@skrr-ai/cli 0.1.46 → 0.1.48

package/dist/commands/native/allow.js

@@ -0,0 +1,45 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const core_1 = require("@oclif/core");
+const native_1 = require("../native");
+/**
+ * Make sure one application is in scope.
+ *
+ * It unblocks an app that `native deny` blocked, and adds one to a restriction
+ * if a restriction exists. With no restriction set it reports that the app was
+ * already in scope — because every application is, by default.
+ *
+ * It deliberately does NOT create a restriction out of an empty list. Doing so
+ * would silently narrow scope from "every app" to "this one app", which is the
+ * opposite of what the word promises. Use `native restrict-to` to narrow.
+ */
+class NativeAllow extends core_1.Command {
+    static description = 'Make sure an application is in scope (unblocks it, or adds it to a restriction)';
+    static examples = [
+        '<%= config.bin %> native allow "Slack"',
+        '<%= config.bin %> native allow com.apple.Notes',
+    ];
+    static args = {
+        app: core_1.Args.string({
+            description: 'Application name or bundle id',
+            required: true,
+            // Without this oclif reads stdin for a missing positional, so the command
+            // hangs from a pipe instead of refusing.
+            ignoreStdin: true,
+        }),
+    };
+    static flags = {
+        ...native_1.nativeProfileFlag,
+        json: core_1.Flags.boolean({ description: 'Output JSON' }),
+    };
+    async run() {
+        const { args, flags } = await this.parse(NativeAllow);
+        await (0, native_1.forwardNativeCommand)(this, [
+            'allow',
+            args.app,
+            ...(0, native_1.profilePassthrough)(flags.profile),
+            ...(flags.json ? ['--json'] : []),
+        ]);
+    }
+}
+exports.default = NativeAllow;

package/dist/commands/native/deny.d.ts

@@ -0,0 +1,24 @@
+import { Command } from '@oclif/core';
+/**
+ * Block one application from ever being driven on this computer.
+ *
+ * The counterpart of the allow-everything default: it lets someone keep the
+ * default and carve out the two or three apps they do not want touched, which
+ * is a far smaller thing to write down than enumerating every app they do.
+ *
+ * Takes effect on the NEXT call, not the next restart — revocation is the
+ * user's only stop button, and one that waited for a restart would fail at
+ * exactly the moment they wanted it.
+ */
+export default class NativeDeny extends Command {
+    static description: string;
+    static examples: string[];
+    static args: {
+        app: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static flags: {
+        json: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+        profile: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+    };
+    run(): Promise<void>;
+}

package/dist/commands/native/deny.js

@@ -0,0 +1,43 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const core_1 = require("@oclif/core");
+const native_1 = require("../native");
+/**
+ * Block one application from ever being driven on this computer.
+ *
+ * The counterpart of the allow-everything default: it lets someone keep the
+ * default and carve out the two or three apps they do not want touched, which
+ * is a far smaller thing to write down than enumerating every app they do.
+ *
+ * Takes effect on the NEXT call, not the next restart — revocation is the
+ * user's only stop button, and one that waited for a restart would fail at
+ * exactly the moment they wanted it.
+ */
+class NativeDeny extends core_1.Command {
+    static description = 'Block an application from ever being driven on this computer';
+    static examples = [
+        '<%= config.bin %> native deny "Slack"',
+        '<%= config.bin %> native deny "*"',
+    ];
+    static args = {
+        app: core_1.Args.string({
+            description: 'Application name or bundle id',
+            required: true,
+            ignoreStdin: true,
+        }),
+    };
+    static flags = {
+        ...native_1.nativeProfileFlag,
+        json: core_1.Flags.boolean({ description: 'Output JSON' }),
+    };
+    async run() {
+        const { args, flags } = await this.parse(NativeDeny);
+        await (0, native_1.forwardNativeCommand)(this, [
+            'deny',
+            args.app,
+            ...(0, native_1.profilePassthrough)(flags.profile),
+            ...(flags.json ? ['--json'] : []),
+        ]);
+    }
+}
+exports.default = NativeDeny;

package/dist/commands/native/disable.d.ts

@@ -0,0 +1,17 @@
+import { Command } from '@oclif/core';
+/**
+ * Turn native application control off.
+ *
+ * Both flags go off together: leaving `allowCloudAgents` true under
+ * `enabled: false` is a state that reads like a grant, is not one, and would
+ * come back the moment someone re-enabled.
+ */
+export default class NativeDisable extends Command {
+    static description: string;
+    static examples: string[];
+    static flags: {
+        json: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+        profile: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+    };
+    run(): Promise<void>;
+}

package/dist/commands/native/disable.js

@@ -0,0 +1,28 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const core_1 = require("@oclif/core");
+const native_1 = require("../native");
+/**
+ * Turn native application control off.
+ *
+ * Both flags go off together: leaving `allowCloudAgents` true under
+ * `enabled: false` is a state that reads like a grant, is not one, and would
+ * come back the moment someone re-enabled.
+ */
+class NativeDisable extends core_1.Command {
+    static description = 'Turn native application control off for this computer';
+    static examples = ['<%= config.bin %> native disable'];
+    static flags = {
+        ...native_1.nativeProfileFlag,
+        json: core_1.Flags.boolean({ description: 'Output JSON' }),
+    };
+    async run() {
+        const { flags } = await this.parse(NativeDisable);
+        await (0, native_1.forwardNativeCommand)(this, [
+            'disable',
+            ...(0, native_1.profilePassthrough)(flags.profile),
+            ...(flags.json ? ['--json'] : []),
+        ]);
+    }
+}
+exports.default = NativeDisable;

package/dist/commands/native/enable.d.ts

@@ -0,0 +1,12 @@
+import { Command } from '@oclif/core';
+/** Turn native application control on for this computer. */
+export default class NativeEnable extends Command {
+    static description: string;
+    static examples: string[];
+    static flags: {
+        'cloud-agents': import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+        json: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+        profile: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+    };
+    run(): Promise<void>;
+}

package/dist/commands/native/enable.js

@@ -0,0 +1,29 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const core_1 = require("@oclif/core");
+const native_1 = require("../native");
+/** Turn native application control on for this computer. */
+class NativeEnable extends core_1.Command {
+    static description = 'Turn native application control on for this computer';
+    static examples = [
+        '<%= config.bin %> native enable',
+        '<%= config.bin %> native enable --cloud-agents',
+    ];
+    static flags = {
+        ...native_1.nativeProfileFlag,
+        'cloud-agents': core_1.Flags.boolean({
+            description: 'Also allow cloud agents to drive native apps on this computer',
+        }),
+        json: core_1.Flags.boolean({ description: 'Output JSON' }),
+    };
+    async run() {
+        const { flags } = await this.parse(NativeEnable);
+        await (0, native_1.forwardNativeCommand)(this, [
+            'enable',
+            ...(0, native_1.profilePassthrough)(flags.profile),
+            ...(flags['cloud-agents'] ? ['--cloud-agents'] : []),
+            ...(flags.json ? ['--json'] : []),
+        ]);
+    }
+}
+exports.default = NativeEnable;

package/dist/commands/native/list-apps.d.ts

@@ -0,0 +1,19 @@
+import { Command } from '@oclif/core';
+/**
+ * List the applications running on this computer, marking which may take
+ * irreversible actions.
+ *
+ * This is how the scope gets CHOSEN, so it works before anything is in scope —
+ * the same reason `list_apps` is one of two verbs the policy exempts from the
+ * app check. Without it a user had to guess an application's exact name and
+ * hope the comparison matched.
+ */
+export default class NativeListApps extends Command {
+    static description: string;
+    static examples: string[];
+    static flags: {
+        json: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+        profile: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+    };
+    run(): Promise<void>;
+}

package/dist/commands/native/list-apps.js

@@ -0,0 +1,30 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const core_1 = require("@oclif/core");
+const native_1 = require("../native");
+/**
+ * List the applications running on this computer, marking which may take
+ * irreversible actions.
+ *
+ * This is how the scope gets CHOSEN, so it works before anything is in scope —
+ * the same reason `list_apps` is one of two verbs the policy exempts from the
+ * app check. Without it a user had to guess an application's exact name and
+ * hope the comparison matched.
+ */
+class NativeListApps extends core_1.Command {
+    static description = 'List running applications and which may take irreversible actions';
+    static examples = ['<%= config.bin %> native list-apps'];
+    static flags = {
+        ...native_1.nativeProfileFlag,
+        json: core_1.Flags.boolean({ description: 'Output JSON' }),
+    };
+    async run() {
+        const { flags } = await this.parse(NativeListApps);
+        await (0, native_1.forwardNativeCommand)(this, [
+            'list-apps',
+            ...(0, native_1.profilePassthrough)(flags.profile),
+            ...(flags.json ? ['--json'] : []),
+        ]);
+    }
+}
+exports.default = NativeListApps;

package/dist/commands/native/restrict-to.d.ts

@@ -0,0 +1,22 @@
+import { Command } from '@oclif/core';
+/**
+ * Narrow native control to a specific set of applications.
+ *
+ * The default is every application — enabling native control IS the consent,
+ * and this is for someone who wants less than that. It used to be the other
+ * way round: an allow-list that authorized nothing when empty, so the shipped
+ * default was a session that could do nothing and the escape was `"*"`.
+ */
+export default class NativeRestrictTo extends Command {
+    static description: string;
+    static examples: string[];
+    static strict: boolean;
+    static args: {
+        apps: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static flags: {
+        json: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+        profile: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+    };
+    run(): Promise<void>;
+}

package/dist/commands/native/restrict-to.js

@@ -0,0 +1,41 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const core_1 = require("@oclif/core");
+const native_1 = require("../native");
+/**
+ * Narrow native control to a specific set of applications.
+ *
+ * The default is every application — enabling native control IS the consent,
+ * and this is for someone who wants less than that. It used to be the other
+ * way round: an allow-list that authorized nothing when empty, so the shipped
+ * default was a session that could do nothing and the escape was `"*"`.
+ */
+class NativeRestrictTo extends core_1.Command {
+    static description = 'Narrow native control to a specific set of applications';
+    static examples = [
+        '<%= config.bin %> native restrict-to "Slack" "Notes"',
+        '<%= config.bin %> native restrict-to com.apple.Notes',
+    ];
+    static strict = false;
+    static args = {
+        apps: core_1.Args.string({
+            description: 'Application names or bundle ids',
+            required: true,
+            ignoreStdin: true,
+        }),
+    };
+    static flags = {
+        ...native_1.nativeProfileFlag,
+        json: core_1.Flags.boolean({ description: 'Output JSON' }),
+    };
+    async run() {
+        const { argv, flags } = await this.parse(NativeRestrictTo);
+        await (0, native_1.forwardNativeCommand)(this, [
+            'restrict-to',
+            ...(0, native_1.profilePassthrough)(flags.profile),
+            ...argv.filter((a) => a !== '--json'),
+            ...(flags.json ? ['--json'] : []),
+        ]);
+    }
+}
+exports.default = NativeRestrictTo;

package/dist/commands/native/status.d.ts

@@ -0,0 +1,19 @@
+import { Command } from '@oclif/core';
+/**
+ * Whether native control is on, which apps may take irreversible actions, and
+ * whether the helper can actually run.
+ *
+ * The last part is the one that had nowhere to appear. `/health` has carried
+ * seven `nativeUi` diagnostic fields since OSK-11016 and NOTHING read them, so
+ * a user could not tell "turned off" from "helper not installed" from "TCC not
+ * granted" — three different repairs behind one silence.
+ */
+export default class NativeStatus extends Command {
+    static description: string;
+    static examples: string[];
+    static flags: {
+        json: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+        profile: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+    };
+    run(): Promise<void>;
+}

package/dist/commands/native/status.js

@@ -0,0 +1,33 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const core_1 = require("@oclif/core");
+const native_1 = require("../native");
+/**
+ * Whether native control is on, which apps may take irreversible actions, and
+ * whether the helper can actually run.
+ *
+ * The last part is the one that had nowhere to appear. `/health` has carried
+ * seven `nativeUi` diagnostic fields since OSK-11016 and NOTHING read them, so
+ * a user could not tell "turned off" from "helper not installed" from "TCC not
+ * granted" — three different repairs behind one silence.
+ */
+class NativeStatus extends core_1.Command {
+    static description = 'Show whether native control is on, which apps may send or delete, and helper health';
+    static examples = [
+        '<%= config.bin %> native status',
+        '<%= config.bin %> native status --json',
+    ];
+    static flags = {
+        ...native_1.nativeProfileFlag,
+        json: core_1.Flags.boolean({ description: 'Output JSON' }),
+    };
+    async run() {
+        const { flags } = await this.parse(NativeStatus);
+        await (0, native_1.forwardNativeCommand)(this, [
+            'status',
+            ...(0, native_1.profilePassthrough)(flags.profile),
+            ...(flags.json ? ['--json'] : []),
+        ]);
+    }
+}
+exports.default = NativeStatus;

package/dist/commands/native.d.ts

@@ -0,0 +1,39 @@
+import { Command } from '@oclif/core';
+/**
+ * `--profile` is a GLOBAL flag on the runtime binary, so every `skrr native`
+ * subcommand has to declare it to be reachable — `native status` itself tells
+ * users "use --profile to target one" when sibling profiles have live daemons,
+ * and without this declaration that advice could not be followed (OSK-11100).
+ */
+export declare const nativeProfileFlag: {
+    profile: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+};
+/** The passthrough form of the parsed profile flag, or nothing. */
+export declare function profilePassthrough(profile: string | undefined): string[];
+export declare function buildNativeArgs(passthrough: readonly string[]): string[];
+/**
+ * Forward one `skrr native` command to the daemon.
+ *
+ * Native application control is consent that belongs to the person at the
+ * machine, so the setting lives in that machine's `daemon.json` and a cloud
+ * request can never write it (OSK-11018). The CLI is a bridge for the same
+ * reason `skrr browser` is: the capability is the daemon's, and a second
+ * implementation here would be a second place for the policy to drift.
+ *
+ * Until this existed the setting had NO command at all. The executor's own
+ * refusal told users to "set `nativeUi.enabled` and `nativeUi.allowCloudAgents`
+ * in the local daemon configuration" — a file it did not name — so the product's
+ * answer to "how do I turn this on" was to open a JSON file.
+ */
+export declare function forwardNativeCommand(command: Command, passthrough: readonly string[]): Promise<void>;
+/**
+ * `skrr native` is the stable user-facing entry point for native application
+ * control. Keeping it a thin bridge is what stops the REST CLI acquiring its
+ * own copy of the app-scope rules.
+ */
+export default class Native extends Command {
+    static description: string;
+    static examples: string[];
+    static strict: boolean;
+    run(): Promise<void>;
+}

package/dist/commands/native.js

@@ -0,0 +1,76 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.nativeProfileFlag = void 0;
+exports.profilePassthrough = profilePassthrough;
+exports.buildNativeArgs = buildNativeArgs;
+exports.forwardNativeCommand = forwardNativeCommand;
+const core_1 = require("@oclif/core");
+const exec_runtime_binary_1 = require("../lib/exec-runtime-binary");
+/**
+ * `--profile` is a GLOBAL flag on the runtime binary, so every `skrr native`
+ * subcommand has to declare it to be reachable — `native status` itself tells
+ * users "use --profile to target one" when sibling profiles have live daemons,
+ * and without this declaration that advice could not be followed (OSK-11100).
+ */
+exports.nativeProfileFlag = {
+    profile: core_1.Flags.string({
+        description: 'Which daemon profile to target — `native status` lists the running ones',
+    }),
+};
+/** The passthrough form of the parsed profile flag, or nothing. */
+function profilePassthrough(profile) {
+    return profile ? ['--profile', profile] : [];
+}
+function buildNativeArgs(passthrough) {
+    return ['native', ...passthrough];
+}
+/**
+ * Forward one `skrr native` command to the daemon.
+ *
+ * Native application control is consent that belongs to the person at the
+ * machine, so the setting lives in that machine's `daemon.json` and a cloud
+ * request can never write it (OSK-11018). The CLI is a bridge for the same
+ * reason `skrr browser` is: the capability is the daemon's, and a second
+ * implementation here would be a second place for the policy to drift.
+ *
+ * Until this existed the setting had NO command at all. The executor's own
+ * refusal told users to "set `nativeUi.enabled` and `nativeUi.allowCloudAgents`
+ * in the local daemon configuration" — a file it did not name — so the product's
+ * answer to "how do I turn this on" was to open a JSON file.
+ */
+async function forwardNativeCommand(command, passthrough) {
+    try {
+        if ((await (0, exec_runtime_binary_1.runtimeBinarySupportsSubcommand)('native')) === false) {
+            command.error('The local `skrr` daemon does not support native application control yet. ' +
+                'Update or reinstall the daemon, then retry `skrr native`.', { exit: 2 });
+        }
+        command.exit(await (0, exec_runtime_binary_1.execRuntimeBinary)(buildNativeArgs(passthrough)));
+    }
+    catch (error) {
+        if (error.message === 'runtime-binary-not-installed') {
+            command.log((0, exec_runtime_binary_1.notInstalledMessage)());
+            command.exit(127);
+        }
+        throw error;
+    }
+}
+/**
+ * `skrr native` is the stable user-facing entry point for native application
+ * control. Keeping it a thin bridge is what stops the REST CLI acquiring its
+ * own copy of the app-scope rules.
+ */
+class Native extends core_1.Command {
+    static description = 'Configure and diagnose native application control on this computer';
+    static examples = [
+        '<%= config.bin %> native status',
+        '<%= config.bin %> native enable --cloud-agents',
+        '<%= config.bin %> native list-apps',
+        '<%= config.bin %> native allow "Slack"',
+    ];
+    static strict = false;
+    async run() {
+        const { argv } = await this.parse(Native);
+        await forwardNativeCommand(this, argv);
+    }
+}
+exports.default = Native;

package/dist/commands/service/index.d.ts

@@ -0,0 +1,14 @@
+import { Command } from '@oclif/core';
+/**
+ * `skrr service` — the guest-local face of declared services.
+ *
+ * These commands run INSIDE a Dedicated Runtime guest, on the daemon's
+ * workload socket — the lane agents use to propose a service to the owner
+ * and to read what services exist. The owner-facing equivalents live at
+ * `skrr machines dedicated service`.
+ */
+export default class ServiceCommands extends Command {
+    static description: string;
+    static examples: string[];
+    run(): Promise<void>;
+}

package/dist/commands/service/index.js

@@ -0,0 +1,31 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const core_1 = require("@oclif/core");
+/**
+ * `skrr service` — the guest-local face of declared services.
+ *
+ * These commands run INSIDE a Dedicated Runtime guest, on the daemon's
+ * workload socket — the lane agents use to propose a service to the owner
+ * and to read what services exist. The owner-facing equivalents live at
+ * `skrr machines dedicated service`.
+ */
+class ServiceCommands extends core_1.Command {
+    static description = 'Services on this Dedicated Runtime — propose one to the owner, or list/status/logs what is declared (guest-local)';
+    static examples = [
+        '<%= config.bin %> service propose --file service.json',
+        '<%= config.bin %> service propose --name worker --cwd /workspace/repos/app -- node dist/worker.js',
+        '<%= config.bin %> service ls',
+        '<%= config.bin %> service status <name>',
+        '<%= config.bin %> service logs <name> --tail 4096',
+    ];
+    async run() {
+        this.log('skrr service commands (run on the machine itself):');
+        this.log('  skrr service propose  ask the owner to declare a service (agent lane)');
+        this.log('  skrr service ls       list declared services');
+        this.log('  skrr service status   one service’s computed state');
+        this.log('  skrr service logs     print a service’s log tail');
+        this.log('');
+        this.log('Owner-side management from your own machine: `skrr machines dedicated service`.');
+    }
+}
+exports.default = ServiceCommands;

package/dist/commands/service/logs.d.ts

@@ -0,0 +1,18 @@
+import { GuestServiceCommand } from '../../lib/guest-service-command';
+/**
+ * `skrr service logs` — a byte tail of a service's stored log, read on the
+ * machine itself (guest-local, read-only, no follow — the owner lane follows
+ * over the relay).
+ */
+export default class ServiceLogs extends GuestServiceCommand {
+    static summary: string;
+    static examples: string[];
+    static args: {
+        name: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static flags: {
+        tail: import("@oclif/core/lib/interfaces").OptionFlag<number | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        json: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+    };
+    run(): Promise<void>;
+}

package/dist/commands/service/logs.js

@@ -0,0 +1,53 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const core_1 = require("@oclif/core");
+const guest_service_command_1 = require("../../lib/guest-service-command");
+/**
+ * `skrr service logs` — a byte tail of a service's stored log, read on the
+ * machine itself (guest-local, read-only, no follow — the owner lane follows
+ * over the relay).
+ */
+class ServiceLogs extends guest_service_command_1.GuestServiceCommand {
+    static summary = 'Print a service’s log tail on this machine (guest-local)';
+    static examples = [
+        '<%= config.bin %> service logs <name>',
+        '<%= config.bin %> service logs <name> --tail 4096',
+    ];
+    static args = {
+        name: core_1.Args.string({ description: 'Service name', required: true, ignoreStdin: true }),
+    };
+    static flags = {
+        tail: core_1.Flags.integer({
+            description: 'Bytes from the end of the stored log to print (daemon rotates at 8 MiB)',
+            min: 0,
+        }),
+        json: core_1.Flags.boolean({ description: 'Output the reply as JSON' }),
+    };
+    async run() {
+        this.requireGuest();
+        const { args, flags } = await this.parse(ServiceLogs);
+        const reply = await this.guestRead('logs', {
+            name: args.name,
+            ...(flags.tail !== undefined ? { tailBytes: flags.tail } : {}),
+        });
+        const result = (reply.result ?? reply);
+        if (flags.json) {
+            this.log(JSON.stringify(result, null, 2));
+            return;
+        }
+        // The daemon's `data` is base64 — write the decoded BYTES verbatim; a
+        // utf8 round-trip mangles non-text output (the same rule the owner-lane
+        // `service logs` follows).
+        if (typeof result.data === 'string' && result.data.length > 0) {
+            const bytes = Buffer.from(result.data, 'base64');
+            process.stdout.write(bytes);
+            if (bytes.length > 0 && bytes[bytes.length - 1] !== 0x0a)
+                process.stdout.write('\n');
+            return;
+        }
+        const text = result.log ?? '';
+        if (text)
+            process.stdout.write(text.endsWith('\n') ? text : `${text}\n`);
+    }
+}
+exports.default = ServiceLogs;

package/dist/commands/service/ls.d.ts

@@ -0,0 +1,13 @@
+import { GuestServiceCommand } from '../../lib/guest-service-command';
+/**
+ * `skrr service ls` — the services declared on this machine, read from the
+ * daemon's workload socket (guest-local, read-only).
+ */
+export default class ServiceLs extends GuestServiceCommand {
+    static summary: string;
+    static examples: string[];
+    static flags: {
+        json: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+    };
+    run(): Promise<void>;
+}