@shardflux/cli 0.28.3 → 0.28.4

package/CHANGELOG.md

@@ -2,6 +2,39 @@
 
 ## Unreleased
 
+- Keep queued messages moving after an obsolete computer upgrade choice is cleared or changed; offer only compatible computer upgrades.
+
+## 0.28.4
+
+- Pending native conversation messages keep their original sequence until acknowledged, including across a paused computer or an API restart. The retained computer wakes through its existing authorized path.
+
+- Available workspace updates use the current saved machine or project environment, matching the target applied by an update after a saved-version rollback.
+
+- Conversation moves require a saved checkpoint when idle. A new turn releases an incomplete idle move while keeping its computer, session, files and queued messages; active turns keep their deferred move.
+
+- Read older and dismissed orchestrator answers with `shard orchestrator history`; `--cursor`, `--limit`, and `--organization` select a read-only page. JSON returns `inputs` and `next_cursor`.
+
+- Home computer updates select the organization’s current saved machine, including after a machine rollback; repository and explicit update targets keep their existing behavior. Request and response fields are unchanged.
+
+- Read current recipient input-file capability through the authenticated orchestrator API; unsupported file requests return a retryable update action, and pending file delivery keeps its actual waiting reason.
+
+- Orchestrator dismissal: the API keeps dismissed, unstarted inputs out of dispatch and queue positions until they are restored. Work that already started continues; request and response fields are unchanged.
+
+- Folder starts (0.28.4+): an agent's `project_link` with a first prompt (the device helper) never stays running: a start from the folder that does not finish within 5 minutes fails with what held it (for example `Setting up <project>: saving template`), and a start process that ignores its stop is killed 10 seconds later.
+
+- The Shardflux app 0.9.5 (0.28.4+): `shard` installs and updates `@shardflux/desktop-darwin-arm64` / `-x64` and
+  `@shardflux/desktop-linux-x64` / `-arm64` 0.9.5 (a three-step first run, ⌘2 History search, request details
+  from your computer, full-screen pictures and videos on a phone, agents that stay in view, New project and Sign
+  out on the web, talking on Android and with several organizations).
+
+- Cloud input-file delivery (0.28.4+, SDK 0.30.4): native-route refusals preserve `codex_cloud_input_files_require_native`; explicit `delivery.waiting` returns immediately with its reason and message, and is never reported as delivered.
+
+- Settled reason (0.28.4+, SDK 0.30.4): preserve optional `settled_reason` on conversations and agents: `computer_suspended` identifies a computer that froze an active turn; `computer_failed` identifies a failed computer. Absent/null does not establish completion.
+
+- Orchestrator usage waits (0.28.4+, SDK 0.30.4): orchestrator waits preserve optional input `waiting.reason` / `waiting.until` and orchestrator `waiting.until`; queued state and queue position stay unchanged. Message-only waits from older APIs remain compatible.
+
+- Credential imports (0.28.4+): queue bulk credential imports instead of opening every local source and upload together. Every selected source is processed, and an individual failure does not stop the others.
+
 - The Shardflux app 0.9.4 (0.28.3+): `shard` installs and updates `@shardflux/desktop-darwin-arm64` / `-x64` and
   `@shardflux/desktop-linux-x64` / `-arm64` 0.9.4 (files with a ⌘2 task, ⌘2 Credentials and Set up from this Mac,
   talking in Safari, new answers stay visible, device request outcomes).

package/README.md

@@ -1,5 +1,7 @@
 # @shardflux/cli: `shard`
 
+Queued messages retain their computer and native session when a pending upgrade choice is cleared or changed.
+
 Use `shard --help` or `shard <command> --help` to explore commands before signing in.
 
 For error codes, retry timing, and plan recovery, see the [error reference](https://docs.shardflux.dev/reference/errors).
@@ -1724,6 +1726,8 @@ shard c delete conv_k3m5q7s2u4w6y3b5d7f2h4j6ln --yes
 
 ### Your orchestrator (0.28.0+)
 
+A queued input (0.28.4+) can carry `waiting.message`: the platform explains what it waits for, including a known usage-reset time. Keep that line alongside its queue position while the input remains queued.
+
 `shard orchestrator say` passes your words to the API as one input, without cutting the final instruction.
 
 Your orchestrator is your own agent on top of every project, on its own Shardflux computer and the same on every
@@ -2130,4 +2134,30 @@ Scoped vault imports (0.28.3+) use `shard secrets import NAME --from hsec --scop
 
 ## Credential setup (0.28.3+)
 
+Every selected source is processed, and an unavailable source does not stop other credentials from being imported.
+
 Run `shard credentials setup --from-this-computer --if-needed` after machine setup to bring your existing credentials along. Machine credentials are available to all your agents; project `.env` credentials stay local and override machine values by name. Values transfer directly from the local source into the write-only secret store and private credential files. The command prints names and delivery progress. Use `--plan` for an optional review, then `--apply PLAN_ID`. If a requested credential is missing everywhere, your agent asks once through the secure credential field.
+
+## Conversation delivery waits (0.28.4+)
+
+`shard conversations send --wait` prints the server’s explicit delivery-wait message; JSON retains `delivery.waiting.reason` and `message`. Route file-bearing delegated workers through native threads. Reason `codex_cloud_input_files_require_native` identifies a Cloud route that needs a native thread before the message is accepted.
+
+### Dismissed orchestrator inputs
+
+Dismiss an orchestrator input before it starts to keep it from running. Restoring that queued input puts it back in line. Dismissing an input that already started leaves its existing work running.
+
+### Home computer updates
+
+Updating a home conversation’s computer selects the organization’s current saved machine, including after a machine rollback. Repository conversations keep their project’s saved environment.
+
+### Recipient file support (0.28.4+)
+
+Run `shard orchestrator capabilities --json` to read `{capabilities: {input_files}}` for your recipient without creating or waking a computer.
+
+A conversation moves from a saved turn. A running conversation finishes its turn before moving; a new turn continues on its retained computer when an idle move has no checkpoint.
+
+Available computer updates report the same current saved machine or project environment that an update applies, including a saved version selected by rollback.
+
+Paged History (0.28.4+): Read older and dismissed orchestrator answers with `shard orchestrator history`; `--cursor`, `--limit`, and `--organization` select a read-only page. JSON returns `inputs` and `next_cursor`.
+
+Pending native conversation messages retain their original sequence until the harness acknowledges delivery, including after the computer pauses or the API restarts.

package/dist/args.d.ts

@@ -1,4 +1,4 @@
-export declare const CLI_VERSION = "0.28.3";
+export declare const CLI_VERSION = "0.28.4";
 export interface OptionSpec {
     type: 'string' | 'boolean';
     short?: string;

package/dist/args.js

@@ -15,7 +15,7 @@ import { BOARD_COMMANDS } from "./board-args.js";
 import { ORCHESTRATOR_COMMANDS } from "./orchestrator-args.js";
 import { UsageError } from "./errors.js";
 import { DEFAULT_CHOICE, MODEL_CHOICES } from "./agent-models.js";
-export const CLI_VERSION = '0.28.3';
+export const CLI_VERSION = '0.28.4';
 export const GLOBAL_OPTIONS = {
     'api-url': { type: 'string', value: '<url>', description: 'API base URL (default $SHARDFLUX_API_URL, else https://api.shardflux.dev).' },
     json: { type: 'boolean', description: 'Print machine-readable JSON on stdout (errors as JSON on stderr).' },

package/dist/conversation-commands.js

@@ -87,6 +87,8 @@ const sentLines = (r) => `${r.restored ? 'Restored\n' : ''}${(r.files ?? []).map
 export const SEND_WAIT_MS = 60_000;
 /** What happened to a sent message, as `conversations send --wait` prints it (0.27.0+). */
 export function deliveryLine(d) {
+    if (d.waiting)
+        return d.waiting.message;
     if (d.state === 'pending')
         return 'Not delivered yet.';
     if (d.state === 'uncertain')

package/dist/credential-setup.d.ts

@@ -1,13 +1,12 @@
-import type { CredentialSetup, CredentialSetupsApi, SecretsApi, NeedsYouApi } from '@shardflux/sdk';
+import type { CredentialSetup, CredentialSetupsApi } from '@shardflux/sdk';
 import type { Ctx, Handler } from './commands.js';
 import type { CredentialDiscoveryOptions } from './credential-sources.js';
-interface SetupClient {
-    credentialSetups: CredentialSetupsApi;
-    secrets: SecretsApi;
-    needsYou: NeedsYouApi;
-}
+type TransferContext = Pick<Ctx, 'json' | 'io' | 'signal' | 'addWriteOnlyValue'>;
+type TransferClient = {
+    credentialSetups: Pick<CredentialSetupsApi, 'storeValue' | 'sourceResult' | 'get'>;
+};
 /** Onboarding opts in explicitly. The restricted machine agent never reads the source values. */
 export declare function credentialSetupAfterMachine(ctx: Ctx): Promise<void>;
-export declare function transferCredentialSetup(ctx: Ctx, cloud: SetupClient, plan: CredentialSetup, options: CredentialDiscoveryOptions): Promise<CredentialSetup>;
+export declare function transferCredentialSetup(ctx: TransferContext, cloud: TransferClient, plan: CredentialSetup, options: CredentialDiscoveryOptions): Promise<CredentialSetup>;
 export declare const CREDENTIAL_SETUP_HANDLERS: Record<string, Handler>;
 export {};

package/dist/credential-setup.js

@@ -26,7 +26,8 @@ export async function transferCredentialSetup(ctx, cloud, plan, options) {
         return plan;
     if (plan.state === 'denied' || plan.state === 'completed')
         return plan;
-    const jobs = plan.items.filter(i => i.state === 'pending' && i.selected_scope !== null).map(async (item) => {
+    const items = plan.items.filter(i => i.state === 'pending' && i.selected_scope !== null);
+    const transfer = async (item) => {
         try {
             const { project_id: sourceProject, ...descriptor } = item;
             const candidate = { ...descriptor, ...(sourceProject ? { project_id: sourceProject } : {}), preferred: true };
@@ -47,8 +48,18 @@ export async function transferCredentialSetup(ctx, cloud, plan, options) {
             }
             catch { /* Read authoritative status below; a lost write response may already have stored it. */ }
         }
-    });
-    await Promise.allSettled(jobs);
+    };
+    // Queue every approved source, while opening only a few vault readers/uploads together.
+    // Read the value inside the worker so queued credentials remain in their original source.
+    let next = 0;
+    await Promise.all(Array.from({ length: Math.min(4, items.length) }, async () => {
+        for (;;) {
+            const item = items[next++];
+            if (!item)
+                return;
+            await transfer(item);
+        }
+    }));
     return cloud.credentialSetups.get(plan.id, { signal: ctx.signal });
 }
 async function picks(ctx, path) {

package/dist/device-folders.d.ts

@@ -46,6 +46,11 @@ type Starter = (ctx: Ctx, folder: string, harness: 'claude' | 'codex', brief: st
  * prompt. The brief goes in on standard input, never in a command line another user can read.
  */
 export declare const startFromFolder: Starter;
+/** How long a start from a folder may take, and how long a child asked to stop may take before it is killed. */
+export declare const startFolderLimits: {
+    timeoutMs: number;
+    killAfterMs: number;
+};
 /**
  * The conversation `shard agents new --json` started, from its whole output: one pretty-printed JSON document
  * (format.ts json), never its last line (staging 2026-10-16: the last line is `}`).

package/dist/device-folders.js

@@ -149,31 +149,55 @@ export const startFromFolder = (ctx, folder, harness, brief, fromConversationId)
             env: { ...process.env, ...ctx.io.env, SHARDFLUX_CONFIG_DIR: ctx.store.dir, SHARDFLUX_API_URL: ctx.apiUrl, CI: '1', ...(fromConversationId ? { SF_CONVERSATION_ID: fromConversationId } : {}) },
         });
         const out = [], err = [];
-        let outBytes = 0;
-        const stop = () => child.kill('SIGTERM');
-        const timer = setTimeout(stop, 300_000);
-        ctx.signal.addEventListener('abort', stop, { once: true });
+        let outBytes = 0, settled = false, kill;
+        const finish = (error, started) => {
+            if (settled)
+                return;
+            settled = true;
+            clearTimeout(timer);
+            ctx.signal.removeEventListener('abort', abort);
+            if (error)
+                reject(error);
+            else
+                resolveStart(started);
+        };
+        // A child that does not end when asked (its own start waiting on a project setup that never finishes) is killed,
+        // and the start fails now with what held it: a device request never stays `running` behind it (production
+        // 2026-10-18: a project_link sat running for over an hour, so its orchestrator input never settled).
+        const stop = () => {
+            child.kill('SIGTERM');
+            kill ??= setTimeout(() => child.kill('SIGKILL'), startFolderLimits.killAfterMs);
+            kill.unref?.();
+        };
+        const abort = () => { stop(); finish(new Error('The conversation start was cancelled.')); };
+        const timer = setTimeout(() => {
+            stop();
+            const minutes = Math.max(1, Math.round(startFolderLimits.timeoutMs / 60_000)), held = lastLine(Buffer.concat(err).toString('utf8'));
+            finish(new Error(`The conversation did not start within ${minutes} minute${minutes === 1 ? '' : 's'}${held ? `: ${held}` : '.'}`));
+        }, startFolderLimits.timeoutMs);
+        ctx.signal.addEventListener('abort', abort, { once: true });
         child.stdout.on('data', (b) => { if ((outBytes += b.length) <= 8 << 20)
             out.push(b); });
         child.stderr.on('data', (b) => { if (err.length < 64)
             err.push(b); });
-        child.once('error', error => { clearTimeout(timer); reject(error); });
+        child.once('error', error => { clearTimeout(kill); finish(error); });
         child.once('close', code => {
-            clearTimeout(timer);
-            ctx.signal.removeEventListener('abort', stop);
+            clearTimeout(kill);
             const text = Buffer.concat(out).toString('utf8');
             try {
                 if (code !== 0)
                     throw new Error(lastLine(Buffer.concat(err).toString('utf8')) || `The conversation did not start (exit ${code}).`);
-                resolveStart(startedConversation(text));
+                finish(null, startedConversation(text));
             }
             catch (error) {
-                reject(error instanceof Error ? error : new Error(String(error)));
+                finish(error instanceof Error ? error : new Error(String(error)));
             }
         });
         child.stdin.end(brief);
     });
 };
+/** How long a start from a folder may take, and how long a child asked to stop may take before it is killed. */
+export const startFolderLimits = { timeoutMs: 300_000, killAfterMs: 10_000 };
 /**
  * The conversation `shard agents new --json` started, from its whole output: one pretty-printed JSON document
  * (format.ts json), never its last line (staging 2026-10-16: the last line is `}`).

package/dist/handler-loader.js

@@ -9,7 +9,7 @@ const groups = [
     [["cli-proxy", "cli-proxy import", "cli-proxy export", "cli-proxy use", "cli-proxy forward"], async () => (await import("./cli-proxy.js")).CLI_PROXY_HANDLERS],
     [["agents computers"], async () => (await import("./thread-on-computer.js")).THREAD_HANDLERS],
     [["conversations resume", "conversations reader", "conversations list", "conversations feed", "conversations get", "conversations permissions", "conversations answer", "conversations watch", "conversations send", "conversations start", "conversations wait", "conversations land", "files pull", "conversations move", "conversations archive", "conversations unarchive", "conversations seen", "conversations delete"], async () => (await import("./conversation-commands.js")).CONVERSATION_HANDLERS],
-    [["orchestrator show", "orchestrator say", "orchestrator list", "orchestrator retry", "orchestrator dismiss", "orchestrator restore"], async () => (await import("./orchestrator-commands.js")).ORCHESTRATOR_HANDLERS],
+    [["orchestrator capabilities", "orchestrator show", "orchestrator say", "orchestrator list", "orchestrator history", "orchestrator retry", "orchestrator dismiss", "orchestrator restore"], async () => (await import("./orchestrator-commands.js")).ORCHESTRATOR_HANDLERS],
     [["board", "task add", "task show", "task edit", "task rm", "task steer", "task land", "task clear-done", "needs-you", "needs-you answer", "approvals", "approvals set", "approvals allow", "approvals remove"], async () => (await import("./board-commands.js")).BOARD_HANDLERS],
     [["conversations transcript", "conversations events"], async () => (await import("./conversation-transcript.js")).TRANSCRIPT_HANDLERS],
     [["conversations try"], async () => (await import("./conversation-local.js")).CONVERSATION_HANDLERS],

package/dist/orchestrator-args.js

@@ -3,6 +3,20 @@ const ORG = {
 };
 const WHO = 'Your orchestrator is yours: one agent on its own Shardflux computer, the same on every device. Uses your signed-in session, or SHARDFLUX_API_KEY when it is set (a project key you created: a new orchestrator is filed under its project).';
 export const ORCHESTRATOR_COMMANDS = [
+    {
+        path: ['orchestrator', 'capabilities'],
+        summary: 'Read current input file support for your recipient',
+        positionals: [], options: ORG,
+        description: 'Reads your recipient metadata without creating or waking a computer. With --json: {capabilities: {input_files}}.',
+        examples: ['shard orchestrator capabilities --json'],
+    },
+    {
+        path: ['orchestrator', 'history'],
+        summary: 'Page through every input, including old and dismissed answers',
+        positionals: [],
+        options: { cursor: { type: 'string', value: '<cursor>', description: 'The previous page’s next_cursor.' }, limit: { type: 'string', value: '<n>', description: 'Page size, 1-200 (default 100).' }, ...ORG },
+        description: 'Reads one chronological page without starting work or waking a computer. Follow next_cursor to read earlier inputs. With --json: {inputs, next_cursor}.',
+    },
     {
         path: ['orchestrator', 'show'],
         summary: 'Read an input and its device-request outcomes, failures first',

package/dist/orchestrator-commands.js

@@ -11,7 +11,7 @@ import { tmpdir } from 'node:os';
 import { join, basename } from 'node:path';
 import { inputSettled } from '@shardflux/sdk';
 import { parseDuration } from "./args.js";
-import { out, str } from "./commands.js";
+import { listLimit, out, str } from "./commands.js";
 import { EXIT, UsageError } from "./errors.js";
 import { humanBytes } from "./files-mirror.js";
 import { inScope } from "./person-scope.js";
@@ -202,6 +202,11 @@ const idOf = (id) => {
     return id;
 };
 export const ORCHESTRATOR_HANDLERS = {
+    async 'orchestrator capabilities'(ctx, values) {
+        const capabilities = await inScope(ctx, values, (client, scope) => client.orchestrator.capabilities({ ...orgOnly(scope), signal: ctx.signal }));
+        out(ctx, `input_files\t${capabilities.input_files}\n`, { capabilities });
+        return EXIT.ok;
+    },
     async 'orchestrator show'(ctx, values, [id]) {
         const detail = await inScope(ctx, values, (client, scope) => client.orchestrator.input(idOf(id), { ...orgOnly(scope), signal: ctx.signal }));
         out(ctx, [`${detail.input.id}\t${stateLabel(detail.input)}`, resultText(detail.input), ...deviceOutcomeLines(detail.device_requests)].filter(Boolean).join('\n') + '\n', detail);
@@ -283,6 +288,15 @@ export const ORCHESTRATOR_HANDLERS = {
         out(ctx, human, { inputs: page.inputs ?? [], cursor: page.cursor });
         return EXIT.ok;
     },
+    async 'orchestrator history'(ctx, values) {
+        const limit = listLimit(values, 200);
+        const page = await inScope(ctx, values, (client, scope) => client.orchestrator.history({ ...orgOnly(scope), cursor: str(values.cursor), ...(limit !== undefined ? { limit } : {}), signal: ctx.signal }));
+        const lines = page.inputs.map(inputLine);
+        if (page.nextCursor)
+            lines.push(`Next page: shard orchestrator history --cursor ${page.nextCursor}`);
+        out(ctx, lines.length ? `${lines.join('\n')}\n` : 'No input history yet.\n', { inputs: page.inputs, next_cursor: page.nextCursor });
+        return EXIT.ok;
+    },
     async 'orchestrator retry'(ctx, values, [id]) {
         const input = await inScope(ctx, values, (client, scope) => client.orchestrator.retry(idOf(id), { ...orgOnly(scope), signal: ctx.signal }));
         out(ctx, `${input.id}\t${stateLabel(input)}\n`, { input });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@shardflux/cli",
-  "version": "0.28.3",
+  "version": "0.28.4",
   "type": "module",
   "description": "shard: the Shardflux command line. Create an account, sign in, set up keys and billing, then open, run commands in, move files to, suspend, resume and fork serverless agent workspaces.",
   "license": "Apache-2.0",
@@ -53,7 +53,7 @@
     "snappyjs": "0.7.0",
     "ws": "8.22.0",
     "yaml": "2.9.1",
-    "@shardflux/sdk": "^0.30.3"
+    "@shardflux/sdk": "^0.30.4"
   },
   "devDependencies": {
     "@eslint/js": "10.0.1",
@@ -65,10 +65,10 @@
     "typescript-eslint": "8.70.1"
   },
   "optionalDependencies": {
-    "@shardflux/desktop-darwin-arm64": "0.9.4",
-    "@shardflux/desktop-darwin-x64": "0.9.4",
-    "@shardflux/desktop-linux-arm64": "0.9.4",
-    "@shardflux/desktop-linux-x64": "0.9.4"
+    "@shardflux/desktop-darwin-arm64": "0.9.5",
+    "@shardflux/desktop-darwin-x64": "0.9.5",
+    "@shardflux/desktop-linux-arm64": "0.9.5",
+    "@shardflux/desktop-linux-x64": "0.9.5"
   },
   "scripts": {
     "build": "node scripts/build.mjs",