v1.23.36

• The Lead can act on the fleet, and every action waits for your Confirm. agents lead tool attention lists every open ask across the fleet from the host's live feed, and answer --key <key> (--choice <id> | --text <answer>) answers one. send, start and dispatch now queue instead of acting, as stop already did, and the new prs list reads the project's open PRs while prs merge|comment|ready|rerun|close queue one action on a PR. A queued action is a confirm token holding the exact agents argv; agents lead confirm <token> checks it against its fixed shape and runs it once (a dispatch moves its ticket to In Progress only then). A Lead session briefed before an upgrade that changed its rules starts fresh from the brief on its next turn, so it knows the new tools. The confirm event is now {type, token, action, label, detail?, sessionId?} with action one of stop, answer, send, start, dispatch, pr. Source: cli/src/lib/lead/act.ts, cli/src/lib/lead/tools.ts, cli/src/lib/lead/shapes.ts, cli/src/lib/lead/host.ts
• agents lead ask --context <json> and --speak. --context takes the editor's front tab and open tabs as a JSON object and puts them before the question, so "this one" means the front tab's session; anything that is not a JSON object of those fields is refused. --speak reads the reply aloud on the machine running ask as it streams: each finished sentence goes to ElevenLabs Turbo (eleven_turbo_v2_5) and plays in order with afplay on macOS or ffplay elsewhere, with the key read through the secrets CLI from the bundle lead.voice.bundle names (default elevenlabs). A voice failure is one stderr line and never fails the turn. Source: cli/src/commands/lead.ts, cli/src/lib/lead/speak.ts
• agents projects prs close. Closes one open PR without merging it, with one REST read and one REST PATCH (the branch is kept); an already-closed PR succeeds without a write and a merged one is refused. Source: cli/src/lib/github/project-prs.ts, cli/src/commands/projects.ts
• agents feed watch --json no longer leaks a Lead's own asks. An attention.upsert for a Lead session (one hidden from the stream) now arrives as an attention.remove, as the reset already did, so a Lead's closing question never shows as something asking for you. Source: cli/src/lib/lead/visibility.ts, cli/src/commands/feed-watch.ts