[robstolarz]

Adds depot agent session (create, list, send, watch, attach, interrupt) for driving Depot agent sessions from the terminal. This PR lands approved #606 (head 607b222) as a --no-ff merge onto main, as part of the per-feature landing stack for DEP-7264. Review: git show --remerge-diff f480e5b shows only what the merge changed beyond #606's approved diff.

Stack

1. Land Depot agents CLI 1/6: session commands (DEP-7264) #614 lands feat: add depot agent session commands #606 ← this PR
2. Land Depot agents CLI 2/6: hide depot agent until GA (DEP-7247) #615 lands feat: hide depot agent from root help until GA #611
3. Land Depot agents CLI 3/6: files and chat in attach (DEP-7264) #616 lands feat: send files to Depot agents and chat in attach #607
4. Land Depot agents CLI 4/6: agent pull and push (DEP-7264) #617 lands feat: add depot agent pull and push #610
5. Land Depot agents CLI 5/6: local MCP servers on attach (DEP-7247) #618 lands feat: offer local MCP servers to a Depot agent session on attach (DEP-7247) #609
6. Land Depot agents CLI 6/6: plugin views (DEP-7248) #619 lands Render plugin views and run their controls from the CLI (DEP-7248) #608

Test plan

• go build ./... and go test ./... pass at this tip, including TestRenderer* (streaming, partials, escape neutralizing), TestSessionTableNeutralizesTerminalEscapes, TestSafeTextDropsBidiAndZeroWidthCharacters, TestCommandErrorsAreSanitized, TestWatchUntilSettled*, TestWatchUntilTurnDoneAcceptsATurnThatFinishedUnseen, TestCreateRetriesWithOneClientRequestID, TestSendRetriesWithOneClientRequestID, TestAttachForwardsLinesAndQuits, TestAttachReturnsAStdinReadFailure
• TODO(verify): no automated run of session create / attach against a deployed API.

Merge resolutions

Clean merge; no conflicts.

🤖 Generated with Claude Code

https://claude.ai/code/session_01NdhqP6oGqJMRJLwBU5Zepm

---

Note

Medium Risk
New authenticated API client and long-lived streaming attach/watch paths increase exposure to network and untrusted server text, though terminal sanitization and tests mitigate display risks.

Overview
Introduces depot agent with session subcommands so users can drive Depot coding-agent sessions from the terminal: create (optional --repo, --model, --watch), list, send (--steer), interrupt, watch (--until-idle), and attach (stdin follow-ups plus /steer, /interrupt, /quit).

Wires a new DepotAgentService Connect client (NewDepotAgentClient) and checked-in proto/generated stubs for sessions, streaming WatchSession, and related RPCs (triggers/archive are in the API but not exposed as CLI yet in this slice). Commands resolve org/token like other Depot CLIs and support -o json where applicable.

Streaming behavior: a Renderer turns server view_json into a live transcript (partial assistant text, tool calls, queue/retry hints) with deduplication by id, watch reconnect via after_seq, and retries on transient RPC errors while preserving client_request_id on create/send. Output and errors are sanitized for terminal escape/bidi attacks.

Adds github.com/google/uuid for idempotent client request IDs and unit tests for render, watch, attach, and retry paths.

^{Reviewed by Cursor Bugbot for commit f480e5b. Bugbot is set up for automated code reviews on this repo. Configure here.}

[linear-code]

DEP-7264

[robstolarz]

Superseded by #613 (single cli landing PR)

[cursor]

Risk: medium. Approved: Cursor Bugbot completed successfully with no findings that need human review. This automation did not assign reviewers.

  

_{Sent by Cursor Approval Agent: Pull Request Router and Approver}