Discover and prepare

The client saves /private/tmp/discover.json with the returned grant:

{ "grant_id": "RETURNED_GRANT_UUID" }

Run bash scripts/with-runtime corepack pnpm workbench:agent discover --root "$HOME/Library/Application Support/Roboty Agent Workspace" --credential /private/tmp/roboty-client.json --request /private/tmp/discover.json. Discovery returns permitted tools and their actual argument and result schemas. Follow next_cursor under the same grant until it is empty. A changed selection requires fresh discovery. Use the same --root on every command and preserve returned opaque handles.

Before writes, declare logical presence with workbench:agent presence, the protected credential and a request file containing {"active":true}. Heartbeat every 30 seconds while active and send {"active":false} on departure. Presence is not a grant.

Use experiments.save to author the supported nonpreset Reach goal, retain its returned opaque revision handle, then experiments.read and experiments.prepare. Submit tool requests through workbench:agent execute, prefixed with bash scripts/with-runtime corepack pnpm, with --credential, --request and explicit --request-id UUID. Requests contain grant_id, tool, arguments and, where discovered, expected_revision. Preserve returned handles. Another client's raw IDs are invalid.

Named calls can use call TOOL --grant GRANT_UUID --arguments JSON with the same credential and root. Supply --expected-revision where required. Retain the write UUID before sending it.

Preparation never runs physics. The example delegation excludes simulation.start. An actual attempt needs separately reviewed delegation, readiness and finite admission. Product transports never expose arbitrary shell, filesystem, SQL, provider proxy or physical movement tools.