Prompt and observe
prompt accepts --profile UUID, --model, --request-id UUID, --allow-credential-snapshot and --approve-tools. Keep a stable request UUID when recovering the same turn submission. Credential snapshotting and tool approval are explicit options.
Control a turn
Read events, steering and approvals before acting on an uncertain turn state.
Desktop
desktop share ID [--ttl-seconds 600] also creates a watch link. Revoke a grant with desktop share ID --revoke UUID. desktop release ID --outcome done|failed|skip [--note TEXT] reads the controller session JSON from stdin.
Watch links are view-only. See human takeover for controller access and handback behavior.
Credential profiles
Keep provider values out of argv and logs. Human subscription sign-in happens in the dashboard under Agents & credentials.

