@skrr-ai/cli 0.1.94 → 0.1.96

package/dist/commands/code/update.js

@@ -1,242 +1,163 @@
 "use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
 Object.defineProperty(exports, "__esModule", { value: true });
 const core_1 = require("@oclif/core");
 const auth_core_1 = require("@skrr-ai/auth-core");
-const base_command_1 = require("../../base-command");
-const cli_installers_1 = require("../../lib/cli-installers");
-const daemon_target_1 = require("../../lib/daemon-target");
-const first_party_harness_1 = require("../../lib/first-party-harness");
-/**
- * `skrr code update` — pull the engine's signed release down through the daemon.
- *
- * ── Why this command exists ────────────────────────────────────────────────
- *
- * The update verb has been API-exposed and daemon-implemented since OSK-10096 —
- * `POST /api/daemons/:id/cli-installers/:provider/update` re-fetches the signed
- * manifest and installs whatever the channel points at. But the only CLI that
- * reached it was `skrr harnesses install <provider> --update`: a flag on a
- * command a `code` user has no reason to read. On stable that left no
- * discoverable path at all — `code install` answered "Already installed." with
- * no next step, and the channel moving past the installed build was invisible
- * from the surface that owns the engine (OSK-10650).
- *
- * So this adds a SURFACE and no mechanism. Same route `harnesses install
- * --update` posts, same inventory pre-check, same 504 recovery — one update
- * path, spelled where the engine's users look.
- */
-class CodeUpdate extends base_command_1.BaseCommand {
-    static description = `Update the ${auth_core_1.FIRST_PARTY_HARNESS.displayName} engine on this machine, through the daemon`;
+const first_party_harness_update_1 = require("../../lib/first-party-harness-update");
+const first_party_harness_startup_update_1 = require("../../lib/first-party-harness-startup-update");
+/** The default target is this computer; an explicit daemon keeps the remote API path. */
+class CodeUpdate extends core_1.Command {
+    static description = `Check or update the local ${auth_core_1.FIRST_PARTY_HARNESS.displayName} signed release; use --daemon to update another machine`;
     static examples = [
         '<%= config.bin %> code update',
+        '<%= config.bin %> code update --check',
         '<%= config.bin %> code update --daemon <daemon-id>',
-        '<%= config.bin %> code update --json',
+        '<%= config.bin %> code update --rollback',
     ];
     static flags = {
-        daemon: core_1.Flags.string({
-            description: 'Which daemon runs the update. Defaults to this machine on a Dedicated Runtime, otherwise to the only active one; required when you have several.',
-        }),
+        daemon: core_1.Flags.string({ description: 'Run the update on this daemon instead of this computer' }),
         wait: core_1.Flags.boolean({
             default: true,
             allowNo: true,
-            description: 'Follow the update job until it finishes. --no-wait returns the job id.',
+            description: 'Wait for completion. --no-wait returns the local process or remote job.',
         }),
         json: core_1.Flags.boolean({ description: 'Emit the result as JSON' }),
+        check: core_1.Flags.boolean({
+            description: 'Check the signed release channel without downloading or changing the engine',
+        }),
+        'target-version': core_1.Flags.string({ description: 'Install this exact signed release' }),
+        'allow-downgrade': core_1.Flags.boolean({
+            description: 'Allow an explicitly pinned older signed release',
+        }),
+        rollback: core_1.Flags.boolean({ description: 'Restore the previous verified release' }),
+        'startup-checks': core_1.Flags.string({
+            options: ['on', 'off'],
+            description: 'Enable or disable new-session update checks without updating the engine',
+        }),
     };
     async run() {
-        const { flags } = await this.parse(CodeUpdate);
-        const daemonId = this.updateTarget(await this.resolveTarget(flags.daemon));
-        // Ask the inventory before posting: a daemon older than managed updates has
-        // no handler for the request and would leave it to time out, and an engine
-        // that updates some other way has a reason the daemon already words.
-        let inventory;
-        try {
-            inventory = await (0, cli_installers_1.listCliInstallers)(daemonId, this.resolvedCredential);
-        }
-        catch (err) {
-            this.handleApiError(err);
-        }
-        const row = (inventory.providers ?? []).find((p) => (0, auth_core_1.isFirstPartyHarnessProvider)(p.provider));
-        if (!row) {
-            this.failWithCliError({
-                message: `${auth_core_1.FIRST_PARTY_HARNESS.displayName} is not installed on ${daemonId}. ` +
-                    `Install it with \`${this.config.bin} code install\`.`,
-                code: 'NOT_INSTALLED',
-                exit: 1,
-                retryable: false,
-            });
-        }
-        if (row.updatable === undefined) {
-            this.failWithCliError({
-                message: `The daemon ${daemonId} (${inventory.daemonVersion ?? 'version not reported'}) cannot update ${auth_core_1.FIRST_PARTY_HARNESS.displayName}: it predates managed updates. ` +
-                    `Update the daemon, then run this again.`,
-                code: 'DAEMON_UPDATE_UNSUPPORTED',
-                exit: 1,
-                retryable: false,
-            });
-        }
-        if (!row.updatable) {
-            this.failWithCliError({
-                message: row.updateDisabledReason?.trim() ||
-                    `${auth_core_1.FIRST_PARTY_HARNESS.displayName}: the daemon cannot update it here.`,
-                code: 'CLI_NOT_UPDATABLE',
-                exit: 1,
-                retryable: false,
-            });
+        // Preserve all authenticated remote flags (--profile, --workspace, --token)
+        // without importing or initializing the auth stack for a local operation.
+        if (this.argv.some((arg) => arg === '--daemon' || arg.startsWith('--daemon='))) {
+            const { default: RemoteCodeUpdate } = await Promise.resolve().then(() => __importStar(require('../../lib/first-party-harness-remote-update')));
+            await this.parse(RemoteCodeUpdate);
+            await RemoteCodeUpdate.run(this.argv, this.config);
+            return;
         }
-        const start = await this.start(daemonId, flags.json === true);
-        if (!start)
+        const { flags } = await this.parse(CodeUpdate);
+        if (flags['startup-checks']) {
+            if (flags.daemon ||
+                flags.check ||
+                flags.rollback ||
+                flags['target-version'] ||
+                flags['allow-downgrade'] ||
+                !flags.wait)
+                this.error('--startup-checks changes only the local preference; use it without other update controls.');
+            const setting = (0, first_party_harness_startup_update_1.configureCodeStartupChecks)(flags['startup-checks'] === 'on');
+            if (flags.json)
+                this.log(JSON.stringify({
+                    component: 'code',
+                    state: 'configured',
+                    startupChecks: setting.enabled,
+                    preferencesPath: setting.preferencesPath,
+                }, null, 2));
+            else
+                this.log(`${auth_core_1.FIRST_PARTY_HARNESS.displayName} startup update checks ${setting.enabled ? 'enabled' : 'disabled'}. Change this with \`skrr code update --startup-checks ${setting.enabled ? 'off' : 'on'}\`.`);
             return;
-        const jobId = start.job?.id;
-        if (!start.started || !jobId) {
-            if (flags.json) {
-                this.log(JSON.stringify({ daemonId, ...start }, null, 2));
+        }
+        if (flags.rollback &&
+            (flags.check || flags['target-version'] || flags['allow-downgrade'] || !flags.wait))
+            this.error('--rollback cannot be combined with --check, --target-version, --allow-downgrade or --no-wait.');
+        if (flags['allow-downgrade'] && !flags['target-version'])
+            this.error('--allow-downgrade requires --target-version.');
+        const options = {
+            version: flags['target-version'],
+            allowDowngrade: flags['allow-downgrade'],
+            force: true,
+        };
+        try {
+            const current = (0, first_party_harness_update_1.getLocalCodeUpdateStatus)();
+            if (!flags.check && !flags.rollback && !current.activePath && current.owner === 'managed') {
+                const missing = {
+                    ...current,
+                    state: 'failed',
+                    code: 'NOT_INSTALLED',
+                    message: `${auth_core_1.FIRST_PARTY_HARNESS.displayName} is not installed on this computer. Run \`skrr code install\`.`,
+                };
+                if (flags.json)
+                    this.log(JSON.stringify(missing, null, 2));
+                else
+                    this.log((0, first_party_harness_update_1.formatLocalCodeUpdate)(missing));
+                process.exitCode = 1;
                 return;
             }
-            this.log(start.alreadyRunning
-                ? `${auth_core_1.FIRST_PARTY_HARNESS.displayName}: an install or update is already running (job ${start.job?.id ?? 'unknown'}).`
-                : `${auth_core_1.FIRST_PARTY_HARNESS.displayName}: ${start.provider?.updateDisabledReason?.trim() || 'the daemon started no update job.'}`);
-            return;
-        }
-        if (!flags.wait) {
-            if (flags.json) {
-                this.log(JSON.stringify({ daemonId, ...start }, null, 2));
+            if (!flags.check && !flags.rollback && !flags.wait) {
+                const queued = await (0, first_party_harness_update_1.startLocalCodeUpdate)(options);
+                if (flags.json)
+                    this.log(JSON.stringify(queued, null, 2));
+                else
+                    this.log(`${auth_core_1.FIRST_PARTY_HARNESS.displayName} update queued (process ${queued.pid}). Results: ${queued.logPath}; status: skrr code doctor.`);
                 return;
             }
-            this.log(`Update started on ${daemonId} — job ${jobId}.`);
-            return;
-        }
-        if (!flags.json) {
-            this.logToStderr(`Updating ${auth_core_1.FIRST_PARTY_HARNESS.displayName} ${row.version ? `${row.version} ` : ''}on ${daemonId}…`);
-        }
-        const job = await this.follow(daemonId, jobId, flags.json === true);
-        if (!job)
-            return;
-        if (flags.json) {
-            this.log(JSON.stringify({ daemonId, job }, null, 2));
-            if (job.status !== 'succeeded')
+            const result = flags.check
+                ? await (0, first_party_harness_update_1.checkLocalCodeUpdate)(options)
+                : flags.rollback
+                    ? (0, first_party_harness_update_1.rollbackLocalCode)()
+                    : await (0, first_party_harness_update_1.updateLocalCode)({
+                        ...options,
+                        onProgress: flags.json ? undefined : (line) => this.logToStderr(line),
+                    });
+            if (flags.json)
+                this.log(JSON.stringify(result, null, 2));
+            else
+                this.log((0, first_party_harness_update_1.formatLocalCodeUpdate)(result));
+            if (result.state === 'failed' || result.state === 'check-failed')
                 process.exitCode = 1;
-            return;
-        }
-        if (job.status === 'failed') {
-            this.failWithCliError({
-                message: job.error || 'The update failed and the daemon gave no reason.',
-                code: 'UPDATE_FAILED',
-                exit: 1,
-                retryable: false,
-            });
         }
-        this.log((0, cli_installers_1.updateOutcomeLine)(job) ??
-            `${auth_core_1.FIRST_PARTY_HARNESS.displayName} updated${job.installedVersion ? ` to ${job.installedVersion}` : ''}.`);
-    }
-    /** Which daemon the update targets, by the rule every daemon-picking command shares. */
-    async resolveTarget(explicit) {
-        try {
-            return await (0, daemon_target_1.resolveDaemonTarget)({
-                explicit,
-                local: (0, daemon_target_1.localMachine)({ baseURL: this.cliConfig?.baseURL }),
-                listActiveDaemons: () => (0, daemon_target_1.listConnectedDaemons)(this.resolvedCredential),
-            });
-        }
-        catch (err) {
-            this.handleApiError(err);
-        }
-    }
-    /**
-     * The daemon id to update through, or the refusal — identical rules to
-     * `code install`: a Dedicated Runtime's own machine is image-managed, several
-     * connected daemons get named rather than guessed.
-     */
-    updateTarget(target) {
-        if (target.kind === 'daemon')
-            return target.daemonId;
-        if (target.kind === 'this-machine') {
-            this.failWithCliError({
-                message: target.explicit
-                    ? first_party_harness_1.DEDICATED_RUNTIME_ENGINE_MESSAGE
-                    : `${first_party_harness_1.DEDICATED_RUNTIME_ENGINE_MESSAGE} This command updates the machine it runs on; ` +
-                        'to update another of your machines, name it with --daemon.',
-                code: 'DEDICATED_RUNTIME_ENGINE_SHIPS_WITH_IMAGE',
-                exit: 1,
-                retryable: false,
-            });
-        }
-        if (target.kind === 'none') {
-            this.failWithCliError({
-                message: 'No daemon is connected for this account, so nothing can perform the update. ' +
-                    `Start the background service on this computer with \`${this.config.bin} daemon start\`, then run this again.`,
-                code: 'NO_DAEMON',
-                exit: 1,
-                retryable: false,
-            });
-        }
-        const { daemons } = target;
-        const choices = daemons
-            .slice(0, 10)
-            .map((d) => `  ${d.id}  ${d.name || '—'}`)
-            .join('\n');
-        this.failWithCliError({
-            message: `${daemons.length} connected daemons — say which machine should update the engine:\n${choices}\n` +
-                `Pass one with --daemon, or see each daemon id in the DAEMON ID column of \`${this.config.bin} harnesses list\`.`,
-            code: 'AMBIGUOUS_DAEMON',
-            exit: 1,
-            retryable: false,
-        });
-    }
-    /**
-     * Start the update, and survive a gateway that cut the request off — the same
-     * 504 recovery `harnesses install --update` uses: the relay can drop the
-     * answer while the daemon runs the job it started, so on a server-side
-     * failure we ask the daemon and follow the job it reports.
-     */
-    async start(daemonId, json) {
-        try {
-            return await (0, cli_installers_1.startManagedCliUpdate)(daemonId, PROVIDER, this.resolvedCredential);
-        }
-        catch (err) {
-            const status = err.status ?? 0;
-            if (status >= 500 || status === 408) {
-                const job = await (0, cli_installers_1.jobStartedDespiteTimeout)(daemonId, PROVIDER, this.resolvedCredential);
-                if (job?.id) {
-                    if (!json) {
-                        this.logToStderr(`The request to ${daemonId} did not come back (HTTP ${status}), but the daemon started job ${job.id}. Following it.`);
-                    }
-                    return { started: true, job };
-                }
+        catch (error) {
+            if (flags.json) {
+                this.log(JSON.stringify({
+                    component: 'code',
+                    state: 'failed',
+                    error: error instanceof Error ? error.message : String(error),
+                }));
+                process.exitCode = 1;
             }
-            this.handleApiError(err);
-            return undefined;
-        }
-    }
-    /** Follow a job to its end, or report why it could not be followed (and return nothing). */
-    async follow(daemonId, jobId, json) {
-        const outcome = await (0, cli_installers_1.followManagedCliInstallJob)({
-            daemonId,
-            jobId,
-            credential: this.resolvedCredential,
-            onLogLine: json ? undefined : (line) => this.logToStderr(`  ${line}`),
-        });
-        if (outcome.kind === 'missing') {
-            this.failWithCliError({
-                message: `The daemon no longer has update job ${jobId}.`,
-                code: 'JOB_MISSING',
-                exit: 1,
-                retryable: false,
-            });
-            return undefined;
-        }
-        if (outcome.kind === 'timeout') {
-            this.failWithCliError({
-                message: `Still updating after ${Math.round(cli_installers_1.INSTALL_MAX_WAIT_MS / 60000)} minutes — the daemon is ` +
-                    `still working on job ${jobId}. Check \`${this.config.bin} code doctor\` in a while.`,
-                code: 'UPDATE_PENDING',
-                exit: 1,
-                retryable: true,
-            });
-            return undefined;
+            else
+                this.error(error instanceof Error ? error : String(error));
         }
-        return outcome.job;
     }
 }
 exports.default = CodeUpdate;
-/** Same canonical provider id `code install` posts — read from the identity module. */
-const PROVIDER = auth_core_1.FIRST_PARTY_HARNESS.provider;

package/dist/commands/commitments/action-proposals/decide.d.ts

@@ -8,6 +8,8 @@ export default class CommitmentsActionProposalsDecide extends BaseCommand {
     static flags: {
         json: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
         decision: import("@oclif/core/lib/interfaces").OptionFlag<string, import("@oclif/core/lib/interfaces").CustomOptions>;
+        reason: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        'reason-code': import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
     };
     run(): Promise<void>;
 }

package/dist/commands/commitments/action-proposals/decide.js

@@ -1,6 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 const core_1 = require("@oclif/core");
+const data_provider_1 = require("@skrr-ai/data-provider");
 const base_command_1 = require("../../../base-command");
 const commitments_1 = require("../../../lib/commitments");
 class CommitmentsActionProposalsDecide extends base_command_1.BaseCommand {
@@ -16,6 +17,13 @@ class CommitmentsActionProposalsDecide extends base_command_1.BaseCommand {
     static flags = {
         json: core_1.Flags.boolean({ description: 'Output the decision and execution receipts as JSON' }),
         decision: core_1.Flags.string({ options: ['approve', 'reject'], required: true }),
+        reason: core_1.Flags.string({
+            description: 'Why this proposal was kept or discarded (up to 1000 characters)',
+        }),
+        'reason-code': core_1.Flags.string({
+            options: [...data_provider_1.PROPOSAL_DISCARD_REASON_CODES],
+            description: 'Structured discard reason',
+        }),
     };
     async run() {
         this.requireAuth();
@@ -36,6 +44,10 @@ class CommitmentsActionProposalsDecide extends base_command_1.BaseCommand {
             const decided = await commitments_1.commitmentApi.decideActionProposal(args.commitmentId, args.proposalId, decision, {
                 snapshotDigest: proposal.snapshotDigest,
                 bundleVersion: proposal.bundleVersion,
+                ...(flags.reason ? { reason: flags.reason } : {}),
+                ...(flags['reason-code']
+                    ? { reasonCode: flags['reason-code'] }
+                    : {}),
             });
             const execution = decision === 'approve' && decided.status === 'approved'
                 ? await commitments_1.commitmentApi.executeActionProposal(args.commitmentId, args.proposalId)

package/dist/commands/commitments/action-proposals.js

@@ -38,6 +38,13 @@ class CommitmentsActionProposals extends base_command_1.BaseCommand {
             this.log('No prepared Action Bundles.');
             return;
         }
+        this.log('Advisory captured overlaps only; an empty list does not prove resources are safe.');
+        for (const proposal of response.data) {
+            if (proposal.overlapCoverage?.status !== 'available')
+                this.log(`${proposal.id}: overlap evidence incomplete or unavailable.`);
+            for (const peer of proposal.overlaps || [])
+                this.log(`${proposal.id} overlaps ${peer.proposalId} (${peer.agentId}) ${peer.repoFullName}: ${peer.paths.join(', ')}`);
+        }
         (0, format_1.renderTable)(response.data.map((proposal) => ({
             id: proposal.id,
             actions: String(proposal.actionSnapshots?.length || 1),

package/dist/commands/commitments/create.d.ts

@@ -66,6 +66,7 @@ export default class CommitmentsCreate extends BaseCommand {
         'cadence-mode': import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         timezone: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         delivery: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        'task-review-policy': import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         repo: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         base: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         isolation: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;

package/dist/commands/commitments/create.js

@@ -3,6 +3,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.hasEventCapableWatchedSource = hasEventCapableWatchedSource;
 exports.assertEventDrivenWatchedSource = assertEventDrivenWatchedSource;
 exports.createCadenceFromFlags = createCadenceFromFlags;
+const data_provider_1 = require("@skrr-ai/data-provider");
 const core_1 = require("@oclif/core");
 const base_command_1 = require("../../base-command");
 const web_url_1 = require("../../lib/web-url");
@@ -248,6 +249,10 @@ class CommitmentsCreate extends base_command_1.BaseCommand {
             description: 'Requested delivery artifact or destination',
             options: [...commitment_product_1.COMMITMENT_DELIVERY_CHOICES],
         }),
+        'task-review-policy': core_1.Flags.string({
+            options: [...data_provider_1.TASK_REVIEW_POLICIES],
+            description: 'Owner choice for generated Tasks. Required records a blocker; the owner and their Agent can still close.',
+        }),
         repo: core_1.Flags.string({ description: 'Delivery repository, owner/repo' }),
         base: core_1.Flags.string({ description: 'Delivery target branch' }),
         isolation: core_1.Flags.string({
@@ -354,9 +359,20 @@ class CommitmentsCreate extends base_command_1.BaseCommand {
                 : {};
             const policy = { ...existingPolicy };
             if (flags.delivery)
-                payload.delivery = (0, commitment_product_1.deliveryInput)(flags.delivery, flags);
+                payload.delivery = {
+                    ...(record(payload.delivery) || {}),
+                    ...(0, commitment_product_1.deliveryInput)(flags.delivery, flags),
+                };
             else if (flags.repo || flags.base)
                 throw new Error('--repo and --base require --delivery.');
+            if (flags['task-review-policy'] !== undefined)
+                payload.delivery = {
+                    ...(record(payload.delivery) || { version: 1, mode: 'report_only' }),
+                    reviewPolicy: (0, commitment_product_1.normalizeTaskReviewPolicy)(flags['task-review-policy']),
+                };
+            const declaredDelivery = record(payload.delivery);
+            if (declaredDelivery?.reviewPolicy !== undefined)
+                (0, commitment_product_1.normalizeTaskReviewPolicy)(declaredDelivery.reviewPolicy);
             if (flags.isolation)
                 policy.executionIsolation = flags.isolation;
             if (flags['max-nudges'] !== undefined)

package/dist/commands/commitments/delivery.d.ts

@@ -8,6 +8,7 @@ export default class CommitmentsDelivery extends BaseCommand {
     };
     static flags: {
         json: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+        'task-review-policy': import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         repo: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         base: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         reason: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;

package/dist/commands/commitments/delivery.js

@@ -1,5 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+const data_provider_1 = require("@skrr-ai/data-provider");
 const core_1 = require("@oclif/core");
 const base_command_1 = require("../../base-command");
 const commitments_1 = require("../../lib/commitments");
@@ -24,6 +25,10 @@ class CommitmentsDelivery extends base_command_1.BaseCommand {
     };
     static flags = {
         json: core_1.Flags.boolean({ description: 'Output the complete contract as JSON' }),
+        'task-review-policy': core_1.Flags.string({
+            options: [...data_provider_1.TASK_REVIEW_POLICIES],
+            description: 'Owner choice for generated Tasks; omission preserves the current declaration.',
+        }),
         repo: core_1.Flags.string({ description: 'GitHub repository, owner/repo' }),
         base: core_1.Flags.string({ description: 'Delivery target branch, such as main' }),
         reason: core_1.Flags.string({ description: 'Reason recorded with this contract change' }),
@@ -33,7 +38,12 @@ class CommitmentsDelivery extends base_command_1.BaseCommand {
         const { args, flags } = await this.parse(CommitmentsDelivery);
         try {
             const current = (await commitments_1.commitmentApi.get(args.id)).commitment;
-            const requested = (0, commitment_product_1.deliveryInput)(args.mode, flags);
+            const requested = (0, commitment_product_1.deliveryInput)(args.mode, {
+                ...flags,
+                ...(flags['task-review-policy'] !== undefined
+                    ? { taskReviewPolicy: (0, commitment_product_1.normalizeTaskReviewPolicy)(flags['task-review-policy']) }
+                    : {}),
+            });
             const delivery = { ...current.delivery, ...requested };
             const result = await commitments_1.commitmentApi.delivery(args.id, {
                 delivery,

package/dist/commands/commitments/doctor.js

@@ -95,6 +95,10 @@ class CommitmentsDoctor extends base_command_1.BaseCommand {
             operatingState,
             observedAt: new Date().toISOString(),
         };
+        if (!flags.json && operatingState.knowledge) {
+            const knowledge = operatingState.knowledge;
+            this.log(`Space knowledge: ${knowledge.status || 'unavailable'}${knowledge.spaceId ? ` · ${knowledge.spaceId}` : ''}${knowledge.source ? ` (${knowledge.source})` : ''}; prospective scope, not a completed memory mount`);
+        }
         if (flags.json)
             this.log(JSON.stringify(report, null, 2));
         else {

package/dist/commands/commitments/effective-policy.js

@@ -11,6 +11,31 @@ const RUN_LIMIT_BINDING_LABELS = {
     workspace_admin: 'workspace limit',
     owner: 'owner limit',
 };
+/** The admission day is UTC and said so; the shared Northstar pools are named apart. */
+function budgetDayLines(policy) {
+    const day = policy.budgetDay;
+    const shared = policy.portfolio?.sharedBudget;
+    const lines = [];
+    if (day) {
+        lines.push(`Daily budgets reset at ${day.resetsAt ?? '00:00 UTC'}${day.localResetAt ? ` (${day.localResetAt} ${day.localTimeZone})` : ''}`);
+    }
+    if (shared?.status === 'unavailable') {
+        lines.push('Northstar shared run pools: unavailable (could not be read)');
+    }
+    else if (shared?.status === 'available') {
+        // `null` is "no ceiling" only when the server says the state is unset (or
+        // an older server says nothing). A stored value that is not a non-negative
+        // integer is refused at admission as unreadable; saying "no ceiling" for it
+        // would be the reassuring lie.
+        const pool = (value, state) => state === 'malformed'
+            ? 'malformed (enforced as unreadable)'
+            : value == null
+                ? 'no ceiling'
+                : `${value}/day`;
+        lines.push(`Northstar shared pools: action runs ${pool(shared.actionRunsPerDay, shared.actionRunsPerDayState)} · observation runs ${pool(shared.observationRunsPerDay, shared.observationRunsPerDayState)}`);
+    }
+    return lines;
+}
 function effectivePolicyLines(policy) {
     const governance = policy.governance || {};
     const owner = policy.owner || {};
@@ -47,6 +72,7 @@ function effectivePolicyLines(policy) {
     }
     if (policy.observation?.sensing)
         lines.push("Sensing runs: the Agent's own permissions");
+    lines.push(...budgetDayLines(policy));
     return lines;
 }
 /** Show the policy actually governing a Commitment without changing it. */

package/dist/commands/commitments/endpoints/create.js

@@ -1,6 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 const core_1 = require("@oclif/core");
+const data_provider_1 = require("@skrr-ai/data-provider");
 const base_command_1 = require("../../../base-command");
 const commitment_endpoints_1 = require("../../../lib/commitment-endpoints");
 /**
@@ -19,13 +20,14 @@ class CommitmentsEndpointsCreate extends base_command_1.BaseCommand {
     static examples = [
         '<%= config.bin %> commitments endpoints create --agent agent_abc --label "Ops channel" --destination slack_channel --target C123 --capability push --capability reply',
         '<%= config.bin %> commitments endpoints create --agent agent_abc --label "My DM" --destination slack_owner_dm --capability push',
+        '<%= config.bin %> commitments endpoints create --agent agent_abc --label "My Discord" --destination discord_owner_dm --capability push',
     ];
     static flags = {
         json: core_1.Flags.boolean({ description: 'Output as JSON' }),
         agent: core_1.Flags.string({ description: 'Agent ID', required: true }),
         label: core_1.Flags.string({ description: 'Human-readable label', required: true }),
         destination: core_1.Flags.string({
-            description: 'Implemented destination: slack_channel, slack_owner_dm, or app_owner_dm',
+            description: `Implemented destination: ${commitment_endpoints_1.COMMITMENT_ENDPOINT_DESTINATIONS.join(', ')}`,
             options: [...commitment_endpoints_1.COMMITMENT_ENDPOINT_DESTINATIONS],
             required: true,
         }),
@@ -45,7 +47,8 @@ class CommitmentsEndpointsCreate extends base_command_1.BaseCommand {
             endpoint = await commitment_endpoints_1.commitmentEndpointApi.create({
                 agentId: flags.agent,
                 label: flags.label,
-                provider: flags.destination.startsWith('slack_') ? 'slack' : 'app',
+                provider: data_provider_1.COMMITMENT_DESTINATION_REGISTRY[flags.destination]
+                    .transport,
                 destination: flags.destination,
                 capabilities: flags.capability,
                 ...(flags.target ? { target: flags.target } : {}),

package/dist/commands/commitments/observations.d.ts

@@ -1,4 +1,10 @@
 import { BaseCommand } from '../../base-command';
+/** Explicit ISO FROM/TO intervals avoid local-time or rolling-window ambiguity. */
+export declare function parseObservationWindow(value: string): {
+    from: string;
+    to: string;
+};
+export declare function renderObservationWindow(response: Record<string, unknown>, log: (line: string) => void): void;
 /**
  * `skrr commitments observations <id>` — what this commitment's runs saw.
  *
@@ -22,6 +28,10 @@ export default class CommitmentsObservations extends BaseCommand {
     };
     static flags: {
         json: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+        latest: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+        key: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        window: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        'compare-to': import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         limit: import("@oclif/core/lib/interfaces").OptionFlag<number | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         'declared-only': import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
         'changed-only': import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;