@skrr-ai/cli 0.1.119 → 0.1.120

package/dist/commands/commitments/pack/bind.js

@@ -1,5 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.describeKnowledgeDefault = describeKnowledgeDefault;
 const core_1 = require("@oclif/core");
 const base_command_1 = require("../../../base-command");
 const commitments_1 = require("../../../lib/commitments");
@@ -10,11 +11,18 @@ const web_url_1 = require("../../../lib/web-url");
  * Binding is idempotent by design — the API answers 200 with `reused: true`
  * rather than minting a second draft, because a retried bind used to leave
  * duplicate Commitments behind (OSK-5763).
+ *
+ * `--space` binds the Pack into a Space as that Space's loop: held by the
+ * Space's lead unless `--agent` names another member, owned by the person
+ * binding, who must be the Space's execution-principal user and hold SHARE on
+ * it. The server refuses, and writes nothing, when the Space cannot take it.
  */
 class CommitmentsPackBind extends base_command_1.BaseCommand {
     static description = 'Create the Commitment a Pack describes (idempotent)';
     static examples = [
         '<%= config.bin %> commitments pack bind --pack pr_ci_guardian --agent <agent-id> --repository owner/repo --required-check "Pipeline Summary" --installation-id 155117997',
+        '<%= config.bin %> commitments pack bind --pack <pack-id> --space <space-id>',
+        '<%= config.bin %> commitments pack bind --pack goal_advance --space <space-id> --goal <goal-id> --interval-minutes 1440',
     ];
     static flags = {
         json: core_1.Flags.boolean({ description: 'Output as JSON' }),
@@ -25,7 +33,20 @@ class CommitmentsPackBind extends base_command_1.BaseCommand {
         'pack-version': core_1.Flags.string({
             description: 'Pack version (defaults to the latest installed)',
         }),
-        agent: core_1.Flags.string({ description: 'Agent ID that will hold the Commitment', required: true }),
+        agent: core_1.Flags.string({
+            description: 'Agent ID that will hold the Commitment (with --space, defaults to the Space lead)',
+        }),
+        space: core_1.Flags.string({
+            description: "Space ID to bind the Pack into as that Space's loop (you must be its execution-principal user)",
+        }),
+        goal: core_1.Flags.string({
+            description: 'Goal ID the Pack advances (goal_advance; the Goal must be in --space)',
+        }),
+        'interval-minutes': core_1.Flags.integer({
+            description: "How often a goal_advance loop looks when nothing wakes it, in minutes (default one day; the Goal's events wake it sooner)",
+            min: 1,
+            max: 30 * 24 * 60,
+        }),
         repository: core_1.Flags.string({ description: 'Repository the Pack binds to, as owner/repo' }),
         'required-check': core_1.Flags.string({
             description: 'Required CI check name (repeatable). Must match a real Check Run name.',
@@ -47,20 +68,27 @@ class CommitmentsPackBind extends base_command_1.BaseCommand {
         const { flags } = await this.parse(CommitmentsPackBind);
         const requiredChecks = (flags['required-check'] ?? []).map((c) => c.trim()).filter(Boolean);
         const grants = (flags.grant ?? []).map((g) => g.trim()).filter(Boolean);
-        // The API rejects both-or-neither too; failing here costs no round trip and
-        // names the two flags the caller actually typed.
+        if (!flags.agent && !flags.space) {
+            this.error('Pass --agent (the Agent that holds it) or --space (bind it into a Space).', {
+                exit: 1,
+            });
+        }
+        // The API rejects both too; failing here costs no round trip and names the
+        // two flags the caller actually typed. Whether a Grant is needed at all is
+        // the Pack's plan to say (PR / CI Guardian needs one; most Packs do not),
+        // so neither is the server's to refuse.
         if (flags['installation-id'] && grants.length) {
             this.error('Choose either --installation-id or --grant, not both.', { exit: 1 });
         }
-        if (!flags['installation-id'] && !grants.length) {
-            this.error('Pass --installation-id (GitHub App) or at least one --grant.', { exit: 1 });
-        }
         let result;
         try {
             result = await commitments_1.commitmentPackApi.bind({
                 packId: flags.pack,
                 ...(flags['pack-version'] ? { version: flags['pack-version'] } : {}),
-                agentId: flags.agent,
+                ...(flags.agent ? { agentId: flags.agent } : {}),
+                ...(flags.space ? { spaceId: flags.space } : {}),
+                ...(flags.goal ? { goalId: flags.goal } : {}),
+                ...(flags['interval-minutes'] ? { intervalMs: flags['interval-minutes'] * 60_000 } : {}),
                 ...(flags.repository ? { repository: flags.repository } : {}),
                 ...(requiredChecks.length ? { requiredChecks } : {}),
                 ...(flags['installation-id'] ? { installationId: flags['installation-id'] } : {}),
@@ -76,7 +104,18 @@ class CommitmentsPackBind extends base_command_1.BaseCommand {
             this.log(JSON.stringify((0, web_url_1.withCommitmentUrl)(this.cliConfig.baseURL, result), null, 2));
             return;
         }
-        this.log(`${result.reused ? 'Reused existing' : 'Created'} commitment ${result.commitment?.id} from ${result.pack?.id}@${result.pack?.version}`);
+        this.log(`${result.reused ? 'Reused existing' : 'Created'} commitment ${result.commitment?.id} from ${result.pack?.id ?? result.plan?.pack?.id}@${result.pack?.version ?? result.plan?.pack?.version}`);
+        const loop = result.spaceLoop;
+        if (loop) {
+            const holder = loop.holder === 'space_lead' ? ' (the Space lead)' : '';
+            this.log(`Space loop: ${loop.spaceId}, held by ${loop.agentId}${holder}`);
+            const knowledge = describeKnowledgeDefault(loop.knowledgeScope);
+            if (knowledge)
+                this.log(`Space knowledge: ${knowledge}`);
+        }
+        for (const link of result.workLinks ?? []) {
+            this.log(`Linked ${link.targetType} ${link.targetId} (${link.roles.join(', ')})`);
+        }
         const { url } = (0, web_url_1.withCommitmentUrl)(this.cliConfig.baseURL, {
             id: result.commitment?.id,
         });
@@ -86,3 +125,22 @@ class CommitmentsPackBind extends base_command_1.BaseCommand {
     }
 }
 exports.default = CommitmentsPackBind;
+/**
+ * The Space knowledge default a loop's home link reports
+ * (`CommitmentSpaceLoop.KNOWLEDGE_DEFAULT_OUTCOMES`), in words. Empty for an
+ * outcome this CLI does not know, rather than a guess.
+ */
+function describeKnowledgeDefault(scope) {
+    switch (scope?.default) {
+        case 'applied':
+            return "on — the loop reads this Space's memory and wiki";
+        case 'owner_declared':
+            return `${scope.enabled ? 'on' : 'off'}, as its owner had already set it`;
+        case 'owner_decision_required':
+            return 'off until its owner turns it on (it was bound with an Agent or token credential)';
+        case 'not_applied':
+            return 'off — the default could not be written, so it stays off until its owner turns it on';
+        default:
+            return '';
+    }
+}

package/dist/commands/commitments/pack/plan.d.ts

@@ -13,7 +13,10 @@ export default class CommitmentsPackPlan extends BaseCommand {
         json: import("@oclif/core/interfaces").BooleanFlag<boolean>;
         pack: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
         'pack-version': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
-        agent: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+        agent: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        space: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        goal: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        'interval-minutes': import("@oclif/core/interfaces").OptionFlag<number | undefined, import("@oclif/core/interfaces").CustomOptions>;
         repository: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
         'required-check': import("@oclif/core/interfaces").OptionFlag<string[] | undefined, import("@oclif/core/interfaces").CustomOptions>;
         'installation-id': import("@oclif/core/interfaces").OptionFlag<number | undefined, import("@oclif/core/interfaces").CustomOptions>;

package/dist/commands/commitments/pack/plan.js

@@ -14,6 +14,8 @@ class CommitmentsPackPlan extends base_command_1.BaseCommand {
     static description = 'Draft the Commitment a Pack would create, without creating it (read-only)';
     static examples = [
         '<%= config.bin %> commitments pack plan --pack pr_ci_guardian --agent <agent-id> --repository owner/repo --required-check "Pipeline Summary"',
+        '<%= config.bin %> commitments pack plan --pack <pack-id> --space <space-id>',
+        '<%= config.bin %> commitments pack plan --pack goal_advance --space <space-id> --goal <goal-id>',
     ];
     static flags = {
         json: core_1.Flags.boolean({ description: 'Output as JSON' }),
@@ -24,7 +26,20 @@ class CommitmentsPackPlan extends base_command_1.BaseCommand {
         'pack-version': core_1.Flags.string({
             description: 'Pack version (defaults to the latest installed)',
         }),
-        agent: core_1.Flags.string({ description: 'Agent ID that will hold the Commitment', required: true }),
+        agent: core_1.Flags.string({
+            description: 'Agent ID that will hold the Commitment (with --space, defaults to the Space lead)',
+        }),
+        space: core_1.Flags.string({
+            description: "Space ID to bind the Pack into as that Space's loop",
+        }),
+        goal: core_1.Flags.string({
+            description: 'Goal ID the Pack advances (goal_advance; the Goal must be in --space)',
+        }),
+        'interval-minutes': core_1.Flags.integer({
+            description: "How often a goal_advance loop looks when nothing wakes it, in minutes (default one day; the Goal's events wake it sooner)",
+            min: 1,
+            max: 30 * 24 * 60,
+        }),
         repository: core_1.Flags.string({ description: 'Repository the Pack binds to, as owner/repo' }),
         'required-check': core_1.Flags.string({
             description: 'Required CI check name (repeatable). Must match a real Check Run name.',
@@ -38,12 +53,20 @@ class CommitmentsPackPlan extends base_command_1.BaseCommand {
         // Check NAMES are free text and legitimately contain commas, so they are
         // never comma-split the way an id list would be.
         const requiredChecks = (flags['required-check'] ?? []).map((c) => c.trim()).filter(Boolean);
+        if (!flags.agent && !flags.space) {
+            this.error('Pass --agent (the Agent that holds it) or --space (bind it into a Space).', {
+                exit: 1,
+            });
+        }
         let result;
         try {
             result = await commitments_1.commitmentPackApi.plan({
                 packId: flags.pack,
                 ...(flags['pack-version'] ? { version: flags['pack-version'] } : {}),
-                agentId: flags.agent,
+                ...(flags.agent ? { agentId: flags.agent } : {}),
+                ...(flags.space ? { spaceId: flags.space } : {}),
+                ...(flags.goal ? { goalId: flags.goal } : {}),
+                ...(flags['interval-minutes'] ? { intervalMs: flags['interval-minutes'] * 60_000 } : {}),
                 ...(flags.repository ? { repository: flags.repository } : {}),
                 ...(requiredChecks.length ? { requiredChecks } : {}),
                 ...(flags['installation-id'] ? { installationId: flags['installation-id'] } : {}),
@@ -59,6 +82,11 @@ class CommitmentsPackPlan extends base_command_1.BaseCommand {
         }
         this.log(`Pack:       ${result.pack?.id}@${result.pack?.version}`);
         this.log(`planDigest: ${result.planDigest}`);
+        const placement = result.spacePlacement;
+        if (placement) {
+            const holder = placement.holder === 'space_lead' ? ' (the Space lead)' : '';
+            this.log(`Space loop: ${placement.spaceId}, held by ${placement.agentId}${holder}`);
+        }
         this.log('\nNothing was created. Pass this digest to `skrr commitments pack bind --plan-digest`.');
     }
 }

package/dist/commands/commitments/update.js

@@ -32,7 +32,7 @@ const commitments_1 = require("../../lib/commitments");
  */
 class CommitmentsUpdate extends base_command_1.BaseCommand {
     static description = "Update a commitment's contract (title, target, cadence, sources). A cadence is manual, an interval or daily clock times; " +
-        'it has no weekday, holiday, business-day or trading-calendar fields';
+        'activeHours and daysOfWeek in --from-json select hours and weekdays. No holiday, business-day or trading-calendar fields';
     static examples = [
         '<%= config.bin %> commitments update <commitment-id> --cadence 12h',
         '<%= config.bin %> commitments update <commitment-id> --title "Ship v2 (Q3)" --outcome "v2 is live for all users"',
@@ -43,7 +43,7 @@ class CommitmentsUpdate extends base_command_1.BaseCommand {
 <%= config.bin %> commitments show <commitment-id> --json
 cat > commitment-patch.json <<'JSON'
 {
-  "cadence": { "mode": "daily", "times": ["09:15", "17:45"], "timezone": "Asia/Shanghai" },
+  "cadence": { "mode": "interval", "intervalMs": 3600000, "activeHours": { "start": "09:00", "end": "22:00" }, "daysOfWeek": ["mon", "tue", "wed", "thu", "fri"], "timezone": "Asia/Shanghai" },
   "policy": { "executionBudget": { "maxObservationRunsPerDay": 0 } }
 }
 JSON
@@ -350,6 +350,12 @@ JSON
                         delete cadence.jitterRatio;
                     }
                 }
+                if (!['interval', 'daily', 'event_plus_interval'].includes(String(cadence.mode)) &&
+                    !Object.hasOwn(authoredCadence ?? {}, 'activeHours'))
+                    delete cadence.activeHours;
+                if (!['interval', 'event_plus_interval', 'daily'].includes(String(cadence.mode)) &&
+                    !Object.hasOwn(authoredCadence ?? {}, 'daysOfWeek'))
+                    delete cadence.daysOfWeek;
                 payload.cadence = cadence;
                 if (payload.expectedVersion === undefined && current?.version !== undefined) {
                     payload.expectedVersion = current.version;

package/dist/commands/completion/index.js

@@ -45,7 +45,7 @@ class Completion extends base_command_1.BaseCommand {
         const { args, flags } = await this.parse(Completion);
         // This is intentionally best-effort. `completion` is useful before login
         // and when offline; static manifest-derived suggestions still work either way.
-        await (0, completion_index_1.refreshCompletionIndex)(this.config.cacheDir);
+        await (0, completion_index_1.refreshCompletionIndex)(this.config.cacheDir, this.completionCacheScope());
         if (flags['refresh-cache'])
             return;
         const shell = args.shell;

package/dist/commands/completion/values.js

@@ -19,7 +19,7 @@ class CompletionValues extends base_command_1.BaseCommand {
     async run() {
         const { args } = await this.parse(CompletionValues);
         // Never log or fail here: shell command substitution treats output as data.
-        const values = await (0, completion_index_1.completionCandidates)(this.config.cacheDir, args.kind, args.query ?? '');
+        const values = await (0, completion_index_1.completionCandidates)(this.config.cacheDir, this.completionCacheScope(), args.kind, args.query ?? '');
         if (values.length > 0)
             this.log(values.join('\n'));
     }

package/dist/commands/computer-use/audio.d.ts

@@ -1,5 +1,6 @@
 import { ComputerUseCommand } from '../../lib/computer-use';
 export default class ComputerUseAudio extends ComputerUseCommand {
+    static strict: boolean;
     static summary: string;
     static description: string;
     protected action: string;

package/dist/commands/computer-use/audio.js

@@ -2,6 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 const computer_use_1 = require("../../lib/computer-use");
 class ComputerUseAudio extends computer_use_1.ComputerUseCommand {
+    static strict = false;
     static summary = 'Configure optional computer audio with status, enable or disable';
     static description = 'Flags are forwarded unchanged. Run `skrrd computer-use audio --help` for options; --profile selects the local daemon profile and --json emits one stable document.';
     action = 'audio';

package/dist/commands/computer-use/browser.d.ts

@@ -1,5 +1,6 @@
 import { ComputerUseCommand } from '../../lib/computer-use';
 export default class ComputerUseBrowser extends ComputerUseCommand {
+    static strict: boolean;
     static summary: string;
     static description: string;
     static examples: string[];

package/dist/commands/computer-use/browser.js

@@ -2,6 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 const computer_use_1 = require("../../lib/computer-use");
 class ComputerUseBrowser extends computer_use_1.ComputerUseCommand {
+    static strict = false;
     static summary = 'Configure original Chrome, inspect its extension, and manage its native host';
     static description = 'Actions: status, enable, disable, setup, update, verify. Setup uses the original LCU installer: private relay files belong to the selected skrr profile, while native-host registration is shared by the desktop account and supported Chromium browsers. Verify initializes the original MCP schema without browser actions. Flags are forwarded unchanged; run `skrrd computer-use browser --help` for all options.';
     static examples = [

package/dist/commands/computer-use/disable.d.ts

@@ -1,5 +1,6 @@
 import { ComputerUseCommand } from '../../lib/computer-use';
 export default class ComputerUseDisable extends ComputerUseCommand {
+    static strict: boolean;
     static summary: string;
     static description: string;
     protected action: string;

package/dist/commands/computer-use/disable.js

@@ -2,6 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 const computer_use_1 = require("../../lib/computer-use");
 class ComputerUseDisable extends computer_use_1.ComputerUseCommand {
+    static strict = false;
     static summary = 'Revoke Computer Use consent and stop the active controller';
     static description = 'Flags are forwarded unchanged. Run `skrrd computer-use disable --help` for options; --profile selects the local daemon profile and --json emits one stable document.';
     action = 'disable';

package/dist/commands/computer-use/enable.d.ts

@@ -1,5 +1,6 @@
 import { ComputerUseCommand } from '../../lib/computer-use';
 export default class ComputerUseEnable extends ComputerUseCommand {
+    static strict: boolean;
     static summary: string;
     static description: string;
     protected action: string;

package/dist/commands/computer-use/enable.js

@@ -2,6 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 const computer_use_1 = require("../../lib/computer-use");
 class ComputerUseEnable extends computer_use_1.ComputerUseCommand {
+    static strict = false;
     static summary = 'Enable Computer Use locally; --cloud-agents separately grants cloud Agent access';
     static description = 'Flags are forwarded unchanged. Run `skrrd computer-use enable --help` for options; --profile selects the local daemon profile and --json emits one stable document.';
     action = 'enable';

package/dist/commands/computer-use/index.d.ts

@@ -1,5 +1,6 @@
 import { ComputerUseCommand } from '../../lib/computer-use';
 export default class ComputerUse extends ComputerUseCommand {
+    static strict: boolean;
     static summary: string;
     static description: string;
     protected action: undefined;

package/dist/commands/computer-use/index.js

@@ -2,6 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 const computer_use_1 = require("../../lib/computer-use");
 class ComputerUse extends computer_use_1.ComputerUseCommand {
+    static strict = false;
     static summary = 'Install and control optional Computer Use on this machine';
     static description = 'Computer Use uses your installed official app runtime. Run `skrr computer-use status`; use `skrrd computer-use --help` for all options, including --profile and --json.';
     action = undefined;

package/dist/commands/computer-use/install.d.ts

@@ -1,5 +1,6 @@
 import { ComputerUseCommand } from '../../lib/computer-use';
 export default class ComputerUseInstall extends ComputerUseCommand {
+    static strict: boolean;
     static summary: string;
     static description: string;
     protected action: string;

package/dist/commands/computer-use/install.js

@@ -2,6 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 const computer_use_1 = require("../../lib/computer-use");
 class ComputerUseInstall extends computer_use_1.ComputerUseCommand {
+    static strict = false;
     static summary = 'Install a pinned thin release from an explicit local archive and trusted SHA-256';
     static description = 'Flags are forwarded unchanged. Run `skrrd computer-use install --help` for options; --profile selects the local daemon profile and --json emits one stable document.';
     action = 'install';

package/dist/commands/computer-use/recover.d.ts

@@ -1,5 +1,6 @@
 import { ComputerUseCommand } from '../../lib/computer-use';
 export default class ComputerUseRecover extends ComputerUseCommand {
+    static strict: boolean;
     static summary: string;
     static description: string;
     protected action: string;

package/dist/commands/computer-use/recover.js

@@ -2,6 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 const computer_use_1 = require("../../lib/computer-use");
 class ComputerUseRecover extends computer_use_1.ComputerUseCommand {
+    static strict = false;
     static summary = 'Retry runtime recovery only after confirmed execution cleanup';
     static description = 'Flags are forwarded unchanged. Run `skrrd computer-use recover --help` for options; --profile selects the local daemon profile and --json emits one stable document.';
     action = 'recover';

package/dist/commands/computer-use/status.d.ts

@@ -1,5 +1,6 @@
 import { ComputerUseCommand } from '../../lib/computer-use';
 export default class ComputerUseStatus extends ComputerUseCommand {
+    static strict: boolean;
     static summary: string;
     static description: string;
     protected action: string;

package/dist/commands/computer-use/status.js

@@ -2,6 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 const computer_use_1 = require("../../lib/computer-use");
 class ComputerUseStatus extends computer_use_1.ComputerUseCommand {
+    static strict = false;
     static summary = 'Show configuration and live Computer Use availability without desktop interaction';
     static description = 'Flags are forwarded unchanged. Run `skrrd computer-use status --help` for options; --profile selects the local daemon profile and --json emits one stable document.';
     action = 'status';

package/dist/commands/computer-use/stop.d.ts

@@ -1,5 +1,6 @@
 import { ComputerUseCommand } from '../../lib/computer-use';
 export default class ComputerUseStop extends ComputerUseCommand {
+    static strict: boolean;
     static summary: string;
     static description: string;
     protected action: string;

package/dist/commands/computer-use/stop.js

@@ -2,6 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 const computer_use_1 = require("../../lib/computer-use");
 class ComputerUseStop extends computer_use_1.ComputerUseCommand {
+    static strict = false;
     static summary = 'Stop the running Computer Use controller and confirm cleanup';
     static description = 'Flags are forwarded unchanged. Run `skrrd computer-use stop --help` for options; --profile selects the local daemon profile and --json emits one stable document.';
     action = 'stop';

package/dist/commands/context.js

@@ -26,9 +26,11 @@ class Context extends base_command_1.BaseCommand {
     async run() {
         const { flags } = await this.parse(Context);
         const runtime = (0, runtime_context_1.readRuntimeContext)();
+        const unboundRuntime = !runtime.agent?.boundToSession;
+        const authResolution = this.authResolution();
         // The task block must answer the same question an id-less `skrr tasks …`
         // does, or a reader concludes "no task" while the next command it runs
-        // acts on the checked-out `oversky/task/<REF>` branch. The resolver's
+        // acts on the checked-out canonical task branch. The resolver's
         // precedence is preserved exactly: runtime-bound sources first, the git
         // branch only after them — a daemon-bound task must not silently become
         // whichever branch is checked out.
@@ -55,6 +57,8 @@ class Context extends base_command_1.BaseCommand {
                 node: process.version,
             },
             server: this.cliConfig.baseURL,
+            // Additive provenance: `server` remains a string for existing scripts.
+            serverSource: authResolution.server.source,
             profile: (0, keychain_1.getActiveProfile)(),
             config: {
                 path: (0, config_1.getConfigPath)(),
@@ -66,6 +70,7 @@ class Context extends base_command_1.BaseCommand {
                 tokenKind: this.resolvedCredential?.kind ?? null,
                 account,
                 accountError,
+                resolution: authResolution,
             },
             /**
              * The workspace this machine works in.
@@ -94,19 +99,20 @@ class Context extends base_command_1.BaseCommand {
             writeAttribution: (0, task_write_attribution_1.runtimeWriteAttribution)(runtime),
             warnings: [
                 ...runtime.warnings,
-                ...(!runtime.agent?.boundToSession ? [(0, task_write_attribution_1.runtimeWriteAttribution)(runtime).notice] : []),
+                ...(unboundRuntime ? [(0, task_write_attribution_1.runtimeWriteAttribution)(runtime).notice] : []),
             ],
+            setup: unboundRuntime ? { agentRuntime: (0, task_write_attribution_1.unboundRuntimeSetup)(this.config.bin) } : null,
             agent: runtime.agent,
             task: { ...runtime.task, resolved: resolvedTask },
             conversation: runtime.conversation,
-            recommendations: recommendationsFor(runtime),
+            recommendations: recommendationsFor(runtime, this.config.bin),
         };
         if (flags.json) {
             this.log(JSON.stringify(payload, null, 2));
             return;
         }
         this.log(`Runtime: ${runtime.kind}`);
-        this.log(`Server:  ${this.cliConfig.baseURL}`);
+        this.log(`Server:  ${authResolution.server.origin ?? 'configured server (invalid URL)'} (${payload.serverSource})`);
         this.log(
         // "Workspace", never "Space" — they are different things in this product
         // and this whole workstream exists because the two got conflated.
@@ -126,8 +132,8 @@ class Context extends base_command_1.BaseCommand {
             this.log(`Task:    ${runtime.task.identifier ?? resolvedTask.id} (${resolvedTask.source})`);
         }
         this.log(`Task writes: ${payload.writeAttribution.notice}`);
-        if (!runtime.agent?.boundToSession)
-            this.log(task_write_attribution_1.AGENT_BINDING_GUIDANCE);
+        if (unboundRuntime)
+            this.log((0, task_write_attribution_1.agentBindingGuidance)(this.config.bin));
         if (runtime.warnings.length > 0) {
             this.log('Warnings:');
             for (const warning of runtime.warnings)
@@ -136,12 +142,11 @@ class Context extends base_command_1.BaseCommand {
     }
 }
 exports.default = Context;
-function recommendationsFor(runtime) {
+function recommendationsFor(runtime, bin) {
     const recommendations = [];
-    if (!runtime.agent) {
-        recommendations.push(task_write_attribution_1.AGENT_BINDING_GUIDANCE);
-    }
-    else if (!runtime.agent.canonical) {
+    if (!runtime.agent?.boundToSession)
+        recommendations.push((0, task_write_attribution_1.agentBindingGuidance)(bin));
+    if (runtime.agent && !runtime.agent.canonical) {
         recommendations.push('Prefer OVERSKY_SESSION_AGENT_ID over legacy OVERSKY_AGENT_ID in daemon runtimes.');
     }
     if (runtime.isDaemonSession && !runtime.session.requestId) {

package/dist/commands/convos/recovery.js

@@ -49,7 +49,7 @@ class ConvosRecovery extends base_command_1.BaseCommand {
             this.handleApiError(error);
         }
         if (flags.json) {
-            this.log(JSON.stringify(result, null, 2));
+            this.printJsonResult(result);
             return;
         }
         if (args.action === 'list') {

package/dist/commands/daemon/diagnostics.d.ts

@@ -0,0 +1,9 @@
+import { Command } from '@oclif/core';
+export default class DaemonDiagnostics extends Command {
+    static aliases: string[];
+    static summary: string;
+    static description: string;
+    static strict: boolean;
+    static examples: string[];
+    run(): Promise<void>;
+}

package/dist/commands/daemon/diagnostics.js

@@ -0,0 +1,53 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const core_1 = require("@oclif/core");
+const exec_runtime_binary_1 = require("../../lib/exec-runtime-binary");
+class DaemonDiagnostics extends core_1.Command {
+    // `skrr daemons <sub>` — the plural is advertised as an alias for the
+    // whole topic, and without a per-command alias only the bare topic
+    // resolved: every subcommand under it failed.
+    static aliases = ['daemons:diagnostics'];
+    static summary = 'Write a support bundle (status, logs, run history) as one text file, with secrets masked';
+    static description = (0, exec_runtime_binary_1.forwardedFlagsNote)('diagnostics');
+    static strict = false; // forward all args verbatim — see run()
+    static examples = [
+        '<%= config.bin %> daemon diagnostics',
+        '<%= config.bin %> daemon diagnostics --lines 1000',
+        '<%= config.bin %> daemon diagnostics --out -',
+        '<%= config.bin %> daemon diagnostics --profile work',
+    ];
+    async run() {
+        // The bundle is what answers "send me your logs", so it is reached for when
+        // something is already wrong — often on a machine whose runtime has not been
+        // updated since before the verb existed. A bare forward would then be
+        // unsafe: a stale runtime treats a subcommand it does not know as `start`,
+        // which collides with the healthy daemon's singleton lock and reports an
+        // alarming startup failure instead of the real cause. So the runtime's
+        // top-level help is read first (it starts nothing), and only a runtime that
+        // positively lacks the verb is refused; one whose help cannot be read is
+        // forwarded to, as every other wrapper does.
+        //
+        // `this.argv`, NOT `this.parse()`: `strict = false` relaxes POSITIONAL arity
+        // and oclif still rejects any flag this command has not declared, which
+        // would make `--out` and `--lines` unreachable (OSK-296).
+        const argv = this.argv;
+        try {
+            if ((await (0, exec_runtime_binary_1.runtimeBinarySupportsSubcommand)('diagnostics')) === false) {
+                this.error('The installed skrr background service is older than this skrr CLI and has no ' +
+                    '`diagnostics` command. Update it with `skrr daemon update`, then rerun ' +
+                    '`skrr daemon diagnostics`. Until then `skrr daemon logs` prints its recent log; ' +
+                    'do not stop a healthy running daemon to work around this.', { exit: 2 });
+            }
+            const code = await (0, exec_runtime_binary_1.execRuntimeBinary)(['diagnostics', ...argv]);
+            this.exit(code);
+        }
+        catch (err) {
+            if (err.message === 'runtime-binary-not-installed') {
+                this.log((0, exec_runtime_binary_1.notInstalledMessage)());
+                this.exit(127);
+            }
+            throw err;
+        }
+    }
+}
+exports.default = DaemonDiagnostics;

package/dist/commands/daemon/index.js

@@ -28,6 +28,7 @@ class Daemon extends core_1.Command {
         '<%= config.bin %> daemon stop',
         '<%= config.bin %> daemon update',
         '<%= config.bin %> daemon logs',
+        '<%= config.bin %> daemon diagnostics',
         '<%= config.bin %> daemon recover-offline-queue --apply',
         '<%= config.bin %> daemon usage --refresh',
         '<%= config.bin %> daemon byok status',
@@ -49,6 +50,7 @@ class Daemon extends core_1.Command {
         this.log('  skrr daemon status     — show running state and config');
         this.log('  skrr daemon config     — set config, e.g. a tool category: --mode bash=manual');
         this.log('  skrr daemon logs       — tail recent daemon logs');
+        this.log('  skrr daemon diagnostics — write a support bundle (status, logs) to send with a bug report');
         this.log('  skrr daemon recover-offline-queue — restore recoverable offline WALs');
         this.log('  skrr daemon usage      — show local Claude Code and Codex usage limits');
         this.log('  skrr daemon byok       — manage local BYOK Keychain credentials');

package/dist/commands/daemon/maintenance/attest.d.ts

@@ -0,0 +1,15 @@
+import { DaemonMaintenanceCommand } from '../../../lib/daemon-maintenance-command';
+export default class DaemonMaintenanceAttest extends DaemonMaintenanceCommand {
+    static description: string;
+    static examples: string[];
+    static args: {
+        machine: import("@oclif/core/interfaces").Arg<string | undefined, Record<string, unknown>>;
+    };
+    static flags: {
+        ready: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        proceed: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        generation: import("@oclif/core/interfaces").OptionFlag<number | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        json: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+    };
+    run(): Promise<void>;
+}