@skrr-ai/cli 0.1.92 → 0.1.94

package/dist/lib/commitments.js

@@ -1,9 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.COMMITMENT_CLI_EVALUATORS = exports.COMMITMENT_CREATE_KEYS = exports.COMMITMENT_REMEDIATION_ACTIONS = exports.COMMITMENT_FEEDBACK_KINDS = exports.commitmentApi = exports.commitmentPackApi = exports.MAX_COMMITMENT_INTERVAL_MS = exports.MIN_COMMITMENT_INTERVAL_MS = exports.COMMITMENT_EXECUTION_ISOLATION_MODES = exports.COMMITMENT_AUTHORABLE_AUTONOMY_MODES = exports.COMMITMENT_AUTONOMY_MODES = exports.COMMITMENT_AUTHORABLE_CADENCE_MODES = exports.COMMITMENT_KIND_VALUES = exports.COMMITMENT_STATUSES = exports.COMMITMENT_CADENCE_MAX_TIMES = exports.COMMITMENT_CADENCE_TIME_PATTERN = exports.COMMITMENT_CADENCE_MODES = exports.COMMITMENT_TEMPLATE_IDS = exports.COMMITMENT_WATCHED_SOURCES = void 0;
-exports.storedAutonomyModeForAuthoring = storedAutonomyModeForAuthoring;
-exports.authoringAutonomyModeForStored = authoringAutonomyModeForStored;
-exports.commitmentAutonomyLabel = commitmentAutonomyLabel;
+exports.COMMITMENT_CLI_EVALUATORS = exports.COMMITMENT_CREATE_KEYS = exports.COMMITMENT_REMEDIATION_ACTIONS = exports.COMMITMENT_FEEDBACK_KINDS = exports.commitmentApi = exports.commitmentPackApi = exports.MAX_COMMITMENT_INTERVAL_MS = exports.MIN_COMMITMENT_INTERVAL_MS = exports.COMMITMENT_EXECUTION_ISOLATION_MODES = exports.COMMITMENT_AUTHORABLE_CADENCE_MODES = exports.COMMITMENT_KIND_VALUES = exports.COMMITMENT_STATUSES = exports.COMMITMENT_CADENCE_MAX_TIMES = exports.COMMITMENT_CADENCE_TIME_PATTERN = exports.COMMITMENT_CADENCE_MODES = exports.COMMITMENT_TEMPLATE_IDS = exports.COMMITMENT_WATCHED_SOURCES = void 0;
 exports.permissionLines = permissionLines;
 exports.retiredFieldsLine = retiredFieldsLine;
 exports.readCommitmentAgentDirective = readCommitmentAgentDirective;
@@ -19,9 +16,7 @@ exports.describeIntervalMs = describeIntervalMs;
 exports.buildSuccessCriteria = buildSuccessCriteria;
 exports.cadenceLabel = cadenceLabel;
 exports.renderCommitmentList = renderCommitmentList;
-exports.effectiveAutonomyMode = effectiveAutonomyMode;
 exports.extractStandstillFromCheck = extractStandstillFromCheck;
-exports.describeAutonomyLine = describeAutonomyLine;
 exports.describeExecutorBlocked = describeExecutorBlocked;
 exports.renderCommitmentSummary = renderCommitmentSummary;
 exports.describeWakeDecision = describeWakeDecision;
@@ -63,7 +58,6 @@ Object.defineProperty(exports, "COMMITMENT_TEMPLATE_IDS", { enumerable: true, ge
 Object.defineProperty(exports, "COMMITMENT_CADENCE_MODES", { enumerable: true, get: function () { return data_provider_1.COMMITMENT_CADENCE_MODES; } });
 Object.defineProperty(exports, "COMMITMENT_CADENCE_TIME_PATTERN", { enumerable: true, get: function () { return data_provider_1.COMMITMENT_CADENCE_TIME_PATTERN; } });
 Object.defineProperty(exports, "COMMITMENT_CADENCE_MAX_TIMES", { enumerable: true, get: function () { return data_provider_1.COMMITMENT_CADENCE_MAX_TIMES; } });
-Object.defineProperty(exports, "COMMITMENT_AUTONOMY_MODES", { enumerable: true, get: function () { return data_provider_1.COMMITMENT_AUTONOMY_MODES; } });
 Object.defineProperty(exports, "COMMITMENT_EXECUTION_ISOLATION_MODES", { enumerable: true, get: function () { return data_provider_1.COMMITMENT_EXECUTION_ISOLATION_MODES; } });
 Object.defineProperty(exports, "COMMITMENT_STATUSES", { enumerable: true, get: function () { return data_provider_1.COMMITMENT_STATUSES; } });
 Object.defineProperty(exports, "COMMITMENT_KIND_VALUES", { enumerable: true, get: function () { return data_provider_1.COMMITMENT_KIND_VALUES; } });
@@ -74,34 +68,6 @@ const triggers_1 = require("./triggers");
 /** Derived from the installed compatibility vocabulary so the CLI remains
  * safe even while data-provider and CLI packages roll out separately. */
 exports.COMMITMENT_AUTHORABLE_CADENCE_MODES = data_provider_1.COMMITMENT_CADENCE_MODES.filter((mode) => mode !== 'sampled');
-exports.COMMITMENT_AUTHORABLE_AUTONOMY_MODES = ['monitor', 'prepare', 'execute'];
-function storedAutonomyModeForAuthoring(mode) {
-    if (mode === 'monitor')
-        return 'suggestions_only';
-    if (mode === 'prepare')
-        return 'ask_first';
-    if (mode === 'execute')
-        return 'auto_run';
-    throw new Error(`Unsupported autonomy mode: ${mode}. Use monitor, prepare, or execute.`);
-}
-function authoringAutonomyModeForStored(mode) {
-    if (mode === 'ask_first')
-        return 'prepare';
-    if (mode === 'auto_run' || mode === 'auto_run_limited')
-        return 'execute';
-    return 'monitor';
-}
-function commitmentAutonomyLabel(mode) {
-    if (mode === 'suggestions_only')
-        return 'Monitor';
-    if (mode === 'ask_first')
-        return 'Prepare';
-    if (mode === 'auto_run' || mode === 'auto_run_limited')
-        return 'Execute';
-    if (mode === 'off')
-        return 'Legacy off (pause the Commitment)';
-    return mode || '-';
-}
 /**
  * Interval bounds for `cadence.intervalMs`.
  *
@@ -151,8 +117,7 @@ exports.commitmentPackApi = {
     preflight: (id, nextRunCount) => data_provider_1.request.post(`${packBase(id)}/preflight`, {
         ...(typeof nextRunCount === 'number' ? { nextRunCount } : {}),
     }),
-    shadow: (id) => data_provider_1.request.post(`${packBase(id)}/shadow`, {}),
-    promote: (id) => data_provider_1.request.post(`${packBase(id)}/promote`, {}),
+    activate: (id) => data_provider_1.request.post(`${packBase(id)}/activate`, {}),
 };
 exports.commitmentApi = {
     /**
@@ -217,8 +182,6 @@ exports.commitmentApi = {
     pause: (id) => data_provider_1.request.post(`${base(id)}/pause`, {}),
     resume: (id) => data_provider_1.request.post(`${base(id)}/resume`, {}),
     complete: (id) => data_provider_1.request.post(`${base(id)}/complete`, {}),
-    autonomy: (id, body) => data_provider_1.request.post(`${base(id)}/autonomy`, body),
-    mode: (id, body) => data_provider_1.request.post(`${base(id)}/mode`, body),
     delivery: (id, body) => data_provider_1.request.post(`${base(id)}/delivery`, body),
     receipts: (id, query = 1) => data_provider_1.request.get((0, triggers_1.withQuery)(`${base(id)}/receipts`, typeof query === 'number' ? { limit: query } : query)),
     receiptQuarterlyMetrics: (id, year, quarter) => data_provider_1.request.get((0, triggers_1.withQuery)(`${base(id)}/receipt-metrics/quarterly`, { year, quarter })),
@@ -325,6 +288,9 @@ exports.commitmentApi = {
      * investigation of the same drift most needs answered before it starts.
      */
     hypotheses: (id, query = {}) => data_provider_1.request.get((0, triggers_1.withQuery)(`${base(id)}/hypotheses`, query)),
+    evaluations: (id, query = {}) => data_provider_1.request.get((0, triggers_1.withQuery)(`${base(id)}/evaluations`, query)),
+    createEvaluation: (id, body) => data_provider_1.request.post(`${base(id)}/evaluations`, body),
+    retryEvaluationLearning: (id, scheduleId) => data_provider_1.request.post(`${base(id)}/evaluations/${encodeURIComponent(scheduleId)}/retry-learning`, {}),
     observations: (id, query = {}) => data_provider_1.request.get((0, triggers_1.withQuery)(`${base(id)}/observations`, query)),
     /* ------------------------------------------------------------------------ *
      * Steering
@@ -334,7 +300,7 @@ exports.commitmentApi = {
     /** Bounded, named corrections — never a free-form contract edit. */
     remediate: (id, body) => data_provider_1.request.post(`${base(id)}/remediation`, body),
     /** Approve/reject an Agent-proposed cadence change the server parked. */
-    decideAutonomyRequest: (id, requestId, approved) => data_provider_1.request.post(`${base(id)}/autonomy-requests/${encodeURIComponent(requestId)}/decision`, {
+    decideCadenceRequest: (id, requestId, approved) => data_provider_1.request.post(`${base(id)}/cadence-requests/${encodeURIComponent(requestId)}/decision`, {
         approved,
     }),
     linkGoal: (id, goalId) => data_provider_1.request.put(`${base(id)}/goals/${encodeURIComponent(goalId)}`, {}),
@@ -351,7 +317,6 @@ exports.COMMITMENT_REMEDIATION_ACTIONS = [
     'pause_commitment',
     'mute_user_nudges',
     'reduce_nudge_frequency',
-    'tighten_policy',
     'mark_noop',
 ];
 /** The only keys `createBodySchema` (a `z.strictObject`) accepts. */
@@ -427,8 +392,8 @@ function parseCommitmentConcurrencyLimit(input) {
     if (['unlimited', 'unbounded', 'none', 'null'].includes(raw))
         return null;
     const value = Number(raw);
-    if (!Number.isSafeInteger(value) || value < 1 || value > 100) {
-        throw new Error('--max-concurrent-runs must be "unlimited" or an integer from 1 to 100.');
+    if (!Number.isSafeInteger(value) || value < 0 || value > 100) {
+        throw new Error('--max-concurrent-runs must be "unlimited" or an integer from 0 to 100.');
     }
     return value;
 }
@@ -453,7 +418,7 @@ function commitmentConcurrencyEnvelopePatch({ rawValue, reason, autonomous = pro
     };
 }
 function describeCommitmentConcurrency(commitment) {
-    const envelope = commitment.policy?.autonomyEnvelope;
+    const envelope = commitment.policy?.executionBudget;
     const limit = envelope?.maxConcurrentRuns;
     const decision = envelope?.maxConcurrentRunsDecision;
     if (limit == null) {
@@ -671,7 +636,7 @@ const STALLED_DIAGNOSES = {
  * no diagnosis to name.
  */
 function describeStalledHealth(commitment) {
-    if (commitment.state?.health !== 'stalled')
+    if (!['blocked', 'failed'].includes(commitment.assessment?.operation || ''))
         return undefined;
     const liveness = (commitment.state?.liveness || {});
     const kind = typeof liveness.diagnosisKind === 'string' ? liveness.diagnosisKind : undefined;
@@ -777,16 +742,18 @@ function renderCommitmentList(commitments, log) {
         id: o.id ?? '-',
         title: o.title ?? '-',
         status: o.status ?? '-',
-        health: o.state?.health ?? '-',
+        outcome: o.assessment?.label ?? 'Unknown',
+        evidence: o.assessment?.evidence ?? 'unavailable',
+        operation: o.assessment?.operation ?? 'blocked',
         cadence: cadenceLabel(o),
-        autonomy: (0, commitment_product_1.productModeLabel)(o.policy?.autonomyMode),
         agent: o.agentId ?? '-',
     })), [
         { key: 'title', header: 'TITLE', maxWidth: 34 },
         { key: 'status', header: 'STATUS', maxWidth: 10 },
-        { key: 'health', header: 'HEALTH', maxWidth: 16 },
+        { key: 'outcome', header: 'OUTCOME', maxWidth: 16 },
+        { key: 'evidence', header: 'EVIDENCE', maxWidth: 14 },
+        { key: 'operation', header: 'OPERATION', maxWidth: 12 },
         { key: 'cadence', header: 'CADENCE', maxWidth: 10 },
-        { key: 'autonomy', header: 'MODE', maxWidth: 18 },
         { key: 'agent', header: 'AGENT', verbatim: true },
         // Commitment ids are routinely pasted into `check-now`, so this column
         // is never clipped. Widening the guess (28 → 44) fixed today's
@@ -794,32 +761,6 @@ function renderCommitmentList(commitments, log) {
         { key: 'id', header: 'ID', verbatim: true },
     ], log);
 }
-/**
- * The autonomy mode a check ACTUALLY ran at, read from its policy trace
- * (OSK-4881).
- *
- * A check records the Mode it actually used in `decision.policyTrace`. For the
- * v2 product contract, only an explicit Workspace-admin constraint may lower
- * the declared Mode; legacy checks may still carry older effective-mode traces.
- * Either `autonomyMode` or `effectiveAutonomyMode` answers what governed that
- * particular run. Returns undefined when the trace carries neither.
- *
- * Exported for tests.
- */
-function effectiveAutonomyMode(check) {
-    const trace = check?.decision?.policyTrace;
-    if (!Array.isArray(trace))
-        return undefined;
-    for (const entry of trace) {
-        if (!entry || typeof entry !== 'object')
-            continue;
-        const e = entry;
-        const mode = e.autonomyMode ?? e.effectiveAutonomyMode;
-        if (typeof mode === 'string' && mode.length)
-            return mode;
-    }
-    return undefined;
-}
 /**
  * A `commitment_standstill` policyTrace entry, extracted from the latest
  * check's decision. The arbiter appends it whenever a quiet posture is the
@@ -864,14 +805,6 @@ function extractStandstillFromCheck(check) {
  *
  * Exported for tests.
  */
-function describeAutonomyLine(commitment, latestCheck) {
-    const stated = commitment.policy?.autonomyMode ?? '-';
-    const effective = effectiveAutonomyMode(latestCheck);
-    if (effective && effective !== stated) {
-        return `${(0, commitment_product_1.productModeLabel)(stated)} (effective: ${(0, commitment_product_1.productModeLabel)(effective)} — constrained by configured policy)`;
-    }
-    return (0, commitment_product_1.productModeLabel)(stated);
-}
 /**
  * One-line rendering of `commitment.executorBlocked` — the B4/A7 signal that
  * the executor's targets are all unusable: `{reason:'quota'|'offline'|'waiting_for_machine', until?,
@@ -927,21 +860,17 @@ latestCheck) {
     if (commitment.target?.deadlineAt)
         log(`Deadline:  ${commitment.target.deadlineAt}`);
     log(`Cadence:   ${cadenceLabel(commitment)}`);
-    log(`Mode:      ${describeAutonomyLine(commitment, latestCheck)}`);
     log(`Delivery:  ${(0, commitment_product_1.deliveryLabel)(commitment.delivery?.mode)}${commitment.delivery?.repo ? ` · ${commitment.delivery.repo}` : ''}${commitment.delivery?.baseBranch ? ` → ${commitment.delivery.baseBranch}` : ''}`);
     log(`Concurrency: ${describeCommitmentConcurrency(commitment)}`);
     const criteria = commitment.target?.successCriteria || [];
     const evidenceHealth = latestCheck?.inputs?.evidenceHealth;
     const evidenceLine = describeEvidenceHealth(evidenceHealth, criteria.length);
-    const health = commitment.state?.health ?? 'unknown';
-    const unevidenceableExplanation = health === 'unknown' && evidenceHealth?.state === 'unevidenceable_criteria'
-        ? ' — evidence cannot establish a positive health verdict as configured'
-        : '';
-    // The two explanations are mutually exclusive by construction: one only fires
-    // on `unknown`, the other only on `stalled`.
-    const stalledExplanation = describeStalledHealth(commitment);
-    const healthExplanation = unevidenceableExplanation || (stalledExplanation ? ` — ${stalledExplanation}` : '');
-    log(`Health:    ${health}${healthExplanation}`);
+    const assessment = commitment.assessment
+        ? (0, data_provider_1.readCommitmentAssessment)(commitment.assessment)
+        : undefined;
+    log(`Assessment: ${assessment?.label ?? 'Unknown'}`);
+    log(`Evidence:   ${assessment?.evidence ?? 'unavailable'}`);
+    log(`Operation:  ${assessment?.operation ?? 'blocked'}${assessment?.operationReason ? ` — ${assessment.operationReason}` : ''}`);
     if (commitment.state?.lastCheckedAt)
         log(`Checked:   ${commitment.state.lastCheckedAt}`);
     if (typeof commitment.state?.consecutiveUnresolvedChecks === 'number') {
@@ -1016,8 +945,8 @@ const INVOCATION_SKIP_REASONS = {
     state_watch_intact: 'watch intact',
     // NAMES THE ENVELOPE, not "autonomy", because they are different fields.
     //
-    // The server sets this code from `autonomyEnvelope.enabled !== true`
-    // (`WakeIntentResolver.js:35`, `CommitmentAutonomyService.js:12`). It was
+    // The server sets this code from `executionBudget.enabled !== true`
+    // (`WakeIntentResolver.js:35`, `CommitmentCadenceService.js:12`). It was
     // rendered as "autonomy off", which a reader maps onto `policy.autonomyMode`
     // — the field the CLI prints as `Autonomy:` and the one `commitments autonomy`
     // sets. So a commitment sitting at `suggestions_only` reported "autonomy off",

package/dist/lib/dedicated-power.d.ts

@@ -63,6 +63,11 @@ export declare function describeLastAutoStopLines(last: DedicatedRuntimePowerSum
 };
 /** The latest wake decision and who asked, as lines; empty when there is none. */
 export declare function describeLastWakeDecisionLines(wake: DedicatedRuntimePowerSummary['lastWakeDecision'], when?: WhenOptions): string[];
+/**
+ * The announced-but-not-yet-done stop, in the shared words (`describePendingStop`). Empty when the
+ * summary carries none, which is also what an older server sends: absent is not "no stop coming".
+ */
+export declare function describePendingStopLines(summary: Pick<DedicatedRuntimePowerSummary, 'leaseId' | 'pendingStop'>, when?: WhenOptions): string[];
 /** The lines of `power show`. */
 export declare function describePowerSummary(summary: DedicatedRuntimePowerSummary, when?: WhenOptions): string[];
 /** The lines of `power explain`; the fix is always last. */

package/dist/lib/dedicated-power.js

@@ -12,6 +12,7 @@ exports.describePrewarm = describePrewarm;
 exports.describePowerDecisionLines = describePowerDecisionLines;
 exports.describeLastAutoStopLines = describeLastAutoStopLines;
 exports.describeLastWakeDecisionLines = describeLastWakeDecisionLines;
+exports.describePendingStopLines = describePendingStopLines;
 exports.describePowerSummary = describePowerSummary;
 exports.describePowerExplanation = describePowerExplanation;
 exports.describeBudget = describeBudget;
@@ -50,7 +51,7 @@ async function setDedicatedPowerPolicy(leaseId, request, scope = {}) {
             return {
                 ok: false,
                 refusal: {
-                    error: String(body.error ?? 'on_demand is not available for this machine yet.'),
+                    error: String(body.error ?? 'On demand is not available for this machine yet.'),
                     code: 'ON_DEMAND_INELIGIBLE',
                     reason: reason,
                     detail: String(body.detail ?? copy?.detail ?? ''),
@@ -204,7 +205,10 @@ function describePrewarm(prewarm, when = {}) {
 function describePowerDecisionLines(decision) {
     const copy = (0, data_provider_1.describePowerReason)(decision.reason);
     const VERBS = { stay: 'Staying on', stop: 'Stopped', wake: 'Wake' };
-    const verb = VERBS[decision.question] ?? decision.question;
+    // `stop_scheduled` answers the stop question for a machine that is still running.
+    const verb = decision.reason === 'stop_scheduled'
+        ? 'Scheduled to stop'
+        : (VERBS[decision.question] ?? decision.question);
     return {
         // The headline is the human label only; the reason token lives in `--json` and `power explain`.
         // With no shared copy and no server detail there is no sentence, so the token is the last resort.
@@ -275,6 +279,28 @@ function describeLastWakeDecisionLines(wake, when = {}) {
         lines.push(`          ${wake.fix}`);
     return lines;
 }
+/** What the Keep awake offered by the stop notice means in the CLI: two hours. */
+const PENDING_STOP_KEEP_AWAKE_HOURS = 2;
+/**
+ * The announced-but-not-yet-done stop, in the shared words (`describePendingStop`). Empty when the
+ * summary carries none, which is also what an older server sends: absent is not "no stop coming".
+ */
+function describePendingStopLines(summary, when = {}) {
+    const pending = summary.pendingStop;
+    if (!pending)
+        return [];
+    const words = (0, data_provider_1.describePendingStop)(pending, {
+        nowMs: (when.now ?? new Date()).getTime(),
+        when: (0, format_1.formatWhen)(pending.stopsAt, when),
+        capWhen: pending.unreachableStopsAt ? (0, format_1.formatWhen)(pending.unreachableStopsAt, when) : null,
+        keepAwakeHours: PENDING_STOP_KEEP_AWAKE_HOURS,
+    });
+    const lines = [`Stop:     ${words.headline}`];
+    if (words.detail)
+        lines.push(`          ${words.detail}`);
+    lines.push(`          ${words.fix} skrr machines dedicated power keep-awake ${summary.leaseId} --for ${PENDING_STOP_KEEP_AWAKE_HOURS}h`);
+    return lines;
+}
 /** The lines of `power show`. */
 function describePowerSummary(summary, when = {}) {
     const { power } = summary;
@@ -303,6 +329,7 @@ function describePowerSummary(summary, when = {}) {
             lines.push('Decision: nothing to explain for this state');
         }
     }
+    lines.push(...describePendingStopLines(summary, when));
     lines.push(...describeLastAutoStopLines(summary.lastAutoStop, summary.decision?.detail, when).lines);
     lines.push(...describeLastWakeDecisionLines(summary.lastWakeDecision, when));
     if (summary.holders === null) {
@@ -347,6 +374,7 @@ function describePowerExplanation(summary, when = {}) {
         lines.push(`At:       ${(0, format_1.formatWhen)(d.at, when)}`);
     if (text.detail)
         lines.push(`Detail:   ${text.detail}`);
+    lines.push(...describePendingStopLines(summary, when));
     const stop = describeLastAutoStopLines(summary.lastAutoStop, d.detail, when);
     lines.push(...stop.lines);
     lines.push(...wakeLines);

package/dist/lib/dry-run-plans.d.ts

@@ -0,0 +1,50 @@
+type Row = Record<string, unknown>;
+export type ProjectAction = 'archive' | 'unarchive' | 'delete';
+export declare function planProjectChange(action: ProjectAction, project: Row, projectRef: string): {
+    object: string;
+    source: string;
+    ok: boolean;
+    action: ProjectAction;
+    project: {
+        id: unknown;
+        ref: {};
+        title: unknown;
+        archived: boolean;
+    };
+    changes: {
+        deletesProject: boolean;
+        detachedTasksEstimate: number | null;
+        reversible: boolean;
+        archived?: undefined;
+    } | {
+        archived: boolean;
+        reversible: boolean;
+        deletesProject?: undefined;
+        detachedTasksEstimate?: undefined;
+    };
+    errors: string[];
+    notes: string[];
+};
+export type BulkUpdateInput = {
+    id: string;
+    patch: Row;
+};
+export declare function planBulkUpdate(updates: BulkUpdateInput[], currentById: Record<string, Row | null | undefined>, failedReads?: Record<string, string>): {
+    object: string;
+    source: string;
+    ok: boolean;
+    requested: number;
+    wouldChange: number;
+    invalid: number;
+    results: {
+        id: string;
+        ok: boolean;
+        changes: Record<string, {
+            from: unknown;
+            to: unknown;
+        }>;
+        noop: boolean;
+        errors: string[];
+    }[];
+};
+export {};

package/dist/lib/dry-run-plans.js

@@ -0,0 +1,85 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.planProjectChange = planProjectChange;
+exports.planBulkUpdate = planBulkUpdate;
+/**
+ * Client-side validated previews for `--dry-run` (audit P5).
+ *
+ * Each plan is built from READS only (a GET of the current row) and answers three
+ * things a caller needs before a destructive call: would it be accepted, what
+ * would change, and what is the blast radius. It is a preview, not a promise:
+ * the real call re-validates server-side, and a concurrent writer can still
+ * change the outcome. Where the server has no validate-only path the plan says
+ * `source: 'client_preview'` so nobody mistakes it for one.
+ */
+const data_provider_1 = require("@skrr-ai/data-provider");
+function planProjectChange(action, project, projectRef) {
+    const archived = Boolean(project.archivedAt);
+    const taskCounts = (project.taskCounts ?? {});
+    const errors = [];
+    const notes = [];
+    if (action === 'archive' && archived)
+        notes.push('Already archived; archiving again is a no-op.');
+    if (action === 'unarchive' && !archived)
+        notes.push('Not archived; unarchiving is a no-op.');
+    return {
+        object: 'project_change_dry_run',
+        source: 'client_preview',
+        ok: errors.length === 0,
+        action,
+        project: {
+            id: project.id,
+            ref: project.identifier ?? projectRef,
+            title: project.title,
+            archived,
+        },
+        changes: action === 'delete'
+            ? {
+                deletesProject: true,
+                // Member tasks are detached, never deleted (invariant P3).
+                detachedTasksEstimate: taskCounts.total ?? null,
+                reversible: false,
+            }
+            : { archived: action === 'archive', reversible: true },
+        errors,
+        notes,
+    };
+}
+function planBulkUpdate(updates, currentById, failedReads = {}) {
+    const rows = updates.map(({ id, patch }) => {
+        const errors = [];
+        const current = currentById[id];
+        if (failedReads[id])
+            errors.push(`could not read task: ${failedReads[id]}`);
+        else if (!current)
+            errors.push('task not found');
+        const status = patch.status;
+        if (status !== undefined && !data_provider_1.TASK_STATUSES.includes(status)) {
+            errors.push(`status must be one of: ${data_provider_1.TASK_STATUSES.join(', ')}`);
+        }
+        const changes = {};
+        for (const [field, to] of Object.entries(patch)) {
+            if (to === undefined)
+                continue;
+            const from = current?.[field];
+            if (JSON.stringify(from) !== JSON.stringify(to))
+                changes[field] = { from, to };
+        }
+        return {
+            id,
+            ok: errors.length === 0,
+            changes,
+            noop: errors.length === 0 && Object.keys(changes).length === 0,
+            errors,
+        };
+    });
+    return {
+        object: 'task_bulk_update_dry_run',
+        source: 'client_preview',
+        ok: rows.every((r) => r.ok),
+        requested: rows.length,
+        wouldChange: rows.filter((r) => r.ok && !r.noop).length,
+        invalid: rows.filter((r) => !r.ok).length,
+        results: rows,
+    };
+}

package/dist/lib/json-output.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Storage-field stripping for `--json` output (audit P9).
+ *
+ * The API returns Mongo documents, so every row carries `_id` and `__v` beside
+ * the real `id`: 47 keys per task row, two of which are storage detail an agent
+ * pays tokens for and can mistake for the identifier (OSK-12205 was exactly
+ * that: a 24-hex `_id` passed where a task id was wanted).
+ *
+ * This runs at the CLI SERIALIZER only (`BaseCommand.log`), never in the API or
+ * the data layer, so no other consumer's payload changes. `--raw` (or
+ * `OVERSKY_CLI_RAW=1`) turns it off for the caller that does want them.
+ *
+ * Two rules, both conservative:
+ *   - `__v` is the Mongoose version key and is always dropped.
+ *   - `_id` is dropped only when the same object has a usable `id`. A row that
+ *     has ONLY `_id` (some legacy collections) keeps it: removing the sole
+ *     identifier would turn a cosmetic cleanup into data loss.
+ */
+type Json = unknown;
+/**
+ * Returns the SAME reference when nothing needed stripping, so a caller can tell
+ * "unchanged" apart from "rebuilt" and leave the original text alone.
+ */
+export declare function stripStorageFields(value: Json): Json;
+/**
+ * Apply {@link stripStorageFields} to one line of CLI output. Anything that is
+ * not a JSON object/array (prose, a bare string, malformed text) is returned
+ * untouched, as is JSON with nothing to strip, so existing formatting survives.
+ */
+export declare function stripStorageFieldsFromText(text: string): string;
+export {};

package/dist/lib/json-output.js

@@ -0,0 +1,78 @@
+"use strict";
+/**
+ * Storage-field stripping for `--json` output (audit P9).
+ *
+ * The API returns Mongo documents, so every row carries `_id` and `__v` beside
+ * the real `id`: 47 keys per task row, two of which are storage detail an agent
+ * pays tokens for and can mistake for the identifier (OSK-12205 was exactly
+ * that: a 24-hex `_id` passed where a task id was wanted).
+ *
+ * This runs at the CLI SERIALIZER only (`BaseCommand.log`), never in the API or
+ * the data layer, so no other consumer's payload changes. `--raw` (or
+ * `OVERSKY_CLI_RAW=1`) turns it off for the caller that does want them.
+ *
+ * Two rules, both conservative:
+ *   - `__v` is the Mongoose version key and is always dropped.
+ *   - `_id` is dropped only when the same object has a usable `id`. A row that
+ *     has ONLY `_id` (some legacy collections) keeps it: removing the sole
+ *     identifier would turn a cosmetic cleanup into data loss.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.stripStorageFields = stripStorageFields;
+exports.stripStorageFieldsFromText = stripStorageFieldsFromText;
+function usableId(value) {
+    return (typeof value === 'string' && value.length > 0) || typeof value === 'number';
+}
+/**
+ * Returns the SAME reference when nothing needed stripping, so a caller can tell
+ * "unchanged" apart from "rebuilt" and leave the original text alone.
+ */
+function stripStorageFields(value) {
+    if (Array.isArray(value)) {
+        let changed = false;
+        const next = value.map((item) => {
+            const stripped = stripStorageFields(item);
+            if (stripped !== item)
+                changed = true;
+            return stripped;
+        });
+        return changed ? next : value;
+    }
+    if (value === null || typeof value !== 'object')
+        return value;
+    const source = value;
+    const dropId = '_id' in source && usableId(source.id);
+    const dropVersion = '__v' in source;
+    let changed = dropId || dropVersion;
+    const next = {};
+    for (const [key, child] of Object.entries(source)) {
+        if ((key === '_id' && dropId) || (key === '__v' && dropVersion))
+            continue;
+        const stripped = stripStorageFields(child);
+        if (stripped !== child)
+            changed = true;
+        next[key] = stripped;
+    }
+    return changed ? next : value;
+}
+/**
+ * Apply {@link stripStorageFields} to one line of CLI output. Anything that is
+ * not a JSON object/array (prose, a bare string, malformed text) is returned
+ * untouched, as is JSON with nothing to strip, so existing formatting survives.
+ */
+function stripStorageFieldsFromText(text) {
+    const head = text.trimStart()[0];
+    if (head !== '{' && head !== '[')
+        return text;
+    let parsed;
+    try {
+        parsed = JSON.parse(text);
+    }
+    catch {
+        return text;
+    }
+    const stripped = stripStorageFields(parsed);
+    if (stripped === parsed)
+        return text;
+    return JSON.stringify(stripped, null, text.includes('\n') ? 2 : undefined);
+}

package/dist/lib/list-output.d.ts

@@ -0,0 +1,75 @@
+export type ListWarning = {
+    code: string;
+    value?: unknown;
+    hint: string;
+};
+export type ListEnvelope = {
+    object: 'list';
+    data: Array<Record<string, unknown>>;
+    has_more: boolean;
+    next_cursor: string | null;
+    limit_applied?: number;
+    warnings?: ListWarning[];
+} & Record<string, unknown>;
+/**
+ * The navigation projection per resource: enough to identify a row, decide
+ * whether it matters and fetch it with `show`. Allowlists, not drop-lists, so a
+ * field the server adds tomorrow does not silently re-inflate every compact row.
+ * Documented in docs/cli/SKRR_TASKS.md (List output for agents).
+ */
+export declare const COMPACT_FIELDS: {
+    readonly task: readonly ["id", "identifier", "ref", "title", "status", "statusType", "priority", "estimate", "assigneeAgentIds", "assigneeUserIds", "parentId", "spaceId", "projectId", "goalId", "dueDate", "scheduledFor", "labelIds", "tags", "externalKey", "version", "executionMode", "nextAction", "createdAt", "updatedAt", "url"];
+    readonly space: readonly ["id", "identifier", "title", "status", "parentSpaceId", "leadAgentId", "labelIds", "archivedAt", "createdAt", "updatedAt", "url"];
+    readonly project: readonly ["id", "identifier", "title", "spaceId", "externalKey", "taskCounts", "archivedAt", "createdAt", "updatedAt", "url"];
+};
+export type ListResource = keyof typeof COMPACT_FIELDS;
+/** The three flags every projecting list command declares. */
+export declare const listOutputFlags: {
+    fields: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+    compact: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+    ndjson: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+};
+export type ListOutputFlags = {
+    fields?: string;
+    compact?: boolean;
+    ndjson?: boolean;
+};
+/** `--fields a, b ,c` -> ['a','b','c']; empty/blank -> undefined. */
+export declare function parseFields(raw: string | undefined): string[] | undefined;
+export declare function projectRow(row: Record<string, unknown>, fields: readonly string[]): Record<string, unknown>;
+/**
+ * Normalize any list response to the shared envelope. `data` is where rows live
+ * for every list command; `projects` (an older serialization) is folded into it.
+ * A response that is not list-shaped is returned untouched (never invent rows).
+ */
+export declare function toListEnvelope(response: unknown): ListEnvelope | undefined;
+export type ShapeListOptions = ListOutputFlags & {
+    resource: ListResource;
+    /** What the caller asked for with --limit (undefined when the command has none). */
+    requestedLimit?: number;
+    warnings?: ListWarning[];
+    /** A filter the CLI applied that the caller did not ask for (E12). Echoed as `filter_applied`. */
+    filterApplied?: Record<string, unknown>;
+};
+/** Pure: envelope + projection + notes. Returns the response untouched if not a list. */
+export declare function shapeListResponse(response: unknown, options: ShapeListOptions): unknown;
+/**
+ * E11: the server silently clamps `--limit` (cap) and coerces `0` to its default.
+ * Echo what was applied. `applied` is only reported when we can prove it: a full
+ * page that still has more rows means the cap is exactly the row count.
+ */
+export declare function limitNote(requested: number | undefined, rowCount: number, hasMore: boolean): {
+    applied?: number;
+    warning?: ListWarning;
+};
+/** The text-mode twin of a warning: one `Note:` line a person can act on. */
+export declare function warningLines(warnings: readonly ListWarning[] | undefined): string[];
+export type ListOutput = {
+    stdout: string[];
+    stderr: string[];
+};
+/**
+ * Render a shaped list for `--json` (pretty envelope) or `--ndjson` (rows one per
+ * line, `_meta` on stderr). Pure; the caller writes the lines.
+ */
+export declare function renderListOutput(shaped: unknown, ndjson: boolean): ListOutput;