@rosthq/cli 0.7.77 → 0.7.78

package/dist/generated/command-manifest.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"command-manifest.d.ts","sourceRoot":"","sources":["../../src/generated/command-manifest.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AAE3E,eAAO,MAAM,gBAAgB,EAAE,SAAS,oBAAoB,EA+P3D,CAAC"}
+{"version":3,"file":"command-manifest.d.ts","sourceRoot":"","sources":["../../src/generated/command-manifest.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AAE3E,eAAO,MAAM,gBAAgB,EAAE,SAAS,oBAAoB,EAiQ3D,CAAC"}

package/dist/index.js

@@ -45993,6 +45993,170 @@ var escalationDecisionOutputSchema = external_exports.object({
   replay_action_pending: external_exports.boolean().optional()
 }).strict();
 
+// ../../packages/protocol/src/work-ledger.ts
+var WORK_VERBS = [
+  "created",
+  "updated",
+  "removed",
+  "sent",
+  "received",
+  "contacted",
+  "replied",
+  "offered",
+  "accepted",
+  "rejected",
+  "assessed",
+  "announced",
+  "assigned",
+  "invited",
+  "flagged",
+  "booked",
+  "searched",
+  "filed",
+  "extracted",
+  "escalated"
+];
+var workVerbSchema = external_exports.enum(WORK_VERBS);
+var WORK_OUTCOMES = ["success", "warning", "error", "held"];
+var workOutcomeSchema = external_exports.enum(WORK_OUTCOMES);
+var objectKindSchema = external_exports.string().trim().min(1).max(128);
+var externalIdSchema = external_exports.string().trim().min(1).max(512);
+var labelSchema = external_exports.string().trim().min(1).max(200);
+var displayUrlSchema = external_exports.string().trim().max(2048).refine(
+  (value) => /^https?:\/\//u.test(value) || value.startsWith("/") || value.startsWith("rost://"),
+  { message: "url must be http(s), a tenant-local path, or a rost:// reference" }
+);
+var entityRefSchema = external_exports.object({
+  kind: objectKindSchema,
+  external_id: externalIdSchema,
+  label: labelSchema.optional(),
+  url: displayUrlSchema.optional()
+}).strict();
+var contextRefSchema = external_exports.object({
+  kind: objectKindSchema,
+  external_id: externalIdSchema,
+  label: labelSchema.optional()
+}).strict();
+var workLedgerRecordSchema = external_exports.object({
+  verb: workVerbSchema,
+  outcome: workOutcomeSchema.default("success"),
+  object: entityRefSchema,
+  // Optional second slot ("…about PO-1892"); genuinely multi-target activity
+  // goes in details, not a second fixed slot (Salesforce's documented wall).
+  target: entityRefSchema.optional(),
+  context: contextRefSchema.optional(),
+  // Optional governance joins. run_id / tool_call_id are re-validated server-side
+  // against the acting tenant + seat; a caller cannot forge cross-tenant links.
+  run_id: external_exports.string().uuid().optional(),
+  tool_call_id: external_exports.string().uuid().optional(),
+  // Deliverable / document / thread link (≈ A2A Artifact).
+  evidence_ref: external_exports.string().trim().min(1).max(2048).optional(),
+  // Versioned prompt used for external comms (P-17; invariant #9 tie-in).
+  template_ref: external_exports.string().trim().min(1).max(512).optional(),
+  // Default 1; only for genuinely anonymous bulk work. Rule: if a client might
+  // ask "which ones?", log per-entity.
+  quantity: external_exports.number().int().min(1).max(1e6).default(1),
+  summary: external_exports.string().trim().min(1).max(2e3),
+  // Zod-validated against the registry entry's details schema at log time
+  // (permissive JSON object when no typed schema is registered).
+  details: external_exports.record(external_exports.string(), external_exports.unknown()).default({}),
+  // Idempotency: verb + object_ref + external event id (Gmail message id,
+  // Baserow row id). A retried turn re-logging the same key is a no-op.
+  dedup_key: external_exports.string().trim().min(1).max(512).optional(),
+  // Correction: this record supersedes an earlier one (same seat + tenant).
+  supersedes_id: external_exports.string().uuid().optional()
+}).strict();
+var WORK_LEDGER_MAX_BATCH = 100;
+var workLedgerLogInputSchema = external_exports.object({
+  records: external_exports.array(workLedgerRecordSchema).min(1).max(WORK_LEDGER_MAX_BATCH)
+}).strict();
+var workLedgerLogResultSchema = external_exports.object({
+  id: external_exports.string().uuid(),
+  dedup_key: external_exports.string().nullable(),
+  // true when this dedup_key already existed — the insert was an idempotent no-op.
+  deduplicated: external_exports.boolean()
+}).strict();
+var workLedgerLogOutputSchema = external_exports.object({
+  records: external_exports.array(workLedgerLogResultSchema),
+  logged_count: external_exports.number().int().min(0),
+  deduplicated_count: external_exports.number().int().min(0)
+}).strict();
+var workLedgerRecordViewSchema = external_exports.object({
+  id: external_exports.string().uuid(),
+  seat_id: external_exports.string().uuid(),
+  agent_id: external_exports.string().uuid().nullable(),
+  run_id: external_exports.string().uuid().nullable(),
+  tool_call_id: external_exports.string().uuid().nullable(),
+  verb: workVerbSchema,
+  outcome: workOutcomeSchema,
+  object_kind: external_exports.string(),
+  object_external_id: external_exports.string(),
+  object_label: external_exports.string().nullable(),
+  object_url: external_exports.string().nullable(),
+  target_kind: external_exports.string().nullable(),
+  target_external_id: external_exports.string().nullable(),
+  target_label: external_exports.string().nullable(),
+  target_url: external_exports.string().nullable(),
+  context_kind: external_exports.string().nullable(),
+  context_external_id: external_exports.string().nullable(),
+  context_label: external_exports.string().nullable(),
+  evidence_ref: external_exports.string().nullable(),
+  template_ref: external_exports.string().nullable(),
+  quantity: external_exports.number().int(),
+  summary: external_exports.string(),
+  details: external_exports.record(external_exports.string(), external_exports.unknown()),
+  dedup_key: external_exports.string().nullable(),
+  supersedes_id: external_exports.string().uuid().nullable(),
+  created_at: external_exports.string()
+}).strict();
+var workLedgerListInputSchema = external_exports.object({
+  verb: workVerbSchema.optional(),
+  outcome: workOutcomeSchema.optional(),
+  object_kind: objectKindSchema.optional(),
+  object_external_id: externalIdSchema.optional(),
+  run_id: external_exports.string().uuid().optional(),
+  // Tenant-admin cross-seat view: an explicit seat filter. Seat-scoped callers
+  // are always constrained to their own seat server-side regardless of this.
+  seat_id: external_exports.string().uuid().optional(),
+  // Include records that have been superseded by a later correction (default off
+  // so the feed shows the current narrative).
+  include_superseded: external_exports.boolean().default(false),
+  limit: external_exports.number().int().min(1).max(100).default(50),
+  // Opaque keyset cursor from a previous page's next_cursor.
+  cursor: external_exports.string().min(1).max(200).optional()
+}).strict();
+var workLedgerListOutputSchema = external_exports.object({
+  records: external_exports.array(workLedgerRecordViewSchema),
+  next_cursor: external_exports.string().nullable()
+}).strict();
+var activityRegistryEntrySchema = external_exports.object({
+  activity_kind: external_exports.string().regex(/^[a-z][a-z0-9_]{0,63}$/u, "activity_kind must be a lower_snake slug (<=64 chars)"),
+  verb: workVerbSchema,
+  object_kind: objectKindSchema,
+  label: labelSchema,
+  // Names one of workDetailsSchemas; null = permissive (details need only be a
+  // JSON object). A novel kind starts null until a typed schema ships.
+  details_schema_key: external_exports.string().min(1).max(128).nullable().default(null),
+  // Seam for signal auto-derivation (a later PR): whether ledger counts feed a
+  // Signal, and the human-facing unit ("suppliers/week").
+  derives_measurable: external_exports.boolean().default(false),
+  measurable_unit: external_exports.string().min(1).max(64).nullable().default(null),
+  description: external_exports.string().max(2e3).nullable().default(null)
+}).strict();
+var workDetailsSchemas = {
+  supplier_contacted: external_exports.object({
+    channel: external_exports.enum(["email", "phone", "portal", "chat", "other"]).optional(),
+    subject: external_exports.string().max(500).optional(),
+    thread_ref: external_exports.string().max(512).optional()
+  }).strict(),
+  quote_extracted: external_exports.object({
+    amount: external_exports.number().nonnegative().optional(),
+    currency: external_exports.string().length(3).optional(),
+    unit: external_exports.string().max(64).optional(),
+    lead_time_days: external_exports.number().int().nonnegative().optional()
+  }).strict()
+};
+
 // ../../packages/protocol/src/index.ts
 var eventTypes = [
   "status",
@@ -47392,7 +47556,7 @@ External connectors are being rolled out provider by provider, conservatively (r
     order: 48,
     title: "CLI and MCP installation guide",
     summary: "Install the public CLI, register remote token-backed MCP clients, and find the full command and tool catalog.",
-    version: "2026-07-13.6",
+    version: "2026-07-13.7",
     public: true,
     audiences: ["human", "cli", "mcp", "in_app_agent"],
     stages: ["company_setup", "staffing"],
@@ -48206,10 +48370,12 @@ Seat-scoped MCP tokens expose the operating protocol below. The server still che
 | \`rost_complete_task\` | \`task.complete\` | Complete a task and record evidence. | Seat | Call with \`task_id\` and evidence. |
 | \`rost_escalate\` | \`escalation.raise\` | Escalate approval-scope or must-escalate work. | Seat | Call with severity, reason, and requested decision. |
 | \`rost_file_issue\` | \`friction.file_issue\` | File a Friction issue. | Seat | Call with title, severity, and impact. |
-| \`rost_log_work\` | \`work.log\` | Record work performed by the seat. | Seat | Call with summary and evidence. |
+| \`rost_log_work\` | \`work.log\` | Record a lightweight free-text work breadcrumb for the seat. For structured, per-entity, queryable business activity (a client might ask "which ones?"), use \`rost_record_work\` instead. | Seat | Call with summary and evidence. |
 | \`rost_report_a_signal_reading\` | \`signal.report\` | Propose one draft reading for this seat's own agent-sourced measurable. The reading lands unconfirmed for human review. | Seat | Call with \`{"measurable_id":"<id>","value":42,"note":"read off the source","confidence":"high"}\`. |
 | \`rost_create_agent_deliverable\` | \`deliverable.create\` | Create a scrubbed durable work output for the acting seat. | Seat | Call with title, kind, summary/content, and optional safe links. |
 | \`rost_attach_agent_deliverable\` | \`deliverable.attach\` | Attach a scrubbed deliverable to a source run, task, or work order after server-side seat validation. | Seat | Call with title, kind, and the source ids that belong to the acting seat. |
+| \`rost_record_work\` | \`work.record\` | Append structured business-activity records to the seat's append-only work ledger, in a batch, right after each action succeeds. Prefer this over \`rost_log_work\` for durable, per-entity, queryable activity (verb + entity ref + outcome + evidence). Secret-redacted; idempotent on \`dedup_key\`; corrections are superseding records. | Seat | Call with \`{"records":[{"verb":"contacted","object":{"kind":"supplier","external_id":"sup_42","label":"Acme Foods"},"summary":"Emailed Acme for a monk fruit quote.","dedup_key":"gmail:msg-abc"}]}\`. |
+| \`rost_list_work_records\` | \`work.list\` | List the seat's work-ledger records newest-first (keyset-paginated), filterable by verb, object kind/ref, outcome, or run. | Seat | Call with \`{"verb":"contacted","object_kind":"supplier","limit":50}\`. |
 | \`rost_request_a_forge_secret_grant\` | \`software_factory.secret.request\` | Request access to a project secret by key. It creates a durable credential request and approval Task, never accepts a secret value, and does not grant access by itself. | Seat | Call with \`{"software_project_id":"<project-id>","environment":"preview","seat_id":"<seat-id>","action":"test.run","key_name":"OPENAI_API_KEY"}\`. |
 | \`rost_verify_forge_secret_broker_access\` | \`software_factory.secret.use\` | Verify broker authorization for a Forge secret without opening the vault. Missing grants create or reuse a credential request + approval Task; allowed grants return a redacted authorization summary only. Runtime vault use happens runner-side. | Seat | Call with \`{"software_project_id":"<project-id>","environment":"preview","seat_id":"<seat-id>","action":"test.run","key_name":"OPENAI_API_KEY","operation":"test_execution"}\`. |
 | \`rost_request_a_brokered_secret_grant\` | \`secret_grant.request\` | A seat agent requests a scoped brokered-secret grant (for secret.broker / baserow.*) by naming the host, path prefix, methods, and scope it needs. Draft-and-confirm: no secret and no vault ref; returns an event id for a human to grant via secret_grant.grant. | Seat | Call with {"seat_id":"<seat-id>","grant_key":"baserow","provider":"baserow","allowed_host":"baserow.example.com","allowed_path_prefix":"/api/database/rows/","allowed_methods":["GET"],"scope_tier":"read"}. |
@@ -51587,7 +51753,9 @@ var COMMAND_MANIFEST = [
   { "id": "work_order.cancel", "namespace": "work_order", "action": "cancel", "title": "Cancel work order", "description": "Cancel a queued, claimed, or running work order. Already-terminal orders return a stable error.", "requiredScope": "tenant", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "work_order_id", "flag": "work-order-id", "type": "string", "required": true }], "hasComplexInput": false, "help": "Cancel a queued, claimed, or running work order; this is a human-gated action." },
   { "id": "work_order.enqueue", "namespace": "work_order", "action": "enqueue", "title": "Enqueue work order", "description": "Queue a work order for a live scheduled agent. Idempotent per (agent, scheduled time).", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "agent_id", "flag": "agent-id", "type": "string", "required": true }, { "name": "scheduled_for", "flag": "scheduled-for", "type": "string", "required": false }, { "name": "task_id", "flag": "task-id", "type": "string", "required": false }], "hasComplexInput": false, "help": "Queue a work order for a live scheduled agent; enqueue is idempotent per agent and scheduled time." },
   { "id": "work_order.list", "namespace": "work_order", "action": "list", "title": "List work orders", "description": "List runner/cloud work orders for the tenant, optionally filtered by status, agent, or runner.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "status", "flag": "status", "type": "enum", "required": false, "enumValues": ["queued", "claimed", "running", "done", "failed", "expired"] }, { "name": "agent_id", "flag": "agent-id", "type": "string", "required": false }, { "name": "runner_id", "flag": "runner-id", "type": "string", "required": false }, { "name": "limit", "flag": "limit", "type": "integer", "required": false }], "hasComplexInput": false, "help": "Inspect queued, claimed, running, and expired work orders to understand runner activity." },
-  { "id": "work.log", "namespace": "work", "action": "log", "title": "Log work", "description": "Write a lightweight activity breadcrumb event for the acting seat.", "requiredScope": "seat", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "note", "flag": "note", "type": "string", "required": true }], "hasComplexInput": false, "help": "Log a lightweight work breadcrumb so the seat's activity is visible without durable side effects." }
+  { "id": "work.list", "namespace": "work", "action": "list", "title": "List work records", "description": "List the acting seat's work-ledger records newest-first (keyset-paginated), filterable by verb, object kind/ref, outcome, or run. Superseded records are hidden unless include_superseded is set.", "requiredScope": "seat", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "verb", "flag": "verb", "type": "enum", "required": false, "enumValues": ["created", "updated", "removed", "sent", "received", "contacted", "replied", "offered", "accepted", "rejected", "assessed", "announced", "assigned", "invited", "flagged", "booked", "searched", "filed", "extracted", "escalated"] }, { "name": "outcome", "flag": "outcome", "type": "enum", "required": false, "enumValues": ["success", "warning", "error", "held"] }, { "name": "object_kind", "flag": "object-kind", "type": "string", "required": false }, { "name": "object_external_id", "flag": "object-external-id", "type": "string", "required": false }, { "name": "run_id", "flag": "run-id", "type": "string", "required": false }, { "name": "seat_id", "flag": "seat-id", "type": "string", "required": false }, { "name": "include_superseded", "flag": "include-superseded", "type": "boolean", "required": false }, { "name": "limit", "flag": "limit", "type": "integer", "required": false }, { "name": "cursor", "flag": "cursor", "type": "string", "required": false }], "hasComplexInput": false, "help": "List the seat's work-ledger records newest-first with keyset pagination, filterable by verb, object, outcome, or run." },
+  { "id": "work.log", "namespace": "work", "action": "log", "title": "Log work", "description": "Write a lightweight activity breadcrumb event for the acting seat.", "requiredScope": "seat", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "note", "flag": "note", "type": "string", "required": true }], "hasComplexInput": false, "help": "Log a lightweight work breadcrumb so the seat's activity is visible without durable side effects." },
+  { "id": "work.record", "namespace": "work", "action": "record", "title": "Record work", "description": "Append one or more structured business-activity records to the agent work ledger for the acting seat. Batch-accepting, append-only, secret-redacted, and idempotent on dedup_key. Corrections are superseding records.", "requiredScope": "seat", "confirmation": "none", "exposeOverMcp": true, "fields": [], "hasComplexInput": true, "help": "Append structured business-activity records (verb + entity refs + outcome + evidence) to the seat's work ledger, in a batch, right after each action succeeds." }
 ];
 
 // src/generator/groups.ts