@rosthq/cli 0.7.93 → 0.7.95

package/dist/index.js

@@ -43561,6 +43561,47 @@ var agentListToolCallsOutputSchema = external_exports.object({
   summary: seatTrustSummarySchema,
   tool_calls: external_exports.array(seatToolCallSchema)
 }).strict();
+var agentWatchRunInputSchema = external_exports.object({
+  seat_id: uuidSchema14,
+  run_id: uuidSchema14
+}).strict();
+var workProgressStateSchema = external_exports.enum(["not_started", "in_progress", "handed_off", "done", "failed"]);
+var runWatchCurrentStateSchema = external_exports.object({
+  state: workProgressStateSchema,
+  reasons: external_exports.array(external_exports.string()),
+  claimed_state: workProgressStateSchema.nullable(),
+  claim_mismatch: external_exports.boolean(),
+  last_activity_at: isoDateTime4.nullable(),
+  last_durable_activity_at: isoDateTime4.nullable()
+}).strict();
+var runWatchHeartbeatSchema = external_exports.object({
+  state: external_exports.enum(["working", "quiet_healthy", "recovered", "stalled"]),
+  stalled: external_exports.boolean(),
+  current_phase: external_exports.string().nullable(),
+  last_progress_at: isoDateTime4.nullable(),
+  expected_next_at: isoDateTime4.nullable(),
+  stall_after_at: isoDateTime4.nullable(),
+  lease_remaining_ms: external_exports.number().nullable(),
+  reasons: external_exports.array(external_exports.string())
+}).strict();
+var agentWatchRunOutputSchema = external_exports.object({
+  seat_id: uuidSchema14,
+  run: seatRunSchema,
+  // the lean run row (status/lane/model/counts/timestamps)
+  is_live: external_exports.boolean(),
+  // run.status === "running"
+  // When true, transcript + tool_calls are withheld because the viewer is
+  // authorized on the seat but lacks sensitive-data access (setup-limited
+  // reader). Header state (run, current_state, heartbeat) is always present. The
+  // command surface always returns false (its callers are own-seat/tenant-admin
+  // tokens); the web route sets it from the viewer's sensitivity.
+  redacted: external_exports.boolean(),
+  current_state: runWatchCurrentStateSchema,
+  heartbeat: runWatchHeartbeatSchema.nullable(),
+  transcript: sessionTranscriptReadResultSchema.nullable(),
+  tool_calls: external_exports.array(seatToolCallSchema),
+  fetched_at: isoDateTime4
+}).strict();
 var deliverableKindSchema = external_exports.enum(["brief", "work_evidence", "artifact", "report", "other"]);
 var deliverableLinkSchema = external_exports.object({
   label: external_exports.string(),
@@ -44788,8 +44829,44 @@ var secretGrantListOutputSchema = external_exports.object({
   grants: external_exports.array(secretGrantSummarySchema)
 }).strict();
 
-// ../../packages/protocol/src/software-factory.ts
+// ../../packages/protocol/src/gate.ts
 var uuid11 = external_exports.string().uuid();
+var gateDecisionSchema = external_exports.enum(["approve", "reject"]);
+var gateSubjectKindSchema = external_exports.enum(["prototype", "deliverable", "artifact"]);
+var gateDecideInputSchema = external_exports.object({
+  subject_kind: gateSubjectKindSchema,
+  subject_id: uuid11,
+  artifact_ref: external_exports.object({
+    // The deep link to the artifact (a prototype URL). Agent-supplied and rendered as a
+    // clickable link in the operator's Home band, so it is constrained to an http(s)
+    // URL or a relative in-app path — a `javascript:`/`data:` href would be a
+    // stored-XSS-via-link vector (conservative-by-default, invariant #10).
+    href: external_exports.string().min(1).max(2048).refine(
+      (value) => value.startsWith("/") || /^https?:\/\//i.test(value),
+      "href must be a relative path or an http(s) URL"
+    ),
+    label: external_exports.string().min(1).max(200)
+  }).strict(),
+  // The digest the gate is bound to. On approval the current artifact digest must
+  // still match (a changed artifact is a stale gate — re-draft required).
+  artifact_digest: external_exports.string().min(1).max(200),
+  decision: gateDecisionSchema,
+  ask: external_exports.string().min(1).max(400),
+  consequence: external_exports.string().min(1).max(600),
+  unblocked_targets: external_exports.array(external_exports.string().min(1).max(200)).max(20).default([]),
+  rationale: external_exports.string().max(4e3).optional()
+}).strict();
+var gateDecideOutputSchema = external_exports.object({
+  decision_id: uuid11.nullable(),
+  subject_id: uuid11,
+  artifact_digest: external_exports.string(),
+  decision: gateDecisionSchema,
+  decided_by: uuid11,
+  gate_status: external_exports.enum(["approved", "rejected"])
+});
+
+// ../../packages/protocol/src/software-factory.ts
+var uuid12 = external_exports.string().uuid();
 var SOFTWARE_PHASE_VALUES = [
   "intake",
   "discovery_scoping",
@@ -44900,7 +44977,7 @@ var softwareConfigValueKindSchema = external_exports.enum(["plain", "secret_ref"
 var softwareCredentialRequestStatusSchema = external_exports.enum(["pending", "fulfilled", "rejected", "canceled"]);
 var softwareSecretAccessOperationSchema = external_exports.enum(["use", "vercel_env_sync", "test_execution"]);
 var softwareProjectSummarySchema = external_exports.object({
-  id: uuid11,
+  id: uuid12,
   name: external_exports.string().min(1),
   slug: external_exports.string().min(1),
   base_branch: external_exports.string().min(1),
@@ -44954,7 +45031,7 @@ var softwarePhaseSchedulerStateSchema = external_exports.object({
   ]).nullable(),
   message: external_exports.string(),
   remediation_href: external_exports.string().nullable(),
-  work_order_id: uuid11.nullable()
+  work_order_id: uuid12.nullable()
 });
 var softwareDispatchHoldReasonSchema = external_exports.enum([
   "dependency",
@@ -44978,7 +45055,7 @@ var softwareDispatchPreviewRunnerRequirementSchema = external_exports.object({
 }).strict();
 var softwareDispatchPreviewItemSchema = external_exports.object({
   kind: external_exports.enum(["changeset", "task"]),
-  id: uuid11,
+  id: uuid12,
   ordinal: external_exports.number().int().positive(),
   title: external_exports.string(),
   changeset_ordinal: external_exports.number().int().positive().nullable(),
@@ -45005,7 +45082,7 @@ var softwareTouchSetCollisionSchema = external_exports.object({
   overlap: external_exports.array(external_exports.string()).min(1)
 }).strict();
 var softwareCrossRequestCollisionGroupSchema = external_exports.object({
-  software_project_id: uuid11,
+  software_project_id: uuid12,
   requests: external_exports.array(softwareTouchSetRefSchema),
   collisions: external_exports.array(softwareTouchSetCollisionSchema),
   unknown: external_exports.array(softwareTouchSetRefSchema)
@@ -45039,8 +45116,8 @@ var softwareDispatchPreviewSchema = external_exports.object({
   grooming_reason: external_exports.string().nullable()
 }).strict();
 var softwareBuildRequestSummarySchema = external_exports.object({
-  id: uuid11,
-  software_project_id: uuid11,
+  id: uuid12,
+  software_project_id: uuid12,
   title: external_exports.string(),
   source_channel: softwareSourceChannelSchema,
   source_ref: external_exports.string().nullable(),
@@ -45056,7 +45133,7 @@ var softwareBuildRequestSummarySchema = external_exports.object({
   scheduler_state: softwarePhaseSchedulerStateSchema.nullable()
 });
 var softwarePhaseRunSummarySchema = external_exports.object({
-  id: uuid11,
+  id: uuid12,
   phase: softwarePhaseSchema,
   status: softwarePhaseRunStatusSchema,
   attempt_no: external_exports.number().int(),
@@ -45066,17 +45143,17 @@ var softwarePhaseRunSummarySchema = external_exports.object({
   scheduler_state: softwarePhaseSchedulerStateSchema.nullable()
 });
 var softwareGateSummarySchema = external_exports.object({
-  id: uuid11,
+  id: uuid12,
   gate_type: softwareGateTypeSchema,
   status: external_exports.enum(["pending", "approved", "rejected", "held"]),
-  phase_run_id: uuid11.nullable(),
-  resolved_by_user_id: uuid11.nullable(),
+  phase_run_id: uuid12.nullable(),
+  resolved_by_user_id: uuid12.nullable(),
   rationale: external_exports.string().nullable(),
   created_at: external_exports.string()
 });
 var softwareChangesetSummarySchema = external_exports.object({
-  id: uuid11,
-  build_request_id: uuid11,
+  id: uuid12,
+  build_request_id: uuid12,
   ordinal: external_exports.number().int(),
   title: external_exports.string(),
   split_criterion: softwareChangesetSplitCriterionSchema,
@@ -45090,10 +45167,10 @@ var softwareChangesetSummarySchema = external_exports.object({
   created_at: external_exports.string()
 });
 var softwareTaskSummarySchema = external_exports.object({
-  id: uuid11,
-  build_request_id: uuid11,
-  changeset_id: uuid11,
-  plan_version_id: uuid11,
+  id: uuid12,
+  build_request_id: uuid12,
+  changeset_id: uuid12,
+  plan_version_id: uuid12,
   ordinal: external_exports.number().int(),
   task_key: external_exports.string(),
   title: external_exports.string(),
@@ -45132,8 +45209,8 @@ var softwarePlanArtifactSummarySchema = external_exports.object({
   changesets: external_exports.array(softwarePlanArtifactChangesetSummarySchema).default([])
 });
 var softwarePlanVersionSummarySchema = external_exports.object({
-  id: uuid11,
-  build_request_id: uuid11,
+  id: uuid12,
+  build_request_id: uuid12,
   version_no: external_exports.number().int(),
   status: softwarePlanVersionStatusSchema,
   summary: external_exports.string().nullable(),
@@ -45144,37 +45221,37 @@ var softwarePlanVersionSummarySchema = external_exports.object({
     answer: external_exports.string()
   })).default([]),
   planning_artifact: softwarePlanArtifactSummarySchema.nullable(),
-  created_by_seat_id: uuid11.nullable(),
+  created_by_seat_id: uuid12.nullable(),
   created_at: external_exports.string()
 });
 var softwarePlanConformanceFindingSummarySchema = external_exports.object({
-  id: uuid11,
-  build_request_id: uuid11,
-  changeset_id: uuid11.nullable(),
-  phase_run_id: uuid11.nullable(),
-  plan_version_id: uuid11.nullable(),
+  id: uuid12,
+  build_request_id: uuid12,
+  changeset_id: uuid12.nullable(),
+  phase_run_id: uuid12.nullable(),
+  plan_version_id: uuid12.nullable(),
   severity: softwareConformanceSeveritySchema,
   category: softwareConformanceCategorySchema,
   summary: external_exports.string(),
   detail: external_exports.string().nullable(),
   status: softwareConformanceStatusSchema,
-  accepted_by_decision_id: uuid11.nullable(),
+  accepted_by_decision_id: uuid12.nullable(),
   resolved_at: external_exports.string().nullable(),
   created_at: external_exports.string()
 });
 var softwareAuthorityProfileSummarySchema = external_exports.object({
-  id: uuid11,
-  software_project_id: uuid11.nullable(),
+  id: uuid12,
+  software_project_id: uuid12.nullable(),
   name: external_exports.string(),
   preset: softwareAuthorityPresetSchema,
   is_default: external_exports.boolean(),
   created_at: external_exports.string()
 });
 var softwareSecretGrantSummarySchema = external_exports.object({
-  id: uuid11,
-  software_project_id: uuid11,
+  id: uuid12,
+  software_project_id: uuid12,
   environment: softwareEnvironmentSchema,
-  seat_id: uuid11,
+  seat_id: uuid12,
   action: external_exports.string(),
   key_name: external_exports.string(),
   vault_ref: external_exports.string(),
@@ -45183,8 +45260,8 @@ var softwareSecretGrantSummarySchema = external_exports.object({
   revoked_at: external_exports.string().nullable()
 });
 var softwareConfigEntrySummarySchema = external_exports.object({
-  id: uuid11,
-  software_project_id: uuid11,
+  id: uuid12,
+  software_project_id: uuid12,
   environment: softwareEnvironmentSchema,
   key_name: external_exports.string(),
   value_kind: softwareConfigValueKindSchema,
@@ -45194,20 +45271,20 @@ var softwareConfigEntrySummarySchema = external_exports.object({
   updated_at: external_exports.string()
 });
 var softwareCredentialRequestSummarySchema = external_exports.object({
-  id: uuid11,
-  software_project_id: uuid11,
+  id: uuid12,
+  software_project_id: uuid12,
   environment: softwareEnvironmentSchema,
-  requested_by_seat_id: uuid11,
+  requested_by_seat_id: uuid12,
   action: external_exports.string(),
   key_name: external_exports.string(),
   reason: external_exports.string().nullable(),
   status: softwareCredentialRequestStatusSchema,
-  approval_task_id: uuid11.nullable(),
+  approval_task_id: uuid12.nullable(),
   created_at: external_exports.string()
 });
 var softwareCapacityObservationSummarySchema = external_exports.object({
-  id: uuid11,
-  runner_id: uuid11,
+  id: uuid12,
+  runner_id: uuid12,
   observed_at: external_exports.string(),
   os: external_exports.string().nullable(),
   cpu_count: external_exports.number().int().nullable(),
@@ -45223,7 +45300,7 @@ var softwareRequestCreateInputSchema = external_exports.object({
   // this schema) enforces that exactly one resolves, with an actionable error
   // when neither is given or neither matches — keeping this shape a plain
   // `z.object` so JSON-schema/CLI-flag projection stays simple (no `.refine`).
-  software_project_id: uuid11.optional(),
+  software_project_id: uuid12.optional(),
   project: external_exports.string().trim().min(1).max(200).optional(),
   // Untrusted display text (ADR-0018 §5) — bounded, never treated as an instruction.
   title: external_exports.string().trim().min(1).max(500),
@@ -45235,11 +45312,11 @@ var softwareRequestCreateInputSchema = external_exports.object({
   automation_mode: softwareAutomationModeSchema.optional()
 }).strict();
 var softwareRequestCreateOutputSchema = external_exports.object({
-  build_request_id: uuid11,
-  software_project_id: uuid11,
+  build_request_id: uuid12,
+  software_project_id: uuid12,
   status: softwareRequestStatusSchema,
   current_phase: softwarePhaseSchema,
-  phase_run_id: uuid11,
+  phase_run_id: uuid12,
   scheduler_state: softwarePhaseSchedulerStateSchema
 });
 var softwareRequestListInputSchema = external_exports.object({
@@ -45249,7 +45326,7 @@ var softwareRequestListOutputSchema = external_exports.object({
   requests: external_exports.array(softwareBuildRequestSummarySchema)
 });
 var softwareRequestShowInputSchema = external_exports.object({
-  build_request_id: uuid11
+  build_request_id: uuid12
 }).strict();
 var softwareRequestShowOutputSchema = external_exports.object({
   request: softwareBuildRequestSummarySchema,
@@ -45263,51 +45340,51 @@ var softwareRequestShowOutputSchema = external_exports.object({
 });
 var softwareRequestLifecycleReason = external_exports.string().trim().min(1).max(2e3);
 var softwareRequestPauseInputSchema = external_exports.object({
-  build_request_id: uuid11,
+  build_request_id: uuid12,
   reason: softwareRequestLifecycleReason.optional()
 }).strict();
 var softwareRequestCancelInputSchema = external_exports.object({
-  build_request_id: uuid11,
+  build_request_id: uuid12,
   reason: softwareRequestLifecycleReason.optional()
 }).strict();
 var softwareRequestResumeInputSchema = external_exports.object({
-  build_request_id: uuid11,
+  build_request_id: uuid12,
   reason: softwareRequestLifecycleReason.optional(),
   termination_bound: softwareTerminationBoundSchema.optional()
 }).strict();
 var softwareRequestLifecycleOutputSchema = external_exports.object({
-  build_request_id: uuid11,
+  build_request_id: uuid12,
   status: softwareRequestStatusSchema,
   current_phase: softwarePhaseSchema,
-  phase_run_id: uuid11.nullable(),
-  work_order_id: uuid11.nullable(),
-  resume_from_task_id: uuid11.nullable()
+  phase_run_id: uuid12.nullable(),
+  work_order_id: uuid12.nullable(),
+  resume_from_task_id: uuid12.nullable()
 });
 var softwarePhaseAdvanceInputSchema = external_exports.object({
-  build_request_id: uuid11,
+  build_request_id: uuid12,
   to_phase: softwarePhaseSchema,
-  owning_seat_id: uuid11.optional(),
+  owning_seat_id: uuid12.optional(),
   note: external_exports.string().max(2e3).optional()
 }).strict();
 var softwarePhaseAdvanceOutputSchema = external_exports.object({
-  build_request_id: uuid11,
+  build_request_id: uuid12,
   from_phase: softwarePhaseSchema,
   to_phase: softwarePhaseSchema,
-  phase_run_id: uuid11
+  phase_run_id: uuid12
 });
 var softwareGateDecideInputSchema = external_exports.object({
-  gate_id: uuid11,
+  gate_id: uuid12,
   decision: softwareGateDecisionSchema,
   rationale: external_exports.string().max(4e3).optional()
 }).strict();
 var softwareGateDecideOutputSchema = external_exports.object({
-  gate_id: uuid11,
+  gate_id: uuid12,
   status: external_exports.enum(["approved", "rejected"]),
-  resolved_by_user_id: uuid11,
-  decision_id: uuid11.nullable()
+  resolved_by_user_id: uuid12,
+  decision_id: uuid12.nullable()
 });
 var softwareDispatchSerializeInputSchema = external_exports.object({
-  build_request_id: uuid11,
+  build_request_id: uuid12,
   // The task that must run FIRST (the dependency target).
   before_task_key: external_exports.string().trim().min(1).max(200),
   // The task that gains the depends_on edge and runs AFTER `before_task_key`.
@@ -45318,45 +45395,45 @@ var softwareDispatchSerializeInputSchema = external_exports.object({
   path: ["after_task_key"]
 });
 var softwareDispatchSerializeOutputSchema = external_exports.object({
-  build_request_id: uuid11,
+  build_request_id: uuid12,
   before_task_key: external_exports.string(),
   after_task_key: external_exports.string(),
   // false when the edge already existed (idempotent no-op) — still a valid, audited call.
   edge_added: external_exports.boolean(),
-  decision_id: uuid11.nullable(),
-  event_id: uuid11.nullable()
+  decision_id: uuid12.nullable(),
+  event_id: uuid12.nullable()
 }).strict();
 var forgeClarificationAnswer = external_exports.object({
   question: external_exports.string().trim().min(1).max(2e3),
   answer: external_exports.string().trim().min(1).max(4e3)
 }).strict();
 var softwareRequestAnswerClarificationInputSchema = external_exports.object({
-  build_request_id: uuid11,
+  build_request_id: uuid12,
   answers: external_exports.array(forgeClarificationAnswer).min(1).max(50),
   // The planner marks the plan ready once its questions are resolved; the human/COS can
   // signal that here. Default false keeps the plan in needs_clarification.
   mark_ready_for_plan_review: external_exports.boolean().default(false)
 }).strict();
 var softwareRequestAnswerClarificationOutputSchema = external_exports.object({
-  build_request_id: uuid11,
-  plan_version_id: uuid11,
+  build_request_id: uuid12,
+  plan_version_id: uuid12,
   status: softwarePlanVersionStatusSchema,
   answered_count: external_exports.number().int()
 });
 var softwarePlanApproveInputSchema = external_exports.object({
-  build_request_id: uuid11,
+  build_request_id: uuid12,
   rationale: external_exports.string().trim().min(1).max(4e3).optional()
 }).strict();
 var softwarePlanRejectInputSchema = external_exports.object({
-  build_request_id: uuid11,
+  build_request_id: uuid12,
   // A rejection must say why (it routes the request back to discovery/scoping).
   rationale: external_exports.string().trim().min(1).max(4e3)
 }).strict();
 var softwarePlanDecisionOutputSchema = external_exports.object({
-  build_request_id: uuid11,
-  plan_version_id: uuid11,
+  build_request_id: uuid12,
+  plan_version_id: uuid12,
   status: external_exports.enum(["approved", "rejected"]),
-  decision_id: uuid11,
+  decision_id: uuid12,
   current_phase: softwarePhaseSchema
 });
 var forgeConformanceFindingInput = external_exports.object({
@@ -45364,41 +45441,41 @@ var forgeConformanceFindingInput = external_exports.object({
   category: softwareConformanceCategorySchema.default("other"),
   summary: external_exports.string().trim().min(1).max(2e3),
   detail: external_exports.string().trim().min(1).max(8e3).optional(),
-  changeset_id: uuid11.optional(),
-  plan_version_id: uuid11.optional()
+  changeset_id: uuid12.optional(),
+  plan_version_id: uuid12.optional()
 }).strict();
 var softwareConformanceRecordFindingsInputSchema = external_exports.object({
-  build_request_id: uuid11,
-  phase_run_id: uuid11.optional(),
+  build_request_id: uuid12,
+  phase_run_id: uuid12.optional(),
   findings: external_exports.array(forgeConformanceFindingInput).min(1).max(50)
 }).strict();
 var softwareConformanceRecordFindingsOutputSchema = external_exports.object({
-  build_request_id: uuid11,
+  build_request_id: uuid12,
   recorded_count: external_exports.number().int(),
-  finding_ids: external_exports.array(uuid11),
+  finding_ids: external_exports.array(uuid12),
   open_finding_count: external_exports.number().int()
 }).strict();
 var softwareConformanceResolveFindingInputSchema = external_exports.object({
-  build_request_id: uuid11,
-  finding_ids: external_exports.array(uuid11).min(1).max(50),
+  build_request_id: uuid12,
+  finding_ids: external_exports.array(uuid12).min(1).max(50),
   // The re-review run that verified the fix — provenance only (rides into the append-only audit
   // event; the finding row's resolution state is the durable transition).
-  phase_run_id: uuid11.optional()
+  phase_run_id: uuid12.optional()
 }).strict();
 var softwareConformanceResolveFindingOutputSchema = external_exports.object({
-  build_request_id: uuid11,
+  build_request_id: uuid12,
   resolved_count: external_exports.number().int(),
-  resolved_finding_ids: external_exports.array(uuid11),
+  resolved_finding_ids: external_exports.array(uuid12),
   open_finding_count: external_exports.number().int()
 }).strict();
 var softwareAuthorityProfileListInputSchema = external_exports.object({
-  software_project_id: uuid11.nullable().optional()
+  software_project_id: uuid12.nullable().optional()
 }).strict();
 var softwareAuthorityProfileListOutputSchema = external_exports.object({
   profiles: external_exports.array(softwareAuthorityProfileSummarySchema)
 });
 var softwareAuthorityProfileCreateInputSchema = external_exports.object({
-  software_project_id: uuid11.nullable().optional(),
+  software_project_id: uuid12.nullable().optional(),
   name: external_exports.string().trim().min(1).max(120),
   preset: softwareAuthorityPresetSchema.default("read_only"),
   // A closed capability map (booleans by capability key). Never derived from
@@ -45407,77 +45484,77 @@ var softwareAuthorityProfileCreateInputSchema = external_exports.object({
   is_default: external_exports.boolean().optional()
 }).strict();
 var softwareAuthorityProfileCreateOutputSchema = external_exports.object({
-  profile_id: uuid11,
+  profile_id: uuid12,
   name: external_exports.string(),
   preset: softwareAuthorityPresetSchema
 });
 var softwareAuthorityGrantInputSchema = external_exports.object({
-  software_project_id: uuid11,
-  seat_id: uuid11,
-  authority_profile_id: uuid11
+  software_project_id: uuid12,
+  seat_id: uuid12,
+  authority_profile_id: uuid12
 }).strict();
 var softwareAuthorityGrantOutputSchema = external_exports.object({
-  grant_id: uuid11,
-  software_project_id: uuid11,
-  seat_id: uuid11,
-  authority_profile_id: uuid11,
+  grant_id: uuid12,
+  software_project_id: uuid12,
+  seat_id: uuid12,
+  authority_profile_id: uuid12,
   status: softwareGrantStatusSchema
 });
 var softwareAuthorityRevokeInputSchema = external_exports.object({
-  grant_id: uuid11
+  grant_id: uuid12
 }).strict();
 var softwareAuthorityRevokeOutputSchema = external_exports.object({
-  grant_id: uuid11,
+  grant_id: uuid12,
   status: softwareGrantStatusSchema
 });
 var softwareSecretRequestInputSchema = external_exports.object({
-  software_project_id: uuid11,
+  software_project_id: uuid12,
   environment: softwareEnvironmentSchema,
-  seat_id: uuid11,
+  seat_id: uuid12,
   action: softwareSecretActionSchema,
   key_name: softwareSecretKeyNameSchema,
   reason: external_exports.string().max(2e3).optional()
 }).strict();
 var softwareSecretRequestOutputSchema = external_exports.object({
   requested: external_exports.literal(true),
-  credential_request_id: uuid11,
-  approval_task_id: uuid11,
-  software_project_id: uuid11,
+  credential_request_id: uuid12,
+  approval_task_id: uuid12,
+  software_project_id: uuid12,
   environment: softwareEnvironmentSchema,
-  seat_id: uuid11,
+  seat_id: uuid12,
   key_name: external_exports.string()
 });
 var softwareSecretGrantInputSchema = external_exports.object({
-  software_project_id: uuid11,
+  software_project_id: uuid12,
   environment: softwareEnvironmentSchema,
-  seat_id: uuid11,
+  seat_id: uuid12,
   action: softwareSecretActionSchema,
   key_name: softwareSecretKeyNameSchema,
   // POINTER only. The vault ref shape refinement rejects any raw-secret value.
   vault_ref: softwareVaultRefSchema
 }).strict();
 var softwareSecretGrantOutputSchema = external_exports.object({
-  grant_id: uuid11,
+  grant_id: uuid12,
   key_name: external_exports.string(),
   environment: softwareEnvironmentSchema,
   status: softwareGrantStatusSchema
 });
 var softwareSecretRevokeInputSchema = external_exports.object({
-  grant_id: uuid11
+  grant_id: uuid12
 }).strict();
 var softwareSecretRevokeOutputSchema = external_exports.object({
-  grant_id: uuid11,
+  grant_id: uuid12,
   status: softwareGrantStatusSchema
 });
 var softwareConfigListInputSchema = external_exports.object({
-  software_project_id: uuid11.nullable().optional(),
+  software_project_id: uuid12.nullable().optional(),
   environment: softwareEnvironmentSchema.nullable().optional()
 }).strict();
 var softwareConfigListOutputSchema = external_exports.object({
   entries: external_exports.array(softwareConfigEntrySummarySchema)
 });
 var softwareConfigSetInputSchema = external_exports.object({
-  software_project_id: uuid11,
+  software_project_id: uuid12,
   environment: softwareEnvironmentSchema,
   key_name: softwareSecretKeyNameSchema,
   value_kind: softwareConfigValueKindSchema,
@@ -45497,24 +45574,24 @@ var softwareConfigSetInputSchema = external_exports.object({
   }
 });
 var softwareConfigSetOutputSchema = external_exports.object({
-  config_entry_id: uuid11,
-  software_project_id: uuid11,
+  config_entry_id: uuid12,
+  software_project_id: uuid12,
   environment: softwareEnvironmentSchema,
   key_name: external_exports.string(),
   value_kind: softwareConfigValueKindSchema,
   has_secret_ref: external_exports.boolean()
 });
 var softwareSecretRequestListInputSchema = external_exports.object({
-  software_project_id: uuid11.nullable().optional(),
+  software_project_id: uuid12.nullable().optional(),
   status: softwareCredentialRequestStatusSchema.nullable().optional()
 }).strict();
 var softwareSecretRequestListOutputSchema = external_exports.object({
   requests: external_exports.array(softwareCredentialRequestSummarySchema)
 });
 var softwareSecretUseInputSchema = external_exports.object({
-  software_project_id: uuid11,
+  software_project_id: uuid12,
   environment: softwareEnvironmentSchema,
-  seat_id: uuid11,
+  seat_id: uuid12,
   action: softwareSecretActionSchema,
   key_name: softwareSecretKeyNameSchema,
   operation: softwareSecretAccessOperationSchema.default("use")
@@ -45525,12 +45602,12 @@ var softwareSecretUseOutputSchema = external_exports.object({
   key_name: external_exports.string(),
   environment: softwareEnvironmentSchema,
   operation: softwareSecretAccessOperationSchema,
-  access_log_id: uuid11,
-  missing_request_id: uuid11.nullable(),
+  access_log_id: uuid12,
+  missing_request_id: uuid12.nullable(),
   redacted_summary: external_exports.record(external_exports.string(), external_exports.unknown())
 });
 var softwareCapacityListInputSchema = external_exports.object({
-  runner_id: uuid11.nullable().optional(),
+  runner_id: uuid12.nullable().optional(),
   limit: external_exports.number().int().positive().max(200).optional()
 }).strict();
 var softwareCapacityListOutputSchema = external_exports.object({
@@ -45585,9 +45662,9 @@ var forgeTrustedControlSchema = external_exports.object({
   automation_mode: softwareAutomationModeSchema,
   inferred_risk: softwareRiskLevelSchema,
   risk_ceiling: softwareRiskLevelSchema.nullable().default(null),
-  authority_profile_ids: external_exports.array(uuid11).max(50).default([]),
+  authority_profile_ids: external_exports.array(uuid12).max(50).default([]),
   active_secret_grant_count: external_exports.number().int().nonnegative().max(1e3).default(0),
-  pending_gate_ids: external_exports.array(uuid11).max(50).default([])
+  pending_gate_ids: external_exports.array(uuid12).max(50).default([])
 }).strict();
 var forgeSeatSkillSchema = external_exports.object({
   slug: external_exports.string().trim().min(1).max(200),
@@ -45596,9 +45673,9 @@ var forgeSeatSkillSchema = external_exports.object({
 }).strict();
 var forgeRuntimeContextPacketSchema = external_exports.object({
   schema_version: external_exports.literal(1),
-  phase_run_id: uuid11,
-  build_request_id: uuid11,
-  software_project_id: uuid11,
+  phase_run_id: uuid12,
+  build_request_id: uuid12,
+  software_project_id: uuid12,
   phase: softwarePhaseSchema,
   request_status: softwareRequestStatusSchema,
   project: external_exports.object({
@@ -45607,7 +45684,7 @@ var forgeRuntimeContextPacketSchema = external_exports.object({
   }).strict(),
   scheduler: external_exports.object({
     lease_model: external_exports.literal("work_order_claim_heartbeat"),
-    runner_id: uuid11,
+    runner_id: uuid12,
     max_runner_sessions: external_exports.number().int().positive().max(8),
     model_account_state: external_exports.string().min(1).max(80),
     account_alias: external_exports.string().min(1).max(200).nullable()
@@ -45691,7 +45768,7 @@ var runnerTurnReportSchema = external_exports.object({
 var softwareDeveloperTeamInstallInputSchema = external_exports.object({
   // The human-accountable steward seat for the installed team. Agent seats created
   // by the template chain through this seat so no agent occupancy can be orphaned.
-  steward_seat_id: uuid11,
+  steward_seat_id: uuid12,
   // Optional project scope for authority grants. Authority profile presets are
   // installed tenant-wide either way; grants are project-scoped only when supplied.
   // DER-1241: `.nullable()` too — this command is human-confirmed, so its input is
@@ -45699,7 +45776,7 @@ var softwareDeveloperTeamInstallInputSchema = external_exports.object({
   // replay; an empty project round-trips as JSON `null`, which a bare `.optional()`
   // rejects (→ "Command input failed schema validation"). Matches the sibling
   // software-factory schemas that already use `.nullable().optional()`.
-  software_project_id: uuid11.nullable().optional(),
+  software_project_id: uuid12.nullable().optional(),
   assign_skills: external_exports.boolean().default(true),
   // DER-1264: the install auto-staffs live agents at a pr_only, observe-first
   // posture. If the tenant's company autonomy ceiling (`agent_policy`) is MORE
@@ -45719,34 +45796,34 @@ var softwareDeveloperTeamInstallInputSchema = external_exports.object({
 }).strict();
 var softwareDeveloperTeamSeatSummarySchema = external_exports.object({
   role: softwareDeveloperTeamRoleSchema,
-  seat_id: uuid11,
+  seat_id: uuid12,
   name: external_exports.string(),
-  charter_version_id: uuid11,
+  charter_version_id: uuid12,
   created: external_exports.boolean()
 });
 var softwareDeveloperTeamSkillSummarySchema = external_exports.object({
   slug: external_exports.string(),
-  skill_id: uuid11,
-  skill_version_id: uuid11,
-  assigned_seat_ids: external_exports.array(uuid11)
+  skill_id: uuid12,
+  skill_version_id: uuid12,
+  assigned_seat_ids: external_exports.array(uuid12)
 });
 var softwareDeveloperTeamAuthorityProfileSummarySchema = external_exports.object({
   preset: softwareAuthorityPresetSchema,
-  profile_id: uuid11,
+  profile_id: uuid12,
   name: external_exports.string()
 });
 var softwareDeveloperTeamAuthorityGrantSummarySchema = external_exports.object({
   role: softwareDeveloperTeamRoleSchema,
-  software_project_id: uuid11,
-  seat_id: uuid11,
-  authority_profile_id: uuid11,
-  grant_id: uuid11,
+  software_project_id: uuid12,
+  seat_id: uuid12,
+  authority_profile_id: uuid12,
+  grant_id: uuid12,
   created: external_exports.boolean()
 });
 var softwareDeveloperTeamOccupancySummarySchema = external_exports.object({
   role: softwareDeveloperTeamRoleSchema,
-  seat_id: uuid11,
-  agent_id: uuid11,
+  seat_id: uuid12,
+  agent_id: uuid12,
   template_slug: external_exports.string(),
   status: external_exports.literal("live"),
   // false when a live agent already occupied the seat (idempotent re-install).
@@ -45766,7 +45843,7 @@ var softwareDeveloperTeamTokenBudgetSummarySchema = external_exports.object({
   set_by_install: external_exports.boolean()
 });
 var softwareDeveloperTeamGithubPolicySummarySchema = external_exports.object({
-  software_project_id: uuid11,
+  software_project_id: uuid12,
   automation_mode_ceiling: softwareAutomationModeSchema,
   // false when a pre-existing policy was preserved (not created by this install).
   created: external_exports.boolean()
@@ -45794,8 +45871,8 @@ var softwareDeveloperTeamUninstallInputSchema = external_exports.object({
 }).strict();
 var softwareDeveloperTeamDecommissionedAgentSchema = external_exports.object({
   role: softwareDeveloperTeamRoleSchema.nullable(),
-  seat_id: uuid11,
-  agent_id: uuid11
+  seat_id: uuid12,
+  agent_id: uuid12
 });
 var softwareDeveloperTeamUninstallOutputSchema = external_exports.object({
   torn_down: external_exports.boolean(),
@@ -45945,8 +46022,8 @@ var forgeMemoryDraftArtifact = external_exports.object({
   follow_up_items: forgeArtifactList
 }).strict();
 var softwareGithubAutomationPolicyInputSchema = external_exports.object({
-  software_project_id: uuid11,
-  authority_profile_id: uuid11.nullable().optional(),
+  software_project_id: uuid12,
+  authority_profile_id: uuid12.nullable().optional(),
   automation_mode_ceiling: softwareAutomationModeSchema.default("plan_only"),
   allowed_actions: external_exports.array(softwareGithubActionSchema).max(20),
   // DER-1233: the element schema is a single FLATTENED enum (the union of the
@@ -45982,12 +46059,12 @@ var softwareGithubInstallationConnectInputSchema = external_exports.object({
   repositories: external_exports.array(softwareGithubConnectedRepositoryInputSchema).min(1).max(200)
 }).strict();
 var softwareGithubInstallationConnectOutputSchema = external_exports.object({
-  github_installation_id: uuid11,
+  github_installation_id: uuid12,
   repositories_connected: external_exports.number().int().nonnegative()
 });
 var softwareGithubRepositoryBindMappingSchema = external_exports.object({
   repository_id: external_exports.number().int().positive(),
-  software_project_id: uuid11
+  software_project_id: uuid12
 }).strict();
 var softwareGithubInstallationBindInputSchema = external_exports.object({
   app_slug: external_exports.string().trim().min(1).max(120).default("rost-forge"),
@@ -45995,7 +46072,7 @@ var softwareGithubInstallationBindInputSchema = external_exports.object({
   bindings: external_exports.array(softwareGithubRepositoryBindMappingSchema).min(1).max(100)
 }).strict();
 var softwareGithubInstallationBindOutputSchema = external_exports.object({
-  github_installation_id: uuid11,
+  github_installation_id: uuid12,
   repositories_bound: external_exports.number().int().nonnegative()
 });
 var softwareGithubRepositoryUnbindInputSchema = external_exports.object({
@@ -46016,12 +46093,12 @@ var softwareGithubInstallationRepositoryViewSchema = external_exports.object({
   private: external_exports.boolean(),
   default_branch: external_exports.string(),
   status: external_exports.enum(["connected", "active"]),
-  software_project_id: uuid11.nullable(),
+  software_project_id: uuid12.nullable(),
   software_project_name: external_exports.string().nullable(),
   software_project_slug: external_exports.string().nullable()
 });
 var softwareGithubInstallationViewSchema = external_exports.object({
-  id: uuid11,
+  id: uuid12,
   installation_id: external_exports.number().int().positive(),
   account_login: external_exports.string(),
   account_id: external_exports.number().int().positive(),
@@ -46033,17 +46110,17 @@ var softwareGithubInstallationListOutputSchema = external_exports.object({
   installations: external_exports.array(softwareGithubInstallationViewSchema)
 });
 var softwareGithubAutomationPolicyUpsertOutputSchema = external_exports.object({
-  policy_id: uuid11,
-  software_project_id: uuid11,
+  policy_id: uuid12,
+  software_project_id: uuid12,
   automation_mode_ceiling: softwareAutomationModeSchema,
   max_risk: softwareRiskLevelSchema.nullable()
 });
 var softwareGithubInstallationTokenCreateInputSchema = external_exports.object({
-  software_project_id: uuid11,
+  software_project_id: uuid12,
   repository_id: external_exports.number().int().positive(),
   requested_actions: external_exports.array(softwareGithubActionSchema).min(1).max(20),
   requested_automation_mode: softwareAutomationModeSchema.default("plan_only"),
-  seat_id: uuid11.optional()
+  seat_id: uuid12.optional()
 }).strict();
 var softwareGithubInstallationTokenCreateOutputSchema = external_exports.object({
   installation_id: external_exports.number().int().positive(),
@@ -46080,13 +46157,13 @@ var softwareVercelConnectionConnectInputSchema = external_exports.object({
   scopes: external_exports.array(external_exports.string().trim().min(1).max(120)).max(40).default([])
 }).strict();
 var softwareVercelConnectionConnectOutputSchema = external_exports.object({
-  vercel_connection_id: uuid11,
+  vercel_connection_id: uuid12,
   account_id: external_exports.string(),
   team_id: external_exports.string().nullable()
 });
 var softwareVercelProjectLinkInputSchema = external_exports.object({
-  software_project_id: uuid11,
-  vercel_connection_id: uuid11,
+  software_project_id: uuid12,
+  vercel_connection_id: uuid12,
   vercel_project_id: external_exports.string().trim().min(1).max(200),
   vercel_project_name: external_exports.string().trim().min(1).max(255),
   framework: external_exports.string().trim().min(1).max(120).nullable().optional(),
@@ -46095,12 +46172,12 @@ var softwareVercelProjectLinkInputSchema = external_exports.object({
   git_repository: external_exports.record(external_exports.string().min(1), external_exports.unknown()).default({})
 }).strict();
 var softwareVercelProjectLinkOutputSchema = external_exports.object({
-  vercel_project_link_id: uuid11,
-  software_project_id: uuid11,
+  vercel_project_link_id: uuid12,
+  software_project_id: uuid12,
   vercel_project_id: external_exports.string()
 });
 var softwareVercelConnectionViewSchema = external_exports.object({
-  id: uuid11,
+  id: uuid12,
   account_id: external_exports.string(),
   account_name: external_exports.string().nullable(),
   team_id: external_exports.string().nullable(),
@@ -46111,11 +46188,11 @@ var softwareVercelConnectionViewSchema = external_exports.object({
   connected_at: external_exports.string()
 });
 var softwareVercelProjectLinkViewSchema = external_exports.object({
-  id: uuid11,
-  software_project_id: uuid11,
+  id: uuid12,
+  software_project_id: uuid12,
   software_project_name: external_exports.string(),
   software_project_slug: external_exports.string(),
-  vercel_connection_id: uuid11,
+  vercel_connection_id: uuid12,
   vercel_project_id: external_exports.string(),
   vercel_project_name: external_exports.string(),
   framework: external_exports.string().nullable(),
@@ -46129,16 +46206,16 @@ var softwareVercelProjectListOutputSchema = external_exports.object({
   project_links: external_exports.array(softwareVercelProjectLinkViewSchema)
 });
 var softwareVercelDeployPreviewInputSchema = external_exports.object({
-  software_project_id: uuid11,
+  software_project_id: uuid12,
   commit_sha: external_exports.string().trim().regex(/^[A-Fa-f0-9]{7,64}$/),
   git_ref: external_exports.string().trim().min(1).max(255),
-  build_request_id: uuid11.optional(),
-  phase_run_id: uuid11.optional(),
-  seat_id: uuid11.optional(),
+  build_request_id: uuid12.optional(),
+  phase_run_id: uuid12.optional(),
+  seat_id: uuid12.optional(),
   required_secret_keys: external_exports.array(external_exports.string().trim().min(1).max(200)).max(25).default([])
 }).strict();
 var softwareVercelDeployPreviewOutputSchema = external_exports.object({
-  vercel_deployment_record_id: uuid11,
+  vercel_deployment_record_id: uuid12,
   deployment_id: external_exports.string(),
   deployment_url: external_exports.string().nullable(),
   commit_sha: external_exports.string(),
@@ -46146,18 +46223,18 @@ var softwareVercelDeployPreviewOutputSchema = external_exports.object({
 });
 
 // ../../packages/protocol/src/software-factory-events.ts
-var uuid12 = external_exports.string().uuid();
+var uuid13 = external_exports.string().uuid();
 var softwareFactoryPhaseRunCompletedEventSchema = external_exports.object({
-  tenantId: uuid12,
-  phaseRunId: uuid12,
-  buildRequestId: uuid12.nullish(),
+  tenantId: uuid13,
+  phaseRunId: uuid13,
+  buildRequestId: uuid13.nullish(),
   status: external_exports.enum(["passed", "failed"]),
   idempotencyKey: external_exports.string().min(1).optional()
 }).strict();
 var softwareFactoryBudgetExhaustedEventSchema = external_exports.object({
-  tenantId: uuid12,
-  phaseRunId: uuid12,
-  buildRequestId: uuid12,
+  tenantId: uuid13,
+  phaseRunId: uuid13,
+  buildRequestId: uuid13,
   reason: external_exports.string().min(1),
   idempotencyKey: external_exports.string().min(1).optional()
 }).strict();
@@ -48347,7 +48424,7 @@ External connectors are being rolled out provider by provider, conservatively (r
     order: 48,
     title: "CLI and MCP installation guide",
     summary: "Install the public CLI, register remote token-backed MCP clients, and find the full command and tool catalog.",
-    version: "2026-07-16.7",
+    version: "2026-07-16.9",
     public: true,
     audiences: ["human", "cli", "mcp", "in_app_agent"],
     stages: ["company_setup", "staffing"],
@@ -48958,6 +49035,7 @@ Several rows here are seat-operating commands (\`task.create\`, the \`signal.*\`
 | \`rost_list_agent_runs\` | \`agent.list_runs\` | Read a seat's agent run history (status, lane, model, cost, per-run Skill activation, tool-call, guard-denied, and guard-held counts) plus the seat's run/tool-call rollup including held-action count. | Seat or tenant-admin | Call with \`{"seat_id":"<seat-id>"}\`; pass \`limit\` for a deeper window. |
 | \`rost_get_agent_run_diagnostics\` | \`agent.get_run\` | Read one run's diagnostic record: transcript reference, token/cost usage, outcome, linked product-visible run errors, and loaded Skill activation file metadata. File hashes/sizes identify the immutable source package, while model prompt text may be bounded or truncated. | Seat or tenant-admin | Call with \`{"seat_id":"<seat-id>","run_id":"<run-id>"}\`. |
 | \`rost_list_agent_tool_calls\` | \`agent.list_tool_calls\` | Read a seat's tool-call ledger (tool name, guard result, manifest clause, outcome) with the held-action count as the hero metric. Never returns argument summaries or secret material. | Seat or tenant-admin | Call with \`{"seat_id":"<seat-id>"}\`; pass \`held_only: true\` for only guard-held calls. |
+| \`rost_watch_agent_run\` | \`agent.watch_run\` | Read a read-only live snapshot of one seat run: status/lane, derived current work-state, run-heartbeat (quiet-but-healthy vs stalled) with current phase, the persisted session transcript, and the run's tool-call step feed. Never returns secret material. | Seat or tenant-admin | Call with \`{"seat_id":"<seat-id>","run_id":"<run-id>"}\`; read-only and reflects the run's current live state. |
 | \`rost_list_agent_deliverables\` | \`deliverable.list\` | List durable agent deliverables for a seat, including explicit outputs and successful-run summaries. | Seat or tenant-admin | Call with \`{"seat_id":"<seat-id>"}\`. |
 | \`rost_get_agent_deliverable\` | \`deliverable.get\` | Read one durable agent deliverable by id for a seat. | Seat or tenant-admin | Call with \`{"seat_id":"<seat-id>","deliverable_id":"<id>"}\`. |
 | \`rost_accept_deliverable_value\` | \`deliverable.accept\` | Record a human-confirmed accepted value (USD) on a deliverable; owner-only and human-gated. Humans decide \u2014 agents cannot self-accept. Re-accepting records a correction as a new event. | Tenant-admin | Call with \`{"deliverable_id":"<id>","impact_value_usd":<number>}\`; expect human confirmation. |
@@ -49190,6 +49268,7 @@ Seat-scoped MCP tokens expose the operating protocol below. The server still che
 | \`rost_list_brokered_secret_grants\` | \`secret_grant.list\` | List the seat's own brokered secret grants. Returns egress allowlist metadata only (host, path prefix, methods, scope, status), never the vault ref or any secret. | Seat | Call with {} (an agent is server-pinned to its own seat). |
 | \`rost_record_forge_conformance_findings\` | \`software_factory.conformance.record_findings\` | A Forge review seat (plan conformance, security, or QA) records structured findings as reviewer evidence. Set \`changeset_id\` on a finding that targets a specific changeset. Open findings route the request back to implementation; accepting a gap remains a separate human gate. Requires the seat's signed manifest grant. | Seat | Call with \`{"build_request_id":"<request-id>","findings":[{"severity":"major","category":"scope_gap","summary":"Missing migration verification","changeset_id":"<changeset-id>"}]}\`. |
 | \`rost_resolve_forge_conformance_finding\` | \`software_factory.conformance.resolve_finding\` | A Forge review seat marks a prior open finding resolved after re-reviewing the changeset and verifying it is fixed (reviewer verification, not human gap-acceptance). A resolved finding stops routing the request back to implementation, so the recycle loop converges. Requires the seat's signed manifest grant. | Seat | Call with \`{"build_request_id":"<request-id>","finding_ids":["<finding-id>"]}\`. |
+| \`rost_decide_a_conversational_gate\` | \`gate.decide\` | A seat agent DRAFTS a conversational gate approval bound to an artifact digest; the call stages a pending confirmation and a human owner/admin CONFIRMS it via /approvals (invariant #7 \u2014 an agent drafts, never self-decides). A stale artifact digest (the artifact changed since the gate was drafted) re-blocks and refuses. | Seat (draft; owner/admin decides) | Call with \`{"subject_kind":"artifact","subject_id":"<id>","artifact_ref":{"href":"<url>","label":"<label>"},"artifact_digest":"sha256:<digest>","decision":"approve","ask":"Ship it?","consequence":"Unblocks implementation."}\`; the seat-agent caller receives a confirmation handoff and the owner/admin decides. |
 
 ### MCP operation resources
 
@@ -52416,6 +52495,7 @@ var COMMAND_MANIFEST = [
   { "id": "agent.trust.revoke", "namespace": "agent", "action": "trust.revoke", "title": "Revoke agent Trusted grant", "description": "Human steward/admin revocation for an active Trusted execution grant. Preserves the historical grant row and appends an event.", "requiredScope": "tenant", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "grant_id", "flag": "grant-id", "type": "string", "required": true }, { "name": "reason", "flag": "reason", "type": "string", "required": false }], "hasComplexInput": false, "help": "Revoke an active Trusted grant while preserving history. Human steward/admin only." },
   { "id": "agent.trust.supersede", "namespace": "agent", "action": "trust.supersede", "title": "Supersede agent Trusted grant", "description": "Human steward/admin replacement for an active Trusted grant. Refuses stale receipt digests and links the new grant to the superseded grant.", "requiredScope": "tenant", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "agent_id", "flag": "agent-id", "type": "string", "required": true }, { "name": "expected_scope_digest", "flag": "expected-scope-digest", "type": "string", "required": true }, { "name": "budget_cents", "flag": "budget-cents", "type": "integer", "required": true }, { "name": "expires_at", "flag": "expires-at", "type": "string", "required": false }, { "name": "reason", "flag": "reason", "type": "string", "required": false }], "hasComplexInput": false, "help": "Replace the active Trusted grant with a fresh digest and budget. Rebuild the receipt first; stale digests are refused." },
   { "id": "agent.update_schedule", "namespace": "agent", "action": "update_schedule", "title": "Update agent schedule", "description": "Set or clear the scheduled execution cron for a draft or live agent on a seat.", "requiredScope": "tenant", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": true }, { "name": "schedule_cron", "flag": "schedule-cron", "type": "string", "required": true }], "hasComplexInput": false, "help": "Set or clear an agent's scheduled execution; a live scheduled agent must keep a steward chain resolving to a human." },
+  { "id": "agent.watch_run", "namespace": "agent", "action": "watch_run", "title": "Watch agent run", "description": "Return a read-only live snapshot of one seat run: run status and lane, the derived current work-state, the run-heartbeat (quiet-but-healthy vs stalled) with current phase, the persisted session transcript, and the run's tool-call step feed (tool name, guard result, outcome). Never returns argument summaries or secret material.", "requiredScope": "seat", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "seat_id", "flag": "seat-id", "type": "string", "required": true }, { "name": "run_id", "flag": "run-id", "type": "string", "required": true }], "hasComplexInput": false, "help": "Watch one run live (read-only): run status, derived work-state, quiet-vs-stalled heartbeat, transcript, and the tool-call step feed." },
   { "id": "aicos.brain_settings.get", "namespace": "aicos", "action": "brain_settings.get", "title": "Get AICOS brain settings", "description": "Read the AICOS run lane and brain selection. Returns labels and enum settings only; no secrets or vault refs.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [], "hasComplexInput": false, "help": "Read the AICOS lane and brain selection labels without returning provider keys, vault refs, or runner secrets." },
   { "id": "aicos.brain_settings.update", "namespace": "aicos", "action": "brain_settings.update", "title": "Update AICOS brain settings", "description": "Update the AICOS lane and cloud/runner brain preferences. Owner-only and audited.", "requiredScope": "tenant_admin", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "lane", "flag": "lane", "type": "enum", "required": false, "enumValues": ["cloud", "runner", "mcp"] }, { "name": "cloud_brain", "flag": "cloud-brain", "type": "enum", "required": false, "enumValues": ["managed", "byok"] }, { "name": "runner_brain", "flag": "runner-brain", "type": "enum", "required": false, "enumValues": ["claude-cli", "codex-cli"] }, { "name": "cloud_model_slug", "flag": "cloud-model-slug", "type": "string", "required": false }], "hasComplexInput": false, "help": "Owner-only update for AICOS cloud managed/BYOK and runner Claude/Codex preferences; BYOK requires an active tenant Anthropic key." },
   { "id": "cascade.import", "namespace": "cascade", "action": "import", "title": "Import Rocks from a ninety Rocks export", "description": "Bulk-import a ninety Rocks export into the Cascade as cycle goals under a company objective in the active cycle. Owners are seat names resolved to seats. Requires an active cycle and a target company objective (auto-selected when exactly one exists, else pass parent_objective_id). Idempotent \u2014 re-importing the same export is a no-op, and an existing cycle goal with the same objective + seat + title is skipped.", "requiredScope": "tenant_admin", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "dry_run", "flag": "dry-run", "type": "boolean", "required": false }, { "name": "parent_objective_id", "flag": "parent-objective-id", "type": "string", "required": false }], "hasComplexInput": true, "help": "Import a ninety Rocks export into the Cascade as cycle goals under a company objective in the active cycle; owners resolve to seats." },
@@ -52477,6 +52557,7 @@ var COMMAND_MANIFEST = [
   { "id": "friction.resolve", "namespace": "friction", "action": "resolve", "title": "Resolve Friction issue", "description": 'Resolve an issue with a root cause. In the default "ids" resolution_mode this also creates a remediation follow-up task; "already_fixed" records only the root cause (no follow-up task). Always records a human decision (decided_by) in the same transaction.', "requiredScope": "tenant_admin", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "issue_id", "flag": "issue-id", "type": "string", "required": true }, { "name": "resolution_mode", "flag": "resolution-mode", "type": "enum", "required": false, "enumValues": ["ids", "already_fixed"] }, { "name": "root_cause", "flag": "root-cause", "type": "string", "required": true }, { "name": "owner_seat_id", "flag": "owner-seat-id", "type": "string", "required": false }, { "name": "task_title", "flag": "task-title", "type": "string", "required": false }, { "name": "task_description", "flag": "task-description", "type": "string", "required": false }, { "name": "done_by", "flag": "done-by", "type": "string", "required": false }, { "name": "resolving_seat_id", "flag": "resolving-seat-id", "type": "string", "required": false }], "hasComplexInput": false, "help": "Resolve an issue with a root cause and remediation task; resolution is a human decision." },
   { "id": "friction.stale_candidates", "namespace": "friction", "action": "stale_candidates", "title": "Find stale friction", "description": "List open or diagnosing Friction issues whose linked remediation task has already shipped, making them high-confidence candidates for bulk resolution, with per-row evidence. Read-only \u2014 it never resolves anything.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "stale_after_days", "flag": "stale-after-days", "type": "integer", "required": false }, { "name": "limit", "flag": "limit", "type": "integer", "required": false }], "hasComplexInput": false, "help": "List open or diagnosing issues whose remediation task already shipped \u2014 high-confidence candidates for a bulk close-the-loop pass. Read-only." },
   { "id": "friction.update_status", "namespace": "friction", "action": "update_status", "title": "Update Friction issue status", "description": "Move a non-terminal issue between open and diagnosing. Terminal issues (resolved/dropped) cannot be reopened here.", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "issue_id", "flag": "issue-id", "type": "string", "required": true }, { "name": "status", "flag": "status", "type": "enum", "required": true, "enumValues": ["open", "diagnosing"] }], "hasComplexInput": false, "help": "Move a non-terminal issue between open and diagnosing while it is being worked." },
+  { "id": "gate.decide", "namespace": "gate", "action": "decide", "title": "Decide a conversational gate", "description": "A human approves or rejects a conversational gate bound to an artifact digest (a prototype URL, deliverable, or artifact). The agent drafts the decision and the human confirms it; the resolver is always a human (invariant #7). On approval the artifact must be unchanged since the gate was drafted \u2014 a stale digest re-blocks. Requires confirmation.", "requiredScope": "tenant", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "subject_kind", "flag": "subject-kind", "type": "enum", "required": true, "enumValues": ["prototype", "deliverable", "artifact"] }, { "name": "subject_id", "flag": "subject-id", "type": "string", "required": true }, { "name": "artifact_digest", "flag": "artifact-digest", "type": "string", "required": true }, { "name": "decision", "flag": "decision", "type": "enum", "required": true, "enumValues": ["approve", "reject"] }, { "name": "ask", "flag": "ask", "type": "string", "required": true }, { "name": "consequence", "flag": "consequence", "type": "string", "required": true }, { "name": "unblocked_targets", "flag": "unblocked-targets", "type": "array", "required": false, "itemType": "string" }, { "name": "rationale", "flag": "rationale", "type": "string", "required": false }], "hasComplexInput": true, "help": "A human approves or rejects a conversational gate bound to an artifact digest; the agent drafts, the human confirms (invariant #7)." },
   { "id": "goal.bind_measurable", "namespace": "goal", "action": "bind_measurable", "title": "Bind a Signal to a Cascade goal", "description": "Bind a measurable to a goal. Role defaults to 'informs' \u2014 a conservative informative indicator allowed at any goal level (many per goal) that never changes goal status. Role 'drives_status' makes it the goal's status driver: allowed only on a childless seat goal or milestone, at most one per goal, requires a second_anchor (a prior closed period + expected value confirming the Signal matched the books), and auto-status starts OFF until a steward opts in with goal.set_auto_status. Binding a driver over an existing informs binding of the same Signal promotes it. Binding is human-gated.", "requiredScope": "seat", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "goal_id", "flag": "goal-id", "type": "string", "required": true }, { "name": "measurable_id", "flag": "measurable-id", "type": "string", "required": true }, { "name": "role", "flag": "role", "type": "enum", "required": false, "enumValues": ["drives_status", "informs"] }], "hasComplexInput": true, "help": "Bind a Signal to a goal. Defaults to role informs (a conservative indicator at any level that never changes status); pass role drives_status with a second_anchor (a prior closed period + expected value confirming the Signal matched the books) to make it a childless leaf goal's status driver \u2014 this promotes an existing informs binding (auto-status starts OFF until a steward opts in)." },
   { "id": "goal.create", "namespace": "goal", "action": "create", "title": "Create Cascade goal", "description": "Create a cycle goal under an existing objective. The parent chain must terminate at a Compass objective in the same cycle (enforced server-side).", "requiredScope": "tenant", "confirmation": "none", "exposeOverMcp": true, "fields": [{ "name": "cycle_id", "flag": "cycle-id", "type": "string", "required": true }, { "name": "seat_id", "flag": "seat-id", "type": "string", "required": true }, { "name": "parent_goal_id", "flag": "parent-goal-id", "type": "string", "required": true }, { "name": "title", "flag": "title", "type": "string", "required": true }, { "name": "definition_of_done", "flag": "definition-of-done", "type": "string", "required": true }, { "name": "status", "flag": "status", "type": "enum", "required": false, "enumValues": ["on", "off"] }], "hasComplexInput": false, "help": "Create cycle goals under an existing objective; the parent chain must terminate at a Compass objective." },
   { "id": "goal.drop", "namespace": "goal", "action": "drop", "title": "Drop Cascade goal", "description": "Drop (retire) a goal by setting status to dropped. Dropping retires the commitment, so it is human-gated. The row is retained for audit (never deleted).", "requiredScope": "tenant_admin", "confirmation": "human_required", "exposeOverMcp": true, "fields": [{ "name": "goal_id", "flag": "goal-id", "type": "string", "required": true }], "hasComplexInput": false, "help": "Drop a goal to retire a commitment; the goal is retained for audit and dropping is human-gated." },