@skrr-ai/cli 0.1.17 → 0.1.18

package/README.md

@@ -43,7 +43,7 @@ observability), and shared links.
 | **dm**                                | `list`, `show`, `messages`, `threads`, `thread show/messages/follow/mute/share`, `send` (agent 1:1 main chat and Slack-style Thread controls)                                                                                                                                                                                                                                                                                                                                                                   |
 | **diagnostics**                       | `context`, `doctor`, `usage`, `commands` (agent-friendly runtime identity, readiness, progressive token-budgeted discovery, and complete machine-readable schemas)                                                                                                                                                                                                                                                                                                                                             |
 | **goals**                             | `list`, `show`, `create`, `update`, `delete`, `descendants`, `tasks`, `archive`, `revisions`                                                                                                                                                                                                                                                                                                                                                                                                                    |
-| **commitments**                       | `list`, `show`, `create`, `plan`, `preflight`, `update`, `checks`, `check-now`, `autonomy`, `pause`, `resume`, `complete`, `subject`, `attach`, `detach`, `reports`, `export`, `import`, `fork` (durable agent commitment contracts)                                                                                                                                                                                                                                                                            |
+| **commitments**                       | `list`, `show`, `create`, `plan`, `preflight`, `update`, `checks`, `check-now`, `action-proposals`, `autonomy`, `pause`, `resume`, `complete`, `subject`, `attach`, `detach`, `reports`, `export`, `import`, `fork` (durable agent commitment contracts)                                                                                                                                                                                                                                                        |
 | **goals briefing**                    | `enable`, `disable`, `preview`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  |
 | **tasks**                             | `list`, `show`, `create`, `upsert`, `create-tree`, `bulk-update`, `tree`, `update`, `delete`, `actionability`, `ready`, `start`, `active`, `monitor`, `watch`, `wait`, `continue-ready`, `move`, `complete`, `children`, `ancestors`, `descendants`, `activity`, `runs`, `execution-summary`, `execution-timeline`, `replay`, `checkout`, `release`, `start-all`, `cancel-cascade`, `cascade-status`, `dri-status`, `duplicate-pipeline`, `archive`, `today`, `prompt-log`, `revisions`, `transcript`, `output` |
 | **tasks input**                       | `show`, `answer`, `dismiss` (durable Human-input handoff)                                                                                                                                                                                                                                                                                                                                                                                                                                                       |
@@ -756,6 +756,9 @@ sky commitments create --agent <agent-id> \
 sky commitments create --agent <agent-id> --title "AWS cost watch" \
   --outcome "Cost regressions are investigated" \
   --agent-directive-file ./aws-cost-policy.md
+sky commitments create --agent <agent-id> --title "Keep CI healthy" \
+  --outcome "Failed checks are repaired" --watch github --event-driven \
+  --mode execute --delivery draft-pr --repo owner/repo --base main --status active
 sky commitments resume <commitment-id>          # activate
 
 # Or draft it from a sentence (read-only proposal)
@@ -763,14 +766,14 @@ sky commitments plan --agent <agent-id> --sentence "Make sure every candidate he
 
 # Steer it
 sky commitments update <commitment-id> --cadence 6h        # retune how often it checks
-sky commitments autonomy <commitment-id> --mode ask_first  # how much it may act alone
+sky commitments autonomy <commitment-id> --mode prepare    # reason and wait for approval
 sky commitments checks <commitment-id>                     # what it has been deciding
 sky commitments check-now <commitment-id>                  # run one iteration now
 sky commitments pause <commitment-id>                      # kill-switch
 ```
 
-Autonomy ladder: `off` → `suggestions_only` (default) → `ask_first` →
-`auto_run_limited` → `auto_run`. Full reference:
+Autonomy modes: `monitor` (default), `prepare`, and `execute`. Pause/resume is
+the lifecycle control; approval classes live in execution policy. Full reference:
 [docs/cli/SKRR_COMMITMENTS.md](../docs/cli/SKRR_COMMITMENTS.md).
 
 ### `sky spaces` — perspective guide

package/dist/commands/commitments/action-proposals/decide.d.ts

@@ -0,0 +1,13 @@
+import { BaseCommand } from '../../../base-command';
+export default class CommitmentsActionProposalsDecide extends BaseCommand {
+    static description: string;
+    static args: {
+        commitmentId: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;
+        proposalId: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static flags: {
+        json: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+        decision: import("@oclif/core/lib/interfaces").OptionFlag<string, import("@oclif/core/lib/interfaces").CustomOptions>;
+    };
+    run(): Promise<void>;
+}

package/dist/commands/commitments/action-proposals/decide.js

@@ -0,0 +1,41 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const core_1 = require("@oclif/core");
+const base_command_1 = require("../../../base-command");
+const commitments_1 = require("../../../lib/commitments");
+class CommitmentsActionProposalsDecide extends base_command_1.BaseCommand {
+    static description = 'Approve & run, or reject, one frozen prepared action';
+    static args = {
+        commitmentId: core_1.Args.string({ description: 'Commitment ID', required: true, ignoreStdin: true }),
+        proposalId: core_1.Args.string({ description: 'Action Proposal ID', required: true, ignoreStdin: true }),
+    };
+    static flags = {
+        json: core_1.Flags.boolean({ description: 'Output the decision and execution receipts as JSON' }),
+        decision: core_1.Flags.string({ options: ['approve', 'reject'], required: true }),
+    };
+    async run() {
+        this.requireAuth();
+        const { args, flags } = await this.parse(CommitmentsActionProposalsDecide);
+        const decision = flags.decision;
+        let result;
+        try {
+            const decided = await commitments_1.commitmentApi.decideActionProposal(args.commitmentId, args.proposalId, decision);
+            const execution = decision === 'approve' && decided.status === 'approved'
+                ? await commitments_1.commitmentApi.executeActionProposal(args.commitmentId, args.proposalId)
+                : undefined;
+            result = { decision: decided, ...(execution ? { execution } : {}) };
+        }
+        catch (error) {
+            this.handleApiError(error);
+        }
+        if (flags.json)
+            this.log(JSON.stringify(result, null, 2));
+        else if (decision === 'approve') {
+            this.log('Prepared action approved and handed to the durable executor.');
+        }
+        else {
+            this.log('Prepared action rejected.');
+        }
+    }
+}
+exports.default = CommitmentsActionProposalsDecide;

package/dist/commands/commitments/action-proposals/execute.d.ts

@@ -0,0 +1,12 @@
+import { BaseCommand } from '../../../base-command';
+export default class CommitmentsActionProposalsExecute extends BaseCommand {
+    static description: string;
+    static args: {
+        commitmentId: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;
+        proposalId: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static flags: {
+        json: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+    };
+    run(): Promise<void>;
+}

package/dist/commands/commitments/action-proposals/execute.js

@@ -0,0 +1,29 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const core_1 = require("@oclif/core");
+const base_command_1 = require("../../../base-command");
+const commitments_1 = require("../../../lib/commitments");
+class CommitmentsActionProposalsExecute extends base_command_1.BaseCommand {
+    static description = 'Nudge an approved action now (recovery continues automatically)';
+    static args = {
+        commitmentId: core_1.Args.string({ description: 'Commitment ID', required: true, ignoreStdin: true }),
+        proposalId: core_1.Args.string({ description: 'Action Proposal ID', required: true, ignoreStdin: true }),
+    };
+    static flags = { json: core_1.Flags.boolean({ description: 'Output as JSON' }) };
+    async run() {
+        this.requireAuth();
+        const { args, flags } = await this.parse(CommitmentsActionProposalsExecute);
+        let result;
+        try {
+            result = await commitments_1.commitmentApi.executeActionProposal(args.commitmentId, args.proposalId);
+        }
+        catch (error) {
+            this.handleApiError(error);
+        }
+        if (flags.json)
+            this.log(JSON.stringify(result, null, 2));
+        else
+            this.log(`Prepared action is ${String(result.status || 'queued')}.`);
+    }
+}
+exports.default = CommitmentsActionProposalsExecute;

package/dist/commands/commitments/action-proposals.d.ts

@@ -0,0 +1,13 @@
+import { BaseCommand } from '../../base-command';
+export default class CommitmentsActionProposals extends BaseCommand {
+    static description: string;
+    static args: {
+        id: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static flags: {
+        json: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+        status: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        limit: import("@oclif/core/lib/interfaces").OptionFlag<number, import("@oclif/core/lib/interfaces").CustomOptions>;
+    };
+    run(): Promise<void>;
+}

package/dist/commands/commitments/action-proposals.js

@@ -0,0 +1,56 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const core_1 = require("@oclif/core");
+const base_command_1 = require("../../base-command");
+const commitments_1 = require("../../lib/commitments");
+const format_1 = require("../../lib/format");
+class CommitmentsActionProposals extends base_command_1.BaseCommand {
+    static description = 'List frozen prepared actions and their recovery state';
+    static args = {
+        id: core_1.Args.string({ description: 'Commitment ID', required: true, ignoreStdin: true }),
+    };
+    static flags = {
+        json: core_1.Flags.boolean({ description: 'Output as JSON' }),
+        status: core_1.Flags.string({
+            description: 'Filter by proposal status',
+            options: ['proposed', 'approved', 'rejected', 'executing', 'succeeded', 'failed', 'expired'],
+        }),
+        limit: core_1.Flags.integer({ description: 'Maximum rows', default: 50, min: 1, max: 200 }),
+    };
+    async run() {
+        this.requireAuth();
+        const { args, flags } = await this.parse(CommitmentsActionProposals);
+        let response;
+        try {
+            response = await commitments_1.commitmentApi.actionProposals(args.id, {
+                status: flags.status,
+                limit: flags.limit,
+            });
+        }
+        catch (error) {
+            this.handleApiError(error);
+        }
+        if (flags.json) {
+            this.log(JSON.stringify(response, null, 2));
+            return;
+        }
+        if (!response.data.length) {
+            this.log('No prepared actions.');
+            return;
+        }
+        (0, format_1.renderTable)(response.data.map((proposal) => ({
+            id: proposal.id,
+            action: String(proposal.actionSnapshot?.type || 'action').replace(/_/g, ' '),
+            status: proposal.status,
+            attempt: `${proposal.attempt || 0}/${proposal.maxAttempts || 3}`,
+            expires: proposal.expiresAt || '—',
+        })), [
+            { key: 'id', header: 'PROPOSAL', verbatim: true },
+            { key: 'action', header: 'ACTION', maxWidth: 28 },
+            { key: 'status', header: 'STATUS' },
+            { key: 'attempt', header: 'ATTEMPT' },
+            { key: 'expires', header: 'EXPIRES', maxWidth: 28 },
+        ], (line) => this.log(line));
+    }
+}
+exports.default = CommitmentsActionProposals;

package/dist/commands/commitments/autonomy.d.ts

@@ -3,23 +3,19 @@ import { BaseCommand } from '../../base-command';
  * `skrr commitments autonomy <id> --mode <mode>` — grant or withdraw how much the
  * commitment may do on its own.
  *
- * The ladder, least to most autonomous:
- *   off               — the loop does not run
- *   suggestions_only  — records findings; never acts, never interrupts
- *   ask_first         — proposes an action and waits for approval
- *   auto_run_limited  — acts on low-risk actions; escalates the rest
- *   auto_run          — acts within its policy without asking
+ * The one public autonomy axis:
+ *   monitor  — observe and report; never execute external work
+ *   prepare  — reason and freeze a plan for approval
+ *   execute  — act within the explicit execution policy
  *
  * Use this rather than `commitments update`: the API replaces `policy` wholesale,
  * whereas this endpoint merges the change into the existing policy.
  *
- * Caveat: the merge is field-by-field over the set `normalizePolicy` enumerates
- * (autonomyMode, inheritCompass, maxUserNudgesPerDay, minUserNudgeIntervalMs,
- * quietHours, requiresApprovalFor). `policy.delivery` is not among them — it is
- * accepted by the API but never persisted, and the delivery policy that actually
- * takes effect lives on the agent (`agent.deliveryPolicy.commitment`).
+ * The merge is field-by-field over the policy fields the Commitment Store owns;
+ * report destinations remain the separate `reports[]` contract.
  */
 export default class CommitmentsAutonomy extends BaseCommand {
+    static hidden: boolean;
     static description: string;
     static examples: string[];
     static args: {

package/dist/commands/commitments/autonomy.js

@@ -8,28 +8,25 @@ const commitments_1 = require("../../lib/commitments");
  * `skrr commitments autonomy <id> --mode <mode>` — grant or withdraw how much the
  * commitment may do on its own.
  *
- * The ladder, least to most autonomous:
- *   off               — the loop does not run
- *   suggestions_only  — records findings; never acts, never interrupts
- *   ask_first         — proposes an action and waits for approval
- *   auto_run_limited  — acts on low-risk actions; escalates the rest
- *   auto_run          — acts within its policy without asking
+ * The one public autonomy axis:
+ *   monitor  — observe and report; never execute external work
+ *   prepare  — reason and freeze a plan for approval
+ *   execute  — act within the explicit execution policy
  *
  * Use this rather than `commitments update`: the API replaces `policy` wholesale,
  * whereas this endpoint merges the change into the existing policy.
  *
- * Caveat: the merge is field-by-field over the set `normalizePolicy` enumerates
- * (autonomyMode, inheritCompass, maxUserNudgesPerDay, minUserNudgeIntervalMs,
- * quietHours, requiresApprovalFor). `policy.delivery` is not among them — it is
- * accepted by the API but never persisted, and the delivery policy that actually
- * takes effect lives on the agent (`agent.deliveryPolicy.commitment`).
+ * The merge is field-by-field over the policy fields the Commitment Store owns;
+ * report destinations remain the separate `reports[]` contract.
  */
 class CommitmentsAutonomy extends base_command_1.BaseCommand {
+    // Kept callable for existing scripts, but omitted from command discovery so
+    // new users see one product vocabulary: Monitor, Prepare, Execute.
+    static hidden = true;
     static description = "Set a commitment's autonomy mode (how much it may act unattended)";
     static examples = [
-        '<%= config.bin %> commitments autonomy <commitment-id> --mode ask_first',
-        '<%= config.bin %> commitments autonomy <commitment-id> --mode auto_run_limited --reason "trusted after 2 weeks"',
-        '<%= config.bin %> commitments autonomy <commitment-id> --mode auto_run --reason "owns the pipeline end to end"',
+        '<%= config.bin %> commitments mode <commitment-id> prepare',
+        '<%= config.bin %> commitments mode <commitment-id> execute',
     ];
     static args = {
         id: core_1.Args.string({ description: 'Commitment ID', required: true, ignoreStdin: true }),
@@ -37,15 +34,8 @@ class CommitmentsAutonomy extends base_command_1.BaseCommand {
     static flags = {
         json: core_1.Flags.boolean({ description: 'Output as JSON' }),
         mode: core_1.Flags.string({
-            // The web surface groups these into three choices; the CLI keeps the
-            // canonical five because an operator and a coding agent both need to name
-            // the stored value. What it must NOT keep is the silence: the two acting
-            // rungs were indistinguishable in the decision core until the authority
-            // rework, and this help text never said what separated them.
-            description: 'Autonomy mode: off (stop) | suggestions_only (propose only) | ask_first (prepare, wait for approval) | ' +
-                'auto_run_limited (act unattended on low/medium-risk work, bring high-risk to the owner) | ' +
-                'auto_run (act unattended, high-risk work included)',
-            options: [...commitments_1.COMMITMENT_AUTONOMY_MODES],
+            description: 'Compatibility command. Prefer commitments mode <id> monitor|prepare|execute; use commitments pause to stop wakes.',
+            options: [...commitments_1.COMMITMENT_AUTHORABLE_AUTONOMY_MODES],
             required: true,
         }),
         reason: core_1.Flags.string({
@@ -56,9 +46,10 @@ class CommitmentsAutonomy extends base_command_1.BaseCommand {
         this.requireAuth();
         const { args, flags } = await this.parse(CommitmentsAutonomy);
         let commitment;
+        const storedMode = (0, commitments_1.storedAutonomyModeForAuthoring)(flags.mode);
         try {
             commitment = await commitments_1.commitmentApi.autonomy(args.id, {
-                autonomyMode: flags.mode,
+                autonomyMode: storedMode,
                 ...(flags.reason ? { reason: flags.reason } : {}),
             });
         }
@@ -69,7 +60,7 @@ class CommitmentsAutonomy extends base_command_1.BaseCommand {
             this.log(JSON.stringify((0, web_url_1.withCommitmentUrl)(this.cliConfig.baseURL, commitment), null, 2));
             return;
         }
-        this.log(`Autonomy for ${args.id} set to ${flags.mode}.`);
+        this.log('Compatibility command accepted. Use commitments mode <id> monitor|prepare|execute for new workflows.');
         (0, commitments_1.renderCommitmentSummary)(commitment, (line) => this.log(line));
     }
 }

package/dist/commands/commitments/bundle.d.ts

@@ -0,0 +1,14 @@
+import { BaseCommand } from '../../base-command';
+export default class CommitmentsBundle extends BaseCommand {
+    static description: string;
+    static examples: string[];
+    static args: {
+        id: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static flags: {
+        task: import("@oclif/core/lib/interfaces").OptionFlag<string, import("@oclif/core/lib/interfaces").CustomOptions>;
+        output: import("@oclif/core/lib/interfaces").OptionFlag<string, import("@oclif/core/lib/interfaces").CustomOptions>;
+        json: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+    };
+    run(): Promise<void>;
+}

package/dist/commands/commitments/bundle.js

@@ -0,0 +1,49 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const core_1 = require("@oclif/core");
+const node_crypto_1 = require("node:crypto");
+const node_fs_1 = require("node:fs");
+const node_path_1 = require("node:path");
+const base_command_1 = require("../../base-command");
+const commitments_1 = require("../../lib/commitments");
+class CommitmentsBundle extends base_command_1.BaseCommand {
+    static description = 'Download the retained Git bundle for a Commitment delivery Task';
+    static examples = [
+        '<%= config.bin %> commitments bundle <id> --task <task-id> --output remediation.bundle',
+    ];
+    static args = { id: core_1.Args.string({ required: true, ignoreStdin: true }) };
+    static flags = {
+        task: core_1.Flags.string({
+            required: true,
+            description: 'Delivery Task ID from the execution receipt',
+        }),
+        output: core_1.Flags.string({
+            required: true,
+            description: 'Save a new Git bundle file (existing files are not overwritten)',
+        }),
+        json: core_1.Flags.boolean({ description: 'Output the saved path and integrity metadata as JSON' }),
+    };
+    async run() {
+        this.requireAuth();
+        const { args, flags } = await this.parse(CommitmentsBundle);
+        try {
+            const { bundle } = await commitments_1.commitmentApi.deliveryBundle(args.id, flags.task);
+            if (bundle.encoding !== 'base64')
+                this.error('Unsupported Git bundle encoding.');
+            const content = Buffer.from(bundle.content, 'base64');
+            if ((0, node_crypto_1.createHash)('sha256').update(content).digest('hex') !== bundle.sha256 ||
+                content.length !== bundle.bytes)
+                this.error('Git bundle integrity check failed. The downloaded content was not saved.');
+            const output = (0, node_path_1.resolve)(flags.output);
+            (0, node_fs_1.writeFileSync)(output, content, { flag: 'wx', mode: 0o600 });
+            if (flags.json)
+                this.log(JSON.stringify({ path: output, sha256: bundle.sha256, bytes: bundle.bytes }, null, 2));
+            else
+                this.log(`Git bundle saved: ${output}\nSHA-256: ${bundle.sha256}`);
+        }
+        catch (error) {
+            this.handleApiError(error);
+        }
+    }
+}
+exports.default = CommitmentsBundle;

package/dist/commands/commitments/create.d.ts

@@ -1,4 +1,24 @@
 import { BaseCommand } from '../../base-command';
+/**
+ * True only when the authored create body can materialize at least one event
+ * binding. A polling-only source must not make `--event-driven` look successful
+ * while the resulting Commitment still wakes exclusively on its backstop.
+ */
+export declare function hasEventCapableWatchedSource(payload: Record<string, unknown>): boolean;
+export declare function assertEventDrivenWatchedSource(payload: Record<string, unknown>): void;
+/**
+ * Resolve the create-time cadence flags into the API payload.
+ *
+ * `--event-driven` is deliberately a complete shortcut rather than an alias
+ * for the mode string: event delivery is an accelerator, so the contract must
+ * always retain a timed safety net even when the author omits `--cadence`.
+ */
+export declare function createCadenceFromFlags({ eventDriven, cadence: cadenceInput, cadenceMode, timezone, }: {
+    eventDriven?: boolean;
+    cadence?: string;
+    cadenceMode?: string;
+    timezone?: string;
+}): Record<string, unknown> | undefined;
 /**
  * Creation preserves the policy its author wrote, so the mode that comes back
  * is normally the mode that was asked for. When it is not — normalization
@@ -46,8 +66,13 @@ export default class CommitmentsCreate extends BaseCommand {
         'watch-space': import("@oclif/core/lib/interfaces").OptionFlag<string[] | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         'watch-monitor': import("@oclif/core/lib/interfaces").OptionFlag<string[] | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         cadence: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        'event-driven': import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
         'cadence-mode': import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         timezone: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        mode: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        delivery: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        repo: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        base: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         autonomy: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         isolation: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         'max-nudges': import("@oclif/core/lib/interfaces").OptionFlag<number | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;