convoy.bot · grok-bot native

Showing 25 of 38 from the live probe.

• Roster

  Live harness roster. present/wired is shutil.which on the MCP process PATH, not an already-open desktop terminal. Interactive bash skips .profile so ~/.local/bin (claude, codex) can be installed and still command-not-found; roster/bring_up ungate ~/.bashrc. usage_remaining is JSON null when the harness does not expose a remaining count.

• Glance

  Read-only usage card with a conductor identifier (`grok-bot`), overall BYO harness remaining, and optional by-thread seats. Honest values only: usage_remaining is number|object|null.

• Onboard

  First-run after MCP attach: user names harnesses they already have (write gate: it binds the thread and may clone). Checks PATH honestly per named harness only; no silent additions. Refuses wrappers (gemini-cli, grok-cli, ultracode-shim, ola-brain). Optional thread + checkout_root bind without stomping an existing different thread; a git URL as checkout_root is cloned once into the Convoy-owned checkout root and reused after. Missing harnesses point to install opt-in when a vendor installer is c

• Repos

  Read-only: the GitHub repositories of the gh login on the MCP host (the conductor's account, not the caller's) via `gh repo list` on the process PATH (name, url, private, updated_at). Write gate: it discloses that inventory. gh absent is ok=false with an install hint and repos null; never a remembered list, never a token.

• Clone

  git clone one URL into the Convoy-owned checkout root, <CONVOY_HOME>/checkouts/<owner>/<repo> (write gate: this SPAWNS git). Refuses a non-empty dest. .convoy/ and thread.md go into the clone's .git/info/exclude so the bind is never a tracked file of the user's repo.

• Mint

  git worktree add one worktree per seat, DERIVED from the checkout: sibling <checkout>-wt-<name> on branch convoy/<name> (write gate: this SPAWNS git). names defaults to neuron-1..n; an existing sibling is reused; stops at the first git failure naming it.

• Terminals

  Window metadata for the process-bound thread. Pointers only. No PTY dump.

• Context

  Packed pointers only (thread.md, role.md, brief, handoff, instance_id, worktree, branch, pr) plus convoy_id/thread_key from .convoy one-line files. Not file contents. `canonical` names where to WRITE: briefs to .convoy/brief.md, handoffs to .convoy/handoff/. `legacy_ola` lists any .ola/ files still being read (legacy, read only) with `advice`.

• Send

  Headless synapse; does not pop a TUI. Naming a live seat queues the body (delivery=queued, delivered=false) instead of spawning a second --resume. Codex may native-queue. Fake ACKs are recorded, not delivered. live=true still never steals a TUI. Refuses limited without waiting.

• Replies

  The conductor's mail: feed rows addressed to it (`to`), newer than `since`, plus a `cursor` to pass back next turn; or the rows citing one send `token` with `delivered` true|false. Read-only. `wait` holds the request up to 600 s and returns on the first landing row; like await_seated it is behind the write gate because it holds a request. Contract: <root>/.convoy/conductor.md.

• Feed

  Layer events since ts (feed contract v2: schema_version + additive kinds — conductor stamps, synapse, refuse+ask). Default last 24h. Not vendor resume; readers skip unknown kinds.

• Rail

  Read-only: the thread rail, the strip under the panes. Feed events in the window, seats connected | pending | stale from the seated acks, usage remaining per harness (null is unknown, never 0), last conductor stamp, lead. Reads only the bound thread, so every neuron and this chat see one rail. Never a token.

• Provenance

  Read-only: per-chair Git provenance folded from seats.jsonl and kind=commit feed rows. Unknown fields stay null; chairs without commit rows report commits 0.

• Stamp

  Conductor stamp: ONE compact line into the thread feed (kind=conductor) so neurons can feed --since this chat's decisions. Not a transcript mirror — summary is clamped to one line; transcript is a pointer, never bytes; unknown agent/model/effort stay JSON null.

• Note

  Neuron note: ONE compact line into the thread feed (kind=note) with an attributed from — the writing seat's claimed instance_id (the bus does not authenticate authorship), never grok-bot or an alias of it (conductor lines are stamp). Optional to addresses one seat or grok-bot. Same one-line clamp as stamp; this is the hosted-neuron write path.

• Bring Up

  Resume seated neurons visibly. dry_run defaults true so a public URL cannot pop windows. Pass dry_run false to spawn.

• Open

  Alias of bring_up. The only show command besides bring_up.

• Hide

  Minimize or hide neuron TUI windows. Sessions keep running. Does not kill grok.exe/claude.exe/Grok Bot.exe. dry_run defaults true so a public URL cannot change windows. Pass dry_run false to apply. mode=minimize (default, SW_MINIMIZE) or hide (SW_HIDE). restore is bring_up.

• Minimize

  Alias of hide (mode minimize). Sessions keep running. Does not kill.

• Background

  Alias of hide (mode minimize). Sessions keep running. Does not kill.

• Graph

  Read-only ontology of the bound thread: chairs, occupants (harness/model), lineage pending/acked, talk edges, lead. Every edge attested, never authenticated; never a token. Pass neuron=<chair> for that chair's rejoin card with its place (last contribution, rank, degree, lead).

• Panes

  Every body of every neuron on the bound thread, from the OS process table (not only what Convoy launched): per chair live/bodies (pid, via token|cwd)/duplicate, plus unassigned harness processes. Never a token. Windows exposes no cwd, so the cwd rung is null there.

• Threads

  Every Convoy thread this machine's index knows (convoy_id, thread, root, updated_at). present=false when the root is gone or its id changed; never a token. prune=true drops temp-dir and absent roots and reports every dropped row (write-gated, like resume go=true).

• Resume

  Resume one neuron at its most recent place: native argv + cwd + place card. Dry by default (no spawn). go=true spawns once and is refused on an ungated public process; it also refuses when a live body holds the chair or the chair has no token for its current harness (then launch --seat).

• Install

  Opt-in vendor harness download. dry_run defaults true. Live needs opt_in true. Only x.ai, claude.ai, chatgpt.com, cursor.com, antigravity.google. Never a wrap. Some MCP-supported harnesses are BYO-only and may not have a cataloged installer. affiliate is always JSON null.