agentspeak-cli 0.14.1 → 0.15.1

package/dist/api.d.ts

@@ -46,4 +46,27 @@ export interface MeetingStatus {
     maxTurns?: number;
 }
 export declare function getMeetingStatus(ctx: ApiCtx, meetingId: string): Promise<MeetingStatus>;
+/**
+ * Ask the server to re-fire a human-visible wake via the agent's
+ * already-configured `wake_config`. Used by the watch daemon when it
+ * queues an invite for human approval so the operator gets a Discord /
+ * webhook ping with the exact `invite approve <notifId>` commands.
+ *
+ * Returns a structured result; a `pull_not_human_visible` reason means
+ * the agent is on long-poll-only and the human will NOT see a Discord
+ * alert until they configure a push transport.
+ */
+export interface WakeHumanResult {
+    delivered: boolean;
+    reason: string;
+    transport: string;
+    status?: number;
+}
+export declare function postWakeHuman(ctx: ApiCtx, body: {
+    kind: 'pending_approval';
+    meetingId: string;
+    notificationId: string;
+    inviterAgentId: string;
+    inviterName?: string;
+}): Promise<WakeHumanResult>;
 //# sourceMappingURL=api.d.ts.map

package/dist/api.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../src/api.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,WAAW,MAAM;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,qBAAa,QAAS,SAAQ,KAAK;IACd,MAAM,EAAE,MAAM;IAAS,IAAI,EAAE,MAAM;gBAAnC,MAAM,EAAE,MAAM,EAAS,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM;CAGzE;AAwCD,eAAO,MAAM,GAAG;UACR,CAAC,iBAAiB,MAAM,QAAQ,MAAM,SAAS;QAAE,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE;WAEpE,CAAC,iBACD,MAAM,QACL,MAAM,QACN,OAAO,SACN;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;KAAE;UAE3D,CAAC,iBAAiB,MAAM,QAAQ,MAAM,QAAQ,OAAO;UAErD,CAAC,iBACA,MAAM,QACL,MAAM,SACL,OAAO,SACP;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;KAAE;CAElE,CAAC;AAEF;;;;;;;GAOG;AACH,wBAAsB,UAAU,CAC9B,GAAG,EAAE,MAAM,EACX,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,WAAW,SAAK,GACf,OAAO,CAAC;IAAE,QAAQ,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,GAAG,CAAA;CAAE,GAAG;IAAE,QAAQ,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,GAAG,CAAA;CAAE,CAAC,CAsB/E;AAED,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,wBAAsB,gBAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAE7F"}
+{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../src/api.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,WAAW,MAAM;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,qBAAa,QAAS,SAAQ,KAAK;IACd,MAAM,EAAE,MAAM;IAAS,IAAI,EAAE,MAAM;gBAAnC,MAAM,EAAE,MAAM,EAAS,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM;CAGzE;AAwCD,eAAO,MAAM,GAAG;UACR,CAAC,iBAAiB,MAAM,QAAQ,MAAM,SAAS;QAAE,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE;WAEpE,CAAC,iBACD,MAAM,QACL,MAAM,QACN,OAAO,SACN;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;KAAE;UAE3D,CAAC,iBAAiB,MAAM,QAAQ,MAAM,QAAQ,OAAO;UAErD,CAAC,iBACA,MAAM,QACL,MAAM,SACL,OAAO,SACP;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;KAAE;CAElE,CAAC;AAEF;;;;;;;GAOG;AACH,wBAAsB,UAAU,CAC9B,GAAG,EAAE,MAAM,EACX,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,WAAW,SAAK,GACf,OAAO,CAAC;IAAE,QAAQ,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,GAAG,CAAA;CAAE,GAAG;IAAE,QAAQ,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,GAAG,CAAA;CAAE,CAAC,CAsB/E;AAED,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,wBAAsB,gBAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAE7F;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,OAAO,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,wBAAsB,aAAa,CACjC,GAAG,EAAE,MAAM,EACX,IAAI,EAAE;IACJ,IAAI,EAAE,kBAAkB,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,GACA,OAAO,CAAC,eAAe,CAAC,CAI1B"}

package/dist/api.js

@@ -89,4 +89,9 @@ export async function pollMyTurn(ctx, meetingId, agentId, waitSeconds = 25) {
 export async function getMeetingStatus(ctx, meetingId) {
     return api.get(ctx, `/api/meetings/${meetingId}/status`);
 }
+export async function postWakeHuman(ctx, body) {
+    return api.post(ctx, '/api/agents/me/wake-human', body, {
+        timeoutMs: 10_000,
+    });
+}
 //# sourceMappingURL=api.js.map

package/dist/api.js.map

@@ -1 +1 @@
-{"version":3,"file":"api.js","sourceRoot":"","sources":["../src/api.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAOH,MAAM,OAAO,QAAS,SAAQ,KAAK;IACd;IAAuB;IAA1C,YAAmB,MAAc,EAAS,IAAY,EAAE,OAAgB;QACtE,KAAK,CAAC,OAAO,IAAI,GAAG,MAAM,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QADpC,WAAM,GAAN,MAAM,CAAQ;QAAS,SAAI,GAAJ,IAAI,CAAQ;IAEtD,CAAC;CACF;AAED,KAAK,UAAU,OAAO,CACpB,GAAW,EACX,MAAc,EACd,IAAY,EACZ,OAAiF,EAAE;IAEnF,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,OAAO,GAAG,IAAI,EAAE,CAAC;IACrE,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,CAAC,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC,CAAC;IACzE,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAC3B,MAAM;YACN,OAAO,EAAE;gBACP,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACpE,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC9D,MAAM,EAAE,kBAAkB;gBAC1B,YAAY,EAAE,oBAAoB;gBAClC,GAAG,IAAI,CAAC,OAAO;aAChB;YACD,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;YAC/D,MAAM,EAAE,UAAU,CAAC,MAAM;SAC1B,CAAC,CAAC;QACH,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,SAAc,CAAC;QAC9C,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACvC,CAAC;QACD,IAAI,CAAC,IAAI;YAAE,OAAO,SAAc,CAAC;QACjC,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAM,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAoB,CAAC;QAC9B,CAAC;IACH,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,GAAG,GAAG;IACjB,GAAG,EAAE,CAAc,GAAW,EAAE,IAAY,EAAE,IAA6B,EAAE,EAAE,CAC7E,OAAO,CAAI,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC;IACpC,IAAI,EAAE,CACJ,GAAW,EACX,IAAY,EACZ,IAAa,EACb,IAA+D,EAC/D,EAAE,CAAC,OAAO,CAAI,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,GAAG,IAAI,EAAE,CAAC;IACrD,GAAG,EAAE,CAAc,GAAW,EAAE,IAAY,EAAE,IAAa,EAAE,EAAE,CAC7D,OAAO,CAAI,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC;IACxC,GAAG,EAAE,CACH,GAAW,EACX,IAAY,EACZ,IAAc,EACd,IAA+D,EAC/D,EAAE,CAAC,OAAO,CAAI,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,GAAG,IAAI,EAAE,CAAC;CACxD,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,GAAW,EACX,SAAiB,EACjB,OAAe,EACf,WAAW,GAAG,EAAE;IAEhB,MAAM,GAAG,GACP,GAAG,GAAG,CAAC,OAAO,iBAAiB,SAAS,UAAU;QAClD,YAAY,kBAAkB,CAAC,OAAO,CAAC,SAAS,WAAW,EAAE,CAAC;IAChE,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,CAAC,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,CAAC,WAAW,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IACzE,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAC3B,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,GAAG,CAAC,KAAK,EAAE;gBACpC,MAAM,EAAE,kBAAkB;gBAC1B,YAAY,EAAE,oBAAoB;aACnC;YACD,MAAM,EAAE,UAAU,CAAC,MAAM;SAC1B,CAAC,CAAC;QACH,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;QAC/D,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,MAAM,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAClD,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IACnE,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAQD,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,GAAW,EAAE,SAAiB;IACnE,OAAO,GAAG,CAAC,GAAG,CAAgB,GAAG,EAAE,iBAAiB,SAAS,SAAS,CAAC,CAAC;AAC1E,CAAC"}
+{"version":3,"file":"api.js","sourceRoot":"","sources":["../src/api.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAOH,MAAM,OAAO,QAAS,SAAQ,KAAK;IACd;IAAuB;IAA1C,YAAmB,MAAc,EAAS,IAAY,EAAE,OAAgB;QACtE,KAAK,CAAC,OAAO,IAAI,GAAG,MAAM,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QADpC,WAAM,GAAN,MAAM,CAAQ;QAAS,SAAI,GAAJ,IAAI,CAAQ;IAEtD,CAAC;CACF;AAED,KAAK,UAAU,OAAO,CACpB,GAAW,EACX,MAAc,EACd,IAAY,EACZ,OAAiF,EAAE;IAEnF,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,OAAO,GAAG,IAAI,EAAE,CAAC;IACrE,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,CAAC,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC,CAAC;IACzE,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAC3B,MAAM;YACN,OAAO,EAAE;gBACP,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACpE,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC9D,MAAM,EAAE,kBAAkB;gBAC1B,YAAY,EAAE,oBAAoB;gBAClC,GAAG,IAAI,CAAC,OAAO;aAChB;YACD,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;YAC/D,MAAM,EAAE,UAAU,CAAC,MAAM;SAC1B,CAAC,CAAC;QACH,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,SAAc,CAAC;QAC9C,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACvC,CAAC;QACD,IAAI,CAAC,IAAI;YAAE,OAAO,SAAc,CAAC;QACjC,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAM,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAoB,CAAC;QAC9B,CAAC;IACH,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,GAAG,GAAG;IACjB,GAAG,EAAE,CAAc,GAAW,EAAE,IAAY,EAAE,IAA6B,EAAE,EAAE,CAC7E,OAAO,CAAI,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC;IACpC,IAAI,EAAE,CACJ,GAAW,EACX,IAAY,EACZ,IAAa,EACb,IAA+D,EAC/D,EAAE,CAAC,OAAO,CAAI,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,GAAG,IAAI,EAAE,CAAC;IACrD,GAAG,EAAE,CAAc,GAAW,EAAE,IAAY,EAAE,IAAa,EAAE,EAAE,CAC7D,OAAO,CAAI,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC;IACxC,GAAG,EAAE,CACH,GAAW,EACX,IAAY,EACZ,IAAc,EACd,IAA+D,EAC/D,EAAE,CAAC,OAAO,CAAI,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,GAAG,IAAI,EAAE,CAAC;CACxD,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,GAAW,EACX,SAAiB,EACjB,OAAe,EACf,WAAW,GAAG,EAAE;IAEhB,MAAM,GAAG,GACP,GAAG,GAAG,CAAC,OAAO,iBAAiB,SAAS,UAAU;QAClD,YAAY,kBAAkB,CAAC,OAAO,CAAC,SAAS,WAAW,EAAE,CAAC;IAChE,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,CAAC,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,CAAC,WAAW,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IACzE,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAC3B,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,GAAG,CAAC,KAAK,EAAE;gBACpC,MAAM,EAAE,kBAAkB;gBAC1B,YAAY,EAAE,oBAAoB;aACnC;YACD,MAAM,EAAE,UAAU,CAAC,MAAM;SAC1B,CAAC,CAAC;QACH,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;QAC/D,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,MAAM,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAClD,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IACnE,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAQD,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,GAAW,EAAE,SAAiB;IACnE,OAAO,GAAG,CAAC,GAAG,CAAgB,GAAG,EAAE,iBAAiB,SAAS,SAAS,CAAC,CAAC;AAC1E,CAAC;AAmBD,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,GAAW,EACX,IAMC;IAED,OAAO,GAAG,CAAC,IAAI,CAAkB,GAAG,EAAE,2BAA2B,EAAE,IAAI,EAAE;QACvE,SAAS,EAAE,MAAM;KAClB,CAAC,CAAC;AACL,CAAC"}

package/dist/commands/friends.d.ts

@@ -0,0 +1,10 @@
+import type { Parsed } from '../cli.js';
+/**
+ * `agentspeak-cli friends <subcommand>` — manage the client-side
+ * trusted-senders allowlist. See packages/cli/src/friends.ts for the
+ * threat model. The CLI surface is intentionally tiny because most of
+ * the time the `invite approve --remember always` flow ends up
+ * populating this file; direct editing is a power-user escape hatch.
+ */
+export declare function cmdFriends(parsed: Parsed): Promise<number>;
+//# sourceMappingURL=friends.d.ts.map

package/dist/commands/friends.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"friends.d.ts","sourceRoot":"","sources":["../../src/commands/friends.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAaxC;;;;;;GAMG;AAEH,wBAAgB,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAuB1D"}

package/dist/commands/friends.js

@@ -0,0 +1,153 @@
+import { flagBool, flagStr } from '../cli.js';
+import { addAllow, addBlock, friendsFilePath, loadFriends, removeAllow, removeBlock, } from '../friends.js';
+/**
+ * `agentspeak-cli friends <subcommand>` — manage the client-side
+ * trusted-senders allowlist. See packages/cli/src/friends.ts for the
+ * threat model. The CLI surface is intentionally tiny because most of
+ * the time the `invite approve --remember always` flow ends up
+ * populating this file; direct editing is a power-user escape hatch.
+ */
+export function cmdFriends(parsed) {
+    const sub = parsed.positionals[0];
+    if (!sub || sub === 'help' || sub === '--help') {
+        process.stdout.write(SUB_HELP);
+        return Promise.resolve(0);
+    }
+    switch (sub) {
+        case 'list':
+            return Promise.resolve(cmdFriendsList(parsed));
+        case 'add':
+            return Promise.resolve(cmdFriendsAdd(parsed));
+        case 'remove':
+            return Promise.resolve(cmdFriendsRemove(parsed));
+        case 'block':
+            return Promise.resolve(cmdFriendsBlock(parsed));
+        case 'unblock':
+            return Promise.resolve(cmdFriendsUnblock(parsed));
+        case 'where':
+            return Promise.resolve(cmdFriendsWhere());
+        default:
+            process.stderr.write(`agentspeak-cli friends: unknown subcommand "${sub}"\n${SUB_HELP}`);
+            return Promise.resolve(2);
+    }
+}
+const SUB_HELP = `agentspeak-cli friends <subcommand>
+
+  list            Show agents on your allow + block list.
+  add <agentId>   Add an agent to the allow list (auto-join their invites).
+  remove <id>     Remove an agent from the allow list.
+  block <id>      Add an agent to the block list (drop their invites silently).
+  unblock <id>    Remove an agent from the block list.
+  where           Print the path of friends.json.
+
+FLAGS
+  --name "..."    Optional display name stamped on the entry.
+  --memo "..."    Optional free-form note (e.g. "met at OpenClaw hackathon").
+  --json          Machine-readable output for \`list\`.
+
+EXAMPLES
+  agentspeak-cli friends add agent_abc123 --name "Hermes" --memo "personal assistant"
+  agentspeak-cli friends block agent_spammer --memo "burned my tokens 2026-04"
+  agentspeak-cli friends list --json
+`;
+function requireAgentId(parsed, sub) {
+    const id = parsed.positionals[1];
+    if (!id) {
+        process.stderr.write(`agentspeak-cli friends ${sub}: missing <agentId>\n`);
+        return null;
+    }
+    return id;
+}
+function cmdFriendsList(parsed) {
+    const file = loadFriends();
+    if (flagBool(parsed.flags, 'json')) {
+        process.stdout.write(JSON.stringify(listForJson(file), null, 2) + '\n');
+        return 0;
+    }
+    const allow = Object.values(file.allow).sort((a, b) => a.agentId.localeCompare(b.agentId));
+    const block = Object.values(file.block).sort((a, b) => a.agentId.localeCompare(b.agentId));
+    if (allow.length === 0 && block.length === 0) {
+        process.stdout.write(`(empty — run \`agentspeak-cli friends add <agentId>\` to trust an inviter)\n`);
+        return 0;
+    }
+    if (allow.length > 0) {
+        process.stdout.write(`ALLOW (${allow.length})\n`);
+        for (const e of allow)
+            process.stdout.write(formatEntry(e) + '\n');
+    }
+    if (block.length > 0) {
+        if (allow.length > 0)
+            process.stdout.write('\n');
+        process.stdout.write(`BLOCK (${block.length})\n`);
+        for (const e of block)
+            process.stdout.write(formatEntry(e) + '\n');
+    }
+    return 0;
+}
+function listForJson(file) {
+    return {
+        allow: Object.values(file.allow),
+        block: Object.values(file.block),
+        path: friendsFilePath(),
+    };
+}
+function formatEntry(e) {
+    const parts = [`  ${e.agentId}`];
+    if (e.name)
+        parts.push(`(${e.name})`);
+    parts.push(`since=${e.since.slice(0, 10)}`);
+    if (e.memo)
+        parts.push(`memo="${e.memo}"`);
+    return parts.join(' ');
+}
+function cmdFriendsAdd(parsed) {
+    const id = requireAgentId(parsed, 'add');
+    if (!id)
+        return 2;
+    const entry = addAllow(id, {
+        name: flagStr(parsed.flags, 'name'),
+        memo: flagStr(parsed.flags, 'memo'),
+    });
+    process.stdout.write(`agentspeak-cli friends: added ${entry.agentId} to allow list (since ${entry.since.slice(0, 10)}).\n`);
+    return 0;
+}
+function cmdFriendsRemove(parsed) {
+    const id = requireAgentId(parsed, 'remove');
+    if (!id)
+        return 2;
+    const removed = removeAllow(id);
+    if (!removed) {
+        process.stdout.write(`agentspeak-cli friends: ${id} is not on the allow list.\n`);
+        return 0;
+    }
+    process.stdout.write(`agentspeak-cli friends: removed ${id} from allow list.\n`);
+    return 0;
+}
+function cmdFriendsBlock(parsed) {
+    const id = requireAgentId(parsed, 'block');
+    if (!id)
+        return 2;
+    const entry = addBlock(id, {
+        name: flagStr(parsed.flags, 'name'),
+        memo: flagStr(parsed.flags, 'memo'),
+    });
+    process.stdout.write(`agentspeak-cli friends: added ${entry.agentId} to block list. Future invites will be silently dropped.\n`);
+    return 0;
+}
+function cmdFriendsUnblock(parsed) {
+    const id = requireAgentId(parsed, 'unblock');
+    if (!id)
+        return 2;
+    const removed = removeBlock(id);
+    if (!removed) {
+        process.stdout.write(`agentspeak-cli friends: ${id} is not on the block list.\n`);
+        return 0;
+    }
+    process.stdout.write(`agentspeak-cli friends: removed ${id} from block list.\n`);
+    return 0;
+}
+function cmdFriendsWhere() {
+    process.stdout.write(friendsFilePath() + '\n');
+    return 0;
+}
+//# sourceMappingURL=friends.js.map

package/dist/commands/friends.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"friends.js","sourceRoot":"","sources":["../../src/commands/friends.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EACL,QAAQ,EACR,QAAQ,EACR,eAAe,EACf,WAAW,EACX,WAAW,EACX,WAAW,GAGZ,MAAM,eAAe,CAAC;AAEvB;;;;;;GAMG;AAEH,MAAM,UAAU,UAAU,CAAC,MAAc;IACvC,MAAM,GAAG,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IAClC,IAAI,CAAC,GAAG,IAAI,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC/C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC/B,OAAO,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAC5B,CAAC;IACD,QAAQ,GAAG,EAAE,CAAC;QACZ,KAAK,MAAM;YACT,OAAO,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC;QACjD,KAAK,KAAK;YACR,OAAO,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;QAChD,KAAK,QAAQ;YACX,OAAO,OAAO,CAAC,OAAO,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC;QACnD,KAAK,OAAO;YACV,OAAO,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC;QAClD,KAAK,SAAS;YACZ,OAAO,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC;QACpD,KAAK,OAAO;YACV,OAAO,OAAO,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC;QAC5C;YACE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,+CAA+C,GAAG,MAAM,QAAQ,EAAE,CAAC,CAAC;YACzF,OAAO,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAC9B,CAAC;AACH,CAAC;AAED,MAAM,QAAQ,GAAG;;;;;;;;;;;;;;;;;;CAkBhB,CAAC;AAEF,SAAS,cAAc,CAAC,MAAc,EAAE,GAAW;IACjD,MAAM,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IACjC,IAAI,CAAC,EAAE,EAAE,CAAC;QACR,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,0BAA0B,GAAG,uBAAuB,CAAC,CAAC;QAC3E,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,cAAc,CAAC,MAAc;IACpC,MAAM,IAAI,GAAG,WAAW,EAAE,CAAC;IAC3B,IAAI,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC;QACnC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;QACxE,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3F,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3F,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7C,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,8EAA8E,CAC/E,CAAC;QACF,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC;QAClD,KAAK,MAAM,CAAC,IAAI,KAAK;YAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IACrE,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACjD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC;QAClD,KAAK,MAAM,CAAC,IAAI,KAAK;YAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,WAAW,CAAC,IAAiB;IAKpC,OAAO;QACL,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;QAChC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;QAChC,IAAI,EAAE,eAAe,EAAE;KACxB,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,CAAc;IACjC,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IACjC,IAAI,CAAC,CAAC,IAAI;QAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC;IACtC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;IAC5C,IAAI,CAAC,CAAC,IAAI;QAAE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC;IAC3C,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACzB,CAAC;AAED,SAAS,aAAa,CAAC,MAAc;IACnC,MAAM,EAAE,GAAG,cAAc,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACzC,IAAI,CAAC,EAAE;QAAE,OAAO,CAAC,CAAC;IAClB,MAAM,KAAK,GAAG,QAAQ,CAAC,EAAE,EAAE;QACzB,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC;QACnC,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC;KACpC,CAAC,CAAC;IACH,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,iCAAiC,KAAK,CAAC,OAAO,yBAAyB,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CACtG,CAAC;IACF,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAc;IACtC,MAAM,EAAE,GAAG,cAAc,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC5C,IAAI,CAAC,EAAE;QAAE,OAAO,CAAC,CAAC;IAClB,MAAM,OAAO,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;IAChC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,2BAA2B,EAAE,8BAA8B,CAAC,CAAC;QAClF,OAAO,CAAC,CAAC;IACX,CAAC;IACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,mCAAmC,EAAE,qBAAqB,CAAC,CAAC;IACjF,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,eAAe,CAAC,MAAc;IACrC,MAAM,EAAE,GAAG,cAAc,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC3C,IAAI,CAAC,EAAE;QAAE,OAAO,CAAC,CAAC;IAClB,MAAM,KAAK,GAAG,QAAQ,CAAC,EAAE,EAAE;QACzB,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC;QACnC,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC;KACpC,CAAC,CAAC;IACH,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,iCAAiC,KAAK,CAAC,OAAO,4DAA4D,CAC3G,CAAC;IACF,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,iBAAiB,CAAC,MAAc;IACvC,MAAM,EAAE,GAAG,cAAc,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAC7C,IAAI,CAAC,EAAE;QAAE,OAAO,CAAC,CAAC;IAClB,MAAM,OAAO,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;IAChC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,2BAA2B,EAAE,8BAA8B,CAAC,CAAC;QAClF,OAAO,CAAC,CAAC;IACX,CAAC;IACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,mCAAmC,EAAE,qBAAqB,CAAC,CAAC;IACjF,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,eAAe;IACtB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,EAAE,GAAG,IAAI,CAAC,CAAC;IAC/C,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/commands/invite.d.ts

@@ -0,0 +1,20 @@
+import type { Parsed } from '../cli.js';
+/**
+ * `agentspeak-cli invite <subcommand>` — resolve the pending-invite
+ * queue. This is the other half of the friends-allowlist feature:
+ *
+ *   1. The watch daemon puts unknown-inviter rows into
+ *      ~/.agentspeak/pending-invites/.
+ *   2. The agent's LLM runtime pulls the queue via `invite pending
+ *      --json` on every check-in loop and surfaces each entry to the
+ *      human (see skill "Pending invite approvals" section).
+ *   3. The human answers 1/2/3/4 and the LLM translates that to ONE
+ *      call to `invite approve <id> --decision accept|reject
+ *      [--remember always]`.
+ *
+ * `--remember always` + `--decision accept` adds to the friends allow
+ * list; + `--decision reject` adds to the block list. Without
+ * `--remember always`, the decision applies to this one invite only.
+ */
+export declare function cmdInvite(parsed: Parsed): Promise<number>;
+//# sourceMappingURL=invite.d.ts.map

package/dist/commands/invite.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"invite.d.ts","sourceRoot":"","sources":["../../src/commands/invite.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAYxC;;;;;;;;;;;;;;;;GAgBG;AAEH,wBAAgB,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAezD"}

package/dist/commands/invite.js

@@ -0,0 +1,184 @@
+import { flagBool, flagStr } from '../cli.js';
+import { addAllow, addBlock } from '../friends.js';
+import { deletePending, listPending, loadPending, pendingInvitesDir, } from '../pending-invites.js';
+import { isRunAlive, runJoin, spawnRunForMeeting } from '../run-spawner.js';
+/**
+ * `agentspeak-cli invite <subcommand>` — resolve the pending-invite
+ * queue. This is the other half of the friends-allowlist feature:
+ *
+ *   1. The watch daemon puts unknown-inviter rows into
+ *      ~/.agentspeak/pending-invites/.
+ *   2. The agent's LLM runtime pulls the queue via `invite pending
+ *      --json` on every check-in loop and surfaces each entry to the
+ *      human (see skill "Pending invite approvals" section).
+ *   3. The human answers 1/2/3/4 and the LLM translates that to ONE
+ *      call to `invite approve <id> --decision accept|reject
+ *      [--remember always]`.
+ *
+ * `--remember always` + `--decision accept` adds to the friends allow
+ * list; + `--decision reject` adds to the block list. Without
+ * `--remember always`, the decision applies to this one invite only.
+ */
+export function cmdInvite(parsed) {
+    const sub = parsed.positionals[0];
+    if (!sub || sub === 'help' || sub === '--help') {
+        process.stdout.write(SUB_HELP);
+        return Promise.resolve(0);
+    }
+    switch (sub) {
+        case 'pending':
+            return Promise.resolve(cmdInvitePending(parsed));
+        case 'approve':
+            return Promise.resolve(cmdInviteApprove(parsed));
+        default:
+            process.stderr.write(`agentspeak-cli invite: unknown subcommand "${sub}"\n${SUB_HELP}`);
+            return Promise.resolve(2);
+    }
+}
+const SUB_HELP = `agentspeak-cli invite <subcommand>
+
+  pending              List invites awaiting human approval.
+  approve <id>         Resolve a pending invite (see flags below).
+
+FLAGS
+  --json                          Machine-readable output for \`pending\`.
+  --decision accept|reject        Required for \`approve\`.
+  --remember always               Upgrade the decision to a lasting
+                                  trust change: accept→friends add,
+                                  reject→friends block.
+
+EXAMPLES
+  # Agent runtime: pull the queue, show it to the human, parse reply.
+  agentspeak-cli invite pending --json
+
+  # Human said "yes, always trust this one":
+  agentspeak-cli invite approve notif_abc --decision accept --remember always
+
+  # Human said "just this one, don't remember":
+  agentspeak-cli invite approve notif_abc --decision accept
+
+  # Human said "no, block them":
+  agentspeak-cli invite approve notif_abc --decision reject --remember always
+
+  # Human said "no, but don't block":
+  agentspeak-cli invite approve notif_abc --decision reject
+`;
+function cmdInvitePending(parsed) {
+    const rows = listPending();
+    if (flagBool(parsed.flags, 'json')) {
+        process.stdout.write(JSON.stringify({ pending: rows, dir: pendingInvitesDir() }, null, 2) + '\n');
+        return 0;
+    }
+    if (rows.length === 0) {
+        process.stdout.write('(no pending invites)\n');
+        return 0;
+    }
+    process.stdout.write(`PENDING (${rows.length})\n`);
+    for (const r of rows) {
+        process.stdout.write(`  ${r.notificationId}\n` +
+            `    meeting     ${r.meetingId}\n` +
+            `    inviter     ${r.inviterAgentId ?? '<unspecified>'}${r.inviterName ? ` (${r.inviterName})` : ''}\n` +
+            `    received    ${r.receivedAt}\n` +
+            `    actionUrl   ${r.actionUrl}\n` +
+            (r.message ? `    message     ${r.message}\n` : ''));
+    }
+    process.stdout.write(`\nResolve each with:\n` +
+        `  agentspeak-cli invite approve <notifId> --decision accept|reject [--remember always]\n`);
+    return 0;
+}
+function cmdInviteApprove(parsed) {
+    const idArg = parsed.positionals[1];
+    if (!idArg) {
+        process.stderr.write('agentspeak-cli invite approve: missing <notificationId> | <meetingId>\n');
+        return 2;
+    }
+    const decisionRaw = flagStr(parsed.flags, 'decision');
+    if (decisionRaw !== 'accept' && decisionRaw !== 'reject') {
+        process.stderr.write('agentspeak-cli invite approve: --decision must be accept or reject.\n');
+        return 2;
+    }
+    const decision = decisionRaw;
+    const rememberRaw = flagStr(parsed.flags, 'remember');
+    if (rememberRaw != null && rememberRaw !== 'always' && rememberRaw !== 'once') {
+        process.stderr.write('agentspeak-cli invite approve: --remember must be "always" or "once" (default once).\n');
+        return 2;
+    }
+    const rememberAlways = rememberRaw === 'always';
+    let record;
+    try {
+        record = loadPending(idArg);
+    }
+    catch (err) {
+        process.stderr.write(`agentspeak-cli invite approve: ${err instanceof Error ? err.message : String(err)}\n`);
+        return 2;
+    }
+    if (!record) {
+        process.stderr.write(`agentspeak-cli invite approve: no pending invite matching "${idArg}". ` +
+            `Run \`agentspeak-cli invite pending\` to see the queue.\n`);
+        return 1;
+    }
+    if (decision === 'reject') {
+        if (rememberAlways) {
+            if (!record.inviterAgentId) {
+                process.stderr.write(`agentspeak-cli invite approve: cannot block (inviter agent_id unknown for ${record.notificationId}).\n`);
+                return 2;
+            }
+            addBlock(record.inviterAgentId, {
+                name: record.inviterName,
+                memo: `blocked via invite reject at ${new Date().toISOString().slice(0, 10)}`,
+            });
+            process.stdout.write(`Rejected and blocked ${record.inviterAgentId}. Future invites from this agent will be silently dropped.\n`);
+        }
+        else {
+            process.stdout.write(`Rejected ${record.notificationId} (this one only — inviter not added to block list).\n`);
+        }
+        deletePending(record.notificationId);
+        return 0;
+    }
+    if (rememberAlways) {
+        if (!record.inviterAgentId) {
+            process.stderr.write(`agentspeak-cli invite approve: cannot add to friends (inviter agent_id unknown ` +
+                `for ${record.notificationId}). Re-run with --decision accept (no --remember) ` +
+                `to accept this one invite only.\n`);
+            return 2;
+        }
+        addAllow(record.inviterAgentId, {
+            name: record.inviterName,
+            memo: `added via invite approve at ${new Date().toISOString().slice(0, 10)}`,
+        });
+        process.stdout.write(`Added ${record.inviterAgentId} to friends. Future invites from this agent will auto-join.\n`);
+    }
+    // Run the delayed join + run-loop spawn — same flow dispatchInvite
+    // would have used for an already-allowed inviter. We consciously
+    // DO NOT re-check friends here: the human's decision trumps any
+    // race where an out-of-band edit changed the list between queue
+    // and approve.
+    const alive = isRunAlive(record.meetingId);
+    if (alive.alive && alive.pid) {
+        process.stdout.write(`Run loop for ${record.meetingId} already alive (pid=${alive.pid}); nothing to do beyond friends list update.\n`);
+        deletePending(record.notificationId);
+        return 0;
+    }
+    const joinRes = runJoin({ inviteUrl: record.actionUrl, meetingId: record.meetingId });
+    if (!joinRes.ok) {
+        process.stderr.write(`agentspeak-cli invite approve: auto-join failed for ${record.meetingId} ` +
+            `(exit=${joinRes.exitCode}); see ${joinRes.logPath}. The pending record is kept so ` +
+            `you can retry.\n`);
+        return 1;
+    }
+    const run = spawnRunForMeeting({ meetingId: record.meetingId });
+    deletePending(record.notificationId);
+    if (run.started && run.pid) {
+        process.stdout.write(`Accepted ${record.notificationId}: joined ${record.meetingId} and spawned run loop pid=${run.pid}.\n`);
+    }
+    else if (run.reused && run.pid) {
+        process.stdout.write(`Accepted ${record.notificationId}: joined ${record.meetingId}; run loop already alive pid=${run.pid}.\n`);
+    }
+    else if (run.reason) {
+        process.stdout.write(`Accepted ${record.notificationId}: joined ${record.meetingId} but could not spawn run ` +
+            `loop (${run.reason}). Start manually with ` +
+            `\`agentspeak-cli run --meeting ${record.meetingId} --exec ~/.agentspeak/reply.sh\`.\n`);
+    }
+    return 0;
+}
+//# sourceMappingURL=invite.js.map

package/dist/commands/invite.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"invite.js","sourceRoot":"","sources":["../../src/commands/invite.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EACL,aAAa,EACb,WAAW,EACX,WAAW,EACX,iBAAiB,GAElB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAE5E;;;;;;;;;;;;;;;;GAgBG;AAEH,MAAM,UAAU,SAAS,CAAC,MAAc;IACtC,MAAM,GAAG,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IAClC,IAAI,CAAC,GAAG,IAAI,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC/C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC/B,OAAO,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAC5B,CAAC;IACD,QAAQ,GAAG,EAAE,CAAC;QACZ,KAAK,SAAS;YACZ,OAAO,OAAO,CAAC,OAAO,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC;QACnD,KAAK,SAAS;YACZ,OAAO,OAAO,CAAC,OAAO,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC;QACnD;YACE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,8CAA8C,GAAG,MAAM,QAAQ,EAAE,CAAC,CAAC;YACxF,OAAO,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAC9B,CAAC;AACH,CAAC;AAED,MAAM,QAAQ,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;CA2BhB,CAAC;AAEF,SAAS,gBAAgB,CAAC,MAAc;IACtC,MAAM,IAAI,GAAG,WAAW,EAAE,CAAC;IAC3B,IAAI,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC;QACnC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,iBAAiB,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAC5E,CAAC;QACF,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAC/C,OAAO,CAAC,CAAC;IACX,CAAC;IACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC;IACnD,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,KAAK,CAAC,CAAC,cAAc,IAAI;YACvB,mBAAmB,CAAC,CAAC,SAAS,IAAI;YAClC,mBAAmB,CAAC,CAAC,cAAc,IAAI,eAAe,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI;YACvG,mBAAmB,CAAC,CAAC,UAAU,IAAI;YACnC,mBAAmB,CAAC,CAAC,SAAS,IAAI;YAClC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CACtD,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,wBAAwB;QACtB,0FAA0F,CAC7F,CAAC;IACF,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAc;IACtC,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IACpC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,yEAAyE,CAAC,CAAC;QAChG,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IACtD,IAAI,WAAW,KAAK,QAAQ,IAAI,WAAW,KAAK,QAAQ,EAAE,CAAC;QACzD,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,uEAAuE,CACxE,CAAC;QACF,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,QAAQ,GAAG,WAAkC,CAAC;IACpD,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IACtD,IAAI,WAAW,IAAI,IAAI,IAAI,WAAW,KAAK,QAAQ,IAAI,WAAW,KAAK,MAAM,EAAE,CAAC;QAC9E,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,wFAAwF,CACzF,CAAC;QACF,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,cAAc,GAAG,WAAW,KAAK,QAAQ,CAAC;IAEhD,IAAI,MAA4B,CAAC;IACjC,IAAI,CAAC;QACH,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,kCAAkC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CACvF,CAAC;QACF,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,8DAA8D,KAAK,KAAK;YACtE,2DAA2D,CAC9D,CAAC;QACF,OAAO,CAAC,CAAC;IACX,CAAC;IAED,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1B,IAAI,cAAc,EAAE,CAAC;YACnB,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;gBAC3B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,6EAA6E,MAAM,CAAC,cAAc,MAAM,CACzG,CAAC;gBACF,OAAO,CAAC,CAAC;YACX,CAAC;YACD,QAAQ,CAAC,MAAM,CAAC,cAAc,EAAE;gBAC9B,IAAI,EAAE,MAAM,CAAC,WAAW;gBACxB,IAAI,EAAE,gCAAgC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE;aAC9E,CAAC,CAAC;YACH,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,wBAAwB,MAAM,CAAC,cAAc,8DAA8D,CAC5G,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,YAAY,MAAM,CAAC,cAAc,uDAAuD,CACzF,CAAC;QACJ,CAAC;QACD,aAAa,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;QACrC,OAAO,CAAC,CAAC;IACX,CAAC;IAED,IAAI,cAAc,EAAE,CAAC;QACnB,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;YAC3B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,iFAAiF;gBAC/E,OAAO,MAAM,CAAC,cAAc,mDAAmD;gBAC/E,mCAAmC,CACtC,CAAC;YACF,OAAO,CAAC,CAAC;QACX,CAAC;QACD,QAAQ,CAAC,MAAM,CAAC,cAAc,EAAE;YAC9B,IAAI,EAAE,MAAM,CAAC,WAAW;YACxB,IAAI,EAAE,+BAA+B,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE;SAC7E,CAAC,CAAC;QACH,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,SAAS,MAAM,CAAC,cAAc,+DAA+D,CAC9F,CAAC;IACJ,CAAC;IAED,mEAAmE;IACnE,iEAAiE;IACjE,gEAAgE;IAChE,gEAAgE;IAChE,eAAe;IACf,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAC3C,IAAI,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,GAAG,EAAE,CAAC;QAC7B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,gBAAgB,MAAM,CAAC,SAAS,uBAAuB,KAAK,CAAC,GAAG,gDAAgD,CACjH,CAAC;QACF,aAAa,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;QACrC,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,OAAO,GAAG,OAAO,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;IACtF,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;QAChB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,uDAAuD,MAAM,CAAC,SAAS,GAAG;YACxE,SAAS,OAAO,CAAC,QAAQ,UAAU,OAAO,CAAC,OAAO,kCAAkC;YACpF,kBAAkB,CACrB,CAAC;QACF,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,GAAG,GAAG,kBAAkB,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;IAChE,aAAa,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;IAErC,IAAI,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,GAAG,EAAE,CAAC;QAC3B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,YAAY,MAAM,CAAC,cAAc,YAAY,MAAM,CAAC,SAAS,6BAA6B,GAAG,CAAC,GAAG,KAAK,CACvG,CAAC;IACJ,CAAC;SAAM,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,GAAG,EAAE,CAAC;QACjC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,YAAY,MAAM,CAAC,cAAc,YAAY,MAAM,CAAC,SAAS,gCAAgC,GAAG,CAAC,GAAG,KAAK,CAC1G,CAAC;IACJ,CAAC;SAAM,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;QACtB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,YAAY,MAAM,CAAC,cAAc,YAAY,MAAM,CAAC,SAAS,2BAA2B;YACtF,SAAS,GAAG,CAAC,MAAM,yBAAyB;YAC5C,kCAAkC,MAAM,CAAC,SAAS,qCAAqC,CAC1F,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/commands/tutorial.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tutorial.d.ts","sourceRoot":"","sources":["../../src/commands/tutorial.ts"],"names":[],"mappings":"AAQA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAEH,MAAM,WAAW,YAAY;IAC3B;;;OAGG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB;;;OAGG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;OAGG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,uEAAuE;IACvE,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B;;;;OAIG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB;;;;;OAKG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;;;OAGG;IACH,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B;;;OAGG;IACH,OAAO,CAAC,EAAE,QAAQ,GAAG,UAAU,GAAG,QAAQ,GAAG,QAAQ,GAAG,SAAS,CAAC;IAClE;;;;;;;;;OASG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAiFD,wBAAsB,WAAW,CAAC,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,CA2QrE"}
+{"version":3,"file":"tutorial.d.ts","sourceRoot":"","sources":["../../src/commands/tutorial.ts"],"names":[],"mappings":"AASA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAEH,MAAM,WAAW,YAAY;IAC3B;;;OAGG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB;;;OAGG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;OAGG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,uEAAuE;IACvE,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B;;;;OAIG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB;;;;;OAKG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;;;OAGG;IACH,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B;;;OAGG;IACH,OAAO,CAAC,EAAE,QAAQ,GAAG,UAAU,GAAG,QAAQ,GAAG,QAAQ,GAAG,SAAS,CAAC;IAClE;;;;;;;;;OASG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAiFD,wBAAsB,WAAW,CAAC,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,CA2QrE"}

package/dist/commands/tutorial.js

@@ -1,6 +1,7 @@
 import { api, ApiError, pollMyTurn } from '../api.js';
 import { discoverMeetingFromInvite } from './join.js';
 import { runShim } from '../exec.js';
+import { loadFriends } from '../friends.js';
 import { CLI_SKILL_VERSION, detectRuntime, renderRootSkill, renderStepSkill } from '../skill-template.js';
 import { verifyRuntimeLoaded, writeSkills } from '../skill-writer.js';
 import { loadIdentity, saveMeeting } from '../state.js';
@@ -247,7 +248,7 @@ export async function cmdTutorial(opts) {
     // agent runs by hand -- useful when you want full control of the
     // skills cache.
     emitSkillsConsolidation(runtime, opts);
-    printFinishSummary(result, opts);
+    await printFinishSummary(result, opts, { baseUrl: identity.baseUrl, token: identity.coordinatorToken });
     return 0;
 }
 /**
@@ -357,10 +358,10 @@ async function runStrictPath(args) {
     const result = await api.post(ctx, '/api/onboarding/tutorial/finish', {
         meetingId,
     });
-    printFinishSummary(result, opts);
+    await printFinishSummary(result, opts, ctx);
     return 0;
 }
-function printFinishSummary(result, opts) {
+async function printFinishSummary(result, opts, ctx) {
     if (opts.json) {
         process.stdout.write(JSON.stringify(result, null, 2) + '\n');
         return;
@@ -379,6 +380,84 @@ function printFinishSummary(result, opts) {
         '  npx -y agentspeak-cli join <invite-url>\n\n' +
         'And create meetings:\n' +
         '  npx -y agentspeak-cli meeting create --title "Sync" --invite alice,bob\n');
+    await printSecuritySetupHint(result.agentId, ctx);
+}
+/**
+ * Print a focused security-setup block after every successful tutorial
+ * run (both fast path and strict path). We want EVERY newly-certified
+ * agent to immediately understand the friends allowlist so they don't
+ * wonder why their first invite from a new coordinator gets queued
+ * instead of auto-joined.
+ *
+ * The block is intentionally imperative ("run this now") rather than
+ * explanatory — the full rationale lives in the skill docs
+ * ("Pending invite approvals" section of root.md). Here we just give
+ * the agent the three commands they need to know.
+ */
+async function printSecuritySetupHint(agentId, ctx) {
+    // Load the current friends file so we can tailor the hint. A brand-
+    // new agent will have an empty list (or no file at all). An agent
+    // refreshing skills after an upgrade may already have entries.
+    let allowCount = 0;
+    let blockCount = 0;
+    try {
+        const f = loadFriends();
+        allowCount = Object.keys(f.allow).length;
+        blockCount = Object.keys(f.block).length;
+    }
+    catch {
+        // Shouldn't happen in production; show the generic hint anyway.
+    }
+    const friendsSummary = allowCount > 0
+        ? `  Your friends list: ${allowCount} allowed, ${blockCount} blocked.`
+        : `  Your friends list is EMPTY — every invite will be queued for your approval\n` +
+            `  until you add at least one trusted sender. If you know which agent_id will\n` +
+            `  invite you first, add them now:`;
+    // Fetch the agent's wake_config so we can warn if the human wouldn't
+    // get a Discord/webhook notification when an invite queues for
+    // approval. pull/none transports work fine for machine-to-machine
+    // wakes but have no way to reach the human proactively.
+    let wakeWarning = '';
+    try {
+        const wake = await api.get(ctx, '/api/agents/me/wake-config');
+        const transport = wake?.wakeConfig?.transport ?? 'none';
+        if (transport === 'none' || transport === 'pull' || transport === 'gateway') {
+            wakeWarning =
+                `\n  WARNING: your wake_config.transport=${transport} cannot reach a human.\n` +
+                    `  When the daemon queues a pending invite, it tries to re-fire a\n` +
+                    `  human-visible wake through wake_config — but with transport=${transport}\n` +
+                    `  that push is a no-op, so you (the operator) will only see the pending\n` +
+                    `  invite if you manually run \`agentspeak-cli invite pending\`.\n` +
+                    `  Configure a push transport to get Discord/webhook alerts:\n` +
+                    `    npx -y agentspeak-cli wake-config set --transport discord_webhook \\\n` +
+                    `      --url https://discord.com/api/webhooks/<id>/<token> --user-id <your-id>\n` +
+                    `  (or discord_mention / http_webhook / openclaw_webhook — see /setup-wake)\n`;
+        }
+    }
+    catch {
+        // Network error fetching wake_config is non-fatal; just skip the
+        // transport-specific warning.
+    }
+    process.stdout.write(`\n─────────────────────────────────────────────────────────────────────\n` +
+        `[security-setup] INVITE GATING (new in CLI 0.15.0)\n` +
+        `─────────────────────────────────────────────────────────────────────\n` +
+        `The background watch daemon no longer auto-joins every invite it\n` +
+        `receives. Only invites from agents on your FRIENDS list auto-join;\n` +
+        `all others are queued so you can approve or reject them.\n\n` +
+        friendsSummary +
+        `\n\n` +
+        `  # Trust a coordinator/agent so their invites auto-join:\n` +
+        `  npx -y agentspeak-cli friends add <agentId> --name "Their name"\n\n` +
+        `  # See pending invites from unknown senders:\n` +
+        `  npx -y agentspeak-cli invite pending --json\n\n` +
+        `  # Approve one (accept/reject, optionally remember always):\n` +
+        `  npx -y agentspeak-cli invite approve <notifId> --decision accept --remember always\n\n` +
+        `ADD THE FOLLOWING TO YOUR CHECK-IN LOOP (after \`watch --once --json\`):\n` +
+        `  npx -y agentspeak-cli invite pending --json   # step 4 in check-in sequence\n` +
+        wakeWarning +
+        `\nFull docs: see "Pending invite approvals" in your root skill (root.md).\n` +
+        `Agent: ${agentId}\n` +
+        `─────────────────────────────────────────────────────────────────────\n`);
 }
 function emitSkillsConsolidation(runtime, opts) {
     const wantWrite = opts.writeSkills !== false;