PROOF CLI Liskov Plugin

Private oclif plugin for Liskov commands under the root proof CLI.

proof liskov --help
proof liskov login --no-browser
proof liskov application import --github proof-computer/docs:.slipway/application-policy.json@main --server-fetch
proof liskov application list
proof liskov application status proof-docs
proof liskov application plans proof-docs --json
proof liskov application pause proof-docs --reason "funding pending" --yes
proof liskov application resume proof-docs --reason "funded" --yes
proof liskov application deployment import proof-docs --sequence 701 --origin 5... --yes
proof liskov application lockbox setup-pr proof-docs --yes
proof liskov application lockbox dispatch proof-docs --yes
proof liskov application lockbox grant ensure proof-docs --yes
proof liskov application lockbox grant status proof-docs --json
proof liskov application lockbox grant-status proof-docs --json
proof liskov application blackbox configure proof-docs --yes
proof liskov custody account ensure proof-docs --chain acurast --yes
proof liskov custody preflight proof-docs --json
proof liskov custody environment upload proof-docs --secrets-file .env.local --yes
proof liskov custody execution list proof-docs --json
proof liskov custody execution submit proof-docs --plan-item-id ID --idempotency-key KEY --yes-spend --yes
proof liskov custody execution observe proof-docs --execution-id ID --json
proof liskov custody execution diagnose proof-docs --execution-id ID --network mainnet --json
proof liskov custody execution recover proof-docs --execution-id ID --reason "operator reviewed" --yes
proof liskov custody child recover proof-docs --child-session-id ID --reason "operator reviewed" --yes
proof liskov custody machine catalog --network mainnet --json
proof liskov application backfill-identities
proof liskov application delete proof-docs --reason retired --yes
proof liskov whoami --json
proof liskov logout

Liskov builder login is designed as a browser-confirmed GitHub device-style flow. The CLI stores the local bearer token under an XDG-style config path and never prints token material. Application mutation and live custody commands are private/internal plugin commands that use the saved GitHub App CLI session and the server's readable-Application checks. The private liskov:ops sr25519 login remains an operator recovery path, not the normal builder-facing command.

Application deletion is a logical Liskov tombstone. It removes the Application from normal management/read surfaces but does not stop Acurast jobs, revoke Lockbox grants, drain routes, or spend.

Pause and resume stop or restart only new Liskov planning/executor work; they do not stop existing Acurast jobs, revoke Lockbox grants, drain routes, or spend.

Pause, resume, delete, and identity backfill dry-run by default and require --yes to mutate. Other mutating Application and custody commands require --yes; live execution submit also requires --yes-spend. The plugin does not expose the old direct manual Acurast spend fallback; diagnostics and machine catalog reads stay server-side.

Development

pnpm install
pnpm test
pnpm typecheck
pnpm build

To smoke the plugin through the root CLI:

pnpm run smoke:proof-plugin