@rudderhq/cli 0.7.4-canary.0 → 0.7.4

package/dist/index.js

@@ -438,6 +438,11 @@ var init_constants = __esm({
       "rudder_agent_skills_create",
       "rudder_agent_skills_enable",
       "rudder_agent_skills_sync",
+      "rudder_goal_list",
+      "rudder_goal_context",
+      "rudder_goal_progress",
+      "rudder_goal_change_propose",
+      "rudder_goal_result_propose",
       "rudder_issue_get",
       "rudder_issue_list",
       "rudder_issue_search",
@@ -656,7 +661,7 @@ var init_constants = __esm({
       "system_event"
     ];
     CHAT_MESSAGE_STATUSES = ["streaming", "completed", "stopped", "failed", "interrupted"];
-    CHAT_CONTEXT_ENTITY_TYPES = ["issue", "project", "agent"];
+    CHAT_CONTEXT_ENTITY_TYPES = ["issue", "project", "agent", "goal"];
     GOAL_OBJECTIVE_MODES = ["target", "maximize", "maintain", "decide"];
     GOAL_EVALUATOR_KINDS = ["artifact", "metric", "policy", "human"];
     GOAL_CONTINUATION_KINDS = ["commitment", "wait", "decision", "verification"];
@@ -2052,7 +2057,9 @@ var init_chat = __esm({
       body: z5.string().trim().max(2e4).default(""),
       inlineAnnotations: chatInlineAnnotationsInputSchema.optional(),
       editUserMessageId: z5.string().uuid().optional().nullable(),
-      queuedMessageId: z5.string().uuid().optional().nullable()
+      queuedMessageId: z5.string().uuid().optional().nullable(),
+      modelOverride: chatModelOverrideSchema.optional().nullable(),
+      effortOverride: chatEffortOverrideSchema.optional().nullable()
     }).superRefine((value, ctx) => {
       if (value.body.length === 0 && (value.inlineAnnotations?.length ?? 0) === 0) {
         ctx.addIssue({
@@ -4020,6 +4027,7 @@ var init_goal = __esm({
   "../packages/shared/dist/validators/goal.js"() {
     "use strict";
     init_constants();
+    init_issue();
     jsonRecord = z27.record(z27.string(), z27.unknown());
     evidenceRefSchema = z27.string().trim().min(1).regex(/^[a-z][a-z0-9+.-]*:[^\s]+$/i, "Evidence references must use a URI-like scheme");
     sha256HexSchema = z27.string().regex(/^[a-f0-9]{64}$/, "Expected a SHA-256 hex digest");
@@ -4047,16 +4055,20 @@ var init_goal = __esm({
       title: z27.string().trim().min(1),
       description: z27.string().optional().nullable(),
       alignmentQuestion: z27.string().trim().min(1).optional().nullable(),
-      /** Accepted for legacy clients but intentionally ignored by the canonical create command. */
+      targetTime: z27.coerce.date().optional().nullable(),
       level: z27.string().optional(),
       status: z27.string().optional(),
       parentId: z27.string().uuid().optional().nullable(),
-      ownerAgentId: z27.string().uuid().optional().nullable()
+      ownerAgentId: z27.string().uuid().optional().nullable(),
+      ownerAgentRuntimeOverrides: issueAssigneeAdapterOverridesSchema.optional().nullable()
     });
     updateGoalSchema = z27.object({
       title: z27.string().trim().min(1).optional(),
       description: z27.string().optional().nullable(),
-      alignmentQuestion: z27.string().trim().min(1).optional().nullable()
+      alignmentQuestion: z27.string().trim().min(1).optional().nullable(),
+      ownerAgentId: z27.string().uuid().optional().nullable(),
+      ownerAgentRuntimeOverrides: issueAssigneeAdapterOverridesSchema.optional().nullable(),
+      targetTime: z27.coerce.date().optional().nullable()
     }).strict();
     activateGoalSchema = z27.object({
       confirmed: z27.literal(true),
@@ -4108,6 +4120,7 @@ var init_goal = __esm({
       requestKey: z27.string().trim().min(1),
       packetHash: sha256HexSchema,
       packet: goalStartPacketSchema,
+      allowCapabilityMismatch: z27.boolean().optional(),
       draftGoalId: z27.string().uuid().optional()
     }).strict();
     createGoalActivitySchema = z27.object({
@@ -9243,6 +9256,51 @@ var RUDDER_MCP_TOOL_DESCRIPTORS = [
     "requiresAgentId": false,
     "attachesRunIdWhenAvailable": true
   },
+  {
+    "capabilityId": "goal.list",
+    "name": "rudder_goal_list",
+    "description": "Discover Goals owned by the authenticated Agent; defaults to active Goals and returns current progress, next step, and attention state.",
+    "mutating": false,
+    "requiresOrgId": true,
+    "requiresAgentId": true,
+    "attachesRunIdWhenAvailable": false
+  },
+  {
+    "capabilityId": "goal.context",
+    "name": "rudder_goal_context",
+    "description": "Read the owned Goal agreement and current operating context before acting: contract revision, criteria, boundaries, progress, next step, attention, proposals, and recent feedback.",
+    "mutating": false,
+    "requiresOrgId": false,
+    "requiresAgentId": true,
+    "attachesRunIdWhenAvailable": false
+  },
+  {
+    "capabilityId": "goal.progress",
+    "name": "rudder_goal_progress",
+    "description": "Record evidence-backed progress for a Goal owned by the authenticated Agent and attribute it to the current Run.",
+    "mutating": true,
+    "requiresOrgId": false,
+    "requiresAgentId": true,
+    "attachesRunIdWhenAvailable": true
+  },
+  {
+    "capabilityId": "goal.change.propose",
+    "name": "rudder_goal_change_propose",
+    "description": "Propose a reviewable change to the current Goal contract when evidence shows its outcome, criteria, boundaries, or deadlines should change.",
+    "mutating": true,
+    "requiresOrgId": false,
+    "requiresAgentId": true,
+    "attachesRunIdWhenAvailable": true
+  },
+  {
+    "capabilityId": "goal.result.propose",
+    "name": "rudder_goal_result_propose",
+    "description": "Submit an evidence-backed Goal result for mandatory human acceptance without closing the Goal.",
+    "mutating": true,
+    "requiresOrgId": false,
+    "requiresAgentId": true,
+    "attachesRunIdWhenAvailable": true
+  },
   {
     "capabilityId": "issue.get",
     "name": "rudder_issue_get",
@@ -10271,6 +10329,7 @@ function coreMcpInputSchema(id) {
     ...required.length > 0 ? { required } : {}
   });
   const issue = string("Issue UUID, identifier, or short reference.", { maxLength: 200 });
+  const goal = string("Goal UUID from the current Goal Runtime Context.", { maxLength: 200 });
   const project = string("Project UUID or shortname.", { maxLength: 200 });
   const approval = string("Approval UUID or short reference.", { maxLength: 200 });
   const automation = string("Automation UUID or short reference.", { maxLength: 200 });
@@ -10311,6 +10370,120 @@ function coreMcpInputSchema(id) {
       return schema({ selectionRefs: strings("Skill selection references.", 100) }, ["selectionRefs"]);
     case "agent.skills.sync":
       return schema({ desiredSkills: string("Comma-separated desired skill references.", { maxLength: 2e4 }) }, ["desiredSkills"]);
+    case "goal.list":
+      return schema({
+        lifecycle: string("Goal lifecycle filter; active is the safe default.", {
+          enum: ["draft", "active", "closed", "all"],
+          maxLength: 20
+        }),
+        focus: boolean("Filter by whether the Goal is the organization Focus Goal."),
+        facet: string("Current Goal workspace facet.", {
+          enum: ["agent_advancing", "needs_attention", "waiting_focus", "waiting_external", "ready_for_acceptance", "closed"],
+          maxLength: 40
+        }),
+        limit: number("Maximum owned Goals to return.", 1, 100)
+      });
+    case "goal.context":
+      return schema({ goal: string("Goal UUID returned by rudder_goal_list.", { maxLength: 200 }) }, ["goal"]);
+    case "goal.progress":
+      return schema({
+        goal,
+        summary: string("Plain-language progress, observed change, or named blocker."),
+        activityKind: string("Progress classification.", { enum: ["progress", "evidence", "bottleneck"], maxLength: 30 }),
+        evidenceRefs: {
+          type: "array",
+          description: "URI-like references to artifacts, measurements, or other supporting evidence.",
+          minItems: 1,
+          maxItems: 100,
+          items: string("URI-like evidence reference.", { maxLength: 8192 })
+        },
+        idempotencyKey: string("Stable key for safe retry.", { maxLength: 500 })
+      }, ["goal", "summary", "evidenceRefs", "idempotencyKey"]);
+    case "goal.change.propose":
+      return schema({
+        goal,
+        contractRevision: number("Current Goal contract revision.", 1, 1e9),
+        afterContract: {
+          type: "object",
+          description: "Only the Goal contract fields that should change.",
+          additionalProperties: false,
+          minProperties: 1,
+          properties: {
+            outcomeStatement: string("Proposed result-oriented outcome."),
+            objectiveMode: string("Proposed objective mode.", {
+              enum: ["target", "maximize", "maintain", "decide"],
+              maxLength: 20
+            }),
+            criteria: {
+              type: "array",
+              minItems: 1,
+              maxItems: 100,
+              items: schema({
+                id: string("Stable criterion id.", { maxLength: 500 }),
+                label: string("Plain-language success criterion."),
+                evaluator: string("Criterion evaluator.", {
+                  enum: ["artifact", "metric", "policy", "human"],
+                  maxLength: 20
+                }),
+                evidenceRequirements: {
+                  type: "array",
+                  maxItems: 100,
+                  items: string("URI-like required evidence reference.", { maxLength: 8192 })
+                }
+              }, ["id", "label", "evaluator"])
+            },
+            autonomyEnvelope: { type: "object", additionalProperties: true },
+            humanAuthorities: { type: "object", additionalProperties: true },
+            evaluationPolicy: { type: "object", additionalProperties: true },
+            actionDeadline: {
+              description: "Proposed ISO-8601 action deadline, or null to clear it.",
+              oneOf: [{ type: "string", format: "date-time" }, { type: "null" }]
+            },
+            evaluationDeadline: {
+              description: "Proposed ISO-8601 evaluation deadline, or null to clear it.",
+              oneOf: [{ type: "string", format: "date-time" }, { type: "null" }]
+            }
+          }
+        },
+        rationale: string("Why the current contract should change and what evidence invalidated it."),
+        evidenceRefs: {
+          type: "array",
+          description: "URI-like references supporting the proposed change.",
+          maxItems: 100,
+          items: string("URI-like evidence reference.", { maxLength: 8192 })
+        },
+        idempotencyKey: string("Stable key for safe retry.", { maxLength: 500 })
+      }, ["goal", "contractRevision", "afterContract", "rationale", "idempotencyKey"]);
+    case "goal.result.propose":
+      return schema({
+        goal,
+        contractRevision: number("Current Goal contract revision.", 1, 1e9),
+        criteria: {
+          type: "array",
+          description: "Criterion outcomes for the current contract revision.",
+          minItems: 1,
+          maxItems: 100,
+          items: schema({
+            id: string("Criterion id from the Goal Runtime Context.", { maxLength: 500 }),
+            status: string("Observed criterion status.", { enum: ["met", "unmet", "breached", "unknown"], maxLength: 20 })
+          }, ["id", "status"])
+        },
+        evidenceRefs: {
+          type: "array",
+          description: "URI-like references supporting the proposed result.",
+          minItems: 1,
+          maxItems: 100,
+          items: string("URI-like evidence reference.", { maxLength: 8192 })
+        },
+        resultValue: {
+          description: "Optional measured result value.",
+          oneOf: [{ type: "string", maxLength: 1e5 }, { type: "number" }, { type: "boolean" }]
+        },
+        decision: string("Optional decision reached for decide-mode Goals."),
+        resultPayload: { type: "object", description: "Optional structured result details.", additionalProperties: true },
+        riskSummary: string("Known risks, limitations, or remaining gaps."),
+        idempotencyKey: string("Stable key for safe retry.", { maxLength: 500 })
+      }, ["goal", "contractRevision", "criteria", "evidenceRefs", "riskSummary", "idempotencyKey"]);
     case "issue.list":
       return schema({
         status: string("Comma-separated issue statuses.", { maxLength: 500 }),
@@ -10852,6 +11025,66 @@ var AGENT_CLI_CAPABILITIES = [
     requiresRunId: false,
     attachesRunIdWhenAvailable: true
   },
+  {
+    id: "goal.list",
+    command: "rudder goal list [--lifecycle <draft|active|closed|all>] [--focus <true|false>] [--facet <facet>] [--limit <n>]",
+    category: "goal",
+    description: "Discover Goals owned by the authenticated Agent; defaults to active Goals and returns current progress, next step, and attention state.",
+    mutating: false,
+    contract: "agent-v1",
+    requiresOrgId: true,
+    requiresAgentId: true,
+    requiresRunId: false,
+    attachesRunIdWhenAvailable: false
+  },
+  {
+    id: "goal.context",
+    command: "rudder goal context <goal-id>",
+    category: "goal",
+    description: "Read the owned Goal agreement and current operating context before acting: contract revision, criteria, boundaries, progress, next step, attention, proposals, and recent feedback.",
+    mutating: false,
+    contract: "agent-v1",
+    requiresOrgId: false,
+    requiresAgentId: true,
+    requiresRunId: false,
+    attachesRunIdWhenAvailable: false
+  },
+  {
+    id: "goal.progress",
+    command: "rudder goal progress <goal-id> --summary <text> --evidence-refs <json> --idempotency-key <key>",
+    category: "goal",
+    description: "Record evidence-backed progress for a Goal owned by the authenticated Agent and attribute it to the current Run.",
+    mutating: true,
+    contract: "agent-v1",
+    requiresOrgId: false,
+    requiresAgentId: true,
+    requiresRunId: true,
+    attachesRunIdWhenAvailable: true
+  },
+  {
+    id: "goal.change.propose",
+    command: "rudder goal change propose <goal-id> --contract-revision <n> --after-contract <json> --rationale <text> --idempotency-key <key>",
+    category: "goal",
+    description: "Propose a reviewable change to the current Goal contract when evidence shows its outcome, criteria, boundaries, or deadlines should change.",
+    mutating: true,
+    contract: "agent-v1",
+    requiresOrgId: false,
+    requiresAgentId: true,
+    requiresRunId: true,
+    attachesRunIdWhenAvailable: true
+  },
+  {
+    id: "goal.result.propose",
+    command: "rudder goal result propose <goal-id> --contract-revision <n> --criteria <json> --evidence-refs <json> --risk-summary <text> --idempotency-key <key>",
+    category: "goal",
+    description: "Submit an evidence-backed Goal result for mandatory human acceptance without closing the Goal.",
+    mutating: true,
+    contract: "agent-v1",
+    requiresOrgId: false,
+    requiresAgentId: true,
+    requiresRunId: true,
+    attachesRunIdWhenAvailable: true
+  },
   {
     id: "agent.hire",
     command: "rudder agent hire --org-id <id> --payload <json>",
@@ -12033,6 +12266,7 @@ var AGENT_CLI_CAPABILITIES = [
 // src/agent-v1-registry.ts
 var CATEGORY_TITLES = {
   agent: "Agent",
+  goal: "Goal",
   issue: "Issue",
   project: "Project",
   automation: "Automation",
@@ -12323,6 +12557,10 @@ var LEGACY_ARGUMENT_ALIASES = {
     selections: "selectionRefs",
     skills: "selectionRefs"
   },
+  "goal.context": { goalId: "goal" },
+  "goal.progress": { goalId: "goal" },
+  "goal.change.propose": { goalId: "goal" },
+  "goal.result.propose": { goalId: "goal" },
   "issue.get": { issueId: "issue" },
   "issue.context": { issueId: "issue" },
   "issue.checkout": { issueId: "issue" },
@@ -12751,6 +12989,64 @@ async function callToolDirectlyIfSupported(toolName, rawArgs, env, signal) {
       return success(await api.get("/api/agents/me"));
     case "agent.inbox":
       return success(await api.get("/api/agents/me/inbox-lite"));
+    case "goal.list": {
+      const orgId = requiredRuntimeString(env, "RUDDER_ORG_ID");
+      requiredRuntimeString(env, "RUDDER_AGENT_ID");
+      const params = new URLSearchParams({
+        lifecycle: optionalString(input.lifecycle) ?? "active",
+        limit: String(parsePositiveInteger(input.limit, 20))
+      });
+      if (typeof input.focus === "boolean") params.set("focus", String(input.focus));
+      appendOptionalQuery(params, "facet", input.facet);
+      return success(await api.get(`/api/orgs/${encodeURIComponent(orgId)}/goals/assigned?${params}`));
+    }
+    case "goal.context":
+      requiredRuntimeString(env, "RUDDER_AGENT_ID");
+      return success(await api.get(
+        `/api/goals/${encodeURIComponent(requiredAnyString(input, ["goal", "goalId"]))}/agent-context`
+      ));
+    case "goal.progress": {
+      const payload = createGoalActivitySchema.parse({
+        summary: requiredString(input, "summary"),
+        activityKind: optionalString(input.activityKind) ?? "progress",
+        evidenceRefs: input.evidenceRefs,
+        idempotencyKey: requiredString(input, "idempotencyKey")
+      });
+      return success(await api.post(
+        `/api/goals/${encodeURIComponent(requiredAnyString(input, ["goal", "goalId"]))}/activities`,
+        payload
+      ));
+    }
+    case "goal.change.propose": {
+      const payload = createGoalChangeProposalSchema.parse({
+        expectedContractRevision: input.contractRevision,
+        afterContract: input.afterContract,
+        rationale: requiredString(input, "rationale"),
+        evidenceRefs: input.evidenceRefs,
+        idempotencyKey: requiredString(input, "idempotencyKey")
+      });
+      return success(await api.post(
+        `/api/goals/${encodeURIComponent(requiredAnyString(input, ["goal", "goalId"]))}/change-proposals`,
+        payload
+      ));
+    }
+    case "goal.result.propose": {
+      const decision = optionalString(input.decision);
+      const payload = createGoalResultProposalSchema.parse({
+        contractRevision: input.contractRevision,
+        criteria: input.criteria,
+        evidenceRefs: input.evidenceRefs,
+        resultValue: input.resultValue,
+        ...decision ? { decision } : {},
+        resultPayload: input.resultPayload,
+        riskSummary: requiredString(input, "riskSummary"),
+        idempotencyKey: requiredString(input, "idempotencyKey")
+      });
+      return success(await api.post(
+        `/api/goals/${encodeURIComponent(requiredAnyString(input, ["goal", "goalId"]))}/result-proposals`,
+        payload
+      ));
+    }
     case "issue.get":
       return success(await api.get(`/api/issues/${encodeURIComponent(requiredAnyString(input, ["issue", "issueId"]))}`));
     case "issue.context": {
@@ -13095,6 +13391,73 @@ function cliArgsForCapability(capabilityId, input, tempFiles, env) {
       pushOptional(args, "--desired-skills", input.desiredSkills);
       return args;
     }
+    case "goal.list": {
+      const args = ["goal", "list"];
+      pushOptional(args, "--lifecycle", input.lifecycle ?? "active");
+      if (typeof input.focus === "boolean") args.push("--focus", String(input.focus));
+      pushOptional(args, "--facet", input.facet);
+      if (input.limit !== void 0) args.push("--limit", String(input.limit));
+      return args;
+    }
+    case "goal.context":
+      return ["goal", "context", requiredAnyString(input, ["goal", "goalId"])];
+    case "goal.progress": {
+      const args = [
+        "goal",
+        "progress",
+        requiredAnyString(input, ["goal", "goalId"]),
+        "--summary",
+        requiredString(input, "summary"),
+        "--evidence-refs",
+        JSON.stringify(input.evidenceRefs),
+        "--idempotency-key",
+        requiredString(input, "idempotencyKey")
+      ];
+      pushOptional(args, "--activity-kind", input.activityKind);
+      return args;
+    }
+    case "goal.change.propose": {
+      const args = [
+        "goal",
+        "change",
+        "propose",
+        requiredAnyString(input, ["goal", "goalId"]),
+        "--contract-revision",
+        String(input.contractRevision),
+        "--after-contract",
+        JSON.stringify(input.afterContract),
+        "--rationale",
+        requiredString(input, "rationale"),
+        "--idempotency-key",
+        requiredString(input, "idempotencyKey")
+      ];
+      if (input.evidenceRefs !== void 0) {
+        args.push("--evidence-refs", JSON.stringify(input.evidenceRefs));
+      }
+      return args;
+    }
+    case "goal.result.propose": {
+      const args = [
+        "goal",
+        "result",
+        "propose",
+        requiredAnyString(input, ["goal", "goalId"]),
+        "--contract-revision",
+        String(input.contractRevision),
+        "--criteria",
+        JSON.stringify(input.criteria),
+        "--evidence-refs",
+        JSON.stringify(input.evidenceRefs),
+        "--risk-summary",
+        requiredString(input, "riskSummary"),
+        "--idempotency-key",
+        requiredString(input, "idempotencyKey")
+      ];
+      if (input.resultValue !== void 0) args.push("--result-value", JSON.stringify(input.resultValue));
+      pushOptional(args, "--decision", input.decision);
+      if (input.resultPayload !== void 0) args.push("--result-payload", JSON.stringify(input.resultPayload));
+      return args;
+    }
     case "issue.get":
       return ["issue", "get", requiredAnyString(input, ["issue", "issueId"])];
     case "issue.list": {
@@ -14634,6 +14997,89 @@ function asString(value, fallback) {
 }
 
 // ../packages/agent-runtime-utils/dist/server-utils.prompts.js
+var RUDDER_GOAL_RUNTIME_BOUNDARY = `This is a Rudder product Goal, not a Codex internal goal. Do not call Codex \`create_goal\`, \`update_goal\`, or \`get_goal\` for it; those tools do not manage Rudder Goals. If the Goal packet names an exact managed Rudder tool, call that typed tool directly. Do not load \`rudder-docs\`, inspect skill files, or run discovery commands merely to confirm a tool that the packet already names. If the Rudder Goal context is missing or stale, report the named blocker and request refreshed context instead of using shell, Bash, curl, or the \`rudder\` CLI to retrieve it.
+
+Record meaningful evidence-backed advancement with \`rudder_goal_progress\`; the tool automatically attributes progress to this Run. If evidence shows the Goal contract itself must change, use \`rudder_goal_change_propose\` so a human can review the exact delta; never silently redefine the outcome or boundaries. When the outcome is ready for review, use \`rudder_goal_result_propose\` with the current contract revision and supporting evidence. Do not use shell, Bash, curl, or the \`rudder\` CLI for these actions.
+
+A human must accept every terminal Goal result. A Result Proposal requests acceptance; it does not let the runtime mark, close, or claim the Goal complete.`;
+var GOAL_STARTED_PROMPT_TEMPLATE = `You are agent {{agent.id}} ({{agent.name}}). A Goal has started and you are responsible for advancing it.
+
+{{context.rudderWorkspace.orgResourcesPrompt}}
+
+${RUDDER_GOAL_RUNTIME_BOUNDARY}
+
+## Goal Runtime Context
+
+**Goal:** {{context.goalRuntime.goalTitle}}
+**Goal ID:** {{context.goalRuntime.goalId}}
+
+**Goal outcome:**
+{{context.goalRuntime.goalOutcome}}
+
+**Current contract:**
+{{context.goalRuntime.currentContract}}
+
+**Continuation:**
+{{context.goalRuntime.continuation}}
+
+Advance this Goal from the current contract and continuation. Preserve the stated outcome and contract boundaries; do not silently redefine them.`;
+var GOAL_FEEDBACK_PROMPT_TEMPLATE = `You are agent {{agent.id}} ({{agent.name}}). New feedback requires your review on a Goal you own.
+
+{{context.rudderWorkspace.orgResourcesPrompt}}
+
+${RUDDER_GOAL_RUNTIME_BOUNDARY}
+
+## Goal Runtime Context
+
+**Goal:** {{context.goalRuntime.goalTitle}}
+**Goal ID:** {{context.goalRuntime.goalId}}
+
+**Goal outcome:**
+{{context.goalRuntime.goalOutcome}}
+
+**Current contract:**
+{{context.goalRuntime.currentContract}}
+
+**Continuation:**
+{{context.goalRuntime.continuation}}
+
+## Goal Feedback
+
+**Feedback ID:** {{context.goalRuntime.feedbackId}}
+
+**Feedback body:**
+{{context.goalRuntime.feedbackBody}}
+
+Review the feedback against the current Goal contract, then continue from the recorded continuation. Treat any outcome or contract change as an explicit proposal instead of silently changing the Goal.`;
+var GOAL_CHANGE_DECIDED_PROMPT_TEMPLATE = `You are agent {{agent.id}} ({{agent.name}}). A human decided a proposed change to a Goal you own.
+
+{{context.rudderWorkspace.orgResourcesPrompt}}
+
+${RUDDER_GOAL_RUNTIME_BOUNDARY}
+
+## Goal Runtime Context
+
+**Goal:** {{context.goalRuntime.goalTitle}}
+**Goal ID:** {{context.goalRuntime.goalId}}
+
+**Goal outcome:**
+{{context.goalRuntime.goalOutcome}}
+
+**Current contract:**
+{{context.goalRuntime.currentContract}}
+
+**Continuation:**
+{{context.goalRuntime.continuation}}
+
+## Goal Change Decision
+
+**Decision:** {{context.goalRuntime.decision}}
+**Decision status:** {{context.goalRuntime.decisionStatus}}
+
+**Decision note:**
+{{context.goalRuntime.decisionNote}}
+
+Continue from the current Goal contract and this human decision. Do not apply a rejected change or silently reinterpret the decision.`;
 var ISSUE_ASSIGNEE_EXECUTION_RAIL = "Before doing issue-scoped execution as the assignee, check out the assigned issue. If checkout returns `409`, do not retry; stop and report the ownership conflict.";
 var ISSUE_ASSIGN_PROMPT_TEMPLATE = `You are agent {{agent.id}} ({{agent.name}}). You have been assigned to work on an issue.
 
@@ -17847,6 +18293,124 @@ function registerDashboardCommands(program) {
   );
 }
 
+// src/commands/client/goal.ts
+init_dist();
+function registerGoalCommands(program) {
+  const goal = program.command("goal").description("Goal Owner runtime operations");
+  addCommonClientOptions(
+    goal.command("list").description(getAgentCliCapabilityById("goal.list").description).option("--lifecycle <state>", "draft, active, closed, or all", "active").option("--focus <true|false>", "Filter by organization Focus state").option("--facet <facet>", "Filter by current workspace attention facet").option("--limit <n>", "Maximum Goals to return (1-100)", "20").action(async (opts) => {
+      try {
+        const ctx = resolveCommandContext(opts, { requireCompany: true });
+        if (!ctx.agentId) throw new Error("Agent ID is required. Set RUDDER_AGENT_ID.");
+        const params = new URLSearchParams({
+          lifecycle: opts.lifecycle,
+          limit: opts.limit
+        });
+        if (opts.focus !== void 0) params.set("focus", opts.focus);
+        if (opts.facet) params.set("facet", opts.facet);
+        const response = await ctx.api.get(`/api/orgs/${ctx.orgId}/goals/assigned?${params}`);
+        printOutput(response, { json: ctx.json });
+      } catch (err) {
+        handleCommandError(err);
+      }
+    }),
+    { includeCompany: true }
+  );
+  addCommonClientOptions(
+    goal.command("context").description(getAgentCliCapabilityById("goal.context").description).argument("<goalId>", "Goal ID returned by goal list").action(async (goalId, opts) => {
+      try {
+        const ctx = resolveCommandContext(opts);
+        if (!ctx.agentId) throw new Error("Agent ID is required. Set RUDDER_AGENT_ID.");
+        const response = await ctx.api.get(`/api/goals/${goalId}/agent-context`);
+        printOutput(response, { json: ctx.json });
+      } catch (err) {
+        handleCommandError(err);
+      }
+    })
+  );
+  addCommonClientOptions(
+    goal.command("progress").description(getAgentCliCapabilityById("goal.progress").description).argument("<goalId>", "Goal ID from the current Goal Runtime Context").requiredOption("--summary <text>", "Plain-language progress summary").option("--activity-kind <kind>", "progress, evidence, or bottleneck", "progress").requiredOption("--evidence-refs <json>", "JSON array of URI-like evidence references").requiredOption("--idempotency-key <key>", "Stable key for safe retry").action(async (goalId, opts) => {
+      try {
+        const ctx = resolveCommandContext(opts);
+        const payload = createGoalActivitySchema.parse({
+          summary: opts.summary,
+          activityKind: opts.activityKind,
+          evidenceRefs: parseJsonArray(opts.evidenceRefs, "evidence refs"),
+          idempotencyKey: opts.idempotencyKey
+        });
+        const activity = await ctx.api.post(`/api/goals/${goalId}/activities`, payload);
+        printOutput(activity, { json: ctx.json });
+      } catch (err) {
+        handleCommandError(err);
+      }
+    })
+  );
+  const change = goal.command("change").description("Goal contract change operations");
+  addCommonClientOptions(
+    change.command("propose").description(getAgentCliCapabilityById("goal.change.propose").description).argument("<goalId>", "Goal ID from the current Goal Runtime Context").requiredOption("--contract-revision <n>", "Current Goal contract revision").requiredOption("--after-contract <json>", "JSON object containing only proposed contract field changes").requiredOption("--rationale <text>", "Why the current Goal contract should change").option("--evidence-refs <json>", "JSON array of URI-like evidence references", "[]").requiredOption("--idempotency-key <key>", "Stable key for safe retry").action(async (goalId, opts) => {
+      try {
+        const ctx = resolveCommandContext(opts);
+        const payload = createGoalChangeProposalSchema.parse({
+          expectedContractRevision: Number(opts.contractRevision),
+          afterContract: parseJsonObject3(opts.afterContract, "after contract"),
+          rationale: opts.rationale,
+          evidenceRefs: parseJsonArray(opts.evidenceRefs ?? "[]", "evidence refs"),
+          idempotencyKey: opts.idempotencyKey
+        });
+        const proposal = await ctx.api.post(`/api/goals/${goalId}/change-proposals`, payload);
+        printOutput(proposal, { json: ctx.json });
+      } catch (err) {
+        handleCommandError(err);
+      }
+    })
+  );
+  const result = goal.command("result").description("Goal result operations");
+  addCommonClientOptions(
+    result.command("propose").description(getAgentCliCapabilityById("goal.result.propose").description).argument("<goalId>", "Goal ID from the current Goal Runtime Context").requiredOption("--contract-revision <n>", "Current Goal contract revision").requiredOption("--criteria <json>", "JSON array of criterion id/status objects").requiredOption("--evidence-refs <json>", "JSON array of URI-like evidence references").option("--result-value <json-or-text>", "Optional measured result value").option("--decision <text>", "Optional decision for decide-mode Goals").option("--result-payload <json>", "Optional structured result details").requiredOption("--risk-summary <text>", "Known risks, limitations, or remaining gaps").requiredOption("--idempotency-key <key>", "Stable key for safe retry").action(async (goalId, opts) => {
+      try {
+        const ctx = resolveCommandContext(opts);
+        const payload = createGoalResultProposalSchema.parse({
+          contractRevision: Number(opts.contractRevision),
+          criteria: parseJsonArray(opts.criteria, "criteria"),
+          evidenceRefs: parseJsonArray(opts.evidenceRefs, "evidence refs"),
+          ...opts.resultValue !== void 0 ? { resultValue: parseResultValue(opts.resultValue) } : {},
+          ...opts.decision !== void 0 ? { decision: opts.decision } : {},
+          ...opts.resultPayload !== void 0 ? { resultPayload: parseJsonObject3(opts.resultPayload, "result payload") } : {},
+          riskSummary: opts.riskSummary,
+          idempotencyKey: opts.idempotencyKey
+        });
+        const proposal = await ctx.api.post(`/api/goals/${goalId}/result-proposals`, payload);
+        printOutput(proposal, { json: ctx.json });
+      } catch (err) {
+        handleCommandError(err);
+      }
+    })
+  );
+}
+function parseJsonArray(value, label) {
+  const parsed = JSON.parse(value);
+  if (!Array.isArray(parsed)) throw new Error(`${label} must be a JSON array`);
+  return parsed;
+}
+function parseJsonObject3(value, label) {
+  const parsed = JSON.parse(value);
+  if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
+    throw new Error(`${label} must be a JSON object`);
+  }
+  return parsed;
+}
+function parseResultValue(value) {
+  try {
+    const parsed = JSON.parse(value);
+    if (typeof parsed === "string" || typeof parsed === "number" || typeof parsed === "boolean") {
+      return parsed;
+    }
+  } catch {
+    return value;
+  }
+  throw new Error("result value must be a string, number, or boolean");
+}
+
 // src/commands/client/issue.ts
 init_dist();
 import { readFile as readFile4, stat as stat4 } from "node:fs/promises";
@@ -20125,7 +20689,7 @@ import * as p15 from "@clack/prompts";
 import { spawn as spawn3, spawnSync as spawnSync4 } from "node:child_process";
 import { createHash as createHash2, randomUUID } from "node:crypto";
 import { createWriteStream, constants as fsConstants, mkdirSync, readFileSync as readFileSync2 } from "node:fs";
-import { access, chmod, copyFile as copyFile2, cp as cp2, mkdir as mkdir4, mkdtemp as mkdtemp2, readdir as readdir3, readFile as readFile6, rm as rm2, stat as stat5, utimes, writeFile as writeFile3 } from "node:fs/promises";
+import { access, chmod, copyFile as copyFile2, cp as cp2, lstat, mkdir as mkdir4, mkdtemp as mkdtemp2, readdir as readdir3, readFile as readFile6, rm as rm2, stat as stat5, utimes, writeFile as writeFile3 } from "node:fs/promises";
 import { homedir, tmpdir } from "node:os";
 import path22 from "node:path";
 import { Readable, Transform } from "node:stream";
@@ -21473,6 +22037,21 @@ async function startCommand(opts) {
   const version = opts.targetVersion?.trim() || opts.version?.trim() || resolveCurrentCliVersion();
   const dryRun = opts.dryRun === true;
   const desktopProgressJson = opts.desktopProgressJson === true;
+  const exactDesktopAssetPath = opts.desktopAssetPath?.trim() || null;
+  const exactDesktopAssetChecksum = opts.desktopAssetChecksum?.trim() || null;
+  const exactDesktopAssetName = opts.desktopAssetName?.trim() || null;
+  const exactDesktopReleaseDigest = opts.desktopReleaseDigest?.trim() || null;
+  if (exactDesktopAssetPath || exactDesktopAssetChecksum || exactDesktopAssetName || exactDesktopReleaseDigest) {
+    if (!exactDesktopAssetPath || !exactDesktopAssetChecksum || !exactDesktopAssetName || !exactDesktopReleaseDigest) {
+      throw new Error("Exact Desktop asset mode requires path, checksum, asset name, and release digest.");
+    }
+    if (!path22.isAbsolute(exactDesktopAssetPath) || exactDesktopAssetName.includes("/") || !/^[a-f0-9]{64}$/iu.test(exactDesktopAssetChecksum) || !/^[a-f0-9]{64}$/iu.test(exactDesktopReleaseDigest)) {
+      throw new Error("Exact Desktop asset mode received invalid candidate identity.");
+    }
+    if (opts.desktopAssetKind && opts.desktopAssetKind !== "full" && opts.desktopAssetKind !== "shell") {
+      throw new Error("Exact Desktop asset mode received an invalid asset kind.");
+    }
+  }
   let runtimeSupportsShellAssets = false;
   if (desktopProgressJson) {
     process.stdout.on("error", (error) => {
@@ -21559,49 +22138,86 @@ async function startCommand(opts) {
       return;
     }
     await withDesktopInstallLock(installPaths, async () => {
-      const directReleaseVersion = resolveDesktopReleaseVersion(tag);
       const progressFactory = desktopProgressJson ? createDesktopProgressFactory() : createByteProgress;
-      let release = null;
-      try {
-        release = await runStartPhase(
-          "Resolving Desktop release...",
-          "Desktop release resolved.",
-          () => fetchGithubRelease(repo, tag),
-          desktopProgressJson ? "resolving_release" : null
-        );
-      } catch (error) {
-        if (!directReleaseVersion) throw error;
-        p15.log.warn(
-          `Desktop release metadata could not be resolved; falling back to deterministic download URLs. ${formatFetchError(error)}`
+      let releaseTag;
+      let selectedAsset;
+      let selectedAssetKind;
+      let expectedChecksum;
+      let cachedAsset = null;
+      let assetCandidates = [];
+      let checksums = /* @__PURE__ */ new Map();
+      if (exactDesktopAssetPath) {
+        releaseTag = tag;
+        selectedAsset = {
+          name: exactDesktopAssetName,
+          browser_download_url: ""
+        };
+        selectedAssetKind = opts.desktopAssetKind ?? "full";
+        expectedChecksum = normalizeDesktopAssetChecksum(exactDesktopAssetChecksum);
+        const computedReleaseDigest = createHash2("sha256").update(JSON.stringify({
+          releaseTag,
+          assetName: selectedAsset.name,
+          assetChecksum: expectedChecksum,
+          assetKind: selectedAssetKind,
+          platform: target.platform,
+          arch: target.arch
+        })).digest("hex");
+        if (computedReleaseDigest !== exactDesktopReleaseDigest.toLowerCase()) {
+          throw new Error("Exact Desktop asset release digest does not match the candidate identity.");
+        }
+        const descriptor = await stat5(exactDesktopAssetPath);
+        if (!descriptor.isFile()) throw new Error("Exact Desktop asset must be a regular file.");
+        const linkDescriptor = await lstat(exactDesktopAssetPath);
+        if (linkDescriptor.isSymbolicLink()) throw new Error("Exact Desktop asset must not be a symbolic link.");
+        const checksum = await runStartPhase(
+          "Verifying staged Desktop checksum...",
+          `Verified ${pc14.cyan(path22.basename(exactDesktopAssetPath))}.`,
+          () => assertChecksumMatch(exactDesktopAssetPath, expectedChecksum),
+          desktopProgressJson ? "verifying_checksum" : null
         );
+        cachedAsset = { path: exactDesktopAssetPath, checksum, cacheStatus: "hit" };
+      } else {
+        const directReleaseVersion = resolveDesktopReleaseVersion(tag);
+        let release = null;
+        try {
+          release = await runStartPhase(
+            "Resolving Desktop release...",
+            "Desktop release resolved.",
+            () => fetchGithubRelease(repo, tag),
+            desktopProgressJson ? "resolving_release" : null
+          );
+        } catch (error) {
+          if (!directReleaseVersion) throw error;
+          p15.log.warn(
+            `Desktop release metadata could not be resolved; falling back to deterministic download URLs. ${formatFetchError(error)}`
+          );
+        }
+        releaseTag = release?.tag_name ?? (directReleaseVersion ? tag : "");
+        if (!releaseTag) throw new Error(`Unable to resolve Rudder Desktop release tag for ${repo}@${tag}.`);
+        assetCandidates = resolveDesktopAssetCandidates({
+          releaseAssets: release?.assets ?? [],
+          target,
+          repo,
+          tag,
+          directReleaseVersion,
+          allowShellAssets: runtimeSupportsShellAssets
+        });
+        if (assetCandidates.length === 0) {
+          throw new Error(`No Rudder Desktop portable asset found for ${target.platform}/${target.arch} in ${repo}@${releaseTag}.`);
+        }
+        const checksumAsset = selectChecksumAsset(release?.assets ?? []) ?? (directReleaseVersion ? buildGithubReleaseAsset(repo, tag, DESKTOP_CHECKSUM_ASSET_NAME) : null);
+        checksums = await downloadChecksums(checksumAsset, outputDir, progressFactory);
+        let selectedCandidate;
+        try {
+          selectedCandidate = selectChecksummedDesktopAssetCandidate(assetCandidates, checksums);
+        } catch {
+          throw new Error(`No checksummed Rudder Desktop asset found for ${target.platform}/${target.arch} in ${repo}@${releaseTag}.`);
+        }
+        for (const warning of selectedCandidate.warnings) p15.log.warn(warning);
+        selectedAsset = selectedCandidate.asset;
+        selectedAssetKind = selectedCandidate.kind;
+        expectedChecksum = selectedCandidate.expectedChecksum;
       }
-      const releaseTag = release?.tag_name ?? (directReleaseVersion ? tag : null);
-      if (!releaseTag) {
-        throw new Error(`Unable to resolve Rudder Desktop release tag for ${repo}@${tag}.`);
-      }
-      const assetCandidates = resolveDesktopAssetCandidates({
-        releaseAssets: release?.assets ?? [],
-        target,
-        repo,
-        tag,
-        directReleaseVersion,
-        allowShellAssets: runtimeSupportsShellAssets
-      });
-      if (assetCandidates.length === 0) {
-        throw new Error(`No Rudder Desktop portable asset found for ${target.platform}/${target.arch} in ${repo}@${releaseTag}.`);
-      }
-      const checksumAsset = selectChecksumAsset(release?.assets ?? []) ?? (directReleaseVersion ? buildGithubReleaseAsset(repo, tag, DESKTOP_CHECKSUM_ASSET_NAME) : null);
-      const checksums = await downloadChecksums(checksumAsset, outputDir, progressFactory);
-      let selectedCandidate;
-      try {
-        selectedCandidate = selectChecksummedDesktopAssetCandidate(assetCandidates, checksums);
-      } catch (error) {
-        throw new Error(`No checksummed Rudder Desktop asset found for ${target.platform}/${target.arch} in ${repo}@${releaseTag}.`);
-      }
-      for (const warning of selectedCandidate.warnings) p15.log.warn(warning);
-      let selectedAsset = selectedCandidate.asset;
-      let selectedAssetKind = selectedCandidate.kind;
-      let expectedChecksum = selectedCandidate.expectedChecksum;
       const metadata = await readInstallMetadata(installPaths.metadataPath);
       if (isInstalledDesktopCurrent(metadata, releaseTag, selectedAsset.name, expectedChecksum) && await pathExists2(installPaths.executablePath)) {
         p15.log.success(`Rudder Desktop is already installed at ${pc14.cyan(installPaths.appPath)}.`);
@@ -21615,8 +22231,7 @@ async function startCommand(opts) {
           desktopProgressJson ? "preparing_restart" : null
         );
       } else {
-        let cachedAsset;
-        try {
+        if (!exactDesktopAssetPath) try {
           cachedAsset = await downloadDesktopAssetWithCache(selectedAsset, expectedChecksum, {
             outputDir,
             progressFactory
@@ -21635,8 +22250,10 @@ async function startCommand(opts) {
             progressFactory
           });
         }
-        if (cachedAsset.cacheStatus === "hit") {
-          p15.log.success(`Desktop asset cache hit at ${pc14.cyan(cachedAsset.path)}.`);
+        if (!cachedAsset) throw new Error("Desktop update did not produce a verified asset.");
+        const verifiedAsset = cachedAsset;
+        if (verifiedAsset.cacheStatus === "hit") {
+          p15.log.success(`Desktop asset cache hit at ${pc14.cyan(verifiedAsset.path)}.`);
           if (desktopProgressJson) {
             writeDesktopProgress({
               phase: "downloading_asset",
@@ -21647,10 +22264,30 @@ async function startCommand(opts) {
         }
         const checksum = await runStartPhase(
           "Verifying Desktop checksum...",
-          `Verified ${pc14.cyan(path22.basename(cachedAsset.path))}.`,
-          () => assertChecksumMatch(cachedAsset.path, expectedChecksum),
+          `Verified ${pc14.cyan(path22.basename(verifiedAsset.path))}.`,
+          () => assertChecksumMatch(verifiedAsset.path, expectedChecksum),
           desktopProgressJson ? "verifying_checksum" : null
         );
+        if (opts.desktopPrepareOnly === true) {
+          writeDesktopProgress({
+            phase: "prepared",
+            message: "Desktop update is downloaded and verified.",
+            percent: 100,
+            assetName: selectedAsset.name,
+            assetChecksum: checksum,
+            stagedArtifactPath: path22.resolve(verifiedAsset.path),
+            stagedArtifactDigest: checksum,
+            releaseDigest: createHash2("sha256").update(JSON.stringify({
+              releaseTag,
+              assetName: selectedAsset.name,
+              assetChecksum: checksum,
+              assetKind: selectedAssetKind,
+              platform: target.platform,
+              arch: target.arch
+            })).digest("hex")
+          });
+          return;
+        }
         let applySignal = null;
         let applySignalController = null;
         if (desktopProgressJson && opts.desktopWaitForApply === true) {
@@ -21688,7 +22325,7 @@ async function startCommand(opts) {
         await runStartPhase(
           "Installing portable Desktop app...",
           `Installed Rudder Desktop to ${pc14.cyan(installPaths.appPath)}.`,
-          () => installPortableDesktop(cachedAsset.path, installPaths, target),
+          () => installPortableDesktop(verifiedAsset.path, installPaths, target),
           desktopProgressJson ? "preparing_restart" : null
         );
         await runStartPhase(
@@ -21795,7 +22432,7 @@ function createProgram() {
     });
     loadRudderEnvFile(options.config);
   });
-  program.command("start").description("Start Rudder Desktop and prepare the matching persistent CLI").option("--server-only", "Prepare the Rudder server runtime and persistent CLI without installing Desktop").option("--no-cli", "Skip persistent CLI installation").option("--no-runtime", "Skip Rudder runtime installation").option("--no-desktop", "Skip desktop app installation").option("--version <version>", "Rudder version to start (default: current CLI version)").option("--target-version <version>", "Rudder version to start; avoids the root CLI version flag").option("--repo <owner/repo>", "GitHub repository that hosts desktop releases").option("--output-dir <path>", "Directory for downloaded desktop release assets").option("--desktop-install-dir <path>", "Directory for the portable Desktop install").option("--no-open", "Install Desktop without launching it").option("--wait-for-active-runs", "Wait for active Rudder runs to finish before replacing Desktop", false).option("--desktop-progress-json", "Emit newline-delimited Desktop update progress events").option("--desktop-wait-for-apply", "Wait for an apply signal after downloading and verifying the Desktop update", false).option("--no-version-check", "Skip checking npm for a newer Rudder CLI version").option("--dry-run", "Print the start actions without changing the machine", false).action(startCommand);
+  program.command("start").description("Start Rudder Desktop and prepare the matching persistent CLI").option("--server-only", "Prepare the Rudder server runtime and persistent CLI without installing Desktop").option("--no-cli", "Skip persistent CLI installation").option("--no-runtime", "Skip Rudder runtime installation").option("--no-desktop", "Skip desktop app installation").option("--version <version>", "Rudder version to start (default: current CLI version)").option("--target-version <version>", "Rudder version to start; avoids the root CLI version flag").option("--repo <owner/repo>", "GitHub repository that hosts desktop releases").option("--output-dir <path>", "Directory for downloaded desktop release assets").option("--desktop-install-dir <path>", "Directory for the portable Desktop install").option("--no-open", "Install Desktop without launching it").option("--wait-for-active-runs", "Wait for active Rudder runs to finish before replacing Desktop", false).option("--desktop-progress-json", "Emit newline-delimited Desktop update progress events").option("--desktop-wait-for-apply", "Wait for an apply signal after downloading and verifying the Desktop update", false).option("--desktop-prepare-only", "Download and verify the Desktop update without installing or launching it", false).option("--desktop-asset-path <path>", "Use one previously staged, exact Desktop asset path").option("--desktop-asset-checksum <sha256>", "SHA-256 for the exact staged Desktop asset").option("--desktop-asset-name <name>", "Asset name bound to the exact staged Desktop candidate").option("--desktop-asset-kind <kind>", "Asset kind bound to the exact staged Desktop candidate (full or shell)").option("--desktop-release-digest <sha256>", "Release digest bound to the exact staged Desktop candidate").option("--no-version-check", "Skip checking npm for a newer Rudder CLI version").option("--dry-run", "Print the start actions without changing the machine", false).action(startCommand);
   program.command("onboard").description("Interactive first-run setup wizard").option("-c, --config <path>", "Path to config file").option("-d, --data-dir <path>", DATA_DIR_OPTION_HELP).option("-y, --yes", "Accept defaults (quickstart + start immediately)", false).option("--run", "Start Rudder immediately after saving config", false).action(onboard);
   program.command("doctor").description("Run diagnostic checks on your Rudder setup").option("-c, --config <path>", "Path to config file").option("-d, --data-dir <path>", DATA_DIR_OPTION_HELP).option("--repair", "Attempt to repair issues automatically").alias("--fix").option("-y, --yes", "Skip repair confirmation prompts").action(async (opts) => {
     await doctor(opts);
@@ -21825,6 +22462,7 @@ function createProgram() {
   ).option("--trigger <trigger>", "Trigger detail (manual | ping | callback | system)", "manual").option("--timeout-ms <ms>", "Max time to wait before giving up", "0").option("--json", "Output raw JSON where applicable").option("--debug", "Show raw adapter stdout/stderr JSON chunks").action(heartbeatRun);
   registerContextCommands(program);
   registerCompanyCommands(program);
+  registerGoalCommands(program);
   registerIssueCommands(program);
   registerProjectCommands(program);
   registerAgentCommands(program);