@rosthq/cli 0.7.91 → 0.7.93

package/dist/generated/command-manifest.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"command-manifest.d.ts","sourceRoot":"","sources":["../../src/generated/command-manifest.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AAE3E,eAAO,MAAM,gBAAgB,EAAE,SAAS,oBAAoB,EAgR3D,CAAC"}
+{"version":3,"file":"command-manifest.d.ts","sourceRoot":"","sources":["../../src/generated/command-manifest.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AAE3E,eAAO,MAAM,gBAAgB,EAAE,SAAS,oBAAoB,EAkR3D,CAAC"}

package/dist/index.js

@@ -43804,6 +43804,29 @@ var frictionBulkResolveOutputSchema = external_exports.object({
   failed_count: external_exports.number().int().nonnegative(),
   total: external_exports.number().int().nonnegative()
 }).strict();
+var runHeartbeatStateSchema = external_exports.enum(["working", "quiet_healthy", "recovered", "stalled"]);
+var agentRunHeartbeatsInputSchema = external_exports.object({
+  seat_ids: external_exports.array(uuidSchema14).min(1).max(200).optional()
+}).strict();
+var runHeartbeatSeatRollupSchema = external_exports.object({
+  seat_id: uuidSchema14,
+  state: runHeartbeatStateSchema,
+  stalled: external_exports.boolean(),
+  run_count: external_exports.number().int().nonnegative(),
+  stalled_run_count: external_exports.number().int().nonnegative(),
+  current_phase: external_exports.string().nullable(),
+  last_progress_at: isoDateTime4.nullable(),
+  expected_next_at: isoDateTime4.nullable(),
+  stall_after_at: isoDateTime4.nullable(),
+  done_count: external_exports.number().int().nonnegative(),
+  in_flight_count: external_exports.number().int().nonnegative(),
+  queued_count: external_exports.number().int().nonnegative(),
+  lease_remaining_ms: external_exports.number().int().nullable(),
+  reasons: external_exports.array(external_exports.string())
+}).strict();
+var agentRunHeartbeatsOutputSchema = external_exports.object({
+  seats: external_exports.array(runHeartbeatSeatRollupSchema)
+}).strict();
 
 // ../../packages/protocol/src/working-files.ts
 var WORKING_FILE_MAX_PATH_CHARS = 512;
@@ -44966,6 +44989,27 @@ var softwareDispatchPreviewItemSchema = external_exports.object({
   hold_reason: softwareDispatchHoldReasonSchema.nullable(),
   hold_detail: external_exports.string().nullable()
 }).strict();
+var softwareTouchSetCollisionKindSchema = external_exports.enum([
+  "same_file",
+  "same_package",
+  "same_version_holder"
+]);
+var softwareTouchSetRefSchema = external_exports.object({ id: external_exports.string().min(1), label: external_exports.string() }).strict();
+var softwareTouchSetCollisionSchema = external_exports.object({
+  a: softwareTouchSetRefSchema,
+  b: softwareTouchSetRefSchema,
+  kind: softwareTouchSetCollisionKindSchema,
+  // The concrete overlap basis: shared file paths (`same_file`), shared package ids
+  // (`same_package`), or the contended version-holder surfaces (`same_version_holder`).
+  // Always non-empty — a collision without an overlap basis is never emitted.
+  overlap: external_exports.array(external_exports.string()).min(1)
+}).strict();
+var softwareCrossRequestCollisionGroupSchema = external_exports.object({
+  software_project_id: uuid11,
+  requests: external_exports.array(softwareTouchSetRefSchema),
+  collisions: external_exports.array(softwareTouchSetCollisionSchema),
+  unknown: external_exports.array(softwareTouchSetRefSchema)
+}).strict();
 var softwareDispatchPreviewSchema = external_exports.object({
   status: external_exports.enum(["ready", "grooming", "held"]),
   digest: external_exports.string().min(1),
@@ -44977,6 +45021,11 @@ var softwareDispatchPreviewSchema = external_exports.object({
     to_task_key: external_exports.string()
   }).strict()).default([]),
   serial_lanes: external_exports.array(external_exports.string()).default([]),
+  // DER-1545: advisory intra-request touch-set collisions derived from the tasks'
+  // declared `files_likely` (validates the planner's `parallelizable` claims), plus the
+  // tasks whose touch-set is undeclared (rendered "unknown", never fabricated).
+  file_collisions: external_exports.array(softwareTouchSetCollisionSchema).default([]),
+  unknown_touch_sets: external_exports.array(softwareTouchSetRefSchema).default([]),
   estimated_turns: external_exports.number().int().nullable(),
   runner_requirements: softwareDispatchPreviewRunnerRequirementSchema,
   authority_budget_envelope: external_exports.object({
@@ -45257,6 +45306,26 @@ var softwareGateDecideOutputSchema = external_exports.object({
   resolved_by_user_id: uuid11,
   decision_id: uuid11.nullable()
 });
+var softwareDispatchSerializeInputSchema = external_exports.object({
+  build_request_id: uuid11,
+  // The task that must run FIRST (the dependency target).
+  before_task_key: external_exports.string().trim().min(1).max(200),
+  // The task that gains the depends_on edge and runs AFTER `before_task_key`.
+  after_task_key: external_exports.string().trim().min(1).max(200),
+  rationale: external_exports.string().trim().min(1).max(2e3).optional()
+}).strict().refine((value) => value.before_task_key !== value.after_task_key, {
+  message: "before_task_key and after_task_key must differ.",
+  path: ["after_task_key"]
+});
+var softwareDispatchSerializeOutputSchema = external_exports.object({
+  build_request_id: uuid11,
+  before_task_key: external_exports.string(),
+  after_task_key: external_exports.string(),
+  // false when the edge already existed (idempotent no-op) — still a valid, audited call.
+  edge_added: external_exports.boolean(),
+  decision_id: uuid11.nullable(),
+  event_id: uuid11.nullable()
+}).strict();
 var forgeClarificationAnswer = external_exports.object({
   question: external_exports.string().trim().min(1).max(2e3),
   answer: external_exports.string().trim().min(1).max(4e3)
@@ -46173,6 +46242,19 @@ var syncBriefCascadeAtRiskSchema = external_exports.object({
   classification: external_exports.enum(["at_risk", "projected_miss"]),
   behind_days: external_exports.number().nullable()
 }).strict();
+var syncBriefRunHeartbeatStalledSeatSchema = external_exports.object({
+  seat_id: uuidSchema17,
+  current_phase: external_exports.string().nullable(),
+  stalled_run_count: external_exports.number().int().nonnegative()
+}).strict();
+var syncBriefRunHeartbeatRollupSchema = external_exports.object({
+  total_runs_tracked: external_exports.number().int().nonnegative(),
+  working_seat_count: external_exports.number().int().nonnegative(),
+  quiet_healthy_seat_count: external_exports.number().int().nonnegative(),
+  stalled_seat_count: external_exports.number().int().nonnegative(),
+  recovered_seat_count: external_exports.number().int().nonnegative(),
+  stalled_seats: external_exports.array(syncBriefRunHeartbeatStalledSeatSchema)
+}).strict();
 var syncBriefAgentActivitySchema = external_exports.object({
   agent_id: uuidSchema17,
   seat_id: uuidSchema17,
@@ -46223,7 +46305,13 @@ var syncBriefSchema = external_exports.object({
       item: syncBriefActionItemTrendSchema,
       flagged_gaps: external_exports.array(syncBriefGapSchema)
     }).strict().optional(),
-    cascade_at_risk: sectionSchema(syncBriefCascadeAtRiskSchema).optional()
+    cascade_at_risk: sectionSchema(syncBriefCascadeAtRiskSchema).optional(),
+    // DER-1721: optional so prior briefs / fixtures without a run-heartbeat
+    // roll-up still validate; populated by buildSyncBriefDocument going forward.
+    run_heartbeat: external_exports.object({
+      item: syncBriefRunHeartbeatRollupSchema,
+      flagged_gaps: external_exports.array(syncBriefGapSchema)
+    }).strict().optional()
   }).strict(),
   flagged_gaps: external_exports.array(syncBriefGapSchema),
   sources: external_exports.array(external_exports.string().min(1))
@@ -48259,7 +48347,7 @@ External connectors are being rolled out provider by provider, conservatively (r
     order: 48,
     title: "CLI and MCP installation guide",
     summary: "Install the public CLI, register remote token-backed MCP clients, and find the full command and tool catalog.",
-    version: "2026-07-16.5",
+    version: "2026-07-16.7",
     public: true,
     audiences: ["human", "cli", "mcp", "in_app_agent"],
     stages: ["company_setup", "staffing"],
@@ -48865,6 +48953,7 @@ Several rows here are seat-operating commands (\`task.create\`, the \`signal.*\`
 | \`rost_list_agent_fleet\` | \`agent.list_fleet\` | Read every staffed agent seat at once: lane, live state, last real turn, 24h/7d real turns, measurable status, escalations, and 7-day spend. | Tenant | Call with \`{}\`; counts use the same seat-run association as \`agent.list_runs\`, with sandbox dry runs excluded from real turns. |
 | \`rost_get_dogfood_fleet_health_digest\` | \`agent.fleet_digest\` | Capture the daily dogfood fleet-health digest: live/idle state, 24h/7d turns, spend, recent failed runs, unresolved errors, failed notifications, and next actions. | Tenant | Call with \`{}\`; optional \`window_hours\` bounds recent failed-run evidence, while \`error_limit\` caps linked evidence per seat. |
 | \`rost_system_health\` | \`system.health\` | Read the scoped system-health snapshot across agent runs, unresolved errors, Signals, Cascade setup, work loop, integrations, runners, notifications, and Sync Brief readiness. | Tenant, member, or seat token | Call with \`{}\`; optional \`seat_id\` narrows inside the caller's server-derived scope. |
+| \`rost_get_run_heartbeats\` | \`agent.run_heartbeats\` | Read the per-seat run-heartbeat roll-up (quiet-but-healthy vs stalled) for long-running agent programs. | Tenant | Call with \`{}\`; optional \`seat_ids\` narrows to specific seats. |
 | \`rost_run_agent_now\` | \`agent.run_now\` | Queue an immediate run for a live staffed agent without changing its saved schedule; cloud lane dispatches to the executor and runner lane queues for the paired runner. | Tenant | Call with \`{"seat_id":"<seat-id>"}\`. |
 | \`rost_list_agent_runs\` | \`agent.list_runs\` | Read a seat's agent run history (status, lane, model, cost, per-run Skill activation, tool-call, guard-denied, and guard-held counts) plus the seat's run/tool-call rollup including held-action count. | Seat or tenant-admin | Call with \`{"seat_id":"<seat-id>"}\`; pass \`limit\` for a deeper window. |
 | \`rost_get_agent_run_diagnostics\` | \`agent.get_run\` | Read one run's diagnostic record: transcript reference, token/cost usage, outcome, linked product-visible run errors, and loaded Skill activation file metadata. File hashes/sizes identify the immutable source package, while model prompt text may be bounded or truncated. | Seat or tenant-admin | Call with \`{"seat_id":"<seat-id>","run_id":"<run-id>"}\`. |
@@ -49025,6 +49114,7 @@ Several rows here are seat-operating commands (\`task.create\`, the \`signal.*\`
 | \`rost_show_a_forge_build_request\` | \`software_factory.request.show\` | The Forge request detail: the request, current phase, signed dispatch preview, phase-run history, gates, and current \`scheduler_state\` remediation. Read-only; requires the Forge add-on. | Tenant | Call with \`{"build_request_id":"<request-id>"}\`. |
 | \`rost_advance_a_forge_build_request_phase\` | \`software_factory.phase.advance\` | Advance a build request to its next phase; the server enforces the closed phase state machine and rejects an illegal transition. | Tenant | Call with \`{"build_request_id":"<request-id>","to_phase":"discovery_scoping"}\`. |
 | \`rost_decide_a_forge_gate\` | \`software_factory.gate.decide\` | A human approves or rejects a Forge gate; an agent caller routes to \`/approvals\` and can never self-approve. Sensitive gates record a linked human decision. | Tenant | Call with \`{"gate_id":"<gate-id>","decision":"approve"}\`; non-interactive callers receive a confirmation handoff. |
+| \`rost_serialize_a_forge_dispatch_collision\` | \`software_factory.dispatch.serialize\` | A human appends a tightening depends_on edge to serialize two colliding Forge tasks (advisory-driven; never auto-blocks). Records a human decision. | Tenant-admin | Call with \`{"build_request_id":"<request-id>","before_task_key":"<key>","after_task_key":"<key>"}\`; non-interactive callers receive a confirmation handoff. |
 | \`rost_answer_forge_plan_clarifications\` | \`software_factory.request.answer_clarification\` | Write structured human answers to a draft plan's clarifying questions and optionally mark it ready for plan review; answers append to the versioned planning artifact and never widen authority or automation mode. | Tenant | Call with \`{"build_request_id":"<request-id>","answers":[{"question":"Which database?","answer":"Postgres"}],"mark_ready_for_plan_review":true}\`. |
 | \`rost_approve_a_forge_plan\` | \`software_factory.plan.approve\` | A human approves the current plan at the plan_review gate; records a human decision and advances the request to implementation. Owner-only and human-gated. | Tenant-admin | Call with \`{"build_request_id":"<request-id>"}\`; non-interactive callers receive a confirmation handoff. |
 | \`rost_reject_a_forge_plan\` | \`software_factory.plan.reject\` | A human rejects the current plan (with a required rationale) and routes the request back to discovery/scoping for re-planning. Owner-only and human-gated. | Tenant-admin | Call with \`{"build_request_id":"<request-id>","rationale":"Scope too broad"}\`; non-interactive callers receive a confirmation handoff. |
@@ -52316,6 +52406,7 @@ var COMMAND_MANIFEST = [
   { "id": "agent.pause", "namespace": "agent", "action": "pause", "title": "Pause agent", "description": "Pause a live agent so it stops scheduled and on-demand runs. Reversible with agent.resume.", "requiredScope": "tenant", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": true }, { "name": "reason", "flag": "reason", "type": "string", "required": false }], "hasComplexInput": false, "help": "Pause a live agent so it stops scheduled and on-demand runs; queued work orders are expired and a paused agent refuses to run until resumed. Reversible, unlike agent.decommission." },
   { "id": "agent.resume", "namespace": "agent", "action": "resume", "title": "Resume agent", "description": "Resume a paused agent back to live. Blocks if the steward chain no longer resolves to a human.", "requiredScope": "tenant", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": true }, { "name": "reason", "flag": "reason", "type": "string", "required": false }], "hasComplexInput": false, "help": "Resume a paused agent back to live; the no-orphan guard blocks a resume whose steward chain no longer resolves to a human." },
   { "id": "agent.run_dry_run", "namespace": "agent", "action": "run_dry_run", "title": "Run agent dry run", "description": "Run the sandbox dry run for a draft agent. Durable and idempotent per Charter version; a passed result is reused, never re-run.", "requiredScope": "seat", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": true }, { "name": "charter_version_id", "flag": "charter-version-id", "type": "string", "required": true }], "hasComplexInput": false, "help": "Run the sandbox dry run for a draft agent after the manifest is signed; the result is durable and idempotent per Charter version, and a passed run is reused.", "example": { "seat_id": "0190aaaa-aaaa-7aaa-8aaa-aaaaaaaaaaaa", "charter_version_id": "0190cccc-cccc-7ccc-8ccc-cccccccccccc" } },
+  { "id": "agent.run_heartbeats", "namespace": "agent", "action": "run_heartbeats", "title": "Get run heartbeats", "description": "Reads the per-seat run-heartbeat roll-up (quiet-but-healthy vs stalled) for long-running agent programs.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "seat_ids", "flag": "seat-ids", "type": "array", "required": false, "itemType": "string" }], "hasComplexInput": false, "help": "Read the per-seat run-heartbeat roll-up to tell a quiet-but-healthy long-running agent program apart from a stalled one." },
   { "id": "agent.run_now", "namespace": "agent", "action": "run_now", "title": "Run agent now", "description": "Queue and dispatch an immediate work order for a live cloud or runner agent on a seat.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": true }, { "name": "task_id", "flag": "task-id", "type": "string", "required": false }], "hasComplexInput": false, "help": "Queue and dispatch an immediate live agent run without changing the agent's saved schedule." },
   { "id": "agent.show_markdown", "namespace": "agent", "action": "show_markdown", "title": "Show agent setup as markdown", "description": "Compose a seat's agent setup, steward, model, tools, and Charter into a clean, human-skimmable markdown card for review.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": true }], "hasComplexInput": false, "help": "Render a seat's agent setup, model, steward, tools, and Charter as a clean markdown card to show your human a quick review." },
   { "id": "agent.status", "namespace": "agent", "action": "status", "title": "Get agent status", "description": "Return the agent occupancy, lane, schedule, live/offline state, steward chain, dry-run result, and Runner availability for a seat.", "requiredScope": "seat", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": true }], "hasComplexInput": false, "help": "Check an agent's lane, live state, steward chain, dry-run result, and Runner availability before relying on it." },
@@ -52493,6 +52584,7 @@ var COMMAND_MANIFEST = [
   { "id": "software_factory.conformance.resolve_finding", "namespace": "software_factory", "action": "conformance.resolve_finding", "title": "Resolve Forge conformance finding", "description": "A Forge review seat marks one or more prior open conformance findings resolved after re-reviewing the changeset and verifying they are fixed. This is reviewer verification, not gap-acceptance (accepting a gap stays a separate human gate). A resolved finding stops routing the request back to implementation, letting the recycle loop converge. Requires the Forge add-on.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "build_request_id", "flag": "build-request-id", "type": "string", "required": true }, { "name": "finding_ids", "flag": "finding-ids", "type": "array", "required": true, "itemType": "string" }, { "name": "phase_run_id", "flag": "phase-run-id", "type": "string", "required": false }], "hasComplexInput": false, "help": "Resolve a prior open Forge conformance finding after re-reviewing the changeset and verifying it is fixed (reviewer verification, not human gap-acceptance). A resolved finding stops routing the request back to implementation, letting the recycle loop converge." },
   { "id": "software_factory.developer_team.install", "namespace": "software_factory", "action": "developer_team.install", "title": "Install Forge Developer Team", "description": "Install AND activate the governed Forge Developer Team: 8 seats (1 human lead + 7 agents), first-party skills, authority presets, and a conservative token budget. Approving this ACTIVATES the 7 agents as live occupancies at a pr_only, observe-first posture: they open pull requests but never merge or deploy without a human (the Release Manager auto-merges only after a human raises the automation-mode ceiling). Entitlement-gated and human-confirmed.", "requiredScope": "tenant_admin", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "steward_seat_id", "flag": "steward-seat-id", "type": "string", "required": true }, { "name": "software_project_id", "flag": "software-project-id", "type": "string", "required": false }, { "name": "assign_skills", "flag": "assign-skills", "type": "boolean", "required": false }, { "name": "acknowledge_autonomy_ceiling", "flag": "acknowledge-autonomy-ceiling", "type": "boolean", "required": false }], "hasComplexInput": true, "help": "Install the governed Forge Developer Team template with seats, draft Charters, skills, project authority grants, and audit records. Tenant-admin and human-gated; creates no live agent occupancy." },
   { "id": "software_factory.developer_team.uninstall", "namespace": "software_factory", "action": "developer_team.uninstall", "title": "Uninstall Forge Developer Team", "description": "Tear down the governed Forge Developer Team (ADR-0018 \xA76): end the auto-staffed agent occupancies in a no-orphan-safe order, decommission the agents, and revoke the team's project authority and secret grants. The human Forge Lead seat is left intact; re-installing re-staffs the team. The entitlement-lapse variant runs the same teardown path without re-checking the Forge paywall. Owner-only, human-gated, and audited.", "requiredScope": "tenant_admin", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "reason", "flag": "reason", "type": "string", "required": false }, { "name": "trigger", "flag": "trigger", "type": "enum", "required": false, "enumValues": ["manual", "entitlement_lapse"] }], "hasComplexInput": false, "help": "Tear down the Forge Developer Team (teardown \u2014 ADR-0018 \xA76): end the agent occupancies in a no-orphan-safe order, decommission the agents, and revoke the team's authority and secret grants. The human Forge Lead seat stays. Owner-only and human-gated; the entitlement-lapse variant runs the same teardown path." },
+  { "id": "software_factory.dispatch.serialize", "namespace": "software_factory", "action": "dispatch.serialize", "title": "Serialize a Forge dispatch collision", "description": "A human appends a tightening depends_on edge to serialize two colliding Forge tasks within one build request (advisory-driven; never auto-blocks). Records a human decision. Requires confirmation.", "requiredScope": "tenant_admin", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "build_request_id", "flag": "build-request-id", "type": "string", "required": true }, { "name": "before_task_key", "flag": "before-task-key", "type": "string", "required": true }, { "name": "after_task_key", "flag": "after-task-key", "type": "string", "required": true }, { "name": "rationale", "flag": "rationale", "type": "string", "required": false }], "hasComplexInput": false, "help": "A human appends a tightening depends_on edge to serialize two colliding Forge tasks within one build request (advisory-driven; never auto-blocks). Records a human decision." },
   { "id": "software_factory.gate.decide", "namespace": "software_factory", "action": "gate.decide", "title": "Decide a Forge gate", "description": "A human approves or rejects a Forge gate. The resolver is recorded (never an agent \u2014 invariant #7); sensitive gates (security sign-off, merge/deploy, authority change, production deploy) also write a linked human decision. Requires confirmation.", "requiredScope": "tenant_admin", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "gate_id", "flag": "gate-id", "type": "string", "required": true }, { "name": "decision", "flag": "decision", "type": "enum", "required": true, "enumValues": ["approve", "reject"] }, { "name": "rationale", "flag": "rationale", "type": "string", "required": false }], "hasComplexInput": false, "help": "A human approves or rejects a Forge gate; an agent caller routes to /approvals and can never self-approve. Sensitive gates record a human decision." },
   { "id": "software_factory.github.installation_token.create", "namespace": "software_factory", "action": "github.installation_token.create", "title": "Create a Forge GitHub installation token", "description": "Mint a short-lived GitHub App installation token for one bound repository after server-side policy evaluation. The token is returned once and never persisted.", "requiredScope": "tenant", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "software_project_id", "flag": "software-project-id", "type": "string", "required": true }, { "name": "repository_id", "flag": "repository-id", "type": "integer", "required": true }, { "name": "requested_actions", "flag": "requested-actions", "type": "array", "required": true, "itemType": "string" }, { "name": "requested_automation_mode", "flag": "requested-automation-mode", "type": "enum", "required": false, "enumValues": ["plan_only", "pr_only", "merge_after_checks", "deploy_preview", "deploy_production"] }, { "name": "seat_id", "flag": "seat-id", "type": "string", "required": false }], "hasComplexInput": false, "help": "Mint a short-lived GitHub App installation token for one bound repository after policy evaluation; token material is returned once and never stored." },
   { "id": "software_factory.github.installation.bind", "namespace": "software_factory", "action": "github.installation.bind", "title": "Bind Forge GitHub repositories to projects", "description": "Bind already-connected GitHub repositories to Forge projects. Owner-only and human-gated; operates on repositories already verified and connected in this tenant, so no GitHub re-authorization is required. Available any time, add or re-map bindings.", "requiredScope": "tenant_admin", "confirmation": "human_required", "exposeOverMcp": false, "fields": [{ "name": "app_slug", "flag": "app-slug", "type": "string", "required": false }, { "name": "installation_id", "flag": "installation-id", "type": "integer", "required": true }], "hasComplexInput": true, "help": "Bind already-connected GitHub repositories to Forge projects from the Forge GitHub settings flow. Owner-only and human-gated; no GitHub re-authorization required." },