@skrr-ai/cli 0.1.108 → 0.1.110

package/dist/commands/harnesses/prune.d.ts

@@ -0,0 +1,26 @@
+import { BaseCommand } from '../../base-command';
+/**
+ * Remove harness rows that a later registration of the same machine replaced.
+ *
+ * `harnesses forget` removes ONE row, and an agent pinned to it loses its pin.
+ * One machine had accumulated 93 rows from 15 daemons, 85 of them replaced, and
+ * `machines list` could fold them but nothing could remove them. This does, and
+ * only the ones that can be proven safe: the server decides, once, and says why
+ * it kept everything it kept.
+ *
+ * DRY RUN BY DEFAULT. `--yes` is the only thing that removes anything.
+ */
+export default class HarnessesPrune extends BaseCommand {
+    static summary: string;
+    static description: string;
+    static examples: string[];
+    static flags: {
+        yes: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+        limit: import("@oclif/core/lib/interfaces").OptionFlag<number | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        'older-than': import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        json: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+    };
+    run(): Promise<void>;
+    private render;
+    private removeTable;
+}

package/dist/commands/harnesses/prune.js

@@ -0,0 +1,172 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const core_1 = require("@oclif/core");
+const base_command_1 = require("../../base-command");
+const format_1 = require("../../lib/format");
+const harnesses_1 = require("../../lib/harnesses");
+/**
+ * Remove harness rows that a later registration of the same machine replaced.
+ *
+ * `harnesses forget` removes ONE row, and an agent pinned to it loses its pin.
+ * One machine had accumulated 93 rows from 15 daemons, 85 of them replaced, and
+ * `machines list` could fold them but nothing could remove them. This does, and
+ * only the ones that can be proven safe: the server decides, once, and says why
+ * it kept everything it kept.
+ *
+ * DRY RUN BY DEFAULT. `--yes` is the only thing that removes anything.
+ */
+class HarnessesPrune extends base_command_1.BaseCommand {
+    static summary = 'Remove harness rows that a newer registration of the same machine replaced (dry run unless --yes)';
+    static description = 'A machine registers a fresh row per provider each time its daemon identity changes (a profile, a ' +
+        'working directory, a service versus a terminal), and the old rows stay. This removes the ones that ' +
+        'are provably stale and shows every one it keeps, with the reason.\n\n' +
+        'It is a DRY RUN until you pass --yes. A row is removed only if ALL of these hold: it is yours; it is ' +
+        'a daemon you run yourself (never a hosted, dedicated or cloud machine); it is not online and has not ' +
+        'been seen within --older-than; a later row of the same provider on the same machine replaced it AND ' +
+        "that replacement is online now; and nothing depends on it - no agent (yours or anyone's) is pinned " +
+        'to it, no workspace has it lent, it is not your default, and you did not give it a name.\n\n' +
+        'An agent pinned to a replaced row keeps running only because the platform adopts the live row ' +
+        'beside it, and that adoption starts from the old row; remove the row and the pin is gone. So a ' +
+        'pinned row is KEPT, with the agents named. Move the pin (`agents attach-harness`) and run this again.\n\n' +
+        'At most --limit rows are removed per run, oldest first; the rest are counted and the next run takes ' +
+        'them. Running it again when nothing qualifies removes nothing. A daemon that is still running ' +
+        're-registers on its next connection, so removing a row never stops a machine.';
+    static examples = [
+        '<%= config.bin %> harnesses prune',
+        '<%= config.bin %> harnesses prune --yes',
+        '<%= config.bin %> harnesses prune --yes --limit 20',
+        '<%= config.bin %> harnesses prune --older-than 7d --json',
+    ];
+    static flags = {
+        yes: core_1.Flags.boolean({
+            description: 'Remove the rows listed. Without it nothing is removed.',
+            default: false,
+        }),
+        limit: core_1.Flags.integer({
+            description: 'Remove at most this many rows in one run (1-200, default 50). The rest wait for the next run.',
+            min: 1,
+            max: 200,
+        }),
+        'older-than': core_1.Flags.string({
+            description: 'Only rows unseen for at least this long: 90m, 36h or 7d (default 24h). The server never goes below its offline window.',
+        }),
+        json: core_1.Flags.boolean({ description: 'Output as JSON' }),
+    };
+    async run() {
+        this.requireAuth();
+        const { flags } = await this.parse(HarnessesPrune);
+        let minUnseenMs;
+        if (flags['older-than'] !== undefined) {
+            try {
+                minUnseenMs = (0, harnesses_1.parseHarnessPruneAge)(flags['older-than']);
+            }
+            catch (err) {
+                this.error(err.message, { exit: 2 });
+                return;
+            }
+        }
+        let result;
+        try {
+            result = await (0, harnesses_1.pruneHarnesses)({
+                dryRun: !flags.yes,
+                ...(flags.limit !== undefined ? { limit: flags.limit } : {}),
+                ...(minUnseenMs !== undefined ? { minUnseenMs } : {}),
+            });
+        }
+        catch (err) {
+            this.handleApiError(err);
+            return;
+        }
+        if (flags.json) {
+            this.printJsonResult(result);
+            return;
+        }
+        this.render(result);
+    }
+    render(result) {
+        const { dryRun } = result;
+        const removing = dryRun ? result.remove.length : result.removedCount;
+        const noun = (n) => `${n} superseded harness row${n === 1 ? '' : 's'}`;
+        if (dryRun) {
+            this.log('Dry run - nothing was removed.');
+        }
+        if (removing === 0) {
+            this.log(dryRun
+                ? 'Nothing to remove.'
+                : 'Nothing was removed - no row qualified (or each one changed while this ran).');
+        }
+        else if (dryRun) {
+            this.log('');
+            this.log(`Would remove ${noun(removing)} (oldest first)${result.remaining > 0 ? `; ${result.remaining} more qualify beyond --limit ${result.limit}` : ''}:`);
+            this.removeTable(result.remove);
+            this.log('');
+            this.log('Run again with --yes to remove them.');
+        }
+        else {
+            this.log(`Removed ${noun(removing)}:`);
+            this.removeTable(result.remove);
+            if (result.remaining > 0) {
+                this.log('');
+                this.log(`${result.remaining} more qualify beyond --limit ${result.limit}. Run it again to continue.`);
+            }
+        }
+        if (result.kept.length > 0) {
+            this.log('');
+            this.log(`Kept ${result.kept.length}${result.keptTruncated ? '+' : ''} offline row${result.kept.length === 1 ? '' : 's'}:`);
+            const rows = result.kept.map((row) => ({
+                id: (0, format_1.formatCell)(row.id),
+                provider: (0, format_1.formatCell)(row.provider),
+                daemon: (0, format_1.formatCell)(row.daemonId),
+                seen: (0, format_1.localStamp)(row.lastSeenAt),
+                why: (0, harnesses_1.harnessPruneReasonSentence)(row),
+            }));
+            (0, format_1.renderTable)(rows, [
+                { key: 'id', header: 'HARNESS ID' },
+                { key: 'provider', header: 'PROVIDER' },
+                { key: 'daemon', header: 'DAEMON ID', verbatim: true },
+                { key: 'seen', header: `LAST SEEN (${(0, format_1.localZone)()})` },
+                { key: 'why', header: 'KEPT BECAUSE' },
+            ], (line) => this.log(line));
+            if (result.keptTruncated) {
+                this.log('(The list is cut short; the totals below cover every row.)');
+            }
+            if (result.kept.some((row) => row.reason === 'pinned')) {
+                this.log('(A pinned row stays until its agents point elsewhere: `skrr agents attach-harness <harness> --agent <agent>`.)');
+            }
+        }
+        const passedOver = [];
+        const count = (key) => result.counts?.[key] ?? 0;
+        if (count('online') > 0)
+            passedOver.push(`${count('online')} online`);
+        if (count('not_personal_machine') > 0) {
+            passedOver.push(`${count('not_personal_machine')} hosted, dedicated, cloud or of unknown origin`);
+        }
+        if (count('no_machine_identity') > 0) {
+            passedOver.push(`${count('no_machine_identity')} that name no machine`);
+        }
+        if (passedOver.length > 0) {
+            this.log('');
+            this.log(`Not considered: ${passedOver.join('; ')}.`);
+        }
+        if (!result.scan.complete) {
+            this.log('');
+            this.log(`(This account has more than ${result.scan.rows} harness rows, so the plan cannot be proven complete and --yes will refuse. Use \`harnesses forget\` for individual rows.)`);
+        }
+    }
+    removeTable(rows) {
+        (0, format_1.renderTable)(rows.map((row) => ({
+            id: (0, format_1.formatCell)(row.id),
+            provider: (0, format_1.formatCell)(row.provider),
+            daemon: (0, format_1.formatCell)(row.daemonId),
+            seen: (0, format_1.localStamp)(row.lastSeenAt),
+            replacedBy: (0, format_1.formatCell)(row.supersededBy?.daemonId),
+        })), [
+            { key: 'id', header: 'HARNESS ID' },
+            { key: 'provider', header: 'PROVIDER' },
+            { key: 'daemon', header: 'DAEMON ID', verbatim: true },
+            { key: 'seen', header: `LAST SEEN (${(0, format_1.localZone)()})` },
+            { key: 'replacedBy', header: 'REPLACED BY (ONLINE)', verbatim: true },
+        ], (line) => this.log(line));
+    }
+}
+exports.default = HarnessesPrune;

package/dist/commands/login.js

@@ -11,6 +11,9 @@ const config_1 = require("../lib/config");
 const cli_id_1 = require("../lib/cli-id");
 const keychain_1 = require("../lib/keychain");
 const profile_machine_identity_guard_1 = require("../lib/profile-machine-identity-guard");
+const daemon_command_hint_1 = require("../lib/daemon-command-hint");
+const daemon_machine_identity_copy_1 = require("../lib/daemon-machine-identity-copy");
+const local_daemon_readiness_1 = require("../lib/local-daemon-readiness");
 const login_1 = require("../lib/login");
 const device_code_1 = require("../lib/device-code");
 const api_fetch_1 = require("../lib/api-fetch");
@@ -121,9 +124,7 @@ class Login extends base_command_1.BaseCommand {
     async run() {
         const { flags } = await this.parse(Login);
         if ((0, profile_machine_identity_guard_1.legacyProfileSharesDefaultMachine)()) {
-            this.error(`Profile '${(0, keychain_1.getActiveProfile)()}' was created before profiles had separate machine identities. ` +
-                "Signing in could replace the default machine's device-key pin. " +
-                'Create a new profile name and sign in there; the existing profile was not changed.', { exit: 78 });
+            this.error((0, profile_machine_identity_guard_1.describeLegacySharedProfile)((0, keychain_1.getActiveProfile)()).join('\n'), { exit: 78 });
         }
         if (flags['base-url'] && flags.server && flags['base-url'] !== flags.server) {
             this.error('--base-url and --server were both provided with different values.', { exit: 2 });
@@ -272,14 +273,37 @@ class Login extends base_command_1.BaseCommand {
                         this.log(`This machine is not set up — ${setup.detail}.`);
                     }
                 }
+                // What the daemon is, once the handoff is over: verified connected, or
+                // handed a credential it is not using. "Delivered" only means the
+                // credential was written; saying "signed in" on that, and discovering on
+                // the next line that nobody could verify it, was a login that
+                // contradicted itself (OSK-16437).
+                let verifiedLocalDaemonId;
+                let localDaemonNotReady = false;
                 if (handoff.status === 'delivered') {
-                    this.log(`The local daemon was signed in too — ${handoff.detail}.`);
+                    const reported = await (0, local_daemon_readiness_1.reportLocalDaemonAfterHandoff)({
+                        deliveredDetail: handoff.detail,
+                        bin: this.config.bin,
+                        log: (line) => this.log(line),
+                    });
+                    verifiedLocalDaemonId = reported.daemonId;
+                    localDaemonNotReady = reported.notReady;
                 }
                 else if (handoff.reason === 'platform-managed') {
                     // A Dedicated guest: its daemon is the platform's, so there is
                     // nothing to install and nothing to hand over (OSK-12296).
                     this.log("This machine's daemon is managed by the platform; there is nothing to set up here.");
                 }
+                else if (handoff.reason === 'machine-identity-skew' && handoff.skew) {
+                    // The installed daemon would register this profile on the default
+                    // profile's machine row (OSK-S-440). Nothing was minted or installed;
+                    // the CLI's own sign-in above stands. The generic "run `daemon login`"
+                    // line below would send the person to the same binary.
+                    this.log('');
+                    for (const line of (0, daemon_machine_identity_copy_1.describeDaemonMachineIdentitySkew)(handoff.skew))
+                        this.log(line);
+                    localDaemonNotReady = true;
+                }
                 else if (handoff.reason === 'foreign-root') {
                     // Not a failure and not a hint to re-login anything: the daemon is
                     // the default root's, and this is a second root (OSK-12189).
@@ -291,20 +315,35 @@ class Login extends base_command_1.BaseCommand {
                     // people to re-login a healthy daemon (OSK-12189).
                     this.log(`This login was not handed to the local daemon (${handoff.detail}). ` +
                         `The daemon keeps whatever sign-in it already had — check it with ` +
-                        `\`${this.config.bin} daemon status\`, and run \`${this.config.bin} daemon login\` ` +
+                        `\`${(0, daemon_command_hint_1.daemonCommandHint)('status', { bin: this.config.bin })}\`, and run ` +
+                        `\`${(0, daemon_command_hint_1.daemonCommandHint)('login', { bin: this.config.bin })}\` ` +
                         `only if that says it is signed out.`);
                 }
-                else if (handoff.status === 'failed') {
+                else if (handoff.status === 'failed' || handoff.reason === 'unsupported-daemon') {
+                    // `unsupported-daemon` is a skip, not a failure, and printed nothing: the
+                    // person was left believing the machine was signed in.
                     this.log(`The local daemon was not signed in (${handoff.detail}). ` +
-                        `Run \`${this.config.bin} daemon login\` to finish.`);
+                        `Run \`${(0, daemon_command_hint_1.daemonCommandHint)('login', { bin: this.config.bin })}\` to finish.`);
+                }
+                if (localDaemonNotReady) {
+                    // The daemon has been described above; asking the same question of it
+                    // again would print a second, vaguer version of the same answer.
+                    if (!(0, managed_instruction_setup_1.shouldSkipInstructionPrompt)()) {
+                        this.log(`Run \`${this.config.bin} instructions setup\` once it is connected.`);
+                    }
+                }
+                else {
+                    // Authentication above is complete. The common onboarding helper verifies
+                    // the daemon's live account/server/profile and handles failures nonfatally.
+                    // The wait for a daemon that was just handed a credential has already
+                    // happened (`confirmLocalDaemonSignedIn`), and its answer is passed on.
+                    await (0, managed_instruction_setup_1.maybeOfferManagedInstructionSetup)({
+                        trigger: 'login',
+                        log: (line) => this.log(line),
+                        ...(verifiedLocalDaemonId ? { daemonId: verifiedLocalDaemonId } : {}),
+                        waitForLocalReady: false,
+                    });
                 }
-                // Authentication above is complete. The common onboarding helper verifies
-                // the daemon's live account/server/profile and handles failures nonfatally.
-                await (0, managed_instruction_setup_1.maybeOfferManagedInstructionSetup)({
-                    trigger: 'login',
-                    log: (line) => this.log(line),
-                    waitForLocalReady: handoff.status === 'delivered',
-                });
             }
             catch (err) {
                 // Ctrl-C while waiting for device-code approval: a person's decision,

package/dist/commands/machines/list.js

@@ -1,7 +1,9 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 const core_1 = require("@oclif/core");
+const machine_uuid_1 = require("@skrr-ai/auth-core/machine-uuid");
 const base_command_1 = require("../../base-command");
+const keychain_1 = require("../../lib/keychain");
 const format_1 = require("../../lib/format");
 const machines_1 = require("../../lib/machines");
 /**
@@ -23,8 +25,10 @@ class MachinesList extends base_command_1.BaseCommand {
         // with the one live machine at the top and a wall of dead ones after it
         // (OSK-7639). A list exists so someone can pick a row.
         all: core_1.Flags.boolean({
-            description: 'Include machines that are offline, paused, stopped or terminated. Off by default — dead sandboxes ' +
-                'accumulate forever and bury the ones you can use.',
+            description: 'Include every machine, including the offline, paused, stopped or terminated hosted ones, ' +
+                'and the older harness registrations a machine keeps. Off by default — dead sandboxes and ' +
+                'replaced registrations accumulate forever and bury the ones you can use. Your own ' +
+                'computers are listed while offline either way, with when they were last seen.',
         }),
     };
     async run() {
@@ -38,9 +42,18 @@ class MachinesList extends base_command_1.BaseCommand {
             this.handleApiError(err);
         }
         const all = machines ?? [];
-        const shown = flags.all ? all : all.filter((m) => (0, machines_1.isReachableMachine)(m));
+        const reachable = flags.all ? all : all.filter((m) => (0, machines_1.isListedByDefault)(m));
+        // A machine row keeps every harness registration it ever had, so one daemon
+        // coming online made a list of four rows read as ninety-eight (OSK-16440).
+        // The default shows what still stands; `--all` shows the history.
+        const views = reachable.map((m) => (0, machines_1.machineListView)(m, {
+            all: flags.all === true,
+            hardwareMachineUuid: (0, machine_uuid_1.getHardwareMachineUuid)(),
+            activeProfile: (0, keychain_1.getActiveProfile)(),
+        }));
+        const shown = reachable;
         if (flags.json) {
-            this.log(JSON.stringify(shown, null, 2));
+            this.log(JSON.stringify(views, null, 2));
             return;
         }
         if (all.length === 0) {
@@ -51,14 +64,17 @@ class MachinesList extends base_command_1.BaseCommand {
             this.log(`No machine is reachable right now (${(0, machines_1.hiddenMachinesSummary)(all)}) — see them with --all.`);
             return;
         }
-        (0, format_1.renderTable)(shown.map((m) => ({
+        (0, format_1.renderTable)(shown.map((m, index) => ({
             // Printed in full. A hard 20-character slice with no ellipsis made
             // `machine:03548116-d36` read like a complete id and it is not — and
             // two different hosted machines rendered as byte-identical rows,
             // so the one column a list exists to be picked from could not
             // distinguish them (OSK-7621).
             id: (0, format_1.formatCell)(m.id),
-            name: (0, format_1.formatCell)(m.preferences?.name || m.name),
+            // Which row is the computer in front of you, said on the row: two machines
+            // can carry the same hostname, and "the one I am on" is what a person is
+            // usually picking (OSK-16440).
+            name: (0, format_1.formatCell)(`${m.preferences?.name || m.name}${views[index].thisComputer ? ' (this computer)' : ''}`),
             status: (0, format_1.formatCell)((0, machines_1.machineStateLabel)(m)),
             // Both numbers matter: "2/7" is a machine that is up with most of its
             // harnesses signed out, which reads nothing like "7/7". The
@@ -88,6 +104,12 @@ class MachinesList extends base_command_1.BaseCommand {
                 this.log(`  ${m.preferences?.name || m.name}: ${m.statusReason}`);
             }
         }
+        const foldedHistory = views.reduce((sum, view) => sum + (view.hiddenHarnessCount ?? 0), 0);
+        if (foldedHistory > 0) {
+            this.log('');
+            this.log(`${foldedHistory} older harness registration(s) that a newer one replaced are hidden — ` +
+                'pass --all to include them, or --json for the daemons each machine has registered.');
+        }
         if (shown.length < all.length) {
             const hidden = all.filter((m) => !shown.includes(m));
             this.log('');

package/dist/commands/projects/show.js

@@ -52,7 +52,7 @@ class ProjectsShow extends base_command_1.BaseCommand {
             ...project,
         });
         if (flags.json) {
-            this.log(JSON.stringify({ ...project, url }, null, 2));
+            this.printJsonResult({ ...project, url });
             return;
         }
         for (const line of (0, projects_1.renderProjectShow)(project)) {

package/dist/commands/revoke-daemon.js

@@ -4,6 +4,7 @@ const core_1 = require("@oclif/core");
 const base_command_1 = require("../base-command");
 const api_fetch_1 = require("../lib/api-fetch");
 const daemon_ref_1 = require("../lib/daemon-ref");
+const daemon_command_hint_1 = require("../lib/daemon-command-hint");
 /**
  * `skrr revoke-daemon <id-or-prefix>`
  *
@@ -105,7 +106,7 @@ class RevokeDaemon extends base_command_1.BaseCommand {
                 // Said now, not discovered later as a refresh failure: the sign-in this
                 // command used was brokered by that daemon and died with it.
                 this.warn(`This also signed out ${this.config.bin} on this machine: its sign-in was brokered ` +
-                    `by that daemon and was revoked with it. Run \`${this.config.bin} daemon login\` to ` +
+                    `by that daemon and was revoked with it. Run \`${(0, daemon_command_hint_1.daemonCommandHint)('login', { bin: this.config.bin })}\` to ` +
                     `re-enroll the daemon, then \`${this.config.bin} login\` to sign the CLI in again.`);
             }
             // exit 0 (default)

package/dist/commands/spaces/workflows/archive.d.ts

@@ -1,5 +1,6 @@
 import { BaseCommand } from '../../../base-command';
 export default class SpacesWorkflowsArchive extends BaseCommand {
+    static aliases: string[];
     static description: string;
     static args: {
         spaceId: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;

package/dist/commands/spaces/workflows/archive.js

@@ -5,6 +5,7 @@ const data_provider_1 = require("@skrr-ai/data-provider");
 const base_command_1 = require("../../../base-command");
 const prompt_1 = require("../../../lib/prompt");
 class SpacesWorkflowsArchive extends base_command_1.BaseCommand {
+    static aliases = ['workflows:archive'];
     static description = 'Archive a workflow while retaining immutable versions and run history';
     static args = {
         spaceId: core_1.Args.string({ required: true, ignoreStdin: true }),

package/dist/commands/spaces/workflows/artifact.d.ts

@@ -1,5 +1,6 @@
 import { BaseCommand } from '../../../base-command';
 export default class SpacesWorkflowsArtifact extends BaseCommand {
+    static aliases: string[];
     static description: string;
     static args: {
         spaceId: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;

package/dist/commands/spaces/workflows/artifact.js

@@ -5,6 +5,7 @@ const data_provider_1 = require("@skrr-ai/data-provider");
 const base_command_1 = require("../../../base-command");
 const space_output_1 = require("../../../lib/space-output");
 class SpacesWorkflowsArtifact extends base_command_1.BaseCommand {
+    static aliases = ['workflows:artifact'];
     static description = 'Read a persisted input or output artifact for a workflow node run';
     static args = {
         spaceId: core_1.Args.string({ description: 'Owning Space ID', required: true, ignoreStdin: true }),

package/dist/commands/spaces/workflows/cancel-node.d.ts

@@ -1,5 +1,6 @@
 import { BaseCommand } from '../../../base-command';
 export default class SpacesWorkflowsCancelNode extends BaseCommand {
+    static aliases: string[];
     static description: string;
     static examples: string[];
     static args: {

package/dist/commands/spaces/workflows/cancel-node.js

@@ -6,6 +6,7 @@ const base_command_1 = require("../../../base-command");
 const prompt_1 = require("../../../lib/prompt");
 const workflow_node_control_1 = require("../../../lib/workflow-node-control");
 class SpacesWorkflowsCancelNode extends base_command_1.BaseCommand {
+    static aliases = ['workflows:cancel-node'];
     static description = 'Request cancellation of one exact workflow node attempt and show the returned execution state';
     static examples = [
         '<%= config.bin %> spaces workflows run <space> <run> --json > reviewed-run.json',

package/dist/commands/spaces/workflows/cancel.d.ts

@@ -39,6 +39,7 @@ export declare function describePreservedChildren(spaceId: string, parentRunId:
     reviewedScope?: boolean;
 }): string[];
 export default class SpacesWorkflowsCancel extends BaseCommand {
+    static aliases: string[];
     static description: string;
     static args: {
         spaceId: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;

package/dist/commands/spaces/workflows/cancel.js

@@ -80,6 +80,7 @@ function describePreservedChildren(spaceId, parentRunId, children, { reviewedSco
     return lines;
 }
 class SpacesWorkflowsCancel extends base_command_1.BaseCommand {
+    static aliases = ['workflows:cancel'];
     static description = 'Cancel a workflow run and stop further graph coordination';
     static args = {
         spaceId: core_1.Args.string({ description: 'Owning Space ID', required: true, ignoreStdin: true }),
@@ -87,7 +88,7 @@ class SpacesWorkflowsCancel extends base_command_1.BaseCommand {
     };
     static flags = {
         json: core_1.Flags.boolean({
-            description: 'Output the cancelled run as JSON (cancellation.scope and the waitingFor.workflowRunId of the cancelled nodes show which child runs were left running)',
+            description: 'Output the cancelled run as JSON (cancelReceipt.outcome says whether this request stopped it or found it already cancelled; cancellation.scope and the waitingFor.workflowRunId of the cancelled nodes show which child runs were left running)',
         }),
         scope: core_1.Flags.string({
             description: 'What happens to child workflow runs this run started: preserve_children (default) leaves them running, subtree stops every descendant run too',
@@ -128,7 +129,10 @@ class SpacesWorkflowsCancel extends base_command_1.BaseCommand {
             this.log(JSON.stringify((0, space_output_1.withSpacePerspectiveUrl)(this.cliConfig.baseURL, args.spaceId, 'workflows', run), null, 2));
             return;
         }
-        this.log(`Cancelled workflow run ${run.id} (${run.status}).`);
+        // The receipt says whether THIS request stopped the run or found it stopped (and why): a
+        // repeat used to print "Cancelled" as if new, hiding a stop its deadline made earlier
+        // (OSK-15336).
+        this.log((0, data_provider_1.describeWorkflowRunCancelReceipt)(run.id, run.cancelReceipt));
         for (const line of describeCancellationProgress(args.spaceId, run))
             this.log(line);
         if ((run.cancellation?.scope ?? run.cancellationScope ?? scope) === 'subtree')

package/dist/commands/spaces/workflows/create.d.ts

@@ -3,6 +3,7 @@ import { BaseCommand } from '../../../base-command';
 /** A headless-safe first draft: valid on its own, then ready for template insertion or editing. */
 export declare function starterWorkflowGraph(): WorkflowGraph;
 export default class SpacesWorkflowsCreate extends BaseCommand {
+    static aliases: string[];
     static description: string;
     static args: {
         spaceId: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;

package/dist/commands/spaces/workflows/create.js

@@ -6,6 +6,7 @@ const data_provider_1 = require("@skrr-ai/data-provider");
 const base_command_1 = require("../../../base-command");
 const prompt_1 = require("../../../lib/prompt");
 const space_output_1 = require("../../../lib/space-output");
+const workflow_issues_1 = require("../../../lib/workflow-issues");
 /** A headless-safe first draft: valid on its own, then ready for template insertion or editing. */
 function starterWorkflowGraph() {
     return {
@@ -23,6 +24,7 @@ function starterWorkflowGraph() {
     };
 }
 class SpacesWorkflowsCreate extends base_command_1.BaseCommand {
+    static aliases = ['workflows:create'];
     static description = 'Create a workflow draft from graph or Canvas draft JSON';
     static args = { spaceId: core_1.Args.string({ required: true, ignoreStdin: true }) };
     static flags = {
@@ -94,7 +96,11 @@ class SpacesWorkflowsCreate extends base_command_1.BaseCommand {
         this.log(`Created draft ${workflow.id}: ${workflow.title}`);
         if (decorated.url)
             this.log(`URL:  ${decorated.url}`);
-        this.log(`Next: skrr spaces workflows publish ${args.spaceId} ${workflow.id}`);
+        for (const line of (0, workflow_issues_1.describeDraftIssues)(workflow.issues))
+            this.log(line);
+        this.log(workflow.issues?.some((issue) => issue.severity === 'error')
+            ? `Next: fix the draft, then skrr workflows update ${args.spaceId} ${workflow.id} --graph <file>`
+            : `Next: skrr workflows publish ${args.spaceId} ${workflow.id}`);
     }
 }
 exports.default = SpacesWorkflowsCreate;

package/dist/commands/spaces/workflows/events.d.ts

@@ -2,6 +2,7 @@ import { BaseCommand } from '../../../base-command';
 export declare function workflowEventStreamHeaders(token: string | null | undefined, env?: Record<string, string | undefined>): Record<string, string>;
 /** Follow the server's metadata-only SSE invalidation stream until Ctrl-C. */
 export default class SpacesWorkflowsEvents extends BaseCommand {
+    static aliases: string[];
     static description: string;
     static args: {
         spaceId: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;

package/dist/commands/spaces/workflows/events.js

@@ -14,6 +14,7 @@ function workflowEventStreamHeaders(token, env = process.env) {
 }
 /** Follow the server's metadata-only SSE invalidation stream until Ctrl-C. */
 class SpacesWorkflowsEvents extends base_command_1.BaseCommand {
+    static aliases = ['workflows:events'];
     static description = 'Follow durable workflow run events (Ctrl-C to stop; fetch run details for canonical state)';
     static args = {
         spaceId: core_1.Args.string({ required: true, ignoreStdin: true }),

package/dist/commands/spaces/workflows/fixtures/create.d.ts

@@ -1,5 +1,6 @@
 import { BaseCommand } from '../../../../base-command';
 export default class SpacesWorkflowsFixturesCreate extends BaseCommand {
+    static aliases: string[];
     static description: string;
     static args: {
         spaceId: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;

package/dist/commands/spaces/workflows/fixtures/create.js

@@ -6,6 +6,7 @@ const base_command_1 = require("../../../../base-command");
 const prompt_1 = require("../../../../lib/prompt");
 const space_output_1 = require("../../../../lib/space-output");
 class SpacesWorkflowsFixturesCreate extends base_command_1.BaseCommand {
+    static aliases = ['workflows:fixtures:create'];
     static description = 'Create a reusable fixture from a node output or an existing workflow run';
     static args = {
         spaceId: core_1.Args.string({ required: true, ignoreStdin: true }),

package/dist/commands/spaces/workflows/fixtures/list.d.ts

@@ -1,5 +1,6 @@
 import { BaseCommand } from '../../../../base-command';
 export default class SpacesWorkflowsFixturesList extends BaseCommand {
+    static aliases: string[];
     static description: string;
     static args: {
         spaceId: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;

package/dist/commands/spaces/workflows/fixtures/list.js

@@ -6,6 +6,7 @@ const base_command_1 = require("../../../../base-command");
 const format_1 = require("../../../../lib/format");
 const space_output_1 = require("../../../../lib/space-output");
 class SpacesWorkflowsFixturesList extends base_command_1.BaseCommand {
+    static aliases = ['workflows:fixtures:list'];
     static description = 'List reusable node-output fixtures for a workflow';
     static args = {
         spaceId: core_1.Args.string({ required: true, ignoreStdin: true }),

package/dist/commands/spaces/workflows/lifecycle-diagnostics.d.ts

@@ -1,5 +1,6 @@
 import { BaseCommand } from '../../../base-command';
 export default class SpacesWorkflowsLifecycleDiagnostics extends BaseCommand {
+    static aliases: string[];
     static description: string;
     static args: {
         spaceId: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;

package/dist/commands/spaces/workflows/lifecycle-diagnostics.js

@@ -4,6 +4,7 @@ const core_1 = require("@oclif/core");
 const data_provider_1 = require("@skrr-ai/data-provider");
 const base_command_1 = require("../../../base-command");
 class SpacesWorkflowsLifecycleDiagnostics extends base_command_1.BaseCommand {
+    static aliases = ['workflows:lifecycle-diagnostics'];
     static description = 'Bounded lifecycle operational counters for a Space — pending effect age, repairs, transition conflicts, orphan stages';
     static args = {
         spaceId: core_1.Args.string({ required: true, ignoreStdin: true, description: 'Owning Space ID' }),

package/dist/commands/spaces/workflows/list.d.ts

@@ -1,5 +1,6 @@
 import { BaseCommand } from '../../../base-command';
 export default class SpacesWorkflowsList extends BaseCommand {
+    static aliases: string[];
     static description: string;
     static args: {
         spaceId: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;

package/dist/commands/spaces/workflows/list.js

@@ -6,6 +6,7 @@ const base_command_1 = require("../../../base-command");
 const format_1 = require("../../../lib/format");
 const space_output_1 = require("../../../lib/space-output");
 class SpacesWorkflowsList extends base_command_1.BaseCommand {
+    static aliases = ['workflows:list'];
     static description = 'List durable workflow definitions in a space';
     static args = { spaceId: core_1.Args.string({ required: true, ignoreStdin: true }) };
     static flags = { json: core_1.Flags.boolean({ description: 'Output JSON' }) };