": "object", "properties": { "slug": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "provider": { "type": "string" }, "label": { "type": "string", "minLength": 1 }, "managed": { "type": "boolean" }, "zdr_available": { "type": "boolean" }, "selectable": { "type": "boolean" }, "disabled_reason": { "anyOf": [{ "type": "string", "minLength": 1 }, { "type": "null" }] }, "retention_disclosure": { "anyOf": [{ "type": "string", "minLength": 1 }, { "type": "null" }] }, "live_note": { "anyOf": [{ "type": "string", "minLength": 1 }, { "type": "null" }] } }, "required": ["slug", "provider", "label", "managed", "zdr_available", "selectable", "disabled_reason", "retention_disclosure", "live_note"], "additionalProperties": false } }, "non_zdr_unlocked": { "type": "boolean" } }, "required": ["lane", "cloud_brain", "runner_brain", "effective_brain", "label", "cloud_model_slug", "cloud_options", "non_zdr_unlocked"], "additionalProperties": false } }, "required": ["aicos"], "additionalProperties": false }, "help": "Read the AICOS lane and brain selection labels without returning provider keys, vault refs, or runner secrets.", "guide_slugs": ["aicos-chat-guide", "ai-model-data-handling-guide", "runner-guide", "settings-guide"], "stages": ["operating_rhythm"], "related_command_ids": ["agent.configure_tools", "agent.create_custom", "agent.go_live", "agent.run_dry_run", "agent.update_schedule", "aicos.brain_settings.update", "charter.set", "charter.sign_manifest", "confirmation.approve", "graph.get", "integration.list", "integration.readiness", "integration.status", "integration.test", "mcp_token.create", "mcp_token.list", "mcp_token.revoke", "onboarding.create_invite", "onboarding.status", "runner.list", "seat.get", "settings.agent_policy.get", "settings.agent_policy.update", "settings.confirmation_policy.get", "settings.confirmation_policy.update", "settings.get", "settings.member_visibility.get", "settings.member_visibility.update", "settings.product_learning.get", "settings.product_learning.update", "settings.sync_brief_scope.get", "settings.sync_brief_scope.update", "settings.update", "skill.assign_to_seat", "tenant.model_gateway_policy.update", "tenant.rename"] },
-      { "id": "aicos.brain_settings.update", "title": "Update AICOS brain settings", "description": "Update the AICOS lane and cloud/runner brain preferences. Owner-only and audited.", "required_scope": "tenant_admin", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "lane": { "type": "string", "enum": ["cloud", "runner", "mcp"] }, "cloud_brain": { "type": "string", "enum": ["managed", "byok"] }, "runner_brain": { "type": "string", "enum": ["claude-cli", "codex-cli"] }, "cloud_model_slug": { "anyOf": [{ "type": "string" }, { "type": "null" }] } }, "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "aicos": { "type": "object", "properties": { "lane": { "type": "string", "enum": ["cloud", "runner", "mcp"] }, "cloud_brain": { "type": "string", "enum": ["managed", "byok"] }, "runner_brain": { "type": "string", "enum": ["claude-cli", "codex-cli"] }, "effective_brain": { "type": "string", "enum": ["managed", "byok", "claude-cli", "codex-cli", "mcp-client"] }, "label": { "type": "string", "minLength": 1, "maxLength": 80 }, "cloud_model_slug": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "cloud_options": { "type": "array", "items": { "type": "object", "properties": { "slug": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "provider": { "type": "string" }, "label": { "type": "string", "minLength": 1 }, "managed": { "type": "boolean" }, "zdr_available": { "type": "boolean" }, "selectable": { "type": "boolean" }, "disabled_reason": { "anyOf": [{ "type": "string", "minLength": 1 }, { "type": "null" }] }, "retention_disclosure": { "anyOf": [{ "type": "string", "minLength": 1 }, { "type": "null" }] }, "live_note": { "anyOf": [{ "type": "string", "minLength": 1 }, { "type": "null" }] } }, "required": ["slug", "provider", "label", "managed", "zdr_available", "selectable", "disabled_reason", "retention_disclosure", "live_note"], "additionalProperties": false } }, "non_zdr_unlocked": { "type": "boolean" } }, "required": ["lane", "cloud_brain", "runner_brain", "effective_brain", "label", "cloud_model_slug", "cloud_options", "non_zdr_unlocked"], "additionalProperties": false } }, "required": ["aicos"], "additionalProperties": false }, "help": "Owner-only update for AICOS cloud managed/BYOK and runner Claude/Codex preferences; BYOK requires an active tenant Anthropic key.", "guide_slugs": ["aicos-chat-guide", "ai-model-data-handling-guide", "runner-guide", "settings-guide", "security-model-guide"], "stages": ["operating_rhythm"], "related_command_ids": ["agent.configure_tools", "agent.create_custom", "agent.go_live", "agent.run_dry_run", "agent.update_schedule", "aicos.brain_settings.get", "charter.set", "charter.sign_manifest", "confirmation.approve", "graph.get", "integration.list", "integration.readiness", "integration.status", "integration.test", "mcp_token.create", "mcp_token.list", "mcp_token.revoke", "onboarding.create_invite", "onboarding.status", "runner.list", "seat.get", "settings.agent_policy.get", "settings.agent_policy.update", "settings.confirmation_policy.get", "settings.confirmation_policy.update", "settings.get", "settings.member_visibility.get", "settings.member_visibility.update", "settings.product_learning.get", "settings.product_learning.update", "settings.sync_brief_scope.get", "settings.sync_brief_scope.update", "settings.update", "skill.assign_to_seat", "tenant.model_gateway_policy.update", "tenant.rename"] },
+      { "id": "aicos.brain_settings.get", "title": "Get AICOS brain settings", "description": "Read the AICOS run lane and brain selection. Returns labels and enum settings only; no secrets or vault refs.", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": {}, "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "aicos": { "type": "object", "properties": { "lane": { "type": "string", "enum": ["cloud", "runner", "mcp"] }, "cloud_brain": { "type": "string", "enum": ["managed", "byok"] }, "runner_brain": { "type": "string", "enum": ["claude-cli", "codex-cli"] }, "effective_brain": { "type": "string", "enum": ["managed", "byok", "claude-cli", "codex-cli", "mcp-client"] }, "label": { "type": "string", "minLength": 1, "maxLength": 80 }, "cloud_model_slug": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "cloud_options": { "type": "array", "items": { "type": "object", "properties": { "slug": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "provider": { "type": "string" }, "label": { "type": "string", "minLength": 1 }, "managed": { "type": "boolean" }, "zdr_available": { "type": "boolean" }, "selectable": { "type": "boolean" }, "disabled_reason": { "anyOf": [{ "type": "string", "minLength": 1 }, { "type": "null" }] }, "retention_disclosure": { "anyOf": [{ "type": "string", "minLength": 1 }, { "type": "null" }] }, "live_note": { "anyOf": [{ "type": "string", "minLength": 1 }, { "type": "null" }] } }, "required": ["slug", "provider", "label", "managed", "zdr_available", "selectable", "disabled_reason", "retention_disclosure", "live_note"], "additionalProperties": false } }, "non_zdr_unlocked": { "type": "boolean" } }, "required": ["lane", "cloud_brain", "runner_brain", "effective_brain", "label", "cloud_model_slug", "cloud_options", "non_zdr_unlocked"], "additionalProperties": false } }, "required": ["aicos"], "additionalProperties": false }, "help": "Read the AICOS lane and brain selection labels without returning provider keys, vault refs, or runner secrets.", "guide_slugs": ["aicos-chat-guide", "ai-model-data-handling-guide", "runner-guide", "settings-guide"], "stages": ["operating_rhythm"], "related_command_ids": ["agent.configure_tools", "agent.create_custom", "agent.go_live", "agent.run_dry_run", "agent.update_schedule", "aicos.brain_settings.update", "charter.backfill_stock_evidence", "charter.set", "charter.sign_manifest", "confirmation.approve", "graph.get", "integration.list", "integration.readiness", "integration.status", "integration.test", "mcp_token.create", "mcp_token.list", "mcp_token.revoke", "onboarding.create_invite", "onboarding.status", "runner.list", "seat.get", "settings.agent_policy.get", "settings.agent_policy.update", "settings.confirmation_policy.get", "settings.confirmation_policy.update", "settings.get", "settings.member_visibility.get", "settings.member_visibility.update", "settings.product_learning.get", "settings.product_learning.update", "settings.sync_brief_scope.get", "settings.sync_brief_scope.update", "settings.update", "skill.assign_to_seat", "tenant.model_gateway_policy.update", "tenant.rename"] },
+      { "id": "aicos.brain_settings.update", "title": "Update AICOS brain settings", "description": "Update the AICOS lane and cloud/runner brain preferences. Owner-only and audited.", "required_scope": "tenant_admin", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "lane": { "type": "string", "enum": ["cloud", "runner", "mcp"] }, "cloud_brain": { "type": "string", "enum": ["managed", "byok"] }, "runner_brain": { "type": "string", "enum": ["claude-cli", "codex-cli"] }, "cloud_model_slug": { "anyOf": [{ "type": "string" }, { "type": "null" }] } }, "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "aicos": { "type": "object", "properties": { "lane": { "type": "string", "enum": ["cloud", "runner", "mcp"] }, "cloud_brain": { "type": "string", "enum": ["managed", "byok"] }, "runner_brain": { "type": "string", "enum": ["claude-cli", "codex-cli"] }, "effective_brain": { "type": "string", "enum": ["managed", "byok", "claude-cli", "codex-cli", "mcp-client"] }, "label": { "type": "string", "minLength": 1, "maxLength": 80 }, "cloud_model_slug": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "cloud_options": { "type": "array", "items": { "type": "object", "properties": { "slug": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "provider": { "type": "string" }, "label": { "type": "string", "minLength": 1 }, "managed": { "type": "boolean" }, "zdr_available": { "type": "boolean" }, "selectable": { "type": "boolean" }, "disabled_reason": { "anyOf": [{ "type": "string", "minLength": 1 }, { "type": "null" }] }, "retention_disclosure": { "anyOf": [{ "type": "string", "minLength": 1 }, { "type": "null" }] }, "live_note": { "anyOf": [{ "type": "string", "minLength": 1 }, { "type": "null" }] } }, "required": ["slug", "provider", "label", "managed", "zdr_available", "selectable", "disabled_reason", "retention_disclosure", "live_note"], "additionalProperties": false } }, "non_zdr_unlocked": { "type": "boolean" } }, "required": ["lane", "cloud_brain", "runner_brain", "effective_brain", "label", "cloud_model_slug", "cloud_options", "non_zdr_unlocked"], "additionalProperties": false } }, "required": ["aicos"], "additionalProperties": false }, "help": "Owner-only update for AICOS cloud managed/BYOK and runner Claude/Codex preferences; BYOK requires an active tenant Anthropic key.", "guide_slugs": ["aicos-chat-guide", "ai-model-data-handling-guide", "runner-guide", "settings-guide", "security-model-guide"], "stages": ["operating_rhythm"], "related_command_ids": ["agent.configure_tools", "agent.create_custom", "agent.go_live", "agent.run_dry_run", "agent.update_schedule", "aicos.brain_settings.get", "charter.backfill_stock_evidence", "charter.set", "charter.sign_manifest", "confirmation.approve", "graph.get", "integration.list", "integration.readiness", "integration.status", "integration.test", "mcp_token.create", "mcp_token.list", "mcp_token.revoke", "onboarding.create_invite", "onboarding.status", "runner.list", "seat.get", "settings.agent_policy.get", "settings.agent_policy.update", "settings.confirmation_policy.get", "settings.confirmation_policy.update", "settings.get", "settings.member_visibility.get", "settings.member_visibility.update", "settings.product_learning.get", "settings.product_learning.update", "settings.sync_brief_scope.get", "settings.sync_brief_scope.update", "settings.update", "skill.assign_to_seat", "tenant.model_gateway_policy.update", "tenant.rename"] },
       { "id": "cascade.import", "title": "Import Rocks from a ninety Rocks export", "description": "Bulk-import a ninety Rocks export into the Cascade as cycle goals under a company objective in the active cycle. Owners are seat names resolved to seats. Requires an active cycle and a target company objective (auto-selected when exactly one exists, else pass parent_objective_id). Idempotent \u2014 re-importing the same export is a no-op, and an existing cycle goal with the same objective + seat + title is skipped.", "required_scope": "tenant_admin", "confirmation": "none", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "dry_run": { "default": false, "type": "boolean" }, "parent_objective_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "rocks": { "minItems": 1, "maxItems": 1e3, "type": "array", "items": { "type": "object", "properties": { "owner": { "type": "string", "minLength": 1, "maxLength": 200 }, "title": { "type": "string", "minLength": 1, "maxLength": 200 }, "definition_of_done": { "type": "string", "minLength": 1, "maxLength": 2e3 } }, "required": ["owner", "title", "definition_of_done"], "additionalProperties": false } } }, "required": ["rocks"], "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "dry_run": { "type": "boolean" }, "rocks_created": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "rocks_matched": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "rocks_skipped": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "objective_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] }, "batch_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] }, "skipped": { "maxItems": 200, "type": "array", "items": { "type": "object", "properties": { "owner": { "type": "string" }, "title": { "type": "string" }, "reason": { "type": "string" } }, "required": ["reason"], "additionalProperties": false } } }, "required": ["dry_run", "rocks_created", "rocks_matched", "rocks_skipped", "objective_id", "batch_id", "skipped"], "additionalProperties": false }, "help": "Import a ninety Rocks export into the Cascade as cycle goals under a company objective in the active cycle; owners resolve to seats.", "guide_slugs": ["migration-and-legal-notes"], "stages": ["operating_rhythm"], "related_command_ids": ["agent.go_live", "agent.run_dry_run", "cascade.import_okrs", "charter.approve", "charter.draft", "charter.draft_all", "charter.sign_manifest", "charter.update_draft", "compass.answer_gap", "compass.approve_version", "compass.draft", "compass.get_current", "compass.import", "compass.list_gaps", "compass.reject_draft", "compass.set", "compass.update_draft", "confirmation.activation_set.list", "confirmation.approve", "credential.ingress", "friction.file_issue", "friction.import", "friction.list", "friction.resolve", "onboarding.activate", "onboarding.advance_step", "onboarding.attach_reference", "onboarding.create_invite", "onboarding.finish", "onboarding.rehearse", "onboarding.setup", "onboarding.source_ingest", "onboarding.status", "onboarding.upload_context", "seat.create", "seat.set_type", "signal.bind", "signal.confirm_reading", "signal.draft_first_readings", "signal.import", "signal.report", "staffing.assign_agent_dry_run", "staffing.assign_user", "sync.brief.compile", "sync.brief.get", "sync.item.assign", "sync.run.complete", "sync.run.start", "task.import"] },
       { "id": "cascade.import_okrs", "title": "Import objectives and key results from a generic OKR CSV", "description": "Bulk-import a generic OKR export (objectives + key results) into the Cascade. Company objectives become company_objective goals; seat objectives become seat goals under the resolved company objective; metric key results become measurables bound informs to their objective; milestone key results become milestone goals under a seat objective. Owners are seat names resolved to seats; requires an active cycle. Idempotent \u2014 re-importing the same file is a no-op; existing goals/measurables/bindings are matched, never duplicated.", "required_scope": "tenant_admin", "confirmation": "none", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "dry_run": { "default": false, "type": "boolean" }, "parent_objective_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "objectives": { "minItems": 1, "maxItems": 200, "type": "array", "items": { "type": "object", "properties": { "title": { "type": "string", "minLength": 1, "maxLength": 200 }, "level": { "type": "string", "enum": ["company", "seat"] }, "owner": { "type": "string", "minLength": 1, "maxLength": 200 }, "cycle_label": { "anyOf": [{ "type": "string", "minLength": 1, "maxLength": 200 }, { "type": "null" }] }, "key_results": { "minItems": 1, "maxItems": 50, "type": "array", "items": { "oneOf": [{ "type": "object", "properties": { "type": { "type": "string", "const": "metric" }, "target": { "type": "number" }, "title": { "type": "string", "minLength": 1, "maxLength": 200 }, "unit": { "type": "string", "maxLength": 50 }, "direction": { "type": "string", "enum": ["up_good", "down_good"] }, "start_value": { "anyOf": [{ "type": "number" }, { "type": "null" }] }, "cadence": { "type": "string", "enum": ["daily", "weekly", "monthly", "quarterly", "annual"] } }, "required": ["type", "target", "title", "unit", "direction", "start_value", "cadence"], "additionalProperties": false }, { "type": "object", "properties": { "type": { "type": "string", "const": "milestone" }, "target": { "anyOf": [{ "type": "number" }, { "type": "null" }] }, "title": { "type": "string", "minLength": 1, "maxLength": 200 }, "unit": { "type": "string", "maxLength": 50 }, "direction": { "type": "string", "enum": ["up_good", "down_good"] }, "start_value": { "anyOf": [{ "type": "number" }, { "type": "null" }] }, "cadence": { "type": "string", "enum": ["daily", "weekly", "monthly", "quarterly", "annual"] } }, "required": ["type", "target", "title", "unit", "direction", "start_value", "cadence"], "additionalProperties": false }] } } }, "required": ["title", "level", "owner", "cycle_label", "key_results"], "additionalProperties": false } } }, "required": ["objectives"], "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "dry_run": { "type": "boolean" }, "objectives_created": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "objectives_matched": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "measurables_created": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "measurables_matched": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "bindings_created": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "milestones_created": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "milestones_matched": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "skipped_count": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "company_objective_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] }, "batch_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] }, "skipped": { "maxItems": 200, "type": "array", "items": { "type": "object", "properties": { "owner": { "type": "string" }, "title": { "type": "string" }, "reason": { "type": "string" } }, "required": ["reason"], "additionalProperties": false } } }, "required": ["dry_run", "objectives_created", "objectives_matched", "measurables_created", "measurables_matched", "bindings_created", "milestones_created", "milestones_matched", "skipped_count", "company_objective_id", "batch_id", "skipped"], "additionalProperties": false }, "help": "Import a generic OKR CSV (objectives + key results) into the Cascade; objectives become goals, metric KRs become measurables bound informs, milestone KRs become milestone goals; owners resolve to seats.", "guide_slugs": ["migration-and-legal-notes"], "stages": ["operating_rhythm"], "related_command_ids": ["cascade.import", "charter.draft", "compass.draft", "compass.import", "friction.import", "onboarding.upload_context", "seat.create", "signal.import", "task.import"] },
       { "id": "charter.apply_seat_type_recommendation", "title": "Apply Charter seat-type recommendation", "description": "Apply the seat-type recommendation from a draft Charter.", "required_scope": "seat", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": [], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "charter_version_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" } }, "required": ["charter_version_id"], "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "charter_version_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "edit_revision": { "type": "integer", "minimum": 1, "maximum": 9007199254740991 } }, "required": ["charter_version_id", "seat_id"], "additionalProperties": false }, "help": "Apply seat-type recommendations only after the Charter clarifies work shape, risk, and Steward accountability.", "guide_slugs": ["agent-staffing-playbook", "charter-design-playbook", "how-agents-work"], "stages": ["charter_design", "staffing"], "related_command_ids": ["charter.approve", "charter.draft", "charter.draft_all", "charter.get", "charter.list", "charter.preview_signal_reconciliation", "charter.reconcile_signals", "charter.sign_manifest", "charter.skip", "charter.update_draft", "confirmation.approve"] },
       { "id": "charter.approve", "title": "Approve charter", "description": "Approve a draft Charter as a human owner.", "required_scope": "seat", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": [], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "charter_version_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "edits": { "type": "object", "properties": { "purpose": { "type": "string", "minLength": 1 }, "accountabilities": { "minItems": 1, "type": "array", "items": { "type": "object", "properties": { "title": { "type": "string", "minLength": 1 }, "description": { "type": "string", "minLength": 1 } }, "required": ["title", "description"], "additionalProperties": false } }, "decision_authority": { "type": "object", "properties": { "autonomous": { "type": "array", "items": { "type": "object", "properties": { "action": { "type": "string", "minLength": 1 }, "condition": { "type": "string", "minLength": 1 }, "rationale": { "type": "string", "minLength": 1 }, "unanswered_boundary": { "default": false, "type": "boolean" } }, "required": ["action", "condition", "rationale"], "additionalProperties": false } }, "approval": { "type": "array", "items": { "type": "object", "properties": { "action": { "type": "string", "minLength": 1 }, "condition": { "type": "string", "minLength": 1 }, "rationale": { "type": "string", "minLength": 1 }, "unanswered_boundary": { "default": false, "type": "boolean" } }, "required": ["action", "condition", "rationale"], "additionalProperties": false } }, "escalate": { "minItems": 1, "type": "array", "items": { "type": "object", "properties": { "action": { "type": "string", "minLength": 1 }, "condition": { "type": "string", "minLength": 1 }, "rationale": { "type": "string", "minLength": 1 }, "unanswered_boundary": { "default": false, "type": "boolean" } }, "required": ["action", "condition", "rationale"], "additionalProperties": false } } }, "required": ["autonomous", "approval", "escalate"], "additionalProperties": false }, "escalation_rules": { "minItems": 1, "type": "array", "items": { "type": "string", "minLength": 1 } }, "measurables": { "minItems": 1, "type": "array", "items": { "type": "object", "properties": { "name": { "type": "string", "minLength": 1 }, "target": { "type": "string", "minLength": 1 }, "cadence": { "type": "string", "enum": ["daily", "weekly", "monthly", "quarterly"] }, "source": { "type": "string", "enum": ["human", "agent", "integration"] }, "signal": { "type": "object", "properties": { "unit": { "type": "string", "minLength": 1 }, "direction": { "type": "string", "enum": ["up_good", "down_good"] }, "target": { "type": "number" } }, "required": ["unit", "direction", "target"], "additionalProperties": false } }, "required": ["name", "target", "cadence", "source"], "additionalProperties": false } }, "permission_manifest": { "type": "array", "items": { "type": "object", "properties": { "tool": { "type": "string", "minLength": 1 }, "capability_id": { "type": "string", "minLength": 1 }, "integration_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "scope": { "type": "string", "minLength": 1 }, "granted": { "type": "boolean" }, "rationale": { "type": "string", "minLength": 1 }, "scope_tier": { "type": "string", "enum": ["read", "draft", "write_with_approval", "full"] }, "access_policy": { "type": "string", "enum": ["always_allow", "always_ask"] }, "args": { "type": "object", "properties": { "equals": { "type": "object", "propertyNames": { "type": "string" }, "additionalProperties": { "$ref": "#/definitions/__schema0" } } }, "additionalProperties": false } }, "required": ["tool", "scope", "granted", "rationale"], "additionalProperties": false } }, "budget": { "type": "object", "properties": { "monthly_usd": { "anyOf": [{ "type": "number", "minimum": 0 }, { "type": "null" }] }, "approval_required_over_usd": { "anyOf": [{ "type": "number", "minimum": 0 }, { "type": "null" }] }, "notes": { "type": "string", "minLength": 1 } }, "required": ["monthly_usd", "approval_required_over_usd", "notes"], "additionalProperties": false }, "unanswered_boundaries": { "type": "array", "items": { "type": "string", "minLength": 1 } }, "seat_type_recommendation": { "type": "object", "properties": { "recommendation": { "type": "string", "enum": ["human", "agent", "hybrid"] }, "rationale": { "type": "string", "minLength": 1 }, "confidence": { "type": "number", "minimum": 0, "maximum": 1 } }, "required": ["recommendation", "rationale", "confidence"], "additionalProperties": false } }, "additionalProperties": false }, "expected_edit_revision": { "type": "integer", "minimum": 1, "maximum": 9007199254740991 }, "apply_seat_type": { "default": false, "type": "boolean" } }, "additionalProperties": false, "definitions": { "__schema0": { "anyOf": [{ "type": "string" }, { "type": "number" }, { "type": "boolean" }, { "type": "null" }, { "type": "array", "items": { "$ref": "#/definitions/__schema0" } }, { "type": "object", "propertyNames": { "type": "string" }, "additionalProperties": { "$ref": "#/definitions/__schema0" } }] } } }, "output_schema": { "type": "object", "properties": { "charter_version_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "edit_revision": { "type": "integer", "minimum": 1, "maximum": 9007199254740991 } }, "required": ["charter_version_id", "seat_id"], "additionalProperties": false }, "help": "Charter approval is a human decision that activates the seat's operating contract.", "guide_slugs": ["charter-design-playbook", "agent-staffing-playbook"], "stages": ["charter_design", "staffing"], "related_command_ids": ["agent_grant_intervention.decide", "agent_grant_intervention.list", "agent_grant_intervention.resume", "agent_setup.get", "agent_setup.start", "agent_setup.update", "agent_template.list", "agent.activation_sign", "agent.configure_tools", "agent.create_custom", "agent.create_from_template", "agent.fleet_digest", "agent.get_run", "agent.go_live", "agent.list_fleet", "agent.list_runs", "agent.list_tool_calls", "agent.run_dry_run", "agent.status", "agent.trust.create", "agent.trust.expire", "agent.trust.revoke", "agent.trust.supersede", "cascade.import", "charter.apply_seat_type_recommendation", "charter.draft", "charter.draft_all", "charter.get", "charter.list", "charter.preview_signal_reconciliation", "charter.reconcile_signals", "charter.set", "charter.sign_manifest", "charter.skip", "charter.update_draft", "command.describe", "compass.answer_gap", "compass.approve_version", "compass.draft", "compass.get_current", "compass.list_gaps", "compass.reject_draft", "compass.set", "compass.update_draft", "confirmation.activation_set.list", "confirmation.approve", "confirmation.dismiss", "confirmation.dismiss_stale", "confirmation.list", "confirmation.reject", "confirmation.remint", "credential.ingress", "deliverable.accept", "deliverable.attach", "deliverable.create", "deliverable.get", "deliverable.list", "deliverable.reject", "error_log.list", "error_log.resolve", "error_log.supersede", "escalation.get", "escalation.list", "escalation.raise", "escalation.reject", "escalation.resolve", "friction.file_issue", "friction.list", "friction.resolve", "goal.reassign_owner", "goal.reparent", "implementation_access.abandon", "implementation_access.complete", "implementation_access.status", "integration.list", "integration.readiness", "integration.status", "integration.test", "mcp_token.create", "mcp_token.list", "mcp_token.revoke", "onboarding.activate", "onboarding.advance_step", "onboarding.attach_reference", "onboarding.create_invite", "onboarding.finish", "onboarding.rehearse", "onboarding.resume", "onboarding.setup", "onboarding.source_ingest", "onboarding.status", "onboarding.upload_context", "runner.diagnose", "runner.repair", "seat.create", "seat.create_complete", "seat.set_type", "signal.bind", "signal.confirm_reading", "signal.draft_first_readings", "signal.report", "skill.assign_to_seat", "skill.assigned.list", "skill.catalog", "skill.check_dependencies", "skill.create", "skill.enable_catalog", "skill.file.get", "skill.get", "skill.import_github", "skill.import_upload", "skill.install_local", "skill.list", "skill.publish", "skill.revoke_from_seat", "skill.sync_local", "skill.update_draft", "staffing.assign", "staffing.assign_agent_dry_run", "staffing.assign_user", "sync.brief.compile", "sync.brief.get", "sync.item.assign", "sync.run.complete", "sync.run.start", "system.health", "task.confirm_proposal", "task.decline_proposal", "tenant.anthropic_key.disable", "tenant.rename", "tool_grants.tenant.update", "usage.report", "usage.snapshot", "user.tenants", "user.use_tenant", "user.whoami"] },
+      { "id": "charter.backfill_stock_evidence", "title": "Backfill stock AICOS manifest evidence", "description": "Owner-triggered sweep minting manifest evidence for recognized unmodified stock AICOS Charters (edited/in-flight excluded and reported). Superseding a 0092-era Charter APPENDS agent.update_schedule + skill.assign_to_seat \u2014 both Trusted auto-band grants \u2014 a disclosed authority enlargement a human confirms (non-interactive runs stage a confirmation; seats whose approved Skills require tools the tool catalog does not know are refused with Skill blockers until DER-3223).", "required_scope": "tenant_admin", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": false, "input_schema": { "type": "object", "properties": {}, "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "tenant_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "updated": { "type": "array", "items": { "type": "object", "properties": { "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "charter_version_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "superseded_charter_version_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "from_revision": { "type": "string", "enum": ["0092", "0124", "current"] }, "decision_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "receipt_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] }, "manifest_delta": { "type": "object", "properties": { "appended": { "type": "array", "items": { "type": "string" } }, "removed": { "type": "array", "items": { "type": "string" } } }, "required": ["appended", "removed"], "additionalProperties": false } }, "required": ["seat_id", "charter_version_id", "superseded_charter_version_id", "from_revision", "decision_id", "receipt_id", "manifest_delta"], "additionalProperties": false } }, "already_current": { "type": "array", "items": { "type": "object", "properties": { "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "charter_version_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "reason": { "type": "string", "const": "evidence_already_verified" } }, "required": ["seat_id", "charter_version_id", "reason"], "additionalProperties": false } }, "excluded_edited": { "type": "array", "items": { "type": "object", "properties": { "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "charter_version_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "reason": { "type": "string", "const": "charter_doc_not_a_recognized_stock_revision" } }, "required": ["seat_id", "charter_version_id", "reason"], "additionalProperties": false } }, "excluded_in_flight": { "type": "array", "items": { "type": "object", "properties": { "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "charter_version_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "successor_kind": { "type": "string", "enum": ["agent", "charter_version"] }, "reason": { "type": "string", "const": "successor_in_flight" } }, "required": ["seat_id", "charter_version_id", "successor_kind", "reason"], "additionalProperties": false } }, "excluded_no_active_charter": { "type": "array", "items": { "type": "object", "properties": { "seat_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] }, "reason": { "type": "string", "enum": ["no_active_charter_version", "no_canonical_aicos_seat"] } }, "required": ["seat_id", "reason"], "additionalProperties": false } }, "excluded_noncanonical": { "type": "array", "items": { "type": "object", "properties": { "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "charter_version_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "reason": { "type": "string", "enum": ["stock_doc_off_canonical_seat", "canonical_seat_without_stock_occupancy"] } }, "required": ["seat_id", "charter_version_id", "reason"], "additionalProperties": false } } }, "required": ["tenant_id", "updated", "already_current", "excluded_edited", "excluded_in_flight", "excluded_no_active_charter", "excluded_noncanonical"], "additionalProperties": false }, "help": "Owner-only recovery sweep for recognized unmodified stock AICOS Charters that lack verified manifest evidence; edited or in-flight Charters are excluded and reported. Seats whose approved Skills require tools the tool catalog does not know are refused with Skill blockers until DER-3223.", "guide_slugs": ["aicos-chat-guide"], "stages": ["staffing"], "related_command_ids": ["agent.configure_tools", "agent.create_custom", "agent.go_live", "agent.run_dry_run", "agent.update_schedule", "aicos.brain_settings.get", "aicos.brain_settings.update", "charter.set", "charter.sign_manifest", "confirmation.approve", "graph.get", "mcp_token.list", "onboarding.status", "runner.list", "seat.get", "skill.assign_to_seat", "tenant.model_gateway_policy.update"] },
       { "id": "charter.draft", "title": "Draft charter", "description": "Create or fetch a draft Charter for a seat.", "required_scope": "seat", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" } }, "required": ["seat_id"], "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "charter_version_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "edit_revision": { "type": "integer", "minimum": 1, "maximum": 9007199254740991 }, "doc": {} }, "required": ["charter_version_id", "seat_id", "doc"], "additionalProperties": false }, "help": "Draft Charters that define purpose, responsibilities, decision authority, measurables, tools, budget, and escalation; the charter authoring deep-dive shows what good looks like per field.", "guide_slugs": ["charter-authoring-deep-dive", "charter-design-playbook"], "stages": ["charter_design"], "related_command_ids": ["agent_setup.get", "agent_setup.start", "agent_setup.update", "agent_template.list", "agent.configure_tools", "agent.create_custom", "agent.create_from_template", "agent.fleet_digest", "agent.get_run", "agent.go_live", "agent.list_fleet", "agent.list_runs", "agent.list_tool_calls", "agent.run_dry_run", "agent.status", "cascade.import", "cascade.import_okrs", "charter.apply_seat_type_recommendation", "charter.approve", "charter.draft_all", "charter.get", "charter.list", "charter.preview_signal_reconciliation", "charter.reconcile_signals", "charter.set", "charter.sign_manifest", "charter.skip", "charter.update_draft", "command.describe", "compass.answer_gap", "compass.approve_version", "compass.draft", "compass.get_current", "compass.import", "compass.list_gaps", "compass.reject_draft", "compass.set", "compass.update_draft", "confirmation.activation_set.list", "confirmation.approve", "confirmation.reject", "credential.ingress", "deliverable.accept", "deliverable.attach", "deliverable.create", "deliverable.get", "deliverable.list", "deliverable.reject", "error_log.list", "error_log.resolve", "error_log.supersede", "escalation.get", "escalation.list", "escalation.reject", "escalation.resolve", "friction.file_issue", "friction.import", "friction.list", "friction.resolve", "implementation_access.abandon", "implementation_access.complete", "implementation_access.status", "integration.list", "integration.readiness", "integration.status", "integration.test", "mcp_token.create", "mcp_token.list", "mcp_token.revoke", "onboarding.activate", "onboarding.advance_step", "onboarding.attach_reference", "onboarding.create_invite", "onboarding.finish", "onboarding.rehearse", "onboarding.resume", "onboarding.setup", "onboarding.source_ingest", "onboarding.status", "onboarding.upload_context", "runner.diagnose", "runner.repair", "seat.create", "seat.create_complete", "seat.set_type", "signal.bind", "signal.confirm_reading", "signal.draft_first_readings", "signal.import", "signal.report", "skill.assign_to_seat", "skill.assigned.list", "skill.catalog", "skill.check_dependencies", "skill.create", "skill.enable_catalog", "skill.file.get", "skill.get", "skill.import_github", "skill.import_upload", "skill.install_local", "skill.list", "skill.publish", "skill.revoke_from_seat", "skill.sync_local", "skill.update_draft", "staffing.assign", "staffing.assign_agent_dry_run", "staffing.assign_user", "sync.brief.compile", "sync.brief.get", "sync.item.assign", "sync.run.complete", "sync.run.start", "system.health", "task.import", "tenant.anthropic_key.disable", "tenant.rename", "tool_grants.tenant.update", "usage.report", "usage.snapshot", "user.tenants", "user.use_tenant", "user.whoami"] },
       { "id": "charter.draft_all", "title": "Draft all charters", "description": "Draft Charters for every eligible seat in a tenant.", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": {}, "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "drafted": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "skipped": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "draft_ids": { "type": "array", "items": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" } }, "skipped_seats": { "type": "array", "items": { "type": "object", "properties": { "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "reason": { "type": "string", "enum": ["seat_not_active", "charter_exists"] } }, "required": ["seat_id", "reason"], "additionalProperties": false } }, "effect": { "type": "object", "properties": { "attempted": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "applied": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "skipped": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "outcome": { "type": "string", "enum": ["applied", "partial", "none"] }, "skips": { "maxItems": 50, "type": "array", "items": { "type": "object", "properties": { "target_kind": { "type": "string", "minLength": 1 }, "target_id": { "anyOf": [{ "type": "string", "minLength": 1 }, { "type": "null" }] }, "reason": { "type": "string", "minLength": 1 }, "detail": { "type": "string", "minLength": 1 } }, "required": ["target_kind", "target_id", "reason"], "additionalProperties": false } }, "skips_omitted": { "default": 0, "type": "integer", "minimum": 0, "maximum": 9007199254740991 } }, "required": ["attempted", "applied", "skipped", "outcome", "skips"], "additionalProperties": false } }, "required": ["drafted", "skipped", "draft_ids", "skipped_seats", "effect"], "additionalProperties": false }, "example": {}, "help": "Draft Charters in onboarding order after the Responsibility Graph has enough seat clarity.", "guide_slugs": ["charter-design-playbook", "rost-implementation-method"], "stages": ["charter_design"], "related_command_ids": ["agent.go_live", "agent.run_dry_run", "cascade.import", "charter.apply_seat_type_recommendation", "charter.approve", "charter.draft", "charter.get", "charter.list", "charter.preview_signal_reconciliation", "charter.reconcile_signals", "charter.sign_manifest", "charter.skip", "charter.update_draft", "compass.answer_gap", "compass.approve_version", "compass.draft", "compass.get_current", "compass.list_gaps", "compass.reject_draft", "compass.set", "compass.update_draft", "confirmation.activation_set.list", "confirmation.approve", "credential.ingress", "friction.file_issue", "friction.list", "friction.resolve", "onboarding.activate", "onboarding.advance_step", "onboarding.attach_reference", "onboarding.create_invite", "onboarding.finish", "onboarding.rehearse", "onboarding.setup", "onboarding.source_ingest", "onboarding.status", "onboarding.upload_context", "seat.create", "seat.set_type", "signal.bind", "signal.confirm_reading", "signal.draft_first_readings", "signal.report", "staffing.assign_agent_dry_run", "staffing.assign_user", "sync.brief.compile", "sync.brief.get", "sync.item.assign", "sync.run.complete", "sync.run.start"] },
       { "id": "charter.get", "title": "Get Charter", "description": "Return a Charter version with its supersession history and latest dry-run status.", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "charter_version_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" } }, "required": ["charter_version_id"], "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "charter_version_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "version": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "status": { "type": "string", "enum": ["draft", "active", "superseded"] }, "created_at": { "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, "approved_at": { "anyOf": [{ "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, { "type": "null" }] }, "doc": {}, "history": { "type": "array", "items": { "type": "object", "properties": { "charter_version_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "version": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "status": { "type": "string", "enum": ["draft", "active", "superseded"] }, "created_at": { "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, "approved_at": { "anyOf": [{ "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, { "type": "null" }] } }, "required": ["charter_version_id", "seat_id", "version", "status", "created_at", "approved_at"], "additionalProperties": false } }, "dry_run": { "anyOf": [{ "type": "object", "properties": { "status": { "type": "string", "enum": ["passed", "failed"] }, "summary": { "type": "string" } }, "required": ["status", "summary"], "additionalProperties": false }, { "type": "null" }] } }, "required": ["charter_version_id", "seat_id", "version", "status", "created_at", "approved_at", "doc", "history", "dry_run"], "additionalProperties": false }, "help": "Read a Charter with its supersession history and dry-run status before approving or signing a manifest.", "guide_slugs": ["charter-design-playbook"], "stages": ["charter_design", "staffing"], "related_command_ids": ["charter.apply_seat_type_recommendation", "charter.approve", "charter.draft", "charter.draft_all", "charter.list", "charter.preview_signal_reconciliation", "charter.reconcile_signals", "charter.set", "charter.sign_manifest", "charter.skip", "charter.update_draft", "command.describe", "confirmation.approve"] },
       { "id": "charter.list", "title": "List Charters", "description": "List Charter versions in the tenant, optionally filtered by seat or status.", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "status": { "type": "string", "enum": ["draft", "active", "superseded"] } }, "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "charters": { "type": "array", "items": { "type": "object", "properties": { "charter_version_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "version": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "status": { "type": "string", "enum": ["draft", "active", "superseded"] }, "created_at": { "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, "approved_at": { "anyOf": [{ "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, { "type": "null" }] } }, "required": ["charter_version_id", "seat_id", "version", "status", "created_at", "approved_at"], "additionalProperties": false } } }, "required": ["charters"], "additionalProperties": false }, "help": "List Charter versions to find the right draft or active version id before reading or amending it.", "guide_slugs": ["charter-design-playbook"], "stages": ["charter_design"], "related_command_ids": ["charter.apply_seat_type_recommendation", "charter.approve", "charter.draft", "charter.draft_all", "charter.get", "charter.preview_signal_reconciliation", "charter.reconcile_signals", "charter.set", "charter.sign_manifest", "charter.skip", "charter.update_draft", "command.describe", "confirmation.approve"] },
       { "id": "charter.preview_signal_reconciliation", "title": "Preview Charter Signal reconciliation", "description": "Owner-only dry run: for each Signal a draft Charter declares, show whether it is already linked, which existing Signals match its name, who owns them, how much reading history and how many goal links they carry, the action that fits, and what it would cost. Reads only \u2014 nothing is changed. Approval needs an explicit choice only for a declaration that COLLIDES with an existing Signal and is not already linked: a declaration nothing matches is created automatically, and one already linked to a Signal takes no choice.", "required_scope": "tenant_admin", "confirmation": "none", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "charter_version_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" } }, "required": ["charter_version_id"], "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "charter_version_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "edit_revision": { "type": "integer", "minimum": 1, "maximum": 9007199254740991 }, "items": { "type": "array", "items": { "type": "object", "properties": { "declaration_name": { "type": "string" }, "status": { "type": "string", "enum": ["linked", "candidate", "ambiguous", "missing"] }, "linked_measurable_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] }, "candidates": { "type": "array", "items": { "type": "object", "properties": { "measurable_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "owner_seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "owner_seat_name": { "type": "string" }, "stored_source": { "type": "string", "enum": ["human", "agent", "integration"] }, "reading_count": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "latest_reading": { "anyOf": [{ "type": "object", "properties": { "value": { "type": "number" }, "period_start": { "type": "string" }, "confirmed": { "type": "boolean" } }, "required": ["value", "period_start", "confirmed"], "additionalProperties": false }, { "type": "null" }] }, "goal_bindings": { "type": "array", "items": { "type": "object", "properties": { "goal_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "goal_title": { "type": "string" }, "goal_seat_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] }, "role": { "type": "string", "enum": ["drives_status", "informs"] } }, "required": ["goal_id", "goal_title", "goal_seat_id", "role"], "additionalProperties": false } }, "source_binding_count": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "warnings": { "type": "array", "items": { "type": "string" } } }, "required": ["measurable_id", "owner_seat_id", "owner_seat_name", "stored_source", "reading_count", "latest_reading", "goal_bindings", "source_binding_count", "warnings"], "additionalProperties": false } }, "recommended_action": { "anyOf": [{ "type": "string", "enum": ["adopt_existing", "move_existing"] }, { "type": "null" }] }, "warnings": { "type": "array", "items": { "type": "string" } } }, "required": ["declaration_name", "status", "linked_measurable_id", "candidates", "recommended_action", "warnings"], "additionalProperties": false } } }, "required": ["charter_version_id", "seat_id", "edit_revision", "items"], "additionalProperties": false }, "help": "Preview first. Approval requires an explicit choice when an exact-name active Signal exists: adopt it if it is already owned by the Charter Seat, move it if another Seat owns it, or deliberately create a second Signal. Adoption and movement preserve the Signal ID, readings, and compatible goal bindings.", "guide_slugs": ["charter-design-playbook", "charter-authoring-deep-dive"], "stages": ["charter_design"], "related_command_ids": ["charter.apply_seat_type_recommendation", "charter.approve", "charter.draft", "charter.draft_all", "charter.get", "charter.list", "charter.reconcile_signals", "charter.sign_manifest", "charter.skip", "charter.update_draft", "confirmation.approve"] },
       { "id": "charter.reconcile_signals", "title": "Reconcile Charter Signals", "description": "Owner-only: approve a draft Charter with an explicit decision for each declared Signal that collides with one the company already tracks and is not already linked to one \u2014 adopt the existing Signal when this Seat owns it, move it to this Seat, or deliberately create a second one. Adoption and movement keep the Signal's id, its readings, and its compatible goal links. Preview first, and pass that preview's edit_revision.", "required_scope": "tenant_admin", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "charter_version_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "expected_edit_revision": { "type": "integer", "minimum": 1, "maximum": 9007199254740991 }, "signal_resolutions": { "minItems": 1, "type": "array", "items": { "oneOf": [{ "type": "object", "properties": { "declaration_name": { "type": "string", "minLength": 1, "maxLength": 120 }, "action": { "type": "string", "const": "adopt_existing" }, "measurable_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" } }, "required": ["declaration_name", "action", "measurable_id"], "additionalProperties": false }, { "type": "object", "properties": { "declaration_name": { "type": "string", "minLength": 1, "maxLength": 120 }, "action": { "type": "string", "const": "move_existing" }, "measurable_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" } }, "required": ["declaration_name", "action", "measurable_id"], "additionalProperties": false }, { "type": "object", "properties": { "declaration_name": { "type": "string", "minLength": 1, "maxLength": 120 }, "action": { "type": "string", "const": "create_new" } }, "required": ["declaration_name", "action"], "additionalProperties": false }] } }, "apply_seat_type": { "default": false, "type": "boolean" } }, "required": ["charter_version_id", "expected_edit_revision", "signal_resolutions"], "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "charter_version_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "edit_revision": { "type": "integer", "minimum": 1, "maximum": 9007199254740991 } }, "required": ["charter_version_id", "seat_id"], "additionalProperties": false }, "help": "Owner-only Charter approval carrying one explicit decision per COLLIDING, UNLINKED Signal declaration \u2014 a declaration nothing matches is created automatically, and an already-linked one takes no choice. Take the preview first and pass its edit_revision; adoption and movement keep the Signal's id, readings, and compatible goal bindings, and a cross-Seat status driver blocks a move.", "guide_slugs": ["charter-design-playbook", "charter-authoring-deep-dive"], "stages": ["charter_design"], "related_command_ids": ["charter.apply_seat_type_recommendation", "charter.approve", "charter.draft", "charter.draft_all", "charter.get", "charter.list", "charter.preview_signal_reconciliation", "charter.sign_manifest", "charter.skip", "charter.update_draft", "confirmation.approve"] },
-      { "id": "charter.set", "title": "Set charter", "description": "Create or replace a seat's draft Charter from a full document in one call; approve activates it as a human owner.", "required_scope": "seat", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": [], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "doc": { "type": "object", "properties": { "payload_version": { "type": "number", "const": 1 }, "purpose": { "type": "string", "minLength": 1 }, "accountabilities": { "minItems": 1, "type": "array", "items": { "type": "object", "properties": { "title": { "type": "string", "minLength": 1 }, "description": { "type": "string", "minLength": 1 } }, "required": ["title", "description"], "additionalProperties": false } }, "decision_authority": { "type": "object", "properties": { "autonomous": { "type": "array", "items": { "type": "object", "properties": { "action": { "type": "string", "minLength": 1 }, "condition": { "type": "string", "minLength": 1 }, "rationale": { "type": "string", "minLength": 1 }, "unanswered_boundary": { "default": false, "type": "boolean" } }, "required": ["action", "condition", "rationale"], "additionalProperties": false } }, "approval": { "type": "array", "items": { "type": "object", "properties": { "action": { "type": "string", "minLength": 1 }, "condition": { "type": "string", "minLength": 1 }, "rationale": { "type": "string", "minLength": 1 }, "unanswered_boundary": { "default": false, "type": "boolean" } }, "required": ["action", "condition", "rationale"], "additionalProperties": false } }, "escalate": { "minItems": 1, "type": "array", "items": { "type": "object", "properties": { "action": { "type": "string", "minLength": 1 }, "condition": { "type": "string", "minLength": 1 }, "rationale": { "type": "string", "minLength": 1 }, "unanswered_boundary": { "default": false, "type": "boolean" } }, "required": ["action", "condition", "rationale"], "additionalProperties": false } } }, "required": ["autonomous", "approval", "escalate"], "additionalProperties": false }, "escalation_rules": { "minItems": 1, "type": "array", "items": { "type": "string", "minLength": 1 } }, "measurables": { "minItems": 1, "type": "array", "items": { "type": "object", "properties": { "name": { "type": "string", "minLength": 1 }, "target": { "type": "string", "minLength": 1 }, "cadence": { "type": "string", "enum": ["daily", "weekly", "monthly", "quarterly"] }, "source": { "type": "string", "enum": ["human", "agent", "integration"] }, "signal": { "type": "object", "properties": { "unit": { "type": "string", "minLength": 1 }, "direction": { "type": "string", "enum": ["up_good", "down_good"] }, "target": { "type": "number" } }, "required": ["unit", "direction", "target"], "additionalProperties": false } }, "required": ["name", "target", "cadence", "source"], "additionalProperties": false } }, "permission_manifest": { "type": "array", "items": { "type": "object", "properties": { "tool": { "type": "string", "minLength": 1 }, "capability_id": { "type": "string", "minLength": 1 }, "integration_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "scope": { "type": "string", "minLength": 1 }, "granted": { "type": "boolean" }, "rationale": { "type": "string", "minLength": 1 }, "scope_tier": { "type": "string", "enum": ["read", "draft", "write_with_approval", "full"] }, "access_policy": { "type": "string", "enum": ["always_allow", "always_ask"] }, "args": { "type": "object", "properties": { "equals": { "type": "object", "propertyNames": { "type": "string" }, "additionalProperties": { "$ref": "#/definitions/__schema0" } } }, "additionalProperties": false } }, "required": ["tool", "scope", "granted", "rationale"], "additionalProperties": false } }, "budget": { "type": "object", "properties": { "monthly_usd": { "anyOf": [{ "type": "number", "minimum": 0 }, { "type": "null" }] }, "approval_required_over_usd": { "anyOf": [{ "type": "number", "minimum": 0 }, { "type": "null" }] }, "notes": { "type": "string", "minLength": 1 } }, "required": ["monthly_usd", "approval_required_over_usd", "notes"], "additionalProperties": false }, "unanswered_boundaries": { "type": "array", "items": { "type": "string", "minLength": 1 } }, "seat_type_recommendation": { "type": "object", "properties": { "recommendation": { "type": "string", "enum": ["human", "agent", "hybrid"] }, "rationale": { "type": "string", "minLength": 1 }, "confidence": { "type": "number", "minimum": 0, "maximum": 1 } }, "required": ["recommendation", "rationale", "confidence"], "additionalProperties": false } }, "required": ["payload_version", "purpose", "accountabilities", "decision_authority", "escalation_rules", "measurables", "permission_manifest", "budget"], "additionalProperties": false }, "approve": { "default": false, "type": "boolean" } }, "required": ["seat_id", "doc"], "additionalProperties": false, "definitions": { "__schema0": { "anyOf": [{ "type": "string" }, { "type": "number" }, { "type": "boolean" }, { "type": "null" }, { "type": "array", "items": { "$ref": "#/definitions/__schema0" } }, { "type": "object", "propertyNames": { "type": "string" }, "additionalProperties": { "$ref": "#/definitions/__schema0" } }] } } }, "output_schema": { "type": "object", "properties": { "charter_version_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "edit_revision": { "type": "integer", "minimum": 1, "maximum": 9007199254740991 } }, "required": ["charter_version_id", "seat_id"], "additionalProperties": false }, "example": { "seat_id": "0190aaaa-aaaa-7aaa-8aaa-aaaaaaaaaaaa", "doc": { "payload_version": 1, "purpose": "AP intake clerk: draft accounts-payable invoice entries from inbound vendor emails for human review.", "accountabilities": [{ "title": "Draft every inbound invoice", "description": "Convert each inbound vendor invoice into a draft AP entry with the correct vendor, amount, and GL coding within one business day." }, { "title": "Flag discrepancies", "description": "Surface duplicate, mismatched, or out-of-policy invoices as Friction issues instead of drafting them silently." }], "decision_authority": { "autonomous": [{ "action": "Draft AP entries and propose GL coding from inbound invoices", "condition": "Allowed when the vendor is known and the amount is within the standard purchase range.", "rationale": "Drafting is reversible and reviewed by a human before posting.", "unanswered_boundary": false }], "approval": [{ "action": "Post an invoice or send any vendor-facing message", "condition": "Require explicit human approval before posting or sending.", "rationale": "Posting and sending are durable, money-moving actions.", "unanswered_boundary": false }], "escalate": [{ "action": "Unknown vendor, payment over the approval threshold, or a suspected duplicate", "condition": "Always escalate to the Steward before acting.", "rationale": "Conservative default for ambiguous, irreversible, or financial exposure.", "unanswered_boundary": true }] }, "escalation_rules": ["Escalate any invoice over $5,000 or from a vendor not already in the ledger.", "Escalate when an invoice appears to duplicate one already drafted or posted."], "measurables": [{ "name": "Invoices drafted within one business day", "target": "100%", "cadence": "weekly", "source": "agent" }, { "name": "Discrepancies caught before posting", "target": "\u2265 95%", "cadence": "monthly", "source": "human" }], "permission_manifest": [{ "tool": "ap.invoices.read", "scope": "Read inbound invoices and the vendor ledger.", "granted": true, "rationale": "Needed to draft entries from source invoices." }, { "tool": "email.draft", "scope": "Draft vendor replies for human review; never send.", "granted": true, "rationale": "Lets the seat prepare clarifications without taking a send action." }], "budget": { "monthly_usd": null, "approval_required_over_usd": 0, "notes": "No autonomous spend; any spend requires Steward approval until a budget is set." }, "unanswered_boundaries": ["Approval threshold for auto-posting", "Vendor onboarding authority"], "seat_type_recommendation": { "recommendation": "agent", "rationale": "The work is high-volume, rule-bound, and fully reviewable, which suits a draft-and-confirm agent under a human Steward.", "confidence": 0.8 } }, "approve": false }, "help": "Create or replace a seat's draft Charter from a full document in one call; read the charter authoring deep-dive first. Approving activates the seat's contract and is a human decision.", "guide_slugs": ["charter-authoring-deep-dive", "charter-design-playbook"], "stages": ["charter_design"], "related_command_ids": ["agent.configure_tools", "agent.create_custom", "agent.go_live", "agent.run_dry_run", "agent.update_schedule", "aicos.brain_settings.get", "aicos.brain_settings.update", "charter.approve", "charter.draft", "charter.get", "charter.list", "charter.sign_manifest", "charter.update_draft", "command.describe", "confirmation.approve", "credential.ingress", "graph.get", "integration.connect_rest", "integration.list", "integration.readiness", "integration.status", "integration.test", "mcp_token.create", "mcp_token.list", "mcp_token.revoke", "onboarding.status", "runner.list", "seat.get", "skill.assign_to_seat", "tenant.model_gateway_policy.update"] },
+      { "id": "charter.set", "title": "Set charter", "description": "Create or replace a seat's draft Charter from a full document in one call; approve activates it as a human owner.", "required_scope": "seat", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": [], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "doc": { "type": "object", "properties": { "payload_version": { "type": "number", "const": 1 }, "purpose": { "type": "string", "minLength": 1 }, "accountabilities": { "minItems": 1, "type": "array", "items": { "type": "object", "properties": { "title": { "type": "string", "minLength": 1 }, "description": { "type": "string", "minLength": 1 } }, "required": ["title", "description"], "additionalProperties": false } }, "decision_authority": { "type": "object", "properties": { "autonomous": { "type": "array", "items": { "type": "object", "properties": { "action": { "type": "string", "minLength": 1 }, "condition": { "type": "string", "minLength": 1 }, "rationale": { "type": "string", "minLength": 1 }, "unanswered_boundary": { "default": false, "type": "boolean" } }, "required": ["action", "condition", "rationale"], "additionalProperties": false } }, "approval": { "type": "array", "items": { "type": "object", "properties": { "action": { "type": "string", "minLength": 1 }, "condition": { "type": "string", "minLength": 1 }, "rationale": { "type": "string", "minLength": 1 }, "unanswered_boundary": { "default": false, "type": "boolean" } }, "required": ["action", "condition", "rationale"], "additionalProperties": false } }, "escalate": { "minItems": 1, "type": "array", "items": { "type": "object", "properties": { "action": { "type": "string", "minLength": 1 }, "condition": { "type": "string", "minLength": 1 }, "rationale": { "type": "string", "minLength": 1 }, "unanswered_boundary": { "default": false, "type": "boolean" } }, "required": ["action", "condition", "rationale"], "additionalProperties": false } } }, "required": ["autonomous", "approval", "escalate"], "additionalProperties": false }, "escalation_rules": { "minItems": 1, "type": "array", "items": { "type": "string", "minLength": 1 } }, "measurables": { "minItems": 1, "type": "array", "items": { "type": "object", "properties": { "name": { "type": "string", "minLength": 1 }, "target": { "type": "string", "minLength": 1 }, "cadence": { "type": "string", "enum": ["daily", "weekly", "monthly", "quarterly"] }, "source": { "type": "string", "enum": ["human", "agent", "integration"] }, "signal": { "type": "object", "properties": { "unit": { "type": "string", "minLength": 1 }, "direction": { "type": "string", "enum": ["up_good", "down_good"] }, "target": { "type": "number" } }, "required": ["unit", "direction", "target"], "additionalProperties": false } }, "required": ["name", "target", "cadence", "source"], "additionalProperties": false } }, "permission_manifest": { "type": "array", "items": { "type": "object", "properties": { "tool": { "type": "string", "minLength": 1 }, "capability_id": { "type": "string", "minLength": 1 }, "integration_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "scope": { "type": "string", "minLength": 1 }, "granted": { "type": "boolean" }, "rationale": { "type": "string", "minLength": 1 }, "scope_tier": { "type": "string", "enum": ["read", "draft", "write_with_approval", "full"] }, "access_policy": { "type": "string", "enum": ["always_allow", "always_ask"] }, "args": { "type": "object", "properties": { "equals": { "type": "object", "propertyNames": { "type": "string" }, "additionalProperties": { "$ref": "#/definitions/__schema0" } } }, "additionalProperties": false } }, "required": ["tool", "scope", "granted", "rationale"], "additionalProperties": false } }, "budget": { "type": "object", "properties": { "monthly_usd": { "anyOf": [{ "type": "number", "minimum": 0 }, { "type": "null" }] }, "approval_required_over_usd": { "anyOf": [{ "type": "number", "minimum": 0 }, { "type": "null" }] }, "notes": { "type": "string", "minLength": 1 } }, "required": ["monthly_usd", "approval_required_over_usd", "notes"], "additionalProperties": false }, "unanswered_boundaries": { "type": "array", "items": { "type": "string", "minLength": 1 } }, "seat_type_recommendation": { "type": "object", "properties": { "recommendation": { "type": "string", "enum": ["human", "agent", "hybrid"] }, "rationale": { "type": "string", "minLength": 1 }, "confidence": { "type": "number", "minimum": 0, "maximum": 1 } }, "required": ["recommendation", "rationale", "confidence"], "additionalProperties": false } }, "required": ["payload_version", "purpose", "accountabilities", "decision_authority", "escalation_rules", "measurables", "permission_manifest", "budget"], "additionalProperties": false }, "approve": { "default": false, "type": "boolean" } }, "required": ["seat_id", "doc"], "additionalProperties": false, "definitions": { "__schema0": { "anyOf": [{ "type": "string" }, { "type": "number" }, { "type": "boolean" }, { "type": "null" }, { "type": "array", "items": { "$ref": "#/definitions/__schema0" } }, { "type": "object", "propertyNames": { "type": "string" }, "additionalProperties": { "$ref": "#/definitions/__schema0" } }] } } }, "output_schema": { "type": "object", "properties": { "charter_version_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "edit_revision": { "type": "integer", "minimum": 1, "maximum": 9007199254740991 } }, "required": ["charter_version_id", "seat_id"], "additionalProperties": false }, "example": { "seat_id": "0190aaaa-aaaa-7aaa-8aaa-aaaaaaaaaaaa", "doc": { "payload_version": 1, "purpose": "AP intake clerk: draft accounts-payable invoice entries from inbound vendor emails for human review.", "accountabilities": [{ "title": "Draft every inbound invoice", "description": "Convert each inbound vendor invoice into a draft AP entry with the correct vendor, amount, and GL coding within one business day." }, { "title": "Flag discrepancies", "description": "Surface duplicate, mismatched, or out-of-policy invoices as Friction issues instead of drafting them silently." }], "decision_authority": { "autonomous": [{ "action": "Draft AP entries and propose GL coding from inbound invoices", "condition": "Allowed when the vendor is known and the amount is within the standard purchase range.", "rationale": "Drafting is reversible and reviewed by a human before posting.", "unanswered_boundary": false }], "approval": [{ "action": "Post an invoice or send any vendor-facing message", "condition": "Require explicit human approval before posting or sending.", "rationale": "Posting and sending are durable, money-moving actions.", "unanswered_boundary": false }], "escalate": [{ "action": "Unknown vendor, payment over the approval threshold, or a suspected duplicate", "condition": "Always escalate to the Steward before acting.", "rationale": "Conservative default for ambiguous, irreversible, or financial exposure.", "unanswered_boundary": true }] }, "escalation_rules": ["Escalate any invoice over $5,000 or from a vendor not already in the ledger.", "Escalate when an invoice appears to duplicate one already drafted or posted."], "measurables": [{ "name": "Invoices drafted within one business day", "target": "100%", "cadence": "weekly", "source": "agent" }, { "name": "Discrepancies caught before posting", "target": "\u2265 95%", "cadence": "monthly", "source": "human" }], "permission_manifest": [{ "tool": "ap.invoices.read", "scope": "Read inbound invoices and the vendor ledger.", "granted": true, "rationale": "Needed to draft entries from source invoices." }, { "tool": "email.draft", "scope": "Draft vendor replies for human review; never send.", "granted": true, "rationale": "Lets the seat prepare clarifications without taking a send action." }], "budget": { "monthly_usd": null, "approval_required_over_usd": 0, "notes": "No autonomous spend; any spend requires Steward approval until a budget is set." }, "unanswered_boundaries": ["Approval threshold for auto-posting", "Vendor onboarding authority"], "seat_type_recommendation": { "recommendation": "agent", "rationale": "The work is high-volume, rule-bound, and fully reviewable, which suits a draft-and-confirm agent under a human Steward.", "confidence": 0.8 } }, "approve": false }, "help": "Create or replace a seat's draft Charter from a full document in one call; read the charter authoring deep-dive first. Approving activates the seat's contract and is a human decision.", "guide_slugs": ["charter-authoring-deep-dive", "charter-design-playbook"], "stages": ["charter_design"], "related_command_ids": ["agent.configure_tools", "agent.create_custom", "agent.go_live", "agent.run_dry_run", "agent.update_schedule", "aicos.brain_settings.get", "aicos.brain_settings.update", "charter.approve", "charter.backfill_stock_evidence", "charter.draft", "charter.get", "charter.list", "charter.sign_manifest", "charter.update_draft", "command.describe", "confirmation.approve", "credential.ingress", "graph.get", "integration.connect_rest", "integration.list", "integration.readiness", "integration.status", "integration.test", "mcp_token.create", "mcp_token.list", "mcp_token.revoke", "onboarding.status", "runner.list", "seat.get", "skill.assign_to_seat", "tenant.model_gateway_policy.update"] },
       { "id": "charter.show_markdown", "title": "Show Charter as markdown", "description": "Compose a seat's active or latest Charter into a clean, human-skimmable markdown card for review.", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" } }, "required": ["seat_id"], "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "markdown": { "type": "string", "minLength": 1 }, "charter_version_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] }, "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "version": { "anyOf": [{ "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, { "type": "null" }] }, "status": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "doc": { "anyOf": [{}, { "type": "null" }] }, "dry_run": { "anyOf": [{ "type": "object", "properties": { "status": { "type": "string", "enum": ["passed", "failed"] }, "summary": { "type": "string" } }, "required": ["status", "summary"], "additionalProperties": false }, { "type": "null" }] } }, "required": ["markdown", "charter_version_id", "seat_id", "version", "status", "doc", "dry_run"], "additionalProperties": false }, "help": "Render a seat's active or latest Charter as a clean markdown card to show your human a quick review.", "guide_slugs": ["charter-authoring-deep-dive", "agent-builder-guide"], "stages": ["charter_design", "staffing"], "related_command_ids": [] },
-      { "id": "charter.sign_manifest", "title": "Sign charter manifest", "description": "Request human confirmation for a Charter permission manifest.", "required_scope": "seat", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": [], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "charter_version_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" } }, "required": ["charter_version_id"], "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "charter_version_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "edit_revision": { "type": "integer", "minimum": 1, "maximum": 9007199254740991 } }, "required": ["charter_version_id", "seat_id"], "additionalProperties": false }, "help": "Sign tool manifests only when the Charter explains why the tool is needed and how it is bounded.", "guide_slugs": ["tool-access-and-vault", "agent-staffing-playbook"], "stages": ["staffing"], "related_command_ids": ["agent_setup.get", "agent_setup.start", "agent_setup.update", "agent.configure_tools", "agent.create_custom", "agent.get_run", "agent.go_live", "agent.list_tool_calls", "agent.run_dry_run", "agent.update_schedule", "aicos.brain_settings.get", "aicos.brain_settings.update", "cascade.import", "charter.apply_seat_type_recommendation", "charter.approve", "charter.draft", "charter.draft_all", "charter.get", "charter.list", "charter.preview_signal_reconciliation", "charter.reconcile_signals", "charter.set", "charter.skip", "charter.update_draft", "command.describe", "compass.answer_gap", "compass.approve_version", "compass.draft", "compass.get_current", "compass.list_gaps", "compass.reject_draft", "compass.set", "compass.update_draft", "confirmation.activation_set.list", "confirmation.approve", "credential.ingress", "friction.file_issue", "friction.list", "friction.resolve", "graph.get", "integration.connect_rest", "integration.list", "integration.readiness", "integration.status", "integration.test", "mcp_token.create", "mcp_token.list", "mcp_token.revoke", "onboarding.activate", "onboarding.advance_step", "onboarding.attach_reference", "onboarding.create_invite", "onboarding.finish", "onboarding.rehearse", "onboarding.setup", "onboarding.source_ingest", "onboarding.status", "onboarding.upload_context", "runner.list", "runner.pairing.start", "seat.create", "seat.get", "seat.set_type", "signal.bind", "signal.confirm_reading", "signal.draft_first_readings", "signal.report", "skill.assign_to_seat", "skill.catalog", "skill.check_dependencies", "skill.file.get", "skill.get", "skill.list", "staffing.assign_agent_dry_run", "staffing.assign_user", "sync.brief.compile", "sync.brief.get", "sync.item.assign", "sync.run.complete", "sync.run.start", "tenant.anthropic_key.disable", "tenant.anthropic_key.save", "tenant.model_gateway_policy.update"] },
+      { "id": "charter.sign_manifest", "title": "Sign charter manifest", "description": "Request human confirmation for a Charter permission manifest.", "required_scope": "seat", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": [], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "charter_version_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" } }, "required": ["charter_version_id"], "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "charter_version_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "edit_revision": { "type": "integer", "minimum": 1, "maximum": 9007199254740991 } }, "required": ["charter_version_id", "seat_id"], "additionalProperties": false }, "help": "Sign tool manifests only when the Charter explains why the tool is needed and how it is bounded.", "guide_slugs": ["tool-access-and-vault", "agent-staffing-playbook"], "stages": ["staffing"], "related_command_ids": ["agent_setup.get", "agent_setup.start", "agent_setup.update", "agent.configure_tools", "agent.create_custom", "agent.get_run", "agent.go_live", "agent.list_tool_calls", "agent.run_dry_run", "agent.update_schedule", "aicos.brain_settings.get", "aicos.brain_settings.update", "cascade.import", "charter.apply_seat_type_recommendation", "charter.approve", "charter.backfill_stock_evidence", "charter.draft", "charter.draft_all", "charter.get", "charter.list", "charter.preview_signal_reconciliation", "charter.reconcile_signals", "charter.set", "charter.skip", "charter.update_draft", "command.describe", "compass.answer_gap", "compass.approve_version", "compass.draft", "compass.get_current", "compass.list_gaps", "compass.reject_draft", "compass.set", "compass.update_draft", "confirmation.activation_set.list", "confirmation.approve", "credential.ingress", "friction.file_issue", "friction.list", "friction.resolve", "graph.get", "integration.connect_rest", "integration.list", "integration.readiness", "integration.status", "integration.test", "mcp_token.create", "mcp_token.list", "mcp_token.revoke", "onboarding.activate", "onboarding.advance_step", "onboarding.attach_reference", "onboarding.create_invite", "onboarding.finish", "onboarding.rehearse", "onboarding.setup", "onboarding.source_ingest", "onboarding.status", "onboarding.upload_context", "runner.list", "runner.pairing.start", "seat.create", "seat.get", "seat.set_type", "signal.bind", "signal.confirm_reading", "signal.draft_first_readings", "signal.report", "skill.assign_to_seat", "skill.catalog", "skill.check_dependencies", "skill.file.get", "skill.get", "skill.list", "staffing.assign_agent_dry_run", "staffing.assign_user", "sync.brief.compile", "sync.brief.get", "sync.item.assign", "sync.run.complete", "sync.run.start", "tenant.anthropic_key.disable", "tenant.anthropic_key.save", "tenant.model_gateway_policy.update"] },
       { "id": "charter.skip", "title": "Skip charter draft", "description": "Mark a draft Charter as skipped.", "required_scope": "seat", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": [], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "charter_version_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" } }, "required": ["charter_version_id"], "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "charter_version_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "edit_revision": { "type": "integer", "minimum": 1, "maximum": 9007199254740991 } }, "required": ["charter_version_id", "seat_id"], "additionalProperties": false }, "help": "Skip a Charter only when the seat is intentionally out of scope for the current onboarding pass.", "guide_slugs": ["charter-design-playbook", "rost-implementation-method"], "stages": ["charter_design"], "related_command_ids": ["charter.apply_seat_type_recommendation", "charter.approve", "charter.draft", "charter.draft_all", "charter.get", "charter.list", "charter.preview_signal_reconciliation", "charter.reconcile_signals", "charter.sign_manifest", "charter.update_draft", "confirmation.approve"] },
       { "id": "charter.update_draft", "title": "Update charter draft", "description": "Update a draft Charter document.", "required_scope": "seat", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "charter_version_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "expected_edit_revision": { "type": "integer", "minimum": 1, "maximum": 9007199254740991 }, "doc": { "type": "object", "properties": { "payload_version": { "type": "number", "const": 1 }, "purpose": { "type": "string", "minLength": 1 }, "accountabilities": { "minItems": 1, "type": "array", "items": { "type": "object", "properties": { "title": { "type": "string", "minLength": 1 }, "description": { "type": "string", "minLength": 1 } }, "required": ["title", "description"], "additionalProperties": false } }, "decision_authority": { "type": "object", "properties": { "autonomous": { "type": "array", "items": { "type": "object", "properties": { "action": { "type": "string", "minLength": 1 }, "condition": { "type": "string", "minLength": 1 }, "rationale": { "type": "string", "minLength": 1 }, "unanswered_boundary": { "default": false, "type": "boolean" } }, "required": ["action", "condition", "rationale"], "additionalProperties": false } }, "approval": { "type": "array", "items": { "type": "object", "properties": { "action": { "type": "string", "minLength": 1 }, "condition": { "type": "string", "minLength": 1 }, "rationale": { "type": "string", "minLength": 1 }, "unanswered_boundary": { "default": false, "type": "boolean" } }, "required": ["action", "condition", "rationale"], "additionalProperties": false } }, "escalate": { "minItems": 1, "type": "array", "items": { "type": "object", "properties": { "action": { "type": "string", "minLength": 1 }, "condition": { "type": "string", "minLength": 1 }, "rationale": { "type": "string", "minLength": 1 }, "unanswered_boundary": { "default": false, "type": "boolean" } }, "required": ["action", "condition", "rationale"], "additionalProperties": false } } }, "required": ["autonomous", "approval", "escalate"], "additionalProperties": false }, "escalation_rules": { "minItems": 1, "type": "array", "items": { "type": "string", "minLength": 1 } }, "measurables": { "minItems": 1, "type": "array", "items": { "type": "object", "properties": { "name": { "type": "string", "minLength": 1 }, "target": { "type": "string", "minLength": 1 }, "cadence": { "type": "string", "enum": ["daily", "weekly", "monthly", "quarterly"] }, "source": { "type": "string", "enum": ["human", "agent", "integration"] }, "signal": { "type": "object", "properties": { "unit": { "type": "string", "minLength": 1 }, "direction": { "type": "string", "enum": ["up_good", "down_good"] }, "target": { "type": "number" } }, "required": ["unit", "direction", "target"], "additionalProperties": false } }, "required": ["name", "target", "cadence", "source"], "additionalProperties": false } }, "permission_manifest": { "type": "array", "items": { "type": "object", "properties": { "tool": { "type": "string", "minLength": 1 }, "capability_id": { "type": "string", "minLength": 1 }, "integration_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "scope": { "type": "string", "minLength": 1 }, "granted": { "type": "boolean" }, "rationale": { "type": "string", "minLength": 1 }, "scope_tier": { "type": "string", "enum": ["read", "draft", "write_with_approval", "full"] }, "access_policy": { "type": "string", "enum": ["always_allow", "always_ask"] }, "args": { "type": "object", "properties": { "equals": { "type": "object", "propertyNames": { "type": "string" }, "additionalProperties": { "$ref": "#/definitions/__schema0" } } }, "additionalProperties": false } }, "required": ["tool", "scope", "granted", "rationale"], "additionalProperties": false } }, "budget": { "type": "object", "properties": { "monthly_usd": { "anyOf": [{ "type": "number", "minimum": 0 }, { "type": "null" }] }, "approval_required_over_usd": { "anyOf": [{ "type": "number", "minimum": 0 }, { "type": "null" }] }, "notes": { "type": "string", "minLength": 1 } }, "required": ["monthly_usd", "approval_required_over_usd", "notes"], "additionalProperties": false }, "unanswered_boundaries": { "type": "array", "items": { "type": "string", "minLength": 1 } }, "seat_type_recommendation": { "type": "object", "properties": { "recommendation": { "type": "string", "enum": ["human", "agent", "hybrid"] }, "rationale": { "type": "string", "minLength": 1 }, "confidence": { "type": "number", "minimum": 0, "maximum": 1 } }, "required": ["recommendation", "rationale", "confidence"], "additionalProperties": false } }, "required": ["payload_version", "purpose", "accountabilities", "decision_authority", "escalation_rules", "measurables", "permission_manifest", "budget"], "additionalProperties": false } }, "required": ["charter_version_id", "doc"], "additionalProperties": false, "definitions": { "__schema0": { "anyOf": [{ "type": "string" }, { "type": "number" }, { "type": "boolean" }, { "type": "null" }, { "type": "array", "items": { "$ref": "#/definitions/__schema0" } }, { "type": "object", "propertyNames": { "type": "string" }, "additionalProperties": { "$ref": "#/definitions/__schema0" } }] } } }, "output_schema": { "type": "object", "properties": { "charter_version_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "edit_revision": { "type": "integer", "minimum": 1, "maximum": 9007199254740991 } }, "required": ["charter_version_id", "seat_id"], "additionalProperties": false }, "example": { "charter_version_id": "0190cccc-cccc-7ccc-8ccc-cccccccccccc", "doc": { "payload_version": 1, "purpose": "AP intake clerk: draft accounts-payable invoice entries from inbound vendor emails for human review.", "accountabilities": [{ "title": "Draft every inbound invoice", "description": "Convert each inbound vendor invoice into a draft AP entry with the correct vendor, amount, and GL coding within one business day." }, { "title": "Flag discrepancies", "description": "Surface duplicate, mismatched, or out-of-policy invoices as Friction issues instead of drafting them silently." }], "decision_authority": { "autonomous": [{ "action": "Draft AP entries and propose GL coding from inbound invoices", "condition": "Allowed when the vendor is known and the amount is within the standard purchase range.", "rationale": "Drafting is reversible and reviewed by a human before posting.", "unanswered_boundary": false }], "approval": [{ "action": "Post an invoice or send any vendor-facing message", "condition": "Require explicit human approval before posting or sending.", "rationale": "Posting and sending are durable, money-moving actions.", "unanswered_boundary": false }], "escalate": [{ "action": "Unknown vendor, payment over the approval threshold, or a suspected duplicate", "condition": "Always escalate to the Steward before acting.", "rationale": "Conservative default for ambiguous, irreversible, or financial exposure.", "unanswered_boundary": true }] }, "escalation_rules": ["Escalate any invoice over $5,000 or from a vendor not already in the ledger.", "Escalate when an invoice appears to duplicate one already drafted or posted."], "measurables": [{ "name": "Invoices drafted within one business day", "target": "100%", "cadence": "weekly", "source": "agent" }, { "name": "Discrepancies caught before posting", "target": "\u2265 95%", "cadence": "monthly", "source": "human" }], "permission_manifest": [{ "tool": "ap.invoices.read", "scope": "Read inbound invoices and the vendor ledger.", "granted": true, "rationale": "Needed to draft entries from source invoices." }, { "tool": "email.draft", "scope": "Draft vendor replies for human review; never send.", "granted": true, "rationale": "Lets the seat prepare clarifications without taking a send action." }], "budget": { "monthly_usd": null, "approval_required_over_usd": 0, "notes": "No autonomous spend; any spend requires Steward approval until a budget is set." }, "unanswered_boundaries": ["Approval threshold for auto-posting", "Vendor onboarding authority"], "seat_type_recommendation": { "recommendation": "agent", "rationale": "The work is high-volume, rule-bound, and fully reviewable, which suits a draft-and-confirm agent under a human Steward.", "confidence": 0.8 } } }, "help": "Submit the full Charter document directly (purpose, decision_authority, escalation_rules, measurables, budget, permission_manifest); read the charter authoring deep-dive for what good looks like per field. Durable authority changes still need human approval.", "guide_slugs": ["charter-authoring-deep-dive", "charter-design-playbook"], "stages": ["charter_design"], "related_command_ids": ["agent_setup.get", "agent_setup.start", "agent_setup.update", "agent.configure_tools", "agent.create_custom", "agent.go_live", "agent.run_dry_run", "agent.show_markdown", "cascade.import", "charter.apply_seat_type_recommendation", "charter.approve", "charter.draft", "charter.draft_all", "charter.get", "charter.list", "charter.preview_signal_reconciliation", "charter.reconcile_signals", "charter.set", "charter.sign_manifest", "charter.skip", "command.describe", "compass.answer_gap", "compass.approve_version", "compass.draft", "compass.get_current", "compass.list_gaps", "compass.reject_draft", "compass.set", "compass.update_draft", "confirmation.activation_set.list", "confirmation.approve", "credential.ingress", "friction.file_issue", "friction.list", "friction.resolve", "integration.connect_rest", "integration.list", "integration.readiness", "integration.status", "integration.test", "mcp_token.create", "mcp_token.list", "mcp_token.revoke", "model.catalog", "onboarding.activate", "onboarding.advance_step", "onboarding.attach_reference", "onboarding.create_invite", "onboarding.finish", "onboarding.rehearse", "onboarding.setup", "onboarding.source_ingest", "onboarding.status", "onboarding.upload_context", "seat.create", "seat.set_type", "signal.bind", "signal.confirm_reading", "signal.draft_first_readings", "signal.report", "staffing.assign_agent_dry_run", "staffing.assign_user", "sync.brief.compile", "sync.brief.get", "sync.item.assign", "sync.run.complete", "sync.run.start", "tool.catalog"] },
       { "id": "coach.draft_guide", "title": "Draft accountability discussion guide", "description": "Draft a private discussion guide for the accountable human about a seat's commitment pattern. Read-only and human-only \u2014 it is never delivered, sent, or written to the coached person's record.", "required_scope": "tenant_admin", "confirmation": "none", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": false, "input_schema": { "type": "object", "properties": { "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" } }, "required": ["seat_id"] }, "output_schema": { "type": "object", "properties": { "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "occupant_user_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] }, "has_concerns": { "type": "boolean" }, "pattern_summary": { "type": "string" }, "talking_points": { "type": "array", "items": { "type": "string" } }, "suggested_structure": { "type": "array", "items": { "type": "string" } }, "advisory_available": { "type": "boolean" } }, "required": ["seat_id", "occupant_user_id", "has_concerns", "pattern_summary", "talking_points", "suggested_structure", "advisory_available"] }, "help": "Draft a private accountability discussion guide for the accountable human from a seat's commitment pattern. Never delivered or written to the coached person's record.", "guide_slugs": ["sync-rhythm-playbook"], "stages": ["operating_rhythm"], "related_command_ids": ["compass.answer_gap", "compass.approve_version", "compass.set", "confirmation.approve", "onboarding.finish", "sync.brief.compile", "sync.brief.get", "sync.item.assign", "sync.run.complete", "sync.run.start"] },
@@ -13333,7 +13334,7 @@ var init_command_discovery = __esm({
       { "id": "compass.show_markdown", "title": "Show Compass as markdown", "description": "Compose the current Compass and its open gaps into a clean, human-skimmable markdown card for review.", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": {}, "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "markdown": { "type": "string", "minLength": 1 } }, "required": ["markdown"], "additionalProperties": false }, "help": "Render the current Compass and its open gaps as a clean markdown card to show your human a quick review.", "guide_slugs": ["compass-authoring-guide", "agent-builder-guide"], "stages": ["company_setup"], "related_command_ids": [] },
       { "id": "compass.update_draft", "title": "Update Compass draft", "description": "Replace a draft Compass document.", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "draft_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "doc": { "oneOf": [{ "type": "object", "properties": { "schema_version": { "type": "number", "const": 1 }, "purpose": { "type": "object", "properties": { "value": { "type": "string", "minLength": 1 }, "citations": { "type": "array", "items": { "type": "object", "properties": { "source_id": { "type": "string", "minLength": 1 }, "document_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "label": { "type": "string", "minLength": 1 }, "locator": { "type": "string", "minLength": 1 }, "quote": { "type": "string", "minLength": 1 }, "confidence": { "type": "number", "minimum": 0, "maximum": 1 } }, "required": ["source_id", "label", "locator", "confidence"], "additionalProperties": false } }, "confidence": { "type": "number", "minimum": 0, "maximum": 1 }, "placeholder": { "default": false, "type": "boolean" } }, "required": ["value", "citations", "confidence"], "additionalProperties": false }, "principles": { "minItems": 1, "maxItems": 5, "type": "array", "items": { "type": "object", "properties": { "value": { "type": "string", "minLength": 1 }, "citations": { "type": "array", "items": { "type": "object", "properties": { "source_id": { "type": "string", "minLength": 1 }, "document_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "label": { "type": "string", "minLength": 1 }, "locator": { "type": "string", "minLength": 1 }, "quote": { "type": "string", "minLength": 1 }, "confidence": { "type": "number", "minimum": 0, "maximum": 1 } }, "required": ["source_id", "label", "locator", "confidence"], "additionalProperties": false } }, "confidence": { "type": "number", "minimum": 0, "maximum": 1 }, "placeholder": { "default": false, "type": "boolean" } }, "required": ["value", "citations", "confidence"], "additionalProperties": false } }, "cycle_objectives": { "minItems": 1, "maxItems": 3, "type": "array", "items": { "type": "object", "properties": { "title": { "type": "object", "properties": { "value": { "type": "string", "minLength": 1 }, "citations": { "type": "array", "items": { "type": "object", "properties": { "source_id": { "type": "string", "minLength": 1 }, "document_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "label": { "type": "string", "minLength": 1 }, "locator": { "type": "string", "minLength": 1 }, "quote": { "type": "string", "minLength": 1 }, "confidence": { "type": "number", "minimum": 0, "maximum": 1 } }, "required": ["source_id", "label", "locator", "confidence"], "additionalProperties": false } }, "confidence": { "type": "number", "minimum": 0, "maximum": 1 }, "placeholder": { "default": false, "type": "boolean" } }, "required": ["value", "citations", "confidence"], "additionalProperties": false }, "definition_of_done": { "type": "object", "properties": { "value": { "type": "string", "minLength": 1 }, "citations": { "type": "array", "items": { "type": "object", "properties": { "source_id": { "type": "string", "minLength": 1 }, "document_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "label": { "type": "string", "minLength": 1 }, "locator": { "type": "string", "minLength": 1 }, "quote": { "type": "string", "minLength": 1 }, "confidence": { "type": "number", "minimum": 0, "maximum": 1 } }, "required": ["source_id", "label", "locator", "confidence"], "additionalProperties": false } }, "confidence": { "type": "number", "minimum": 0, "maximum": 1 }, "placeholder": { "default": false, "type": "boolean" } }, "required": ["value", "citations", "confidence"], "additionalProperties": false }, "horizon": { "type": "string", "enum": ["ten_year", "three_year", "one_year", "cycle"] } }, "required": ["title", "definition_of_done", "horizon"], "additionalProperties": false } }, "gaps": { "type": "array", "items": { "type": "object", "properties": { "id": { "type": "string", "minLength": 1 }, "field": { "type": "string", "minLength": 1 }, "question": { "type": "string", "minLength": 1 }, "severity": { "type": "string", "enum": ["required", "recommended"] }, "reason": { "type": "string", "minLength": 1 } }, "required": ["id", "field", "question", "severity", "reason"], "additionalProperties": false } }, "follow_up_tasks": { "type": "array", "items": { "type": "object", "properties": { "title": { "type": "string", "minLength": 1 }, "description": { "type": "string", "minLength": 1 }, "acceptance_criteria": { "minItems": 1, "type": "array", "items": { "type": "string", "minLength": 1 } }, "gap_id": { "type": "string", "minLength": 1 } }, "required": ["title", "description", "acceptance_criteria", "gap_id"], "additionalProperties": false } }, "source_ids": { "type": "array", "items": { "type": "string", "minLength": 1 } }, "horizon_goals": { "type": "object", "properties": { "three_year": { "type": "object", "properties": { "title": { "type": "object", "properties": { "value": { "type": "string", "minLength": 1 }, "citations": { "type": "array", "items": { "type": "object", "properties": { "source_id": { "type": "string", "minLength": 1 }, "document_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "label": { "type": "string", "minLength": 1 }, "locator": { "type": "string", "minLength": 1 }, "quote": { "type": "string", "minLength": 1 }, "confidence": { "type": "number", "minimum": 0, "maximum": 1 } }, "required": ["source_id", "label", "locator", "confidence"], "additionalProperties": false } }, "confidence": { "type": "number", "minimum": 0, "maximum": 1 }, "placeholder": { "default": false, "type": "boolean" } }, "required": ["value", "citations", "confidence"], "additionalProperties": false }, "definition_of_done": { "type": "object", "properties": { "value": { "type": "string", "minLength": 1 }, "citations": { "type": "array", "items": { "type": "object", "properties": { "source_id": { "type": "string", "minLength": 1 }, "document_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "label": { "type": "string", "minLength": 1 }, "locator": { "type": "string", "minLength": 1 }, "quote": { "type": "string", "minLength": 1 }, "confidence": { "type": "number", "minimum": 0, "maximum": 1 } }, "required": ["source_id", "label", "locator", "confidence"], "additionalProperties": false } }, "confidence": { "type": "number", "minimum": 0, "maximum": 1 }, "placeholder": { "default": false, "type": "boolean" } }, "required": ["value", "citations", "confidence"], "additionalProperties": false }, "horizon": { "type": "string", "enum": ["ten_year", "three_year", "one_year", "cycle"] } }, "required": ["title", "definition_of_done", "horizon"], "additionalProperties": false }, "one_year": { "type": "object", "properties": { "title": { "type": "object", "properties": { "value": { "type": "string", "minLength": 1 }, "citations": { "type": "array", "items": { "type": "object", "properties": { "source_id": { "type": "string", "minLength": 1 }, "document_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "label": { "type": "string", "minLength": 1 }, "locator": { "type": "string", "minLength": 1 }, "quote": { "type": "string", "minLength": 1 }, "confidence": { "type": "number", "minimum": 0, "maximum": 1 } }, "required": ["source_id", "label", "locator", "confidence"], "additionalProperties": false } }, "confidence": { "type": "number", "minimum": 0, "maximum": 1 }, "placeholder": { "default": false, "type": "boolean" } }, "required": ["value", "citations", "confidence"], "additionalProperties": false }, "definition_of_done": { "type": "object", "properties": { "value": { "type": "string", "minLength": 1 }, "citations": { "type": "array", "items": { "type": "object", "properties": { "source_id": { "type": "string", "minLength": 1 }, "document_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "label": { "type": "string", "minLength": 1 }, "locator": { "type": "string", "minLength": 1 }, "quote": { "type": "string", "minLength": 1 }, "confidence": { "type": "number", "minimum": 0, "maximum": 1 } }, "required": ["source_id", "label", "locator", "confidence"], "additionalProperties": false } }, "confidence": { "type": "number", "minimum": 0, "maximum": 1 }, "placeholder": { "default": false, "type": "boolean" } }, "required": ["value", "citations", "confidence"], "additionalProperties": false }, "horizon": { "type": "string", "enum": ["ten_year", "three_year", "one_year", "cycle"] } }, "required": ["title", "definition_of_done", "horizon"], "additionalProperties": false } }, "required": ["three_year", "one_year"], "additionalProperties": false } }, "required": ["schema_version", "purpose", "principles", "cycle_objectives", "gaps", "follow_up_tasks", "source_ids", "horizon_goals"], "additionalProperties": false }, { "type": "object", "properties": { "schema_version": { "type": "number", "const": 2 }, "purpose": { "type": "object", "properties": { "value": { "type": "string", "minLength": 1 }, "citations": { "type": "array", "items": { "type": "object", "properties": { "source_id": { "type": "string", "minLength": 1 }, "document_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "label": { "type": "string", "minLength": 1 }, "locator": { "type": "string", "minLength": 1 }, "quote": { "type": "string", "minLength": 1 }, "confidence": { "type": "number", "minimum": 0, "maximum": 1 } }, "required": ["source_id", "label", "locator", "confidence"], "additionalProperties": false } }, "confidence": { "type": "number", "minimum": 0, "maximum": 1 }, "placeholder": { "default": false, "type": "boolean" } }, "required": ["value", "citations", "confidence"], "additionalProperties": false }, "principles": { "minItems": 1, "maxItems": 5, "type": "array", "items": { "type": "object", "properties": { "value": { "type": "string", "minLength": 1 }, "citations": { "type": "array", "items": { "type": "object", "properties": { "source_id": { "type": "string", "minLength": 1 }, "document_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "label": { "type": "string", "minLength": 1 }, "locator": { "type": "string", "minLength": 1 }, "quote": { "type": "string", "minLength": 1 }, "confidence": { "type": "number", "minimum": 0, "maximum": 1 } }, "required": ["source_id", "label", "locator", "confidence"], "additionalProperties": false } }, "confidence": { "type": "number", "minimum": 0, "maximum": 1 }, "placeholder": { "default": false, "type": "boolean" } }, "required": ["value", "citations", "confidence"], "additionalProperties": false } }, "cycle_objectives": { "minItems": 1, "maxItems": 3, "type": "array", "items": { "type": "object", "properties": { "title": { "type": "object", "properties": { "value": { "type": "string", "minLength": 1 }, "citations": { "type": "array", "items": { "type": "object", "properties": { "source_id": { "type": "string", "minLength": 1 }, "document_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "label": { "type": "string", "minLength": 1 }, "locator": { "type": "string", "minLength": 1 }, "quote": { "type": "string", "minLength": 1 }, "confidence": { "type": "number", "minimum": 0, "maximum": 1 } }, "required": ["source_id", "label", "locator", "confidence"], "additionalProperties": false } }, "confidence": { "type": "number", "minimum": 0, "maximum": 1 }, "placeholder": { "default": false, "type": "boolean" } }, "required": ["value", "citations", "confidence"], "additionalProperties": false }, "definition_of_done": { "type": "object", "properties": { "value": { "type": "string", "minLength": 1 }, "citations": { "type": "array", "items": { "type": "object", "properties": { "source_id": { "type": "string", "minLength": 1 }, "document_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "label": { "type": "string", "minLength": 1 }, "locator": { "type": "string", "minLength": 1 }, "quote": { "type": "string", "minLength": 1 }, "confidence": { "type": "number", "minimum": 0, "maximum": 1 } }, "required": ["source_id", "label", "locator", "confidence"], "additionalProperties": false } }, "confidence": { "type": "number", "minimum": 0, "maximum": 1 }, "placeholder": { "default": false, "type": "boolean" } }, "required": ["value", "citations", "confidence"], "additionalProperties": false }, "horizon": { "type": "string", "enum": ["ten_year", "three_year", "one_year", "cycle"] } }, "required": ["title", "definition_of_done", "horizon"], "additionalProperties": false } }, "gaps": { "type": "array", "items": { "type": "object", "properties": { "id": { "type": "string", "minLength": 1 }, "field": { "type": "string", "minLength": 1 }, "question": { "type": "string", "minLength": 1 }, "severity": { "type": "string", "enum": ["required", "recommended"] }, "reason": { "type": "string", "minLength": 1 } }, "required": ["id", "field", "question", "severity", "reason"], "additionalProperties": false } }, "follow_up_tasks": { "type": "array", "items": { "type": "object", "properties": { "title": { "type": "string", "minLength": 1 }, "description": { "type": "string", "minLength": 1 }, "acceptance_criteria": { "minItems": 1, "type": "array", "items": { "type": "string", "minLength": 1 } }, "gap_id": { "type": "string", "minLength": 1 } }, "required": ["title", "description", "acceptance_criteria", "gap_id"], "additionalProperties": false } }, "source_ids": { "type": "array", "items": { "type": "string", "minLength": 1 } }, "horizon_goals": { "type": "object", "properties": { "ten_year": { "type": "object", "properties": { "title": { "type": "object", "properties": { "value": { "type": "string", "minLength": 1 }, "citations": { "type": "array", "items": { "type": "object", "properties": { "source_id": { "type": "string", "minLength": 1 }, "document_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "label": { "type": "string", "minLength": 1 }, "locator": { "type": "string", "minLength": 1 }, "quote": { "type": "string", "minLength": 1 }, "confidence": { "type": "number", "minimum": 0, "maximum": 1 } }, "required": ["source_id", "label", "locator", "confidence"], "additionalProperties": false } }, "confidence": { "type": "number", "minimum": 0, "maximum": 1 }, "placeholder": { "default": false, "type": "boolean" } }, "required": ["value", "citations", "confidence"], "additionalProperties": false }, "definition_of_done": { "type": "object", "properties": { "value": { "type": "string", "minLength": 1 }, "citations": { "type": "array", "items": { "type": "object", "properties": { "source_id": { "type": "string", "minLength": 1 }, "document_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "label": { "type": "string", "minLength": 1 }, "locator": { "type": "string", "minLength": 1 }, "quote": { "type": "string", "minLength": 1 }, "confidence": { "type": "number", "minimum": 0, "maximum": 1 } }, "required": ["source_id", "label", "locator", "confidence"], "additionalProperties": false } }, "confidence": { "type": "number", "minimum": 0, "maximum": 1 }, "placeholder": { "default": false, "type": "boolean" } }, "required": ["value", "citations", "confidence"], "additionalProperties": false }, "horizon": { "type": "string", "enum": ["ten_year", "three_year", "one_year", "cycle"] } }, "required": ["title", "definition_of_done", "horizon"], "additionalProperties": false }, "three_year": { "type": "object", "properties": { "title": { "type": "object", "properties": { "value": { "type": "string", "minLength": 1 }, "citations": { "type": "array", "items": { "type": "object", "properties": { "source_id": { "type": "string", "minLength": 1 }, "document_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "label": { "type": "string", "minLength": 1 }, "locator": { "type": "string", "minLength": 1 }, "quote": { "type": "string", "minLength": 1 }, "confidence": { "type": "number", "minimum": 0, "maximum": 1 } }, "required": ["source_id", "label", "locator", "confidence"], "additionalProperties": false } }, "confidence": { "type": "number", "minimum": 0, "maximum": 1 }, "placeholder": { "default": false, "type": "boolean" } }, "required": ["value", "citations", "confidence"], "additionalProperties": false }, "definition_of_done": { "type": "object", "properties": { "value": { "type": "string", "minLength": 1 }, "citations": { "type": "array", "items": { "type": "object", "properties": { "source_id": { "type": "string", "minLength": 1 }, "document_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "label": { "type": "string", "minLength": 1 }, "locator": { "type": "string", "minLength": 1 }, "quote": { "type": "string", "minLength": 1 }, "confidence": { "type": "number", "minimum": 0, "maximum": 1 } }, "required": ["source_id", "label", "locator", "confidence"], "additionalProperties": false } }, "confidence": { "type": "number", "minimum": 0, "maximum": 1 }, "placeholder": { "default": false, "type": "boolean" } }, "required": ["value", "citations", "confidence"], "additionalProperties": false }, "horizon": { "type": "string", "enum": ["ten_year", "three_year", "one_year", "cycle"] } }, "required": ["title", "definition_of_done", "horizon"], "additionalProperties": false }, "one_year": { "type": "object", "properties": { "title": { "type": "object", "properties": { "value": { "type": "string", "minLength": 1 }, "citations": { "type": "array", "items": { "type": "object", "properties": { "source_id": { "type": "string", "minLength": 1 }, "document_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "label": { "type": "string", "minLength": 1 }, "locator": { "type": "string", "minLength": 1 }, "quote": { "type": "string", "minLength": 1 }, "confidence": { "type": "number", "minimum": 0, "maximum": 1 } }, "required": ["source_id", "label", "locator", "confidence"], "additionalProperties": false } }, "confidence": { "type": "number", "minimum": 0, "maximum": 1 }, "placeholder": { "default": false, "type": "boolean" } }, "required": ["value", "citations", "confidence"], "additionalProperties": false }, "definition_of_done": { "type": "object", "properties": { "value": { "type": "string", "minLength": 1 }, "citations": { "type": "array", "items": { "type": "object", "properties": { "source_id": { "type": "string", "minLength": 1 }, "document_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "label": { "type": "string", "minLength": 1 }, "locator": { "type": "string", "minLength": 1 }, "quote": { "type": "string", "minLength": 1 }, "confidence": { "type": "number", "minimum": 0, "maximum": 1 } }, "required": ["source_id", "label", "locator", "confidence"], "additionalProperties": false } }, "confidence": { "type": "number", "minimum": 0, "maximum": 1 }, "placeholder": { "default": false, "type": "boolean" } }, "required": ["value", "citations", "confidence"], "additionalProperties": false }, "horizon": { "type": "string", "enum": ["ten_year", "three_year", "one_year", "cycle"] } }, "required": ["title", "definition_of_done", "horizon"], "additionalProperties": false } }, "required": ["three_year", "one_year"], "additionalProperties": false } }, "required": ["schema_version", "purpose", "principles", "cycle_objectives", "gaps", "follow_up_tasks", "source_ids", "horizon_goals"], "additionalProperties": false }] } }, "required": ["draft_id", "doc"], "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "compass_version_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "status": { "type": "string", "enum": ["draft", "active", "superseded"] }, "version": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 } }, "required": ["compass_version_id", "status", "version"], "additionalProperties": false }, "help": "Pass the compass_version_id returned by compass.draft as draft_id; update_draft replaces only an unpublished draft in this tenant.", "guide_slugs": ["compass-authoring-guide", "rost-implementation-method", "cascade-guide"], "stages": ["company_setup"], "related_command_ids": ["agent.go_live", "agent.run_dry_run", "cascade.import", "charter.approve", "charter.draft", "charter.draft_all", "charter.sign_manifest", "charter.update_draft", "command.describe", "compass.answer_gap", "compass.approve_version", "compass.draft", "compass.get_current", "compass.list_gaps", "compass.reject_draft", "compass.set", "confirmation.activation_set.list", "confirmation.approve", "credential.ingress", "friction.file_issue", "friction.list", "friction.resolve", "onboarding.activate", "onboarding.advance_step", "onboarding.attach_reference", "onboarding.create_invite", "onboarding.finish", "onboarding.rehearse", "onboarding.setup", "onboarding.source_ingest", "onboarding.status", "onboarding.upload_context", "seat.create", "seat.set_type", "signal.bind", "signal.confirm_reading", "signal.draft_first_readings", "signal.report", "staffing.assign_agent_dry_run", "staffing.assign_user", "sync.brief.compile", "sync.brief.get", "sync.item.assign", "sync.run.complete", "sync.run.start"] },
       { "id": "confirmation.activation_set.list", "title": "List activation approval sets", "description": "List agent-authored activation confirmation sets that the caller can review.", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": {}, "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "activation_sets": { "type": "array", "items": { "type": "object", "properties": { "implementation_run_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "confirmations": { "type": "array", "items": { "type": "object", "properties": { "id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "command_id": { "type": "string" }, "redacted_args": {}, "actor_kind": { "type": "string", "enum": ["user", "agent", "system", "operator"] }, "source": { "type": "string" }, "scope_kind": { "type": "string", "enum": ["tenant_admin", "tenant", "seat"] }, "seat_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] }, "seat_name": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "seat_type": { "anyOf": [{ "type": "string", "enum": ["human", "agent", "hybrid"] }, { "type": "null" }] }, "risk_level": { "type": "string", "enum": ["normal", "sensitive", "dangerous"] }, "summary": { "type": "string" }, "expires_at": { "type": "string" }, "created_at": { "type": "string" } }, "required": ["id", "command_id", "redacted_args", "actor_kind", "source", "scope_kind", "seat_id", "seat_name", "seat_type", "risk_level", "summary", "expires_at", "created_at"] } } }, "required": ["implementation_run_id", "confirmations"] } } }, "required": ["activation_sets"], "additionalProperties": false }, "help": "Review the routine activation confirmations from one implementation run before approving them in dependency order. Sensitive, dangerous, and previously-failed confirmations are not in this set \u2014 they stay in the general confirmation list (confirmation.list) and are approved individually. Each redacted_args is a partial projection of the proposal: content may be omitted, and no surface today renders it in full.", "guide_slugs": ["confirmations-guide", "rost-implementation-method", "agent-staffing-playbook"], "stages": ["compass", "charter_design", "staffing"], "related_command_ids": ["agent.go_live", "agent.run_dry_run", "cascade.import", "charter.approve", "charter.draft", "charter.draft_all", "charter.sign_manifest", "charter.update_draft", "compass.answer_gap", "compass.approve_version", "compass.draft", "compass.get_current", "compass.list_gaps", "compass.reject_draft", "compass.set", "compass.update_draft", "confirmation.approve", "credential.ingress", "friction.file_issue", "friction.list", "friction.resolve", "onboarding.activate", "onboarding.advance_step", "onboarding.attach_reference", "onboarding.create_invite", "onboarding.finish", "onboarding.rehearse", "onboarding.setup", "onboarding.source_ingest", "onboarding.status", "onboarding.upload_context", "seat.create", "seat.set_type", "signal.bind", "signal.confirm_reading", "signal.draft_first_readings", "signal.report", "staffing.assign_agent_dry_run", "staffing.assign_user", "sync.brief.compile", "sync.brief.get", "sync.item.assign", "sync.run.complete", "sync.run.start"] },
-      { "id": "confirmation.approve", "title": "Approve pending confirmation", "description": "Approve an in-flight confirmation and execute the original command as the approving human.", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "always_human", "risk_flags": ["self_approval"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "confirmation_id": { "type": "string", "minLength": 1 }, "reviewed": { "type": "boolean" } }, "required": ["confirmation_id"], "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "confirmation_id": { "type": "string", "minLength": 1 }, "command_id": { "type": "string", "minLength": 1 }, "approved": { "type": "boolean", "const": true }, "output": {}, "effect": { "type": "object", "properties": { "attempted": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "applied": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "skipped": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "outcome": { "type": "string", "enum": ["applied", "partial", "none"] }, "skips": { "maxItems": 50, "type": "array", "items": { "type": "object", "properties": { "target_kind": { "type": "string", "minLength": 1 }, "target_id": { "anyOf": [{ "type": "string", "minLength": 1 }, { "type": "null" }] }, "reason": { "type": "string", "minLength": 1 }, "detail": { "type": "string", "minLength": 1 } }, "required": ["target_kind", "target_id", "reason"], "additionalProperties": false } }, "skips_omitted": { "default": 0, "type": "integer", "minimum": 0, "maximum": 9007199254740991 } }, "required": ["attempted", "applied", "skipped", "outcome", "skips"], "additionalProperties": false } }, "required": ["confirmation_id", "command_id", "approved", "output"], "additionalProperties": false }, "help": "Approve pending confirmations only when the requested durable change is clear to the human owner.", "guide_slugs": ["charter-design-playbook", "agent-staffing-playbook"], "stages": ["charter_design", "staffing"], "related_command_ids": ["agent_grant_intervention.decide", "agent_grant_intervention.list", "agent_grant_intervention.resume", "agent_setup.get", "agent_setup.relane", "agent_setup.start", "agent_setup.update", "agent_template.list", "agent.activation_sign", "agent.configure_tools", "agent.create_custom", "agent.create_from_template", "agent.decommission", "agent.fleet_digest", "agent.get_run", "agent.go_live", "agent.list_fleet", "agent.list_runs", "agent.list_tool_calls", "agent.pause", "agent.resume", "agent.run_dry_run", "agent.run_now", "agent.status", "agent.trust.create", "agent.trust.expire", "agent.trust.revoke", "agent.trust.supersede", "agent.update_schedule", "aicos.brain_settings.get", "aicos.brain_settings.update", "cascade.import", "charter.apply_seat_type_recommendation", "charter.approve", "charter.draft", "charter.draft_all", "charter.get", "charter.list", "charter.preview_signal_reconciliation", "charter.reconcile_signals", "charter.set", "charter.sign_manifest", "charter.skip", "charter.update_draft", "coach.draft_guide", "command.describe", "command.list", "compass.alignment", "compass.answer_gap", "compass.approve_version", "compass.draft", "compass.get_current", "compass.list_gaps", "compass.reject_draft", "compass.set", "compass.update_draft", "confirmation.activation_set.list", "confirmation.dismiss", "confirmation.dismiss_stale", "confirmation.list", "confirmation.reject", "confirmation.remint", "credential.ingress", "deliverable.accept", "deliverable.attach", "deliverable.create", "deliverable.get", "deliverable.list", "deliverable.reject", "error_log.list", "error_log.resolve", "error_log.supersede", "escalation.get", "escalation.list", "escalation.raise", "escalation.reject", "escalation.resolve", "friction.assist", "friction.file_issue", "friction.get", "friction.link_task", "friction.list", "friction.resolve", "friction.update_status", "goal.bind_measurable", "goal.create", "goal.drop", "goal.get", "goal.list", "goal.list_at_risk", "goal.reassign_owner", "goal.reparent", "goal.set_auto_status", "goal.set_progress", "goal.set_status", "goal.unbind_measurable", "goal.update", "graph.get", "implementation_access.abandon", "implementation_access.complete", "implementation_access.status", "integration.connect_rest", "integration.list", "integration.readiness", "integration.status", "integration.test", "mcp_token.create", "mcp_token.list", "mcp_token.revoke", "notification.list_errors", "notification.settings.get", "notification.settings.update", "notification.test", "onboarding.activate", "onboarding.advance_step", "onboarding.attach_reference", "onboarding.create_invite", "onboarding.finish", "onboarding.rehearse", "onboarding.resume", "onboarding.setup", "onboarding.source_ingest", "onboarding.status", "onboarding.upload_context", "runner.diagnose", "runner.list", "runner.pairing.start", "runner.repair", "runner.revoke", "runner.status", "seat.create", "seat.create_complete", "seat.decommission", "seat.get", "seat.rename", "seat.reparent", "seat.set_type", "signal.bind", "signal.confirm_reading", "signal.draft_first_readings", "signal.list", "signal.report", "skill.assign_to_seat", "skill.assigned.list", "skill.catalog", "skill.check_dependencies", "skill.create", "skill.enable_catalog", "skill.file.get", "skill.get", "skill.import_github", "skill.import_upload", "skill.install_local", "skill.list", "skill.publish", "skill.revoke_from_seat", "skill.sync_local", "skill.update_draft", "staffing.assign", "staffing.assign_agent_dry_run", "staffing.assign_user", "sync.brief.compile", "sync.brief.get", "sync.item.assign", "sync.run.complete", "sync.run.start", "system.health", "task.accept", "task.complete", "task.confirm_proposal", "task.create", "task.decline", "task.decline_proposal", "task.list", "tenant.anthropic_key.disable", "tenant.model_gateway_policy.update", "tenant.rename", "tool_grants.tenant.update", "tool.catalog", "usage.report", "usage.snapshot", "user.tenants", "user.use_tenant", "user.whoami", "work_order.cancel", "work_order.enqueue", "work_order.list"] },
+      { "id": "confirmation.approve", "title": "Approve pending confirmation", "description": "Approve an in-flight confirmation and execute the original command as the approving human.", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "always_human", "risk_flags": ["self_approval"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "confirmation_id": { "type": "string", "minLength": 1 }, "reviewed": { "type": "boolean" } }, "required": ["confirmation_id"], "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "confirmation_id": { "type": "string", "minLength": 1 }, "command_id": { "type": "string", "minLength": 1 }, "approved": { "type": "boolean", "const": true }, "output": {}, "effect": { "type": "object", "properties": { "attempted": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "applied": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "skipped": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "outcome": { "type": "string", "enum": ["applied", "partial", "none"] }, "skips": { "maxItems": 50, "type": "array", "items": { "type": "object", "properties": { "target_kind": { "type": "string", "minLength": 1 }, "target_id": { "anyOf": [{ "type": "string", "minLength": 1 }, { "type": "null" }] }, "reason": { "type": "string", "minLength": 1 }, "detail": { "type": "string", "minLength": 1 } }, "required": ["target_kind", "target_id", "reason"], "additionalProperties": false } }, "skips_omitted": { "default": 0, "type": "integer", "minimum": 0, "maximum": 9007199254740991 } }, "required": ["attempted", "applied", "skipped", "outcome", "skips"], "additionalProperties": false } }, "required": ["confirmation_id", "command_id", "approved", "output"], "additionalProperties": false }, "help": "Approve pending confirmations only when the requested durable change is clear to the human owner.", "guide_slugs": ["charter-design-playbook", "agent-staffing-playbook"], "stages": ["charter_design", "staffing"], "related_command_ids": ["agent_grant_intervention.decide", "agent_grant_intervention.list", "agent_grant_intervention.resume", "agent_setup.get", "agent_setup.relane", "agent_setup.start", "agent_setup.update", "agent_template.list", "agent.activation_sign", "agent.configure_tools", "agent.create_custom", "agent.create_from_template", "agent.decommission", "agent.fleet_digest", "agent.get_run", "agent.go_live", "agent.list_fleet", "agent.list_runs", "agent.list_tool_calls", "agent.pause", "agent.resume", "agent.run_dry_run", "agent.run_now", "agent.status", "agent.trust.create", "agent.trust.expire", "agent.trust.revoke", "agent.trust.supersede", "agent.update_schedule", "aicos.brain_settings.get", "aicos.brain_settings.update", "cascade.import", "charter.apply_seat_type_recommendation", "charter.approve", "charter.backfill_stock_evidence", "charter.draft", "charter.draft_all", "charter.get", "charter.list", "charter.preview_signal_reconciliation", "charter.reconcile_signals", "charter.set", "charter.sign_manifest", "charter.skip", "charter.update_draft", "coach.draft_guide", "command.describe", "command.list", "compass.alignment", "compass.answer_gap", "compass.approve_version", "compass.draft", "compass.get_current", "compass.list_gaps", "compass.reject_draft", "compass.set", "compass.update_draft", "confirmation.activation_set.list", "confirmation.dismiss", "confirmation.dismiss_stale", "confirmation.list", "confirmation.reject", "confirmation.remint", "credential.ingress", "deliverable.accept", "deliverable.attach", "deliverable.create", "deliverable.get", "deliverable.list", "deliverable.reject", "error_log.list", "error_log.resolve", "error_log.supersede", "escalation.get", "escalation.list", "escalation.raise", "escalation.reject", "escalation.resolve", "friction.assist", "friction.file_issue", "friction.get", "friction.link_task", "friction.list", "friction.resolve", "friction.update_status", "goal.bind_measurable", "goal.create", "goal.drop", "goal.get", "goal.list", "goal.list_at_risk", "goal.reassign_owner", "goal.reparent", "goal.set_auto_status", "goal.set_progress", "goal.set_status", "goal.unbind_measurable", "goal.update", "graph.get", "implementation_access.abandon", "implementation_access.complete", "implementation_access.status", "integration.connect_rest", "integration.list", "integration.readiness", "integration.status", "integration.test", "mcp_token.create", "mcp_token.list", "mcp_token.revoke", "notification.list_errors", "notification.settings.get", "notification.settings.update", "notification.test", "onboarding.activate", "onboarding.advance_step", "onboarding.attach_reference", "onboarding.create_invite", "onboarding.finish", "onboarding.rehearse", "onboarding.resume", "onboarding.setup", "onboarding.source_ingest", "onboarding.status", "onboarding.upload_context", "runner.diagnose", "runner.list", "runner.pairing.start", "runner.repair", "runner.revoke", "runner.status", "seat.create", "seat.create_complete", "seat.decommission", "seat.get", "seat.rename", "seat.reparent", "seat.set_type", "signal.bind", "signal.confirm_reading", "signal.draft_first_readings", "signal.list", "signal.report", "skill.assign_to_seat", "skill.assigned.list", "skill.catalog", "skill.check_dependencies", "skill.create", "skill.enable_catalog", "skill.file.get", "skill.get", "skill.import_github", "skill.import_upload", "skill.install_local", "skill.list", "skill.publish", "skill.revoke_from_seat", "skill.sync_local", "skill.update_draft", "staffing.assign", "staffing.assign_agent_dry_run", "staffing.assign_user", "sync.brief.compile", "sync.brief.get", "sync.item.assign", "sync.run.complete", "sync.run.start", "system.health", "task.accept", "task.complete", "task.confirm_proposal", "task.create", "task.decline", "task.decline_proposal", "task.list", "tenant.anthropic_key.disable", "tenant.model_gateway_policy.update", "tenant.rename", "tool_grants.tenant.update", "tool.catalog", "usage.report", "usage.snapshot", "user.tenants", "user.use_tenant", "user.whoami", "work_order.cancel", "work_order.enqueue", "work_order.list"] },
       { "id": "confirmation.dismiss", "title": "Dismiss an expired confirmation", "description": "Clear a single expired, unactioned confirmation from the queue without re-executing the original command.", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "confirmation_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" } }, "required": ["confirmation_id"], "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "dismissed": { "type": "object", "properties": { "id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "status": { "type": "string", "const": "dismissed" } }, "required": ["id", "status"], "additionalProperties": false } }, "required": ["dismissed"], "additionalProperties": false }, "help": "Clear a single expired, unactioned confirmation from the queue. Dismiss is human-only queue hygiene \u2014 it never re-executes the original command.", "guide_slugs": ["confirmations-guide", "mcp-and-cli-guide"], "stages": ["charter_design", "staffing", "operating_rhythm"], "related_command_ids": ["agent_grant_intervention.decide", "agent.activation_sign", "agent.go_live", "agent.trust.create", "agent.trust.expire", "agent.trust.revoke", "agent.trust.supersede", "charter.approve", "confirmation.approve", "confirmation.dismiss_stale", "confirmation.list", "confirmation.reject", "confirmation.remint", "credential.ingress", "friction.resolve", "goal.reassign_owner", "goal.reparent", "mcp_token.create", "onboarding.setup", "staffing.assign_user", "task.confirm_proposal", "task.decline_proposal"] },
       { "id": "confirmation.dismiss_stale", "title": "Dismiss all expired confirmations", "description": "Clear every expired, unactioned confirmation in your authority scope from the queue without re-executing any command.", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": {}, "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "dismissed_count": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "dismissed_ids": { "type": "array", "items": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" } } }, "required": ["dismissed_count", "dismissed_ids"], "additionalProperties": false }, "help": "Clear every expired, unactioned confirmation in your authority scope at once. Each dismissal is audited; none re-executes the original command.", "guide_slugs": ["confirmations-guide", "mcp-and-cli-guide"], "stages": ["charter_design", "staffing", "operating_rhythm"], "related_command_ids": ["agent_grant_intervention.decide", "agent.activation_sign", "agent.go_live", "agent.trust.create", "agent.trust.expire", "agent.trust.revoke", "agent.trust.supersede", "charter.approve", "confirmation.approve", "confirmation.dismiss", "confirmation.list", "confirmation.reject", "confirmation.remint", "credential.ingress", "friction.resolve", "goal.reassign_owner", "goal.reparent", "mcp_token.create", "onboarding.setup", "staffing.assign_user", "task.confirm_proposal", "task.decline_proposal"] },
       { "id": "confirmation.list", "title": "List pending confirmations", "description": "List in-flight confirmations awaiting a human decision, including seat-scoped cards the caller occupies and target-scoped cards the caller may decide as steward/admin.", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "limit": { "type": "integer", "minimum": 1, "maximum": 200 } }, "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "confirmations": { "type": "array", "items": { "type": "object", "properties": { "id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "command_id": { "type": "string" }, "redacted_args": {}, "actor_kind": { "type": "string", "enum": ["user", "agent", "system", "operator"] }, "source": { "type": "string" }, "scope_kind": { "type": "string", "enum": ["tenant_admin", "tenant", "seat"] }, "seat_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] }, "seat_name": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "seat_type": { "anyOf": [{ "type": "string", "enum": ["human", "agent", "hybrid"] }, { "type": "null" }] }, "risk_level": { "type": "string", "enum": ["normal", "sensitive", "dangerous"] }, "summary": { "type": "string" }, "expires_at": { "type": "string" }, "created_at": { "type": "string" } }, "required": ["id", "command_id", "redacted_args", "actor_kind", "source", "scope_kind", "seat_id", "seat_name", "seat_type", "risk_level", "summary", "expires_at", "created_at"], "additionalProperties": false } } }, "required": ["confirmations"], "additionalProperties": false }, "help": "List pending confirmations awaiting a human decision before approving or rejecting them. Each redacted_args is a partial projection of the proposal: content may be omitted, and no surface today renders it in full.", "guide_slugs": ["charter-design-playbook", "agent-staffing-playbook"], "stages": ["charter_design", "staffing"], "related_command_ids": ["agent_grant_intervention.decide", "agent.activation_sign", "agent.go_live", "agent.trust.create", "agent.trust.expire", "agent.trust.revoke", "agent.trust.supersede", "charter.approve", "confirmation.approve", "confirmation.dismiss", "confirmation.dismiss_stale", "confirmation.reject", "confirmation.remint", "credential.ingress", "friction.resolve", "goal.reassign_owner", "goal.reparent", "mcp_token.create", "onboarding.setup", "staffing.assign_user", "task.confirm_proposal", "task.decline_proposal"] },
@@ -13384,7 +13385,7 @@ var init_command_discovery = __esm({
       { "id": "goal.set_status", "title": "Set Cascade goal status", "description": "Set a goal's status (on/off/done). Seat-scoped callers may set status only for their own goals.", "required_scope": "seat", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "goal_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "status": { "type": "string", "enum": ["on", "off", "done"] } }, "required": ["goal_id", "status"], "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "goal_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "cycle_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "seat_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] }, "parent_goal_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] }, "title": { "type": "string" }, "status": { "type": "string", "enum": ["on", "off", "done", "dropped"] }, "status_source": { "type": "string", "enum": ["human", "agent", "rollup", "signal"] }, "target_date": { "anyOf": [{ "type": "string", "format": "date", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))$" }, { "type": "null" }] }, "warnings": { "type": "array", "items": { "type": "string" } } }, "required": ["goal_id", "cycle_id", "seat_id", "parent_goal_id", "title", "status", "status_source", "target_date"], "additionalProperties": false }, "help": "Set a goal's status; seat tokens may only set status for their own goals.", "guide_slugs": ["cascade-guide", "how-agents-work"], "stages": ["operating_rhythm"], "related_command_ids": ["agent_setup.get", "agent_setup.update", "agent.decommission", "agent.fleet_digest", "agent.go_live", "agent.list_fleet", "agent.status", "compass.alignment", "compass.approve_version", "compass.set", "confirmation.approve", "escalation.raise", "friction.file_issue", "goal.bind_measurable", "goal.create", "goal.drop", "goal.get", "goal.list", "goal.list_at_risk", "goal.reassign_owner", "goal.reparent", "goal.set_auto_status", "goal.set_progress", "goal.unbind_measurable", "goal.update", "onboarding.finish", "seat.get", "signal.confirm_reading", "staffing.assign_agent_dry_run", "status.record", "system.health", "task.accept", "task.complete", "task.create", "task.decline", "task.list", "team.health_score", "work.log"] },
       { "id": "goal.unbind_measurable", "title": "Unbind a Signal from a Cascade goal", "description": "Role defaults to 'drives_status'; pass role 'informs' to remove an informative indicator. Removing a driver keeps the goal's last status; unbinding only stops future signal-driven updates.", "required_scope": "seat", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "goal_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "measurable_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "role": { "default": "drives_status", "type": "string", "enum": ["drives_status", "informs"] } }, "required": ["goal_id", "measurable_id"], "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "goal_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "measurable_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "removed": { "type": "boolean" } }, "required": ["goal_id", "measurable_id", "removed"], "additionalProperties": false }, "help": "Remove a Signal's drives_status binding from a goal; the goal keeps its last status and stops receiving signal-driven updates.", "guide_slugs": ["cascade-guide", "signal-guide"], "stages": ["operating_rhythm"], "related_command_ids": ["compass.alignment", "compass.approve_version", "compass.set", "confirmation.approve", "goal.bind_measurable", "goal.create", "goal.drop", "goal.get", "goal.list", "goal.list_at_risk", "goal.reassign_owner", "goal.reparent", "goal.set_auto_status", "goal.set_progress", "goal.set_status", "goal.update", "onboarding.finish"] },
       { "id": "goal.update", "title": "Update Cascade goal", "description": "Update a goal's title, definition of done, or target date. Topology (parent/seat) and status have dedicated commands.", "required_scope": "tenant_admin", "confirmation": "none", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "goal_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "title": { "type": "string", "minLength": 1 }, "definition_of_done": { "type": "string", "minLength": 1 }, "target_date": { "anyOf": [{ "type": "string", "format": "date", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))$" }, { "type": "null" }] } }, "required": ["goal_id"], "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "goal_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "cycle_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "seat_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] }, "parent_goal_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] }, "title": { "type": "string" }, "status": { "type": "string", "enum": ["on", "off", "done", "dropped"] }, "status_source": { "type": "string", "enum": ["human", "agent", "rollup", "signal"] }, "target_date": { "anyOf": [{ "type": "string", "format": "date", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))$" }, { "type": "null" }] }, "warnings": { "type": "array", "items": { "type": "string" } } }, "required": ["goal_id", "cycle_id", "seat_id", "parent_goal_id", "title", "status", "status_source", "target_date"], "additionalProperties": false }, "help": "Update a goal's title or definition of done; topology and status have dedicated commands.", "guide_slugs": ["cascade-guide"], "stages": ["operating_rhythm"], "related_command_ids": ["compass.alignment", "compass.approve_version", "compass.set", "confirmation.approve", "goal.bind_measurable", "goal.create", "goal.drop", "goal.get", "goal.list", "goal.list_at_risk", "goal.reassign_owner", "goal.reparent", "goal.set_auto_status", "goal.set_progress", "goal.set_status", "goal.unbind_measurable", "onboarding.finish"] },
-      { "id": "graph.get", "title": "Get Responsibility Graph", "description": "Return the tenant's Responsibility Graph: seats, edges, root, occupants, and status rollups.", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": {}, "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "root_seat_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] }, "nodes": { "type": "array", "items": { "type": "object", "properties": { "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "name": { "type": "string" }, "seat_type": { "type": "string", "enum": ["human", "agent", "hybrid"] }, "status": { "type": "string", "enum": ["draft", "active", "vacant", "decommissioned"] }, "parent_seat_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] }, "is_root": { "type": "boolean" }, "steward_seat_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] }, "occupant": { "anyOf": [{ "type": "object", "properties": { "kind": { "type": "string", "enum": ["user", "agent"] }, "label": { "type": "string" }, "status": { "anyOf": [{ "type": "string" }, { "type": "null" }] } }, "required": ["kind", "label", "status"], "additionalProperties": false }, { "type": "null" }] }, "signal_state": { "type": "string", "enum": ["ok", "risk", "crit", "pending"] }, "cascade_state": { "type": "string", "enum": ["ok", "risk", "crit", "pending"] }, "open_task_count": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "unassigned": { "type": "boolean" }, "is_peer": { "type": "boolean" } }, "required": ["seat_id", "name", "seat_type", "status", "parent_seat_id", "is_root", "steward_seat_id", "occupant", "signal_state", "cascade_state", "open_task_count", "unassigned", "is_peer"], "additionalProperties": false } }, "edges": { "type": "array", "items": { "type": "object", "properties": { "parent_seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "child_seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" } }, "required": ["parent_seat_id", "child_seat_id"], "additionalProperties": false } }, "status_rollups": { "type": "object", "properties": { "seat_count": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "active_seat_count": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "agent_seat_count": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "off_track_signal_count": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "off_track_cascade_count": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 } }, "required": ["seat_count", "active_seat_count", "agent_seat_count", "off_track_signal_count", "off_track_cascade_count"], "additionalProperties": false } }, "required": ["root_seat_id", "nodes", "edges", "status_rollups"], "additionalProperties": false }, "help": "Read the Responsibility Graph to discover seat ids, parentage, occupants, and status before mutating or routing work.", "guide_slugs": ["responsibility-graph-playbook", "agent-reference-map"], "stages": ["graph_design", "operating_rhythm"], "related_command_ids": ["agent.configure_tools", "agent.create_custom", "agent.go_live", "agent.run_dry_run", "agent.status", "agent.update_schedule", "aicos.brain_settings.get", "aicos.brain_settings.update", "charter.set", "charter.sign_manifest", "compass.answer_gap", "compass.approve_version", "compass.draft", "confirmation.approve", "confirmation.reject", "escalation.list", "friction.list", "mcp_token.create", "mcp_token.list", "mcp_token.revoke", "onboarding.status", "runner.list", "seat.create", "seat.decommission", "seat.get", "seat.rename", "seat.reparent", "seat.set_type", "signal.list", "skill.assign_to_seat", "staffing.assign_user", "tenant.model_gateway_policy.update"] },
+      { "id": "graph.get", "title": "Get Responsibility Graph", "description": "Return the tenant's Responsibility Graph: seats, edges, root, occupants, display-only planned occupants, and status rollups.", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": {}, "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "root_seat_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] }, "nodes": { "type": "array", "items": { "type": "object", "properties": { "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "name": { "type": "string" }, "seat_type": { "type": "string", "enum": ["human", "agent", "hybrid"] }, "status": { "type": "string", "enum": ["draft", "active", "vacant", "decommissioned"] }, "parent_seat_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] }, "is_root": { "type": "boolean" }, "steward_seat_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] }, "occupant": { "anyOf": [{ "type": "object", "properties": { "kind": { "type": "string", "enum": ["user", "agent"] }, "label": { "type": "string" }, "status": { "anyOf": [{ "type": "string" }, { "type": "null" }] } }, "required": ["kind", "label", "status"], "additionalProperties": false }, { "type": "null" }] }, "signal_state": { "type": "string", "enum": ["ok", "risk", "crit", "pending"] }, "cascade_state": { "type": "string", "enum": ["ok", "risk", "crit", "pending"] }, "open_task_count": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "unassigned": { "type": "boolean" }, "is_peer": { "type": "boolean" }, "planned_occupants": { "type": "array", "items": { "type": "object", "properties": { "display_name": { "type": "string" } }, "required": ["display_name"], "additionalProperties": false } } }, "required": ["seat_id", "name", "seat_type", "status", "parent_seat_id", "is_root", "steward_seat_id", "occupant", "signal_state", "cascade_state", "open_task_count", "unassigned", "is_peer", "planned_occupants"], "additionalProperties": false } }, "edges": { "type": "array", "items": { "type": "object", "properties": { "parent_seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "child_seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" } }, "required": ["parent_seat_id", "child_seat_id"], "additionalProperties": false } }, "status_rollups": { "type": "object", "properties": { "seat_count": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "active_seat_count": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "agent_seat_count": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "off_track_signal_count": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "off_track_cascade_count": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 } }, "required": ["seat_count", "active_seat_count", "agent_seat_count", "off_track_signal_count", "off_track_cascade_count"], "additionalProperties": false } }, "required": ["root_seat_id", "nodes", "edges", "status_rollups"], "additionalProperties": false }, "help": "Read the Responsibility Graph to discover seat ids, parentage, occupants, and status before mutating or routing work.", "guide_slugs": ["responsibility-graph-playbook", "agent-reference-map"], "stages": ["graph_design", "operating_rhythm"], "related_command_ids": ["agent.configure_tools", "agent.create_custom", "agent.go_live", "agent.run_dry_run", "agent.status", "agent.update_schedule", "aicos.brain_settings.get", "aicos.brain_settings.update", "charter.backfill_stock_evidence", "charter.set", "charter.sign_manifest", "compass.answer_gap", "compass.approve_version", "compass.draft", "confirmation.approve", "confirmation.reject", "escalation.list", "friction.list", "mcp_token.create", "mcp_token.list", "mcp_token.revoke", "onboarding.status", "runner.list", "seat.create", "seat.decommission", "seat.get", "seat.rename", "seat.reparent", "seat.set_type", "signal.list", "skill.assign_to_seat", "staffing.assign_user", "tenant.model_gateway_policy.update"] },
       { "id": "implementation_access.abandon", "title": "Abandon implementation access", "description": "Close the implementation bootstrap run as abandoned and revoke its bearer token.", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": false, "input_schema": { "type": "object", "properties": {}, "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "run_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "tenant_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "status": { "type": "string", "enum": ["active", "completed", "abandoned", "expired"] }, "source_client": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "expires_at": { "anyOf": [{ "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z))$" }, { "type": "null" }] }, "created_at": { "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z))$" }, "token_revoked": { "type": "boolean" }, "already_closed": { "type": "boolean" }, "reconciled_stale_run_ids": { "type": "array", "items": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" } } }, "required": ["run_id", "tenant_id", "status", "source_client", "expires_at", "created_at", "token_revoked", "already_closed", "reconciled_stale_run_ids"] }, "help": "Close the implementation bootstrap run as abandoned and revoke its bearer token.", "guide_slugs": ["rost-implementation-method", "agent-reference-map"], "stages": ["company_setup"], "related_command_ids": ["agent_setup.get", "agent_setup.start", "agent_setup.update", "agent_template.list", "agent.configure_tools", "agent.create_custom", "agent.create_from_template", "agent.fleet_digest", "agent.get_run", "agent.go_live", "agent.list_fleet", "agent.list_runs", "agent.list_tool_calls", "agent.run_dry_run", "agent.status", "charter.approve", "charter.draft", "compass.set", "confirmation.approve", "confirmation.reject", "deliverable.accept", "deliverable.attach", "deliverable.create", "deliverable.get", "deliverable.list", "deliverable.reject", "error_log.list", "error_log.resolve", "error_log.supersede", "escalation.get", "escalation.list", "escalation.reject", "escalation.resolve", "implementation_access.complete", "implementation_access.status", "integration.list", "integration.readiness", "integration.status", "integration.test", "mcp_token.create", "mcp_token.list", "mcp_token.revoke", "onboarding.attach_reference", "onboarding.rehearse", "onboarding.resume", "onboarding.status", "onboarding.upload_context", "runner.diagnose", "runner.repair", "seat.create", "seat.create_complete", "skill.assign_to_seat", "skill.assigned.list", "skill.catalog", "skill.check_dependencies", "skill.create", "skill.enable_catalog", "skill.file.get", "skill.get", "skill.import_github", "skill.import_upload", "skill.install_local", "skill.list", "skill.publish", "skill.revoke_from_seat", "skill.sync_local", "skill.update_draft", "staffing.assign", "system.health", "tenant.anthropic_key.disable", "tenant.rename", "tool_grants.tenant.update", "usage.report", "usage.snapshot", "user.tenants", "user.use_tenant", "user.whoami"] },
       { "id": "implementation_access.complete", "title": "Complete implementation access", "description": "Close the implementation bootstrap run as completed and revoke its bearer token.", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": false, "input_schema": { "type": "object", "properties": {}, "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "run_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "tenant_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "status": { "type": "string", "enum": ["active", "completed", "abandoned", "expired"] }, "source_client": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "expires_at": { "anyOf": [{ "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z))$" }, { "type": "null" }] }, "created_at": { "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z))$" }, "token_revoked": { "type": "boolean" }, "already_closed": { "type": "boolean" }, "reconciled_stale_run_ids": { "type": "array", "items": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" } } }, "required": ["run_id", "tenant_id", "status", "source_client", "expires_at", "created_at", "token_revoked", "already_closed", "reconciled_stale_run_ids"] }, "help": "Close the implementation bootstrap run as completed and revoke its bearer token.", "guide_slugs": ["rost-implementation-method", "agent-reference-map"], "stages": ["company_setup"], "related_command_ids": ["agent_setup.get", "agent_setup.start", "agent_setup.update", "agent_template.list", "agent.configure_tools", "agent.create_custom", "agent.create_from_template", "agent.fleet_digest", "agent.get_run", "agent.go_live", "agent.list_fleet", "agent.list_runs", "agent.list_tool_calls", "agent.run_dry_run", "agent.status", "charter.approve", "charter.draft", "compass.set", "confirmation.approve", "confirmation.reject", "deliverable.accept", "deliverable.attach", "deliverable.create", "deliverable.get", "deliverable.list", "deliverable.reject", "error_log.list", "error_log.resolve", "error_log.supersede", "escalation.get", "escalation.list", "escalation.reject", "escalation.resolve", "implementation_access.abandon", "implementation_access.status", "integration.list", "integration.readiness", "integration.status", "integration.test", "mcp_token.create", "mcp_token.list", "mcp_token.revoke", "onboarding.attach_reference", "onboarding.rehearse", "onboarding.resume", "onboarding.status", "onboarding.upload_context", "runner.diagnose", "runner.repair", "seat.create", "seat.create_complete", "skill.assign_to_seat", "skill.assigned.list", "skill.catalog", "skill.check_dependencies", "skill.create", "skill.enable_catalog", "skill.file.get", "skill.get", "skill.import_github", "skill.import_upload", "skill.install_local", "skill.list", "skill.publish", "skill.revoke_from_seat", "skill.sync_local", "skill.update_draft", "staffing.assign", "system.health", "tenant.anthropic_key.disable", "tenant.rename", "tool_grants.tenant.update", "usage.report", "usage.snapshot", "user.tenants", "user.use_tenant", "user.whoami"] },
       { "id": "implementation_access.status", "title": "Implementation access status", "description": "Read the current state of the implementation bootstrap run and its bearer token.", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": false, "input_schema": { "type": "object", "properties": {}, "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "run_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "tenant_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "status": { "type": "string", "enum": ["active", "completed", "abandoned", "expired"] }, "source_client": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "expires_at": { "anyOf": [{ "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z))$" }, { "type": "null" }] }, "created_at": { "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z))$" }, "token_revoked": { "type": "boolean" } }, "required": ["run_id", "tenant_id", "status", "source_client", "expires_at", "created_at", "token_revoked"] }, "help": "Read the current state of the implementation bootstrap run and its bearer token.", "guide_slugs": ["rost-implementation-method", "agent-reference-map"], "stages": ["company_setup"], "related_command_ids": ["agent_setup.get", "agent_setup.start", "agent_setup.update", "agent_template.list", "agent.configure_tools", "agent.create_custom", "agent.create_from_template", "agent.fleet_digest", "agent.get_run", "agent.go_live", "agent.list_fleet", "agent.list_runs", "agent.list_tool_calls", "agent.run_dry_run", "agent.status", "charter.approve", "charter.draft", "compass.set", "confirmation.approve", "confirmation.reject", "deliverable.accept", "deliverable.attach", "deliverable.create", "deliverable.get", "deliverable.list", "deliverable.reject", "error_log.list", "error_log.resolve", "error_log.supersede", "escalation.get", "escalation.list", "escalation.reject", "escalation.resolve", "implementation_access.abandon", "implementation_access.complete", "integration.list", "integration.readiness", "integration.status", "integration.test", "mcp_token.create", "mcp_token.list", "mcp_token.revoke", "onboarding.attach_reference", "onboarding.rehearse", "onboarding.resume", "onboarding.status", "onboarding.upload_context", "runner.diagnose", "runner.repair", "seat.create", "seat.create_complete", "skill.assign_to_seat", "skill.assigned.list", "skill.catalog", "skill.check_dependencies", "skill.create", "skill.enable_catalog", "skill.file.get", "skill.get", "skill.import_github", "skill.import_upload", "skill.install_local", "skill.list", "skill.publish", "skill.revoke_from_seat", "skill.sync_local", "skill.update_draft", "staffing.assign", "system.health", "tenant.anthropic_key.disable", "tenant.rename", "tool_grants.tenant.update", "usage.report", "usage.snapshot", "user.tenants", "user.use_tenant", "user.whoami"] },
@@ -13395,7 +13396,7 @@ var init_command_discovery = __esm({
       { "id": "integration.status", "title": "Get integration status", "description": "Read one integration's metadata and latest health status. Returns no secret material.", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "provider": { "type": "string", "minLength": 1 }, "integration_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" } }, "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "integration": { "anyOf": [{ "type": "object", "properties": { "id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "provider": { "anyOf": [{ "type": "string", "enum": ["slack", "google", "quickbooks", "stripe"] }, { "type": "string", "minLength": 1 }] }, "status": { "type": "string", "enum": ["connected", "error", "disconnected"] }, "account_email": { "anyOf": [{ "type": "string", "format": "email", "pattern": "^(?!\\.)(?!.*\\.\\.)([A-Za-z0-9_'+\\-\\.]*)[A-Za-z0-9_+-]@([A-Za-z0-9][A-Za-z0-9\\-]*\\.)+[A-Za-z]{2,}$" }, { "type": "null" }] }, "account_label": { "anyOf": [{ "type": "string", "minLength": 1 }, { "type": "null" }] }, "scopes": { "type": "array", "items": { "type": "string", "minLength": 1 } }, "capabilities": { "type": "array", "items": { "type": "string", "minLength": 1 } }, "capability_availability": { "type": "array", "items": { "type": "object", "properties": { "capability_id": { "type": "string", "minLength": 1 }, "provider": { "type": "string", "minLength": 1 }, "max_access_level": { "anyOf": [{ "type": "string", "enum": ["read", "draft", "write", "admin"] }, { "type": "string", "const": "off" }] }, "availability": { "type": "string", "enum": ["available", "connection_required", "scope_missing", "revoked", "disabled"] }, "granted_scopes": { "type": "array", "items": { "type": "string", "minLength": 1 } }, "missing_scopes": { "type": "array", "items": { "type": "string", "minLength": 1 } } }, "required": ["capability_id", "provider", "max_access_level", "availability", "granted_scopes", "missing_scopes"], "additionalProperties": false } }, "last_synced_at": { "anyOf": [{ "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, { "type": "null" }] }, "last_tested_at": { "anyOf": [{ "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, { "type": "null" }] }, "last_test_result": { "anyOf": [{ "type": "string", "enum": ["ok", "failed"] }, { "type": "null" }] }, "created_at": { "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, "updated_at": { "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" } }, "required": ["id", "provider", "status", "account_email", "account_label", "scopes", "capabilities", "last_synced_at", "last_tested_at", "last_test_result", "created_at", "updated_at"], "additionalProperties": false }, { "type": "null" }] } }, "required": ["integration"], "additionalProperties": false }, "help": "Read one integration's metadata-only status by provider or integration id.", "guide_slugs": ["tool-access-and-vault", "settings-guide", "security-model-guide"], "stages": ["operating_rhythm"], "related_command_ids": ["agent_setup.get", "agent_setup.start", "agent_setup.update", "agent_template.list", "agent.configure_tools", "agent.create_custom", "agent.create_from_template", "agent.fleet_digest", "agent.get_run", "agent.go_live", "agent.list_fleet", "agent.list_runs", "agent.list_tool_calls", "agent.run_dry_run", "agent.status", "aicos.brain_settings.get", "aicos.brain_settings.update", "charter.approve", "charter.draft", "charter.set", "charter.sign_manifest", "charter.update_draft", "compass.set", "confirmation.approve", "confirmation.reject", "credential.ingress", "deliverable.accept", "deliverable.attach", "deliverable.create", "deliverable.get", "deliverable.list", "deliverable.reject", "error_log.list", "error_log.resolve", "error_log.supersede", "escalation.get", "escalation.list", "escalation.reject", "escalation.resolve", "implementation_access.abandon", "implementation_access.complete", "implementation_access.status", "integration.connect_rest", "integration.list", "integration.readiness", "integration.test", "mcp_token.create", "mcp_token.list", "mcp_token.revoke", "onboarding.attach_reference", "onboarding.create_invite", "onboarding.rehearse", "onboarding.resume", "onboarding.status", "onboarding.upload_context", "runner.diagnose", "runner.pairing.start", "runner.repair", "seat.create", "seat.create_complete", "settings.agent_policy.get", "settings.agent_policy.update", "settings.confirmation_policy.get", "settings.confirmation_policy.update", "settings.get", "settings.member_visibility.get", "settings.member_visibility.update", "settings.product_learning.get", "settings.product_learning.update", "settings.sync_brief_scope.get", "settings.sync_brief_scope.update", "settings.update", "skill.assign_to_seat", "skill.assigned.list", "skill.catalog", "skill.check_dependencies", "skill.create", "skill.enable_catalog", "skill.file.get", "skill.get", "skill.import_github", "skill.import_upload", "skill.install_local", "skill.list", "skill.publish", "skill.revoke_from_seat", "skill.sync_local", "skill.update_draft", "staffing.assign", "system.health", "tenant.anthropic_key.disable", "tenant.anthropic_key.save", "tenant.model_gateway_policy.update", "tenant.rename", "tool_grants.tenant.update", "usage.report", "usage.snapshot", "user.tenants", "user.use_tenant", "user.whoami"] },
       { "id": "integration.test", "title": "Test integration connection", "description": "Run the installed provider-specific connection test and update integration health. The command returns bounded metadata only.", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "provider": { "type": "string", "minLength": 1 }, "integration_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" } }, "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "ok": { "type": "boolean" }, "provider": { "type": "string", "minLength": 1 }, "integration_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "status": { "type": "string", "enum": ["connected", "error", "disconnected"] }, "account_email": { "anyOf": [{ "type": "string", "format": "email", "pattern": "^(?!\\.)(?!.*\\.\\.)([A-Za-z0-9_'+\\-\\.]*)[A-Za-z0-9_+-]@([A-Za-z0-9][A-Za-z0-9\\-]*\\.)+[A-Za-z]{2,}$" }, { "type": "null" }] }, "checked_at": { "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, "message": { "type": "string", "minLength": 1 } }, "required": ["ok", "provider", "integration_id", "status", "account_email", "checked_at", "message"], "additionalProperties": false }, "help": "Run the provider-specific connection test and update integration health without exposing credentials.", "guide_slugs": ["tool-access-and-vault", "settings-guide", "agent-builder-guide"], "stages": ["operating_rhythm"], "related_command_ids": ["agent_setup.get", "agent_setup.start", "agent_setup.update", "agent_template.list", "agent.configure_tools", "agent.create_custom", "agent.create_from_template", "agent.fleet_digest", "agent.get_run", "agent.go_live", "agent.list_fleet", "agent.list_runs", "agent.list_tool_calls", "agent.run_dry_run", "agent.status", "aicos.brain_settings.get", "aicos.brain_settings.update", "charter.approve", "charter.draft", "charter.set", "charter.sign_manifest", "charter.update_draft", "compass.set", "confirmation.approve", "confirmation.reject", "credential.ingress", "deliverable.accept", "deliverable.attach", "deliverable.create", "deliverable.get", "deliverable.list", "deliverable.reject", "error_log.list", "error_log.resolve", "error_log.supersede", "escalation.get", "escalation.list", "escalation.reject", "escalation.resolve", "implementation_access.abandon", "implementation_access.complete", "implementation_access.status", "integration.connect_rest", "integration.list", "integration.readiness", "integration.status", "mcp_token.create", "mcp_token.list", "mcp_token.revoke", "onboarding.attach_reference", "onboarding.create_invite", "onboarding.rehearse", "onboarding.resume", "onboarding.status", "onboarding.upload_context", "runner.diagnose", "runner.repair", "seat.create", "seat.create_complete", "settings.agent_policy.get", "settings.agent_policy.update", "settings.confirmation_policy.get", "settings.confirmation_policy.update", "settings.get", "settings.member_visibility.get", "settings.member_visibility.update", "settings.product_learning.get", "settings.product_learning.update", "settings.sync_brief_scope.get", "settings.sync_brief_scope.update", "settings.update", "skill.assign_to_seat", "skill.assigned.list", "skill.catalog", "skill.check_dependencies", "skill.create", "skill.enable_catalog", "skill.file.get", "skill.get", "skill.import_github", "skill.import_upload", "skill.install_local", "skill.list", "skill.publish", "skill.revoke_from_seat", "skill.sync_local", "skill.update_draft", "staffing.assign", "system.health", "tenant.anthropic_key.disable", "tenant.model_gateway_policy.update", "tenant.rename", "tool_grants.tenant.update", "usage.report", "usage.snapshot", "user.tenants", "user.use_tenant", "user.whoami"] },
       { "id": "mcp_token.create", "title": "Create MCP token", "description": "Mint a tenant-admin or seat-scoped MCP token.", "required_scope": "tenant", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["credential"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "scope": { "type": "string", "enum": ["tenant_admin", "seat"] }, "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "expires_at": { "anyOf": [{ "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, { "type": "null" }] }, "expires_in_days": { "type": "integer", "minimum": 1, "maximum": 365 } }, "required": ["scope"], "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "token_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "token": { "type": "string", "minLength": 1 }, "scope": { "type": "string", "enum": ["tenant_admin", "seat"] }, "seat_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] } }, "required": ["token_id", "token", "scope", "seat_id"], "additionalProperties": false }, "help": "Create MCP tokens with the narrowest scope needed, and tell agents where to retrieve reference docs.", "guide_slugs": ["ai-model-data-handling-guide", "mcp-and-cli-guide", "tool-access-and-vault", "agent-reference-map"], "stages": ["staffing"], "related_command_ids": ["agent_grant_intervention.decide", "agent_setup.get", "agent_setup.relane", "agent_setup.start", "agent_setup.update", "agent_template.list", "agent.activation_sign", "agent.configure_tools", "agent.create_custom", "agent.create_from_template", "agent.decommission", "agent.fleet_digest", "agent.get_run", "agent.go_live", "agent.list_fleet", "agent.list_runs", "agent.list_tool_calls", "agent.pause", "agent.resume", "agent.run_dry_run", "agent.run_now", "agent.status", "agent.trust.create", "agent.trust.expire", "agent.trust.revoke", "agent.trust.supersede", "agent.update_schedule", "aicos.brain_settings.get", "aicos.brain_settings.update", "charter.approve", "charter.draft", "charter.set", "charter.sign_manifest", "charter.update_draft", "compass.answer_gap", "compass.approve_version", "compass.draft", "compass.set", "confirmation.approve", "confirmation.dismiss", "confirmation.dismiss_stale", "confirmation.list", "confirmation.reject", "confirmation.remint", "credential.ingress", "deliverable.accept", "deliverable.attach", "deliverable.create", "deliverable.get", "deliverable.list", "deliverable.reject", "error_log.list", "error_log.resolve", "error_log.supersede", "escalation.get", "escalation.list", "escalation.reject", "escalation.resolve", "friction.list", "friction.resolve", "goal.reassign_owner", "goal.reparent", "graph.get", "implementation_access.abandon", "implementation_access.complete", "implementation_access.status", "integration.connect_rest", "integration.list", "integration.readiness", "integration.status", "integration.test", "mcp_token.list", "mcp_token.revoke", "onboarding.attach_reference", "onboarding.create_invite", "onboarding.rehearse", "onboarding.resume", "onboarding.setup", "onboarding.status", "onboarding.upload_context", "runner.diagnose", "runner.list", "runner.pairing.start", "runner.repair", "runner.revoke", "runner.status", "seat.create", "seat.create_complete", "settings.agent_policy.get", "settings.agent_policy.update", "settings.confirmation_policy.get", "settings.confirmation_policy.update", "settings.get", "settings.member_visibility.get", "settings.member_visibility.update", "settings.product_learning.get", "settings.product_learning.update", "settings.sync_brief_scope.get", "settings.sync_brief_scope.update", "settings.update", "signal.list", "skill.assign_to_seat", "skill.assigned.list", "skill.catalog", "skill.check_dependencies", "skill.create", "skill.enable_catalog", "skill.file.get", "skill.get", "skill.import_github", "skill.import_upload", "skill.install_local", "skill.list", "skill.publish", "skill.revoke_from_seat", "skill.sync_local", "skill.update_draft", "staffing.assign", "staffing.assign_agent_dry_run", "staffing.assign_user", "system.health", "task.confirm_proposal", "task.decline_proposal", "tenant.anthropic_key.disable", "tenant.anthropic_key.save", "tenant.model_gateway_policy.update", "tenant.rename", "tool_grants.tenant.update", "tool.catalog", "usage.report", "usage.snapshot", "user.tenants", "user.use_tenant", "user.whoami", "work_order.cancel", "work_order.enqueue", "work_order.list"] },
-      { "id": "mcp_token.list", "title": "List MCP tokens", "description": "List MCP token metadata (id, scope, seat, created/last-used/revoked). Never returns token material.", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "include_revoked": { "default": false, "type": "boolean" }, "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" } }, "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "tokens": { "type": "array", "items": { "type": "object", "properties": { "token_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "scope": { "type": "string", "enum": ["seat", "tenant_admin"] }, "seat_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] }, "created_at": { "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, "last_seen_at": { "anyOf": [{ "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, { "type": "null" }] }, "expires_at": { "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, "expires_in_days": { "type": "integer", "minimum": -9007199254740991, "maximum": 9007199254740991 }, "revoked_at": { "anyOf": [{ "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, { "type": "null" }] } }, "required": ["token_id", "scope", "seat_id", "created_at", "last_seen_at", "expires_at", "expires_in_days", "revoked_at"], "additionalProperties": false } } }, "required": ["tokens"], "additionalProperties": false }, "help": "List MCP token metadata (never token material) to audit which seats hold active sessions.", "guide_slugs": ["mcp-and-cli-guide", "tool-access-and-vault"], "stages": ["staffing"], "related_command_ids": ["agent_setup.get", "agent_setup.start", "agent_setup.update", "agent_template.list", "agent.configure_tools", "agent.create_custom", "agent.create_from_template", "agent.fleet_digest", "agent.get_run", "agent.go_live", "agent.list_fleet", "agent.list_runs", "agent.list_tool_calls", "agent.run_dry_run", "agent.status", "agent.update_schedule", "aicos.brain_settings.get", "aicos.brain_settings.update", "charter.approve", "charter.draft", "charter.set", "charter.sign_manifest", "charter.update_draft", "compass.set", "confirmation.approve", "confirmation.reject", "credential.ingress", "deliverable.accept", "deliverable.attach", "deliverable.create", "deliverable.get", "deliverable.list", "deliverable.reject", "error_log.list", "error_log.resolve", "error_log.supersede", "escalation.get", "escalation.list", "escalation.reject", "escalation.resolve", "graph.get", "implementation_access.abandon", "implementation_access.complete", "implementation_access.status", "integration.connect_rest", "integration.list", "integration.readiness", "integration.status", "integration.test", "mcp_token.create", "mcp_token.revoke", "onboarding.attach_reference", "onboarding.create_invite", "onboarding.rehearse", "onboarding.resume", "onboarding.status", "onboarding.upload_context", "runner.diagnose", "runner.list", "runner.repair", "seat.create", "seat.create_complete", "seat.get", "settings.agent_policy.get", "settings.agent_policy.update", "settings.confirmation_policy.get", "settings.confirmation_policy.update", "settings.get", "settings.member_visibility.get", "settings.member_visibility.update", "settings.product_learning.get", "settings.product_learning.update", "settings.sync_brief_scope.get", "settings.sync_brief_scope.update", "settings.update", "skill.assign_to_seat", "skill.assigned.list", "skill.catalog", "skill.check_dependencies", "skill.create", "skill.enable_catalog", "skill.file.get", "skill.get", "skill.import_github", "skill.import_upload", "skill.install_local", "skill.list", "skill.publish", "skill.revoke_from_seat", "skill.sync_local", "skill.update_draft", "staffing.assign", "system.health", "tenant.anthropic_key.disable", "tenant.model_gateway_policy.update", "tenant.rename", "tool_grants.tenant.update", "usage.report", "usage.snapshot", "user.tenants", "user.use_tenant", "user.whoami"] },
+      { "id": "mcp_token.list", "title": "List MCP tokens", "description": "List MCP token metadata (id, scope, seat, created/last-used/revoked). Never returns token material.", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "include_revoked": { "default": false, "type": "boolean" }, "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" } }, "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "tokens": { "type": "array", "items": { "type": "object", "properties": { "token_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "scope": { "type": "string", "enum": ["seat", "tenant_admin"] }, "seat_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] }, "created_at": { "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, "last_seen_at": { "anyOf": [{ "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, { "type": "null" }] }, "expires_at": { "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, "expires_in_days": { "type": "integer", "minimum": -9007199254740991, "maximum": 9007199254740991 }, "revoked_at": { "anyOf": [{ "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, { "type": "null" }] } }, "required": ["token_id", "scope", "seat_id", "created_at", "last_seen_at", "expires_at", "expires_in_days", "revoked_at"], "additionalProperties": false } } }, "required": ["tokens"], "additionalProperties": false }, "help": "List MCP token metadata (never token material) to audit which seats hold active sessions.", "guide_slugs": ["mcp-and-cli-guide", "tool-access-and-vault"], "stages": ["staffing"], "related_command_ids": ["agent_setup.get", "agent_setup.start", "agent_setup.update", "agent_template.list", "agent.configure_tools", "agent.create_custom", "agent.create_from_template", "agent.fleet_digest", "agent.get_run", "agent.go_live", "agent.list_fleet", "agent.list_runs", "agent.list_tool_calls", "agent.run_dry_run", "agent.status", "agent.update_schedule", "aicos.brain_settings.get", "aicos.brain_settings.update", "charter.approve", "charter.backfill_stock_evidence", "charter.draft", "charter.set", "charter.sign_manifest", "charter.update_draft", "compass.set", "confirmation.approve", "confirmation.reject", "credential.ingress", "deliverable.accept", "deliverable.attach", "deliverable.create", "deliverable.get", "deliverable.list", "deliverable.reject", "error_log.list", "error_log.resolve", "error_log.supersede", "escalation.get", "escalation.list", "escalation.reject", "escalation.resolve", "graph.get", "implementation_access.abandon", "implementation_access.complete", "implementation_access.status", "integration.connect_rest", "integration.list", "integration.readiness", "integration.status", "integration.test", "mcp_token.create", "mcp_token.revoke", "onboarding.attach_reference", "onboarding.create_invite", "onboarding.rehearse", "onboarding.resume", "onboarding.status", "onboarding.upload_context", "runner.diagnose", "runner.list", "runner.repair", "seat.create", "seat.create_complete", "seat.get", "settings.agent_policy.get", "settings.agent_policy.update", "settings.confirmation_policy.get", "settings.confirmation_policy.update", "settings.get", "settings.member_visibility.get", "settings.member_visibility.update", "settings.product_learning.get", "settings.product_learning.update", "settings.sync_brief_scope.get", "settings.sync_brief_scope.update", "settings.update", "skill.assign_to_seat", "skill.assigned.list", "skill.catalog", "skill.check_dependencies", "skill.create", "skill.enable_catalog", "skill.file.get", "skill.get", "skill.import_github", "skill.import_upload", "skill.install_local", "skill.list", "skill.publish", "skill.revoke_from_seat", "skill.sync_local", "skill.update_draft", "staffing.assign", "system.health", "tenant.anthropic_key.disable", "tenant.model_gateway_policy.update", "tenant.rename", "tool_grants.tenant.update", "usage.report", "usage.snapshot", "user.tenants", "user.use_tenant", "user.whoami"] },
       { "id": "mcp_token.revoke", "title": "Revoke MCP token", "description": "Revoke an MCP token immediately.", "required_scope": "tenant", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": [], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "token_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" } }, "required": ["token_id"], "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "token_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "revoked": { "type": "boolean" } }, "required": ["token_id", "revoked"], "additionalProperties": false }, "help": "Revoke MCP access when a local session ends or seat authority changes.", "guide_slugs": ["mcp-and-cli-guide", "tool-access-and-vault"], "stages": ["staffing"], "related_command_ids": ["agent_setup.get", "agent_setup.start", "agent_setup.update", "agent_template.list", "agent.configure_tools", "agent.create_custom", "agent.create_from_template", "agent.fleet_digest", "agent.get_run", "agent.go_live", "agent.list_fleet", "agent.list_runs", "agent.list_tool_calls", "agent.run_dry_run", "agent.status", "aicos.brain_settings.get", "aicos.brain_settings.update", "charter.approve", "charter.draft", "charter.set", "charter.sign_manifest", "charter.update_draft", "compass.answer_gap", "compass.approve_version", "compass.draft", "compass.set", "confirmation.approve", "confirmation.reject", "credential.ingress", "deliverable.accept", "deliverable.attach", "deliverable.create", "deliverable.get", "deliverable.list", "deliverable.reject", "error_log.list", "error_log.resolve", "error_log.supersede", "escalation.get", "escalation.list", "escalation.reject", "escalation.resolve", "friction.list", "graph.get", "implementation_access.abandon", "implementation_access.complete", "implementation_access.status", "integration.connect_rest", "integration.list", "integration.readiness", "integration.status", "integration.test", "mcp_token.create", "mcp_token.list", "onboarding.attach_reference", "onboarding.create_invite", "onboarding.rehearse", "onboarding.resume", "onboarding.status", "onboarding.upload_context", "runner.diagnose", "runner.list", "runner.pairing.start", "runner.repair", "runner.revoke", "runner.status", "seat.create", "seat.create_complete", "settings.agent_policy.get", "settings.agent_policy.update", "settings.confirmation_policy.get", "settings.confirmation_policy.update", "settings.get", "settings.member_visibility.get", "settings.member_visibility.update", "settings.product_learning.get", "settings.product_learning.update", "settings.sync_brief_scope.get", "settings.sync_brief_scope.update", "settings.update", "signal.list", "skill.assign_to_seat", "skill.assigned.list", "skill.catalog", "skill.check_dependencies", "skill.create", "skill.enable_catalog", "skill.file.get", "skill.get", "skill.import_github", "skill.import_upload", "skill.install_local", "skill.list", "skill.publish", "skill.revoke_from_seat", "skill.sync_local", "skill.update_draft", "staffing.assign", "system.health", "tenant.anthropic_key.disable", "tenant.anthropic_key.save", "tenant.model_gateway_policy.update", "tenant.rename", "tool_grants.tenant.update", "usage.report", "usage.snapshot", "user.tenants", "user.use_tenant", "user.whoami", "work_order.cancel", "work_order.enqueue", "work_order.list"] },
       { "id": "measurable_template.adopt", "title": "Adopt a measurable template", "description": "Create a seat measurable from a catalog template (unit/direction/cadence from the template; target optionally overridden). The seat owns it; readings attach afterward.", "required_scope": "seat", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "template_id": { "type": "string", "minLength": 1, "maxLength": 80 }, "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "target": { "type": "number" } }, "required": ["template_id", "seat_id"], "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "measurable_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "template_id": { "type": "string" }, "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "name": { "type": "string" }, "unit": { "type": "string" }, "direction": { "type": "string", "enum": ["up_good", "down_good"] }, "target": { "type": "number" }, "cadence": { "type": "string", "enum": ["daily", "weekly", "monthly", "quarterly", "annual"] } }, "required": ["measurable_id", "template_id", "seat_id", "name", "unit", "direction", "target", "cadence"], "additionalProperties": false }, "help": "Create a seat measurable from a catalog template (unit/direction/cadence from the template; target optionally overridden). Adoption is a human act \u2014 source is human.", "guide_slugs": ["signal-guide"], "stages": ["operating_rhythm"], "related_command_ids": ["compass.approve_version", "compass.set", "integration.discover", "measurable_template.list", "measurable.create", "scorecard.grid", "signal.bind", "signal.bind_confirm", "signal.confirm_reading", "signal.correct_reading", "signal.draft_first_readings", "signal.get", "signal.import", "signal.list", "signal.preview", "signal.report", "status.record"] },
       { "id": "measurable_template.list", "title": "List measurable templates", "description": "List the measurable template catalog (Sales/Finance/Ops/Marketing/HR) with unit, direction, cadence, and a suggested target. Adopt one with measurable_template.adopt.", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "function": { "type": "string", "enum": ["sales", "finance", "operations", "marketing", "hr"] } }, "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "templates": { "type": "array", "items": { "type": "object", "properties": { "id": { "type": "string" }, "name": { "type": "string" }, "function": { "type": "string", "enum": ["sales", "finance", "operations", "marketing", "hr"] }, "unit": { "type": "string" }, "direction": { "type": "string", "enum": ["up_good", "down_good"] }, "cadence": { "type": "string", "enum": ["daily", "weekly", "monthly", "quarterly", "annual"] }, "suggested_target": { "type": "number" }, "suggested_source_recipe": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "source_readiness": { "anyOf": [{ "type": "object", "properties": { "provider": { "type": "string", "enum": ["platform_billing", "quickbooks", "stripe"] }, "status": { "type": "string", "enum": ["available", "blocked"] }, "label": { "type": "string" }, "description": { "type": "string" }, "source": { "type": "string" }, "blocked_reason": { "type": "string" } }, "required": ["provider", "status", "label", "description", "source"] }, { "type": "null" }] }, "premium": { "type": "boolean" } }, "required": ["id", "name", "function", "unit", "direction", "cadence", "suggested_target", "suggested_source_recipe", "source_readiness", "premium"], "additionalProperties": false } } }, "required": ["templates"], "additionalProperties": false }, "help": "List the measurable template catalog by function (Sales/Finance/Ops/Marketing/HR); adopt one with measurable_template.adopt to create a seat measurable.", "guide_slugs": ["signal-guide"], "stages": ["operating_rhythm"], "related_command_ids": ["compass.approve_version", "compass.set", "integration.discover", "measurable_template.adopt", "measurable.create", "scorecard.grid", "signal.bind", "signal.bind_confirm", "signal.confirm_reading", "signal.correct_reading", "signal.draft_first_readings", "signal.get", "signal.import", "signal.list", "signal.preview", "signal.report", "status.record"] },
@@ -13418,10 +13419,10 @@ var init_command_discovery = __esm({
       { "id": "onboarding.select_path", "title": "Select onboarding path", "description": "Record whether this company continues guided onboarding or hands setup to an agent (agent-led). Human-only (web UI or CLI), not an MCP tool. Never marks onboarding complete or grants any authority.", "required_scope": "tenant_admin", "confirmation": "none", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": false, "input_schema": { "type": "object", "properties": { "path": { "type": "string", "enum": ["guided", "agent_led"] } }, "required": ["path"], "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "step": { "type": "string", "enum": ["setup_path", "company_basics", "how_it_works", "compass_context", "org_intake", "charters_preview", "sync_rhythm", "invite_team", "staff_agent", "finish", "complete"] }, "state": {}, "completed_at": { "anyOf": [{ "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, { "type": "null" }] } }, "required": ["step", "state", "completed_at"], "additionalProperties": false }, "help": "Records whether the owner continues guided onboarding or hands setup to an agent (agent-led). Owner-only; it never marks onboarding complete or grants authority.", "guide_slugs": ["mcp-and-cli-guide", "agent-reference-map"], "stages": ["company_setup"], "related_command_ids": [] },
       { "id": "onboarding.setup", "title": "Apply onboarding setup", "description": "Stage one owner approval for a complete declarative onboarding setup. Approval applies the plan atomically without invites, credentials, external messages, or go-live.", "required_scope": "tenant", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": [], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "schema_version": { "type": "number", "const": 1 }, "idempotency_key": { "type": "string", "minLength": 1, "maxLength": 120 }, "company_name": { "type": "string", "minLength": 2, "maxLength": 120 }, "sources": { "maxItems": 100, "type": "array", "items": { "type": "object", "properties": { "source_key": { "type": "string", "pattern": "^[a-z][a-z0-9-]{1,79}$" }, "source_upload_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "title": { "type": "string" }, "kind": { "type": "string", "enum": ["org_chart", "signal_export", "goal_export", "friction_export", "meeting_export", "other"] }, "sha256": { "type": "string", "pattern": "^[a-f0-9]{64}$" }, "row_ref": { "type": "string" } }, "required": ["source_key", "source_upload_id", "title", "kind", "sha256"], "additionalProperties": false } }, "reconciliation": { "maxItems": 1e3, "type": "array", "items": { "type": "object", "properties": { "source_key": { "type": "string", "pattern": "^[a-z][a-z0-9-]{1,79}$" }, "source_sha256": { "type": "string", "pattern": "^[0-9a-f]{64}$" }, "family": { "type": "string", "enum": ["source", "seat", "planned_person", "goal", "signal", "reading", "friction", "task", "schedule", "agent"] }, "input_count": { "type": "integer", "exclusiveMinimum": 0, "maximum": 9007199254740991 }, "normalized_identity_digest": { "type": "string", "pattern": "^[0-9a-f]{64}$" }, "applied_count": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "skipped": { "maxItems": 5e3, "type": "array", "items": { "anyOf": [{ "type": "object", "properties": { "logical_key": { "type": "string", "pattern": "^[a-z][a-z0-9-]{1,79}$" }, "reason": { "type": "string", "enum": ["context_only", "invalid", "duplicate", "unsupported"] } }, "required": ["logical_key", "reason"], "additionalProperties": false }, { "type": "object", "properties": { "row_ref": { "type": "string", "minLength": 1, "maxLength": 160 }, "reason": { "type": "string", "enum": ["context_only", "invalid", "duplicate", "unsupported"] } }, "required": ["row_ref", "reason"], "additionalProperties": false }] } } }, "required": ["source_key", "source_sha256", "family", "input_count", "normalized_identity_digest", "applied_count", "skipped"], "additionalProperties": false } }, "compass": { "oneOf": [{ "type": "object", "properties": { "schema_version": { "type": "number", "const": 1 }, "purpose": { "type": "object", "properties": { "value": { "type": "string", "minLength": 1 }, "citations": { "type": "array", "items": { "type": "object", "properties": { "source_id": { "type": "string", "minLength": 1 }, "document_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "label": { "type": "string", "minLength": 1 }, "locator": { "type": "string", "minLength": 1 }, "quote": { "type": "string", "minLength": 1 }, "confidence": { "type": "number", "minimum": 0, "maximum": 1 } }, "required": ["source_id", "label", "locator", "confidence"], "additionalProperties": false } }, "confidence": { "type": "number", "minimum": 0, "maximum": 1 }, "placeholder": { "default": false, "type": "boolean" } }, "required": ["value", "citations", "confidence"], "additionalProperties": false }, "principles": { "minItems": 1, "maxItems": 5, "type": "array", "items": { "type": "object", "properties": { "value": { "type": "string", "minLength": 1 }, "citations": { "type": "array", "items": { "type": "object", "properties": { "source_id": { "type": "string", "minLength": 1 }, "document_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "label": { "type": "string", "minLength": 1 }, "locator": { "type": "string", "minLength": 1 }, "quote": { "type": "string", "minLength": 1 }, "confidence": { "type": "number", "minimum": 0, "maximum": 1 } }, "required": ["source_id", "label", "locator", "confidence"], "additionalProperties": false } }, "confidence": { "type": "number", "minimum": 0, "maximum": 1 }, "placeholder": { "default": false, "type": "boolean" } }, "required": ["value", "citations", "confidence"], "additionalProperties": false } }, "cycle_objectives": { "minItems": 1, "maxItems": 3, "type": "array", "items": { "type": "object", "properties": { "title": { "type": "object", "properties": { "value": { "type": "string", "minLength": 1 }, "citations": { "type": "array", "items": { "type": "object", "properties": { "source_id": { "type": "string", "minLength": 1 }, "document_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "label": { "type": "string", "minLength": 1 }, "locator": { "type": "string", "minLength": 1 }, "quote": { "type": "string", "minLength": 1 }, "confidence": { "type": "number", "minimum": 0, "maximum": 1 } }, "required": ["source_id", "label", "locator", "confidence"], "additionalProperties": false } }, "confidence": { "type": "number", "minimum": 0, "maximum": 1 }, "placeholder": { "default": false, "type": "boolean" } }, "required": ["value", "citations", "confidence"], "additionalProperties": false }, "definition_of_done": { "type": "object", "properties": { "value": { "type": "string", "minLength": 1 }, "citations": { "type": "array", "items": { "type": "object", "properties": { "source_id": { "type": "string", "minLength": 1 }, "document_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "label": { "type": "string", "minLength": 1 }, "locator": { "type": "string", "minLength": 1 }, "quote": { "type": "string", "minLength": 1 }, "confidence": { "type": "number", "minimum": 0, "maximum": 1 } }, "required": ["source_id", "label", "locator", "confidence"], "additionalProperties": false } }, "confidence": { "type": "number", "minimum": 0, "maximum": 1 }, "placeholder": { "default": false, "type": "boolean" } }, "required": ["value", "citations", "confidence"], "additionalProperties": false }, "horizon": { "type": "string", "enum": ["ten_year", "three_year", "one_year", "cycle"] } }, "required": ["title", "definition_of_done", "horizon"], "additionalProperties": false } }, "gaps": { "type": "array", "items": { "type": "object", "properties": { "id": { "type": "string", "minLength": 1 }, "field": { "type": "string", "minLength": 1 }, "question": { "type": "string", "minLength": 1 }, "severity": { "type": "string", "enum": ["required", "recommended"] }, "reason": { "type": "string", "minLength": 1 } }, "required": ["id", "field", "question", "severity", "reason"], "additionalProperties": false } }, "follow_up_tasks": { "type": "array", "items": { "type": "object", "properties": { "title": { "type": "string", "minLength": 1 }, "description": { "type": "string", "minLength": 1 }, "acceptance_criteria": { "minItems": 1, "type": "array", "items": { "type": "string", "minLength": 1 } }, "gap_id": { "type": "string", "minLength": 1 } }, "required": ["title", "description", "acceptance_criteria", "gap_id"], "additionalProperties": false } }, "source_ids": { "type": "array", "items": { "type": "string", "minLength": 1 } }, "horizon_goals": { "type": "object", "properties": { "three_year": { "type": "object", "properties": { "title": { "type": "object", "properties": { "value": { "type": "string", "minLength": 1 }, "citations": { "type": "array", "items": { "type": "object", "properties": { "source_id": { "type": "string", "minLength": 1 }, "document_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "label": { "type": "string", "minLength": 1 }, "locator": { "type": "string", "minLength": 1 }, "quote": { "type": "string", "minLength": 1 }, "confidence": { "type": "number", "minimum": 0, "maximum": 1 } }, "required": ["source_id", "label", "locator", "confidence"], "additionalProperties": false } }, "confidence": { "type": "number", "minimum": 0, "maximum": 1 }, "placeholder": { "default": false, "type": "boolean" } }, "required": ["value", "citations", "confidence"], "additionalProperties": false }, "definition_of_done": { "type": "object", "properties": { "value": { "type": "string", "minLength": 1 }, "citations": { "type": "array", "items": { "type": "object", "properties": { "source_id": { "type": "string", "minLength": 1 }, "document_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "label": { "type": "string", "minLength": 1 }, "locator": { "type": "string", "minLength": 1 }, "quote": { "type": "string", "minLength": 1 }, "confidence": { "type": "number", "minimum": 0, "maximum": 1 } }, "required": ["source_id", "label", "locator", "confidence"], "additionalProperties": false } }, "confidence": { "type": "number", "minimum": 0, "maximum": 1 }, "placeholder": { "default": false, "type": "boolean" } }, "required": ["value", "citations", "confidence"], "additionalProperties": false }, "horizon": { "type": "string", "enum": ["ten_year", "three_year", "one_year", "cycle"] } }, "required": ["title", "definition_of_done", "horizon"], "additionalProperties": false }, "one_year": { "type": "object", "properties": { "title": { "type": "object", "properties": { "value": { "type": "string", "minLength": 1 }, "citations": { "type": "array", "items": { "type": "object", "properties": { "source_id": { "type": "string", "minLength": 1 }, "document_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "label": { "type": "string", "minLength": 1 }, "locator": { "type": "string", "minLength": 1 }, "quote": { "type": "string", "minLength": 1 }, "confidence": { "type": "number", "minimum": 0, "maximum": 1 } }, "required": ["source_id", "label", "locator", "confidence"], "additionalProperties": false } }, "confidence": { "type": "number", "minimum": 0, "maximum": 1 }, "placeholder": { "default": false, "type": "boolean" } }, "required": ["value", "citations", "confidence"], "additionalProperties": false }, "definition_of_done": { "type": "object", "properties": { "value": { "type": "string", "minLength": 1 }, "citations": { "type": "array", "items": { "type": "object", "properties": { "source_id": { "type": "string", "minLength": 1 }, "document_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "label": { "type": "string", "minLength": 1 }, "locator": { "type": "string", "minLength": 1 }, "quote": { "type": "string", "minLength": 1 }, "confidence": { "type": "number", "minimum": 0, "maximum": 1 } }, "required": ["source_id", "label", "locator", "confidence"], "additionalProperties": false } }, "confidence": { "type": "number", "minimum": 0, "maximum": 1 }, "placeholder": { "default": false, "type": "boolean" } }, "required": ["value", "citations", "confidence"], "additionalProperties": false }, "horizon": { "type": "string", "enum": ["ten_year", "three_year", "one_year", "cycle"] } }, "required": ["title", "definition_of_done", "horizon"], "additionalProperties": false } }, "required": ["three_year", "one_year"], "additionalProperties": false } }, "required": ["schema_version", "purpose", "principles", "cycle_objectives", "gaps", "follow_up_tasks", "source_ids", "horizon_goals"], "additionalProperties": false }, { "type": "object", "properties": { "schema_version": { "type": "number", "const": 2 }, "purpose": { "type": "object", "properties": { "value": { "type": "string", "minLength": 1 }, "citations": { "type": "array", "items": { "type": "object", "properties": { "source_id": { "type": "string", "minLength": 1 }, "document_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "label": { "type": "string", "minLength": 1 }, "locator": { "type": "string", "minLength": 1 }, "quote": { "type": "string", "minLength": 1 }, "confidence": { "type": "number", "minimum": 0, "maximum": 1 } }, "required": ["source_id", "label", "locator", "confidence"], "additionalProperties": false } }, "confidence": { "type": "number", "minimum": 0, "maximum": 1 }, "placeholder": { "default": false, "type": "boolean" } }, "required": ["value", "citations", "confidence"], "additionalProperties": false }, "principles": { "minItems": 1, "maxItems": 5, "type": "array", "items": { "type": "object", "properties": { "value": { "type": "string", "minLength": 1 }, "citations": { "type": "array", "items": { "type": "object", "properties": { "source_id": { "type": "string", "minLength": 1 }, "document_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "label": { "type": "string", "minLength": 1 }, "locator": { "type": "string", "minLength": 1 }, "quote": { "type": "string", "minLength": 1 }, "confidence": { "type": "number", "minimum": 0, "maximum": 1 } }, "required": ["source_id", "label", "locator", "confidence"], "additionalProperties": false } }, "confidence": { "type": "number", "minimum": 0, "maximum": 1 }, "placeholder": { "default": false, "type": "boolean" } }, "required": ["value", "citations", "confidence"], "additionalProperties": false } }, "cycle_objectives": { "minItems": 1, "maxItems": 3, "type": "array", "items": { "type": "object", "properties": { "title": { "type": "object", "properties": { "value": { "type": "string", "minLength": 1 }, "citations": { "type": "array", "items": { "type": "object", "properties": { "source_id": { "type": "string", "minLength": 1 }, "document_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "label": { "type": "string", "minLength": 1 }, "locator": { "type": "string", "minLength": 1 }, "quote": { "type": "string", "minLength": 1 }, "confidence": { "type": "number", "minimum": 0, "maximum": 1 } }, "required": ["source_id", "label", "locator", "confidence"], "additionalProperties": false } }, "confidence": { "type": "number", "minimum": 0, "maximum": 1 }, "placeholder": { "default": false, "type": "boolean" } }, "required": ["value", "citations", "confidence"], "additionalProperties": false }, "definition_of_done": { "type": "object", "properties": { "value": { "type": "string", "minLength": 1 }, "citations": { "type": "array", "items": { "type": "object", "properties": { "source_id": { "type": "string", "minLength": 1 }, "document_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "label": { "type": "string", "minLength": 1 }, "locator": { "type": "string", "minLength": 1 }, "quote": { "type": "string", "minLength": 1 }, "confidence": { "type": "number", "minimum": 0, "maximum": 1 } }, "required": ["source_id", "label", "locator", "confidence"], "additionalProperties": false } }, "confidence": { "type": "number", "minimum": 0, "maximum": 1 }, "placeholder": { "default": false, "type": "boolean" } }, "required": ["value", "citations", "confidence"], "additionalProperties": false }, "horizon": { "type": "string", "enum": ["ten_year", "three_year", "one_year", "cycle"] } }, "required": ["title", "definition_of_done", "horizon"], "additionalProperties": false } }, "gaps": { "type": "array", "items": { "type": "object", "properties": { "id": { "type": "string", "minLength": 1 }, "field": { "type": "string", "minLength": 1 }, "question": { "type": "string", "minLength": 1 }, "severity": { "type": "string", "enum": ["required", "recommended"] }, "reason": { "type": "string", "minLength": 1 } }, "required": ["id", "field", "question", "severity", "reason"], "additionalProperties": false } }, "follow_up_tasks": { "type": "array", "items": { "type": "object", "properties": { "title": { "type": "string", "minLength": 1 }, "description": { "type": "string", "minLength": 1 }, "acceptance_criteria": { "minItems": 1, "type": "array", "items": { "type": "string", "minLength": 1 } }, "gap_id": { "type": "string", "minLength": 1 } }, "required": ["title", "description", "acceptance_criteria", "gap_id"], "additionalProperties": false } }, "source_ids": { "type": "array", "items": { "type": "string", "minLength": 1 } }, "horizon_goals": { "type": "object", "properties": { "ten_year": { "type": "object", "properties": { "title": { "type": "object", "properties": { "value": { "type": "string", "minLength": 1 }, "citations": { "type": "array", "items": { "type": "object", "properties": { "source_id": { "type": "string", "minLength": 1 }, "document_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "label": { "type": "string", "minLength": 1 }, "locator": { "type": "string", "minLength": 1 }, "quote": { "type": "string", "minLength": 1 }, "confidence": { "type": "number", "minimum": 0, "maximum": 1 } }, "required": ["source_id", "label", "locator", "confidence"], "additionalProperties": false } }, "confidence": { "type": "number", "minimum": 0, "maximum": 1 }, "placeholder": { "default": false, "type": "boolean" } }, "required": ["value", "citations", "confidence"], "additionalProperties": false }, "definition_of_done": { "type": "object", "properties": { "value": { "type": "string", "minLength": 1 }, "citations": { "type": "array", "items": { "type": "object", "properties": { "source_id": { "type": "string", "minLength": 1 }, "document_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "label": { "type": "string", "minLength": 1 }, "locator": { "type": "string", "minLength": 1 }, "quote": { "type": "string", "minLength": 1 }, "confidence": { "type": "number", "minimum": 0, "maximum": 1 } }, "required": ["source_id", "label", "locator", "confidence"], "additionalProperties": false } }, "confidence": { "type": "number", "minimum": 0, "maximum": 1 }, "placeholder": { "default": false, "type": "boolean" } }, "required": ["value", "citations", "confidence"], "additionalProperties": false }, "horizon": { "type": "string", "enum": ["ten_year", "three_year", "one_year", "cycle"] } }, "required": ["title", "definition_of_done", "horizon"], "additionalProperties": false }, "three_year": { "type": "object", "properties": { "title": { "type": "object", "properties": { "value": { "type": "string", "minLength": 1 }, "citations": { "type": "array", "items": { "type": "object", "properties": { "source_id": { "type": "string", "minLength": 1 }, "document_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "label": { "type": "string", "minLength": 1 }, "locator": { "type": "string", "minLength": 1 }, "quote": { "type": "string", "minLength": 1 }, "confidence": { "type": "number", "minimum": 0, "maximum": 1 } }, "required": ["source_id", "label", "locator", "confidence"], "additionalProperties": false } }, "confidence": { "type": "number", "minimum": 0, "maximum": 1 }, "placeholder": { "default": false, "type": "boolean" } }, "required": ["value", "citations", "confidence"], "additionalProperties": false }, "definition_of_done": { "type": "object", "properties": { "value": { "type": "string", "minLength": 1 }, "citations": { "type": "array", "items": { "type": "object", "properties": { "source_id": { "type": "string", "minLength": 1 }, "document_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "label": { "type": "string", "minLength": 1 }, "locator": { "type": "string", "minLength": 1 }, "quote": { "type": "string", "minLength": 1 }, "confidence": { "type": "number", "minimum": 0, "maximum": 1 } }, "required": ["source_id", "label", "locator", "confidence"], "additionalProperties": false } }, "confidence": { "type": "number", "minimum": 0, "maximum": 1 }, "placeholder": { "default": false, "type": "boolean" } }, "required": ["value", "citations", "confidence"], "additionalProperties": false }, "horizon": { "type": "string", "enum": ["ten_year", "three_year", "one_year", "cycle"] } }, "required": ["title", "definition_of_done", "horizon"], "additionalProperties": false }, "one_year": { "type": "object", "properties": { "title": { "type": "object", "properties": { "value": { "type": "string", "minLength": 1 }, "citations": { "type": "array", "items": { "type": "object", "properties": { "source_id": { "type": "string", "minLength": 1 }, "document_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "label": { "type": "string", "minLength": 1 }, "locator": { "type": "string", "minLength": 1 }, "quote": { "type": "string", "minLength": 1 }, "confidence": { "type": "number", "minimum": 0, "maximum": 1 } }, "required": ["source_id", "label", "locator", "confidence"], "additionalProperties": false } }, "confidence": { "type": "number", "minimum": 0, "maximum": 1 }, "placeholder": { "default": false, "type": "boolean" } }, "required": ["value", "citations", "confidence"], "additionalProperties": false }, "definition_of_done": { "type": "object", "properties": { "value": { "type": "string", "minLength": 1 }, "citations": { "type": "array", "items": { "type": "object", "properties": { "source_id": { "type": "string", "minLength": 1 }, "document_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "label": { "type": "string", "minLength": 1 }, "locator": { "type": "string", "minLength": 1 }, "quote": { "type": "string", "minLength": 1 }, "confidence": { "type": "number", "minimum": 0, "maximum": 1 } }, "required": ["source_id", "label", "locator", "confidence"], "additionalProperties": false } }, "confidence": { "type": "number", "minimum": 0, "maximum": 1 }, "placeholder": { "default": false, "type": "boolean" } }, "required": ["value", "citations", "confidence"], "additionalProperties": false }, "horizon": { "type": "string", "enum": ["ten_year", "three_year", "one_year", "cycle"] } }, "required": ["title", "definition_of_done", "horizon"], "additionalProperties": false } }, "required": ["three_year", "one_year"], "additionalProperties": false } }, "required": ["schema_version", "purpose", "principles", "cycle_objectives", "gaps", "follow_up_tasks", "source_ids", "horizon_goals"], "additionalProperties": false }] }, "cycle": { "type": "object", "properties": { "key": { "type": "string", "pattern": "^[a-z][a-z0-9-]{1,79}$" }, "name": { "type": "string", "minLength": 1, "maxLength": 160 }, "starts_on": { "type": "string", "pattern": "^\\d{4}-\\d{2}-\\d{2}$" }, "ends_on": { "type": "string", "pattern": "^\\d{4}-\\d{2}-\\d{2}$" }, "status": { "type": "string", "const": "active" } }, "required": ["key", "name", "starts_on", "ends_on", "status"], "additionalProperties": false }, "seats": { "minItems": 1, "maxItems": 100, "type": "array", "items": { "type": "object", "properties": { "seat_key": { "type": "string", "pattern": "^[a-z][a-z0-9-]{1,79}$" }, "name": { "type": "string" }, "seat_type": { "type": "string", "enum": ["human", "agent", "hybrid"] }, "parent": { "oneOf": [{ "type": "object", "properties": { "kind": { "type": "string", "const": "existing" }, "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" } }, "required": ["kind", "seat_id"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "type": "string", "const": "logical" }, "seat_key": { "type": "string", "pattern": "^[a-z][a-z0-9-]{1,79}$" } }, "required": ["kind", "seat_key"], "additionalProperties": false }] }, "purpose": { "type": "string", "minLength": 1, "maxLength": 2e3 }, "charter": { "type": "object", "properties": { "payload_version": { "type": "number", "const": 1 }, "purpose": { "type": "string", "minLength": 1 }, "accountabilities": { "minItems": 1, "type": "array", "items": { "type": "object", "properties": { "title": { "type": "string", "minLength": 1 }, "description": { "type": "string", "minLength": 1 } }, "required": ["title", "description"], "additionalProperties": false } }, "decision_authority": { "type": "object", "properties": { "autonomous": { "type": "array", "items": { "type": "object", "properties": { "action": { "type": "string", "minLength": 1 }, "condition": { "type": "string", "minLength": 1 }, "rationale": { "type": "string", "minLength": 1 }, "unanswered_boundary": { "default": false, "type": "boolean" } }, "required": ["action", "condition", "rationale"], "additionalProperties": false } }, "approval": { "type": "array", "items": { "type": "object", "properties": { "action": { "type": "string", "minLength": 1 }, "condition": { "type": "string", "minLength": 1 }, "rationale": { "type": "string", "minLength": 1 }, "unanswered_boundary": { "default": false, "type": "boolean" } }, "required": ["action", "condition", "rationale"], "additionalProperties": false } }, "escalate": { "minItems": 1, "type": "array", "items": { "type": "object", "properties": { "action": { "type": "string", "minLength": 1 }, "condition": { "type": "string", "minLength": 1 }, "rationale": { "type": "string", "minLength": 1 }, "unanswered_boundary": { "default": false, "type": "boolean" } }, "required": ["action", "condition", "rationale"], "additionalProperties": false } } }, "required": ["autonomous", "approval", "escalate"], "additionalProperties": false }, "escalation_rules": { "minItems": 1, "type": "array", "items": { "type": "string", "minLength": 1 } }, "measurables": { "minItems": 1, "type": "array", "items": { "type": "object", "properties": { "name": { "type": "string", "minLength": 1 }, "target": { "type": "string", "minLength": 1 }, "cadence": { "type": "string", "enum": ["daily", "weekly", "monthly", "quarterly"] }, "source": { "type": "string", "enum": ["human", "agent", "integration"] }, "signal": { "type": "object", "properties": { "unit": { "type": "string", "minLength": 1 }, "direction": { "type": "string", "enum": ["up_good", "down_good"] }, "target": { "type": "number" } }, "required": ["unit", "direction", "target"], "additionalProperties": false } }, "required": ["name", "target", "cadence", "source"], "additionalProperties": false } }, "permission_manifest": { "type": "array", "items": { "type": "object", "properties": { "tool": { "type": "string", "minLength": 1 }, "capability_id": { "type": "string", "minLength": 1 }, "integration_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "scope": { "type": "string", "minLength": 1 }, "granted": { "type": "boolean" }, "rationale": { "type": "string", "minLength": 1 }, "scope_tier": { "type": "string", "enum": ["read", "draft", "write_with_approval", "full"] }, "access_policy": { "type": "string", "enum": ["always_allow", "always_ask"] }, "args": { "type": "object", "properties": { "equals": { "type": "object", "propertyNames": { "type": "string" }, "additionalProperties": { "$ref": "#/definitions/__schema0" } } }, "additionalProperties": false } }, "required": ["tool", "scope", "granted", "rationale"], "additionalProperties": false } }, "budget": { "type": "object", "properties": { "monthly_usd": { "anyOf": [{ "type": "number", "minimum": 0 }, { "type": "null" }] }, "approval_required_over_usd": { "anyOf": [{ "type": "number", "minimum": 0 }, { "type": "null" }] }, "notes": { "type": "string", "minLength": 1 } }, "required": ["monthly_usd", "approval_required_over_usd", "notes"], "additionalProperties": false }, "unanswered_boundaries": { "type": "array", "items": { "type": "string", "minLength": 1 } }, "seat_type_recommendation": { "type": "object", "properties": { "recommendation": { "type": "string", "enum": ["human", "agent", "hybrid"] }, "rationale": { "type": "string", "minLength": 1 }, "confidence": { "type": "number", "minimum": 0, "maximum": 1 } }, "required": ["recommendation", "rationale", "confidence"], "additionalProperties": false } }, "required": ["payload_version", "purpose", "accountabilities", "decision_authority", "escalation_rules", "measurables", "permission_manifest", "budget"], "additionalProperties": false }, "human_staffing": { "oneOf": [{ "type": "object", "properties": { "kind": { "type": "string", "const": "owner" } }, "required": ["kind"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "type": "string", "const": "planned" }, "display_name": { "type": "string" }, "source_ref": { "type": "object", "properties": { "source_key": { "type": "string", "pattern": "^[a-z][a-z0-9-]{1,79}$" } }, "required": ["source_key"], "additionalProperties": false } }, "required": ["kind", "display_name"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "type": "string", "const": "vacant" } }, "required": ["kind"], "additionalProperties": false }] }, "agent": { "type": "object", "properties": { "display_name": { "type": "string" }, "steward": { "oneOf": [{ "type": "object", "properties": { "kind": { "type": "string", "const": "existing" }, "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" } }, "required": ["kind", "seat_id"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "type": "string", "const": "logical" }, "seat_key": { "type": "string", "pattern": "^[a-z][a-z0-9-]{1,79}$" } }, "required": ["kind", "seat_key"], "additionalProperties": false }] }, "lane": { "type": "string", "enum": ["cloud", "runner"] }, "model_config": { "type": "object", "properties": { "provider": { "type": "string", "enum": ["anthropic"] }, "model": { "type": "string", "minLength": 1, "maxLength": 120, "pattern": "^[^\\n\\r]+$" }, "effort": { "type": "string", "enum": ["low", "medium", "high", "xhigh", "max"] } }, "required": ["provider", "model"], "additionalProperties": false }, "skills": { "maxItems": 50, "type": "array", "items": { "type": "object", "properties": { "slug": { "type": "string", "pattern": "^[a-z0-9][a-z0-9-]{1,80}$" }, "skill_version_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "content_sha256": { "type": "string", "pattern": "^[a-f0-9]{64}$" } }, "required": ["slug", "skill_version_id", "content_sha256"], "additionalProperties": false } }, "schedule_cron": { "anyOf": [{ "type": "string", "minLength": 1, "maxLength": 120 }, { "type": "null" }] }, "schedule_timezone": { "type": "string", "minLength": 1, "maxLength": 100 } }, "required": ["display_name", "steward", "lane", "model_config", "skills", "schedule_cron", "schedule_timezone"], "additionalProperties": false }, "source_uses": { "maxItems": 100, "type": "array", "items": { "type": "object", "properties": { "source_key": { "type": "string", "pattern": "^[a-z][a-z0-9-]{1,79}$" } }, "required": ["source_key"], "additionalProperties": false } } }, "required": ["seat_key", "name", "seat_type", "charter", "human_staffing", "source_uses"], "additionalProperties": false }, "description": "The first seat (seats[0]) must be the plan's single parentless root Seat and adopts the already-provisioned root Seat \u2014 its name must match the provisioned root seat's name after whitespace/case normalization." }, "goals": { "maxItems": 200, "type": "array", "items": { "type": "object", "properties": { "key": { "type": "string", "pattern": "^[a-z][a-z0-9-]{1,79}$" }, "title": { "type": "string", "minLength": 1, "maxLength": 200 }, "definition": { "type": "string", "minLength": 1, "maxLength": 2e3 }, "kind": { "type": "string", "enum": ["company_objective", "seat_goal", "milestone"] }, "owner_seat_key": { "type": "string", "pattern": "^[a-z][a-z0-9-]{1,79}$" }, "parent_key": { "type": "string", "pattern": "^[a-z][a-z0-9-]{1,79}$" }, "source_compass_objective_index": { "type": "integer", "minimum": 0, "maximum": 2 }, "source_ref": { "type": "object", "properties": { "source_key": { "type": "string", "pattern": "^[a-z][a-z0-9-]{1,79}$" } }, "required": ["source_key"], "additionalProperties": false } }, "required": ["key", "title", "definition", "kind", "owner_seat_key"], "additionalProperties": false } }, "signals": { "maxItems": 250, "type": "array", "items": { "type": "object", "properties": { "key": { "type": "string", "pattern": "^[a-z][a-z0-9-]{1,79}$" }, "name": { "type": "string", "minLength": 1, "maxLength": 120 }, "owner_seat_key": { "type": "string", "pattern": "^[a-z][a-z0-9-]{1,79}$" }, "unit": { "type": "string", "minLength": 1, "maxLength": 40 }, "direction": { "type": "string", "enum": ["up_good", "down_good"] }, "cadence": { "type": "string", "enum": ["daily", "weekly", "monthly", "quarterly", "annual"] }, "source_ref": { "type": "object", "properties": { "source_key": { "type": "string", "pattern": "^[a-z][a-z0-9-]{1,79}$" } }, "required": ["source_key"], "additionalProperties": false } }, "required": ["key", "name", "owner_seat_key", "unit", "direction", "cadence"], "additionalProperties": false } }, "signal_readings": { "maxItems": 5e3, "type": "array", "items": { "type": "object", "properties": { "signal_key": { "type": "string", "pattern": "^[a-z][a-z0-9-]{1,79}$" }, "period_start": { "type": "string", "pattern": "^\\d{4}-\\d{2}-\\d{2}$" }, "value": { "type": "string", "minLength": 1, "maxLength": 100, "pattern": "^-?(?:0|[1-9]\\d*)(?:\\.\\d+)?$" }, "source_ref": { "type": "object", "properties": { "source_key": { "type": "string", "pattern": "^[a-z][a-z0-9-]{1,79}$" } }, "required": ["source_key"], "additionalProperties": false } }, "required": ["signal_key", "period_start", "value"], "additionalProperties": false } }, "frictions": { "maxItems": 250, "type": "array", "items": { "type": "object", "properties": { "key": { "type": "string", "pattern": "^[a-z][a-z0-9-]{1,79}$" }, "title": { "type": "string", "minLength": 1, "maxLength": 200 }, "description": { "type": "string", "minLength": 1, "maxLength": 2e3 }, "owner_seat_key": { "type": "string", "pattern": "^[a-z][a-z0-9-]{1,79}$" }, "raised_by_seat_key": { "type": "string", "pattern": "^[a-z][a-z0-9-]{1,79}$" }, "source_ref": { "type": "object", "properties": { "source_key": { "type": "string", "pattern": "^[a-z][a-z0-9-]{1,79}$" } }, "required": ["source_key"], "additionalProperties": false } }, "required": ["key", "title", "description", "owner_seat_key"], "additionalProperties": false } }, "tasks": { "maxItems": 500, "type": "array", "items": { "type": "object", "properties": { "key": { "type": "string", "pattern": "^[a-z][a-z0-9-]{1,79}$" }, "title": { "type": "string", "minLength": 1, "maxLength": 200 }, "description": { "type": "string", "minLength": 1, "maxLength": 2e3 }, "owner_seat_key": { "type": "string", "pattern": "^[a-z][a-z0-9-]{1,79}$" }, "goal_key": { "type": "string", "pattern": "^[a-z][a-z0-9-]{1,79}$" }, "friction_key": { "type": "string", "pattern": "^[a-z][a-z0-9-]{1,79}$" }, "due_on": { "type": "string", "pattern": "^\\d{4}-\\d{2}-\\d{2}$" }, "initial_status": { "type": "string", "const": "in_progress" }, "source_ref": { "type": "object", "properties": { "source_key": { "type": "string", "pattern": "^[a-z][a-z0-9-]{1,79}$" } }, "required": ["source_key"], "additionalProperties": false } }, "required": ["key", "title", "description", "owner_seat_key", "initial_status"], "additionalProperties": false } }, "sync_brief_scope": { "type": "string", "enum": ["company_wide", "per_cluster"] }, "managed_inference_hard_cap_usd": { "anyOf": [{ "type": "string", "maxLength": 11, "pattern": "^(?:0|[1-9]\\d{0,7})\\.\\d{2}$" }, { "type": "null" }] } }, "required": ["schema_version", "idempotency_key", "company_name", "sources", "reconciliation", "compass", "cycle", "seats", "goals", "signals", "signal_readings", "frictions", "tasks", "sync_brief_scope"], "additionalProperties": false, "definitions": { "__schema0": { "anyOf": [{ "type": "string" }, { "type": "number" }, { "type": "boolean" }, { "type": "null" }, { "type": "array", "items": { "$ref": "#/definitions/__schema0" } }, { "type": "object", "propertyNames": { "type": "string" }, "additionalProperties": { "$ref": "#/definitions/__schema0" } }] } } }, "output_schema": { "type": "object", "properties": { "application_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "root_foundation_bound": { "type": "boolean", "const": true }, "receipt": { "type": "object", "properties": { "receipt_revision": { "type": "integer", "exclusiveMinimum": 0, "maximum": 9007199254740991 }, "created": { "type": "object", "propertyNames": { "type": "string", "enum": ["source", "seat", "charter", "decision", "planned_person", "goal", "signal", "reading", "friction", "task", "schedule", "agent", "sync_brief", "onboarding"] }, "additionalProperties": { "maxItems": 5e3, "type": "array", "items": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" } } }, "skipped": { "maxItems": 500, "type": "array", "items": { "type": "object", "properties": { "family": { "type": "string", "enum": ["source", "seat", "charter", "decision", "planned_person", "goal", "signal", "reading", "friction", "task", "schedule", "agent", "sync_brief", "onboarding"] }, "reason": { "type": "string", "enum": ["context_only", "invalid", "duplicate", "unsupported"] }, "count": { "type": "integer", "exclusiveMinimum": 0, "maximum": 9007199254740991 } }, "required": ["family", "reason", "count"], "additionalProperties": false } }, "warnings": { "maxItems": 500, "type": "array", "items": { "type": "object", "properties": { "code": { "type": "string", "pattern": "^[a-z][a-z0-9_]{0,63}$" }, "count": { "type": "integer", "exclusiveMinimum": 0, "maximum": 9007199254740991 } }, "required": ["code", "count"], "additionalProperties": false } }, "counts": { "type": "object", "propertyNames": { "type": "string", "pattern": "^[a-z][a-z0-9_]{0,63}$" }, "additionalProperties": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 } }, "digests": { "type": "object", "propertyNames": { "type": "string", "pattern": "^[a-z][a-z0-9_]{0,63}$" }, "additionalProperties": { "type": "string", "pattern": "^sha256:[0-9a-f]{64}$" } }, "agent_bindings": { "maxItems": 100, "type": "array", "items": { "type": "object", "properties": { "agent_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "configuration_digest": { "type": "string", "pattern": "^sha256:[0-9a-f]{64}$" } }, "required": ["agent_id", "seat_id", "configuration_digest"], "additionalProperties": false } }, "receipt_digest": { "type": "string", "pattern": "^sha256:[0-9a-f]{64}$" } }, "required": ["receipt_revision", "created", "skipped", "warnings", "counts", "digests", "receipt_digest"], "additionalProperties": false } }, "required": ["application_id", "root_foundation_bound", "receipt"], "additionalProperties": false }, "help": "Submit the complete declarative setup plan once. It stages one owner confirmation and applies the approved plan atomically without invites, credentials, external messages, or go-live.", "guide_slugs": ["rost-implementation-method", "mcp-and-cli-guide", "agent-reference-map"], "stages": ["company_setup", "graph_design", "charter_design", "staffing"], "related_command_ids": ["agent_grant_intervention.decide", "agent.activation_sign", "agent.go_live", "agent.run_dry_run", "agent.trust.create", "agent.trust.expire", "agent.trust.revoke", "agent.trust.supersede", "cascade.import", "charter.approve", "charter.draft", "charter.draft_all", "charter.sign_manifest", "charter.update_draft", "compass.answer_gap", "compass.approve_version", "compass.draft", "compass.get_current", "compass.list_gaps", "compass.reject_draft", "compass.set", "compass.update_draft", "confirmation.activation_set.list", "confirmation.approve", "confirmation.dismiss", "confirmation.dismiss_stale", "confirmation.list", "confirmation.reject", "confirmation.remint", "credential.ingress", "friction.file_issue", "friction.list", "friction.resolve", "goal.reassign_owner", "goal.reparent", "mcp_token.create", "onboarding.activate", "onboarding.advance_step", "onboarding.attach_reference", "onboarding.create_invite", "onboarding.finish", "onboarding.rehearse", "onboarding.source_ingest", "onboarding.status", "onboarding.upload_context", "seat.create", "seat.set_type", "signal.bind", "signal.confirm_reading", "signal.draft_first_readings", "signal.report", "staffing.assign_agent_dry_run", "staffing.assign_user", "sync.brief.compile", "sync.brief.get", "sync.item.assign", "sync.run.complete", "sync.run.start", "task.confirm_proposal", "task.decline_proposal"] },
       { "id": "onboarding.source_ingest", "title": "Ingest onboarding source", "description": "Retain one bounded setup source under the exact tenant and implementation run.", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Source ingestion is bootstrap-only and never inherits Trusted standing execution." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "source_key": { "type": "string", "pattern": "^[a-z][a-z0-9-]{1,79}$" }, "kind": { "type": "string", "enum": ["org_chart", "signal_export", "goal_export", "friction_export", "meeting_export", "other"] }, "title": { "type": "string" }, "content_base64": { "type": "string", "minLength": 1, "maxLength": 6666671 } }, "required": ["source_key", "kind", "title", "content_base64"], "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "source_upload_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "descriptor": { "type": "object", "properties": { "kind": { "type": "string", "enum": ["org_chart", "signal_export", "goal_export", "friction_export", "meeting_export", "other"] }, "title": { "type": "string", "minLength": 1, "maxLength": 200 }, "sha256": { "type": "string", "pattern": "^[0-9a-f]{64}$" }, "byte_count": { "type": "integer", "exclusiveMinimum": 0, "maximum": 5e6 }, "family_manifest": { "minItems": 1, "maxItems": 4, "type": "array", "items": { "type": "object", "properties": { "family": { "type": "string", "enum": ["source", "seat", "planned_person", "goal", "signal", "reading", "friction", "task", "agent"] }, "input_count": { "type": "integer", "exclusiveMinimum": 0, "maximum": 9007199254740991 }, "normalized_identity_digest": { "type": "string", "pattern": "^[0-9a-f]{64}$" } }, "required": ["family", "input_count", "normalized_identity_digest"], "additionalProperties": false } } }, "required": ["kind", "title", "sha256", "byte_count", "family_manifest"], "additionalProperties": false }, "source_ref": { "type": "object", "properties": { "source_key": { "type": "string", "pattern": "^[a-z][a-z0-9-]{1,79}$" }, "source_upload_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "title": { "type": "string" }, "kind": { "type": "string", "enum": ["org_chart", "signal_export", "goal_export", "friction_export", "meeting_export", "other"] }, "sha256": { "type": "string", "pattern": "^[a-f0-9]{64}$" }, "row_ref": { "type": "string" } }, "required": ["source_key", "source_upload_id", "title", "kind", "sha256"], "additionalProperties": false } }, "required": ["source_upload_id", "descriptor", "source_ref"], "additionalProperties": false }, "help": "Ingest one bounded CSV source into encrypted tenant/run-bound retained storage. The server computes its digest and canonical family manifest; paths, URLs, and client digests are not accepted.", "guide_slugs": ["rost-implementation-method", "mcp-and-cli-guide"], "stages": ["company_setup"], "related_command_ids": ["agent.go_live", "agent.run_dry_run", "cascade.import", "charter.approve", "charter.draft", "charter.draft_all", "charter.sign_manifest", "charter.update_draft", "compass.answer_gap", "compass.approve_version", "compass.draft", "compass.get_current", "compass.list_gaps", "compass.reject_draft", "compass.set", "compass.update_draft", "confirmation.activation_set.list", "confirmation.approve", "credential.ingress", "friction.file_issue", "friction.list", "friction.resolve", "onboarding.activate", "onboarding.advance_step", "onboarding.attach_reference", "onboarding.create_invite", "onboarding.finish", "onboarding.rehearse", "onboarding.setup", "onboarding.status", "onboarding.upload_context", "seat.create", "seat.set_type", "signal.bind", "signal.confirm_reading", "signal.draft_first_readings", "signal.report", "staffing.assign_agent_dry_run", "staffing.assign_user", "sync.brief.compile", "sync.brief.get", "sync.item.assign", "sync.run.complete", "sync.run.start"] },
-      { "id": "onboarding.status", "title": "Onboard status", "description": "Return current onboarding progress, graph summary, and the next recommended actions.", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": {}, "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "completed_steps": { "type": "array", "items": { "type": "string", "minLength": 1 } }, "missing_requirements": { "type": "array", "items": { "type": "string", "minLength": 1 } }, "graph_summary": { "type": "object", "properties": { "seat_count": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "active_seat_count": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "agent_seat_count": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 } }, "required": ["seat_count", "active_seat_count", "agent_seat_count"], "additionalProperties": false }, "agent_summary": { "type": "object", "properties": { "draft_setup": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "dry_run": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "live": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 } }, "required": ["draft_setup", "dry_run", "live"], "additionalProperties": false }, "onboarded": { "type": "boolean" }, "completed_at": { "anyOf": [{ "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, { "type": "null" }] }, "next_recommended_actions": { "type": "array", "items": { "type": "string", "minLength": 1 } }, "path_choice": { "anyOf": [{ "type": "string", "enum": ["guided", "agent_led"] }, { "type": "null" }] } }, "required": ["completed_steps", "missing_requirements", "graph_summary", "agent_summary", "onboarded", "completed_at", "next_recommended_actions", "path_choice"], "additionalProperties": false }, "help": "Start by checking onboarding status, then use the implementation method guide to choose the next setup step.", "guide_slugs": ["rost-implementation-method", "agent-reference-map"], "stages": ["company_setup"], "related_command_ids": ["agent_setup.get", "agent_setup.start", "agent_setup.update", "agent_template.list", "agent.configure_tools", "agent.create_custom", "agent.create_from_template", "agent.fleet_digest", "agent.get_run", "agent.go_live", "agent.list_fleet", "agent.list_runs", "agent.list_tool_calls", "agent.run_dry_run", "agent.status", "agent.update_schedule", "aicos.brain_settings.get", "aicos.brain_settings.update", "cascade.import", "charter.approve", "charter.draft", "charter.draft_all", "charter.set", "charter.sign_manifest", "charter.update_draft", "compass.answer_gap", "compass.approve_version", "compass.draft", "compass.get_current", "compass.list_gaps", "compass.reject_draft", "compass.set", "compass.update_draft", "confirmation.activation_set.list", "confirmation.approve", "confirmation.reject", "credential.ingress", "deliverable.accept", "deliverable.attach", "deliverable.create", "deliverable.get", "deliverable.list", "deliverable.reject", "error_log.list", "error_log.resolve", "error_log.supersede", "escalation.get", "escalation.list", "escalation.reject", "escalation.resolve", "friction.file_issue", "friction.list", "friction.resolve", "graph.get", "implementation_access.abandon", "implementation_access.complete", "implementation_access.status", "integration.list", "integration.readiness", "integration.status", "integration.test", "mcp_token.create", "mcp_token.list", "mcp_token.revoke", "onboarding.activate", "onboarding.advance_step", "onboarding.attach_reference", "onboarding.create_invite", "onboarding.finish", "onboarding.rehearse", "onboarding.resume", "onboarding.setup", "onboarding.source_ingest", "onboarding.upload_context", "runner.diagnose", "runner.list", "runner.repair", "seat.create", "seat.create_complete", "seat.get", "seat.set_type", "signal.bind", "signal.confirm_reading", "signal.draft_first_readings", "signal.list", "signal.report", "skill.assign_to_seat", "skill.assigned.list", "skill.catalog", "skill.check_dependencies", "skill.create", "skill.enable_catalog", "skill.file.get", "skill.get", "skill.import_github", "skill.import_upload", "skill.install_local", "skill.list", "skill.publish", "skill.revoke_from_seat", "skill.sync_local", "skill.update_draft", "staffing.assign", "staffing.assign_agent_dry_run", "staffing.assign_user", "sync.brief.compile", "sync.brief.get", "sync.item.assign", "sync.run.complete", "sync.run.start", "system.health", "tenant.anthropic_key.disable", "tenant.model_gateway_policy.update", "tenant.rename", "tool_grants.tenant.update", "usage.report", "usage.snapshot", "user.tenants", "user.use_tenant", "user.whoami"] },
+      { "id": "onboarding.status", "title": "Onboard status", "description": "Return current onboarding progress, graph summary, and the next recommended actions.", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": {}, "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "completed_steps": { "type": "array", "items": { "type": "string", "minLength": 1 } }, "missing_requirements": { "type": "array", "items": { "type": "string", "minLength": 1 } }, "graph_summary": { "type": "object", "properties": { "seat_count": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "active_seat_count": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "agent_seat_count": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 } }, "required": ["seat_count", "active_seat_count", "agent_seat_count"], "additionalProperties": false }, "agent_summary": { "type": "object", "properties": { "draft_setup": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "dry_run": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "live": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 } }, "required": ["draft_setup", "dry_run", "live"], "additionalProperties": false }, "onboarded": { "type": "boolean" }, "completed_at": { "anyOf": [{ "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, { "type": "null" }] }, "next_recommended_actions": { "type": "array", "items": { "type": "string", "minLength": 1 } }, "path_choice": { "anyOf": [{ "type": "string", "enum": ["guided", "agent_led"] }, { "type": "null" }] } }, "required": ["completed_steps", "missing_requirements", "graph_summary", "agent_summary", "onboarded", "completed_at", "next_recommended_actions", "path_choice"], "additionalProperties": false }, "help": "Start by checking onboarding status, then use the implementation method guide to choose the next setup step.", "guide_slugs": ["rost-implementation-method", "agent-reference-map"], "stages": ["company_setup"], "related_command_ids": ["agent_setup.get", "agent_setup.start", "agent_setup.update", "agent_template.list", "agent.configure_tools", "agent.create_custom", "agent.create_from_template", "agent.fleet_digest", "agent.get_run", "agent.go_live", "agent.list_fleet", "agent.list_runs", "agent.list_tool_calls", "agent.run_dry_run", "agent.status", "agent.update_schedule", "aicos.brain_settings.get", "aicos.brain_settings.update", "cascade.import", "charter.approve", "charter.backfill_stock_evidence", "charter.draft", "charter.draft_all", "charter.set", "charter.sign_manifest", "charter.update_draft", "compass.answer_gap", "compass.approve_version", "compass.draft", "compass.get_current", "compass.list_gaps", "compass.reject_draft", "compass.set", "compass.update_draft", "confirmation.activation_set.list", "confirmation.approve", "confirmation.reject", "credential.ingress", "deliverable.accept", "deliverable.attach", "deliverable.create", "deliverable.get", "deliverable.list", "deliverable.reject", "error_log.list", "error_log.resolve", "error_log.supersede", "escalation.get", "escalation.list", "escalation.reject", "escalation.resolve", "friction.file_issue", "friction.list", "friction.resolve", "graph.get", "implementation_access.abandon", "implementation_access.complete", "implementation_access.status", "integration.list", "integration.readiness", "integration.status", "integration.test", "mcp_token.create", "mcp_token.list", "mcp_token.revoke", "onboarding.activate", "onboarding.advance_step", "onboarding.attach_reference", "onboarding.create_invite", "onboarding.finish", "onboarding.rehearse", "onboarding.resume", "onboarding.setup", "onboarding.source_ingest", "onboarding.upload_context", "runner.diagnose", "runner.list", "runner.repair", "seat.create", "seat.create_complete", "seat.get", "seat.set_type", "signal.bind", "signal.confirm_reading", "signal.draft_first_readings", "signal.list", "signal.report", "skill.assign_to_seat", "skill.assigned.list", "skill.catalog", "skill.check_dependencies", "skill.create", "skill.enable_catalog", "skill.file.get", "skill.get", "skill.import_github", "skill.import_upload", "skill.install_local", "skill.list", "skill.publish", "skill.revoke_from_seat", "skill.sync_local", "skill.update_draft", "staffing.assign", "staffing.assign_agent_dry_run", "staffing.assign_user", "sync.brief.compile", "sync.brief.get", "sync.item.assign", "sync.run.complete", "sync.run.start", "system.health", "tenant.anthropic_key.disable", "tenant.model_gateway_policy.update", "tenant.rename", "tool_grants.tenant.update", "usage.report", "usage.snapshot", "user.tenants", "user.use_tenant", "user.whoami"] },
       { "id": "onboarding.upload_context", "title": "Upload org context", "description": "Compatibility alias for onboarding.attach_reference: attach a company reference document (text/markdown) that Compass and Charters can cite. Reference-only \u2014 it does not build a Compass.", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "text": { "type": "string", "minLength": 1 }, "filename": { "default": "mcp-org-context.txt", "type": "string", "minLength": 1 }, "mime_type": { "default": "text/plain", "type": "string", "enum": ["text/plain", "text/markdown", "text/csv"] }, "title": { "type": "string", "minLength": 1, "maxLength": 200 }, "kind": { "type": "string", "enum": ["plan", "financial", "org_chart", "process"] }, "source": { "type": "string", "minLength": 1, "maxLength": 500 } }, "required": ["text"], "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "document_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "storage_ref": { "type": "string", "minLength": 1 }, "kind": { "type": "string", "enum": ["org_chart", "role_doc", "plan", "financial", "other"] }, "title": { "anyOf": [{ "type": "string", "minLength": 1 }, { "type": "null" }] } }, "required": ["document_id", "storage_ref", "kind", "title"], "additionalProperties": false }, "example": { "text": "# Company handbook\n\nWe build precision components for the aerospace supply chain.", "filename": "handbook.md", "mime_type": "text/markdown", "title": "Company handbook", "kind": "plan", "source": "handbook/overview.md" }, "help": "Compatibility alias for onboarding.attach_reference: attach a company reference document so Compass and Charters can cite it. It does not build a Compass.", "guide_slugs": ["compass-authoring-guide", "rost-implementation-method", "responsibility-graph-playbook"], "stages": ["company_setup", "graph_design"], "related_command_ids": ["agent_setup.get", "agent_setup.start", "agent_setup.update", "agent_template.list", "agent.configure_tools", "agent.create_custom", "agent.create_from_template", "agent.fleet_digest", "agent.get_run", "agent.go_live", "agent.list_fleet", "agent.list_runs", "agent.list_tool_calls", "agent.run_dry_run", "agent.status", "cascade.import", "cascade.import_okrs", "charter.approve", "charter.draft", "charter.draft_all", "charter.sign_manifest", "charter.update_draft", "compass.answer_gap", "compass.approve_version", "compass.draft", "compass.get_current", "compass.import", "compass.list_gaps", "compass.reject_draft", "compass.set", "compass.update_draft", "confirmation.activation_set.list", "confirmation.approve", "confirmation.reject", "credential.ingress", "deliverable.accept", "deliverable.attach", "deliverable.create", "deliverable.get", "deliverable.list", "deliverable.reject", "error_log.list", "error_log.resolve", "error_log.supersede", "escalation.get", "escalation.list", "escalation.reject", "escalation.resolve", "friction.file_issue", "friction.import", "friction.list", "friction.resolve", "implementation_access.abandon", "implementation_access.complete", "implementation_access.status", "integration.list", "integration.readiness", "integration.status", "integration.test", "mcp_token.create", "mcp_token.list", "mcp_token.revoke", "onboarding.activate", "onboarding.advance_step", "onboarding.attach_reference", "onboarding.create_invite", "onboarding.finish", "onboarding.rehearse", "onboarding.resume", "onboarding.setup", "onboarding.source_ingest", "onboarding.status", "runner.diagnose", "runner.repair", "seat.create", "seat.create_complete", "seat.set_type", "signal.bind", "signal.confirm_reading", "signal.draft_first_readings", "signal.import", "signal.report", "skill.assign_to_seat", "skill.assigned.list", "skill.catalog", "skill.check_dependencies", "skill.create", "skill.enable_catalog", "skill.file.get", "skill.get", "skill.import_github", "skill.import_upload", "skill.install_local", "skill.list", "skill.publish", "skill.revoke_from_seat", "skill.sync_local", "skill.update_draft", "staffing.assign", "staffing.assign_agent_dry_run", "staffing.assign_user", "sync.brief.compile", "sync.brief.get", "sync.item.assign", "sync.run.complete", "sync.run.start", "system.health", "task.import", "tenant.anthropic_key.disable", "tenant.rename", "tool_grants.tenant.update", "usage.report", "usage.snapshot", "user.tenants", "user.use_tenant", "user.whoami"] },
       { "id": "runner.diagnose", "title": "Diagnose runner", "description": "Returns a runner's health, capabilities, and repair guidance without exposing secrets.", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "runner_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" } }, "required": ["runner_id"], "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "name": { "type": "string" }, "platform": { "type": "string" }, "health": { "type": "string", "enum": ["online", "stale", "offline", "revoked", "unpaired"] }, "capabilities": { "type": "object", "properties": { "claude": { "type": "boolean" }, "codex": { "type": "boolean" } }, "required": ["claude", "codex"], "additionalProperties": false }, "last_heartbeat_at": { "anyOf": [{ "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, { "type": "null" }] }, "paired_at": { "anyOf": [{ "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, { "type": "null" }] }, "revocation_state": { "type": "string", "enum": ["active", "revoked", "unpaired"] }, "claimability": { "type": "object", "properties": { "claimable": { "type": "boolean" }, "build_claimable": { "type": "boolean" }, "merge_claimable": { "type": "boolean" }, "checks": { "type": "array", "items": { "type": "object", "properties": { "key": { "type": "string" }, "actual": { "anyOf": [{ "type": "string" }, { "type": "number" }, { "type": "boolean" }, { "type": "null" }] }, "required": { "anyOf": [{ "type": "string" }, { "type": "number" }, { "type": "boolean" }, { "type": "null" }] }, "passed": { "type": "boolean" }, "remediation": { "type": "string" } }, "required": ["key", "actual", "required", "passed", "remediation"], "additionalProperties": false } }, "hold_reasons": { "type": "array", "items": { "type": "string", "enum": ["dependency", "serial", "evidence", "human", "runner_capability", "runner_version", "runner_sandbox", "capacity", "schedule", "paused", "policy", "unknown"] } }, "remediation": { "type": "string" } }, "required": ["claimable", "build_claimable", "merge_claimable", "checks", "hold_reasons", "remediation"], "additionalProperties": false }, "repair_guidance": { "type": "array", "items": { "type": "object", "properties": { "action": { "type": "string" }, "command": { "type": "string" }, "detail": { "type": "string" } }, "required": ["action", "command", "detail"], "additionalProperties": false } } }, "required": ["id", "name", "platform", "health", "capabilities", "last_heartbeat_at", "paired_at", "revocation_state", "claimability", "repair_guidance"], "additionalProperties": false }, "help": "Inspect a runner's health, claimability checks, and repair guidance without exposing secrets.", "guide_slugs": ["runner-guide", "troubleshooting-guide"], "stages": ["operating_rhythm"], "related_command_ids": ["agent_setup.get", "agent_setup.start", "agent_setup.update", "agent_template.list", "agent.configure_tools", "agent.create_custom", "agent.create_from_template", "agent.fleet_digest", "agent.get_run", "agent.go_live", "agent.list_fleet", "agent.list_runs", "agent.list_tool_calls", "agent.run_dry_run", "agent.status", "charter.approve", "charter.draft", "compass.set", "confirmation.approve", "confirmation.reject", "deliverable.accept", "deliverable.attach", "deliverable.create", "deliverable.get", "deliverable.list", "deliverable.reject", "error_log.list", "error_log.resolve", "error_log.supersede", "escalation.get", "escalation.list", "escalation.reject", "escalation.resolve", "implementation_access.abandon", "implementation_access.complete", "implementation_access.status", "integration.list", "integration.readiness", "integration.status", "integration.test", "mcp_token.create", "mcp_token.list", "mcp_token.revoke", "onboarding.attach_reference", "onboarding.rehearse", "onboarding.resume", "onboarding.status", "onboarding.upload_context", "runner.list", "runner.pairing.start", "runner.repair", "runner.revoke", "runner.status", "seat.create", "seat.create_complete", "skill.assign_to_seat", "skill.assigned.list", "skill.catalog", "skill.check_dependencies", "skill.create", "skill.enable_catalog", "skill.file.get", "skill.get", "skill.import_github", "skill.import_upload", "skill.install_local", "skill.list", "skill.publish", "skill.revoke_from_seat", "skill.sync_local", "skill.update_draft", "staffing.assign", "system.health", "tenant.anthropic_key.disable", "tenant.rename", "tool_grants.tenant.update", "usage.report", "usage.snapshot", "user.tenants", "user.use_tenant", "user.whoami", "work_order.cancel", "work_order.enqueue", "work_order.list"] },
-      { "id": "runner.list", "title": "List runners", "description": "List local runners registered to the tenant with online/offline/revoked state.", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "include_revoked": { "type": "boolean" } }, "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "runners": { "type": "array", "items": { "type": "object", "properties": { "id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "name": { "type": "string" }, "platform": { "type": "string" }, "health": { "type": "string", "enum": ["online", "stale", "offline", "revoked", "unpaired"] }, "capabilities": { "type": "object", "properties": { "claude": { "type": "boolean" }, "codex": { "type": "boolean" } }, "required": ["claude", "codex"], "additionalProperties": false }, "cli_version": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "posture": { "type": "object", "properties": { "sandbox": { "type": "string", "enum": ["guard", "strict", "off", "none", "unknown"] }, "network": { "type": "string", "enum": ["allow", "deny", "unknown"] }, "capability_set": { "type": "array", "items": { "type": "string" } } }, "required": ["sandbox", "network", "capability_set"], "additionalProperties": false }, "execution": { "type": "object", "properties": { "state": { "type": "string", "enum": ["ready", "processing", "idle_unproven", "queued_unclaimed", "model_account_exhausted", "missing_runtime", "not_connected", "revoked", "unpaired"] }, "capable": { "type": "boolean" }, "execute_ready": { "type": "boolean" }, "detail": { "type": "string" }, "due_queued_work_orders": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "claimed_work_orders": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "running_work_orders": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "recent_completed_at": { "anyOf": [{ "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, { "type": "null" }] }, "recent_failed_at": { "anyOf": [{ "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, { "type": "null" }] } }, "required": ["state", "capable", "execute_ready", "detail", "due_queued_work_orders", "claimed_work_orders", "running_work_orders", "recent_completed_at", "recent_failed_at"], "additionalProperties": false }, "capacity": { "type": "object", "properties": { "account_alias": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "state": { "type": "string", "enum": ["available", "near_cap", "exhausted", "unknown"] }, "raw_state": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "rate_limited_until": { "anyOf": [{ "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, { "type": "null" }] }, "has_observation": { "type": "boolean" }, "freshness": { "type": "string", "enum": ["fresh", "stale"] } }, "required": ["account_alias", "state", "raw_state", "rate_limited_until", "has_observation", "freshness"], "additionalProperties": false }, "paired_at": { "anyOf": [{ "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, { "type": "null" }] }, "last_heartbeat_at": { "anyOf": [{ "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, { "type": "null" }] }, "revoked_at": { "anyOf": [{ "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, { "type": "null" }] }, "created_at": { "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" } }, "required": ["id", "name", "platform", "health", "capabilities", "cli_version", "posture", "execution", "capacity", "paired_at", "last_heartbeat_at", "revoked_at", "created_at"], "additionalProperties": false } } }, "required": ["runners"], "additionalProperties": false }, "help": "List local runners and their online/offline/revoked state before queueing runner work.", "guide_slugs": ["runner-guide"], "stages": ["operating_rhythm"], "related_command_ids": ["agent.configure_tools", "agent.create_custom", "agent.go_live", "agent.run_dry_run", "agent.update_schedule", "aicos.brain_settings.get", "aicos.brain_settings.update", "charter.set", "charter.sign_manifest", "confirmation.approve", "graph.get", "mcp_token.create", "mcp_token.list", "mcp_token.revoke", "onboarding.status", "runner.diagnose", "runner.pairing.start", "runner.repair", "runner.revoke", "runner.status", "seat.get", "skill.assign_to_seat", "tenant.model_gateway_policy.update", "work_order.cancel", "work_order.enqueue", "work_order.list"] },
+      { "id": "runner.list", "title": "List runners", "description": "List local runners registered to the tenant with online/offline/revoked state.", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "include_revoked": { "type": "boolean" } }, "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "runners": { "type": "array", "items": { "type": "object", "properties": { "id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "name": { "type": "string" }, "platform": { "type": "string" }, "health": { "type": "string", "enum": ["online", "stale", "offline", "revoked", "unpaired"] }, "capabilities": { "type": "object", "properties": { "claude": { "type": "boolean" }, "codex": { "type": "boolean" } }, "required": ["claude", "codex"], "additionalProperties": false }, "cli_version": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "posture": { "type": "object", "properties": { "sandbox": { "type": "string", "enum": ["guard", "strict", "off", "none", "unknown"] }, "network": { "type": "string", "enum": ["allow", "deny", "unknown"] }, "capability_set": { "type": "array", "items": { "type": "string" } } }, "required": ["sandbox", "network", "capability_set"], "additionalProperties": false }, "execution": { "type": "object", "properties": { "state": { "type": "string", "enum": ["ready", "processing", "idle_unproven", "queued_unclaimed", "model_account_exhausted", "missing_runtime", "not_connected", "revoked", "unpaired"] }, "capable": { "type": "boolean" }, "execute_ready": { "type": "boolean" }, "detail": { "type": "string" }, "due_queued_work_orders": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "claimed_work_orders": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "running_work_orders": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "recent_completed_at": { "anyOf": [{ "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, { "type": "null" }] }, "recent_failed_at": { "anyOf": [{ "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, { "type": "null" }] } }, "required": ["state", "capable", "execute_ready", "detail", "due_queued_work_orders", "claimed_work_orders", "running_work_orders", "recent_completed_at", "recent_failed_at"], "additionalProperties": false }, "capacity": { "type": "object", "properties": { "account_alias": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "state": { "type": "string", "enum": ["available", "near_cap", "exhausted", "unknown"] }, "raw_state": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "rate_limited_until": { "anyOf": [{ "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, { "type": "null" }] }, "has_observation": { "type": "boolean" }, "freshness": { "type": "string", "enum": ["fresh", "stale"] } }, "required": ["account_alias", "state", "raw_state", "rate_limited_until", "has_observation", "freshness"], "additionalProperties": false }, "paired_at": { "anyOf": [{ "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, { "type": "null" }] }, "last_heartbeat_at": { "anyOf": [{ "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, { "type": "null" }] }, "revoked_at": { "anyOf": [{ "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, { "type": "null" }] }, "created_at": { "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" } }, "required": ["id", "name", "platform", "health", "capabilities", "cli_version", "posture", "execution", "capacity", "paired_at", "last_heartbeat_at", "revoked_at", "created_at"], "additionalProperties": false } } }, "required": ["runners"], "additionalProperties": false }, "help": "List local runners and their online/offline/revoked state before queueing runner work.", "guide_slugs": ["runner-guide"], "stages": ["operating_rhythm"], "related_command_ids": ["agent.configure_tools", "agent.create_custom", "agent.go_live", "agent.run_dry_run", "agent.update_schedule", "aicos.brain_settings.get", "aicos.brain_settings.update", "charter.backfill_stock_evidence", "charter.set", "charter.sign_manifest", "confirmation.approve", "graph.get", "mcp_token.create", "mcp_token.list", "mcp_token.revoke", "onboarding.status", "runner.diagnose", "runner.pairing.start", "runner.repair", "runner.revoke", "runner.status", "seat.get", "skill.assign_to_seat", "tenant.model_gateway_policy.update", "work_order.cancel", "work_order.enqueue", "work_order.list"] },
       { "id": "runner.pairing.start", "title": "Start runner pairing", "description": "Open a runner pairing session and return the human pairing code and URL. The runner bearer secret is never returned here.", "required_scope": "tenant_admin", "confirmation": "none", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "name": { "type": "string", "minLength": 1, "maxLength": 120 }, "platform": { "type": "string", "minLength": 1, "maxLength": 120 } }, "required": ["name", "platform"], "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "pairing_session_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "user_code": { "type": "string" }, "verification_uri": { "type": "string" }, "expires_at": { "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, "expires_in": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 } }, "required": ["pairing_session_id", "user_code", "verification_uri", "expires_at", "expires_in"], "additionalProperties": false }, "help": "Open a runner pairing session and share the user code; the runner bearer secret is never surfaced here.", "guide_slugs": ["ai-model-data-handling-guide", "runner-guide", "security-model-guide"], "stages": ["operating_rhythm"], "related_command_ids": ["agent.configure_tools", "agent.get_run", "agent.list_tool_calls", "agent.run_now", "charter.sign_manifest", "confirmation.approve", "credential.ingress", "integration.readiness", "integration.status", "mcp_token.create", "mcp_token.revoke", "runner.diagnose", "runner.list", "runner.repair", "runner.revoke", "runner.status", "tenant.anthropic_key.disable", "tenant.anthropic_key.save", "tool.catalog", "work_order.cancel", "work_order.enqueue", "work_order.list"] },
       { "id": "runner.repair", "title": "Runner repair guidance", "description": "Returns actionable repair steps for a runner: restart, re-pair, revoke stale, or install missing CLI runtime. No secrets exposed.", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "runner_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "issue": { "type": "string", "enum": ["restart", "re_pair", "revoke_stale", "missing_cli_runtime"] } }, "required": ["runner_id"], "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "runner_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "runner_name": { "type": "string" }, "runner_health": { "type": "string", "enum": ["online", "stale", "offline", "revoked", "unpaired"] }, "repair_steps": { "type": "array", "items": { "type": "object", "properties": { "action": { "type": "string" }, "command": { "type": "string" }, "detail": { "type": "string" } }, "required": ["action", "command", "detail"], "additionalProperties": false } }, "requires_human": { "type": "boolean" } }, "required": ["runner_id", "runner_name", "runner_health", "repair_steps", "requires_human"], "additionalProperties": false }, "help": "Get focused repair steps for a runner: restart, re-pair, revoke a stale runner, or install missing CLI runtime.", "guide_slugs": ["runner-guide", "troubleshooting-guide"], "stages": ["operating_rhythm"], "related_command_ids": ["agent_setup.get", "agent_setup.start", "agent_setup.update", "agent_template.list", "agent.configure_tools", "agent.create_custom", "agent.create_from_template", "agent.fleet_digest", "agent.get_run", "agent.go_live", "agent.list_fleet", "agent.list_runs", "agent.list_tool_calls", "agent.run_dry_run", "agent.status", "charter.approve", "charter.draft", "compass.set", "confirmation.approve", "confirmation.reject", "deliverable.accept", "deliverable.attach", "deliverable.create", "deliverable.get", "deliverable.list", "deliverable.reject", "error_log.list", "error_log.resolve", "error_log.supersede", "escalation.get", "escalation.list", "escalation.reject", "escalation.resolve", "implementation_access.abandon", "implementation_access.complete", "implementation_access.status", "integration.list", "integration.readiness", "integration.status", "integration.test", "mcp_token.create", "mcp_token.list", "mcp_token.revoke", "onboarding.attach_reference", "onboarding.rehearse", "onboarding.resume", "onboarding.status", "onboarding.upload_context", "runner.diagnose", "runner.list", "runner.pairing.start", "runner.revoke", "runner.status", "seat.create", "seat.create_complete", "skill.assign_to_seat", "skill.assigned.list", "skill.catalog", "skill.check_dependencies", "skill.create", "skill.enable_catalog", "skill.file.get", "skill.get", "skill.import_github", "skill.import_upload", "skill.install_local", "skill.list", "skill.publish", "skill.revoke_from_seat", "skill.sync_local", "skill.update_draft", "staffing.assign", "system.health", "tenant.anthropic_key.disable", "tenant.rename", "tool_grants.tenant.update", "usage.report", "usage.snapshot", "user.tenants", "user.use_tenant", "user.whoami", "work_order.cancel", "work_order.enqueue", "work_order.list"] },
       { "id": "runner.revoke", "title": "Revoke runner", "description": "Revoke a runner so it can no longer authenticate or claim work.", "required_scope": "tenant", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": [], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "runner_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" } }, "required": ["runner_id"], "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "runner_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "revoked": { "type": "boolean" } }, "required": ["runner_id", "revoked"], "additionalProperties": false }, "help": "Revoke a runner when a machine should no longer authenticate or claim work; this is a human-gated action.", "guide_slugs": ["runner-guide", "security-model-guide"], "stages": ["operating_rhythm"], "related_command_ids": ["confirmation.approve", "mcp_token.create", "mcp_token.revoke", "runner.diagnose", "runner.list", "runner.pairing.start", "runner.repair", "runner.status", "work_order.cancel", "work_order.enqueue", "work_order.list"] },
@@ -13431,7 +13432,7 @@ var init_command_discovery = __esm({
       { "id": "seat.create_complete", "title": "Create complete seat", "description": "Create a Seat with its Charter, disclosed staffing, and optional dry-run agent shell after owner confirmation.", "required_scope": "tenant", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": [], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "idempotency_key": { "type": "string", "minLength": 1, "maxLength": 120 }, "sources": { "maxItems": 100, "type": "array", "items": { "type": "object", "properties": { "source_key": { "type": "string", "pattern": "^[a-z][a-z0-9-]{1,79}$" }, "source_upload_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "title": { "type": "string" }, "kind": { "type": "string", "enum": ["org_chart", "signal_export", "goal_export", "friction_export", "meeting_export", "other"] }, "sha256": { "type": "string", "pattern": "^[a-f0-9]{64}$" }, "row_ref": { "type": "string" } }, "required": ["source_key", "source_upload_id", "title", "kind", "sha256"], "additionalProperties": false } }, "seat": { "type": "object", "properties": { "seat_key": { "type": "string", "pattern": "^[a-z][a-z0-9-]{1,79}$" }, "name": { "type": "string" }, "seat_type": { "type": "string", "enum": ["human", "agent", "hybrid"] }, "parent": { "oneOf": [{ "type": "object", "properties": { "kind": { "type": "string", "const": "existing" }, "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" } }, "required": ["kind", "seat_id"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "type": "string", "const": "logical" }, "seat_key": { "type": "string", "pattern": "^[a-z][a-z0-9-]{1,79}$" } }, "required": ["kind", "seat_key"], "additionalProperties": false }] }, "purpose": { "type": "string", "minLength": 1, "maxLength": 2e3 }, "charter": { "type": "object", "properties": { "payload_version": { "type": "number", "const": 1 }, "purpose": { "type": "string", "minLength": 1 }, "accountabilities": { "minItems": 1, "type": "array", "items": { "type": "object", "properties": { "title": { "type": "string", "minLength": 1 }, "description": { "type": "string", "minLength": 1 } }, "required": ["title", "description"], "additionalProperties": false } }, "decision_authority": { "type": "object", "properties": { "autonomous": { "type": "array", "items": { "type": "object", "properties": { "action": { "type": "string", "minLength": 1 }, "condition": { "type": "string", "minLength": 1 }, "rationale": { "type": "string", "minLength": 1 }, "unanswered_boundary": { "default": false, "type": "boolean" } }, "required": ["action", "condition", "rationale"], "additionalProperties": false } }, "approval": { "type": "array", "items": { "type": "object", "properties": { "action": { "type": "string", "minLength": 1 }, "condition": { "type": "string", "minLength": 1 }, "rationale": { "type": "string", "minLength": 1 }, "unanswered_boundary": { "default": false, "type": "boolean" } }, "required": ["action", "condition", "rationale"], "additionalProperties": false } }, "escalate": { "minItems": 1, "type": "array", "items": { "type": "object", "properties": { "action": { "type": "string", "minLength": 1 }, "condition": { "type": "string", "minLength": 1 }, "rationale": { "type": "string", "minLength": 1 }, "unanswered_boundary": { "default": false, "type": "boolean" } }, "required": ["action", "condition", "rationale"], "additionalProperties": false } } }, "required": ["autonomous", "approval", "escalate"], "additionalProperties": false }, "escalation_rules": { "minItems": 1, "type": "array", "items": { "type": "string", "minLength": 1 } }, "measurables": { "minItems": 1, "type": "array", "items": { "type": "object", "properties": { "name": { "type": "string", "minLength": 1 }, "target": { "type": "string", "minLength": 1 }, "cadence": { "type": "string", "enum": ["daily", "weekly", "monthly", "quarterly"] }, "source": { "type": "string", "enum": ["human", "agent", "integration"] }, "signal": { "type": "object", "properties": { "unit": { "type": "string", "minLength": 1 }, "direction": { "type": "string", "enum": ["up_good", "down_good"] }, "target": { "type": "number" } }, "required": ["unit", "direction", "target"], "additionalProperties": false } }, "required": ["name", "target", "cadence", "source"], "additionalProperties": false } }, "permission_manifest": { "type": "array", "items": { "type": "object", "properties": { "tool": { "type": "string", "minLength": 1 }, "capability_id": { "type": "string", "minLength": 1 }, "integration_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "scope": { "type": "string", "minLength": 1 }, "granted": { "type": "boolean" }, "rationale": { "type": "string", "minLength": 1 }, "scope_tier": { "type": "string", "enum": ["read", "draft", "write_with_approval", "full"] }, "access_policy": { "type": "string", "enum": ["always_allow", "always_ask"] }, "args": { "type": "object", "properties": { "equals": { "type": "object", "propertyNames": { "type": "string" }, "additionalProperties": { "$ref": "#/definitions/__schema0" } } }, "additionalProperties": false } }, "required": ["tool", "scope", "granted", "rationale"], "additionalProperties": false } }, "budget": { "type": "object", "properties": { "monthly_usd": { "anyOf": [{ "type": "number", "minimum": 0 }, { "type": "null" }] }, "approval_required_over_usd": { "anyOf": [{ "type": "number", "minimum": 0 }, { "type": "null" }] }, "notes": { "type": "string", "minLength": 1 } }, "required": ["monthly_usd", "approval_required_over_usd", "notes"], "additionalProperties": false }, "unanswered_boundaries": { "type": "array", "items": { "type": "string", "minLength": 1 } }, "seat_type_recommendation": { "type": "object", "properties": { "recommendation": { "type": "string", "enum": ["human", "agent", "hybrid"] }, "rationale": { "type": "string", "minLength": 1 }, "confidence": { "type": "number", "minimum": 0, "maximum": 1 } }, "required": ["recommendation", "rationale", "confidence"], "additionalProperties": false } }, "required": ["payload_version", "purpose", "accountabilities", "decision_authority", "escalation_rules", "measurables", "permission_manifest", "budget"], "additionalProperties": false }, "human_staffing": { "oneOf": [{ "type": "object", "properties": { "kind": { "type": "string", "const": "owner" } }, "required": ["kind"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "type": "string", "const": "planned" }, "display_name": { "type": "string" }, "source_ref": { "type": "object", "properties": { "source_key": { "type": "string", "pattern": "^[a-z][a-z0-9-]{1,79}$" } }, "required": ["source_key"], "additionalProperties": false } }, "required": ["kind", "display_name"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "type": "string", "const": "vacant" } }, "required": ["kind"], "additionalProperties": false }] }, "agent": { "type": "object", "properties": { "display_name": { "type": "string" }, "steward": { "oneOf": [{ "type": "object", "properties": { "kind": { "type": "string", "const": "existing" }, "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" } }, "required": ["kind", "seat_id"], "additionalProperties": false }, { "type": "object", "properties": { "kind": { "type": "string", "const": "logical" }, "seat_key": { "type": "string", "pattern": "^[a-z][a-z0-9-]{1,79}$" } }, "required": ["kind", "seat_key"], "additionalProperties": false }] }, "lane": { "type": "string", "enum": ["cloud", "runner"] }, "model_config": { "type": "object", "properties": { "provider": { "type": "string", "enum": ["anthropic"] }, "model": { "type": "string", "minLength": 1, "maxLength": 120, "pattern": "^[^\\n\\r]+$" }, "effort": { "type": "string", "enum": ["low", "medium", "high", "xhigh", "max"] } }, "required": ["provider", "model"], "additionalProperties": false }, "skills": { "maxItems": 50, "type": "array", "items": { "type": "object", "properties": { "slug": { "type": "string", "pattern": "^[a-z0-9][a-z0-9-]{1,80}$" }, "skill_version_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "content_sha256": { "type": "string", "pattern": "^[a-f0-9]{64}$" } }, "required": ["slug", "skill_version_id", "content_sha256"], "additionalProperties": false } }, "schedule_cron": { "anyOf": [{ "type": "string", "minLength": 1, "maxLength": 120 }, { "type": "null" }] }, "schedule_timezone": { "type": "string", "minLength": 1, "maxLength": 100 } }, "required": ["display_name", "steward", "lane", "model_config", "skills", "schedule_cron", "schedule_timezone"], "additionalProperties": false }, "source_uses": { "maxItems": 100, "type": "array", "items": { "type": "object", "properties": { "source_key": { "type": "string", "pattern": "^[a-z][a-z0-9-]{1,79}$" } }, "required": ["source_key"], "additionalProperties": false } } }, "required": ["seat_key", "name", "seat_type", "charter", "human_staffing", "source_uses"], "additionalProperties": false } }, "required": ["idempotency_key", "sources", "seat"], "additionalProperties": false, "definitions": { "__schema0": { "anyOf": [{ "type": "string" }, { "type": "number" }, { "type": "boolean" }, { "type": "null" }, { "type": "array", "items": { "$ref": "#/definitions/__schema0" } }, { "type": "object", "propertyNames": { "type": "string" }, "additionalProperties": { "$ref": "#/definitions/__schema0" } }] } } }, "output_schema": { "type": "object", "properties": { "application_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "receipt": { "type": "object", "properties": { "receipt_revision": { "type": "number", "const": 1 }, "receipt_digest": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$" }, "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "charter_version_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "agent_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] }, "decision_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" } }, "required": ["receipt_revision", "receipt_digest", "seat_id", "charter_version_id", "agent_id", "decision_id"], "additionalProperties": false } }, "required": ["application_id", "receipt"], "additionalProperties": false }, "help": "Submit one complete Seat proposal with its Charter, disclosed staffing, and optional dry-run agent configuration. Read the exact schema first; the command stages one owner confirmation, never goes live, and applies every approved effect atomically.", "guide_slugs": ["mcp-and-cli-guide", "rost-implementation-method", "responsibility-graph-playbook", "agent-staffing-playbook"], "stages": ["graph_design", "charter_design", "staffing"], "related_command_ids": ["agent_setup.get", "agent_setup.start", "agent_setup.update", "agent_template.list", "agent.configure_tools", "agent.create_custom", "agent.create_from_template", "agent.fleet_digest", "agent.get_run", "agent.go_live", "agent.list_fleet", "agent.list_runs", "agent.list_tool_calls", "agent.run_dry_run", "agent.status", "charter.approve", "charter.draft", "compass.set", "confirmation.approve", "confirmation.reject", "deliverable.accept", "deliverable.attach", "deliverable.create", "deliverable.get", "deliverable.list", "deliverable.reject", "error_log.list", "error_log.resolve", "error_log.supersede", "escalation.get", "escalation.list", "escalation.reject", "escalation.resolve", "implementation_access.abandon", "implementation_access.complete", "implementation_access.status", "integration.list", "integration.readiness", "integration.status", "integration.test", "mcp_token.create", "mcp_token.list", "mcp_token.revoke", "onboarding.attach_reference", "onboarding.rehearse", "onboarding.resume", "onboarding.status", "onboarding.upload_context", "runner.diagnose", "runner.repair", "seat.create", "skill.assign_to_seat", "skill.assigned.list", "skill.catalog", "skill.check_dependencies", "skill.create", "skill.enable_catalog", "skill.file.get", "skill.get", "skill.import_github", "skill.import_upload", "skill.install_local", "skill.list", "skill.publish", "skill.revoke_from_seat", "skill.sync_local", "skill.update_draft", "staffing.assign", "system.health", "tenant.anthropic_key.disable", "tenant.rename", "tool_grants.tenant.update", "usage.report", "usage.snapshot", "user.tenants", "user.use_tenant", "user.whoami"] },
       { "id": "seat.decommission", "title": "Decommission seat", "description": "Retire a seat: end occupancies, archive the active charter, revoke seat tokens/credentials, cancel schedules, and emit a tombstone event. Blocks if it would leave another live agent without a human steward chain.", "required_scope": "seat", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["destructive"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" } }, "required": ["seat_id"], "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" } }, "required": ["seat_id"], "additionalProperties": false }, "help": "Retiring a seat ends occupancies, archives the active Charter, revokes seat tokens and credentials, and emits a tombstone event. No-orphan guarded. To retire only the agent and keep the seat, use agent.decommission.", "guide_slugs": ["responsibility-graph-playbook"], "stages": ["graph_design"], "related_command_ids": ["confirmation.approve", "confirmation.reject", "graph.get", "seat.create", "seat.get", "seat.rename", "seat.reparent", "seat.set_type", "staffing.assign_user"] },
       { "id": "seat.decommission_preview", "title": "Preview seat decommission", "description": "Show exactly what retiring a seat would end, revoke, archive, or expire without mutating state. The no-orphan steward guard is still checked when the real decommission executes.", "required_scope": "seat", "confirmation": "none", "trusted_execution": { "mode": "always_human", "risk_flags": ["destructive"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" } }, "required": ["seat_id"], "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "seat_name": { "type": "string" }, "previous_status": { "type": "string", "enum": ["draft", "active", "vacant", "decommissioned"] }, "active_occupancy_count": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "active_agent_ids": { "type": "array", "items": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" } }, "active_charter_count": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "active_mcp_token_count": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "active_credential_count": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "open_work_order_count": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "schedule_count": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "no_orphan_steward_guard": { "type": "string", "const": "checked_on_execute" }, "effects": { "type": "array", "items": { "type": "string" } } }, "required": ["seat_id", "seat_name", "previous_status", "active_occupancy_count", "active_agent_ids", "active_charter_count", "active_mcp_token_count", "active_credential_count", "open_work_order_count", "schedule_count", "no_orphan_steward_guard", "effects"], "additionalProperties": false }, "help": "Preview the occupancies, agents, Charter versions, tokens, credentials, work orders, and schedules that seat.decommission would affect without mutating state.", "guide_slugs": ["responsibility-graph-playbook"], "stages": ["graph_design"], "related_command_ids": [] },
-      { "id": "seat.get", "title": "Get seat detail", "description": "Return seat profile, steward chain, occupancy, Charter ids, agent status, token metadata, and open-work counts.", "required_scope": "seat", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" } }, "required": ["seat_id"], "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "name": { "type": "string" }, "seat_type": { "type": "string", "enum": ["human", "agent", "hybrid"] }, "status": { "type": "string", "enum": ["draft", "active", "vacant", "decommissioned"] }, "purpose": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "parent_seat_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] }, "steward_chain": { "type": "array", "items": { "type": "object", "properties": { "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "name": { "type": "string" } }, "required": ["seat_id", "name"], "additionalProperties": false } }, "occupancies": { "type": "array", "items": { "type": "object", "properties": { "occupancy_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "occupant_type": { "type": "string", "enum": ["user", "agent"] }, "label": { "type": "string" }, "started_at": { "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, "ended_at": { "anyOf": [{ "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, { "type": "null" }] } }, "required": ["occupancy_id", "occupant_type", "label", "started_at", "ended_at"], "additionalProperties": false } }, "active_charter_version_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] }, "draft_charter_version_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] }, "agent_status": { "anyOf": [{ "type": "string", "enum": ["draft", "dry_run", "live", "paused", "decommissioned"] }, { "type": "null" }] }, "agent_lane": { "anyOf": [{ "type": "string", "enum": ["cloud", "mcp_session", "runner"] }, { "type": "null" }] }, "mcp_tokens": { "type": "array", "items": { "type": "object", "properties": { "token_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "scope": { "type": "string", "enum": ["seat", "tenant_admin"] }, "created_at": { "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, "last_seen_at": { "anyOf": [{ "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, { "type": "null" }] }, "expires_at": { "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, "expires_in_days": { "type": "integer", "minimum": -9007199254740991, "maximum": 9007199254740991 }, "revoked_at": { "anyOf": [{ "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, { "type": "null" }] } }, "required": ["token_id", "scope", "created_at", "last_seen_at", "expires_at", "expires_in_days", "revoked_at"], "additionalProperties": false } }, "credentials": { "type": "array", "items": { "type": "object", "properties": { "credential_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "provider": { "type": "string" }, "status": { "type": "string", "enum": ["active", "revoked"] } }, "required": ["credential_id", "provider", "status"], "additionalProperties": false } }, "counts": { "type": "object", "properties": { "open_tasks": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "owned_goals": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "active_measurables": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "open_issues": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 } }, "required": ["open_tasks", "owned_goals", "active_measurables", "open_issues"], "additionalProperties": false } }, "required": ["seat_id", "name", "seat_type", "status", "purpose", "parent_seat_id", "steward_chain", "occupancies", "active_charter_version_id", "draft_charter_version_id", "agent_status", "agent_lane", "mcp_tokens", "credentials", "counts"], "additionalProperties": false }, "help": "Inspect a seat's Charter ids, steward chain, occupancy, agent status, token metadata, and open-work counts before acting on it.", "guide_slugs": ["responsibility-graph-playbook", "how-agents-work"], "stages": ["graph_design", "operating_rhythm"], "related_command_ids": ["agent_setup.get", "agent_setup.update", "agent.configure_tools", "agent.create_custom", "agent.decommission", "agent.fleet_digest", "agent.go_live", "agent.list_fleet", "agent.run_dry_run", "agent.status", "agent.update_schedule", "aicos.brain_settings.get", "aicos.brain_settings.update", "charter.set", "charter.sign_manifest", "confirmation.approve", "confirmation.reject", "escalation.raise", "friction.file_issue", "goal.set_status", "graph.get", "mcp_token.list", "onboarding.status", "runner.list", "seat.create", "seat.decommission", "seat.rename", "seat.reparent", "seat.set_type", "signal.confirm_reading", "skill.assign_to_seat", "staffing.assign_agent_dry_run", "staffing.assign_user", "status.record", "system.health", "task.accept", "task.complete", "task.create", "task.decline", "task.list", "team.health_score", "tenant.model_gateway_policy.update", "work.log"] },
+      { "id": "seat.get", "title": "Get seat detail", "description": "Return seat profile, steward chain, occupancy, display-only planned occupants, Charter ids, agent status, token metadata, and open-work counts.", "required_scope": "seat", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" } }, "required": ["seat_id"], "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "name": { "type": "string" }, "seat_type": { "type": "string", "enum": ["human", "agent", "hybrid"] }, "status": { "type": "string", "enum": ["draft", "active", "vacant", "decommissioned"] }, "purpose": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "parent_seat_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] }, "steward_chain": { "type": "array", "items": { "type": "object", "properties": { "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "name": { "type": "string" } }, "required": ["seat_id", "name"], "additionalProperties": false } }, "occupancies": { "type": "array", "items": { "type": "object", "properties": { "occupancy_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "occupant_type": { "type": "string", "enum": ["user", "agent"] }, "label": { "type": "string" }, "started_at": { "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, "ended_at": { "anyOf": [{ "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, { "type": "null" }] } }, "required": ["occupancy_id", "occupant_type", "label", "started_at", "ended_at"], "additionalProperties": false } }, "active_charter_version_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] }, "draft_charter_version_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] }, "agent_status": { "anyOf": [{ "type": "string", "enum": ["draft", "dry_run", "live", "paused", "decommissioned"] }, { "type": "null" }] }, "agent_lane": { "anyOf": [{ "type": "string", "enum": ["cloud", "mcp_session", "runner"] }, { "type": "null" }] }, "mcp_tokens": { "type": "array", "items": { "type": "object", "properties": { "token_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "scope": { "type": "string", "enum": ["seat", "tenant_admin"] }, "created_at": { "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, "last_seen_at": { "anyOf": [{ "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, { "type": "null" }] }, "expires_at": { "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, "expires_in_days": { "type": "integer", "minimum": -9007199254740991, "maximum": 9007199254740991 }, "revoked_at": { "anyOf": [{ "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, { "type": "null" }] } }, "required": ["token_id", "scope", "created_at", "last_seen_at", "expires_at", "expires_in_days", "revoked_at"], "additionalProperties": false } }, "credentials": { "type": "array", "items": { "type": "object", "properties": { "credential_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "provider": { "type": "string" }, "status": { "type": "string", "enum": ["active", "revoked"] } }, "required": ["credential_id", "provider", "status"], "additionalProperties": false } }, "counts": { "type": "object", "properties": { "open_tasks": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "owned_goals": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "active_measurables": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "open_issues": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 } }, "required": ["open_tasks", "owned_goals", "active_measurables", "open_issues"], "additionalProperties": false }, "planned_occupants": { "type": "array", "items": { "type": "object", "properties": { "display_name": { "type": "string" } }, "required": ["display_name"], "additionalProperties": false } } }, "required": ["seat_id", "name", "seat_type", "status", "purpose", "parent_seat_id", "steward_chain", "occupancies", "active_charter_version_id", "draft_charter_version_id", "agent_status", "agent_lane", "mcp_tokens", "credentials", "counts", "planned_occupants"], "additionalProperties": false }, "help": "Inspect a seat's Charter ids, steward chain, occupancy, display-only planned occupants, agent status, token metadata, and open-work counts before acting on it.", "guide_slugs": ["responsibility-graph-playbook", "how-agents-work"], "stages": ["graph_design", "operating_rhythm"], "related_command_ids": ["agent_setup.get", "agent_setup.update", "agent.configure_tools", "agent.create_custom", "agent.decommission", "agent.fleet_digest", "agent.go_live", "agent.list_fleet", "agent.run_dry_run", "agent.status", "agent.update_schedule", "aicos.brain_settings.get", "aicos.brain_settings.update", "charter.backfill_stock_evidence", "charter.set", "charter.sign_manifest", "confirmation.approve", "confirmation.reject", "escalation.raise", "friction.file_issue", "goal.set_status", "graph.get", "mcp_token.list", "onboarding.status", "runner.list", "seat.create", "seat.decommission", "seat.rename", "seat.reparent", "seat.set_type", "signal.confirm_reading", "skill.assign_to_seat", "staffing.assign_agent_dry_run", "staffing.assign_user", "status.record", "system.health", "task.accept", "task.complete", "task.create", "task.decline", "task.list", "team.health_score", "tenant.model_gateway_policy.update", "work.log"] },
       { "id": "seat.rename", "title": "Rename seat", "description": "Rename a Responsibility Graph seat.", "required_scope": "seat", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "name": { "type": "string", "minLength": 1, "maxLength": 120 } }, "required": ["seat_id", "name"], "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" } }, "required": ["seat_id"], "additionalProperties": false }, "help": "Seat names should describe the function and accountability clearly.", "guide_slugs": ["responsibility-graph-playbook"], "stages": ["graph_design"], "related_command_ids": ["confirmation.approve", "confirmation.reject", "graph.get", "seat.create", "seat.decommission", "seat.get", "seat.reparent", "seat.set_type", "staffing.assign_user"] },
       { "id": "seat.reparent", "title": "Reparent seat", "description": "Move a Responsibility Graph seat under a new parent.", "required_scope": "seat", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": [], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "new_parent_seat_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] } }, "required": ["seat_id", "new_parent_seat_id"], "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" } }, "required": ["seat_id"], "additionalProperties": false }, "help": "Reparent seats only when it clarifies accountable structure and preserves a clean graph.", "guide_slugs": ["responsibility-graph-playbook"], "stages": ["graph_design"], "related_command_ids": ["confirmation.approve", "confirmation.reject", "graph.get", "seat.create", "seat.decommission", "seat.get", "seat.rename", "seat.set_type", "staffing.assign_user"] },
       { "id": "seat.set_type", "title": "Set seat type", "description": "Set a Responsibility Graph seat type.", "required_scope": "seat", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": [], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "seat_type": { "type": "string", "enum": ["human", "agent", "hybrid"] } }, "required": ["seat_id", "seat_type"], "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" } }, "required": ["seat_id"], "additionalProperties": false }, "help": "Seat type should follow the work, risk, measurable, and stewardship model.", "guide_slugs": ["agent-staffing-playbook", "how-agents-work"], "stages": ["staffing"], "related_command_ids": ["agent.go_live", "agent.run_dry_run", "cascade.import", "charter.approve", "charter.draft", "charter.draft_all", "charter.sign_manifest", "charter.update_draft", "compass.answer_gap", "compass.approve_version", "compass.draft", "compass.get_current", "compass.list_gaps", "compass.reject_draft", "compass.set", "compass.update_draft", "confirmation.activation_set.list", "confirmation.approve", "confirmation.reject", "credential.ingress", "friction.file_issue", "friction.list", "friction.resolve", "graph.get", "onboarding.activate", "onboarding.advance_step", "onboarding.attach_reference", "onboarding.create_invite", "onboarding.finish", "onboarding.rehearse", "onboarding.setup", "onboarding.source_ingest", "onboarding.status", "onboarding.upload_context", "seat.create", "seat.decommission", "seat.get", "seat.rename", "seat.reparent", "signal.bind", "signal.confirm_reading", "signal.draft_first_readings", "signal.report", "staffing.assign_agent_dry_run", "staffing.assign_user", "sync.brief.compile", "sync.brief.get", "sync.item.assign", "sync.run.complete", "sync.run.start"] },
@@ -13464,7 +13465,7 @@ var init_command_discovery = __esm({
       { "id": "signal.preview", "title": "Preview a signal source", "description": "Execute a candidate rest-for-signals recipe LIVE and read-only against an allowlisted HTTPS source, returning the extracted scalar and a short-lived preview_token required by signal.bind. Guarded (SSRF + restricted JSONPath); writes a signal_pull_log row. Never mutates.", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "measurable_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "integration_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "recipe": { "type": "object", "properties": { "kind": { "default": "rest_for_signals", "type": "string", "const": "rest_for_signals" }, "method": { "default": "GET", "type": "string", "const": "GET" }, "url": { "type": "string", "maxLength": 2048, "format": "uri" }, "headers": { "type": "object", "propertyNames": { "type": "string", "pattern": "^[A-Za-z0-9-]+$" }, "additionalProperties": { "type": "string", "maxLength": 1024 } }, "auth": { "type": "object", "properties": { "placement": { "default": "none", "type": "string", "enum": ["none", "bearer", "header", "query"] }, "header_name": { "type": "string", "minLength": 1, "maxLength": 64 }, "query_param": { "type": "string", "minLength": 1, "maxLength": 64 }, "value_prefix": { "type": "string", "maxLength": 32 } }, "additionalProperties": false }, "value_path": { "type": "string", "minLength": 1, "maxLength": 500 } }, "required": ["url", "value_path"], "additionalProperties": false }, "cadence": { "type": "string", "enum": ["daily", "weekly", "monthly", "quarterly", "annual"] }, "host_allowlist": { "minItems": 1, "maxItems": 20, "type": "array", "items": { "type": "string", "minLength": 1, "maxLength": 255 } } }, "required": ["measurable_id", "integration_id", "recipe", "cadence", "host_allowlist"], "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "measurable_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "integration_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "outcome": { "type": "string", "enum": ["ok", "blocked", "error"] }, "value": { "anyOf": [{ "type": "number" }, { "type": "string" }, { "type": "boolean" }, { "type": "null" }] }, "value_kind": { "type": "string" }, "http_status": { "type": "integer", "minimum": -9007199254740991, "maximum": 9007199254740991 }, "preview_token": { "type": "string" }, "preview_expires_at": { "type": "string" }, "message": { "type": "string" }, "pull_log_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] } }, "required": ["measurable_id", "integration_id", "outcome", "value_kind", "pull_log_id"], "additionalProperties": false }, "help": "Run a candidate recipe live but read-only against an allowlisted HTTPS source; returns the extracted value + a short-lived preview_token. Never mutates; the credential is resolved from the connection at execution.", "guide_slugs": ["signal-guide"], "stages": ["operating_rhythm"], "related_command_ids": ["compass.approve_version", "compass.set", "integration.discover", "measurable_template.adopt", "measurable_template.list", "measurable.create", "scorecard.grid", "signal.bind", "signal.bind_confirm", "signal.confirm_reading", "signal.correct_reading", "signal.draft_first_readings", "signal.get", "signal.import", "signal.list", "signal.report", "status.record"] },
       { "id": "signal.report", "title": "Report a Signal reading", "description": "A per-seat Signal agent proposes one draft reading for one of its OWN seat's agent-sourced measurables (a judgment/transform pull \u2014 reading a number off a document, reconciling messy data, estimating progress). The reading lands unconfirmed; a human confirms it with signal.confirm_reading. Refuses any measurable not owned by the acting seat or whose source is not 'agent'.", "required_scope": "seat", "confirmation": "none", "trusted_execution": { "mode": "eligible", "risk_flags": [], "rationale": "Eligible for Trusted execution only when the signed Charter manifest, tenant policy, budget, and command guard allow it." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "measurable_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "value": { "type": "number" }, "period_start": { "type": "string", "pattern": "^\\d{4}-\\d{2}-\\d{2}$" }, "note": { "type": "string", "minLength": 1, "maxLength": 2e3 }, "confidence": { "type": "string", "enum": ["low", "medium", "high"] } }, "required": ["measurable_id", "value"], "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "reading_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "measurable_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "confirmed": { "type": "boolean", "const": false } }, "required": ["reading_id", "measurable_id", "confirmed"], "additionalProperties": false }, "example": { "measurable_id": "01900001-0001-7001-8001-000000000001", "value": 42, "note": "Read off the Q3 close PDF, page 2 \u2014 42 reconciled invoices this week.", "confidence": "high" }, "help": "A per-seat Signal agent proposes one draft reading for its own seat's agent-sourced measurable (a judgment/transform pull). The reading lands unconfirmed; a human confirms it with signal.confirm_reading. Refuses non-agent-sourced or other-seat measurables.", "guide_slugs": ["signal-guide", "how-agents-work"], "stages": ["operating_rhythm"], "related_command_ids": ["agent.go_live", "agent.run_dry_run", "cascade.import", "charter.approve", "charter.draft", "charter.draft_all", "charter.sign_manifest", "charter.update_draft", "compass.answer_gap", "compass.approve_version", "compass.draft", "compass.get_current", "compass.list_gaps", "compass.reject_draft", "compass.set", "compass.update_draft", "confirmation.activation_set.list", "confirmation.approve", "credential.ingress", "friction.file_issue", "friction.list", "friction.resolve", "integration.discover", "measurable_template.adopt", "measurable_template.list", "measurable.create", "onboarding.activate", "onboarding.advance_step", "onboarding.attach_reference", "onboarding.create_invite", "onboarding.finish", "onboarding.rehearse", "onboarding.setup", "onboarding.source_ingest", "onboarding.status", "onboarding.upload_context", "scorecard.grid", "seat.create", "seat.set_type", "signal.bind", "signal.bind_confirm", "signal.confirm_reading", "signal.correct_reading", "signal.draft_first_readings", "signal.get", "signal.import", "signal.list", "signal.preview", "staffing.assign_agent_dry_run", "staffing.assign_user", "status.record", "sync.brief.compile", "sync.brief.get", "sync.item.assign", "sync.run.complete", "sync.run.start"] },
       { "id": "signup.provision_tenant", "title": "Create company", "description": "Provision a new company (tenant) for the authenticated CLI user with no web step.", "required_scope": "user", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": false, "input_schema": { "type": "object", "properties": { "company_name": { "type": "string", "minLength": 2, "maxLength": 120 } }, "required": ["company_name"], "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "tenant_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "slug": { "type": "string", "minLength": 1 }, "name": { "type": "string", "minLength": 1 }, "created": { "type": "boolean" } }, "required": ["tenant_id", "slug", "name", "created"], "additionalProperties": false }, "help": "Create the company headlessly when the CLI session has no tenant yet; it becomes the user's active tenant so the rest of setup runs with no web step.", "guide_slugs": ["mcp-and-cli-guide", "agent-reference-map"], "stages": ["company_setup"], "related_command_ids": [] },
-      { "id": "skill.assign_to_seat", "title": "Assign skill to seat", "description": "Propose or human-approve a published immutable skill version for a Seat after checking required and optional tool dependencies.", "required_scope": "seat", "confirmation": "human_required", "trusted_execution": { "mode": "eligible_bounded", "risk_flags": [], "rationale": "Assigning an already-published, immutable skill version to a seat is a bounded worker action safe to auto-apply under a standing Trusted grant." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "slug": { "type": "string", "pattern": "^[a-z0-9][a-z0-9-]{1,80}$" }, "skill_version_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "status": { "default": "proposed", "type": "string", "enum": ["proposed", "approved"] }, "rationale": { "type": "string", "minLength": 1, "maxLength": 1e3 }, "allow_blocked_proposal": { "default": false, "type": "boolean" } }, "required": ["seat_id", "rationale"], "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "assignment": { "type": "object", "properties": { "assignment_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "seat_name": { "type": "string", "minLength": 1 }, "skill_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "skill_version_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "slug": { "type": "string", "pattern": "^[a-z0-9][a-z0-9-]{1,80}$" }, "name": { "type": "string", "minLength": 1, "maxLength": 120 }, "description": { "type": "string", "minLength": 1 }, "version": { "type": "integer", "exclusiveMinimum": 0, "maximum": 9007199254740991 }, "status": { "type": "string", "enum": ["proposed", "approved", "revoked"] }, "rationale": { "type": "string", "minLength": 1 }, "dependency_status": { "type": "object", "propertyNames": { "type": "string" }, "additionalProperties": {} }, "approved_at": { "anyOf": [{ "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, { "type": "null" }] } }, "required": ["assignment_id", "seat_id", "seat_name", "skill_id", "skill_version_id", "slug", "name", "description", "version", "status", "rationale", "dependency_status", "approved_at"], "additionalProperties": false }, "dependency_status": { "type": "object", "properties": { "status": { "type": "string", "enum": ["ready", "blocked", "warning"] }, "skill_version_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "required": { "type": "array", "items": { "type": "object", "properties": { "tool": { "type": "string", "minLength": 1 }, "min_scope_tier": { "type": "string", "enum": ["read", "draft", "write_with_approval", "full"] }, "status": { "type": "string", "enum": ["ready", "missing", "insufficient_scope", "unknown_tool"] }, "required": { "type": "boolean" }, "current_scope_tier": { "anyOf": [{ "type": "string", "enum": ["read", "draft", "write_with_approval", "full"] }, { "type": "null" }] }, "reason": { "type": "string" } }, "required": ["tool", "min_scope_tier", "status", "required", "current_scope_tier"], "additionalProperties": false } }, "optional": { "type": "array", "items": { "type": "object", "properties": { "tool": { "type": "string", "minLength": 1 }, "min_scope_tier": { "type": "string", "enum": ["read", "draft", "write_with_approval", "full"] }, "status": { "type": "string", "enum": ["ready", "missing", "insufficient_scope", "unknown_tool"] }, "required": { "type": "boolean" }, "current_scope_tier": { "anyOf": [{ "type": "string", "enum": ["read", "draft", "write_with_approval", "full"] }, { "type": "null" }] }, "reason": { "type": "string" } }, "required": ["tool", "min_scope_tier", "status", "required", "current_scope_tier"], "additionalProperties": false } }, "suggested_agent_configure_tools_input": { "type": "object", "properties": { "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "tool_decisions": { "type": "array", "items": { "type": "object", "properties": { "tool": { "type": "string", "minLength": 1 }, "decision": { "type": "string", "const": "connect" } }, "required": ["tool", "decision"], "additionalProperties": false } } }, "required": ["seat_id", "tool_decisions"], "additionalProperties": false } }, "required": ["status", "skill_version_id", "seat_id", "required", "optional", "suggested_agent_configure_tools_input"], "additionalProperties": false }, "approval_status": { "type": "string", "enum": ["proposed", "approved"] }, "required_setup_actions": { "type": "array", "items": { "type": "object", "properties": { "tool": { "type": "string", "minLength": 1 }, "action": { "type": "string", "const": "connect" }, "reason": { "type": "string" } }, "required": ["tool", "action"], "additionalProperties": false } }, "local_sync_next_step": { "type": "string", "minLength": 1 } }, "required": ["assignment", "dependency_status", "approval_status", "required_setup_actions", "local_sync_next_step"], "additionalProperties": false }, "help": "Propose or human-approve a published Skill for a Seat after dependency checks. Missing required tools block approval; optional tools are warnings only.", "guide_slugs": ["agent-skill-setup-guide", "skill-builder-guide", "tool-access-and-vault"], "stages": ["staffing"], "related_command_ids": ["agent_setup.get", "agent_setup.start", "agent_setup.update", "agent_template.list", "agent.configure_tools", "agent.create_custom", "agent.create_from_template", "agent.fleet_digest", "agent.get_run", "agent.go_live", "agent.list_fleet", "agent.list_runs", "agent.list_tool_calls", "agent.run_dry_run", "agent.run_now", "agent.status", "agent.trust.create", "agent.update_schedule", "aicos.brain_settings.get", "aicos.brain_settings.update", "charter.approve", "charter.draft", "charter.set", "charter.sign_manifest", "command.describe", "command.list", "compass.set", "confirmation.approve", "confirmation.reject", "credential.ingress", "deliverable.accept", "deliverable.attach", "deliverable.create", "deliverable.get", "deliverable.list", "deliverable.reject", "error_log.list", "error_log.resolve", "error_log.supersede", "escalation.get", "escalation.list", "escalation.reject", "escalation.resolve", "friction.resolve", "goal.bind_measurable", "graph.get", "implementation_access.abandon", "implementation_access.complete", "implementation_access.status", "integration.list", "integration.readiness", "integration.status", "integration.test", "mcp_token.create", "mcp_token.list", "mcp_token.revoke", "onboarding.attach_reference", "onboarding.rehearse", "onboarding.resume", "onboarding.status", "onboarding.upload_context", "runner.diagnose", "runner.list", "runner.repair", "seat.create", "seat.create_complete", "seat.get", "skill.assigned.list", "skill.catalog", "skill.check_dependencies", "skill.create", "skill.enable_catalog", "skill.file.get", "skill.get", "skill.import_github", "skill.import_upload", "skill.install_local", "skill.list", "skill.publish", "skill.revoke_from_seat", "skill.sync_local", "skill.update_draft", "staffing.assign", "staffing.assign_user", "system.health", "tenant.anthropic_key.disable", "tenant.model_gateway_policy.update", "tenant.rename", "tool_grants.tenant.update", "usage.report", "usage.snapshot", "user.tenants", "user.use_tenant", "user.whoami"] },
+      { "id": "skill.assign_to_seat", "title": "Assign skill to seat", "description": "Propose or human-approve a published immutable skill version for a Seat after checking required and optional tool dependencies.", "required_scope": "seat", "confirmation": "human_required", "trusted_execution": { "mode": "eligible_bounded", "risk_flags": [], "rationale": "Assigning an already-published, immutable skill version to a seat is a bounded worker action safe to auto-apply under a standing Trusted grant." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "slug": { "type": "string", "pattern": "^[a-z0-9][a-z0-9-]{1,80}$" }, "skill_version_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "status": { "default": "proposed", "type": "string", "enum": ["proposed", "approved"] }, "rationale": { "type": "string", "minLength": 1, "maxLength": 1e3 }, "allow_blocked_proposal": { "default": false, "type": "boolean" } }, "required": ["seat_id", "rationale"], "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "assignment": { "type": "object", "properties": { "assignment_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "seat_name": { "type": "string", "minLength": 1 }, "skill_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "skill_version_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "slug": { "type": "string", "pattern": "^[a-z0-9][a-z0-9-]{1,80}$" }, "name": { "type": "string", "minLength": 1, "maxLength": 120 }, "description": { "type": "string", "minLength": 1 }, "version": { "type": "integer", "exclusiveMinimum": 0, "maximum": 9007199254740991 }, "status": { "type": "string", "enum": ["proposed", "approved", "revoked"] }, "rationale": { "type": "string", "minLength": 1 }, "dependency_status": { "type": "object", "propertyNames": { "type": "string" }, "additionalProperties": {} }, "approved_at": { "anyOf": [{ "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, { "type": "null" }] } }, "required": ["assignment_id", "seat_id", "seat_name", "skill_id", "skill_version_id", "slug", "name", "description", "version", "status", "rationale", "dependency_status", "approved_at"], "additionalProperties": false }, "dependency_status": { "type": "object", "properties": { "status": { "type": "string", "enum": ["ready", "blocked", "warning"] }, "skill_version_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "required": { "type": "array", "items": { "type": "object", "properties": { "tool": { "type": "string", "minLength": 1 }, "min_scope_tier": { "type": "string", "enum": ["read", "draft", "write_with_approval", "full"] }, "status": { "type": "string", "enum": ["ready", "missing", "insufficient_scope", "unknown_tool"] }, "required": { "type": "boolean" }, "current_scope_tier": { "anyOf": [{ "type": "string", "enum": ["read", "draft", "write_with_approval", "full"] }, { "type": "null" }] }, "reason": { "type": "string" } }, "required": ["tool", "min_scope_tier", "status", "required", "current_scope_tier"], "additionalProperties": false } }, "optional": { "type": "array", "items": { "type": "object", "properties": { "tool": { "type": "string", "minLength": 1 }, "min_scope_tier": { "type": "string", "enum": ["read", "draft", "write_with_approval", "full"] }, "status": { "type": "string", "enum": ["ready", "missing", "insufficient_scope", "unknown_tool"] }, "required": { "type": "boolean" }, "current_scope_tier": { "anyOf": [{ "type": "string", "enum": ["read", "draft", "write_with_approval", "full"] }, { "type": "null" }] }, "reason": { "type": "string" } }, "required": ["tool", "min_scope_tier", "status", "required", "current_scope_tier"], "additionalProperties": false } }, "suggested_agent_configure_tools_input": { "type": "object", "properties": { "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "tool_decisions": { "type": "array", "items": { "type": "object", "properties": { "tool": { "type": "string", "minLength": 1 }, "decision": { "type": "string", "const": "connect" } }, "required": ["tool", "decision"], "additionalProperties": false } } }, "required": ["seat_id", "tool_decisions"], "additionalProperties": false } }, "required": ["status", "skill_version_id", "seat_id", "required", "optional", "suggested_agent_configure_tools_input"], "additionalProperties": false }, "approval_status": { "type": "string", "enum": ["proposed", "approved"] }, "required_setup_actions": { "type": "array", "items": { "type": "object", "properties": { "tool": { "type": "string", "minLength": 1 }, "action": { "type": "string", "const": "connect" }, "reason": { "type": "string" } }, "required": ["tool", "action"], "additionalProperties": false } }, "local_sync_next_step": { "type": "string", "minLength": 1 } }, "required": ["assignment", "dependency_status", "approval_status", "required_setup_actions", "local_sync_next_step"], "additionalProperties": false }, "help": "Propose or human-approve a published Skill for a Seat after dependency checks. Missing required tools block approval; optional tools are warnings only.", "guide_slugs": ["agent-skill-setup-guide", "skill-builder-guide", "tool-access-and-vault"], "stages": ["staffing"], "related_command_ids": ["agent_setup.get", "agent_setup.start", "agent_setup.update", "agent_template.list", "agent.configure_tools", "agent.create_custom", "agent.create_from_template", "agent.fleet_digest", "agent.get_run", "agent.go_live", "agent.list_fleet", "agent.list_runs", "agent.list_tool_calls", "agent.run_dry_run", "agent.run_now", "agent.status", "agent.trust.create", "agent.update_schedule", "aicos.brain_settings.get", "aicos.brain_settings.update", "charter.approve", "charter.backfill_stock_evidence", "charter.draft", "charter.set", "charter.sign_manifest", "command.describe", "command.list", "compass.set", "confirmation.approve", "confirmation.reject", "credential.ingress", "deliverable.accept", "deliverable.attach", "deliverable.create", "deliverable.get", "deliverable.list", "deliverable.reject", "error_log.list", "error_log.resolve", "error_log.supersede", "escalation.get", "escalation.list", "escalation.reject", "escalation.resolve", "friction.resolve", "goal.bind_measurable", "graph.get", "implementation_access.abandon", "implementation_access.complete", "implementation_access.status", "integration.list", "integration.readiness", "integration.status", "integration.test", "mcp_token.create", "mcp_token.list", "mcp_token.revoke", "onboarding.attach_reference", "onboarding.rehearse", "onboarding.resume", "onboarding.status", "onboarding.upload_context", "runner.diagnose", "runner.list", "runner.repair", "seat.create", "seat.create_complete", "seat.get", "skill.assigned.list", "skill.catalog", "skill.check_dependencies", "skill.create", "skill.enable_catalog", "skill.file.get", "skill.get", "skill.import_github", "skill.import_upload", "skill.install_local", "skill.list", "skill.publish", "skill.revoke_from_seat", "skill.sync_local", "skill.update_draft", "staffing.assign", "staffing.assign_user", "system.health", "tenant.anthropic_key.disable", "tenant.model_gateway_policy.update", "tenant.rename", "tool_grants.tenant.update", "usage.report", "usage.snapshot", "user.tenants", "user.use_tenant", "user.whoami"] },
       { "id": "skill.assigned.list", "title": "List assigned skills", "description": "List approved skill assignments for a Seat, including immutable version, dependency status, rationale, and approval time. Seat-scoped callers can only read their own assignments.", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" } }, "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "seat_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] }, "assignments": { "type": "array", "items": { "type": "object", "properties": { "assignment_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "seat_name": { "type": "string", "minLength": 1 }, "skill_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "skill_version_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "slug": { "type": "string", "pattern": "^[a-z0-9][a-z0-9-]{1,80}$" }, "name": { "type": "string", "minLength": 1, "maxLength": 120 }, "description": { "type": "string", "minLength": 1 }, "version": { "type": "integer", "exclusiveMinimum": 0, "maximum": 9007199254740991 }, "status": { "type": "string", "enum": ["proposed", "approved", "revoked"] }, "rationale": { "type": "string", "minLength": 1 }, "dependency_status": { "type": "object", "propertyNames": { "type": "string" }, "additionalProperties": {} }, "approved_at": { "anyOf": [{ "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" }, { "type": "null" }] } }, "required": ["assignment_id", "seat_id", "seat_name", "skill_id", "skill_version_id", "slug", "name", "description", "version", "status", "rationale", "dependency_status", "approved_at"], "additionalProperties": false } } }, "required": ["seat_id", "assignments"], "additionalProperties": false }, "help": "List approved Skills assigned to a Seat before loading instructions into a run. A seat-scoped token can only read its own assigned Skills.", "guide_slugs": ["agent-skill-setup-guide", "skill-builder-guide", "how-agents-work"], "stages": ["staffing", "operating_rhythm"], "related_command_ids": ["agent_setup.get", "agent_setup.start", "agent_setup.update", "agent_template.list", "agent.configure_tools", "agent.create_custom", "agent.create_from_template", "agent.fleet_digest", "agent.get_run", "agent.go_live", "agent.list_fleet", "agent.list_runs", "agent.list_tool_calls", "agent.run_dry_run", "agent.status", "charter.approve", "charter.draft", "compass.set", "confirmation.approve", "confirmation.reject", "deliverable.accept", "deliverable.attach", "deliverable.create", "deliverable.get", "deliverable.list", "deliverable.reject", "error_log.list", "error_log.resolve", "error_log.supersede", "escalation.get", "escalation.list", "escalation.reject", "escalation.resolve", "implementation_access.abandon", "implementation_access.complete", "implementation_access.status", "integration.list", "integration.readiness", "integration.status", "integration.test", "mcp_token.create", "mcp_token.list", "mcp_token.revoke", "onboarding.attach_reference", "onboarding.rehearse", "onboarding.resume", "onboarding.status", "onboarding.upload_context", "runner.diagnose", "runner.repair", "seat.create", "seat.create_complete", "skill.assign_to_seat", "skill.catalog", "skill.check_dependencies", "skill.create", "skill.enable_catalog", "skill.file.get", "skill.get", "skill.import_github", "skill.import_upload", "skill.install_local", "skill.list", "skill.publish", "skill.revoke_from_seat", "skill.sync_local", "skill.update_draft", "staffing.assign", "system.health", "tenant.anthropic_key.disable", "tenant.rename", "tool_grants.tenant.update", "usage.report", "usage.snapshot", "user.tenants", "user.use_tenant", "user.whoami"] },
       { "id": "skill.catalog", "title": "List ROST skill catalog", "description": "List ROST-maintained catalog skills the active tenant is entitled to see. Private source URLs are never returned.", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "query": { "type": "string", "minLength": 1, "maxLength": 120 }, "include_unentitled": { "default": false, "type": "boolean" } }, "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "catalog": { "type": "array", "items": { "type": "object", "properties": { "catalog_entry_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "slug": { "type": "string", "pattern": "^[a-z0-9][a-z0-9-]{1,80}$" }, "catalog_slug": { "type": "string", "pattern": "^rost\\/[a-z0-9][a-z0-9-]{1,80}$" }, "name": { "type": "string", "minLength": 1, "maxLength": 120 }, "description": { "type": "string", "minLength": 1 }, "application": { "type": "object", "properties": { "domain": { "type": "string", "minLength": 1, "maxLength": 80 }, "summary": { "type": "string", "minLength": 1, "maxLength": 500 }, "best_for": { "default": [], "maxItems": 20, "type": "array", "items": { "type": "string", "minLength": 1, "maxLength": 160 } }, "not_for": { "default": [], "maxItems": 20, "type": "array", "items": { "type": "string", "minLength": 1, "maxLength": 160 } } }, "required": ["summary"], "additionalProperties": false }, "tier": { "type": "string", "enum": ["free", "pro", "enterprise", "private_beta"] }, "source_type": { "type": "string", "enum": ["rost_catalog_public", "rost_catalog_private"] }, "content_sha256": { "type": "string", "pattern": "^[a-f0-9]{64}$" }, "required_tools": { "type": "array", "items": { "type": "object", "properties": { "tool": { "type": "string", "minLength": 1, "maxLength": 120 }, "min_scope_tier": { "type": "string", "enum": ["read", "draft", "write_with_approval", "full"] }, "reason": { "type": "string", "minLength": 1, "maxLength": 500 } }, "required": ["tool", "min_scope_tier"], "additionalProperties": false } }, "optional_tools": { "type": "array", "items": { "type": "object", "properties": { "tool": { "type": "string", "minLength": 1, "maxLength": 120 }, "min_scope_tier": { "type": "string", "enum": ["read", "draft", "write_with_approval", "full"] }, "reason": { "type": "string", "minLength": 1, "maxLength": 500 } }, "required": ["tool", "min_scope_tier"], "additionalProperties": false } }, "entitlement_status": { "type": "string", "enum": ["entitled", "not_entitled"] }, "enabled_skill_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] }, "enabled_skill_version_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] }, "enabled": { "type": "boolean" }, "published_at": { "type": "string", "format": "date-time", "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|([+-](?:[01]\\d|2[0-3]):[0-5]\\d)))$" } }, "required": ["catalog_entry_id", "slug", "catalog_slug", "name", "description", "application", "tier", "source_type", "content_sha256", "required_tools", "optional_tools", "entitlement_status", "enabled_skill_id", "enabled_skill_version_id", "enabled", "published_at"], "additionalProperties": false } } }, "required": ["catalog"], "additionalProperties": false }, "help": "List entitled ROST catalog Skills. Private catalog source locations stay server-side; agents install from ROST APIs, not private GitHub.", "guide_slugs": ["agent-skill-setup-guide", "skill-builder-guide", "security-model-guide"], "stages": ["staffing"], "related_command_ids": ["agent_setup.get", "agent_setup.start", "agent_setup.update", "agent_template.list", "agent.configure_tools", "agent.create_custom", "agent.create_from_template", "agent.fleet_digest", "agent.get_run", "agent.go_live", "agent.list_fleet", "agent.list_runs", "agent.list_tool_calls", "agent.run_dry_run", "agent.status", "charter.approve", "charter.draft", "charter.sign_manifest", "compass.set", "confirmation.approve", "confirmation.reject", "credential.ingress", "deliverable.accept", "deliverable.attach", "deliverable.create", "deliverable.get", "deliverable.list", "deliverable.reject", "error_log.list", "error_log.resolve", "error_log.supersede", "escalation.get", "escalation.list", "escalation.reject", "escalation.resolve", "implementation_access.abandon", "implementation_access.complete", "implementation_access.status", "integration.list", "integration.readiness", "integration.status", "integration.test", "mcp_token.create", "mcp_token.list", "mcp_token.revoke", "onboarding.attach_reference", "onboarding.rehearse", "onboarding.resume", "onboarding.status", "onboarding.upload_context", "runner.diagnose", "runner.repair", "seat.create", "seat.create_complete", "skill.assign_to_seat", "skill.assigned.list", "skill.check_dependencies", "skill.create", "skill.enable_catalog", "skill.file.get", "skill.get", "skill.import_github", "skill.import_upload", "skill.install_local", "skill.list", "skill.publish", "skill.revoke_from_seat", "skill.sync_local", "skill.update_draft", "staffing.assign", "staffing.assign_user", "system.health", "tenant.anthropic_key.disable", "tenant.rename", "tool_grants.tenant.update", "usage.report", "usage.snapshot", "user.tenants", "user.use_tenant", "user.whoami"] },
       { "id": "skill.check_dependencies", "title": "Check skill dependencies", "description": "Compare a skill version's required and optional tools against a Seat's active or draft Charter permission manifest. Returns ready, blocked, or warning plus suggested agent.configure_tools input; it does not grant permissions.", "required_scope": "seat", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "skill_version_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "slug": { "type": "string", "pattern": "^[a-z0-9][a-z0-9-]{1,80}$" }, "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" } }, "required": ["seat_id"], "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "status": { "type": "string", "enum": ["ready", "blocked", "warning"] }, "skill_version_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "required": { "type": "array", "items": { "type": "object", "properties": { "tool": { "type": "string", "minLength": 1 }, "min_scope_tier": { "type": "string", "enum": ["read", "draft", "write_with_approval", "full"] }, "status": { "type": "string", "enum": ["ready", "missing", "insufficient_scope", "unknown_tool"] }, "required": { "type": "boolean" }, "current_scope_tier": { "anyOf": [{ "type": "string", "enum": ["read", "draft", "write_with_approval", "full"] }, { "type": "null" }] }, "reason": { "type": "string" } }, "required": ["tool", "min_scope_tier", "status", "required", "current_scope_tier"], "additionalProperties": false } }, "optional": { "type": "array", "items": { "type": "object", "properties": { "tool": { "type": "string", "minLength": 1 }, "min_scope_tier": { "type": "string", "enum": ["read", "draft", "write_with_approval", "full"] }, "status": { "type": "string", "enum": ["ready", "missing", "insufficient_scope", "unknown_tool"] }, "required": { "type": "boolean" }, "current_scope_tier": { "anyOf": [{ "type": "string", "enum": ["read", "draft", "write_with_approval", "full"] }, { "type": "null" }] }, "reason": { "type": "string" } }, "required": ["tool", "min_scope_tier", "status", "required", "current_scope_tier"], "additionalProperties": false } }, "suggested_agent_configure_tools_input": { "type": "object", "properties": { "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "tool_decisions": { "type": "array", "items": { "type": "object", "properties": { "tool": { "type": "string", "minLength": 1 }, "decision": { "type": "string", "const": "connect" } }, "required": ["tool", "decision"], "additionalProperties": false } } }, "required": ["seat_id", "tool_decisions"], "additionalProperties": false } }, "required": ["status", "skill_version_id", "seat_id", "required", "optional", "suggested_agent_configure_tools_input"], "additionalProperties": false }, "help": "Compare a Skill's required and optional tools with a Seat's signed Charter manifest. Missing tools must be connected through agent.configure_tools; the Skill never grants authority.", "guide_slugs": ["agent-skill-setup-guide", "skill-builder-guide", "tool-access-and-vault"], "stages": ["staffing"], "related_command_ids": ["agent_setup.get", "agent_setup.start", "agent_setup.update", "agent_template.list", "agent.configure_tools", "agent.create_custom", "agent.create_from_template", "agent.fleet_digest", "agent.get_run", "agent.go_live", "agent.list_fleet", "agent.list_runs", "agent.list_tool_calls", "agent.run_dry_run", "agent.status", "charter.approve", "charter.draft", "charter.sign_manifest", "compass.set", "confirmation.approve", "confirmation.reject", "credential.ingress", "deliverable.accept", "deliverable.attach", "deliverable.create", "deliverable.get", "deliverable.list", "deliverable.reject", "error_log.list", "error_log.resolve", "error_log.supersede", "escalation.get", "escalation.list", "escalation.reject", "escalation.resolve", "implementation_access.abandon", "implementation_access.complete", "implementation_access.status", "integration.list", "integration.readiness", "integration.status", "integration.test", "mcp_token.create", "mcp_token.list", "mcp_token.revoke", "onboarding.attach_reference", "onboarding.rehearse", "onboarding.resume", "onboarding.status", "onboarding.upload_context", "runner.diagnose", "runner.repair", "seat.create", "seat.create_complete", "skill.assign_to_seat", "skill.assigned.list", "skill.catalog", "skill.create", "skill.enable_catalog", "skill.file.get", "skill.get", "skill.import_github", "skill.import_upload", "skill.install_local", "skill.list", "skill.publish", "skill.revoke_from_seat", "skill.sync_local", "skill.update_draft", "staffing.assign", "staffing.assign_user", "system.health", "tenant.anthropic_key.disable", "tenant.rename", "tool_grants.tenant.update", "usage.report", "usage.snapshot", "user.tenants", "user.use_tenant", "user.whoami"] },
@@ -13506,11 +13507,11 @@ var init_command_discovery = __esm({
       { "id": "software_factory.project.list", "title": "List Forge projects", "description": "Active Forge software projects so a tenant can choose a project for build requests, GitHub repository bindings, and config. Entitlement-gated.", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": {}, "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "projects": { "type": "array", "items": { "type": "object", "properties": { "id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "name": { "type": "string", "minLength": 1 }, "slug": { "type": "string", "minLength": 1 }, "base_branch": { "type": "string", "minLength": 1 }, "repo_ref": { "anyOf": [{ "type": "string" }, { "type": "null" }] } }, "required": ["id", "name", "slug", "base_branch", "repo_ref"] } } }, "required": ["projects"] }, "help": "List active Forge software projects so a tenant can choose a project for build requests, GitHub repository bindings, and config. Read-only; requires the Forge add-on.", "guide_slugs": ["agent-reference-map", "mcp-and-cli-guide"], "stages": ["operating_rhythm"], "related_command_ids": [] },
       { "id": "software_factory.request.answer_clarification", "title": "Answer Forge plan clarifications", "description": "Write structured human answers to a draft plan's clarifying questions and optionally mark it ready for plan review. This never widens authority or automation mode.", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "build_request_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "answers": { "minItems": 1, "maxItems": 50, "type": "array", "items": { "type": "object", "properties": { "question": { "type": "string", "minLength": 1, "maxLength": 2e3 }, "answer": { "type": "string", "minLength": 1, "maxLength": 4e3 } }, "required": ["question", "answer"], "additionalProperties": false } }, "mark_ready_for_plan_review": { "default": false, "type": "boolean" } }, "required": ["build_request_id", "answers"], "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "build_request_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "plan_version_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "status": { "type": "string", "enum": ["draft", "needs_clarification", "ready_for_plan_review", "approved", "rejected"] }, "answered_count": { "type": "integer", "minimum": -9007199254740991, "maximum": 9007199254740991 } }, "required": ["build_request_id", "plan_version_id", "status", "answered_count"] }, "help": "Write structured human answers to a draft plan's clarifying questions and optionally mark it ready for plan review. Never widens authority or automation mode.", "guide_slugs": ["agent-reference-map", "mcp-and-cli-guide"], "stages": ["operating_rhythm"], "related_command_ids": [] },
       { "id": "software_factory.request.cancel", "title": "Cancel a Forge build request", "description": "Cancel a Forge build request and expire active runner work orders. This is terminal; use pause for reversible holds. Human-gated and entitlement-gated.", "required_scope": "tenant_admin", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin", "destructive"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "build_request_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "reason": { "type": "string", "minLength": 1, "maxLength": 2e3 } }, "required": ["build_request_id"], "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "build_request_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "status": { "type": "string", "enum": ["open", "in_progress", "paused", "blocked", "canceled", "closed"] }, "current_phase": { "type": "string", "enum": ["intake", "discovery_scoping", "plan_review", "implementation", "plan_conformance_review", "security_review", "qa_verification", "release_preview", "merge_or_deploy_gate", "closeout"] }, "phase_run_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] }, "work_order_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] }, "resume_from_task_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] } }, "required": ["build_request_id", "status", "current_phase", "phase_run_id", "work_order_id", "resume_from_task_id"] }, "help": "Cancel a Forge build request, expire unstarted runner work, and terminalize active runner work. Terminal, tenant-admin, and human-gated.", "guide_slugs": ["agent-reference-map", "mcp-and-cli-guide"], "stages": ["operating_rhythm"], "related_command_ids": [] },
-      { "id": "software_factory.request.create", "title": "Create a Forge build request", "description": "Open a governed Forge build request against a connected software project. Entitlement-gated (Forge add-on); the title is untrusted display text, never an instruction.", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "software_project_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "project": { "type": "string", "minLength": 1, "maxLength": 200 }, "title": { "type": "string", "minLength": 1, "maxLength": 500 }, "source_channel": { "type": "string", "enum": ["ui", "cli", "github_issue", "linear", "api"] }, "source_ref": { "type": "string", "maxLength": 2e3 }, "termination_bound": { "type": "object", "properties": { "max_iterations": { "type": "integer", "exclusiveMinimum": 0, "maximum": 1e4 }, "max_wall_clock_seconds": { "type": "integer", "exclusiveMinimum": 0, "maximum": 604800 }, "cost_budget_usd": { "type": "number", "minimum": 0, "maximum": 1e6 } }, "additionalProperties": false }, "automation_mode": { "type": "string", "enum": ["plan_only", "pr_only", "merge_after_checks", "deploy_preview", "deploy_production"] } }, "required": ["title"], "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "build_request_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "software_project_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "status": { "type": "string", "enum": ["open", "in_progress", "paused", "blocked", "canceled", "closed"] }, "current_phase": { "type": "string", "enum": ["intake", "discovery_scoping", "plan_review", "implementation", "plan_conformance_review", "security_review", "qa_verification", "release_preview", "merge_or_deploy_gate", "closeout"] }, "phase_run_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "scheduler_state": { "type": "object", "properties": { "status": { "type": "string", "enum": ["queued", "parked", "not_configured"] }, "reason": { "anyOf": [{ "type": "string", "enum": ["phase_run_not_found", "missing_owning_seat", "missing_runner_agent", "agent_not_execution_ready", "runner_not_paired", "work_order_expired", "runner_offline"] }, { "type": "null" }] }, "message": { "type": "string" }, "remediation_href": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "work_order_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] } }, "required": ["status", "reason", "message", "remediation_href", "work_order_id"] } }, "required": ["build_request_id", "software_project_id", "status", "current_phase", "phase_run_id", "scheduler_state"] }, "help": "Open a governed Forge build request against a connected software project; the title is untrusted display text. Requires the Forge add-on.", "guide_slugs": ["agent-reference-map", "mcp-and-cli-guide"], "stages": ["operating_rhythm"], "related_command_ids": [] },
-      { "id": "software_factory.request.list", "title": "List Forge build requests", "description": "The Forge control-room board: the tenant's build requests with status, current phase, and risk/automation mode. Read-only, entitlement-gated.", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "limit": { "type": "integer", "exclusiveMinimum": 0, "maximum": 200 } }, "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "requests": { "type": "array", "items": { "type": "object", "properties": { "id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "software_project_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "title": { "type": "string" }, "source_channel": { "type": "string", "enum": ["ui", "cli", "github_issue", "linear", "api"] }, "source_ref": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "status": { "type": "string", "enum": ["open", "in_progress", "paused", "blocked", "canceled", "closed"] }, "current_phase": { "type": "string", "enum": ["intake", "discovery_scoping", "plan_review", "implementation", "plan_conformance_review", "security_review", "qa_verification", "release_preview", "merge_or_deploy_gate", "closeout"] }, "inferred_risk": { "type": "string", "enum": ["low", "medium", "high", "critical"] }, "automation_mode": { "type": "string", "enum": ["plan_only", "pr_only", "merge_after_checks", "deploy_preview", "deploy_production"] }, "max_iterations": { "anyOf": [{ "type": "integer", "minimum": -9007199254740991, "maximum": 9007199254740991 }, { "type": "null" }] }, "max_wall_clock_seconds": { "anyOf": [{ "type": "integer", "minimum": -9007199254740991, "maximum": 9007199254740991 }, { "type": "null" }] }, "cost_budget_usd": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "iterations_used": { "type": "integer", "minimum": -9007199254740991, "maximum": 9007199254740991 }, "created_at": { "type": "string" }, "scheduler_state": { "anyOf": [{ "type": "object", "properties": { "status": { "type": "string", "enum": ["queued", "parked", "not_configured"] }, "reason": { "anyOf": [{ "type": "string", "enum": ["phase_run_not_found", "missing_owning_seat", "missing_runner_agent", "agent_not_execution_ready", "runner_not_paired", "work_order_expired", "runner_offline"] }, { "type": "null" }] }, "message": { "type": "string" }, "remediation_href": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "work_order_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] } }, "required": ["status", "reason", "message", "remediation_href", "work_order_id"] }, { "type": "null" }] }, "failure": { "anyOf": [{ "type": "object", "properties": { "kind": { "type": "string", "enum": ["phase_failed", "budget_exhausted", "plan_incomplete", "driver_stalled"] }, "phase": { "anyOf": [{ "type": "string", "enum": ["intake", "discovery_scoping", "plan_review", "implementation", "plan_conformance_review", "security_review", "qa_verification", "release_preview", "merge_or_deploy_gate", "closeout"] }, { "type": "null" }] }, "summary": { "type": "string", "minLength": 1, "maxLength": 500 }, "detail": { "anyOf": [{ "type": "string", "maxLength": 4e3 }, { "type": "null" }] }, "action": { "type": "string", "enum": ["retry", "open_phase", "fix_and_resume"] }, "occurred_at": { "type": "string" } }, "required": ["kind", "phase", "summary", "detail", "action", "occurred_at"], "additionalProperties": false }, { "type": "null" }] } }, "required": ["id", "software_project_id", "title", "source_channel", "source_ref", "status", "current_phase", "inferred_risk", "automation_mode", "max_iterations", "max_wall_clock_seconds", "cost_budget_usd", "iterations_used", "created_at", "scheduler_state", "failure"] } } }, "required": ["requests"] }, "help": "List Forge build requests (the control-room board) with status, current phase, and risk. Read-only; requires the Forge add-on.", "guide_slugs": ["agent-reference-map", "mcp-and-cli-guide"], "stages": ["operating_rhythm"], "related_command_ids": [] },
+      { "id": "software_factory.request.create", "title": "Create a Forge build request", "description": "Open a governed Forge build request against a connected software project. Entitlement-gated (Forge add-on); the title is untrusted display text, never an instruction.", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "software_project_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "project": { "type": "string", "minLength": 1, "maxLength": 200 }, "title": { "type": "string", "minLength": 1, "maxLength": 500 }, "source_channel": { "type": "string", "enum": ["ui", "cli", "github_issue", "linear", "api"] }, "source_ref": { "type": "string", "maxLength": 2e3 }, "termination_bound": { "type": "object", "properties": { "max_iterations": { "type": "integer", "exclusiveMinimum": 0, "maximum": 1e4 }, "max_wall_clock_seconds": { "type": "integer", "exclusiveMinimum": 0, "maximum": 604800 }, "cost_budget_usd": { "type": "number", "minimum": 0, "maximum": 1e6 } }, "additionalProperties": false }, "automation_mode": { "type": "string", "enum": ["plan_only", "pr_only", "merge_after_checks", "deploy_preview", "deploy_production"] } }, "required": ["title"], "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "build_request_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "software_project_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "status": { "type": "string", "enum": ["open", "in_progress", "paused", "blocked", "canceled", "closed"] }, "current_phase": { "type": "string", "enum": ["intake", "discovery_scoping", "plan_review", "implementation", "plan_conformance_review", "security_review", "qa_verification", "release_preview", "merge_or_deploy_gate", "closeout"] }, "phase_run_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "scheduler_state": { "type": "object", "properties": { "status": { "type": "string", "enum": ["queued", "parked", "not_configured"] }, "reason": { "anyOf": [{ "type": "string", "enum": ["phase_run_not_found", "missing_owning_seat", "missing_runner_agent", "agent_not_execution_ready", "runner_not_paired", "work_order_expired", "runner_offline", "charter_manifest_not_signed", "charter_missing"] }, { "type": "null" }] }, "message": { "type": "string" }, "remediation_href": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "work_order_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] } }, "required": ["status", "reason", "message", "remediation_href", "work_order_id"] } }, "required": ["build_request_id", "software_project_id", "status", "current_phase", "phase_run_id", "scheduler_state"] }, "help": "Open a governed Forge build request against a connected software project; the title is untrusted display text. Requires the Forge add-on.", "guide_slugs": ["agent-reference-map", "mcp-and-cli-guide"], "stages": ["operating_rhythm"], "related_command_ids": [] },
+      { "id": "software_factory.request.list", "title": "List Forge build requests", "description": "The Forge control-room board: the tenant's build requests with status, current phase, and risk/automation mode. Read-only, entitlement-gated.", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "limit": { "type": "integer", "exclusiveMinimum": 0, "maximum": 200 } }, "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "requests": { "type": "array", "items": { "type": "object", "properties": { "id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "software_project_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "title": { "type": "string" }, "source_channel": { "type": "string", "enum": ["ui", "cli", "github_issue", "linear", "api"] }, "source_ref": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "status": { "type": "string", "enum": ["open", "in_progress", "paused", "blocked", "canceled", "closed"] }, "current_phase": { "type": "string", "enum": ["intake", "discovery_scoping", "plan_review", "implementation", "plan_conformance_review", "security_review", "qa_verification", "release_preview", "merge_or_deploy_gate", "closeout"] }, "inferred_risk": { "type": "string", "enum": ["low", "medium", "high", "critical"] }, "automation_mode": { "type": "string", "enum": ["plan_only", "pr_only", "merge_after_checks", "deploy_preview", "deploy_production"] }, "max_iterations": { "anyOf": [{ "type": "integer", "minimum": -9007199254740991, "maximum": 9007199254740991 }, { "type": "null" }] }, "max_wall_clock_seconds": { "anyOf": [{ "type": "integer", "minimum": -9007199254740991, "maximum": 9007199254740991 }, { "type": "null" }] }, "cost_budget_usd": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "iterations_used": { "type": "integer", "minimum": -9007199254740991, "maximum": 9007199254740991 }, "created_at": { "type": "string" }, "scheduler_state": { "anyOf": [{ "type": "object", "properties": { "status": { "type": "string", "enum": ["queued", "parked", "not_configured"] }, "reason": { "anyOf": [{ "type": "string", "enum": ["phase_run_not_found", "missing_owning_seat", "missing_runner_agent", "agent_not_execution_ready", "runner_not_paired", "work_order_expired", "runner_offline", "charter_manifest_not_signed", "charter_missing"] }, { "type": "null" }] }, "message": { "type": "string" }, "remediation_href": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "work_order_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] } }, "required": ["status", "reason", "message", "remediation_href", "work_order_id"] }, { "type": "null" }] }, "failure": { "anyOf": [{ "type": "object", "properties": { "kind": { "type": "string", "enum": ["phase_failed", "budget_exhausted", "plan_incomplete", "driver_stalled", "charter_not_ready"] }, "phase": { "anyOf": [{ "type": "string", "enum": ["intake", "discovery_scoping", "plan_review", "implementation", "plan_conformance_review", "security_review", "qa_verification", "release_preview", "merge_or_deploy_gate", "closeout"] }, { "type": "null" }] }, "summary": { "type": "string", "minLength": 1, "maxLength": 500 }, "detail": { "anyOf": [{ "type": "string", "maxLength": 4e3 }, { "type": "null" }] }, "action": { "type": "string", "enum": ["retry", "open_phase", "fix_and_resume"] }, "occurred_at": { "type": "string" } }, "required": ["kind", "phase", "summary", "detail", "action", "occurred_at"], "additionalProperties": false }, { "type": "null" }] } }, "required": ["id", "software_project_id", "title", "source_channel", "source_ref", "status", "current_phase", "inferred_risk", "automation_mode", "max_iterations", "max_wall_clock_seconds", "cost_budget_usd", "iterations_used", "created_at", "scheduler_state", "failure"] } } }, "required": ["requests"] }, "help": "List Forge build requests (the control-room board) with status, current phase, and risk. Read-only; requires the Forge add-on.", "guide_slugs": ["agent-reference-map", "mcp-and-cli-guide"], "stages": ["operating_rhythm"], "related_command_ids": [] },
       { "id": "software_factory.request.pause", "title": "Pause a Forge build request", "description": "Pause an in-flight Forge build request. New runner claims stop immediately; any running task halts at the next task checkpoint before resume. Human-gated and entitlement-gated.", "required_scope": "tenant_admin", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "build_request_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "reason": { "type": "string", "minLength": 1, "maxLength": 2e3 } }, "required": ["build_request_id"], "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "build_request_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "status": { "type": "string", "enum": ["open", "in_progress", "paused", "blocked", "canceled", "closed"] }, "current_phase": { "type": "string", "enum": ["intake", "discovery_scoping", "plan_review", "implementation", "plan_conformance_review", "security_review", "qa_verification", "release_preview", "merge_or_deploy_gate", "closeout"] }, "phase_run_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] }, "work_order_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] }, "resume_from_task_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] } }, "required": ["build_request_id", "status", "current_phase", "phase_run_id", "work_order_id", "resume_from_task_id"] }, "help": "Pause an in-flight Forge build request so no new runner work starts; running work stops at the next task checkpoint. Tenant-admin and human-gated.", "guide_slugs": ["agent-reference-map", "mcp-and-cli-guide"], "stages": ["operating_rhythm"], "related_command_ids": [] },
       { "id": "software_factory.request.resume", "title": "Resume a Forge build request", "description": "Resume a paused or human-blocked Forge build request from the last completed task checkpoint and requeue the current phase. Human-gated and entitlement-gated.", "required_scope": "tenant_admin", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "build_request_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "reason": { "type": "string", "minLength": 1, "maxLength": 2e3 }, "termination_bound": { "type": "object", "properties": { "max_iterations": { "type": "integer", "exclusiveMinimum": 0, "maximum": 1e4 }, "max_wall_clock_seconds": { "type": "integer", "exclusiveMinimum": 0, "maximum": 604800 }, "cost_budget_usd": { "type": "number", "minimum": 0, "maximum": 1e6 } }, "additionalProperties": false } }, "required": ["build_request_id"], "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "build_request_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "status": { "type": "string", "enum": ["open", "in_progress", "paused", "blocked", "canceled", "closed"] }, "current_phase": { "type": "string", "enum": ["intake", "discovery_scoping", "plan_review", "implementation", "plan_conformance_review", "security_review", "qa_verification", "release_preview", "merge_or_deploy_gate", "closeout"] }, "phase_run_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] }, "work_order_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] }, "resume_from_task_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] } }, "required": ["build_request_id", "status", "current_phase", "phase_run_id", "work_order_id", "resume_from_task_id"] }, "help": "Resume a paused or blocked Forge build request from its last completed task checkpoint after human review. Tenant-admin and human-gated.", "guide_slugs": ["agent-reference-map", "mcp-and-cli-guide"], "stages": ["operating_rhythm"], "related_command_ids": [] },
-      { "id": "software_factory.request.show", "title": "Show a Forge build request", "description": "The Forge request detail: the build request, its current phase, phase-run history, and gates. Read-only, entitlement-gated, tenant-scoped.", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "build_request_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" } }, "required": ["build_request_id"], "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "request": { "type": "object", "properties": { "id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "software_project_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "title": { "type": "string" }, "source_channel": { "type": "string", "enum": ["ui", "cli", "github_issue", "linear", "api"] }, "source_ref": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "status": { "type": "string", "enum": ["open", "in_progress", "paused", "blocked", "canceled", "closed"] }, "current_phase": { "type": "string", "enum": ["intake", "discovery_scoping", "plan_review", "implementation", "plan_conformance_review", "security_review", "qa_verification", "release_preview", "merge_or_deploy_gate", "closeout"] }, "inferred_risk": { "type": "string", "enum": ["low", "medium", "high", "critical"] }, "automation_mode": { "type": "string", "enum": ["plan_only", "pr_only", "merge_after_checks", "deploy_preview", "deploy_production"] }, "max_iterations": { "anyOf": [{ "type": "integer", "minimum": -9007199254740991, "maximum": 9007199254740991 }, { "type": "null" }] }, "max_wall_clock_seconds": { "anyOf": [{ "type": "integer", "minimum": -9007199254740991, "maximum": 9007199254740991 }, { "type": "null" }] }, "cost_budget_usd": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "iterations_used": { "type": "integer", "minimum": -9007199254740991, "maximum": 9007199254740991 }, "created_at": { "type": "string" }, "scheduler_state": { "anyOf": [{ "type": "object", "properties": { "status": { "type": "string", "enum": ["queued", "parked", "not_configured"] }, "reason": { "anyOf": [{ "type": "string", "enum": ["phase_run_not_found", "missing_owning_seat", "missing_runner_agent", "agent_not_execution_ready", "runner_not_paired", "work_order_expired", "runner_offline"] }, { "type": "null" }] }, "message": { "type": "string" }, "remediation_href": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "work_order_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] } }, "required": ["status", "reason", "message", "remediation_href", "work_order_id"] }, { "type": "null" }] }, "failure": { "anyOf": [{ "type": "object", "properties": { "kind": { "type": "string", "enum": ["phase_failed", "budget_exhausted", "plan_incomplete", "driver_stalled"] }, "phase": { "anyOf": [{ "type": "string", "enum": ["intake", "discovery_scoping", "plan_review", "implementation", "plan_conformance_review", "security_review", "qa_verification", "release_preview", "merge_or_deploy_gate", "closeout"] }, { "type": "null" }] }, "summary": { "type": "string", "minLength": 1, "maxLength": 500 }, "detail": { "anyOf": [{ "type": "string", "maxLength": 4e3 }, { "type": "null" }] }, "action": { "type": "string", "enum": ["retry", "open_phase", "fix_and_resume"] }, "occurred_at": { "type": "string" } }, "required": ["kind", "phase", "summary", "detail", "action", "occurred_at"], "additionalProperties": false }, { "type": "null" }] } }, "required": ["id", "software_project_id", "title", "source_channel", "source_ref", "status", "current_phase", "inferred_risk", "automation_mode", "max_iterations", "max_wall_clock_seconds", "cost_budget_usd", "iterations_used", "created_at", "scheduler_state", "failure"] }, "current_phase": { "type": "string", "enum": ["intake", "discovery_scoping", "plan_review", "implementation", "plan_conformance_review", "security_review", "qa_verification", "release_preview", "merge_or_deploy_gate", "closeout"] }, "phase_runs": { "type": "array", "items": { "type": "object", "properties": { "id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "phase": { "type": "string", "enum": ["intake", "discovery_scoping", "plan_review", "implementation", "plan_conformance_review", "security_review", "qa_verification", "release_preview", "merge_or_deploy_gate", "closeout"] }, "status": { "type": "string", "enum": ["pending", "running", "passed", "failed", "blocked", "skipped"] }, "attempt_no": { "type": "integer", "minimum": -9007199254740991, "maximum": 9007199254740991 }, "entered_at": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "exited_at": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "created_at": { "type": "string" }, "scheduler_state": { "anyOf": [{ "type": "object", "properties": { "status": { "type": "string", "enum": ["queued", "parked", "not_configured"] }, "reason": { "anyOf": [{ "type": "string", "enum": ["phase_run_not_found", "missing_owning_seat", "missing_runner_agent", "agent_not_execution_ready", "runner_not_paired", "work_order_expired", "runner_offline"] }, { "type": "null" }] }, "message": { "type": "string" }, "remediation_href": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "work_order_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] } }, "required": ["status", "reason", "message", "remediation_href", "work_order_id"] }, { "type": "null" }] } }, "required": ["id", "phase", "status", "attempt_no", "entered_at", "exited_at", "created_at", "scheduler_state"] } }, "gates": { "type": "array", "items": { "type": "object", "properties": { "id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "gate_type": { "type": "string", "enum": ["plan_review", "security_signoff", "merge_or_deploy", "authority_change", "production_deploy"] }, "status": { "type": "string", "enum": ["pending", "approved", "rejected", "held"] }, "phase_run_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] }, "resolved_by_user_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] }, "rationale": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "created_at": { "type": "string" } }, "required": ["id", "gate_type", "status", "phase_run_id", "resolved_by_user_id", "rationale", "created_at"] } }, "plan_versions": { "type": "array", "items": { "type": "object", "properties": { "id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "build_request_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "version_no": { "type": "integer", "minimum": -9007199254740991, "maximum": 9007199254740991 }, "status": { "type": "string", "enum": ["draft", "needs_clarification", "ready_for_plan_review", "approved", "rejected"] }, "summary": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "confidence_score": { "anyOf": [{ "type": "integer", "minimum": -9007199254740991, "maximum": 9007199254740991 }, { "type": "null" }] }, "clarifying_questions": { "default": [], "type": "array", "items": { "type": "string" } }, "clarification_answers": { "default": [], "type": "array", "items": { "type": "object", "properties": { "question": { "type": "string" }, "answer": { "type": "string" } }, "required": ["question", "answer"] } }, "planning_artifact": { "anyOf": [{ "type": "object", "properties": { "scope": { "type": "string" }, "plan_steps": { "default": [], "type": "array", "items": { "type": "string" } }, "files_or_systems": { "default": [], "type": "array", "items": { "type": "string" } }, "verification": { "default": [], "type": "array", "items": { "type": "string" } }, "risks": { "default": [], "type": "array", "items": { "type": "string" } }, "tasks": { "default": [], "type": "array", "items": { "type": "object", "properties": { "task_key": { "type": "string" }, "title": { "type": "string" }, "depends_on": { "default": [], "type": "array", "items": { "type": "string" } }, "parallelizable": { "default": false, "type": "boolean" }, "est_turns": { "default": null, "anyOf": [{ "type": "integer", "minimum": -9007199254740991, "maximum": 9007199254740991 }, { "type": "null" }] }, "files_likely": { "default": [], "type": "array", "items": { "type": "string" } }, "verification": { "default": [], "type": "array", "items": { "type": "string" } } }, "required": ["task_key", "title"] } }, "changesets": { "default": [], "type": "array", "items": { "type": "object", "properties": { "ordinal": { "type": "integer", "minimum": -9007199254740991, "maximum": 9007199254740991 }, "title": { "type": "string" }, "split_criterion": { "type": "string" }, "task_keys": { "default": [], "type": "array", "items": { "type": "string" } } }, "required": ["ordinal", "title", "split_criterion"] } } }, "required": ["scope"] }, { "type": "null" }] }, "created_by_seat_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] }, "created_at": { "type": "string" } }, "required": ["id", "build_request_id", "version_no", "status", "summary", "confidence_score", "planning_artifact", "created_by_seat_id", "created_at"] } }, "changesets": { "type": "array", "items": { "type": "object", "properties": { "id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "build_request_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "ordinal": { "type": "integer", "minimum": -9007199254740991, "maximum": 9007199254740991 }, "title": { "type": "string" }, "split_criterion": { "type": "string", "enum": ["single", "risk_isolation", "reviewability_budget", "deploy_ordering", "independent_revert"] }, "status": { "type": "string", "enum": ["planned", "in_progress", "in_review", "merged", "declined"] }, "branch_name": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "pr_number": { "anyOf": [{ "type": "integer", "minimum": -9007199254740991, "maximum": 9007199254740991 }, { "type": "null" }] }, "pr_url": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "pr_draft": { "type": "boolean" }, "inferred_risk": { "anyOf": [{ "type": "string", "enum": ["low", "medium", "high", "critical"] }, { "type": "null" }] }, "merged_at": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "created_at": { "type": "string" } }, "required": ["id", "build_request_id", "ordinal", "title", "split_criterion", "status", "branch_name", "pr_number", "pr_url", "pr_draft", "inferred_risk", "merged_at", "created_at"] } }, "tasks": { "type": "array", "items": { "type": "object", "properties": { "id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "build_request_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "changeset_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "plan_version_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "ordinal": { "type": "integer", "minimum": -9007199254740991, "maximum": 9007199254740991 }, "task_key": { "type": "string" }, "title": { "type": "string" }, "status": { "type": "string", "enum": ["planned", "in_progress", "blocked", "done"] }, "depends_on": { "type": "array", "items": { "type": "string" } }, "parallelizable": { "type": "boolean" }, "est_turns": { "anyOf": [{ "type": "integer", "minimum": -9007199254740991, "maximum": 9007199254740991 }, { "type": "null" }] }, "actual_turns": { "anyOf": [{ "type": "integer", "minimum": -9007199254740991, "maximum": 9007199254740991 }, { "type": "null" }] }, "actual_files": { "anyOf": [{ "type": "integer", "minimum": -9007199254740991, "maximum": 9007199254740991 }, { "type": "null" }] }, "started_at": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "completed_at": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "created_at": { "type": "string" } }, "required": ["id", "build_request_id", "changeset_id", "plan_version_id", "ordinal", "task_key", "title", "status", "depends_on", "parallelizable", "est_turns", "actual_turns", "actual_files", "started_at", "completed_at", "created_at"] } }, "dispatch_preview": { "anyOf": [{ "type": "object", "properties": { "status": { "type": "string", "enum": ["ready", "grooming", "held"] }, "digest": { "type": "string", "minLength": 1 }, "expires_at": { "type": "string" }, "included_order": { "type": "array", "items": { "type": "object", "properties": { "kind": { "type": "string", "enum": ["changeset", "task"] }, "id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "ordinal": { "type": "integer", "exclusiveMinimum": 0, "maximum": 9007199254740991 }, "title": { "type": "string" }, "changeset_ordinal": { "anyOf": [{ "type": "integer", "exclusiveMinimum": 0, "maximum": 9007199254740991 }, { "type": "null" }] }, "task_key": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "depends_on": { "type": "array", "items": { "type": "string" } }, "parallelizable": { "type": "boolean" }, "est_turns": { "anyOf": [{ "type": "integer", "minimum": -9007199254740991, "maximum": 9007199254740991 }, { "type": "null" }] }, "hold_reason": { "anyOf": [{ "type": "string", "enum": ["dependency", "serial", "evidence", "human", "runner_capability", "runner_version", "runner_sandbox", "capacity", "schedule", "paused", "policy", "unknown"] }, { "type": "null" }] }, "hold_detail": { "anyOf": [{ "type": "string" }, { "type": "null" }] } }, "required": ["kind", "id", "ordinal", "title", "changeset_ordinal", "task_key", "depends_on", "parallelizable", "est_turns", "hold_reason", "hold_detail"], "additionalProperties": false } }, "held_items": { "type": "array", "items": { "type": "object", "properties": { "kind": { "type": "string", "enum": ["changeset", "task"] }, "id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "ordinal": { "type": "integer", "exclusiveMinimum": 0, "maximum": 9007199254740991 }, "title": { "type": "string" }, "changeset_ordinal": { "anyOf": [{ "type": "integer", "exclusiveMinimum": 0, "maximum": 9007199254740991 }, { "type": "null" }] }, "task_key": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "depends_on": { "type": "array", "items": { "type": "string" } }, "parallelizable": { "type": "boolean" }, "est_turns": { "anyOf": [{ "type": "integer", "minimum": -9007199254740991, "maximum": 9007199254740991 }, { "type": "null" }] }, "hold_reason": { "anyOf": [{ "type": "string", "enum": ["dependency", "serial", "evidence", "human", "runner_capability", "runner_version", "runner_sandbox", "capacity", "schedule", "paused", "policy", "unknown"] }, { "type": "null" }] }, "hold_detail": { "anyOf": [{ "type": "string" }, { "type": "null" }] } }, "required": ["kind", "id", "ordinal", "title", "changeset_ordinal", "task_key", "depends_on", "parallelizable", "est_turns", "hold_reason", "hold_detail"], "additionalProperties": false } }, "dependencies": { "default": [], "type": "array", "items": { "type": "object", "properties": { "from_task_key": { "type": "string" }, "to_task_key": { "type": "string" } }, "required": ["from_task_key", "to_task_key"], "additionalProperties": false } }, "serial_lanes": { "default": [], "type": "array", "items": { "type": "string" } }, "file_collisions": { "default": [], "type": "array", "items": { "type": "object", "properties": { "a": { "type": "object", "properties": { "id": { "type": "string", "minLength": 1 }, "label": { "type": "string" } }, "required": ["id", "label"], "additionalProperties": false }, "b": { "type": "object", "properties": { "id": { "type": "string", "minLength": 1 }, "label": { "type": "string" } }, "required": ["id", "label"], "additionalProperties": false }, "kind": { "type": "string", "enum": ["same_file", "same_package", "same_version_holder"] }, "overlap": { "minItems": 1, "type": "array", "items": { "type": "string" } } }, "required": ["a", "b", "kind", "overlap"], "additionalProperties": false } }, "unknown_touch_sets": { "default": [], "type": "array", "items": { "type": "object", "properties": { "id": { "type": "string", "minLength": 1 }, "label": { "type": "string" } }, "required": ["id", "label"], "additionalProperties": false } }, "estimated_turns": { "anyOf": [{ "type": "integer", "minimum": -9007199254740991, "maximum": 9007199254740991 }, { "type": "null" }] }, "runner_requirements": { "type": "object", "properties": { "profile": { "type": "string", "enum": ["forge_build", "forge_merge", "grooming"] }, "min_cli_version": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "min_merge_version": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "sandbox_postures": { "type": "array", "items": { "type": "string", "enum": ["guard", "strict"] } } }, "required": ["profile", "min_cli_version", "min_merge_version", "sandbox_postures"], "additionalProperties": false }, "authority_budget_envelope": { "type": "object", "properties": { "automation_mode": { "type": "string", "enum": ["plan_only", "pr_only", "merge_after_checks", "deploy_preview", "deploy_production"] }, "inferred_risk": { "type": "string", "enum": ["low", "medium", "high", "critical"] }, "max_iterations": { "anyOf": [{ "type": "integer", "minimum": -9007199254740991, "maximum": 9007199254740991 }, { "type": "null" }] }, "max_wall_clock_seconds": { "anyOf": [{ "type": "integer", "minimum": -9007199254740991, "maximum": 9007199254740991 }, { "type": "null" }] }, "cost_budget_usd": { "anyOf": [{ "type": "string" }, { "type": "null" }] } }, "required": ["automation_mode", "inferred_risk", "max_iterations", "max_wall_clock_seconds", "cost_budget_usd"], "additionalProperties": false }, "grooming_required": { "type": "boolean" }, "grooming_reason": { "anyOf": [{ "type": "string" }, { "type": "null" }] } }, "required": ["status", "digest", "expires_at", "included_order", "held_items", "estimated_turns", "runner_requirements", "authority_budget_envelope", "grooming_required", "grooming_reason"], "additionalProperties": false }, { "type": "null" }] } }, "required": ["request", "current_phase", "phase_runs", "gates", "plan_versions", "changesets", "tasks", "dispatch_preview"] }, "help": "Show a Forge build request's detail: current phase, dispatch preview, phase-run history, and gates. Read-only; requires the Forge add-on.", "guide_slugs": ["agent-reference-map", "mcp-and-cli-guide"], "stages": ["operating_rhythm"], "related_command_ids": [] },
+      { "id": "software_factory.request.show", "title": "Show a Forge build request", "description": "The Forge request detail: the build request, its current phase, phase-run history, and gates. Read-only, entitlement-gated, tenant-scoped.", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "build_request_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" } }, "required": ["build_request_id"], "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "request": { "type": "object", "properties": { "id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "software_project_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "title": { "type": "string" }, "source_channel": { "type": "string", "enum": ["ui", "cli", "github_issue", "linear", "api"] }, "source_ref": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "status": { "type": "string", "enum": ["open", "in_progress", "paused", "blocked", "canceled", "closed"] }, "current_phase": { "type": "string", "enum": ["intake", "discovery_scoping", "plan_review", "implementation", "plan_conformance_review", "security_review", "qa_verification", "release_preview", "merge_or_deploy_gate", "closeout"] }, "inferred_risk": { "type": "string", "enum": ["low", "medium", "high", "critical"] }, "automation_mode": { "type": "string", "enum": ["plan_only", "pr_only", "merge_after_checks", "deploy_preview", "deploy_production"] }, "max_iterations": { "anyOf": [{ "type": "integer", "minimum": -9007199254740991, "maximum": 9007199254740991 }, { "type": "null" }] }, "max_wall_clock_seconds": { "anyOf": [{ "type": "integer", "minimum": -9007199254740991, "maximum": 9007199254740991 }, { "type": "null" }] }, "cost_budget_usd": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "iterations_used": { "type": "integer", "minimum": -9007199254740991, "maximum": 9007199254740991 }, "created_at": { "type": "string" }, "scheduler_state": { "anyOf": [{ "type": "object", "properties": { "status": { "type": "string", "enum": ["queued", "parked", "not_configured"] }, "reason": { "anyOf": [{ "type": "string", "enum": ["phase_run_not_found", "missing_owning_seat", "missing_runner_agent", "agent_not_execution_ready", "runner_not_paired", "work_order_expired", "runner_offline", "charter_manifest_not_signed", "charter_missing"] }, { "type": "null" }] }, "message": { "type": "string" }, "remediation_href": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "work_order_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] } }, "required": ["status", "reason", "message", "remediation_href", "work_order_id"] }, { "type": "null" }] }, "failure": { "anyOf": [{ "type": "object", "properties": { "kind": { "type": "string", "enum": ["phase_failed", "budget_exhausted", "plan_incomplete", "driver_stalled", "charter_not_ready"] }, "phase": { "anyOf": [{ "type": "string", "enum": ["intake", "discovery_scoping", "plan_review", "implementation", "plan_conformance_review", "security_review", "qa_verification", "release_preview", "merge_or_deploy_gate", "closeout"] }, { "type": "null" }] }, "summary": { "type": "string", "minLength": 1, "maxLength": 500 }, "detail": { "anyOf": [{ "type": "string", "maxLength": 4e3 }, { "type": "null" }] }, "action": { "type": "string", "enum": ["retry", "open_phase", "fix_and_resume"] }, "occurred_at": { "type": "string" } }, "required": ["kind", "phase", "summary", "detail", "action", "occurred_at"], "additionalProperties": false }, { "type": "null" }] } }, "required": ["id", "software_project_id", "title", "source_channel", "source_ref", "status", "current_phase", "inferred_risk", "automation_mode", "max_iterations", "max_wall_clock_seconds", "cost_budget_usd", "iterations_used", "created_at", "scheduler_state", "failure"] }, "current_phase": { "type": "string", "enum": ["intake", "discovery_scoping", "plan_review", "implementation", "plan_conformance_review", "security_review", "qa_verification", "release_preview", "merge_or_deploy_gate", "closeout"] }, "phase_runs": { "type": "array", "items": { "type": "object", "properties": { "id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "phase": { "type": "string", "enum": ["intake", "discovery_scoping", "plan_review", "implementation", "plan_conformance_review", "security_review", "qa_verification", "release_preview", "merge_or_deploy_gate", "closeout"] }, "status": { "type": "string", "enum": ["pending", "running", "passed", "failed", "blocked", "skipped"] }, "attempt_no": { "type": "integer", "minimum": -9007199254740991, "maximum": 9007199254740991 }, "entered_at": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "exited_at": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "created_at": { "type": "string" }, "scheduler_state": { "anyOf": [{ "type": "object", "properties": { "status": { "type": "string", "enum": ["queued", "parked", "not_configured"] }, "reason": { "anyOf": [{ "type": "string", "enum": ["phase_run_not_found", "missing_owning_seat", "missing_runner_agent", "agent_not_execution_ready", "runner_not_paired", "work_order_expired", "runner_offline", "charter_manifest_not_signed", "charter_missing"] }, { "type": "null" }] }, "message": { "type": "string" }, "remediation_href": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "work_order_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] } }, "required": ["status", "reason", "message", "remediation_href", "work_order_id"] }, { "type": "null" }] } }, "required": ["id", "phase", "status", "attempt_no", "entered_at", "exited_at", "created_at", "scheduler_state"] } }, "gates": { "type": "array", "items": { "type": "object", "properties": { "id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "gate_type": { "type": "string", "enum": ["plan_review", "security_signoff", "merge_or_deploy", "authority_change", "production_deploy"] }, "status": { "type": "string", "enum": ["pending", "approved", "rejected", "held"] }, "phase_run_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] }, "resolved_by_user_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] }, "rationale": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "created_at": { "type": "string" } }, "required": ["id", "gate_type", "status", "phase_run_id", "resolved_by_user_id", "rationale", "created_at"] } }, "plan_versions": { "type": "array", "items": { "type": "object", "properties": { "id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "build_request_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "version_no": { "type": "integer", "minimum": -9007199254740991, "maximum": 9007199254740991 }, "status": { "type": "string", "enum": ["draft", "needs_clarification", "ready_for_plan_review", "approved", "rejected"] }, "summary": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "confidence_score": { "anyOf": [{ "type": "integer", "minimum": -9007199254740991, "maximum": 9007199254740991 }, { "type": "null" }] }, "clarifying_questions": { "default": [], "type": "array", "items": { "type": "string" } }, "clarification_answers": { "default": [], "type": "array", "items": { "type": "object", "properties": { "question": { "type": "string" }, "answer": { "type": "string" } }, "required": ["question", "answer"] } }, "planning_artifact": { "anyOf": [{ "type": "object", "properties": { "scope": { "type": "string" }, "plan_steps": { "default": [], "type": "array", "items": { "type": "string" } }, "files_or_systems": { "default": [], "type": "array", "items": { "type": "string" } }, "verification": { "default": [], "type": "array", "items": { "type": "string" } }, "risks": { "default": [], "type": "array", "items": { "type": "string" } }, "tasks": { "default": [], "type": "array", "items": { "type": "object", "properties": { "task_key": { "type": "string" }, "title": { "type": "string" }, "depends_on": { "default": [], "type": "array", "items": { "type": "string" } }, "parallelizable": { "default": false, "type": "boolean" }, "est_turns": { "default": null, "anyOf": [{ "type": "integer", "minimum": -9007199254740991, "maximum": 9007199254740991 }, { "type": "null" }] }, "files_likely": { "default": [], "type": "array", "items": { "type": "string" } }, "verification": { "default": [], "type": "array", "items": { "type": "string" } } }, "required": ["task_key", "title"] } }, "changesets": { "default": [], "type": "array", "items": { "type": "object", "properties": { "ordinal": { "type": "integer", "minimum": -9007199254740991, "maximum": 9007199254740991 }, "title": { "type": "string" }, "split_criterion": { "type": "string" }, "task_keys": { "default": [], "type": "array", "items": { "type": "string" } } }, "required": ["ordinal", "title", "split_criterion"] } } }, "required": ["scope"] }, { "type": "null" }] }, "created_by_seat_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] }, "created_at": { "type": "string" } }, "required": ["id", "build_request_id", "version_no", "status", "summary", "confidence_score", "planning_artifact", "created_by_seat_id", "created_at"] } }, "changesets": { "type": "array", "items": { "type": "object", "properties": { "id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "build_request_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "ordinal": { "type": "integer", "minimum": -9007199254740991, "maximum": 9007199254740991 }, "title": { "type": "string" }, "split_criterion": { "type": "string", "enum": ["single", "risk_isolation", "reviewability_budget", "deploy_ordering", "independent_revert"] }, "status": { "type": "string", "enum": ["planned", "in_progress", "in_review", "merged", "declined"] }, "branch_name": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "pr_number": { "anyOf": [{ "type": "integer", "minimum": -9007199254740991, "maximum": 9007199254740991 }, { "type": "null" }] }, "pr_url": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "pr_draft": { "type": "boolean" }, "inferred_risk": { "anyOf": [{ "type": "string", "enum": ["low", "medium", "high", "critical"] }, { "type": "null" }] }, "merged_at": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "created_at": { "type": "string" } }, "required": ["id", "build_request_id", "ordinal", "title", "split_criterion", "status", "branch_name", "pr_number", "pr_url", "pr_draft", "inferred_risk", "merged_at", "created_at"] } }, "tasks": { "type": "array", "items": { "type": "object", "properties": { "id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "build_request_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "changeset_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "plan_version_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "ordinal": { "type": "integer", "minimum": -9007199254740991, "maximum": 9007199254740991 }, "task_key": { "type": "string" }, "title": { "type": "string" }, "status": { "type": "string", "enum": ["planned", "in_progress", "blocked", "done"] }, "depends_on": { "type": "array", "items": { "type": "string" } }, "parallelizable": { "type": "boolean" }, "est_turns": { "anyOf": [{ "type": "integer", "minimum": -9007199254740991, "maximum": 9007199254740991 }, { "type": "null" }] }, "actual_turns": { "anyOf": [{ "type": "integer", "minimum": -9007199254740991, "maximum": 9007199254740991 }, { "type": "null" }] }, "actual_files": { "anyOf": [{ "type": "integer", "minimum": -9007199254740991, "maximum": 9007199254740991 }, { "type": "null" }] }, "started_at": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "completed_at": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "created_at": { "type": "string" } }, "required": ["id", "build_request_id", "changeset_id", "plan_version_id", "ordinal", "task_key", "title", "status", "depends_on", "parallelizable", "est_turns", "actual_turns", "actual_files", "started_at", "completed_at", "created_at"] } }, "dispatch_preview": { "anyOf": [{ "type": "object", "properties": { "status": { "type": "string", "enum": ["ready", "grooming", "held"] }, "digest": { "type": "string", "minLength": 1 }, "expires_at": { "type": "string" }, "included_order": { "type": "array", "items": { "type": "object", "properties": { "kind": { "type": "string", "enum": ["changeset", "task"] }, "id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "ordinal": { "type": "integer", "exclusiveMinimum": 0, "maximum": 9007199254740991 }, "title": { "type": "string" }, "changeset_ordinal": { "anyOf": [{ "type": "integer", "exclusiveMinimum": 0, "maximum": 9007199254740991 }, { "type": "null" }] }, "task_key": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "depends_on": { "type": "array", "items": { "type": "string" } }, "parallelizable": { "type": "boolean" }, "est_turns": { "anyOf": [{ "type": "integer", "minimum": -9007199254740991, "maximum": 9007199254740991 }, { "type": "null" }] }, "hold_reason": { "anyOf": [{ "type": "string", "enum": ["dependency", "serial", "evidence", "human", "runner_capability", "runner_version", "runner_sandbox", "capacity", "schedule", "paused", "policy", "unknown"] }, { "type": "null" }] }, "hold_detail": { "anyOf": [{ "type": "string" }, { "type": "null" }] } }, "required": ["kind", "id", "ordinal", "title", "changeset_ordinal", "task_key", "depends_on", "parallelizable", "est_turns", "hold_reason", "hold_detail"], "additionalProperties": false } }, "held_items": { "type": "array", "items": { "type": "object", "properties": { "kind": { "type": "string", "enum": ["changeset", "task"] }, "id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "ordinal": { "type": "integer", "exclusiveMinimum": 0, "maximum": 9007199254740991 }, "title": { "type": "string" }, "changeset_ordinal": { "anyOf": [{ "type": "integer", "exclusiveMinimum": 0, "maximum": 9007199254740991 }, { "type": "null" }] }, "task_key": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "depends_on": { "type": "array", "items": { "type": "string" } }, "parallelizable": { "type": "boolean" }, "est_turns": { "anyOf": [{ "type": "integer", "minimum": -9007199254740991, "maximum": 9007199254740991 }, { "type": "null" }] }, "hold_reason": { "anyOf": [{ "type": "string", "enum": ["dependency", "serial", "evidence", "human", "runner_capability", "runner_version", "runner_sandbox", "capacity", "schedule", "paused", "policy", "unknown"] }, { "type": "null" }] }, "hold_detail": { "anyOf": [{ "type": "string" }, { "type": "null" }] } }, "required": ["kind", "id", "ordinal", "title", "changeset_ordinal", "task_key", "depends_on", "parallelizable", "est_turns", "hold_reason", "hold_detail"], "additionalProperties": false } }, "dependencies": { "default": [], "type": "array", "items": { "type": "object", "properties": { "from_task_key": { "type": "string" }, "to_task_key": { "type": "string" } }, "required": ["from_task_key", "to_task_key"], "additionalProperties": false } }, "serial_lanes": { "default": [], "type": "array", "items": { "type": "string" } }, "file_collisions": { "default": [], "type": "array", "items": { "type": "object", "properties": { "a": { "type": "object", "properties": { "id": { "type": "string", "minLength": 1 }, "label": { "type": "string" } }, "required": ["id", "label"], "additionalProperties": false }, "b": { "type": "object", "properties": { "id": { "type": "string", "minLength": 1 }, "label": { "type": "string" } }, "required": ["id", "label"], "additionalProperties": false }, "kind": { "type": "string", "enum": ["same_file", "same_package", "same_version_holder"] }, "overlap": { "minItems": 1, "type": "array", "items": { "type": "string" } } }, "required": ["a", "b", "kind", "overlap"], "additionalProperties": false } }, "unknown_touch_sets": { "default": [], "type": "array", "items": { "type": "object", "properties": { "id": { "type": "string", "minLength": 1 }, "label": { "type": "string" } }, "required": ["id", "label"], "additionalProperties": false } }, "estimated_turns": { "anyOf": [{ "type": "integer", "minimum": -9007199254740991, "maximum": 9007199254740991 }, { "type": "null" }] }, "runner_requirements": { "type": "object", "properties": { "profile": { "type": "string", "enum": ["forge_build", "forge_merge", "grooming"] }, "min_cli_version": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "min_merge_version": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "sandbox_postures": { "type": "array", "items": { "type": "string", "enum": ["guard", "strict"] } } }, "required": ["profile", "min_cli_version", "min_merge_version", "sandbox_postures"], "additionalProperties": false }, "authority_budget_envelope": { "type": "object", "properties": { "automation_mode": { "type": "string", "enum": ["plan_only", "pr_only", "merge_after_checks", "deploy_preview", "deploy_production"] }, "inferred_risk": { "type": "string", "enum": ["low", "medium", "high", "critical"] }, "max_iterations": { "anyOf": [{ "type": "integer", "minimum": -9007199254740991, "maximum": 9007199254740991 }, { "type": "null" }] }, "max_wall_clock_seconds": { "anyOf": [{ "type": "integer", "minimum": -9007199254740991, "maximum": 9007199254740991 }, { "type": "null" }] }, "cost_budget_usd": { "anyOf": [{ "type": "string" }, { "type": "null" }] } }, "required": ["automation_mode", "inferred_risk", "max_iterations", "max_wall_clock_seconds", "cost_budget_usd"], "additionalProperties": false }, "grooming_required": { "type": "boolean" }, "grooming_reason": { "anyOf": [{ "type": "string" }, { "type": "null" }] } }, "required": ["status", "digest", "expires_at", "included_order", "held_items", "estimated_turns", "runner_requirements", "authority_budget_envelope", "grooming_required", "grooming_reason"], "additionalProperties": false }, { "type": "null" }] } }, "required": ["request", "current_phase", "phase_runs", "gates", "plan_versions", "changesets", "tasks", "dispatch_preview"] }, "help": "Show a Forge build request's detail: current phase, dispatch preview, phase-run history, and gates. Read-only; requires the Forge add-on.", "guide_slugs": ["agent-reference-map", "mcp-and-cli-guide"], "stages": ["operating_rhythm"], "related_command_ids": [] },
       { "id": "software_factory.secret_request.list", "title": "List Forge secret requests", "description": "Durable Forge missing-secret/config requests. Metadata only; no secret values or vault refs are returned.", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "always_human", "risk_flags": ["credential"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "software_project_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] }, "status": { "anyOf": [{ "type": "string", "enum": ["pending", "fulfilled", "rejected", "canceled"] }, { "type": "null" }] } }, "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "requests": { "type": "array", "items": { "type": "object", "properties": { "id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "software_project_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "environment": { "type": "string", "enum": ["development", "preview", "production"] }, "requested_by_seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "action": { "type": "string" }, "key_name": { "type": "string" }, "reason": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "status": { "type": "string", "enum": ["pending", "fulfilled", "rejected", "canceled"] }, "approval_task_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] }, "created_at": { "type": "string" } }, "required": ["id", "software_project_id", "environment", "requested_by_seat_id", "action", "key_name", "reason", "status", "approval_task_id", "created_at"] } } }, "required": ["requests"] }, "help": "List durable Forge missing-secret requests and their approval-task status. Metadata only; no secret values or vault refs.", "guide_slugs": ["agent-reference-map", "mcp-and-cli-guide"], "stages": ["operating_rhythm"], "related_command_ids": [] },
       { "id": "software_factory.secret.grant", "title": "Grant a Forge secret", "description": "A human grants a seat scoped access to a project secret by VAULT REF (project \xD7 env \xD7 seat \xD7 action \xD7 key). Postgres stores only the pointer \u2014 never secret material (invariant #5). Owner-only, human-gated. Entitlement-gated.", "required_scope": "tenant_admin", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin", "credential"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "software_project_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "environment": { "type": "string", "enum": ["development", "preview", "production"] }, "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "action": { "type": "string", "minLength": 1, "maxLength": 120 }, "key_name": { "type": "string", "minLength": 1, "maxLength": 200 }, "vault_ref": { "type": "string", "minLength": 1, "maxLength": 500, "pattern": "^(?:infisical|doppler|local-dev):\\/\\/\\S+$" } }, "required": ["software_project_id", "environment", "seat_id", "action", "key_name", "vault_ref"], "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "grant_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "key_name": { "type": "string" }, "environment": { "type": "string", "enum": ["development", "preview", "production"] }, "status": { "type": "string", "enum": ["active", "revoked"] } }, "required": ["grant_id", "key_name", "environment", "status"] }, "help": "A human grants a seat scoped access to a project secret by vault ref (Postgres stores only the pointer, never secret material). Owner-only and human-gated.", "guide_slugs": ["agent-reference-map", "mcp-and-cli-guide"], "stages": ["operating_rhythm"], "related_command_ids": [] },
       { "id": "software_factory.secret.request", "title": "Request a Forge secret grant", "description": "An agent or user REQUESTS access to a project secret by key (draft-and-confirm \u2014 no value, no grant). Records the ask as a durable event for a human to grant. Never accepts a secret value (invariant #5). Entitlement-gated.", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "always_human", "risk_flags": ["credential"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "software_project_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "environment": { "type": "string", "enum": ["development", "preview", "production"] }, "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "action": { "type": "string", "minLength": 1, "maxLength": 120 }, "key_name": { "type": "string", "minLength": 1, "maxLength": 200 }, "reason": { "type": "string", "maxLength": 2e3 } }, "required": ["software_project_id", "environment", "seat_id", "action", "key_name"], "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "requested": { "type": "boolean", "const": true }, "credential_request_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "approval_task_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "software_project_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "environment": { "type": "string", "enum": ["development", "preview", "production"] }, "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "key_name": { "type": "string" } }, "required": ["requested", "credential_request_id", "approval_task_id", "software_project_id", "environment", "seat_id", "key_name"] }, "help": "Request access to a project secret by key; persists the request and creates a human approval task. Never accepts a secret value.", "guide_slugs": ["agent-reference-map", "mcp-and-cli-guide"], "stages": ["operating_rhythm"], "related_command_ids": [] },
@@ -13543,7 +13544,7 @@ var init_command_discovery = __esm({
       { "id": "tenant.anthropic_key.disable", "title": "Disable tenant Anthropic key", "description": "Revoke the active tenant Anthropic BYOK credential while preserving audit history, after validating managed inference fallback is available.", "required_scope": "tenant_admin", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin", "credential", "destructive", "self_approval", "spend"], "rationale": "Tenant Anthropic key writes and disables change credential posture and managed inference spend, so a human owner/admin must decide." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": {}, "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "tenant_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "credential_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] }, "disabled": { "type": "boolean" }, "already_disabled": { "type": "boolean" }, "managed_fallback_ready": { "type": "boolean" } }, "required": ["tenant_id", "credential_id", "disabled", "already_disabled", "managed_fallback_ready"], "additionalProperties": false }, "help": "Disable tenant BYOK only after managed Anthropic fallback is available; this revokes metadata without reading or returning the old key.", "guide_slugs": ["ai-model-data-handling-guide", "tool-access-and-vault", "security-model-guide", "mcp-and-cli-guide"], "stages": ["staffing"], "related_command_ids": ["agent_setup.get", "agent_setup.start", "agent_setup.update", "agent_template.list", "agent.configure_tools", "agent.create_custom", "agent.create_from_template", "agent.fleet_digest", "agent.get_run", "agent.go_live", "agent.list_fleet", "agent.list_runs", "agent.list_tool_calls", "agent.run_dry_run", "agent.run_now", "agent.status", "charter.approve", "charter.draft", "charter.sign_manifest", "compass.set", "confirmation.approve", "confirmation.reject", "credential.ingress", "deliverable.accept", "deliverable.attach", "deliverable.create", "deliverable.get", "deliverable.list", "deliverable.reject", "error_log.list", "error_log.resolve", "error_log.supersede", "escalation.get", "escalation.list", "escalation.reject", "escalation.resolve", "implementation_access.abandon", "implementation_access.complete", "implementation_access.status", "integration.list", "integration.readiness", "integration.status", "integration.test", "mcp_token.create", "mcp_token.list", "mcp_token.revoke", "onboarding.attach_reference", "onboarding.rehearse", "onboarding.resume", "onboarding.status", "onboarding.upload_context", "runner.diagnose", "runner.pairing.start", "runner.repair", "seat.create", "seat.create_complete", "skill.assign_to_seat", "skill.assigned.list", "skill.catalog", "skill.check_dependencies", "skill.create", "skill.enable_catalog", "skill.file.get", "skill.get", "skill.import_github", "skill.import_upload", "skill.install_local", "skill.list", "skill.publish", "skill.revoke_from_seat", "skill.sync_local", "skill.update_draft", "staffing.assign", "system.health", "tenant.anthropic_key.save", "tenant.rename", "tool_grants.tenant.update", "tool.catalog", "usage.report", "usage.snapshot", "user.tenants", "user.use_tenant", "user.whoami", "work_order.enqueue"] },
       { "id": "tenant.anthropic_key.save", "title": "Save tenant Anthropic key", "description": "Store a tenant-scoped Anthropic key in the configured vault.", "required_scope": "tenant", "confirmation": "credential_flow", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin", "credential", "destructive", "self_approval", "spend"], "rationale": "Tenant Anthropic key writes and disables change credential posture and managed inference spend, so a human owner/admin must decide." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "api_key": { "type": "string", "minLength": 12 } }, "required": ["api_key"], "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "stored": { "type": "boolean", "const": true } }, "required": ["stored"], "additionalProperties": false }, "help": "Save model-provider credentials only through vault-backed flows and keep raw keys out of prompts, logs, and command metadata.", "guide_slugs": ["ai-model-data-handling-guide", "tool-access-and-vault", "security-model-guide", "mcp-and-cli-guide"], "stages": ["staffing"], "related_command_ids": ["agent.configure_tools", "agent.get_run", "agent.list_tool_calls", "agent.run_now", "charter.sign_manifest", "credential.ingress", "integration.readiness", "integration.status", "mcp_token.create", "mcp_token.revoke", "runner.pairing.start", "tenant.anthropic_key.disable", "tool.catalog", "work_order.enqueue"] },
       { "id": "tenant.create", "title": "Create additional company", "description": "Create a new clean company for an already-provisioned account after checking tenant.create.additional entitlement.", "required_scope": "tenant_admin", "confirmation": "none", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": false, "input_schema": { "type": "object", "properties": { "company_name": { "type": "string", "minLength": 2, "maxLength": 120 } }, "required": ["company_name"], "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "tenant_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "slug": { "type": "string", "minLength": 1 }, "name": { "type": "string", "minLength": 1 }, "created": { "type": "boolean", "const": true }, "source_tenant_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "entitlement_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "accounting_event_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "active": { "type": "boolean" }, "next_action": { "type": "string", "minLength": 1 } }, "required": ["tenant_id", "slug", "name", "created", "source_tenant_id", "entitlement_id", "accounting_event_id", "active", "next_action"], "additionalProperties": false }, "help": "Create an additional clean company from an existing company session. Requires tenant.create.additional entitlement; first-company bootstrap stays signup.provision_tenant.", "guide_slugs": ["mcp-and-cli-guide", "settings-guide", "agent-reference-map"], "stages": ["company_setup"], "related_command_ids": [] },
-      { "id": "tenant.model_gateway_policy.update", "title": "Update model gateway policy", "description": "Unlock or relock managed models that do not offer a zero-retention (ZDR) tier (ADR-0019). Locked (the conservative default) restricts the AI Gateway to zero-retention-eligible managed models. Owner-only and human-gated: unlocking is a deliberate ADR-0018 \xA76 standing authorization that lets managed brains without a zero-retention tier run. This provider retains data up to 30 days for abuse monitoring.", "required_scope": "tenant_admin", "confirmation": "dangerous", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin", "destructive"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "allow_non_zdr_models": { "type": "boolean" } }, "required": ["allow_non_zdr_models"], "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "model_gateway_policy": { "type": "object", "properties": { "allow_non_zdr_models": { "type": "boolean" }, "explicit": { "type": "boolean" } }, "required": ["allow_non_zdr_models", "explicit"], "additionalProperties": false } }, "required": ["model_gateway_policy"], "additionalProperties": false }, "help": "Unlock or relock managed models that do not offer a zero-retention (ZDR) tier (ADR-0019). Locked (default) restricts the AI Gateway to zero-retention-eligible managed models. Owner-only and human-gated; unlocking establishes an ADR-0018 \xA76 standing authorization and surfaces the per-model retention disclosure.", "guide_slugs": ["settings-guide", "security-model-guide", "ai-model-data-handling-guide"], "stages": ["operating_rhythm"], "related_command_ids": ["agent.configure_tools", "agent.create_custom", "agent.go_live", "agent.run_dry_run", "agent.update_schedule", "aicos.brain_settings.get", "aicos.brain_settings.update", "charter.set", "charter.sign_manifest", "confirmation.approve", "graph.get", "integration.list", "integration.readiness", "integration.status", "integration.test", "mcp_token.create", "mcp_token.list", "mcp_token.revoke", "onboarding.create_invite", "onboarding.status", "runner.list", "seat.get", "settings.agent_policy.get", "settings.agent_policy.update", "settings.confirmation_policy.get", "settings.confirmation_policy.update", "settings.get", "settings.member_visibility.get", "settings.member_visibility.update", "settings.product_learning.get", "settings.product_learning.update", "settings.sync_brief_scope.get", "settings.sync_brief_scope.update", "settings.update", "skill.assign_to_seat", "tenant.rename"] },
+      { "id": "tenant.model_gateway_policy.update", "title": "Update model gateway policy", "description": "Unlock or relock managed models that do not offer a zero-retention (ZDR) tier (ADR-0019). Locked (the conservative default) restricts the AI Gateway to zero-retention-eligible managed models. Owner-only and human-gated: unlocking is a deliberate ADR-0018 \xA76 standing authorization that lets managed brains without a zero-retention tier run. This provider retains data up to 30 days for abuse monitoring.", "required_scope": "tenant_admin", "confirmation": "dangerous", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin", "destructive"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "allow_non_zdr_models": { "type": "boolean" } }, "required": ["allow_non_zdr_models"], "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "model_gateway_policy": { "type": "object", "properties": { "allow_non_zdr_models": { "type": "boolean" }, "explicit": { "type": "boolean" } }, "required": ["allow_non_zdr_models", "explicit"], "additionalProperties": false } }, "required": ["model_gateway_policy"], "additionalProperties": false }, "help": "Unlock or relock managed models that do not offer a zero-retention (ZDR) tier (ADR-0019). Locked (default) restricts the AI Gateway to zero-retention-eligible managed models. Owner-only and human-gated; unlocking establishes an ADR-0018 \xA76 standing authorization and surfaces the per-model retention disclosure.", "guide_slugs": ["settings-guide", "security-model-guide", "ai-model-data-handling-guide"], "stages": ["operating_rhythm"], "related_command_ids": ["agent.configure_tools", "agent.create_custom", "agent.go_live", "agent.run_dry_run", "agent.update_schedule", "aicos.brain_settings.get", "aicos.brain_settings.update", "charter.backfill_stock_evidence", "charter.set", "charter.sign_manifest", "confirmation.approve", "graph.get", "integration.list", "integration.readiness", "integration.status", "integration.test", "mcp_token.create", "mcp_token.list", "mcp_token.revoke", "onboarding.create_invite", "onboarding.status", "runner.list", "seat.get", "settings.agent_policy.get", "settings.agent_policy.update", "settings.confirmation_policy.get", "settings.confirmation_policy.update", "settings.get", "settings.member_visibility.get", "settings.member_visibility.update", "settings.product_learning.get", "settings.product_learning.update", "settings.sync_brief_scope.get", "settings.sync_brief_scope.update", "settings.update", "skill.assign_to_seat", "tenant.rename"] },
       { "id": "tenant.rename", "title": "Rename company", "description": "Rename the current tenant/company. The rename is human-gated and writes an audit event.", "required_scope": "tenant_admin", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "company_name": { "type": "string", "minLength": 2, "maxLength": 120 } }, "required": ["company_name"], "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "tenant_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "name": { "type": "string" }, "previous_name": { "type": "string" } }, "required": ["tenant_id", "name", "previous_name"], "additionalProperties": false }, "help": "Rename the current company; owner-only, human-gated, and audited as an event.", "guide_slugs": ["settings-guide", "mcp-and-cli-guide"], "stages": ["company_setup", "operating_rhythm"], "related_command_ids": ["agent_setup.get", "agent_setup.start", "agent_setup.update", "agent_template.list", "agent.configure_tools", "agent.create_custom", "agent.create_from_template", "agent.fleet_digest", "agent.get_run", "agent.go_live", "agent.list_fleet", "agent.list_runs", "agent.list_tool_calls", "agent.run_dry_run", "agent.status", "aicos.brain_settings.get", "aicos.brain_settings.update", "charter.approve", "charter.draft", "compass.set", "confirmation.approve", "confirmation.reject", "deliverable.accept", "deliverable.attach", "deliverable.create", "deliverable.get", "deliverable.list", "deliverable.reject", "error_log.list", "error_log.resolve", "error_log.supersede", "escalation.get", "escalation.list", "escalation.reject", "escalation.resolve", "implementation_access.abandon", "implementation_access.complete", "implementation_access.status", "integration.list", "integration.readiness", "integration.status", "integration.test", "mcp_token.create", "mcp_token.list", "mcp_token.revoke", "onboarding.attach_reference", "onboarding.create_invite", "onboarding.rehearse", "onboarding.resume", "onboarding.status", "onboarding.upload_context", "runner.diagnose", "runner.repair", "seat.create", "seat.create_complete", "settings.agent_policy.get", "settings.agent_policy.update", "settings.confirmation_policy.get", "settings.confirmation_policy.update", "settings.get", "settings.member_visibility.get", "settings.member_visibility.update", "settings.product_learning.get", "settings.product_learning.update", "settings.sync_brief_scope.get", "settings.sync_brief_scope.update", "settings.update", "skill.assign_to_seat", "skill.assigned.list", "skill.catalog", "skill.check_dependencies", "skill.create", "skill.enable_catalog", "skill.file.get", "skill.get", "skill.import_github", "skill.import_upload", "skill.install_local", "skill.list", "skill.publish", "skill.revoke_from_seat", "skill.sync_local", "skill.update_draft", "staffing.assign", "system.health", "tenant.anthropic_key.disable", "tenant.model_gateway_policy.update", "tool_grants.tenant.update", "usage.report", "usage.snapshot", "user.tenants", "user.use_tenant", "user.whoami"] },
       { "id": "tool_grants.agent.effective", "title": "List agent effective capability grants", "description": "Read the effective capability grants for one agent, including the lower-of-ceiling-and-selection access level and compile status. Returns metadata only.", "required_scope": "seat", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "agent_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" } }, "required": ["agent_id"], "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "agent_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "seat_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "grants": { "type": "array", "items": { "type": "object", "properties": { "tool_grant_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "agent_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "capability_id": { "type": "string", "minLength": 1 }, "connection": { "type": "object", "properties": { "integration_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] }, "provider": { "anyOf": [{ "type": "string", "minLength": 1 }, { "type": "null" }] }, "account_email": { "anyOf": [{ "type": "string", "minLength": 1 }, { "type": "null" }] }, "account_label": { "anyOf": [{ "type": "string", "minLength": 1 }, { "type": "null" }] }, "status": { "anyOf": [{ "type": "string", "enum": ["connected", "error", "disconnected"] }, { "type": "null" }] } }, "required": ["integration_id", "provider", "account_email", "account_label", "status"], "additionalProperties": false }, "availability": { "type": "string", "enum": ["available", "connection_required", "scope_missing", "revoked", "disabled"] }, "source": { "type": "string", "enum": ["connection", "catalog", "manual", "aicos_automatic", "system", "suggested", "human", "aicos_override", "migration"] }, "grant_source": { "anyOf": [{ "type": "string", "enum": ["charter"] }, { "type": "null" }] }, "ceiling_source": { "type": "string", "enum": ["tenant_policy", "unset"] }, "max_access_level": { "type": "string", "enum": ["off", "read", "draft", "write", "admin"] }, "default_agent_access_level": { "type": "string", "enum": ["off", "read", "draft", "write", "admin"] }, "selected_access_level": { "type": "string", "enum": ["off", "read", "draft", "write", "admin"] }, "effective_access_level": { "type": "string", "enum": ["off", "read", "draft", "write", "admin"] }, "compile_status": { "type": "string", "enum": ["compiled", "unavailable", "revoked", "off", "unsupported_lane"] } }, "required": ["tool_grant_id", "agent_id", "capability_id", "connection", "availability", "source", "grant_source", "ceiling_source", "max_access_level", "default_agent_access_level", "selected_access_level", "effective_access_level", "compile_status"], "additionalProperties": false } }, "ceiling_enforcement": { "default": "sign_time_only", "type": "string", "enum": ["sign_time_only", "call_time"] } }, "required": ["agent_id", "seat_id", "grants"], "additionalProperties": false }, "help": "Read one agent's effective capability grants after tenant ceilings, agent selections, and compile availability are applied.", "guide_slugs": ["agent-staffing-playbook", "security-model-guide"], "stages": ["staffing", "operating_rhythm"], "related_command_ids": [] },
       { "id": "tool_grants.tenant.list", "title": "List tenant capability grants", "description": "Read the tenant capability ceiling/default matrix with connection, availability, source, ceiling, and compile status. Returns metadata only.", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": {}, "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "grants": { "type": "array", "items": { "type": "object", "properties": { "tool_grant_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "capability_id": { "type": "string", "minLength": 1 }, "connection": { "type": "object", "properties": { "integration_id": { "anyOf": [{ "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, { "type": "null" }] }, "provider": { "anyOf": [{ "type": "string", "minLength": 1 }, { "type": "null" }] }, "account_email": { "anyOf": [{ "type": "string", "minLength": 1 }, { "type": "null" }] }, "account_label": { "anyOf": [{ "type": "string", "minLength": 1 }, { "type": "null" }] }, "status": { "anyOf": [{ "type": "string", "enum": ["connected", "error", "disconnected"] }, { "type": "null" }] } }, "required": ["integration_id", "provider", "account_email", "account_label", "status"], "additionalProperties": false }, "availability": { "type": "string", "enum": ["available", "connection_required", "scope_missing", "revoked", "disabled"] }, "source": { "type": "string", "enum": ["connection", "catalog", "manual", "aicos_automatic", "system", "suggested", "human", "aicos_override", "migration"] }, "max_access_level": { "type": "string", "enum": ["off", "read", "draft", "write", "admin"] }, "default_agent_access_level": { "type": "string", "enum": ["off", "read", "draft", "write", "admin"] }, "compile_status": { "type": "string", "enum": ["compiled", "unavailable", "revoked", "off", "unsupported_lane"] } }, "required": ["tool_grant_id", "capability_id", "connection", "availability", "source", "max_access_level", "default_agent_access_level", "compile_status"], "additionalProperties": false } } }, "required": ["grants"], "additionalProperties": false }, "help": "List tenant capability ceilings/defaults with connection, availability, source, and compile status. Read-only.", "guide_slugs": ["settings-guide", "security-model-guide", "agent-staffing-playbook"], "stages": ["staffing", "operating_rhythm"], "related_command_ids": [] },
@@ -13561,7 +13562,7 @@ var init_command_discovery = __esm({
       { "id": "work.log", "title": "Log work", "description": "Write a lightweight activity breadcrumb event for the acting seat.", "required_scope": "seat", "confirmation": "none", "trusted_execution": { "mode": "eligible", "risk_flags": [], "rationale": "Eligible for Trusted execution only when the signed Charter manifest, tenant policy, budget, and command guard allow it." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "note": { "type": "string", "minLength": 1 } }, "required": ["note"], "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "event_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "type": { "type": "string", "const": "task" } }, "required": ["event_id", "type"], "additionalProperties": false }, "help": "Log a lightweight work breadcrumb so the seat's activity is visible without durable side effects.", "guide_slugs": ["how-agents-work"], "stages": ["operating_rhythm"], "related_command_ids": ["agent_setup.get", "agent_setup.update", "agent.decommission", "agent.fleet_digest", "agent.go_live", "agent.list_fleet", "agent.status", "escalation.raise", "friction.file_issue", "goal.set_status", "seat.get", "signal.confirm_reading", "staffing.assign_agent_dry_run", "status.record", "system.health", "task.accept", "task.complete", "task.create", "task.decline", "task.list", "team.health_score"] },
       { "id": "work.record", "title": "Record work", "description": "Append one or more structured business-activity records to the agent work ledger for the acting seat. Batch-accepting, append-only, secret-redacted, and idempotent on dedup_key. Corrections are superseding records.", "required_scope": "seat", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "input_schema": { "type": "object", "properties": { "records": { "minItems": 1, "maxItems": 100, "type": "array", "items": { "type": "object", "properties": { "verb": { "type": "string", "enum": ["created", "updated", "removed", "sent", "received", "contacted", "replied", "offered", "accepted", "rejected", "assessed", "announced", "assigned", "invited", "flagged", "booked", "searched", "filed", "extracted", "escalated"] }, "outcome": { "default": "success", "type": "string", "enum": ["success", "warning", "error", "held"] }, "object": { "type": "object", "properties": { "kind": { "type": "string", "minLength": 1, "maxLength": 128 }, "external_id": { "type": "string", "minLength": 1, "maxLength": 512 }, "label": { "type": "string", "minLength": 1, "maxLength": 200 }, "url": { "type": "string", "maxLength": 2048 } }, "required": ["kind", "external_id"], "additionalProperties": false }, "target": { "type": "object", "properties": { "kind": { "type": "string", "minLength": 1, "maxLength": 128 }, "external_id": { "type": "string", "minLength": 1, "maxLength": 512 }, "label": { "type": "string", "minLength": 1, "maxLength": 200 }, "url": { "type": "string", "maxLength": 2048 } }, "required": ["kind", "external_id"], "additionalProperties": false }, "context": { "type": "object", "properties": { "kind": { "type": "string", "minLength": 1, "maxLength": 128 }, "external_id": { "type": "string", "minLength": 1, "maxLength": 512 }, "label": { "type": "string", "minLength": 1, "maxLength": 200 } }, "required": ["kind", "external_id"], "additionalProperties": false }, "run_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "tool_call_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "evidence_ref": { "type": "string", "minLength": 1, "maxLength": 2048 }, "template_ref": { "type": "string", "minLength": 1, "maxLength": 512 }, "quantity": { "default": 1, "type": "integer", "minimum": 1, "maximum": 1e6 }, "summary": { "type": "string", "minLength": 1, "maxLength": 2e3 }, "details": { "default": {}, "type": "object", "propertyNames": { "type": "string" }, "additionalProperties": {} }, "dedup_key": { "type": "string", "minLength": 1, "maxLength": 512 }, "supersedes_id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" } }, "required": ["verb", "object", "summary"], "additionalProperties": false } } }, "required": ["records"], "additionalProperties": false }, "output_schema": { "type": "object", "properties": { "records": { "type": "array", "items": { "type": "object", "properties": { "id": { "type": "string", "format": "uuid", "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$" }, "dedup_key": { "anyOf": [{ "type": "string" }, { "type": "null" }] }, "deduplicated": { "type": "boolean" } }, "required": ["id", "dedup_key", "deduplicated"], "additionalProperties": false } }, "logged_count": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "deduplicated_count": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 } }, "required": ["records", "logged_count", "deduplicated_count"], "additionalProperties": false }, "help": "Append structured business-activity records (verb + entity refs + outcome + evidence) to the seat's work ledger, in a batch, right after each action succeeds.", "guide_slugs": ["how-agents-work"], "stages": ["operating_rhythm"], "related_command_ids": [] }
     ];
-    COMMAND_LIST_DISCOVERY = { "commands": [{ "id": "agent_grant_intervention.decide", "title": "Decide a blocked agent grant", "required_scope": "tenant", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": [], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "agent_grant_intervention.list", "title": "List blocked-awaiting-grant interventions", "required_scope": "seat", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "agent_grant_intervention.resume", "title": "Resume a granted agent intervention", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "agent_setup.capability_suggestions", "title": "Suggest setup capability grants", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["staffing"] }, { "id": "agent_setup.get", "title": "Get agent setup", "required_scope": "seat", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["staffing"] }, { "id": "agent_setup.relane", "title": "Re-lane a live agent", "required_scope": "tenant_admin", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "agent_setup.start", "title": "Start agent setup", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["staffing"] }, { "id": "agent_setup.update", "title": "Update agent setup", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["staffing"] }, { "id": "agent_template.list", "title": "List agent templates", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["staffing"] }, { "id": "agent.activation_receipt", "title": "Build agent activation receipt", "required_scope": "seat", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["staffing", "operating_rhythm"] }, { "id": "agent.activation_sign", "title": "Sign agent activation receipt", "required_scope": "tenant", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["self_approval", "spend"], "rationale": "Trusted activation and grant lifecycle commands establish or change standing authority, so a human must decide." }, "expose_over_mcp": true, "stages": ["staffing", "operating_rhythm"] }, { "id": "agent.configure_tools", "title": "Configure agent tools", "required_scope": "seat", "confirmation": "credential_flow", "trusted_execution": { "mode": "always_human", "risk_flags": ["credential"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["staffing"] }, { "id": "agent.create_custom", "title": "Create custom agent", "required_scope": "tenant", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": [], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["staffing"] }, { "id": "agent.create_from_template", "title": "Create agent from template", "required_scope": "tenant", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": [], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["staffing"] }, { "id": "agent.decommission", "title": "Decommission agent", "required_scope": "tenant", "confirmation": "dangerous", "trusted_execution": { "mode": "always_human", "risk_flags": ["destructive"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "agent.fleet_digest", "title": "Get dogfood fleet health digest", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "agent.get_run", "title": "Get agent run diagnostics", "required_scope": "seat", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "agent.go_live", "title": "Go live", "required_scope": "seat", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["production"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["staffing", "operating_rhythm"] }, { "id": "agent.import_definition", "title": "Import agent definition", "required_scope": "tenant", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": [], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["staffing"] }, { "id": "agent.list_fleet", "title": "List agent fleet", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "agent.list_runs", "title": "List agent runs", "required_scope": "seat", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "agent.list_tool_calls", "title": "List agent tool calls", "required_scope": "seat", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "agent.pause", "title": "Pause agent", "required_scope": "tenant", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": [], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "agent.resume", "title": "Resume agent", "required_scope": "tenant", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": [], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "agent.run_dry_run", "title": "Run agent dry run", "required_scope": "seat", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["staffing"] }, { "id": "agent.run_heartbeats", "title": "Get run heartbeats", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "agent.run_now", "title": "Run agent now", "required_scope": "tenant", "confirmation": "human_required", "trusted_execution": { "mode": "eligible_bounded", "risk_flags": [], "rationale": "Re-running the acting seat's own live agent is a bounded, same-seat worker action safe to auto-apply under a standing Trusted grant." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "agent.show_markdown", "title": "Show agent setup as markdown", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["staffing"] }, { "id": "agent.status", "title": "Get agent status", "required_scope": "seat", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["staffing", "operating_rhythm"] }, { "id": "agent.trust.create", "title": "Create agent Trusted grant", "required_scope": "tenant", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["self_approval", "spend"], "rationale": "Trusted activation and grant lifecycle commands establish or change standing authority, so a human must decide." }, "expose_over_mcp": true, "stages": ["staffing", "operating_rhythm"] }, { "id": "agent.trust.expire", "title": "Expire agent Trusted grants", "required_scope": "tenant", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["self_approval", "spend"], "rationale": "Trusted activation and grant lifecycle commands establish or change standing authority, so a human must decide." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "agent.trust.inspect", "title": "Inspect agent Trusted grants", "required_scope": "seat", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "agent.trust.revoke", "title": "Revoke agent Trusted grant", "required_scope": "tenant", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["self_approval", "spend"], "rationale": "Trusted activation and grant lifecycle commands establish or change standing authority, so a human must decide." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "agent.trust.supersede", "title": "Supersede agent Trusted grant", "required_scope": "tenant", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["self_approval", "spend"], "rationale": "Trusted activation and grant lifecycle commands establish or change standing authority, so a human must decide." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "agent.update_schedule", "title": "Update agent schedule", "required_scope": "tenant", "confirmation": "human_required", "trusted_execution": { "mode": "eligible_bounded", "risk_flags": [], "rationale": "Setting or changing a seat's routine schedule is a bounded, reversible worker action safe to auto-apply under a standing Trusted grant." }, "expose_over_mcp": true, "stages": ["staffing", "operating_rhythm"] }, { "id": "agent.watch_run", "title": "Watch agent run", "required_scope": "seat", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "aicos.brain_settings.get", "title": "Get AICOS brain settings", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "aicos.brain_settings.update", "title": "Update AICOS brain settings", "required_scope": "tenant_admin", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "cascade.import", "title": "Import Rocks from a ninety Rocks export", "required_scope": "tenant_admin", "confirmation": "none", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "cascade.import_okrs", "title": "Import objectives and key results from a generic OKR CSV", "required_scope": "tenant_admin", "confirmation": "none", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "charter.apply_seat_type_recommendation", "title": "Apply Charter seat-type recommendation", "required_scope": "seat", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": [], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["charter_design", "staffing"] }, { "id": "charter.approve", "title": "Approve charter", "required_scope": "seat", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": [], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["charter_design", "staffing"] }, { "id": "charter.draft", "title": "Draft charter", "required_scope": "seat", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["charter_design"] }, { "id": "charter.draft_all", "title": "Draft all charters", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["charter_design"] }, { "id": "charter.get", "title": "Get Charter", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["charter_design", "staffing"] }, { "id": "charter.list", "title": "List Charters", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["charter_design"] }, { "id": "charter.preview_signal_reconciliation", "title": "Preview Charter Signal reconciliation", "required_scope": "tenant_admin", "confirmation": "none", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["charter_design"] }, { "id": "charter.reconcile_signals", "title": "Reconcile Charter Signals", "required_scope": "tenant_admin", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["charter_design"] }, { "id": "charter.set", "title": "Set charter", "required_scope": "seat", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": [], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["charter_design"] }, { "id": "charter.show_markdown", "title": "Show Charter as markdown", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["charter_design", "staffing"] }, { "id": "charter.sign_manifest", "title": "Sign charter manifest", "required_scope": "seat", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": [], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["staffing"] }, { "id": "charter.skip", "title": "Skip charter draft", "required_scope": "seat", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": [], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["charter_design"] }, { "id": "charter.update_draft", "title": "Update charter draft", "required_scope": "seat", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["charter_design"] }, { "id": "coach.draft_guide", "title": "Draft accountability discussion guide", "required_scope": "tenant_admin", "confirmation": "none", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": false, "stages": ["operating_rhythm"] }, { "id": "compass.alignment", "title": "Check Compass alignment", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "compass.answer_gap", "title": "Answer Compass gap", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["company_setup"] }, { "id": "compass.approve_version", "title": "Approve Compass version", "required_scope": "tenant", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": [], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["company_setup", "operating_rhythm"] }, { "id": "compass.draft", "title": "Draft Compass", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["company_setup"] }, { "id": "compass.get_current", "title": "Get current Compass", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["company_setup", "operating_rhythm"] }, { "id": "compass.import", "title": "Import a ninety V/TO into a Compass draft", "required_scope": "tenant_admin", "confirmation": "none", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "compass.list_gaps", "title": "List Compass gaps", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["company_setup"] }, { "id": "compass.reject_draft", "title": "Reject Compass draft", "required_scope": "tenant", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": [], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["company_setup"] }, { "id": "compass.set", "title": "Set Compass", "required_scope": "tenant", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": [], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["company_setup"] }, { "id": "compass.show_markdown", "title": "Show Compass as markdown", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["company_setup"] }, { "id": "compass.update_draft", "title": "Update Compass draft", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["company_setup"] }, { "id": "confirmation.activation_set.list", "title": "List activation approval sets", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["compass", "charter_design", "staffing"] }, { "id": "confirmation.approve", "title": "Approve pending confirmation", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "always_human", "risk_flags": ["self_approval"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["charter_design", "staffing"] }, { "id": "confirmation.dismiss", "title": "Dismiss an expired confirmation", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["charter_design", "staffing", "operating_rhythm"] }, { "id": "confirmation.dismiss_stale", "title": "Dismiss all expired confirmations", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["charter_design", "staffing", "operating_rhythm"] }, { "id": "confirmation.list", "title": "List pending confirmations", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["charter_design", "staffing"] }, { "id": "confirmation.reject", "title": "Reject pending confirmation", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "always_human", "risk_flags": ["self_approval"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["charter_design", "staffing"] }, { "id": "confirmation.remint", "title": "Re-mint an expired confirmation", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "always_human", "risk_flags": ["self_approval"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["charter_design", "staffing"] }, { "id": "credential.ingress", "title": "Store credential", "required_scope": "seat", "confirmation": "credential_flow", "trusted_execution": { "mode": "always_human", "risk_flags": ["credential"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": false, "stages": ["staffing"] }, { "id": "credential.list", "title": "List stored credentials", "required_scope": "tenant_admin", "confirmation": "none", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin", "credential"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "deliverable.accept", "title": "Accept deliverable value", "required_scope": "tenant_admin", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "deliverable.attach", "title": "Attach agent deliverable", "required_scope": "seat", "confirmation": "none", "trusted_execution": { "mode": "eligible", "risk_flags": [], "rationale": "Eligible for Trusted execution only when the signed Charter manifest, tenant policy, budget, and command guard allow it." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "deliverable.create", "title": "Create agent deliverable", "required_scope": "seat", "confirmation": "none", "trusted_execution": { "mode": "eligible", "risk_flags": [], "rationale": "Eligible for Trusted execution only when the signed Charter manifest, tenant policy, budget, and command guard allow it." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "deliverable.get", "title": "Get agent deliverable", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "deliverable.list", "title": "List agent deliverables", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "deliverable.reject", "title": "Reject deliverable value", "required_scope": "tenant_admin", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "error_log.bulk_resolve", "title": "Bulk resolve error logs", "required_scope": "tenant", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": [], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "error_log.list", "title": "List error logs", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "error_log.resolve", "title": "Resolve error log", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "error_log.stale_candidates", "title": "Find stale error logs", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "error_log.supersede", "title": "Supersede error log", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "escalation.bulk_resolve", "title": "Bulk resolve escalations", "required_scope": "tenant", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": [], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": false, "stages": ["operating_rhythm"] }, { "id": "escalation.get", "title": "Get escalation", "required_scope": "seat", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "escalation.list", "title": "List escalations", "required_scope": "seat", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "escalation.raise", "title": "Raise escalation", "required_scope": "seat", "confirmation": "none", "trusted_execution": { "mode": "eligible", "risk_flags": [], "rationale": "Eligible for Trusted execution only when the signed Charter manifest, tenant policy, budget, and command guard allow it." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "escalation.reject", "title": "Reject escalation", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": false, "stages": ["operating_rhythm"] }, { "id": "escalation.resolve", "title": "Resolve escalation", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": false, "stages": ["operating_rhythm"] }, { "id": "escalation.stale_candidates", "title": "Find stale escalations", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "friction.assist", "title": "Assist Friction issue", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "friction.bulk_resolve", "title": "Bulk resolve friction", "required_scope": "tenant_admin", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "friction.file_issue", "title": "File Friction issue", "required_scope": "seat", "confirmation": "none", "trusted_execution": { "mode": "eligible", "risk_flags": [], "rationale": "Eligible for Trusted execution only when the signed Charter manifest, tenant policy, budget, and command guard allow it." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "friction.get", "title": "Get Friction issue", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "friction.import", "title": "Import Friction issues from a ninety Issues List", "required_scope": "tenant_admin", "confirmation": "none", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "friction.link_task", "title": "Link task to Friction issue", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "eligible", "risk_flags": [], "rationale": "Eligible for Trusted execution only when the signed Charter manifest, tenant policy, budget, and command guard allow it." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "friction.list", "title": "List Friction issues", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "friction.resolve", "title": "Resolve Friction issue", "required_scope": "tenant", "confirmation": "human_required", "trusted_execution": { "mode": "eligible_bounded", "risk_flags": [], "rationale": "Resolving a Friction already within the acting seat's member-seat subtree is a routine worker action safe to auto-apply under a standing Trusted grant." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "friction.stale_candidates", "title": "Find stale friction", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "friction.update_status", "title": "Update Friction issue status", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "eligible", "risk_flags": [], "rationale": "Eligible for Trusted execution only when the signed Charter manifest, tenant policy, budget, and command guard allow it." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "gate.decide", "title": "Decide a conversational gate", "required_scope": "tenant", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": [], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "goal.bind_measurable", "title": "Bind a Signal to a Cascade goal", "required_scope": "seat", "confirmation": "human_required", "trusted_execution": { "mode": "eligible_bounded", "risk_flags": [], "rationale": "Binding an informs-level Signal never changes goal status, so it is a bounded worker action safe to auto-apply under a standing Trusted grant." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "goal.create", "title": "Create Cascade goal", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "goal.drop", "title": "Drop Cascade goal", "required_scope": "tenant_admin", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin", "destructive"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "goal.get", "title": "Get Cascade goal", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "goal.list", "title": "List Cascade goals", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "goal.list_at_risk", "title": "List at-risk Cascade goals", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "goal.list_measurables", "title": "List a Cascade goal's Signals", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "goal.reassign_owner", "title": "Reassign Cascade goal owner seat", "required_scope": "tenant_admin", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "goal.reparent", "title": "Reparent Cascade goal", "required_scope": "tenant_admin", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "goal.set_auto_status", "title": "Toggle Signal-driven auto-status", "required_scope": "seat", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": [], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "goal.set_progress", "title": "Set Cascade goal progress", "required_scope": "seat", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": [], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "goal.set_status", "title": "Set Cascade goal status", "required_scope": "seat", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "goal.unbind_measurable", "title": "Unbind a Signal from a Cascade goal", "required_scope": "seat", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "goal.update", "title": "Update Cascade goal", "required_scope": "tenant_admin", "confirmation": "none", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "graph.get", "title": "Get Responsibility Graph", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["graph_design", "operating_rhythm"] }, { "id": "implementation_access.abandon", "title": "Abandon implementation access", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": false, "stages": ["company_setup"] }, { "id": "implementation_access.complete", "title": "Complete implementation access", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": false, "stages": ["company_setup"] }, { "id": "implementation_access.status", "title": "Implementation access status", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": false, "stages": ["company_setup"] }, { "id": "integration.connect_rest", "title": "Connect REST integration", "required_scope": "tenant_admin", "confirmation": "credential_flow", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin", "credential"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": false, "stages": ["operating_rhythm"] }, { "id": "integration.discover", "title": "Discover a connection for signals", "required_scope": "tenant_admin", "confirmation": "none", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "integration.list", "title": "List integrations", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "integration.readiness", "title": "Check integration readiness", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "integration.status", "title": "Get integration status", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "integration.test", "title": "Test integration connection", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "mcp_token.create", "title": "Create MCP token", "required_scope": "tenant", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["credential"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["staffing"] }, { "id": "mcp_token.list", "title": "List MCP tokens", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["staffing"] }, { "id": "mcp_token.revoke", "title": "Revoke MCP token", "required_scope": "tenant", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": [], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["staffing"] }, { "id": "measurable_template.adopt", "title": "Adopt a measurable template", "required_scope": "seat", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "measurable_template.list", "title": "List measurable templates", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "measurable.create", "title": "Add a measurable", "required_scope": "seat", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "member.invite", "title": "Invite member", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin", "external_send"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "member.remove", "title": "Remove member", "required_scope": "tenant", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "member.update", "title": "Update member role", "required_scope": "tenant", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "model.catalog", "title": "List model catalog", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["staffing"] }, { "id": "notification.list_errors", "title": "List notification errors", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "notification.settings.get", "title": "Get notification settings", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "notification.settings.update", "title": "Update notification settings", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "notification.test", "title": "Send test notification", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "onboarding.activate", "title": "Activate onboarding agents", "required_scope": "tenant", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": [], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["staffing"] }, { "id": "onboarding.advance_step", "title": "Advance onboarding step", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["company_setup"] }, { "id": "onboarding.attach_reference", "title": "Attach reference document", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["company_setup", "graph_design"] }, { "id": "onboarding.create_invite", "title": "Create onboarding invite", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "always_human", "risk_flags": ["external_send"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["company_setup"] }, { "id": "onboarding.finish", "title": "Finish onboarding", "required_scope": "tenant", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": [], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["company_setup", "operating_rhythm"] }, { "id": "onboarding.rehearse", "title": "Rehearse onboarding agents", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["staffing"] }, { "id": "onboarding.resume", "title": "Onboard resume", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["company_setup"] }, { "id": "onboarding.select_path", "title": "Select onboarding path", "required_scope": "tenant_admin", "confirmation": "none", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": false, "stages": ["company_setup"] }, { "id": "onboarding.setup", "title": "Apply onboarding setup", "required_scope": "tenant", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": [], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["company_setup", "graph_design", "charter_design", "staffing"] }, { "id": "onboarding.source_ingest", "title": "Ingest onboarding source", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Source ingestion is bootstrap-only and never inherits Trusted standing execution." }, "expose_over_mcp": true, "stages": ["company_setup"] }, { "id": "onboarding.status", "title": "Onboard status", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["company_setup"] }, { "id": "onboarding.upload_context", "title": "Upload org context", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["company_setup", "graph_design"] }, { "id": "runner.diagnose", "title": "Diagnose runner", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "runner.list", "title": "List runners", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "runner.pairing.start", "title": "Start runner pairing", "required_scope": "tenant_admin", "confirmation": "none", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "runner.repair", "title": "Runner repair guidance", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "runner.revoke", "title": "Revoke runner", "required_scope": "tenant", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": [], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "runner.status", "title": "Runner status", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "scorecard.grid", "title": "Read the scorecard grid", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "seat.create", "title": "Create seat", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["graph_design"] }, { "id": "seat.create_complete", "title": "Create complete seat", "required_scope": "tenant", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": [], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["graph_design", "charter_design", "staffing"] }, { "id": "seat.decommission", "title": "Decommission seat", "required_scope": "seat", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["destructive"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["graph_design"] }, { "id": "seat.decommission_preview", "title": "Preview seat decommission", "required_scope": "seat", "confirmation": "none", "trusted_execution": { "mode": "always_human", "risk_flags": ["destructive"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["graph_design"] }, { "id": "seat.get", "title": "Get seat detail", "required_scope": "seat", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["graph_design", "operating_rhythm"] }, { "id": "seat.rename", "title": "Rename seat", "required_scope": "seat", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["graph_design"] }, { "id": "seat.reparent", "title": "Reparent seat", "required_scope": "seat", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": [], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["graph_design"] }, { "id": "seat.set_type", "title": "Set seat type", "required_scope": "seat", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": [], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["staffing"] }, { "id": "secret_grant.grant", "title": "Grant a brokered secret", "required_scope": "tenant_admin", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin", "credential"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "secret_grant.list", "title": "List brokered secret grants", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "always_human", "risk_flags": ["credential"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "secret_grant.request", "title": "Request a brokered secret grant", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "always_human", "risk_flags": ["credential"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "secret_grant.revoke", "title": "Revoke a brokered secret grant", "required_scope": "tenant_admin", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin", "credential"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "settings.agent_policy.get", "title": "Get company autonomy ceiling", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "settings.agent_policy.update", "title": "Set company autonomy ceiling", "required_scope": "tenant_admin", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "settings.confirmation_policy.get", "title": "Get CLI confirmation mode", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "settings.confirmation_policy.update", "title": "Set CLI confirmation mode", "required_scope": "tenant_admin", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "settings.get", "title": "Get tenant settings", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "settings.member_visibility.get", "title": "Get member visibility mode", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "settings.member_visibility.update", "title": "Update member visibility mode", "required_scope": "tenant_admin", "confirmation": "none", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "settings.product_learning.get", "title": "Get product-learning policy", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "settings.product_learning.update", "title": "Update product-learning policy", "required_scope": "tenant_admin", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "settings.sync_brief_scope.get", "title": "Get Sync Brief scope", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "settings.sync_brief_scope.update", "title": "Update Sync Brief scope", "required_scope": "tenant_admin", "confirmation": "none", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "settings.tool_policy.get", "title": "Get tenant tool policy", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "settings.tool_policy.update", "title": "Update tenant tool policy", "required_scope": "tenant_admin", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "settings.update", "title": "Update tenant settings", "required_scope": "tenant", "confirmation": "dangerous", "trusted_execution": { "mode": "always_human", "risk_flags": ["destructive"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "signal.bind", "title": "Bind a signal source (draft)", "required_scope": "tenant_admin", "confirmation": "none", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "signal.bind_confirm", "title": "Confirm and activate a signal binding", "required_scope": "tenant_admin", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "signal.confirm_reading", "title": "Confirm Signal reading", "required_scope": "seat", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "signal.correct_reading", "title": "Correct Signal reading", "required_scope": "seat", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": [], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "signal.draft_first_readings", "title": "Draft first readings from a connected source", "required_scope": "seat", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "signal.get", "title": "Get Signal", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "signal.import", "title": "Import Signals from CSV", "required_scope": "tenant_admin", "confirmation": "none", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "signal.list", "title": "List Signals", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "signal.preview", "title": "Preview a signal source", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "signal.report", "title": "Report a Signal reading", "required_scope": "seat", "confirmation": "none", "trusted_execution": { "mode": "eligible", "risk_flags": [], "rationale": "Eligible for Trusted execution only when the signed Charter manifest, tenant policy, budget, and command guard allow it." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "signup.provision_tenant", "title": "Create company", "required_scope": "user", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": false, "stages": ["company_setup"] }, { "id": "skill.assign_to_seat", "title": "Assign skill to seat", "required_scope": "seat", "confirmation": "human_required", "trusted_execution": { "mode": "eligible_bounded", "risk_flags": [], "rationale": "Assigning an already-published, immutable skill version to a seat is a bounded worker action safe to auto-apply under a standing Trusted grant." }, "expose_over_mcp": true, "stages": ["staffing"] }, { "id": "skill.assigned.list", "title": "List assigned skills", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["staffing", "operating_rhythm"] }, { "id": "skill.catalog", "title": "List ROST skill catalog", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["staffing"] }, { "id": "skill.check_dependencies", "title": "Check skill dependencies", "required_scope": "seat", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["staffing"] }, { "id": "skill.create", "title": "Create skill", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["staffing"] }, { "id": "skill.enable_catalog", "title": "Enable ROST catalog skill", "required_scope": "tenant_admin", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["staffing"] }, { "id": "skill.file.get", "title": "Get skill file", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["staffing"] }, { "id": "skill.get", "title": "Get skill", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["staffing"] }, { "id": "skill.import_github", "title": "Import GitHub skill", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["staffing"] }, { "id": "skill.import_upload", "title": "Import uploaded skill", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["staffing"] }, { "id": "skill.install_local", "title": "Install skill locally", "required_scope": "tenant", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": [], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["staffing", "operating_rhythm"] }, { "id": "skill.list", "title": "List skills", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["staffing"] }, { "id": "skill.publish", "title": "Publish skill", "required_scope": "tenant_admin", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["staffing"] }, { "id": "skill.revoke_from_seat", "title": "Revoke skill from seat", "required_scope": "seat", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": [], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["staffing", "operating_rhythm"] }, { "id": "skill.sync_local", "title": "Sync assigned skills locally", "required_scope": "seat", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "skill.update_draft", "title": "Update skill draft", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["staffing"] }, { "id": "software_factory.authority_profile.create", "title": "Create a Forge authority profile", "required_scope": "tenant_admin", "confirmation": "none", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "software_factory.authority_profile.list", "title": "List Forge authority profiles", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "software_factory.authority.grant", "title": "Grant Forge seat authority", "required_scope": "tenant_admin", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "software_factory.authority.revoke", "title": "Revoke Forge seat authority", "required_scope": "tenant_admin", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "software_factory.capacity.list", "title": "List Forge runner capacity", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "software_factory.config.list", "title": "List Forge config", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "software_factory.config.set", "title": "Set Forge config", "required_scope": "tenant_admin", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin", "credential"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "software_factory.conformance.record_findings", "title": "Record Forge conformance findings", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "software_factory.conformance.resolve_finding", "title": "Resolve Forge conformance finding", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "software_factory.developer_team.install", "title": "Install Forge Developer Team", "required_scope": "tenant_admin", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["staffing", "operating_rhythm"] }, { "id": "software_factory.developer_team.uninstall", "title": "Uninstall Forge Developer Team", "required_scope": "tenant_admin", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "software_factory.dispatch.serialize", "title": "Serialize a Forge dispatch collision", "required_scope": "tenant_admin", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "software_factory.gate.decide", "title": "Decide a Forge gate", "required_scope": "tenant_admin", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "software_factory.github.installation_token.create", "title": "Create a Forge GitHub installation token", "required_scope": "tenant", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["credential"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "software_factory.github.installation.bind", "title": "Bind Forge GitHub repositories to projects", "required_scope": "tenant_admin", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": false, "stages": ["operating_rhythm"] }, { "id": "software_factory.github.installation.connect", "title": "Connect a Forge GitHub installation", "required_scope": "tenant_admin", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": false, "stages": ["operating_rhythm"] }, { "id": "software_factory.github.installation.list", "title": "List Forge GitHub installations", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "software_factory.github.policy.upsert", "title": "Set a Forge GitHub automation policy", "required_scope": "tenant_admin", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "software_factory.github.repository.unbind", "title": "Unbind a Forge GitHub repository", "required_scope": "tenant_admin", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": false, "stages": ["operating_rhythm"] }, { "id": "software_factory.phase.advance", "title": "Advance a Forge build request phase", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "software_factory.plan.approve", "title": "Approve a Forge plan", "required_scope": "tenant_admin", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "software_factory.plan.reject", "title": "Reject a Forge plan", "required_scope": "tenant_admin", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "software_factory.project.create", "title": "Create a Forge project", "required_scope": "tenant_admin", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "software_factory.project.list", "title": "List Forge projects", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "software_factory.request.answer_clarification", "title": "Answer Forge plan clarifications", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "software_factory.request.cancel", "title": "Cancel a Forge build request", "required_scope": "tenant_admin", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin", "destructive"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "software_factory.request.create", "title": "Create a Forge build request", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "software_factory.request.list", "title": "List Forge build requests", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "software_factory.request.pause", "title": "Pause a Forge build request", "required_scope": "tenant_admin", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "software_factory.request.resume", "title": "Resume a Forge build request", "required_scope": "tenant_admin", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "software_factory.request.show", "title": "Show a Forge build request", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "software_factory.secret_request.list", "title": "List Forge secret requests", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "always_human", "risk_flags": ["credential"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "software_factory.secret.grant", "title": "Grant a Forge secret", "required_scope": "tenant_admin", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin", "credential"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "software_factory.secret.request", "title": "Request a Forge secret grant", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "always_human", "risk_flags": ["credential"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "software_factory.secret.revoke", "title": "Revoke a Forge secret grant", "required_scope": "tenant_admin", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin", "credential"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "software_factory.secret.use", "title": "Verify Forge secret broker access", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "always_human", "risk_flags": ["credential"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "software_factory.vercel.connection.connect", "title": "Connect a Forge Vercel account", "required_scope": "tenant_admin", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin", "credential"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": false, "stages": ["operating_rhythm"] }, { "id": "software_factory.vercel.deploy_preview", "title": "Create a Forge Vercel preview deployment", "required_scope": "tenant", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["credential", "production"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "software_factory.vercel.project.link", "title": "Link a Forge project to Vercel", "required_scope": "tenant_admin", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": false, "stages": ["operating_rhythm"] }, { "id": "software_factory.vercel.project.list", "title": "List Forge Vercel links", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "staffing.assign", "title": "Staff seat", "required_scope": "seat", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": [], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["staffing"] }, { "id": "staffing.assign_agent_dry_run", "title": "Assign dry-run agent to seat", "required_scope": "seat", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": [], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["staffing"] }, { "id": "staffing.assign_user", "title": "Assign user to seat", "required_scope": "seat", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": [], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["staffing"] }, { "id": "status.record", "title": "Record status", "required_scope": "seat", "confirmation": "none", "trusted_execution": { "mode": "eligible", "risk_flags": [], "rationale": "Eligible for Trusted execution only when the signed Charter manifest, tenant policy, budget, and command guard allow it." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "sync.brief.compile", "title": "Compile Sync Brief", "required_scope": "tenant_admin", "confirmation": "none", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "sync.brief.get", "title": "Get Sync Brief", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "sync.item.assign", "title": "Assign Sync follow-up", "required_scope": "tenant_admin", "confirmation": "none", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "sync.run.complete", "title": "Complete Sync run", "required_scope": "tenant_admin", "confirmation": "none", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "sync.run.start", "title": "Start Sync run", "required_scope": "tenant_admin", "confirmation": "none", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "system.health", "title": "System health", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "task.accept", "title": "Accept task", "required_scope": "seat", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "task.complete", "title": "Complete task", "required_scope": "seat", "confirmation": "none", "trusted_execution": { "mode": "eligible", "risk_flags": [], "rationale": "Eligible for Trusted execution only when the signed Charter manifest, tenant policy, budget, and command guard allow it." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "task.confirm_proposal", "title": "Confirm proposed task", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": false, "stages": ["operating_rhythm"] }, { "id": "task.create", "title": "Create task", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "eligible", "risk_flags": [], "rationale": "Eligible for Trusted execution only when the signed Charter manifest, tenant policy, budget, and command guard allow it." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "task.decline", "title": "Decline task", "required_scope": "seat", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "task.decline_proposal", "title": "Decline proposed task", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": false, "stages": ["operating_rhythm"] }, { "id": "task.import", "title": "Import Tasks from a ninety To-Dos export", "required_scope": "tenant_admin", "confirmation": "none", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "task.list", "title": "List seat tasks", "required_scope": "seat", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "task.update", "title": "Update task", "required_scope": "tenant_admin", "confirmation": "none", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "team.health_score", "title": "Team health score", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "tenant.anthropic_key.disable", "title": "Disable tenant Anthropic key", "required_scope": "tenant_admin", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin", "credential", "destructive", "self_approval", "spend"], "rationale": "Tenant Anthropic key writes and disables change credential posture and managed inference spend, so a human owner/admin must decide." }, "expose_over_mcp": true, "stages": ["staffing"] }, { "id": "tenant.anthropic_key.save", "title": "Save tenant Anthropic key", "required_scope": "tenant", "confirmation": "credential_flow", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin", "credential", "destructive", "self_approval", "spend"], "rationale": "Tenant Anthropic key writes and disables change credential posture and managed inference spend, so a human owner/admin must decide." }, "expose_over_mcp": true, "stages": ["staffing"] }, { "id": "tenant.create", "title": "Create additional company", "required_scope": "tenant_admin", "confirmation": "none", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": false, "stages": ["company_setup"] }, { "id": "tenant.model_gateway_policy.update", "title": "Update model gateway policy", "required_scope": "tenant_admin", "confirmation": "dangerous", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin", "destructive"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "tenant.rename", "title": "Rename company", "required_scope": "tenant_admin", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["company_setup", "operating_rhythm"] }, { "id": "tool_grants.agent.effective", "title": "List agent effective capability grants", "required_scope": "seat", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["staffing", "operating_rhythm"] }, { "id": "tool_grants.tenant.list", "title": "List tenant capability grants", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["staffing", "operating_rhythm"] }, { "id": "tool_grants.tenant.update", "title": "Update tenant capability policy", "required_scope": "tenant_admin", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin", "self_approval"], "rationale": "Tenant capability policy changes can widen or narrow agent authority and always require a human owner/admin." }, "expose_over_mcp": true, "stages": ["staffing", "operating_rhythm"] }, { "id": "tool.catalog", "title": "List tool catalog", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "Discovery commands expose static metadata and are not durable execution paths." }, "expose_over_mcp": true, "stages": ["staffing"] }, { "id": "usage.report", "title": "AI-workforce ROI report", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "usage.snapshot", "title": "Capture usage period snapshot", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "user.tenants", "title": "List tenants", "required_scope": "user", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": false, "stages": ["company_setup"] }, { "id": "user.use_tenant", "title": "Select tenant", "required_scope": "user", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": false, "stages": ["company_setup"] }, { "id": "user.whoami", "title": "Who am I", "required_scope": "user", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": false, "stages": ["company_setup"] }, { "id": "work_order.cancel", "title": "Cancel work order", "required_scope": "tenant", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["destructive"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "work_order.enqueue", "title": "Enqueue work order", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "work_order.list", "title": "List work orders", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "work.list", "title": "List work records", "required_scope": "seat", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "work.log", "title": "Log work", "required_scope": "seat", "confirmation": "none", "trusted_execution": { "mode": "eligible", "risk_flags": [], "rationale": "Eligible for Trusted execution only when the signed Charter manifest, tenant policy, budget, and command guard allow it." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "work.record", "title": "Record work", "required_scope": "seat", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }] };
+    COMMAND_LIST_DISCOVERY = { "commands": [{ "id": "agent_grant_intervention.decide", "title": "Decide a blocked agent grant", "required_scope": "tenant", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": [], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "agent_grant_intervention.list", "title": "List blocked-awaiting-grant interventions", "required_scope": "seat", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "agent_grant_intervention.resume", "title": "Resume a granted agent intervention", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "agent_setup.capability_suggestions", "title": "Suggest setup capability grants", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["staffing"] }, { "id": "agent_setup.get", "title": "Get agent setup", "required_scope": "seat", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["staffing"] }, { "id": "agent_setup.relane", "title": "Re-lane a live agent", "required_scope": "tenant_admin", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "agent_setup.start", "title": "Start agent setup", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["staffing"] }, { "id": "agent_setup.update", "title": "Update agent setup", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["staffing"] }, { "id": "agent_template.list", "title": "List agent templates", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["staffing"] }, { "id": "agent.activation_receipt", "title": "Build agent activation receipt", "required_scope": "seat", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["staffing", "operating_rhythm"] }, { "id": "agent.activation_sign", "title": "Sign agent activation receipt", "required_scope": "tenant", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["self_approval", "spend"], "rationale": "Trusted activation and grant lifecycle commands establish or change standing authority, so a human must decide." }, "expose_over_mcp": true, "stages": ["staffing", "operating_rhythm"] }, { "id": "agent.configure_tools", "title": "Configure agent tools", "required_scope": "seat", "confirmation": "credential_flow", "trusted_execution": { "mode": "always_human", "risk_flags": ["credential"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["staffing"] }, { "id": "agent.create_custom", "title": "Create custom agent", "required_scope": "tenant", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": [], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["staffing"] }, { "id": "agent.create_from_template", "title": "Create agent from template", "required_scope": "tenant", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": [], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["staffing"] }, { "id": "agent.decommission", "title": "Decommission agent", "required_scope": "tenant", "confirmation": "dangerous", "trusted_execution": { "mode": "always_human", "risk_flags": ["destructive"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "agent.fleet_digest", "title": "Get dogfood fleet health digest", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "agent.get_run", "title": "Get agent run diagnostics", "required_scope": "seat", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "agent.go_live", "title": "Go live", "required_scope": "seat", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["production"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["staffing", "operating_rhythm"] }, { "id": "agent.import_definition", "title": "Import agent definition", "required_scope": "tenant", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": [], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["staffing"] }, { "id": "agent.list_fleet", "title": "List agent fleet", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "agent.list_runs", "title": "List agent runs", "required_scope": "seat", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "agent.list_tool_calls", "title": "List agent tool calls", "required_scope": "seat", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "agent.pause", "title": "Pause agent", "required_scope": "tenant", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": [], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "agent.resume", "title": "Resume agent", "required_scope": "tenant", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": [], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "agent.run_dry_run", "title": "Run agent dry run", "required_scope": "seat", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["staffing"] }, { "id": "agent.run_heartbeats", "title": "Get run heartbeats", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "agent.run_now", "title": "Run agent now", "required_scope": "tenant", "confirmation": "human_required", "trusted_execution": { "mode": "eligible_bounded", "risk_flags": [], "rationale": "Re-running the acting seat's own live agent is a bounded, same-seat worker action safe to auto-apply under a standing Trusted grant." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "agent.show_markdown", "title": "Show agent setup as markdown", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["staffing"] }, { "id": "agent.status", "title": "Get agent status", "required_scope": "seat", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["staffing", "operating_rhythm"] }, { "id": "agent.trust.create", "title": "Create agent Trusted grant", "required_scope": "tenant", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["self_approval", "spend"], "rationale": "Trusted activation and grant lifecycle commands establish or change standing authority, so a human must decide." }, "expose_over_mcp": true, "stages": ["staffing", "operating_rhythm"] }, { "id": "agent.trust.expire", "title": "Expire agent Trusted grants", "required_scope": "tenant", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["self_approval", "spend"], "rationale": "Trusted activation and grant lifecycle commands establish or change standing authority, so a human must decide." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "agent.trust.inspect", "title": "Inspect agent Trusted grants", "required_scope": "seat", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "agent.trust.revoke", "title": "Revoke agent Trusted grant", "required_scope": "tenant", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["self_approval", "spend"], "rationale": "Trusted activation and grant lifecycle commands establish or change standing authority, so a human must decide." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "agent.trust.supersede", "title": "Supersede agent Trusted grant", "required_scope": "tenant", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["self_approval", "spend"], "rationale": "Trusted activation and grant lifecycle commands establish or change standing authority, so a human must decide." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "agent.update_schedule", "title": "Update agent schedule", "required_scope": "tenant", "confirmation": "human_required", "trusted_execution": { "mode": "eligible_bounded", "risk_flags": [], "rationale": "Setting or changing a seat's routine schedule is a bounded, reversible worker action safe to auto-apply under a standing Trusted grant." }, "expose_over_mcp": true, "stages": ["staffing", "operating_rhythm"] }, { "id": "agent.watch_run", "title": "Watch agent run", "required_scope": "seat", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "aicos.brain_settings.get", "title": "Get AICOS brain settings", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "aicos.brain_settings.update", "title": "Update AICOS brain settings", "required_scope": "tenant_admin", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "cascade.import", "title": "Import Rocks from a ninety Rocks export", "required_scope": "tenant_admin", "confirmation": "none", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "cascade.import_okrs", "title": "Import objectives and key results from a generic OKR CSV", "required_scope": "tenant_admin", "confirmation": "none", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "charter.apply_seat_type_recommendation", "title": "Apply Charter seat-type recommendation", "required_scope": "seat", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": [], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["charter_design", "staffing"] }, { "id": "charter.approve", "title": "Approve charter", "required_scope": "seat", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": [], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["charter_design", "staffing"] }, { "id": "charter.backfill_stock_evidence", "title": "Backfill stock AICOS manifest evidence", "required_scope": "tenant_admin", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": false, "stages": ["staffing"] }, { "id": "charter.draft", "title": "Draft charter", "required_scope": "seat", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["charter_design"] }, { "id": "charter.draft_all", "title": "Draft all charters", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["charter_design"] }, { "id": "charter.get", "title": "Get Charter", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["charter_design", "staffing"] }, { "id": "charter.list", "title": "List Charters", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["charter_design"] }, { "id": "charter.preview_signal_reconciliation", "title": "Preview Charter Signal reconciliation", "required_scope": "tenant_admin", "confirmation": "none", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["charter_design"] }, { "id": "charter.reconcile_signals", "title": "Reconcile Charter Signals", "required_scope": "tenant_admin", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["charter_design"] }, { "id": "charter.set", "title": "Set charter", "required_scope": "seat", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": [], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["charter_design"] }, { "id": "charter.show_markdown", "title": "Show Charter as markdown", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["charter_design", "staffing"] }, { "id": "charter.sign_manifest", "title": "Sign charter manifest", "required_scope": "seat", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": [], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["staffing"] }, { "id": "charter.skip", "title": "Skip charter draft", "required_scope": "seat", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": [], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["charter_design"] }, { "id": "charter.update_draft", "title": "Update charter draft", "required_scope": "seat", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["charter_design"] }, { "id": "coach.draft_guide", "title": "Draft accountability discussion guide", "required_scope": "tenant_admin", "confirmation": "none", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": false, "stages": ["operating_rhythm"] }, { "id": "compass.alignment", "title": "Check Compass alignment", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "compass.answer_gap", "title": "Answer Compass gap", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["company_setup"] }, { "id": "compass.approve_version", "title": "Approve Compass version", "required_scope": "tenant", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": [], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["company_setup", "operating_rhythm"] }, { "id": "compass.draft", "title": "Draft Compass", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["company_setup"] }, { "id": "compass.get_current", "title": "Get current Compass", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["company_setup", "operating_rhythm"] }, { "id": "compass.import", "title": "Import a ninety V/TO into a Compass draft", "required_scope": "tenant_admin", "confirmation": "none", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "compass.list_gaps", "title": "List Compass gaps", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["company_setup"] }, { "id": "compass.reject_draft", "title": "Reject Compass draft", "required_scope": "tenant", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": [], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["company_setup"] }, { "id": "compass.set", "title": "Set Compass", "required_scope": "tenant", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": [], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["company_setup"] }, { "id": "compass.show_markdown", "title": "Show Compass as markdown", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["company_setup"] }, { "id": "compass.update_draft", "title": "Update Compass draft", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["company_setup"] }, { "id": "confirmation.activation_set.list", "title": "List activation approval sets", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["compass", "charter_design", "staffing"] }, { "id": "confirmation.approve", "title": "Approve pending confirmation", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "always_human", "risk_flags": ["self_approval"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["charter_design", "staffing"] }, { "id": "confirmation.dismiss", "title": "Dismiss an expired confirmation", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["charter_design", "staffing", "operating_rhythm"] }, { "id": "confirmation.dismiss_stale", "title": "Dismiss all expired confirmations", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["charter_design", "staffing", "operating_rhythm"] }, { "id": "confirmation.list", "title": "List pending confirmations", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["charter_design", "staffing"] }, { "id": "confirmation.reject", "title": "Reject pending confirmation", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "always_human", "risk_flags": ["self_approval"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["charter_design", "staffing"] }, { "id": "confirmation.remint", "title": "Re-mint an expired confirmation", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "always_human", "risk_flags": ["self_approval"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["charter_design", "staffing"] }, { "id": "credential.ingress", "title": "Store credential", "required_scope": "seat", "confirmation": "credential_flow", "trusted_execution": { "mode": "always_human", "risk_flags": ["credential"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": false, "stages": ["staffing"] }, { "id": "credential.list", "title": "List stored credentials", "required_scope": "tenant_admin", "confirmation": "none", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin", "credential"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "deliverable.accept", "title": "Accept deliverable value", "required_scope": "tenant_admin", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "deliverable.attach", "title": "Attach agent deliverable", "required_scope": "seat", "confirmation": "none", "trusted_execution": { "mode": "eligible", "risk_flags": [], "rationale": "Eligible for Trusted execution only when the signed Charter manifest, tenant policy, budget, and command guard allow it." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "deliverable.create", "title": "Create agent deliverable", "required_scope": "seat", "confirmation": "none", "trusted_execution": { "mode": "eligible", "risk_flags": [], "rationale": "Eligible for Trusted execution only when the signed Charter manifest, tenant policy, budget, and command guard allow it." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "deliverable.get", "title": "Get agent deliverable", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "deliverable.list", "title": "List agent deliverables", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "deliverable.reject", "title": "Reject deliverable value", "required_scope": "tenant_admin", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "error_log.bulk_resolve", "title": "Bulk resolve error logs", "required_scope": "tenant", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": [], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "error_log.list", "title": "List error logs", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "error_log.resolve", "title": "Resolve error log", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "error_log.stale_candidates", "title": "Find stale error logs", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "error_log.supersede", "title": "Supersede error log", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "escalation.bulk_resolve", "title": "Bulk resolve escalations", "required_scope": "tenant", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": [], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": false, "stages": ["operating_rhythm"] }, { "id": "escalation.get", "title": "Get escalation", "required_scope": "seat", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "escalation.list", "title": "List escalations", "required_scope": "seat", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "escalation.raise", "title": "Raise escalation", "required_scope": "seat", "confirmation": "none", "trusted_execution": { "mode": "eligible", "risk_flags": [], "rationale": "Eligible for Trusted execution only when the signed Charter manifest, tenant policy, budget, and command guard allow it." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "escalation.reject", "title": "Reject escalation", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": false, "stages": ["operating_rhythm"] }, { "id": "escalation.resolve", "title": "Resolve escalation", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": false, "stages": ["operating_rhythm"] }, { "id": "escalation.stale_candidates", "title": "Find stale escalations", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "friction.assist", "title": "Assist Friction issue", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "friction.bulk_resolve", "title": "Bulk resolve friction", "required_scope": "tenant_admin", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "friction.file_issue", "title": "File Friction issue", "required_scope": "seat", "confirmation": "none", "trusted_execution": { "mode": "eligible", "risk_flags": [], "rationale": "Eligible for Trusted execution only when the signed Charter manifest, tenant policy, budget, and command guard allow it." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "friction.get", "title": "Get Friction issue", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "friction.import", "title": "Import Friction issues from a ninety Issues List", "required_scope": "tenant_admin", "confirmation": "none", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "friction.link_task", "title": "Link task to Friction issue", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "eligible", "risk_flags": [], "rationale": "Eligible for Trusted execution only when the signed Charter manifest, tenant policy, budget, and command guard allow it." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "friction.list", "title": "List Friction issues", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "friction.resolve", "title": "Resolve Friction issue", "required_scope": "tenant", "confirmation": "human_required", "trusted_execution": { "mode": "eligible_bounded", "risk_flags": [], "rationale": "Resolving a Friction already within the acting seat's member-seat subtree is a routine worker action safe to auto-apply under a standing Trusted grant." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "friction.stale_candidates", "title": "Find stale friction", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "friction.update_status", "title": "Update Friction issue status", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "eligible", "risk_flags": [], "rationale": "Eligible for Trusted execution only when the signed Charter manifest, tenant policy, budget, and command guard allow it." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "gate.decide", "title": "Decide a conversational gate", "required_scope": "tenant", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": [], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "goal.bind_measurable", "title": "Bind a Signal to a Cascade goal", "required_scope": "seat", "confirmation": "human_required", "trusted_execution": { "mode": "eligible_bounded", "risk_flags": [], "rationale": "Binding an informs-level Signal never changes goal status, so it is a bounded worker action safe to auto-apply under a standing Trusted grant." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "goal.create", "title": "Create Cascade goal", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "goal.drop", "title": "Drop Cascade goal", "required_scope": "tenant_admin", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin", "destructive"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "goal.get", "title": "Get Cascade goal", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "goal.list", "title": "List Cascade goals", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "goal.list_at_risk", "title": "List at-risk Cascade goals", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "goal.list_measurables", "title": "List a Cascade goal's Signals", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "goal.reassign_owner", "title": "Reassign Cascade goal owner seat", "required_scope": "tenant_admin", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "goal.reparent", "title": "Reparent Cascade goal", "required_scope": "tenant_admin", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "goal.set_auto_status", "title": "Toggle Signal-driven auto-status", "required_scope": "seat", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": [], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "goal.set_progress", "title": "Set Cascade goal progress", "required_scope": "seat", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": [], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "goal.set_status", "title": "Set Cascade goal status", "required_scope": "seat", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "goal.unbind_measurable", "title": "Unbind a Signal from a Cascade goal", "required_scope": "seat", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "goal.update", "title": "Update Cascade goal", "required_scope": "tenant_admin", "confirmation": "none", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "graph.get", "title": "Get Responsibility Graph", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["graph_design", "operating_rhythm"] }, { "id": "implementation_access.abandon", "title": "Abandon implementation access", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": false, "stages": ["company_setup"] }, { "id": "implementation_access.complete", "title": "Complete implementation access", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": false, "stages": ["company_setup"] }, { "id": "implementation_access.status", "title": "Implementation access status", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": false, "stages": ["company_setup"] }, { "id": "integration.connect_rest", "title": "Connect REST integration", "required_scope": "tenant_admin", "confirmation": "credential_flow", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin", "credential"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": false, "stages": ["operating_rhythm"] }, { "id": "integration.discover", "title": "Discover a connection for signals", "required_scope": "tenant_admin", "confirmation": "none", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "integration.list", "title": "List integrations", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "integration.readiness", "title": "Check integration readiness", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "integration.status", "title": "Get integration status", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "integration.test", "title": "Test integration connection", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "mcp_token.create", "title": "Create MCP token", "required_scope": "tenant", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["credential"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["staffing"] }, { "id": "mcp_token.list", "title": "List MCP tokens", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["staffing"] }, { "id": "mcp_token.revoke", "title": "Revoke MCP token", "required_scope": "tenant", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": [], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["staffing"] }, { "id": "measurable_template.adopt", "title": "Adopt a measurable template", "required_scope": "seat", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "measurable_template.list", "title": "List measurable templates", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "measurable.create", "title": "Add a measurable", "required_scope": "seat", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "member.invite", "title": "Invite member", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin", "external_send"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "member.remove", "title": "Remove member", "required_scope": "tenant", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "member.update", "title": "Update member role", "required_scope": "tenant", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "model.catalog", "title": "List model catalog", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["staffing"] }, { "id": "notification.list_errors", "title": "List notification errors", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "notification.settings.get", "title": "Get notification settings", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "notification.settings.update", "title": "Update notification settings", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "notification.test", "title": "Send test notification", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "onboarding.activate", "title": "Activate onboarding agents", "required_scope": "tenant", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": [], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["staffing"] }, { "id": "onboarding.advance_step", "title": "Advance onboarding step", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["company_setup"] }, { "id": "onboarding.attach_reference", "title": "Attach reference document", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["company_setup", "graph_design"] }, { "id": "onboarding.create_invite", "title": "Create onboarding invite", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "always_human", "risk_flags": ["external_send"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["company_setup"] }, { "id": "onboarding.finish", "title": "Finish onboarding", "required_scope": "tenant", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": [], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["company_setup", "operating_rhythm"] }, { "id": "onboarding.rehearse", "title": "Rehearse onboarding agents", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["staffing"] }, { "id": "onboarding.resume", "title": "Onboard resume", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["company_setup"] }, { "id": "onboarding.select_path", "title": "Select onboarding path", "required_scope": "tenant_admin", "confirmation": "none", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": false, "stages": ["company_setup"] }, { "id": "onboarding.setup", "title": "Apply onboarding setup", "required_scope": "tenant", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": [], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["company_setup", "graph_design", "charter_design", "staffing"] }, { "id": "onboarding.source_ingest", "title": "Ingest onboarding source", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Source ingestion is bootstrap-only and never inherits Trusted standing execution." }, "expose_over_mcp": true, "stages": ["company_setup"] }, { "id": "onboarding.status", "title": "Onboard status", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["company_setup"] }, { "id": "onboarding.upload_context", "title": "Upload org context", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["company_setup", "graph_design"] }, { "id": "runner.diagnose", "title": "Diagnose runner", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "runner.list", "title": "List runners", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "runner.pairing.start", "title": "Start runner pairing", "required_scope": "tenant_admin", "confirmation": "none", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "runner.repair", "title": "Runner repair guidance", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "runner.revoke", "title": "Revoke runner", "required_scope": "tenant", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": [], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "runner.status", "title": "Runner status", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "scorecard.grid", "title": "Read the scorecard grid", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "seat.create", "title": "Create seat", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["graph_design"] }, { "id": "seat.create_complete", "title": "Create complete seat", "required_scope": "tenant", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": [], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["graph_design", "charter_design", "staffing"] }, { "id": "seat.decommission", "title": "Decommission seat", "required_scope": "seat", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["destructive"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["graph_design"] }, { "id": "seat.decommission_preview", "title": "Preview seat decommission", "required_scope": "seat", "confirmation": "none", "trusted_execution": { "mode": "always_human", "risk_flags": ["destructive"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["graph_design"] }, { "id": "seat.get", "title": "Get seat detail", "required_scope": "seat", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["graph_design", "operating_rhythm"] }, { "id": "seat.rename", "title": "Rename seat", "required_scope": "seat", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["graph_design"] }, { "id": "seat.reparent", "title": "Reparent seat", "required_scope": "seat", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": [], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["graph_design"] }, { "id": "seat.set_type", "title": "Set seat type", "required_scope": "seat", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": [], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["staffing"] }, { "id": "secret_grant.grant", "title": "Grant a brokered secret", "required_scope": "tenant_admin", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin", "credential"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "secret_grant.list", "title": "List brokered secret grants", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "always_human", "risk_flags": ["credential"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "secret_grant.request", "title": "Request a brokered secret grant", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "always_human", "risk_flags": ["credential"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "secret_grant.revoke", "title": "Revoke a brokered secret grant", "required_scope": "tenant_admin", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin", "credential"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "settings.agent_policy.get", "title": "Get company autonomy ceiling", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "settings.agent_policy.update", "title": "Set company autonomy ceiling", "required_scope": "tenant_admin", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "settings.confirmation_policy.get", "title": "Get CLI confirmation mode", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "settings.confirmation_policy.update", "title": "Set CLI confirmation mode", "required_scope": "tenant_admin", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "settings.get", "title": "Get tenant settings", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "settings.member_visibility.get", "title": "Get member visibility mode", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "settings.member_visibility.update", "title": "Update member visibility mode", "required_scope": "tenant_admin", "confirmation": "none", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "settings.product_learning.get", "title": "Get product-learning policy", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "settings.product_learning.update", "title": "Update product-learning policy", "required_scope": "tenant_admin", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "settings.sync_brief_scope.get", "title": "Get Sync Brief scope", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "settings.sync_brief_scope.update", "title": "Update Sync Brief scope", "required_scope": "tenant_admin", "confirmation": "none", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "settings.tool_policy.get", "title": "Get tenant tool policy", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "settings.tool_policy.update", "title": "Update tenant tool policy", "required_scope": "tenant_admin", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "settings.update", "title": "Update tenant settings", "required_scope": "tenant", "confirmation": "dangerous", "trusted_execution": { "mode": "always_human", "risk_flags": ["destructive"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "signal.bind", "title": "Bind a signal source (draft)", "required_scope": "tenant_admin", "confirmation": "none", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "signal.bind_confirm", "title": "Confirm and activate a signal binding", "required_scope": "tenant_admin", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "signal.confirm_reading", "title": "Confirm Signal reading", "required_scope": "seat", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "signal.correct_reading", "title": "Correct Signal reading", "required_scope": "seat", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": [], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "signal.draft_first_readings", "title": "Draft first readings from a connected source", "required_scope": "seat", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "signal.get", "title": "Get Signal", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "signal.import", "title": "Import Signals from CSV", "required_scope": "tenant_admin", "confirmation": "none", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "signal.list", "title": "List Signals", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "signal.preview", "title": "Preview a signal source", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "signal.report", "title": "Report a Signal reading", "required_scope": "seat", "confirmation": "none", "trusted_execution": { "mode": "eligible", "risk_flags": [], "rationale": "Eligible for Trusted execution only when the signed Charter manifest, tenant policy, budget, and command guard allow it." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "signup.provision_tenant", "title": "Create company", "required_scope": "user", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": false, "stages": ["company_setup"] }, { "id": "skill.assign_to_seat", "title": "Assign skill to seat", "required_scope": "seat", "confirmation": "human_required", "trusted_execution": { "mode": "eligible_bounded", "risk_flags": [], "rationale": "Assigning an already-published, immutable skill version to a seat is a bounded worker action safe to auto-apply under a standing Trusted grant." }, "expose_over_mcp": true, "stages": ["staffing"] }, { "id": "skill.assigned.list", "title": "List assigned skills", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["staffing", "operating_rhythm"] }, { "id": "skill.catalog", "title": "List ROST skill catalog", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["staffing"] }, { "id": "skill.check_dependencies", "title": "Check skill dependencies", "required_scope": "seat", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["staffing"] }, { "id": "skill.create", "title": "Create skill", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["staffing"] }, { "id": "skill.enable_catalog", "title": "Enable ROST catalog skill", "required_scope": "tenant_admin", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["staffing"] }, { "id": "skill.file.get", "title": "Get skill file", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["staffing"] }, { "id": "skill.get", "title": "Get skill", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["staffing"] }, { "id": "skill.import_github", "title": "Import GitHub skill", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["staffing"] }, { "id": "skill.import_upload", "title": "Import uploaded skill", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["staffing"] }, { "id": "skill.install_local", "title": "Install skill locally", "required_scope": "tenant", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": [], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["staffing", "operating_rhythm"] }, { "id": "skill.list", "title": "List skills", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["staffing"] }, { "id": "skill.publish", "title": "Publish skill", "required_scope": "tenant_admin", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["staffing"] }, { "id": "skill.revoke_from_seat", "title": "Revoke skill from seat", "required_scope": "seat", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": [], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["staffing", "operating_rhythm"] }, { "id": "skill.sync_local", "title": "Sync assigned skills locally", "required_scope": "seat", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "skill.update_draft", "title": "Update skill draft", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["staffing"] }, { "id": "software_factory.authority_profile.create", "title": "Create a Forge authority profile", "required_scope": "tenant_admin", "confirmation": "none", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "software_factory.authority_profile.list", "title": "List Forge authority profiles", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "software_factory.authority.grant", "title": "Grant Forge seat authority", "required_scope": "tenant_admin", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "software_factory.authority.revoke", "title": "Revoke Forge seat authority", "required_scope": "tenant_admin", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "software_factory.capacity.list", "title": "List Forge runner capacity", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "software_factory.config.list", "title": "List Forge config", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "software_factory.config.set", "title": "Set Forge config", "required_scope": "tenant_admin", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin", "credential"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "software_factory.conformance.record_findings", "title": "Record Forge conformance findings", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "software_factory.conformance.resolve_finding", "title": "Resolve Forge conformance finding", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "software_factory.developer_team.install", "title": "Install Forge Developer Team", "required_scope": "tenant_admin", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["staffing", "operating_rhythm"] }, { "id": "software_factory.developer_team.uninstall", "title": "Uninstall Forge Developer Team", "required_scope": "tenant_admin", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "software_factory.dispatch.serialize", "title": "Serialize a Forge dispatch collision", "required_scope": "tenant_admin", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "software_factory.gate.decide", "title": "Decide a Forge gate", "required_scope": "tenant_admin", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "software_factory.github.installation_token.create", "title": "Create a Forge GitHub installation token", "required_scope": "tenant", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["credential"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "software_factory.github.installation.bind", "title": "Bind Forge GitHub repositories to projects", "required_scope": "tenant_admin", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": false, "stages": ["operating_rhythm"] }, { "id": "software_factory.github.installation.connect", "title": "Connect a Forge GitHub installation", "required_scope": "tenant_admin", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": false, "stages": ["operating_rhythm"] }, { "id": "software_factory.github.installation.list", "title": "List Forge GitHub installations", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "software_factory.github.policy.upsert", "title": "Set a Forge GitHub automation policy", "required_scope": "tenant_admin", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "software_factory.github.repository.unbind", "title": "Unbind a Forge GitHub repository", "required_scope": "tenant_admin", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": false, "stages": ["operating_rhythm"] }, { "id": "software_factory.phase.advance", "title": "Advance a Forge build request phase", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "software_factory.plan.approve", "title": "Approve a Forge plan", "required_scope": "tenant_admin", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "software_factory.plan.reject", "title": "Reject a Forge plan", "required_scope": "tenant_admin", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "software_factory.project.create", "title": "Create a Forge project", "required_scope": "tenant_admin", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "software_factory.project.list", "title": "List Forge projects", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "software_factory.request.answer_clarification", "title": "Answer Forge plan clarifications", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "software_factory.request.cancel", "title": "Cancel a Forge build request", "required_scope": "tenant_admin", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin", "destructive"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "software_factory.request.create", "title": "Create a Forge build request", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "software_factory.request.list", "title": "List Forge build requests", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "software_factory.request.pause", "title": "Pause a Forge build request", "required_scope": "tenant_admin", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "software_factory.request.resume", "title": "Resume a Forge build request", "required_scope": "tenant_admin", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "software_factory.request.show", "title": "Show a Forge build request", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "software_factory.secret_request.list", "title": "List Forge secret requests", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "always_human", "risk_flags": ["credential"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "software_factory.secret.grant", "title": "Grant a Forge secret", "required_scope": "tenant_admin", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin", "credential"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "software_factory.secret.request", "title": "Request a Forge secret grant", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "always_human", "risk_flags": ["credential"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "software_factory.secret.revoke", "title": "Revoke a Forge secret grant", "required_scope": "tenant_admin", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin", "credential"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "software_factory.secret.use", "title": "Verify Forge secret broker access", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "always_human", "risk_flags": ["credential"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "software_factory.vercel.connection.connect", "title": "Connect a Forge Vercel account", "required_scope": "tenant_admin", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin", "credential"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": false, "stages": ["operating_rhythm"] }, { "id": "software_factory.vercel.deploy_preview", "title": "Create a Forge Vercel preview deployment", "required_scope": "tenant", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["credential", "production"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "software_factory.vercel.project.link", "title": "Link a Forge project to Vercel", "required_scope": "tenant_admin", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": false, "stages": ["operating_rhythm"] }, { "id": "software_factory.vercel.project.list", "title": "List Forge Vercel links", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "staffing.assign", "title": "Staff seat", "required_scope": "seat", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": [], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["staffing"] }, { "id": "staffing.assign_agent_dry_run", "title": "Assign dry-run agent to seat", "required_scope": "seat", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": [], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["staffing"] }, { "id": "staffing.assign_user", "title": "Assign user to seat", "required_scope": "seat", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": [], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["staffing"] }, { "id": "status.record", "title": "Record status", "required_scope": "seat", "confirmation": "none", "trusted_execution": { "mode": "eligible", "risk_flags": [], "rationale": "Eligible for Trusted execution only when the signed Charter manifest, tenant policy, budget, and command guard allow it." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "sync.brief.compile", "title": "Compile Sync Brief", "required_scope": "tenant_admin", "confirmation": "none", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "sync.brief.get", "title": "Get Sync Brief", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "sync.item.assign", "title": "Assign Sync follow-up", "required_scope": "tenant_admin", "confirmation": "none", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "sync.run.complete", "title": "Complete Sync run", "required_scope": "tenant_admin", "confirmation": "none", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "sync.run.start", "title": "Start Sync run", "required_scope": "tenant_admin", "confirmation": "none", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "system.health", "title": "System health", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "task.accept", "title": "Accept task", "required_scope": "seat", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "task.complete", "title": "Complete task", "required_scope": "seat", "confirmation": "none", "trusted_execution": { "mode": "eligible", "risk_flags": [], "rationale": "Eligible for Trusted execution only when the signed Charter manifest, tenant policy, budget, and command guard allow it." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "task.confirm_proposal", "title": "Confirm proposed task", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": false, "stages": ["operating_rhythm"] }, { "id": "task.create", "title": "Create task", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "eligible", "risk_flags": [], "rationale": "Eligible for Trusted execution only when the signed Charter manifest, tenant policy, budget, and command guard allow it." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "task.decline", "title": "Decline task", "required_scope": "seat", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "task.decline_proposal", "title": "Decline proposed task", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": false, "stages": ["operating_rhythm"] }, { "id": "task.import", "title": "Import Tasks from a ninety To-Dos export", "required_scope": "tenant_admin", "confirmation": "none", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "task.list", "title": "List seat tasks", "required_scope": "seat", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "task.update", "title": "Update task", "required_scope": "tenant_admin", "confirmation": "none", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "team.health_score", "title": "Team health score", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "tenant.anthropic_key.disable", "title": "Disable tenant Anthropic key", "required_scope": "tenant_admin", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin", "credential", "destructive", "self_approval", "spend"], "rationale": "Tenant Anthropic key writes and disables change credential posture and managed inference spend, so a human owner/admin must decide." }, "expose_over_mcp": true, "stages": ["staffing"] }, { "id": "tenant.anthropic_key.save", "title": "Save tenant Anthropic key", "required_scope": "tenant", "confirmation": "credential_flow", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin", "credential", "destructive", "self_approval", "spend"], "rationale": "Tenant Anthropic key writes and disables change credential posture and managed inference spend, so a human owner/admin must decide." }, "expose_over_mcp": true, "stages": ["staffing"] }, { "id": "tenant.create", "title": "Create additional company", "required_scope": "tenant_admin", "confirmation": "none", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": false, "stages": ["company_setup"] }, { "id": "tenant.model_gateway_policy.update", "title": "Update model gateway policy", "required_scope": "tenant_admin", "confirmation": "dangerous", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin", "destructive"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "tenant.rename", "title": "Rename company", "required_scope": "tenant_admin", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["company_setup", "operating_rhythm"] }, { "id": "tool_grants.agent.effective", "title": "List agent effective capability grants", "required_scope": "seat", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["staffing", "operating_rhythm"] }, { "id": "tool_grants.tenant.list", "title": "List tenant capability grants", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["staffing", "operating_rhythm"] }, { "id": "tool_grants.tenant.update", "title": "Update tenant capability policy", "required_scope": "tenant_admin", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["admin", "self_approval"], "rationale": "Tenant capability policy changes can widen or narrow agent authority and always require a human owner/admin." }, "expose_over_mcp": true, "stages": ["staffing", "operating_rhythm"] }, { "id": "tool.catalog", "title": "List tool catalog", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "Discovery commands expose static metadata and are not durable execution paths." }, "expose_over_mcp": true, "stages": ["staffing"] }, { "id": "usage.report", "title": "AI-workforce ROI report", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "usage.snapshot", "title": "Capture usage period snapshot", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "user.tenants", "title": "List tenants", "required_scope": "user", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": false, "stages": ["company_setup"] }, { "id": "user.use_tenant", "title": "Select tenant", "required_scope": "user", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": false, "stages": ["company_setup"] }, { "id": "user.whoami", "title": "Who am I", "required_scope": "user", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": false, "stages": ["company_setup"] }, { "id": "work_order.cancel", "title": "Cancel work order", "required_scope": "tenant", "confirmation": "human_required", "trusted_execution": { "mode": "always_human", "risk_flags": ["destructive"], "rationale": "Trusted mode cannot bypass this command's human confirmation or high-risk boundary." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "work_order.enqueue", "title": "Enqueue work order", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "work_order.list", "title": "List work orders", "required_scope": "tenant", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "work.list", "title": "List work records", "required_scope": "seat", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "work.log", "title": "Log work", "required_scope": "seat", "confirmation": "none", "trusted_execution": { "mode": "eligible", "risk_flags": [], "rationale": "Eligible for Trusted execution only when the signed Charter manifest, tenant policy, budget, and command guard allow it." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }, { "id": "work.record", "title": "Record work", "required_scope": "seat", "confirmation": "none", "trusted_execution": { "mode": "not_applicable", "risk_flags": [], "rationale": "This command is not part of the Trusted positive allowlist." }, "expose_over_mcp": true, "stages": ["operating_rhythm"] }] };
   }
 });
@@ -30875,6 +30876,8 @@ var ceilingEnforcementStatusSchema = external_exports.enum(["sign_time_only", "c
 // ../../packages/protocol/src/tool-policy.ts
 var uuidSchema6 = external_exports.string().uuid();
+var CAPABILITY_ID_PATTERN = /^[a-z][a-z_]{0,63}(\.[a-z][a-z_]{0,63})*$/;
+var capabilityIdSchema = external_exports.string().regex(CAPABILITY_ID_PATTERN).max(200);
 var capabilityGrantAccessLevelSchema = external_exports.enum(["off", "read", "draft", "write", "admin"]);
 var capabilityGrantAvailabilitySchema = external_exports.enum([
   "available",
@@ -36988,6 +36991,20 @@ var onboardingActivateInputSchema = external_exports.object({
   rehearsal_runs: onboardingActivationRehearsalRunsSchema,
   configuration_digests: onboardingActivationConfigurationDigestsSchema
 }).strict();
+var onboardingActivationCredentialGrantSchema = external_exports.object({
+  capabilityId: boundedText3(200),
+  integrationId: uuidSchema18.nullable(),
+  requestedAccessLevel: capabilityGrantAccessLevelSchema,
+  actingSeatId: uuidSchema18.optional(),
+  effectiveCharterVersionId: uuidSchema18.optional()
+}).strict();
+var onboardingActivationCredentialGrantExemptionSchema = external_exports.object({
+  capabilityId: capabilityIdSchema,
+  integrationId: uuidSchema18.nullable(),
+  requestedAccessLevel: capabilityGrantAccessLevelSchema,
+  actingSeatId: uuidSchema18.optional(),
+  effectiveCharterVersionId: uuidSchema18.optional()
+}).strict();
 var effectivePermissionManifestRuleSchema = external_exports.object({
   name: boundedText3(200),
   mode: external_exports.enum(["allow", "deny", "escalate"]),
@@ -36996,13 +37013,7 @@ var effectivePermissionManifestRuleSchema = external_exports.object({
   args: external_exports.object({
     equals: external_exports.record(external_exports.string(), external_exports.unknown()).optional()
   }).strict().optional(),
-  credentialGrant: external_exports.object({
-    capabilityId: boundedText3(200),
-    integrationId: uuidSchema18.nullable(),
-    requestedAccessLevel: capabilityGrantAccessLevelSchema,
-    actingSeatId: uuidSchema18.optional(),
-    effectiveCharterVersionId: uuidSchema18.optional()
-  }).strict().optional()
+  credentialGrant: onboardingActivationCredentialGrantSchema.optional()
 }).strict();
 var onboardingActivationAgentProposalSchema = external_exports.object({
   agent_id: uuidSchema18,
@@ -37833,7 +37844,8 @@ var graphNodeSchema = external_exports.object({
   cascade_state: rollupStateSchema,
   open_task_count: external_exports.number().int().nonnegative(),
   unassigned: external_exports.boolean(),
-  is_peer: external_exports.boolean()
+  is_peer: external_exports.boolean(),
+  planned_occupants: external_exports.array(external_exports.object({ display_name: external_exports.string() }).strict())
 }).strict();
 var graphEdgeSchema = external_exports.object({
   parent_seat_id: uuidSchema21,
@@ -37896,7 +37908,8 @@ var seatGetOutputSchema = external_exports.object({
     owned_goals: external_exports.number().int().nonnegative(),
     active_measurables: external_exports.number().int().nonnegative(),
     open_issues: external_exports.number().int().nonnegative()
-  }).strict()
+  }).strict(),
+  planned_occupants: external_exports.array(external_exports.object({ display_name: external_exports.string() }).strict())
 }).strict();
 var charterListInputSchema = external_exports.object({
   seat_id: uuidSchema21.optional(),
@@ -39214,7 +39227,9 @@ var softwarePhaseSchedulerReasonSchema = external_exports.enum([
   "agent_not_execution_ready",
   "runner_not_paired",
   "work_order_expired",
-  "runner_offline"
+  "runner_offline",
+  "charter_manifest_not_signed",
+  "charter_missing"
 ]);
 var softwarePhaseSchedulerStateSchema = external_exports.object({
   status: external_exports.enum(["queued", "parked", "not_configured"]),
@@ -39309,7 +39324,8 @@ var softwareRequestFailureKindSchema = external_exports.enum([
   "phase_failed",
   "budget_exhausted",
   "plan_incomplete",
-  "driver_stalled"
+  "driver_stalled",
+  "charter_not_ready"
 ]);
 var softwareRequestFailureActionSchema = external_exports.enum(["retry", "open_phase", "fix_and_resume"]);
 var softwareRequestFailureSchema = external_exports.object({
@@ -40756,6 +40772,54 @@ var syncBriefSchema = external_exports.object({
   sources: external_exports.array(external_exports.string().min(1))
 }).strict();
+// ../../packages/protocol/src/charter-backfill.ts
+var uuidSchema26 = external_exports.string().uuid();
+var charterBackfillStockEvidenceInputSchema = external_exports.object({}).strict();
+var charterBackfillStockEvidenceOutputSchema = external_exports.object({
+  tenant_id: uuidSchema26,
+  updated: external_exports.array(external_exports.object({
+    seat_id: uuidSchema26,
+    charter_version_id: uuidSchema26,
+    superseded_charter_version_id: uuidSchema26,
+    from_revision: external_exports.enum(["0092", "0124", "current"]),
+    decision_id: uuidSchema26,
+    receipt_id: uuidSchema26.nullable(),
+    // DER-3043 r8 disclosure: the permission-manifest grant delta this
+    // supersession applied (0092 -> current appends the two Trusted auto-band
+    // grants; 0124 -> current drops tool_grants.agent.update; current -> []).
+    // The confirming human must see the enlargement, not infer it.
+    manifest_delta: external_exports.object({
+      appended: external_exports.array(external_exports.string()),
+      removed: external_exports.array(external_exports.string())
+    }).strict()
+  }).strict()),
+  already_current: external_exports.array(external_exports.object({
+    seat_id: uuidSchema26,
+    charter_version_id: uuidSchema26,
+    reason: external_exports.literal("evidence_already_verified")
+  }).strict()),
+  excluded_edited: external_exports.array(external_exports.object({
+    seat_id: uuidSchema26,
+    charter_version_id: uuidSchema26,
+    reason: external_exports.literal("charter_doc_not_a_recognized_stock_revision")
+  }).strict()),
+  excluded_in_flight: external_exports.array(external_exports.object({
+    seat_id: uuidSchema26,
+    charter_version_id: uuidSchema26,
+    successor_kind: external_exports.enum(["agent", "charter_version"]),
+    reason: external_exports.literal("successor_in_flight")
+  }).strict()),
+  excluded_no_active_charter: external_exports.array(external_exports.object({
+    seat_id: uuidSchema26.nullable(),
+    reason: external_exports.enum(["no_active_charter_version", "no_canonical_aicos_seat"])
+  }).strict()),
+  excluded_noncanonical: external_exports.array(external_exports.object({
+    seat_id: uuidSchema26,
+    charter_version_id: uuidSchema26,
+    reason: external_exports.enum(["stock_doc_off_canonical_seat", "canonical_seat_without_stock_occupancy"])
+  }).strict())
+}).strict();
 // ../../packages/protocol/src/usage.ts
 var isoDateTime10 = external_exports.string().datetime({ offset: true });
 var periodKeySchema = external_exports.string().regex(/^\d{4}-\d{2}-\d{2}$/);
@@ -40830,11 +40894,11 @@ var usageSnapshotOutputSchema = external_exports.object({
 }).strict();
 // ../../packages/protocol/src/event-payloads.ts
-var uuidSchema26 = external_exports.string().uuid();
+var uuidSchema27 = external_exports.string().uuid();
 var evidenceSchema = external_exports.array(external_exports.unknown());
 var statusEventPayloadSchema = external_exports.object({
   measurables: external_exports.array(external_exports.object({
-    id: uuidSchema26,
+    id: uuidSchema27,
     value: external_exports.number().finite(),
     // DER-1045: an optional, non-secret citation for an agent-proposed reading
     // (signal.report) — where the number came from + the agent's confidence.
@@ -40869,7 +40933,7 @@ var statusEventPayloadSchema = external_exports.object({
     }).strict().optional()
   }).strict()).optional(),
   goals: external_exports.array(external_exports.object({
-    id: uuidSchema26,
+    id: uuidSchema27,
     state: external_exports.enum(["on", "off"]),
     note: external_exports.string().min(1).optional(),
     // DER-2214: structured status-event attribution so "deliberately human-pinned"
@@ -40901,8 +40965,8 @@ var escalationEventPayloadSchema = escalationRaiseInputSchema.extend({
 }).strict();
 var issueEventPayloadSchema = external_exports.object({
   summary: external_exports.string().min(1),
-  blocking_goal_id: uuidSchema26.optional(),
-  broken_measurable_id: uuidSchema26.optional(),
+  blocking_goal_id: uuidSchema27.optional(),
+  broken_measurable_id: uuidSchema27.optional(),
   evidence: evidenceSchema,
   severity: external_exports.enum(["low", "med", "high", "critical"]),
   // DER-1978 (S2): an OPTIONAL short human-readable title written at creation.
@@ -40914,7 +40978,7 @@ var issueEventPayloadSchema = external_exports.object({
 }).strict();
 // ../../packages/protocol/src/event-internal-payloads.ts
-var uuidSchema27 = external_exports.string().uuid();
+var uuidSchema28 = external_exports.string().uuid();
 var internalEventObjectSchema = external_exports.record(external_exports.string(), external_exports.unknown()).refine((payload) => !Array.isArray(payload), "Internal event payload must be an object");
 var actionEventPayloadSchema = external_exports.object({ action: external_exports.string().min(1) }).passthrough();
 function authoritativePrefixUnion(branches, authoritative) {
@@ -40936,25 +41000,25 @@ function authoritativePrefixUnion(branches, authoritative) {
 }
 var inviteCreatedEventPayloadSchema = external_exports.object({
   action: external_exports.literal("invite.created"),
-  invite_id: uuidSchema27,
+  invite_id: uuidSchema28,
   email: external_exports.string().email(),
   role: memberRoleSchema,
   member_type: memberTypeSchema,
   access_profile: memberAccessProfileSchema,
   aicos_access_scope: aicosAccessScopeSchema,
-  invited_by: uuidSchema27
+  invited_by: uuidSchema28
 }).strict();
 var inviteRevokedEventPayloadSchema = external_exports.object({
   action: external_exports.literal("invite.revoked"),
-  invite_id: uuidSchema27,
-  revoked_by: uuidSchema27
+  invite_id: uuidSchema28,
+  revoked_by: uuidSchema28
 }).strict();
 var inviteAcceptedEventPayloadSchema = external_exports.object({
   action: external_exports.literal("invite.accepted"),
-  invite_id: uuidSchema27,
-  user_id: uuidSchema27,
-  membership_id: uuidSchema27,
-  linked_seat_ids: external_exports.array(uuidSchema27)
+  invite_id: uuidSchema28,
+  user_id: uuidSchema28,
+  membership_id: uuidSchema28,
+  linked_seat_ids: external_exports.array(uuidSchema28)
 }).strict();
 var inviteLifecycleEventPayloadSchema = external_exports.union([
   inviteCreatedEventPayloadSchema,
@@ -41019,14 +41083,14 @@ var heldToolActionReplaySchema = external_exports.object({
 }).strict();
 // ../../packages/protocol/src/operating.ts
-var uuidSchema28 = external_exports.string().uuid();
+var uuidSchema29 = external_exports.string().uuid();
 var taskListInputSchema = external_exports.object({}).strict();
 var operatingTaskSchema = external_exports.object({
-  id: uuidSchema28,
+  id: uuidSchema29,
   title: external_exports.string(),
   description: external_exports.string().nullable(),
-  from_seat_id: uuidSchema28.nullable(),
-  goal_id: uuidSchema28.nullable(),
+  from_seat_id: uuidSchema29.nullable(),
+  goal_id: uuidSchema29.nullable(),
   acceptance_criteria: external_exports.unknown(),
   due_on: external_exports.string().nullable(),
   status: external_exports.string()
@@ -41035,54 +41099,54 @@ var taskListOutputSchema = external_exports.object({
   tasks: external_exports.array(operatingTaskSchema)
 }).strict();
 var taskAcceptInputSchema = external_exports.object({
-  id: uuidSchema28
+  id: uuidSchema29
 }).strict();
 var taskConfirmProposalInputSchema = external_exports.object({
-  id: uuidSchema28
+  id: uuidSchema29
 }).strict();
 var taskMutationOutputSchema = external_exports.object({
   task: external_exports.object({
-    id: uuidSchema28,
+    id: uuidSchema29,
     status: external_exports.string()
   }).strict()
 }).strict();
 var taskDeclineInputSchema = external_exports.object({
-  id: uuidSchema28,
+  id: uuidSchema29,
   reason: external_exports.string().min(1)
 }).strict();
 var taskDeclineOutputSchema = external_exports.object({
   task: external_exports.object({
-    id: uuidSchema28,
+    id: uuidSchema29,
     status: external_exports.string(),
     decline_reason: external_exports.string()
   }).strict()
 }).strict();
 var taskCompleteInputSchema = external_exports.object({
-  id: uuidSchema28,
+  id: uuidSchema29,
   summary: external_exports.string().min(1),
   artifacts: external_exports.unknown().optional()
 }).strict();
 var taskCompleteOutputSchema = external_exports.object({
-  task_id: uuidSchema28,
-  event_id: uuidSchema28,
+  task_id: uuidSchema29,
+  event_id: uuidSchema29,
   type: external_exports.literal("handoff")
 }).strict();
 var statusRecordOutputSchema = external_exports.object({
-  event_id: uuidSchema28,
+  event_id: uuidSchema29,
   type: external_exports.literal("status")
 }).strict();
 var frictionFileIssueInputSchema = issueEventPayloadSchema.extend({
   source_key: external_exports.string().trim().min(1).max(200).optional()
 }).strict();
 var duplicateFrictionCandidateSchema = external_exports.object({
-  issue_id: uuidSchema28,
+  issue_id: uuidSchema29,
   summary: external_exports.string().min(1),
   // pg_trgm similarity in [0, 1]; higher is more similar.
   similarity: external_exports.number().min(0).max(1)
 }).strict();
 var frictionFileIssueOutputSchema = external_exports.object({
-  event_id: uuidSchema28,
-  issue_id: uuidSchema28,
+  event_id: uuidSchema29,
+  issue_id: uuidSchema29,
   type: external_exports.literal("issue"),
   // DER-1522: likely-duplicate candidates detected before creation. Recommend,
   // never block — filing always proceeds; empty when nothing crossed the
@@ -41096,12 +41160,12 @@ var workLogInputSchema = external_exports.object({
   note: external_exports.string().min(1)
 }).strict();
 var workLogOutputSchema = external_exports.object({
-  event_id: uuidSchema28,
+  event_id: uuidSchema29,
   type: external_exports.literal("task")
 }).strict();
 var escalationRaiseOutputSchema = external_exports.object({
-  event_id: uuidSchema28,
-  escalation_id: uuidSchema28,
+  event_id: uuidSchema29,
+  escalation_id: uuidSchema29,
   type: external_exports.literal("escalation")
 }).strict();
 var deliverableKindSchema2 = external_exports.enum(["brief", "work_evidence", "artifact", "report", "other"]);
@@ -41160,7 +41224,7 @@ var deliverableRejectOutputSchema = external_exports.object({
 }).strict();
 // ../../packages/protocol/src/steward.ts
-var uuidSchema29 = external_exports.string().uuid();
+var uuidSchema30 = external_exports.string().uuid();
 var escalationStatusSchema = external_exports.enum([
   "open",
   "approved",
@@ -41169,18 +41233,18 @@ var escalationStatusSchema = external_exports.enum([
 ]);
 var stewardReplayActionSummarySchema = external_exports.object({
   tool_name: external_exports.string(),
-  run_id: uuidSchema29
+  run_id: uuidSchema30
 }).strict();
 var stewardProposedToolCallSchema = external_exports.object({
   tool_name: external_exports.string(),
   args_summary: external_exports.unknown()
 }).strict();
 var stewardEscalationSchema = external_exports.object({
-  id: uuidSchema29,
-  seat_id: uuidSchema29,
+  id: uuidSchema30,
+  seat_id: uuidSchema30,
   seat_name: external_exports.string(),
   seat_type: external_exports.enum(["human", "agent", "hybrid"]),
-  steward_seat_id: uuidSchema29,
+  steward_seat_id: uuidSchema30,
   steward_seat_name: external_exports.string(),
   reason: external_exports.string(),
   // DER-1978 (S2): OPTIONAL short headline written at creation; null/absent when unset
@@ -41203,11 +41267,11 @@ var stewardEscalationSchema = external_exports.object({
   proposed_tool_call: stewardProposedToolCallSchema.optional(),
   recommended_action: external_exports.string().nullable(),
   status: escalationStatusSchema,
-  decided_by: uuidSchema29.nullable(),
+  decided_by: uuidSchema30.nullable(),
   decided_by_name: external_exports.string().nullable(),
   decided_at: external_exports.string().nullable(),
   decision_note: external_exports.string().nullable(),
-  issue_id: uuidSchema29.nullable(),
+  issue_id: uuidSchema30.nullable(),
   created_at: external_exports.string(),
   updated_at: external_exports.string()
 }).strict();
@@ -41218,27 +41282,27 @@ var escalationListOutputSchema = external_exports.object({
   escalations: external_exports.array(stewardEscalationSchema)
 }).strict();
 var escalationGetInputSchema = external_exports.object({
-  id: uuidSchema29
+  id: uuidSchema30
 }).strict();
 var escalationGetOutputSchema = external_exports.object({
   escalation: stewardEscalationSchema
 }).strict();
 var escalationResolveActionSchema = external_exports.enum(["approve", "convert_to_issue"]);
 var escalationResolveInputSchema = external_exports.object({
-  id: uuidSchema29,
+  id: uuidSchema30,
   action: escalationResolveActionSchema.optional(),
   rationale: external_exports.string().trim().min(1).optional()
 }).strict();
 var escalationRejectInputSchema = external_exports.object({
-  id: uuidSchema29,
+  id: uuidSchema30,
   rationale: external_exports.string().trim().min(1).optional()
 }).strict();
 var escalationDecisionOutputSchema = external_exports.object({
-  escalation_id: uuidSchema29,
+  escalation_id: uuidSchema30,
   status: escalationStatusSchema,
-  decision_id: uuidSchema29,
-  decided_by: uuidSchema29,
-  issue_id: uuidSchema29.nullable(),
+  decision_id: uuidSchema30,
+  decided_by: uuidSchema30,
+  issue_id: uuidSchema30.nullable(),
   // DER-1478: true when the resolved escalation carries a durable replay_action
   // (an approval-gated connector write) that the approvals path should actuate
   // after this decision is recorded. Omitted (not false) for non-connector
@@ -41419,7 +41483,7 @@ var workDetailsSchemas = {
 };
 // ../../packages/protocol/src/agent-grant-intervention.ts
-var uuidSchema30 = external_exports.string().uuid();
+var uuidSchema31 = external_exports.string().uuid();
 var agentGrantBlockerKindSchema = external_exports.enum([
   "rost_capability",
   "os_permission",
@@ -41436,16 +41500,16 @@ var agentGrantInterventionStatusSchema = external_exports.enum([
 ]);
 var agentGrantKindSchema = external_exports.enum(["allow_once", "permanent"]);
 var agentGrantInterventionSchema = external_exports.object({
-  id: uuidSchema30,
-  seat_id: uuidSchema30,
+  id: uuidSchema31,
+  seat_id: uuidSchema31,
   seat_name: external_exports.string().nullable(),
-  agent_id: uuidSchema30.nullable(),
+  agent_id: uuidSchema31.nullable(),
   // The source blocked attempt (audit link); null once the run is retention-purged.
-  run_id: uuidSchema30.nullable(),
+  run_id: uuidSchema31.nullable(),
   // The runner the blocker lives on, for os_permission repairs ("Open on Runner").
-  runner_id: uuidSchema30.nullable(),
+  runner_id: uuidSchema31.nullable(),
   // The linked continuation attempt, populated when a continuation is enqueued.
-  continuation_run_id: uuidSchema30.nullable(),
+  continuation_run_id: uuidSchema31.nullable(),
   blocker_kind: agentGrantBlockerKindSchema,
   status: agentGrantInterventionStatusSchema,
   // The specific capability/scope requested (e.g. "gmail.send"), when applicable.
@@ -41460,7 +41524,7 @@ var agentGrantInterventionSchema = external_exports.object({
   // True once the blocked attempt released its lease/compute (AC #2 clean termination).
   compute_released: external_exports.boolean(),
   grant_kind: agentGrantKindSchema.nullable(),
-  decided_by: uuidSchema30.nullable(),
+  decided_by: uuidSchema31.nullable(),
   decided_by_name: external_exports.string().nullable(),
   decided_at: external_exports.string().nullable(),
   expires_at: external_exports.string().nullable(),
@@ -41469,7 +41533,7 @@ var agentGrantInterventionSchema = external_exports.object({
 }).strict();
 var agentGrantInterventionListInputSchema = external_exports.object({
   // Optional seat filter (a seat-scoped caller is additionally clamped to its own seat).
-  seat_id: uuidSchema30.optional(),
+  seat_id: uuidSchema31.optional(),
   // When true, include decided/terminal records (declined/resumed/expired) too;
   // by default only the actionable open blocked/granted records are returned.
   include_decided: external_exports.boolean().optional()
@@ -41478,14 +41542,14 @@ var agentGrantInterventionListOutputSchema = external_exports.object({
   interventions: external_exports.array(agentGrantInterventionSchema)
 }).strict();
 var agentGrantInterventionGetInputSchema = external_exports.object({
-  id: uuidSchema30
+  id: uuidSchema31
 }).strict();
 var agentGrantInterventionGetOutputSchema = external_exports.object({
   intervention: agentGrantInterventionSchema
 }).strict();
 var agentGrantInterventionDecideActionSchema = external_exports.enum(["grant", "decline"]);
 var agentGrantInterventionDecideInputSchema = external_exports.object({
-  intervention_id: uuidSchema30,
+  intervention_id: uuidSchema31,
   action: agentGrantInterventionDecideActionSchema,
   // Defaults to allow_once. `permanent` never auto-widens — it returns
   // requires_charter_resign so the surface routes the human to a Charter re-sign.
@@ -41497,12 +41561,12 @@ var agentGrantInterventionDecideInputSchema = external_exports.object({
   rationale: external_exports.string().trim().min(1).max(2e3).optional()
 }).strict();
 var agentGrantInterventionDecideOutputSchema = external_exports.object({
-  intervention_id: uuidSchema30,
+  intervention_id: uuidSchema31,
   status: agentGrantInterventionStatusSchema,
-  continuation_run_id: uuidSchema30.nullable(),
+  continuation_run_id: uuidSchema31.nullable(),
   // The human decision row written for a grant/decline (invariant #7). Null only
   // when a permanent grant deferred to a Charter re-sign (no one-time decision made).
-  decision_id: uuidSchema30.nullable(),
+  decision_id: uuidSchema31.nullable(),
   // True when the human chose the permanent option — the surface must route to a
   // Charter re-sign; no authority was widened by this call (invariant #10).
   requires_charter_resign: external_exports.boolean(),
@@ -41516,12 +41580,12 @@ var agentGrantInterventionDecideOutputSchema = external_exports.object({
   enqueue_failed: external_exports.boolean()
 }).strict();
 var agentGrantInterventionResumeInputSchema = external_exports.object({
-  intervention_id: uuidSchema30
+  intervention_id: uuidSchema31
 }).strict();
 var agentGrantInterventionResumeOutputSchema = external_exports.object({
-  intervention_id: uuidSchema30,
+  intervention_id: uuidSchema31,
   status: agentGrantInterventionStatusSchema,
-  continuation_run_id: uuidSchema30.nullable(),
+  continuation_run_id: uuidSchema31.nullable(),
   enqueue_failed: external_exports.boolean()
 }).strict();
@@ -41539,7 +41603,7 @@ var eventTypes = [
   "task"
 ];
 var publicMessageTypes = ["status", "handoff", "escalation", "issue"];
-var uuidSchema31 = external_exports.string().uuid();
+var uuidSchema32 = external_exports.string().uuid();
 var evidenceSchema2 = external_exports.array(external_exports.unknown());
 var internalEventPayloadSchema = external_exports.record(external_exports.string(), external_exports.unknown()).refine((payload) => !Array.isArray(payload), "Internal event payload must be an object");
 var handoffEventPayloadSchema = external_exports.object({
@@ -41549,24 +41613,24 @@ var handoffEventPayloadSchema = external_exports.object({
     acceptance_criteria: external_exports.array(external_exports.string().min(1)),
     due: external_exports.string().datetime({ offset: true })
   }).strict(),
-  to_seat_id: uuidSchema31
+  to_seat_id: uuidSchema32
 }).strict();
 var intakeEventPayloadSchema = external_exports.discriminatedUnion("action", [
   external_exports.object({
     action: external_exports.literal("uploaded"),
-    document_id: uuidSchema31,
+    document_id: uuidSchema32,
     storage_ref: external_exports.string().min(1)
   }).strict(),
   external_exports.object({
     action: external_exports.literal("parsed"),
-    document_id: uuidSchema31,
+    document_id: uuidSchema32,
     mode: external_exports.enum(["source_tree", "function_first"]),
     seat_count: external_exports.number().int().nonnegative(),
     edge_count: external_exports.number().int().nonnegative()
   }).strict(),
   external_exports.object({
     action: external_exports.literal("failed"),
-    document_id: uuidSchema31,
+    document_id: uuidSchema32,
     reason: external_exports.string().min(1)
   }).strict(),
   external_exports.object({
@@ -41672,9 +41736,9 @@ var publicMessageTypeSchema = external_exports.enum(publicMessageTypes);
 var eventEnvelopeBaseSchema = external_exports.object({
   protocol: external_exports.literal(EVENT_PROTOCOL),
   type: eventTypeSchema,
-  seat_id: uuidSchema31.nullable(),
+  seat_id: uuidSchema32.nullable(),
   occurred_at: external_exports.string().datetime({ offset: true }),
-  goal_ancestry: external_exports.array(uuidSchema31),
+  goal_ancestry: external_exports.array(uuidSchema32),
   // DER-2381: optional so historical rows and every caller that hasn't been
   // updated yet keep parsing — but every per-type writer envelope below
   // extends THIS base and re-`.strict()`s, so adding it here propagates the
@@ -52350,6 +52414,7 @@ var COMMAND_MANIFEST = [
   { "id": "cascade.import_okrs", "namespace": "cascade", "action": "import_okrs", "title": "Import objectives and key results from a generic OKR CSV", "description": "Bulk-import a generic OKR export (objectives + key results) into the Cascade. Company objectives become company_objective goals; seat objectives become seat goals under the resolved company objective; metric key results become measurables bound informs to their objective; milestone key results become milestone goals under a seat objective. Owners are seat names resolved to seats; requires an active cycle. Idempotent \u2014 re-importing the same file is a no-op; existing goals/measurables/bindings are matched, never duplicated.", "requiredScope": "tenant_admin", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "dry_run", "flag": "dry-run", "type": "boolean", "required": false }, { "name": "parent_objective_id", "flag": "parent-objective-id", "type": "string", "required": false }], "hasComplexInput": true, "help": "Import a generic OKR CSV (objectives + key results) into the Cascade; objectives become goals, metric KRs become measurables bound informs, milestone KRs become milestone goals; owners resolve to seats." },
   { "id": "charter.apply_seat_type_recommendation", "namespace": "charter", "action": "apply_seat_type_recommendation", "title": "Apply Charter seat-type recommendation", "description": "Apply the seat-type recommendation from a draft Charter.", "requiredScope": "seat", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "charter_version_id", "flag": "charter-version-id", "type": "string", "required": true }], "hasComplexInput": false, "help": "Apply seat-type recommendations only after the Charter clarifies work shape, risk, and Steward accountability." },
   { "id": "charter.approve", "namespace": "charter", "action": "approve", "title": "Approve charter", "description": "Approve a draft Charter as a human owner.", "requiredScope": "seat", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": false }, { "name": "charter_version_id", "flag": "charter-version-id", "type": "string", "required": false }, { "name": "expected_edit_revision", "flag": "expected-edit-revision", "type": "integer", "required": false }, { "name": "apply_seat_type", "flag": "apply-seat-type", "type": "boolean", "required": false }], "hasComplexInput": true, "help": "Charter approval is a human decision that activates the seat's operating contract." },
+  { "id": "charter.backfill_stock_evidence", "namespace": "charter", "action": "backfill_stock_evidence", "title": "Backfill stock AICOS manifest evidence", "description": "Owner-triggered sweep minting manifest evidence for recognized unmodified stock AICOS Charters (edited/in-flight excluded and reported). Superseding a 0092-era Charter APPENDS agent.update_schedule + skill.assign_to_seat \u2014 both Trusted auto-band grants \u2014 a disclosed authority enlargement a human confirms (non-interactive runs stage a confirmation; seats whose approved Skills require tools the tool catalog does not know are refused with Skill blockers until DER-3223).", "requiredScope": "tenant_admin", "confirmation": "human_required", "exposeOverMcp": false, "fields": [], "hasComplexInput": false, "help": "Owner-only recovery sweep for recognized unmodified stock AICOS Charters that lack verified manifest evidence; edited or in-flight Charters are excluded and reported. Seats whose approved Skills require tools the tool catalog does not know are refused with Skill blockers until DER-3223." },
   { "id": "charter.draft", "namespace": "charter", "action": "draft", "title": "Draft charter", "description": "Create or fetch a draft Charter for a seat.", "requiredScope": "seat", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": true }], "hasComplexInput": false, "help": "Draft Charters that define purpose, responsibilities, decision authority, measurables, tools, budget, and escalation; the charter authoring deep-dive shows what good looks like per field." },
   { "id": "charter.draft_all", "namespace": "charter", "action": "draft_all", "title": "Draft all charters", "description": "Draft Charters for every eligible seat in a tenant.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [], "hasComplexInput": false, "help": "Draft Charters in onboarding order after the Responsibility Graph has enough seat clarity.", "example": {} },
   { "id": "charter.get", "namespace": "charter", "action": "get", "title": "Get Charter", "description": "Return a Charter version with its supersession history and latest dry-run status.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "charter_version_id", "flag": "charter-version-id", "type": "string", "required": true }], "hasComplexInput": false, "bootstrapClass": "read", "help": "Read a Charter with its supersession history and dry-run status before approving or signing a manifest." },
@@ -52427,7 +52492,7 @@ var COMMAND_MANIFEST = [
   { "id": "goal.set_status", "namespace": "goal", "action": "set_status", "title": "Set Cascade goal status", "description": "Set a goal's status (on/off/done). Seat-scoped callers may set status only for their own goals.", "requiredScope": "seat", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "goal_id", "flag": "goal-id", "type": "string", "required": true }, { "name": "status", "flag": "status", "type": "enum", "required": true, "enumValues": ["on", "off", "done"] }], "hasComplexInput": false, "help": "Set a goal's status; seat tokens may only set status for their own goals." },
   { "id": "goal.unbind_measurable", "namespace": "goal", "action": "unbind_measurable", "title": "Unbind a Signal from a Cascade goal", "description": "Role defaults to 'drives_status'; pass role 'informs' to remove an informative indicator. Removing a driver keeps the goal's last status; unbinding only stops future signal-driven updates.", "requiredScope": "seat", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "goal_id", "flag": "goal-id", "type": "string", "required": true }, { "name": "measurable_id", "flag": "measurable-id", "type": "string", "required": true }, { "name": "role", "flag": "role", "type": "enum", "required": false, "enumValues": ["drives_status", "informs"] }], "hasComplexInput": false, "help": "Remove a Signal's drives_status binding from a goal; the goal keeps its last status and stops receiving signal-driven updates." },
   { "id": "goal.update", "namespace": "goal", "action": "update", "title": "Update Cascade goal", "description": "Update a goal's title, definition of done, or target date. Topology (parent/seat) and status have dedicated commands.", "requiredScope": "tenant_admin", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "goal_id", "flag": "goal-id", "type": "string", "required": true }, { "name": "title", "flag": "title", "type": "string", "required": false }, { "name": "definition_of_done", "flag": "definition-of-done", "type": "string", "required": false }, { "name": "target_date", "flag": "target-date", "type": "string", "required": false }], "hasComplexInput": false, "help": "Update a goal's title or definition of done; topology and status have dedicated commands." },
-  { "id": "graph.get", "namespace": "graph", "action": "get", "title": "Get Responsibility Graph", "description": "Return the tenant's Responsibility Graph: seats, edges, root, occupants, and status rollups.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [], "hasComplexInput": false, "bootstrapClass": "read", "help": "Read the Responsibility Graph to discover seat ids, parentage, occupants, and status before mutating or routing work." },
+  { "id": "graph.get", "namespace": "graph", "action": "get", "title": "Get Responsibility Graph", "description": "Return the tenant's Responsibility Graph: seats, edges, root, occupants, display-only planned occupants, and status rollups.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [], "hasComplexInput": false, "bootstrapClass": "read", "help": "Read the Responsibility Graph to discover seat ids, parentage, occupants, and status before mutating or routing work." },
   { "id": "implementation_access.abandon", "namespace": "implementation_access", "action": "abandon", "title": "Abandon implementation access", "description": "Close the implementation bootstrap run as abandoned and revoke its bearer token.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": false, "fields": [], "hasComplexInput": false, "bootstrapClass": "lifecycle", "help": "Close the implementation bootstrap run as abandoned and revoke its bearer token." },
   { "id": "implementation_access.complete", "namespace": "implementation_access", "action": "complete", "title": "Complete implementation access", "description": "Close the implementation bootstrap run as completed and revoke its bearer token.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": false, "fields": [], "hasComplexInput": false, "bootstrapClass": "lifecycle", "help": "Close the implementation bootstrap run as completed and revoke its bearer token." },
   { "id": "implementation_access.status", "namespace": "implementation_access", "action": "status", "title": "Implementation access status", "description": "Read the current state of the implementation bootstrap run and its bearer token.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": false, "fields": [], "hasComplexInput": false, "bootstrapClass": "lifecycle", "help": "Read the current state of the implementation bootstrap run and its bearer token." },
@@ -52474,7 +52539,7 @@ var COMMAND_MANIFEST = [
   { "id": "seat.create_complete", "namespace": "seat", "action": "create_complete", "title": "Create complete seat", "description": "Create a Seat with its Charter, disclosed staffing, and optional dry-run agent shell after owner confirmation.", "requiredScope": "tenant", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "idempotency_key", "flag": "idempotency-key", "type": "string", "required": true }], "hasComplexInput": true, "bootstrapClass": "stage", "help": "Submit one complete Seat proposal with its Charter, disclosed staffing, and optional dry-run agent configuration. Read the exact schema first; the command stages one owner confirmation, never goes live, and applies every approved effect atomically." },
   { "id": "seat.decommission", "namespace": "seat", "action": "decommission", "title": "Decommission seat", "description": "Retire a seat: end occupancies, archive the active charter, revoke seat tokens/credentials, cancel schedules, and emit a tombstone event. Blocks if it would leave another live agent without a human steward chain.", "requiredScope": "seat", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": true }], "hasComplexInput": false, "help": "Retiring a seat ends occupancies, archives the active Charter, revokes seat tokens and credentials, and emits a tombstone event. No-orphan guarded. To retire only the agent and keep the seat, use agent.decommission." },
   { "id": "seat.decommission_preview", "namespace": "seat", "action": "decommission_preview", "title": "Preview seat decommission", "description": "Show exactly what retiring a seat would end, revoke, archive, or expire without mutating state. The no-orphan steward guard is still checked when the real decommission executes.", "requiredScope": "seat", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": true }], "hasComplexInput": false, "help": "Preview the occupancies, agents, Charter versions, tokens, credentials, work orders, and schedules that seat.decommission would affect without mutating state." },
-  { "id": "seat.get", "namespace": "seat", "action": "get", "title": "Get seat detail", "description": "Return seat profile, steward chain, occupancy, Charter ids, agent status, token metadata, and open-work counts.", "requiredScope": "seat", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": true }], "hasComplexInput": false, "help": "Inspect a seat's Charter ids, steward chain, occupancy, agent status, token metadata, and open-work counts before acting on it." },
+  { "id": "seat.get", "namespace": "seat", "action": "get", "title": "Get seat detail", "description": "Return seat profile, steward chain, occupancy, display-only planned occupants, Charter ids, agent status, token metadata, and open-work counts.", "requiredScope": "seat", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": true }], "hasComplexInput": false, "help": "Inspect a seat's Charter ids, steward chain, occupancy, display-only planned occupants, agent status, token metadata, and open-work counts before acting on it." },
   { "id": "seat.rename", "namespace": "seat", "action": "rename", "title": "Rename seat", "description": "Rename a Responsibility Graph seat.", "requiredScope": "seat", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": true }, { "name": "name", "flag": "name", "type": "string", "required": true }], "hasComplexInput": false, "help": "Seat names should describe the function and accountability clearly." },
   { "id": "seat.reparent", "namespace": "seat", "action": "reparent", "title": "Reparent seat", "description": "Move a Responsibility Graph seat under a new parent.", "requiredScope": "seat", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": true }, { "name": "new_parent_seat_id", "flag": "new-parent-seat-id", "type": "string", "required": true }], "hasComplexInput": false, "help": "Reparent seats only when it clarifies accountable structure and preserves a clean graph." },
   { "id": "seat.set_type", "namespace": "seat", "action": "set_type", "title": "Set seat type", "description": "Set a Responsibility Graph seat type.", "requiredScope": "seat", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": true }, { "name": "seat_type", "flag": "seat-type", "type": "enum", "required": true, "enumValues": ["human", "agent", "hybrid"] }], "hasComplexInput": false, "help": "Seat type should follow the work, risk, measurable, and stewardship model." },
@@ -53114,7 +53179,7 @@ Canonical source: \`github.com/agenticoperatingsystem/rost-implementation-skill\
     order: 15,
     title: "AICOS chat guide",
     summary: "How the AI Chief of Staff chat works in the authenticated app shell and what it can safely do today.",
-    version: "2026-07-20.3",
+    version: "2026-08-03.4",
     public: true,
     audiences: ["human", "in_app_agent"],
     stages: ["company_setup", "operating_rhythm"],
@@ -53132,6 +53197,7 @@ Canonical source: \`github.com/agenticoperatingsystem/rost-implementation-skill\
       "agent.configure_tools",
       "agent.run_dry_run",
       "agent.go_live",
+      "charter.backfill_stock_evidence",
       "charter.sign_manifest",
       "agent.update_schedule",
       "skill.assign_to_seat",
@@ -53174,7 +53240,7 @@ You can reopen prior threads, search thread titles and summaries, or start a new
 ## Set up AICOS for an existing company
-New companies receive the governed AICOS foundation during provisioning. Existing companies can also set it up later from **Settings -> AICOS**. Owners and admins can see whether the foundation exists, repair it if needed, and choose the run location after setup.
+New companies receive the governed AICOS foundation during provisioning. Existing companies can also set it up later from **Settings -> AICOS**. Owners and admins can see whether the foundation exists and repair it if needed; choosing the run location (the lane) after setup is owner-only.
 The repair action ensures the same structure new companies receive: a Founder/CEO root seat, an owner occupancy for stewardship, an **AI Chief of Staff** seat, the live stock AICOS agent, and one active agent occupancy. It is idempotent; running it again repairs missing pieces instead of creating a second AICOS. If older setup attempts left more than one active AICOS occupancy, the repair path keeps the best current stock AICOS agent \u2014 live before dry-run, draft, or paused \u2014 promotes that canonical stock agent to live for Runner readiness, and ends the extra AICOS occupancies so Settings, lane readiness, and chat resolve the same governed agent.
@@ -53186,7 +53252,7 @@ The same Settings area shows AICOS authority and launch recovery in customer lan
 Each turn carries server-normalized page context: route template, current path, safe search state, selected seat or object ids when authorized, onboarding state when relevant, and the current tenant clock. AICOS treats the supplied clock as authoritative for today's date and time instead of guessing from model priors. The server derives tenant and user authority from the authenticated session. Client-supplied tenant context is never accepted as authority.
-The current chat harness shows the effective lane and model. Cloud is the default and remains the enforced lane during onboarding, even if a post-onboarding lane has been selected. After onboarding, an owner or admin can select cloud, runner, or MCP only when the server says that lane is ready. Lane changes update the governed AICOS agent seat and write an append-only audit event; the browser never decides tenant authority or runner/MCP readiness.
+The current chat harness shows the effective lane and model. Cloud is the default and remains the enforced lane during onboarding, even if a post-onboarding lane has been selected. After onboarding, an owner can select cloud, runner, or MCP only when the server says that lane is ready. On a live, recognized stock AICOS Charter, a lane change does more than update the agent seat: in the same transaction it mints a new Charter successor version carrying manifest evidence for the new lane, supersedes the version it replaces, and repins the agent to that successor \u2014 evidence is never re-minted onto the existing version. Before that receipt is written, the server re-runs every signing gate for the target lane; a matching manifest digest only establishes that the document is eligible to reuse, never that the target lane is authorized, so a target whose gates fail is refused and nothing is written. Those gates cover connector wiring for the target lane, the company autonomy ceiling, connection identity, and required Skill tool access \u2014 a lane change never clears a block the ordinary sign-off would refuse. Each refusal names the remediation that actually clears it: a Charter that is a recognized stock revision but has never been signed off names \`charter.sign_manifest\` and the exact version id to sign; an in-flight draft asks you to approve or discard it first. A manifest that has been **edited**, or is otherwise unrecognized, cannot re-mint automatically at all \u2014 automatic re-minting only recognizes unmodified stock revisions \u2014 so it is refused as such, and the way forward is to restore the Charter to a stock revision with \`charter.set\` and sign it with \`charter.sign_manifest\`. Any failure rolls the whole change back \u2014 no successor, receipt, decision, or audit event is left behind, and the lane itself stays where it was. The browser never decides tenant authority or runner/MCP readiness.
 AICOS also has an explicit brain selection. Cloud can use the included managed allowance or a tenant Anthropic key (BYOK). When cloud is on the managed allowance, an owner can also pick a specific managed model from the AI Gateway's priced, ZDR-rated catalog (today: Anthropic's own "Automatic" default, plus managed OpenAI and xAI entries) instead of leaving the choice on Anthropic's default routing. A managed model without a zero-data-retention tier shows as locked with the reason until a tenant owner explicitly unlocks non-ZDR managed models (\`tenant.model_gateway_policy.update\`, owner-only and dangerous-gated); once unlocked, its per-model data-retention disclosure is shown before it becomes selectable. Selecting one of these managed models updates AICOS settings immediately, but it does not yet change which model actually answers a cloud AICOS turn \u2014 every non-Anthropic option says so plainly, and cloud turns keep running on the existing Anthropic routing until a later runtime cutover wires the persisted selection through. Runner brain preference still records Claude or Codex, but interactive AICOS runner turns are currently gated to Claude while the Codex path remains unverified. MCP is labeled as the MCP client. Read this selection with \`aicos.brain_settings.get\`; owners can update it with \`aicos.brain_settings.update\` (CLI flags: \`--lane\`, \`--cloud-brain managed|byok\`, \`--runner-brain claude-cli|codex-cli\`). BYOK requires an active tenant Anthropic key and does not support a specific managed-model selection. Choosing \`codex-cli\` for AICOS runner mode is currently rejected with a precondition error until the governed interactive runner path is verified. Runner and MCP answers are labeled in the transcript and do not consume the managed cloud allowance. If the selected runner reports that its active local model account has exhausted its allowance, Settings surfaces **Allowance exhausted** before the user sends another AICOS turn so they can switch lanes, switch runner accounts, or keep working manually instead of waiting on a doomed runner round-trip.
@@ -53251,7 +53317,7 @@ Assistant messages can carry source counts and persisted source metadata so a th
 ## Proactive pulse panels
-AICOS does not wait to be asked. Opening the panel shows a **Pulse** view first, with deterministic, structured panels built directly from tenant read models \u2014 never generated prose \u2014 so nothing is invented: setup gaps, top recommended actions, pending confirmations, agent and run health, Friction and task bottlenecks, Signal and goal exceptions, and recent meaningful changes. Every item cites and links its source object (a Friction item, a pending confirmation, a Seat, a Signal, a goal) so the user can go straight to the record instead of trusting a summary. A **Chat** tab switches to the normal thread view; starting or continuing a thread also switches there.
+The panel opens on the **Chat** thread, and one tab to its right the **Pulse** view is where AICOS surfaces what needs attention without being asked \u2014 deterministic, structured panels built directly from tenant read models \u2014 never generated prose \u2014 so nothing is invented: setup gaps, top recommended actions, pending confirmations, agent and run health, Friction and task bottlenecks, Signal and goal exceptions, and recent meaningful changes. Every item cites and links its source object (a Friction item, a pending confirmation, a Seat, a Signal, a goal) so the user can go straight to the record instead of trusting a summary. Starting or continuing a thread switches to the Chat view.
 Pulse panels follow the same scope boundary as everything else AICOS reads. A setup-limited implementer sees setup gaps and its own seat-authorized pending confirmations only \u2014 never agent/run health, tenant-wide Friction or task bottlenecks, Signal or goal exceptions, or the recent-change feed. An own-scope user sees a slice limited to the Seats it occupies or directly stewards. Company-scope users see the tenant-wide picture. Pending confirmations reuse the exact same per-user Seat authority the Approvals queue already enforces, so this panel can never show more than that user could already see there.
@@ -53275,7 +53341,7 @@ Treat AICOS as a coordinator over the operating system. It can become more usefu
     order: 20,
     title: "Responsibility Graph playbook",
     summary: "How to build a functions-first graph with seats, owners, Stewards, vacancies, and clean authority.",
-    version: "2026-07-31.1",
+    version: "2026-07-31.2",
     public: true,
     audiences: ["human", "cli", "mcp", "in_app_agent"],
     stages: ["graph_design", "staffing"],
@@ -53368,6 +53434,10 @@ Agent seat pages show the operator-facing output trail, not just low-level run t
 The **Activity** tab layers a curated business-activity narrative above the Trust Card's forensic execution trace: period-scoped counter tiles (today, this week, or 30 days) summarise the seat's \`work.record\` activity by kind \u2014 a "held for your approval" tile is always shown, and an operator can pick which other kinds appear via a per-seat, browser-local tile picker. Below the tiles, a run-grouped activity feed lists each \`work.list\` record \u2014 verb, object, outcome, evidence link, and time \u2014 with a drill-down for entity refs, the \`template_ref\` used for external comms when one was recorded, and the raw structured details. A sessions browser lists the seat's runs and, for the selected one, its persisted transcript (\`session_transcripts\`) and artifacts rail: binary artifacts (Supabase Storage) get a freshly minted 60-second signed download link at render time, pointer artifacts (Gmail draft, Drive doc, PR, or an internal reference) link out when an external URL is known. The task queue and Trust Card below are unchanged. All of this sits behind the same sensitive-data access gate as the Trust Card; a restricted viewer sees an explicit unavailable state, never a guessed empty feed. The \`/agents\` fleet page mirrors the same row grammar in a tenant-wide **Work** view \u2014 every seat's activity in one filterable stream, each row linking back to that seat's Activity tab with the originating session focused.
+## Planned teammates show their name, never access
+A seat can carry a **planned teammate** \u2014 a named future human recorded as planned staffing (for example by composite onboarding or \`seat create-complete\`). The name is display-only and renders consistently on every surface: the graph seat card shows a hollow \`Planned: <name>\` badge, the human seat page shows the same badge on every tab and lists the name under Seat facts on the Access tab, and the read models carry it as \`planned_occupants\` \u2014 \`graph.get\` per node and \`seat.get\` per seat (the CLI prints \`planned=<name>\` on \`seat list\` and \`planned=<name> \u2014 no invite, no access\` on \`seat get\`). A planned teammate is **not** an occupant: no account, no invite, no occupancy, and no authority \u2014 the seat's Occupancy fact still reads Vacant until a real occupancy exists, with the planned name carried separately from the Occupancy fact \u2014 a hollow Planned badge (the clause rides on hover) or a Planned fact row that shows the clause inline. The governed path that retires the planned row when the real person arrives ships separately \u2014 until it lands, hiring the named person leaves the planned label in place alongside the real occupancy.
 ## Read a human seat's page
 A human seat's page opens on one computed answer line \u2014 for example "On track \u2014 4 of 5 measurables on target \xB7 1 held draft awaiting review" \u2014 instead of a wall of always-shown sections. Below it:
@@ -53405,7 +53475,7 @@ Each seat needs:
 Read before you write. Load the whole graph first so seat ids, parents, and occupancy are known.
-- CLI: \`{{cli}} command graph.get --json '{}'\` (scope: tenant). Returns seats, edges, root, occupants, status rollups, and unassigned-seat flags. The output includes a single \`root_seat_id\`, exactly one \`is_root: true\` node, and unassigned seats listed under their own section with a data-quality note.
+- CLI: \`{{cli}} command graph.get --json '{}'\` (scope: tenant). Returns seats, edges, root, occupants, display-only planned occupants, status rollups, and unassigned-seat flags. The output includes a single \`root_seat_id\`, exactly one \`is_root: true\` node, and unassigned seats listed under their own section with a data-quality note.
 - MCP tool: \`rost_get_responsibility_graph\` with \`{}\`; or read the resource \`rost://graph\` (tenant-admin token).
 - One seat: \`{{cli}} command seat.get --json '{"seat_id":"<seat-id>"}'\` or \`rost_get_seat_detail\`.
@@ -53523,7 +53593,7 @@ Drafting can be assisted by agents. Activation is a human decision. When authori
     order: 40,
     title: "Agent staffing playbook",
     summary: "How to decide whether a seat should be human, agent, or hybrid, and how to go live safely.",
-    version: "2026-07-31.1",
+    version: "2026-08-03.1",
     public: true,
     audiences: ["human", "cli", "mcp", "in_app_agent"],
     stages: ["staffing"],
@@ -53597,7 +53667,9 @@ After an agent runs, review its completed work as well as its telemetry. Seat pa
 ## Change an agent's lane after go-live
-The lane a live agent runs on \u2014 cloud (the {{brand}}-managed runtime), a paired runner, or an external MCP session \u2014 is otherwise fixed once it goes live. To move a live agent to a different lane, use \`agent_setup.relane\` (owner-only, human-gated, with a required rationale): it pauses the agent, moves it to the new lane, forces a **fresh** dry-run rehearsal on that lane so lane-specific tool executability is honestly re-surfaced, then brings it back live. It honours the same substrate gate as go-live \u2014 a runner target needs a paired runner \u2014 and if the rehearsal fails it leaves the agent paused on the new lane rather than going live, so a failed re-lane never wakes on a schedule. A draft agent's lane is still set directly with \`agent_setup.update\`.
+The lane a live agent runs on \u2014 cloud (the {{brand}}-managed runtime), a paired runner, or an external MCP session \u2014 is otherwise fixed once it goes live. To move a live agent to a different lane, use \`agent_setup.relane\` (owner-only, human-gated, with a required rationale): it pauses the agent, moves it to the new lane, forces a **fresh** dry-run rehearsal on that lane so lane-specific tool executability is honestly re-surfaced, then brings it back live. It honours the same substrate gate as go-live: an unscheduled runner target can still go live parked while no compatible runner is available, but a scheduled agent's readiness is checked before it returns to live. If the rehearsal fails, the agent is left paused on the new lane rather than going live, so a failed re-lane never wakes on a schedule. This path does not mint a new Charter version, so a seat whose Charter already carries signed manifest evidence needs that evidence re-signed for the new lane before its rehearsal can run.
+The governed AICOS seat's own lane change is a separate, owner-only path \u2014 Settings -> AICOS, or \`aicos.brain_settings.update\` \u2014 and behaves differently on a live, recognized stock AICOS Charter: see the AICOS chat guide for the Charter successor it mints. A draft agent's lane is still set directly with \`agent_setup.update\`.
 ## When to stop for confirmation
@@ -53612,7 +53684,7 @@ No orphan agents. No raw secrets in prompts, logs, or tool arguments. No durable
     order: 41,
     title: "Add agents to your Responsibility Graph",
     summary: "The visual journey for adding an agent seat: where to start, choosing a mode, placing the seat, naming a Steward, setup, the safety gates, and go-live.",
-    version: "2026-07-04.2",
+    version: "2026-08-03.3",
     public: true,
     audiences: ["human", "in_app_agent"],
     stages: ["staffing"],
@@ -53672,7 +53744,7 @@ You can save and resume a draft setup at any point. Returning to the flow restor
 Every mode ends at the same conservative gates, shown at each step:
 1. **Draft Charter** \u2014 a draft, not an active job, until a human approves it.
-2. **Approve access** \u2014 a human approves the permission manifest before any tool is live. The command remains \`charter.sign_manifest\`; the UI names the human decision, not the storage primitive.
+2. **Approve access** \u2014 a human approves the permission manifest before any tool is live. The command remains \`charter.sign_manifest\`; the UI names the human decision, not the storage primitive. For a company whose stock AICOS Charter predates manifest-evidence receipts, an owner can instead run \`charter.backfill_stock_evidence\` once \u2014 it mints evidence for the recognized, unmodified stock revision (superseding it to current stock) under the owner's own decision, and reports rather than touches edited Charters, which stay on \`charter.sign_manifest\`. Superseding a 0092-era Charter appends \`agent.update_schedule\` and \`skill.assign_to_seat\` to the manifest \u2014 both Trusted auto-band grants \u2014 so the run is confirmation-gated: a non-interactive invocation stages a pending human confirmation and mints nothing, and every minted result states the exact grants delta it applied. A seat whose approved Skills require tools the tool catalog does not know is refused with Skill blockers on every signing path, this one included, until DER-3223.
 3. **Sandbox dry run** \u2014 the agent rehearses a representative task and is expected to escalate where the Charter says it must. A failed dry run keeps the draft and shows the reason; you edit and rerun.
 4. **Human go-live** \u2014 a person promotes the agent live. An agent never approves its own setup, signs its own manifest, or goes itself live.
@@ -54125,7 +54197,7 @@ External connectors are being rolled out provider by provider, conservatively (r
     order: 48,
     title: "CLI and MCP installation guide",
     summary: "Install the public CLI, register remote token-backed MCP clients, and find the full command and tool catalog.",
-    version: "2026-08-01.2",
+    version: "2026-08-03.1",
     public: true,
     audiences: ["human", "cli", "mcp", "in_app_agent"],
     stages: ["company_setup", "staffing"],
@@ -54762,7 +54834,7 @@ The signed-in app exposes the same Skill command surface at **Skills**, linked f
 | \`{{cli}} deliverable list|get|create|attach\` | \`deliverable.list\`, \`deliverable.get\`, \`deliverable.create\`, \`deliverable.attach\` | List, get, create, or attach agent deliverables for a seat. Deliverables are durable work outputs visible across UI, CLI, and MCP. | Tenant (list/get), Seat (create/attach) | \`{{cli}} deliverable list --seat-id <id> --json\`; \`{{cli}} deliverable create --title "Brief" --kind brief\` |
 | \`{{cli}} graph show\` | \`graph.get\` | Print a table view of the Responsibility Graph with explicit \`seat_id\` and \`parent_seat_id\` columns. | Tenant | \`{{cli}} graph show\` |
 | \`{{cli}} seat list|get|create|create-complete|rename|reparent|decommission\` | \`graph.get\`, \`seat.get\`, \`seat.create\`, \`seat.create_complete\`, \`seat.rename\`, \`seat.reparent\`, \`seat.decommission\`, \`seat.decommission_preview\` | Work with seats as first-class CLI primitives. The existing \`{{cli}} seat list|get|create|rename|reparent|decommission\` help surface remains available. \`seat create-complete --input '<json>'\` stages one atomic complete-Seat proposal and stops at one owner confirmation; any agent remains dry-run. \`seat decommission --dry-run\` previews affected occupancies, agents, Charters, tokens, credentials, work orders, and schedules before the human-gated teardown. | Tenant / Seat for targeted mutations | \`{{cli}} seat create-complete --schema\`; \`{{cli}} seat decommission --seat-id <id> --dry-run\` |
-| \`{{cli}} forge project-create|project-list|request-create|request-list|request-show|request-pause|request-cancel|request-resume\` | \`software_factory.project.create\`, \`software_factory.project.list\`, \`software_factory.request.create\`, \`software_factory.request.list\`, \`software_factory.request.show\`, \`software_factory.request.pause\`, \`software_factory.request.cancel\`, \`software_factory.request.resume\` | Create/list Forge projects, open/read governed Forge build requests, and control request lifecycle. Request create/list/show return \`scheduler_state\`: \`queued\` when a runner work order exists, \`parked\` when the Forge team is staffed but no paired online runner can claim it, and \`not_configured\` when the runner-lane Forge Seat is missing. Request list/show also return a \`failure\` record (what failed, why, and the one action to unblock) when a request is blocked by a fault \u2014 a stalled or crashed phase driver, a failed phase, an incomplete plan, or an exhausted budget \u2014 so a stopped build reads as failed with a retry action instead of an indefinite running state. Request detail also surfaces the signed, expiring dispatch preview with included order, held items, dependencies, estimated turns, runner requirements, and authority budget envelope. Parked and not-configured states link to \`/settings/runners/setup\`; runner pairing or the repair sweep re-enqueues the same pending intake idempotently. Project creation plus pause/cancel/resume are tenant-admin, entitlement-gated, and human-gated; reads and request creation require the Forge add-on. | Tenant / Tenant-admin for create and lifecycle controls | \`{{cli}} forge project-create --name "Leiluna app" --base-branch main\`; \`{{cli}} forge request-create --project <slug-or-name> --title "Add invoice export"\` (accepts \`--software-project-id <id>\` instead of \`--project\` too); \`{{cli}} forge request-pause --build-request-id <id> --reason "Operator hold"\` |
+| \`{{cli}} forge project-create|project-list|request-create|request-list|request-show|request-pause|request-cancel|request-resume\` | \`software_factory.project.create\`, \`software_factory.project.list\`, \`software_factory.request.create\`, \`software_factory.request.list\`, \`software_factory.request.show\`, \`software_factory.request.pause\`, \`software_factory.request.cancel\`, \`software_factory.request.resume\` | Create/list Forge projects, open/read governed Forge build requests, and control request lifecycle. Request create/list/show return \`scheduler_state\`: \`queued\` when a runner work order exists, \`parked\` when the Forge team is staffed but no paired online runner can claim it, when the owning seat's charter manifest is not signed (\`charter_manifest_not_signed\`), or when the owning seat has no active charter (\`charter_missing\`), and \`not_configured\` when the runner-lane Forge Seat is missing. Request list/show also return a \`failure\` record (what failed, why, and the one action to unblock) when a request is blocked by a fault \u2014 a stalled or crashed phase driver, a failed phase, an incomplete plan, an exhausted budget, or missing/unsigned charter authority \u2014 so a stopped build reads as failed with a retry or fix-and-resume action instead of an indefinite running state. Request detail also surfaces the signed, expiring dispatch preview with included order, held items, dependencies, estimated turns, runner requirements, and authority budget envelope. Parked runner-availability and not-configured states link to \`/settings/runners/setup\`, and runner pairing or the repair sweep re-enqueues the same pending intake idempotently; charter-authority parks (\`charter_manifest_not_signed\`, \`charter_missing\`) carry no runner-setup link and unblock by signing the manifest (\`charter.sign_manifest\`) or restoring an active charter, then resuming the request. Project creation plus pause/cancel/resume are tenant-admin, entitlement-gated, and human-gated; reads and request creation require the Forge add-on. | Tenant / Tenant-admin for create and lifecycle controls | \`{{cli}} forge project-create --name "Leiluna app" --base-branch main\`; \`{{cli}} forge request-create --project <slug-or-name> --title "Add invoice export"\` (accepts \`--software-project-id <id>\` instead of \`--project\` too); \`{{cli}} forge request-pause --build-request-id <id> --reason "Operator hold"\` |
 Skills wrapper help:
@@ -54888,8 +54960,8 @@ Several rows here are seat-operating commands (\`task.create\`, the \`signal.*\`
 | \`rost_go_live\` | \`agent.go_live\` | Promote a dry-run agent seat to live, retiring the agent generation the promoted agent replaces on that seat. | Seat or tenant-admin | Call after human approval. Paused agents, and an agent pinned to another still-draft Charter version, are left in place. |
 | \`rost_create_mcp_token\` | \`mcp_token.create\` | Mint a tenant-admin or seat-scoped MCP token. | Tenant | Prefer \`{{cli}} mcp install\` for users. |
 | \`rost_revoke_mcp_token\` | \`mcp_token.revoke\` | Revoke an MCP token immediately. | Tenant | Call with \`token_id\`. |
-| \`rost_get_responsibility_graph\` | \`graph.get\` | Read the Responsibility Graph: seats, edges, root, occupants, status rollups. | Tenant | Call with \`{}\` before mutating or routing work. |
-| \`rost_get_seat_detail\` | \`seat.get\` | Read a seat's Charter ids, steward chain, occupancy, agent status, token metadata, and open-work counts. | Seat or tenant-admin | Call with \`{"seat_id":"<seat-id>"}\`. |
+| \`rost_get_responsibility_graph\` | \`graph.get\` | Read the Responsibility Graph: seats, edges, root, occupants, display-only planned occupants, status rollups. | Tenant | Call with \`{}\` before mutating or routing work. |
+| \`rost_get_seat_detail\` | \`seat.get\` | Read a seat's Charter ids, steward chain, occupancy, display-only planned occupants, agent status, token metadata, and open-work counts. | Seat or tenant-admin | Call with \`{"seat_id":"<seat-id>"}\`. |
 | \`rost_list_charters\` | \`charter.list\` | List Charter versions, optionally by seat or status. | Tenant | Call with \`{}\` or \`{"seat_id":"<seat-id>"}\`. |
 | \`rost_get_charter\` | \`charter.get\` | Read a Charter with supersession history and dry-run status. | Tenant | Call with \`{"charter_version_id":"<id>"}\`. |
 | \`rost_get_current_compass\` | \`compass.get_current\` | Read the active and draft Compass versions and source documents. | Tenant | Call with \`{}\`. |
@@ -54919,7 +54991,7 @@ Several rows here are seat-operating commands (\`task.create\`, the \`signal.*\`
 | \`rost_decommission_agent\` | \`agent.decommission\` | Retire an agent occupancy safely (no-orphan guarded). | Tenant | Call with \`agent_id\`; expect human confirmation. |
 | \`rost_pause_agent\` | \`agent.pause\` | Pause a live agent so it stops scheduled and on-demand runs; reversible. | Tenant | Call with \`seat_id\`; expect human confirmation. |
 | \`rost_resume_agent\` | \`agent.resume\` | Resume a paused agent back to live (no-orphan guarded). | Tenant | Call with \`seat_id\`; expect human confirmation. |
-| \`rost_re_lane_a_live_agent\` | \`agent_setup.relane\` | Re-lane a live agent (cloud / runner / mcp_session): pause, move to the new lane, force a fresh dry-run rehearsal on that lane, then go live. Owner-only, human-gated, records a rationale; honours the substrate gate (a runner target needs a paired runner); a failed rehearsal leaves the agent paused on the new lane. | Tenant-admin | Call with \`{"seat_id":"<seat-id>","lane":"runner","reason":"Paired a Mac runner"}\`; expect human confirmation. |
+| \`rost_re_lane_a_live_agent\` | \`agent_setup.relane\` | Re-lane a live agent (cloud / runner / mcp_session): pause, move to the new lane, force a fresh dry-run rehearsal on that lane, then go live. Owner-only, human-gated, records a rationale; honours the substrate gate (an MCP target needs a seat-scoped token; a runner target with no paired runner goes live parked and cannot claim work until one pairs); a failed rehearsal leaves the agent paused on the new lane. | Tenant-admin | Call with \`{"seat_id":"<seat-id>","lane":"runner","reason":"Paired a Mac runner"}\`; expect human confirmation. |
 | \`rost_create_custom_agent\` | \`agent.create_custom\` | Create a draft custom agent shell and draft Charter seed from operational answers. | Tenant | Call with \`seat_id\` and operational answers; expect human confirmation. |
 | \`rost_configure_agent_tools\` | \`agent.configure_tools\` | Connect or decline proposed tools and stage credential-ingress requests (vault refs only). | Seat or tenant-admin | Never send raw secrets; expect a credential confirmation. |
 | \`rost_run_agent_dry_run\` | \`agent.run_dry_run\` | Run the sandbox dry run for a draft agent; durable and idempotent per Charter version. | Seat or tenant-admin | Call after the manifest is signed; ungated by human approval, but precondition-gated on a signed manifest. |
@@ -55086,7 +55158,7 @@ Several rows here are seat-operating commands (\`task.create\`, the \`signal.*\`
 | \`rost_create_a_forge_vercel_preview_deployment\` | \`software_factory.vercel.deploy_preview\` | Create a Vercel preview deployment for a linked project after Forge deploy-preview authority, the Vercel OAuth vault-ref connection, and required preview secret/config grants are verified. | Tenant | Call with \`{"software_project_id":"<project-id>","commit_sha":"<sha>","git_ref":"feature/example","seat_id":"<seat-id>"}\`; returns deployment metadata, not tokens. |
 | \`rost_list_forge_runner_capacity\` | \`software_factory.capacity.list\` | List Forge runner capacity observations (advisory scheduling input only, never an authority input). Read-only; requires the Forge add-on. | Tenant | Call with \`{}\` or \`{"runner_id":"<runner-id>"}\`. |
-The web Forge control room at \`/forge\` uses the same command path for project selection, build request creation/list/detail reads, request pause/cancel/resume controls, runner capacity, configuration status, and Developer Team install. Request cards and detail pages surface \`scheduler_state\` directly: queued work shows its work-order state, parked work explains that no paired online runner is available, and not-configured work sends the operator to \`/settings/runners/setup\`. A request detail page also shows phase history, open gates, plan progress, loop/time/cost ceilings, and latest plan-review questions from \`software_factory.request.show\`; answering a clarification, approving a plan, rejecting it, pausing, canceling, or resuming calls the same Forge commands exposed over CLI/MCP. Lifecycle controls deliberately stage pending confirmations before changing runner state. The install button also stages a pending confirmation before durable seats, Skills, authority grants, or live agent activation are applied; the install page states plainly that approving activates the 7 agents at a pull-request-only, observe-first posture and surfaces the company autonomy ceiling.
+The web Forge control room at \`/forge\` uses the same command path for project selection, build request creation/list/detail reads, request pause/cancel/resume controls, runner capacity, configuration status, and Developer Team install. Request cards and detail pages surface \`scheduler_state\` directly: queued work shows its work-order state, parked work explains why it is parked \u2014 no paired online runner is available, the owning seat's charter manifest is not signed (\`charter_manifest_not_signed\`, blocked until the manifest is signed with \`charter.sign_manifest\` and the request is resumed), or the owning seat has no active charter (\`charter_missing\`, blocked until the seat has an active charter and the request is resumed) \u2014 and not-configured work sends the operator to \`/settings/runners/setup\`. A request detail page also shows phase history, open gates, plan progress, loop/time/cost ceilings, and latest plan-review questions from \`software_factory.request.show\`; answering a clarification, approving a plan, rejecting it, pausing, canceling, or resuming calls the same Forge commands exposed over CLI/MCP. Lifecycle controls deliberately stage pending confirmations before changing runner state. The install button also stages a pending confirmation before durable seats, Skills, authority grants, or live agent activation are applied; the install page states plainly that approving activates the 7 agents at a pull-request-only, observe-first posture and surfaces the company autonomy ceiling.
 #### Forge GitHub App access
@@ -55154,7 +55226,7 @@ These read-only resources bundle the facts the UI shows so an agent can avoid gu
 | Resource | Purpose | Scope | Safe example |
 |---|---|---|---|
 | \`rost://tenant/status\` | Current user, tenant, role/scope, and onboarding status. | Tenant-admin | Read before driving tenant setup. |
-| \`rost://graph\` | Responsibility Graph: seats, edges, root, occupants, status rollups. | Tenant-admin | Read before routing or reparenting work. |
+| \`rost://graph\` | Responsibility Graph: seats, edges, root, occupants, display-only planned occupants, status rollups. | Tenant-admin | Read before routing or reparenting work. |
 | \`rost://seat/{id}/context\` | A seat's Compass, Charter, goals, measurables, open tasks, open issues, and protocol. | Seat (own seat) or tenant-admin (any seat) | Read \`rost://seat/<seat-id>/context\` for the acting seat. |
 | \`rost://compass/current\` | Active and draft Compass versions plus source documents. | Tenant-admin | Read before drafting Compass changes. |
 | \`rost://sync/latest\` | The most recent compiled Sync Brief and its agenda. | Tenant-admin | Read before running the weekly Sync. |
@@ -56496,7 +56568,7 @@ Every notification should include the seat, cause, evidence, and requested decis
     order: 75,
     title: "Local runner guide",
     summary: "How local agent sessions and runner surfaces should operate through {{brand}} without bypassing Charters or audit.",
-    version: "2026-07-20.4",
+    version: "2026-07-20.5",
     public: true,
     audiences: ["human", "cli", "mcp", "in_app_agent"],
     stages: ["staffing", "operating_rhythm"],
@@ -56554,7 +56626,7 @@ AICOS runner chat uses the same runner process but not the scheduled work-order
 ## Forge scheduler work
-When the Forge add-on is enabled, Forge phase work uses the same runner work-order lane and the same shared agent-readiness projection as ordinary production work. A Forge phase is linked to a normal \`work_orders\` row only when its owning runner agent is \`execution_ready\` and the projection selects a compatible paired Runner. Otherwise the phase stays pending/parked with a machine-readable reason such as \`agent_not_execution_ready\` or \`runner_not_paired\`; Runner setup remediation points to \`/settings/runners/setup\`, while other readiness reasons must be repaired on the owning agent Seat. Pairing a Runner or the repair sweep re-evaluates readiness and re-enqueues the same pending phase idempotently, so operators do not get duplicate intake rows or silent expiring work orders. The runner claims queued work, starts it, reports the result, and the server advances the linked phase. There is no separate local lease store.
+When the Forge add-on is enabled, Forge phase work uses the same runner work-order lane and the same shared agent-readiness projection as ordinary production work. A Forge phase is linked to a normal \`work_orders\` row only when its owning runner agent is \`execution_ready\` and the projection selects a compatible paired Runner. Otherwise the phase stays pending/parked with a machine-readable reason such as \`agent_not_execution_ready\` or \`runner_not_paired\`; Runner setup remediation points to \`/settings/runners/setup\`, while other readiness reasons must be repaired on the owning agent Seat. Pairing a Runner or the repair sweep re-evaluates readiness and re-enqueues the same pending phase idempotently, so operators do not get duplicate intake rows or silent expiring work orders. Two parked reasons are deliberate exceptions to that re-enqueue: \`charter_manifest_not_signed\` and \`charter_missing\` mean the owning seat's charter authority is missing, and re-enqueueing while unsigned would fail-loop \u2014 they unblock by signing the manifest (\`charter.sign_manifest\`) or restoring an active charter and then resuming the request, which mints a fresh work order. The runner claims queued work, starts it, reports the result, and the server advances the linked phase. There is no separate local lease store.
 A build request decomposes into changesets and tasks tracked as queryable execution state. A changeset is the pull-request boundary and the revert unit (default one per request; additional changesets only on a named split criterion such as risk isolation or a reviewability-size budget). A task is one coding session inside a changeset, carrying its own verification and a per-task checkpoint that is the safe resume and pause boundary. Plan-conformance findings loop a changeset back to implementation; a finding can only be accepted, rather than resolved, through a recorded human decision.
@@ -60487,18 +60559,22 @@ function renderGraph(output) {
     }
   }
   for (const row of assigned) {
-    lines.push(`${field2(row, "seat_id")}  ${field2(row, "parent_seat_id")}  ${field2(row, "seat_type")}  ${field2(row, "status")}  ${field2(row, "name")}`);
+    lines.push(`${field2(row, "seat_id")}  ${field2(row, "parent_seat_id")}  ${field2(row, "seat_type")}  ${field2(row, "status")}  ${field2(row, "name")}${plannedNamesSuffix(row)}`);
   }
   if (unassigned.length > 0) {
     lines.push("");
     lines.push("Unassigned (no path to root \u2014 data-quality signal)");
     lines.push("seat_id  parent_seat_id  type  status  name");
     for (const row of unassigned) {
-      lines.push(`${field2(row, "seat_id")}  ${field2(row, "parent_seat_id")}  ${field2(row, "seat_type")}  ${field2(row, "status")}  ${field2(row, "name")}`);
+      lines.push(`${field2(row, "seat_id")}  ${field2(row, "parent_seat_id")}  ${field2(row, "seat_type")}  ${field2(row, "status")}  ${field2(row, "name")}${plannedNamesSuffix(row)}`);
     }
   }
   return lines.join("\n");
 }
+function plannedNamesSuffix(row) {
+  const planned = asArray(row.planned_occupants).map((entry) => field2(asRecord2(entry), "display_name")).join(", ");
+  return planned.length > 0 ? ` planned=${planned}` : "";
+}
 function renderSeatList(output) {
   const nodes = asArray(asRecord2(output).nodes);
   if (nodes.length === 0) {
@@ -60506,18 +60582,23 @@ function renderSeatList(output) {
   }
   return nodes.map((node) => {
     const row = asRecord2(node);
-    return `seat_id=${field2(row, "seat_id")} parent_seat_id=${field2(row, "parent_seat_id")} type=${field2(row, "seat_type")} status=${field2(row, "status")} name=${field2(row, "name")}`;
+    return `seat_id=${field2(row, "seat_id")} parent_seat_id=${field2(row, "parent_seat_id")} type=${field2(row, "seat_type")} status=${field2(row, "status")} name=${field2(row, "name")}${plannedNamesSuffix(row)}`;
   }).join("\n");
 }
 function renderSeatDetail(output) {
   const record2 = asRecord2(output);
   const counts = asRecord2(record2.counts);
-  return [
+  const planned = asArray(record2.planned_occupants).map((entry) => field2(asRecord2(entry), "display_name")).join(", ");
+  const lines = [
     `seat_id=${field2(record2, "seat_id")} name=${field2(record2, "name")} type=${field2(record2, "seat_type")} status=${field2(record2, "status")}`,
     `parent_seat_id=${field2(record2, "parent_seat_id")} active_charter_version_id=${field2(record2, "active_charter_version_id")} draft_charter_version_id=${field2(record2, "draft_charter_version_id")}`,
     `agent_status=${field2(record2, "agent_status")} agent_lane=${field2(record2, "agent_lane")}`,
     `counts: open_tasks=${field2(counts, "open_tasks")} owned_goals=${field2(counts, "owned_goals")} active_measurables=${field2(counts, "active_measurables")} open_issues=${field2(counts, "open_issues")}`
-  ].join("\n");
+  ];
+  if (planned.length > 0) {
+    lines.push(`planned=${planned} \u2014 no invite, no access`);
+  }
+  return lines.join("\n");
 }
 function renderSeatMutation(output) {
   return `seat_id=${field2(asRecord2(output), "seat_id")}`;