@skrr-ai/cli 0.1.126 → 0.1.128

package/dist/commands/followups/plans/create.js

@@ -5,6 +5,7 @@ const base_command_1 = require("../../../base-command");
 const prompt_1 = require("../../../lib/prompt");
 const lookbackPlans_1 = require("../../../lib/lookbackPlans");
 const lookbackPlanHelp_1 = require("../../../lib/lookbackPlanHelp");
+const followups_1 = require("../../../lib/followups");
 class LookbackPlansCreate extends base_command_1.BaseCommand {
     static description = 'Schedule a bounded plan of 1–10 lookbacks, each free to stay silent\n\n' + lookbackPlanHelp_1.LOOKBACK_PLAN_INPUT_HELP +
         '\n\nCreate also accepts {"agentId":"...","pinnedConversationId":"...","plan":{...}}. Source and delivery destination are separate; pin the original conversation to return there.';
@@ -27,7 +28,17 @@ class LookbackPlansCreate extends base_command_1.BaseCommand {
         }
         try {
             const result = await lookbackPlans_1.lookbackPlansApi.create(body);
-            this.log(flags.json ? JSON.stringify(result, null, 2) : (0, lookbackPlans_1.lookbackArmingLine)(result));
+            if (flags.json) {
+                this.log(JSON.stringify(result, null, 2));
+                return;
+            }
+            // The four create commands say when the server recorded weaker provenance than the CLI
+            // claimed; a plan is recorded the same way (`producerDowngraded` is in the route's answer)
+            // and only `plans show` ever said so.
+            const notice = (0, followups_1.producerDowngradeNotice)(result);
+            if (notice)
+                this.log(notice);
+            this.log((0, lookbackPlans_1.lookbackArmingLine)(result));
         }
         catch (err) {
             if ((0, lookbackPlans_1.isLookbackMutationOutcomeUnknown)(err)) {

package/dist/commands/followups/show.js

@@ -9,6 +9,7 @@ const GATE_LABEL = {
     exempt_user_directed: 'fires without approval (you asked for it)',
     exempt_system: 'fires without approval (system)',
     user_directed_guarded: 'fires without approval (you asked for it); still held by quiet hours, approval-only action classes and the spend cap',
+    exempt_notification: 'delivered to you as a notification (no agent turn, so no approval step applies)',
     autonomy_ladder: "follows the agent's autonomy mode",
     approval_ladder: 'needs approval unless the autonomy mode allows it',
 };
@@ -49,6 +50,12 @@ class FollowupsShow extends base_command_1.BaseCommand {
                 'settled',
                 row.terminal ? `${row.terminalAt ?? '—'} by ${row.terminalBy ?? 'unknown'}` : undefined,
             ],
+            [
+                'role',
+                row.slaFallback
+                    ? 'the SLA backstop of a paired watch, not a second watch: it escalates that watch when its wait outlives the deadline, and cancelling it leaves the watch without one'
+                    : undefined,
+            ],
             ['deadline', row.deadlineAt],
             [
                 'waiting',
@@ -56,6 +63,12 @@ class FollowupsShow extends base_command_1.BaseCommand {
                     ? `on an offline machine since ${row.parkedAt} (escalates after 60 minutes)`
                     : undefined,
             ],
+            [
+                'held',
+                row.held && !row.terminal
+                    ? `moved to ${row.held.until} — ${row.held.note ?? row.held.reason ?? 'it could not run when it came due'}`
+                    : undefined,
+            ],
             ['escalated to', row.escalatedInitiativeId],
         ]) {
             if (value)

package/dist/commands/followups/watch.js

@@ -242,7 +242,7 @@ class FollowupsWatch extends base_command_1.BaseCommand {
             this.log(producerNotice);
         const row = response.followup;
         if (response.reused) {
-            this.log(`Already armed: ${row?.id} — an identical watch exists and was not duplicated.`);
+            this.log((0, followups_1.reusedWithoutChangeMessage)(row, 'an identical watch'));
             return;
         }
         if (response.dropped) {

package/dist/commands/goals/create.d.ts

@@ -6,6 +6,7 @@ export default class GoalsCreate extends BaseCommand {
         json: import("@oclif/core/interfaces").BooleanFlag<boolean>;
         'from-json': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
         title: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        'idempotency-key': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
         description: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
         level: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
         'target-date': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;

package/dist/commands/goals/create.js

@@ -24,6 +24,9 @@ class GoalsCreate extends base_command_1.BaseCommand {
             description: 'Path to a JSON file (or "-" for stdin) to use as the request body',
         }),
         title: core_1.Flags.string({ description: 'Goal title (required unless set via --from-json)' }),
+        'idempotency-key': core_1.Flags.string({
+            description: 'Stable key for retries of this exact Goal creation request',
+        }),
         description: core_1.Flags.string({ description: 'Goal description' }),
         level: core_1.Flags.string({
             description: 'Goal level',
@@ -126,7 +129,7 @@ class GoalsCreate extends base_command_1.BaseCommand {
             payload.labelIds = resolvedLabelIds;
         let created;
         try {
-            created = await data_provider_1.dataService.createGoal(payload);
+            created = await data_provider_1.dataService.createGoal(payload, flags['idempotency-key'] ? { idempotencyKey: flags['idempotency-key'] } : undefined);
             if (flags.space) {
                 const goalId = created.id;
                 if (!goalId || typeof goalId !== 'string') {

package/dist/commands/goals/planner-config.d.ts

@@ -35,6 +35,17 @@ export type GoalPlannerView = {
      * choose between those two, because the CLI cannot tell them apart.
      */
     tickLockedAt: string | null;
+    /**
+     * Why an armed planner will not tick, or null. The scheduler only creates the planner's trigger
+     * for an ACTIVE, unarchived Goal (`GoalPlanner.shouldScheduleGoal`); for any other status the
+     * cadence is stored and `nextTickAt` is set, but nothing ever fires. Stating the cadence alone
+     * read as "armed" (dogfooded: a `planned` Goal showed `nextTickAt` in the past for good).
+     */
+    notRunning: {
+        goalId: string | null;
+        reason: 'archived' | 'status';
+        status: string | null;
+    } | null;
 };
 /** Read the planner state off a Goal document (lean or typed). */
 export declare function goalPlannerView(goal: Record<string, unknown> | undefined | null): GoalPlannerView;

package/dist/commands/goals/planner-config.js

@@ -13,6 +13,14 @@ function goalPlannerView(goal) {
     const g = (goal ?? {});
     const tickIntervalMs = typeof g.tickIntervalMs === 'number' ? g.tickIntervalMs : null;
     const enabled = tickIntervalMs != null;
+    const status = str(g.status);
+    const notRunning = !enabled
+        ? null
+        : g.archivedAt
+            ? { goalId: str(g.id), reason: 'archived', status }
+            : status && status !== 'active'
+                ? { goalId: str(g.id), reason: 'status', status }
+                : null;
     return {
         enabled,
         tickIntervalMs,
@@ -21,6 +29,7 @@ function goalPlannerView(goal) {
         nextTickAt: enabled ? str(g.nextTickAt) : null,
         lastTickedAt: str(g.lastTickedAt),
         tickLockedAt: str(g.tickLockedAt),
+        notRunning,
     };
 }
 /**
@@ -44,6 +53,13 @@ function renderGoalPlannerLines(view) {
         lines.push(`  nextTickAt:      ${view.nextTickAt}`);
     if (view.lastTickedAt)
         lines.push(`  lastTickedAt:    ${view.lastTickedAt}`);
+    if (view.notRunning) {
+        const { goalId, reason, status } = view.notRunning;
+        lines.push(reason === 'archived'
+            ? '  not running:     this Goal is archived, and the planner only ticks for an active Goal'
+            : `  not running:     this Goal is ${status}, and the planner only ticks for an active Goal` +
+                ` — \`skrr goals update ${goalId ?? '<goal-id>'} --status active\``);
+    }
     if (view.tickLockedAt) {
         lines.push(`  tickLockedAt:    ${view.tickLockedAt} (a claimed tick has not released this lock)`);
     }

package/dist/commands/goals/revisions.js

@@ -4,20 +4,7 @@ const core_1 = require("@oclif/core");
 const data_provider_1 = require("@skrr-ai/data-provider");
 const base_command_1 = require("../../base-command");
 const format_1 = require("../../lib/format");
-/**
- * The one class of goal change this log does not contain.
- *
- * `PATCH /api/goals/:goalId/planner-config` writes the goal through
- * `Goal.findOneAndUpdate` directly rather than `GoalModel.updateGoal`, which is
- * where `RevisionService` is called from — so arming, re-timing or disarming the
- * auto-planner (and any `maxActiveTasks` change made through that route) leaves
- * no revision. "Who turned the planner on for this goal, and when" is the audit
- * question a shared goal actually raises, and the table answers it with silence.
- *
- * Naming the gap is the honest thing the CLI can do; closing it is a server
- * change. DELETE THIS FOOTER once the planner-config route records a revision.
- */
-const PLANNER_GAP_NOTE = 'Note: auto-planner changes made with `goals planner-config` are not recorded as revisions.';
+const revision_actor_1 = require("../../lib/revision-actor");
 class GoalsRevisions extends base_command_1.BaseCommand {
     static description = 'List revisions for a goal';
     static examples = [
@@ -47,25 +34,22 @@ class GoalsRevisions extends base_command_1.BaseCommand {
         const items = result?.data ?? [];
         if (items.length === 0) {
             this.log('No revisions.');
-            this.log(PLANNER_GAP_NOTE);
             return;
         }
         const rows = items.map((rev) => ({
             version: String(rev.revisionNumber ?? '-'),
             changeType: String(rev.changeType ?? '-'),
-            user: String(rev.userId ?? '-'),
+            user: (0, revision_actor_1.revisionActorLabel)(rev),
             changes: String(Array.isArray(rev.changes) ? rev.changes.length : 0),
             when: rev.createdAt ? String(rev.createdAt).slice(0, 19).replace('T', ' ') : '-',
         }));
         (0, format_1.renderTable)(rows, [
             { key: 'version', header: 'REV' },
             { key: 'changeType', header: 'CHANGE' },
-            { key: 'user', header: 'USER' },
+            { key: 'user', header: 'ACTOR' },
             { key: 'changes', header: 'FIELDS' },
             { key: 'when', header: 'AT' },
         ], (line) => this.log(line));
-        this.log('');
-        this.log(PLANNER_GAP_NOTE);
     }
 }
 exports.default = GoalsRevisions;

package/dist/commands/machines/update.d.ts

@@ -1,11 +1,11 @@
 import { BaseCommand } from '../../base-command';
 /**
- * Rename / describe / tag a machine.
+ * Rename / describe / tag a machine, and choose its icon.
  *
  * `preferences` is the ONLY user-editable part of a machine — identities,
  * capabilities and lifecycle stay authoritative in the daemon, harness and
- * lease records this aggregate reads. The name set here is yours: it does not
- * rename the machine for anyone else.
+ * lease records this aggregate reads. The name and icon set here are yours: they
+ * do not rename or re-draw the machine for anyone else.
  */
 export default class MachinesUpdate extends BaseCommand {
     static description: string;
@@ -19,6 +19,8 @@ export default class MachinesUpdate extends BaseCommand {
         description: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
         tag: import("@oclif/core/interfaces").OptionFlag<string[] | undefined, import("@oclif/core/interfaces").CustomOptions>;
         'clear-tags': import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        icon: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        'icon-file': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
     };
     run(): Promise<void>;
 }

package/dist/commands/machines/update.js

@@ -1,22 +1,29 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 const core_1 = require("@oclif/core");
+const promises_1 = require("node:fs/promises");
+const node_path_1 = require("node:path");
+const data_provider_1 = require("@skrr-ai/data-provider");
 const base_command_1 = require("../../base-command");
+const agent_visual_refs_1 = require("../../lib/agent-visual-refs");
 const machines_1 = require("../../lib/machines");
 /**
- * Rename / describe / tag a machine.
+ * Rename / describe / tag a machine, and choose its icon.
  *
  * `preferences` is the ONLY user-editable part of a machine — identities,
  * capabilities and lifecycle stay authoritative in the daemon, harness and
- * lease records this aggregate reads. The name set here is yours: it does not
- * rename the machine for anyone else.
+ * lease records this aggregate reads. The name and icon set here are yours: they
+ * do not rename or re-draw the machine for anyone else.
  */
 class MachinesUpdate extends base_command_1.BaseCommand {
-    static description = 'Rename a machine, or set its description and tags';
+    static description = 'Rename a machine, set its description, tags and icon';
     static examples = [
         '<%= config.bin %> machines update 03548116 --name "Work laptop"',
         '<%= config.bin %> machines update 03548116 --tag personal --tag macbook',
         '<%= config.bin %> machines update 03548116 --clear-tags',
+        '<%= config.bin %> machines update 03548116 --icon laptop',
+        '<%= config.bin %> machines update 03548116 --icon none',
+        '<%= config.bin %> machines update 03548116 --icon-file ./mac.png',
     ];
     static args = {
         machine: core_1.Args.string({
@@ -37,6 +44,15 @@ class MachinesUpdate extends base_command_1.BaseCommand {
             description: 'Remove all tags',
             exclusive: ['tag'],
         }),
+        icon: core_1.Flags.string({
+            description: `Icon for this machine: ${data_provider_1.MACHINE_ICON_PRESET_IDS.join(', ')}. ` +
+                '"none" goes back to the default.',
+            exclusive: ['icon-file'],
+        }),
+        'icon-file': core_1.Flags.string({
+            description: 'Use your own image as the icon (.png, .jpg, .jpeg, .webp or .gif). It is resized to a square.',
+            exclusive: ['icon'],
+        }),
     };
     async run() {
         this.requireAuth();
@@ -50,17 +66,61 @@ class MachinesUpdate extends base_command_1.BaseCommand {
             patch.tags = [];
         else if (flags.tag)
             patch.tags = flags.tag;
-        if (Object.keys(patch).length === 0) {
+        if (flags.icon !== undefined) {
+            try {
+                patch.icon = (0, machines_1.parseMachineIconFlag)(flags.icon);
+            }
+            catch (err) {
+                this.error(err.message, { exit: 1 });
+            }
+        }
+        // Everything that can be refused without a request is refused before one is
+        // sent, so a typo'd path never leaves the other changes half applied.
+        let upload;
+        const iconFile = flags['icon-file'];
+        if (iconFile !== undefined) {
+            const type = (0, agent_visual_refs_1.imageUploadMimeType)(iconFile);
+            if (!type) {
+                this.error(`--icon-file must be a .png, .jpg, .jpeg, .webp or .gif image (got ${(0, node_path_1.basename)(iconFile)}).`, { exit: 1 });
+            }
+            let bytes;
+            try {
+                bytes = await (0, promises_1.readFile)(iconFile);
+            }
+            catch (err) {
+                this.error(`--icon-file: cannot read ${iconFile} (${err.message}).`, {
+                    exit: 1,
+                });
+            }
+            upload = { bytes, type, filename: (0, node_path_1.basename)(iconFile) };
+        }
+        const hasPatch = Object.keys(patch).length > 0;
+        if (!hasPatch && !upload) {
             // Sending an empty patch would return the machine unchanged and read as
             // success, which is the wrong answer to "I asked you to change something".
-            this.error('Nothing to update. Pass --name, --description, --tag, or --clear-tags.', {
-                exit: 1,
-            });
+            this.error('Nothing to update. Pass --name, --description, --tag, --clear-tags, --icon, or --icon-file.', { exit: 1 });
         }
         let machine;
         try {
             const resolved = (0, machines_1.resolveMachineRef)(await (0, machines_1.listMachines)(), args.machine);
-            machine = await (0, machines_1.updateMachine)(resolved.id, patch);
+            if (hasPatch)
+                machine = await (0, machines_1.updateMachine)(resolved.id, patch);
+            if (upload) {
+                const form = new FormData();
+                // Typed, or the route refuses it as application/octet-stream (OSK-9841).
+                form.append('file', new Blob([new Uint8Array(upload.bytes)], { type: upload.type }), upload.filename);
+                try {
+                    await data_provider_1.dataService.uploadMachineIcon(resolved.id, form);
+                }
+                catch (err) {
+                    if (hasPatch)
+                        this.warn('The other changes were saved, but the icon was not uploaded.');
+                    throw err;
+                }
+                // The upload answers only the icon; read the machine back so what is
+                // printed is what is stored.
+                machine = await (0, machines_1.getMachine)(resolved.id);
+            }
         }
         catch (err) {
             this.handleApiError(err);
@@ -77,6 +137,7 @@ class MachinesUpdate extends base_command_1.BaseCommand {
             this.log(`  description  ${machine.preferences.description}`);
         }
         this.log(`  tags         ${machine.preferences?.tags?.join(', ') || '-'}`);
+        this.log(`  icon         ${(0, machines_1.describeMachineIcon)(machine.preferences?.icon)}`);
     }
 }
 exports.default = MachinesUpdate;

package/dist/commands/northstars/create.js

@@ -31,7 +31,7 @@ class NorthstarsCreate extends base_command_1.BaseCommand {
             min: 0,
         }),
         'max-active': core_1.Flags.integer({
-            description: 'Soft cap on simultaneously active commitments',
+            description: 'Soft cap on simultaneously active commitments (0 = no cap)',
             min: 0,
         }),
         goal: core_1.Flags.string({
@@ -98,6 +98,8 @@ class NorthstarsCreate extends base_command_1.BaseCommand {
         }
         this.log(`Created ${created.id} — ${created.title} (${created.status})`);
         this.log(`URL: ${created.url ?? '-'}`);
+        if (flags['max-active'] === 0)
+            this.log('Attention   max active 0 (no cap)');
         this.log(flags['review-interval-hours'] !== undefined
             ? `Review runs every ${flags['review-interval-hours']}h.`
             : 'Review is manual — set --review-interval-hours or run `skrr northstars review-now`.');

package/dist/commands/northstars/governance/configure.d.ts

@@ -22,6 +22,7 @@ export default class NorthstarsGovernanceConfigure extends BaseCommand {
         allow: import("@oclif/core/interfaces").OptionFlag<string[] | undefined, import("@oclif/core/interfaces").CustomOptions>;
         'require-approval-for': import("@oclif/core/interfaces").OptionFlag<string[] | undefined, import("@oclif/core/interfaces").CustomOptions>;
         protect: import("@oclif/core/interfaces").OptionFlag<string[] | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        'clear-protected': import("@oclif/core/interfaces").BooleanFlag<boolean>;
         'max-intents-per-review': import("@oclif/core/interfaces").OptionFlag<number | undefined, import("@oclif/core/interfaces").CustomOptions>;
         'max-auto-per-review': import("@oclif/core/interfaces").OptionFlag<number | undefined, import("@oclif/core/interfaces").CustomOptions>;
         'max-auto-per-day': import("@oclif/core/interfaces").OptionFlag<number | undefined, import("@oclif/core/interfaces").CustomOptions>;
@@ -30,8 +31,11 @@ export default class NorthstarsGovernanceConfigure extends BaseCommand {
         'max-interval-hours': import("@oclif/core/interfaces").OptionFlag<number | undefined, import("@oclif/core/interfaces").CustomOptions>;
         'max-relative-change': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
         'max-observation-runs-per-day': import("@oclif/core/interfaces").OptionFlag<number | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        'clear-max-observation-runs-per-day': import("@oclif/core/interfaces").BooleanFlag<boolean>;
         'max-runs-per-day': import("@oclif/core/interfaces").OptionFlag<number | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        'clear-max-runs-per-day': import("@oclif/core/interfaces").BooleanFlag<boolean>;
         'max-concurrent-runs': import("@oclif/core/interfaces").OptionFlag<number | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        'clear-max-concurrent-runs': import("@oclif/core/interfaces").BooleanFlag<boolean>;
         'critical-reserve': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
     };
     run(): Promise<void>;

package/dist/commands/northstars/governance/configure.js

@@ -19,6 +19,8 @@ class NorthstarsGovernanceConfigure extends base_command_1.BaseCommand {
         '<%= config.bin %> northstars governance configure nst_abc123 --execution approval',
         '<%= config.bin %> northstars governance configure nst_abc123 --execution bounded_auto --allow request_commitment_check --max-auto-per-day 3',
         '<%= config.bin %> northstars governance configure nst_abc123 --protect cmt_1 --protect cmt_2',
+        '<%= config.bin %> northstars governance configure nst_abc123 --clear-protected',
+        '<%= config.bin %> northstars governance configure nst_abc123 --clear-max-runs-per-day',
     ];
     static args = {
         northstarId: core_1.Args.string({ ignoreStdin: true, description: 'Northstar ID', required: true }),
@@ -30,7 +32,7 @@ class NorthstarsGovernanceConfigure extends base_command_1.BaseCommand {
             options: [...northstars_1.NORTHSTAR_ANALYSIS_MODES],
         }),
         execution: core_1.Flags.string({
-            description: 'How much write authority a review outcome carries',
+            description: "What happens to management intents: advisory records them (none is applied), approval asks first, bounded_auto applies a narrow set. In every mode a review still writes each linked active commitment's allocation (cadence band, run share); it never pauses, resumes, reprioritizes or checks in advisory",
             options: [...northstars_1.NORTHSTAR_EXECUTION_MODES],
         }),
         'reviewer-agent': core_1.Flags.string({
@@ -48,8 +50,13 @@ class NorthstarsGovernanceConfigure extends base_command_1.BaseCommand {
             multiple: true,
         }),
         protect: core_1.Flags.string({
-            description: 'Commitment the governor may never touch (repeatable; replaces the current list)',
+            description: 'Commitment the governor may never touch (repeatable; replaces the current list; --clear-protected empties it)',
             multiple: true,
+            exclusive: ['clear-protected'],
+        }),
+        'clear-protected': core_1.Flags.boolean({
+            description: 'Remove every protected commitment (the list becomes empty)',
+            exclusive: ['protect'],
         }),
         'max-intents-per-review': core_1.Flags.integer({
             description: 'Cap on intents per review',
@@ -88,16 +95,31 @@ class NorthstarsGovernanceConfigure extends base_command_1.BaseCommand {
             description: 'Opt-in portfolio observation runs per UTC day',
             min: 0,
             max: 10000,
+            exclusive: ['clear-max-observation-runs-per-day'],
+        }),
+        'clear-max-observation-runs-per-day': core_1.Flags.boolean({
+            description: 'Un-set the observation ceiling (0 means never look; un-set means no ceiling)',
+            exclusive: ['max-observation-runs-per-day'],
         }),
         'max-runs-per-day': core_1.Flags.integer({
             description: 'Portfolio-wide action run budget (execution, NOT attention)',
             min: 0,
             max: 10000,
+            exclusive: ['clear-max-runs-per-day'],
+        }),
+        'clear-max-runs-per-day': core_1.Flags.boolean({
+            description: 'Un-set the action run budget (0 is a setting, not un-set)',
+            exclusive: ['max-runs-per-day'],
         }),
         'max-concurrent-runs': core_1.Flags.integer({
-            description: 'Portfolio concurrency cap',
+            description: 'Portfolio concurrency cap (recorded, not yet enforced: nothing limits concurrent runs yet)',
             min: 0,
             max: 1000,
+            exclusive: ['clear-max-concurrent-runs'],
+        }),
+        'clear-max-concurrent-runs': core_1.Flags.boolean({
+            description: 'Un-set the concurrency cap',
+            exclusive: ['max-concurrent-runs'],
         }),
         'critical-reserve': core_1.Flags.string({
             description: 'Fraction of the execution budget held for critical commitments (0..1)',
@@ -119,8 +141,17 @@ class NorthstarsGovernanceConfigure extends base_command_1.BaseCommand {
             body.allowedIntentKinds = flags.allow;
         if (flags['require-approval-for'])
             body.requireApprovalFor = flags['require-approval-for'];
-        if (flags.protect)
+        if (flags['clear-protected']) {
+            body.protectedCommitmentIds = [];
+        }
+        else if (flags.protect) {
+            // An empty value used to reach the server and come back as
+            // `protectedCommitmentIds.0: Too small`, a REST field name nobody typed.
+            if (flags.protect.some((id) => id.trim() === '')) {
+                this.error('--protect needs a commitment id. To remove every protected commitment, pass --clear-protected.');
+            }
             body.protectedCommitmentIds = flags.protect;
+        }
         if (flags['max-intents-per-review'] !== undefined) {
             body.maxIntentsPerReview = flags['max-intents-per-review'];
         }
@@ -150,12 +181,21 @@ class NorthstarsGovernanceConfigure extends base_command_1.BaseCommand {
         if (Object.keys(cadencePolicy).length)
             body.cadencePolicy = cadencePolicy;
         const executionBudget = {};
-        if (flags['max-observation-runs-per-day'] !== undefined)
+        // `null` is how the API un-sets a budget; 0 is a setting and is never read as "un-set".
+        if (flags['clear-max-observation-runs-per-day'])
+            executionBudget.maxObservationRunsPerDay = null;
+        else if (flags['max-observation-runs-per-day'] !== undefined)
             executionBudget.maxObservationRunsPerDay = flags['max-observation-runs-per-day'];
-        if (flags['max-runs-per-day'] !== undefined) {
+        if (flags['clear-max-runs-per-day']) {
+            executionBudget.maxRunsPerDay = null;
+        }
+        else if (flags['max-runs-per-day'] !== undefined) {
             executionBudget.maxRunsPerDay = flags['max-runs-per-day'];
         }
-        if (flags['max-concurrent-runs'] !== undefined) {
+        if (flags['clear-max-concurrent-runs']) {
+            executionBudget.maxConcurrentRuns = null;
+        }
+        else if (flags['max-concurrent-runs'] !== undefined) {
             executionBudget.maxConcurrentRuns = flags['max-concurrent-runs'];
         }
         if (flags['critical-reserve'] !== undefined) {
@@ -170,12 +210,16 @@ class NorthstarsGovernanceConfigure extends base_command_1.BaseCommand {
         if (Object.keys(body).length === 0) {
             this.error('Nothing to configure — pass at least one flag.');
         }
+        let written;
         try {
-            await northstars_1.northstarApi.configureGovernance(args.northstarId, body);
+            written = await northstars_1.northstarApi.configureGovernance(args.northstarId, body);
         }
         catch (err) {
             this.handleApiError(err);
         }
+        // The write response says what the server did to the linked commitments; the status
+        // re-read below does not (OSK-21245).
+        const refresh = (0, northstars_1.readAllocationRefresh)(written);
         // Re-read the STATUS rather than echoing the write response: the effective
         // policy is what the server resolved, and readiness (is the reviewer even
         // online?) is the part a configure command must not leave the user guessing.
@@ -187,10 +231,32 @@ class NorthstarsGovernanceConfigure extends base_command_1.BaseCommand {
             this.handleApiError(err);
         }
         if (flags.json) {
-            this.log(JSON.stringify(status, null, 2));
+            this.log(JSON.stringify(refresh
+                ? {
+                    ...status,
+                    allocationsRefreshed: refresh.refreshed,
+                    allocationsPending: refresh.pending,
+                    allocationsRefreshFailed: refresh.failed,
+                }
+                : status, null, 2));
             return;
         }
         (0, northstars_1.renderGovernance)(status, (line) => this.log(line));
+        const summary = (0, northstars_1.describeAllocationRefresh)(refresh, {
+            northstarId: args.northstarId,
+            inputsSent: northstars_1.ALLOCATION_INPUT_FLAGS.some((flag) => flags[flag] !== undefined && flags[flag] !== false),
+            bin: this.config?.bin,
+        });
+        if (summary.lines.length)
+            this.log('');
+        for (const line of summary.lines)
+            this.log(line);
+        for (const warning of summary.warnings)
+            this.warn(warning);
+        if (flags['max-concurrent-runs'] !== undefined) {
+            this.log('');
+            this.log('Note: --max-concurrent-runs is recorded but not yet enforced. Nothing limits concurrent runs across this northstar; each commitment keeps its own concurrency limit.');
+        }
     }
 }
 exports.default = NorthstarsGovernanceConfigure;

package/dist/commands/northstars/intents/decide.d.ts

@@ -7,6 +7,12 @@ import { BaseCommand } from '../../../base-command';
  * hours later against a portfolio that has since changed is invalidated rather
  * than forced through. That is the point of approving an INTENT rather than
  * queueing a command.
+ *
+ * ONE exit rule: the command exits 0 only when the thing asked for now holds
+ * (an approval left the intent `applied`, a rejection left it `rejected`).
+ * Retrying a decision that already took effect is a replay and also exits 0;
+ * everything else exits 1 with a sentence, and `--json` keeps the raw code plus
+ * `reasonText`.
  */
 export default class NorthstarsIntentsDecide extends BaseCommand {
     static description: string;