atris 3.64.0 → 3.66.0

package/README.md

@@ -295,10 +295,14 @@ An engine is the intelligence that builds a mission. Every installed headless co
 
 The first ready worker leads and the rest are backups. `~/.atris/ROSTER.md` covers every project on the machine; `atris/ROSTER.md` overrides it for one project. A worker that stalls sits out 30 minutes and the next one takes over.
 
+The roster warns when a worker runs an old model and a newer one in the same family is on this machine, and prints the command that moves it. It also warns when a pinned model has no proof in 30 days. A landed run is proof; so is `verified 2026-09-30` on the line after a quick smoke test.
+
 ```bash
 atris engine roster                                   # who does what, with each worker's recent record
 atris engine assign build claude --model "opus 5.5"   # change a job's lead
 atris engine roster --available                       # tools and models on this machine
+atris team                                            # who really worked in the last 7 days, then quiet and idle
+atris team --record                                   # also save one row per member per day for the learning loop
 ```
 
 Show every installed engine and the current default:

package/atris/skills/engines/SKILL.md

@@ -95,7 +95,7 @@ Smoke: `reply with the word OK`, run from `$HOME`, 120s cap, one at a time on a
 | Cursor | `cursor-agent --trust --model composer-2.5 -p "<prompt>"` (run from the target repo) | `composer-2.5` | 2026-09-23 | 37.5 | `--trust` required for non-interactive. |
 | Fable | `atris engine fable --timeout 120 --json "<question>"` | `claude-fable-5` | 2026-09-23 | 21.4 | Canonical read-only FABLE ask with receipt; scale `--timeout` to the work. |
 | Composer | `cursor-agent --trust --model composer-2.5 -p "<prompt>"` | `composer-2.5` via Cursor | 2026-09-23 | 37.5 | Same binary as Cursor. |
-| Haiku | `claude -p "<prompt>" --model claude-haiku-4-5 --output-format json --no-session-persistence` | `claude-haiku-4-5` | 2026-09-23 | 19.0 | Fast validation and bounded read-only checks. |
+| Haiku | `claude -p "<prompt>" --model claude-haiku-5-5 --output-format json --no-session-persistence` | `claude-haiku-5-5` | 2026-10-07 | 9.5 | Fast validation and bounded read-only checks. |
 | Devin (build) | `devin -p --permission-mode dangerous --model swe-2-max --prompt-file <brief>` (run from an isolated worktree) | `swe-2-max` (Free tag in `devin models list`, 2026-09-23) | 2026-09-23 | 14.0 | In `-p` mode the default permission mode rejects shell commands too, so even a read-only audit dies after one step (2026-09-23). Keep the brief outside the worktree. Long runs (5+ min) can print nothing even on success: judge by the worktree diff. `devin cloud` outlives this machine. |
 | Devin (search) | `devin -p --permission-mode dangerous --model swe-1.7-lightning -- "<prompt>"` | `swe-1.7-lightning` (paid, no Free tag on 2026-09-23) | 2026-09-23 | 13.9 | |
 | Grok | `grok --always-approve --model grok-4.7 -p "<prompt>"` (run from the target repo) | `grok-4.7` | 2026-09-23 | 11.7 | Unpinned default is now `grok-4.7-build-fast`; `grok models` lists the menu. Uses grok.com login. `--best-of-n <N>` for tricky bounded builds. |
@@ -119,7 +119,7 @@ Headless dispatch permissions (verified 2026-08-11): `codex exec`, `grok`, and `
 
 | Engine | Flag | Alternates on the live menu |
 |--------|------|-----------------------------|
-| Claude | `--model <id>` | `claude-opus-5-5`, `claude-haiku-4-5` |
+| Claude | `--model <id>` | `claude-opus-5-5`, `claude-haiku-5-5` |
 | Devin | `--model <id>` | `swe-2-max`, `swe-2-high`, `swe-2-medium` (Free); `claude-opus-5-5-high`, `gpt-6-sol` (paid) |
 | Cursor | `--model <id>` | `composer-2.5`, `grok-4.7-xhigh`, `claude-opus-5-thinking-high`; `--list-models` |
 | Grok | `--model <id>` | `grok-4.7`, `grok-4.7-build-fast` (default), `grok-4.6`, `grok-4.5`; `grok models` |

package/bin/atris.js

@@ -632,6 +632,7 @@ function showHelpAll() {
   console.log('  rsi        - Read the Dream-RSI attempt ledger (trees, attempts, policy, dreams)');
   console.log(`  autoland   - Approve the policy once; ${require('../lib/autoland').certifiedWorkLandsPhrase(process.cwd())}, you keep irreversible calls`);
   console.log('  engine     - engine registry, answer validation, dispatch flights, and live progress');
+  console.log('  link       - What two things could become together: one line, why, a first thing to make, who makes it');
   console.log('  ci         - run github actions jobs locally with runs-on: atris');
   console.log('  router     - inspect ax lane outcomes and promote gated reflex overrides');
   console.log('  sign       - Co-author trailer on every commit in an atris workspace (on/off/status)');
@@ -719,6 +720,9 @@ function showHelpAll() {
   console.log('  topup      - Buy credits and print a Stripe checkout URL');
   console.log('  buy        - Quote a purchase or stock order; the person approves before anything is charged');
   console.log('  transactions - List what you bought, paid in fees, traded, or sent');
+  console.log('  hire       - Hire an agent in one step: name, job, inbox, allowance, nightly work loop');
+  console.log('  hires      - Morning check-in: one line per hire (mail, spend, last run)');
+  console.log('  mail       - Your agents\' own inboxes: list, read, send (not Gmail)');
   console.log('  design     - Extract a site design system, check brand adherence, search brands');
   console.log('  mcp        - Run the atris MCP server (stdio) for Claude Desktop and Cursor');
   console.log('');
@@ -749,6 +753,7 @@ function showHelpAll() {
   console.log('  member list          - Show all team members');
   console.log('  member activate <n>  - Activate a member (link skills, show context)');
   console.log('  member upgrade <n>   - Convert flat file to directory format');
+  console.log('  member result <n>    - Newest run of a member: run record, receipt, artifacts, result number');
   console.log('');
   console.log('Plugin:');
   console.log('  plugin build        - Package skills as .plugin for Cowork');
@@ -1773,9 +1778,28 @@ function showWelcomeVisualization() {
     // Document health is advisory and must never prevent startup.
   }
 
+  // What the background cleanup did lately, in its own plain words: the
+  // newest line the hourly autoland tick or a project job left in the
+  // journal, plus agent branches parked for a person.
+  try {
+    const lately = require('../lib/cleanup-summary').latestCleanupLine(cwd);
+    if (lately) console.log(row('lately', lately));
+  } catch {
+    // Advisory only; never blocks boot.
+  }
+
+  // When the hourly autoland tick is alive it lands, salvages, and clears
+  // finished branches and old agent copies itself, so boot must not hand the
+  // owner that chore ("39 finished pieces to put away"). Only a dead or
+  // missing heartbeat brings the tidy counts and `land --reap` back.
+  let autolandAlive = false;
+  try { autolandAlive = require('../lib/autoland').heartbeatIsLive(cwd); } catch { autolandAlive = false; }
+
   // landSummary is expensive (git board classification) - compute once per boot.
   let landInfo = null;
-  try { landInfo = require('../commands/land').landSummary(cwd); } catch (err) { landInfo = null; }
+  if (!autolandAlive) {
+    try { landInfo = require('../commands/land').landSummary(cwd); } catch (err) { landInfo = null; }
+  }
   let rotInfo = null;
   try {
     const { parseLessons } = require('../lib/memory-view');
@@ -1789,7 +1813,7 @@ function showWelcomeVisualization() {
       worktreeDir = path.join(path.dirname(resolved), '.agent-worktrees', path.basename(resolved));
     }
     let worktrees = 0;
-    if (fs.existsSync(worktreeDir)) {
+    if (!autolandAlive && fs.existsSync(worktreeDir)) {
       worktrees = fs.readdirSync(worktreeDir, { withFileTypes: true })
         .filter((entry) => entry.isDirectory()).length;
     }
@@ -2384,6 +2408,20 @@ if (command === 'guide') {
   Promise.resolve(require('../commands/buy').buyCommand(process.argv.slice(3)))
     .then((code) => process.exit(typeof code === 'number' ? code : 0))
     .catch((err) => { console.error(String(err.message || err).replace(/\s+/g, ' ')); process.exit(1); });
+} else if (command === 'hire') {
+  // One-call hire: member + inbox + allowance + overnight loop (POST /business/{id}/hire).
+  Promise.resolve(require('../commands/hire').hireCommand(process.argv.slice(3)))
+    .then((code) => process.exit(typeof code === 'number' ? code : 0))
+    .catch((err) => { console.error(String(err.message || err).replace(/\s+/g, ' ')); process.exit(1); });
+} else if (command === 'hires') {
+  Promise.resolve(require('../commands/hire').hiresCommand(process.argv.slice(3)))
+    .then((code) => process.exit(typeof code === 'number' ? code : 0))
+    .catch((err) => { console.error(String(err.message || err).replace(/\s+/g, ' ')); process.exit(1); });
+} else if (command === 'mail') {
+  // Agent inboxes (@atrismail.com), not Gmail. Send asks first unless --yes.
+  Promise.resolve(require('../commands/mail').mailCommand(process.argv.slice(3)))
+    .then((code) => process.exit(typeof code === 'number' ? code : 0))
+    .catch((err) => { console.error(String(err.message || err).replace(/\s+/g, ' ')); process.exit(1); });
 } else if (command === 'transactions') {
   Promise.resolve(require('../commands/transactions').transactionsCommand(process.argv.slice(3)))
     .then((code) => process.exit(typeof code === 'number' ? code : 0))
@@ -3154,6 +3192,11 @@ if (command === 'guide') {
   Promise.resolve(require('../commands/engine').engineCommand(engineArgs))
     .then((code) => process.exit(typeof code === 'number' ? code : 0))
     .catch((err) => { console.error(`\n✗ Error: ${err.message || err}`); process.exit(1); });
+} else if (command === 'link') {
+  // Link: ask the roster's engine what two things could become together.
+  Promise.resolve(require('../commands/link').linkCommand(process.argv.slice(3)))
+    .then((code) => process.exit(typeof code === 'number' ? code : 0))
+    .catch((err) => { console.error(`\n✗ Error: ${err.message || err}`); process.exit(1); });
 } else if (command === 'playbook') {
   Promise.resolve()
     .then(() => require('../commands/playbook').playbookCommand(process.argv.slice(3)))

package/commands/agent-spawn.js

@@ -465,6 +465,7 @@ function agentSpawnStatusCommand(args = [], deps = {}) {
 }
 
 module.exports = {
+  ALLOWED_ENGINES,
   parseSpawnArgs,
   commandForEngine,
   createSpawnRequest,

package/commands/autoland.js

@@ -555,6 +555,21 @@ function showStatus(root, args) {
     console.log('');
     console.log(`  waiting on a human right now: ${waiting.length}, oldest ${waiting[0].hours}h`);
   }
+  // What the next tick's idle sweep will do, read-only (no check runs here).
+  if (enabled && policy.janitor !== false && policy.idle_sweep !== false) {
+    try {
+      const idle = require('../lib/idle-review-sweep').sweepIdleReviews(root, { tasks, policy, dryRun: true });
+      const days = Number(policy.idle_close_days) > 0 ? Number(policy.idle_close_days) : 7;
+      if (idle.closed.length) {
+        console.log(`  closing on the next tick: ${idle.closed.length} idle over ${days} days that can never land on their own, each with a plain reason.`);
+      }
+      if (idle.human_waiting.length) {
+        console.log(`  staying with you: ${idle.human_waiting.length} in money, deploys, security, or customer work; idle time never closes these.`);
+      }
+    } catch {
+      // Preview only.
+    }
+  }
   console.log('');
   if (!enabled) console.log("  flip it on: atris autoland on   (one decision; everything after is receipts)");
   console.log('');
@@ -798,9 +813,11 @@ async function runTickBody(root, { json, policy, receipt, engineValidationDeps =
     .filter((task) => String(task.review?.approval_status || task.metadata?.approval_status || 'pending') === 'pending')
     .length;
   const accept = runOwnCli(root, cliArgs, acceptSweepTimeoutMs(pendingReviewRows));
+  let acceptResults = [];
   try {
     const parsed = JSON.parse(accept.stdout);
     const results = Array.isArray(parsed.results) ? parsed.results : [];
+    acceptResults = results;
     // A refused sweep (ok:false, a guard tripped, policy race) carries no
     // summary fields. Name the reason instead of leaving nulls that read as
     // "no work": a blind heartbeat must say WHY it is blind.
@@ -963,6 +980,51 @@ async function runTickBody(root, { json, policy, receipt, engineValidationDeps =
     recordLandingSweepState(state, null, { error: receipt.reap_error });
   }
 
+  // 3c2. idle work resolves itself, every tick. Finished work that sat still
+  // past the grace period (policy.idle_close_days, default 7) and can never
+  // land on its own is closed with a plain reason; done and long-idle rows
+  // leave the list. This used to run only when someone opened a session, so
+  // nights and trips piled up work nobody would ever land. Protected lanes
+  // (money, deploys, security, customer, outward) are never closed by idle
+  // time. Off switch: policy.idle_sweep === false or policy.janitor === false.
+  if (policy.janitor !== false && policy.idle_sweep !== false) {
+    try {
+      const liveReasons = new Map(acceptResults
+        .filter((r) => r && r.ref && r.reason && r.action !== 'accepted')
+        .map((r) => [r.ref, r.reason]));
+      const kept = require('../lib/task-list-keeper').keepWorkspaceTaskList(root, { actor: 'autoland', includeDone: false });
+      const idle = require('../lib/idle-review-sweep').sweepIdleReviews(root, {
+        tasks: readProjection(root),
+        policy,
+        liveReasons,
+      });
+      const putAway = (kept.put_away || []).length + (kept.reaped || []).length;
+      if (putAway + idle.closed.length > 0) require('./task').refreshKeptTaskList(root);
+      receipt.idle_sweep = {
+        closed: idle.closed.map((c) => ({ ref: c.ref, reason: c.reason })),
+        put_away: putAway,
+        human_waiting: idle.human_waiting.length,
+      };
+    } catch (err) {
+      receipt.idle_sweep_error = String((err && err.message) || err).slice(0, 200);
+    }
+  }
+  try {
+    const { appendOvernightNote, tickSummaryLine } = require('../lib/cleanup-summary');
+    const line = tickSummaryLine({
+      landed: (receipt.landed || []).length,
+      closed: receipt.idle_sweep ? receipt.idle_sweep.closed.length : 0,
+      putAway: receipt.idle_sweep ? receipt.idle_sweep.put_away : 0,
+      needYou: receipt.idle_sweep ? receipt.idle_sweep.human_waiting : protectedWaiting.length,
+    });
+    if (line) {
+      appendOvernightNote(root, line);
+      receipt.summary_line = line;
+    }
+  } catch {
+    // The journal line is a courtesy; it never fails the tick.
+  }
+
   // 3d. wish sweep: queued wishes are allowed to wake a mission without a
   // foreground `atris wish` session, but they must never endanger landing.
   try {

package/commands/brain.js

@@ -1140,6 +1140,10 @@ function taskEpisodeScorecard(root, episode, workspace, ts = new Date().toISOStr
     task_title: episode.state && episode.state.title || null,
     task_tag: episode.state && episode.state.tag || null,
     actor: episode.action && episode.action.actor || null,
+    // Who built the work. `actor` is the reviewer; trust is earned by the builder.
+    builder: episode.state && episode.state.metadata && episode.state.metadata.built_by
+      || episode.state && episode.state.claimed_by
+      || null,
     reward: Number.isFinite(reward) ? reward : 0,
     reward_source: episode.reward && episode.reward.source || 'task_review',
     lesson: episode.lesson || '',

package/commands/engine.js

@@ -35,9 +35,12 @@ const {
 const { parseScopeFlag } = require('../lib/cli-scope');
 const { isFreshWorkspace, speakFirstMinute } = require('../lib/first-minute');
 const { teamRosterView } = require('../lib/member-engine');
-const { engineRunsView, availableModels } = require('../lib/roster-models');
+const { engineModelText, engineRunsView, availableModels, modelLabel } = require('../lib/roster-models');
+const { renderTable } = require('../lib/text-table');
+const { TEAM_FOOTER } = require('../lib/team-lineup');
 const { readRosterRuns, workerRuns, summarizeRuns, recentRuns, renderRunLine, DEFAULT_DAYS: RUN_DAYS } = require('../lib/roster-runs');
 const { attachSuggestions } = require('../lib/roster-suggest');
+const { PIN_MAX_AGE_DAYS: PIN_STALE_DAYS, attachStaleModels, modelCatalog } = require('../lib/roster-stale');
 const {
   ENGINE_ROLES,
   ENGINE_JOBS,
@@ -54,6 +57,8 @@ const {
   rosterJobNameError,
   rosterJobRole,
   readRosterState,
+  retiredModelsNamed,
+  RETIRED_CLAUDE_MODELS,
   customRosterJobKeys,
   setRosterPick,
   confirmRoster,
@@ -1051,6 +1056,7 @@ function workerRow(step, index, leadIndex, now = new Date()) {
     until: worker.until || null,
     ends_in_days: endsIn,
     expiring_soon: endsSoon(endsIn),
+    verified: worker.verified || null,
     line: worker.line || null,
     ...(worker.error ? { text: worker.text || '' } : {}),
     status,
@@ -1157,6 +1163,7 @@ function rosterReport(root = process.cwd(), now = new Date()) {
     jobs,
     expiring,
     renew_command: expiring.length ? RENEW_COMMAND : null,
+    upgraded: upgradedModels(state),
     team: team.rows,
     warnings: [...state.session.warnings, ...state.project.warnings, ...state.machine.warnings, ...team.warnings],
     files: {
@@ -1168,6 +1175,25 @@ function rosterReport(root = process.cwd(), now = new Date()) {
   };
 }
 
+// Retired models a roster file still names. Every read runs them as their
+// replacement, so this is only a heads-up; nobody has to edit the file.
+function upgradedModels(state) {
+  const found = [];
+  for (const layer of [state.session, state.project, state.machine]) {
+    if (!layer || layer.format === 'none' || !layer.path) continue;
+    let text = '';
+    try { text = fs.readFileSync(layer.path, 'utf8'); } catch { continue; }
+    for (const from of retiredModelsNamed(text)) {
+      if (!found.some((item) => item.from === from)) found.push({ from, to: RETIRED_CLAUDE_MODELS[from] });
+    }
+  }
+  return found;
+}
+
+function renderUpgradedLine(upgraded) {
+  return (upgraded || []).map((item) => `note: ${modelLabel(item.from)} is retired, so your roster runs ${modelLabel(item.to)} in its place. no edit needed.`).join('\n');
+}
+
 // Every worker, in any job, whose end date is today or within the next
 // seven days. Workers already past their date show on their own lines. A
 // job set for this shell only is skipped: roster confirm does not renew it.
@@ -1214,74 +1240,157 @@ function bootExpiringLine(expiring) {
   return `${first.tool} on ${first.job} ${endsInText(first.ends_in_days)}${more}. renew: ${RENEW_COMMAND}`;
 }
 
-// Every worker under its job, numbered in order, when the job has more than
-// the lead and one backup (the job's own line already shows those two).
-function renderWorkerLines(row) {
-  if (!row.workers || row.workers.length <= 2) return [];
-  const width = Math.max(...row.workers.map((worker) => (worker.runs ? worker.runs.text : worker.text || '').length));
-  return row.workers.map((worker, index) => {
-    const what = (worker.runs ? worker.runs.text : worker.text || '').padEnd(width);
-    const ended = worker.status === 'skipped' && worker.why === 'expired' && worker.ends_in_days !== null;
-    const until = !worker.until || ended ? '' : `until ${worker.until}${worker.expiring_soon ? `, ${endsInText(worker.ends_in_days)}` : ''}`;
-    const extras = [worker.max_seconds ? rosterMaxText(worker.max_seconds) : '', worker.prep ? `prepped by ${worker.prep}` : '', until].filter(Boolean);
-    const state = worker.status === 'leads' ? 'leads now' : worker.status === 'backup' ? 'backup'
-      : ended ? `ended ${shortDay(worker.until)}, skipped` : `skipped, ${worker.why}`;
-    return `  ${index + 1}. ${what} ${[state, ...extras].join(', ')}`.trimEnd();
-  });
+// --- the roster as tables -------------------------------------------------
+//
+// One row per job, one row per member. Plain columns, a header row, two
+// spaces between; a cell that needs more than one line (effort, several
+// backups) carries on underneath in its own column.
+
+function workerCellText(view) {
+  return view ? engineModelText(view.engine, view.model) : '';
 }
 
-// Each worker's recent record under its job, only for workers with runs.
-function renderWorkerRecords(row) {
-  return (row.workers || [])
-    .filter((worker) => worker.record)
-    .map((worker) => `  ${worker.runs ? worker.runs.text : worker.engine}: ${worker.record.text}`);
-}
-
-function renderJobRoster(rows) {
-  const width = Math.max(7, ...rows.map((row) => row.job.length));
-  const ownerWidth = Math.max(24, ...rows.filter((row) => row.pick && row.runs).map((row) => row.runs.text.length));
-  const backupWidth = Math.max(16, ...rows.filter((row) => row.backup_runs).map((row) => row.backup_runs.text.length + 7));
-  return rows.map((row) => {
-    const label = row.job.padEnd(width);
-    const nowText = row.now_runs ? row.now_runs.text : 'no ready engine';
-    const fallsTo = `${row.like ? `falls back to ${row.like}` : 'router decides'}: ${nowText}`;
-    if (!row.pick) return `${label} no pick, ${fallsTo}`;
-    const owner = row.runs.text.padEnd(ownerWidth);
-    const backup = row.backup_runs ? `backup ${row.backup_runs.text}${row.backup_prep ? ` prepped by ${row.backup_prep}` : ''}` : 'no backup';
-    const cap = `${row.max_seconds ? `${rosterMaxText(row.max_seconds)}, ` : ''}${row.prep ? `prepped by ${row.prep}, ` : ''}`;
-    const date = untilText(row.pick, row.ends_in_days);
-    const fallback = row.lead === 'backup' ? 'using backup' : row.lead === 'later' ? `using ${nowText}` : fallsTo;
-    const ended = row.ends_in_days !== null && row.ends_in_days !== undefined ? `ended ${shortDay(row.pick.until)}, skipped` : 'expired';
-    const status = row.status === 'expired' ? `${ended}, ${fallback}`
-      : row.status === 'cooling' ? `${row.cooling}, ${fallback}`
-        : row.status === 'not ready' ? `not ready, ${fallback}`
-          : date;
-    const where = row.file ? `${row.from} (${row.file})` : row.from;
-    const head = `${label} ${owner} ${backup.padEnd(backupWidth)} ${cap}${status}, ${where}`.trimEnd();
-    const suggestion = row.suggestion ? [`  suggestion: ${row.suggestion.text}`] : [];
-    return [head, ...renderWorkerLines(row), ...renderWorkerRecords(row), ...suggestion].join('\n');
-  }).join('\n');
+function maxCellText(seconds) {
+  const text = rosterMaxText(seconds);
+  return text ? text.replace(/^max /, '') : '-';
+}
+
+// Workers that name a tool the roster can run, in written order.
+function goodWorkers(row) {
+  return (row.workers || []).filter((worker) => worker.engine && worker.runs);
 }
 
-function renderTeamRoster(rows) {
+// Why a backup is passed over, in two or three words.
+function backupSkipText(worker) {
+  if (worker.status !== 'skipped') return '';
+  if (worker.why === 'expired' && worker.ends_in_days !== null && worker.ends_in_days !== undefined) return `ended ${shortDay(worker.until)}`;
+  return worker.why || 'skipped';
+}
+
+// "newer <model> out" or "pin 45 days old": the outdated-model flags,
+// short enough for the note column. The full line with its fix prints
+// under the table.
+function staleNote(worker) {
+  if (worker.stale_model && worker.newer_model) return `newer ${modelLabel(worker.newer_model)} out`;
+  if (worker.pin_age_days !== null && worker.pin_age_days !== undefined && worker.pin_age_days > PIN_STALE_DAYS) return `pin ${worker.pin_age_days} days old`;
+  return '';
+}
+
+function jobNoteText(row, lead, backups, mainFrom) {
+  // A tool on its own default model is named alone here, to keep notes short.
+  const nowText = !row.now_runs ? 'no ready engine' : row.now_runs.model ? workerCellText(row.now_runs) : row.now_runs.engine;
+  if (!row.pick) return row.like ? `no pick, same as ${row.like}` : 'no pick, router decides';
+  const fallback = row.lead === 'backup' ? 'using backup'
+    : row.lead === 'later' ? `using ${nowText}`
+      : row.like ? `falls back to ${row.like}` : `router decides: ${nowText}`;
+  const ended = row.ends_in_days !== null && row.ends_in_days !== undefined ? `ended ${shortDay(row.pick.until)}` : 'expired';
+  const parts = [];
+  if (row.status === 'expired') parts.push(`${ended}, ${fallback}`);
+  else if (row.status === 'cooling') parts.push(`${row.cooling}, ${fallback}`);
+  else if (row.status === 'not ready') parts.push(`not ready, ${fallback}`);
+  else if (row.expiring_soon) parts.push(endsInText(row.ends_in_days));
+  if (lead && lead.prep) parts.push(`prep: ${lead.prep}`);
+  if (lead && staleNote(lead)) parts.push(staleNote(lead));
+  for (const worker of backups) if (staleNote(worker)) parts.push(`backup ${staleNote(worker)}`);
+  if (row.from && row.from !== mainFrom) parts.push(`from ${row.from}`);
+  return parts.join(', ');
+}
+
+// The roster file most jobs come from; the table heading names it.
+function mainRosterSource(rows) {
+  const counts = new Map();
+  for (const row of rows) if (row.pick && row.from) counts.set(row.from, (counts.get(row.from) || 0) + 1);
+  const [from] = [...counts.entries()].sort((a, b) => b[1] - a[1])[0] || [];
+  const row = rows.find((item) => item.from === from);
+  return { from: from || null, file: row ? row.file : null };
+}
+
+function jobTableRow(row, mainFrom) {
+  const [lead, ...backups] = row.pick ? goodWorkers(row) : [];
+  const leadView = row.pick ? (lead && lead.runs) : row.now_runs;
+  const leads = leadView
+    ? [workerCellText(leadView), leadView.effort ? `(${leadView.effort} effort)` : null]
+    : [row.pick ? 'no ready tool' : 'no ready engine'];
+  const backupCell = backups.length
+    ? backups.map((worker) => {
+      // Effort, max time, and prep for a backup stay in --json; the cell keeps
+      // what changes who runs: a skip reason or an end date.
+      const skip = backupSkipText(worker);
+      const until = !skip && parseRosterUntil(worker.until) ? `until ${shortDay(worker.until)}${worker.expiring_soon ? `, ${endsInText(worker.ends_in_days)}` : ''}` : '';
+      const extras = [skip, until].filter(Boolean);
+      return `${workerCellText(worker.runs)}${extras.length ? ` (${extras.join(', ')})` : ''}`;
+    })
+    : ['none'];
+  const until = lead && parseRosterUntil(lead.until) ? lead.until : '-';
+  return [
+    row.job,
+    leads,
+    backupCell,
+    lead ? maxCellText(lead.max_seconds) : '-',
+    until,
+    jobNoteText(row, lead, backups, mainFrom) || '-',
+  ];
+}
+
+function renderJobRoster(rows, { width, heading = true } = {}) {
   if (!rows.length) return '';
-  const width = Math.max(6, ...rows.map((row) => row.member.length));
-  const jobWidth = Math.max(6, ...rows.map((row) => String(row.job || '').length));
-  const lines = rows.map((row) => {
-    const engine = row.engine ? engineRunsView(row.engine, { model: row.model || '', effort: row.effort || '' }).text : 'no ready engine';
-    const how = row.source === 'file' ? `from ${row.file}` : 'automatic';
-    return `${row.member.padEnd(width)} ${String(row.job || '').padEnd(jobWidth)} ${engine.padEnd(24)} ${how}`.trimEnd();
+  const { from, file } = mainRosterSource(rows);
+  const columns = [
+    { header: 'JOB' }, { header: 'LEADS' }, { header: 'BACKUP' }, { header: 'MAX' }, { header: 'UNTIL' },
+    { header: 'NOTE', wrap: true, min: 16 },
+  ];
+  const table = renderTable(columns, rows.map((row) => jobTableRow(row, from)), { width });
+  const title = !heading ? '' : file ? `jobs, from ${file}` : 'jobs';
+  const suggestions = rows.filter((row) => row.suggestion).map((row) => `suggestion for ${row.job}: ${row.suggestion.text}`);
+  return [title, table, ...renderWorkerRecords(rows, { width }), ...suggestions].filter(Boolean).join('\n');
+}
+
+// Each worker's recent record (last 7 days), only for workers with runs, as
+// one small table under the jobs.
+function renderWorkerRecords(rows, { width } = {}) {
+  const records = [];
+  for (const row of rows) {
+    for (const worker of row.workers || []) {
+      if (worker.record) records.push([row.job, worker.runs ? workerCellText(worker.runs) : worker.engine, worker.record.text.replace(/^last \d+ days: /, '')]);
+    }
+  }
+  if (!records.length) return [];
+  return ['\nlast 7 days', renderTable([{ header: 'JOB' }, { header: 'WORKER' }, { header: 'RECORD', clip: true, min: 20 }], records, { width })];
+}
+
+// "sep 30, 3 runs" or "quiet 8 to 14 days", from the same evidence atris
+// team reads. '-' for idle members and when activity was not read.
+function teamActivityTag(activity) {
+  if (!activity || activity.status === 'idle') return '-';
+  if (activity.status === 'quiet') return 'quiet 8 to 14 days';
+  const runs = Number(activity.runs_7d) || 0;
+  const day = activity.days_since === 0 ? 'today' : activity.days_since === 1 ? 'yesterday' : shortDay(activity.last_active);
+  return `${day}, ${runs} run${runs === 1 ? '' : 's'}`;
+}
+
+function renderTeamRoster(rows, { width } = {}) {
+  if (!rows.length) return '';
+  const showActivity = rows.some((row) => row.activity !== undefined);
+  const columns = [{ header: 'MEMBER' }, { header: 'JOB' }, { header: 'ENGINE · MODEL' }, { header: 'SOURCE' }];
+  if (showActivity) columns.push({ header: 'LAST 7 DAYS', clip: true, min: 11 });
+  const cells = rows.map((row) => {
+    const engine = row.engine ? workerCellText(engineRunsView(row.engine, { model: row.model || '', effort: row.effort || '' })) : 'no ready engine';
+    const stale = row.stale_model && row.newer_model ? ` (newer ${modelLabel(row.newer_model)} out)` : '';
+    const cell = [row.member, row.job || '-', `${engine}${stale}`, row.source === 'file' ? (row.file || 'roster file') : 'automatic'];
+    if (showActivity) cell.push(teamActivityTag(row.activity));
+    return cell;
   });
-  return ['team', ...lines].join('\n');
+  return ['team', renderTable(columns, cells, { width })].join('\n');
 }
 
 function renderRosterWarnings(warnings) {
   return warnings.map((warning) => `warning: ${warning.file} line ${warning.line} "${warning.text}" ${warning.message}.`).join('\n');
 }
 
-function renderRosterReport(report) {
-  const jobs = [renderJobRoster(report.jobs), renderExpiringLine(report.expiring)].filter(Boolean).join('\n');
-  return [jobs, renderTeamRoster(report.team), renderRosterWarnings(report.warnings)]
+function renderRosterReport(report, { width } = {}) {
+  const stale = (report.stale || []).map((item) => item.text);
+  const jobs = [renderJobRoster(report.jobs, { width }), renderExpiringLine(report.expiring), ...stale, renderUpgradedLine(report.upgraded)].filter(Boolean).join('\n');
+  return [jobs, renderTeamRoster(report.team, { width }), renderRosterWarnings(report.warnings)]
     .filter(Boolean)
     .join('\n\n');
 }
@@ -1290,8 +1399,6 @@ function printJobRoster(root, now = new Date()) {
   console.log(renderRosterReport(rosterReport(root, now)));
 }
 
-const AVAILABLE_HINT = 'see which tools and models this machine has: atris engine roster --available';
-
 // Each installed tool and the models it offers, from local files only.
 function availableReport(root) {
   const engines = readEngineRegistry(root, { persist: false }).engines
@@ -1312,7 +1419,7 @@ function renderSessionRoster(report, key) {
   const team = report.team.filter((row) => row.source === 'file' && row.file === report.files.session);
   if (!jobs.length && !team.length) return `this session (${key}) has no roster changes. add one with: atris engine assign <job> <tool> --session`;
   const head = `this session (${key}) changes${report.files.session ? `, from ${report.files.session}` : ''}`;
-  return [head, renderJobRoster(jobs), renderTeamRoster(team)].filter(Boolean).join('\n\n');
+  return [head, renderJobRoster(jobs, { heading: false }), renderTeamRoster(team)].filter(Boolean).join('\n\n');
 }
 
 function runRosterSessionCommand(rest, json, root, now) {
@@ -1361,6 +1468,38 @@ function attachRunRecords(report, root, now = new Date()) {
   return report;
 }
 
+// Pins are proven by landed runs; a pin older than 30 days is flagged, so
+// the look-back reaches well past that.
+const STALE_PROOF_DAYS = 90;
+
+// Each team row gets the member's activity (last 7 days, quiet, or idle)
+// from the same evidence atris team reads: dated logs, commits that name
+// the member, roster runs, and stream events, read once for the team.
+function attachTeamActivity(report, root, now = new Date()) {
+  const rows = report.team || [];
+  if (!rows.length) return report;
+  try {
+    const { collectMemberActivity } = require('./team');
+    const activity = collectMemberActivity(root, rows.map((row) => ({ name: row.member })), { nowMs: new Date(now).getTime() });
+    const byName = new Map(activity.map(({ days, ...rest }) => [rest.name, rest]));
+    for (const row of rows) row.activity = byName.get(String(row.member).toLowerCase()) || null;
+  } catch {
+    // Activity is a view; a read that fails leaves the roster as it was.
+  }
+  return report;
+}
+
+// Mark workers that run an outdated model or an unproven old pin. Local
+// files only: the registry, codex's models cache, and the run record.
+function attachStaleCheck(report, root, now = new Date()) {
+  const engines = readEngineRegistry(root, { persist: false }).engines;
+  return attachStaleModels(report, {
+    catalog: modelCatalog(engines),
+    runs: readRosterRuns(root, { now, days: STALE_PROOF_DAYS }),
+    now,
+  });
+}
+
 const RUNS_LIST_DAYS = 30;
 const RUNS_LIST_LIMIT = 20;
 
@@ -1407,9 +1546,9 @@ function runRosterCommand(args, root, now = new Date()) {
   }
   if (rest[0] === 'session') return runRosterSessionCommand(rest, json, root, now);
   if (rest[0] === 'confirm') confirmRoster(root, now);
-  const report = attachRunRecords(rosterReport(root, now), root, now);
+  const report = attachTeamActivity(attachStaleCheck(attachRunRecords(rosterReport(root, now), root, now), root, now), root, now);
   if (json) console.log(JSON.stringify(report, null, 2));
-  else console.log(`${renderRosterReport(report)}\n\n${AVAILABLE_HINT}`);
+  else console.log(`${renderRosterReport(report)}\n\n${TEAM_FOOTER.join('\n')}`);
   return 0;
 }
 
@@ -2267,7 +2406,7 @@ function engineCommand(args = [], deps = {}) {
     if (sub === 'help' || args.includes('--help') || args.includes('-h')) {
       console.log('\n  atris engine watch [<id>|latest] [--no-follow]\n                           follow one live transcript or list running engine work');
       console.log('\n  long read-only asks: atris engine ask "..." --engine agy --timeout <seconds>\n                           quick asks default to 120 seconds; explicit jobs allow up to 3600\n                           follow live work with atris engine watch latest');
-      console.log('\n  atris engine            roster + current default\n  atris engine roster [--json] show every job and its workers in order: search, build, review, and your own\n  atris engine roster confirm renew every dated worker for 30 days\n  atris engine roster session [clear]\n                           show or drop the roster changes for this shell only\n  atris engine roster --available\n                           tools on this machine and the models each one offers\n  atris engine roster --runs [job]\n                           the last 20 runs, newest first, with tool, model, time, and outcome\n  atris engine assign <job> <tool> [--like <kind>] [--model <m>] [--effort <level>] [--max "20 min"] [--prep <job>] [--backup "<tool> [model]"] [--days <n>] [--add] [--session | --everywhere]\n  atris engine assign <job> --promote "<tool> [model]" | --remove <tool> | --clear [--session | --everywhere]\n                           sets the lead worker of the job; --promote moves one of its workers to the top as written;\n                           --add puts one more at the end; jobs: search, build, review,\n                           or your own like "small build" (--like search|build|review when the name does not say);\n                           --prep search has that job read the task first and hand this worker a short brief;\n                           --everywhere is for all projects; --session is this shell only (set ATRIS_ROSTER_SESSION=<name>)\n  atris engines --chart   show the fleet as an org chart\n  atris engine list --json [--all] full registry: default + engines with tier, roles, fallback, health (--all includes hidden engines)\n  atris engine set <name> --duty leader|errands|learning [--models "a, b"]\n                           arrange the fleet and save its model policy\n  atris engine resolve <role> or <job> [--json]\n                           choose the best ready engine for navigator|executor|validator or a roster job;\n                           notes always answers: its roster pick, else agy then haiku\n  atris engine health <name> --set ready|not_installed|credit_out\n                           flip runtime health, for example when credits run out\n  atris engine doctor [--json]\n                           probe which engine CLIs are installed here and sync that into health policy\n  atris engine <name>     make that engine the default here\n  atris engine test [name] preflight: run the engine CLI headless, report pass/fail\n  atris engine bench [names...] [--runs N]\n                           ranked latency scoreboard of engine passes\n  atris engine ask "<question>" --engine <name> [--engine <name> ...]\n                           ask several engines in parallel without allowing edits\n  atris engine ask --jobs <jobs.json>\n                           ask different read-only questions in parallel\n  atris engine validate <receipt-path|latest> [--engine <name>]\n                           check ask answers with a different read-only referee\n  atris engine validate scoreboard\n                           show pass rates by worker engine\n  atris engine dispatch <task-id> [<task-id> ...] --engine cursor|codex [--prompt-file <f>] [--yolo]\n                           one-command claim, worktree, build, verify, ship, ready\n  atris engine login <provider> --yes\n                           upload a local provider CLI login to the backend vault\n  atris engine login <provider> --computer [--seat <name>]\n  atris engine login <provider> --business <id> [--seat <name>]\n                           sign in on an Atris computer by device flow\n  atris engine login --list | --remove <provider>\n                           list or remove vaulted provider logins\n  atris engine seats       show which named accounts are ready to work\n  atris engine seed <provider> --business <id>|--user\n                           push a vaulted login onto an Atris computer\n  atris engine reset      back to the house default\n  --engine <name>         one run on that engine (mission run / autopilot / run)\n');
+      console.log('\n  atris engine            roster + current default\n  atris engine roster [--json] show every job and its workers in order: search, build, review, and your own\n                           flags a model with a newer version on this machine, or a pin not proven in 30 days\n                           (a landed run, or "verified 2026-09-30" on its line, proves it)\n  atris engine roster confirm renew every dated worker for 30 days\n  atris engine roster session [clear]\n                           show or drop the roster changes for this shell only\n  atris engine roster --available\n                           tools on this machine and the models each one offers\n  atris engine roster --runs [job]\n                           the last 20 runs, newest first, with tool, model, time, and outcome\n  atris engine assign <job> <tool> [--like <kind>] [--model <m>] [--effort <level>] [--max "20 min"] [--prep <job>] [--backup "<tool> [model]"] [--days <n>] [--add] [--session | --everywhere]\n  atris engine assign <job> --promote "<tool> [model]" | --remove <tool> | --clear [--session | --everywhere]\n                           sets the lead worker of the job; --promote moves one of its workers to the top as written;\n                           --add puts one more at the end; jobs: search, build, review,\n                           or your own like "small build" (--like search|build|review when the name does not say);\n                           --prep search has that job read the task first and hand this worker a short brief;\n                           --everywhere is for all projects; --session is this shell only (set ATRIS_ROSTER_SESSION=<name>)\n  atris engines --chart   show the fleet as an org chart\n  atris engine list --json [--all] full registry: default + engines with tier, roles, fallback, health (--all includes hidden engines)\n  atris engine set <name> --duty leader|errands|learning [--models "a, b"]\n                           arrange the fleet and save its model policy\n  atris engine resolve <role> or <job> [--json]\n                           choose the best ready engine for navigator|executor|validator or a roster job;\n                           notes always answers: its roster pick, else agy then haiku\n  atris engine health <name> --set ready|not_installed|credit_out\n                           flip runtime health, for example when credits run out\n  atris engine doctor [--json]\n                           probe which engine CLIs are installed here and sync that into health policy\n  atris engine <name>     make that engine the default here\n  atris engine test [name] preflight: run the engine CLI headless, report pass/fail\n  atris engine bench [names...] [--runs N]\n                           ranked latency scoreboard of engine passes\n  atris engine ask "<question>" --engine <name> [--engine <name> ...]\n                           ask several engines in parallel without allowing edits\n  atris engine ask --jobs <jobs.json>\n                           ask different read-only questions in parallel\n  atris engine validate <receipt-path|latest> [--engine <name>]\n                           check ask answers with a different read-only referee\n  atris engine validate scoreboard\n                           show pass rates by worker engine\n  atris engine dispatch <task-id> [<task-id> ...] --engine cursor|codex [--prompt-file <f>] [--yolo]\n                           one-command claim, worktree, build, verify, ship, ready\n  atris engine login <provider> --yes\n                           upload a local provider CLI login to the backend vault\n  atris engine login <provider> --computer [--seat <name>]\n  atris engine login <provider> --business <id> [--seat <name>]\n                           sign in on an Atris computer by device flow\n  atris engine login --list | --remove <provider>\n                           list or remove vaulted provider logins\n  atris engine seats       show which named accounts are ready to work\n  atris engine seed <provider> --business <id>|--user\n                           push a vaulted login onto an Atris computer\n  atris engine reset      back to the house default\n  --engine <name>         one run on that engine (mission run / autopilot / run)\n');
       return 0;
     }
     if (isFreshWorkspace(root)) {
@@ -2316,6 +2455,7 @@ module.exports = {
   readSavedEngine,
   roster,
   rosterReport,
+  renderRosterReport,
   jobRosterView,
   expiringWorkers,
   bootExpiringLine,