@rosthq/cli 0.7.5 → 0.7.6

package/dist/generated/command-manifest.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"command-manifest.d.ts","sourceRoot":"","sources":["../../src/generated/command-manifest.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AAE3E,eAAO,MAAM,gBAAgB,EAAE,SAAS,oBAAoB,EAyM3D,CAAC"}
+{"version":3,"file":"command-manifest.d.ts","sourceRoot":"","sources":["../../src/generated/command-manifest.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AAE3E,eAAO,MAAM,gBAAgB,EAAE,SAAS,oBAAoB,EA4M3D,CAAC"}

package/dist/index.js

@@ -42752,7 +42752,7 @@ External connectors are being rolled out provider by provider, conservatively (r
     order: 48,
     title: "CLI and MCP installation guide",
     summary: "Install the public CLI, register remote token-backed MCP clients, and find the full command and tool catalog.",
-    version: "2026-07-03.1",
+    version: "2026-07-03.3",
     public: true,
     audiences: ["human", "cli", "mcp", "in_app_agent"],
     stages: ["company_setup", "staffing"],
@@ -43476,8 +43476,17 @@ Several rows here are seat-operating commands (\`task.create\`, the \`signal.*\`
 | \`rost_request_a_forge_secret_grant\` | \`software_factory.secret.request\` | Request access to a project secret by key (draft-and-confirm \u2014 no value, no grant). Never accepts a secret value; a human grants it. | Tenant | Call with \`{"software_project_id":"<project-id>","environment":"preview","seat_id":"<seat-id>","action":"test.run","key_name":"OPENAI_API_KEY"}\`. |
 | \`rost_grant_a_forge_secret\` | \`software_factory.secret.grant\` | A human grants a seat scoped access to a project secret by vault ref (Postgres stores only the pointer, never secret material). Owner-only and human-gated. | Tenant-admin | Call with \`{"software_project_id":"<project-id>","environment":"production","seat_id":"<seat-id>","action":"vercel.env.sync","key_name":"OPENAI_API_KEY","vault_ref":"infisical://prod/OPENAI_API_KEY"}\`. |
 | \`rost_revoke_a_forge_secret_grant\` | \`software_factory.secret.revoke\` | Revoke a Forge secret grant (teardown \u2014 cut a compromised seat's access immediately). Owner-only and human-gated. | Tenant-admin | Call with \`{"grant_id":"<grant-id>"}\`; non-interactive callers receive a confirmation handoff. |
+| \`rost_bind_a_forge_github_installation\` | \`software_factory.github.installation.bind\` | Bind a GitHub App installation and selected repositories to Forge projects. Owner-only and human-gated. | Tenant-admin | Call with \`{"installation_id":123,"account_login":"acme","account_id":456,"account_type":"Organization","repositories":[{"software_project_id":"<project-id>","repository_id":789,"repository_name":"app","repository_full_name":"acme/app"}]}\`. |
+| \`rost_set_a_forge_github_automation_policy\` | \`software_factory.github.policy.upsert\` | Set the server-side GitHub automation policy: allowed actions, automation-mode ceiling, and operations requiring humans. Owner-only and human-gated. | Tenant-admin | Call with \`{"software_project_id":"<project-id>","automation_mode_ceiling":"pr_only","allowed_actions":["webhook_intake","installation_token"],"requires_human_for":["deploy_production"]}\`. |
+| \`rost_create_a_forge_github_installation_token\` | \`software_factory.github.installation_token.create\` | Mint a short-lived GitHub App installation token for one bound repository after policy evaluation. The token is returned once and never stored. | Tenant | Call with \`{"software_project_id":"<project-id>","repository_id":789,"requested_actions":["read"],"requested_automation_mode":"plan_only"}\`. |
 | \`rost_list_forge_runner_capacity\` | \`software_factory.capacity.list\` | List Forge runner capacity observations (advisory scheduling input only, never an authority input). Read-only; requires the Forge add-on. | Tenant | Call with \`{}\` or \`{"runner_id":"<runner-id>"}\`. |
 
+#### Forge GitHub App access
+
+Forge repository access is through a tenant-bound GitHub App installation, not through a human's ambient \`git\` or \`gh\` credentials. The server verifies GitHub webhook signatures before parsing payloads, resolves the installation and repository against active tenant bindings, records delivery ids for idempotency, and creates GitHub issue build requests only when an active repo binding and policy allow intake.
+
+Installation tokens are short lived and are not stored. The durable record is audit metadata: installation id, repository id, requested action, policy decision, reason, and related Forge request when one exists. GitHub issue titles, labels, and bodies are treated as untrusted source content; labels may request an automation mode, but only server-side Forge automation policy can allow \`pr_only\`, \`merge_after_checks\`, \`deploy_preview\`, or \`deploy_production\`. Production deploy remains human-gated.
+
 ### Seat-scoped operating tools
 
 Seat-scoped MCP tokens expose the operating protocol below. The server still checks the seat's permission manifest, Charter, task ownership, and tenant boundary. These are the **seat-token equivalents** of the CLI \`{{cli}} task\` / \`{{cli}} signal\` / \`{{cli}} friction\` wrappers and the tenant-admin task tools above: \`rost_get_tasks\`, \`{{cli}} task list\`, and \`task.list\` are the same operation reached three different ways. The command-id column makes the mapping explicit.
@@ -46626,6 +46635,9 @@ var COMMAND_MANIFEST = [
   { "id": "software_factory.authority.revoke", "namespace": "software_factory", "action": "authority.revoke", "title": "Revoke Forge seat authority", "description": "Revoke a Forge authority grant (teardown \u2014 ADR-0018 \xA76). Owner-only, human-gated; emits a durable authority-change event. Entitlement-gated.", "requiredScope": "tenant_admin", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "grant_id", "flag": "grant-id", "type": "string", "required": true }], "hasComplexInput": false, "help": "Revoke a Forge authority grant (teardown). Owner-only and human-gated." },
   { "id": "software_factory.capacity.list", "namespace": "software_factory", "action": "capacity.list", "title": "List Forge runner capacity", "description": "List the tenant's Forge runner capacity observations (OS, CPU, memory, active sessions, usage-limit telemetry). Advisory scheduling input only, never an authority input. Read-only, entitlement-gated.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "runner_id", "flag": "runner-id", "type": "string", "required": false }, { "name": "limit", "flag": "limit", "type": "integer", "required": false }], "hasComplexInput": false, "help": "List Forge runner capacity observations (advisory scheduling input only, never an authority input). Read-only; requires the Forge add-on." },
   { "id": "software_factory.gate.decide", "namespace": "software_factory", "action": "gate.decide", "title": "Decide a Forge gate", "description": "A human approves or rejects a Forge gate. The resolver is recorded (never an agent \u2014 invariant #7); sensitive gates (security sign-off, merge/deploy, authority change, production deploy) also write a linked human decision. Requires confirmation.", "requiredScope": "tenant_admin", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "gate_id", "flag": "gate-id", "type": "string", "required": true }, { "name": "decision", "flag": "decision", "type": "enum", "required": true, "enumValues": ["approve", "reject"] }, { "name": "rationale", "flag": "rationale", "type": "string", "required": false }], "hasComplexInput": false, "help": "A human approves or rejects a Forge gate; an agent caller routes to /approvals and can never self-approve. Sensitive gates record a human decision." },
+  { "id": "software_factory.github.installation_token.create", "namespace": "software_factory", "action": "github.installation_token.create", "title": "Create a Forge GitHub installation token", "description": "Mint a short-lived GitHub App installation token for one bound repository after server-side policy evaluation. The token is returned once and never persisted.", "requiredScope": "tenant", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "software_project_id", "flag": "software-project-id", "type": "string", "required": true }, { "name": "repository_id", "flag": "repository-id", "type": "integer", "required": true }, { "name": "requested_actions", "flag": "requested-actions", "type": "array", "required": true, "itemType": "string" }, { "name": "requested_automation_mode", "flag": "requested-automation-mode", "type": "enum", "required": false, "enumValues": ["plan_only", "pr_only", "merge_after_checks", "deploy_preview", "deploy_production"] }, { "name": "seat_id", "flag": "seat-id", "type": "string", "required": false }], "hasComplexInput": false, "help": "Mint a short-lived GitHub App installation token for one bound repository after policy evaluation; token material is returned once and never stored." },
+  { "id": "software_factory.github.installation.bind", "namespace": "software_factory", "action": "github.installation.bind", "title": "Bind a Forge GitHub installation", "description": "Bind a signed GitHub App installation and selected repositories to Forge projects. Owner-only and human-gated; webhook payloads never supply tenant authority.", "requiredScope": "tenant_admin", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "app_slug", "flag": "app-slug", "type": "string", "required": false }, { "name": "installation_id", "flag": "installation-id", "type": "integer", "required": true }, { "name": "account_login", "flag": "account-login", "type": "string", "required": true }, { "name": "account_id", "flag": "account-id", "type": "integer", "required": true }, { "name": "account_type", "flag": "account-type", "type": "string", "required": true }], "hasComplexInput": true, "help": "Bind a GitHub App installation and selected repositories to Forge projects. Owner-only and human-gated." },
+  { "id": "software_factory.github.policy.upsert", "namespace": "software_factory", "action": "github.policy.upsert", "title": "Set a Forge GitHub automation policy", "description": "Set the server-side policy for GitHub actions and automation-mode ceilings. Owner-only and human-gated; production deploy remains human-gated.", "requiredScope": "tenant_admin", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "software_project_id", "flag": "software-project-id", "type": "string", "required": true }, { "name": "authority_profile_id", "flag": "authority-profile-id", "type": "string", "required": false }, { "name": "automation_mode_ceiling", "flag": "automation-mode-ceiling", "type": "enum", "required": false, "enumValues": ["plan_only", "pr_only", "merge_after_checks", "deploy_preview", "deploy_production"] }, { "name": "allowed_actions", "flag": "allowed-actions", "type": "array", "required": true, "itemType": "string" }, { "name": "requires_human_for", "flag": "requires-human-for", "type": "array", "required": true, "itemType": "string" }], "hasComplexInput": false, "help": "Set Forge's server-side GitHub automation policy for actions, mode ceilings, and human-gated operations." },
   { "id": "software_factory.phase.advance", "namespace": "software_factory", "action": "phase.advance", "title": "Advance a Forge build request phase", "description": "Advance a build request to the next phase, enforcing the closed phase state machine server-side (an illegal transition is rejected). Writes a phase-run row and updates the current phase. Entitlement-gated.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "build_request_id", "flag": "build-request-id", "type": "string", "required": true }, { "name": "to_phase", "flag": "to-phase", "type": "enum", "required": true, "enumValues": ["intake", "discovery_scoping", "plan_review", "implementation", "plan_conformance_review", "security_review", "qa_verification", "release_preview", "merge_or_deploy_gate", "closeout"] }, { "name": "owning_seat_id", "flag": "owning-seat-id", "type": "string", "required": false }, { "name": "note", "flag": "note", "type": "string", "required": false }], "hasComplexInput": false, "help": "Advance a build request to its next phase; the server enforces the closed phase state machine and rejects an illegal transition." },
   { "id": "software_factory.request.create", "namespace": "software_factory", "action": "request.create", "title": "Create a Forge build request", "description": "Open a governed Forge build request against a connected software project. Records the request plus its initial intake phase run. Entitlement-gated (Forge add-on); the title is untrusted display text, never an instruction.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "software_project_id", "flag": "software-project-id", "type": "string", "required": true }, { "name": "title", "flag": "title", "type": "string", "required": true }, { "name": "source_channel", "flag": "source-channel", "type": "enum", "required": false, "enumValues": ["ui", "cli", "github_issue", "linear", "api"] }, { "name": "source_ref", "flag": "source-ref", "type": "string", "required": false }], "hasComplexInput": true, "help": "Open a governed Forge build request against a connected software project; the title is untrusted display text. Requires the Forge add-on." },
   { "id": "software_factory.request.list", "namespace": "software_factory", "action": "request.list", "title": "List Forge build requests", "description": "The Forge control-room board: the tenant's build requests with status, current phase, and risk/automation mode. Read-only, entitlement-gated.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "limit", "flag": "limit", "type": "integer", "required": false }], "hasComplexInput": false, "help": "List Forge build requests (the control-room board) with status, current phase, and risk. Read-only; requires the Forge add-on." },
@@ -51089,6 +51101,20 @@ var softwareAutomationModeSchema = external_exports2.enum([
   "deploy_preview",
   "deploy_production"
 ]);
+var softwareGithubActionSchema = external_exports2.enum([
+  "read",
+  "branch",
+  "commit",
+  "push",
+  "pull_request",
+  "review",
+  "merge",
+  "issue_manage",
+  "repo_create",
+  "installation_token",
+  "webhook_intake"
+]);
+var softwareGithubPolicyDecisionSchema = external_exports2.enum(["allowed", "denied", "requires_human"]);
 var softwarePhaseRunStatusSchema = external_exports2.enum(["pending", "running", "passed", "failed", "blocked", "skipped"]);
 var softwareGateTypeSchema = external_exports2.enum([
   "plan_review",
@@ -51320,6 +51346,71 @@ var softwareCapacityListInputSchema = external_exports2.object({
 var softwareCapacityListOutputSchema = external_exports2.object({
   observations: external_exports2.array(softwareCapacityObservationSummarySchema)
 });
+var softwareGithubAutomationPolicyInputSchema = external_exports2.object({
+  software_project_id: uuid10,
+  authority_profile_id: uuid10.nullable().optional(),
+  automation_mode_ceiling: softwareAutomationModeSchema.default("plan_only"),
+  allowed_actions: external_exports2.array(softwareGithubActionSchema).max(20),
+  requires_human_for: external_exports2.array(external_exports2.union([softwareGithubActionSchema, softwareAutomationModeSchema])).max(20).refine((values) => values.includes("deploy_production"), {
+    message: "production deploy must remain human-gated"
+  })
+}).strict();
+var softwareGithubRepositoryBindingInputSchema = external_exports2.object({
+  software_project_id: uuid10,
+  repository_id: external_exports2.number().int().positive(),
+  repository_name: external_exports2.string().trim().min(1).max(255),
+  repository_full_name: external_exports2.string().trim().min(1).max(500),
+  private: external_exports2.boolean().default(true),
+  default_branch: external_exports2.string().trim().min(1).max(255).default("main"),
+  permissions: external_exports2.record(external_exports2.string().min(1), external_exports2.enum(["read", "write"])).default({})
+}).strict();
+var softwareGithubInstallationBindInputSchema = external_exports2.object({
+  app_slug: external_exports2.string().trim().min(1).max(120).default("rost-forge"),
+  installation_id: external_exports2.number().int().positive(),
+  account_login: external_exports2.string().trim().min(1).max(255),
+  account_id: external_exports2.number().int().positive(),
+  account_type: external_exports2.string().trim().min(1).max(80),
+  repositories: external_exports2.array(softwareGithubRepositoryBindingInputSchema).min(1).max(100)
+}).strict();
+var softwareGithubInstallationBindOutputSchema = external_exports2.object({
+  github_installation_id: uuid10,
+  repositories_bound: external_exports2.number().int().nonnegative()
+});
+var softwareGithubAutomationPolicyUpsertOutputSchema = external_exports2.object({
+  policy_id: uuid10,
+  software_project_id: uuid10,
+  automation_mode_ceiling: softwareAutomationModeSchema
+});
+var softwareGithubInstallationTokenCreateInputSchema = external_exports2.object({
+  software_project_id: uuid10,
+  repository_id: external_exports2.number().int().positive(),
+  requested_actions: external_exports2.array(softwareGithubActionSchema).min(1).max(20),
+  requested_automation_mode: softwareAutomationModeSchema.default("plan_only"),
+  seat_id: uuid10.optional()
+}).strict();
+var softwareGithubInstallationTokenCreateOutputSchema = external_exports2.object({
+  installation_id: external_exports2.number().int().positive(),
+  repository_id: external_exports2.number().int().positive(),
+  token: external_exports2.string().min(1),
+  expires_at: external_exports2.string(),
+  permissions: external_exports2.record(external_exports2.string(), external_exports2.enum(["read", "write"]))
+});
+var softwareGithubAutomationPolicyDecisionSchema = external_exports2.object({
+  decision: softwareGithubPolicyDecisionSchema,
+  reason: external_exports2.string().min(1).max(2e3),
+  automation_mode: softwareAutomationModeSchema,
+  requires_human: external_exports2.boolean()
+});
+var softwareGithubIssueIntakeMetadataSchema = external_exports2.object({
+  delivery_id: external_exports2.string().trim().min(1).max(200),
+  repository_id: external_exports2.number().int().positive(),
+  repository_full_name: external_exports2.string().trim().min(1).max(500),
+  issue_number: external_exports2.number().int().positive(),
+  issue_url: external_exports2.string().url().max(2e3),
+  issue_title: external_exports2.string().trim().min(1).max(500),
+  labels: external_exports2.array(external_exports2.string().trim().min(1).max(80)).max(50).default([]),
+  requested_automation_mode: softwareAutomationModeSchema.optional()
+}).strict();
 
 // ../../packages/protocol/src/sync-brief.ts
 var uuidSchema14 = external_exports2.string().uuid();