@skrr-ai/cli 0.1.126 → 0.1.128

package/oclif.manifest.json

@@ -31699,8 +31699,9 @@
         "<%= config.bin %> commitments create --agent <agent-id> --title \"SLA\" --outcome \"p95 under 200ms\" --criterion \"p95 latency confirmed\" --evaluator metric --measure <measure-id>",
         "<%= config.bin %> commitments create --agent <agent-id> --title \"AWS cost watch\" --outcome \"Cost regressions are investigated\" --agent-directive-file ./aws-cost-policy.md",
         "<%= config.bin %> commitments create --from-json commitment.json --json",
-        "# Replace <agent-id> with your Agent ID; this creates a draft, not a running loop.\n# In \"policy\", 0 is a ZERO budget (nothing may run or be spent), not \"no limit\".\n# To remove a limit set it to null (e.g. \"maxCostUsdPerDay\": null) or leave the key out.\ncat > commitment.json <<'JSON'\n{\n  \"agentId\": \"<agent-id>\",\n  \"title\": \"Daily queue review\",\n  \"status\": \"draft\",\n  \"target\": { \"outcome\": \"Queue changes are reviewed\" },\n  \"cadence\": { \"mode\": \"interval\", \"intervalMs\": 3600000, \"activeHours\": { \"start\": \"09:00\", \"end\": \"22:00\" }, \"daysOfWeek\": [\"mon\", \"tue\", \"wed\", \"thu\", \"fri\"], \"timezone\": \"Asia/Shanghai\" },\n  \"watchedSources\": [{\n    \"source\": \"agent_run\",\n    \"config\": { \"keys\": [\n      { \"key\": \"queue.depth\", \"label\": \"Queue depth\", \"requireArtifact\": true,\n        \"changeRule\": { \"mode\": \"numeric_delta\", \"minDelta\": 2, \"absoluteFloor\": 1 } },\n      \"queue.status\"\n    ] }\n  }],\n  \"policy\": {\n    \"maxUserNudgesPerDay\": 0,\n    \"executionBudget\": { \"maxRunsPerDay\": 0, \"maxObservationRunsPerDay\": 0, \"maxCostUsdPerDay\": 0 }\n  }\n}\nJSON\n<%= config.bin %> commitments preflight --from-json commitment.json\n<%= config.bin %> commitments create --from-json commitment.json --json",
-        "<%= config.bin %> commitments create --agent <agent-id> --title \"Keep CI healthy\" --outcome \"Failed checks are repaired\" --watch github --github-event check_run_failed --event-driven --delivery draft-pr --repo owner/repo --base main --status draft"
+        "# Replace <agent-id> with your Agent ID; this creates a draft, not a running loop.\n# In \"policy\", 0 is a ZERO budget (nothing may run or be spent), not \"no limit\".\n# To remove a limit set it to null (e.g. \"maxCostUsdPerDay\": null) or leave the key out.\ncat > commitment.json <<'JSON'\n{\n  \"agentId\": \"<agent-id>\",\n  \"title\": \"Daily queue review\",\n  \"status\": \"draft\",\n  \"target\": { \"outcome\": \"Queue changes are reviewed\" },\n  \"cadence\": { \"mode\": \"interval\", \"intervalMs\": 3600000, \"activeHours\": { \"start\": \"09:00\", \"end\": \"22:00\" }, \"daysOfWeek\": [\"mon\", \"tue\", \"wed\", \"thu\", \"fri\"], \"timezone\": \"Asia/Shanghai\" },\n  \"watchedSources\": [{\n    \"source\": \"agent_run\",\n    \"config\": { \"keys\": [\n      { \"key\": \"queue.depth\", \"label\": \"Queue depth\", \"requireArtifact\": true,\n        \"changeRule\": { \"mode\": \"numeric_delta\", \"minDelta\": 2, \"absoluteFloor\": 1 } },\n      \"queue.status\"\n    ] }\n  }],\n  \"policy\": {\n    \"maxUserNudgesPerDay\": 0,\n    \"quietHours\": { \"enabled\": true, \"start\": \"22:00\", \"end\": \"07:00\", \"timezone\": \"Asia/Shanghai\" },\n    \"executionBudget\": { \"maxRunsPerDay\": 0, \"maxObservationRunsPerDay\": 0, \"maxCostUsdPerDay\": 0 }\n  }\n}\nJSON\n<%= config.bin %> commitments preflight --from-json commitment.json\n<%= config.bin %> commitments create --from-json commitment.json --json",
+        "<%= config.bin %> commitments create --agent <agent-id> --title \"Keep CI healthy\" --outcome \"Failed checks are repaired\" --watch github --github-event check_run_failed --event-driven --delivery draft-pr --repo owner/repo --base main --status draft",
+        "# Govern a Commitment with a Compass. There is no flag: \"compassId\" goes in the --from-json body.\n# It must be an active Compass of the same Agent (a draft may name an archived one).\n# The binding cannot be changed later: bind a successor Commitment to another Compass instead.\ncat > commitment.json <<'JSON'\n{\n  \"agentId\": \"<agent-id>\",\n  \"compassId\": \"<compass-id>\",\n  \"title\": \"Keep p99 under 300 ms\",\n  \"status\": \"draft\",\n  \"target\": { \"outcome\": \"p99 API latency stays under 300 ms\" }\n}\nJSON\n<%= config.bin %> commitments create --from-json commitment.json --json\n<%= config.bin %> compass commitments <compass-id> --agent <agent-id>   # lists it once it is bound"
       ],
       "flags": {
         "bare": {
@@ -31743,7 +31744,7 @@
           "type": "boolean"
         },
         "from-json": {
-          "description": "JSON file (or \"-\" for stdin) for fields not exposed as flags. See examples below for daily times, named agent_run keys and zero budgets.",
+          "description": "JSON file (or \"-\" for stdin) for fields not exposed as flags. See examples below for daily times, named agent_run keys, zero budgets and \"compassId\" (binds a Compass; fixed at creation). Quiet hours (no messages to you) go in the JSON as policy.quietHours: {\"enabled\":true,\"start\":\"22:00\",\"end\":\"07:00\",\"timezone\":\"America/Los_Angeles\"}. Times are 24-hour HH:MM (00:00-23:59); the window may cross midnight and its end is not inside it; timezone is an IANA name, and when omitted it is UTC, not your local zone. policy.executionBudget.allowedEventSources limits which event sources may wake the Commitment: an empty or missing list allows every source (it is not \"none\"); name sources to restrict it.",
           "name": "from-json",
           "hasDynamicHelp": false,
           "multiple": false,
@@ -32018,7 +32019,7 @@
           "type": "option"
         },
         "max-nudges": {
-          "description": "Max user nudges per day (0..20)",
+          "description": "Daily limit on messages that interrupt you: a whole number from 0 up (0 mutes it: it never contacts you) or \"unlimited\" to remove the limit. Left unset it is unlimited",
           "name": "max-nudges",
           "hasDynamicHelp": false,
           "multiple": false,
@@ -38114,14 +38115,16 @@
           "required": true
         }
       },
-      "description": "Update a commitment's contract (title, target, cadence, sources). A cadence is manual, an interval or daily clock times; activeHours and daysOfWeek in --from-json select hours and weekdays. No holiday, business-day or trading-calendar fields",
+      "description": "Update a commitment's contract (title, target, cadence, sources). A cadence is manual, an interval or daily clock times; activeHours and daysOfWeek in --from-json select hours and weekdays. No holiday, business-day or trading-calendar fields. The Compass a commitment is bound to (\"compassId\" in the create body) cannot be changed: create a successor commitment instead",
       "examples": [
         "<%= config.bin %> commitments update <commitment-id> --cadence 12h",
         "<%= config.bin %> commitments update <commitment-id> --title \"Ship v2 (Q3)\" --outcome \"v2 is live for all users\"",
         "<%= config.bin %> commitments update <commitment-id> --watch tasks --watch github",
         "<%= config.bin %> commitments update <commitment-id> --criterion \"signups confirmed\" --evaluator metric --measure <measure-id>",
         "<%= config.bin %> commitments update <commitment-id> --agent-directive-file ./review-policy.md",
-        "# Read the current contract and use its version for --if-version.\n<%= config.bin %> commitments show <commitment-id> --json\ncat > commitment-patch.json <<'JSON'\n{\n  \"cadence\": { \"mode\": \"interval\", \"intervalMs\": 3600000, \"activeHours\": { \"start\": \"09:00\", \"end\": \"22:00\" }, \"daysOfWeek\": [\"mon\", \"tue\", \"wed\", \"thu\", \"fri\"], \"timezone\": \"Asia/Shanghai\" },\n  \"policy\": { \"executionBudget\": { \"maxObservationRunsPerDay\": 0 } }\n}\nJSON\n<%= config.bin %> commitments update <commitment-id> --from-json commitment-patch.json --if-version <observed-version> --json"
+        "# Nudges: how many times a day it may interrupt you. 0 mutes it; \"unlimited\" removes the limit.\n<%= config.bin %> commitments update <commitment-id> --max-nudges 2\n<%= config.bin %> commitments update <commitment-id> --max-nudges unlimited",
+        "# Read the current contract and use its version for --if-version.\n<%= config.bin %> commitments show <commitment-id> --json\ncat > commitment-patch.json <<'JSON'\n{\n  \"cadence\": { \"mode\": \"interval\", \"intervalMs\": 3600000, \"activeHours\": { \"start\": \"09:00\", \"end\": \"22:00\" }, \"daysOfWeek\": [\"mon\", \"tue\", \"wed\", \"thu\", \"fri\"], \"timezone\": \"Asia/Shanghai\" },\n  \"policy\": { \"executionBudget\": { \"maxObservationRunsPerDay\": 0 } }\n}\nJSON\n<%= config.bin %> commitments update <commitment-id> --from-json commitment-patch.json --if-version <observed-version> --json",
+        "# Quiet hours: no messages to you from 22:00 to 07:00. Times are HH:MM (00:00-23:59); without a timezone UTC is used.\ncat > quiet-hours.json <<'JSON'\n{ \"policy\": { \"quietHours\": { \"enabled\": true, \"start\": \"22:00\", \"end\": \"07:00\", \"timezone\": \"America/Los_Angeles\" } } }\nJSON\n<%= config.bin %> commitments update <commitment-id> --from-json quiet-hours.json"
       ],
       "flags": {
         "bare": {
@@ -38171,7 +38174,7 @@
           "type": "boolean"
         },
         "from-json": {
-          "description": "JSON patch file (or \"-\" for stdin). See examples below. JSON cadence and watchedSources replace those fields; policy is deep-merged.",
+          "description": "JSON patch file (or \"-\" for stdin). See examples below. JSON cadence and watchedSources replace those fields; policy is deep-merged. Quiet hours (no messages to you) go in the JSON as policy.quietHours: {\"enabled\":true,\"start\":\"22:00\",\"end\":\"07:00\",\"timezone\":\"America/Los_Angeles\"}. Times are 24-hour HH:MM (00:00-23:59); the window may cross midnight and its end is not inside it; timezone is an IANA name, and when omitted it is UTC, not your local zone. policy.executionBudget.allowedEventSources limits which event sources may wake the Commitment: an empty or missing list allows every source (it is not \"none\"); name sources to restrict it.",
           "name": "from-json",
           "hasDynamicHelp": false,
           "multiple": false,
@@ -38368,6 +38371,13 @@
           ],
           "type": "option"
         },
+        "max-nudges": {
+          "description": "Daily limit on messages that interrupt you: a whole number from 0 up (0 mutes it: it never contacts you) or \"unlimited\" to remove the limit. Left unset it is unlimited",
+          "name": "max-nudges",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
         "max-concurrent-runs": {
           "description": "Set 1..100, or \"unlimited\" to remove the owner cap. Finite values require --concurrency-reason.",
           "name": "max-concurrent-runs",
@@ -38727,11 +38737,12 @@
     "compass:create": {
       "aliases": [],
       "args": {},
-      "description": "Create a compass for an agent",
+      "description": "Create a compass for an agent.\n\n--json-body takes the API body as a JSON file; the flags are merged over it.\nEach line below names one field by its full path:\ntitle, domain, reason: strings (reason is what the revision ledger shows)\ninvariantTargets[]: what the agent keeps true\ninvariantTargets[]: AT MOST 25: more is refused with the count sent\ninvariantTargets[].id: optional, unique in the list (a repeat is refused)\ninvariantTargets[].id: default invariant_<position>\ninvariantTargets[].description: required on create\ninvariantTargets[].domainKind: optional; leave it off ONE target\ninvariantTargets[].domainKind: the target without one is the general fallback\ninvariantTargets[].maintainedState[]: list of strings\ninvariantTargets[].successMetrics[]: list of strings\ninvariantTargets[].boundaries[]: list of strings\ninvariantTargets[].cadence, .escalation, .stateMonitor: advanced\ninvariantTargets[].learnedTactics[]: advanced; see docs/cli/SKRR_COMPASS.md\nautonomyDefaults.mode: off | suggestions_only | ask_first | auto_run_limited\nautonomyDefaults.mode: auto_run (short forms: suggest, auto)\nautonomyDefaults.quietHours = {\"enabled\":true,\"start\":\"22:00\",\"end\":\"07:00\"}\nautonomyDefaults.quietHours.start, .end: HH:MM, 00:00 to 23:59\nautonomyDefaults.quietHours: start must differ from end; refused otherwise\nautonomyDefaults.quietHours.timezone: an IANA zone, e.g. America/New_York\ncommunicationDefaults: mode, destination, fallbackDestination, quietHours\ncommunicationDefaults.allowedDestinations[]: list of strings\ncommunicationDefaults.requireApprovalRiskLevels[]: list of strings\ncommunicationDefaults: any other key is stored as a note and never read\nrules[]: owner-enforced, Agent owner only; see docs/cli/SKRR_COMPASS.md\n\nTo govern a Commitment with this compass, put \"compassId\" in the Commitment's --from-json create body (see: commitments create --help). The binding is fixed at creation.",
       "examples": [
         "<%= config.bin %> compass create --agent agent_abc --title \"Production reliability\" --domain reliability",
         "<%= config.bin %> compass create --agent agent_abc --title \"FinOps\" --invariant \"Cloud spend stays under $10k/mo\"",
-        "<%= config.bin %> compass create --agent agent_abc --json-body ./compass.json"
+        "<%= config.bin %> compass create --agent agent_abc --json-body ./compass.json",
+        "# compass.json\n{\n  \"title\": \"Production reliability\",\n  \"invariantTargets\": [\n    { \"id\": \"api-latency\", \"domainKind\": \"reliability\", \"description\": \"p99 API latency stays under 300 ms\" },\n    { \"id\": \"general\", \"description\": \"Nothing the owner has not seen ships on a Friday\" }\n  ],\n  \"autonomyDefaults\": {\n    \"mode\": \"ask_first\",\n    \"quietHours\": { \"enabled\": true, \"start\": \"22:00\", \"end\": \"07:00\", \"timezone\": \"America/New_York\" }\n  }\n}\n<%= config.bin %> compass create --agent agent_abc --json-body compass.json"
       ],
       "flags": {
         "bare": {
@@ -38796,14 +38807,14 @@
           "type": "option"
         },
         "invariant": {
-          "description": "Invariant target description (repeatable). The state the agent keeps true.",
+          "description": "Invariant target description (repeatable, at most 25). The state the agent keeps true. Each gets the id invariant_<position> and no domainKind: use --json-body for ids and domains.",
           "name": "invariant",
           "hasDynamicHelp": false,
           "multiple": true,
           "type": "option"
         },
         "json-body": {
-          "description": "Path to a JSON file with the full body (merged under the flags)",
+          "description": "Path to a JSON file with the full body (merged under the flags). Field names and limits are listed in the description above.",
           "name": "json-body",
           "hasDynamicHelp": false,
           "multiple": false,
@@ -38838,6 +38849,10 @@
         }
       },
       "description": "Read a Compass policy revision, effective defaults and field provenance",
+      "examples": [
+        "<%= config.bin %> compass effective-policy agch_abc123 --agent agent_xyz",
+        "<%= config.bin %> compass effective-policy agch_abc123 --agent agent_xyz --json"
+      ],
       "flags": {
         "bare": {
           "description": "Bare mode — ignore keychain/file credential sources. Token must come from env or --token.",
@@ -39010,7 +39025,8 @@
       "description": "Restore an earlier compass version (as a NEW forward revision)",
       "examples": [
         "<%= config.bin %> compass revert agch_abc --agent agent_xyz --to-version 3",
-        "<%= config.bin %> compass revert agch_abc --agent agent_xyz --to-version 3 --reason \"new SLO was wrong\""
+        "<%= config.bin %> compass revert agch_abc --agent agent_xyz --to-version 3 --reason \"new SLO was wrong\"",
+        "<%= config.bin %> compass revert agch_abc --agent agent_xyz --to-version 3 --expected-version 9"
       ],
       "flags": {
         "bare": {
@@ -39074,6 +39090,13 @@
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
+        },
+        "expected-version": {
+          "description": "Compass version this revert is based on; it is refused if the compass moved. Defaults to the version read at the start of this command.",
+          "name": "expected-version",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
         }
       },
       "hasDynamicHelp": false,
@@ -39157,7 +39180,7 @@
           "type": "option"
         },
         "limit": {
-          "description": "Max revisions (1..100)",
+          "description": "Max revisions (1..100, default 20); newest first",
           "name": "limit",
           "hasDynamicHelp": false,
           "multiple": false,
@@ -39272,7 +39295,7 @@
           "required": true
         }
       },
-      "description": "Append a learned tactic to a compass",
+      "description": "Record a learned tactic on a compass (appends, or updates the tactic with the same --id)",
       "examples": [
         "<%= config.bin %> compass tactic agch_abc --agent agent_xyz --description \"Roll back before paging on a deploy regression\""
       ],
@@ -39333,7 +39356,7 @@
           "type": "option"
         },
         "id": {
-          "description": "Stable tactic ID (updates that entry instead of adding one)",
+          "description": "Stable tactic ID. A known ID with a different description updates that entry; with the same description nothing is written.",
           "name": "id",
           "hasDynamicHelp": false,
           "multiple": false,
@@ -39462,7 +39485,7 @@
           "required": true
         }
       },
-      "description": "Update a compass (bumps the version, writes a revision)",
+      "description": "Update a compass (bumps the version, writes a revision).\n\n--json-body takes the API body as a JSON file; the flags are merged over it.\nEach line below names one field by its full path:\ntitle, domain, reason: strings (reason is what the revision ledger shows)\ninvariantTargets[]: what the agent keeps true\ninvariantTargets[]: AT MOST 25: more is refused with the count sent\ninvariantTargets[].id: optional, unique in the list (a repeat is refused)\ninvariantTargets[].id: default invariant_<position>\ninvariantTargets[].description: required on create\ninvariantTargets[].domainKind: optional; leave it off ONE target\ninvariantTargets[].domainKind: the target without one is the general fallback\ninvariantTargets[].maintainedState[]: list of strings\ninvariantTargets[].successMetrics[]: list of strings\ninvariantTargets[].boundaries[]: list of strings\ninvariantTargets[].cadence, .escalation, .stateMonitor: advanced\ninvariantTargets[].learnedTactics[]: advanced; see docs/cli/SKRR_COMPASS.md\nautonomyDefaults.mode: off | suggestions_only | ask_first | auto_run_limited\nautonomyDefaults.mode: auto_run (short forms: suggest, auto)\nautonomyDefaults.quietHours = {\"enabled\":true,\"start\":\"22:00\",\"end\":\"07:00\"}\nautonomyDefaults.quietHours.start, .end: HH:MM, 00:00 to 23:59\nautonomyDefaults.quietHours: start must differ from end; refused otherwise\nautonomyDefaults.quietHours.timezone: an IANA zone, e.g. America/New_York\ncommunicationDefaults: mode, destination, fallbackDestination, quietHours\ncommunicationDefaults.allowedDestinations[]: list of strings\ncommunicationDefaults.requireApprovalRiskLevels[]: list of strings\ncommunicationDefaults: any other key is stored as a note and never read\nrules[]: owner-enforced, Agent owner only; see docs/cli/SKRR_COMPASS.md\n\nOn update, invariantTargets (and --invariant) REPLACE the whole list, so send every target you want to keep; identity, scope, autonomyDefaults and communicationDefaults merge field by field onto what is stored; rules replace the list. An archived compass stays archived unless you pass --status active.",
       "examples": [
         "<%= config.bin %> compass update agch_abc --agent agent_xyz --title \"Reliability & cost\"",
         "<%= config.bin %> compass update agch_abc --agent agent_xyz --invariant \"p99 under 300ms\" --reason \"new SLO\"",
@@ -39543,7 +39566,7 @@
           "type": "option"
         },
         "invariant": {
-          "description": "Invariant target description (repeatable; REPLACES the list)",
+          "description": "Invariant target description (repeatable, at most 25; REPLACES the list). Each gets the id invariant_<position> and no domainKind, so it drops the ids and domains of the targets it replaces: use --json-body to keep them.",
           "name": "invariant",
           "hasDynamicHelp": false,
           "multiple": true,
@@ -39564,7 +39587,7 @@
           "type": "option"
         },
         "json-body": {
-          "description": "Path to a JSON file with the full body",
+          "description": "Path to a JSON file with the body (merged under the flags). Field names and limits are listed in the description above.",
           "name": "json-body",
           "hasDynamicHelp": false,
           "multiple": false,
@@ -49382,6 +49405,13 @@
           "multiple": false,
           "type": "option"
         },
+        "idempotency-key": {
+          "description": "Stable key for retries of this exact Goal creation request",
+          "name": "idempotency-key",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
         "description": {
           "description": "Goal description",
           "name": "description",
@@ -55649,8 +55679,12 @@
             "approved",
             "executing",
             "waiting",
-            "completed",
+            "followed_up",
+            "reopened",
+            "resolved",
             "dismissed",
+            "snoozed",
+            "expired",
             "failed"
           ],
           "type": "option"
@@ -68681,11 +68715,14 @@
           "required": true
         }
       },
-      "description": "Rename a machine, or set its description and tags",
+      "description": "Rename a machine, set its description, tags and icon",
       "examples": [
         "<%= config.bin %> machines update 03548116 --name \"Work laptop\"",
         "<%= config.bin %> machines update 03548116 --tag personal --tag macbook",
-        "<%= config.bin %> machines update 03548116 --clear-tags"
+        "<%= config.bin %> machines update 03548116 --clear-tags",
+        "<%= config.bin %> machines update 03548116 --icon laptop",
+        "<%= config.bin %> machines update 03548116 --icon none",
+        "<%= config.bin %> machines update 03548116 --icon-file ./mac.png"
       ],
       "flags": {
         "bare": {
@@ -68756,6 +68793,26 @@
           "name": "clear-tags",
           "allowNo": false,
           "type": "boolean"
+        },
+        "icon": {
+          "description": "Icon for this machine: monitor, laptop, server, cpu, hard-drive, cloud, terminal, database, globe, home, building, briefcase, rocket, gamepad, zap, shield, box, container, router, smartphone. \"none\" goes back to the default.",
+          "exclusive": [
+            "icon-file"
+          ],
+          "name": "icon",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "icon-file": {
+          "description": "Use your own image as the icon (.png, .jpg, .jpeg, .webp or .gif). It is resized to a square.",
+          "exclusive": [
+            "icon"
+          ],
+          "name": "icon-file",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
         }
       },
       "hasDynamicHelp": false,
@@ -75954,7 +76011,7 @@
           "type": "option"
         },
         "max-active": {
-          "description": "Soft cap on simultaneously active commitments",
+          "description": "Soft cap on simultaneously active commitments (0 = no cap)",
           "name": "max-active",
           "hasDynamicHelp": false,
           "multiple": false,
@@ -76107,7 +76164,9 @@
         "<%= config.bin %> northstars governance configure nst_abc123 --analysis agent_assisted --reviewer-agent agent_xyz",
         "<%= config.bin %> northstars governance configure nst_abc123 --execution approval",
         "<%= config.bin %> northstars governance configure nst_abc123 --execution bounded_auto --allow request_commitment_check --max-auto-per-day 3",
-        "<%= config.bin %> northstars governance configure nst_abc123 --protect cmt_1 --protect cmt_2"
+        "<%= config.bin %> northstars governance configure nst_abc123 --protect cmt_1 --protect cmt_2",
+        "<%= config.bin %> northstars governance configure nst_abc123 --clear-protected",
+        "<%= config.bin %> northstars governance configure nst_abc123 --clear-max-runs-per-day"
       ],
       "flags": {
         "bare": {
@@ -76161,7 +76220,7 @@
           "type": "option"
         },
         "execution": {
-          "description": "How much write authority a review outcome carries",
+          "description": "What happens to management intents: advisory records them (none is applied), approval asks first, bounded_auto applies a narrow set. In every mode a review still writes each linked active commitment's allocation (cadence band, run share); it never pauses, resumes, reprioritizes or checks in advisory",
           "name": "execution",
           "hasDynamicHelp": false,
           "multiple": false,
@@ -76219,12 +76278,24 @@
           "type": "option"
         },
         "protect": {
-          "description": "Commitment the governor may never touch (repeatable; replaces the current list)",
+          "description": "Commitment the governor may never touch (repeatable; replaces the current list; --clear-protected empties it)",
+          "exclusive": [
+            "clear-protected"
+          ],
           "name": "protect",
           "hasDynamicHelp": false,
           "multiple": true,
           "type": "option"
         },
+        "clear-protected": {
+          "description": "Remove every protected commitment (the list becomes empty)",
+          "exclusive": [
+            "protect"
+          ],
+          "name": "clear-protected",
+          "allowNo": false,
+          "type": "boolean"
+        },
         "max-intents-per-review": {
           "description": "Cap on intents per review",
           "name": "max-intents-per-review",
@@ -76276,25 +76347,61 @@
         },
         "max-observation-runs-per-day": {
           "description": "Opt-in portfolio observation runs per UTC day",
+          "exclusive": [
+            "clear-max-observation-runs-per-day"
+          ],
           "name": "max-observation-runs-per-day",
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
         },
+        "clear-max-observation-runs-per-day": {
+          "description": "Un-set the observation ceiling (0 means never look; un-set means no ceiling)",
+          "exclusive": [
+            "max-observation-runs-per-day"
+          ],
+          "name": "clear-max-observation-runs-per-day",
+          "allowNo": false,
+          "type": "boolean"
+        },
         "max-runs-per-day": {
           "description": "Portfolio-wide action run budget (execution, NOT attention)",
+          "exclusive": [
+            "clear-max-runs-per-day"
+          ],
           "name": "max-runs-per-day",
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
         },
+        "clear-max-runs-per-day": {
+          "description": "Un-set the action run budget (0 is a setting, not un-set)",
+          "exclusive": [
+            "max-runs-per-day"
+          ],
+          "name": "clear-max-runs-per-day",
+          "allowNo": false,
+          "type": "boolean"
+        },
         "max-concurrent-runs": {
-          "description": "Portfolio concurrency cap",
+          "description": "Portfolio concurrency cap (recorded, not yet enforced: nothing limits concurrent runs yet)",
+          "exclusive": [
+            "clear-max-concurrent-runs"
+          ],
           "name": "max-concurrent-runs",
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
         },
+        "clear-max-concurrent-runs": {
+          "description": "Un-set the concurrency cap",
+          "exclusive": [
+            "max-concurrent-runs"
+          ],
+          "name": "clear-max-concurrent-runs",
+          "allowNo": false,
+          "type": "boolean"
+        },
         "critical-reserve": {
           "description": "Fraction of the execution budget held for critical commitments (0..1)",
           "name": "critical-reserve",
@@ -76396,6 +76503,110 @@
         "show.js"
       ]
     },
+    "northstars:intents": {
+      "aliases": [],
+      "args": {
+        "northstarId": {
+          "description": "Northstar ID (omit to see the subcommands)",
+          "name": "northstarId",
+          "required": false
+        }
+      },
+      "description": "List northstar management intents; subcommands: list, decide (`intents <id>` is `intents list <id>`)",
+      "examples": [
+        "<%= config.bin %> northstars intents nst_abc123",
+        "<%= config.bin %> northstars intents nst_abc123 --status awaiting_approval",
+        "<%= config.bin %> northstars intents list nst_abc123",
+        "<%= config.bin %> northstars intents decide nst_abc123 nsi_xyz --approve"
+      ],
+      "flags": {
+        "bare": {
+          "description": "Bare mode — ignore keychain/file credential sources. Token must come from env or --token.",
+          "name": "bare",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "token": {
+          "description": "Bearer token for this invocation (debugging/impersonation). Overrides env and stored creds.",
+          "name": "token",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "workspace": {
+          "description": "Workspace ID for workspace-scoped requests (also sets X-Workspace-Id).",
+          "name": "workspace",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "profile": {
+          "description": "Which stored session to use. Each profile keeps its own credential and deployment, so signing into one does not sign you out of another. Also OVERSKY_PROFILE. List them with `profiles list`.",
+          "name": "profile",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "raw": {
+          "description": "With --json, keep the Mongo storage fields (_id next to id, __v) that the CLI otherwise strips. Also OVERSKY_CLI_RAW=1.",
+          "name": "raw",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "json": {
+          "description": "Output as JSON",
+          "name": "json",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "status": {
+          "description": "Filter by verdict",
+          "name": "status",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "options": [
+            "advisory",
+            "awaiting_approval",
+            "approved",
+            "applying",
+            "applied",
+            "rejected",
+            "invalidated"
+          ],
+          "type": "option"
+        },
+        "limit": {
+          "description": "Max intents (1..500)",
+          "name": "limit",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "wide": {
+          "description": "Do not clip the WHY column, and keep the machine code beside the reason as [code]",
+          "name": "wide",
+          "allowNo": false,
+          "type": "boolean"
+        }
+      },
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "northstars:intents",
+      "pluginAlias": "@skrr-ai/cli",
+      "pluginName": "@skrr-ai/cli",
+      "pluginType": "core",
+      "strict": true,
+      "enableJsonFlag": false,
+      "autonomousCredentialPolicy": "delegated",
+      "resolveSpaceFlag": true,
+      "isESM": false,
+      "relativePath": [
+        "dist",
+        "commands",
+        "northstars",
+        "intents.js"
+      ]
+    },
     "northstars:intents:decide": {
       "aliases": [],
       "args": {
@@ -76511,9 +76722,9 @@
       },
       "description": "List northstar management intents (default: everything recent)",
       "examples": [
-        "<%= config.bin %> northstars intents nst_abc123",
-        "<%= config.bin %> northstars intents nst_abc123 --status awaiting_approval",
-        "<%= config.bin %> northstars intents nst_abc123 --status applied --json"
+        "<%= config.bin %> northstars intents list nst_abc123",
+        "<%= config.bin %> northstars intents list nst_abc123 --status awaiting_approval",
+        "<%= config.bin %> northstars intents list nst_abc123 --status applied --json"
       ],
       "flags": {
         "bare": {
@@ -76577,6 +76788,12 @@
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
+        },
+        "wide": {
+          "description": "Do not clip the WHY column, and keep the machine code beside the reason as [code]",
+          "name": "wide",
+          "allowNo": false,
+          "type": "boolean"
         }
       },
       "hasDynamicHelp": false,
@@ -76745,11 +76962,18 @@
           "type": "option"
         },
         "limit": {
-          "description": "Max results (1..100)",
+          "description": "Max results (1..100, default 50)",
           "name": "limit",
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
+        },
+        "cursor": {
+          "description": "Continue from the next_cursor a previous page returned",
+          "name": "cursor",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
         }
       },
       "hasDynamicHelp": false,
@@ -76770,6 +76994,93 @@
         "list.js"
       ]
     },
+    "northstars:recommendations": {
+      "aliases": [],
+      "args": {
+        "northstarId": {
+          "description": "Northstar ID (omit to see the subcommands)",
+          "name": "northstarId",
+          "required": false
+        }
+      },
+      "description": "List a northstar's recommendations; subcommands: list, apply, dismiss (`recommendations <id>` is `recommendations list <id>`)",
+      "examples": [
+        "<%= config.bin %> northstars recommendations nst_abc123",
+        "<%= config.bin %> northstars recommendations nst_abc123 --status open",
+        "<%= config.bin %> northstars recommendations list nst_abc123",
+        "<%= config.bin %> northstars recommendations apply nst_abc123 <rec-id>"
+      ],
+      "flags": {
+        "bare": {
+          "description": "Bare mode — ignore keychain/file credential sources. Token must come from env or --token.",
+          "name": "bare",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "token": {
+          "description": "Bearer token for this invocation (debugging/impersonation). Overrides env and stored creds.",
+          "name": "token",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "workspace": {
+          "description": "Workspace ID for workspace-scoped requests (also sets X-Workspace-Id).",
+          "name": "workspace",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "profile": {
+          "description": "Which stored session to use. Each profile keeps its own credential and deployment, so signing into one does not sign you out of another. Also OVERSKY_PROFILE. List them with `profiles list`.",
+          "name": "profile",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "raw": {
+          "description": "With --json, keep the Mongo storage fields (_id next to id, __v) that the CLI otherwise strips. Also OVERSKY_CLI_RAW=1.",
+          "name": "raw",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "json": {
+          "description": "Output as JSON",
+          "name": "json",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "status": {
+          "description": "Filter by status (default: all)",
+          "name": "status",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "options": [
+            "open",
+            "applied",
+            "dismissed"
+          ],
+          "type": "option"
+        }
+      },
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "northstars:recommendations",
+      "pluginAlias": "@skrr-ai/cli",
+      "pluginName": "@skrr-ai/cli",
+      "pluginType": "core",
+      "strict": true,
+      "enableJsonFlag": false,
+      "autonomousCredentialPolicy": "delegated",
+      "resolveSpaceFlag": true,
+      "isESM": false,
+      "relativePath": [
+        "dist",
+        "commands",
+        "northstars",
+        "recommendations.js"
+      ]
+    },
     "northstars:recommendations:apply": {
       "aliases": [],
       "args": {
@@ -76937,8 +77248,8 @@
       },
       "description": "List a northstar's deterministic portfolio recommendations",
       "examples": [
-        "<%= config.bin %> northstars recommendations nst_abc123",
-        "<%= config.bin %> northstars recommendations nst_abc123 --status open"
+        "<%= config.bin %> northstars recommendations list nst_abc123",
+        "<%= config.bin %> northstars recommendations list nst_abc123 --status open"
       ],
       "flags": {
         "bare": {
@@ -77065,6 +77376,12 @@
           "name": "json",
           "allowNo": false,
           "type": "boolean"
+        },
+        "wide": {
+          "description": "Do not clip the WHY column, and keep the machine code beside the reason as [code]",
+          "name": "wide",
+          "allowNo": false,
+          "type": "boolean"
         }
       },
       "hasDynamicHelp": false,
@@ -77166,6 +77483,12 @@
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
+        },
+        "wide": {
+          "description": "Do not clip the WHY column, and keep the machine code beside the reason as [code]",
+          "name": "wide",
+          "allowNo": false,
+          "type": "boolean"
         }
       },
       "hasDynamicHelp": false,
@@ -77454,7 +77777,7 @@
           "type": "option"
         },
         "max-active": {
-          "description": "Soft cap on active commitments",
+          "description": "Soft cap on active commitments (0 = no cap)",
           "name": "max-active",
           "hasDynamicHelp": false,
           "multiple": false,
@@ -142597,5 +142920,5 @@
       ]
     }
   },
-  "version": "0.1.126"
+  "version": "0.1.128"
 }