atris 3.64.0 → 3.65.0

package/README.md

@@ -295,10 +295,14 @@ An engine is the intelligence that builds a mission. Every installed headless co
 
 The first ready worker leads and the rest are backups. `~/.atris/ROSTER.md` covers every project on the machine; `atris/ROSTER.md` overrides it for one project. A worker that stalls sits out 30 minutes and the next one takes over.
 
+The roster warns when a worker runs an old model and a newer one in the same family is on this machine, and prints the command that moves it. It also warns when a pinned model has no proof in 30 days. A landed run is proof; so is `verified 2026-09-30` on the line after a quick smoke test.
+
 ```bash
 atris engine roster                                   # who does what, with each worker's recent record
 atris engine assign build claude --model "opus 5.5"   # change a job's lead
 atris engine roster --available                       # tools and models on this machine
+atris team                                            # who really worked in the last 7 days, then quiet and idle
+atris team --record                                   # also save one row per member per day for the learning loop
 ```
 
 Show every installed engine and the current default:

package/bin/atris.js

@@ -719,6 +719,9 @@ function showHelpAll() {
   console.log('  topup      - Buy credits and print a Stripe checkout URL');
   console.log('  buy        - Quote a purchase or stock order; the person approves before anything is charged');
   console.log('  transactions - List what you bought, paid in fees, traded, or sent');
+  console.log('  hire       - Hire an agent in one step: name, job, inbox, allowance, nightly work loop');
+  console.log('  hires      - Morning check-in: one line per hire (mail, spend, last run)');
+  console.log('  mail       - Your agents\' own inboxes: list, read, send (not Gmail)');
   console.log('  design     - Extract a site design system, check brand adherence, search brands');
   console.log('  mcp        - Run the atris MCP server (stdio) for Claude Desktop and Cursor');
   console.log('');
@@ -2384,6 +2387,20 @@ if (command === 'guide') {
   Promise.resolve(require('../commands/buy').buyCommand(process.argv.slice(3)))
     .then((code) => process.exit(typeof code === 'number' ? code : 0))
     .catch((err) => { console.error(String(err.message || err).replace(/\s+/g, ' ')); process.exit(1); });
+} else if (command === 'hire') {
+  // One-call hire: member + inbox + allowance + overnight loop (POST /business/{id}/hire).
+  Promise.resolve(require('../commands/hire').hireCommand(process.argv.slice(3)))
+    .then((code) => process.exit(typeof code === 'number' ? code : 0))
+    .catch((err) => { console.error(String(err.message || err).replace(/\s+/g, ' ')); process.exit(1); });
+} else if (command === 'hires') {
+  Promise.resolve(require('../commands/hire').hiresCommand(process.argv.slice(3)))
+    .then((code) => process.exit(typeof code === 'number' ? code : 0))
+    .catch((err) => { console.error(String(err.message || err).replace(/\s+/g, ' ')); process.exit(1); });
+} else if (command === 'mail') {
+  // Agent inboxes (@atrismail.com), not Gmail. Send asks first unless --yes.
+  Promise.resolve(require('../commands/mail').mailCommand(process.argv.slice(3)))
+    .then((code) => process.exit(typeof code === 'number' ? code : 0))
+    .catch((err) => { console.error(String(err.message || err).replace(/\s+/g, ' ')); process.exit(1); });
 } else if (command === 'transactions') {
   Promise.resolve(require('../commands/transactions').transactionsCommand(process.argv.slice(3)))
     .then((code) => process.exit(typeof code === 'number' ? code : 0))

package/commands/agent-spawn.js

@@ -465,6 +465,7 @@ function agentSpawnStatusCommand(args = [], deps = {}) {
 }
 
 module.exports = {
+  ALLOWED_ENGINES,
   parseSpawnArgs,
   commandForEngine,
   createSpawnRequest,

package/commands/engine.js

@@ -35,9 +35,12 @@ const {
 const { parseScopeFlag } = require('../lib/cli-scope');
 const { isFreshWorkspace, speakFirstMinute } = require('../lib/first-minute');
 const { teamRosterView } = require('../lib/member-engine');
-const { engineRunsView, availableModels } = require('../lib/roster-models');
+const { engineModelText, engineRunsView, availableModels, modelLabel } = require('../lib/roster-models');
+const { renderTable } = require('../lib/text-table');
+const { TEAM_FOOTER } = require('../lib/team-lineup');
 const { readRosterRuns, workerRuns, summarizeRuns, recentRuns, renderRunLine, DEFAULT_DAYS: RUN_DAYS } = require('../lib/roster-runs');
 const { attachSuggestions } = require('../lib/roster-suggest');
+const { PIN_MAX_AGE_DAYS: PIN_STALE_DAYS, attachStaleModels, modelCatalog } = require('../lib/roster-stale');
 const {
   ENGINE_ROLES,
   ENGINE_JOBS,
@@ -1051,6 +1054,7 @@ function workerRow(step, index, leadIndex, now = new Date()) {
     until: worker.until || null,
     ends_in_days: endsIn,
     expiring_soon: endsSoon(endsIn),
+    verified: worker.verified || null,
     line: worker.line || null,
     ...(worker.error ? { text: worker.text || '' } : {}),
     status,
@@ -1214,74 +1218,157 @@ function bootExpiringLine(expiring) {
   return `${first.tool} on ${first.job} ${endsInText(first.ends_in_days)}${more}. renew: ${RENEW_COMMAND}`;
 }
 
-// Every worker under its job, numbered in order, when the job has more than
-// the lead and one backup (the job's own line already shows those two).
-function renderWorkerLines(row) {
-  if (!row.workers || row.workers.length <= 2) return [];
-  const width = Math.max(...row.workers.map((worker) => (worker.runs ? worker.runs.text : worker.text || '').length));
-  return row.workers.map((worker, index) => {
-    const what = (worker.runs ? worker.runs.text : worker.text || '').padEnd(width);
-    const ended = worker.status === 'skipped' && worker.why === 'expired' && worker.ends_in_days !== null;
-    const until = !worker.until || ended ? '' : `until ${worker.until}${worker.expiring_soon ? `, ${endsInText(worker.ends_in_days)}` : ''}`;
-    const extras = [worker.max_seconds ? rosterMaxText(worker.max_seconds) : '', worker.prep ? `prepped by ${worker.prep}` : '', until].filter(Boolean);
-    const state = worker.status === 'leads' ? 'leads now' : worker.status === 'backup' ? 'backup'
-      : ended ? `ended ${shortDay(worker.until)}, skipped` : `skipped, ${worker.why}`;
-    return `  ${index + 1}. ${what} ${[state, ...extras].join(', ')}`.trimEnd();
-  });
+// --- the roster as tables -------------------------------------------------
+//
+// One row per job, one row per member. Plain columns, a header row, two
+// spaces between; a cell that needs more than one line (effort, several
+// backups) carries on underneath in its own column.
+
+function workerCellText(view) {
+  return view ? engineModelText(view.engine, view.model) : '';
 }
 
-// Each worker's recent record under its job, only for workers with runs.
-function renderWorkerRecords(row) {
-  return (row.workers || [])
-    .filter((worker) => worker.record)
-    .map((worker) => `  ${worker.runs ? worker.runs.text : worker.engine}: ${worker.record.text}`);
-}
-
-function renderJobRoster(rows) {
-  const width = Math.max(7, ...rows.map((row) => row.job.length));
-  const ownerWidth = Math.max(24, ...rows.filter((row) => row.pick && row.runs).map((row) => row.runs.text.length));
-  const backupWidth = Math.max(16, ...rows.filter((row) => row.backup_runs).map((row) => row.backup_runs.text.length + 7));
-  return rows.map((row) => {
-    const label = row.job.padEnd(width);
-    const nowText = row.now_runs ? row.now_runs.text : 'no ready engine';
-    const fallsTo = `${row.like ? `falls back to ${row.like}` : 'router decides'}: ${nowText}`;
-    if (!row.pick) return `${label} no pick, ${fallsTo}`;
-    const owner = row.runs.text.padEnd(ownerWidth);
-    const backup = row.backup_runs ? `backup ${row.backup_runs.text}${row.backup_prep ? ` prepped by ${row.backup_prep}` : ''}` : 'no backup';
-    const cap = `${row.max_seconds ? `${rosterMaxText(row.max_seconds)}, ` : ''}${row.prep ? `prepped by ${row.prep}, ` : ''}`;
-    const date = untilText(row.pick, row.ends_in_days);
-    const fallback = row.lead === 'backup' ? 'using backup' : row.lead === 'later' ? `using ${nowText}` : fallsTo;
-    const ended = row.ends_in_days !== null && row.ends_in_days !== undefined ? `ended ${shortDay(row.pick.until)}, skipped` : 'expired';
-    const status = row.status === 'expired' ? `${ended}, ${fallback}`
-      : row.status === 'cooling' ? `${row.cooling}, ${fallback}`
-        : row.status === 'not ready' ? `not ready, ${fallback}`
-          : date;
-    const where = row.file ? `${row.from} (${row.file})` : row.from;
-    const head = `${label} ${owner} ${backup.padEnd(backupWidth)} ${cap}${status}, ${where}`.trimEnd();
-    const suggestion = row.suggestion ? [`  suggestion: ${row.suggestion.text}`] : [];
-    return [head, ...renderWorkerLines(row), ...renderWorkerRecords(row), ...suggestion].join('\n');
-  }).join('\n');
+function maxCellText(seconds) {
+  const text = rosterMaxText(seconds);
+  return text ? text.replace(/^max /, '') : '-';
+}
+
+// Workers that name a tool the roster can run, in written order.
+function goodWorkers(row) {
+  return (row.workers || []).filter((worker) => worker.engine && worker.runs);
+}
+
+// Why a backup is passed over, in two or three words.
+function backupSkipText(worker) {
+  if (worker.status !== 'skipped') return '';
+  if (worker.why === 'expired' && worker.ends_in_days !== null && worker.ends_in_days !== undefined) return `ended ${shortDay(worker.until)}`;
+  return worker.why || 'skipped';
+}
+
+// "newer <model> out" or "pin 45 days old": the outdated-model flags,
+// short enough for the note column. The full line with its fix prints
+// under the table.
+function staleNote(worker) {
+  if (worker.stale_model && worker.newer_model) return `newer ${modelLabel(worker.newer_model)} out`;
+  if (worker.pin_age_days !== null && worker.pin_age_days !== undefined && worker.pin_age_days > PIN_STALE_DAYS) return `pin ${worker.pin_age_days} days old`;
+  return '';
+}
+
+function jobNoteText(row, lead, backups, mainFrom) {
+  // A tool on its own default model is named alone here, to keep notes short.
+  const nowText = !row.now_runs ? 'no ready engine' : row.now_runs.model ? workerCellText(row.now_runs) : row.now_runs.engine;
+  if (!row.pick) return row.like ? `no pick, same as ${row.like}` : 'no pick, router decides';
+  const fallback = row.lead === 'backup' ? 'using backup'
+    : row.lead === 'later' ? `using ${nowText}`
+      : row.like ? `falls back to ${row.like}` : `router decides: ${nowText}`;
+  const ended = row.ends_in_days !== null && row.ends_in_days !== undefined ? `ended ${shortDay(row.pick.until)}` : 'expired';
+  const parts = [];
+  if (row.status === 'expired') parts.push(`${ended}, ${fallback}`);
+  else if (row.status === 'cooling') parts.push(`${row.cooling}, ${fallback}`);
+  else if (row.status === 'not ready') parts.push(`not ready, ${fallback}`);
+  else if (row.expiring_soon) parts.push(endsInText(row.ends_in_days));
+  if (lead && lead.prep) parts.push(`prep: ${lead.prep}`);
+  if (lead && staleNote(lead)) parts.push(staleNote(lead));
+  for (const worker of backups) if (staleNote(worker)) parts.push(`backup ${staleNote(worker)}`);
+  if (row.from && row.from !== mainFrom) parts.push(`from ${row.from}`);
+  return parts.join(', ');
+}
+
+// The roster file most jobs come from; the table heading names it.
+function mainRosterSource(rows) {
+  const counts = new Map();
+  for (const row of rows) if (row.pick && row.from) counts.set(row.from, (counts.get(row.from) || 0) + 1);
+  const [from] = [...counts.entries()].sort((a, b) => b[1] - a[1])[0] || [];
+  const row = rows.find((item) => item.from === from);
+  return { from: from || null, file: row ? row.file : null };
+}
+
+function jobTableRow(row, mainFrom) {
+  const [lead, ...backups] = row.pick ? goodWorkers(row) : [];
+  const leadView = row.pick ? (lead && lead.runs) : row.now_runs;
+  const leads = leadView
+    ? [workerCellText(leadView), leadView.effort ? `(${leadView.effort} effort)` : null]
+    : [row.pick ? 'no ready tool' : 'no ready engine'];
+  const backupCell = backups.length
+    ? backups.map((worker) => {
+      // Effort, max time, and prep for a backup stay in --json; the cell keeps
+      // what changes who runs: a skip reason or an end date.
+      const skip = backupSkipText(worker);
+      const until = !skip && parseRosterUntil(worker.until) ? `until ${shortDay(worker.until)}${worker.expiring_soon ? `, ${endsInText(worker.ends_in_days)}` : ''}` : '';
+      const extras = [skip, until].filter(Boolean);
+      return `${workerCellText(worker.runs)}${extras.length ? ` (${extras.join(', ')})` : ''}`;
+    })
+    : ['none'];
+  const until = lead && parseRosterUntil(lead.until) ? lead.until : '-';
+  return [
+    row.job,
+    leads,
+    backupCell,
+    lead ? maxCellText(lead.max_seconds) : '-',
+    until,
+    jobNoteText(row, lead, backups, mainFrom) || '-',
+  ];
 }
 
-function renderTeamRoster(rows) {
+function renderJobRoster(rows, { width, heading = true } = {}) {
   if (!rows.length) return '';
-  const width = Math.max(6, ...rows.map((row) => row.member.length));
-  const jobWidth = Math.max(6, ...rows.map((row) => String(row.job || '').length));
-  const lines = rows.map((row) => {
-    const engine = row.engine ? engineRunsView(row.engine, { model: row.model || '', effort: row.effort || '' }).text : 'no ready engine';
-    const how = row.source === 'file' ? `from ${row.file}` : 'automatic';
-    return `${row.member.padEnd(width)} ${String(row.job || '').padEnd(jobWidth)} ${engine.padEnd(24)} ${how}`.trimEnd();
+  const { from, file } = mainRosterSource(rows);
+  const columns = [
+    { header: 'JOB' }, { header: 'LEADS' }, { header: 'BACKUP' }, { header: 'MAX' }, { header: 'UNTIL' },
+    { header: 'NOTE', wrap: true, min: 16 },
+  ];
+  const table = renderTable(columns, rows.map((row) => jobTableRow(row, from)), { width });
+  const title = !heading ? '' : file ? `jobs, from ${file}` : 'jobs';
+  const suggestions = rows.filter((row) => row.suggestion).map((row) => `suggestion for ${row.job}: ${row.suggestion.text}`);
+  return [title, table, ...renderWorkerRecords(rows, { width }), ...suggestions].filter(Boolean).join('\n');
+}
+
+// Each worker's recent record (last 7 days), only for workers with runs, as
+// one small table under the jobs.
+function renderWorkerRecords(rows, { width } = {}) {
+  const records = [];
+  for (const row of rows) {
+    for (const worker of row.workers || []) {
+      if (worker.record) records.push([row.job, worker.runs ? workerCellText(worker.runs) : worker.engine, worker.record.text.replace(/^last \d+ days: /, '')]);
+    }
+  }
+  if (!records.length) return [];
+  return ['\nlast 7 days', renderTable([{ header: 'JOB' }, { header: 'WORKER' }, { header: 'RECORD', clip: true, min: 20 }], records, { width })];
+}
+
+// "sep 30, 3 runs" or "quiet 8 to 14 days", from the same evidence atris
+// team reads. '-' for idle members and when activity was not read.
+function teamActivityTag(activity) {
+  if (!activity || activity.status === 'idle') return '-';
+  if (activity.status === 'quiet') return 'quiet 8 to 14 days';
+  const runs = Number(activity.runs_7d) || 0;
+  const day = activity.days_since === 0 ? 'today' : activity.days_since === 1 ? 'yesterday' : shortDay(activity.last_active);
+  return `${day}, ${runs} run${runs === 1 ? '' : 's'}`;
+}
+
+function renderTeamRoster(rows, { width } = {}) {
+  if (!rows.length) return '';
+  const showActivity = rows.some((row) => row.activity !== undefined);
+  const columns = [{ header: 'MEMBER' }, { header: 'JOB' }, { header: 'ENGINE · MODEL' }, { header: 'SOURCE' }];
+  if (showActivity) columns.push({ header: 'LAST 7 DAYS', clip: true, min: 11 });
+  const cells = rows.map((row) => {
+    const engine = row.engine ? workerCellText(engineRunsView(row.engine, { model: row.model || '', effort: row.effort || '' })) : 'no ready engine';
+    const stale = row.stale_model && row.newer_model ? ` (newer ${modelLabel(row.newer_model)} out)` : '';
+    const cell = [row.member, row.job || '-', `${engine}${stale}`, row.source === 'file' ? (row.file || 'roster file') : 'automatic'];
+    if (showActivity) cell.push(teamActivityTag(row.activity));
+    return cell;
   });
-  return ['team', ...lines].join('\n');
+  return ['team', renderTable(columns, cells, { width })].join('\n');
 }
 
 function renderRosterWarnings(warnings) {
   return warnings.map((warning) => `warning: ${warning.file} line ${warning.line} "${warning.text}" ${warning.message}.`).join('\n');
 }
 
-function renderRosterReport(report) {
-  const jobs = [renderJobRoster(report.jobs), renderExpiringLine(report.expiring)].filter(Boolean).join('\n');
-  return [jobs, renderTeamRoster(report.team), renderRosterWarnings(report.warnings)]
+function renderRosterReport(report, { width } = {}) {
+  const stale = (report.stale || []).map((item) => item.text);
+  const jobs = [renderJobRoster(report.jobs, { width }), renderExpiringLine(report.expiring), ...stale].filter(Boolean).join('\n');
+  return [jobs, renderTeamRoster(report.team, { width }), renderRosterWarnings(report.warnings)]
     .filter(Boolean)
     .join('\n\n');
 }
@@ -1290,8 +1377,6 @@ function printJobRoster(root, now = new Date()) {
   console.log(renderRosterReport(rosterReport(root, now)));
 }
 
-const AVAILABLE_HINT = 'see which tools and models this machine has: atris engine roster --available';
-
 // Each installed tool and the models it offers, from local files only.
 function availableReport(root) {
   const engines = readEngineRegistry(root, { persist: false }).engines
@@ -1312,7 +1397,7 @@ function renderSessionRoster(report, key) {
   const team = report.team.filter((row) => row.source === 'file' && row.file === report.files.session);
   if (!jobs.length && !team.length) return `this session (${key}) has no roster changes. add one with: atris engine assign <job> <tool> --session`;
   const head = `this session (${key}) changes${report.files.session ? `, from ${report.files.session}` : ''}`;
-  return [head, renderJobRoster(jobs), renderTeamRoster(team)].filter(Boolean).join('\n\n');
+  return [head, renderJobRoster(jobs, { heading: false }), renderTeamRoster(team)].filter(Boolean).join('\n\n');
 }
 
 function runRosterSessionCommand(rest, json, root, now) {
@@ -1361,6 +1446,38 @@ function attachRunRecords(report, root, now = new Date()) {
   return report;
 }
 
+// Pins are proven by landed runs; a pin older than 30 days is flagged, so
+// the look-back reaches well past that.
+const STALE_PROOF_DAYS = 90;
+
+// Each team row gets the member's activity (last 7 days, quiet, or idle)
+// from the same evidence atris team reads: dated logs, commits that name
+// the member, roster runs, and stream events, read once for the team.
+function attachTeamActivity(report, root, now = new Date()) {
+  const rows = report.team || [];
+  if (!rows.length) return report;
+  try {
+    const { collectMemberActivity } = require('./team');
+    const activity = collectMemberActivity(root, rows.map((row) => ({ name: row.member })), { nowMs: new Date(now).getTime() });
+    const byName = new Map(activity.map(({ days, ...rest }) => [rest.name, rest]));
+    for (const row of rows) row.activity = byName.get(String(row.member).toLowerCase()) || null;
+  } catch {
+    // Activity is a view; a read that fails leaves the roster as it was.
+  }
+  return report;
+}
+
+// Mark workers that run an outdated model or an unproven old pin. Local
+// files only: the registry, codex's models cache, and the run record.
+function attachStaleCheck(report, root, now = new Date()) {
+  const engines = readEngineRegistry(root, { persist: false }).engines;
+  return attachStaleModels(report, {
+    catalog: modelCatalog(engines),
+    runs: readRosterRuns(root, { now, days: STALE_PROOF_DAYS }),
+    now,
+  });
+}
+
 const RUNS_LIST_DAYS = 30;
 const RUNS_LIST_LIMIT = 20;
 
@@ -1407,9 +1524,9 @@ function runRosterCommand(args, root, now = new Date()) {
   }
   if (rest[0] === 'session') return runRosterSessionCommand(rest, json, root, now);
   if (rest[0] === 'confirm') confirmRoster(root, now);
-  const report = attachRunRecords(rosterReport(root, now), root, now);
+  const report = attachTeamActivity(attachStaleCheck(attachRunRecords(rosterReport(root, now), root, now), root, now), root, now);
   if (json) console.log(JSON.stringify(report, null, 2));
-  else console.log(`${renderRosterReport(report)}\n\n${AVAILABLE_HINT}`);
+  else console.log(`${renderRosterReport(report)}\n\n${TEAM_FOOTER.join('\n')}`);
   return 0;
 }
 
@@ -2267,7 +2384,7 @@ function engineCommand(args = [], deps = {}) {
     if (sub === 'help' || args.includes('--help') || args.includes('-h')) {
       console.log('\n  atris engine watch [<id>|latest] [--no-follow]\n                           follow one live transcript or list running engine work');
       console.log('\n  long read-only asks: atris engine ask "..." --engine agy --timeout <seconds>\n                           quick asks default to 120 seconds; explicit jobs allow up to 3600\n                           follow live work with atris engine watch latest');
-      console.log('\n  atris engine            roster + current default\n  atris engine roster [--json] show every job and its workers in order: search, build, review, and your own\n  atris engine roster confirm renew every dated worker for 30 days\n  atris engine roster session [clear]\n                           show or drop the roster changes for this shell only\n  atris engine roster --available\n                           tools on this machine and the models each one offers\n  atris engine roster --runs [job]\n                           the last 20 runs, newest first, with tool, model, time, and outcome\n  atris engine assign <job> <tool> [--like <kind>] [--model <m>] [--effort <level>] [--max "20 min"] [--prep <job>] [--backup "<tool> [model]"] [--days <n>] [--add] [--session | --everywhere]\n  atris engine assign <job> --promote "<tool> [model]" | --remove <tool> | --clear [--session | --everywhere]\n                           sets the lead worker of the job; --promote moves one of its workers to the top as written;\n                           --add puts one more at the end; jobs: search, build, review,\n                           or your own like "small build" (--like search|build|review when the name does not say);\n                           --prep search has that job read the task first and hand this worker a short brief;\n                           --everywhere is for all projects; --session is this shell only (set ATRIS_ROSTER_SESSION=<name>)\n  atris engines --chart   show the fleet as an org chart\n  atris engine list --json [--all] full registry: default + engines with tier, roles, fallback, health (--all includes hidden engines)\n  atris engine set <name> --duty leader|errands|learning [--models "a, b"]\n                           arrange the fleet and save its model policy\n  atris engine resolve <role> or <job> [--json]\n                           choose the best ready engine for navigator|executor|validator or a roster job;\n                           notes always answers: its roster pick, else agy then haiku\n  atris engine health <name> --set ready|not_installed|credit_out\n                           flip runtime health, for example when credits run out\n  atris engine doctor [--json]\n                           probe which engine CLIs are installed here and sync that into health policy\n  atris engine <name>     make that engine the default here\n  atris engine test [name] preflight: run the engine CLI headless, report pass/fail\n  atris engine bench [names...] [--runs N]\n                           ranked latency scoreboard of engine passes\n  atris engine ask "<question>" --engine <name> [--engine <name> ...]\n                           ask several engines in parallel without allowing edits\n  atris engine ask --jobs <jobs.json>\n                           ask different read-only questions in parallel\n  atris engine validate <receipt-path|latest> [--engine <name>]\n                           check ask answers with a different read-only referee\n  atris engine validate scoreboard\n                           show pass rates by worker engine\n  atris engine dispatch <task-id> [<task-id> ...] --engine cursor|codex [--prompt-file <f>] [--yolo]\n                           one-command claim, worktree, build, verify, ship, ready\n  atris engine login <provider> --yes\n                           upload a local provider CLI login to the backend vault\n  atris engine login <provider> --computer [--seat <name>]\n  atris engine login <provider> --business <id> [--seat <name>]\n                           sign in on an Atris computer by device flow\n  atris engine login --list | --remove <provider>\n                           list or remove vaulted provider logins\n  atris engine seats       show which named accounts are ready to work\n  atris engine seed <provider> --business <id>|--user\n                           push a vaulted login onto an Atris computer\n  atris engine reset      back to the house default\n  --engine <name>         one run on that engine (mission run / autopilot / run)\n');
+      console.log('\n  atris engine            roster + current default\n  atris engine roster [--json] show every job and its workers in order: search, build, review, and your own\n                           flags a model with a newer version on this machine, or a pin not proven in 30 days\n                           (a landed run, or "verified 2026-09-30" on its line, proves it)\n  atris engine roster confirm renew every dated worker for 30 days\n  atris engine roster session [clear]\n                           show or drop the roster changes for this shell only\n  atris engine roster --available\n                           tools on this machine and the models each one offers\n  atris engine roster --runs [job]\n                           the last 20 runs, newest first, with tool, model, time, and outcome\n  atris engine assign <job> <tool> [--like <kind>] [--model <m>] [--effort <level>] [--max "20 min"] [--prep <job>] [--backup "<tool> [model]"] [--days <n>] [--add] [--session | --everywhere]\n  atris engine assign <job> --promote "<tool> [model]" | --remove <tool> | --clear [--session | --everywhere]\n                           sets the lead worker of the job; --promote moves one of its workers to the top as written;\n                           --add puts one more at the end; jobs: search, build, review,\n                           or your own like "small build" (--like search|build|review when the name does not say);\n                           --prep search has that job read the task first and hand this worker a short brief;\n                           --everywhere is for all projects; --session is this shell only (set ATRIS_ROSTER_SESSION=<name>)\n  atris engines --chart   show the fleet as an org chart\n  atris engine list --json [--all] full registry: default + engines with tier, roles, fallback, health (--all includes hidden engines)\n  atris engine set <name> --duty leader|errands|learning [--models "a, b"]\n                           arrange the fleet and save its model policy\n  atris engine resolve <role> or <job> [--json]\n                           choose the best ready engine for navigator|executor|validator or a roster job;\n                           notes always answers: its roster pick, else agy then haiku\n  atris engine health <name> --set ready|not_installed|credit_out\n                           flip runtime health, for example when credits run out\n  atris engine doctor [--json]\n                           probe which engine CLIs are installed here and sync that into health policy\n  atris engine <name>     make that engine the default here\n  atris engine test [name] preflight: run the engine CLI headless, report pass/fail\n  atris engine bench [names...] [--runs N]\n                           ranked latency scoreboard of engine passes\n  atris engine ask "<question>" --engine <name> [--engine <name> ...]\n                           ask several engines in parallel without allowing edits\n  atris engine ask --jobs <jobs.json>\n                           ask different read-only questions in parallel\n  atris engine validate <receipt-path|latest> [--engine <name>]\n                           check ask answers with a different read-only referee\n  atris engine validate scoreboard\n                           show pass rates by worker engine\n  atris engine dispatch <task-id> [<task-id> ...] --engine cursor|codex [--prompt-file <f>] [--yolo]\n                           one-command claim, worktree, build, verify, ship, ready\n  atris engine login <provider> --yes\n                           upload a local provider CLI login to the backend vault\n  atris engine login <provider> --computer [--seat <name>]\n  atris engine login <provider> --business <id> [--seat <name>]\n                           sign in on an Atris computer by device flow\n  atris engine login --list | --remove <provider>\n                           list or remove vaulted provider logins\n  atris engine seats       show which named accounts are ready to work\n  atris engine seed <provider> --business <id>|--user\n                           push a vaulted login onto an Atris computer\n  atris engine reset      back to the house default\n  --engine <name>         one run on that engine (mission run / autopilot / run)\n');
       return 0;
     }
     if (isFreshWorkspace(root)) {
@@ -2316,6 +2433,7 @@ module.exports = {
   readSavedEngine,
   roster,
   rosterReport,
+  renderRosterReport,
   jobRosterView,
   expiringWorkers,
   bootExpiringLine,

package/commands/hire.js

@@ -0,0 +1,189 @@
+'use strict';
+
+// atris hire "<name>" --job "<idea>"   one call: member, inbox, allowance, nightly loop
+// atris hires                         the morning check-in: one line per hire, then its 24h / 7d scoreboard
+// Backend: POST /api/business/{id}/hire, GET /api/business/{id}/hires
+
+const { apiRequestJson } = require('../utils/api');
+const { NOT_LOGGED_IN } = require('../lib/developer-api');
+const {
+  parseArgs, businessOrSay, loginToken, errorText, relativeTime, dollars, clip,
+} = require('../lib/business-target');
+
+const HIRE_FLAGS = { switches: ['outreach'], values: ['job', 'budget', 'schedule', 'timezone'] };
+
+function hireHelp(log = console.log) {
+  log(`usage: atris hire "<name>" --job "<idea>" [--budget 50] [--outreach] [--schedule nightly] [--business <slug>] [--json]
+
+hire an agent in one step. it gets a name, a job, its own email inbox,
+a monthly spending allowance, and a work loop that runs overnight.
+
+  --job       the idea it works on, in plain words (required)
+  --budget    most it may ask you to approve per month, in dollars (default 0 = no spending)
+              you still approve every purchase yourself
+  --outreach  mark it as doing outreach (recorded; it uses a normal inbox for now)
+  --schedule  nightly (default, 2 AM your time), hourly, or a cron like "0 3 * * *"
+  --timezone  defaults to this computer's timezone
+  --business  which business; defaults to the business folder you are in
+
+running it again with the same name is safe: you get the same hire back,
+and anything missing (like the inbox) is filled in. --budget changes the allowance.
+
+then each morning: atris hires`);
+}
+
+function hiresHelp(log = console.log) {
+  log(`usage: atris hires [--business <slug>] [--json]
+
+the morning check-in: one line per hire with its email in the last day,
+what it spent this month, and what its last overnight run did. under it,
+its scoreboard for the last 24 hours and 7 days: emails sent, how many got
+a reply from a person, bounces, and spend.`);
+}
+
+function localTimezone() {
+  try {
+    return Intl.DateTimeFormat().resolvedOptions().timeZone || '';
+  } catch {
+    return '';
+  }
+}
+
+function renderHire(data = {}, now = Date.now()) {
+  const m = data.member || {};
+  const lines = [data.created ? `Hired ${m.name}.` : `${m.name} was already hired. Same hire, nothing duplicated.`];
+  if (m.job) lines.push(`Job: ${clip(m.job, 200)}`);
+  if (data.inbox && data.inbox.address) lines.push(`Inbox: ${data.inbox.address}`);
+  const a = data.allowance || {};
+  lines.push(Number(a.monthly_usd) > 0
+    ? `Allowance: ${dollars(a.monthly_usd)} a month. You still approve every purchase.`
+    : 'Allowance: none. It cannot ask to spend money.');
+  if (a.note) lines.push(`  ${a.note}`);
+  const s = data.schedule || {};
+  let when = s.label ? `Works ${s.label}.` : 'Works on its schedule.';
+  if (s.enabled === false) when += ' Asleep right now.';
+  else if (data.next_run_at) when += ` First run ${relativeTime(data.next_run_at, now)}.`;
+  lines.push(when);
+  if (data.outreach && data.outreach.requested) lines.push(`Outreach: ${data.outreach.note || 'recorded.'}`);
+  lines.push('', 'Check in each morning: atris hires');
+  return lines.join('\n');
+}
+
+function hireLine(h = {}, now = Date.now()) {
+  const parts = [];
+  if (h.status && h.status !== 'active') {
+    const why = { needs_inbox: 'paused, no inbox yet', needs_allowance: 'paused, allowance not set up', setting_up: 'still setting up',
+      pending_schedule: 'set up, nightly work not switched on yet (run the same hire again)' };
+    parts.push(why[h.status] || `paused (${h.status})`);
+  }
+  const mail = h.emails_last_24h;
+  if (mail) parts.push(`sent ${mail.sent}, got ${mail.received} emails today`);
+  else parts.push('no inbox');
+  const a = h.allowance || {};
+  if (Number(a.monthly_usd) > 0) {
+    parts.push(a.spent_this_month_usd == null
+      ? `${dollars(a.monthly_usd)} a month`
+      : `spent ${dollars(a.spent_this_month_usd)} of ${dollars(a.monthly_usd)}`);
+  }
+  if (h.last_run_at) {
+    const result = h.last_result ? `: ${clip(h.last_result, 80)}` : '';
+    parts.push(`last ran ${relativeTime(h.last_run_at, now)}${result}`);
+  } else if (h.schedule && h.schedule.enabled === false) {
+    parts.push('asleep, has not run');
+  } else if (h.next_run_at) {
+    parts.push(`first run ${relativeTime(h.next_run_at, now)}`);
+  } else {
+    parts.push('has not run yet');
+  }
+  return `${h.name}: ${parts.join(' · ')}`;
+}
+
+function windowText(label, w) {
+  if (!w || w.sent == null) return '';
+  const replies = Number(w.replies) || 0;
+  const value = w.reply_rate == null || w.reply_rate === '' ? NaN : Number(w.reply_rate);
+  const rate = Number.isFinite(value) ? ` (${Math.round(value * 100)}%)` : '';
+  const parts = [`sent ${w.sent}`, `${replies} ${replies === 1 ? 'reply' : 'replies'}${rate}`,
+    `${Number(w.bounces) || 0} bounced`];
+  if (w.spend_cents != null) parts.push(`spent ${dollars(Number(w.spend_cents) / 100)}`);
+  return `${label}: ${parts.join(', ')}`;
+}
+
+// The second line under a hire: how its mail is landing. Empty for an older backend.
+function scoreLine(board, now = Date.now()) {
+  if (!board) return '';
+  const parts = [windowText('last 24h', board.last_24h), windowText('last 7 days', board.last_7d)].filter(Boolean);
+  if (!parts.length) return '';
+  if (board.last_action_at) parts.push(`last action ${relativeTime(board.last_action_at, now)}`);
+  if (board.capped) parts.push('counts cover only the newest mail');
+  return `  ${parts.join(' · ')}`;
+}
+
+function renderHires(data = {}, now = Date.now()) {
+  const rows = Array.isArray(data.hires) ? data.hires : [];
+  if (!rows.length) return 'No hires yet. Start one: atris hire "Maya" --job "grow the newsletter"';
+  return rows.map((h) => [hireLine(h, now), scoreLine(h.scoreboard, now)].filter(Boolean).join('\n')).join('\n');
+}
+
+function io(deps) {
+  return { log: deps.log || console.log, err: deps.err || console.error };
+}
+
+async function hireCommand(args = [], deps = {}) {
+  const out = io(deps);
+  const { flags, pos, error } = parseArgs(args, HIRE_FLAGS);
+  if (flags.help || pos[0] === 'help') { hireHelp(out.log); return 0; }
+  if (error) { out.err(`${error}. see: atris hire --help`); return 1; }
+
+  const name = pos.join(' ').trim();
+  const job = typeof flags.job === 'string' ? flags.job.trim() : '';
+  if (!name) { out.err('give the hire a name: atris hire "Maya" --job "<idea>"'); return 1; }
+  if (!job) { out.err('give the hire a job: --job "<the idea to grow>"'); return 1; }
+  const body = { name, job, outreach: flags.outreach === true };
+  if (flags.budget != null) {
+    const budget = Number(flags.budget);
+    if (!Number.isInteger(budget) || budget < 0 || budget > 1000) {
+      out.err('--budget must be whole dollars from 0 to 1000');
+      return 1;
+    }
+    body.monthly_allowance_usd = budget;
+  }
+  if (typeof flags.schedule === 'string') body.schedule = flags.schedule;
+  const tz = typeof flags.timezone === 'string' ? flags.timezone : (deps.timezone || localTimezone());
+  if (tz) body.timezone = tz;
+
+  const business = businessOrSay(flags, deps, out.err);
+  if (!business) return 1;
+  const token = await loginToken(deps);
+  if (!token) { out.err(NOT_LOGGED_IN); return 1; }
+
+  const request = deps.apiRequestJson || apiRequestJson;
+  const result = await request(`/business/${encodeURIComponent(business.id)}/hire`, {
+    method: 'POST', token, body, timeoutMs: 60000, retries: 0,
+  });
+  if (!result || !result.ok) { out.err(`Could not hire ${name}: ${errorText(result)}`); return 1; }
+  if (flags.json) out.log(JSON.stringify(result.data));
+  else out.log(renderHire(result.data, deps.now ? deps.now() : Date.now()));
+  return 0;
+}
+
+async function hiresCommand(args = [], deps = {}) {
+  const out = io(deps);
+  const { flags, pos, error } = parseArgs(args, {});
+  if (flags.help || pos[0] === 'help') { hiresHelp(out.log); return 0; }
+  if (error) { out.err(`${error}. see: atris hires --help`); return 1; }
+  if (pos.length) { out.err(`atris hires takes no other words (got "${pos[0]}"). see: atris hires --help`); return 1; }
+  const business = businessOrSay(flags, deps, out.err);
+  if (!business) return 1;
+  const token = await loginToken(deps);
+  if (!token) { out.err(NOT_LOGGED_IN); return 1; }
+
+  const request = deps.apiRequestJson || apiRequestJson;
+  const result = await request(`/business/${encodeURIComponent(business.id)}/hires`, { method: 'GET', token });
+  if (!result || !result.ok) { out.err(`Could not load hires: ${errorText(result)}`); return 1; }
+  if (flags.json) out.log(JSON.stringify(result.data));
+  else out.log(renderHires(result.data, deps.now ? deps.now() : Date.now()));
+  return 0;
+}
+
+module.exports = { hireCommand, hiresCommand, renderHire, renderHires, hireLine, scoreLine };