@skrr-ai/cli 0.1.101 → 0.1.103

package/dist/base-command.js

@@ -261,6 +261,30 @@ class BaseCommand extends core_1.Command {
                 this.credentialProvenance = { kind: 'daemon-delegated' };
             }
             catch (err) {
+                // OSK-15990 — a refusal only a new daemon sign-in repairs (e.g.
+                // DEVICE_PROOF_PIN_MISMATCH) is NOT retryable: exit 75 told every
+                // caller to loop on it. Say so, and say what to run.
+                // Matched by name, not instanceof: specs mock `./lib/delegated-cli`
+                // down to one or two functions, and a missing class would throw here.
+                if (err?.name === 'DelegatedCliUnavailableError') {
+                    const e = err;
+                    const remedy = e.remedy && !e.message.includes(e.remedy) ? ` Fix: ${e.remedy}` : '';
+                    this.failWithCliError({
+                        message: `Daemon delegated skrr credential is unavailable: ${e.message}${remedy}`,
+                        code: 'DELEGATED_CLI_CREDENTIAL_UNAVAILABLE',
+                        // 75 (EX_TEMPFAIL) only when waiting can help; 77 (EX_NOPERM) when
+                        // the daemon must be signed in again first.
+                        exit: e.retryable ? 75 : 77,
+                        retryable: e.retryable,
+                        details: {
+                            ...(e.upstreamStatus !== undefined ? { upstreamStatus: e.upstreamStatus } : {}),
+                            ...(e.upstreamCode ? { upstreamCode: e.upstreamCode } : {}),
+                            ...(e.upstreamReason ? { upstreamReason: e.upstreamReason } : {}),
+                            ...(e.retryAt ? { retryAt: e.retryAt } : {}),
+                            ...(e.remedy ? { remedy: e.remedy } : {}),
+                        },
+                    });
+                }
                 this.failWithCliError({
                     message: `Daemon delegated skrr credential is unavailable: ${err.message}`,
                     code: 'DELEGATED_CLI_CREDENTIAL_UNAVAILABLE',

package/dist/commands/agent/message/send.js

@@ -535,9 +535,13 @@ function messageSegmentationAdvisory({ destination, text, followingParts, }) {
         return undefined;
     if (destination.kind !== 'app_owner_dm' && destination.kind !== 'slack_owner_dm')
         return undefined;
-    if (text.length <= exports.OWNER_DM_SEGMENTATION_SOFT_LIMIT)
+    // Measure what is READ. A widget block is not a thought to be split: its css, html and
+    // script are a program, and an advisory that counted them would invite an agent to cut
+    // one block across `--part`s, which the app could not read as a widget.
+    const prose = (0, data_provider_1.stripUiWidgetFencesForDisplay)(text, { final: true });
+    if (prose.length <= exports.OWNER_DM_SEGMENTATION_SOFT_LIMIT)
         return undefined;
-    return (`[skrr] Owner-DM message is ${text.length} characters. It may read better as 2–4 short thoughts: ` +
+    return (`[skrr] Owner-DM message is ${prose.length} characters. It may read better as 2–4 short thoughts: ` +
         'use --part with one explicit --idempotency-key. This is only an advisory; ' +
         'use --no-message-lint to suppress it.');
 }

package/dist/commands/agents/triggers/create.js

@@ -66,7 +66,9 @@ class AgentsTriggersCreate extends base_command_1.BaseCommand {
             multiple: true,
         }),
         timezone: core_1.Flags.string({ description: 'IANA timezone for schedule/once triggers' }),
-        'max-fires-per-day': core_1.Flags.integer({ description: 'Daily fire cap (schedule/stochastic)' }),
+        'max-fires-per-day': core_1.Flags.integer({
+            description: 'Daily fire cap (schedule, stochastic and self_scheduled triggers only)',
+        }),
         'max-runs': core_1.Flags.integer({
             description: 'Lifetime fire cap for a schedule — the trigger disables itself after N total runs',
         }),
@@ -172,6 +174,8 @@ class AgentsTriggersCreate extends base_command_1.BaseCommand {
         let payload;
         try {
             payload = await (0, prompt_1.readJsonBody)(flags['from-json']);
+            // A flag for another kind is refused, not dropped (OSK-15491).
+            (0, triggers_1.assertKindFlagsApply)(flags.kind ?? payload.kind, flags);
             // Agent scope is injected unconditionally — even when --from-json
             // supplies a scope, the agent identity from the positional arg wins so
             // the trigger can never be silently mis-scoped to a different agent.
@@ -213,22 +217,8 @@ class AgentsTriggersCreate extends base_command_1.BaseCommand {
                 filterField: flags['filter-field'],
                 filterValues,
             });
-            (0, triggers_1.setDefined)(event, {
-                entityType: flags.entity,
-                eventType: flags.event,
-                filterMode: flags['filter-mode'],
-                filterField: flags['filter-field'],
-                filterValue: filterValues && filterValues.length > 1 ? filterValues : filterValues?.[0],
-                debounceMs: flags['debounce-ms'],
-                maxPerHour: flags['max-per-hour'],
-            });
-            const stochastic = {};
-            (0, triggers_1.setDefined)(stochastic, {
-                probability: flags.probability === undefined ? undefined : Number(flags.probability),
-                jitterMs: flags['jitter-ms'],
-                maxFiresPerDay: flags['max-fires-per-day'],
-                evalIntervalMinutes: flags['eval-interval-minutes'],
-            });
+            Object.assign(event, (0, triggers_1.buildEventConfigFromFlags)(flags, filterValues));
+            const stochastic = (0, triggers_1.buildStochasticConfigFromFlags)(flags);
             const selfScheduled = (0, triggers_1.buildSelfScheduledConfigFromFlags)(flags);
             const form = (0, triggers_1.buildFormConfigFromFlags)(flags);
             const chatMessage = (0, triggers_1.buildChatMessageConfigFromFlags)(flags);

package/dist/commands/agents/triggers/update.js

@@ -55,7 +55,9 @@ class AgentsTriggersUpdate extends base_command_1.BaseCommand {
             multiple: true,
         }),
         timezone: core_1.Flags.string({ description: 'IANA timezone for schedule triggers' }),
-        'max-fires-per-day': core_1.Flags.integer({ description: 'Daily fire cap' }),
+        'max-fires-per-day': core_1.Flags.integer({
+            description: 'Daily fire cap (schedule, stochastic and self_scheduled triggers only)',
+        }),
         'max-runs': core_1.Flags.integer({ description: 'Lifetime fire cap for a schedule' }),
         'end-at': core_1.Flags.string({
             description: 'ISO-8601 datetime after which a schedule stops firing',
@@ -156,6 +158,29 @@ class AgentsTriggersUpdate extends base_command_1.BaseCommand {
             // Scope is immutable from this surface — an agent trigger stays bound to
             // its agent. Strip any scope in the JSON so the patch can't re-home it.
             delete payload.scope;
+        }
+        catch (err) {
+            this.error(err.message, { exit: 1 });
+        }
+        // The trigger's kind says which config block is its own, and only that block is sent. Every
+        // block used to go, so `--max-fires-per-day` wrote `stochastic` and `selfScheduled` onto a
+        // schedule trigger and a cap onto an on_demand one that nothing reads (OSK-15491). The scope
+        // check that used to follow the build now comes first because it is what reads the trigger.
+        let scoped;
+        try {
+            scoped = await (0, triggers_1.fetchAgentScopedTrigger)(args.agentId, args.triggerId);
+        }
+        catch (err) {
+            if (err instanceof triggers_1.AgentTriggerScopeError)
+                this.error(err.message, { exit: 4 });
+            this.handleApiError(err);
+        }
+        const scopedKind = scoped.kind;
+        if (typeof scopedKind !== 'string') {
+            this.error(`Trigger ${args.triggerId} did not report its kind, so its settings cannot be checked.`, { exit: 1 });
+        }
+        try {
+            (0, triggers_1.assertKindFlagsApply)(scopedKind, flags, { kindIsFixed: true });
             const execution = {};
             const builtinAction = (0, triggers_1.buildBuiltinActionPayload)({
                 builtinAction: flags['builtin-action'],
@@ -175,7 +200,10 @@ class AgentsTriggersUpdate extends base_command_1.BaseCommand {
             });
             const schedule = (0, triggers_1.buildScheduleConfigFromFlags)(flags);
             (0, triggers_1.assertScheduleTimingShape)(schedule);
-            const once = (0, triggers_1.buildOnceConfigFromFlags)(flags);
+            const once = (0, triggers_1.buildOnceConfigFromFlags)(flags, {
+                kind: scopedKind,
+                allowNextRunAtAlias: true,
+            });
             const filterValues = (0, triggers_1.splitRepeated)(flags['filter-value']);
             // Advisory: a catalog this CLI has not caught up with must not make a
             // server-supported event unreachable. Warn and send; the server validates.
@@ -190,22 +218,8 @@ class AgentsTriggersUpdate extends base_command_1.BaseCommand {
                 filterValues,
             });
             const event = {};
-            (0, triggers_1.setDefined)(event, {
-                entityType: flags.entity,
-                eventType: flags.event,
-                filterMode: flags['filter-mode'],
-                filterField: flags['filter-field'],
-                filterValue: filterValues && filterValues.length > 1 ? filterValues : filterValues?.[0],
-                debounceMs: flags['debounce-ms'],
-                maxPerHour: flags['max-per-hour'],
-            });
-            const stochastic = {};
-            (0, triggers_1.setDefined)(stochastic, {
-                probability: flags.probability === undefined ? undefined : Number(flags.probability),
-                jitterMs: flags['jitter-ms'],
-                maxFiresPerDay: flags['max-fires-per-day'],
-                evalIntervalMinutes: flags['eval-interval-minutes'],
-            });
+            Object.assign(event, (0, triggers_1.buildEventConfigFromFlags)(flags, filterValues));
+            const stochastic = (0, triggers_1.buildStochasticConfigFromFlags)(flags);
             const selfScheduled = (0, triggers_1.buildSelfScheduledConfigFromFlags)(flags);
             const form = (0, triggers_1.buildFormConfigFromFlags)(flags);
             const chatMessage = (0, triggers_1.buildChatMessageConfigFromFlags)(flags);
@@ -217,15 +231,15 @@ class AgentsTriggersUpdate extends base_command_1.BaseCommand {
                 idempotencyWindow: flags['idempotency-window'],
             });
             (0, triggers_1.mergeObjectField)(payload, 'execution', execution);
-            (0, triggers_1.mergeObjectField)(payload, 'schedule', schedule);
-            (0, triggers_1.mergeObjectField)(payload, 'once', once);
-            (0, triggers_1.mergeObjectField)(payload, 'event', event);
-            // `kind` is immutable on update (rejected above), so there is no kind to
-            // gate on here; stochastic is only non-empty when stochastic flags were passed.
-            (0, triggers_1.mergeObjectField)(payload, 'stochastic', stochastic);
-            (0, triggers_1.mergeObjectField)(payload, 'selfScheduled', selfScheduled);
-            (0, triggers_1.mergeObjectField)(payload, 'form', form);
-            (0, triggers_1.mergeObjectField)(payload, 'chatMessage', chatMessage);
+            (0, triggers_1.mergeTriggerKindConfig)(payload, scopedKind, {
+                schedule,
+                once,
+                event,
+                stochastic,
+                selfScheduled,
+                form,
+                chatMessage,
+            });
         }
         catch (err) {
             this.error(err.message, { exit: 1 });
@@ -235,7 +249,6 @@ class AgentsTriggersUpdate extends base_command_1.BaseCommand {
         }
         let trigger;
         try {
-            await (0, triggers_1.fetchAgentScopedTrigger)(args.agentId, args.triggerId);
             trigger = await triggers_1.triggerApi.update(args.triggerId, payload);
         }
         catch (err) {

package/dist/commands/commitments/control/apply.d.ts

@@ -0,0 +1,15 @@
+import { BaseCommand } from '../../../base-command';
+export default class CommitmentsControlApply extends BaseCommand {
+    static description: string;
+    static examples: string[];
+    static args: {
+        id: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static flags: {
+        'from-json': import("@oclif/core/lib/interfaces").OptionFlag<string, import("@oclif/core/lib/interfaces").CustomOptions>;
+        'idempotency-key': import("@oclif/core/lib/interfaces").OptionFlag<string, import("@oclif/core/lib/interfaces").CustomOptions>;
+        reason: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        json: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+    };
+    run(): Promise<void>;
+}

package/dist/commands/commitments/control/apply.js

@@ -0,0 +1,36 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const core_1 = require("@oclif/core");
+const base_command_1 = require("../../../base-command");
+const commitments_1 = require("../../../lib/commitments");
+const prompt_1 = require("../../../lib/prompt");
+const responsibility_controls_1 = require("../../../lib/responsibility-controls");
+class CommitmentsControlApply extends base_command_1.BaseCommand {
+    static description = 'Apply the exact scope, version and execution targets from a saved control preview';
+    static examples = ['<%= config.bin %> commitments control apply <id> --from-json control.json --idempotency-key <key>'];
+    static args = {
+        id: core_1.Args.string({ description: 'Commitment ID', required: true, ignoreStdin: true }),
+    };
+    static flags = {
+        'from-json': core_1.Flags.string({ description: 'Reviewed control preview file, or - for stdin', required: true }),
+        'idempotency-key': core_1.Flags.string({ description: 'Stable key for retries of this exact control request', required: true }),
+        reason: core_1.Flags.string({ description: 'Reason for this control (at most 1000 characters)' }),
+        json: core_1.Flags.boolean({ description: 'Output the actual control receipt as JSON' }),
+    };
+    async run() {
+        this.requireAuth();
+        const { args, flags } = await this.parse(CommitmentsControlApply);
+        try {
+            const body = (0, responsibility_controls_1.controlFromPreview)(args.id, await (0, prompt_1.readJsonBody)(flags['from-json']), flags['idempotency-key'], flags.reason);
+            const receipt = await commitments_1.commitmentApi.applyControl(args.id, body);
+            if (flags.json)
+                this.log(JSON.stringify(receipt, null, 2));
+            else
+                (0, responsibility_controls_1.renderControl)(receipt, (line) => this.log(line));
+        }
+        catch (error) {
+            this.handleApiError(error);
+        }
+    }
+}
+exports.default = CommitmentsControlApply;

package/dist/commands/commitments/control/preview.d.ts

@@ -0,0 +1,17 @@
+import { BaseCommand } from '../../../base-command';
+export default class CommitmentsControlPreview extends BaseCommand {
+    static description: string;
+    static examples: string[];
+    static args: {
+        id: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;
+        scope: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static flags: {
+        target: import("@oclif/core/lib/interfaces").OptionFlag<string[] | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        assignment: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        'workflow-run': import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        node: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        json: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+    };
+    run(): Promise<void>;
+}

package/dist/commands/commitments/control/preview.js

@@ -0,0 +1,43 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const core_1 = require("@oclif/core");
+const base_command_1 = require("../../../base-command");
+const commitments_1 = require("../../../lib/commitments");
+const responsibility_controls_1 = require("../../../lib/responsibility-controls");
+class CommitmentsControlPreview extends base_command_1.BaseCommand {
+    static description = 'Review a responsibility control and its exact affected execution attempts';
+    static examples = [
+        '<%= config.bin %> commitments control preview <id> cancel_worker --assignment <id> --json > control.json',
+        '<%= config.bin %> commitments control preview <id> pause_observation --json > control.json',
+    ];
+    static args = {
+        id: core_1.Args.string({ description: 'Commitment ID', required: true, ignoreStdin: true }),
+        scope: core_1.Args.string({ description: 'Control scope', options: [...responsibility_controls_1.RESPONSIBILITY_CONTROL_SCOPES], required: true, ignoreStdin: true }),
+    };
+    static flags = {
+        target: core_1.Flags.string({ description: 'Exact target ID (repeat for multiple targets)', multiple: true }),
+        assignment: core_1.Flags.string({ description: 'Assignment ID to inspect' }),
+        'workflow-run': core_1.Flags.string({ description: 'Workflow episode ID to inspect' }),
+        node: core_1.Flags.string({ description: 'Node key in the selected workflow episode', dependsOn: ['workflow-run'] }),
+        json: core_1.Flags.boolean({ description: 'Output the complete frozen preview for control apply' }),
+    };
+    async run() {
+        this.requireAuth();
+        const { args, flags } = await this.parse(CommitmentsControlPreview);
+        try {
+            const preview = await commitments_1.commitmentApi.controlPreview(args.id, {
+                scope: args.scope,
+                ...(flags.target?.length ? { targetIds: flags.target.join(',') } : {}),
+                assignmentId: flags.assignment, workflowRunId: flags['workflow-run'], nodeKey: flags.node,
+            });
+            if (flags.json)
+                this.log(JSON.stringify(preview, null, 2));
+            else
+                (0, responsibility_controls_1.renderControl)(preview, (line) => this.log(line));
+        }
+        catch (error) {
+            this.handleApiError(error);
+        }
+    }
+}
+exports.default = CommitmentsControlPreview;

package/dist/commands/commitments/control/show.d.ts

@@ -0,0 +1,12 @@
+import { BaseCommand } from '../../../base-command';
+export default class CommitmentsControlShow extends BaseCommand {
+    static description: string;
+    static args: {
+        id: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;
+        controlId: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static flags: {
+        json: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+    };
+    run(): Promise<void>;
+}

package/dist/commands/commitments/control/show.js

@@ -0,0 +1,29 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const core_1 = require("@oclif/core");
+const base_command_1 = require("../../../base-command");
+const commitments_1 = require("../../../lib/commitments");
+const responsibility_controls_1 = require("../../../lib/responsibility-controls");
+class CommitmentsControlShow extends base_command_1.BaseCommand {
+    static description = 'Read an exact responsibility control receipt and its current acknowledgement state';
+    static args = {
+        id: core_1.Args.string({ description: 'Commitment ID', required: true, ignoreStdin: true }),
+        controlId: core_1.Args.string({ description: 'Control receipt ID', required: true, ignoreStdin: true }),
+    };
+    static flags = { json: core_1.Flags.boolean({ description: 'Output the control receipt as JSON' }) };
+    async run() {
+        this.requireAuth();
+        const { args, flags } = await this.parse(CommitmentsControlShow);
+        try {
+            const receipt = await commitments_1.commitmentApi.controlReceipt(args.id, args.controlId);
+            if (flags.json)
+                this.log(JSON.stringify(receipt, null, 2));
+            else
+                (0, responsibility_controls_1.renderControl)(receipt, (line) => this.log(line));
+        }
+        catch (error) {
+            this.handleApiError(error);
+        }
+    }
+}
+exports.default = CommitmentsControlShow;

package/dist/commands/commitments/create.js

@@ -251,11 +251,11 @@ JSON
         // companion flag implicitly opts the source in — mirroring how
         // `--metric-key` works — so the enum and its config never disagree.
         'watch-space': core_1.Flags.string({
-            description: 'Space to watch (repeatable). Accepts a space id, ref, or unique title. Implies --watch space.',
+            description: 'One Space to watch. Accepts a space id, ref, or unique title. Implies --watch space.',
             multiple: true,
         }),
         'watch-monitor': core_1.Flags.string({
-            description: 'Signal Monitor id to watch (repeatable). Implies --watch monitor.',
+            description: 'One Signal Monitor id to watch. Implies --watch monitor.',
             multiple: true,
         }),
         cadence: core_1.Flags.string({
@@ -427,6 +427,9 @@ JSON
                     throw new Error('A finite policy.executionBudget.maxConcurrentRuns in --from-json requires maxConcurrentRunsReason.');
                 }
             }
+            if (Array.isArray(payload.watchedSources)) {
+                payload.watchedSources = (0, commitments_1.normalizeWatchedSourceDeclarations)(payload.watchedSources);
+            }
         }
         catch (err) {
             this.error(err.message, { exit: 1 });

package/dist/commands/commitments/observation/probe.d.ts

@@ -0,0 +1,15 @@
+import { BaseCommand } from '../../../base-command';
+export default class CommitmentsObservationProbe extends BaseCommand {
+    static description: string;
+    static examples: string[];
+    static args: {
+        id: import("@oclif/core/lib/interfaces").Arg<string | undefined, Record<string, unknown>>;
+    };
+    static flags: {
+        'from-json': import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        'expected-version': import("@oclif/core/lib/interfaces").OptionFlag<number | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        'timeout-ms': import("@oclif/core/lib/interfaces").OptionFlag<number | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        json: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+    };
+    run(): Promise<void>;
+}

package/dist/commands/commitments/observation/probe.js

@@ -0,0 +1,46 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const core_1 = require("@oclif/core");
+const base_command_1 = require("../../../base-command");
+const commitments_1 = require("../../../lib/commitments");
+const prompt_1 = require("../../../lib/prompt");
+const responsibility_controls_1 = require("../../../lib/responsibility-controls");
+class CommitmentsObservationProbe extends base_command_1.BaseCommand {
+    static description = 'Perform a bounded source-read probe for a saved responsibility or unsaved draft';
+    static examples = [
+        '<%= config.bin %> commitments observation probe <id> --expected-version 7 --timeout-ms 5000',
+        '<%= config.bin %> commitments observation probe --from-json draft.json --json',
+    ];
+    static args = { id: core_1.Args.string({ description: 'Saved Commitment ID; omit for an unsaved draft', ignoreStdin: true }) };
+    static flags = {
+        'from-json': core_1.Flags.string({ description: 'Unsaved draft JSON file, or - for stdin' }),
+        'expected-version': core_1.Flags.integer({ description: 'Exact saved Commitment version', min: 1 }),
+        'timeout-ms': core_1.Flags.integer({ description: 'Saved source-probe timeout (1..15000ms)', min: 1, max: 15000 }),
+        json: core_1.Flags.boolean({ description: 'Output source evidence as JSON' }),
+    };
+    async run() {
+        this.requireAuth();
+        const { args, flags } = await this.parse(CommitmentsObservationProbe);
+        try {
+            if (Boolean(args.id) === Boolean(flags['from-json']))
+                throw new Error('Provide either a saved Commitment ID or --from-json for an unsaved draft.');
+            if (!args.id && (flags['expected-version'] !== undefined || flags['timeout-ms'] !== undefined)) {
+                throw new Error('--expected-version and --timeout-ms apply only to a saved Commitment.');
+            }
+            const probe = args.id
+                ? await commitments_1.commitmentApi.observationProbe(args.id, {
+                    ...(flags['expected-version'] !== undefined ? { expectedVersion: flags['expected-version'] } : {}),
+                    ...(flags['timeout-ms'] !== undefined ? { timeoutMs: flags['timeout-ms'] } : {}),
+                })
+                : await commitments_1.commitmentApi.draftObservationProbe((0, commitments_1.normalizeCreateBody)(await (0, prompt_1.readJsonBody)(flags['from-json'])));
+            if (flags.json)
+                this.log(JSON.stringify(probe, null, 2));
+            else
+                (0, responsibility_controls_1.renderProbe)(probe, (line) => this.log(line));
+        }
+        catch (error) {
+            this.handleApiError(error);
+        }
+    }
+}
+exports.default = CommitmentsObservationProbe;

package/dist/commands/commitments/observation/summary.d.ts

@@ -0,0 +1,9 @@
+import { BaseCommand } from '../../../base-command';
+export default class CommitmentsObservationSummary extends BaseCommand {
+    static description: string;
+    static flags: {
+        agent: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        json: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+    };
+    run(): Promise<void>;
+}

package/dist/commands/commitments/observation/summary.js

@@ -0,0 +1,31 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const core_1 = require("@oclif/core");
+const base_command_1 = require("../../../base-command");
+const commitments_1 = require("../../../lib/commitments");
+class CommitmentsObservationSummary extends base_command_1.BaseCommand {
+    static description = 'Read the bounded portfolio observation projection without performing new source checks';
+    static flags = {
+        agent: core_1.Flags.string({ description: 'Filter the authenticated portfolio by Agent ID' }),
+        json: core_1.Flags.boolean({ description: 'Output the complete observation projection as JSON' }),
+    };
+    async run() {
+        this.requireAuth();
+        const { flags } = await this.parse(CommitmentsObservationSummary);
+        try {
+            const summary = await commitments_1.commitmentApi.observationSummary({ agentId: flags.agent });
+            if (flags.json) {
+                this.log(JSON.stringify(summary, null, 2));
+                return;
+            }
+            this.log(`Portfolio observation: ${summary.state ?? 'unknown'}`);
+            this.log(`Checked at: ${summary.checkedAt ?? 'unavailable'}`);
+            this.log(`Coverage: ${JSON.stringify(summary.coverage ?? {})}`);
+            this.log(`Next wake: ${JSON.stringify(summary.nextWake ?? {})}`);
+        }
+        catch (error) {
+            this.handleApiError(error);
+        }
+    }
+}
+exports.default = CommitmentsObservationSummary;

package/dist/commands/commitments/preflight.js

@@ -2,6 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.preflightGateLines = preflightGateLines;
 const core_1 = require("@oclif/core");
+const data_provider_1 = require("@skrr-ai/data-provider");
 const base_command_1 = require("../../base-command");
 const commitments_1 = require("../../lib/commitments");
 const prompt_1 = require("../../lib/prompt");
@@ -23,6 +24,22 @@ const prompt_1 = require("../../lib/prompt");
  * dash as a short code puts two different kinds of thing in one slot.
  */
 function preflightGateLines(gate, verbose = false) {
+    // "Could it contact you now?" is not a Run gate. It answers whether a message
+    // would reach the owner, and a limit the owner set themselves (zero nudges a day,
+    // quiet hours) is a chosen quiet, not a defect. It carried the same BLOCK tag, a
+    // bare code and no setting as the real blockers beside it ("paused", "Always-On
+    // off"), while the report's own `admission` field said it blocks nothing
+    // (OSK-15420). Say what it is in words, and which setting moves it.
+    if (gate.id === 'attention' && gate.verdict === 'block') {
+        const copy = (0, data_provider_1.describeSuppression)(gate.reason);
+        const lines = [
+            `  ${'info'.padEnd(5)} ${gate.label} — ${copy.title.toLowerCase()}${verbose && gate.reason ? ` (${gate.reason})` : ''}`,
+            `        ${copy.detail}`,
+        ];
+        if (copy.settingKey)
+            lines.push(`        Setting: ${copy.settingKey}`);
+        return lines;
+    }
     const mark = gate.verdict === 'pass' ? 'ok' : gate.verdict === 'block' ? 'BLOCK' : 'warn';
     // A BLOCKING gate always states its reason. `ok` gates got a helpful `note`
     // and `warn` gates got a reason token, and the BLOCK gates — the only ones
@@ -176,7 +193,7 @@ class CommitmentsPreflight extends base_command_1.BaseCommand {
                 (endpoint.reason ? ` (${endpoint.reason})` : '') +
                 (!endpoint.available && endpoint.detail ? ` — ${endpoint.detail}` : ''));
         }
-        this.log(`\nAttention: ${report.attention?.allowed ? 'delivery allowed now' : `suppressed by ${report.attention?.suppressedBy || 'policy'}`}`);
+        this.log(`\nAttention: ${report.attention?.allowed ? 'delivery allowed now' : `held back — ${(0, data_provider_1.describeSuppression)(report.attention?.suppressedBy).title.toLowerCase()}${report.attention?.suppressedBy ? ` (${report.attention.suppressedBy})` : ''}`}`);
         if (report.verdict === 'blocked')
             process.exitCode = 1;
     }

package/dist/commands/commitments/readiness/show.d.ts

@@ -0,0 +1,12 @@
+import { BaseCommand } from '../../../base-command';
+export default class CommitmentsReadinessShow extends BaseCommand {
+    static description: string;
+    static args: {
+        id: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;
+        receiptId: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static flags: {
+        json: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+    };
+    run(): Promise<void>;
+}

package/dist/commands/commitments/readiness/show.js

@@ -0,0 +1,29 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const core_1 = require("@oclif/core");
+const base_command_1 = require("../../../base-command");
+const commitments_1 = require("../../../lib/commitments");
+const responsibility_controls_1 = require("../../../lib/responsibility-controls");
+class CommitmentsReadinessShow extends base_command_1.BaseCommand {
+    static description = 'Read one exact historical admission or activation receipt without refreshing its evidence';
+    static args = {
+        id: core_1.Args.string({ description: 'Commitment ID', required: true, ignoreStdin: true }),
+        receiptId: core_1.Args.string({ description: 'Readiness or activation receipt ID', required: true, ignoreStdin: true }),
+    };
+    static flags = { json: core_1.Flags.boolean({ description: 'Output the exact receipt as JSON' }) };
+    async run() {
+        this.requireAuth();
+        const { args, flags } = await this.parse(CommitmentsReadinessShow);
+        try {
+            const receipt = await commitments_1.commitmentApi.readinessReceipt(args.id, args.receiptId);
+            if (flags.json)
+                this.log(JSON.stringify(receipt, null, 2));
+            else
+                (0, responsibility_controls_1.renderReadiness)(receipt, (line) => this.log(line));
+        }
+        catch (error) {
+            this.handleApiError(error);
+        }
+    }
+}
+exports.default = CommitmentsReadinessShow;

package/dist/commands/commitments/readiness/verify.d.ts

@@ -0,0 +1,13 @@
+import { BaseCommand } from '../../../base-command';
+export default class CommitmentsReadinessVerify extends BaseCommand {
+    static description: string;
+    static args: {
+        id: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static flags: {
+        'expected-version': import("@oclif/core/lib/interfaces").OptionFlag<number, import("@oclif/core/lib/interfaces").CustomOptions>;
+        'timeout-ms': import("@oclif/core/lib/interfaces").OptionFlag<number | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        json: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+    };
+    run(): Promise<void>;
+}

package/dist/commands/commitments/readiness/verify.js

@@ -0,0 +1,33 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const core_1 = require("@oclif/core");
+const base_command_1 = require("../../../base-command");
+const commitments_1 = require("../../../lib/commitments");
+const responsibility_controls_1 = require("../../../lib/responsibility-controls");
+class CommitmentsReadinessVerify extends base_command_1.BaseCommand {
+    static description = 'Verify one exact saved responsibility version and record canonical readiness evidence';
+    static args = { id: core_1.Args.string({ description: 'Commitment ID', required: true, ignoreStdin: true }) };
+    static flags = {
+        'expected-version': core_1.Flags.integer({ description: 'Reviewed Commitment version', required: true, min: 1 }),
+        'timeout-ms': core_1.Flags.integer({ description: 'Source-probe timeout (1..15000ms)', min: 1, max: 15000 }),
+        json: core_1.Flags.boolean({ description: 'Output the recorded readiness receipt as JSON' }),
+    };
+    async run() {
+        this.requireAuth();
+        const { args, flags } = await this.parse(CommitmentsReadinessVerify);
+        try {
+            const receipt = await commitments_1.commitmentApi.verifyReadiness(args.id, {
+                expectedVersion: flags['expected-version'],
+                ...(flags['timeout-ms'] !== undefined ? { timeoutMs: flags['timeout-ms'] } : {}),
+            });
+            if (flags.json)
+                this.log(JSON.stringify(receipt, null, 2));
+            else
+                (0, responsibility_controls_1.renderReadiness)(receipt, (line) => this.log(line));
+        }
+        catch (error) {
+            this.handleApiError(error);
+        }
+    }
+}
+exports.default = CommitmentsReadinessVerify;