@skrr-ai/cli 0.1.126 → 0.1.128

package/dist/base-command.d.ts

@@ -1,5 +1,6 @@
 import { Command, Flags, type Interfaces } from '@oclif/core';
 import { type CliOperationOptions } from './lib/json-output';
+import { type CompassRefusalContext } from './lib/compass-refusals';
 export { resolveProfileFromArgv } from './lib/keychain';
 import { dataService } from '@skrr-ai/data-provider';
 import { type WriteTarget } from './lib/write-target';
@@ -413,6 +414,12 @@ export declare abstract class BaseCommand extends Command {
      * path the person never typed. See `lib/request-field-flags.ts`.
      */
     protected requestFieldFlags?: Readonly<Record<string, string>>;
+    /**
+     * The Compass (and Agent) this invocation is about, set by a `compass` command before it sends.
+     * A stale version or a missing revision is answered with the command to run next, and that
+     * command names these. Unset, the hint carries placeholders. See `lib/compass-refusals.ts`.
+     */
+    protected compassRef?: CompassRefusalContext;
     protected handleApiError(err: unknown, { subject }?: {
         subject?: string;
     }): never;
@@ -515,6 +522,22 @@ export declare function apiRefusal(err: unknown): {
     /** The parsed JSON body, for a refusal that carries structured context. */
     body?: Record<string, unknown>;
 };
+/**
+ * The remedy a refused Commitment activation carries.
+ *
+ * The refusal's message names the blocking Preflight gate by its QUESTION and a reason token
+ * ("Can the runtime enforce this Run? (runtime_commitment_contract_unavailable)"). The gate's own
+ * `hint` — the sentence that says what to run — travels beside it at
+ * `diagnostic.firstBlocker.detail`, and the web client already shows it
+ * (`activationFailureMessage`). The CLI dropped it, so `commitments resume` and
+ * `commitments create --activate` told a person to "fix the gate the reason names" while
+ * `commitments preflight` knew the exact command (OSK-21126).
+ *
+ * Undefined when the gate offered none, so a caller keeps its generic wording.
+ *
+ * Exported for tests.
+ */
+export declare function commitmentActivationHint(body: Record<string, unknown> | null | undefined): string | undefined;
 /**
  * Prefix a failure message with the resource it is about.
  *

package/dist/base-command.js

@@ -5,6 +5,7 @@ exports.assigneePayloadNeedsResolution = assigneePayloadNeedsResolution;
 exports.parseGlobalFlags = parseGlobalFlags;
 exports.refusalCodeOf = refusalCodeOf;
 exports.apiRefusal = apiRefusal;
+exports.commitmentActivationHint = commitmentActivationHint;
 exports.withSubject = withSubject;
 exports.describeHarnessUnavailable = describeHarnessUnavailable;
 exports.describeGitHubUnavailable = describeGitHubUnavailable;
@@ -34,6 +35,7 @@ const failed_lookup_1 = require("./lib/failed-lookup");
 const internal_id_1 = require("./lib/internal-id");
 const http_error_1 = require("./lib/http-error");
 const api_error_reason_1 = require("./lib/api-error-reason");
+const compass_refusals_1 = require("./lib/compass-refusals");
 const guide_pointer_1 = require("./lib/guide-pointer");
 // Re-exported from its home in `lib/keychain`, beside the other profile
 // functions. It lived here while `init()` was its only caller; a lib module
@@ -1467,6 +1469,12 @@ class BaseCommand extends core_1.Command {
      * path the person never typed. See `lib/request-field-flags.ts`.
      */
     requestFieldFlags;
+    /**
+     * The Compass (and Agent) this invocation is about, set by a `compass` command before it sends.
+     * A stale version or a missing revision is answered with the command to run next, and that
+     * command names these. Unset, the hint carries placeholders. See `lib/compass-refusals.ts`.
+     */
+    compassRef;
     handleApiError(err, { subject } = {}) {
         // An error this command already raised for the user is not an API failure
         // to translate. `this.error()` throws a CLIError carrying `oclif.exit`, and
@@ -1579,6 +1587,36 @@ class BaseCommand extends core_1.Command {
                     details: envelopeDetails(body),
                 });
             }
+            else if ((bodyCode === COMMITMENT_ACTIVATION_BLOCKED ||
+                stringProp(body, 'error') === COMMITMENT_ACTIVATION_BLOCKED) &&
+                commitmentActivationHint(body)) {
+                // The route puts the code in `error`, in upper case, which `refusalCodeOf` does not read
+                // as a code — so this refusal arrived as `HTTP_409` with the gate's QUESTION as its only
+                // explanation. Name the code, and say what to do (OSK-21126).
+                this.failWithCliError({
+                    message: say(`${bodyMessage || e.message}\n  → ${commitmentActivationHint(body)}`),
+                    code: COMMITMENT_ACTIVATION_BLOCKED,
+                    status: e.status,
+                    exit: 1,
+                    retryable: false,
+                    details: envelopeDetails(body),
+                });
+            }
+            else if ((e.status === 409 || e.status === 404) && (0, compass_refusals_1.compassRefusalCode)(body)) {
+                // The Compass routes sent the code in upper-case `error`, which `refusalCodeOf` does not
+                // read as a code, so a stale writer saw `HTTP_409` and a mistyped version `NOT_FOUND`,
+                // both without the versions that say what to do (OSK-21162, OSK-21152). Read these two
+                // codes by name here rather than widening `refusalCodeOf` for every route.
+                const compassCode = (0, compass_refusals_1.compassRefusalCode)(body);
+                this.failWithCliError({
+                    message: say((0, compass_refusals_1.describeCompassRefusal)(compassCode, body, this.compassRef ?? {}, this.config.bin)),
+                    code: compassCode,
+                    status: e.status,
+                    exit: compassCode === compass_refusals_1.COMPASS_REVISION_NOT_FOUND ? 4 : 1,
+                    retryable: false,
+                    details: envelopeDetails(body),
+                });
+            }
             else if (bodyCode === 'ASSIGNEE_NOT_IN_SPACE') {
                 // Code-specific enrichment takes precedence over the status heuristic:
                 // the server rejects a non-member assignee by id with no next step, so
@@ -2254,6 +2292,40 @@ function apiRefusal(err) {
         ...(body ? { body } : {}),
     };
 }
+/** The typed code the server refuses a Commitment activation with. */
+const COMMITMENT_ACTIVATION_BLOCKED = 'COMMITMENT_ACTIVATION_BLOCKED';
+/**
+ * The remedy a refused Commitment activation carries.
+ *
+ * The refusal's message names the blocking Preflight gate by its QUESTION and a reason token
+ * ("Can the runtime enforce this Run? (runtime_commitment_contract_unavailable)"). The gate's own
+ * `hint` — the sentence that says what to run — travels beside it at
+ * `diagnostic.firstBlocker.detail`, and the web client already shows it
+ * (`activationFailureMessage`). The CLI dropped it, so `commitments resume` and
+ * `commitments create --activate` told a person to "fix the gate the reason names" while
+ * `commitments preflight` knew the exact command (OSK-21126).
+ *
+ * Undefined when the gate offered none, so a caller keeps its generic wording.
+ *
+ * Exported for tests.
+ */
+function commitmentActivationHint(body) {
+    const diagnostic = body?.diagnostic;
+    if (!diagnostic || typeof diagnostic !== 'object')
+        return undefined;
+    const blocker = diagnostic.firstBlocker;
+    if (!blocker || typeof blocker !== 'object')
+        return undefined;
+    const detail = blocker.detail;
+    if (!detail || typeof detail !== 'object')
+        return undefined;
+    const { hint, note } = detail;
+    for (const candidate of [hint, note]) {
+        if (typeof candidate === 'string' && candidate.trim())
+            return candidate.trim();
+    }
+    return undefined;
+}
 /**
  * Prefix a failure message with the resource it is about.
  *

package/dist/commands/agents/chat.js

@@ -336,6 +336,13 @@ function noStreamJsonPayload(input) {
         // The run first failed as handed over and the machine's reply was then
         // repaired onto the record (OSK-13543).
         ...(result.repaired ? { repaired: true } : {}),
+        // Tool calls refused for want of `--approve-tools`: the turn completed, and these did not run.
+        ...(result.permissionDenials?.length
+            ? {
+                permissionDenials: result.permissionDenials,
+                permissionDenialHint: 'Re-run with --approve-tools to allow these tool calls.',
+            }
+            : {}),
         response: result.text,
         // The model a local harness reported running (OSK-12111). Absent on a
         // cloud turn and on a harness that reports none.

package/dist/commands/agents/goals/list.d.ts

@@ -8,8 +8,8 @@ import { BaseCommand } from '../../../base-command';
  * Wraps `GET /api/agents/:agent_id/goals` (data-provider `listAgentGoals`),
  * which returns goals where the agent is owner, DRI, or a contributor, each
  * enriched with `_agentGoalRole` (which of the three) and `_completionPercent`.
- * The endpoint sorts by most-recently-updated and caps at 100 goals; there is
- * no pagination cursor, so neither is there a `--cursor` flag here.
+ * The endpoint sorts by most-recently-updated and supports cursor pagination.
+ * This command currently shows its first page of up to 100 goals.
  */
 export default class AgentsGoalsList extends BaseCommand {
     static description: string;

package/dist/commands/agents/goals/list.js

@@ -14,8 +14,8 @@ const format_1 = require("../../../lib/format");
  * Wraps `GET /api/agents/:agent_id/goals` (data-provider `listAgentGoals`),
  * which returns goals where the agent is owner, DRI, or a contributor, each
  * enriched with `_agentGoalRole` (which of the three) and `_completionPercent`.
- * The endpoint sorts by most-recently-updated and caps at 100 goals; there is
- * no pagination cursor, so neither is there a `--cursor` flag here.
+ * The endpoint sorts by most-recently-updated and supports cursor pagination.
+ * This command currently shows its first page of up to 100 goals.
  */
 class AgentsGoalsList extends base_command_1.BaseCommand {
     static description = 'List the goals an agent owns, is DRI for, or contributes to';

package/dist/commands/commitments/action-history.js

@@ -42,8 +42,8 @@ class CommitmentsActionHistory extends base_command_1.BaseCommand {
             this.handleApiError(err);
         }
         if (flags.json) {
+            // One JSON document and nothing else: has_more / next_cursor are in it.
             this.log(JSON.stringify(response, null, 2));
-            (0, commitments_1.renderListPageHint)(response, (line) => this.log(line));
             return;
         }
         (0, commitment_ledgers_1.renderActionHistory)(response, (line) => this.log(line));

package/dist/commands/commitments/cases.js

@@ -31,11 +31,11 @@ class CommitmentsCases extends base_command_1.BaseCommand {
             this.handleApiError(error);
         }
         if (flags.json) {
+            // One JSON document and nothing else: has_more / next_cursor are in it.
             this.log(JSON.stringify(result, null, 2));
+            return;
         }
-        else {
-            (0, commitments_1.renderCommitmentCases)(result, (line) => this.log(line));
-        }
+        (0, commitments_1.renderCommitmentCases)(result, (line) => this.log(line));
         (0, commitments_1.renderListPageHint)(result, (line) => this.log(line));
     }
 }

package/dist/commands/commitments/check-now.d.ts

@@ -1,6 +1,14 @@
 import { BaseCommand } from '../../base-command';
-/** Render runtime/Always-On blockers returned alongside an accepted Check. */
-export declare function manualCheckBlockerLines(result: Record<string, unknown>): string[];
+/** Render runtime/Always-On blockers returned alongside a Check (accepted, or skipped). */
+export declare function manualCheckBlockerLines(result: Record<string, unknown>, heading?: string): string[];
+/**
+ * Why a Check was not queued, in words, and what to do. The server answers with a reason code
+ * (`commitment_draft`, `commitment_paused`, ...) and the CLI used to print only that, so "Check
+ * skipped / Reason: commitment_draft" gave no hint that the Commitment simply was not turned on
+ * (dogfood df-261031-commitment-authoring, F11). The code stays in parentheses so it can be
+ * searched for and quoted. `null` for a reason this does not know: the caller prints it as it came.
+ */
+export declare function describeNotQueuedReason(reason: unknown, id: string, bin?: string): string | null;
 /**
  * `skrr commitments check-now <id>` — run one control-loop iteration immediately.
  *

package/dist/commands/commitments/check-now.js

@@ -1,18 +1,20 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.manualCheckBlockerLines = manualCheckBlockerLines;
+exports.describeNotQueuedReason = describeNotQueuedReason;
 const core_1 = require("@oclif/core");
 const base_command_1 = require("../../base-command");
 const web_url_1 = require("../../lib/web-url");
 const commitments_1 = require("../../lib/commitments");
-/** Render runtime/Always-On blockers returned alongside an accepted Check. */
-function manualCheckBlockerLines(result) {
+const ACCEPTED_CHECK_BLOCKER_HEADING = 'Warning: this check can record state, but autonomous agent work is blocked:';
+/** Render runtime/Always-On blockers returned alongside a Check (accepted, or skipped). */
+function manualCheckBlockerLines(result, heading = ACCEPTED_CHECK_BLOCKER_HEADING) {
     const blockers = Array.isArray(result.executionBlockers)
         ? result.executionBlockers
         : [];
     if (!blockers.length)
         return [];
-    const lines = ['Warning: this check can record state, but autonomous agent work is blocked:'];
+    const lines = [heading];
     for (const blocker of blockers) {
         const label = typeof blocker.label === 'string' && blocker.label ? blocker.label : 'Execution';
         const reason = typeof blocker.reason === 'string' && blocker.reason ? ` — ${blocker.reason}` : '';
@@ -23,6 +25,40 @@ function manualCheckBlockerLines(result) {
     }
     return lines;
 }
+/**
+ * Why a Check was not queued, in words, and what to do. The server answers with a reason code
+ * (`commitment_draft`, `commitment_paused`, ...) and the CLI used to print only that, so "Check
+ * skipped / Reason: commitment_draft" gave no hint that the Commitment simply was not turned on
+ * (dogfood df-261031-commitment-authoring, F11). The code stays in parentheses so it can be
+ * searched for and quoted. `null` for a reason this does not know: the caller prints it as it came.
+ */
+function describeNotQueuedReason(reason, id, bin = 'skrr') {
+    if (typeof reason !== 'string' || !reason)
+        return null;
+    const resume = `Turn it on with \`${bin} commitments resume ${id}\`.`;
+    const sentence = (text) => `${text} (${reason})`;
+    switch (reason) {
+        case 'commitment_draft':
+            return sentence(`Nothing was queued: this Commitment is a draft, so it never runs. ${resume}`);
+        case 'commitment_paused':
+            return sentence(`Nothing was queued: this Commitment is paused. ${resume}`);
+        case 'commitment_archived':
+        case 'commitment_completed':
+        case 'commitment_cancelled':
+            return sentence(`Nothing was queued: this Commitment is ${reason.slice('commitment_'.length)}, so it no longer runs.`);
+        case 'commitment_deleted':
+            return sentence('Nothing was queued: this Commitment was deleted.');
+        case 'commitment_check_not_reserved':
+            return sentence('Nothing was queued: the platform did not reserve a new check for it just now. Try again shortly.');
+        case 'reservation_exists':
+            // Two requests at once: one reserves the check, the other meets that reservation.
+            return sentence(`Nothing new was queued: a check for this Commitment is already queued or running. See it with \`${bin} commitments checks ${id}\`.`);
+        case 'queue_unavailable':
+            return sentence('Nothing was queued: the check queue is unavailable right now. Try again shortly.');
+        default:
+            return null;
+    }
+}
 /**
  * `skrr commitments check-now <id>` — run one control-loop iteration immediately.
  *
@@ -60,6 +96,20 @@ class CommitmentsCheckNow extends base_command_1.BaseCommand {
         const status = String(result.status ?? 'unknown');
         const checkId = result.checkId ? String(result.checkId) : null;
         this.log(`Check ${status}${checkId ? ` — ${checkId}` : ''}`);
+        if (status !== 'queued') {
+            const sentence = describeNotQueuedReason(result.reason, args.id, this.config.bin);
+            if (sentence)
+                this.log(sentence);
+            else if (result.reason)
+                this.log(`Reason: ${String(result.reason)}`);
+            // What would stop it from running once it is on, so the fix is not discovered one try at a time.
+            const blockerLines = manualCheckBlockerLines(result, 'When it is on, these will also keep agent work from running:');
+            if (blockerLines.length)
+                this.log('');
+            for (const line of blockerLines)
+                this.log(line);
+            return;
+        }
         if (result.reason)
             this.log(`Reason: ${String(result.reason)}`);
         if (status === 'queued') {

package/dist/commands/commitments/create.d.ts

@@ -20,19 +20,10 @@ export declare function createCadenceFromFlags({ eventDriven, cadence: cadenceIn
     cadenceMode?: string;
     timezone?: string;
 }): Record<string, unknown> | undefined;
-/**
- * Creation preserves the policy its author wrote, so the mode that comes back
- * is normally the mode that was asked for. When it is not — normalization
- * rejected the value, or a governance layer sits lower — the difference has to
- * be said out loud at the CLI boundary; otherwise a successful create response
- * reads like the requested autonomy is live when something else is running.
- */
-/**
- * A refused `--activate` leaves a draft, and the draft's id is the answer the
- * caller needs — so the refusal is reported on the result, never thrown over
- * it. `{code, reason, fix}` mirrors the MCP surface's refusal; `guide` points
- * at the section that explains the code when one does (resolved offline).
- */
+export type ActivationBlocker = {
+    gate: string;
+    reason: string;
+};
 export declare function commitmentActivationRefusal(err: unknown, { id, bin }: {
     id: string;
     bin: string;
@@ -41,6 +32,7 @@ export declare function commitmentActivationRefusal(err: unknown, { id, bin }: {
     reason: string;
     fix: string;
     guide?: AgentGuidePointer;
+    blockers?: ActivationBlocker[];
 };
 /**
  * `skrr commitments create` — author a durable commitment contract.
@@ -89,7 +81,7 @@ export default class CommitmentsCreate extends BaseCommand {
         repo: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
         base: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
         isolation: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
-        'max-nudges': import("@oclif/core/interfaces").OptionFlag<number | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        'max-nudges': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
         'max-concurrent-runs': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
         'concurrency-reason': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
     };

package/dist/commands/commitments/create.js

@@ -10,6 +10,7 @@ const base_command_1 = require("../../base-command");
 const guide_pointer_1 = require("../../lib/guide-pointer");
 const web_url_1 = require("../../lib/web-url");
 const prompt_1 = require("../../lib/prompt");
+const commitment_attention_copy_1 = require("../../lib/commitment-attention-copy");
 const triggers_1 = require("../../lib/triggers");
 const commitment_product_1 = require("../../lib/commitment-product");
 const commitments_1 = require("../../lib/commitments");
@@ -153,8 +154,27 @@ function createCadenceFromFlags({ eventDriven, cadence: cadenceInput, cadenceMod
  * it. `{code, reason, fix}` mirrors the MCP surface's refusal; `guide` points
  * at the section that explains the code when one does (resolved offline).
  */
+/** Everything that blocks an activation, when the server listed more than the first gate. */
+function activationBlockers(body) {
+    const diagnostic = body?.diagnostic;
+    if (!Array.isArray(diagnostic?.blockers))
+        return [];
+    const blockers = [];
+    for (const item of diagnostic.blockers) {
+        const gate = item?.gate;
+        const reason = item?.reason;
+        if (typeof gate === 'string' && gate && typeof reason === 'string' && reason) {
+            blockers.push({ gate, reason });
+        }
+    }
+    return blockers;
+}
 function commitmentActivationRefusal(err, { id, bin }) {
     const refusal = (0, base_command_1.apiRefusal)(err);
+    // `resume` answers with every blocking gate, but only the first is in the message. Fixing it
+    // revealed the next one on the following try (Always-On, then the runtime), so the refusal says
+    // all of them when there is more than one (dogfood df-261031-commitment-authoring, F12).
+    const blockers = activationBlockers(refusal.body);
     const errorField = refusal.body?.error;
     const code = refusal.code ||
         (typeof errorField === 'string' && /^[A-Za-z][A-Za-z0-9_]*$/.test(errorField)
@@ -162,11 +182,17 @@ function commitmentActivationRefusal(err, { id, bin }) {
             : undefined) ||
         'COMMITMENT_ACTIVATION_REFUSED';
     const guide = (0, guide_pointer_1.agentGuidePointerFor)(code);
+    // The blocking gate's own remedy beats the generic "fix the gate the reason names": the reason is
+    // a token, and the sentence that says what to run is the hint beside it (OSK-21126).
+    const hint = (0, base_command_1.commitmentActivationHint)(refusal.body);
     return {
         code,
         reason: refusal.message || (err instanceof Error ? err.message : 'Activation was refused.'),
-        fix: (0, data_provider_1.describeCommitmentActivationFix)(code === 'COMMITMENT_ACTIVATION_REFUSED' ? undefined : code, { turnOn: `run \`${bin} commitments resume ${id}\`` }),
+        fix: hint
+            ? `${hint} Then run \`${bin} commitments resume ${id}\`.`
+            : (0, data_provider_1.describeCommitmentActivationFix)(code === 'COMMITMENT_ACTIVATION_REFUSED' ? undefined : code, { turnOn: `run \`${bin} commitments resume ${id}\`` }),
         ...(guide ? { guide } : {}),
+        ...(blockers.length > 1 ? { blockers } : {}),
     };
 }
 /**
@@ -210,6 +236,7 @@ cat > commitment.json <<'JSON'
   }],
   "policy": {
     "maxUserNudgesPerDay": 0,
+    "quietHours": { "enabled": true, "start": "22:00", "end": "07:00", "timezone": "Asia/Shanghai" },
     "executionBudget": { "maxRunsPerDay": 0, "maxObservationRunsPerDay": 0, "maxCostUsdPerDay": 0 }
   }
 }
@@ -217,11 +244,25 @@ JSON
 <%= config.bin %> commitments preflight --from-json commitment.json
 <%= config.bin %> commitments create --from-json commitment.json --json`,
         '<%= config.bin %> commitments create --agent <agent-id> --title "Keep CI healthy" --outcome "Failed checks are repaired" --watch github --github-event check_run_failed --event-driven --delivery draft-pr --repo owner/repo --base main --status draft',
+        `# Govern a Commitment with a Compass. There is no flag: "compassId" goes in the --from-json body.
+# It must be an active Compass of the same Agent (a draft may name an archived one).
+# The binding cannot be changed later: bind a successor Commitment to another Compass instead.
+cat > commitment.json <<'JSON'
+{
+  "agentId": "<agent-id>",
+  "compassId": "<compass-id>",
+  "title": "Keep p99 under 300 ms",
+  "status": "draft",
+  "target": { "outcome": "p99 API latency stays under 300 ms" }
+}
+JSON
+<%= config.bin %> commitments create --from-json commitment.json --json
+<%= config.bin %> compass commitments <compass-id> --agent <agent-id>   # lists it once it is bound`,
     ];
     static flags = {
         json: core_1.Flags.boolean({ description: 'Output the created commitment as JSON' }),
         'from-json': core_1.Flags.string({
-            description: 'JSON file (or "-" for stdin) for fields not exposed as flags. See examples below for daily times, named agent_run keys and zero budgets.',
+            description: `JSON file (or "-" for stdin) for fields not exposed as flags. See examples below for daily times, named agent_run keys, zero budgets and "compassId" (binds a Compass; fixed at creation). ${commitment_attention_copy_1.QUIET_HOURS_HELP} ${commitment_attention_copy_1.EVENT_SOURCES_HELP}`,
         }),
         agent: core_1.Flags.string({ description: 'Agent that owns and watches this commitment (required)' }),
         kind: core_1.Flags.string({
@@ -321,7 +362,7 @@ JSON
             options: [...commitments_1.COMMITMENT_EXECUTION_ISOLATION_MODES],
             hidden: true,
         }),
-        'max-nudges': core_1.Flags.integer({ description: 'Max user nudges per day (0..20)' }),
+        'max-nudges': core_1.Flags.string({ description: commitment_attention_copy_1.MAX_NUDGES_FLAG_HELP }),
         'max-concurrent-runs': core_1.Flags.string({
             description: 'Owner concurrency policy: "unlimited" (default) or 1..100. Finite values require --concurrency-reason and cannot be activated by an autonomous Agent session.',
         }),
@@ -337,7 +378,11 @@ JSON
             // `createBodySchema` is a z.strictObject, so unwrap a `plan --json`
             // envelope and drop any key it does not declare (a contract dumped from
             // `list --json` carries id/version/state/… and would otherwise 400).
-            payload = (0, commitments_1.normalizeCreateBody)(await (0, prompt_1.readJsonBody)(flags['from-json']));
+            const rawBody = await (0, prompt_1.readJsonBody)(flags['from-json']);
+            payload = (0, commitments_1.normalizeCreateBody)(rawBody);
+            const ignoredWarning = (0, commitments_1.ignoredCreateKeysWarning)((0, commitments_1.ignoredCreateKeys)(rawBody));
+            if (ignoredWarning)
+                this.warn(ignoredWarning);
             if (flags.agent)
                 payload.agentId = flags.agent;
             if (flags.kind)
@@ -430,8 +475,9 @@ JSON
                 (0, commitment_product_1.normalizeTaskReviewPolicy)(declaredDelivery.reviewPolicy);
             if (flags.isolation)
                 policy.executionIsolation = flags.isolation;
-            if (flags['max-nudges'] !== undefined)
-                policy.maxUserNudgesPerDay = flags['max-nudges'];
+            const maxNudges = (0, commitment_attention_copy_1.parseMaxNudgesFlag)(flags['max-nudges']);
+            if (maxNudges !== undefined)
+                policy.maxUserNudgesPerDay = maxNudges;
             const concurrencyPatch = (0, commitments_1.commitmentConcurrencyEnvelopePatch)({
                 rawValue: flags['max-concurrent-runs'],
                 reason: flags['concurrency-reason'],
@@ -446,6 +492,9 @@ JSON
             }
             if (Object.keys(policy).length)
                 payload.policy = policy;
+            const quietHoursProblem = (0, commitment_attention_copy_1.quietHoursInputProblem)(policy);
+            if (quietHoursProblem)
+                throw new Error(quietHoursProblem);
             if (payload.createdVia === undefined) {
                 payload.createdVia = process.env.OVERSKY_AUTONOMOUS_SESSION === '1' ? 'agent_cli' : 'cli';
             }
@@ -533,6 +582,12 @@ JSON
         if (activation && !activation.activated) {
             const { refusal } = activation;
             this.warn(`Activation refused (${refusal.code}): ${refusal.reason}`);
+            if (refusal.blockers) {
+                this.warn(`All ${refusal.blockers.length} things blocking it (it stays a draft until each is fixed):`);
+                for (const blocker of refusal.blockers)
+                    this.warn(`  - ${blocker.gate}: ${blocker.reason}`);
+                this.warn(`Details: ${this.config.bin} commitments preflight ${String(commitment?.id)}`);
+            }
             if (refusal.fix)
                 this.warn(`Fix: ${refusal.fix}`);
             if (refusal.guide)

package/dist/commands/commitments/doctor.js

@@ -86,7 +86,9 @@ function spaceLoopLine(value) {
     if (status === 'admitted') {
         detail = loop.principalVersion ? ` (principal v${loop.principalVersion})` : '';
     }
-    return `Space loop: ${status}${loop.spaceId ? ` · ${loop.spaceId}` : ''}${detail}`;
+    // Said in words first, with the code kept in parentheses for anyone who searches by it.
+    const said = status !== 'admitted' && loop.detail ? ` — ${loop.detail}` : '';
+    return `Space loop: ${status}${loop.spaceId ? ` · ${loop.spaceId}` : ''}${said}${detail}`;
 }
 class CommitmentsDoctor extends base_command_1.BaseCommand {
     static description = 'Summarize commitment readiness and the next operator action';

package/dist/commands/commitments/effective-policy.d.ts

@@ -1,5 +1,15 @@
 import { BaseCommand } from '../../base-command';
-export declare function effectivePolicyLines(policy: Record<string, any>): string[];
+/**
+ * `2026-11-02 00:00` for an instant, in a time zone. Built from parts, never from a locale: `02/11/2026`
+ * is the 2nd of November to one reader and the 11th of February to the next, and the budget reset is
+ * exactly the date a person reads this line for.
+ */
+export declare function isoWallClock(instant: unknown, timeZone?: string): string | undefined;
+/**
+ * `stored` is the Commitment's own policy, read beside the effective one: the no-reply back-off
+ * is not part of the effective-policy answer, so without it that line is left out, not guessed.
+ */
+export declare function effectivePolicyLines(policy: Record<string, any>, stored?: Record<string, any> | null): string[];
 /** Show the policy actually governing a Commitment without changing it. */
 export default class CommitmentsEffectivePolicy extends BaseCommand {
     static description: string;