@rosthq/cli 0.7.37 → 0.7.39

package/dist/forge-workspace.d.ts

@@ -36,5 +36,25 @@ export declare function prepareForgeWorkspace(options: PrepareForgeWorkspaceOpti
 export declare function pushChangeset(ws: ForgeWorkspace, credential: ForgeCredential): Promise<{
     commitSha: string;
 } | null>;
+export type OpenDraftPullRequestOptions = {
+    repo: {
+        owner: string;
+        name: string;
+        default_branch: string;
+    };
+    branch: string;
+    buildRequestId: string;
+    commitSha: string;
+    credential: ForgeCredential;
+    apiBaseUrl?: string;
+    fetchImpl?: typeof fetch;
+};
+export type ForgePullRequest = {
+    url: string;
+    number: number;
+    draft: boolean;
+    adopted: boolean;
+};
+export declare function openDraftPullRequest(options: OpenDraftPullRequestOptions): Promise<ForgePullRequest>;
 export declare function removeWorkspace(ws: ForgeWorkspace): Promise<void>;
 //# sourceMappingURL=forge-workspace.d.ts.map

package/dist/forge-workspace.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"forge-workspace.d.ts","sourceRoot":"","sources":["../src/forge-workspace.ts"],"names":[],"mappings":"AAmDA,eAAO,MAAM,yBAAyB,gFAQ5B,CAAC;AAEX,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAW7E;AAID,MAAM,MAAM,eAAe,GAAG;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAG3B,QAAQ,EAAE,MAAM,CAAC;IAGjB,WAAW,EAAE,MAAM,CAAC;IAGpB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,OAAO,CAAC;IAKlB,OAAO,EAAE,MAAM,CAAC;IAIhB,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG,OAAO,GAAG,QAAQ,CAAC;AAEvD,MAAM,MAAM,4BAA4B,GAAG;IAEzC,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAC1D,OAAO,EAAE,qBAAqB,CAAC;IAE/B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,MAAM,CAAA;KAAE,CAAC;IAC9D,UAAU,EAAE,eAAe,CAAC;IAI5B,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AA+QF,wBAAsB,qBAAqB,CAAC,OAAO,EAAE,4BAA4B,GAAG,OAAO,CAAC,cAAc,CAAC,CAmC1G;AA8CD,wBAAsB,aAAa,CACjC,EAAE,EAAE,cAAc,EAClB,UAAU,EAAE,eAAe,GAC1B,OAAO,CAAC;IAAE,SAAS,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAAC,CA4BvC;AAiBD,wBAAsB,eAAe,CAAC,EAAE,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAOvE"}
+{"version":3,"file":"forge-workspace.d.ts","sourceRoot":"","sources":["../src/forge-workspace.ts"],"names":[],"mappings":"AAmDA,eAAO,MAAM,yBAAyB,gFAQ5B,CAAC;AAEX,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAW7E;AAID,MAAM,MAAM,eAAe,GAAG;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAG3B,QAAQ,EAAE,MAAM,CAAC;IAGjB,WAAW,EAAE,MAAM,CAAC;IAGpB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,OAAO,CAAC;IAKlB,OAAO,EAAE,MAAM,CAAC;IAIhB,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG,OAAO,GAAG,QAAQ,CAAC;AAEvD,MAAM,MAAM,4BAA4B,GAAG;IAEzC,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAC1D,OAAO,EAAE,qBAAqB,CAAC;IAE/B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,MAAM,CAAA;KAAE,CAAC;IAC9D,UAAU,EAAE,eAAe,CAAC;IAI5B,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AA+QF,wBAAsB,qBAAqB,CAAC,OAAO,EAAE,4BAA4B,GAAG,OAAO,CAAC,cAAc,CAAC,CAmC1G;AA8CD,wBAAsB,aAAa,CACjC,EAAE,EAAE,cAAc,EAClB,UAAU,EAAE,eAAe,GAC1B,OAAO,CAAC;IAAE,SAAS,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAAC,CA4BvC;AAcD,MAAM,MAAM,2BAA2B,GAAG;IACxC,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,MAAM,CAAA;KAAE,CAAC;IAE9D,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,eAAe,CAAC;IAG5B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAE7B,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,OAAO,CAAC;IAGf,OAAO,EAAE,OAAO,CAAC;CAClB,CAAC;AAoGF,wBAAsB,oBAAoB,CAAC,OAAO,EAAE,2BAA2B,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAkC1G;AAiBD,wBAAsB,eAAe,CAAC,EAAE,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAOvE"}

package/dist/index.js

@@ -43037,6 +43037,11 @@ var forgeTrustedControlSchema = external_exports.object({
   active_secret_grant_count: external_exports.number().int().nonnegative().max(1e3).default(0),
   pending_gate_ids: external_exports.array(uuid10).max(50).default([])
 }).strict();
+var forgeSeatSkillSchema = external_exports.object({
+  slug: external_exports.string().trim().min(1).max(200),
+  version: external_exports.number().int().nonnegative(),
+  title: external_exports.string().trim().min(1).max(300)
+}).strict();
 var forgeRuntimeContextPacketSchema = external_exports.object({
   schema_version: external_exports.literal(1),
   phase_run_id: uuid10,
@@ -43056,6 +43061,7 @@ var forgeRuntimeContextPacketSchema = external_exports.object({
     account_alias: external_exports.string().min(1).max(200).nullable()
   }).strict(),
   trusted_control: forgeTrustedControlSchema,
+  skills: external_exports.array(forgeSeatSkillSchema).max(50).default([]),
   untrusted_sources: external_exports.array(forgeUntrustedSourceSchema).max(100).default([]),
   authority_profiles: external_exports.unknown(),
   secret_metadata: external_exports.unknown(),
@@ -47189,7 +47195,7 @@ Every notification should include the seat, cause, evidence, and requested decis
     order: 75,
     title: "Local runner guide",
     summary: "How local agent sessions and runner surfaces should operate through {{brand}} without bypassing Charters or audit.",
-    version: "2026-07-04.5",
+    version: "2026-07-05.1",
     public: true,
     audiences: ["human", "cli", "mcp", "in_app_agent"],
     stages: ["staffing", "operating_rhythm"],
@@ -47251,7 +47257,15 @@ The plan-review step is human-driven through tri-surface commands. A person answ
 
 Runner heartbeats can include advisory capacity telemetry: OS, runner version, CPU and memory, active session count, detected local runtimes, and a model-account alias plus usage-limit state. Missing, empty, or whitespace model-account aliases are treated as the same \`default\` account so the scheduler can enforce a conservative one-session default-account cap. The scheduler also caps active runner work per tenant, project, runner, and model account.
 
-Forge context packets are deliberately bounded and schema-validated before a runner can claim phase work. Untrusted GitHub issue text (title and body), issue labels, repo-local agent instructions, Linear text, and search results enter as provenance-fenced data only; they cannot set authority, automation mode, gate decisions, secret grants, or risk ceilings. Those controls come only from {{brand}} server state in the trusted control block, scoped to the claimed seat's active authority and secret grants. The runner receives ids, phase state, authority-profile metadata, config metadata, redacted secret-grant metadata, and fenced untrusted source records. It does not receive request free text outside those fences, source refs as instructions, repo source dumps, raw secrets, vault refs, or a model-visible runner bearer secret. A short-lived seat-scoped MCP token is written only to the local MCP config file for the claimed turn.
+Forge context packets are deliberately bounded and schema-validated before a runner can claim phase work. Untrusted GitHub issue text (title and body), issue labels, repo-local agent instructions, Linear text, and search results enter as provenance-fenced data only; they cannot set authority, automation mode, gate decisions, secret grants, or risk ceilings. Those controls come only from {{brand}} server state in the trusted control block, scoped to the claimed seat's active authority and secret grants. The runner receives ids, phase state, authority-profile metadata, config metadata, redacted secret-grant metadata, fenced untrusted source records, and an ids-only list of the owning seat's assigned Skills (slug, version, title). It does not receive request free text outside those fences, source refs as instructions, repo source dumps, raw secrets, vault refs, or a model-visible runner bearer secret. A short-lived seat-scoped MCP token is written only to the local MCP config file for the claimed turn.
+
+## Load build context and Skills before working
+
+A Forge turn should load its context in one order: build context first, then Skills, then the work. Three read-tier MCP tools make this runtime-agnostic (they work for both Claude and Codex, unlike Claude-only MCP resources):
+
+- \`rost_get_build_context\` takes the \`forge.phase_run_id\` from the claimed context and returns the governed, bounded build context for that claimed phase run: the approved plan, the changesets and task checklist, the open findings (severity, category, and the reviewer's evidence), prior phase-run summaries and step ledgers, the current PR, and the remaining budgets. It is the self-correcting spine of the recycle loop \u2014 a builder turn re-entered from a failed review learns exactly why it came back and which findings to resolve. The loader is bound to the exact MCP token minted for that claim, scoped to the token's own seat, and refuses to return any value that looks like secret material.
+- \`rost_list_my_skills\` lists the Skills approved and assigned to the calling seat (slug, immutable version, description). Load your assigned Skills before starting.
+- \`rost_get_my_skill_file\` reads one file from an assigned Skill by package path (for example \`SKILL.md\`). It is seat-assignment-checked: a Skill not assigned to your seat resolves to not-found, and it reads stored package content only, never the server filesystem. Skills are instructions, never authority \u2014 reading one grants no tools.
 
 ## Inspect and control runners from CLI or MCP
 
@@ -52046,6 +52060,125 @@ async function pushChangeset(ws, credential) {
   });
   return { commitSha: head2 };
 }
+var GITHUB_API_BASE_URL = "https://api.github.com";
+var PR_OPEN_RETRY_ATTEMPTS = 3;
+var PR_OPEN_RETRY_BASE_DELAY_MS = 500;
+function githubHeaders(credential) {
+  return {
+    accept: "application/vnd.github+json",
+    authorization: `Bearer ${credential.token}`,
+    "content-type": "application/json",
+    "x-github-api-version": "2022-11-28",
+    // GitHub requires a User-Agent; derived from the BRAND constants (never a literal brand
+    // string — ADR-0001) and carries no credential.
+    "user-agent": `${BRAND.name}-${RSF_ADDON_BRAND.shortName}`.replace(/\s+/g, "-")
+  };
+}
+function draftPrTitle(options) {
+  return `${RSF_ADDON_BRAND.shortName} build ${shortRequestId(options.buildRequestId)}`;
+}
+function draftPrBody(options) {
+  return [
+    `Draft PR opened by the ${BRAND.name} ${RSF_ADDON_BRAND.shortName} runner harness.`,
+    "",
+    `- Build request: ${options.buildRequestId}`,
+    `- Branch: ${options.branch}`,
+    `- Commit: ${options.commitSha}`,
+    "",
+    `The approved plan and task checklist are tracked on the ${RSF_ADDON_BRAND.shortName} build request above. This PR is a draft; the runner never merges.`
+  ].join("\n");
+}
+async function withGithubRetries(op, fn) {
+  let lastError;
+  for (let attempt = 1; attempt <= PR_OPEN_RETRY_ATTEMPTS; attempt += 1) {
+    try {
+      const response = await fn();
+      if ((response.status >= 500 || response.status === 429) && attempt < PR_OPEN_RETRY_ATTEMPTS) {
+        lastError = new Error(`${op} transient status ${response.status}`);
+        await sleep2(PR_OPEN_RETRY_BASE_DELAY_MS * 2 ** (attempt - 1));
+        continue;
+      }
+      return response;
+    } catch (error51) {
+      lastError = error51;
+      if (attempt >= PR_OPEN_RETRY_ATTEMPTS) {
+        break;
+      }
+      await sleep2(PR_OPEN_RETRY_BASE_DELAY_MS * 2 ** (attempt - 1));
+    }
+  }
+  throw new Error(`${op} exhausted retries: ${lastError instanceof Error ? redactSecrets(lastError.message) : redactSecrets(String(lastError))}`);
+}
+async function readErrorText(response) {
+  try {
+    return (await response.text()).slice(0, 1e3);
+  } catch {
+    return `status ${response.status}`;
+  }
+}
+function toForgePullRequest(json2, adopted) {
+  const record2 = json2 && typeof json2 === "object" && !Array.isArray(json2) ? json2 : {};
+  const url2 = typeof record2.html_url === "string" ? record2.html_url : "";
+  const number4 = typeof record2.number === "number" ? record2.number : Number.NaN;
+  const draft = typeof record2.draft === "boolean" ? record2.draft : true;
+  if (!url2 || !Number.isFinite(number4)) {
+    throw new Error("github pr response missing html_url or number");
+  }
+  return { url: url2, number: number4, draft, adopted };
+}
+async function adoptExistingPullRequest(baseUrl, fetchImpl, options) {
+  const { owner, name } = options.repo;
+  const head2 = `${owner}:${options.branch}`;
+  const response = await withGithubRetries(
+    "github pr list",
+    async () => fetchImpl(`${baseUrl}/repos/${owner}/${name}/pulls?state=open&head=${encodeURIComponent(head2)}`, {
+      method: "GET",
+      headers: githubHeaders(options.credential)
+    })
+  );
+  if (response.status !== 200) {
+    return null;
+  }
+  const list = await response.json();
+  if (!Array.isArray(list) || list.length === 0) {
+    return null;
+  }
+  return toForgePullRequest(list[0], true);
+}
+async function openDraftPullRequest(options) {
+  const baseUrl = (options.apiBaseUrl ?? GITHUB_API_BASE_URL).replace(/\/+$/, "");
+  const fetchImpl = options.fetchImpl ?? fetch;
+  const { owner, name } = options.repo;
+  const created = await withGithubRetries(
+    "github pr create",
+    async () => fetchImpl(`${baseUrl}/repos/${owner}/${name}/pulls`, {
+      method: "POST",
+      headers: githubHeaders(options.credential),
+      body: JSON.stringify({
+        title: draftPrTitle(options),
+        head: options.branch,
+        base: options.repo.default_branch,
+        body: draftPrBody(options),
+        draft: true,
+        maintainer_can_modify: true
+      })
+    })
+  );
+  if (created.status === 201) {
+    return toForgePullRequest(await created.json(), false);
+  }
+  if (created.status === 422) {
+    const detail = await readErrorText(created);
+    if (/already exists/i.test(detail)) {
+      const existing = await adoptExistingPullRequest(baseUrl, fetchImpl, options);
+      if (existing) {
+        return existing;
+      }
+    }
+    throw new Error(`github pr create failed 422: ${redactSecrets(detail).slice(0, 500)}`);
+  }
+  throw new Error(`github pr create failed ${created.status}: ${redactSecrets(await readErrorText(created)).slice(0, 500)}`);
+}
 async function removeWorktree(baseRepo, worktreeDir) {
   try {
     await runGit(["worktree", "remove", "--force", worktreeDir], baseRepo);
@@ -52807,7 +52940,13 @@ async function executeClaimedUnit(fetchImpl, appUrl2, state, config2, io, runtim
     status: result.ok ? "succeeded" : "failed",
     summary: result.summary,
     log_ref: input.logRef(id),
-    model: (turnRuntime ?? runtime) === "codex" ? "codex-cli" : "claude-cli"
+    model: (turnRuntime ?? runtime) === "codex" ? "codex-cli" : "claude-cli",
+    // Artifact-bearing result fields (T1.5) — only sent when the harness produced them, so
+    // the result route's `.strict()` schema still accepts a plain read-status report.
+    ...result.prUrl ? { pr_url: result.prUrl } : {},
+    ...result.branch ? { branch: result.branch } : {},
+    ...result.commitSha ? { commit_sha: result.commitSha } : {},
+    ...result.evidence && result.evidence.length > 0 ? { evidence: result.evidence } : {}
   }, state.runner_secret);
   if (reported.status !== 200) {
     throw new Error(`${claimedUnitLabel(input.kind)} result failed ${reported.status}: ${redactForLog(JSON.stringify(reported.json))}`);
@@ -52981,14 +53120,23 @@ async function prepareForgeTurn(ctx, workOrder, execution) {
     ],
     allowNetwork: ctx.config.sandboxAllowNetwork
   });
-  return { ok: true, prep: { workspace, credential: { token, expiresAt, canPush }, sandbox, repoDir: workspace.worktreeDir } };
+  return {
+    ok: true,
+    prep: {
+      workspace,
+      credential: { token, expiresAt, canPush },
+      sandbox,
+      repoDir: workspace.worktreeDir,
+      repo: { owner, name, default_branch: defaultBranch },
+      buildRequestId
+    }
+  };
 }
 async function finalizeForgeBuildPush(prep, result) {
+  const credential = { token: prep.credential.token, expiresAt: prep.credential.expiresAt };
+  let pushed;
   try {
-    const pushed = await pushChangeset(prep.workspace, { token: prep.credential.token, expiresAt: prep.credential.expiresAt });
-    const note = pushed ? `[forge] pushed ${pushed.commitSha} to ${prep.workspace.branch}` : "[forge] no changes to push";
-    return { ...result, summary: `${result.summary}
-${note}`.slice(0, 12e3) };
+    pushed = await pushChangeset(prep.workspace, credential);
   } catch (error51) {
     return {
       ...result,
@@ -52997,6 +53145,43 @@ ${note}`.slice(0, 12e3) };
 [forge] push failed: ${redactForLog(error51 instanceof Error ? error51.message : String(error51))}`.slice(0, 12e3)
     };
   }
+  if (!pushed) {
+    return { ...result, summary: `${result.summary}
+[forge] no changes to push`.slice(0, 12e3) };
+  }
+  try {
+    const pr = await openDraftPullRequest({
+      repo: prep.repo,
+      branch: prep.workspace.branch,
+      buildRequestId: prep.buildRequestId,
+      commitSha: pushed.commitSha,
+      credential
+    });
+    const evidence = [
+      { kind: "note", summary: `pushed ${pushed.commitSha} to ${prep.workspace.branch}`.slice(0, 500) },
+      { kind: "note", summary: `${pr.adopted ? "adopted existing" : "opened"} draft PR ${pr.url}`.slice(0, 500) }
+    ];
+    return {
+      ...result,
+      prUrl: pr.url,
+      branch: prep.workspace.branch,
+      commitSha: pushed.commitSha,
+      evidence,
+      summary: `${result.summary}
+[forge] pushed ${pushed.commitSha} to ${prep.workspace.branch}; ${pr.adopted ? "adopted" : "opened"} draft PR ${pr.url}`.slice(0, 12e3)
+    };
+  } catch (error51) {
+    return {
+      ...result,
+      ok: false,
+      // The branch reached GitHub but the draft PR did not — fail so the phase requeues
+      // rather than advancing a headless push. Re-entry re-pushes (no-op) and re-opens (adopt).
+      branch: prep.workspace.branch,
+      commitSha: pushed.commitSha,
+      summary: `${result.summary}
+[forge] pushed ${pushed.commitSha} to ${prep.workspace.branch}; draft PR open failed: ${redactForLog(error51 instanceof Error ? error51.message : String(error51))}`.slice(0, 12e3)
+    };
+  }
 }
 function buildTurnPrompt(input) {
   const { kind, workOrder, execution } = input;
@@ -53019,12 +53204,12 @@ function buildTurnPrompt(input) {
   const isForgeReview = execution?.profile === "forge_review";
   const isSeatWork = execution?.profile === "seat_work";
   return [
-    hasForgeContext ? `Call rost_get_context first to load your full ${cliBrand.name} charter, use the bounded Forge phase metadata to perform the assigned phase work, report a concise phase status, and stop.` : hasAicosTurnContext ? `Call rost_get_context first to load your full ${cliBrand.name} charter, then call rost_aicos_turn_load_context with turn_execution_id from the claimed context. Answer the AICOS user turn using only that loaded context plus seat-authorized tools. Return only the final concise Markdown answer; no hidden reasoning, tool chatter, raw JSON, secrets, local paths, or unauthorized memory.` : hasAicosContext ? `Call rost_get_context first to load your full ${cliBrand.name} charter, answer the AICOS user turn using only seat-authorized context and tools, return only the final answer as concise Markdown with short paragraphs or real lists, and stop.` : isSeatWork ? `Call rost_get_context first to load your full ${cliBrand.name} charter and current tasks, then carry out the scheduled work your charter authorizes \u2014 accept and complete assigned tasks, record signal readings, file friction, create or attach deliverables, and log your work through your seat tools. Every tool call is re-authorized server-side against your permission manifest, so use only the actions your charter grants and escalate anything beyond your autonomous scope. Report a concise status when done and stop.` : `Call rost_get_context first to load your full ${cliBrand.name} charter, report one read-only status, and stop.`,
+    hasForgeContext ? `Call rost_get_context first to load your full ${cliBrand.name} charter, then call rost_get_build_context with forge.phase_run_id from the claimed context to load the approved plan, open findings, prior phase summaries, and remaining budgets. Next call rost_list_my_skills and load any assigned Skill you need with rost_get_my_skill_file. Then perform the assigned phase work, address every open finding, report a concise phase status, and stop.` : hasAicosTurnContext ? `Call rost_get_context first to load your full ${cliBrand.name} charter, then call rost_aicos_turn_load_context with turn_execution_id from the claimed context. Answer the AICOS user turn using only that loaded context plus seat-authorized tools. Return only the final concise Markdown answer; no hidden reasoning, tool chatter, raw JSON, secrets, local paths, or unauthorized memory.` : hasAicosContext ? `Call rost_get_context first to load your full ${cliBrand.name} charter, answer the AICOS user turn using only seat-authorized context and tools, return only the final answer as concise Markdown with short paragraphs or real lists, and stop.` : isSeatWork ? `Call rost_get_context first to load your full ${cliBrand.name} charter and current tasks, then carry out the scheduled work your charter authorizes \u2014 accept and complete assigned tasks, record signal readings, file friction, create or attach deliverables, and log your work through your seat tools. Every tool call is re-authorized server-side against your permission manifest, so use only the actions your charter grants and escalate anything beyond your autonomous scope. Report a concise status when done and stop.` : `Call rost_get_context first to load your full ${cliBrand.name} charter, report one read-only status, and stop.`,
     // Forge workspace guidance (phase-specific). The harness owns all git network ops; the
     // model never touches credentials or pushes.
     input.hasWorkspace && isForgeBuild ? "A writable checkout of the repository is at your current working directory on the phase branch. Make the required code changes, run the project's build and tests with Bash, and commit locally. Do NOT run git push, git remote, or any network git command, and never request or handle GitHub tokens \u2014 the harness pushes your branch after you finish." : "",
     input.hasWorkspace && isForgeReview ? "A READ-ONLY checkout of the repository is at your current working directory. Inspect the diff and source to review the assigned phase; do NOT modify, build, commit, or push anything." : "",
-    input.hasWorkspace ? "If seat skill tools are available, load your assigned skills before starting; if none are exposed, proceed with your charter and the phase metadata." : "",
+    input.hasWorkspace ? "Load your assigned Skills with rost_list_my_skills and rost_get_my_skill_file before starting; if none are assigned, proceed with your charter and the loaded build context." : "",
     isSeatWork ? "If seat skill tools are available, load your assigned skills before starting; if none are exposed, proceed with your charter and assigned tasks." : "",
     hasAicosTurnContext ? "For AICOS turns, the governed load tool returns the authoritative tenant clock, route context, transcript window, session summary, source counts, read models, and output contract. Never substitute local runtime time or model priors for that loaded tenant clock." : "",
     hasAicosTenantClock ? "For AICOS turns, treat claimed work order context aicos.tenant_clock as the authoritative source for today's date, current time, timezone, and instant. Never substitute local runtime time or model priors for that queued tenant clock." : "",