@rosthq/cli 0.7.87 → 0.7.88

package/dist/generator/groups.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"groups.d.ts","sourceRoot":"","sources":["../../src/generator/groups.ts"],"names":[],"mappings":"AAuCA,OAAO,EAAgB,KAAK,SAAS,EAAE,MAAM,YAAY,CAAC;AAM1D,eAAO,MAAM,kBAAkB,EAAE,MAAM,CAAC,MAAM,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAKhF,CAAC;AAosCF,eAAO,MAAM,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAmPjD,CAAC"}
+{"version":3,"file":"groups.d.ts","sourceRoot":"","sources":["../../src/generator/groups.ts"],"names":[],"mappings":"AAuCA,OAAO,EAAgB,KAAK,SAAS,EAAE,MAAM,YAAY,CAAC;AAM1D,eAAO,MAAM,kBAAkB,EAAE,MAAM,CAAC,MAAM,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAKhF,CAAC;AAwsCF,eAAO,MAAM,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAmPjD,CAAC"}

package/dist/index.js

@@ -40435,6 +40435,12 @@ var aicosModelSelectionSchema = external_exports.object({
   effort: external_exports.enum(["low", "medium", "high", "xhigh", "max"]).optional(),
   label: external_exports.string().min(1).optional(),
   routingReason: external_exports.string().min(1).optional(),
+  // DER-1820: true only while the managed allowance is exhausted AND a usable tenant
+  // BYOK key exists, so the executor's managed->BYOK auto-recovery (cloud-execution.ts
+  // `allowManagedRecovery`) will actually run the next turn — lets the allowance banner
+  // say "running on your tenant key" instead of overclaiming guided mode / a stale
+  // "Add BYOK" CTA when BYOK is already covering the turn.
+  byokFallbackActive: external_exports.boolean().optional(),
   estimatedContextTokens: external_exports.number().int().nonnegative().default(0),
   contextWindowTokens: external_exports.number().int().positive().optional(),
   options: external_exports.array(aicosModelOptionSchema).default([])
@@ -43791,6 +43797,12 @@ var runnerExecutionStateSchema = external_exports.enum([
 ]);
 var runnerExecutionReadinessSchema = external_exports.object({
   state: runnerExecutionStateSchema,
+  // DER-1655: per-runner CAPABILITY — can this runner execute a turn right now
+  // (online + local runtime + not allowance-blocked). This is the presence/readiness
+  // bit CLI/API callers should read; `execute_ready` is dispatch-selection ONLY, so a
+  // capable idle_unproven/queued_unclaimed runner must still serialize `capable: true`
+  // over the wire even while `execute_ready` is false.
+  capable: external_exports.boolean(),
   execute_ready: external_exports.boolean(),
   detail: external_exports.string(),
   due_queued_work_orders: external_exports.number().int().nonnegative(),
@@ -44167,7 +44179,7 @@ var systemHealthFindingCodeSchema = external_exports.enum([
   "failed_run",
   "unresolved_error",
   "offline_runner",
-  "runner_not_execute_ready",
+  "runner_not_capable",
   "pending_signal",
   "off_track_signal",
   "missing_charter",
@@ -44236,7 +44248,12 @@ var systemHealthWorkLoopSectionSchema = external_exports.object({
 var systemHealthConnectivitySectionSchema = external_exports.object({
   runner_count: external_exports.number().int().nonnegative(),
   offline_runner_count: external_exports.number().int().nonnegative(),
-  not_execute_ready_runner_count: external_exports.number().int().nonnegative(),
+  // DER-1655: a presence/readiness surface alerts on per-runner CAPABILITY
+  // (execution.capable), not the dispatch-only executeReady bit. Counts runners
+  // that cannot execute a turn right now (offline/unpaired, or online but
+  // missing a runtime / model-account-exhausted). A capable-but-not-executeReady
+  // runner (online idle_unproven / queued_unclaimed) is healthy and excluded.
+  not_capable_runner_count: external_exports.number().int().nonnegative(),
   // DER-1588: fleet-wide near-cap/at-limit warning, driven off the runner capacity badge.
   near_cap_or_exhausted_runner_count: external_exports.number().int().nonnegative(),
   integration_count: external_exports.number().int().nonnegative(),
@@ -46358,6 +46375,10 @@ var escalationStatusSchema = external_exports.enum([
   "overridden",
   "converted_to_issue"
 ]);
+var stewardReplayActionSummarySchema = external_exports.object({
+  tool_name: external_exports.string(),
+  run_id: uuidSchema20
+}).strict();
 var stewardEscalationSchema = external_exports.object({
   id: uuidSchema20,
   seat_id: uuidSchema20,
@@ -46367,6 +46388,11 @@ var stewardEscalationSchema = external_exports.object({
   steward_seat_name: external_exports.string(),
   reason: external_exports.string(),
   charter_clause: external_exports.string(),
+  // DER-1634: secret-scrubbed evidence the agent attached when it escalated (the DB
+  // scrubs it at write time; read projections re-scrub defensively — invariant #5).
+  evidence: external_exports.unknown(),
+  // DER-1634: scrubbed summary of the durable replay action, or null when there is none.
+  replay_action_summary: stewardReplayActionSummarySchema.nullable(),
   recommended_action: external_exports.string().nullable(),
   status: escalationStatusSchema,
   decided_by: uuidSchema20.nullable(),
@@ -47989,7 +48015,7 @@ External connectors are being rolled out provider by provider, conservatively (r
     order: 48,
     title: "CLI and MCP installation guide",
     summary: "Install the public CLI, register remote token-backed MCP clients, and find the full command and tool catalog.",
-    version: "2026-07-16.1",
+    version: "2026-07-16.2",
     public: true,
     audiences: ["human", "cli", "mcp", "in_app_agent"],
     stages: ["company_setup", "staffing"],
@@ -48701,7 +48727,7 @@ Several rows here are seat-operating commands (\`task.create\`, the \`signal.*\`
 | \`rost_complete_sync_run\` | \`sync.run.complete\` | Record that the Sync meeting completed (idempotent). | Tenant | Call with \`{"sync_brief_id":"<id>"}\`. |
 | \`rost_assign_sync_follow_up\` | \`sync.item.assign\` | Create a follow-up task from a Sync agenda item. | Tenant | Call with brief, owner seat, title, description. |
 | \`rost_list_escalations\` | \`escalation.list\` | List Steward queue escalations (own steward chain for humans, own seat for agents). | Seat or tenant-admin | Call with \`{}\` or \`{"include_decided":true}\`. |
-| \`rost_get_escalation\` | \`escalation.get\` | Read one escalation's evidence, recommendation, and decision state. | Seat or tenant-admin | Call with \`{"id":"<escalation-id>"}\`. Resolve/reject are human-only and not exposed over MCP. |
+| \`rost_get_escalation\` | \`escalation.get\` | Read one escalation's secret-scrubbed evidence, recommendation, decision state, and \`replay_action_summary\` (the held tool + originating run a steward approval would replay \u2014 never the raw args). | Seat or tenant-admin | Call with \`{"id":"<escalation-id>"}\`. Resolve/reject are human-only and not exposed over MCP. |
 | \`rost_check_compass_alignment\` | \`compass.alignment\` | Advisory drift check: scores whether cycle goals still ladder to the active vision and flags orphan/contradictory goals. Read-only \u2014 it never edits the Compass or any goal. | Tenant | Call with \`{}\`. |
 | \`rost_team_health_score\` | \`team.health_score\` | Read the single rolled-up 0-100 team-health score (latest month) with its band and label. | Tenant | Call with \`{}\`. |
 | \`rost_show_compass_as_markdown\` | \`compass.show_markdown\` | Render the current Compass and its open gaps as a clean markdown card for review. | Tenant | Call with \`{}\`. |
@@ -53025,18 +53051,21 @@ function renderRunnerList(output) {
     const record2 = asRecord(runner);
     const posture = asRecord(record2.posture);
     const capacity = asRecord(record2.capacity);
+    const execution = asRecord(record2.execution);
     const capabilitySet = asArray(posture.capability_set).map((value) => String(value)).join(", ");
-    return `${field(record2, "id")}  ${field(record2, "health")}  ${field(record2, "name")} (${field(record2, "platform")}) cli=${field(record2, "cli_version")} sandbox=${field(posture, "sandbox")} network=${field(posture, "network")}${capabilitySet.length > 0 ? ` capabilities=${capabilitySet}` : ""} capacity=${field(capacity, "state")} account=${field(capacity, "account_alias")} freshness=${field(capacity, "freshness")}`;
+    return `${field(record2, "id")}  ${field(record2, "health")}  ${field(record2, "name")} (${field(record2, "platform")}) cli=${field(record2, "cli_version")} sandbox=${field(posture, "sandbox")} network=${field(posture, "network")}${capabilitySet.length > 0 ? ` capabilities=${capabilitySet}` : ""} execution=${field(execution, "state")} capable=${field(execution, "capable")} capacity=${field(capacity, "state")} account=${field(capacity, "account_alias")} freshness=${field(capacity, "freshness")}`;
   }).join("\n");
 }
 function renderRunnerStatus(output) {
   const record2 = asRecord(output);
   const posture = asRecord(record2.posture);
   const capacity = asRecord(record2.capacity);
+  const execution = asRecord(record2.execution);
   const capabilitySet = asArray(posture.capability_set).map((value) => String(value)).join(", ");
   const lines = [
     `${field(record2, "id")}  ${field(record2, "health")}  ${field(record2, "name")} (last heartbeat ${field(record2, "last_heartbeat_at")}).`,
     `cli_version: ${field(record2, "cli_version")}  sandbox: ${field(posture, "sandbox")}  network: ${field(posture, "network")}`,
+    `execution: ${field(execution, "state")}  capable: ${field(execution, "capable")}  execute_ready: ${field(execution, "execute_ready")}`,
     `capacity: ${field(capacity, "state")}  account: ${field(capacity, "account_alias")}  freshness: ${field(capacity, "freshness")}  rate_limited_until: ${field(capacity, "rate_limited_until")}`
   ];
   if (capabilitySet.length > 0) {
@@ -53412,7 +53441,7 @@ function formatSystemHealth(output) {
     `signals: off_track=${field(signals, "off_track_count")} pending=${field(signals, "pending_count")}`,
     `cascade: recommendations=${field(cascade, "recommendation_count")} warnings=${field(cascade, "warning_count")}`,
     `work_loop: open_issues=${field(workLoop, "open_issue_count")} friction_without_task=${field(workLoop, "friction_without_task_count")} open_or_stalled_tasks=${field(workLoop, "open_or_stalled_task_count")}`,
-    `connectivity: runners=${field(connectivity, "runner_count")} offline_runners=${field(connectivity, "offline_runner_count")} not_ready_runners=${field(connectivity, "not_execute_ready_runner_count")} integrations=${field(connectivity, "integration_count")} disconnected_integrations=${field(connectivity, "disconnected_integration_count")} failed_notifications=${field(connectivity, "failed_notification_count")}`,
+    `connectivity: runners=${field(connectivity, "runner_count")} offline_runners=${field(connectivity, "offline_runner_count")} not_ready_runners=${field(connectivity, "not_capable_runner_count")} integrations=${field(connectivity, "integration_count")} disconnected_integrations=${field(connectivity, "disconnected_integration_count")} failed_notifications=${field(connectivity, "failed_notification_count")}`,
     `sync: latest_brief=${field(sync, "latest_brief_at")} missing_latest_brief=${field(sync, "missing_latest_brief")} flagged_gaps=${field(sync, "flagged_gap_count")}`
   );
   return lines.join("\n");