@sailorbridge/client 0.2.3 → 0.2.4

package/README.md

@@ -105,6 +105,10 @@ sailorbridge worker serve --worker dev-1 --workdir "$PWD"
 sailorbridge supervise --agent ab_hand --cli codex --cwd "$PWD" --i-own-this-agent
 ```
 
+`worker list`, `worker run`, and `worker job` are member-runtime commands;
+`worker serve` instead uses a worker enrollment credential. The paired host
+credential created by `login` authorizes neither surface.
+
 The package ships only the built CLI/runtime files under `dist/src/` plus this
 README. It deliberately does not publish `src/`, `tests/`, or `dist/tests/`.
 Create a release tarball with `npm run pack:staged`; it stages the current build without
@@ -171,9 +175,11 @@ SAILORBRIDGE_MAX_CONCURRENCY=1
 `SAILORBRIDGE_CAPTAIN_ID` is required by `worker list`, `worker run`, and
 `worker job`; it must be a numeric string. `worker list` and `worker run` also
 require `SAILORBRIDGE_SESSION` so an unbound admin credential cannot
-accidentally discover workers across teams. A paired host credential can
-supply the captain id, but it does not contain a session, so list/run still
-need `SAILORBRIDGE_SESSION`. Agent routing uses the separate
+accidentally discover workers across teams. These commands require a
+member-runtime credential; a paired host credential is not a member credential
+and is rejected before any relay request. Use the console Workers page to list
+workers, or run the command inside a member workspace where the product provides
+the token, captain id, and session. Agent routing uses the separate
 `SAILORBRIDGE_AGENT_NAME`.
 
 `SAILORBRIDGE_HOST_ID` and `SAILORBRIDGE_HOST_DISPLAY_NAME` identify the
@@ -222,8 +228,9 @@ status never completes a SailorBridge task lifecycle.
 `https://www.sailorbridge.com`. The command displays the one-time code and
 polls until approval. The stored credential contains a host-scoped relay key
 (`key_scope: "host"` plus `host_id`) and is used as a fallback when
-`SAILORBRIDGE_RELAY_URL` or `SAILORBRIDGE_TOKEN` are not set. Raw host keys are
-written to the credentials file only. Data commands default to
+`SAILORBRIDGE_RELAY_URL` or `SAILORBRIDGE_TOKEN` are not set. Worker data
+commands reject this host-scoped fallback before any relay request. Raw host
+keys are written to the credentials file only. Data commands default to
 `--format plain`; login's plain success output prints the host id, credential
 path, and service status. Explicit `--format json` prints key id and host
 metadata, not the token.