@skrr-ai/cli 0.1.128 → 0.1.130

package/dist/base-command.d.ts

@@ -580,6 +580,18 @@ export declare function describeHarnessUnavailable(body: Record<string, unknown>
  * Exported for tests.
  */
 export declare function describeGitHubUnavailable(): string;
+/**
+ * Frame a typed `TASK_LIST_TIMEOUT` failure as what it is — a list too broad for the database's
+ * time limit — rather than a control-plane outage.
+ *
+ * `GET /api/tasks` answers 503 with this code when its one aggregate is cut off at `maxTimeMS`,
+ * which an unscoped list over every accessible Space reaches because no index serves its sort
+ * across the access filter. Lead with the server's `cause`/`remedy`, falling back to the CLI's
+ * own sentence: the 5xx redaction boundary generalizes a bare message in production.
+ *
+ * Exported for tests.
+ */
+export declare function describeTaskListTimeout(body: Record<string, unknown> | null, bin?: string): string;
 /**
  * Frame a typed `LABEL_SUGGESTION_UNAVAILABLE` failure as what it is — the
  * suggestion's hosted-inference call found no billing payer — rather than a

package/dist/base-command.js

@@ -9,6 +9,7 @@ exports.commitmentActivationHint = commitmentActivationHint;
 exports.withSubject = withSubject;
 exports.describeHarnessUnavailable = describeHarnessUnavailable;
 exports.describeGitHubUnavailable = describeGitHubUnavailable;
+exports.describeTaskListTimeout = describeTaskListTimeout;
 exports.describeLabelSuggestionUnavailable = describeLabelSuggestionUnavailable;
 exports.describeGitHubAppNotConfigured = describeGitHubAppNotConfigured;
 exports.describeResourceNotFound = describeResourceNotFound;
@@ -1573,6 +1574,20 @@ class BaseCommand extends core_1.Command {
                     details: envelopeDetails(body),
                 });
             }
+            else if (bodyCode === 'TASK_LIST_TIMEOUT') {
+                // The list was too broad for the database's time limit — a 503 the API sent on purpose,
+                // with the narrower question to ask. The outage branch below would say skrr is down,
+                // record an incident, and tell an agent to retry the very query that cannot finish
+                // (OSK-21284).
+                this.failWithCliError({
+                    message: say(describeTaskListTimeout(body, this.config.bin)),
+                    code: bodyCode,
+                    status: e.status,
+                    exit: 1,
+                    retryable: false,
+                    details: envelopeDetails(body),
+                });
+            }
             else if (bodyCode === 'LABEL_SUGGESTION_UNAVAILABLE') {
                 // The label-suggestion route found no inference payer — a per-call
                 // condition the API deliberately reported, not a platform outage,
@@ -1602,6 +1617,21 @@ class BaseCommand extends core_1.Command {
                     details: envelopeDetails(body),
                 });
             }
+            else if (commitmentBodyErrorCode(body)) {
+                // These Commitment routes send the code in upper-case `error`, which `refusalCodeOf` does not
+                // read as a code, so the documented code (the guide's refusal table) never reached `error.code`:
+                // a program saw `HTTP_400` or `HTTP_409` and had to know to look in `details.error` (OSK-21102).
+                // Read them by name, as the activation and Compass refusals are, rather than widening
+                // `refusalCodeOf` for every route. The message is the server's, unchanged.
+                this.failWithCliError({
+                    message: say(bodyMessage || e.message),
+                    code: commitmentBodyErrorCode(body),
+                    status: e.status,
+                    exit: 1,
+                    retryable: false,
+                    details: envelopeDetails(body),
+                });
+            }
             else if ((e.status === 409 || e.status === 404) && (0, compass_refusals_1.compassRefusalCode)(body)) {
                 // The Compass routes sent the code in upper-case `error`, which `refusalCodeOf` does not
                 // read as a code, so a stale writer saw `HTTP_409` and a mistyped version `NOT_FOUND`,
@@ -2294,6 +2324,21 @@ function apiRefusal(err) {
 }
 /** The typed code the server refuses a Commitment activation with. */
 const COMMITMENT_ACTIVATION_BLOCKED = 'COMMITMENT_ACTIVATION_BLOCKED';
+/**
+ * Commitment refusals the routes send in upper-case `error` (OSK-21102): the retired `mode` and
+ * `policy.autonomyMode` fields, a cadence window no single wall-clock pattern holds, and an edit that
+ * tries to activate a draft (which only `resume` may do).
+ */
+const COMMITMENT_BODY_ERROR_CODES = new Set([
+    'COMMITMENT_MODE_RETIRED',
+    'COMMITMENT_POLICY_RETIRED',
+    'COMMITMENT_CADENCE_WINDOW_UNSUPPORTED',
+    'COMMITMENT_RESUME_REQUIRES_EXPLICIT_ACTION',
+]);
+function commitmentBodyErrorCode(body) {
+    const value = stringProp(body, 'error');
+    return value && COMMITMENT_BODY_ERROR_CODES.has(value) ? value : undefined;
+}
 /**
  * The remedy a refused Commitment activation carries.
  *
@@ -2388,6 +2433,26 @@ function describeGitHubUnavailable() {
     return ('GitHub is temporarily unreachable, so this request could not be completed. ' +
         'skrr itself answered, so this is not a skrr outage — try again shortly.');
 }
+/**
+ * Frame a typed `TASK_LIST_TIMEOUT` failure as what it is — a list too broad for the database's
+ * time limit — rather than a control-plane outage.
+ *
+ * `GET /api/tasks` answers 503 with this code when its one aggregate is cut off at `maxTimeMS`,
+ * which an unscoped list over every accessible Space reaches because no index serves its sort
+ * across the access filter. Lead with the server's `cause`/`remedy`, falling back to the CLI's
+ * own sentence: the 5xx redaction boundary generalizes a bare message in production.
+ *
+ * Exported for tests.
+ */
+function describeTaskListTimeout(body, bin = 'skrr') {
+    const cause = stringProp(body, 'cause') ||
+        'The task list took too long: it spans every task you can see across all your workspaces and ' +
+            'Spaces, and the database could not return the newest page within its time limit.';
+    const remedy = stringProp(body, 'remedy') ||
+        `Name where to look: a workspace (\`${bin} workspaces use <workspace-id>\`, or \`--workspace <workspace-id>\`) ` +
+            `or a Space (\`${bin} tasks list --space <space-id>\`).`;
+    return `${cause}\n  → ${remedy}`;
+}
 /**
  * Frame a typed `LABEL_SUGGESTION_UNAVAILABLE` failure as what it is — the
  * suggestion's hosted-inference call found no billing payer — rather than a

package/dist/commands/agenda/trigger/create.js

@@ -48,7 +48,9 @@ class AgendaTriggerCreate extends base_command_1.BaseCommand {
             description: 'IANA timezone for the cron (defaults to UTC). Only used with --kind=schedule.',
         }),
         'delay-minutes': core_1.Flags.integer({
-            description: 'Minutes from now to fire — required when --kind=self_scheduled. Range: 5..43200 (5min..30d).',
+            description: 'Minutes from now to fire — required when --kind=self_scheduled. ' +
+                `Range: ${data_provider_1.AGENDA_SELF_SCHEDULED_DELAY_MIN_MINUTES}..${data_provider_1.AGENDA_SELF_SCHEDULED_DELAY_MAX_MINUTES} ` +
+                `(${data_provider_1.AGENDA_SELF_SCHEDULED_DELAY_MIN_MINUTES} minutes..24 hours).`,
         }),
         'max-fires-per-day': core_1.Flags.integer({
             description: 'Daily cap on fires. Required for self_scheduled (1..96); defaults to 96 for schedule when omitted.',
@@ -91,6 +93,12 @@ class AgendaTriggerCreate extends base_command_1.BaseCommand {
             if (typeof flags['delay-minutes'] !== 'number') {
                 this.error('--delay-minutes is required when --kind=self_scheduled', { exit: 2 });
             }
+            // The server holds the same range, but its refusal arrives after the round trip. The sentence
+            // is data-provider's, so what is said here and what the route says cannot differ (OSK-21500).
+            const delayRefusal = (0, data_provider_1.describeAgendaDelayMinutesRefusal)(flags['delay-minutes']);
+            if (delayRefusal) {
+                this.error(`--delay-minutes: ${delayRefusal}`, { exit: 2 });
+            }
             if (typeof flags['max-fires-per-day'] !== 'number') {
                 this.error('--max-fires-per-day is required when --kind=self_scheduled', { exit: 2 });
             }

package/dist/commands/agenda/trigger/list.d.ts

@@ -12,7 +12,8 @@ import { BaseCommand } from '../../../base-command';
 export declare function isUnconfirmedTurnCapture(trigger: Record<string, unknown>): boolean;
 /**
  * `skrr agenda trigger list <agent-id>` — show all triggers registered for
- * an agent (any kind, not just agenda-created ones).
+ * an agent (any kind, not just agenda-created ones), including the ones the
+ * platform manages for its Commitments (the daily self-reflection check).
  */
 export default class AgendaTriggerList extends BaseCommand {
     static description: string;

package/dist/commands/agenda/trigger/list.js

@@ -7,6 +7,7 @@ const data_provider_1 = require("@skrr-ai/data-provider");
 const base_command_1 = require("../../../base-command");
 const format_1 = require("../../../lib/format");
 const triggers_1 = require("../../../lib/triggers");
+const agent_trigger_listing_1 = require("../../../lib/agent-trigger-listing");
 /**
  * A schedule persisted while handling a conversation turn, for which no explicit
  * confirmation was recorded.
@@ -27,10 +28,11 @@ function isUnconfirmedTurnCapture(trigger) {
 }
 /**
  * `skrr agenda trigger list <agent-id>` — show all triggers registered for
- * an agent (any kind, not just agenda-created ones).
+ * an agent (any kind, not just agenda-created ones), including the ones the
+ * platform manages for its Commitments (the daily self-reflection check).
  */
 class AgendaTriggerList extends base_command_1.BaseCommand {
-    static description = 'List every trigger registered against an agent.';
+    static description = "List every trigger registered against an agent, including the ones the platform manages for its Commitments (SOURCE 'system'). A passive agent (--initial-always-on off) still has a daily self-reflection check.";
     static examples = [
         '<%= config.bin %> agenda trigger list <agent-id>',
         '<%= config.bin %> agenda trigger list <agent-id> --unconfirmed',
@@ -55,17 +57,50 @@ class AgendaTriggerList extends base_command_1.BaseCommand {
         catch (err) {
             this.handleApiError(err);
         }
+        const r = response;
+        const listed = r?.data ?? [];
+        // The per-agent route lists `scope: 'agent'` rows only; the Commitment triggers a passive agent still owns
+        // live under `commitment_watcher`. `--unconfirmed` is about turn captures, which are agent-scoped, so it
+        // skips the extra read.
+        let extra = [];
+        let extraUnreadable = null;
+        if (!flags.unconfirmed) {
+            try {
+                const universal = await triggers_1.triggerApi.list((0, triggers_1.withQuery)('/api/triggers', { refEntity: [`agent:${args.agentId}`], limit: 200 }));
+                extra = (0, agent_trigger_listing_1.triggersMissingFromAgentList)(listed, (universal?.triggers ?? []));
+            }
+            catch (err) {
+                extraUnreadable = err instanceof Error ? err.message : String(err);
+            }
+        }
         if (flags.json) {
-            this.printJsonResult((0, list_output_1.listResult)(response));
+            this.printJsonResult((0, list_output_1.listResult)(r && typeof r === 'object'
+                ? {
+                    ...r,
+                    data: [...listed, ...extra],
+                    ...(extraUnreadable
+                        ? {
+                            warnings: [
+                                {
+                                    code: 'system_triggers_unreadable',
+                                    value: extraUnreadable,
+                                    hint: systemTriggersUnreadable(args.agentId, extraUnreadable),
+                                },
+                            ],
+                        }
+                        : {}),
+                }
+                : response));
             return;
         }
-        const r = response;
-        let items = r?.data ?? [];
+        let items = [...listed, ...extra];
         if (flags.unconfirmed) {
             items = items.filter((t) => isUnconfirmedTurnCapture(t));
         }
         if (items.length === 0) {
             this.log(flags.unconfirmed ? 'No unconfirmed turn-captured schedules.' : 'No triggers.');
+            if (extraUnreadable)
+                this.log(systemTriggersUnreadable(args.agentId, extraUnreadable));
             return;
         }
         const rows = items.map((t) => {
@@ -81,7 +116,7 @@ class AgendaTriggerList extends base_command_1.BaseCommand {
                 label: String(t.label ?? '-').slice(0, 40),
                 next: String(next).slice(0, 25),
                 fires: String(fires),
-                source: isUnconfirmedTurnCapture(t) ? 'turn*' : '-',
+                source: (0, agent_trigger_listing_1.sourceLabel)(t, isUnconfirmedTurnCapture(t)),
             };
         });
         (0, format_1.renderTable)(rows, [
@@ -93,6 +128,15 @@ class AgendaTriggerList extends base_command_1.BaseCommand {
             { key: 'fires', header: 'FIRES' },
             { key: 'source', header: 'SOURCE' },
         ], (line) => this.log(line));
+        if (rows.some((row) => row.source.startsWith('system'))) {
+            this.log('');
+            for (const line of (0, agent_trigger_listing_1.systemManagedLegend)(args.agentId, this.config.bin))
+                this.log(line);
+        }
+        if (extraUnreadable) {
+            this.log('');
+            this.log(systemTriggersUnreadable(args.agentId, extraUnreadable));
+        }
         if (rows.some((row) => row.source === 'turn*')) {
             // Deliberately not "the agent scheduled this by itself". The capture layer
             // cannot tell "remind me at 9" from a nudge the agent invented, so the
@@ -105,3 +149,8 @@ class AgendaTriggerList extends base_command_1.BaseCommand {
     }
 }
 exports.default = AgendaTriggerList;
+/** Said, not skipped: a missing read must not look like an agent with no Commitment triggers. */
+function systemTriggersUnreadable(agentId, reason) {
+    return (`Platform-managed (Commitment) triggers could not be read (${reason}); this list may be incomplete. ` +
+        `Try: skrr triggers list --ref-entity agent:${agentId}`);
+}

package/dist/commands/agents/create.js

@@ -245,7 +245,9 @@ class AgentsCreate extends base_command_1.BaseCommand {
             description: 'Default working directory for local Harness sessions',
         }),
         'initial-always-on': core_1.Flags.string({
-            description: 'Start autonomous work after creation (default: on). Use off for a passive agent; explicit chat still works. Relationship-loop seeding is configured separately.',
+            description: 'Start autonomous work after creation (default: on). Use off for a passive agent; explicit chat still works. ' +
+                'A passive agent is still seeded with the system-managed daily self-reflection Commitment: `agenda trigger list <agent>` shows its trigger (SOURCE "system", marked "suspended" while the platform holds it for Always-On being off) ' +
+                'and `commitments list --agent <agent> --include-system` finds the Commitment to pause. Relationship-loop seeding is configured separately.',
             options: ['on', 'off'],
         }),
         'no-relationship-loops': core_1.Flags.boolean({

package/dist/commands/agents/reflect.d.ts

@@ -32,5 +32,11 @@ export default class AgentsReflect extends BaseCommand {
     run(): Promise<void>;
     private runDisable;
     private runEnableOrRetune;
+    /**
+     * Parse `--set-cadence` and apply the reflection window. A cadence that is not one
+     * (`0`, `1 month`, empty) is a usage error naming the rule, raised before anything is
+     * written, not an API failure.
+     */
+    private boundRequestedCadence;
     private runStatus;
 }

package/dist/commands/agents/reflect.js

@@ -55,12 +55,16 @@ class AgentsReflect extends base_command_1.BaseCommand {
         this.requireAuth();
         const { args, flags } = await this.parse(AgentsReflect);
         const agentId = args.id;
+        // Only the status view prints whether the loop's fires run, so only it asks the server for
+        // that verdict (a policy read); enabling, retuning and pausing do not.
+        const isStatus = !flags.disable && !flags.enable && flags['set-cadence'] === undefined;
         let existing;
         try {
             const list = await triggers_1.triggerApi.list((0, triggers_1.withQuery)('/api/triggers', {
                 scope: 'agent',
                 refEntity: (0, triggers_1.agentRefEntity)(agentId),
                 limit: 200,
+                include: isStatus ? 'autonomy' : undefined,
             }));
             existing = (0, reflection_1.findReflectionTrigger)(list.triggers ?? []);
         }
@@ -103,14 +107,23 @@ class AgentsReflect extends base_command_1.BaseCommand {
         // Resolve the target cadence: explicit --set-cadence, else keep the existing
         // interval when just --enabling, else the default.
         let minutes;
+        let bounds = null;
         if (flags['set-cadence'] !== undefined) {
-            minutes = (0, reflection_1.clampCadenceMinutes)((0, reflection_1.parseCadenceToMinutes)(flags['set-cadence']));
+            bounds = this.boundRequestedCadence(flags['set-cadence']);
+            minutes = bounds.minutes;
         }
         else {
             minutes =
                 (existing && (0, reflection_1.reflectionCadenceMinutes)(existing)) || reflection_1.DEFAULT_REFLECTION_CADENCE_MINUTES;
         }
         const cadence = (0, reflection_1.describeCadenceMinutes)(minutes);
+        // What was ASKED for, beside what was applied: a request the window moved is said so
+        // (OSK-21493), in the text and in `--json`, instead of only the clamped number.
+        const clampNote = bounds ? (0, reflection_1.describeCadenceClamp)(bounds) : null;
+        const requested = {
+            requestedCadence: bounds ? (0, reflection_1.describeCadenceMinutes)(bounds.requestedMinutes) : null,
+            ...(clampNote ? { clamped: true, note: clampNote } : {}),
+        };
         if (existing?.id) {
             const patch = {
                 enabled: true,
@@ -124,10 +137,12 @@ class AgentsReflect extends base_command_1.BaseCommand {
             }
             const updated = await triggers_1.triggerApi.update(existing.id, patch);
             if (flags.json) {
-                this.log(JSON.stringify({ ok: true, agentId, action: 'retuned', cadence, trigger: updated }, null, 2));
+                this.log(JSON.stringify({ ok: true, agentId, action: 'retuned', ...requested, cadence, trigger: updated }, null, 2));
                 return;
             }
             this.log(`Self-reflection loop retuned — agent ${agentId} now reflects every ${cadence}.`);
+            if (clampNote)
+                this.log(`Note: ${clampNote}`);
             this.log(`Trigger: ${existing.id}`);
             return;
         }
@@ -138,12 +153,30 @@ class AgentsReflect extends base_command_1.BaseCommand {
         });
         const created = await triggers_1.triggerApi.create(payload);
         if (flags.json) {
-            this.log(JSON.stringify({ ok: true, agentId, action: 'enabled', cadence, trigger: created }, null, 2));
+            this.log(JSON.stringify({ ok: true, agentId, action: 'enabled', ...requested, cadence, trigger: created }, null, 2));
             return;
         }
         this.log(`Self-reflection loop enabled — agent ${agentId} will reflect every ${cadence}.`);
+        if (clampNote)
+            this.log(`Note: ${clampNote}`);
         this.log(`Trigger: ${created.id ?? '(created)'}`);
-        this.log(`Next run: ${(0, triggers_1.nextRunLabel)(created)}`);
+        this.log(`Next run: ${(0, reflection_1.reflectionNextRunLabel)(created)}`);
+    }
+    /**
+     * Parse `--set-cadence` and apply the reflection window. A cadence that is not one
+     * (`0`, `1 month`, empty) is a usage error naming the rule, raised before anything is
+     * written, not an API failure.
+     */
+    boundRequestedCadence(raw) {
+        try {
+            return (0, reflection_1.applyCadenceBounds)((0, reflection_1.parseCadenceToMinutes)(raw));
+        }
+        catch (err) {
+            if (err instanceof reflection_1.InvalidCadenceError) {
+                this.failWithCliError({ message: err.message, code: err.code, exit: 2, retryable: false });
+            }
+            throw err;
+        }
     }
     runStatus(agentId, existing, json) {
         if (!existing) {
@@ -165,7 +198,8 @@ class AgentsReflect extends base_command_1.BaseCommand {
                 enabled: existing.enabled !== false,
                 cadence,
                 cadenceMinutes: minutes ?? null,
-                nextRun: (0, triggers_1.nextRunLabel)(existing),
+                nextRun: (0, reflection_1.reflectionNextRunLabel)(existing),
+                ...(0, reflection_1.reflectionAutonomyFields)(existing),
                 trigger: existing,
             }, null, 2));
             return;
@@ -173,8 +207,13 @@ class AgentsReflect extends base_command_1.BaseCommand {
         this.log(`Self-reflection loop for agent ${agentId}:`);
         this.log(`  Status:   ${existing.enabled === false ? 'paused' : 'active'}`);
         this.log(`  Cadence:  every ${cadence}`);
-        this.log(`  Next run: ${(0, triggers_1.nextRunLabel)(existing)}`);
+        this.log(`  Next run: ${(0, reflection_1.reflectionNextRunLabel)(existing)}`);
         this.log(`  Trigger:  ${existing.id ?? '-'}`);
+        // "active" with a next run says the loop is armed, not that its fires run: under some
+        // initiative modes they only create an inbox suggestion (OSK-21606).
+        const autonomyNote = (0, reflection_1.reflectionAutonomyNote)(existing, this.config.bin);
+        if (autonomyNote)
+            this.log(`  Note:     ${autonomyNote}`);
         if (existing.enabled === false) {
             this.log('');
             this.log('Re-enable it with:  ' + `${this.config.bin} agents reflect ${agentId} --enable`);

package/dist/commands/agents/schedule-overview.d.ts

@@ -1,4 +1,5 @@
 import { BaseCommand } from '../../base-command';
+import { type TriggerDefinition } from '../../lib/triggers';
 /**
  * `skrr agents schedule-overview <agent-id>` — the one-call "full visibility"
  * view an agent needs when it wakes to think: PAST (recent fires) + FUTURE
@@ -25,3 +26,19 @@ export default class AgentsScheduleOverview extends BaseCommand {
     };
     run(): Promise<void>;
 }
+/** The reflection loop as `--json` reports it. A paused loop has no next run (`-`). */
+export declare function reflectionSummary(reflection: TriggerDefinition): {
+    autonomy?: "runs" | "suggests_only";
+    note?: string;
+    triggerId: string | undefined;
+    enabled: boolean;
+    cadence: string;
+    nextRun: string;
+};
+/** The reflection loop as the text view prints it. */
+export declare function reflectionLine(reflection: TriggerDefinition): string;
+/**
+ * The line under the loop when the server says its fires do not run for the owner (OSK-21606),
+ * else null. "active · next <time>" only says the loop is armed.
+ */
+export declare function reflectionNoteLine(reflection: TriggerDefinition, bin: string): string | null;

package/dist/commands/agents/schedule-overview.js

@@ -1,5 +1,8 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.reflectionSummary = reflectionSummary;
+exports.reflectionLine = reflectionLine;
+exports.reflectionNoteLine = reflectionNoteLine;
 const core_1 = require("@oclif/core");
 const data_provider_1 = require("@skrr-ai/data-provider");
 const base_command_1 = require("../../base-command");
@@ -51,6 +54,8 @@ class AgentsScheduleOverview extends base_command_1.BaseCommand {
                 scope: 'agent',
                 refEntity: (0, triggers_1.agentRefEntity)(agentId),
                 limit: 200,
+                // Whether the reflection loop's fires run: its row carries the verdict (OSK-21606).
+                include: 'autonomy',
             })),
             // Filter SERVER-side. Fetching an unfiltered page and filtering in memory
             // silently truncates the section for any user with more tasks than
@@ -72,14 +77,7 @@ class AgentsScheduleOverview extends base_command_1.BaseCommand {
         if (flags.json) {
             this.log(JSON.stringify({
                 agentId,
-                reflection: reflection
-                    ? {
-                        triggerId: reflection.id,
-                        enabled: reflection.enabled !== false,
-                        cadence: describeCadence(reflection),
-                        nextRun: (0, triggers_1.nextRunLabel)(reflection),
-                    }
-                    : null,
+                reflection: reflection ? reflectionSummary(reflection) : null,
                 upcoming,
                 recentFires: fires,
                 openTasks,
@@ -97,7 +95,10 @@ class AgentsScheduleOverview extends base_command_1.BaseCommand {
             this.log(`  none — enable with: ${this.config.bin} agents reflect ${agentId} --set-cadence 6h`);
         }
         else {
-            this.log(`  ${reflection.enabled === false ? 'paused' : 'active'} · every ${describeCadence(reflection)} · next ${(0, triggers_1.nextRunLabel)(reflection)} · ${reflection.id ?? '-'}`);
+            this.log(reflectionLine(reflection));
+            const note = reflectionNoteLine(reflection, this.config.bin);
+            if (note)
+                this.log(note);
         }
         // FUTURE.
         this.log('');
@@ -190,6 +191,29 @@ function describeCadence(trigger) {
     const minutes = (0, reflection_1.reflectionCadenceMinutes)(trigger);
     return minutes ? (0, reflection_1.describeCadenceMinutes)(minutes) : 'unknown';
 }
+/** The reflection loop as `--json` reports it. A paused loop has no next run (`-`). */
+function reflectionSummary(reflection) {
+    return {
+        triggerId: reflection.id,
+        enabled: reflection.enabled !== false,
+        cadence: describeCadence(reflection),
+        nextRun: (0, reflection_1.reflectionNextRunLabel)(reflection),
+        // Whether its fires run, when the server said; absent means it did not.
+        ...(0, reflection_1.reflectionAutonomyFields)(reflection),
+    };
+}
+/** The reflection loop as the text view prints it. */
+function reflectionLine(reflection) {
+    return `  ${reflection.enabled === false ? 'paused' : 'active'} · every ${describeCadence(reflection)} · next ${(0, reflection_1.reflectionNextRunLabel)(reflection)} · ${reflection.id ?? '-'}`;
+}
+/**
+ * The line under the loop when the server says its fires do not run for the owner (OSK-21606),
+ * else null. "active · next <time>" only says the loop is armed.
+ */
+function reflectionNoteLine(reflection, bin) {
+    const note = (0, reflection_1.reflectionAutonomyNote)(reflection, bin);
+    return note ? `  Note: ${note}` : null;
+}
 function settledValue(result) {
     return result.status === 'fulfilled' ? result.value : undefined;
 }

package/dist/commands/agents/triggers/policy.js

@@ -56,7 +56,9 @@ class AgentsTriggersPolicy extends base_command_1.BaseCommand {
             description: 'Allowed trigger kind under auto_run_limited (repeatable or comma-separated)',
             multiple: true,
         }),
-        'max-fires-per-day': core_1.Flags.integer({ description: 'Agent initiative daily fire cap' }),
+        'max-fires-per-day': core_1.Flags.integer({
+            description: 'Daily cap on how often this agent can wake itself: its Task returns and self_scheduled triggers, whatever cap they carry',
+        }),
         'max-per-hour': core_1.Flags.integer({ description: 'Agent initiative hourly fire cap' }),
         'working-hours': core_1.Flags.string({ description: 'Policy workingHours JSON object' }),
         'quiet-hours': core_1.Flags.string({ description: 'Policy quietHours JSON object' }),

package/dist/commands/browser/persistent-profile.d.ts

@@ -0,0 +1,22 @@
+import { Command } from '@oclif/core';
+/**
+ * Whether browser sessions on THIS computer share one profile that keeps its
+ * logins and cache, instead of a fresh one each.
+ *
+ * The setting lives in the daemon's own config on this computer, so it is
+ * forwarded to the daemon rather than sent to the API: a browser that stays
+ * signed in is the person at the machine's decision, and a request from the
+ * cloud must not be able to make it (the same boundary as `browser
+ * cloud-agents`). The profile is the daemon's own, never the everyday Chrome.
+ */
+export default class BrowserPersistentProfile extends Command {
+    static description: string;
+    static examples: string[];
+    static args: {
+        action: import("@oclif/core/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static flags: {
+        json: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+    };
+    run(): Promise<void>;
+}

package/dist/commands/browser/persistent-profile.js

@@ -0,0 +1,46 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const core_1 = require("@oclif/core");
+const browser_1 = require("../browser");
+/**
+ * Whether browser sessions on THIS computer share one profile that keeps its
+ * logins and cache, instead of a fresh one each.
+ *
+ * The setting lives in the daemon's own config on this computer, so it is
+ * forwarded to the daemon rather than sent to the API: a browser that stays
+ * signed in is the person at the machine's decision, and a request from the
+ * cloud must not be able to make it (the same boundary as `browser
+ * cloud-agents`). The profile is the daemon's own, never the everyday Chrome.
+ */
+class BrowserPersistentProfile extends core_1.Command {
+    static description = 'Keep one browser profile (logins, cookies, cache) across browser sessions on this computer (off by default)';
+    static examples = [
+        '<%= config.bin %> browser persistent-profile status',
+        '<%= config.bin %> browser persistent-profile on',
+        '<%= config.bin %> browser persistent-profile off',
+        '<%= config.bin %> browser persistent-profile reset',
+    ];
+    static args = {
+        action: core_1.Args.string({
+            description: 'on, off, status, or reset (sign out of everything and delete the profile)',
+            required: true,
+            options: ['on', 'off', 'status', 'reset'],
+            // Without this oclif reads stdin for a missing positional, so the command
+            // hangs when run from a pipe or a non-tty instead of refusing. Enforced
+            // by ARG_IMPLICIT_STDIN_ENABLED in the command-hygiene audit.
+            ignoreStdin: true,
+        }),
+    };
+    static flags = {
+        json: core_1.Flags.boolean({ description: 'Output JSON' }),
+    };
+    async run() {
+        const { args, flags } = await this.parse(BrowserPersistentProfile);
+        await (0, browser_1.forwardBrowserCommand)(this, [
+            'persistent-profile',
+            args.action,
+            ...(flags.json ? ['--json'] : []),
+        ]);
+    }
+}
+exports.default = BrowserPersistentProfile;

package/dist/commands/commitments/create.js

@@ -260,7 +260,9 @@ JSON
 <%= config.bin %> compass commitments <compass-id> --agent <agent-id>   # lists it once it is bound`,
     ];
     static flags = {
-        json: core_1.Flags.boolean({ description: 'Output the created commitment as JSON' }),
+        json: core_1.Flags.boolean({
+            description: 'Output the created commitment as JSON: the commitment itself, not wrapped (commitments show --json puts it under .commitment)',
+        }),
         'from-json': core_1.Flags.string({
             description: `JSON file (or "-" for stdin) for fields not exposed as flags. See examples below for daily times, named agent_run keys, zero budgets and "compassId" (binds a Compass; fixed at creation). ${commitment_attention_copy_1.QUIET_HOURS_HELP} ${commitment_attention_copy_1.EVENT_SOURCES_HELP}`,
         }),

package/dist/commands/commitments/effective-policy.js

@@ -7,6 +7,7 @@ const base_command_1 = require("../../base-command");
 const commitments_1 = require("../../lib/commitments");
 const commitment_product_1 = require("../../lib/commitment-product");
 const commitment_attention_copy_1 = require("../../lib/commitment-attention-copy");
+const northstars_1 = require("../../lib/northstars");
 /** Which limit binds the daily action runs — the fix lives on that object. */
 const RUN_LIMIT_BINDING_LABELS = {
     northstar_allocation: 'Northstar allocation',
@@ -71,6 +72,11 @@ function budgetDayLines(policy) {
                 ? 'no ceiling'
                 : `${value}/day`;
         lines.push(`Northstar shared pools: action runs ${pool(shared.actionRunsPerDay, shared.actionRunsPerDayState)} · observation runs ${pool(shared.observationRunsPerDay, shared.observationRunsPerDayState)}`);
+        // A pool below the number of linked active commitments is still handed out at the floor of
+        // 1/day each: the same sentence `northstars governance show` and `review-now` print (OSK-21334).
+        const floorNote = (0, northstars_1.runBudgetFloorNote)(policy.portfolio?.runBudgetFloor);
+        if (floorNote)
+            lines.push(`! ${floorNote}`);
     }
     return lines;
 }

package/dist/commands/commitments/explain.js

@@ -24,13 +24,22 @@ class CommitmentsExplain extends base_command_1.BaseCommand {
         this.requireAuth();
         const { args, flags } = await this.parse(CommitmentsExplain);
         try {
-            const explanation = await commitments_1.commitmentApi.explain(args.commitmentId);
+            // The explanation names neither the bound Compass nor its status, so the text view reads the
+            // Commitment beside it (the read `show` renders). `--json` stays the explanation as the
+            // server sent it, with no extra request. A failed read must not fail the explanation
+            // (OSK-21332): it becomes a "not shown" line instead.
+            const [explanation, read] = await Promise.all([
+                commitments_1.commitmentApi.explain(args.commitmentId),
+                flags.json ? null : commitments_1.commitmentApi.get(args.commitmentId).catch(() => null),
+            ]);
             if (flags.json) {
                 this.log(JSON.stringify(explanation, null, 2));
                 return;
             }
             for (const line of (0, commitments_1.formatCommitmentExplanation)(explanation))
                 this.log(line);
+            for (const line of (0, commitments_1.explainCompassLines)(args.commitmentId, read?.commitment))
+                this.log(line);
         }
         catch (err) {
             this.handleApiError(err);