grokbox 0.1.0-alpha.7 → 0.1.0-alpha.9

package/README.md

@@ -10,9 +10,8 @@ This project is not affiliated with or endorsed by Anysphere, Cursor, xAI, or
 Grok Bot. Grok Bot, Cursor, and related names identify compatible products and
 remain the property of their respective owners.
 
-> **Alpha:** current source is `0.1.0-alpha.7`. npm `next` currently points to
-> `0.1.0-alpha.6`; `0.0.1` remains `latest`. `v0.1.0-alpha.1` through
-> `v0.1.0-alpha.6` exist as Git tags only. Prereleases publish only after
+> **Alpha:** current source is `0.1.0-alpha.9`. npm `next` currently points to
+> `0.1.0-alpha.8`; `0.0.1` remains `latest`. Prereleases publish only after
 > release checks and explicitly scoped external acceptance.
 
 ## What it does
@@ -148,7 +147,7 @@ grokbox jobs list --table
 grokbox desktop status --table
 ```
 
-Routine reads expose bounded metadata only: prompt bodies, webhook credentials, native paths, and unknown provider fields stay private. Routine create always writes a disabled definition; update/enable/disable/delete require explicit confirmation, and all mutations other than create also require the exact revision from a fresh `agents routines list/show`. Upstream Routine writes have no native compare-and-swap or idempotency contract, so an uncertain acknowledgement is never replayed automatically.
+Routine reads expose bounded metadata only: prompt bodies, webhook credentials, native paths, and unknown provider fields stay private. Box-local Bots support create/update/enable/disable/delete; create always writes a disabled definition and later mutations require explicit confirmation plus the exact revision from a fresh `agents routines list/show`. Temporal Bots are Server-authoritative: list/show, webhook credential, enable/disable, and delete use the bounded Temporal Routine bridge; current upstream contracts do not expose Temporal definition create/update, so those commands refuse instead of writing the legacy Box store. `agents routines webhook credential <agent> <routine-id> --confirm` returns the URL while hiding the key; add `--reveal-key` only when secret output is explicitly required. Without the Host bridge, Temporal Routine reads fail closed rather than reporting a false empty list. Upstream Routine writes have no native compare-and-swap or idempotency contract, so an uncertain acknowledgement is never replayed automatically.
 
 Mutating commands require explicit capability and, where destructive, explicit
 confirmation. `desktop prune run` defaults to dry-run; `--yes` invokes the

package/README.zh-CN.md

@@ -6,7 +6,7 @@
 
 本项目与 Anysphere、Cursor、xAI 或 Grok Bot 没有隶属或背书关系。Grok Bot、Cursor 及相关名称仅用于标识兼容产品，其权利归各自所有者。
 
-> **Alpha：** 当前源码版本是 `0.1.0-alpha.7`。npm 的 `next` dist-tag 目前指向 `0.1.0-alpha.6`；`0.0.1` 仍是 `latest`。`v0.1.0-alpha.1` 到 `v0.1.0-alpha.6` 已有 Git tag。只有通过发布检查及明确范围的外部验收后，才会发布新的预发布版本。
+> **Alpha：** 当前源码版本是 `0.1.0-alpha.9`。npm 的 `next` dist-tag 目前指向 `0.1.0-alpha.8`；`0.0.1` 仍是 `latest`。只有通过发布检查及明确范围的外部验收后，才会发布新的预发布版本。
 
 ## 它能做什么
 
@@ -128,7 +128,7 @@ grokbox jobs list --table
 grokbox desktop status --table
 ```
 
-Routine 读取只输出有界元数据，不暴露 prompt 正文、Webhook credential、原生路径或未知 provider 字段。Routine create 始终只创建 disabled definition；update/enable/disable/delete 需要显式确认，create 之外的 mutation 还必须携带刚从 `agents routines list/show` 读到的精确 revision。上游 Routine 写接口没有 native compare-and-swap 或 idempotency 合同，因此回执不确定时不会自动重放。
+Routine 读取只输出有界元数据，不暴露 prompt 正文、Webhook credential、原生路径或未知 provider 字段。Box-local Bot 支持 create/update/enable/disable/delete；create 始终只创建 disabled definition，后续 mutation 需要显式确认，并携带刚从 `agents routines list/show` 读到的精确 revision。Temporal Bot 的 Routine 以 Server 为权威：list/show、Webhook credential、enable/disable/delete 通过受限的 Temporal Routine bridge；当前官方合同没有暴露 Temporal definition create/update，因此 CLI 会明确拒绝，而不会误写旧 Box store。`agents routines webhook credential <agent> <routine-id> --confirm` 默认返回 URL 并隐藏 key；只有显式增加 `--reveal-key` 才把 key 输出到 stdout。Host bridge 不可用时，Temporal Routine 查询 fail-closed，不再冒充为空列表。上游 Routine 写接口没有 native compare-and-swap 或 idempotency 合同，因此回执不确定时不会自动重放。
 
 变更命令需要显式 capability；破坏性操作还需要显式确认。`desktop prune run` 默认 dry-run；传入 `--yes` 后会调用上游 stop-window 路径，并删除该 fork 的 Chrome profile。
 

package/dist/index.js

@@ -3474,7 +3474,7 @@ import { fileURLToPath } from "node:url";
 // package.json
 var package_default = {
   name: "grokbox",
-  version: "0.1.0-alpha.7",
+  version: "0.1.0-alpha.9",
   packageManager: "bun@1.3.14",
   description: "Unofficial CLI and control plane for Grok Bot cloud computers",
   license: "MIT",
@@ -4069,6 +4069,25 @@ var LEAF_COMMANDS = [
     gateway: true,
     streaming: false
   },
+  {
+    path: ["agents", "routines", "webhook", "credential"],
+    usage: "grokbox agents routines webhook credential <agent> <routine-id> --confirm [--reveal-key]",
+    summary: "Read or mint one webhook Routine credential; key is hidden unless explicitly revealed.",
+    arguments: [
+      { syntax: "<agent>", description: "Agent ID or unambiguous name/title", role: "agent", kinds: ["agent"] },
+      { syntax: "<routine-id>", description: "Exact native Routine ID" }
+    ],
+    options: options([
+      { flags: "--confirm", description: "Confirm credential access/mint", required: true },
+      { flags: "--reveal-key", description: "Include the webhook key and routine prompt in stdout" }
+    ], { timeout: true }),
+    stdin: "none",
+    table: false,
+    timeout: true,
+    destructive: true,
+    gateway: true,
+    streaming: false
+  },
   ...["enable", "disable", "delete"].map((action) => ({
     path: ["agents", "routines", action],
     usage: `grokbox agents routines ${action} <agent> <routine-id> --expect-revision <sha256> --confirm`,
@@ -5584,6 +5603,8 @@ var DAEMON_METHODS = [
   "getAgentThread",
   "getAgentMemories",
   "getAgentAutomations",
+  "getGrokboxRoutineAuthority",
+  "getAutomationWebhookCredential",
   "createAgentAutomation",
   "updateAgentAutomation",
   "setAgentAutomationEnabled",
@@ -5631,6 +5652,7 @@ var DAEMON_CAPABILITIES = [
   "grok.transcript.write",
   "grok.memory.read",
   "grok.routines.read",
+  "grok.routines.credentials",
   "grok.routines.write",
   "grok.roster.write",
   "grok.events.read"
@@ -6302,6 +6324,28 @@ var GatewayClient = class {
     }
     return await this.rpc("getAgentAutomations", { id }, { timeoutMs });
   }
+  async getGrokboxRoutineAuthority(id, timeoutMs) {
+    const daemon = await this.daemonFor("grok.routines.read", timeoutMs);
+    if (daemon) {
+      const response = await daemon.call("getGrokboxRoutineAuthority", { id, timeoutMs });
+      if (!response.gateway) throw new CliError("gateway_internal", "Daemon Routine authority response lacks generation.");
+      const discovery = this.discoveryFromDaemon(response.gateway);
+      this.lastDiscovery = discovery;
+      return { result: response.result, discovery };
+    }
+    return await this.rpc("getGrokboxRoutineAuthority", { id }, { timeoutMs });
+  }
+  async getAutomationWebhookCredential(id, automationId, timeoutMs) {
+    const daemon = await this.daemonFor("grok.routines.credentials", timeoutMs);
+    if (daemon) {
+      const response = await daemon.call("getAutomationWebhookCredential", { id, automationId, timeoutMs });
+      if (!response.gateway) throw new CliError("gateway_internal", "Daemon Routine credential response lacks generation.");
+      const discovery = this.discoveryFromDaemon(response.gateway);
+      this.lastDiscovery = discovery;
+      return { result: response.result, discovery };
+    }
+    return await this.rpc("getAutomationWebhookCredential", { id, automationId }, { timeoutMs });
+  }
   async createAgentAutomation(body, timeoutMs, operationId2, expectedGateway) {
     return await this.routineWrite("createAgentAutomation", body, timeoutMs, operationId2, expectedGateway);
   }
@@ -11592,6 +11636,19 @@ async function startDaemonHost(deps, socketPath, networkConfig, filesystemRoots
       const value = await gateway.getAgentAutomations(id, params.timeoutMs);
       return { result: value.result, gateway: gatewayMeta(value.discovery) };
     }
+    if (method === "getGrokboxRoutineAuthority") {
+      assertExactParams(params, { id: "string", timeoutMs: "number" });
+      const id = routineInput(() => routineAgentId(params.id));
+      const value = await gateway.getGrokboxRoutineAuthority(id, params.timeoutMs);
+      return { result: value.result, gateway: gatewayMeta(value.discovery) };
+    }
+    if (method === "getAutomationWebhookCredential") {
+      assertExactParams(params, { id: "string", automationId: "string", timeoutMs: "number" });
+      const id = routineInput(() => routineAgentId(params.id));
+      const automationId = routineInput(() => routineId(params.automationId));
+      const value = await gateway.getAutomationWebhookCredential(id, automationId, params.timeoutMs);
+      return { result: value.result, gateway: gatewayMeta(value.discovery) };
+    }
     if (method === "createAgentAutomation") {
       assertParamKeys(params, ["id", "spec", "timeoutMs", "expectedGatewayPid", "expectedGatewayStartedAt"], "Routine create");
       const id = routineInput(() => routineAgentId(params.id));
@@ -14904,7 +14961,11 @@ async function resolveAgent(client2, target, timeoutMs) {
   const roster = await client2.listAgents(timeoutMs);
   const row = findRosterRow(roster.agents, target, ["agent"]);
   try {
-    return { id: routineAgentId(asString(row.id)), discovery: gatewayMeta(roster.discovery) };
+    return {
+      id: routineAgentId(asString(row.id)),
+      discovery: gatewayMeta(roster.discovery),
+      harness: row.harness === "temporal" ? "temporal" : row.harness === "box" ? "box" : null
+    };
   } catch {
     throw new CliError(
       "capability_unavailable",
@@ -14912,17 +14973,67 @@ async function resolveAgent(client2, target, timeoutMs) {
     );
   }
 }
-async function readSnapshot(client2, agentId, timeoutMs) {
-  const response = await client2.getAgentAutomations(agentId, timeoutMs);
+async function resolveRoutineAuthority(client2, agent, timeoutMs) {
+  if (agent.harness !== "temporal") {
+    return { authority: "box-local", discovery: agent.discovery };
+  }
+  let response;
   try {
+    response = await client2.getGrokboxRoutineAuthority(agent.id, timeoutMs);
+  } catch (error) {
+    if (error instanceof CliError && ["gateway_not_found", "gateway_bad_request", "capability_unavailable"].includes(error.code)) {
+      throw new CliError(
+        "capability_unavailable",
+        "This Temporal Bot requires the Grokbox Temporal Routine bridge before Routine state can be read safely."
+      );
+    }
+    throw error;
+  }
+  const discovery = gatewayMeta(response.discovery);
+  if (!sameGeneration(agent.discovery, discovery)) {
+    throw new CliError("gateway_conflict", "Gateway generation changed while resolving Routine authority.");
+  }
+  if (!isRecord(response.result) || JSON.stringify(Object.keys(response.result).sort()) !== JSON.stringify(["source"]) || response.result.source !== "server-temporal") {
+    throw new CliError(
+      "capability_unavailable",
+      "Temporal Routine authority is not Server-backed on the selected Host."
+    );
+  }
+  return { authority: "server-temporal", discovery };
+}
+async function readSnapshot(client2, agent, timeoutMs) {
+  const authority = await resolveRoutineAuthority(client2, agent, timeoutMs);
+  const response = await client2.getAgentAutomations(agent.id, timeoutMs);
+  const discovery = gatewayMeta(response.discovery);
+  if (!sameGeneration(authority.discovery, discovery)) {
+    throw new CliError("gateway_conflict", "Gateway generation changed while reading Routines.");
+  }
+  try {
+    const projected = projectNativeRoutines(agent.id, response.result);
     return {
-      ...projectNativeRoutines(agentId, response.result),
-      discovery: gatewayMeta(response.discovery)
+      ...projected,
+      discovery,
+      authority: authority.authority,
+      prompts: nativePrompts(response.result, projected.catalog)
     };
   } catch (error) {
     throw routineCliError(error);
   }
 }
+function nativePrompts(value, catalog) {
+  if (!Array.isArray(value)) throw new RoutineError("unsupported_shape");
+  const prompts = /* @__PURE__ */ new Map();
+  for (const raw of value) {
+    if (!isRecord(raw) || typeof raw.id !== "string" || typeof raw.prompt !== "string" || raw.prompt.length < 1 || raw.prompt.includes("\0") || Buffer.byteLength(raw.prompt) > 128 * 1024) {
+      throw new RoutineError("unsupported_shape");
+    }
+    prompts.set(raw.id, raw.prompt);
+  }
+  for (const routine of catalog.routines) {
+    if (!prompts.has(routine.id)) throw new RoutineError("unsupported_shape");
+  }
+  return prompts;
+}
 function findRoutine(snapshot, id) {
   let rid;
   try {
@@ -14984,19 +15095,19 @@ function listTable(catalog) {
 async function listOrShow(deps, client2, action, agentTarget, routineTarget, raw) {
   const io = ioFromOpts(raw);
   const agent = await resolveAgent(client2, agentTarget, io.timeoutMs);
-  const snapshot = await readSnapshot(client2, agent.id, io.timeoutMs);
+  const snapshot = await readSnapshot(client2, agent, io.timeoutMs);
   if (action === "list") {
     if (io.table) {
       deps.stdout.write(listTable(snapshot.catalog));
       return;
     }
-    writeSuccess(deps.stdout, snapshot.catalog, snapshot.discovery);
+    writeSuccess(deps.stdout, { ...snapshot.catalog, authority: snapshot.authority }, snapshot.discovery);
     return;
   }
   const routine = findRoutine(snapshot, routineTarget ?? "");
   writeSuccess(
     deps.stdout,
-    { schemaVersion: 1, agentId: agent.id, routine, coverage: snapshot.catalog.coverage },
+    { schemaVersion: 1, agentId: agent.id, authority: snapshot.authority, routine, coverage: snapshot.catalog.coverage },
     snapshot.discovery
   );
 }
@@ -15004,9 +15115,15 @@ async function createRoutine(deps, client2, agentTarget, raw) {
   requireConfirmed(raw);
   const io = ioFromOpts(raw);
   const op = operationId(raw, deps);
-  const desired = await definition(raw, deps);
   const agent = await resolveAgent(client2, agentTarget, io.timeoutMs);
-  const before = await readSnapshot(client2, agent.id, io.timeoutMs);
+  if (agent.harness === "temporal") {
+    throw new CliError(
+      "capability_unavailable",
+      "The current official Temporal Routine contract does not expose create through the Box management surface."
+    );
+  }
+  const desired = await definition(raw, deps);
+  const before = await readSnapshot(client2, agent, io.timeoutMs);
   if (before.catalog.coverage.atLimit) {
     throw new CliError(
       "capability_unavailable",
@@ -15029,7 +15146,7 @@ async function createRoutine(deps, client2, agentTarget, raw) {
   if (!sameGeneration(before.discovery, gatewayMeta(write.discovery))) {
     return unknown(op, "Gateway generation changed during Routine create; inspect the Routine list before any retry.");
   }
-  const after = await readSnapshot(client2, agent.id, io.timeoutMs);
+  const after = await readSnapshot(client2, agent, io.timeoutMs);
   if (!sameGeneration(before.discovery, after.discovery)) {
     return unknown(op, "Gateway generation changed after Routine create; inspect the Routine list before any retry.");
   }
@@ -15056,9 +15173,15 @@ async function updateRoutine(deps, client2, agentTarget, routineTarget, raw) {
   const io = ioFromOpts(raw);
   const op = operationId(raw, deps);
   const expected = expectedRevision(raw);
-  const desired = await definition(raw, deps);
   const agent = await resolveAgent(client2, agentTarget, io.timeoutMs);
-  const before = await readSnapshot(client2, agent.id, io.timeoutMs);
+  if (agent.harness === "temporal") {
+    throw new CliError(
+      "capability_unavailable",
+      "The current official Temporal Routine contract does not expose definition update through the Box management surface."
+    );
+  }
+  const desired = await definition(raw, deps);
+  const before = await readSnapshot(client2, agent, io.timeoutMs);
   const prior = mutableRoutine(before, routineTarget);
   if (prior.revision !== expected) throw routineCliError(new RoutineError("revision_conflict"));
   const desiredDigest = routineDefinitionDigest(desired, prior.enabled);
@@ -15091,7 +15214,7 @@ async function updateRoutine(deps, client2, agentTarget, routineTarget, raw) {
   if (!sameGeneration(before.discovery, gatewayMeta(write.discovery))) {
     return unknown(op, "Gateway generation changed during Routine update; inspect the Routine before any retry.");
   }
-  const after = await readSnapshot(client2, agent.id, io.timeoutMs);
+  const after = await readSnapshot(client2, agent, io.timeoutMs);
   if (!sameGeneration(before.discovery, after.discovery)) {
     return unknown(op, "Gateway generation changed after Routine update; inspect the Routine before any retry.");
   }
@@ -15118,7 +15241,7 @@ async function setRoutineEnabled(deps, client2, agentTarget, routineTarget, acti
   const op = operationId(raw, deps);
   const expected = expectedRevision(raw);
   const agent = await resolveAgent(client2, agentTarget, io.timeoutMs);
-  const before = await readSnapshot(client2, agent.id, io.timeoutMs);
+  const before = await readSnapshot(client2, agent, io.timeoutMs);
   const prior = mutableRoutine(before, routineTarget);
   if (prior.revision !== expected) throw routineCliError(new RoutineError("revision_conflict"));
   const enabled = action === "enable";
@@ -15151,7 +15274,7 @@ async function setRoutineEnabled(deps, client2, agentTarget, routineTarget, acti
   if (!sameGeneration(before.discovery, gatewayMeta(write.discovery))) {
     return unknown(op, "Gateway generation changed during Routine state change; inspect the Routine before any retry.");
   }
-  const after = await readSnapshot(client2, agent.id, io.timeoutMs);
+  const after = await readSnapshot(client2, agent, io.timeoutMs);
   if (!sameGeneration(before.discovery, after.discovery)) {
     return unknown(op, "Gateway generation changed after Routine state change; inspect the Routine before any retry.");
   }
@@ -15172,13 +15295,56 @@ async function setRoutineEnabled(deps, client2, agentTarget, routineTarget, acti
     routine: current
   }, after.discovery);
 }
+async function showWebhookCredential(deps, client2, agentTarget, routineTarget, raw) {
+  requireConfirmed(raw);
+  const io = ioFromOpts(raw);
+  const agent = await resolveAgent(client2, agentTarget, io.timeoutMs);
+  const snapshot = await readSnapshot(client2, agent, io.timeoutMs);
+  const routine = findRoutine(snapshot, routineTarget);
+  if (routine.trigger.type !== "webhook") {
+    throw new CliError("capability_unavailable", "Routine is not webhook-triggered.");
+  }
+  const response = await client2.getAutomationWebhookCredential(agent.id, routine.id, io.timeoutMs);
+  const discovery = gatewayMeta(response.discovery);
+  if (!sameGeneration(snapshot.discovery, discovery)) {
+    throw new CliError("gateway_conflict", "Gateway generation changed while reading webhook credentials.");
+  }
+  if (!isRecord(response.result) || JSON.stringify(Object.keys(response.result).sort()) !== JSON.stringify(["key", "url"]) || typeof response.result.url !== "string" || typeof response.result.key !== "string" || response.result.key.length < 1 || response.result.key.length > 4096 || response.result.key.includes("\0")) {
+    throw new CliError("gateway_internal", "Gateway returned an invalid webhook credential.");
+  }
+  let url;
+  try {
+    url = new URL(response.result.url);
+  } catch {
+    throw new CliError("gateway_internal", "Gateway returned an invalid webhook URL.");
+  }
+  if (url.protocol !== "https:" || url.username || url.password || url.hash) {
+    throw new CliError("gateway_internal", "Gateway returned an unsafe webhook URL.");
+  }
+  const prompt = snapshot.prompts.get(routine.id);
+  if (prompt === void 0) {
+    throw new CliError("gateway_internal", "Gateway returned a Routine without a prompt.");
+  }
+  const revealKey = raw.revealKey === true;
+  writeSuccess(deps.stdout, {
+    schemaVersion: 1,
+    agentId: agent.id,
+    routineId: routine.id,
+    authority: snapshot.authority,
+    url: url.toString(),
+    keyPresent: true,
+    keyIncluded: revealKey,
+    promptIncluded: revealKey,
+    ...revealKey ? { key: response.result.key, prompt } : {}
+  }, discovery);
+}
 async function deleteRoutine(deps, client2, agentTarget, routineTarget, raw) {
   requireConfirmed(raw);
   const io = ioFromOpts(raw);
   const op = operationId(raw, deps);
   const expected = expectedRevision(raw);
   const agent = await resolveAgent(client2, agentTarget, io.timeoutMs);
-  const before = await readSnapshot(client2, agent.id, io.timeoutMs);
+  const before = await readSnapshot(client2, agent, io.timeoutMs);
   const prior = mutableRoutine(before, routineTarget);
   if (prior.revision !== expected) throw routineCliError(new RoutineError("revision_conflict"));
   let write;
@@ -15195,7 +15361,7 @@ async function deleteRoutine(deps, client2, agentTarget, routineTarget, raw) {
   if (!sameGeneration(before.discovery, gatewayMeta(write.discovery))) {
     return unknown(op, "Gateway generation changed during Routine delete; inspect the Routine list before any retry.");
   }
-  const after = await readSnapshot(client2, agent.id, io.timeoutMs);
+  const after = await readSnapshot(client2, agent, io.timeoutMs);
   if (!sameGeneration(before.discovery, after.discovery)) {
     return unknown(op, "Gateway generation changed after Routine delete; inspect the Routine list before any retry.");
   }
@@ -15225,6 +15391,10 @@ async function runRoutines(deps, action, agentTarget, routineTarget, raw) {
     return;
   }
   if (!routineTarget) throw usage("Routine ID is required.");
+  if (action === "webhook-credential") {
+    await showWebhookCredential(deps, client2, agentTarget, routineTarget, raw);
+    return;
+  }
   if (action === "update") {
     await updateRoutine(deps, client2, agentTarget, routineTarget, raw);
     return;
@@ -15330,6 +15500,7 @@ var FAMILY_DESCRIPTIONS = {
   daemon: "Local daemon lifecycle",
   agents: "Non-group Grok Bot agents",
   "agents routines": "Native Grok Bot Routines",
+  "agents routines webhook": "Webhook Routine credentials",
   groups: "Product groups",
   "groups members": "Product group membership",
   history: "Search and read display transcript",
@@ -15397,6 +15568,7 @@ function actionBindings() {
     "agents routines enable": async (deps, args, options2) => await runRoutines(deps, "enable", args[0] ?? "", args[1], options2),
     "agents routines disable": async (deps, args, options2) => await runRoutines(deps, "disable", args[0] ?? "", args[1], options2),
     "agents routines delete": async (deps, args, options2) => await runRoutines(deps, "delete", args[0] ?? "", args[1], options2),
+    "agents routines webhook credential": async (deps, args, options2) => await runRoutines(deps, "webhook-credential", args[0] ?? "", args[1], options2),
     "groups list": async (deps, _args, options2) => await runGroupsList(deps, options2),
     "groups show": async (deps, args, options2) => await runGroupsShow(deps, args[0] ?? "", options2),
     "groups create": async (deps, _args, options2) => await runGroupsCreate(deps, options2),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "grokbox",
-  "version": "0.1.0-alpha.7",
+  "version": "0.1.0-alpha.9",
   "packageManager": "bun@1.3.14",
   "description": "Unofficial CLI and control plane for Grok Bot cloud computers",
   "license": "MIT",

package/skills/core.md

@@ -72,7 +72,7 @@ Targets accept an exact ID first, then an unambiguous case-insensitive name/titl
    `groups list/show/create/update/delete` only own product groups. Membership is only
    `groups members list/add/remove/set`; every member must resolve to a non-group agent and a group
    must retain 1-6 unique members.
-3. **Manage native Routines**: `agents routines list/show` returns bounded metadata only and never emits prompt bodies, credentials, or native paths. `create` writes a disabled definition; `update/enable/disable/delete` require `--expect-revision` from a fresh read and `--confirm`. `update` is a complete name/prompt/trigger replacement and preserves enabled state. Native writes have no upstream CAS or idempotency guarantee; uncertain writes return `operation_outcome_unknown` and must be reconciled by another read, never automatic replay. Credential minting, webhook invocation, and run-now are intentionally absent.
+3. **Manage native Routines**: `agents routines list/show` returns bounded metadata only and never emits prompt bodies, credentials, or native paths. Box-local Bots support create/update/enable/disable/delete; create writes a disabled definition and later mutations require `--expect-revision` from a fresh read plus `--confirm`. Temporal Bots are Server-authoritative: list/show, webhook credential, enable/disable, and delete require the bounded Temporal Routine Host bridge; create/update refuse because the current official Temporal contract exposes neither mutation. `agents routines webhook credential <agent> <routine-id> --confirm` returns the webhook URL and hides the key and prompt by default; `--reveal-key` is the explicit boundary that also emits both. `list` and `show` still never emit them. Without the bridge, Temporal reads fail closed instead of reporting the legacy local store. Native writes have no upstream CAS or idempotency guarantee; uncertain writes return `operation_outcome_unknown` and must be reconciled by another read, never automatic replay.
 4. **Search/read transcript**: `history search <query>`, `history tail <target>`, and
    `history thread <target> --root <entry-id>` own transcript access. Object `show` commands do
    not add transcript side projections.