@skrr-ai/cli 0.1.92 → 0.1.94

package/dist/commands/commitments/remediate.js

@@ -29,11 +29,8 @@ class CommitmentsRemediate extends base_command_1.BaseCommand {
     static flags = {
         json: core_1.Flags.boolean({ description: 'Output as JSON' }),
         action: core_1.Flags.string({
-            description: 'Remediation action. Change work authority with commitments mode; Workspace approval rules belong in Workspace governance.',
-            // `tighten_policy` remains a REST compatibility value for legacy rows. It
-            // is deliberately absent from the product CLI: v2 authority changes are
-            // explicit Mode changes, never a hidden risk/approval tier.
-            options: commitments_1.COMMITMENT_REMEDIATION_ACTIONS.filter((action) => action !== 'tighten_policy'),
+            description: 'Adjust lifecycle or reporting. Agent permissions and Workspace administration have their own controls.',
+            options: commitments_1.COMMITMENT_REMEDIATION_ACTIONS,
             required: true,
         }),
         reason: core_1.Flags.string({ description: 'Why (recorded on the boundary-change ledger)' }),

package/dist/commands/commitments/show.js

@@ -52,7 +52,7 @@ class CommitmentsShow extends base_command_1.BaseCommand {
         (0, commitments_1.renderCommitmentSummary)(response.commitment, (line) => this.log(line), response.latestCheck);
         // Whose permissions a run uses (OSK-11975) — read from the operating state,
         // which carries the same projection preflight reports (OSK-12065).
-        const autonomy = response.operatingState?.autonomy;
+        const autonomy = response.operatingState?.execution;
         for (const line of (0, commitments_1.permissionLines)(autonomy?.permissions))
             this.log(line);
         // `show` is the first surface a person reaches after linking something, and

package/dist/commands/commitments/update.js

@@ -264,22 +264,22 @@ class CommitmentsUpdate extends base_command_1.BaseCommand {
                 if (flags.isolation)
                     nextPolicy.executionIsolation = flags.isolation;
                 if (concurrencyPatch) {
-                    const existingEnvelope = nextPolicy.autonomyEnvelope &&
-                        typeof nextPolicy.autonomyEnvelope === 'object' &&
-                        !Array.isArray(nextPolicy.autonomyEnvelope)
-                        ? nextPolicy.autonomyEnvelope
+                    const existingEnvelope = nextPolicy.executionBudget &&
+                        typeof nextPolicy.executionBudget === 'object' &&
+                        !Array.isArray(nextPolicy.executionBudget)
+                        ? nextPolicy.executionBudget
                         : {};
-                    nextPolicy.autonomyEnvelope = { ...existingEnvelope, ...concurrencyPatch };
+                    nextPolicy.executionBudget = { ...existingEnvelope, ...concurrencyPatch };
                 }
                 payload.policy = nextPolicy;
             }
             const finalPolicy = payload.policy && typeof payload.policy === 'object' && !Array.isArray(payload.policy)
                 ? payload.policy
                 : undefined;
-            const finalEnvelope = finalPolicy?.autonomyEnvelope &&
-                typeof finalPolicy.autonomyEnvelope === 'object' &&
-                !Array.isArray(finalPolicy.autonomyEnvelope)
-                ? finalPolicy.autonomyEnvelope
+            const finalEnvelope = finalPolicy?.executionBudget &&
+                typeof finalPolicy.executionBudget === 'object' &&
+                !Array.isArray(finalPolicy.executionBudget)
+                ? finalPolicy.executionBudget
                 : undefined;
             if (process.env.OVERSKY_AUTONOMOUS_SESSION === '1' &&
                 finalEnvelope &&

package/dist/commands/commitments/wake-capabilities.d.ts

@@ -1,7 +1,5 @@
 import { BaseCommand } from '../../base-command';
-export declare function wakePolicyHeadline(result: {
-    workPromotionModel?: string;
-}): string;
+export declare function wakePolicyHeadline(_result?: unknown): string;
 /**
  * `skrr commitments wake-capabilities <id>` — which wakes an Agent may pick.
  *

package/dist/commands/commitments/wake-capabilities.js

@@ -5,15 +5,8 @@ const core_1 = require("@oclif/core");
 const base_command_1 = require("../../base-command");
 const commitments_1 = require("../../lib/commitments");
 const format_1 = require("../../lib/format");
-function wakePolicyHeadline(result) {
-    return result.workPromotionModel === 'monitor_prepare_execute_v1'
-        ? 'Wake behavior: configured Commitment sources may wake it automatically; there is no separate permission level.'
-        : // The Commitment's Monitor/Prepare/Execute mode is a different field —
-            // this policy predates the current wake contract, which is why a
-            // Commitment already in `execute` mode can still carry the legacy
-            // marker. Naming the field avoids the "migrate to what it already is"
-            // contradiction.
-            'Wake behavior: this Commitment predates the current wake contract and runs the compatibility policy. Re-saving its mode (Monitor, Prepare, or Execute) stamps the current policy.';
+function wakePolicyHeadline(_result) {
+    return 'Wake behavior: configured sources may wake the Agent within lifecycle and execution budgets.';
 }
 /**
  * `skrr commitments wake-capabilities <id>` — which wakes an Agent may pick.
@@ -38,7 +31,7 @@ class CommitmentsWakeCapabilities extends base_command_1.BaseCommand {
     };
     static flags = {
         json: core_1.Flags.boolean({ description: 'Output as JSON' }),
-        verbose: core_1.Flags.boolean({ description: 'Include raw legacy wake-policy values' }),
+        verbose: core_1.Flags.boolean({ description: 'Include wake-source diagnostics' }),
     };
     async run() {
         this.requireAuth();
@@ -54,16 +47,7 @@ class CommitmentsWakeCapabilities extends base_command_1.BaseCommand {
             this.log(JSON.stringify(result, null, 2));
             return;
         }
-        const productModel = result.workPromotionModel === 'monitor_prepare_execute_v1';
-        this.log(wakePolicyHeadline(result));
-        const selected = result.selectedCapabilityIds;
-        if (flags.verbose) {
-            this.log(`Raw compatibility mode: ${result.mode}`);
-            this.log(selected === undefined
-                ? 'Raw allowlist: not configured'
-                : `Raw allowlist: ${selected.length ? selected.join(', ') : '(empty)'}`);
-        }
-        this.log('');
+        this.log(wakePolicyHeadline());
         const visible = new Set(result.visibleCapabilities.map((item) => item.id));
         (0, format_1.renderTable)(result.eligibleCapabilities.map((item) => ({
             id: item.id,
@@ -74,7 +58,7 @@ class CommitmentsWakeCapabilities extends base_command_1.BaseCommand {
             { key: 'id', header: 'CAPABILITY' },
             { key: 'kind', header: 'KIND' },
             { key: 'source', header: 'SOURCE' },
-            { key: 'offered', header: productModel ? 'ACTIVE' : 'OFFERED' },
+            { key: 'offered', header: 'ACTIVE' },
         ], (line) => this.log(line));
     }
 }

package/dist/commands/earnings/attributions.d.ts

@@ -0,0 +1,17 @@
+import type { DistributionAttributionsResponse } from '@skrr-ai/data-provider';
+import { BaseCommand } from '../../base-command';
+/** The human rendering; exported for the spec. */
+export declare function renderAttributions(view: DistributionAttributionsResponse, log: (line: string) => void): void;
+/**
+ * `skrr earnings attributions` — what your share links drove
+ * (agent-distribution-2026-10-08.md, "Affiliate"). Read-only, and only ever
+ * your own codes.
+ */
+export default class EarningsAttributions extends BaseCommand {
+    static description: string;
+    static examples: string[];
+    static flags: {
+        json: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+    };
+    run(): Promise<void>;
+}

package/dist/commands/earnings/attributions.js

@@ -0,0 +1,82 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.renderAttributions = renderAttributions;
+const core_1 = require("@oclif/core");
+const data_provider_1 = require("@skrr-ai/data-provider");
+const base_command_1 = require("../../base-command");
+/** tokenCredits are micro-dollars (1,000,000 = $1.00), as everywhere in earnings. */
+const CREDITS_PER_USD = 1_000_000;
+function amount(value, currency) {
+    if (currency === 'tokenCredits' || currency === 'USD') {
+        return `$${(value / CREDITS_PER_USD).toFixed(2)}`;
+    }
+    return `${value} ${currency}`;
+}
+const REWARD_STATE_LABEL = {
+    none: 'measured, no reward',
+    pending: 'reward pending',
+    available: 'reward available',
+    reversed: 'reward reversed',
+};
+/** The human rendering; exported for the spec. */
+function renderAttributions(view, log) {
+    const plural = view.installs === 1 ? '' : 's';
+    log(`Your links drove ${view.installs} install${plural}.`);
+    log(`  Paid:      ${view.paidInstalls}${view.refundedInstalls ? ` (${view.refundedInstalls} refunded)` : ''}`);
+    if (view.gross.length > 0) {
+        log(`  Sales:     ${view.gross.map((g) => amount(g.amount, g.currency)).join(', ')}`);
+    }
+    if (view.rateBps > 0) {
+        log(`  Rewards:   ${amount(view.rewards.pending, 'tokenCredits')} pending, ` +
+            `${amount(view.rewards.available, 'tokenCredits')} available ` +
+            `(rate ${(view.rateBps / 100).toFixed(2)}%)`);
+    }
+    else {
+        log('  Rewards:   not enabled — paid installs are measured, nothing is paid yet.');
+    }
+    if (view.recent.length === 0) {
+        if (view.installs === 0)
+            log('Share an agent (skrr agents embed, or a share link) to see what it drives.');
+        return;
+    }
+    log('');
+    log('Recent paid installs:');
+    for (const row of view.recent) {
+        const when = row.createdAt.slice(0, 10);
+        const name = row.agentName || row.agentId;
+        const refunded = row.refundedAt ? ', refunded' : '';
+        log(`  ${when}  ${name}  ${amount(row.gross, row.currency)}  via ${row.channel ?? 'unknown'}  ` +
+            `(${REWARD_STATE_LABEL[row.rewardState] ?? row.rewardState}${refunded})`);
+    }
+}
+/**
+ * `skrr earnings attributions` — what your share links drove
+ * (agent-distribution-2026-10-08.md, "Affiliate"). Read-only, and only ever
+ * your own codes.
+ */
+class EarningsAttributions extends base_command_1.BaseCommand {
+    static description = 'Show the installs your share links drove, the paid ones, and any reward they earned (read-only)';
+    static examples = [
+        '<%= config.bin %> earnings attributions',
+        '<%= config.bin %> earnings attributions --json',
+    ];
+    static flags = {
+        json: core_1.Flags.boolean({ description: 'Output as JSON' }),
+    };
+    async run() {
+        this.requireAuth();
+        const { flags } = await this.parse(EarningsAttributions);
+        try {
+            const view = await data_provider_1.dataService.getDistributionAttributions();
+            if (flags.json) {
+                this.log(JSON.stringify(view, null, 2));
+                return;
+            }
+            renderAttributions(view, (line) => this.log(line));
+        }
+        catch (error) {
+            this.handleApiError(error, { subject: 'attributions' });
+        }
+    }
+}
+exports.default = EarningsAttributions;

package/dist/commands/earnings/index.js

@@ -11,12 +11,13 @@ const earnings_1 = require("../../lib/earnings");
  */
 class Earnings extends base_command_1.BaseCommand {
     static description = 'Show your publisher earnings: available and pending balance, payout window and automatic payouts (read-only). ' +
-        'See `earnings statements` and `earnings payouts` for the history behind it.';
+        'See `earnings statements` and `earnings payouts` for the history behind it, and `earnings attributions` for what your share links drove.';
     static examples = [
         '<%= config.bin %> earnings',
         '<%= config.bin %> earnings --json',
         '<%= config.bin %> earnings statements',
         '<%= config.bin %> earnings payouts',
+        '<%= config.bin %> earnings attributions',
     ];
     static flags = {
         json: core_1.Flags.boolean({ description: 'Output as JSON' }),

package/dist/commands/generate-recovery-code.js

@@ -61,9 +61,10 @@ class GenerateRecoveryCode extends base_command_1.BaseCommand {
         process.stdout.write(result.formatted + '\n');
         // All metadata and warnings to stderr so stdout remains clean.
         process.stderr.write('\n');
-        process.stderr.write('  Account Recovery Code (copy now — this is the only time it will be shown):\n');
-        process.stderr.write('\n');
-        process.stderr.write(`    ${result.formatted}\n`);
+        // The code itself is on stdout, ABOVE. It used to be printed again here, so
+        // an interactive terminal (stdout and stderr share the screen, and scrollback
+        // keeps both) held two copies of a one-time credential.
+        process.stderr.write('  Account Recovery Code is printed above (copy now — this is the only time it will be shown).\n');
         process.stderr.write('\n');
         process.stderr.write('  WARNING: Store this somewhere safe. It will not be shown again.\n');
         process.stderr.write('  If lost, run this command again to generate a new code (the old one is revoked).\n');

package/dist/commands/github/allow-tools.d.ts

@@ -12,6 +12,7 @@ export default class GitHubAllowTools extends BaseCommand {
         token: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         workspace: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         profile: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        raw: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
     };
     run(): Promise<void>;
 }

package/dist/commands/github/app/install.d.ts

@@ -21,6 +21,7 @@ export default class GitHubAppInstall extends BaseCommand {
         token: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         workspace: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         profile: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        raw: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
     };
     run(): Promise<void>;
 }

package/dist/commands/github/app/status.d.ts

@@ -15,6 +15,7 @@ export default class GitHubAppStatus extends BaseCommand {
         token: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         workspace: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         profile: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        raw: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
     };
     run(): Promise<void>;
 }

package/dist/commands/github/connect.d.ts

@@ -25,6 +25,7 @@ export default class GitHubConnect extends BaseCommand {
         token: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         workspace: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         profile: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        raw: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
     };
     run(): Promise<void>;
 }

package/dist/commands/github/connections.d.ts

@@ -10,6 +10,7 @@ export default class GitHubConnections extends BaseCommand {
         token: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         workspace: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         profile: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        raw: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
     };
     run(): Promise<void>;
 }

package/dist/commands/github/disconnect.d.ts

@@ -10,6 +10,7 @@ export default class GitHubDisconnect extends BaseCommand {
         token: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         workspace: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         profile: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        raw: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
     };
     run(): Promise<void>;
 }

package/dist/commands/github/finalize.d.ts

@@ -14,6 +14,7 @@ export default class GitHubFinalize extends BaseCommand {
         token: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         workspace: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         profile: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        raw: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
     };
     run(): Promise<void>;
 }

package/dist/commands/github/reconnect.d.ts

@@ -12,6 +12,7 @@ export default class GitHubReconnect extends BaseCommand {
         token: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         workspace: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         profile: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        raw: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
     };
     run(): Promise<void>;
 }

package/dist/commands/github/run.d.ts

@@ -16,6 +16,7 @@ export default class GitHubRun extends BaseCommand {
         token: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         workspace: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         profile: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        raw: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
     };
     run(): Promise<void>;
 }

package/dist/commands/github/tools.d.ts

@@ -15,6 +15,7 @@ export default class GitHubTools extends BaseCommand {
         token: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         workspace: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         profile: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        raw: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
     };
     run(): Promise<void>;
 }

package/dist/commands/integrations/connections/connect.d.ts

@@ -15,6 +15,7 @@ export default class IntegrationsConnectionsConnect extends BaseCommand {
         token: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         workspace: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         profile: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        raw: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
     };
     run(): Promise<void>;
 }

package/dist/commands/integrations/connections/disconnect.d.ts

@@ -13,6 +13,7 @@ export default class IntegrationsConnectionsDisconnect extends BaseCommand {
         token: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         workspace: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         profile: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        raw: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
     };
     run(): Promise<void>;
 }

package/dist/commands/integrations/connections/finalize.d.ts

@@ -14,6 +14,7 @@ export default class IntegrationsConnectionsFinalize extends BaseCommand {
         token: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         workspace: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         profile: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        raw: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
     };
     run(): Promise<void>;
 }

package/dist/commands/integrations/connections/list.d.ts

@@ -10,6 +10,7 @@ export default class IntegrationsConnectionsList extends BaseCommand {
         token: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         workspace: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         profile: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        raw: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
     };
     run(): Promise<void>;
 }

package/dist/commands/integrations/connections/reconnect.d.ts

@@ -15,6 +15,7 @@ export default class IntegrationsConnectionsReconnect extends BaseCommand {
         token: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         workspace: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         profile: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        raw: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
     };
     run(): Promise<void>;
 }

package/dist/commands/integrations/execute.d.ts

@@ -16,6 +16,7 @@ export default class IntegrationsExecute extends BaseCommand {
         token: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         workspace: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         profile: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        raw: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
     };
     run(): Promise<void>;
 }

package/dist/commands/integrations/search.d.ts

@@ -14,6 +14,7 @@ export default class IntegrationsSearch extends BaseCommand {
         token: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         workspace: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         profile: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        raw: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
     };
     run(): Promise<void>;
 }

package/dist/commands/integrations/toolkits.d.ts

@@ -9,6 +9,7 @@ export default class IntegrationsToolkits extends BaseCommand {
         token: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         workspace: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         profile: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        raw: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
     };
     run(): Promise<void>;
 }

package/dist/commands/integrations/tools/allow.d.ts

@@ -14,6 +14,7 @@ export default class IntegrationsToolsAllow extends BaseCommand {
         token: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         workspace: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         profile: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        raw: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
     };
     run(): Promise<void>;
 }

package/dist/commands/integrations/tools/list.d.ts

@@ -11,6 +11,7 @@ export default class IntegrationsToolsList extends BaseCommand {
         token: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         workspace: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         profile: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        raw: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
     };
     run(): Promise<void>;
 }

package/dist/commands/login.js

@@ -13,6 +13,8 @@ const login_1 = require("../lib/login");
 const device_code_1 = require("../lib/device-code");
 const api_fetch_1 = require("../lib/api-fetch");
 const auth_storage_1 = require("../lib/auth-storage");
+const credential_resolver_1 = require("../lib/credential-resolver");
+const node_adapter_1 = require("../lib/node-adapter");
 const prompt_1 = require("../lib/prompt");
 /**
  * `skrr login`
@@ -218,6 +220,16 @@ class Login extends base_command_1.BaseCommand {
                 });
                 // Only now is the new pointer earned.
                 undoBaseURL = null;
+                // Adopt the credential this login just stored. `BaseCommand.init()`
+                // resolved this process's credential BEFORE the login ran — the old,
+                // possibly revoked session, or nothing at all — and the adapter keeps
+                // that override until told otherwise. The hand-off below is the first
+                // authenticated call after login, so it went out under the stale
+                // credential: `POST /api/daemons/daemon-handoff` answered 401, the
+                // adapter fell back to brokering through a daemon that had no
+                // credential yet, and the freshly installed daemon was left signed out.
+                this.resolvedCredential = await (0, credential_resolver_1.resolveCredential)({ bareMode: this.bareMode });
+                (0, node_adapter_1.setAdapterCredentialOverride)(this.resolvedCredential);
                 this.log('');
                 this.log(`Signed in via ${result.flow} on ${(0, config_1.describeDeployment)(this.cliConfig.baseURL)}. ` +
                     `Run \`${this.config.bin} whoami\` to confirm your identity.`);

package/dist/commands/machines/dedicated/logs.d.ts

@@ -0,0 +1,19 @@
+import { DedicatedLeaseCommand } from '../../../lib/dedicated-lease-command';
+import { type ComputerDaemonLogResult } from '../../../lib/machine-daemon-log';
+/** One line as it prints: UTC time (the daemon's clock), level, then the daemon's own text. */
+export declare function formatDaemonLogLine(line: ComputerDaemonLogResult['lines'][number]): string;
+export default class DedicatedMachinesLogs extends DedicatedLeaseCommand {
+    static summary: string;
+    static description: string;
+    static examples: string[];
+    static args: {
+        lease: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static flags: {
+        lines: import("@oclif/core/lib/interfaces").OptionFlag<number, import("@oclif/core/lib/interfaces").CustomOptions>;
+        since: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        level: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        json: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+    };
+    run(): Promise<void>;
+}

package/dist/commands/machines/dedicated/logs.js

@@ -0,0 +1,103 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.formatDaemonLogLine = formatDaemonLogLine;
+const core_1 = require("@oclif/core");
+const dedicated_lease_command_1 = require("../../../lib/dedicated-lease-command");
+const machine_daemon_log_1 = require("../../../lib/machine-daemon-log");
+/** One line as it prints: UTC time (the daemon's clock), level, then the daemon's own text. */
+function formatDaemonLogLine(line) {
+    const at = new Date(line.at).toISOString().replace('T', ' ').replace('Z', '');
+    return `${at} ${line.level.toUpperCase().padEnd(5)} ${line.text}`;
+}
+class DedicatedMachinesLogs extends dedicated_lease_command_1.DedicatedLeaseCommand {
+    static summary = "Read the tail of a Dedicated Runtime machine's daemon log";
+    static description = "Shows the last lines the machine's daemon logged about itself — why it reconnected, " +
+        're-registered or failed to sign in — so you can debug it without reading syslog, which ' +
+        "the machine's workload user cannot. The daemon keeps a short, recent log in memory and " +
+        "redacts credentials before keeping a line; it is not the machine's system log and it does " +
+        'not survive a daemon restart (the start time is printed). A machine whose image predates ' +
+        'this says so: update it with `machines dedicated update-image`. Anyone the machine is ' +
+        'shared with at the watch tier or above can read it; each read is on the audit record.';
+    static examples = [
+        '<%= config.bin %> machines dedicated logs <lease-id>',
+        '<%= config.bin %> machines dedicated logs <lease-id> --since 30m --level warn',
+        '<%= config.bin %> machines dedicated logs <lease-id> --lines 300 --json',
+    ];
+    static args = {
+        lease: core_1.Args.string({
+            ignoreStdin: true,
+            description: dedicated_lease_command_1.DEDICATED_LEASE_ARG_DESCRIPTION,
+            required: true,
+        }),
+    };
+    static flags = {
+        lines: core_1.Flags.integer({
+            description: `The newest N lines (1-${machine_daemon_log_1.COMPUTER_DAEMON_LOG_LIMITS.maxLines})`,
+            default: machine_daemon_log_1.COMPUTER_DAEMON_LOG_LIMITS.defaultLines,
+            min: 1,
+            max: machine_daemon_log_1.COMPUTER_DAEMON_LOG_LIMITS.maxLines,
+        }),
+        since: core_1.Flags.string({
+            description: 'Only lines from this long ago: 90s, 30m, 2h, 1d (at most 24h)',
+        }),
+        level: core_1.Flags.string({
+            description: 'Only this level and above',
+            options: [...machine_daemon_log_1.COMPUTER_DAEMON_LOG_LEVELS],
+        }),
+        json: core_1.Flags.boolean({ description: 'Output as JSON' }),
+    };
+    async run() {
+        this.requireAuth();
+        const { args, flags } = await this.parse(DedicatedMachinesLogs);
+        const leaseId = await this.resolveLeaseArg(args.lease);
+        let sinceMs;
+        try {
+            sinceMs = flags.since ? (0, machine_daemon_log_1.parseDaemonLogSince)(flags.since) : undefined;
+        }
+        catch (err) {
+            this.error(err instanceof Error ? err.message : String(err), { exit: 2 });
+        }
+        let result;
+        try {
+            result = await (0, machine_daemon_log_1.getMachineDaemonLog)(`lease:${leaseId}`, {
+                lines: flags.lines,
+                ...(sinceMs !== undefined ? { sinceMs } : {}),
+                ...(flags.level
+                    ? { level: flags.level }
+                    : {}),
+            });
+        }
+        catch (err) {
+            const failure = (0, machine_daemon_log_1.describeDaemonLogFailure)(err, { bin: this.config.bin, leaseId });
+            if (failure)
+                this.failWithCliError({ ...failure, exit: 1 });
+            return this.callDedicated(async () => {
+                throw err;
+            });
+        }
+        if (flags.json) {
+            this.log(JSON.stringify(result, null, 2));
+            return;
+        }
+        if (result.lines.length === 0) {
+            // Empty is "nothing matched in what the daemon still holds", never "the
+            // daemon logged nothing": the log is a short in-memory window.
+            this.log(flags.since || flags.level
+                ? 'No log lines match those filters in what the daemon still holds.'
+                : 'The daemon has logged nothing since it started (or since its log was last cleared by a restart).');
+        }
+        for (const line of result.lines)
+            this.log(formatDaemonLogLine(line));
+        const started = new Date(result.startedAt).toISOString();
+        const notes = [`daemon started ${started}`];
+        if (result.truncated)
+            notes.push('more matched than this shows: raise --lines or narrow --since');
+        if (result.ringFull)
+            notes.push("older lines have rolled off the daemon's short log");
+        if (result.redactedLines > 0) {
+            notes.push(`${result.redactedLines} line(s) in the log had credential-shaped text masked`);
+        }
+        this.log(`-- ${notes.join('; ')}`);
+    }
+}
+exports.default = DedicatedMachinesLogs;

package/dist/commands/machines/dedicated/power/set.js

@@ -80,7 +80,7 @@ class DedicatedMachinesPowerSet extends dedicated_lease_command_1.DedicatedLease
                 this.log(JSON.stringify({ ok: false, ...refusal }, null, 2));
             }
             else {
-                this.log(`on_demand is not available for ${leaseId}: ${refusal.reason}`);
+                this.log(`On demand is not available for ${leaseId}: ${refusal.reason}`);
                 this.log(`  ${refusal.detail}`);
                 this.log(`  Fix: ${refusal.fix}`);
                 this.log('  The power policy was not changed.');