@rosthq/cli 0.7.24 → 0.7.25

package/dist/generator/render.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"render.d.ts","sourceRoot":"","sources":["../../src/generator/render.ts"],"names":[],"mappings":"AAeA,wBAAgB,YAAY,CAAC,MAAM,EAAE,OAAO,GAAG,MAAM,CAGpD;AAiBD,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAiB7D;AAgCD,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,OAAO,GAAG,MAAM,CAgD3D"}
+{"version":3,"file":"render.d.ts","sourceRoot":"","sources":["../../src/generator/render.ts"],"names":[],"mappings":"AAeA,wBAAgB,YAAY,CAAC,MAAM,EAAE,OAAO,GAAG,MAAM,CAGpD;AA8DD,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAuB7D;AAgCD,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,OAAO,GAAG,MAAM,CAgD3D"}

package/dist/index.js

@@ -37718,6 +37718,19 @@ var dryRunToolActionSchema = external_exports.object({
   // The underlying manifest guard decision that produced `status`.
   guard: dryRunGuardResultSchema
 }).strict();
+var dryRunLaneSchema = external_exports.enum(["cloud", "mcp_session", "runner"]);
+var dryRunToolExecutabilitySchema = external_exports.enum([
+  "executable",
+  "unimplemented_in_lane",
+  "held_for_steward"
+]);
+var dryRunGrantedToolSchema = external_exports.object({
+  // The granted tool (manifest id).
+  tool_name: external_exports.string().min(1),
+  // Its lane-aware executability, derived from the agent's lane + the runtime
+  // handler registry (never an id string pattern).
+  executability: dryRunToolExecutabilitySchema
+}).strict();
 var dryRunTranscriptSchema = external_exports.object({
   // Whether the rehearsal passed (the must-escalate clause was escalated and no
   // external side effect ran) or failed (it acted without escalating, or the run
@@ -37736,6 +37749,14 @@ var dryRunTranscriptSchema = external_exports.object({
   // handlers. Optional so the field is additive — a transcript without it (the
   // static demo replay, an older record) still validates.
   tool_preview: external_exports.array(dryRunToolActionSchema).optional(),
+  // DER-1294: the runtime lane this rehearsal reflects. Optional/additive —
+  // transcripts recorded before DER-1294 (and the static public-demo replay)
+  // omit it, so they still validate.
+  lane: dryRunLaneSchema.optional(),
+  // DER-1294: every GRANTED tool (manifest allow|escalate) with its lane-aware
+  // executability, so an operator sees which grants actually run vs. silently
+  // no-op in this lane. Optional/additive so older transcripts still validate.
+  granted_tools: external_exports.array(dryRunGrantedToolSchema).optional(),
   // The underlying run id (present once the run is recorded).
   run_id: external_exports.string().min(1).optional()
 }).strict();
@@ -44450,7 +44471,7 @@ For CLI and MCP setup, read agent-skill-setup-guide before adding or assigning S
     order: 42,
     title: "Design a custom agent",
     summary: "How to build a custom agent from operational questions through the Charter Builder, tools, dry run, and go-live without writing prompts.",
-    version: "2026-06-21.1",
+    version: "2026-07-04.1",
     public: true,
     audiences: ["human", "cli", "mcp", "in_app_agent"],
     stages: ["staffing", "charter_design"],
@@ -44517,7 +44538,7 @@ The same path is command-backed:
 
 ## Dry run and go-live
 
-The dry run is a real sandbox rehearsal, not a stamp. It executes a mock-provider run derived from the Charter \u2014 the agent works against sandbox data only and is expected to escalate where the Charter's must-escalate clause requires it. The same rehearsal works on all three lanes: cloud, external MCP, and local Runner. External MCP dry runs require an active seat-scoped MCP token; Runner dry runs require a paired Runner. Missing substrate returns a typed precondition error, not a generic failure. The recorded run keeps the agent's actual lane, so the evidence you review matches the lane you selected. The result is earned: a run that escalates the must-escalate boundary passes; a run that acts on that boundary instead of escalating fails. A failed dry run keeps the draft and shows the reason so you can edit and rerun. The rehearsal returns a transcript \u2014 the steps the agent took and the escalation it raised \u2014 shown step by step in the builder and printed by the CLI, so you can see the governance model working before anything goes live. When the dry run passes, a human promotes the agent live. The dry run rehearses the specific model tier you chose, so once it passes the model is locked \u2014 changing the model requires re-running the dry run on the new model before go-live.
+The dry run is a real sandbox rehearsal, not a stamp. It executes a mock-provider run derived from the Charter \u2014 the agent works against sandbox data only and is expected to escalate where the Charter's must-escalate clause requires it. The same rehearsal works on all three lanes: cloud, external MCP, and local Runner. External MCP dry runs require an active seat-scoped MCP token; Runner dry runs require a paired Runner. Missing substrate returns a typed precondition error, not a generic failure. The recorded run keeps the agent's actual lane, so the evidence you review matches the lane you selected. The result is earned: a run that escalates the must-escalate boundary passes; a run that acts on that boundary instead of escalating fails. A failed dry run keeps the draft and shows the reason so you can edit and rerun. The rehearsal returns a transcript \u2014 the steps the agent took and the escalation it raised \u2014 shown step by step in the builder and printed by the CLI, so you can see the governance model working before anything goes live. The transcript is also lane-honest: each granted tool is marked executable, held for the steward, or granted but unimplemented in this lane, with a plain-count verdict such as "2 of 6 granted tools don't execute in the cloud lane yet" \u2014 so a grant that would silently no-op in the cloud runtime is visible before go-live instead of passing green. Runner and MCP-session agents run those tools through their own local skills, so their grants are not flagged as unimplemented. When the dry run passes, a human promotes the agent live. The dry run rehearses the specific model tier you chose, so once it passes the model is locked \u2014 changing the model requires re-running the dry run on the new model before go-live.
 
 ## When to stop for confirmation
 
@@ -46089,7 +46110,7 @@ Retrieve the narrowest relevant guide before making a setup recommendation. Pref
     order: 60,
     title: "Cascade guide",
     summary: "How to connect company goals to seat-level work without turning {{brand}} into a project-management tool.",
-    version: "2026-07-04.1",
+    version: "2026-07-04.2",
     public: true,
     audiences: ["human", "cli", "mcp", "in_app_agent"],
     stages: ["operating_rhythm"],
@@ -46157,7 +46178,7 @@ Cascade warnings are advisory, not blockers. They point to setup that should be
 - Agent goal missing human accountability parent: an agent-owned goal has no human or hybrid goal in its ancestry.
 - Orphaned goal branch: the owner seat or parent chain no longer reaches an active Compass objective.
 
-On \`/cascade\`, the screen renders the full goal depth, not just one or two levels. Off-track descendant branches stay open so the operator can see why a parent rolled up to risk.
+\`/cascade\` leads with one computed line \u2014 how many goals are off pace this cycle, or an all-clear when none are. Off-pace and off-track goals stay fully visible with their owner seat and pace context; goals confirmed on pace collapse into a per-branch count you can expand. Creating or editing a goal opens the same drawer from a single **New goal** action or a goal's own edit control \u2014 there is no separate persistent form.
 
 ## Goal progress and at-risk goals
 
@@ -46304,7 +46325,7 @@ Agents may record readings when the Charter allows it. Agent-reported readings s
     order: 62,
     title: "Friction guide",
     summary: "How to capture issues with evidence, rank them, and resolve them without losing ownership.",
-    version: "2026-07-01.2",
+    version: "2026-07-04.1",
     public: true,
     audiences: ["human", "cli", "mcp", "in_app_agent"],
     stages: ["operating_rhythm"],
@@ -46356,6 +46377,8 @@ Agents should file Friction when a measurable breaks, a tool fails, a repeated e
 
 In the app, operational evidence is summarized for humans instead of shown as the primary interface. Incident fields, proposed tool calls, schedules, payload labels, and source links render as readable fields with raw details tucked behind supporting context when useful. Secret-shaped values stay redacted.
 
+The Friction page opens with one computed line \u2014 how many issues are open, the oldest one's age, and how many are escalated \u2014 followed by the open issues themselves as incident-ticket rows (filer, one-line cause, an escalation chip naming the steward when severity is critical). Resolved issues collapse into a single count that expands into a quiet history list. Filing a new issue and the three-step resolution (root cause, owner task, done-by) both live behind one "File friction" action, which opens a drawer; resolving launches that same drawer already seeded from the row you clicked "Resolve" on.
+
 ## Operate Friction, tasks, and escalations from CLI or MCP
 
 Friction, tasks, and escalations are the issue-to-action loop. A seat files, a task carries the work, and an escalation routes a decision a seat cannot make alone.
@@ -49113,6 +49136,36 @@ function dryRunToolActionLabel(status) {
       return status;
   }
 }
+var DRY_RUN_LANE_LABELS = {
+  cloud: "cloud lane",
+  runner: "runner lane",
+  mcp_session: "MCP-session lane"
+};
+function dryRunLaneLabel(lane) {
+  return DRY_RUN_LANE_LABELS[lane] ?? `${lane} lane`;
+}
+function dryRunLaneVerdict(lane, grantedCount, unimplementedCount) {
+  const laneLabel = dryRunLaneLabel(lane);
+  if (unimplementedCount === 0) {
+    return grantedCount === 1 ? `The single granted tool is implemented in the ${laneLabel}.` : `All ${grantedCount} granted tools are implemented in the ${laneLabel}.`;
+  }
+  const verb = unimplementedCount === 1 ? "doesn't" : "don't";
+  return `${unimplementedCount} of ${grantedCount} granted tools ${verb} execute in the ${laneLabel} yet.`;
+}
+function dryRunLaneExecutabilityLines(transcript) {
+  const lane = transcript.lane;
+  const grantedTools = asArray(transcript.granted_tools);
+  if (typeof lane !== "string" || grantedTools.length === 0) {
+    return [];
+  }
+  const laneLabel = dryRunLaneLabel(lane);
+  const unimplemented = grantedTools.map((tool) => asRecord(tool)).filter((tool) => tool.executability === "unimplemented_in_lane");
+  const warningLines = unimplemented.map(
+    (tool) => `  warning: ${field(tool, "tool_name")} is granted but unimplemented in the ${laneLabel}`
+  );
+  const verdict = dryRunLaneVerdict(lane, grantedTools.length, unimplemented.length);
+  return ["lane executability:", ...warningLines, `  verdict: ${verdict}`];
+}
 function formatDryRunTranscript(value) {
   const transcript = asRecord(value);
   const steps = asArray(transcript.steps);
@@ -49129,7 +49182,13 @@ function formatDryRunTranscript(value) {
     const record2 = asRecord(action);
     return `  ${dryRunToolActionLabel(field(record2, "status"))}: ${field(record2, "intended_action")} [${field(record2, "tool_name")}]`;
   });
-  return ["rehearsal:", ...lines, ...toolPreview.length > 0 ? ["tool preview:", ...toolPreview] : []].join("\n");
+  const laneLines = dryRunLaneExecutabilityLines(transcript);
+  return [
+    "rehearsal:",
+    ...lines,
+    ...toolPreview.length > 0 ? ["tool preview:", ...toolPreview] : [],
+    ...laneLines
+  ].join("\n");
 }
 function isScalar(value) {
   return value === null || ["string", "number", "boolean"].includes(typeof value);