@skrr-ai/cli 0.1.119 → 0.1.121

package/dist/commands/spaces/skills/propose.d.ts

@@ -0,0 +1,29 @@
+import { BaseCommand } from '../../../base-command';
+/**
+ * `skrr spaces skills propose <space>` (OSK-17998): suggest a procedure as a
+ * skill for every agent in the space.
+ *
+ * The procedure becomes a suggested lesson in the space's Memory and is listed
+ * in its proposals inbox (`spaces proposals list`); a person promotes it there,
+ * which compiles it into a space skill. From an agent's run the space's write
+ * policy decides it (`skill_write`): it is refused only where the space refuses
+ * skill changes from that agent.
+ */
+export default class SpacesSkillsPropose extends BaseCommand {
+    static description: string;
+    static examples: string[];
+    static args: {
+        id: import("@oclif/core/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static flags: {
+        title: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+        content: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+        procedure: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+        summary: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        applies: import("@oclif/core/interfaces").OptionFlag<string[] | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        except: import("@oclif/core/interfaces").OptionFlag<string[] | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        key: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        json: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+    };
+    run(): Promise<void>;
+}

package/dist/commands/spaces/skills/propose.js

@@ -0,0 +1,82 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const node_crypto_1 = require("node:crypto");
+const core_1 = require("@oclif/core");
+const data_provider_1 = require("@skrr-ai/data-provider");
+const base_command_1 = require("../../../base-command");
+const prompt_1 = require("../../../lib/prompt");
+/**
+ * `skrr spaces skills propose <space>` (OSK-17998): suggest a procedure as a
+ * skill for every agent in the space.
+ *
+ * The procedure becomes a suggested lesson in the space's Memory and is listed
+ * in its proposals inbox (`spaces proposals list`); a person promotes it there,
+ * which compiles it into a space skill. From an agent's run the space's write
+ * policy decides it (`skill_write`): it is refused only where the space refuses
+ * skill changes from that agent.
+ */
+class SpacesSkillsPropose extends base_command_1.BaseCommand {
+    static description = "Propose a procedure as a space skill: a suggested lesson a person promotes from the space's proposals inbox";
+    static examples = [
+        '<%= config.bin %> spaces skills propose <space-id> --title "Weekly KR review" --content "How we review…" --procedure procedure.json',
+        'cat procedure.json | <%= config.bin %> spaces skills propose <space-id> --title "Release checklist" --content "…" --procedure -',
+    ];
+    static args = {
+        id: core_1.Args.string({ description: 'Space ID', required: true, ignoreStdin: true }),
+    };
+    static flags = {
+        title: core_1.Flags.string({ description: 'What the skill is called', required: true }),
+        content: core_1.Flags.string({
+            description: 'The lesson in prose, as the person reviewing it reads it',
+            required: true,
+        }),
+        procedure: core_1.Flags.string({
+            description: 'The structured procedure the skill gives (schemaVersion 1, goal, steps…): a JSON file, or - for stdin',
+            required: true,
+        }),
+        summary: core_1.Flags.string({ description: 'One-line summary' }),
+        applies: core_1.Flags.string({
+            description: 'When it applies (repeatable)',
+            multiple: true,
+        }),
+        except: core_1.Flags.string({ description: 'When it does not apply (repeatable)', multiple: true }),
+        key: core_1.Flags.string({
+            description: 'Idempotency key: a retry with the same key returns the first proposal',
+        }),
+        json: core_1.Flags.boolean({ description: 'Output as JSON' }),
+    };
+    async run() {
+        this.requireAuth();
+        const { args, flags } = await this.parse(SpacesSkillsPropose);
+        const spaceRef = await this.resolveEntityRef('space', args.id);
+        let procedure;
+        try {
+            procedure = (await (0, prompt_1.readJsonBody)(flags.procedure));
+        }
+        catch (err) {
+            this.error(err.message, { exit: 1 });
+        }
+        let result;
+        try {
+            result = await data_provider_1.dataService.proposeSpaceSkill(spaceRef, {
+                title: flags.title,
+                content: flags.content,
+                procedure,
+                ...(flags.summary ? { summary: flags.summary } : {}),
+                ...(flags.applies?.length ? { applicability: flags.applies } : {}),
+                ...(flags.except?.length ? { exclusions: flags.except } : {}),
+                idempotencyKey: flags.key || `space-skill:${(0, node_crypto_1.randomUUID)()}`,
+            });
+        }
+        catch (err) {
+            this.handleApiError(err);
+        }
+        if (flags.json) {
+            this.printJsonResult(result);
+            return;
+        }
+        this.log(`Proposed "${flags.title}" as a skill for space ${spaceRef}: ${result.proposal.itemId}. ` +
+            'A person promotes it from the space proposals inbox (`spaces proposals list`).');
+    }
+}
+exports.default = SpacesSkillsPropose;

package/dist/commands/spaces/templates/fork.js

@@ -55,6 +55,9 @@ class SpacesTemplatesFork extends base_command_1.BaseCommand {
             return this.log(JSON.stringify((0, space_output_1.withSpacePerspectiveUrl)(this.cliConfig.baseURL, result.spaceId, 'tasks', result), null, 2));
         }
         this.log(`Forked into space ${result.spaceId} — ${result.taskCount ?? 0} task(s), ${result.goalCount ?? 0} goal(s).`);
+        for (const notice of (0, space_templates_1.wikiPageInstallNotices)(result.outcomes)) {
+            this.log(notice);
+        }
     }
 }
 exports.default = SpacesTemplatesFork;

package/dist/commands/spaces/triggers/show.js

@@ -38,6 +38,12 @@ class SpacesTriggersShow extends base_command_1.BaseCommand {
         this.log(`Enabled:    ${assistant.enabled === false ? 'no' : 'yes'}`);
         this.log(`On event:   ${formatLane(triggers.onEvent)}`);
         this.log(`On schedule:${formatLane(triggers.onSchedule)}`);
+        const loop = assistant.loop;
+        if (loop?.commitmentId) {
+            this.log(loop.state === 'retired'
+                ? `Loop:       converted into loop ${loop.commitmentId}, which replaced its scheduled turns; read-only`
+                : `Loop:       being converted into loop ${loop.commitmentId}; read-only, and it keeps running until the loop is active`);
+        }
     }
 }
 exports.default = SpacesTriggersShow;

package/dist/commands/spaces/workflows/retry.d.ts

@@ -8,6 +8,7 @@ export default class SpacesWorkflowsRetry extends BaseCommand {
     };
     static flags: {
         mode: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+        'retry-identity': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
         json: import("@oclif/core/interfaces").BooleanFlag<boolean>;
     };
     run(): Promise<void>;

package/dist/commands/spaces/workflows/retry.js

@@ -21,6 +21,9 @@ class SpacesWorkflowsRetry extends base_command_1.BaseCommand {
             default: 'original',
             description: 'Retry the original version or the workflow’s current version',
         }),
+        'retry-identity': core_1.Flags.string({
+            description: 'Stable identity for one logical retry; a repeat reuses its durable run',
+        }),
         json: core_1.Flags.boolean({ description: 'Output the retry result as JSON' }),
     };
     async run() {
@@ -28,7 +31,7 @@ class SpacesWorkflowsRetry extends base_command_1.BaseCommand {
         const { args, flags } = await this.parse(SpacesWorkflowsRetry);
         let result;
         try {
-            result = await data_provider_1.dataService.retrySpaceWorkflowRun(args.spaceId, args.runId, flags.mode);
+            result = await data_provider_1.dataService.retrySpaceWorkflowRun(args.spaceId, args.runId, flags.mode, flags['retry-identity']);
         }
         catch (error) {
             this.handleApiError(error);
@@ -39,6 +42,10 @@ class SpacesWorkflowsRetry extends base_command_1.BaseCommand {
             return;
         }
         this.log(`${result.reused ? 'Reused' : 'Started'} retry run ${result.run.id} (${result.run.status}).`);
+        if (result.receipt)
+            this.log(`Retry receipt: ${result.receipt.state} durable run ${result.receipt.runId}.`);
+        if (result.inspection)
+            this.log(`Inspect: skrr spaces workflows run ${args.spaceId} ${result.inspection.runId}`);
     }
 }
 exports.default = SpacesWorkflowsRetry;

package/dist/commands/spaces/workflows/triggers/create.js

@@ -16,7 +16,7 @@ async function readTriggerConfig(inline, file) {
 }
 class SpacesWorkflowsTriggersCreate extends base_command_1.BaseCommand {
     static aliases = ['workflows:triggers:create'];
-    static description = 'Create a schedule, webhook, or space-event workflow trigger';
+    static description = 'Create a schedule or webhook workflow trigger';
     static args = {
         spaceId: core_1.Args.string({ required: true, ignoreStdin: true }),
         workflowId: core_1.Args.string({ required: true, ignoreStdin: true }),
@@ -24,7 +24,8 @@ class SpacesWorkflowsTriggersCreate extends base_command_1.BaseCommand {
     static flags = {
         type: core_1.Flags.string({
             required: true,
-            options: ['schedule', 'webhook', 'space_event'],
+            // `space_event` is refused by the server: nothing delivers Space events to a workflow.
+            options: ['schedule', 'webhook'],
             description: 'Trigger type',
         }),
         status: core_1.Flags.string({

package/dist/commands/spaces/workflows/triggers/fire.js

@@ -53,6 +53,10 @@ class SpacesWorkflowsTriggersFire extends base_command_1.BaseCommand {
             return;
         }
         this.log(`${result.reused ? 'Reused' : 'Fired'} trigger run ${result.run.id} (${result.run.status}).`);
+        if (result.receipt)
+            this.log(`Delivery receipt: ${result.receipt.state} durable run ${result.receipt.runId}.`);
+        if (result.inspection)
+            this.log(`Inspect: skrr spaces workflows run ${args.spaceId} ${result.inspection.runId}`);
     }
 }
 exports.default = SpacesWorkflowsTriggersFire;

package/dist/commands/spaces/workflows/triggers/update.js

@@ -15,7 +15,8 @@ class SpacesWorkflowsTriggersUpdate extends base_command_1.BaseCommand {
     };
     static flags = {
         type: core_1.Flags.string({
-            options: ['schedule', 'webhook', 'space_event'],
+            // A stored `space_event` trigger can be paused or retyped, never set.
+            options: ['schedule', 'webhook'],
             description: 'Trigger type',
         }),
         status: core_1.Flags.string({ options: ['active', 'paused'], description: 'Trigger status' }),

package/dist/commands/spaces/write-policy/set.d.ts

@@ -0,0 +1,22 @@
+import { BaseCommand } from '../../../base-command';
+/**
+ * `skrr spaces write-policy set <space>` — set how a Space treats UNATTENDED
+ * writes of one class (OSK-17988). SHARE on the Space, the authority that also
+ * configures the execution principal. `default` returns a writer to the design
+ * default. `auto` for a class the Workspace requires approval for is refused by
+ * the server (`SPACE_WRITE_POLICY_CEILING`).
+ */
+export default class SpacesWritePolicySet extends BaseCommand {
+    static description: string;
+    static examples: string[];
+    static args: {
+        id: import("@oclif/core/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static flags: {
+        class: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+        'principal-automation': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        'member-automation': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        json: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+    };
+    run(): Promise<void>;
+}

package/dist/commands/spaces/write-policy/set.js

@@ -0,0 +1,82 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const core_1 = require("@oclif/core");
+const data_provider_1 = require("@skrr-ai/data-provider");
+const base_command_1 = require("../../../base-command");
+const space_write_policy_1 = require("../../../lib/space-write-policy");
+const MODE_OPTIONS = [...data_provider_1.SPACE_WRITE_MODES, 'default'];
+/**
+ * `skrr spaces write-policy set <space>` — set how a Space treats UNATTENDED
+ * writes of one class (OSK-17988). SHARE on the Space, the authority that also
+ * configures the execution principal. `default` returns a writer to the design
+ * default. `auto` for a class the Workspace requires approval for is refused by
+ * the server (`SPACE_WRITE_POLICY_CEILING`).
+ */
+class SpacesWritePolicySet extends base_command_1.BaseCommand {
+    static description = 'Set how a space treats unattended writes of one class (share access required)';
+    static examples = [
+        '<%= config.bin %> spaces write-policy set <space-id> --member-automation auto',
+        '<%= config.bin %> spaces write-policy set <space-id> --principal-automation propose',
+        '<%= config.bin %> spaces write-policy set <space-id> --member-automation refuse --json',
+        '<%= config.bin %> spaces write-policy set <space-id> --member-automation default',
+    ];
+    static args = {
+        id: core_1.Args.string({
+            description: 'Space ID, or a title to resolve',
+            required: true,
+            ignoreStdin: true,
+        }),
+    };
+    static flags = {
+        class: core_1.Flags.string({
+            description: 'The write class to set',
+            options: [...data_provider_1.SPACE_WRITE_CLASSES],
+            default: data_provider_1.SPACE_WRITE_CLASSES[0],
+        }),
+        'principal-automation': core_1.Flags.string({
+            description: "Mode for the space's own automation (runs admitted under its execution principal); " +
+                '`default` resets it',
+            options: MODE_OPTIONS,
+        }),
+        'member-automation': core_1.Flags.string({
+            description: "Mode for other members' agents writing unattended (for example their Commitment runs); " +
+                '`default` resets it',
+            options: MODE_OPTIONS,
+        }),
+        json: core_1.Flags.boolean({ description: 'Output as JSON' }),
+    };
+    async run() {
+        this.requireAuth();
+        const { args, flags } = await this.parse(SpacesWritePolicySet);
+        const principal = (0, space_write_policy_1.cellValue)(flags['principal-automation']);
+        const member = (0, space_write_policy_1.cellValue)(flags['member-automation']);
+        if (principal === undefined && member === undefined) {
+            this.failWithCliError({
+                message: 'Pass --principal-automation and/or --member-automation (auto, propose, refuse or default).',
+                code: 'SPACE_WRITE_POLICY_NOTHING_TO_SET',
+                exit: 2,
+                retryable: false,
+            });
+        }
+        const spaceId = await this.resolveSpaceReference(args.id);
+        const cells = {
+            ...(principal !== undefined ? { principal_automation: principal } : {}),
+            ...(member !== undefined ? { member_automation: member } : {}),
+        };
+        const writePolicy = { [flags.class]: cells };
+        let view;
+        try {
+            view = await data_provider_1.dataService.updateSpaceWritePolicy({ spaceId, data: { writePolicy } });
+        }
+        catch (err) {
+            this.handleApiError(err, { subject: `space ${args.id}` });
+        }
+        if (flags.json) {
+            this.printJsonResult(view);
+            return;
+        }
+        for (const line of (0, space_write_policy_1.writePolicyLines)(view))
+            this.log(line);
+    }
+}
+exports.default = SpacesWritePolicySet;

package/dist/commands/spaces/write-policy/show.d.ts

@@ -0,0 +1,19 @@
+import { BaseCommand } from '../../../base-command';
+/**
+ * `skrr spaces write-policy show <space>` — how a Space treats UNATTENDED
+ * writes (OSK-17988): for each write class, the mode each kind of automated
+ * writer gets, whether that is the default, and the Workspace's approval
+ * ceiling. The rows are the server's own reading, so this shows the mode the
+ * server applies. VIEW on the Space.
+ */
+export default class SpacesWritePolicyShow extends BaseCommand {
+    static description: string;
+    static examples: string[];
+    static args: {
+        id: import("@oclif/core/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static flags: {
+        json: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+    };
+    run(): Promise<void>;
+}

package/dist/commands/spaces/write-policy/show.js

@@ -0,0 +1,49 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const core_1 = require("@oclif/core");
+const data_provider_1 = require("@skrr-ai/data-provider");
+const base_command_1 = require("../../../base-command");
+const space_write_policy_1 = require("../../../lib/space-write-policy");
+/**
+ * `skrr spaces write-policy show <space>` — how a Space treats UNATTENDED
+ * writes (OSK-17988): for each write class, the mode each kind of automated
+ * writer gets, whether that is the default, and the Workspace's approval
+ * ceiling. The rows are the server's own reading, so this shows the mode the
+ * server applies. VIEW on the Space.
+ */
+class SpacesWritePolicyShow extends base_command_1.BaseCommand {
+    static description = 'Show how a space treats unattended writes: auto, held for approval, or refused';
+    static examples = [
+        '<%= config.bin %> spaces write-policy show <space-id>',
+        '<%= config.bin %> spaces write-policy show "Growth lab" --json',
+    ];
+    static args = {
+        id: core_1.Args.string({
+            description: 'Space ID, or a title to resolve',
+            required: true,
+            ignoreStdin: true,
+        }),
+    };
+    static flags = {
+        json: core_1.Flags.boolean({ description: 'Output as JSON' }),
+    };
+    async run() {
+        this.requireAuth();
+        const { args, flags } = await this.parse(SpacesWritePolicyShow);
+        const spaceId = await this.resolveSpaceReference(args.id);
+        let view;
+        try {
+            view = await data_provider_1.dataService.getSpaceWritePolicy(spaceId);
+        }
+        catch (err) {
+            this.handleApiError(err, { subject: `space ${args.id}` });
+        }
+        if (flags.json) {
+            this.printJsonResult(view);
+            return;
+        }
+        for (const line of (0, space_write_policy_1.writePolicyLines)(view))
+            this.log(line);
+    }
+}
+exports.default = SpacesWritePolicyShow;

package/dist/commands/store/artifacts/receipt.d.ts

@@ -0,0 +1,14 @@
+import { BaseCommand } from '../../../base-command';
+/** Inspect one immutable Store release before any retry or incident response. */
+export default class StoreArtifactsReceipt extends BaseCommand {
+    static description: string;
+    static args: {
+        entityType: import("@oclif/core/interfaces").Arg<string, Record<string, unknown>>;
+        entityId: import("@oclif/core/interfaces").Arg<string, Record<string, unknown>>;
+        releaseId: import("@oclif/core/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static flags: {
+        json: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+    };
+    run(): Promise<void>;
+}

package/dist/commands/store/artifacts/receipt.js

@@ -0,0 +1,34 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const core_1 = require("@oclif/core");
+const data_provider_1 = require("@skrr-ai/data-provider");
+const base_command_1 = require("../../../base-command");
+/** Inspect one immutable Store release before any retry or incident response. */
+class StoreArtifactsReceipt extends base_command_1.BaseCommand {
+    static description = 'Read one immutable Store artifact publication receipt';
+    static args = {
+        entityType: core_1.Args.string({ required: true, ignoreStdin: true }),
+        entityId: core_1.Args.string({ required: true, ignoreStdin: true }),
+        releaseId: core_1.Args.string({ required: true, ignoreStdin: true }),
+    };
+    static flags = { json: core_1.Flags.boolean({ description: 'Output JSON' }) };
+    async run() {
+        this.requireAuth();
+        const { args, flags } = await this.parse(StoreArtifactsReceipt);
+        try {
+            const result = await data_provider_1.dataService.getStoreArtifactReleaseReceipt(args.entityType, args.entityId, args.releaseId);
+            if (flags.json)
+                this.printJsonResult(result);
+            else {
+                const execution = result.execution;
+                const receipt = execution?.receipt;
+                this.log(`Release ${result.releaseId}: ${String(receipt?.state || 'unknown')}`);
+                this.log(`Operation: ${String(execution?.operationId || 'unavailable')}`);
+            }
+        }
+        catch (error) {
+            this.handleApiError(error);
+        }
+    }
+}
+exports.default = StoreArtifactsReceipt;

package/dist/commands/store/artifacts/release.d.ts

@@ -13,6 +13,8 @@ export default class StoreArtifactsRelease extends BaseCommand {
         'permission-manifest': import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
         price: import("@oclif/core/interfaces").OptionFlag<number | undefined, import("@oclif/core/interfaces").CustomOptions>;
         workspaceId: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        'release-id': import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+        'expected-source-revision': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
         json: import("@oclif/core/interfaces").BooleanFlag<boolean>;
     };
     run(): Promise<void>;

package/dist/commands/store/artifacts/release.js

@@ -46,6 +46,13 @@ class StoreArtifactsRelease extends base_command_1.BaseCommand {
         }),
         price: core_1.Flags.integer({ description: 'Price in micro-USD; omit for zero-price' }),
         workspaceId: core_1.Flags.string({ description: 'Publish as this workspace' }),
+        'release-id': core_1.Flags.string({
+            required: true,
+            description: 'Stable immutable release identity; reuse it only to inspect or retry this exact reviewed publication',
+        }),
+        'expected-source-revision': core_1.Flags.string({
+            description: 'Exact source revision from a reviewed receipt; reject publication if the source changed',
+        }),
         json: core_1.Flags.boolean({ description: 'Output JSON' }),
     };
     async run() {
@@ -64,6 +71,10 @@ class StoreArtifactsRelease extends base_command_1.BaseCommand {
             versionLabel: flags.versionLabel,
             artifactRef: flags.artifactRef,
             permissionManifest,
+            releaseId: flags['release-id'],
+            ...(flags['expected-source-revision']
+                ? { expectedSourceRevision: flags['expected-source-revision'] }
+                : {}),
             ...(flags.price !== undefined ? { price: flags.price } : {}),
             ...(flags.workspaceId ? { publishAs: { workspaceId: flags.workspaceId } } : {}),
         });

package/dist/commands/store/governance/publish-release.d.ts

@@ -10,6 +10,8 @@ export default class StoreGovernancePublishRelease extends BaseCommand {
     static description: string;
     static examples: string[];
     static flags: {
+        'release-id': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        'expected-source-revision': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
         file: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
         json: import("@oclif/core/interfaces").BooleanFlag<boolean>;
     };

package/dist/commands/store/governance/publish-release.js

@@ -3,6 +3,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 const base_command_1 = require("../../../base-command");
 const governed_store_1 = require("../../../lib/governed-store");
 const commerce_command_1 = require("../../../lib/commerce-command");
+const core_1 = require("@oclif/core");
 /**
  * Publish one artifact release into the governed catalogue (admin).
  *
@@ -15,11 +16,39 @@ class StoreGovernancePublishRelease extends base_command_1.BaseCommand {
     static examples = [
         '<%= config.bin %> store governance publish-release --file ./release.json',
     ];
-    static flags = { ...commerce_command_1.jsonBodyFlags };
+    static flags = {
+        ...commerce_command_1.jsonBodyFlags,
+        'release-id': core_1.Flags.string({
+            description: 'Stable release identity for this exact evidence bundle; reuse it only for recovery inspection or retry',
+        }),
+        'expected-source-revision': core_1.Flags.string({
+            description: 'Reviewed source revision; reject publication if a source-bound artifact changed',
+        }),
+    };
     async run() {
         this.requireAuth();
         const { flags } = await this.parse(StoreGovernancePublishRelease);
         const body = await (0, commerce_command_1.jsonBodyFrom)(this, flags.file);
+        if (flags['release-id'] && body.releaseId && body.releaseId !== flags['release-id']) {
+            this.error('--release-id must match releaseId in the reviewed file when both are present.', { exit: 2 });
+            return;
+        }
+        if (flags['expected-source-revision'] &&
+            body.expectedSourceRevision &&
+            body.expectedSourceRevision !== flags['expected-source-revision']) {
+            this.error('--expected-source-revision must match the reviewed file when both are present.', { exit: 2 });
+            return;
+        }
+        if (flags['release-id'])
+            body.releaseId = flags['release-id'];
+        if (flags['expected-source-revision'])
+            body.expectedSourceRevision = flags['expected-source-revision'];
+        if (typeof body.releaseId !== 'string' || !body.releaseId.trim()) {
+            this.error('A reviewed releaseId is required so an ambiguous publication can be inspected safely.', {
+                exit: 2,
+            });
+            return;
+        }
         let result;
         try {
             result = await (0, governed_store_1.publishGovernedStoreRelease)(body);

package/dist/commands/store/governance/release-receipt.d.ts

@@ -0,0 +1,12 @@
+import { BaseCommand } from '../../../base-command';
+/** Admin-only read path for an immutable governed-release receipt. */
+export default class StoreGovernanceReleaseReceipt extends BaseCommand {
+    static description: string;
+    static args: {
+        releaseId: import("@oclif/core/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static flags: {
+        json: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+    };
+    run(): Promise<void>;
+}

package/dist/commands/store/governance/release-receipt.js

@@ -0,0 +1,32 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const core_1 = require("@oclif/core");
+const base_command_1 = require("../../../base-command");
+const governed_store_1 = require("../../../lib/governed-store");
+/** Admin-only read path for an immutable governed-release receipt. */
+class StoreGovernanceReleaseReceipt extends base_command_1.BaseCommand {
+    static description = 'Read one immutable governed Store release receipt';
+    static args = {
+        releaseId: core_1.Args.string({ required: true, ignoreStdin: true, description: 'Store release ID' }),
+    };
+    static flags = { json: core_1.Flags.boolean({ description: 'Output JSON' }) };
+    async run() {
+        this.requireAuth();
+        const { args, flags } = await this.parse(StoreGovernanceReleaseReceipt);
+        try {
+            const result = await (0, governed_store_1.getGovernedStoreReleaseReceipt)(args.releaseId);
+            if (flags.json)
+                this.printJsonResult(result);
+            else {
+                const execution = result.execution;
+                const receipt = execution?.receipt;
+                this.log(`Release ${result.releaseId}: ${String(receipt?.state || 'unknown')}`);
+                this.log(`Operation: ${String(execution?.operationId || 'unavailable')}`);
+            }
+        }
+        catch (error) {
+            this.handleApiError(error);
+        }
+    }
+}
+exports.default = StoreGovernanceReleaseReceipt;

package/dist/commands/tasks/approvals/list.d.ts

@@ -30,10 +30,16 @@ export declare function approvalRow(a: Record<string, unknown>): {
  * on an older run that a later run got past is history, not the current state.
  */
 export declare function permissionBlockedRun(runs: Array<Record<string, unknown>>): Record<string, unknown> | null;
-/** One refused call: the tool and its input, as the run recorded them. */
+/**
+ * One refused call. The server keeps the refused input (a command line, a
+ * path) in the run transcript only, so the run record says whether one was
+ * recorded (`inputRecorded`) and carries `input` itself only when talking to a
+ * server that still returns it.
+ */
 export type PermissionRefusal = {
     tool: string | null;
-    input: string;
+    input: string | null;
+    inputRecorded: boolean;
 };
 /** One way forward, as a command a person or a script can run. */
 export type PermissionBlockRemedy = {
@@ -53,9 +59,9 @@ export type BlockedRunSummary = {
     reason: string | null;
     agentId: string | null;
     /**
-     * The refused calls with their inputs. Empty when the run recorded none
-     * (runs finalized before the server kept them, or evidence without an input
-     * preview). Never inferred.
+     * The refused calls: the tool, and the input when the server returns it.
+     * Empty when the run recorded none (runs finalized before the server kept
+     * them, or evidence without an input preview). Never inferred.
      */
     refused: PermissionRefusal[];
     remedies: PermissionBlockRemedy[];