@skrr-ai/cli 0.1.114 → 0.1.115

package/dist/commands/agents/chat.js

@@ -105,10 +105,14 @@ function reconcileTerminalFromMessages(messages, responseMessageId) {
         [...messages].reverse().find((m) => m && m.isCreatedByUser === false);
     if (!row)
         return null;
+    const projection = row.metadata && typeof row.metadata === 'object'
+        ? row.metadata.publicProjection : undefined;
+    const publicProjection = (0, data_provider_1.isDecodedPublicProjection)(projection) ? { publicProjection: projection } : {};
     const failure = (0, data_provider_1.resolveMessageFailure)(row);
     if (failure) {
         return {
             status: 'failed',
+            ...publicProjection,
             ...(failure.answer ? { text: failure.answer } : {}),
             // The reason exists on the row; it simply never reached the surface. Say
             // it, rather than the transport error that masked it (OSK-7595).
@@ -123,7 +127,7 @@ function reconcileTerminalFromMessages(messages, responseMessageId) {
     // it set is a turn that ended having produced nothing, which is still
     // terminal and still better reported than waited on.
     if (row.unfinished === false)
-        return { status: 'completed', text };
+        return { status: 'completed', text, ...publicProjection };
     return null;
 }
 function agenticRecord(row) {
@@ -161,12 +165,16 @@ function handoverStateFromMessages(messages, responseMessageId) {
         (!responseMessageId && [...messages].reverse().find((m) => m && m.isCreatedByUser === false));
     if (!row)
         return { state: 'pending' };
+    const projection = row.metadata && typeof row.metadata === 'object'
+        ? row.metadata.publicProjection : undefined;
+    const publicProjection = (0, data_provider_1.isDecodedPublicProjection)(projection) ? { publicProjection: projection } : {};
     const failure = (0, data_provider_1.resolveMessageFailure)(row);
     if (failure) {
         if (agenticErrorSubtype(row) === agentic_stream_1.DAEMON_HANDOVER_REASON)
             return { state: 'pending' };
         return {
             state: 'failed',
+            ...publicProjection,
             error: failure.reason ?? 'The run failed. No reason was recorded on the message.',
             ...(failure.answer ? { text: failure.answer } : {}),
         };
@@ -178,6 +186,7 @@ function handoverStateFromMessages(messages, responseMessageId) {
     const repairedAt = typeof repair.repairedAt === 'string' ? repair.repairedAt : undefined;
     return {
         state: 'repaired',
+        ...publicProjection,
         text: typeof row.text === 'string' ? row.text : '',
         ...(repairedAt ? { repairedAt } : {}),
     };

package/dist/commands/computer-use/audio.d.ts

@@ -0,0 +1,6 @@
+import { ComputerUseCommand } from '../../lib/computer-use';
+export default class ComputerUseAudio extends ComputerUseCommand {
+    static summary: string;
+    static description: string;
+    protected action: string;
+}

package/dist/commands/computer-use/audio.js

@@ -0,0 +1,9 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const computer_use_1 = require("../../lib/computer-use");
+class ComputerUseAudio extends computer_use_1.ComputerUseCommand {
+    static summary = 'Configure optional computer audio with status, enable or disable';
+    static description = 'Flags are forwarded unchanged. Run `skrrd computer-use audio --help` for options; --profile selects the local daemon profile and --json emits one stable document.';
+    action = 'audio';
+}
+exports.default = ComputerUseAudio;

package/dist/commands/computer-use/browser.d.ts

@@ -0,0 +1,7 @@
+import { ComputerUseCommand } from '../../lib/computer-use';
+export default class ComputerUseBrowser extends ComputerUseCommand {
+    static summary: string;
+    static description: string;
+    static examples: string[];
+    protected action: string;
+}

package/dist/commands/computer-use/browser.js

@@ -0,0 +1,16 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const computer_use_1 = require("../../lib/computer-use");
+class ComputerUseBrowser extends computer_use_1.ComputerUseCommand {
+    static summary = 'Configure original Chrome, inspect its extension, and manage its native host';
+    static description = 'Actions: status, enable, disable, setup, update, verify. Setup uses the original LCU installer: private relay files belong to the selected skrr profile, while native-host registration is shared by the desktop account and supported Chromium browsers. Verify initializes the original MCP schema without browser actions. Flags are forwarded unchanged; run `skrrd computer-use browser --help` for all options.';
+    static examples = [
+        '<%= config.bin %> computer-use browser enable',
+        '<%= config.bin %> computer-use browser setup --profile work',
+        '<%= config.bin %> computer-use browser status --profile work --json',
+        '<%= config.bin %> computer-use browser update --profile work',
+        '<%= config.bin %> computer-use browser verify --profile work --json',
+    ];
+    action = 'browser';
+}
+exports.default = ComputerUseBrowser;

package/dist/commands/computer-use/disable.d.ts

@@ -0,0 +1,6 @@
+import { ComputerUseCommand } from '../../lib/computer-use';
+export default class ComputerUseDisable extends ComputerUseCommand {
+    static summary: string;
+    static description: string;
+    protected action: string;
+}

package/dist/commands/computer-use/disable.js

@@ -0,0 +1,9 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const computer_use_1 = require("../../lib/computer-use");
+class ComputerUseDisable extends computer_use_1.ComputerUseCommand {
+    static summary = 'Revoke Computer Use consent and stop the active controller';
+    static description = 'Flags are forwarded unchanged. Run `skrrd computer-use disable --help` for options; --profile selects the local daemon profile and --json emits one stable document.';
+    action = 'disable';
+}
+exports.default = ComputerUseDisable;

package/dist/commands/computer-use/enable.d.ts

@@ -0,0 +1,6 @@
+import { ComputerUseCommand } from '../../lib/computer-use';
+export default class ComputerUseEnable extends ComputerUseCommand {
+    static summary: string;
+    static description: string;
+    protected action: string;
+}

package/dist/commands/computer-use/enable.js

@@ -0,0 +1,9 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const computer_use_1 = require("../../lib/computer-use");
+class ComputerUseEnable extends computer_use_1.ComputerUseCommand {
+    static summary = 'Enable Computer Use locally; --cloud-agents separately grants cloud Agent access';
+    static description = 'Flags are forwarded unchanged. Run `skrrd computer-use enable --help` for options; --profile selects the local daemon profile and --json emits one stable document.';
+    action = 'enable';
+}
+exports.default = ComputerUseEnable;

package/dist/commands/computer-use/index.d.ts

@@ -0,0 +1,6 @@
+import { ComputerUseCommand } from '../../lib/computer-use';
+export default class ComputerUse extends ComputerUseCommand {
+    static summary: string;
+    static description: string;
+    protected action: undefined;
+}

package/dist/commands/computer-use/index.js

@@ -0,0 +1,9 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const computer_use_1 = require("../../lib/computer-use");
+class ComputerUse extends computer_use_1.ComputerUseCommand {
+    static summary = 'Install and control optional Computer Use on this machine';
+    static description = 'Computer Use uses your installed official app runtime. Run `skrr computer-use status`; use `skrrd computer-use --help` for all options, including --profile and --json.';
+    action = undefined;
+}
+exports.default = ComputerUse;

package/dist/commands/computer-use/install.d.ts

@@ -0,0 +1,6 @@
+import { ComputerUseCommand } from '../../lib/computer-use';
+export default class ComputerUseInstall extends ComputerUseCommand {
+    static summary: string;
+    static description: string;
+    protected action: string;
+}

package/dist/commands/computer-use/install.js

@@ -0,0 +1,9 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const computer_use_1 = require("../../lib/computer-use");
+class ComputerUseInstall extends computer_use_1.ComputerUseCommand {
+    static summary = 'Install a pinned thin release from an explicit local archive and trusted SHA-256';
+    static description = 'Flags are forwarded unchanged. Run `skrrd computer-use install --help` for options; --profile selects the local daemon profile and --json emits one stable document.';
+    action = 'install';
+}
+exports.default = ComputerUseInstall;

package/dist/commands/computer-use/recover.d.ts

@@ -0,0 +1,6 @@
+import { ComputerUseCommand } from '../../lib/computer-use';
+export default class ComputerUseRecover extends ComputerUseCommand {
+    static summary: string;
+    static description: string;
+    protected action: string;
+}

package/dist/commands/computer-use/recover.js

@@ -0,0 +1,9 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const computer_use_1 = require("../../lib/computer-use");
+class ComputerUseRecover extends computer_use_1.ComputerUseCommand {
+    static summary = 'Retry runtime recovery only after confirmed execution cleanup';
+    static description = 'Flags are forwarded unchanged. Run `skrrd computer-use recover --help` for options; --profile selects the local daemon profile and --json emits one stable document.';
+    action = 'recover';
+}
+exports.default = ComputerUseRecover;

package/dist/commands/computer-use/status.d.ts

@@ -0,0 +1,6 @@
+import { ComputerUseCommand } from '../../lib/computer-use';
+export default class ComputerUseStatus extends ComputerUseCommand {
+    static summary: string;
+    static description: string;
+    protected action: string;
+}

package/dist/commands/computer-use/status.js

@@ -0,0 +1,9 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const computer_use_1 = require("../../lib/computer-use");
+class ComputerUseStatus extends computer_use_1.ComputerUseCommand {
+    static summary = 'Show configuration and live Computer Use availability without desktop interaction';
+    static description = 'Flags are forwarded unchanged. Run `skrrd computer-use status --help` for options; --profile selects the local daemon profile and --json emits one stable document.';
+    action = 'status';
+}
+exports.default = ComputerUseStatus;

package/dist/commands/computer-use/stop.d.ts

@@ -0,0 +1,6 @@
+import { ComputerUseCommand } from '../../lib/computer-use';
+export default class ComputerUseStop extends ComputerUseCommand {
+    static summary: string;
+    static description: string;
+    protected action: string;
+}

package/dist/commands/computer-use/stop.js

@@ -0,0 +1,9 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const computer_use_1 = require("../../lib/computer-use");
+class ComputerUseStop extends computer_use_1.ComputerUseCommand {
+    static summary = 'Stop the running Computer Use controller and confirm cleanup';
+    static description = 'Flags are forwarded unchanged. Run `skrrd computer-use stop --help` for options; --profile selects the local daemon profile and --json emits one stable document.';
+    action = 'stop';
+}
+exports.default = ComputerUseStop;

package/dist/commands/daemon/login.js

@@ -32,7 +32,7 @@ const daemon_machine_identity_copy_1 = require("../../lib/daemon-machine-identit
 class DaemonLogin extends core_1.Command {
     static aliases = ['daemons:login'];
     static summary = 'Authenticate the skrr background service on this computer (separate from `skrr login`)';
-    static description = (0, exec_runtime_binary_1.forwardedFlagsNote)('login', { binds: true });
+    static description = (0, exec_runtime_binary_1.forwardedFlagsNote)('login', { binds: true }) + '\nUse --computer-use to request explicit Computer Use permission in browser consent. This does not enable the runtime or grant machine access.';
     static strict = false; // forward all args verbatim — see run()
     async run() {
         // `this.argv`, NOT `this.parse()` — `strict = false` relaxes POSITIONAL

package/dist/commands/followups/plans/cancel.js

@@ -1,11 +1,12 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+const lookbackPlans_1 = require("../../../lib/lookbackPlans");
 const core_1 = require("@oclif/core");
 const base_command_1 = require("../../../base-command");
-const lookbackPlans_1 = require("../../../lib/lookbackPlans");
+const lookbackPlans_2 = require("../../../lib/lookbackPlans");
 class LookbackPlansCancel extends base_command_1.BaseCommand {
     static description = 'Cancel the remaining lookbacks of a plan';
-    static args = { id: lookbackPlans_1.lookbackPlanIdArg };
+    static args = { id: lookbackPlans_2.lookbackPlanIdArg };
     static flags = {
         revision: core_1.Flags.integer({ description: 'Expected current revision; stale edits are refused', min: 1 }),
         reason: core_1.Flags.string({ description: 'Why the remaining lookbacks are no longer needed' }),
@@ -15,10 +16,16 @@ class LookbackPlansCancel extends base_command_1.BaseCommand {
         this.requireAuth();
         const { args, flags } = await this.parse(LookbackPlansCancel);
         try {
-            const result = await lookbackPlans_1.lookbackPlansApi.cancel(args.id, { expectedRevision: flags.revision, reason: flags.reason });
+            const result = await lookbackPlans_2.lookbackPlansApi.cancel(args.id, { expectedRevision: flags.revision, reason: flags.reason });
             this.log(flags.json ? JSON.stringify(result, null, 2) : `Lookback plan ${result.plan.id}: ${result.plan.state} (r${result.plan.revision}).`);
         }
         catch (err) {
+            if ((0, lookbackPlans_1.isLookbackMutationOutcomeUnknown)(err)) {
+                const readback = await lookbackPlans_2.lookbackPlansApi.show(args.id).catch(() => null);
+                this.failWithCliError((0, lookbackPlans_1.lookbackUnconfirmedFailure)({ operation: 'cancel', planId: args.id,
+                    ...(readback?.plan ? { currentPlan: readback.plan } : {}),
+                    readback: readback?.plan ? 'observed' : 'unavailable' }));
+            }
             this.handleApiError(err);
         }
     }

package/dist/commands/followups/plans/capacity.d.ts

@@ -0,0 +1,9 @@
+import { BaseCommand } from '../../../base-command';
+export default class LookbackPlansCapacity extends BaseCommand {
+    static description: string;
+    static flags: {
+        agent: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        json: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+    };
+    run(): Promise<void>;
+}

package/dist/commands/followups/plans/capacity.js

@@ -0,0 +1,42 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const core_1 = require("@oclif/core");
+const base_command_1 = require("../../../base-command");
+const lookbackPlans_1 = require("../../../lib/lookbackPlans");
+const followups_1 = require("../../../lib/followups");
+class LookbackPlansCapacity extends base_command_1.BaseCommand {
+    static description = 'Read one agent’s actual UTC-day lookback plan allowance; reserves nothing';
+    static flags = {
+        agent: core_1.Flags.string({ description: 'Agent ID (default: bound session agent)' }),
+        json: core_1.Flags.boolean({ description: 'Output authoritative capacity facts as JSON' }),
+    };
+    async run() {
+        this.requireAuth();
+        const { flags } = await this.parse(LookbackPlansCapacity);
+        let agentId;
+        try {
+            agentId = (0, followups_1.resolveFollowUpAgent)(flags.agent).id;
+        }
+        catch (err) {
+            this.failWithCliError({ message: err instanceof Error ? err.message : String(err),
+                code: 'AGENT_CONTEXT_AMBIGUOUS', exit: 2, retryable: false });
+            return;
+        }
+        try {
+            const result = await lookbackPlans_1.lookbackPlansApi.capacity({ agentId });
+            if (flags.json) {
+                this.log(JSON.stringify(result, null, 2));
+                return;
+            }
+            this.log(`${result.scope.agentId}: ${result.remaining}/${result.limit} plans remaining (${result.used} admitted this UTC day).`);
+            this.log(result.admission === 'policy_blocked'
+                ? 'New plans are blocked by a zero agent allowance. The daily reset does not change that policy.'
+                : `UTC-day reset: ${new Date(result.period.resetAt).toLocaleString()} (${result.period.resetAt}). Recheck capacity then.`);
+            this.log(`Observed: ${result.observedAt}. This read reserves nothing; source, execution and delivery are checked separately.`);
+        }
+        catch (err) {
+            this.handleApiError(err);
+        }
+    }
+}
+exports.default = LookbackPlansCapacity;

package/dist/commands/followups/plans/create.js

@@ -30,6 +30,9 @@ class LookbackPlansCreate extends base_command_1.BaseCommand {
             this.log(flags.json ? JSON.stringify(result, null, 2) : (0, lookbackPlans_1.lookbackArmingLine)(result));
         }
         catch (err) {
+            if ((0, lookbackPlans_1.isLookbackMutationOutcomeUnknown)(err)) {
+                this.failWithCliError((0, lookbackPlans_1.lookbackUnconfirmedFailure)({ operation: 'create', source: body.plan.source, agentId: body.agentId }));
+            }
             this.handleApiError(err);
         }
     }

package/dist/commands/followups/plans/revise.js

@@ -1,15 +1,16 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+const lookbackPlans_1 = require("../../../lib/lookbackPlans");
 const core_1 = require("@oclif/core");
 const base_command_1 = require("../../../base-command");
 const prompt_1 = require("../../../lib/prompt");
-const lookbackPlans_1 = require("../../../lib/lookbackPlans");
+const lookbackPlans_2 = require("../../../lib/lookbackPlans");
 const lookbackPlanHelp_1 = require("../../../lib/lookbackPlanHelp");
 class LookbackPlansRevise extends base_command_1.BaseCommand {
     static description = 'Revise pending lookbacks using the original source and step IDs\n\n' + lookbackPlanHelp_1.LOOKBACK_PLAN_INPUT_HELP +
         '\n\nRevise accepts the plan itself, not a create envelope. Use the current --revision from show; a stale revision returns LOOKBACK_CONFLICT (409).';
     static examples = ['<%= config.bin %> followups plans revise PLAN_ID --revision 1 --from-json revised-plan.json --json'];
-    static args = { id: lookbackPlans_1.lookbackPlanIdArg };
+    static args = { id: lookbackPlans_2.lookbackPlanIdArg };
     static flags = {
         revision: core_1.Flags.integer({ description: 'Expected current revision; stale edits are refused', min: 1, required: true }),
         'from-json': core_1.Flags.string({ description: 'Full PlanInput JSON file; - reads stdin', required: true }),
@@ -20,17 +21,23 @@ class LookbackPlansRevise extends base_command_1.BaseCommand {
         const { args, flags } = await this.parse(LookbackPlansRevise);
         let plan;
         try {
-            plan = (0, lookbackPlans_1.lookbackInput)(await (0, prompt_1.readJsonBody)(flags['from-json']), true);
+            plan = (0, lookbackPlans_2.lookbackInput)(await (0, prompt_1.readJsonBody)(flags['from-json']), true);
         }
         catch (err) {
-            this.failWithCliError((0, lookbackPlans_1.lookbackInputFailure)(err));
+            this.failWithCliError((0, lookbackPlans_2.lookbackInputFailure)(err));
             return;
         }
         try {
-            const result = await lookbackPlans_1.lookbackPlansApi.revise(args.id, { expectedRevision: flags.revision, plan });
-            this.log(flags.json ? JSON.stringify(result, null, 2) : (0, lookbackPlans_1.lookbackArmingLine)(result));
+            const result = await lookbackPlans_2.lookbackPlansApi.revise(args.id, { expectedRevision: flags.revision, plan });
+            this.log(flags.json ? JSON.stringify(result, null, 2) : (0, lookbackPlans_2.lookbackArmingLine)(result));
         }
         catch (err) {
+            if ((0, lookbackPlans_1.isLookbackMutationOutcomeUnknown)(err)) {
+                const readback = await lookbackPlans_2.lookbackPlansApi.show(args.id).catch(() => null);
+                this.failWithCliError((0, lookbackPlans_1.lookbackUnconfirmedFailure)({ operation: 'revise', planId: args.id,
+                    ...(readback?.plan ? { currentPlan: readback.plan } : {}),
+                    readback: readback?.plan ? 'observed' : 'unavailable' }));
+            }
             this.handleApiError(err);
         }
     }

package/dist/lib/agentic-stream.d.ts

@@ -1,4 +1,4 @@
-import { type AssistantTextJoiner } from '@skrr-ai/data-provider';
+import { type PublicProjection, type AssistantTextJoiner } from '@skrr-ai/data-provider';
 /**
  * Why a question was dismissed when no terminal exists to ask it on. It is the
  * REASON for a dismissal, never an answer: it travels as the value of the
@@ -48,6 +48,7 @@ export type AgenticStreamResult = {
  */
 export type ReconciledTerminal = {
     status: 'completed' | 'failed';
+    publicProjection?: PublicProjection;
     /** The answer as persisted, when there is one. */
     text?: string;
     /** The recorded failure reason — `metadata.agentic.error` on the message. */
@@ -100,6 +101,7 @@ export type HandoverReading =
  | {
     state: 'repaired';
     text: string;
+    publicProjection?: PublicProjection;
     repairedAt?: string;
 }
 /** The machine's turn ended without finishing, and the server settled it so. */
@@ -107,6 +109,7 @@ export type HandoverReading =
     state: 'failed';
     error: string;
     text?: string;
+    publicProjection?: PublicProjection;
 };
 export type HandoverWaitOptions = {
     /** Read the persisted response message. A throw or null is "no evidence". */
@@ -512,6 +515,7 @@ export declare class AgenticStreamClient {
     private readonly textJoiner;
     /** Highest envelope `__seq` folded into `accumulated`, for gap detection. */
     private highestSeq;
+    private publicProjection;
     private readonly pendingEnvelopes;
     private replayTimer;
     private replayFlight;

package/dist/lib/agentic-stream.js

@@ -740,6 +740,7 @@ class AgenticStreamClient {
     textJoiner = (0, data_provider_1.createAssistantTextJoiner)();
     /** Highest envelope `__seq` folded into `accumulated`, for gap detection. */
     highestSeq = 0;
+    publicProjection;
     pendingEnvelopes = new Map();
     replayTimer = null;
     replayFlight = null;
@@ -972,6 +973,7 @@ class AgenticStreamClient {
             reason,
             ...(terminal.error ? { message: terminal.error, error: terminal.error } : {}),
             ...(typeof terminal.text === 'string' ? { result: terminal.text } : {}),
+            ...(terminal.publicProjection ? { publicProjection: terminal.publicProjection } : {}),
         });
         return true;
     }
@@ -1129,6 +1131,7 @@ class AgenticStreamClient {
                 type: 'execution:complete',
                 sessionId: this.options.sessionId,
                 result: reading.text,
+                ...(reading.publicProjection ? { publicProjection: reading.publicProjection } : {}),
                 repaired: true,
                 repairedFrom: 'durable_record',
                 overturned: { code: exports.WORKER_REPLACED_CODE, reason: exports.DAEMON_HANDOVER_REASON },
@@ -1146,6 +1149,7 @@ class AgenticStreamClient {
             message: reading.error,
             errors: [reading.error],
             ...(typeof reading.text === 'string' && reading.text ? { result: reading.text } : {}),
+            ...(reading.publicProjection ? { publicProjection: reading.publicProjection } : {}),
             handover: { outcome: 'machine_failed', waitedMs },
         });
         return true;
@@ -1454,6 +1458,9 @@ class AgenticStreamClient {
             if (fresh.length === 0)
                 return; // a pure re-delivery — drop it whole
             const scoped = { ...event, envelopes: fresh };
+            if (fresh.some((env) => env?.ev?.t === 'text' &&
+                env.ev?.publicProjection === 'lookback_answer_v1'))
+                this.publicProjection = 'lookback_answer_v1';
             // Note what never arrived before folding this batch in (OSK-7631,
             // OSK-13518). Checked against the FRESH set: a re-delivery carries old
             // seqs and would read as a gap that never happened.
@@ -1539,6 +1546,8 @@ class AgenticStreamClient {
         socket.on('message:stream', (event) => {
             if (!match(event))
                 return;
+            if (event.publicProjection === 'lookback_answer_v1')
+                this.publicProjection = event.publicProjection;
             const text = typeof event.text === 'string' ? event.text : '';
             const delta = typeof event.delta === 'string' ? event.delta : '';
             if (text && text.length >= this.accumulated.length)
@@ -1574,6 +1583,7 @@ class AgenticStreamClient {
             if (!match(event))
                 return;
             this.accumulated = '';
+            this.publicProjection = undefined;
             this.textJoiner.reset();
             this.renderedText = '';
             // Seqs restart with the stream, so a fresh low seq is not a gap.
@@ -2099,7 +2109,7 @@ class AgenticStreamClient {
             const streamedText = (0, widgetTerminalText_1.widgetsAsText)(this.accumulated, { final: true });
             void this.readRecordedText().then((recorded) => {
                 this.settleGapVerdict(streamedText, recorded);
-                this.settle(status, event, recorded?.text || undefined);
+                this.settle(status, event, recorded);
             });
             return;
         }
@@ -2124,10 +2134,10 @@ class AgenticStreamClient {
             try {
                 const terminal = await reconcile();
                 if (terminal && typeof terminal.text === 'string' && terminal.text) {
-                    return { text: terminal.text };
+                    return { text: terminal.text, ...(terminal.publicProjection ? { publicProjection: terminal.publicProjection } : {}) };
                 }
                 if (terminal)
-                    empty = { text: '' };
+                    empty = { text: '', ...(terminal.publicProjection ? { publicProjection: terminal.publicProjection } : {}) };
             }
             catch {
                 // No evidence either way; try again, then settle on the stream.
@@ -2135,7 +2145,7 @@ class AgenticStreamClient {
         }
         return empty;
     }
-    settle(status, event, recordedText) {
+    settle(status, event, recorded) {
         // `execution:complete` carries the final answer as `result`, and it is
         // AUTHORITATIVE — preferred over whatever the deltas added up to, not just
         // used when they added up to nothing.
@@ -2146,6 +2156,8 @@ class AgenticStreamClient {
         // `result` whenever the server sends one makes the returned text the
         // agent's actual final message rather than however much of it arrived in
         // time.
+        if (event.publicProjection === 'lookback_answer_v1')
+            this.publicProjection = event.publicProjection;
         const finalText = typeof event.result === 'string' ? event.result : '';
         // …EXCEPT when it is a strict suffix of what we accumulated.
         //
@@ -2168,7 +2180,10 @@ class AgenticStreamClient {
             this.accumulated.length > finalText.length &&
             (this.accumulated.endsWith(finalText) ||
                 endsWithIgnoringWhitespace(this.accumulated, finalText));
-        if (finalText && finalText !== this.accumulated && !accumulationIsSuperset) {
+        if (event.publicProjection === 'lookback_answer_v1' && typeof event.result === 'string') {
+            this.accumulated = event.result;
+        }
+        else if (finalText && finalText !== this.accumulated && !accumulationIsSuperset) {
             this.accumulated = finalText;
         }
         // The record wins over a stream known to have lost chunks, unless what
@@ -2176,9 +2191,10 @@ class AgenticStreamClient {
         // other way round).
         // (Compared as the reader sees it: the record holds a widget as its fallback sentence,
         // which is shorter than the block the stream carried, and the raw length would never lose.)
-        if (recordedText &&
-            recordedText.length > (0, widgetTerminalText_1.widgetsAsText)(this.accumulated, { final: true }).length) {
-            this.accumulated = recordedText;
+        if (recorded && (recorded.publicProjection === 'lookback_answer_v1' ||
+            recorded.text.length > (0, widgetTerminalText_1.widgetsAsText)(this.accumulated, { final: true }).length)) {
+            this.accumulated = recorded.text;
+            this.publicProjection = recorded.publicProjection;
         }
         // The finished answer, as every other surface shows it: the web applies
         // this same sanitizer, so a scheduling JSON block or leaked function-call
@@ -2186,7 +2202,7 @@ class AgenticStreamClient {
         // printed as part of the agent's answer.
         // A widget is its fallback sentence in a terminal, first: the sanitizer must read
         // prose and never a widget's script (the server projects before it sanitizes, too).
-        this.accumulated = (0, data_provider_1.sanitizeFinalText)((0, widgetTerminalText_1.widgetsAsText)(this.accumulated, { final: true }));
+        this.accumulated = (0, data_provider_1.sanitizeFinalText)((0, widgetTerminalText_1.widgetsAsText)(this.accumulated, { final: true }), this.publicProjection);
         if (!this.options.quiet && !this.options.jsonl && this.accumulated) {
             const output = this.options.output ?? process.stdout;
             const { append, shown } = renderableDelta(this.renderedText, this.accumulated);

package/dist/lib/computer-use.d.ts

@@ -0,0 +1,9 @@
+import { Command } from '@oclif/core';
+export declare function buildComputerUseArgs(action: string | undefined, argv: readonly string[]): string[];
+/** The runtime owns local consent, installation and lifecycle; the REST CLI only dispatches. */
+export declare function forwardComputerUseCommand(command: Command, action: string | undefined, argv: readonly string[]): Promise<void>;
+export declare abstract class ComputerUseCommand extends Command {
+    static strict: boolean;
+    protected abstract action: string | undefined;
+    run(): Promise<void>;
+}

package/dist/lib/computer-use.js

@@ -0,0 +1,41 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ComputerUseCommand = void 0;
+exports.buildComputerUseArgs = buildComputerUseArgs;
+exports.forwardComputerUseCommand = forwardComputerUseCommand;
+const core_1 = require("@oclif/core");
+const exec_runtime_binary_1 = require("./exec-runtime-binary");
+function buildComputerUseArgs(action, argv) {
+    return ['computer-use', ...(action ? [action] : []), ...argv];
+}
+/** The runtime owns local consent, installation and lifecycle; the REST CLI only dispatches. */
+async function forwardComputerUseCommand(command, action, argv) {
+    const fail = (message, code, exit) => {
+        if (argv.includes('--json')) {
+            command.log(JSON.stringify({ object: 'computer_use_control', schemaVersion: 1, action: action ?? argv[0] ?? 'help', ok: false, error: { code, message } }));
+            return command.exit(exit);
+        }
+        command.log(message);
+        return command.exit(exit);
+    };
+    try {
+        if ((await (0, exec_runtime_binary_1.runtimeBinarySupportsSubcommand)('computer-use')) === false) {
+            return fail('This local daemon does not support Computer Use. Update skrrd, then retry.', 'runtime_unsupported', 2);
+        }
+        command.exit(await (0, exec_runtime_binary_1.execRuntimeBinary)(buildComputerUseArgs(action, argv)));
+    }
+    catch (error) {
+        if (error.message === 'runtime-binary-not-installed') {
+            return fail((0, exec_runtime_binary_1.notInstalledMessage)(), 'runtime_not_installed', 127);
+        }
+        throw error;
+    }
+}
+class ComputerUseCommand extends core_1.Command {
+    static strict = false;
+    async run() {
+        // Never call parse(): unknown runtime flags must reach the authoritative parser unchanged.
+        await forwardComputerUseCommand(this, this.action, this.argv);
+    }
+}
+exports.ComputerUseCommand = ComputerUseCommand;