@skrr-ai/cli 0.1.93 → 0.1.95

package/dist/commands/agents/roles/install.js

@@ -0,0 +1,48 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const core_1 = require("@oclif/core");
+const base_command_1 = require("../../../base-command");
+const roles_1 = require("../../../lib/roles");
+class RolesInstall extends base_command_1.BaseCommand {
+    static description = 'Install or reconcile a reviewed role preview as inactive existing objects; never attach credentials or activate work';
+    static args = {
+        id: core_1.Args.string({ required: true, description: 'Agent ID', ignoreStdin: true }),
+    };
+    static flags = {
+        preview: core_1.Flags.string({
+            required: true,
+            description: 'Server-generated preview JSON saved by agents roles preview',
+        }),
+        json: core_1.Flags.boolean({ description: 'Output the installation receipt as JSON' }),
+    };
+    async run() {
+        this.requireAuth();
+        const { args, flags } = await this.parse(RolesInstall);
+        try {
+            const preview = (0, roles_1.readRoleJson)(flags.preview);
+            (0, roles_1.assertRolePreview)(preview);
+            const receipt = await roles_1.roleApi.install(args.id, preview);
+            if (flags.json)
+                this.log(JSON.stringify(receipt, null, 2));
+            else {
+                this.log(receipt.complete ? 'Role installed inactive.' : 'Role installation partially saved.');
+                for (const item of receipt.results)
+                    this.log(`  ${item.key || item.id || 'receipt'}: ${item.status}${item.code ? ` (${item.code})` : ''}`);
+                this.log('Review and activate the Compass, attach required skills and evidence sources, then activate responsibilities through commitments resume.');
+                this.log(`Inspect the joined state: agents operating-plan ${args.id}`);
+            }
+            if (!receipt.complete)
+                this.failWithCliError({
+                    code: 'ROLE_INSTALL_INCOMPLETE',
+                    message: 'Some role objects were saved but installation is incomplete. Refresh the preview and reconcile the same revision.',
+                    retryable: true,
+                    exit: 1,
+                    details: receipt,
+                });
+        }
+        catch (error) {
+            this.handleApiError(error);
+        }
+    }
+}
+exports.default = RolesInstall;

package/dist/commands/agents/roles/list.d.ts

@@ -0,0 +1,11 @@
+import { BaseCommand } from '../../../base-command';
+export default class RolesList extends BaseCommand {
+    static description: string;
+    static args: {
+        id: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static flags: {
+        json: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+    };
+    run(): Promise<void>;
+}

package/dist/commands/agents/roles/list.js

@@ -0,0 +1,36 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const core_1 = require("@oclif/core");
+const base_command_1 = require("../../../base-command");
+const roles_1 = require("../../../lib/roles");
+class RolesList extends base_command_1.BaseCommand {
+    static description = 'List installed role specifications and their Compass lifecycle';
+    static args = {
+        id: core_1.Args.string({ required: true, description: 'Agent ID', ignoreStdin: true }),
+    };
+    static flags = { json: core_1.Flags.boolean({ description: 'Output as JSON' }) };
+    async run() {
+        this.requireAuth();
+        const { args, flags } = await this.parse(RolesList);
+        try {
+            const result = await roles_1.roleApi.list(args.id);
+            if (flags.json) {
+                this.log(JSON.stringify(result, null, 2));
+                return;
+            }
+            for (const role of result.roles)
+                this.log(`${role.spec.key}: ${role.spec.title} · revision ${role.spec.revision} · ${role.status} · Compass ${role.compassStatus} v${role.compassVersion}`);
+            if (!result.roles.length)
+                this.log('No roles installed. Use agents roles example to start a portable configuration.');
+            if (result.skillInventory) {
+                this.log(`Attached Skill inventory: ${result.skillInventory.status}`);
+                for (const skill of result.skillInventory.skills)
+                    this.log(`  ${skill.name}: ${skill.id} · ${skill.versions.join(', ')}`);
+            }
+        }
+        catch (error) {
+            this.handleApiError(error);
+        }
+    }
+}
+exports.default = RolesList;

package/dist/commands/agents/roles/preview.d.ts

@@ -0,0 +1,14 @@
+import { BaseCommand } from '../../../base-command';
+export default class RolesPreview extends BaseCommand {
+    static description: string;
+    static args: {
+        id: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static flags: {
+        file: import("@oclif/core/lib/interfaces").OptionFlag<string, import("@oclif/core/lib/interfaces").CustomOptions>;
+        bindings: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        output: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        json: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+    };
+    run(): Promise<void>;
+}

package/dist/commands/agents/roles/preview.js

@@ -0,0 +1,49 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const core_1 = require("@oclif/core");
+const node_fs_1 = require("node:fs");
+const base_command_1 = require("../../../base-command");
+const roles_1 = require("../../../lib/roles");
+class RolesPreview extends base_command_1.BaseCommand {
+    static description = 'Validate a portable role spec and preview its Compass, responsibilities, scope, budgets and requirements';
+    static args = {
+        id: core_1.Args.string({ required: true, description: 'Agent ID', ignoreStdin: true }),
+    };
+    static flags = {
+        file: core_1.Flags.string({ required: true, description: 'Role operating spec JSON file' }),
+        bindings: core_1.Flags.string({ description: 'JSON context slot → accessible target ID map' }),
+        output: core_1.Flags.string({ description: 'Save the server preview for review and installation' }),
+        json: core_1.Flags.boolean({ description: 'Output the complete preview as JSON' }),
+    };
+    async run() {
+        this.requireAuth();
+        const { args, flags } = await this.parse(RolesPreview);
+        try {
+            const result = await roles_1.roleApi.preview(args.id, (0, roles_1.readRoleJson)(flags.file), flags.bindings ? (0, roles_1.readRoleJson)(flags.bindings) : {});
+            if (flags.output)
+                (0, node_fs_1.writeFileSync)(flags.output, `${JSON.stringify(result, null, 2)}\n`, { mode: 0o600 });
+            if (flags.json) {
+                this.log(JSON.stringify(result, null, 2));
+                return;
+            }
+            this.log(`${result.spec.title} — revision ${result.spec.revision}`);
+            this.log(`Compass ${result.compass.id}: archived; expected version ${result.expectedCompassVersion}`);
+            for (const change of result.changes)
+                this.log(`  ${change.title}: ${change.change}`);
+            for (const removed of result.removedResponsibilities)
+                this.log(`  ${removed.key}: pause removed responsibility`);
+            for (const ctx of result.contexts)
+                this.log(`  context ${ctx.label}: ${ctx.status}${ctx.title ? ` (${ctx.title})` : ''}`);
+            for (const requirement of result.pending.skills)
+                this.log(`  skill requirement: ${requirement.id}@${requirement.version}`);
+            for (const warning of result.warnings)
+                this.log(warning);
+            if (flags.output)
+                this.log(`Reviewed preview saved to ${flags.output}. Install with agents roles install ${args.id} --preview ${flags.output}.`);
+        }
+        catch (error) {
+            this.handleApiError(error);
+        }
+    }
+}
+exports.default = RolesPreview;

package/dist/commands/agents/roles/withdraw.d.ts

@@ -0,0 +1,13 @@
+import { BaseCommand } from '../../../base-command';
+export default class RolesWithdraw extends BaseCommand {
+    static description: string;
+    static args: {
+        id: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;
+        key: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static flags: {
+        'expected-version': import("@oclif/core/lib/interfaces").OptionFlag<number, import("@oclif/core/lib/interfaces").CustomOptions>;
+        json: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+    };
+    run(): Promise<void>;
+}

package/dist/commands/agents/roles/withdraw.js

@@ -0,0 +1,43 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const core_1 = require("@oclif/core");
+const base_command_1 = require("../../../base-command");
+const roles_1 = require("../../../lib/roles");
+class RolesWithdraw extends base_command_1.BaseCommand {
+    static description = 'Pause installed responsibilities and archive their Compass, preserving work and history';
+    static args = {
+        id: core_1.Args.string({ required: true, description: 'Agent ID', ignoreStdin: true }),
+        key: core_1.Args.string({ required: true, description: 'Role key', ignoreStdin: true }),
+    };
+    static flags = {
+        'expected-version': core_1.Flags.integer({
+            required: true,
+            description: 'Compass version from agents roles list',
+        }),
+        json: core_1.Flags.boolean({ description: 'Output as JSON' }),
+    };
+    async run() {
+        this.requireAuth();
+        const { args, flags } = await this.parse(RolesWithdraw);
+        try {
+            const receipt = await roles_1.roleApi.withdraw(args.id, args.key, flags['expected-version']);
+            this.log(flags.json
+                ? JSON.stringify(receipt, null, 2)
+                : receipt.complete
+                    ? 'Role paused; Compass archived. Existing work and memory retained.'
+                    : 'Role partially paused. Refresh and retry to reconcile remaining responsibilities.');
+            if (!receipt.complete)
+                this.failWithCliError({
+                    code: 'ROLE_WITHDRAW_INCOMPLETE',
+                    message: 'Withdrawal is incomplete; inspect and retry.',
+                    retryable: true,
+                    exit: 1,
+                    details: receipt,
+                });
+        }
+        catch (error) {
+            this.handleApiError(error);
+        }
+    }
+}
+exports.default = RolesWithdraw;

package/dist/commands/code/doctor.d.ts

@@ -16,6 +16,7 @@ export default class CodeDoctor extends Command {
     static examples: string[];
     static flags: {
         json: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+        check: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
     };
     run(): Promise<void>;
 }

package/dist/commands/code/doctor.js

@@ -3,6 +3,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 const core_1 = require("@oclif/core");
 const auth_core_1 = require("@skrr-ai/auth-core");
 const first_party_harness_doctor_1 = require("../../lib/first-party-harness-doctor");
+const first_party_harness_update_1 = require("../../lib/first-party-harness-update");
 /**
  * `skrr code doctor` — diagnose the local first-party harness installation.
  *
@@ -23,9 +24,14 @@ class CodeDoctor extends core_1.Command {
     ];
     static flags = {
         json: core_1.Flags.boolean({ description: 'Emit the report as JSON' }),
+        check: core_1.Flags.boolean({
+            description: 'Also check the signed release channel (the default diagnosis is offline)',
+        }),
     };
     async run() {
         const { flags } = await this.parse(CodeDoctor);
+        if (flags.check)
+            await (0, first_party_harness_update_1.checkLocalCodeUpdate)({ force: true });
         const report = (0, first_party_harness_doctor_1.runDoctor)();
         if (flags.json) {
             this.logJson(report);

package/dist/commands/code/index.js

@@ -5,6 +5,7 @@ const core_1 = require("@oclif/core");
 const auth_core_1 = require("@skrr-ai/auth-core");
 const first_party_harness_1 = require("../../lib/first-party-harness");
 const first_party_harness_broker_1 = require("../../lib/first-party-harness-broker");
+const first_party_harness_startup_update_1 = require("../../lib/first-party-harness-startup-update");
 const first_party_harness_managed_1 = require("../../lib/first-party-harness-managed");
 const first_party_harness_project_trust_1 = require("../../lib/first-party-harness-project-trust");
 /**
@@ -93,6 +94,9 @@ async function forwardToEngine(cmd, subcommand, passthrough, options = {}) {
     // output on stdout, and one friendly sentence in the middle of it is a parse
     // error at the other end.
     const say = (line) => cmd.logToStderr(line);
+    if (subcommand === null && options.projectPolicy === 'tui') {
+        await (0, first_party_harness_startup_update_1.maybeOfferCodeUpdate)({ argv: engineArgv, say });
+    }
     if (agentRef && !options.managed) {
         say(`${first_party_harness_managed_1.SKRR_AGENT_FLAG} has no effect here — this command does not host a managed ` +
             'session. It was removed from the arguments passed to the engine.');

package/dist/commands/code/install.d.ts

@@ -1,71 +1,14 @@
-import { BaseCommand } from '../../base-command';
-/**
- * `skrr code install` — install the engine from the terminal.
- *
- * ── Why this command exists ────────────────────────────────────────────────
- *
- * `skrr code`'s not-installed message offered exactly two routes and neither
- * worked without a browser: "In the web app: the runtime menu … → Install", or
- * point the engine-path override at a build you already have — which is the thing
- * you are trying to obtain, and the route that gives up provenance. So the
- * ordinary case for a coding harness (a dev box over SSH, a CI runner, a cloud
- * VM) had no way in (dogfood OSK-276).
- *
- * Nothing underneath was missing. The daemon has performed the verified install
- * since 2026-08-08, and `POST /api/daemons/:id/cli-installers/:provider/install`
- * has fronted it since June. The install was API-exposed and CLI-unreachable —
- * the shape the root `CLAUDE.md` names under CLI ↔ API parity: "an endpoint the
- * API exposes must be reachable from `skrr`."
- *
- * So this adds a SURFACE and no mechanism. Same route the web app posts, same
- * daemon job, same signature verification. A second install path would be a
- * second thing to keep in step with the first, and the first is the one that
- * verifies the signed manifest.
- */
-export default class CodeInstall extends BaseCommand {
+import { Command } from '@oclif/core';
+/** Install through the shared signed pipeline without a cloud login or local daemon. */
+export default class CodeInstall extends Command {
     static description: string;
     static examples: string[];
     static flags: {
         daemon: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         wait: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
         json: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+        'target-version': import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        'allow-downgrade': import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
     };
     run(): Promise<void>;
-    /** Which daemon the install targets, by the rule every daemon-picking command shares. */
-    private resolveTarget;
-    /**
-     * The daemon id to install through, or the refusal.
-     *
-     * Refuses rather than guessing when several are active. Picking one would mean
-     * installing a hundred megabytes onto a machine the user was not thinking
-     * about. The candidates are CONNECTED daemons by the id the installer routes
-     * take (`listConnectedDaemons`), so the error names values that work — the
-     * Daemon resource list `skrr list-daemons` prints is a different id space
-     * (OSK-9993).
-     *
-     * A Dedicated Runtime's own machine is refused here, before any request. The
-     * daemon and the API refuse it too; saying so locally is what keeps the answer
-     * the same whether or not this machine's daemon is reachable, and whether or
-     * not it has published its id. Another of the owner's machines, named with
-     * `--daemon`, is not this machine and goes to the API like anywhere else.
-     */
-    private installTarget;
-    /**
-     * What the daemon says about this provider, when it started no job.
-     *
-     * Read from the SAME list route the web app uses, so the CLI reports the
-     * daemon's own words rather than inventing an explanation for silence. Best
-     * effort: a failure here means falling back to the honest "does not say why",
-     * never to a guess.
-     */
-    private installerNote;
-    /**
-     * Poll the job until it settles, printing each new log line.
-     *
-     * The daemon already writes a progress log — "Fetching the signed release
-     * manifest", "Verified and installed …" — and it is the only account
-     * of a hundred-megabyte download the user is waiting on. Printing only the
-     * lines not yet seen keeps a poll loop from repeating the whole log.
-     */
-    private followJob;
 }