atris 3.73.1 → 3.74.1

package/commands/align.js

@@ -42,15 +42,6 @@ function sleep(ms) {
   return new Promise((r) => setTimeout(r, ms));
 }
 
-/**
- * Compute SHA-256 hash of content string.
- * @param {string} content - Content to hash
- * @returns {string} Hex-encoded hash
- */
-function hashContent(content) {
-  return crypto.createHash('sha256').update(content).digest('hex');
-}
-
 /**
  * Compute SHA-256 hash of a file.
  * @param {string} absPath - Absolute path to file
@@ -472,19 +463,19 @@ async function alignAtris() {
   const printUsage = () => {
     console.log('Usage: atris align [business] [--fix] [--hard] [--from cloud|local] [--dry-run]');
     console.log('');
-    console.log('  atris align                   Diff current workspace against cloud (auto-detect)');
-    console.log('  atris align example-co            Diff example-co workspace');
-    console.log('  atris align example-co --fix      Fix drift (local is canonical by default)');
-    console.log('  atris align example-co --fix --hard  Force-push: nuke cloud cruft, upload local. Skips diff. Fast.');
-    console.log('  atris align example-co --fix --from cloud  Cloud is canonical: pull EC2-only, delete local extras');
-    console.log('  atris align example-co --dry-run  Show what would change, do nothing');
+    console.log('  atris align                   Show what differs between this folder and its cloud copy');
+    console.log('  atris align example-co            Show what differs for the example-co workspace');
+    console.log('  atris align example-co --fix      Make them match, keeping this computer\'s version');
+    console.log('  atris align example-co --fix --hard  Make the cloud an exact copy of this computer: delete cloud-only files, upload the rest. Fast.');
+    console.log('  atris align example-co --fix --from cloud  Keep the cloud version: copy cloud-only files down, delete extra local files');
+    console.log('  atris align example-co --dry-run  Show what would change, change nothing');
   };
 
   // Explicit help must win before we try to auto-detect a business slug,
   // otherwise `--help` gets overwritten by the .atris/business.json fallback
   // and the command attempts a real align instead of printing usage.
-  const firstArg = process.argv[3];
-  if (firstArg === '--help' || firstArg === '-h' || firstArg === 'help') {
+  const alignArgs = process.argv.slice(3);
+  if (alignArgs[0] === 'help' || alignArgs.includes('--help') || alignArgs.includes('-h')) {
     printUsage();
     process.exit(0);
   }
@@ -515,7 +506,7 @@ async function alignAtris() {
   }
 
   if (hard && fromSide !== 'local') {
-    console.error('--hard only supported with --from local (the canonical force-push direction).');
+    console.error('--hard only works with --from local: it overwrites the cloud with this computer\'s files, never the other way.');
     process.exit(1);
   }
 
@@ -546,7 +537,7 @@ async function alignAtris() {
   // Wake EC2 (the rule)
   const endpoint = await ensureAwake(creds.token, biz.businessId);
   if (!endpoint) {
-    console.error('  EC2 computer did not become ready in time. Aborting.');
+    console.error(`  The cloud computer for "${slug}" did not wake up in time, so nothing ran. Wait a minute, then run the same command again.`);
     process.exit(1);
   }
 

package/commands/auth.js

@@ -1,4 +1,4 @@
-const { AGENT_TOKEN_EXPIRED_DETAIL, decodeJwtClaims, loadCredentials, saveCredentials, saveAgentClientCredentials, preserveAgentClientLogin, deleteCredentials, getCredentialsPath, openBrowser, promptUser, displayAccountSummary, ensureValidCredentials, loadProfile, listProfiles, profileNameFromEmail, deleteProfile, saveProfile, getTokenExpiryEpochSeconds, getTerminalSessionId, setSessionProfile, getSessionProfile, clearSessionProfile, cleanStaleSessions, getSessionsDir } = require('../utils/auth');
+const { AGENT_TOKEN_EXPIRED_DETAIL, decodeJwtClaims, loadCredentials, saveCredentials, saveAgentClientCredentials, preserveAgentClientLogin, deleteCredentials, getCredentialsPath, openBrowser, promptUser, displayAccountSummary, ensureValidCredentials, loadProfile, listProfiles, profileNameFromEmail, deleteProfile, saveProfile, getTokenExpiryEpochSeconds, getTerminalSessionId, setSessionProfile, getSessionProfile, cleanStaleSessions, getSessionsDir } = require('../utils/auth');
 const { getAppBaseUrl, getApiBaseUrl, apiRequestJson } = require('../utils/api');
 const { isNonInteractive, wantsJson } = require('../lib/noninteractive');
 const { hasFlag, readFlag } = require('../lib/arg-parser');

package/commands/autopilot.js

@@ -1163,7 +1163,10 @@ function lessonSlug(text, maxLen = 40) {
  */
 function writeLesson(cwd, slug, status, explanation) {
   const lessonsPath = path.join(cwd, 'atris', 'lessons.md');
-  const today = new Date().toISOString().split('T')[0]; // YYYY-MM-DD
+  // Local calendar day (YYYY-MM-DD); toISOString is UTC and dates an
+  // evening lesson tomorrow anywhere west of Greenwich.
+  const now = new Date();
+  const today = `${now.getFullYear()}-${String(now.getMonth() + 1).padStart(2, '0')}-${String(now.getDate()).padStart(2, '0')}`;
   const lessonLine = `- **[${today}] ${slug}** - ${status} - ${explanation}`;
 
   if (!fs.existsSync(lessonsPath)) {
@@ -4043,13 +4046,6 @@ Search the codebase to verify. Reply: YES <reason> or NO <reason>`;
   }
 }
 
-/**
- * Entry point when called without a description.
- */
-async function autopilotFromTodo(options = {}) {
-  return autopilotAtris(null, options);
-}
-
 module.exports = {
   askModel,
   snapshotRepoHeads,

package/commands/avail.js

@@ -117,6 +117,21 @@ function resolveTimezone({ tz, where }) {
   return 'America/Los_Angeles';
 }
 
+function parseWholeNumber(raw, min, max) {
+  if (raw === undefined || !/^\d+$/.test(String(raw).trim())) return null;
+  const n = parseInt(raw, 10);
+  if (n < min || n > max) return null;
+  return n;
+}
+
+function requireWholeNumber(flag, raw, min, max) {
+  const n = parseWholeNumber(raw, min, max);
+  if (n === null) {
+    throw new Error(`${flag} needs a whole number from ${min} to ${max}, got: ${raw === undefined ? 'nothing' : raw}`);
+  }
+  return n;
+}
+
 function parseSetArgs(argv) {
   const opts = {
     wake: null,
@@ -138,10 +153,10 @@ function parseSetArgs(argv) {
     else if (a === '--tz') opts.tz = argv[++i];
     else if (a === '--where') opts.where = argv[++i];
     else if (a === '--days') opts.days = argv[++i];
-    else if (a === '--slot-minutes') opts.slotMinutes = parseInt(argv[++i], 10);
-    else if (a === '--window-days') opts.windowDays = parseInt(argv[++i], 10);
+    else if (a === '--slot-minutes') opts.slotMinutes = requireWholeNumber(a, argv[++i], 5, 480);
+    else if (a === '--window-days') opts.windowDays = requireWholeNumber(a, argv[++i], 1, 365);
     else if (a === '--help' || a === '-h') return { help: true };
-    else throw new Error(`unknown arg: ${a}`);
+    else throw new Error(`atris avail set does not take "${a}". Run: atris avail --help`);
   }
   if (opts.wake == null || opts.sleep == null) {
     throw new Error('--wake and --sleep are required (e.g. --wake 2:30pm --sleep 9pm)');
@@ -287,18 +302,30 @@ async function setAvail(argv) {
   return 0;
 }
 
+function parseSlotsDays(raw) {
+  return parseWholeNumber(raw, 1, 365);
+}
+
 async function slotsAvail(argv) {
   const opts = { days: 7, username: null, json: false };
   for (let i = 0; i < argv.length; i += 1) {
     const a = argv[i];
     if (a === '--json') opts.json = true;
-    else if (a === '--days') opts.days = parseInt(argv[++i], 10);
+    else if (a === '--days') {
+      const raw = argv[++i];
+      const days = parseSlotsDays(raw);
+      if (days === null) {
+        console.error(`--days needs a whole number from 1 to 365, got: ${raw === undefined ? 'nothing' : raw}`);
+        return 1;
+      }
+      opts.days = days;
+    }
     else if (a === '--user' || a === '--username') opts.username = argv[++i];
     else if (a === '--help' || a === '-h') {
       printHelp();
       return 0;
     } else {
-      console.error(`unknown arg: ${a}`);
+      console.error(`atris avail slots does not take "${a}". Run: atris avail --help`);
       return 1;
     }
   }
@@ -320,7 +347,7 @@ async function slotsAvail(argv) {
   try {
     data = JSON.parse(result.body.toString('utf8'));
   } catch {
-    console.error('Invalid slots response');
+    console.error(`the booking server sent back a reply atris could not read (HTTP ${result.status}). Try again in a minute.`);
     return 1;
   }
   if (result.status < 200 || result.status >= 300) {
@@ -392,7 +419,7 @@ async function availCommand(argv = []) {
   const sub = argv[0].toLowerCase();
   if (sub === 'set' || sub === 'update') return setAvail(argv.slice(1));
   if (sub === 'slots') return slotsAvail(argv.slice(1));
-  console.error(`Unknown subcommand: ${sub}`);
+  console.error(`atris avail does not know "${sub}". Use show, set, or slots.`);
   printHelp();
   return 1;
 }
@@ -402,6 +429,8 @@ module.exports = {
   formatBookingLink,
   parseTimeToDecimal,
   parseDaysArg,
+  parseSlotsDays,
+  parseSetArgs,
   buildAvailableHours,
   resolveTimezone,
   formatDecimalHour,

package/commands/computer.js

@@ -35,7 +35,7 @@ const {
   runEngineDeviceLoginCommand,
   validEngineLoginSeat,
 } = require('./engine');
-const { consoleCommand, gatherAtrisContext, buildSystemPrompt } = require('./console');
+const { consoleCommand } = require('./console');
 const { streamSession } = require('./serve');
 const { buildRemoteAtrisBootstrapCommand } = require('../lib/runtime-bootstrap');
 const { envForcesNonInteractive } = require('../lib/noninteractive');
@@ -4380,6 +4380,7 @@ async function runComputer(argv = process.argv.slice(3), deps = {}) {
     if (!codeopsCtx) {
       console.error('Atris CodeOps is not available for this account.');
       console.error('Ask an Atris CodeOps admin to add you to the atris-codeops business.');
+      process.exitCode = 1;
       return;
     }
     const codeopsOptions = codeOpsCloudOptions(cloudOptions);
@@ -4418,6 +4419,7 @@ async function runComputer(argv = process.argv.slice(3), deps = {}) {
       default:
         console.error(`Unknown CodeOps subcommand: ${codeopsSub}`);
         console.log('Run: atris computer codeops help');
+        process.exitCode = 1;
         return;
     }
     return;

package/commands/console.js

@@ -1,7 +1,7 @@
 const fs = require('fs');
 const path = require('path');
 const os = require('os');
-const { spawn, spawnSync } = require('child_process');
+const { spawnSync } = require('child_process');
 const readline = require('readline');
 const { resolveClaudeRunnerBin } = require('../lib/runner-command');
 

package/commands/context-sync.js

@@ -222,65 +222,6 @@ async function businessDiff(slug) {
 }
 
 
-/**
- * atris log <business-slug>
- * Shows human-readable commit history.
- */
-async function businessLog(slug) {
-  const biz = await resolveBusiness(slug);
-
-  if (!biz.workspaceId) {
-    console.error(`Business "${slug}" has no workspace.`);
-    process.exit(1);
-  }
-
-  const limit = 20;
-  const pathFilter = process.argv.includes('--path') ? process.argv[process.argv.indexOf('--path') + 1] : null;
-
-  const params = `limit=${limit}` + (pathFilter ? `&path=${encodeURIComponent(pathFilter)}` : '');
-  const result = await apiRequestJson(
-    `/business/${biz.businessId}/workspaces/${biz.workspaceId}/git/log?${params}`,
-    { method: 'GET', token: biz.token }
-  );
-
-  if (!result.ok) {
-    if (result.status === 409) {
-      console.log('\n  Computer is sleeping. Wake it first.\n');
-    } else {
-      console.error(`\n  Failed to get history: ${result.errorMessage || result.status}\n`);
-    }
-    process.exit(1);
-  }
-
-  const commits = result.data.commits || [];
-  if (commits.length === 0) {
-    console.log(`\n  ${biz.name}: no history yet.\n`);
-    return;
-  }
-
-  console.log(`\n  ${biz.name}: history\n`);
-
-  for (const commit of commits) {
-    const date = _timeSince(commit.date) || commit.date;
-    const msg = commit.message || '';
-
-    // Parse actor from message format "actor/name: message"
-    const colonIdx = msg.indexOf(': ');
-    let actor = '';
-    let description = msg;
-    if (colonIdx > 0 && colonIdx < 40) {
-      actor = msg.substring(0, colonIdx);
-      description = msg.substring(colonIdx + 2);
-    }
-
-    const actorDisplay = actor ? `  ${actor}` : '';
-    console.log(`  ${date.padEnd(12)} ${actorDisplay}`);
-    console.log(`               ${description}`);
-    console.log('');
-  }
-}
-
-
 /**
  * Convert ISO timestamp to human-readable relative time (e.g., "5m ago").
  * @param {string} isoString - ISO 8601 timestamp
@@ -300,4 +241,4 @@ function _timeSince(isoString) {
 }
 
 
-module.exports = { businessStatus, businessDiff, businessLog };
+module.exports = { businessStatus, businessDiff };

package/commands/fleet.js

@@ -18,7 +18,6 @@ const https = require('https');
 const fs = require('fs');
 const path = require('path');
 const os = require('os');
-const crypto = require('crypto');
 const { parseScopeFlag } = require('../lib/cli-scope');
 
 // ── Config ──────────────────────────────────────────────

package/commands/lifecycle.js

@@ -11,6 +11,15 @@ const {
   setMemberLoopAwake,
 } = require('../lib/member-switches');
 
+/**
+ * True when the user asked for help. Checked before anything else so
+ * `atris sleep --help` inside a bound folder never sleeps that business.
+ * @returns {boolean}
+ */
+function wantsHelp() {
+  return process.argv.slice(3).some((a) => a === '--help' || a === '-h' || a === 'help');
+}
+
 /**
  * Resolve business slug from CLI arg or local .atris/business.json.
  * @returns {string|null} The resolved slug, or null if not found.
@@ -121,11 +130,12 @@ async function waitForBusinessComputer(token, business, maxWait = 90000) {
  * @returns {Promise<void>}
  */
 async function sleepAtris() {
-  if (handleMemberSwitch(false)) return;
+  const help = wantsHelp();
+  if (!help && handleMemberSwitch(false)) return;
 
-  const slug = resolveSlug();
+  const slug = help ? null : resolveSlug();
 
-  if (!slug || slug === '--help' || slug === '-h' || slug === 'help') {
+  if (!slug) {
     console.log('Usage: atris sleep [business|member] [--loop <loop-id>]');
     console.log('');
     console.log('  Pause a workspace to save compute. Storage only.');
@@ -172,11 +182,12 @@ async function sleepAtris() {
  * @returns {Promise<void>}
  */
 async function wakeAtris() {
-  if (handleMemberSwitch(true)) return;
+  const help = wantsHelp();
+  if (!help && handleMemberSwitch(true)) return;
 
-  const slug = resolveSlug();
+  const slug = help ? null : resolveSlug();
 
-  if (!slug || slug === '--help' || slug === '-h' || slug === 'help') {
+  if (!slug) {
     console.log('Usage: atris wake [business|member] [--loop <loop-id>]');
     console.log('');
     console.log('  Wake a sleeping workspace. Wake signal sent; loops pick it up on their next pass.');

package/commands/log-sync.js

@@ -1,6 +1,6 @@
 const fs = require('fs');
 const path = require('path');
-const { getLogPath, ensureLogDirectory, createLogFile } = require('../lib/file-ops');
+const { getLogPath, createLogFile } = require('../lib/file-ops');
 const { parseJournalSections, mergeSections, reconstructJournal, showLogDiff } = require('../lib/journal');
 const { computeContentHash, isSameTimestamp } = require('../lib/journal');
 const { loadConfig, loadLogSyncState, saveLogSyncState } = require('../utils/config');

package/commands/member.js

@@ -777,6 +777,8 @@ const MEMBER_RUN_START_VALUE_FLAGS = [
   '--truth',
   '--proof',
   '--base',
+  '--yes-lock',
+  '--yes-lock-parent',
 ];
 
 const MEMBER_RUN_START_BOOLEAN_FLAGS = [
@@ -1000,6 +1002,12 @@ function buildMemberRunStartArgs(owner, missionText, args = [], cwd = process.cw
   pushFlagValue(startArgs, args, '--minutes');
   pushFlagValue(startArgs, args, '--hours');
   pushFlagValue(startArgs, args, '--base');
+  // a run inside a woken member's run keeps its seal: mission start reads it
+  // from the environment, never from these words
+  if (!process.env.ATRIS_HANDOFF_YES_LOCK) {
+    pushFlagValue(startArgs, args, '--yes-lock');
+    pushFlagValue(startArgs, args, '--yes-lock-parent');
+  }
   // Member runs choose and drive work immediately, so an absent check must not
   // leave autonomous callers with a mission that never ran. A check inferred
   // from the mission text counts as named.
@@ -1297,6 +1305,10 @@ function memberRunWith(name, args, { quiet = false, closeTaskIds = [] } = {}) {
       console.error(`${name} is parked; running anyway`);
     }
   } catch { /* an unreadable card is requireMemberDir's problem, not this notice's */ }
+  if (args.filter(require('./mission').isYesLockWord).length > 1) {
+    return printMemberRunResult({ started: false, state: null, mission_id: null,
+      error: 'member run got more than one --yes-lock, so it is not clear which seal applies; nothing started' }, asJson, { quiet });
+  }
   const requestedVerifier = readFlag(args, '--verify', '') || memberRunConfiguredVerifier(paths);
   const missionText = memberRunMissionText(args);
   const hasMissionOverride = Boolean(readFlag(args, '--mission', '') || readFlag(args, '--mission-id', ''));
@@ -1362,7 +1374,7 @@ function memberRunWith(name, args, { quiet = false, closeTaskIds = [] } = {}) {
   const missionWordIndices = missionText && !hasMissionOverride ? new Set(memberRunMissionWordIndices(args)) : new Set();
   const executionArgs = args.filter((_, index) => !missionWordIndices.has(index));
   const runArgs = stripKnownFlags(executionArgs,
-    ['--mission', '--mission-id', '--minutes', '--hours', '--industry', '--domain', '--value', '--outcome', '--truth', '--proof', '--base'],
+    ['--mission', '--mission-id', '--minutes', '--hours', '--industry', '--domain', '--value', '--outcome', '--truth', '--proof', '--base', '--yes-lock', '--yes-lock-parent'],
     ['--worktree', '--shared-checkout', '--no-worktree', '--choose-work', '--auto', '--ignite', '--wait', '--sync']);
   if (ignite && !hasFlag(runArgs, '--complete-on-pass')) runArgs.push('--complete-on-pass');
   if (memberRunWantsReferee(runArgs, ignite)) runArgs.push('--referee');
@@ -1374,6 +1386,16 @@ function memberRunWith(name, args, { quiet = false, closeTaskIds = [] } = {}) {
   const caller = callerRuntime(args);
   const runnerSwap = memberRunRunnerSwap(mission, args, caller);
   if (runnerSwap) runArgs.push('--engine', runnerSwap.to);
+  // A run in the foreground (wake, go, run by name) is noted on the start
+  // list under the shared lock, so member up and handoffs count it while it
+  // works. A detached run is noted by whoever started it.
+  if (!hasFlag(runArgs, '--detach') && !hasFlag(runArgs, '--dry-run')) {
+    try {
+      const stateDir = path.join(require('./mission').resolveMemberWorkspaceRoot(process.cwd()), '.atris', 'state');
+      require('../lib/handoff-wake').withWakeReservation(stateDir,
+        ({ record }) => record({ member: name, mission_id: mission.id, pid: process.pid }), { waitMs: 30000 });
+    } catch {}
+  }
   const run = memberRunCli(['mission', 'run', mission.id, ...runArgs], cwd, { live: !asJson && !quiet, missionId: mission.id });
   const payload = run.payload || {};
   const finalMission = payload.mission || require('./mission').resolveMission(mission.id, cwd) || mission;
@@ -4491,13 +4513,15 @@ function memberList(...flags) {
 
   console.log('');
   console.log('Team Members');
-  console.log('─'.repeat(70));
+  console.log('─'.repeat(72));
 
   const nameW = 16;
-  const roleW = 16;
-  const fmtW = 6;
+  const roleW = 18;
+  const fmtW = 8;
   const skillW = 8;
-  const ctxW = 8;
+  const ctxW = 9;
+  // Keep one space between columns, even when a value fills its column.
+  const cell = (value, width) => `${clipCell(value, width - 1)} `;
 
   console.log(
     '  ' +
@@ -4508,18 +4532,18 @@ function memberList(...flags) {
     'Context'.padEnd(ctxW) +
     'Version'
   );
-  console.log('  ' + '─'.repeat(66));
+  console.log('  ' + '─'.repeat(70));
 
   for (const m of members) {
     const skills = m.format === 'directory' ? String(m.skillCount) : '-';
     const context = m.format === 'directory' ? String(m.contextCount) : '-';
     console.log(
       '  ' +
-      clipCell(m.name, nameW) +
-      clipCell(m.role, roleW) +
-      clipCell(m.format === 'directory' ? 'dir' : 'flat', fmtW) +
-      clipCell(skills, skillW) +
-      clipCell(context, ctxW) +
+      cell(m.name, nameW) +
+      cell(m.role, roleW) +
+      cell(m.format === 'directory' ? 'dir' : 'flat', fmtW) +
+      cell(skills, skillW) +
+      cell(context, ctxW) +
       (m.version || '-') +
       (parked.has(m.name) ? '  parked' : '')
     );
@@ -9865,7 +9889,11 @@ async function memberImprovements(businessId, ...args) {
     console.error('Not logged in. Run: atris login');
     process.exit(1);
   }
-  const days = flags.days && Number.isFinite(flags.days) ? flags.days : 30;
+  if (flags.days !== null && !(Number.isInteger(flags.days) && flags.days >= 1)) {
+    console.error('--days needs a whole number of days, 1 or more (example: --days 7).');
+    process.exit(1);
+  }
+  const days = flags.days || 30;
   const result = await apiRequestJson(`/business/${encodeURIComponent(businessId)}/improvements/daily?days=${days}`, { token: creds.token });
   if (!result.ok) {
     console.error(`Failed to fetch improvements: ${result.error || 'Unknown error'}`);
@@ -11134,6 +11162,8 @@ async function memberUp(...args) {
     pickTask: (name, taken) => memberUpPick(root, name, taken),
     writeNextJob: (name, opts) => memberUpWriteNextJob(root, name, opts),
     spawn: (name, onExit, onClaim) => memberUpSpawn(root, name, onExit, onClaim),
+    // the start lock handoffs share, so both count what the other started
+    reserve: (fn) => require('../lib/handoff-wake').withWakeReservation(path.join(root, '.atris', 'state'), fn),
     now: () => Date.now(),
     jobOf: (name) => memberGoJob(name, root),
     waitingTasks: () => memberUpWaiting(root),
@@ -11352,10 +11382,108 @@ function collectMemberOneOnOnes(root = process.cwd(), slugs = []) {
   return queue;
 }
 
+// The env a woken member starts with: its own plain-terminal run, not part of
+// the session or mission driver that handed off (those markers would turn the
+// run into proof-only mode, a native-goal wait, or a child of the old driver).
+const HANDOFF_WAKE_SCRUB_ENV = [
+  'CLAUDECODE', 'CLAUDE_CODE_ENTRYPOINT', 'CODEX_SANDBOX', 'CURSOR_AGENT', 'DEVIN_SESSION_ID',
+  'CODEX_THREAD_ID', 'CODEX_SESSION_ID', 'ATRIS_AGENT_ID',
+  'ATRIS_MISSION_DRIVER_DETACHED', 'ATRIS_MISSION_DRIVER_PARENT_PID',
+];
+
+// Start the receiver of a handoff on the handed-off step: the same bounded
+// work step `atris member wake <name>` runs (member run, 15 minutes), but
+// detached, so the member handing off is not held while the next one works.
+function startHandoffReceiver(root, to, step, parentMissionId = null) {
+  const env = { ...process.env, ATRIS_CALLER_RUNTIME: 'terminal' };
+  for (const name of HANDOFF_WAKE_SCRUB_ENV) delete env[name];
+  // The handing-off mission's git guard (a temp folder of wrappers first on
+  // PATH) belongs to that mission; the woken run sets up its own.
+  env.PATH = String(env.PATH || '').split(path.delimiter)
+    .filter((dir) => !path.basename(dir).startsWith(require('../lib/mission-protected-lane').GUARD_DIR_PREFIX))
+    .join(path.delimiter);
+  // Every woken run is under the fixed handoff seal, whatever handed off:
+  // outward commands and merging to master wait for the owner's yes. The
+  // parent only says where its yes cards show.
+  // The seal goes by environment only, never on the command line the step
+  // text shares, and every job the woken run starts inherits it. A step that
+  // starts with "-" is quoted so it can never read as an option.
+  env.ATRIS_HANDOFF_YES_LOCK = JSON.stringify(require('../lib/yes-lock').handoffSeal());
+  if (parentMissionId) env.ATRIS_HANDOFF_YES_LOCK_PARENT = parentMissionId;
+  else delete env.ATRIS_HANDOFF_YES_LOCK_PARENT;
+  const stepText = /^\s*-/.test(String(step)) ? `step: ${String(step).trim()}` : String(step);
+  const res = require('child_process').spawnSync(process.execPath, [
+    path.join(__dirname, '..', 'bin', 'atris.js'),
+    'member', 'run', to, stepText, '--minutes', '15', '--no-verify', '--detach', '--json',
+  ], { cwd: root, env, encoding: 'utf8', timeout: 120000 });
+  let payload = null;
+  const lines = String(res.stdout || '').trim().split('\n');
+  for (let i = lines.length - 1; i >= 0 && !payload; i -= 1) {
+    try { payload = JSON.parse(lines.slice(i).join('\n')); } catch {}
+  }
+  const ok = res.status === 0 && Boolean(payload && payload.ok !== false && payload.mission_id);
+  return {
+    ok,
+    mission_id: payload ? payload.mission_id || null : null,
+    pid: payload ? payload.pid || null : null,
+    worktree: payload && payload.worktree ? payload.worktree.path || null : null,
+    error: ok ? null : String((payload && payload.error) || res.stderr || (res.error && res.error.message) || `member run exited ${res.status}`),
+  };
+}
+
+// Whether to wake the receiver, and the outcome. Under the test runner a
+// handoff only records unless ATRIS_HANDOFF_WAKE=1 asks, so suites that hand
+// off never start a real engine by accident.
+function wakeOnHandoff(handoff, root, args) {
+  const testRun = Boolean(process.env.NODE_TEST_CONTEXT) && process.env.ATRIS_HANDOFF_WAKE !== '1';
+  if (hasFlag(args, '--no-wake') || testRun) {
+    return {
+      status: 'not_started',
+      reason: 'not_asked',
+      text: `${handoff.to} was not started; the handoff is only written down. to start it: atris member wake ${handoff.to}`,
+    };
+  }
+  const { wakeHandoffReceiver, withWakeReservation } = require('../lib/handoff-wake');
+  const parent = handoffParentMission(handoff, root);
+  const outcome = wakeHandoffReceiver(handoff, {
+    listMembers: () => memberUpTeam(root),
+    awake: (name) => {
+      try { return require('../lib/member-switches').isMemberAwake(name, root); } catch { return true; }
+    },
+    engine: (name) => require('../lib/member-engine').memberRosterEngine(name, root),
+    start: (name, step) => startHandoffReceiver(root, name, step, parent),
+    reserve: (fn) => withWakeReservation(path.join(root, '.atris', 'state'), fn),
+  });
+  return outcome.status === 'started' ? { ...outcome, yes_lock: 'handoff', yes_lock_parent: parent } : outcome;
+}
+
+// The job a handoff came from, only to show the woken run's yes cards on it:
+// the mission whose guard this command runs under (a handoff from inside a
+// mission tick), else the job a [bet-...] tag in the step names. null when
+// neither is found; what the woken run holds never depends on it.
+function handoffParentMission(handoff, root) {
+  const fromGuard = require('../lib/mission-protected-lane').guardMissionOnPath(process.env.PATH);
+  if (fromGuard) return fromGuard;
+  const bets = Array.from(String(handoff.summary || '').matchAll(/\[(bet-[A-Za-z0-9._-]+)\]/g)).map((m) => m[1]);
+  if (!bets.length) return null;
+  const dir = path.join(require('../lib/state-home').atrisHome(), 'state', 'yes-locks');
+  let files = [];
+  try { files = fs.readdirSync(dir).filter((f) => f.endsWith('.json')); } catch {}
+  for (const name of files) {
+    try {
+      const data = JSON.parse(fs.readFileSync(path.join(dir, name), 'utf8'));
+      if (data && data.mission_id && bets.includes(data.bet_id)) return String(data.mission_id);
+    } catch {}
+  }
+  return null;
+}
+
 function memberHandoff(from, to, ...args) {
   if (from === '--help' || from === '-h' || hasFlag(args, '--help') || hasFlag(args, '-h')) {
-    console.log('Usage: atris member handoff [<from> <to> "<slice>"] [--json]');
+    console.log('Usage: atris member handoff [<from> <to> "<slice>"] [--no-wake] [--json]');
     console.log('Passes a completed slice from one member to the next specialist and queues their next_push.');
+    console.log('The next member is started on the slice when it is not already working, unless the team is at its limit.');
+    console.log('--no-wake only writes the handoff down.');
     return;
   }
   const root = process.cwd();
@@ -11374,17 +11502,21 @@ function memberHandoff(from, to, ...args) {
   }
   const targetTo = sliceWords[0];
   const summary = sliceWords.slice(1).join(' ').trim();
-  const { recordMemberHandoff } = require('./mission');
-  const handoff = recordMemberHandoff(from, targetTo, summary, root);
-  if (!handoff) {
+  const { recordMemberHandoff, updateMemberHandoff, resolveMemberWorkspaceRoot } = require('./mission');
+  const recorded = recordMemberHandoff(from, targetTo, summary, root);
+  if (!recorded) {
     console.error(`Could not record handoff from ${from} to ${targetTo}. Check member names.`);
     process.exitCode = 1;
     return null;
   }
+  const parentRoot = resolveMemberWorkspaceRoot(root);
+  // the stored summary is cut at 180 characters; the wake gets the whole step
+  const wake = { ...wakeOnHandoff({ ...recorded, summary }, parentRoot, args), at: new Date().toISOString() };
+  const handoff = updateMemberHandoff(recorded.id, { wake }, parentRoot) || { ...recorded, wake };
   const lines = [
     `Handoff recorded: ${handoff.from} -> ${handoff.to}`,
     `Slice: ${handoff.summary}`,
-    `Next: ${handoff.next_command}`,
+    wake.text,
   ];
   printJsonOrText({ ok: true, action: 'member_handoff', handoff }, lines, asJson);
   return handoff;
@@ -11773,10 +11905,18 @@ async function memberCommand(subcommand, ...args) {
         // more often than a job. Starting a paid run on it costs money and
         // does nothing useful, so name the miss and stop. Jobs keep working
         // as more than one word, or through `atris member run "<job>"`.
-        const extraWords = args.filter((a) => !String(a).startsWith('-')).length;
+        const extraWordList = args.filter((a) => !String(a).startsWith('-'));
+        const extraWords = extraWordList.length;
         if (!/\s/.test(subcommand.trim()) && extraWords === 0) {
           return memberUnknownWord(subcommand);
         }
+        // `atris member inbox validator`: an unknown word followed by a member
+        // name is a command shape (verb, then who), not a job. It once started
+        // a mission called "inbox validator"; name the miss instead.
+        if (!/\s/.test(subcommand.trim()) && extraWords === 1
+          && isKnownMemberSlug(String(extraWordList[0]).trim(), process.cwd())) {
+          return memberUnknownWord(subcommand);
+        }
         return memberSteerOrDispatch(subcommand, ...args);
       }
       console.log('run "<job>"          pick the right member and run it: atris member run "fix the flaky login test"');