@skrr-ai/cli 0.1.17 → 0.1.19

package/dist/commands/commitments/endpoints/connect.js

@@ -4,21 +4,14 @@ const core_1 = require("@oclif/core");
 const base_command_1 = require("../../../base-command");
 const commitment_endpoints_1 = require("../../../lib/commitment-endpoints");
 /**
- * `skrr commitments endpoints connect <id>` — start (or finish) the handshake.
- *
- * For a provider-backed endpoint this returns an AUTHORIZATION URL rather than a
- * connected endpoint: open it, approve, then run the same command with
- * `--finalize`. That two-step is the reason this needed a CLI — without it a
- * headless operator could not connect a delivery target at all.
- *
- * `--reconnect` runs the same handshake for an endpoint that has gone stale.
+ * `skrr commitments endpoints connect <id>` probes the Agent's native App or
+ * Slack transport and records its live health. `--reconnect` reruns the same
+ * probe for a stale/revoked endpoint.
  */
 class CommitmentsEndpointsConnect extends base_command_1.BaseCommand {
-    static description = 'Connect, finalize, or reconnect a commitment endpoint';
+    static description = 'Connect or recheck a native commitment endpoint';
     static examples = [
         '<%= config.bin %> commitments endpoints connect ep_abc123',
-        '<%= config.bin %> commitments endpoints connect ep_abc123 --finalize',
-        '<%= config.bin %> commitments endpoints connect ep_abc123 --finalize --request req_xyz',
         '<%= config.bin %> commitments endpoints connect ep_abc123 --reconnect',
     ];
     static args = {
@@ -26,29 +19,14 @@ class CommitmentsEndpointsConnect extends base_command_1.BaseCommand {
     };
     static flags = {
         json: core_1.Flags.boolean({ description: 'Output as JSON' }),
-        finalize: core_1.Flags.boolean({
-            description: 'Complete an OAuth handshake that `connect` started',
-            exclusive: ['reconnect'],
-        }),
-        reconnect: core_1.Flags.boolean({
-            description: 'Re-run the handshake for a stale endpoint',
-            exclusive: ['finalize'],
-        }),
-        request: core_1.Flags.string({
-            description: 'Connection request id (defaults to the one stored on the endpoint)',
-        }),
+        reconnect: core_1.Flags.boolean({ description: 'Re-run the native transport probe' }),
     };
     async run() {
         this.requireAuth();
         const { args, flags } = await this.parse(CommitmentsEndpointsConnect);
         let result;
         try {
-            if (flags.finalize) {
-                result = await commitment_endpoints_1.commitmentEndpointApi.finalizeConnect(args.endpointId, {
-                    ...(flags.request ? { requestId: flags.request } : {}),
-                });
-            }
-            else if (flags.reconnect) {
+            if (flags.reconnect) {
                 result = await commitment_endpoints_1.commitmentEndpointApi.reconnect(args.endpointId);
             }
             else {
@@ -62,15 +40,6 @@ class CommitmentsEndpointsConnect extends base_command_1.BaseCommand {
             this.log(JSON.stringify(result, null, 2));
             return;
         }
-        const oauth = result.oauth;
-        const authorizationUrl = oauth?.authorizationUrl ??
-            result.authorizationUrl;
-        if (authorizationUrl) {
-            this.log('Authorization required. Open this URL, approve, then re-run with --finalize:');
-            this.log('');
-            this.log(`  ${authorizationUrl}`);
-            return;
-        }
         const endpoint = (result.endpoint ?? result);
         this.log(`${args.endpointId} → ${String(endpoint.status ?? 'updated')}`);
     }

package/dist/commands/commitments/endpoints/create.d.ts

@@ -7,9 +7,8 @@ import { BaseCommand } from '../../../base-command';
  * cannot use it. Declaring capabilities up front is what lets the Attention
  * Contract refuse an impossible delivery instead of dropping it silently.
  *
- * Supplying `--integration-provider` + `--toolkit` puts the endpoint on the real
- * OAuth lifecycle; without them the endpoint is confirmed manually via
- * `endpoints health`.
+ * Slack endpoints use the Agent's native Slack installation; App DM is built
+ * in. Connector metadata is not a delivery adapter and is not authorable here.
  */
 export default class CommitmentsEndpointsCreate extends BaseCommand {
     static description: string;
@@ -18,15 +17,9 @@ export default class CommitmentsEndpointsCreate extends BaseCommand {
         json: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
         agent: import("@oclif/core/lib/interfaces").OptionFlag<string, import("@oclif/core/lib/interfaces").CustomOptions>;
         label: import("@oclif/core/lib/interfaces").OptionFlag<string, import("@oclif/core/lib/interfaces").CustomOptions>;
-        provider: import("@oclif/core/lib/interfaces").OptionFlag<string, import("@oclif/core/lib/interfaces").CustomOptions>;
         destination: import("@oclif/core/lib/interfaces").OptionFlag<string, import("@oclif/core/lib/interfaces").CustomOptions>;
         target: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         capability: import("@oclif/core/lib/interfaces").OptionFlag<string[], import("@oclif/core/lib/interfaces").CustomOptions>;
-        'integration-provider': import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
-        toolkit: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
-        'authorization-url': import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
-        'reconnect-url': import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
-        'external-ref': import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
     };
     run(): Promise<void>;
 }

package/dist/commands/commitments/endpoints/create.js

@@ -11,23 +11,22 @@ const commitment_endpoints_1 = require("../../../lib/commitment-endpoints");
  * cannot use it. Declaring capabilities up front is what lets the Attention
  * Contract refuse an impossible delivery instead of dropping it silently.
  *
- * Supplying `--integration-provider` + `--toolkit` puts the endpoint on the real
- * OAuth lifecycle; without them the endpoint is confirmed manually via
- * `endpoints health`.
+ * Slack endpoints use the Agent's native Slack installation; App DM is built
+ * in. Connector metadata is not a delivery adapter and is not authorable here.
  */
 class CommitmentsEndpointsCreate extends base_command_1.BaseCommand {
     static description = 'Create a commitment delivery endpoint';
     static examples = [
-        '<%= config.bin %> commitments endpoints create --agent agent_abc --label "Ops channel" --provider slack --destination slack_channel --target C123 --capability push --capability reply',
-        '<%= config.bin %> commitments endpoints create --agent agent_abc --label "My DM" --provider slack --destination slack_owner_dm --capability push --integration-provider slack --toolkit slack',
+        '<%= config.bin %> commitments endpoints create --agent agent_abc --label "Ops channel" --destination slack_channel --target C123 --capability push --capability reply',
+        '<%= config.bin %> commitments endpoints create --agent agent_abc --label "My DM" --destination slack_owner_dm --capability push',
     ];
     static flags = {
         json: core_1.Flags.boolean({ description: 'Output as JSON' }),
         agent: core_1.Flags.string({ description: 'Agent ID', required: true }),
         label: core_1.Flags.string({ description: 'Human-readable label', required: true }),
-        provider: core_1.Flags.string({ description: 'Provider, e.g. slack / email', required: true }),
         destination: core_1.Flags.string({
-            description: 'Channel-neutral destination, e.g. slack_channel / app_owner_dm / email',
+            description: 'Implemented destination: slack_channel, slack_owner_dm, or app_owner_dm',
+            options: [...commitment_endpoints_1.COMMITMENT_ENDPOINT_DESTINATIONS],
             required: true,
         }),
         target: core_1.Flags.string({ description: 'Channel/address id for destinations that address one' }),
@@ -37,13 +36,6 @@ class CommitmentsEndpointsCreate extends base_command_1.BaseCommand {
             multiple: true,
             required: true,
         }),
-        'integration-provider': core_1.Flags.string({
-            description: 'Installed IntegrationProvider to run the OAuth lifecycle through',
-        }),
-        toolkit: core_1.Flags.string({ description: 'Toolkit for the integration provider' }),
-        'authorization-url': core_1.Flags.string({ description: 'Pre-known authorization URL' }),
-        'reconnect-url': core_1.Flags.string({ description: 'Pre-known reconnect URL' }),
-        'external-ref': core_1.Flags.string({ description: 'Provider-side reference id' }),
     };
     async run() {
         this.requireAuth();
@@ -53,17 +45,10 @@ class CommitmentsEndpointsCreate extends base_command_1.BaseCommand {
             endpoint = await commitment_endpoints_1.commitmentEndpointApi.create({
                 agentId: flags.agent,
                 label: flags.label,
-                provider: flags.provider,
+                provider: flags.destination.startsWith('slack_') ? 'slack' : 'app',
                 destination: flags.destination,
                 capabilities: flags.capability,
                 ...(flags.target ? { target: flags.target } : {}),
-                ...(flags['integration-provider']
-                    ? { integrationProvider: flags['integration-provider'] }
-                    : {}),
-                ...(flags.toolkit ? { toolkit: flags.toolkit } : {}),
-                ...(flags['authorization-url'] ? { authorizationUrl: flags['authorization-url'] } : {}),
-                ...(flags['reconnect-url'] ? { reconnectUrl: flags['reconnect-url'] } : {}),
-                ...(flags['external-ref'] ? { externalRef: flags['external-ref'] } : {}),
             });
         }
         catch (err) {
@@ -74,7 +59,9 @@ class CommitmentsEndpointsCreate extends base_command_1.BaseCommand {
             return;
         }
         this.log(`Created ${endpoint.id} (${endpoint.status ?? 'pending'}).`);
-        this.log(`Next: skrr commitments endpoints connect ${endpoint.id}`);
+        this.log(endpoint.status === 'connected'
+            ? 'The built-in App endpoint is ready.'
+            : `Next: skrr commitments endpoints connect ${endpoint.id}`);
     }
 }
 exports.default = CommitmentsEndpointsCreate;

package/dist/commands/commitments/mode.d.ts

@@ -0,0 +1,15 @@
+import { BaseCommand } from '../../base-command';
+export default class CommitmentsMode extends BaseCommand {
+    static description: string;
+    static examples: string[];
+    static args: {
+        id: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;
+        mode: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static flags: {
+        json: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+        verbose: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+        reason: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+    };
+    run(): Promise<void>;
+}

package/dist/commands/commitments/mode.js

@@ -0,0 +1,58 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const core_1 = require("@oclif/core");
+const base_command_1 = require("../../base-command");
+const commitments_1 = require("../../lib/commitments");
+const commitment_product_1 = require("../../lib/commitment-product");
+const web_url_1 = require("../../lib/web-url");
+class CommitmentsMode extends base_command_1.BaseCommand {
+    static description = 'Choose how a commitment progresses: Monitor, Prepare, or Execute';
+    static examples = ['<%= config.bin %> commitments mode <id> execute'];
+    static args = {
+        id: core_1.Args.string({ required: true, ignoreStdin: true }),
+        mode: core_1.Args.string({
+            required: true,
+            ignoreStdin: true,
+            options: [...commitment_product_1.COMMITMENT_PRODUCT_MODES],
+        }),
+    };
+    static flags = {
+        json: core_1.Flags.boolean({ description: 'Output the complete contract as JSON' }),
+        verbose: core_1.Flags.boolean({ description: 'Include compatibility values' }),
+        reason: core_1.Flags.string({ description: 'Reason recorded with this contract change' }),
+    };
+    async run() {
+        this.requireAuth();
+        const { args, flags } = await this.parse(CommitmentsMode);
+        try {
+            if (args.mode === 'off') {
+                this.error('Use commitments pause <id> to stop wakes; lifecycle is separate from mode.');
+            }
+            const result = await commitments_1.commitmentApi.mode(args.id, {
+                mode: (0, commitment_product_1.productMode)(args.mode),
+                ...(flags.reason ? { reason: flags.reason } : {}),
+            });
+            const linked = (0, web_url_1.withCommitmentUrl)(this.cliConfig.baseURL, result);
+            if (flags.json)
+                return this.log(JSON.stringify(linked, null, 2));
+            const stagingForPromotion = result.pack?.phase === 'shadow';
+            this.log(stagingForPromotion
+                ? `Promotion mode staged as ${(0, commitment_product_1.productModeLabel)(args.mode)}.`
+                : `Mode set to ${(0, commitment_product_1.productModeLabel)(args.mode)}.`);
+            if (stagingForPromotion) {
+                this.log('Live Pack Shadow remains Monitor until explicit promotion.');
+            }
+            if ((0, commitment_product_1.productMode)(args.mode) === 'monitor') {
+                this.log(`${stagingForPromotion ? 'Promotion delivery' : 'Delivery'} set to Report only. Monitor cannot create patches, branches, or pull requests.`);
+            }
+            (0, commitments_1.renderCommitmentSummary)(result, (line) => this.log(line));
+            if (flags.verbose)
+                this.log(`Compatibility value: ${result.policy?.autonomyMode}`);
+            this.log(`URL: ${linked.url}`);
+        }
+        catch (error) {
+            this.handleApiError(error);
+        }
+    }
+}
+exports.default = CommitmentsMode;

package/dist/commands/commitments/pack/promote.d.ts

@@ -1,6 +1,6 @@
 import { BaseCommand } from '../../../base-command';
 /**
- * Graduate a Pack out of shadow and restore the saved policy.
+ * Graduate a Pack out of shadow and restore the saved Mode and delivery.
  *
  * Explicit by design — promotion is never inferred from a passing preflight.
  * The saved policy tracks explicit policy writes made DURING shadow, so an

package/dist/commands/commitments/pack/promote.js

@@ -3,15 +3,16 @@ Object.defineProperty(exports, "__esModule", { value: true });
 const core_1 = require("@oclif/core");
 const base_command_1 = require("../../../base-command");
 const commitments_1 = require("../../../lib/commitments");
+const commitment_product_1 = require("../../../lib/commitment-product");
 /**
- * Graduate a Pack out of shadow and restore the saved policy.
+ * Graduate a Pack out of shadow and restore the saved Mode and delivery.
  *
  * Explicit by design — promotion is never inferred from a passing preflight.
  * The saved policy tracks explicit policy writes made DURING shadow, so an
  * autonomy change made while observing is not discarded here.
  */
 class CommitmentsPackPromote extends base_command_1.BaseCommand {
-    static description = 'Graduate a Pack out of shadow, restoring the policy saved at shadow activation';
+    static description = 'Graduate a Pack out of shadow, restoring its staged Mode and delivery';
     static examples = ['<%= config.bin %> commitments pack promote <commitment-id>'];
     static args = {
         id: core_1.Args.string({ description: 'Commitment ID', required: true, ignoreStdin: true }),
@@ -36,7 +37,10 @@ class CommitmentsPackPromote extends base_command_1.BaseCommand {
         this.log(`Phase: ${result.phase}`);
         const mode = result.commitment?.policy?.autonomyMode;
         if (mode)
-            this.log(`Autonomy restored to: ${mode}`);
+            this.log(`Mode: ${(0, commitment_product_1.productModeLabel)(mode)}`);
+        if (result.commitment?.delivery?.mode) {
+            this.log(`Delivery: ${(0, commitment_product_1.deliveryLabel)(result.commitment.delivery.mode)}`);
+        }
     }
 }
 exports.default = CommitmentsPackPromote;

package/dist/commands/commitments/pack/shadow.d.ts

@@ -1,7 +1,8 @@
 import { BaseCommand } from '../../../base-command';
+export declare const SHADOW_ACTIVE_COPY = "Shadow is active in Monitor: checks continue, but delivery cannot run and live delivery stays\nReport only. The prior Mode and delivery are saved as the promotion target;\n`skrr commitments pack promote` applies them.";
 /**
- * Activate shadow: the Commitment goes active and starts checking, but its
- * autonomy is forced to `off` and the prior policy is saved for `promote`.
+ * Activate shadow: the Commitment goes active in Monitor and starts checking.
+ * Its prior Mode and delivery are saved as the target for `promote`.
  *
  * Requires a STORED preflight verdict of `ready`, which is why
  * `pack preflight` exists as its own command.

package/dist/commands/commitments/pack/shadow.js

@@ -1,17 +1,19 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.SHADOW_ACTIVE_COPY = void 0;
 const core_1 = require("@oclif/core");
 const base_command_1 = require("../../../base-command");
 const commitments_1 = require("../../../lib/commitments");
+exports.SHADOW_ACTIVE_COPY = 'Shadow is active in Monitor: checks continue, but delivery cannot run and live delivery stays\nReport only. The prior Mode and delivery are saved as the promotion target;\n`skrr commitments pack promote` applies them.';
 /**
- * Activate shadow: the Commitment goes active and starts checking, but its
- * autonomy is forced to `off` and the prior policy is saved for `promote`.
+ * Activate shadow: the Commitment goes active in Monitor and starts checking.
+ * Its prior Mode and delivery are saved as the target for `promote`.
  *
  * Requires a STORED preflight verdict of `ready`, which is why
  * `pack preflight` exists as its own command.
  */
 class CommitmentsPackShadow extends base_command_1.BaseCommand {
-    static description = 'Activate shadow mode: the Pack observes and checks, but takes no autonomous action';
+    static description = 'Activate shadow: run the Pack in Monitor while saving its Mode and delivery promotion target';
     static examples = ['<%= config.bin %> commitments pack shadow <commitment-id>'];
     static args = {
         id: core_1.Args.string({ description: 'Commitment ID', required: true, ignoreStdin: true }),
@@ -34,7 +36,7 @@ class CommitmentsPackShadow extends base_command_1.BaseCommand {
         }
         this.log(`Pack:  ${result.pack?.id}@${result.pack?.version}`);
         this.log(`Phase: ${result.phase}`);
-        this.log('\nAutonomy is forced off while in shadow. The policy in force before this call is saved,\nand `skrr commitments pack promote` restores it.');
+        this.log(`\n${exports.SHADOW_ACTIVE_COPY}`);
     }
 }
 exports.default = CommitmentsPackShadow;

package/dist/commands/commitments/patch.d.ts

@@ -0,0 +1,14 @@
+import { BaseCommand } from '../../base-command';
+export default class CommitmentsPatch extends BaseCommand {
+    static description: string;
+    static examples: string[];
+    static args: {
+        id: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static flags: {
+        task: import("@oclif/core/lib/interfaces").OptionFlag<string, import("@oclif/core/lib/interfaces").CustomOptions>;
+        output: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        json: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+    };
+    run(): Promise<void>;
+}

package/dist/commands/commitments/patch.js

@@ -0,0 +1,51 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const core_1 = require("@oclif/core");
+const node_crypto_1 = require("node:crypto");
+const node_fs_1 = require("node:fs");
+const node_path_1 = require("node:path");
+const base_command_1 = require("../../base-command");
+const commitments_1 = require("../../lib/commitments");
+class CommitmentsPatch extends base_command_1.BaseCommand {
+    static description = 'Download the durable patch retained by a Commitment delivery Task';
+    static examples = [
+        '<%= config.bin %> commitments patch <id> --task <task-id> --output remediation.patch',
+    ];
+    static args = { id: core_1.Args.string({ required: true, ignoreStdin: true }) };
+    static flags = {
+        task: core_1.Flags.string({
+            required: true,
+            description: 'Delivery Task ID from the execution receipt',
+        }),
+        output: core_1.Flags.string({
+            description: 'Save a new patch file (existing files are not overwritten)',
+        }),
+        json: core_1.Flags.boolean({ description: 'Output patch content and integrity metadata as JSON' }),
+    };
+    async run() {
+        this.requireAuth();
+        const { args, flags } = await this.parse(CommitmentsPatch);
+        try {
+            const result = await commitments_1.commitmentApi.deliveryPatch(args.id, flags.task);
+            const content = result.patch.content;
+            if ((0, node_crypto_1.createHash)('sha256').update(content).digest('hex') !== result.patch.sha256 ||
+                Buffer.byteLength(content, 'utf8') !== result.patch.bytes) {
+                this.error('Patch integrity check failed. The downloaded content was not saved.');
+            }
+            if (flags.output) {
+                const output = (0, node_path_1.resolve)(flags.output);
+                (0, node_fs_1.writeFileSync)(output, content, { encoding: 'utf8', flag: 'wx', mode: 0o600 });
+                if (!flags.json)
+                    this.log(`Patch saved: ${output}\nSHA-256: ${result.patch.sha256}`);
+            }
+            if (flags.json)
+                this.log(JSON.stringify(result, null, 2));
+            else if (!flags.output)
+                this.log(content);
+        }
+        catch (error) {
+            this.handleApiError(error);
+        }
+    }
+}
+exports.default = CommitmentsPatch;

package/dist/commands/commitments/preflight.d.ts

@@ -23,7 +23,7 @@ type PreflightGate = CommitmentPreflightReport['gates'][number];
  * The note gets its own indented line. It is prose, and hanging it off the same
  * dash as a short code puts two different kinds of thing in one slot.
  */
-export declare function preflightGateLines(gate: PreflightGate): string[];
+export declare function preflightGateLines(gate: PreflightGate, verbose?: boolean): string[];
 export default class CommitmentsPreflight extends BaseCommand {
     static description: string;
     static examples: string[];
@@ -32,6 +32,7 @@ export default class CommitmentsPreflight extends BaseCommand {
     };
     static flags: {
         json: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+        verbose: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
         next: import("@oclif/core/lib/interfaces").OptionFlag<number | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         'from-json': import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         'event-fixture': import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;

package/dist/commands/commitments/preflight.js

@@ -22,9 +22,11 @@ const prompt_1 = require("../../lib/prompt");
  * The note gets its own indented line. It is prose, and hanging it off the same
  * dash as a short code puts two different kinds of thing in one slot.
  */
-function preflightGateLines(gate) {
+function preflightGateLines(gate, verbose = false) {
     const mark = gate.verdict === 'pass' ? 'ok' : gate.verdict === 'block' ? 'BLOCK' : 'warn';
-    const lines = [`  ${mark.padEnd(5)} ${gate.label}${gate.reason ? ` — ${gate.reason}` : ''}`];
+    const lines = [
+        `  ${mark.padEnd(5)} ${gate.label}${verbose && gate.reason ? ` — ${gate.reason}` : ''}`,
+    ];
     const note = gate.detail?.note;
     if (typeof note === 'string' && note.trim()) {
         lines.push(`        ${note.trim()}`);
@@ -55,6 +57,7 @@ class CommitmentsPreflight extends base_command_1.BaseCommand {
     };
     static flags = {
         json: core_1.Flags.boolean({ description: 'Output the complete preflight report as JSON' }),
+        verbose: core_1.Flags.boolean({ description: 'Include diagnostic gate codes' }),
         next: core_1.Flags.integer({ description: 'Number of upcoming runs to project (1–10)' }),
         'from-json': core_1.Flags.string({
             description: 'Unsaved Commitment create body file, or - for stdin',
@@ -92,12 +95,28 @@ class CommitmentsPreflight extends base_command_1.BaseCommand {
             this.log(JSON.stringify(report, null, 2));
             return;
         }
-        this.log(`${args.id ? 'Preflight' : 'Pre-create preview (nothing persisted)'}: ${String(report.verdict).replace(/_/g, ' ')}`);
+        this.log(`${args.id ? 'Preflight' : 'Pre-create preview (nothing persisted)'}: ${report.verdict === 'ready' ? 'Ready to run' : report.verdict === 'blocked' ? 'Run is blocked' : 'A capability or configuration check is still needed'}`);
         this.log('\nGates:');
         for (const gate of report.gates || []) {
-            for (const line of preflightGateLines(gate))
+            for (const line of preflightGateLines(gate, flags.verbose))
                 this.log(line);
         }
+        if (report.capabilities?.length) {
+            this.log('\nWhere access comes from:');
+            const sourceLabels = {
+                event_payload: 'Event facts',
+                platform_grant: 'Platform-attested access',
+                local_harness: 'This machine’s tooling',
+                cloud_runtime: 'Runtime-scoped access',
+            };
+            for (const capability of report.capabilities) {
+                this.log(`  ${sourceLabels[capability.source]} · ${capability.provider} · ${capability.capability}${capability.scope ? ` · ${capability.scope}` : ''}: ${capability.status}`);
+                if (capability.testedAt)
+                    this.log(`    Tested: ${capability.testedAt}${capability.expiresAt ? ` · expires ${capability.expiresAt}` : ''}`);
+                if (capability.attestation === 'machine')
+                    this.log('    Machine-attested; not platform-attested.');
+            }
+        }
         if (report.nextRuns?.length) {
             this.log('\nNext runs:');
             for (const run of report.nextRuns)

package/dist/commands/commitments/receipt.d.ts

@@ -0,0 +1,15 @@
+import { BaseCommand } from '../../base-command';
+export default class CommitmentsReceipt extends BaseCommand {
+    static description: string;
+    static examples: string[];
+    static args: {
+        id: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static flags: {
+        latest: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+        limit: import("@oclif/core/lib/interfaces").OptionFlag<number | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        json: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+        verbose: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+    };
+    run(): Promise<void>;
+}

package/dist/commands/commitments/receipt.js

@@ -0,0 +1,34 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const core_1 = require("@oclif/core");
+const base_command_1 = require("../../base-command");
+const commitments_1 = require("../../lib/commitments");
+const commitment_product_1 = require("../../lib/commitment-product");
+class CommitmentsReceipt extends base_command_1.BaseCommand {
+    static description = 'Explain what happened from the event through work, delivery, and verification';
+    static examples = ['<%= config.bin %> commitments receipt <id> --latest'];
+    static args = { id: core_1.Args.string({ required: true, ignoreStdin: true }) };
+    static flags = {
+        latest: core_1.Flags.boolean({ description: 'Show the latest wake (default)' }),
+        limit: core_1.Flags.integer({ description: 'Number of receipts to show', min: 1, max: 100 }),
+        json: core_1.Flags.boolean({ description: 'Output projected receipts as JSON' }),
+        verbose: core_1.Flags.boolean({ description: 'Include source IDs and diagnostic traces' }),
+    };
+    async run() {
+        this.requireAuth();
+        const { args, flags } = await this.parse(CommitmentsReceipt);
+        try {
+            const result = await commitments_1.commitmentApi.receipts(args.id, flags.latest ? 1 : flags.limit || 1);
+            if (flags.json)
+                return this.log(JSON.stringify(result, null, 2));
+            if (!result.receipts.length)
+                return this.log('No wake has been observed yet.');
+            for (const receipt of result.receipts)
+                (0, commitment_product_1.renderExecutionReceipt)(receipt, (line) => this.log(line), flags.verbose);
+        }
+        catch (error) {
+            this.handleApiError(error);
+        }
+    }
+}
+exports.default = CommitmentsReceipt;

package/dist/commands/commitments/remediate.d.ts

@@ -11,7 +11,6 @@ import { BaseCommand } from '../../base-command';
  *   pause_commitment        stop the loop entirely
  *   mute_user_nudges        keep watching, stop interrupting (max nudges → 0)
  *   reduce_nudge_frequency  at most one nudge per day
- *   tighten_policy          require approval for the risky action classes
  *   mark_noop               record that this fired for no reason
  */
 export default class CommitmentsRemediate extends BaseCommand {

package/dist/commands/commitments/remediate.js

@@ -15,7 +15,6 @@ const commitments_1 = require("../../lib/commitments");
  *   pause_commitment        stop the loop entirely
  *   mute_user_nudges        keep watching, stop interrupting (max nudges → 0)
  *   reduce_nudge_frequency  at most one nudge per day
- *   tighten_policy          require approval for the risky action classes
  *   mark_noop               record that this fired for no reason
  */
 class CommitmentsRemediate extends base_command_1.BaseCommand {
@@ -30,8 +29,11 @@ class CommitmentsRemediate extends base_command_1.BaseCommand {
     static flags = {
         json: core_1.Flags.boolean({ description: 'Output as JSON' }),
         action: core_1.Flags.string({
-            description: 'Remediation action',
-            options: [...commitments_1.COMMITMENT_REMEDIATION_ACTIONS],
+            description: 'Remediation action. Change work authority with commitments mode; Workspace approval rules belong in Workspace governance.',
+            // `tighten_policy` remains a REST compatibility value for legacy rows. It
+            // is deliberately absent from the product CLI: v2 authority changes are
+            // explicit Mode changes, never a hidden risk/approval tier.
+            options: commitments_1.COMMITMENT_REMEDIATION_ACTIONS.filter((action) => action !== 'tighten_policy'),
             required: true,
         }),
         reason: core_1.Flags.string({ description: 'Why (recorded on the boundary-change ledger)' }),

package/dist/commands/commitments/reports.js

@@ -6,7 +6,16 @@ const base_command_1 = require("../../base-command");
 const commitments_1 = require("../../lib/commitments");
 const commitment_terms_1 = require("../../lib/commitment-terms");
 /** Destinations that address one specific place and therefore need a target. */
-const DESTINATIONS_NEEDING_TARGET = new Set(['slack_channel', 'email']);
+const DESTINATIONS_NEEDING_TARGET = new Set(['slack_channel']);
+/**
+ * Keep the CLI safe across a rolling data-provider build. Older installed
+ * packages expose the compatibility destination list but not the narrowed
+ * authoring list; derive the same restriction instead of crashing command
+ * discovery or accidentally offering the inert email transport.
+ */
+const AUTHORABLE_REPORT_DESTINATIONS = Array.isArray(data_provider_1.COMMITMENT_AUTHORABLE_REPORT_DESTINATIONS)
+    ? data_provider_1.COMMITMENT_AUTHORABLE_REPORT_DESTINATIONS
+    : data_provider_1.COMMITMENT_REPORT_DESTINATIONS.filter((destination) => destination !== 'email');
 /**
  * Identity of a report target = destination + its target id. The same channel
  * may legitimately appear twice with different `on` conditions (a digest on
@@ -41,10 +50,10 @@ class CommitmentsReports extends base_command_1.BaseCommand {
         json: core_1.Flags.boolean({ description: 'Output as JSON' }),
         add: core_1.Flags.string({
             description: 'Destination to add',
-            options: [...data_provider_1.COMMITMENT_REPORT_DESTINATIONS],
+            options: [...AUTHORABLE_REPORT_DESTINATIONS],
         }),
         target: core_1.Flags.string({
-            description: 'Channel id or address, for destinations that address one (slack_channel, email)',
+            description: 'Channel id for slack_channel. App and owner-DM destinations need no target.',
         }),
         on: core_1.Flags.string({
             description: 'When to report (default: material_change)',

package/dist/commands/commitments/show.d.ts

@@ -15,6 +15,7 @@ export default class CommitmentsShow extends BaseCommand {
     };
     static flags: {
         json: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+        verbose: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
     };
     run(): Promise<void>;
 }