@rosthq/cli 0.7.90 → 0.7.92

package/dist/generated/command-manifest.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"command-manifest.d.ts","sourceRoot":"","sources":["../../src/generated/command-manifest.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AAE3E,eAAO,MAAM,gBAAgB,EAAE,SAAS,oBAAoB,EAgR3D,CAAC"}
+{"version":3,"file":"command-manifest.d.ts","sourceRoot":"","sources":["../../src/generated/command-manifest.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AAE3E,eAAO,MAAM,gBAAgB,EAAE,SAAS,oBAAoB,EAiR3D,CAAC"}

package/dist/generator/groups.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"groups.d.ts","sourceRoot":"","sources":["../../src/generator/groups.ts"],"names":[],"mappings":"AAuCA,OAAO,EAAgB,KAAK,SAAS,EAAE,MAAM,YAAY,CAAC;AAM1D,eAAO,MAAM,kBAAkB,EAAE,MAAM,CAAC,MAAM,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAKhF,CAAC;AAwsCF,eAAO,MAAM,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAmPjD,CAAC"}
+{"version":3,"file":"groups.d.ts","sourceRoot":"","sources":["../../src/generator/groups.ts"],"names":[],"mappings":"AAuCA,OAAO,EAAgB,KAAK,SAAS,EAAE,MAAM,YAAY,CAAC;AAM1D,eAAO,MAAM,kBAAkB,EAAE,MAAM,CAAC,MAAM,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAKhF,CAAC;AAitCF,eAAO,MAAM,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAmPjD,CAAC"}

package/dist/index.js

@@ -43804,6 +43804,29 @@ var frictionBulkResolveOutputSchema = external_exports.object({
   failed_count: external_exports.number().int().nonnegative(),
   total: external_exports.number().int().nonnegative()
 }).strict();
+var runHeartbeatStateSchema = external_exports.enum(["working", "quiet_healthy", "recovered", "stalled"]);
+var agentRunHeartbeatsInputSchema = external_exports.object({
+  seat_ids: external_exports.array(uuidSchema14).min(1).max(200).optional()
+}).strict();
+var runHeartbeatSeatRollupSchema = external_exports.object({
+  seat_id: uuidSchema14,
+  state: runHeartbeatStateSchema,
+  stalled: external_exports.boolean(),
+  run_count: external_exports.number().int().nonnegative(),
+  stalled_run_count: external_exports.number().int().nonnegative(),
+  current_phase: external_exports.string().nullable(),
+  last_progress_at: isoDateTime4.nullable(),
+  expected_next_at: isoDateTime4.nullable(),
+  stall_after_at: isoDateTime4.nullable(),
+  done_count: external_exports.number().int().nonnegative(),
+  in_flight_count: external_exports.number().int().nonnegative(),
+  queued_count: external_exports.number().int().nonnegative(),
+  lease_remaining_ms: external_exports.number().int().nullable(),
+  reasons: external_exports.array(external_exports.string())
+}).strict();
+var agentRunHeartbeatsOutputSchema = external_exports.object({
+  seats: external_exports.array(runHeartbeatSeatRollupSchema)
+}).strict();
 
 // ../../packages/protocol/src/working-files.ts
 var WORKING_FILE_MAX_PATH_CHARS = 512;
@@ -46173,6 +46196,19 @@ var syncBriefCascadeAtRiskSchema = external_exports.object({
   classification: external_exports.enum(["at_risk", "projected_miss"]),
   behind_days: external_exports.number().nullable()
 }).strict();
+var syncBriefRunHeartbeatStalledSeatSchema = external_exports.object({
+  seat_id: uuidSchema17,
+  current_phase: external_exports.string().nullable(),
+  stalled_run_count: external_exports.number().int().nonnegative()
+}).strict();
+var syncBriefRunHeartbeatRollupSchema = external_exports.object({
+  total_runs_tracked: external_exports.number().int().nonnegative(),
+  working_seat_count: external_exports.number().int().nonnegative(),
+  quiet_healthy_seat_count: external_exports.number().int().nonnegative(),
+  stalled_seat_count: external_exports.number().int().nonnegative(),
+  recovered_seat_count: external_exports.number().int().nonnegative(),
+  stalled_seats: external_exports.array(syncBriefRunHeartbeatStalledSeatSchema)
+}).strict();
 var syncBriefAgentActivitySchema = external_exports.object({
   agent_id: uuidSchema17,
   seat_id: uuidSchema17,
@@ -46223,7 +46259,13 @@ var syncBriefSchema = external_exports.object({
       item: syncBriefActionItemTrendSchema,
       flagged_gaps: external_exports.array(syncBriefGapSchema)
     }).strict().optional(),
-    cascade_at_risk: sectionSchema(syncBriefCascadeAtRiskSchema).optional()
+    cascade_at_risk: sectionSchema(syncBriefCascadeAtRiskSchema).optional(),
+    // DER-1721: optional so prior briefs / fixtures without a run-heartbeat
+    // roll-up still validate; populated by buildSyncBriefDocument going forward.
+    run_heartbeat: external_exports.object({
+      item: syncBriefRunHeartbeatRollupSchema,
+      flagged_gaps: external_exports.array(syncBriefGapSchema)
+    }).strict().optional()
   }).strict(),
   flagged_gaps: external_exports.array(syncBriefGapSchema),
   sources: external_exports.array(external_exports.string().min(1))
@@ -46341,11 +46383,16 @@ var statusEventPayloadSchema = external_exports.object({
     note: external_exports.string().min(1).optional()
   }).strict()).optional()
 }).strict();
+var escalationCategorySchema = external_exports.enum(["safety_refusal"]);
 var escalationEventPayloadSchema = external_exports.object({
   reason: external_exports.string().min(1),
   charter_clause: external_exports.string().min(1),
   evidence: evidenceSchema,
-  recommended_action: external_exports.string().min(1).optional()
+  recommended_action: external_exports.string().min(1).optional(),
+  // DER-1848: reason-adjacent category. Optional so every existing escalation event
+  // (and every ordinary held call) validates unchanged; present only when the agent
+  // explicitly escalated with a category (today: a safety refusal).
+  category: escalationCategorySchema.optional()
 }).strict();
 var issueEventPayloadSchema = external_exports.object({
   summary: external_exports.string().min(1),
@@ -46504,6 +46551,10 @@ var stewardReplayActionSummarySchema = external_exports.object({
   tool_name: external_exports.string(),
   run_id: uuidSchema20
 }).strict();
+var stewardProposedToolCallSchema = external_exports.object({
+  tool_name: external_exports.string(),
+  args_summary: external_exports.unknown()
+}).strict();
 var stewardEscalationSchema = external_exports.object({
   id: uuidSchema20,
   seat_id: uuidSchema20,
@@ -46513,11 +46564,19 @@ var stewardEscalationSchema = external_exports.object({
   steward_seat_name: external_exports.string(),
   reason: external_exports.string(),
   charter_clause: external_exports.string(),
+  // DER-1848: the first-class escalation category, or null for an ordinary held call.
+  // `safety_refusal` = the agent explicitly declined the task on safety grounds, so
+  // every read surface (command/MCP/web) can render "refused (safety)" distinctly from
+  // a routine held tool call. Sourced from the escalation event payload (no DB column).
+  category: escalationCategorySchema.nullable(),
   // DER-1634: secret-scrubbed evidence the agent attached when it escalated (the DB
   // scrubs it at write time; read projections re-scrub defensively — invariant #5).
   evidence: external_exports.unknown(),
   // DER-1634: scrubbed summary of the durable replay action, or null when there is none.
   replay_action_summary: stewardReplayActionSummarySchema.nullable(),
+  // DER-1818: the held tool call the steward is approving (present-only convention —
+  // omitted entirely when the escalation has no durable replay action).
+  proposed_tool_call: stewardProposedToolCallSchema.optional(),
   recommended_action: external_exports.string().nullable(),
   status: escalationStatusSchema,
   decided_by: uuidSchema20.nullable(),
@@ -48242,7 +48301,7 @@ External connectors are being rolled out provider by provider, conservatively (r
     order: 48,
     title: "CLI and MCP installation guide",
     summary: "Install the public CLI, register remote token-backed MCP clients, and find the full command and tool catalog.",
-    version: "2026-07-16.4",
+    version: "2026-07-16.6",
     public: true,
     audiences: ["human", "cli", "mcp", "in_app_agent"],
     stages: ["company_setup", "staffing"],
@@ -48848,6 +48907,7 @@ Several rows here are seat-operating commands (\`task.create\`, the \`signal.*\`
 | \`rost_list_agent_fleet\` | \`agent.list_fleet\` | Read every staffed agent seat at once: lane, live state, last real turn, 24h/7d real turns, measurable status, escalations, and 7-day spend. | Tenant | Call with \`{}\`; counts use the same seat-run association as \`agent.list_runs\`, with sandbox dry runs excluded from real turns. |
 | \`rost_get_dogfood_fleet_health_digest\` | \`agent.fleet_digest\` | Capture the daily dogfood fleet-health digest: live/idle state, 24h/7d turns, spend, recent failed runs, unresolved errors, failed notifications, and next actions. | Tenant | Call with \`{}\`; optional \`window_hours\` bounds recent failed-run evidence, while \`error_limit\` caps linked evidence per seat. |
 | \`rost_system_health\` | \`system.health\` | Read the scoped system-health snapshot across agent runs, unresolved errors, Signals, Cascade setup, work loop, integrations, runners, notifications, and Sync Brief readiness. | Tenant, member, or seat token | Call with \`{}\`; optional \`seat_id\` narrows inside the caller's server-derived scope. |
+| \`rost_get_run_heartbeats\` | \`agent.run_heartbeats\` | Read the per-seat run-heartbeat roll-up (quiet-but-healthy vs stalled) for long-running agent programs. | Tenant | Call with \`{}\`; optional \`seat_ids\` narrows to specific seats. |
 | \`rost_run_agent_now\` | \`agent.run_now\` | Queue an immediate run for a live staffed agent without changing its saved schedule; cloud lane dispatches to the executor and runner lane queues for the paired runner. | Tenant | Call with \`{"seat_id":"<seat-id>"}\`. |
 | \`rost_list_agent_runs\` | \`agent.list_runs\` | Read a seat's agent run history (status, lane, model, cost, per-run Skill activation, tool-call, guard-denied, and guard-held counts) plus the seat's run/tool-call rollup including held-action count. | Seat or tenant-admin | Call with \`{"seat_id":"<seat-id>"}\`; pass \`limit\` for a deeper window. |
 | \`rost_get_agent_run_diagnostics\` | \`agent.get_run\` | Read one run's diagnostic record: transcript reference, token/cost usage, outcome, linked product-visible run errors, and loaded Skill activation file metadata. File hashes/sizes identify the immutable source package, while model prompt text may be bounded or truncated. | Seat or tenant-admin | Call with \`{"seat_id":"<seat-id>","run_id":"<run-id>"}\`. |
@@ -48957,8 +49017,8 @@ Several rows here are seat-operating commands (\`task.create\`, the \`signal.*\`
 | \`rost_start_sync_run\` | \`sync.run.start\` | Ensure a Sync Brief exists so the meeting can begin. | Tenant | Call with \`{}\`. |
 | \`rost_complete_sync_run\` | \`sync.run.complete\` | Record that the Sync meeting completed (idempotent). | Tenant | Call with \`{"sync_brief_id":"<id>"}\`. |
 | \`rost_assign_sync_follow_up\` | \`sync.item.assign\` | Create a follow-up task from a Sync agenda item. | Tenant | Call with brief, owner seat, title, description. |
-| \`rost_list_escalations\` | \`escalation.list\` | List Steward queue escalations (own steward chain for humans, own seat for agents). | Seat or tenant-admin | Call with \`{}\` or \`{"include_decided":true}\`. |
-| \`rost_get_escalation\` | \`escalation.get\` | Read one escalation's secret-scrubbed evidence, recommendation, decision state, and \`replay_action_summary\` (the held tool + originating run a steward approval would replay \u2014 never the raw args). | Seat or tenant-admin | Call with \`{"id":"<escalation-id>"}\`. Resolve/reject are human-only and not exposed over MCP. |
+| \`rost_list_escalations\` | \`escalation.list\` | List Steward queue escalations (own steward chain for humans, own seat for agents). Each escalation that holds a replayable tool call also carries \`proposed_tool_call\` (\`{ tool_name, args_summary }\`, secret-scrubbed \u2014 never raw args). | Seat or tenant-admin | Call with \`{}\` or \`{"include_decided":true}\`. |
+| \`rost_get_escalation\` | \`escalation.get\` | Read one escalation's secret-scrubbed evidence, recommendation, decision state, \`replay_action_summary\` (the held tool + originating run a steward approval would replay \u2014 never the raw args), and \`proposed_tool_call\` (the same held call's \`{ tool_name, args_summary }\` payload, secret-scrubbed, present only when there is one). | Seat or tenant-admin | Call with \`{"id":"<escalation-id>"}\`. Resolve/reject are human-only and not exposed over MCP. |
 | \`rost_find_stale_escalations\` | \`escalation.stale_candidates\` | List aged open escalations on the caller's steward chain that still reference a concrete DER issue or PR, with a per-row confidence tier and evidence. Read-only. | Tenant | Call with optional \`stale_after_days\` and \`limit\`. The bulk override (\`escalation.bulk_resolve\`) is human-only and not exposed over MCP. |
 | \`rost_check_compass_alignment\` | \`compass.alignment\` | Advisory drift check: scores whether cycle goals still ladder to the active vision and flags orphan/contradictory goals. Read-only \u2014 it never edits the Compass or any goal. | Tenant | Call with \`{}\`. |
 | \`rost_team_health_score\` | \`team.health_score\` | Read the single rolled-up 0-100 team-health score (latest month) with its band and label. | Tenant | Call with \`{}\`. |
@@ -49843,7 +49903,7 @@ Resolving Friction should produce one of four outcomes: a decision, a task, a Ch
     order: 70,
     title: "Steward queue guide",
     summary: "How Stewards review escalations, approve agent boundaries, and keep agents accountable.",
-    version: "2026-07-16.1",
+    version: "2026-07-16.2",
     public: true,
     audiences: ["human", "cli", "mcp", "in_app_agent"],
     stages: ["staffing", "operating_rhythm"],
@@ -49888,6 +49948,10 @@ The Steward page itself only lists charter-clause escalations (Queue, Escalation
 
 An escalation reaches you the same way no matter how the agent raised it \u2014 in a chat or CLI session, or on its own scheduled cloud run. When the agent stops at a boundary it opens the queue item and sends a notification to the accountable human along the steward chain, preferring a connected Slack channel and falling back to email. If no human occupies the agent's seat, the chain walks up to the next Steward. Delivery is idempotent: a retried run never notifies you twice for the same escalation, and the notification carries only summarized, redacted evidence \u2014 never secret material.
 
+## Safety refusals read distinctly
+
+When an agent declines a task on safety grounds it raises a first-class **safety refusal**, not a silent stall. The escalation carries a \`category\` of \`safety_refusal\` that every read surface (the queue reads, the CLI/MCP \`escalation.list\`/\`escalation.get\` output, and the steward notification) shows differently from an ordinary held tool call \u2014 the notification reads "refused (safety)" and names that the agent declined and is waiting on you. A cloud run that ends because the agent refused is labeled "declined (safety)" in its run summary rather than reported as a plain success, so a refusal is always visible as a refusal.
+
 ## Where notifications land
 
 Every notification sent to you \u2014 escalations, approval requests, sync briefs, and your daily digest \u2014 also appears in your in-app Inbox, with unread state you can clear. A Slack or email delivery that fails is retried automatically on a bounded schedule; once it can no longer be delivered it stays visible in the Inbox rather than being lost. A once-a-day digest rolls up the day's deliverables, open approvals, and exceptions into a single message, so a quiet day stays quiet and a busy one is summarized in one place.
@@ -52295,6 +52359,7 @@ var COMMAND_MANIFEST = [
   { "id": "agent.pause", "namespace": "agent", "action": "pause", "title": "Pause agent", "description": "Pause a live agent so it stops scheduled and on-demand runs. Reversible with agent.resume.", "requiredScope": "tenant", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": true }, { "name": "reason", "flag": "reason", "type": "string", "required": false }], "hasComplexInput": false, "help": "Pause a live agent so it stops scheduled and on-demand runs; queued work orders are expired and a paused agent refuses to run until resumed. Reversible, unlike agent.decommission." },
   { "id": "agent.resume", "namespace": "agent", "action": "resume", "title": "Resume agent", "description": "Resume a paused agent back to live. Blocks if the steward chain no longer resolves to a human.", "requiredScope": "tenant", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": true }, { "name": "reason", "flag": "reason", "type": "string", "required": false }], "hasComplexInput": false, "help": "Resume a paused agent back to live; the no-orphan guard blocks a resume whose steward chain no longer resolves to a human." },
   { "id": "agent.run_dry_run", "namespace": "agent", "action": "run_dry_run", "title": "Run agent dry run", "description": "Run the sandbox dry run for a draft agent. Durable and idempotent per Charter version; a passed result is reused, never re-run.", "requiredScope": "seat", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": true }, { "name": "charter_version_id", "flag": "charter-version-id", "type": "string", "required": true }], "hasComplexInput": false, "help": "Run the sandbox dry run for a draft agent after the manifest is signed; the result is durable and idempotent per Charter version, and a passed run is reused.", "example": { "seat_id": "0190aaaa-aaaa-7aaa-8aaa-aaaaaaaaaaaa", "charter_version_id": "0190cccc-cccc-7ccc-8ccc-cccccccccccc" } },
+  { "id": "agent.run_heartbeats", "namespace": "agent", "action": "run_heartbeats", "title": "Get run heartbeats", "description": "Reads the per-seat run-heartbeat roll-up (quiet-but-healthy vs stalled) for long-running agent programs.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "seat_ids", "flag": "seat-ids", "type": "array", "required": false, "itemType": "string" }], "hasComplexInput": false, "help": "Read the per-seat run-heartbeat roll-up to tell a quiet-but-healthy long-running agent program apart from a stalled one." },
   { "id": "agent.run_now", "namespace": "agent", "action": "run_now", "title": "Run agent now", "description": "Queue and dispatch an immediate work order for a live cloud or runner agent on a seat.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": true }, { "name": "task_id", "flag": "task-id", "type": "string", "required": false }], "hasComplexInput": false, "help": "Queue and dispatch an immediate live agent run without changing the agent's saved schedule." },
   { "id": "agent.show_markdown", "namespace": "agent", "action": "show_markdown", "title": "Show agent setup as markdown", "description": "Compose a seat's agent setup, steward, model, tools, and Charter into a clean, human-skimmable markdown card for review.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": true }], "hasComplexInput": false, "help": "Render a seat's agent setup, model, steward, tools, and Charter as a clean markdown card to show your human a quick review." },
   { "id": "agent.status", "namespace": "agent", "action": "status", "title": "Get agent status", "description": "Return the agent occupancy, lane, schedule, live/offline state, steward chain, dry-run result, and Runner availability for a seat.", "requiredScope": "seat", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": true }], "hasComplexInput": false, "help": "Check an agent's lane, live state, steward chain, dry-run result, and Runner availability before relying on it." },
@@ -52351,7 +52416,7 @@ var COMMAND_MANIFEST = [
   { "id": "escalation.bulk_resolve", "namespace": "escalation", "action": "bulk_resolve", "title": "Bulk resolve escalations", "description": "Override (safely close) a batch of stale open escalations in one human-confirmed action, with a required reason. Each escalation is decided independently (partial success) and writes its own human decision; already-decided, not-routed, or missing ids are skipped. Agents cannot bulk-resolve.", "requiredScope": "tenant", "confirmation": "human_required", "exposeOverMcp": false, "fields": [{ "name": "escalation_ids", "flag": "escalation-ids", "type": "array", "required": true, "itemType": "string" }, { "name": "reason", "flag": "reason", "type": "string", "required": true }], "hasComplexInput": false, "help": "Override (safely close) a batch of stale open escalations in one human-confirmed action; each records its own human decision and already-decided, not-routed, or missing ids are skipped. Agents cannot bulk-resolve." },
   { "id": "escalation.get", "namespace": "escalation", "action": "get", "title": "Get escalation", "description": "Read a single escalation the caller is allowed to see (own steward chain for humans, own seat for agents).", "requiredScope": "seat", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "id", "flag": "id", "type": "string", "required": true }], "hasComplexInput": false, "help": "Read one escalation's evidence and recommendation before a human resolves or rejects it." },
   { "id": "escalation.list", "namespace": "escalation", "action": "list", "title": "List escalations", "description": "List Steward queue escalations routed to the caller's steward chain (human) or raised by the caller's seat (agent).", "requiredScope": "seat", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "include_decided", "flag": "include-decided", "type": "boolean", "required": false }], "hasComplexInput": false, "help": "List Steward queue escalations (own chain for humans, own seat for agents) before resolving or routing them." },
-  { "id": "escalation.raise", "namespace": "escalation", "action": "raise", "title": "Raise escalation", "description": "Emit an escalation event and open a Steward queue item for the acting seat.", "requiredScope": "seat", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "reason", "flag": "reason", "type": "string", "required": true }, { "name": "charter_clause", "flag": "charter-clause", "type": "string", "required": true }, { "name": "recommended_action", "flag": "recommended-action", "type": "string", "required": false }], "hasComplexInput": true, "help": "Raise an escalation to the seat's Steward when a decision exceeds the seat's authority; humans decide." },
+  { "id": "escalation.raise", "namespace": "escalation", "action": "raise", "title": "Raise escalation", "description": "Emit an escalation event and open a Steward queue item for the acting seat.", "requiredScope": "seat", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "reason", "flag": "reason", "type": "string", "required": true }, { "name": "charter_clause", "flag": "charter-clause", "type": "string", "required": true }, { "name": "recommended_action", "flag": "recommended-action", "type": "string", "required": false }, { "name": "category", "flag": "category", "type": "enum", "required": false, "enumValues": ["safety_refusal"] }], "hasComplexInput": true, "help": "Raise an escalation to the seat's Steward when a decision exceeds the seat's authority; humans decide." },
   { "id": "escalation.reject", "namespace": "escalation", "action": "reject", "title": "Reject escalation", "description": "Override an open escalation so the agent must not proceed. Writes a human decision; agents cannot reject.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": false, "fields": [{ "name": "id", "flag": "id", "type": "string", "required": true }, { "name": "rationale", "flag": "rationale", "type": "string", "required": false }], "hasComplexInput": false, "help": "Reject (override) an escalation so the agent must not proceed; the decision records the human decider. Agents cannot reject." },
   { "id": "escalation.resolve", "namespace": "escalation", "action": "resolve", "title": "Resolve escalation", "description": "Approve an open escalation (or convert it to Friction). Writes a human decision; agents cannot resolve.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": false, "fields": [{ "name": "id", "flag": "id", "type": "string", "required": true }, { "name": "action", "flag": "action", "type": "enum", "required": false, "enumValues": ["approve", "convert_to_issue"] }, { "name": "rationale", "flag": "rationale", "type": "string", "required": false }], "hasComplexInput": false, "help": "Resolve an escalation as a human Steward; the decision records decided_by as the approving human. Agents cannot resolve." },
   { "id": "escalation.stale_candidates", "namespace": "escalation", "action": "stale_candidates", "title": "Find stale escalations", "description": "List open escalations routed to the caller's steward chain that have aged and still reference a concrete DER issue or PR, with a per-row confidence tier and evidence. Read-only \u2014 it never decides anything.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "stale_after_days", "flag": "stale-after-days", "type": "integer", "required": false }, { "name": "limit", "flag": "limit", "type": "integer", "required": false }], "hasComplexInput": false, "help": "List aged open escalations in the caller's steward chain that still reference a concrete DER issue or PR \u2014 candidates for a bulk override. Read-only." },
@@ -53257,6 +53322,9 @@ function renderConfirmationList(output) {
     return `${field(record2, "id")}  ${field(record2, "risk_level")}  ${field(record2, "command_id")}  ${field(record2, "summary")}`;
   }).join("\n");
 }
+function safetyRefusalTag(record2) {
+  return record2.category === "safety_refusal" ? "[safety refusal] " : "";
+}
 function renderEscalationList(output) {
   const escalations = asArray(asRecord(output).escalations);
   if (escalations.length === 0) {
@@ -53264,12 +53332,12 @@ function renderEscalationList(output) {
   }
   return escalations.map((escalation) => {
     const record2 = asRecord(escalation);
-    return `${field(record2, "id")}  ${field(record2, "status")}  ${field(record2, "seat_name")}: ${field(record2, "reason")}`;
+    return `${field(record2, "id")}  ${field(record2, "status")}  ${safetyRefusalTag(record2)}${field(record2, "seat_name")}: ${field(record2, "reason")}`;
   }).join("\n");
 }
 function renderEscalationGet(output) {
   const record2 = asRecord(asRecord(output).escalation);
-  return `${field(record2, "id")}  ${field(record2, "status")}  ${field(record2, "seat_name")}
+  return `${field(record2, "id")}  ${field(record2, "status")}  ${safetyRefusalTag(record2)}${field(record2, "seat_name")}
 reason: ${field(record2, "reason")}
 recommended: ${field(record2, "recommended_action")}`;
 }