@skrr-ai/cli 0.1.113 → 0.1.115

package/bin/update-npm-runner.cjs

@@ -3,9 +3,11 @@
 // Park before npm executes. The parent publishes this process group's durable
 // mutation ownership before authorizing execution, closing its crash window.
 const fs = require('node:fs');
+const path = require('node:path');
 const { spawn } = require('node:child_process');
 const requestFile = process.argv[2];
 const request = JSON.parse(fs.readFileSync(requestFile, 'utf8'));
+if (request.npmPrefix != null && !path.isAbsolute(request.npmPrefix)) throw new Error('Invalid npm prefix');
 const deadline = Date.now() + 30000;
 const timer = setInterval(() => {
   let authorization;
@@ -16,7 +18,8 @@ const timer = setInterval(() => {
   }
   if (authorization?.pid === process.pid && authorization?.token === request.token) {
     clearInterval(timer);
-    const child = spawn(request.npmPath, ['install', '-g', `@skrr-ai/cli@${request.version}`], {
+    const prefixArgs = request.npmPrefix ? ['--prefix', request.npmPrefix] : [];
+    const child = spawn(request.npmPath, ['install', '-g', ...prefixArgs, `@skrr-ai/cli@${request.version}`], {
       stdio: 'inherit',
       shell: process.platform === 'win32',
     });

package/bin/update-worker.cjs

@@ -41,7 +41,8 @@ async function run(directory, options = {}) {
     if (
       !/^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?(?:\+[0-9A-Za-z.-]+)?$/.test(attempt.version) ||
       !path.isAbsolute(attempt.packageRoot) ||
-      !path.isAbsolute(attempt.npmPath)
+      !path.isAbsolute(attempt.npmPath) ||
+      (attempt.npmPrefix != null && !path.isAbsolute(attempt.npmPrefix))
     ) {
       throw new Error('Invalid persisted CLI update request');
     }
@@ -86,7 +87,8 @@ async function run(directory, options = {}) {
       });
       return;
     }
-    const rootResult = await execFileAsync(attempt.npmPath, ['root', '-g'], {
+    const prefixArgs = attempt.npmPrefix ? ['--prefix', attempt.npmPrefix] : [];
+    const rootResult = await execFileAsync(attempt.npmPath, ['root', '-g', ...prefixArgs], {
       timeout: 1500,
       maxBuffer: 64 * 1024,
       shell: process.platform === 'win32',
@@ -117,7 +119,8 @@ async function run(directory, options = {}) {
     await new Promise((resolve, reject) => {
       const requestFile = path.join(directory, `runner-${crypto.randomUUID()}.json`);
       const token = crypto.randomUUID();
-      runtime.writeJson(requestFile, { token, npmPath: attempt.npmPath, version: attempt.version });
+      runtime.writeJson(requestFile, { token, npmPath: attempt.npmPath, version: attempt.version,
+        ...(attempt.npmPrefix ? { npmPrefix: attempt.npmPrefix } : {}) });
       const child = spawn(
         process.execPath,
         [path.join(__dirname, 'update-npm-runner.cjs'), requestFile],

package/dist/commands/agents/chat.js

@@ -105,10 +105,14 @@ function reconcileTerminalFromMessages(messages, responseMessageId) {
         [...messages].reverse().find((m) => m && m.isCreatedByUser === false);
     if (!row)
         return null;
+    const projection = row.metadata && typeof row.metadata === 'object'
+        ? row.metadata.publicProjection : undefined;
+    const publicProjection = (0, data_provider_1.isDecodedPublicProjection)(projection) ? { publicProjection: projection } : {};
     const failure = (0, data_provider_1.resolveMessageFailure)(row);
     if (failure) {
         return {
             status: 'failed',
+            ...publicProjection,
             ...(failure.answer ? { text: failure.answer } : {}),
             // The reason exists on the row; it simply never reached the surface. Say
             // it, rather than the transport error that masked it (OSK-7595).
@@ -123,7 +127,7 @@ function reconcileTerminalFromMessages(messages, responseMessageId) {
     // it set is a turn that ended having produced nothing, which is still
     // terminal and still better reported than waited on.
     if (row.unfinished === false)
-        return { status: 'completed', text };
+        return { status: 'completed', text, ...publicProjection };
     return null;
 }
 function agenticRecord(row) {
@@ -161,12 +165,16 @@ function handoverStateFromMessages(messages, responseMessageId) {
         (!responseMessageId && [...messages].reverse().find((m) => m && m.isCreatedByUser === false));
     if (!row)
         return { state: 'pending' };
+    const projection = row.metadata && typeof row.metadata === 'object'
+        ? row.metadata.publicProjection : undefined;
+    const publicProjection = (0, data_provider_1.isDecodedPublicProjection)(projection) ? { publicProjection: projection } : {};
     const failure = (0, data_provider_1.resolveMessageFailure)(row);
     if (failure) {
         if (agenticErrorSubtype(row) === agentic_stream_1.DAEMON_HANDOVER_REASON)
             return { state: 'pending' };
         return {
             state: 'failed',
+            ...publicProjection,
             error: failure.reason ?? 'The run failed. No reason was recorded on the message.',
             ...(failure.answer ? { text: failure.answer } : {}),
         };
@@ -178,6 +186,7 @@ function handoverStateFromMessages(messages, responseMessageId) {
     const repairedAt = typeof repair.repairedAt === 'string' ? repair.repairedAt : undefined;
     return {
         state: 'repaired',
+        ...publicProjection,
         text: typeof row.text === 'string' ? row.text : '',
         ...(repairedAt ? { repairedAt } : {}),
     };

package/dist/commands/computer-use/audio.d.ts

@@ -0,0 +1,6 @@
+import { ComputerUseCommand } from '../../lib/computer-use';
+export default class ComputerUseAudio extends ComputerUseCommand {
+    static summary: string;
+    static description: string;
+    protected action: string;
+}

package/dist/commands/computer-use/audio.js

@@ -0,0 +1,9 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const computer_use_1 = require("../../lib/computer-use");
+class ComputerUseAudio extends computer_use_1.ComputerUseCommand {
+    static summary = 'Configure optional computer audio with status, enable or disable';
+    static description = 'Flags are forwarded unchanged. Run `skrrd computer-use audio --help` for options; --profile selects the local daemon profile and --json emits one stable document.';
+    action = 'audio';
+}
+exports.default = ComputerUseAudio;

package/dist/commands/computer-use/browser.d.ts

@@ -0,0 +1,7 @@
+import { ComputerUseCommand } from '../../lib/computer-use';
+export default class ComputerUseBrowser extends ComputerUseCommand {
+    static summary: string;
+    static description: string;
+    static examples: string[];
+    protected action: string;
+}

package/dist/commands/computer-use/browser.js

@@ -0,0 +1,16 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const computer_use_1 = require("../../lib/computer-use");
+class ComputerUseBrowser extends computer_use_1.ComputerUseCommand {
+    static summary = 'Configure original Chrome, inspect its extension, and manage its native host';
+    static description = 'Actions: status, enable, disable, setup, update, verify. Setup uses the original LCU installer: private relay files belong to the selected skrr profile, while native-host registration is shared by the desktop account and supported Chromium browsers. Verify initializes the original MCP schema without browser actions. Flags are forwarded unchanged; run `skrrd computer-use browser --help` for all options.';
+    static examples = [
+        '<%= config.bin %> computer-use browser enable',
+        '<%= config.bin %> computer-use browser setup --profile work',
+        '<%= config.bin %> computer-use browser status --profile work --json',
+        '<%= config.bin %> computer-use browser update --profile work',
+        '<%= config.bin %> computer-use browser verify --profile work --json',
+    ];
+    action = 'browser';
+}
+exports.default = ComputerUseBrowser;

package/dist/commands/computer-use/disable.d.ts

@@ -0,0 +1,6 @@
+import { ComputerUseCommand } from '../../lib/computer-use';
+export default class ComputerUseDisable extends ComputerUseCommand {
+    static summary: string;
+    static description: string;
+    protected action: string;
+}

package/dist/commands/computer-use/disable.js

@@ -0,0 +1,9 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const computer_use_1 = require("../../lib/computer-use");
+class ComputerUseDisable extends computer_use_1.ComputerUseCommand {
+    static summary = 'Revoke Computer Use consent and stop the active controller';
+    static description = 'Flags are forwarded unchanged. Run `skrrd computer-use disable --help` for options; --profile selects the local daemon profile and --json emits one stable document.';
+    action = 'disable';
+}
+exports.default = ComputerUseDisable;

package/dist/commands/computer-use/enable.d.ts

@@ -0,0 +1,6 @@
+import { ComputerUseCommand } from '../../lib/computer-use';
+export default class ComputerUseEnable extends ComputerUseCommand {
+    static summary: string;
+    static description: string;
+    protected action: string;
+}

package/dist/commands/computer-use/enable.js

@@ -0,0 +1,9 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const computer_use_1 = require("../../lib/computer-use");
+class ComputerUseEnable extends computer_use_1.ComputerUseCommand {
+    static summary = 'Enable Computer Use locally; --cloud-agents separately grants cloud Agent access';
+    static description = 'Flags are forwarded unchanged. Run `skrrd computer-use enable --help` for options; --profile selects the local daemon profile and --json emits one stable document.';
+    action = 'enable';
+}
+exports.default = ComputerUseEnable;

package/dist/commands/computer-use/index.d.ts

@@ -0,0 +1,6 @@
+import { ComputerUseCommand } from '../../lib/computer-use';
+export default class ComputerUse extends ComputerUseCommand {
+    static summary: string;
+    static description: string;
+    protected action: undefined;
+}

package/dist/commands/computer-use/index.js

@@ -0,0 +1,9 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const computer_use_1 = require("../../lib/computer-use");
+class ComputerUse extends computer_use_1.ComputerUseCommand {
+    static summary = 'Install and control optional Computer Use on this machine';
+    static description = 'Computer Use uses your installed official app runtime. Run `skrr computer-use status`; use `skrrd computer-use --help` for all options, including --profile and --json.';
+    action = undefined;
+}
+exports.default = ComputerUse;

package/dist/commands/computer-use/install.d.ts

@@ -0,0 +1,6 @@
+import { ComputerUseCommand } from '../../lib/computer-use';
+export default class ComputerUseInstall extends ComputerUseCommand {
+    static summary: string;
+    static description: string;
+    protected action: string;
+}

package/dist/commands/computer-use/install.js

@@ -0,0 +1,9 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const computer_use_1 = require("../../lib/computer-use");
+class ComputerUseInstall extends computer_use_1.ComputerUseCommand {
+    static summary = 'Install a pinned thin release from an explicit local archive and trusted SHA-256';
+    static description = 'Flags are forwarded unchanged. Run `skrrd computer-use install --help` for options; --profile selects the local daemon profile and --json emits one stable document.';
+    action = 'install';
+}
+exports.default = ComputerUseInstall;

package/dist/commands/computer-use/recover.d.ts

@@ -0,0 +1,6 @@
+import { ComputerUseCommand } from '../../lib/computer-use';
+export default class ComputerUseRecover extends ComputerUseCommand {
+    static summary: string;
+    static description: string;
+    protected action: string;
+}

package/dist/commands/computer-use/recover.js

@@ -0,0 +1,9 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const computer_use_1 = require("../../lib/computer-use");
+class ComputerUseRecover extends computer_use_1.ComputerUseCommand {
+    static summary = 'Retry runtime recovery only after confirmed execution cleanup';
+    static description = 'Flags are forwarded unchanged. Run `skrrd computer-use recover --help` for options; --profile selects the local daemon profile and --json emits one stable document.';
+    action = 'recover';
+}
+exports.default = ComputerUseRecover;

package/dist/commands/computer-use/status.d.ts

@@ -0,0 +1,6 @@
+import { ComputerUseCommand } from '../../lib/computer-use';
+export default class ComputerUseStatus extends ComputerUseCommand {
+    static summary: string;
+    static description: string;
+    protected action: string;
+}

package/dist/commands/computer-use/status.js

@@ -0,0 +1,9 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const computer_use_1 = require("../../lib/computer-use");
+class ComputerUseStatus extends computer_use_1.ComputerUseCommand {
+    static summary = 'Show configuration and live Computer Use availability without desktop interaction';
+    static description = 'Flags are forwarded unchanged. Run `skrrd computer-use status --help` for options; --profile selects the local daemon profile and --json emits one stable document.';
+    action = 'status';
+}
+exports.default = ComputerUseStatus;

package/dist/commands/computer-use/stop.d.ts

@@ -0,0 +1,6 @@
+import { ComputerUseCommand } from '../../lib/computer-use';
+export default class ComputerUseStop extends ComputerUseCommand {
+    static summary: string;
+    static description: string;
+    protected action: string;
+}

package/dist/commands/computer-use/stop.js

@@ -0,0 +1,9 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const computer_use_1 = require("../../lib/computer-use");
+class ComputerUseStop extends computer_use_1.ComputerUseCommand {
+    static summary = 'Stop the running Computer Use controller and confirm cleanup';
+    static description = 'Flags are forwarded unchanged. Run `skrrd computer-use stop --help` for options; --profile selects the local daemon profile and --json emits one stable document.';
+    action = 'stop';
+}
+exports.default = ComputerUseStop;

package/dist/commands/daemon/login.js

@@ -32,7 +32,7 @@ const daemon_machine_identity_copy_1 = require("../../lib/daemon-machine-identit
 class DaemonLogin extends core_1.Command {
     static aliases = ['daemons:login'];
     static summary = 'Authenticate the skrr background service on this computer (separate from `skrr login`)';
-    static description = (0, exec_runtime_binary_1.forwardedFlagsNote)('login', { binds: true });
+    static description = (0, exec_runtime_binary_1.forwardedFlagsNote)('login', { binds: true }) + '\nUse --computer-use to request explicit Computer Use permission in browser consent. This does not enable the runtime or grant machine access.';
     static strict = false; // forward all args verbatim — see run()
     async run() {
         // `this.argv`, NOT `this.parse()` — `strict = false` relaxes POSITIONAL

package/dist/commands/followups/plans/cancel.js

@@ -1,11 +1,12 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+const lookbackPlans_1 = require("../../../lib/lookbackPlans");
 const core_1 = require("@oclif/core");
 const base_command_1 = require("../../../base-command");
-const lookbackPlans_1 = require("../../../lib/lookbackPlans");
+const lookbackPlans_2 = require("../../../lib/lookbackPlans");
 class LookbackPlansCancel extends base_command_1.BaseCommand {
     static description = 'Cancel the remaining lookbacks of a plan';
-    static args = { id: lookbackPlans_1.lookbackPlanIdArg };
+    static args = { id: lookbackPlans_2.lookbackPlanIdArg };
     static flags = {
         revision: core_1.Flags.integer({ description: 'Expected current revision; stale edits are refused', min: 1 }),
         reason: core_1.Flags.string({ description: 'Why the remaining lookbacks are no longer needed' }),
@@ -15,10 +16,16 @@ class LookbackPlansCancel extends base_command_1.BaseCommand {
         this.requireAuth();
         const { args, flags } = await this.parse(LookbackPlansCancel);
         try {
-            const result = await lookbackPlans_1.lookbackPlansApi.cancel(args.id, { expectedRevision: flags.revision, reason: flags.reason });
+            const result = await lookbackPlans_2.lookbackPlansApi.cancel(args.id, { expectedRevision: flags.revision, reason: flags.reason });
             this.log(flags.json ? JSON.stringify(result, null, 2) : `Lookback plan ${result.plan.id}: ${result.plan.state} (r${result.plan.revision}).`);
         }
         catch (err) {
+            if ((0, lookbackPlans_1.isLookbackMutationOutcomeUnknown)(err)) {
+                const readback = await lookbackPlans_2.lookbackPlansApi.show(args.id).catch(() => null);
+                this.failWithCliError((0, lookbackPlans_1.lookbackUnconfirmedFailure)({ operation: 'cancel', planId: args.id,
+                    ...(readback?.plan ? { currentPlan: readback.plan } : {}),
+                    readback: readback?.plan ? 'observed' : 'unavailable' }));
+            }
             this.handleApiError(err);
         }
     }

package/dist/commands/followups/plans/capacity.d.ts

@@ -0,0 +1,9 @@
+import { BaseCommand } from '../../../base-command';
+export default class LookbackPlansCapacity extends BaseCommand {
+    static description: string;
+    static flags: {
+        agent: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        json: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+    };
+    run(): Promise<void>;
+}

package/dist/commands/followups/plans/capacity.js

@@ -0,0 +1,42 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const core_1 = require("@oclif/core");
+const base_command_1 = require("../../../base-command");
+const lookbackPlans_1 = require("../../../lib/lookbackPlans");
+const followups_1 = require("../../../lib/followups");
+class LookbackPlansCapacity extends base_command_1.BaseCommand {
+    static description = 'Read one agent’s actual UTC-day lookback plan allowance; reserves nothing';
+    static flags = {
+        agent: core_1.Flags.string({ description: 'Agent ID (default: bound session agent)' }),
+        json: core_1.Flags.boolean({ description: 'Output authoritative capacity facts as JSON' }),
+    };
+    async run() {
+        this.requireAuth();
+        const { flags } = await this.parse(LookbackPlansCapacity);
+        let agentId;
+        try {
+            agentId = (0, followups_1.resolveFollowUpAgent)(flags.agent).id;
+        }
+        catch (err) {
+            this.failWithCliError({ message: err instanceof Error ? err.message : String(err),
+                code: 'AGENT_CONTEXT_AMBIGUOUS', exit: 2, retryable: false });
+            return;
+        }
+        try {
+            const result = await lookbackPlans_1.lookbackPlansApi.capacity({ agentId });
+            if (flags.json) {
+                this.log(JSON.stringify(result, null, 2));
+                return;
+            }
+            this.log(`${result.scope.agentId}: ${result.remaining}/${result.limit} plans remaining (${result.used} admitted this UTC day).`);
+            this.log(result.admission === 'policy_blocked'
+                ? 'New plans are blocked by a zero agent allowance. The daily reset does not change that policy.'
+                : `UTC-day reset: ${new Date(result.period.resetAt).toLocaleString()} (${result.period.resetAt}). Recheck capacity then.`);
+            this.log(`Observed: ${result.observedAt}. This read reserves nothing; source, execution and delivery are checked separately.`);
+        }
+        catch (err) {
+            this.handleApiError(err);
+        }
+    }
+}
+exports.default = LookbackPlansCapacity;

package/dist/commands/followups/plans/create.js

@@ -30,6 +30,9 @@ class LookbackPlansCreate extends base_command_1.BaseCommand {
             this.log(flags.json ? JSON.stringify(result, null, 2) : (0, lookbackPlans_1.lookbackArmingLine)(result));
         }
         catch (err) {
+            if ((0, lookbackPlans_1.isLookbackMutationOutcomeUnknown)(err)) {
+                this.failWithCliError((0, lookbackPlans_1.lookbackUnconfirmedFailure)({ operation: 'create', source: body.plan.source, agentId: body.agentId }));
+            }
             this.handleApiError(err);
         }
     }

package/dist/commands/followups/plans/revise.js

@@ -1,15 +1,16 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+const lookbackPlans_1 = require("../../../lib/lookbackPlans");
 const core_1 = require("@oclif/core");
 const base_command_1 = require("../../../base-command");
 const prompt_1 = require("../../../lib/prompt");
-const lookbackPlans_1 = require("../../../lib/lookbackPlans");
+const lookbackPlans_2 = require("../../../lib/lookbackPlans");
 const lookbackPlanHelp_1 = require("../../../lib/lookbackPlanHelp");
 class LookbackPlansRevise extends base_command_1.BaseCommand {
     static description = 'Revise pending lookbacks using the original source and step IDs\n\n' + lookbackPlanHelp_1.LOOKBACK_PLAN_INPUT_HELP +
         '\n\nRevise accepts the plan itself, not a create envelope. Use the current --revision from show; a stale revision returns LOOKBACK_CONFLICT (409).';
     static examples = ['<%= config.bin %> followups plans revise PLAN_ID --revision 1 --from-json revised-plan.json --json'];
-    static args = { id: lookbackPlans_1.lookbackPlanIdArg };
+    static args = { id: lookbackPlans_2.lookbackPlanIdArg };
     static flags = {
         revision: core_1.Flags.integer({ description: 'Expected current revision; stale edits are refused', min: 1, required: true }),
         'from-json': core_1.Flags.string({ description: 'Full PlanInput JSON file; - reads stdin', required: true }),
@@ -20,17 +21,23 @@ class LookbackPlansRevise extends base_command_1.BaseCommand {
         const { args, flags } = await this.parse(LookbackPlansRevise);
         let plan;
         try {
-            plan = (0, lookbackPlans_1.lookbackInput)(await (0, prompt_1.readJsonBody)(flags['from-json']), true);
+            plan = (0, lookbackPlans_2.lookbackInput)(await (0, prompt_1.readJsonBody)(flags['from-json']), true);
         }
         catch (err) {
-            this.failWithCliError((0, lookbackPlans_1.lookbackInputFailure)(err));
+            this.failWithCliError((0, lookbackPlans_2.lookbackInputFailure)(err));
             return;
         }
         try {
-            const result = await lookbackPlans_1.lookbackPlansApi.revise(args.id, { expectedRevision: flags.revision, plan });
-            this.log(flags.json ? JSON.stringify(result, null, 2) : (0, lookbackPlans_1.lookbackArmingLine)(result));
+            const result = await lookbackPlans_2.lookbackPlansApi.revise(args.id, { expectedRevision: flags.revision, plan });
+            this.log(flags.json ? JSON.stringify(result, null, 2) : (0, lookbackPlans_2.lookbackArmingLine)(result));
         }
         catch (err) {
+            if ((0, lookbackPlans_1.isLookbackMutationOutcomeUnknown)(err)) {
+                const readback = await lookbackPlans_2.lookbackPlansApi.show(args.id).catch(() => null);
+                this.failWithCliError((0, lookbackPlans_1.lookbackUnconfirmedFailure)({ operation: 'revise', planId: args.id,
+                    ...(readback?.plan ? { currentPlan: readback.plan } : {}),
+                    readback: readback?.plan ? 'observed' : 'unavailable' }));
+            }
             this.handleApiError(err);
         }
     }

package/dist/commands/followups/remind.js

@@ -12,7 +12,7 @@ const agent_resolver_1 = require("../../lib/agent-resolver");
  * needs an agent context the passive form does not.
  */
 class FollowupsRemind extends base_command_1.BaseCommand {
-    static description = 'Remind the owner at a time — the reminder follow-up';
+    static description = 'Remind the owner at a time. By default, deliver the literal content through owner notifications without an agent turn. Use --active for agent-written delivery.';
     static examples = [
         '<%= config.bin %> followups remind --subject task:OSK-42 --content "pick the deploy up" --in 2h',
         '<%= config.bin %> followups remind --subject conversation:conv_9 --content "ask how the move went" --at 2026-09-20T09:00:00Z --active --agent agent_1',
@@ -34,15 +34,23 @@ class FollowupsRemind extends base_command_1.BaseCommand {
             description: 'Wake the agent to word the reminder (needs an agent context)',
             default: false,
         }),
-        agent: core_1.Flags.string({ description: 'Agent ID (default: bound session agent)' }),
-        endpoint: core_1.Flags.string({ description: 'Delivery endpoint id (EndpointRegistry)' }),
-        'endpoint-target': core_1.Flags.string({ description: 'Channel target for channel endpoints' }),
-        pin: core_1.Flags.string({ description: 'Conversation id the reminder was authored in' }),
+        agent: core_1.Flags.string({ description: 'Agent ID (default: bound session agent). Attribution only unless --active is set' }),
+        endpoint: core_1.Flags.string({ description: 'Active only: delivery endpoint id; requires --active' }),
+        'endpoint-target': core_1.Flags.string({ description: 'Active only: channel target for a channel endpoint; requires --active' }),
+        pin: core_1.Flags.string({ description: 'Active only: deliver into this conversation; requires --active. Do not combine with --endpoint other than pinned' }),
         json: core_1.Flags.boolean({ description: 'Output as JSON' }),
     };
     async run() {
         this.requireAuth();
         const { flags } = await this.parse(FollowupsRemind);
+        if (!flags.active && (flags.endpoint || flags['endpoint-target'] || flags.pin)) {
+            this.failWithCliError({
+                message: '--endpoint, --endpoint-target and --pin require --active. For a passive reminder, remove these flags; the literal content is delivered through owner notifications without an agent turn. --agent alone records attribution.',
+                code: 'FOLLOWUP_INVALID_ENDPOINT',
+                exit: 2,
+                retryable: false,
+            });
+        }
         const at = flags.at ?? flags.in;
         if (!at) {
             this.failWithCliError({

package/dist/commands/followups/watch.js

@@ -83,9 +83,9 @@ class FollowupsWatch extends base_command_1.BaseCommand {
             description: 'SLA backstop — required for --wait event (an event may never arrive), optional for poll_until',
         }),
         // delivery
-        endpoint: core_1.Flags.string({ description: 'Delivery endpoint id (EndpointRegistry)' }),
+        endpoint: core_1.Flags.string({ description: 'Delivery endpoint id (defaults to main). Use --pin to deliver into a specific conversation' }),
         'endpoint-target': core_1.Flags.string({ description: 'Channel target for channel endpoints' }),
-        pin: core_1.Flags.string({ description: 'Conversation id the watch was authored in' }),
+        pin: core_1.Flags.string({ description: 'Deliver into this conversation. Do not combine with --endpoint other than pinned' }),
         json: core_1.Flags.boolean({ description: 'Output as JSON' }),
     };
     async run() {

package/dist/lib/agentic-stream.d.ts

@@ -1,4 +1,4 @@
-import { type AssistantTextJoiner } from '@skrr-ai/data-provider';
+import { type PublicProjection, type AssistantTextJoiner } from '@skrr-ai/data-provider';
 /**
  * Why a question was dismissed when no terminal exists to ask it on. It is the
  * REASON for a dismissal, never an answer: it travels as the value of the
@@ -48,6 +48,7 @@ export type AgenticStreamResult = {
  */
 export type ReconciledTerminal = {
     status: 'completed' | 'failed';
+    publicProjection?: PublicProjection;
     /** The answer as persisted, when there is one. */
     text?: string;
     /** The recorded failure reason — `metadata.agentic.error` on the message. */
@@ -100,6 +101,7 @@ export type HandoverReading =
  | {
     state: 'repaired';
     text: string;
+    publicProjection?: PublicProjection;
     repairedAt?: string;
 }
 /** The machine's turn ended without finishing, and the server settled it so. */
@@ -107,6 +109,7 @@ export type HandoverReading =
     state: 'failed';
     error: string;
     text?: string;
+    publicProjection?: PublicProjection;
 };
 export type HandoverWaitOptions = {
     /** Read the persisted response message. A throw or null is "no evidence". */
@@ -512,6 +515,7 @@ export declare class AgenticStreamClient {
     private readonly textJoiner;
     /** Highest envelope `__seq` folded into `accumulated`, for gap detection. */
     private highestSeq;
+    private publicProjection;
     private readonly pendingEnvelopes;
     private replayTimer;
     private replayFlight;