@skrr-ai/cli 0.1.95 → 0.1.97

package/dist/lib/commitments.js

@@ -33,6 +33,7 @@ exports.renderCommitmentCases = renderCommitmentCases;
 exports.renderCommitmentCaseDetail = renderCommitmentCaseDetail;
 exports.renderCommitmentRemediationProposals = renderCommitmentRemediationProposals;
 exports.renderCommitmentRemediationProposal = renderCommitmentRemediationProposal;
+const data_provider_1 = require("@skrr-ai/data-provider");
 /**
  * commitments.ts — request-based client for the Commitments subsystem
  * (`/api/commitments/*`).
@@ -51,22 +52,22 @@ exports.renderCommitmentRemediationProposal = renderCommitmentRemediationProposa
  * Two `kind`s: `achieve` (bounded, deadline-bearing) and `maintain` (perpetual
  * "hold this state", derived from a Compass invariant — not authored here).
  */
-const data_provider_1 = require("@skrr-ai/data-provider");
-Object.defineProperty(exports, "COMMITMENT_WATCHED_SOURCES", { enumerable: true, get: function () { return data_provider_1.COMMITMENT_WATCHED_SOURCES; } });
-Object.defineProperty(exports, "COMMITMENT_TEMPLATE_IDS", { enumerable: true, get: function () { return data_provider_1.COMMITMENT_TEMPLATE_IDS; } });
-Object.defineProperty(exports, "COMMITMENT_CADENCE_MODES", { enumerable: true, get: function () { return data_provider_1.COMMITMENT_CADENCE_MODES; } });
-Object.defineProperty(exports, "COMMITMENT_CADENCE_TIME_PATTERN", { enumerable: true, get: function () { return data_provider_1.COMMITMENT_CADENCE_TIME_PATTERN; } });
-Object.defineProperty(exports, "COMMITMENT_CADENCE_MAX_TIMES", { enumerable: true, get: function () { return data_provider_1.COMMITMENT_CADENCE_MAX_TIMES; } });
-Object.defineProperty(exports, "COMMITMENT_EXECUTION_ISOLATION_MODES", { enumerable: true, get: function () { return data_provider_1.COMMITMENT_EXECUTION_ISOLATION_MODES; } });
-Object.defineProperty(exports, "COMMITMENT_STATUSES", { enumerable: true, get: function () { return data_provider_1.COMMITMENT_STATUSES; } });
-Object.defineProperty(exports, "COMMITMENT_KIND_VALUES", { enumerable: true, get: function () { return data_provider_1.COMMITMENT_KIND_VALUES; } });
+const data_provider_2 = require("@skrr-ai/data-provider");
+Object.defineProperty(exports, "COMMITMENT_WATCHED_SOURCES", { enumerable: true, get: function () { return data_provider_2.COMMITMENT_WATCHED_SOURCES; } });
+Object.defineProperty(exports, "COMMITMENT_TEMPLATE_IDS", { enumerable: true, get: function () { return data_provider_2.COMMITMENT_TEMPLATE_IDS; } });
+Object.defineProperty(exports, "COMMITMENT_CADENCE_MODES", { enumerable: true, get: function () { return data_provider_2.COMMITMENT_CADENCE_MODES; } });
+Object.defineProperty(exports, "COMMITMENT_CADENCE_TIME_PATTERN", { enumerable: true, get: function () { return data_provider_2.COMMITMENT_CADENCE_TIME_PATTERN; } });
+Object.defineProperty(exports, "COMMITMENT_CADENCE_MAX_TIMES", { enumerable: true, get: function () { return data_provider_2.COMMITMENT_CADENCE_MAX_TIMES; } });
+Object.defineProperty(exports, "COMMITMENT_EXECUTION_ISOLATION_MODES", { enumerable: true, get: function () { return data_provider_2.COMMITMENT_EXECUTION_ISOLATION_MODES; } });
+Object.defineProperty(exports, "COMMITMENT_STATUSES", { enumerable: true, get: function () { return data_provider_2.COMMITMENT_STATUSES; } });
+Object.defineProperty(exports, "COMMITMENT_KIND_VALUES", { enumerable: true, get: function () { return data_provider_2.COMMITMENT_KIND_VALUES; } });
 const commitment_product_1 = require("./commitment-product");
 const instruction_input_1 = require("./instruction-input");
 const format_1 = require("./format");
 const triggers_1 = require("./triggers");
 /** Derived from the installed compatibility vocabulary so the CLI remains
  * safe even while data-provider and CLI packages roll out separately. */
-exports.COMMITMENT_AUTHORABLE_CADENCE_MODES = data_provider_1.COMMITMENT_CADENCE_MODES.filter((mode) => mode !== 'sampled');
+exports.COMMITMENT_AUTHORABLE_CADENCE_MODES = data_provider_2.COMMITMENT_CADENCE_MODES.filter((mode) => mode !== 'sampled');
 /**
  * Interval bounds for `cadence.intervalMs`.
  *
@@ -110,13 +111,13 @@ function packBase(id) {
     return `/api/commitment-packs/${encodeURIComponent(id)}`;
 }
 exports.commitmentPackApi = {
-    list: () => data_provider_1.request.get('/api/commitment-packs'),
-    plan: (body) => data_provider_1.request.post('/api/commitment-packs/plan', body),
-    bind: (body) => data_provider_1.request.post('/api/commitment-packs/bind', body),
-    preflight: (id, nextRunCount) => data_provider_1.request.post(`${packBase(id)}/preflight`, {
+    list: () => data_provider_2.request.get('/api/commitment-packs'),
+    plan: (body) => data_provider_2.request.post('/api/commitment-packs/plan', body),
+    bind: (body) => data_provider_2.request.post('/api/commitment-packs/bind', body),
+    preflight: (id, nextRunCount) => data_provider_2.request.post(`${packBase(id)}/preflight`, {
         ...(typeof nextRunCount === 'number' ? { nextRunCount } : {}),
     }),
-    activate: (id) => data_provider_1.request.post(`${packBase(id)}/activate`, {}),
+    activate: (id) => data_provider_2.request.post(`${packBase(id)}/activate`, {}),
 };
 exports.commitmentApi = {
     /**
@@ -125,30 +126,30 @@ exports.commitmentApi = {
      * the coverage check, which is how an endpoint ends up unreachable without
      * anything failing.
      */
-    list: (query = {}) => data_provider_1.request.get((0, triggers_1.withQuery)('/api/commitments', query)),
+    list: (query = {}) => data_provider_2.request.get((0, triggers_1.withQuery)('/api/commitments', query)),
     /**
      * Fleet-level liveness sweep health (OSK-10958): when the reconciler last
      * swept, how stale that is, and the tally it last persisted. Aggregate only.
      */
-    livenessSweep: () => data_provider_1.request.get('/api/commitments/liveness/sweep'),
-    manifest: (id) => data_provider_1.request.get(`${base(id)}/manifest`),
-    import: (body) => data_provider_1.request.post('/api/commitments/import', body),
-    fork: (id, body) => data_provider_1.request.post(`${base(id)}/fork`, body),
+    livenessSweep: () => data_provider_2.request.get('/api/commitments/liveness/sweep'),
+    manifest: (id) => data_provider_2.request.get(`${base(id)}/manifest`),
+    import: (body) => data_provider_2.request.post('/api/commitments/import', body),
+    fork: (id, body) => data_provider_2.request.post(`${base(id)}/fork`, body),
     // GET /:id returns `{ commitment, latestCheck }` — NOT a bare contract.
     // Unwrap before rendering, or every field reads as undefined.
-    get: (id) => data_provider_1.request.get(base(id)),
-    create: (body) => data_provider_1.request.post('/api/commitments', body),
-    update: (id, body) => data_provider_1.request.patch(base(id), body),
-    draftPreflight: (body) => data_provider_1.request.post('/api/commitments/preflight', body),
-    workLinks: (id, includeInactive = false) => data_provider_1.request.get((0, triggers_1.withQuery)(`${base(id)}/links`, { ...(includeInactive ? { includeInactive: true } : {}) })),
-    createWorkLink: (id, body) => data_provider_1.request.post(`${base(id)}/links`, body),
-    updateWorkLink: (id, linkId, body) => data_provider_1.request.patch(`${base(id)}/links/${encodeURIComponent(linkId)}`, body),
-    detachWorkLink: (id, linkId) => data_provider_1.request.delete(`${base(id)}/links/${encodeURIComponent(linkId)}`),
-    plan: (body) => data_provider_1.request.post('/api/commitments/plan', body),
-    checkNow: (id) => data_provider_1.request.post(`${base(id)}/check-now`, {}),
-    checks: (id, query = {}) => data_provider_1.request.get((0, triggers_1.withQuery)(`${base(id)}/checks`, query)),
-    actionHistory: (id, query = {}) => data_provider_1.request.get((0, triggers_1.withQuery)(`${base(id)}/action-history`, query)),
-    actionProposals: (id, query = {}) => data_provider_1.request.get((0, triggers_1.withQuery)(`${base(id)}/action-proposals`, query)),
+    get: (id) => data_provider_2.request.get(base(id)),
+    create: (body) => data_provider_2.request.post('/api/commitments', body),
+    update: (id, body) => data_provider_2.request.patch(base(id), body),
+    draftPreflight: (body) => data_provider_2.request.post('/api/commitments/preflight', body),
+    workLinks: (id, includeInactive = false) => data_provider_2.request.get((0, triggers_1.withQuery)(`${base(id)}/links`, { ...(includeInactive ? { includeInactive: true } : {}) })),
+    createWorkLink: (id, body) => data_provider_2.request.post(`${base(id)}/links`, body),
+    updateWorkLink: (id, linkId, body) => data_provider_2.request.patch(`${base(id)}/links/${encodeURIComponent(linkId)}`, body),
+    detachWorkLink: (id, linkId) => data_provider_2.request.delete(`${base(id)}/links/${encodeURIComponent(linkId)}`),
+    plan: (body) => data_provider_2.request.post('/api/commitments/plan', body),
+    checkNow: (id) => data_provider_2.request.post(`${base(id)}/check-now`, {}),
+    checks: (id, query = {}) => data_provider_2.request.get((0, triggers_1.withQuery)(`${base(id)}/checks`, query)),
+    actionHistory: (id, query = {}) => data_provider_2.request.get((0, triggers_1.withQuery)(`${base(id)}/action-history`, query)),
+    actionProposals: (id, query = {}) => data_provider_2.request.get((0, triggers_1.withQuery)(`${base(id)}/action-proposals`, query)),
     /**
      * Propose a prepared action for a check.
      *
@@ -158,17 +159,20 @@ exports.commitmentApi = {
      * rule exists to catch. A locally-running agent that has investigated a
      * commitment and knows what should be done had no way to say so.
      */
-    proposeActionProposal: (id, body) => data_provider_1.request.post(`${base(id)}/action-proposals`, body),
-    decideActionProposal: (id, proposalId, decision, snapshot) => data_provider_1.request.post(`${base(id)}/action-proposals/${encodeURIComponent(proposalId)}/decision`, {
+    proposeActionProposal: (id, body) => data_provider_2.request.post(`${base(id)}/action-proposals`, body),
+    decideActionProposal: (id, proposalId, decision, snapshot) => data_provider_2.request.post(`${base(id)}/action-proposals/${encodeURIComponent(proposalId)}/decision`, {
         decision,
         ...(snapshot?.snapshotDigest ? { snapshotDigest: snapshot.snapshotDigest } : {}),
         ...(snapshot?.bundleVersion ? { bundleVersion: snapshot.bundleVersion } : {}),
+        ...(snapshot?.reason ? { reason: snapshot.reason } : {}),
+        ...(snapshot?.reasonCode ? { reasonCode: snapshot.reasonCode } : {}),
+        via: 'cli',
     }),
-    executeActionProposal: (id, proposalId) => data_provider_1.request.post(`${base(id)}/action-proposals/${encodeURIComponent(proposalId)}/execute`, {}),
-    preflight: (id, nextRunCount) => data_provider_1.request.post(`${base(id)}/preflight`, {
+    executeActionProposal: (id, proposalId) => data_provider_2.request.post(`${base(id)}/action-proposals/${encodeURIComponent(proposalId)}/execute`, {}),
+    preflight: (id, nextRunCount) => data_provider_2.request.post(`${base(id)}/preflight`, {
         ...(typeof nextRunCount === 'number' ? { nextRunCount } : {}),
     }),
-    effectivePolicy: (id) => data_provider_1.request.get(`${base(id)}/effective-policy`),
+    effectivePolicy: (id) => data_provider_2.request.get(`${base(id)}/effective-policy`),
     /**
      * Executor rebind — `POST /api/commitments/:id/executor` (impl contract B4,
      * docs/architecture/execution-handover-2026-09-17.md P4).
@@ -177,28 +181,28 @@ exports.commitmentApi = {
      * explicit recorded act: the server appends an `executorHandovers` entry
      * rather than letting a bare PATCH rewrite who owns the loop without a trail.
      */
-    setExecutor: (id, body) => data_provider_1.request.post(`${base(id)}/executor`, body),
-    pause: (id) => data_provider_1.request.post(`${base(id)}/pause`, {}),
-    resume: (id) => data_provider_1.request.post(`${base(id)}/resume`, {}),
-    complete: (id) => data_provider_1.request.post(`${base(id)}/complete`, {}),
-    delivery: (id, body) => data_provider_1.request.post(`${base(id)}/delivery`, body),
-    receipts: (id, query = 1) => data_provider_1.request.get((0, triggers_1.withQuery)(`${base(id)}/receipts`, typeof query === 'number' ? { limit: query } : query)),
-    receiptQuarterlyMetrics: (id, year, quarter) => data_provider_1.request.get((0, triggers_1.withQuery)(`${base(id)}/receipt-metrics/quarterly`, { year, quarter })),
-    deliveryPatch: (id, taskId) => data_provider_1.request.get(`${base(id)}/delivery/${encodeURIComponent(taskId)}/patch`),
-    deliveryBundle: (id, taskId) => data_provider_1.request.get(`${base(id)}/delivery/${encodeURIComponent(taskId)}/bundle`),
-    operatingReview: (agentId) => data_provider_1.request.get(`/api/commitments/agents/${encodeURIComponent(agentId)}/operating-review`),
-    reflection: (id) => data_provider_1.request.get(`${base(id)}/reflection`),
-    decideReflectionProposal: (id, proposalKey, decision) => data_provider_1.request.post(`${base(id)}/reflection/proposals/${encodeURIComponent(proposalKey)}/decision`, {
+    setExecutor: (id, body) => data_provider_2.request.post(`${base(id)}/executor`, body),
+    pause: (id) => data_provider_2.request.post(`${base(id)}/pause`, {}),
+    resume: (id) => data_provider_2.request.post(`${base(id)}/resume`, {}),
+    complete: (id) => data_provider_2.request.post(`${base(id)}/complete`, {}),
+    delivery: (id, body) => data_provider_2.request.post(`${base(id)}/delivery`, body),
+    receipts: (id, query = 1) => data_provider_2.request.get((0, triggers_1.withQuery)(`${base(id)}/receipts`, typeof query === 'number' ? { limit: query } : query)),
+    receiptQuarterlyMetrics: (id, year, quarter) => data_provider_2.request.get((0, triggers_1.withQuery)(`${base(id)}/receipt-metrics/quarterly`, { year, quarter })),
+    deliveryPatch: (id, taskId) => data_provider_2.request.get(`${base(id)}/delivery/${encodeURIComponent(taskId)}/patch`),
+    deliveryBundle: (id, taskId) => data_provider_2.request.get(`${base(id)}/delivery/${encodeURIComponent(taskId)}/bundle`),
+    operatingReview: (agentId) => data_provider_2.request.get(`/api/commitments/agents/${encodeURIComponent(agentId)}/operating-review`),
+    reflection: (id) => data_provider_2.request.get(`${base(id)}/reflection`),
+    decideReflectionProposal: (id, proposalKey, decision) => data_provider_2.request.post(`${base(id)}/reflection/proposals/${encodeURIComponent(proposalKey)}/decision`, {
         decision,
     }),
     /** Case and remediation-proposal reads make a commitment's open loop inspectable. */
-    cases: (id, query = {}) => data_provider_1.request.get((0, triggers_1.withQuery)(`${base(id)}/cases`, query)),
-    caseDetail: (id, caseId) => data_provider_1.request.get(`${base(id)}/cases/${encodeURIComponent(caseId)}`),
-    remediationProposals: (id, query = {}) => data_provider_1.request.get((0, triggers_1.withQuery)(`${base(id)}/remediation-proposals`, query)),
-    remediationProposal: (id, proposalId) => data_provider_1.request.get(`${base(id)}/remediation-proposals/${encodeURIComponent(proposalId)}`),
-    proposeRemediation: (id, caseId, body) => data_provider_1.request.post(`${base(id)}/cases/${encodeURIComponent(caseId)}/remediation-proposals`, body),
-    decideRemediationProposal: (id, proposalId, body) => data_provider_1.request.post(`${base(id)}/remediation-proposals/${encodeURIComponent(proposalId)}/decision`, body),
-    executeRemediationProposal: (id, proposalId, retryExecuting = false) => data_provider_1.request.post(`${base(id)}/remediation-proposals/${encodeURIComponent(proposalId)}/execute`, {
+    cases: (id, query = {}) => data_provider_2.request.get((0, triggers_1.withQuery)(`${base(id)}/cases`, query)),
+    caseDetail: (id, caseId) => data_provider_2.request.get(`${base(id)}/cases/${encodeURIComponent(caseId)}`),
+    remediationProposals: (id, query = {}) => data_provider_2.request.get((0, triggers_1.withQuery)(`${base(id)}/remediation-proposals`, query)),
+    remediationProposal: (id, proposalId) => data_provider_2.request.get(`${base(id)}/remediation-proposals/${encodeURIComponent(proposalId)}`),
+    proposeRemediation: (id, caseId, body) => data_provider_2.request.post(`${base(id)}/cases/${encodeURIComponent(caseId)}/remediation-proposals`, body),
+    decideRemediationProposal: (id, proposalId, body) => data_provider_2.request.post(`${base(id)}/remediation-proposals/${encodeURIComponent(proposalId)}/decision`, body),
+    executeRemediationProposal: (id, proposalId, retryExecuting = false) => data_provider_2.request.post(`${base(id)}/remediation-proposals/${encodeURIComponent(proposalId)}/execute`, {
         retryExecuting,
     }),
     /* ------------------------------------------------------------------------ *
@@ -210,33 +214,33 @@ exports.commitmentApi = {
      * Agent is even allowed to pick (`wakeCapabilities`). Each has a distinct
      * authority, which is why none of them is a field on `show`.
      * ------------------------------------------------------------------------ */
-    triggerStatus: (id, limit) => data_provider_1.request.get((0, triggers_1.withQuery)(`${base(id)}/trigger-status`, { limit })),
-    workLineage: (id, limit) => data_provider_1.request.get((0, triggers_1.withQuery)(`${base(id)}/work-lineage`, { limit })),
+    triggerStatus: (id, limit) => data_provider_2.request.get((0, triggers_1.withQuery)(`${base(id)}/trigger-status`, { limit })),
+    workLineage: (id, limit) => data_provider_2.request.get((0, triggers_1.withQuery)(`${base(id)}/work-lineage`, { limit })),
     /** One ordered explanation surface across the immutable commitment ledgers. */
     /**
      * Soft delete: the contract drops out of every read while the ledgers that
      * reference it stay resolvable. Refused for an active or system-managed
      * commitment — see CommitmentControl.deleteCommitment.
      */
-    remove: (id, reason, opts = {}) => data_provider_1.request.delete((0, triggers_1.withQuery)(base(id), {
+    remove: (id, reason, opts = {}) => data_provider_2.request.delete((0, triggers_1.withQuery)(base(id), {
         ...(reason ? { reason } : {}),
         // Only sent when the caller actually decided. Omitting it is what makes
         // the server ask rather than guess when there is open work.
         ...(opts.stopOpenWork === undefined ? {} : { stopOpenWork: String(opts.stopOpenWork) }),
     })),
     /** What a delete would leave behind. Read-only. */
-    deletionPreview: (id) => data_provider_1.request.get(`${base(id)}/deletion-preview`),
+    deletionPreview: (id) => data_provider_2.request.get(`${base(id)}/deletion-preview`),
     /** Un-delete. Returns the Commitment PAUSED, never active. */
-    restore: (id) => data_provider_1.request.post(`${base(id)}/restore`, {}),
-    trace: (id, query = {}) => data_provider_1.request.get((0, triggers_1.withQuery)(`${base(id)}/trace`, query)),
+    restore: (id) => data_provider_2.request.post(`${base(id)}/restore`, {}),
+    trace: (id, query = {}) => data_provider_2.request.get((0, triggers_1.withQuery)(`${base(id)}/trace`, query)),
     /** One Cycle per Check, newest first — the unit a person reads (D8). */
-    cycles: (id, query = {}) => data_provider_1.request.get((0, triggers_1.withQuery)(`${base(id)}/cycles`, query)),
+    cycles: (id, query = {}) => data_provider_2.request.get((0, triggers_1.withQuery)(`${base(id)}/cycles`, query)),
     /** The latest Cycle walked as six questions; the first "no" is where it stopped. */
-    explain: (id) => data_provider_1.request.get(`${base(id)}/explain`),
-    ledger: (id, query = {}) => data_provider_1.request.get((0, triggers_1.withQuery)(`${base(id)}/ledger`, query)),
-    wakeCapabilities: (id) => data_provider_1.request.get(`${base(id)}/wake-capabilities`),
-    dailyMetrics: (id, query = {}) => data_provider_1.request.get((0, triggers_1.withQuery)(`${base(id)}/daily-metrics`, query)),
-    cadenceDecisions: (id, limit) => data_provider_1.request.get((0, triggers_1.withQuery)(`${base(id)}/cadence-decisions`, { limit })),
+    explain: (id) => data_provider_2.request.get(`${base(id)}/explain`),
+    ledger: (id, query = {}) => data_provider_2.request.get((0, triggers_1.withQuery)(`${base(id)}/ledger`, query)),
+    wakeCapabilities: (id) => data_provider_2.request.get(`${base(id)}/wake-capabilities`),
+    dailyMetrics: (id, query = {}) => data_provider_2.request.get((0, triggers_1.withQuery)(`${base(id)}/daily-metrics`, query)),
+    cadenceDecisions: (id, limit) => data_provider_2.request.get((0, triggers_1.withQuery)(`${base(id)}/cadence-decisions`, { limit })),
     /**
      * What the NEXT check would decide, computed without taking it.
      *
@@ -249,7 +253,7 @@ exports.commitmentApi = {
      * answer, and re-running a real check to find out changes the thing you are
      * trying to observe.
      */
-    nextTick: (id) => data_provider_1.request.get(`${base(id)}/next-tick`),
+    nextTick: (id) => data_provider_2.request.get(`${base(id)}/next-tick`),
     /**
      * The accounting SHADOW readout behind allowance accounting.
      *
@@ -258,7 +262,7 @@ exports.commitmentApi = {
      * is "does this workspace have enough closed evidence to activate" rather than
      * "what has this commitment spent". `cost` is the per-commitment question.
      */
-    accountingReadout: (id) => data_provider_1.request.get(`${base(id)}/accounting-readout`),
+    accountingReadout: (id) => data_provider_2.request.get(`${base(id)}/accounting-readout`),
     /**
      * Closed-period spend for ONE commitment over a UTC day window.
      *
@@ -268,7 +272,7 @@ exports.commitmentApi = {
      * quietly wrong. The server refuses a window that is not on UTC day
      * boundaries, so the caller builds one rather than passing a wall-clock time.
      */
-    cost: (id, window) => data_provider_1.request.get((0, triggers_1.withQuery)(`${base(id)}/cost`, window)),
+    cost: (id, window) => data_provider_2.request.get((0, triggers_1.withQuery)(`${base(id)}/cost`, window)),
     /**
      * What this commitment's RUNS claim to have seen (agent-as-sensor).
      *
@@ -286,24 +290,32 @@ exports.commitmentApi = {
      * "what have we already ruled out", which is the question a second
      * investigation of the same drift most needs answered before it starts.
      */
-    hypotheses: (id, query = {}) => data_provider_1.request.get((0, triggers_1.withQuery)(`${base(id)}/hypotheses`, query)),
-    evaluations: (id, query = {}) => data_provider_1.request.get((0, triggers_1.withQuery)(`${base(id)}/evaluations`, query)),
-    createEvaluation: (id, body) => data_provider_1.request.post(`${base(id)}/evaluations`, body),
-    retryEvaluationLearning: (id, scheduleId) => data_provider_1.request.post(`${base(id)}/evaluations/${encodeURIComponent(scheduleId)}/retry-learning`, {}),
-    observations: (id, query = {}) => data_provider_1.request.get((0, triggers_1.withQuery)(`${base(id)}/observations`, query)),
+    hypotheses: (id, query = {}) => data_provider_2.request.get((0, triggers_1.withQuery)(`${base(id)}/hypotheses`, query)),
+    evaluations: (id, query = {}) => data_provider_2.request.get((0, triggers_1.withQuery)(`${base(id)}/evaluations`, query)),
+    createEvaluation: (id, body) => data_provider_2.request.post(`${base(id)}/evaluations`, body),
+    retryEvaluationLearning: (id, scheduleId) => data_provider_2.request.post(`${base(id)}/evaluations/${encodeURIComponent(scheduleId)}/retry-learning`, {}),
+    observations: (id, query = {}) => {
+        const { latest, ...history } = query;
+        return data_provider_2.request.get((0, triggers_1.withQuery)(`${base(id)}/observations`, {
+            ...history,
+            ...(latest === true ? { latest: true } : {}),
+        }));
+    },
+    observationSeries: (id, query) => data_provider_2.request.get((0, triggers_1.withQuery)(`${base(id)}/observations/series`, query)),
+    observationCompare: (id, query) => data_provider_2.request.get((0, triggers_1.withQuery)(`${base(id)}/observations/compare`, query)),
     /* ------------------------------------------------------------------------ *
      * Steering
      * ------------------------------------------------------------------------ */
     /** One-tap feedback on a check — the signal Reflection retunes cadence from. */
-    checkFeedback: (id, checkId, body) => data_provider_1.request.post(`${base(id)}/checks/${encodeURIComponent(checkId)}/feedback`, body),
+    checkFeedback: (id, checkId, body) => data_provider_2.request.post(`${base(id)}/checks/${encodeURIComponent(checkId)}/feedback`, body),
     /** Bounded, named corrections — never a free-form contract edit. */
-    remediate: (id, body) => data_provider_1.request.post(`${base(id)}/remediation`, body),
+    remediate: (id, body) => data_provider_2.request.post(`${base(id)}/remediation`, body),
     /** Approve/reject an Agent-proposed cadence change the server parked. */
-    decideCadenceRequest: (id, requestId, approved) => data_provider_1.request.post(`${base(id)}/cadence-requests/${encodeURIComponent(requestId)}/decision`, {
+    decideCadenceRequest: (id, requestId, approved) => data_provider_2.request.post(`${base(id)}/cadence-requests/${encodeURIComponent(requestId)}/decision`, {
         approved,
     }),
-    linkGoal: (id, goalId) => data_provider_1.request.put(`${base(id)}/goals/${encodeURIComponent(goalId)}`, {}),
-    unlinkGoal: (id, goalId) => data_provider_1.request.delete(`${base(id)}/goals/${encodeURIComponent(goalId)}`),
+    linkGoal: (id, goalId) => data_provider_2.request.put(`${base(id)}/goals/${encodeURIComponent(goalId)}`, {}),
+    unlinkGoal: (id, goalId) => data_provider_2.request.delete(`${base(id)}/goals/${encodeURIComponent(goalId)}`),
 };
 /** One-tap check feedback. `handled` means "I dealt with it", not "good nudge". */
 exports.COMMITMENT_FEEDBACK_KINDS = ['useful', 'noisy', 'wrong', 'handled'];
@@ -379,6 +391,9 @@ function normalizeCreateBody(input) {
         if (src[key] !== undefined)
             out[key] = src[key];
     }
+    const delivery = out.delivery;
+    if (delivery?.reviewPolicy !== undefined)
+        (0, commitment_product_1.normalizeTaskReviewPolicy)(delivery.reviewPolicy);
     if (out.status !== 'draft') {
         delete out.status;
     }
@@ -814,7 +829,7 @@ latestCheck) {
     const evidenceHealth = latestCheck?.inputs?.evidenceHealth;
     const evidenceLine = describeEvidenceHealth(evidenceHealth, criteria.length);
     const assessment = commitment.assessment
-        ? (0, data_provider_1.readCommitmentAssessment)(commitment.assessment)
+        ? (0, data_provider_2.readCommitmentAssessment)(commitment.assessment)
         : undefined;
     log(`Assessment: ${assessment?.label ?? 'Unknown'}`);
     log(`Evidence:   ${assessment?.evidence ?? 'unavailable'}`);
@@ -834,7 +849,7 @@ latestCheck) {
     if (standstill) {
         const streak = commitment.state?.consecutiveUnresolvedChecks;
         const streakClause = typeof streak === 'number' && streak >= 2 ? `${streak} checks in a row: ` : '';
-        log(`Standstill:${` ${streakClause}${(0, data_provider_1.describeStandstill)(standstill.reason).title}`}`);
+        log(`Standstill:${` ${streakClause}${(0, data_provider_2.describeStandstill)(standstill.reason).title}`}`);
         if (standstill.fix)
             log(`           Fix: ${standstill.fix}`);
         if (standstill.alsoConstrained?.length) {
@@ -847,7 +862,7 @@ latestCheck) {
             })
                 .filter((r) => Boolean(r));
             if (also.length)
-                log(`           Also constrained: ${also.map((reason) => (0, data_provider_1.describeStandstill)(reason).title).join(', ')}`);
+                log(`           Also constrained: ${also.map((reason) => (0, data_provider_2.describeStandstill)(reason).title).join(', ')}`);
         }
     }
     const sources = (commitment.watchedSources || [])
@@ -1169,6 +1184,25 @@ function cycleSummary(cycle) {
     }
     return cycle.note || cycle.decision?.summary || cycle.decision?.posture || 'nothing to act on';
 }
+/** Content-free rows admitted by the native sensor loader; licenses stay unknown. */
+function platformFetchLines(cycle) {
+    const lines = [];
+    for (const value of cycle.fetchReceipts || []) {
+        const r = (0, data_provider_1.normalizeFetchReceipt)(value);
+        if (!r) {
+            lines.push('Platform fetch receipt: unknown.');
+            continue;
+        }
+        lines.push(`Platform fetch: ${r.host || 'unknown'}${r.path || ''} · ${r.fetchedAt} · ${r.status === null ? 'HTTP response unknown' : `HTTP ${r.status}`} · ${r.bytes === null ? 'bytes unknown' : `${r.bytes} B`} · credential headers: ${r.authenticated ? 'present' : 'absent'} · license: unknown`);
+        if (r.contentDigest)
+            lines.push(`  bounded-body SHA256: ${r.contentDigest}`);
+    }
+    if (cycle.fetchReceiptUnavailable)
+        lines.push('Platform fetch receipt: unknown.');
+    if (cycle.fetchReceiptsTruncated)
+        lines.push(`Showing ${cycle.fetchReceipts?.length || 0} of ${cycle.fetchReceiptCount || 0} platform fetch receipts.`);
+    return lines;
+}
 /**
  * One line per Cycle:
  * `09-22 12:04  ● stopped    act  commitment_execution_budget_exhausted — Raise maxRunsPerDay…`
@@ -1183,7 +1217,19 @@ function formatCommitmentCycles(page) {
     for (const cycle of cycles) {
         const glyph = CYCLE_GLYPH[cycle.outcome] || '?';
         lines.push(`${cycleTime(cycle.startedAt)}  ${glyph} ${String(cycle.outcome).padEnd(9)}  ${cycleWake(cycle).padEnd(18)}  ${cycleSummary(cycle)}`);
+        lines.push(...platformFetchLines(cycle));
+        lines.push(...formatCycleLatency(cycle));
+        for (const task of cycle.tasks || []) {
+            if (task.closureState !== 'open_items' && task.closureState !== 'overridden')
+                continue;
+            const label = task.closureState === 'overridden'
+                ? 'closed by explicit override'
+                : 'closed with open items';
+            lines.push(`             task ${task.identifier || task.id} ${task.status || '-'} — ${label}`);
+        }
         for (const run of cycle.runs || []) {
+            if (run.reportPayload)
+                lines.push(`             run ${run.id} report: ${run.reportPayload.status === 'rejected' ? 'structured report rejected; plain summary used' : 'structured report validated (delivery tracked separately)'}`);
             if (!['machine', 'contract', 'work'].includes(run.failureClass))
                 continue;
             const owner = run.failureOwner === 'model' ? 'model' : run.failureOwner || 'work';
@@ -1195,6 +1241,20 @@ function formatCommitmentCycles(page) {
     }
     return lines;
 }
+/**
+ * Stage latency, measured on the server. An unmeasured hop prints
+ * `unmeasurable`: "cannot see" must never read as "fast".
+ */
+function formatCycleLatency(cycle) {
+    const latency = cycle.latency;
+    const missingFor = (stage) => (latency?.pendingStages ? latency.pendingStages.includes(stage) : latency?.pending)
+        ? 'pending'
+        : 'unmeasurable';
+    if (latency?.measured === false) {
+        return [`             latency: ${latency.pending ? 'pending' : 'unmeasurable'}`];
+    }
+    return Object.entries(latency?.stages || {}).map(([stage, ms]) => `             ${stage}: ${typeof ms === 'number' ? `${ms}ms` : missingFor(stage)}`);
+}
 const ANSWER_GLYPH = { yes: '✓', no: '✗', 'n/a': '–' };
 /** The six questions for the latest Cycle, the first ✗ carrying its fix. */
 function formatCommitmentExplanation(explanation) {
@@ -1204,6 +1264,8 @@ function formatCommitmentExplanation(explanation) {
             ? `Latest cycle: ${cycleTime(cycle.startedAt)} ${cycle.outcome} (${cycle.id})`
             : `No cycle yet (status: ${explanation.status || '-'})`,
     ];
+    if (cycle)
+        lines.push(...formatCycleLatency(cycle));
     for (const answer of explanation.answers || []) {
         lines.push(`  ${ANSWER_GLYPH[answer.answer] || '?'} ${answer.question}  ${answer.because}`);
         if (answer.fix)
@@ -1216,6 +1278,12 @@ function formatCommitmentExplanation(explanation) {
             : `Stopped at: ${explanation.stoppedAt}`);
     // What the next Run may do without asking — an Ask-mode Agent can ask
     // nobody on an unattended Run (OSK-12201). Same lines as show/preflight.
+    if (cycle) {
+        lines.push(...platformFetchLines(cycle));
+        for (const run of cycle.runs || [])
+            if (run.reportPayload)
+                lines.push(`  run ${run.id} report: ${run.reportPayload.status === 'rejected' ? 'structured report rejected; plain summary used' : 'structured report validated (delivery tracked separately)'}`);
+    }
     lines.push(...permissionLines(explanation.permissions));
     return lines;
 }
@@ -1247,9 +1315,22 @@ function renderCommitmentObservations(response, log, options = {}) {
     const data = records(response.data);
     renderRows(data.map((item) => ({
         at: text(firstValue(item, ['observedAt', 'createdAt', 'updatedAt'])),
+        recorded: text(firstValue(item, ['recordedAt', 'createdAt'])),
+        clamped: yesNo(item.observedAtClamped),
+        claimed: text(item.claimedObservedAt),
+        model: text(record(item.producer)?.model, 'model not reported'),
+        modelSource: text(record(item.producer)?.modelSource, 'unknown'),
         key: text(firstValue(item, ['key', 'observationKey', 'name'])),
         value: (0, format_1.formatCell)(firstValue(item, ['value', 'observedValue', 'latestValue'])),
         changed: yesNo(firstValue(item, ['changed', 'changeVerdict', 'verdict'])),
+        reason: [
+            (0, data_provider_1.describeObservationChange)(item).reason,
+            (0, data_provider_1.describeObservationChange)(item).progress,
+        ]
+            .filter(Boolean)
+            .join(' '),
+        reference: (0, data_provider_1.describeObservationChange)(item)
+            .reference || '-',
         // `declared` decides whether a row can move the loop at all: an undeclared
         // key is recorded and inert, and "the sensor saw nothing" must not look
         // like "the sensor saw something we did not ask about". An observation
@@ -1260,9 +1341,16 @@ function renderCommitmentObservations(response, log, options = {}) {
         confidence: (0, format_1.formatCell)(item.confidence),
     })), [
         { key: 'at', header: 'OBSERVED', maxWidth: 24 },
+        { key: 'recorded', header: 'RECORDED', maxWidth: 24 },
+        { key: 'clamped', header: 'CLAMPED', maxWidth: 8 },
+        { key: 'claimed', header: 'CLAIMED', maxWidth: 24 },
+        { key: 'model', header: 'MODEL', maxWidth: 40 },
+        { key: 'modelSource', header: 'MODEL SOURCE', maxWidth: 18 },
         { key: 'key', header: 'KEY', maxWidth: 30 },
         { key: 'value', header: 'VALUE', maxWidth: 38 },
         { key: 'changed', header: 'CHANGED', maxWidth: 8 },
+        { key: 'reason', header: 'REASON', maxWidth: 20 },
+        { key: 'reference', header: 'REFERENCE', maxWidth: 80 },
         { key: 'declared', header: 'DECLARED', maxWidth: 9 },
         { key: 'access', header: 'ACCESS', maxWidth: 13 },
         { key: 'confidence', header: 'CONF', maxWidth: 6 },

package/dist/lib/compasses.d.ts

@@ -23,6 +23,20 @@ export interface Compass {
     domain?: string;
     identity?: Record<string, unknown>;
     scope?: Record<string, unknown>;
+    /** Enforced owner rules; everything else on a Compass is guidance. */
+    rules?: Array<{
+        id: string;
+        kind: string;
+        status?: string;
+        text?: string;
+        phrases?: string[];
+        effect?: string;
+    }>;
+    /** Stored rules that no longer validate: held covered results until edited or retired. */
+    rulesInvalid?: Array<{
+        id: string | null;
+        issues: string[];
+    }>;
     invariantTargets?: CompassInvariantTarget[];
     autonomyDefaults?: Record<string, unknown>;
     communicationDefaults?: Record<string, unknown>;

package/dist/lib/compasses.js

@@ -5,6 +5,7 @@ exports.renderCompassList = renderCompassList;
 exports.renderCompass = renderCompass;
 exports.renderRevisionList = renderRevisionList;
 exports.renderCompassTrace = renderCompassTrace;
+const data_provider_1 = require("@skrr-ai/data-provider");
 /**
  * compasses.ts — request-based client for `/api/compasses`.
  *
@@ -25,22 +26,22 @@ exports.renderCompassTrace = renderCompassTrace;
  *     config rather than rewinding — so the ledger records that someone chose
  *     to go back.
  */
-const data_provider_1 = require("@skrr-ai/data-provider");
+const data_provider_2 = require("@skrr-ai/data-provider");
 const format_1 = require("./format");
 const triggers_1 = require("./triggers");
 exports.COMPASS_STATUSES = ['active', 'archived'];
 const base = (id) => `/api/compasses/${encodeURIComponent(id)}`;
 exports.compassApi = {
-    list: (query) => data_provider_1.request.get((0, triggers_1.withQuery)('/api/compasses', query)),
-    create: (body) => data_provider_1.request.post('/api/compasses', body),
-    get: (id, query) => data_provider_1.request.get((0, triggers_1.withQuery)(base(id), query)),
-    update: (id, body) => data_provider_1.request.patch(base(id), body),
-    archive: (id, query) => data_provider_1.request.delete((0, triggers_1.withQuery)(base(id), query)),
-    revisions: (id, query) => data_provider_1.request.get((0, triggers_1.withQuery)(`${base(id)}/revisions`, query)),
-    trace: (id, query) => data_provider_1.request.get((0, triggers_1.withQuery)(`${base(id)}/trace`, query)),
-    revert: (id, body) => data_provider_1.request.post(`${base(id)}/revert`, body),
-    appendTactic: (id, body) => data_provider_1.request.post(`${base(id)}/tactics`, body),
-    commitments: (id, query) => data_provider_1.request.get((0, triggers_1.withQuery)(`${base(id)}/commitments`, query)),
+    list: (query) => data_provider_2.request.get((0, triggers_1.withQuery)('/api/compasses', query)),
+    create: (body) => data_provider_2.request.post('/api/compasses', body),
+    get: (id, query) => data_provider_2.request.get((0, triggers_1.withQuery)(base(id), query)),
+    update: (id, body) => data_provider_2.request.patch(base(id), body),
+    archive: (id, query) => data_provider_2.request.delete((0, triggers_1.withQuery)(base(id), query)),
+    revisions: (id, query) => data_provider_2.request.get((0, triggers_1.withQuery)(`${base(id)}/revisions`, query)),
+    trace: (id, query) => data_provider_2.request.get((0, triggers_1.withQuery)(`${base(id)}/trace`, query)),
+    revert: (id, body) => data_provider_2.request.post(`${base(id)}/revert`, body),
+    appendTactic: (id, body) => data_provider_2.request.post(`${base(id)}/tactics`, body),
+    commitments: (id, query) => data_provider_2.request.get((0, triggers_1.withQuery)(`${base(id)}/commitments`, query)),
 };
 function shortDate(value) {
     if (!value)
@@ -85,6 +86,19 @@ function renderCompass(compass, log) {
     if (compass.communicationDefaults) {
         log(`Comms       ${JSON.stringify(compass.communicationDefaults)}`);
     }
+    const rules = compass.rules ?? [];
+    if (rules.length) {
+        const active = rules.filter((rule) => (rule.status ?? 'active') === 'active');
+        log('');
+        log(`Enforced rules (${active.length} active, ${rules.length - active.length} other):`);
+        for (const rule of rules)
+            log(`  • ${rule.id} [${rule.status ?? 'active'}]: ${rule.kind === 'text_required'
+                ? `append "${rule.text}"`
+                : `${rule.effect} on ${(rule.phrases ?? []).map((phrase) => `"${phrase}"`).join(', ')}`}`);
+        log(`    ${data_provider_1.OWNER_RULE_COVERAGE}`);
+    }
+    for (const bad of compass.rulesInvalid ?? [])
+        log(`  ! INVALID rule ${bad.id ?? '(no id)'}: ${bad.issues.join('; ')}. Covered results are held until it is edited or retired.`);
     const targets = compass.invariantTargets ?? [];
     log('');
     if (targets.length === 0) {

package/dist/lib/grants.d.ts

@@ -1,3 +1,4 @@
+import type { GrantAccess, GrantAccessSource } from '@skrr-ai/data-provider';
 export declare const GRANT_PRINCIPAL_KINDS: readonly ["agent", "commitment"];
 export declare const GRANT_CREDENTIAL_KINDS: readonly ["env", "bearer", "basic", "json"];
 export interface GrantPrincipal {
@@ -6,6 +7,8 @@ export interface GrantPrincipal {
     commitmentId?: string;
 }
 export interface Grant {
+    access?: GrantAccess;
+    accessSource?: GrantAccessSource;
     id: string;
     principal: GrantPrincipal;
     label: string;
@@ -38,7 +41,8 @@ export declare const grantApi: {
     }>;
     get: (id: string) => Promise<Grant>;
     create: (body: unknown) => Promise<Grant>;
-    rotate: (id: string, credential: unknown) => Promise<Grant>;
+    updateAccess: (id: string, access: GrantAccess) => Promise<Grant>;
+    rotate: (id: string, credential: unknown, access?: GrantAccess) => Promise<Grant>;
     setRevoked: (id: string, revoked: boolean) => Promise<Grant>;
     remove: (id: string) => Promise<{
         ok: boolean;

package/dist/lib/grants.js

@@ -24,7 +24,11 @@ exports.grantApi = {
     list: (path) => data_provider_1.request.get(path),
     get: (id) => data_provider_1.request.get(`/api/grants/${id}`),
     create: (body) => data_provider_1.request.post('/api/grants', body),
-    rotate: (id, credential) => data_provider_1.request.put(`/api/grants/${id}/credential`, { credential }),
+    updateAccess: (id, access) => data_provider_1.request.patch(`/api/grants/${id}`, { access }),
+    rotate: (id, credential, access) => data_provider_1.request.put(`/api/grants/${id}/credential`, {
+        credential,
+        ...(access ? { access } : {}),
+    }),
     setRevoked: (id, revoked) => data_provider_1.request.patch(`/api/grants/${id}/revocation`, { revoked }),
     remove: (id) => data_provider_1.request.delete(`/api/grants/${id}`),
 };
@@ -56,6 +60,9 @@ function renderGrantList(grants, log) {
         id: g.id,
         label: g.label,
         provider: g.provider,
+        access: g.access
+            ? `${g.access} (${g.accessSource === 'attested' ? 'attested' : 'declared, not verified'})`
+            : 'undeclared',
         principal: g.principal.agentId || g.principal.commitmentId || g.principal.kind,
         // NAMES only. This is the audit surface; a value never reaches the CLI.
         credential: g.credential?.configured
@@ -68,6 +75,7 @@ function renderGrantList(grants, log) {
     })), [
         { key: 'label', header: 'LABEL', maxWidth: 26 },
         { key: 'provider', header: 'PROVIDER', maxWidth: 12 },
+        { key: 'access', header: 'ACCESS', maxWidth: 32 },
         { key: 'principal', header: 'PRINCIPAL', maxWidth: 24 },
         { key: 'credential', header: 'VARIABLES', maxWidth: 34 },
         { key: 'runtime', header: 'RUNTIME', maxWidth: 16 },

package/dist/lib/hosted-machines.d.ts

@@ -22,6 +22,13 @@ export interface HostedMachineSession {
     previewUrl?: string | null;
     previewPort?: number | null;
     egressPolicy?: string | null;
+    /** Hosts the sandbox may reach under an `allowlist` policy (server-resolved). */
+    egressAllowHosts?: string[];
+    /** Hosts the workspace/agent egress policy removed from the request. */
+    egressDroppedHosts?: string[];
+    /** Where the effective egress policy came from (e.g. agent-declared vs default). */
+    egressSource?: string | null;
+    egressEnforcement?: string | null;
     repos?: HostedMachineRepo[];
     idleTimeoutMs?: number | null;
     lastActiveAt?: string | null;