agentix-cli 0.43.0 → 0.44.0

package/dist/index.d.ts

@@ -1624,6 +1624,11 @@ declare const agentConfigSchema: z.ZodObject<{
      *   - "public": external apps can POST /api/public/agents/<id>/messages
      *     with a scoped token (agent:<id> or agent:*). */
     access: z.ZodDefault<z.ZodEnum<["private", "public"]>>;
+    /** Governance override for agent-facing management tools. An admin agent
+     *  may pause, resume and request deletion of schedules created by other
+     *  agents or by the operator. It never approves anything: approval of a
+     *  create/delete request stays operator-only (`agentx schedule approve`). */
+    admin: z.ZodOptional<z.ZodBoolean>;
     /** Per-agent third-party integrations registry. Declares which services
      *  this agent has credentials for (telegram-bot, hubspot, gitlab-user,
      *  gmail, etc.). Secrets stay in env vars / keyring; this block holds
@@ -1743,7 +1748,7 @@ declare const agentConfigSchema: z.ZodObject<{
         narrate?: "all" | "on" | "off" | undefined;
     }>>;
     /** How this agent appears on screen: its own cursor, drawn by the Mac
-     *  helper and click-through, never Anis's real mouse. See
+     *  helper and click-through, never the person's real mouse. See
      *  src/voice/presence.ts. */
     presence: z.ZodOptional<z.ZodObject<{
         /** Cursor colour, as #RRGGBB. Default: derived from the agent id. */
@@ -1752,7 +1757,7 @@ declare const agentConfigSchema: z.ZodObject<{
         initial: z.ZodOptional<z.ZodString>;
         /** Name shown under the cursor. Default: the agent's name. */
         label: z.ZodOptional<z.ZodString>;
-        /** May this agent click and type for Anis (presence mode "act")?
+        /** May this agent click and type for the person (presence mode "act")?
          *  Off by default: without it, "act" becomes "teach". */
         allowActions: z.ZodOptional<z.ZodBoolean>;
     }, "strip", z.ZodTypeAny, {
@@ -1782,7 +1787,7 @@ declare const agentConfigSchema: z.ZodObject<{
     billing: "api" | "subscription";
     toolUseRequired: string[];
     persistentProcess: boolean;
-    queueMode: "collect" | "followup" | "drop";
+    queueMode: "drop" | "collect" | "followup";
     heartbeat: {
         enabled: boolean;
         prompt: string;
@@ -1821,6 +1826,7 @@ declare const agentConfigSchema: z.ZodObject<{
     }> | undefined;
     contextStrategy?: "layered" | "planner" | undefined;
     gitlabAutoReply?: boolean | undefined;
+    admin?: boolean | undefined;
     voice?: {
         system?: string | Record<string, string> | undefined;
         provider?: "system" | "elevenlabs" | undefined;
@@ -1867,7 +1873,7 @@ declare const agentConfigSchema: z.ZodObject<{
     toolUseRequired?: string[] | undefined;
     gitlabAutoReply?: boolean | undefined;
     persistentProcess?: boolean | undefined;
-    queueMode?: "collect" | "followup" | "drop" | undefined;
+    queueMode?: "drop" | "collect" | "followup" | undefined;
     heartbeat?: {
         enabled?: boolean | undefined;
         prompt?: string | undefined;
@@ -1875,6 +1881,7 @@ declare const agentConfigSchema: z.ZodObject<{
         intervalMinutes?: number | undefined;
     } | undefined;
     access?: "private" | "public" | undefined;
+    admin?: boolean | undefined;
     integrations?: {
         label: string;
         kind: string;
@@ -1907,7 +1914,7 @@ declare const agentConfigSchema: z.ZodObject<{
         allowActions?: boolean | undefined;
     } | undefined;
 }>;
-declare const cronJobSchema: z.ZodEffects<z.ZodObject<{
+declare const cronJobSchema: z.ZodEffects<z.ZodEffects<z.ZodObject<{
     enabled: z.ZodDefault<z.ZodBoolean>;
     schedule: z.ZodString;
     timezone: z.ZodDefault<z.ZodString>;
@@ -1938,7 +1945,12 @@ declare const cronJobSchema: z.ZodEffects<z.ZodObject<{
      *  but appending an instruction to the prompt is reliably honored. Use
      *  1500 for briefs, 500 for status pings, 300 for pure classifiers. */
     maxOutputTokens: z.ZodOptional<z.ZodNumber>;
-    onError: z.ZodEffects<z.ZodDefault<z.ZodUnion<[z.ZodEnum<["log", "notify", "disable"]>, z.ZodArray<z.ZodEnum<["log", "notify", "disable"]>, "many">]>>, ("notify" | "log" | "disable")[], "notify" | "log" | "disable" | ("notify" | "log" | "disable")[] | undefined>;
+    /** How much this routine may do: `report` (read-only), `propose` (branch,
+     *  commit, MR/draft; never merge/deploy/delete) or `act` (the agent's full
+     *  permissions — the default). Enforced per run by the guard, not by the
+     *  prompt; only the claude-code tier can enforce it, others refuse. */
+    autonomy: z.ZodOptional<z.ZodEnum<["report", "propose", "act"]>>;
+    onError: z.ZodEffects<z.ZodDefault<z.ZodUnion<[z.ZodEnum<["log", "notify", "disable"]>, z.ZodArray<z.ZodEnum<["log", "notify", "disable"]>, "many">]>>, ("notify" | "disable" | "log")[], "notify" | "disable" | "log" | ("notify" | "disable" | "log")[] | undefined>;
     notify: z.ZodOptional<z.ZodObject<{
         channel: z.ZodString;
         chatId: z.ZodString;
@@ -1952,6 +1964,31 @@ declare const cronJobSchema: z.ZodEffects<z.ZodObject<{
         chatId: string;
         accountId?: string | undefined;
     }>>;
+    /** Secret that lets an external system fire this job now via
+     *  `POST /routines/<id>/fire`. Reference an env var (`"${MY_TOKEN}"`);
+     *  a job without one cannot be fired. See src/daemon/routine-fire.ts. */
+    fireToken: z.ZodOptional<z.ZodString>;
+    /** Agent id that created this job through the agent `schedule` tool.
+     *  Absent for operator-created jobs. Drives the ownership rule: an agent
+     *  manages only the routines it created, unless it is `admin`. */
+    createdBy: z.ZodOptional<z.ZodString>;
+    /** Pending operator approval for an agent-requested change. While a
+     *  `create` is pending the job never runs, whatever `enabled` says; a
+     *  pending `delete` leaves the job as it was until approved. Cleared by
+     *  `agentx schedule approve|reject <id>`. */
+    approval: z.ZodOptional<z.ZodObject<{
+        action: z.ZodEnum<["create", "delete"]>;
+        requestedBy: z.ZodString;
+        requestedAt: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        action: "delete" | "create";
+        requestedBy: string;
+        requestedAt: string;
+    }, {
+        action: "delete" | "create";
+        requestedBy: string;
+        requestedAt: string;
+    }>>;
 }, "strip", z.ZodTypeAny, {
     enabled: boolean;
     agent: string;
@@ -1959,7 +1996,7 @@ declare const cronJobSchema: z.ZodEffects<z.ZodObject<{
     timeout: number;
     schedule: string;
     timezone: string;
-    onError: ("notify" | "log" | "disable")[];
+    onError: ("notify" | "disable" | "log")[];
     model?: string | undefined;
     command?: string | undefined;
     notify?: {
@@ -1968,6 +2005,14 @@ declare const cronJobSchema: z.ZodEffects<z.ZodObject<{
         accountId?: string | undefined;
     } | undefined;
     maxOutputTokens?: number | undefined;
+    autonomy?: "report" | "propose" | "act" | undefined;
+    fireToken?: string | undefined;
+    createdBy?: string | undefined;
+    approval?: {
+        action: "delete" | "create";
+        requestedBy: string;
+        requestedAt: string;
+    } | undefined;
 }, {
     agent: string;
     schedule: string;
@@ -1983,7 +2028,15 @@ declare const cronJobSchema: z.ZodEffects<z.ZodObject<{
         accountId?: string | undefined;
     } | undefined;
     maxOutputTokens?: number | undefined;
-    onError?: "notify" | "log" | "disable" | ("notify" | "log" | "disable")[] | undefined;
+    autonomy?: "report" | "propose" | "act" | undefined;
+    onError?: "notify" | "disable" | "log" | ("notify" | "disable" | "log")[] | undefined;
+    fireToken?: string | undefined;
+    createdBy?: string | undefined;
+    approval?: {
+        action: "delete" | "create";
+        requestedBy: string;
+        requestedAt: string;
+    } | undefined;
 }>, {
     enabled: boolean;
     agent: string;
@@ -1991,7 +2044,7 @@ declare const cronJobSchema: z.ZodEffects<z.ZodObject<{
     timeout: number;
     schedule: string;
     timezone: string;
-    onError: ("notify" | "log" | "disable")[];
+    onError: ("notify" | "disable" | "log")[];
     model?: string | undefined;
     command?: string | undefined;
     notify?: {
@@ -2000,6 +2053,14 @@ declare const cronJobSchema: z.ZodEffects<z.ZodObject<{
         accountId?: string | undefined;
     } | undefined;
     maxOutputTokens?: number | undefined;
+    autonomy?: "report" | "propose" | "act" | undefined;
+    fireToken?: string | undefined;
+    createdBy?: string | undefined;
+    approval?: {
+        action: "delete" | "create";
+        requestedBy: string;
+        requestedAt: string;
+    } | undefined;
 }, {
     agent: string;
     schedule: string;
@@ -2015,7 +2076,63 @@ declare const cronJobSchema: z.ZodEffects<z.ZodObject<{
         accountId?: string | undefined;
     } | undefined;
     maxOutputTokens?: number | undefined;
-    onError?: "notify" | "log" | "disable" | ("notify" | "log" | "disable")[] | undefined;
+    autonomy?: "report" | "propose" | "act" | undefined;
+    onError?: "notify" | "disable" | "log" | ("notify" | "disable" | "log")[] | undefined;
+    fireToken?: string | undefined;
+    createdBy?: string | undefined;
+    approval?: {
+        action: "delete" | "create";
+        requestedBy: string;
+        requestedAt: string;
+    } | undefined;
+}>, {
+    enabled: boolean;
+    agent: string;
+    prompt: string;
+    timeout: number;
+    schedule: string;
+    timezone: string;
+    onError: ("notify" | "disable" | "log")[];
+    model?: string | undefined;
+    command?: string | undefined;
+    notify?: {
+        channel: string;
+        chatId: string;
+        accountId?: string | undefined;
+    } | undefined;
+    maxOutputTokens?: number | undefined;
+    autonomy?: "report" | "propose" | "act" | undefined;
+    fireToken?: string | undefined;
+    createdBy?: string | undefined;
+    approval?: {
+        action: "delete" | "create";
+        requestedBy: string;
+        requestedAt: string;
+    } | undefined;
+}, {
+    agent: string;
+    schedule: string;
+    model?: string | undefined;
+    enabled?: boolean | undefined;
+    command?: string | undefined;
+    prompt?: string | undefined;
+    timeout?: number | undefined;
+    timezone?: string | undefined;
+    notify?: {
+        channel: string;
+        chatId: string;
+        accountId?: string | undefined;
+    } | undefined;
+    maxOutputTokens?: number | undefined;
+    autonomy?: "report" | "propose" | "act" | undefined;
+    onError?: "notify" | "disable" | "log" | ("notify" | "disable" | "log")[] | undefined;
+    fireToken?: string | undefined;
+    createdBy?: string | undefined;
+    approval?: {
+        action: "delete" | "create";
+        requestedBy: string;
+        requestedAt: string;
+    } | undefined;
 }>;
 declare const meshPeerSchema: z.ZodObject<{
     url: z.ZodString;
@@ -2221,6 +2338,11 @@ declare const daemonConfigSchema: z.ZodObject<{
          *   - "public": external apps can POST /api/public/agents/<id>/messages
          *     with a scoped token (agent:<id> or agent:*). */
         access: z.ZodDefault<z.ZodEnum<["private", "public"]>>;
+        /** Governance override for agent-facing management tools. An admin agent
+         *  may pause, resume and request deletion of schedules created by other
+         *  agents or by the operator. It never approves anything: approval of a
+         *  create/delete request stays operator-only (`agentx schedule approve`). */
+        admin: z.ZodOptional<z.ZodBoolean>;
         /** Per-agent third-party integrations registry. Declares which services
          *  this agent has credentials for (telegram-bot, hubspot, gitlab-user,
          *  gmail, etc.). Secrets stay in env vars / keyring; this block holds
@@ -2340,7 +2462,7 @@ declare const daemonConfigSchema: z.ZodObject<{
             narrate?: "all" | "on" | "off" | undefined;
         }>>;
         /** How this agent appears on screen: its own cursor, drawn by the Mac
-         *  helper and click-through, never Anis's real mouse. See
+         *  helper and click-through, never the person's real mouse. See
          *  src/voice/presence.ts. */
         presence: z.ZodOptional<z.ZodObject<{
             /** Cursor colour, as #RRGGBB. Default: derived from the agent id. */
@@ -2349,7 +2471,7 @@ declare const daemonConfigSchema: z.ZodObject<{
             initial: z.ZodOptional<z.ZodString>;
             /** Name shown under the cursor. Default: the agent's name. */
             label: z.ZodOptional<z.ZodString>;
-            /** May this agent click and type for Anis (presence mode "act")?
+            /** May this agent click and type for the person (presence mode "act")?
              *  Off by default: without it, "act" becomes "teach". */
             allowActions: z.ZodOptional<z.ZodBoolean>;
         }, "strip", z.ZodTypeAny, {
@@ -2379,7 +2501,7 @@ declare const daemonConfigSchema: z.ZodObject<{
         billing: "api" | "subscription";
         toolUseRequired: string[];
         persistentProcess: boolean;
-        queueMode: "collect" | "followup" | "drop";
+        queueMode: "drop" | "collect" | "followup";
         heartbeat: {
             enabled: boolean;
             prompt: string;
@@ -2418,6 +2540,7 @@ declare const daemonConfigSchema: z.ZodObject<{
         }> | undefined;
         contextStrategy?: "layered" | "planner" | undefined;
         gitlabAutoReply?: boolean | undefined;
+        admin?: boolean | undefined;
         voice?: {
             system?: string | Record<string, string> | undefined;
             provider?: "system" | "elevenlabs" | undefined;
@@ -2464,7 +2587,7 @@ declare const daemonConfigSchema: z.ZodObject<{
         toolUseRequired?: string[] | undefined;
         gitlabAutoReply?: boolean | undefined;
         persistentProcess?: boolean | undefined;
-        queueMode?: "collect" | "followup" | "drop" | undefined;
+        queueMode?: "drop" | "collect" | "followup" | undefined;
         heartbeat?: {
             enabled?: boolean | undefined;
             prompt?: string | undefined;
@@ -2472,6 +2595,7 @@ declare const daemonConfigSchema: z.ZodObject<{
             intervalMinutes?: number | undefined;
         } | undefined;
         access?: "private" | "public" | undefined;
+        admin?: boolean | undefined;
         integrations?: {
             label: string;
             kind: string;
@@ -2544,13 +2668,13 @@ declare const daemonConfigSchema: z.ZodObject<{
                  *  per-account list (user id, chat id, @username). */
                 allowFrom: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
             }, "strip", z.ZodTypeAny, {
-                dm: "block" | "pair";
                 group: "all" | "mention-required";
+                dm: "block" | "pair";
                 allowFrom?: string[] | undefined;
             }, {
+                group?: "all" | "mention-required" | undefined;
                 allowFrom?: string[] | undefined;
                 dm?: "block" | "pair" | undefined;
-                group?: "all" | "mention-required" | undefined;
             }>>;
         }, "strip", z.ZodTypeAny, {
             enabled: boolean;
@@ -2561,8 +2685,8 @@ declare const daemonConfigSchema: z.ZodObject<{
                 allowFrom?: string[] | undefined;
             }>;
             policy: {
-                dm: "block" | "pair";
                 group: "all" | "mention-required";
+                dm: "block" | "pair";
                 allowFrom?: string[] | undefined;
             };
         }, {
@@ -2574,9 +2698,9 @@ declare const daemonConfigSchema: z.ZodObject<{
                 pollInbound?: boolean | undefined;
             }> | undefined;
             policy?: {
+                group?: "all" | "mention-required" | undefined;
                 allowFrom?: string[] | undefined;
                 dm?: "block" | "pair" | undefined;
-                group?: "all" | "mention-required" | undefined;
             } | undefined;
         }>>;
         whatsapp: z.ZodDefault<z.ZodObject<{
@@ -2772,12 +2896,12 @@ declare const daemonConfigSchema: z.ZodObject<{
             }>, "many">>;
         }, "strip", z.ZodTypeAny, {
             enabled: boolean;
+            host: string;
             routes: {
                 agent: string;
                 project: string;
             }[];
             webhookPort: number;
-            host: string;
             autoReplyLegacy: boolean;
             agentMappings: {
                 agentId: string;
@@ -2791,13 +2915,13 @@ declare const daemonConfigSchema: z.ZodObject<{
         }, {
             enabled?: boolean | undefined;
             token?: string | undefined;
+            host?: string | undefined;
             routes?: {
                 agent: string;
                 project: string;
             }[] | undefined;
             webhookPort?: number | undefined;
             webhookSecret?: string | undefined;
-            host?: string | undefined;
             autoReplyLegacy?: boolean | undefined;
             agentMappings?: {
                 agentId: string;
@@ -3087,12 +3211,12 @@ declare const daemonConfigSchema: z.ZodObject<{
     }, "strip", z.ZodTypeAny, {
         gitlab: {
             enabled: boolean;
+            host: string;
             routes: {
                 agent: string;
                 project: string;
             }[];
             webhookPort: number;
-            host: string;
             autoReplyLegacy: boolean;
             agentMappings: {
                 agentId: string;
@@ -3141,8 +3265,8 @@ declare const daemonConfigSchema: z.ZodObject<{
                 allowFrom?: string[] | undefined;
             }>;
             policy: {
-                dm: "block" | "pair";
                 group: "all" | "mention-required";
+                dm: "block" | "pair";
                 allowFrom?: string[] | undefined;
             };
         };
@@ -3209,13 +3333,13 @@ declare const daemonConfigSchema: z.ZodObject<{
         gitlab?: {
             enabled?: boolean | undefined;
             token?: string | undefined;
+            host?: string | undefined;
             routes?: {
                 agent: string;
                 project: string;
             }[] | undefined;
             webhookPort?: number | undefined;
             webhookSecret?: string | undefined;
-            host?: string | undefined;
             autoReplyLegacy?: boolean | undefined;
             agentMappings?: {
                 agentId: string;
@@ -3262,9 +3386,9 @@ declare const daemonConfigSchema: z.ZodObject<{
                 pollInbound?: boolean | undefined;
             }> | undefined;
             policy?: {
+                group?: "all" | "mention-required" | undefined;
                 allowFrom?: string[] | undefined;
                 dm?: "block" | "pair" | undefined;
-                group?: "all" | "mention-required" | undefined;
             } | undefined;
         } | undefined;
         github?: {
@@ -3327,7 +3451,7 @@ declare const daemonConfigSchema: z.ZodObject<{
             } | undefined;
         } | undefined;
     }>>;
-    crons: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodEffects<z.ZodObject<{
+    crons: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodEffects<z.ZodEffects<z.ZodObject<{
         enabled: z.ZodDefault<z.ZodBoolean>;
         schedule: z.ZodString;
         timezone: z.ZodDefault<z.ZodString>;
@@ -3358,7 +3482,12 @@ declare const daemonConfigSchema: z.ZodObject<{
          *  but appending an instruction to the prompt is reliably honored. Use
          *  1500 for briefs, 500 for status pings, 300 for pure classifiers. */
         maxOutputTokens: z.ZodOptional<z.ZodNumber>;
-        onError: z.ZodEffects<z.ZodDefault<z.ZodUnion<[z.ZodEnum<["log", "notify", "disable"]>, z.ZodArray<z.ZodEnum<["log", "notify", "disable"]>, "many">]>>, ("notify" | "log" | "disable")[], "notify" | "log" | "disable" | ("notify" | "log" | "disable")[] | undefined>;
+        /** How much this routine may do: `report` (read-only), `propose` (branch,
+         *  commit, MR/draft; never merge/deploy/delete) or `act` (the agent's full
+         *  permissions — the default). Enforced per run by the guard, not by the
+         *  prompt; only the claude-code tier can enforce it, others refuse. */
+        autonomy: z.ZodOptional<z.ZodEnum<["report", "propose", "act"]>>;
+        onError: z.ZodEffects<z.ZodDefault<z.ZodUnion<[z.ZodEnum<["log", "notify", "disable"]>, z.ZodArray<z.ZodEnum<["log", "notify", "disable"]>, "many">]>>, ("notify" | "disable" | "log")[], "notify" | "disable" | "log" | ("notify" | "disable" | "log")[] | undefined>;
         notify: z.ZodOptional<z.ZodObject<{
             channel: z.ZodString;
             chatId: z.ZodString;
@@ -3372,6 +3501,31 @@ declare const daemonConfigSchema: z.ZodObject<{
             chatId: string;
             accountId?: string | undefined;
         }>>;
+        /** Secret that lets an external system fire this job now via
+         *  `POST /routines/<id>/fire`. Reference an env var (`"${MY_TOKEN}"`);
+         *  a job without one cannot be fired. See src/daemon/routine-fire.ts. */
+        fireToken: z.ZodOptional<z.ZodString>;
+        /** Agent id that created this job through the agent `schedule` tool.
+         *  Absent for operator-created jobs. Drives the ownership rule: an agent
+         *  manages only the routines it created, unless it is `admin`. */
+        createdBy: z.ZodOptional<z.ZodString>;
+        /** Pending operator approval for an agent-requested change. While a
+         *  `create` is pending the job never runs, whatever `enabled` says; a
+         *  pending `delete` leaves the job as it was until approved. Cleared by
+         *  `agentx schedule approve|reject <id>`. */
+        approval: z.ZodOptional<z.ZodObject<{
+            action: z.ZodEnum<["create", "delete"]>;
+            requestedBy: z.ZodString;
+            requestedAt: z.ZodString;
+        }, "strip", z.ZodTypeAny, {
+            action: "delete" | "create";
+            requestedBy: string;
+            requestedAt: string;
+        }, {
+            action: "delete" | "create";
+            requestedBy: string;
+            requestedAt: string;
+        }>>;
     }, "strip", z.ZodTypeAny, {
         enabled: boolean;
         agent: string;
@@ -3379,7 +3533,55 @@ declare const daemonConfigSchema: z.ZodObject<{
         timeout: number;
         schedule: string;
         timezone: string;
-        onError: ("notify" | "log" | "disable")[];
+        onError: ("notify" | "disable" | "log")[];
+        model?: string | undefined;
+        command?: string | undefined;
+        notify?: {
+            channel: string;
+            chatId: string;
+            accountId?: string | undefined;
+        } | undefined;
+        maxOutputTokens?: number | undefined;
+        autonomy?: "report" | "propose" | "act" | undefined;
+        fireToken?: string | undefined;
+        createdBy?: string | undefined;
+        approval?: {
+            action: "delete" | "create";
+            requestedBy: string;
+            requestedAt: string;
+        } | undefined;
+    }, {
+        agent: string;
+        schedule: string;
+        model?: string | undefined;
+        enabled?: boolean | undefined;
+        command?: string | undefined;
+        prompt?: string | undefined;
+        timeout?: number | undefined;
+        timezone?: string | undefined;
+        notify?: {
+            channel: string;
+            chatId: string;
+            accountId?: string | undefined;
+        } | undefined;
+        maxOutputTokens?: number | undefined;
+        autonomy?: "report" | "propose" | "act" | undefined;
+        onError?: "notify" | "disable" | "log" | ("notify" | "disable" | "log")[] | undefined;
+        fireToken?: string | undefined;
+        createdBy?: string | undefined;
+        approval?: {
+            action: "delete" | "create";
+            requestedBy: string;
+            requestedAt: string;
+        } | undefined;
+    }>, {
+        enabled: boolean;
+        agent: string;
+        prompt: string;
+        timeout: number;
+        schedule: string;
+        timezone: string;
+        onError: ("notify" | "disable" | "log")[];
         model?: string | undefined;
         command?: string | undefined;
         notify?: {
@@ -3388,6 +3590,14 @@ declare const daemonConfigSchema: z.ZodObject<{
             accountId?: string | undefined;
         } | undefined;
         maxOutputTokens?: number | undefined;
+        autonomy?: "report" | "propose" | "act" | undefined;
+        fireToken?: string | undefined;
+        createdBy?: string | undefined;
+        approval?: {
+            action: "delete" | "create";
+            requestedBy: string;
+            requestedAt: string;
+        } | undefined;
     }, {
         agent: string;
         schedule: string;
@@ -3403,7 +3613,15 @@ declare const daemonConfigSchema: z.ZodObject<{
             accountId?: string | undefined;
         } | undefined;
         maxOutputTokens?: number | undefined;
-        onError?: "notify" | "log" | "disable" | ("notify" | "log" | "disable")[] | undefined;
+        autonomy?: "report" | "propose" | "act" | undefined;
+        onError?: "notify" | "disable" | "log" | ("notify" | "disable" | "log")[] | undefined;
+        fireToken?: string | undefined;
+        createdBy?: string | undefined;
+        approval?: {
+            action: "delete" | "create";
+            requestedBy: string;
+            requestedAt: string;
+        } | undefined;
     }>, {
         enabled: boolean;
         agent: string;
@@ -3411,7 +3629,7 @@ declare const daemonConfigSchema: z.ZodObject<{
         timeout: number;
         schedule: string;
         timezone: string;
-        onError: ("notify" | "log" | "disable")[];
+        onError: ("notify" | "disable" | "log")[];
         model?: string | undefined;
         command?: string | undefined;
         notify?: {
@@ -3420,6 +3638,14 @@ declare const daemonConfigSchema: z.ZodObject<{
             accountId?: string | undefined;
         } | undefined;
         maxOutputTokens?: number | undefined;
+        autonomy?: "report" | "propose" | "act" | undefined;
+        fireToken?: string | undefined;
+        createdBy?: string | undefined;
+        approval?: {
+            action: "delete" | "create";
+            requestedBy: string;
+            requestedAt: string;
+        } | undefined;
     }, {
         agent: string;
         schedule: string;
@@ -3435,7 +3661,15 @@ declare const daemonConfigSchema: z.ZodObject<{
             accountId?: string | undefined;
         } | undefined;
         maxOutputTokens?: number | undefined;
-        onError?: "notify" | "log" | "disable" | ("notify" | "log" | "disable")[] | undefined;
+        autonomy?: "report" | "propose" | "act" | undefined;
+        onError?: "notify" | "disable" | "log" | ("notify" | "disable" | "log")[] | undefined;
+        fireToken?: string | undefined;
+        createdBy?: string | undefined;
+        approval?: {
+            action: "delete" | "create";
+            requestedBy: string;
+            requestedAt: string;
+        } | undefined;
     }>>>;
     services: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
         name: z.ZodString;
@@ -3531,7 +3765,38 @@ declare const daemonConfigSchema: z.ZodObject<{
             taskError?: boolean | undefined;
             taskQueued?: boolean | undefined;
         }>>;
+        /** What `agentx notify` does on this machine when it delivers: a desktop
+         *  banner and a system sound. macOS only; see src/notify/local.ts. */
+        local: z.ZodDefault<z.ZodObject<{
+            banner: z.ZodDefault<z.ZodBoolean>;
+            sound: z.ZodDefault<z.ZodBoolean>;
+            /** A name from /System/Library/Sounds, without the extension. */
+            soundName: z.ZodDefault<z.ZodString>;
+            volume: z.ZodDefault<z.ZodNumber>;
+            /** Image for the AgentX Helper icon on banners (.png, .jpg, .icns).
+             *  Unset: the AgentX logo. Applied by `agentx desktop install`. */
+            icon: z.ZodOptional<z.ZodString>;
+        }, "strip", z.ZodTypeAny, {
+            banner: boolean;
+            sound: boolean;
+            soundName: string;
+            volume: number;
+            icon?: string | undefined;
+        }, {
+            banner?: boolean | undefined;
+            sound?: boolean | undefined;
+            soundName?: string | undefined;
+            volume?: number | undefined;
+            icon?: string | undefined;
+        }>>;
     }, "strip", z.ZodTypeAny, {
+        local: {
+            banner: boolean;
+            sound: boolean;
+            soundName: string;
+            volume: number;
+            icon?: string | undefined;
+        };
         on: {
             taskComplete: boolean;
             taskError: boolean;
@@ -3544,6 +3809,13 @@ declare const daemonConfigSchema: z.ZodObject<{
             accountId?: string | undefined;
         } | undefined;
     }, {
+        local?: {
+            banner?: boolean | undefined;
+            sound?: boolean | undefined;
+            soundName?: string | undefined;
+            volume?: number | undefined;
+            icon?: string | undefined;
+        } | undefined;
         on?: {
             taskComplete?: boolean | undefined;
             taskError?: boolean | undefined;
@@ -3685,16 +3957,21 @@ declare const daemonConfigSchema: z.ZodObject<{
         system: z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodRecord<z.ZodString, z.ZodString>]>>;
         /** Language for assigned system voices, e.g. "en", "fr-FR". */
         locale: z.ZodDefault<z.ZodString>;
+        /** What agents call the person they talk with, e.g. a first name.
+         *  Unset: "the user". */
+        listener: z.ZodOptional<z.ZodString>;
     }, "strip", z.ZodTypeAny, {
         provider: "system" | "elevenlabs";
         fallback: "system" | "none";
         locale: string;
         system?: string | Record<string, string> | undefined;
+        listener?: string | undefined;
     }, {
         system?: string | Record<string, string> | undefined;
         provider?: "system" | "elevenlabs" | undefined;
         fallback?: "system" | "none" | undefined;
         locale?: string | undefined;
+        listener?: string | undefined;
     }>>;
     business: z.ZodOptional<z.ZodObject<{
         enabled: z.ZodDefault<z.ZodBoolean>;
@@ -4041,8 +4318,7 @@ declare const daemonConfigSchema: z.ZodObject<{
             type: "gitlab";
             projects: string[];
         }>]>;
-        primaryToolLabel: z.ZodOptional<z.ZodString>; /** Non-secret metadata — username, email, host URL, portal id, JID, etc.
-         *  Visible in the dashboard and to skills. */
+        primaryToolLabel: z.ZodOptional<z.ZodString>;
         labels: z.ZodDefault<z.ZodArray<z.ZodObject<{
             name: z.ZodString;
             color: z.ZodDefault<z.ZodString>;
@@ -4170,7 +4446,7 @@ declare const daemonConfigSchema: z.ZodObject<{
         port: z.ZodDefault<z.ZodNumber>;
         bind: z.ZodDefault<z.ZodString>;
         token: z.ZodOptional<z.ZodString>;
-        daemonUrl: z.ZodDefault<z.ZodString>; /** Overrides the global voice.provider for this agent. */
+        daemonUrl: z.ZodDefault<z.ZodString>;
         daemons: z.ZodDefault<z.ZodArray<z.ZodObject<{
             name: z.ZodString;
             url: z.ZodString;
@@ -4721,7 +4997,7 @@ declare const daemonConfigSchema: z.ZodObject<{
             autoRunThreshold: number;
             suggestThreshold: number;
         };
-        editor: "disabled" | "readonly" | "edit";
+        editor: "edit" | "disabled" | "readonly";
     }, {
         dir?: string | undefined;
         enabled?: boolean | undefined;
@@ -4735,7 +5011,7 @@ declare const daemonConfigSchema: z.ZodObject<{
             autoRunThreshold?: number | undefined;
             suggestThreshold?: number | undefined;
         } | undefined;
-        editor?: "disabled" | "readonly" | "edit" | undefined;
+        editor?: "edit" | "disabled" | "readonly" | undefined;
     }>>;
     /** Procedures — user-perspective SOPs mined from recurring activity.
      *  The extraction cadence itself lives in `crons.procedure-extract`
@@ -4982,7 +5258,7 @@ declare const daemonConfigSchema: z.ZodObject<{
         billing: "api" | "subscription";
         toolUseRequired: string[];
         persistentProcess: boolean;
-        queueMode: "collect" | "followup" | "drop";
+        queueMode: "drop" | "collect" | "followup";
         heartbeat: {
             enabled: boolean;
             prompt: string;
@@ -5021,6 +5297,7 @@ declare const daemonConfigSchema: z.ZodObject<{
         }> | undefined;
         contextStrategy?: "layered" | "planner" | undefined;
         gitlabAutoReply?: boolean | undefined;
+        admin?: boolean | undefined;
         voice?: {
             system?: string | Record<string, string> | undefined;
             provider?: "system" | "elevenlabs" | undefined;
@@ -5060,6 +5337,7 @@ declare const daemonConfigSchema: z.ZodObject<{
         fallback: "system" | "none";
         locale: string;
         system?: string | Record<string, string> | undefined;
+        listener?: string | undefined;
     };
     node: {
         id: string;
@@ -5089,12 +5367,12 @@ declare const daemonConfigSchema: z.ZodObject<{
     channels: {
         gitlab: {
             enabled: boolean;
+            host: string;
             routes: {
                 agent: string;
                 project: string;
             }[];
             webhookPort: number;
-            host: string;
             autoReplyLegacy: boolean;
             agentMappings: {
                 agentId: string;
@@ -5143,8 +5421,8 @@ declare const daemonConfigSchema: z.ZodObject<{
                 allowFrom?: string[] | undefined;
             }>;
             policy: {
-                dm: "block" | "pair";
                 group: "all" | "mention-required";
+                dm: "block" | "pair";
                 allowFrom?: string[] | undefined;
             };
         };
@@ -5215,7 +5493,7 @@ declare const daemonConfigSchema: z.ZodObject<{
         timeout: number;
         schedule: string;
         timezone: string;
-        onError: ("notify" | "log" | "disable")[];
+        onError: ("notify" | "disable" | "log")[];
         model?: string | undefined;
         command?: string | undefined;
         notify?: {
@@ -5224,6 +5502,14 @@ declare const daemonConfigSchema: z.ZodObject<{
             accountId?: string | undefined;
         } | undefined;
         maxOutputTokens?: number | undefined;
+        autonomy?: "report" | "propose" | "act" | undefined;
+        fireToken?: string | undefined;
+        createdBy?: string | undefined;
+        approval?: {
+            action: "delete" | "create";
+            requestedBy: string;
+            requestedAt: string;
+        } | undefined;
     }>;
     services: Record<string, {
         agent: string;
@@ -5243,6 +5529,13 @@ declare const daemonConfigSchema: z.ZodObject<{
         allowedContacts?: string[] | undefined;
     }>;
     notifications: {
+        local: {
+            banner: boolean;
+            sound: boolean;
+            soundName: string;
+            volume: number;
+            icon?: string | undefined;
+        };
         on: {
             taskComplete: boolean;
             taskError: boolean;
@@ -5384,7 +5677,7 @@ declare const daemonConfigSchema: z.ZodObject<{
             autoRunThreshold: number;
             suggestThreshold: number;
         };
-        editor: "disabled" | "readonly" | "edit";
+        editor: "edit" | "disabled" | "readonly";
     };
     procedures: {
         dir: string;
@@ -5535,7 +5828,7 @@ declare const daemonConfigSchema: z.ZodObject<{
         toolUseRequired?: string[] | undefined;
         gitlabAutoReply?: boolean | undefined;
         persistentProcess?: boolean | undefined;
-        queueMode?: "collect" | "followup" | "drop" | undefined;
+        queueMode?: "drop" | "collect" | "followup" | undefined;
         heartbeat?: {
             enabled?: boolean | undefined;
             prompt?: string | undefined;
@@ -5543,6 +5836,7 @@ declare const daemonConfigSchema: z.ZodObject<{
             intervalMinutes?: number | undefined;
         } | undefined;
         access?: "private" | "public" | undefined;
+        admin?: boolean | undefined;
         integrations?: {
             label: string;
             kind: string;
@@ -5598,6 +5892,7 @@ declare const daemonConfigSchema: z.ZodObject<{
         provider?: "system" | "elevenlabs" | undefined;
         fallback?: "system" | "none" | undefined;
         locale?: string | undefined;
+        listener?: string | undefined;
     } | undefined;
     graph?: {
         enabled?: boolean | undefined;
@@ -5622,13 +5917,13 @@ declare const daemonConfigSchema: z.ZodObject<{
         gitlab?: {
             enabled?: boolean | undefined;
             token?: string | undefined;
+            host?: string | undefined;
             routes?: {
                 agent: string;
                 project: string;
             }[] | undefined;
             webhookPort?: number | undefined;
             webhookSecret?: string | undefined;
-            host?: string | undefined;
             autoReplyLegacy?: boolean | undefined;
             agentMappings?: {
                 agentId: string;
@@ -5675,9 +5970,9 @@ declare const daemonConfigSchema: z.ZodObject<{
                 pollInbound?: boolean | undefined;
             }> | undefined;
             policy?: {
+                group?: "all" | "mention-required" | undefined;
                 allowFrom?: string[] | undefined;
                 dm?: "block" | "pair" | undefined;
-                group?: "all" | "mention-required" | undefined;
             } | undefined;
         } | undefined;
         github?: {
@@ -5755,7 +6050,15 @@ declare const daemonConfigSchema: z.ZodObject<{
             accountId?: string | undefined;
         } | undefined;
         maxOutputTokens?: number | undefined;
-        onError?: "notify" | "log" | "disable" | ("notify" | "log" | "disable")[] | undefined;
+        autonomy?: "report" | "propose" | "act" | undefined;
+        onError?: "notify" | "disable" | "log" | ("notify" | "disable" | "log")[] | undefined;
+        fireToken?: string | undefined;
+        createdBy?: string | undefined;
+        approval?: {
+            action: "delete" | "create";
+            requestedBy: string;
+            requestedAt: string;
+        } | undefined;
     }> | undefined;
     services?: Record<string, {
         agent: string;
@@ -5775,6 +6078,13 @@ declare const daemonConfigSchema: z.ZodObject<{
         allowedContacts?: string[] | undefined;
     }> | undefined;
     notifications?: {
+        local?: {
+            banner?: boolean | undefined;
+            sound?: boolean | undefined;
+            soundName?: string | undefined;
+            volume?: number | undefined;
+            icon?: string | undefined;
+        } | undefined;
         on?: {
             taskComplete?: boolean | undefined;
             taskError?: boolean | undefined;
@@ -5984,7 +6294,7 @@ declare const daemonConfigSchema: z.ZodObject<{
             autoRunThreshold?: number | undefined;
             suggestThreshold?: number | undefined;
         } | undefined;
-        editor?: "disabled" | "readonly" | "edit" | undefined;
+        editor?: "edit" | "disabled" | "readonly" | undefined;
     } | undefined;
     procedures?: {
         dir?: string | undefined;
@@ -6360,6 +6670,11 @@ declare class AgentXDaemon {
     /** Workflow health for the monitor. Cached for a minute: the dashboard
      *  polls every 15s and dormancy does not change on that timescale. */
     private workflowHealth;
+    private routinesCache?;
+    /** Schedules and cron/hook-triggered workflows merged into one bounded
+     *  list (GET /routines). Cached briefly: the mesh overview polls every
+     *  few seconds and each build opens the newest run files per job. */
+    private routines;
     private db;
     private loadedPlugins;
     private readonly agentMemory;
@@ -6875,6 +7190,18 @@ interface SeededMessage {
     accountId?: string;
 }
 
+declare const autonomyLevelSchema: z.ZodEnum<["report", "propose", "act"]>;
+type AutonomyLevel = z.infer<typeof autonomyLevelSchema>;
+
+interface AutonomyBlock {
+    ts: number;
+    tool: string;
+    /** Command or file path the call targeted, truncated. */
+    target: string | null;
+    ruleId: string;
+    reason: string;
+}
+
 interface AgentPeer {
     id: string;
     name: string;
@@ -6924,6 +7251,15 @@ interface AgentTask {
      *  parser can append rows under the same id. Optional — when unset,
      *  step capture is a no-op. */
     taskId?: string;
+    /** The id the dashboard knows this run by (RunningTask.id — live stream,
+     *  cancel, follow-up, persisted TaskRecord). Set by registry.execute once
+     *  the run holds a slot; distinct from `taskId`, which is the trace id.
+     *  Callers that dispatch without an HTTP stream (cron) read it back to
+     *  link the run to the Task page. */
+    runningTaskId?: string;
+    /** Called with `runningTaskId` as soon as the run starts. Never fires for
+     *  a message that was queued or dropped instead of run. */
+    onStart?: (runningTaskId: string) => void;
     /** Improvement plan #8 — when true, the dispatcher discards any
      *  cached session for this (agent, channel, chatId) before
      *  executing: the claudeSessionId is cleared (no --resume) and
@@ -6943,6 +7279,11 @@ interface AgentTask {
      *  Seeds an empty AgentX session the same way a channel adapter's
      *  seedHistory does, so a new or rotated session starts with it. */
     seedHistory?: SeededMessage[];
+    /** Routine autonomy level (cron job / workflow agent step). `report` and
+     *  `propose` are enforced for THIS task only via a per-spawn guard hook
+     *  (see guard/autonomy-enforce.ts); unset or `act` = the agent's normal
+     *  permissions. Tiers that cannot enforce it refuse the task. */
+    autonomy?: AutonomyLevel;
     context?: {
         channel?: string;
         sender?: string;
@@ -7034,6 +7375,11 @@ interface AgentResponse {
      *  the task instead of a spawned provider (attach mode). Claude Code
      *  session id of the terminal that wrote the reply. */
     viaAttachedSession?: string;
+    /** Set on tasks that ran under a restricted autonomy level. */
+    autonomy?: AutonomyLevel;
+    /** Tool calls the autonomy guard blocked during this task — what the
+     *  routine would have done with more power. */
+    autonomyBlocks?: AutonomyBlock[];
 }
 /** Callback for streaming text deltas */
 type StreamCallback = (delta: string, fullText: string) => void;
@@ -8548,6 +8894,20 @@ interface TaskRecord {
     /** Terminal-style transcript captured from stream-json events. */
     transcript: string;
 }
+/** Outcome of AgentRegistry.continueFinishedTask. `taskId` is the new run's
+ *  dashboard id; absent when the message was queued behind a busy slot. */
+type ContinueFinishedTaskResult = {
+    ok: true;
+    agentId: string;
+    channel: string;
+    chatId: string;
+    taskId?: string;
+    queued: boolean;
+} | {
+    ok: false;
+    status: 404 | 409 | 500;
+    error: string;
+};
 declare class AgentRegistry {
     private agents;
     private config;
@@ -8809,6 +9169,23 @@ declare class AgentRegistry {
         edited: boolean;
         pending: number;
     } | null;
+    /**
+     * Operator follow-up on a task that has already finished: dispatch the
+     * message as a new turn on the same (channel, chatId), so the session
+     * resumes with the finished run's context.
+     *
+     * Scheduled runs only. A cron chat has no person on the other end, so the
+     * Task page is the only place its reply is read. Resuming a Telegram or
+     * GitLab conversation from here would run a turn whose reply never reaches
+     * the person in that chat, which is worse than refusing.
+     *
+     * Resolves once the new run starts (with its task id, for the Task page)
+     * or, if the agent is busy and the message was queued, once execute
+     * returns without one.
+     */
+    continueFinishedTask(agentId: string, taskId: string, message: string, sender: string, opts?: {
+        model?: (chatId: string) => string | undefined;
+    }): Promise<ContinueFinishedTaskResult>;
     /**
      * Subscribe to live output for a running task. Returns the buffer that has
      * accumulated so far plus an unsubscribe handle. If the task is unknown,
@@ -8846,7 +9223,7 @@ declare class AgentRegistry {
         byChannel: Record<string, {
             tasks: number;
             cost: number;
-        }>; /** Runtime handover store — shared with MessageRouter via file on disk. */
+        }>;
         sessionStats: Record<string, {
             sessions: number;
             avgTasksPerSession: number;
@@ -10396,6 +10773,8 @@ interface CronJobState {
      *  via the prompt tail; reliably honored and keeps cache-hit intact
      *  (hint text is per-job, not per-run). */
     maxOutputTokens?: number;
+    /** Routine autonomy level; unset = act (full agent permissions). */
+    autonomy?: AutonomyLevel;
     onError: Array<"log" | "notify" | "disable">;
     lastRun?: Date;
     nextRun?: Date;
@@ -10418,12 +10797,37 @@ interface CronRunResult {
     /** Was this a retry attempt? */
     isRetry?: boolean;
     retryAttempt?: number;
+    /** Started on demand via POST /routines/:id/fire, not by the schedule. */
+    fired?: boolean;
+    /** Dashboard task id of the agent run (RunningTask.id / TaskRecord.id),
+     *  so the run opens on the Task page. Absent for command jobs, which
+     *  never reach an agent. */
+    taskId?: string;
+    /** Per-execution trace id (task_traces row, /api/mesh/run). */
+    traceId?: string;
+    /** Native provider session the run resumed or started, when reported. */
+    sessionId?: string;
+    /** Autonomy level the run was held to (absent = act). */
+    autonomy?: AutonomyLevel;
+    /** Tool calls the autonomy guard blocked — what the routine would have
+     *  done with more power. */
+    autonomyBlocks?: AutonomyBlock[];
 }
 
+type FireNowResult = {
+    ok: true;
+    runId: string;
+    startedAt: string;
+} | {
+    ok: false;
+    reason: "unknown" | "disabled" | "not-running";
+};
 /** Notification callback — injected by daemon to send alerts via channels */
 type CronNotifyCallback = (jobId: string, agent: string, error: string, consecutiveErrors: number) => Promise<void>;
 declare class CronScheduler {
     private jobs;
+    /** Kept apart from `jobs`, which is served as-is by GET /crons. */
+    private fireTokens;
     private timers;
     private registry;
     private hooks?;
@@ -10433,6 +10837,18 @@ declare class CronScheduler {
     private notifyCallback?;
     private log;
     constructor(config: DaemonConfig, registry: AgentRegistry, hooks?: HookRegistry, log?: (...args: unknown[]) => void);
+    /** Whether a job with this id exists. */
+    hasJob(jobId: string): boolean;
+    /** The job's configured fire token (env-expanded), if any. */
+    getFireToken(jobId: string): string | undefined;
+    /**
+     * Start one run of `jobId` now, outside its schedule, with `payload` as
+     * untrusted event context. Returns as soon as the run is started; the
+     * run itself goes through the same path as a scheduled one (hooks,
+     * ledger, run record, failure counters, notify, auto-disable) but never
+     * schedules retries or touches the next scheduled fire.
+     */
+    fireNow(jobId: string, payload?: unknown): FireNowResult;
     /**
      * Set a notification callback for failed crons.
      * Called when onError is "notify" or after multiple consecutive failures.