@skrr-ai/cli 0.1.49 → 0.1.50

package/dist/commands/machines/dedicated/terminal/kill.js

@@ -0,0 +1,55 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const core_1 = require("@oclif/core");
+const dedicated_service_command_1 = require("../../../../lib/dedicated-service-command");
+const dedicated_service_1 = require("../../../../lib/dedicated-service");
+/**
+ * `skrr machines dedicated terminal kill` — end a persistent session.
+ *
+ * Detaching (Ctrl-], a dropped connection, `terminal` exiting) never ends a
+ * session — the machine keeps the tmux session and everything in it alive
+ * by design. This is the explicit verb that destroys one: the shell and its
+ * whole process tree stop with it.
+ */
+class DedicatedMachinesTerminalKill extends dedicated_service_command_1.DedicatedServiceCommand {
+    static description = 'End a persistent terminal session on a Dedicated Runtime — its shell and everything running in it stop.';
+    static examples = [
+        '<%= config.bin %> machines dedicated terminal kill <lease-id> term-2',
+        '<%= config.bin %> machines dedicated terminal ls <lease-id>',
+    ];
+    static args = {
+        lease: core_1.Args.string({
+            description: dedicated_service_command_1.SERVICE_LEASE_ARG_DESCRIPTION,
+            required: true,
+            ignoreStdin: true,
+        }),
+        name: core_1.Args.string({
+            description: 'Session name, as `terminal ls` prints it (e.g. main, term-2)',
+            required: true,
+            ignoreStdin: true,
+        }),
+    };
+    static flags = {
+        json: core_1.Flags.boolean({ description: 'Output as JSON' }),
+    };
+    async run() {
+        this.requireAuth();
+        const { args, flags } = await this.parse(DedicatedMachinesTerminalKill);
+        if (!dedicated_service_1.DEDICATED_TERMINAL_NAME_PATTERN.test(args.name)) {
+            this.error('A session name is lowercase letters, digits and dashes, up to 32 characters (e.g. `dev`, `build-2`).', { exit: 2 });
+        }
+        const leaseId = await this.resolveLeaseArg(args.lease);
+        const result = await this.callDedicatedTerminal('kill', {
+            leaseId,
+            name: args.name,
+            ...this.scopeFrom(flags),
+        });
+        this.closeServiceChannel();
+        if (flags.json) {
+            this.log(JSON.stringify(result ?? { name: args.name, killed: true }, null, 2));
+            return;
+        }
+        this.log(`Terminal session '${args.name}' ended — its shell and everything running in it stopped.`);
+    }
+}
+exports.default = DedicatedMachinesTerminalKill;

package/dist/commands/machines/dedicated/terminal/ls.d.ts

@@ -0,0 +1,22 @@
+import { DedicatedServiceCommand } from '../../../../lib/dedicated-service-command';
+/**
+ * `skrr machines dedicated terminal ls` — the sessions the machine is
+ * keeping alive.
+ *
+ * A persistent terminal is a tmux session on the guest (`skrr-term-<name>`)
+ * that survives Ctrl-] detaches, disconnects and daemon restarts; this is
+ * the read side of the web lease card's resume picker. Sessions only ever
+ * end through `terminal kill` or the shell's own `exit` — nothing here is
+ * created implicitly.
+ */
+export default class DedicatedMachinesTerminalLs extends DedicatedServiceCommand {
+    static description: string;
+    static examples: string[];
+    static args: {
+        lease: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static flags: {
+        json: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+    };
+    run(): Promise<void>;
+}

package/dist/commands/machines/dedicated/terminal/ls.js

@@ -0,0 +1,70 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const core_1 = require("@oclif/core");
+const dedicated_service_command_1 = require("../../../../lib/dedicated-service-command");
+const format_1 = require("../../../../lib/format");
+/**
+ * `skrr machines dedicated terminal ls` — the sessions the machine is
+ * keeping alive.
+ *
+ * A persistent terminal is a tmux session on the guest (`skrr-term-<name>`)
+ * that survives Ctrl-] detaches, disconnects and daemon restarts; this is
+ * the read side of the web lease card's resume picker. Sessions only ever
+ * end through `terminal kill` or the shell's own `exit` — nothing here is
+ * created implicitly.
+ */
+class DedicatedMachinesTerminalLs extends dedicated_service_command_1.DedicatedServiceCommand {
+    static description = 'List the persistent terminal sessions a Dedicated Runtime is keeping alive (the tmux sessions `terminal` attaches to).';
+    static examples = [
+        '<%= config.bin %> machines dedicated terminal ls <lease-id>',
+        '<%= config.bin %> machines dedicated terminal ls <lease-id> --json',
+    ];
+    static args = {
+        lease: core_1.Args.string({
+            description: dedicated_service_command_1.SERVICE_LEASE_ARG_DESCRIPTION,
+            required: true,
+            ignoreStdin: true,
+        }),
+    };
+    static flags = {
+        json: core_1.Flags.boolean({ description: 'Output as JSON' }),
+    };
+    async run() {
+        this.requireAuth();
+        const { args, flags } = await this.parse(DedicatedMachinesTerminalLs);
+        const leaseId = await this.resolveLeaseArg(args.lease);
+        const result = await this.callDedicatedTerminal('list', {
+            leaseId,
+            ...this.scopeFrom(flags),
+        });
+        this.closeServiceChannel();
+        if (flags.json) {
+            this.log(JSON.stringify(result ?? { sessions: [] }, null, 2));
+            return;
+        }
+        const sessions = result?.sessions ?? [];
+        if (sessions.length === 0) {
+            this.log(`No terminal sessions on ${leaseId}.`);
+            this.log(`Open one with \`${this.config.bin} machines dedicated terminal ${leaseId}\`.`);
+            return;
+        }
+        (0, format_1.renderTable)(sessions.map((session) => ({
+            name: (0, format_1.formatCell)(session.name),
+            attached: session.attached ? 'yes' : 'no',
+            created: (0, format_1.formatCell)(
+            // The daemon reports tmux `session_created`, which is SECONDS —
+            // `localStamp` reads a number as milliseconds.
+            typeof session.createdAt === 'number'
+                ? (0, format_1.localStamp)(session.createdAt * 1000)
+                : session.createdAt !== undefined
+                    ? (0, format_1.localStamp)(session.createdAt)
+                    : undefined),
+        })), [
+            { key: 'name', header: 'NAME', verbatim: true },
+            { key: 'attached', header: 'ATTACHED' },
+            { key: 'created', header: 'CREATED' },
+        ], (line) => this.log(line));
+        this.log(`Attach with \`${this.config.bin} machines dedicated terminal ${leaseId} --name <name>\`; end one with \`terminal kill\`.`);
+    }
+}
+exports.default = DedicatedMachinesTerminalLs;

package/dist/commands/machines/dedicated/terminal/rename.d.ts

@@ -0,0 +1,23 @@
+import { DedicatedServiceCommand } from '../../../../lib/dedicated-service-command';
+/**
+ * `skrr machines dedicated terminal rename` — give a live session a better
+ * name.
+ *
+ * The machine auto-names sessions it allocates (`term-1`, `term-2`, …);
+ * renaming one to `dev` or `build` makes the `terminal --name` you attach
+ * with self-explanatory. The session keeps running — a rename never
+ * detaches or restarts it.
+ */
+export default class DedicatedMachinesTerminalRename extends DedicatedServiceCommand {
+    static description: string;
+    static examples: string[];
+    static args: {
+        lease: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;
+        name: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;
+        newName: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static flags: {
+        json: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+    };
+    run(): Promise<void>;
+}

package/dist/commands/machines/dedicated/terminal/rename.js

@@ -0,0 +1,64 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const core_1 = require("@oclif/core");
+const dedicated_service_command_1 = require("../../../../lib/dedicated-service-command");
+const dedicated_service_1 = require("../../../../lib/dedicated-service");
+/**
+ * `skrr machines dedicated terminal rename` — give a live session a better
+ * name.
+ *
+ * The machine auto-names sessions it allocates (`term-1`, `term-2`, …);
+ * renaming one to `dev` or `build` makes the `terminal --name` you attach
+ * with self-explanatory. The session keeps running — a rename never
+ * detaches or restarts it.
+ */
+class DedicatedMachinesTerminalRename extends dedicated_service_command_1.DedicatedServiceCommand {
+    static description = 'Rename a persistent terminal session on a Dedicated Runtime (the session keeps running).';
+    static examples = [
+        '<%= config.bin %> machines dedicated terminal rename <lease-id> term-2 dev',
+        '<%= config.bin %> machines dedicated terminal ls <lease-id>',
+    ];
+    static args = {
+        lease: core_1.Args.string({
+            description: dedicated_service_command_1.SERVICE_LEASE_ARG_DESCRIPTION,
+            required: true,
+            ignoreStdin: true,
+        }),
+        name: core_1.Args.string({
+            description: 'Current session name, as `terminal ls` prints it',
+            required: true,
+            ignoreStdin: true,
+        }),
+        newName: core_1.Args.string({
+            description: 'The name to give it — lowercase letters, digits and dashes',
+            required: true,
+            ignoreStdin: true,
+        }),
+    };
+    static flags = {
+        json: core_1.Flags.boolean({ description: 'Output as JSON' }),
+    };
+    async run() {
+        this.requireAuth();
+        const { args, flags } = await this.parse(DedicatedMachinesTerminalRename);
+        for (const name of [args.name, args.newName]) {
+            if (!dedicated_service_1.DEDICATED_TERMINAL_NAME_PATTERN.test(name)) {
+                this.error('A session name is lowercase letters, digits and dashes, up to 32 characters (e.g. `dev`, `build-2`).', { exit: 2 });
+            }
+        }
+        const leaseId = await this.resolveLeaseArg(args.lease);
+        const result = await this.callDedicatedTerminal('rename', {
+            leaseId,
+            name: args.name,
+            newName: args.newName,
+            ...this.scopeFrom(flags),
+        });
+        this.closeServiceChannel();
+        if (flags.json) {
+            this.log(JSON.stringify(result ?? { name: args.name, newName: args.newName }, null, 2));
+            return;
+        }
+        this.log(`Terminal session '${args.name}' is now '${args.newName}'.`);
+    }
+}
+exports.default = DedicatedMachinesTerminalRename;

package/dist/commands/machines/dedicated/terminal.d.ts

@@ -7,6 +7,12 @@ import { DedicatedLeaseCommand } from '../../../lib/dedicated-lease-command';
  * `gh auth login`, a REPL, a dev server's interactive setup and `claude` itself
  * reachable only from a browser. This opens the same real PTY the web does,
  * through the same relay and the same admission.
+ *
+ * Sessions are persistent by default (always-on §6.4): the machine runs the
+ * shell inside tmux, so Ctrl-] detaches and the same command re-attaches the
+ * same session — a lost connection re-attaches too, when the machine's image
+ * announces `persistent_terminal_v1`. `terminal ls|kill|rename` are the
+ * session's management verbs; `--ephemeral` is the old disposable shell.
  */
 export default class DedicatedMachinesTerminal extends DedicatedLeaseCommand {
     static description: string;
@@ -17,6 +23,9 @@ export default class DedicatedMachinesTerminal extends DedicatedLeaseCommand {
     static flags: {
         cwd: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         command: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        name: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        new: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+        ephemeral: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
     };
     run(): Promise<void>;
 }

package/dist/commands/machines/dedicated/terminal.js

@@ -2,6 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 const core_1 = require("@oclif/core");
 const dedicated_lease_command_1 = require("../../../lib/dedicated-lease-command");
+const dedicated_service_1 = require("../../../lib/dedicated-service");
 /**
  * `skrr machines dedicated terminal` — the web lease card's "Open terminal",
  * from a terminal.
@@ -10,13 +11,23 @@ const dedicated_lease_command_1 = require("../../../lib/dedicated-lease-command"
  * `gh auth login`, a REPL, a dev server's interactive setup and `claude` itself
  * reachable only from a browser. This opens the same real PTY the web does,
  * through the same relay and the same admission.
+ *
+ * Sessions are persistent by default (always-on §6.4): the machine runs the
+ * shell inside tmux, so Ctrl-] detaches and the same command re-attaches the
+ * same session — a lost connection re-attaches too, when the machine's image
+ * announces `persistent_terminal_v1`. `terminal ls|kill|rename` are the
+ * session's management verbs; `--ephemeral` is the old disposable shell.
  */
 class DedicatedMachinesTerminal extends dedicated_lease_command_1.DedicatedLeaseCommand {
-    static description = 'Open an interactive shell on a Dedicated Runtime (a real PTY, as skrr-workload). Ctrl-] closes it.';
+    static description = 'Open an interactive shell on a Dedicated Runtime (a real PTY, as skrr-workload). The session persists on the machine: Ctrl-] detaches, and the same command re-attaches it.';
     static examples = [
         '<%= config.bin %> machines dedicated terminal <lease-id>',
+        '<%= config.bin %> machines dedicated terminal <lease-id> --name dev',
+        '<%= config.bin %> machines dedicated terminal <lease-id> --new',
+        '<%= config.bin %> machines dedicated terminal <lease-id> --ephemeral',
         '<%= config.bin %> machines dedicated terminal <lease-id> --cwd /workspace/repos/app',
         '<%= config.bin %> machines dedicated terminal <lease-id> --command "npm run dev"',
+        '<%= config.bin %> machines dedicated terminal ls <lease-id>',
     ];
     static args = {
         lease: core_1.Args.string({
@@ -27,15 +38,29 @@ class DedicatedMachinesTerminal extends dedicated_lease_command_1.DedicatedLease
     };
     static flags = {
         cwd: core_1.Flags.string({
-            description: 'Directory to start in (defaults to HOME, /workspace/user-data)',
+            description: 'Directory to start in (defaults to HOME, /workspace/user-data). Only applied when the session is created — re-attaching one ignores it.',
         }),
         command: core_1.Flags.string({
             description: 'A command to type into the shell once it shows its prompt, as if you typed it. Not typed if you type first. The shell stays open after it.',
         }),
+        name: core_1.Flags.string({
+            description: "Attach or create the persistent session with this name (default 'main'). Lowercase letters, digits and dashes, up to 32 characters.",
+        }),
+        new: core_1.Flags.boolean({
+            description: 'Open a new persistent session instead of attaching one — the machine names it (term-1, term-2, …) and prints the name so it can be re-attached.',
+            exclusive: ['name'],
+        }),
+        ephemeral: core_1.Flags.boolean({
+            description: 'Open a disposable shell that ends with the connection — the pre-persistent semantics; nothing is kept on the machine.',
+            exclusive: ['name', 'new'],
+        }),
     };
     async run() {
         this.requireAuth();
         const { args, flags } = await this.parse(DedicatedMachinesTerminal);
+        if (flags.name !== undefined && !dedicated_service_1.DEDICATED_TERMINAL_NAME_PATTERN.test(flags.name)) {
+            this.error('A session name is lowercase letters, digits and dashes, up to 32 characters (e.g. `dev`, `build-2`).', { exit: 2 });
+        }
         await this.openDedicatedTerminal(args.lease, flags, flags.command);
     }
 }

package/dist/commands/machines/hosted/connect.js

@@ -45,7 +45,7 @@ class HostedMachinesConnect extends base_command_1.BaseCommand {
                 this.log(`Preview: ${response.session.previewUrl}`);
         }
         catch (err) {
-            const message = (0, hosted_machines_1.formatHostedMachineApiError)(err);
+            const message = (0, hosted_machines_1.formatHostedMachineApiError)(err, { bin: this.config.bin });
             if (message)
                 this.error(message, { exit: 1 });
             this.handleApiError(err);
@@ -79,7 +79,7 @@ class HostedMachinesConnect extends base_command_1.BaseCommand {
                         this.log(`[exit ${exitCode}]`);
                 }
                 catch (err) {
-                    const message = (0, hosted_machines_1.formatHostedMachineApiError)(err);
+                    const message = (0, hosted_machines_1.formatHostedMachineApiError)(err, { bin: this.config.bin });
                     this.log(message || err.message);
                 }
             }

package/dist/commands/machines/hosted/destroy.js

@@ -28,7 +28,7 @@ class HostedMachinesDestroy extends base_command_1.BaseCommand {
             response = await (0, hosted_machines_1.destroyHostedMachine)(args.id, { workspaceId: flags.workspace });
         }
         catch (err) {
-            const message = (0, hosted_machines_1.formatHostedMachineApiError)(err);
+            const message = (0, hosted_machines_1.formatHostedMachineApiError)(err, { bin: this.config.bin });
             if (message)
                 this.error(message, { exit: 1 });
             this.handleApiError(err);

package/dist/commands/machines/hosted/exec.js

@@ -95,7 +95,7 @@ class HostedMachinesExec extends base_command_1.BaseCommand {
             response = await (0, hosted_machines_1.execHostedMachine)(id, body, { workspaceId: flags.workspace });
         }
         catch (err) {
-            const message = (0, hosted_machines_1.formatHostedMachineApiError)(err);
+            const message = (0, hosted_machines_1.formatHostedMachineApiError)(err, { bin: this.config.bin });
             if (message)
                 this.error(message, { exit: 1 });
             this.handleApiError(err);

package/dist/commands/machines/hosted/list.js

@@ -28,7 +28,7 @@ class HostedMachinesList extends base_command_1.BaseCommand {
             response = await (0, hosted_machines_1.listHostedMachines)({ workspaceId: flags.workspace, limit: flags.limit });
         }
         catch (err) {
-            const message = (0, hosted_machines_1.formatHostedMachineApiError)(err);
+            const message = (0, hosted_machines_1.formatHostedMachineApiError)(err, { bin: this.config.bin });
             if (message)
                 this.error(message, { exit: 1 });
             this.handleApiError(err);

package/dist/commands/machines/hosted/pause.js

@@ -28,7 +28,7 @@ class HostedMachinesPause extends base_command_1.BaseCommand {
             response = await (0, hosted_machines_1.pauseHostedMachine)(args.id, { workspaceId: flags.workspace });
         }
         catch (err) {
-            const message = (0, hosted_machines_1.formatHostedMachineApiError)(err);
+            const message = (0, hosted_machines_1.formatHostedMachineApiError)(err, { bin: this.config.bin });
             if (message)
                 this.error(message, { exit: 1 });
             this.handleApiError(err);

package/dist/commands/machines/hosted/pull.js

@@ -85,7 +85,7 @@ class HostedMachinesPull extends base_command_1.BaseCommand {
             }, { workspaceId: flags.workspace });
         }
         catch (err) {
-            const message = (0, hosted_machines_1.formatHostedMachineApiError)(err);
+            const message = (0, hosted_machines_1.formatHostedMachineApiError)(err, { bin: this.config.bin });
             if (message) {
                 this.failWithCliError({
                     message,

package/dist/commands/machines/hosted/resume.js

@@ -48,7 +48,7 @@ class HostedMachinesResume extends base_command_1.BaseCommand {
             }
         }
         catch (err) {
-            const message = (0, hosted_machines_1.formatHostedMachineApiError)(err);
+            const message = (0, hosted_machines_1.formatHostedMachineApiError)(err, { bin: this.config.bin });
             if (message)
                 this.error(message, { exit: 1 });
             this.handleApiError(err);

package/dist/commands/machines/hosted/start.js

@@ -128,7 +128,7 @@ class HostedMachinesStart extends base_command_1.BaseCommand {
             // than offering none.
             const strandedId = (0, hosted_machines_1.hostedMachineId)(session);
             if (strandedId) {
-                const cause = (0, hosted_machines_1.formatHostedMachineApiError)(err) ||
+                const cause = (0, hosted_machines_1.formatHostedMachineApiError)(err, { bin: this.config.bin }) ||
                     err?.message ||
                     'Hosted Machine setup failed.';
                 this.failWithCliError({
@@ -143,7 +143,7 @@ class HostedMachinesStart extends base_command_1.BaseCommand {
                     retryable: false,
                 });
             }
-            const message = (0, hosted_machines_1.formatHostedMachineApiError)(err);
+            const message = (0, hosted_machines_1.formatHostedMachineApiError)(err, { bin: this.config.bin });
             if (message)
                 this.error(message, { exit: 1 });
             this.handleApiError(err);

package/dist/commands/machines/hosted/status.js

@@ -42,7 +42,7 @@ class HostedMachinesStatus extends base_command_1.BaseCommand {
                 response = await (0, hosted_machines_1.getHostedMachine)(args.id, { workspaceId: flags.workspace });
             }
             catch (err) {
-                const message = (0, hosted_machines_1.formatHostedMachineApiError)(err);
+                const message = (0, hosted_machines_1.formatHostedMachineApiError)(err, { bin: this.config.bin });
                 if (message)
                     this.error(message, { exit: 1 });
                 this.handleApiError(err);
@@ -78,6 +78,7 @@ class HostedMachinesStatus extends base_command_1.BaseCommand {
         this.log(`Machine lease: ${session.machineLeaseId || '-'}`);
         this.log(`Repos: ${(0, hosted_machines_1.hostedMachineRepoSummary)(session)}`);
         this.log(`Preview: ${session.previewUrl || '-'}`);
+        this.log(`Isolation: ${(0, hosted_machines_1.hostedMachineIsolationSummary)(session)}`);
         if (session.idleTimeoutMs)
             this.log(`Idle timeout: ${session.idleTimeoutMs}ms`);
         const error = (0, hosted_machines_1.hostedMachineErrorSummary)(session);

package/dist/commands/tasks/create.js

@@ -221,6 +221,7 @@ class TasksCreate extends base_command_1.BaseCommand {
         }),
         tag: core_1.Flags.string({ description: 'Tag (repeatable)', multiple: true }),
         'label-id': core_1.Flags.string({
+            aliases: ['label'],
             description: 'Attach a task label (repeatable) — id, or a name from `skrr labels list --applicable-to task`. ' +
                 'An unknown name is refused, never created. Manage labels with `skrr labels`.',
             multiple: true,

package/dist/commands/tasks/list.js

@@ -380,6 +380,7 @@ class TasksList extends base_command_1.BaseCommand {
             multiple: true,
         }),
         'label-id': core_1.Flags.string({
+            aliases: ['label'],
             description: 'Filter to tasks carrying EVERY listed label id (repeatable, AND-intersection)',
             multiple: true,
         }),

package/dist/commands/tasks/update.js

@@ -158,6 +158,7 @@ class TasksUpdate extends base_command_1.BaseCommand {
         }),
         tag: core_1.Flags.string({ description: 'Replace tags (repeatable)', multiple: true }),
         'label-id': core_1.Flags.string({
+            aliases: ['label'],
             description: 'Replace the task labels with these ids (repeatable, whole-list). ' +
                 'Use `skrr tasks labels attach/detach` for incremental changes.',
             multiple: true,

package/dist/lib/agent-config.d.ts

@@ -1,5 +1,7 @@
 export declare const COMMITMENT_RESPONSIBILITY_LEVELS: readonly ["reasoning_only", "full_ownership"];
 export declare const REASONING_TOOL_ESCAPES: readonly ["bash", "browser"];
+/** Warning printed by the three retired Commitment permission flags (OSK-11975). */
+export declare const COMMITMENT_PERMISSION_FLAG_RETIRED = "This setting no longer has any effect: Commitment runs use the agent's own permissions.";
 export declare const RELEASE_INSTALL_CHANNELS: readonly ["latest", "manual"];
 /**
  * `09:00-18:00` or `09:00-18:00@America/Los_Angeles`, or a JSON object.

package/dist/lib/agent-config.js

@@ -1,12 +1,14 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.RELEASE_INSTALL_CHANNELS = exports.REASONING_TOOL_ESCAPES = exports.COMMITMENT_RESPONSIBILITY_LEVELS = void 0;
+exports.RELEASE_INSTALL_CHANNELS = exports.COMMITMENT_PERMISSION_FLAG_RETIRED = exports.REASONING_TOOL_ESCAPES = exports.COMMITMENT_RESPONSIBILITY_LEVELS = void 0;
 exports.parseWorkingHoursFlag = parseWorkingHoursFlag;
 exports.mergeAgentConfigFlags = mergeAgentConfigFlags;
 const prompt_1 = require("./prompt");
 const agent_visual_refs_1 = require("./agent-visual-refs");
 exports.COMMITMENT_RESPONSIBILITY_LEVELS = ['reasoning_only', 'full_ownership'];
 exports.REASONING_TOOL_ESCAPES = ['bash', 'browser'];
+/** Warning printed by the three retired Commitment permission flags (OSK-11975). */
+exports.COMMITMENT_PERMISSION_FLAG_RETIRED = "This setting no longer has any effect: Commitment runs use the agent's own permissions.";
 exports.RELEASE_INSTALL_CHANNELS = ['latest', 'manual'];
 /**
  * `09:00-18:00` or `09:00-18:00@America/Los_Angeles`, or a JSON object.

package/dist/lib/api-fetch.js

@@ -42,6 +42,7 @@ const idempotency_scope_1 = require("./idempotency-scope");
 const node_adapter_1 = require("./node-adapter");
 const refresh_1 = require("./refresh");
 const delegated_cli_1 = require("./delegated-cli");
+const daemonBroker_1 = require("./daemonBroker");
 const workspace_header_1 = require("./workspace-header");
 const non_json_response_1 = require("./non-json-response");
 class ApiFetchError extends Error {
@@ -191,6 +192,24 @@ async function apiFetch(pathOrUrl, opts = {}) {
             res = await fetchWithCredential(cred);
         }
     }
+    else if (res.status === 401 &&
+        (0, daemonBroker_1.isBrokeredHandoffToken)(cred.token) &&
+        !isAuthEndpoint(pathOrUrl)) {
+        // Broker-mode hand-off credential: nothing was persisted, so there is no
+        // stored family for `ensureFreshCliCredential` to rotate. Re-redeem over
+        // loopback once (forceRefresh bypasses the daemon's cached token) and
+        // retry once — the same recovery contract the delegated path has.
+        const fresh = await (0, daemonBroker_1.redeemBrokeredHandoffToken)(true);
+        if (fresh?.accessToken) {
+            cred = {
+                token: fresh.accessToken,
+                source: 'env-token',
+                kind: (0, credential_resolver_1.kindOf)(fresh.accessToken),
+            };
+            (0, node_adapter_1.setAdapterCredentialOverride)(cred);
+            res = await fetchWithCredential(cred);
+        }
+    }
     else if (res.status === 401 && !autonomousCredential && !isAuthEndpoint(pathOrUrl)) {
         const fresh = await (0, refresh_1.ensureFreshCliCredential)({ credential: cred, force: true });
         if (fresh.refreshed && fresh.credential.token) {

package/dist/lib/auth-storage.d.ts

@@ -21,6 +21,20 @@ export interface WriteOptions {
     /** Clear a stale needs-reauth latch after a server has issued fresh credentials. */
     clearReauth?: boolean;
 }
+/**
+ * File-backend-only read. Exported for the brokered-hand-off migration
+ * cleanup (`daemonBroker.maybeRetireStoredCliAuthFile`), which must inspect
+ * `~/.skrr/cli-auth.json` specifically — not the keychain-preferred
+ * `readFromBackend()` — to prove the stored family's provenance before
+ * retiring it. Everything else should keep using `readFromBackend()`.
+ */
+export declare function readFromFile(): AuthBundle | null;
+/**
+ * Delete `~/.skrr/cli-auth.json` only (the keychain is untouched). Exported
+ * for the brokered-hand-off migration cleanup; `skrr logout` continues to
+ * use `clearAllBackends()`.
+ */
+export declare function deleteFileBackend(): void;
 /**
  * Read the CLI's auth bundle from the preferred backend.
  *

package/dist/lib/auth-storage.js

@@ -34,6 +34,8 @@ var __importStar = (this && this.__importStar) || (function () {
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.backends = void 0;
+exports.readFromFile = readFromFile;
+exports.deleteFileBackend = deleteFileBackend;
 exports.readFromBackend = readFromBackend;
 exports.writeToBackend = writeToBackend;
 exports.clearAllBackends = clearAllBackends;
@@ -96,6 +98,13 @@ function authFilePath() {
 // ---------------------------------------------------------------------
 // File backend
 // ---------------------------------------------------------------------
+/**
+ * File-backend-only read. Exported for the brokered-hand-off migration
+ * cleanup (`daemonBroker.maybeRetireStoredCliAuthFile`), which must inspect
+ * `~/.skrr/cli-auth.json` specifically — not the keychain-preferred
+ * `readFromBackend()` — to prove the stored family's provenance before
+ * retiring it. Everything else should keep using `readFromBackend()`.
+ */
 function readFromFile() {
     const p = authFilePath();
     if (!fs.existsSync(p))
@@ -235,6 +244,11 @@ function writeToFile(bundle) {
         throw err;
     }
 }
+/**
+ * Delete `~/.skrr/cli-auth.json` only (the keychain is untouched). Exported
+ * for the brokered-hand-off migration cleanup; `skrr logout` continues to
+ * use `clearAllBackends()`.
+ */
 function deleteFileBackend() {
     const p = authFilePath();
     try {

package/dist/lib/commitments.d.ts

@@ -17,7 +17,7 @@
  * "hold this state", derived from a Compass invariant — not authored here).
  */
 import { COMMITMENT_WATCHED_SOURCES, COMMITMENT_TEMPLATE_IDS, COMMITMENT_CADENCE_MODES, COMMITMENT_CADENCE_TIME_PATTERN, COMMITMENT_CADENCE_MAX_TIMES, COMMITMENT_AUTONOMY_MODES, COMMITMENT_EXECUTION_ISOLATION_MODES, COMMITMENT_STATUSES, COMMITMENT_KIND_VALUES } from '@skrr-ai/data-provider';
-import type { CommitmentCheck, CommitmentChecksResponse, Commitment, CommitmentActionProposal, CommitmentListResponse, CommitmentPlanResponse, CommitmentStatusResponse, CommitmentWorkLink, CommitmentExecutionReceiptListResponse, CommitmentExecutionReceiptQuarterlyMetricsResponse, CommitmentCapabilitySource, CommitmentDeliveryPatchResponse, CommitmentDeliveryBundleResponse } from '@skrr-ai/data-provider';
+import type { CommitmentCheck, CommitmentChecksResponse, Commitment, CommitmentActionProposal, CommitmentListResponse, CommitmentPlanResponse, CommitmentStatusResponse, CommitmentWorkLink, CommitmentExecutionReceiptListResponse, CommitmentExecutionReceiptQuarterlyMetricsResponse, CommitmentCapabilitySource, CommitmentDeliveryPatchResponse, CommitmentDeliveryBundleResponse, CommitmentCyclesResponse, CommitmentExplanationResponse } from '@skrr-ai/data-provider';
 import { withQuery } from './triggers';
 export { COMMITMENT_WATCHED_SOURCES, COMMITMENT_TEMPLATE_IDS, COMMITMENT_CADENCE_MODES, COMMITMENT_CADENCE_TIME_PATTERN, COMMITMENT_CADENCE_MAX_TIMES, COMMITMENT_STATUSES, COMMITMENT_KIND_VALUES, };
 export type { CommitmentCheck, CommitmentChecksResponse, Commitment, CommitmentActionProposal, CommitmentListResponse, CommitmentPlanResponse, CommitmentStatusResponse, CommitmentWorkLink, };
@@ -351,6 +351,13 @@ export declare const commitmentApi: {
         limit?: number;
         cursor?: string;
     }) => Promise<Record<string, unknown>>;
+    /** One Cycle per Check, newest first — the unit a person reads (D8). */
+    cycles: (id: string, query?: {
+        limit?: number;
+        cursor?: string;
+    }) => Promise<CommitmentCyclesResponse>;
+    /** The latest Cycle walked as six questions; the first "no" is where it stopped. */
+    explain: (id: string) => Promise<CommitmentExplanationResponse>;
     ledger: (id: string, query?: Record<string, string | number | undefined>) => Promise<Record<string, unknown>>;
     wakeCapabilities: (id: string) => Promise<CommitmentWakeCapabilities>;
     dailyMetrics: (id: string, query?: {
@@ -759,8 +766,16 @@ export declare function renderCheckList(checks: CommitmentCheckView[], log: (lin
 type ReadModelRecord = Record<string, unknown>;
 /** Human view for `commitments ledger`; JSON remains the automation surface. */
 export declare function renderCommitmentLedger(ledger: ReadModelRecord, log: (line: string) => void): void;
-/** Human view for the ordered commitment trace. */
 export declare function renderCommitmentTrace(trace: ReadModelRecord, log: (line: string) => void): void;
+/**
+ * One line per Cycle:
+ * `09-22 12:04  ● stopped    act  commitment_execution_budget_exhausted — Raise maxRunsPerDay…`
+ * A run that failed is named under its Cycle with who has to move (machine
+ * or model), because that is the next question every reader asks.
+ */
+export declare function formatCommitmentCycles(page: Partial<CommitmentCyclesResponse>): string[];
+/** The six questions for the latest Cycle, the first ✗ carrying its fix. */
+export declare function formatCommitmentExplanation(explanation: Partial<CommitmentExplanationResponse>): string[];
 /**
  * Print the continuation hint for a paged `object:'list'` response — the line
  * that makes history beyond the newest page reachable instead of invisible.