Operate durable runs with an agent

Start

start_run accepts the workflow ID and complete input. It resolves declared references and atomically commits a running run with its backend-start work. An unavailable reference returns WORKFLOW_REFERENCES_UNAVAILABLE and creates no run.

Inspect progress

Use list_runs and get_run for bounded lifecycle state. list_run_effects returns concrete effect occurrences, attempts, selected observations, and sanitized transaction review state. It does not expose signatures, backend parameters, signal keys, or internal processing authority.

Source refresh

refresh_source queues a new observation for a completed evm.snapshot or http.snapshot. It may update the dashboard selection but never changes the consumed result or program history.

Cancel and share

cancel_run stops future coordination using exact run-version CAS. It cannot recall escaped Safe or EOA activity, which remains fenced for reconciliation.

A separately scoped agent may create, rotate, or revoke a tokenized public run link. Review public inputs and outputs before exposing it.

Human and wallet handoff

The agent stops when a human.* or transaction effect requires action. An eligible person completes that action in the browser. MCP v2 has no commands for human responses, signatures, signing, or broadcast.