@skrr-ai/cli 0.1.115 → 0.1.117

package/dist/lib/agentic-stream.js

@@ -25,6 +25,8 @@ exports.streamShowsRecordedText = streamShowsRecordedText;
 exports.describeRunPermission = describeRunPermission;
 exports.toWebSocketOrigin = toWebSocketOrigin;
 const node_readline_1 = require("node:readline");
+const computer_use_1 = require("@skrr-ai/auth-core/computer-use");
+const web_url_1 = require("./web-url");
 const socket_io_client_1 = require("socket.io-client");
 const data_provider_1 = require("@skrr-ai/data-provider");
 const config_1 = require("./config");
@@ -791,6 +793,7 @@ class AgenticStreamClient {
      * (OSK-12197) instead of leaving `[y/N]` open after the run stopped asking.
      */
     openPermissionPrompts = new Map();
+    browserPermissionRequests = new Set();
     /**
      * Question prompts on the terminal still waiting for an answer, by
      * questionId, so a server `question:cancel` can close the one it names
@@ -1006,6 +1009,7 @@ class AgenticStreamClient {
         this.replayTimer = null;
         this.stopHandoverTimers();
         this.pendingEnvelopes.clear();
+        this.browserPermissionRequests.clear();
         this.abandonConnectWait?.();
         const socket = this.socket;
         this.socket = null;
@@ -1680,6 +1684,41 @@ class AgenticStreamClient {
         if (this.closed)
             return;
         this.emit({ ...event, type: 'permission.requested' });
+        // Runtime-authored application consent is exclusively an interactive app
+        // decision. A TTY or --approve-tools is not that authenticated human lane.
+        // Recognize malformed runtime asks too, so they never fall into generic grants.
+        if (event.purpose === 'runtime-elicitation' || event.runtimeElicitation !== undefined || event.toolName === 'ComputerUse') {
+            let message = 'This Computer Use request cannot be verified. Wait for a new request in the app.';
+            let requestValid = false;
+            try {
+                const runtime = event.runtimeElicitation;
+                (0, computer_use_1.assertComputerUseElicitationRequest)(runtime);
+                if (event.purpose !== 'runtime-elicitation' || event.toolName !== 'ComputerUse' ||
+                    event.toolUseId !== runtime.requestId || runtime.context.sessionId !== this.options.sessionId ||
+                    runtime.expiresAt <= Date.now())
+                    throw new Error('Mismatched runtime permission');
+                const display = (text) => describePermissionTarget({ command: text }) ?? '';
+                message = [display(runtime.message),
+                    `Choices in the app: ${runtime.options.map((option) => display(option.label)).join(' | ')}`,
+                    `Expires: ${new Date(runtime.expiresAt).toISOString()}`,
+                    'Answer in the signed-in app. This CLI cannot grant or decline application access.'].join('\n');
+                requestValid = true;
+            }
+            catch {
+                // No generic yes/no fallback, including on malformed or expired requests.
+            }
+            const approvalUrl = this.options.conversationId
+                ? (0, web_url_1.conversationUrlFrom)(this.options.baseURL, { conversationId: this.options.conversationId })
+                : null;
+            if (approvalUrl)
+                message += `\nOpen ${approvalUrl} and choose Review pending decisions.`;
+            else
+                message += '\nOpen this conversation in the signed-in app and choose Review pending decisions.';
+            if (event.toolUseId)
+                this.browserPermissionRequests.add(event.toolUseId);
+            this.emit({ ...event, type: 'permission.browser_required', requestValid, approvalUrl, message });
+            return;
+        }
         if (!this.options.approveTools || !this.socket) {
             if (event.toolUseId) {
                 this.socket?.emit('permission:deny', {
@@ -1815,12 +1854,15 @@ class AgenticStreamClient {
         const open = toolUseId ? this.openPermissionPrompts.get(toolUseId) : undefined;
         // Every answer is echoed to the whole session as `answered` — including
         // this client's own. Only one that closes a prompt still open HERE is news.
-        if (event.reason === 'answered' && !open)
+        const browserWaiting = toolUseId ? this.browserPermissionRequests.has(toolUseId) : false;
+        if (event.reason === 'answered' && !open && !browserWaiting)
             return;
         if (!this.firstTimeSeen('permission-cancel', toolUseId))
             return;
-        if (toolUseId)
+        if (toolUseId) {
             this.openPermissionPrompts.delete(toolUseId);
+            this.browserPermissionRequests.delete(toolUseId);
+        }
         open?.abort();
         this.emit({
             ...event,
@@ -1938,6 +1980,13 @@ class AgenticStreamClient {
         // result, so there the line goes to stderr (OSK-13543).
         if (!this.options.jsonl && this.renderHandoverStatus(event))
             return;
+        if (event.type === 'permission.browser_required' && (this.options.quiet || !this.options.jsonl)) {
+            const output = this.options.quiet
+                ? this.options.statusOutput ?? process.stderr
+                : this.options.output ?? process.stdout;
+            output.write(`\n[application permission] ${String(event.message)}\n`);
+            return;
+        }
         // Accumulation and `onEvent` still run — only the incremental rendering is
         // suppressed, so a quiet run is the same turn with a different display.
         if (this.options.quiet)

package/dist/lib/artifact-export.d.ts

@@ -23,18 +23,18 @@ export declare class ExportContractError extends Error {
     constructor(message: string, code: string);
 }
 export declare function standardExportFlags(): {
-    summary: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
-    output: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
-    json: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+    summary: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+    output: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    json: import("@oclif/core/interfaces").BooleanFlag<boolean>;
 };
 export declare function paginatedExportFlags(options?: {
     defaultMaxItems?: number;
 }): {
-    'max-items': import("@oclif/core/lib/interfaces").OptionFlag<number | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
-    cursor: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
-    summary: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
-    output: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
-    json: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+    'max-items': import("@oclif/core/interfaces").OptionFlag<number | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    cursor: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    summary: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+    output: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    json: import("@oclif/core/interfaces").BooleanFlag<boolean>;
 };
 export declare function resolveExportSelection(flags: {
     output?: string;

package/dist/lib/channel-command-runners.d.ts

@@ -1,6 +1,6 @@
 import { type ProviderCliSpec } from './channel-tools';
 type CommandBridge = any;
-export declare const agentFlag: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+export declare const agentFlag: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
 export declare function runToolsCommand(command: CommandBridge, commandClass: CommandBridge, spec: ProviderCliSpec): Promise<void>;
 export declare function runListChannelsCommand(command: CommandBridge, commandClass: CommandBridge, spec: ProviderCliSpec): Promise<void>;
 export declare function runReadChannelCommand(command: CommandBridge, commandClass: CommandBridge, spec: ProviderCliSpec): Promise<void>;
@@ -9,14 +9,14 @@ export declare function runSearchCommand(command: CommandBridge, commandClass: C
 export declare function runListUsersCommand(command: CommandBridge, commandClass: CommandBridge, spec: ProviderCliSpec): Promise<void>;
 export declare function runInvokeCommand(command: CommandBridge, commandClass: CommandBridge, spec: ProviderCliSpec): Promise<void>;
 export declare function runSendAsAgentCommand(command: CommandBridge, commandClass: CommandBridge, spec: ProviderCliSpec): Promise<void>;
-export declare const jsonFlag: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
-export declare const limitFlag: import("@oclif/core/lib/interfaces").OptionFlag<number, import("@oclif/core/lib/interfaces").CustomOptions>;
-export declare const channelFlag: import("@oclif/core/lib/interfaces").OptionFlag<string, import("@oclif/core/lib/interfaces").CustomOptions>;
-export declare const optionalChannelFlag: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
-export declare const threadFlag: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
-export declare const messageFlag: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
-export declare const textFlag: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
-export declare const inlineArgsFlag: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
-export declare const inputArg: import("@oclif/core/lib/interfaces").Arg<string | undefined, Record<string, unknown>>;
-export declare const toolArg: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;
+export declare const jsonFlag: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+export declare const limitFlag: import("@oclif/core/interfaces").OptionFlag<number, import("@oclif/core/interfaces").CustomOptions>;
+export declare const channelFlag: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+export declare const optionalChannelFlag: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+export declare const threadFlag: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+export declare const messageFlag: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+export declare const textFlag: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+export declare const inlineArgsFlag: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+export declare const inputArg: import("@oclif/core/interfaces").Arg<string | undefined, Record<string, unknown>>;
+export declare const toolArg: import("@oclif/core/interfaces").Arg<string, Record<string, unknown>>;
 export {};

package/dist/lib/command-miss.d.ts

@@ -29,6 +29,17 @@ export type CommandLookup = {
     commandIDs: string[];
     topicNames: string[];
 };
+/**
+ * Commands behind the Task spellings agents reach for before they have read
+ * the guide. Keep these ids here with their redirects so the manifest contract
+ * test can prove every printed target ships in this CLI build.
+ */
+export declare const TASK_COMMAND_MISS_TARGETS: Readonly<{
+    topic: "tasks";
+    search: "tasks:list";
+    resultShow: "tasks:result:show";
+    resultSubmit: "tasks:result:submit";
+}>;
 /** Cheap edit distance, bounded — this runs only on a miss. */
 export declare function editDistance(a: string, b: string): number;
 /**
@@ -68,7 +79,7 @@ export type CommandMiss = {
     suggestions: string[];
 };
 /** The text form: exactly what a miss has always printed. */
-export declare function describeCommandMiss(config: CommandLookup, id: string): string;
+export declare function describeCommandMiss(config: CommandLookup, id: string, typedWords?: readonly string[]): string;
 /**
  * The miss for a colon-joined id that did not resolve.
  *
@@ -81,7 +92,7 @@ export declare function describeCommandMiss(config: CommandLookup, id: string):
  *     suggest the nearest siblings under the same topic before falling back to
  *     the whole command list.
  */
-export declare function analyzeCommandMiss(config: CommandLookup, id: string): CommandMiss;
+export declare function analyzeCommandMiss(config: CommandLookup, id: string, typedWords?: readonly string[]): CommandMiss;
 /** Adapt an oclif `Config` to the lookup shape above. */
 export declare function lookupFromConfig(config: {
     bin: string;

package/dist/lib/command-miss.js

@@ -19,7 +19,11 @@
  * Keeping the text here rather than in either caller is the point: a fix to one
  * phrasing reaches both, and neither surface can quietly drift from the other.
  */
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.TASK_COMMAND_MISS_TARGETS = void 0;
 exports.editDistance = editDistance;
 exports.nearestCommands = nearestCommands;
 exports.helpSubjectId = helpSubjectId;
@@ -29,6 +33,7 @@ exports.lookupFromConfig = lookupFromConfig;
 exports.resolveVerbSynonym = resolveVerbSynonym;
 exports.typedCommandWords = typedCommandWords;
 exports.commandMissEnvelope = commandMissEnvelope;
+const agent_guides_json_1 = __importDefault(require("../generated/agent-guides.json"));
 /** A uuid-ish token, which is what a stray space id looks like. */
 const LOOKS_LIKE_ID = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
 const DAEMON_READINESS = [
@@ -67,6 +72,78 @@ function describeAnsweredElsewhere(config, resolved, extras) {
         suggestions: targets.map((t) => `${config.bin} ${t.usage}`),
     };
 }
+/**
+ * Commands behind the Task spellings agents reach for before they have read
+ * the guide. Keep these ids here with their redirects so the manifest contract
+ * test can prove every printed target ships in this CLI build.
+ */
+exports.TASK_COMMAND_MISS_TARGETS = Object.freeze({
+    topic: 'tasks',
+    search: 'tasks:list',
+    resultShow: 'tasks:result:show',
+    resultSubmit: 'tasks:result:submit',
+});
+function hasTopic(config, id) {
+    return config.topicNames.some((topic) => topic.toLowerCase() === id);
+}
+function describeTaskCommandRedirect(config, parts, typedWords) {
+    const lower = parts.map((part) => part.toLowerCase());
+    // `task` is an understandable singular spelling of the Tasks topic, but a
+    // generic singular-to-plural rule would steal real topics such as `agent`.
+    if (lower.length === 1 &&
+        lower[0] === 'task' &&
+        config.findCommand('task') === undefined &&
+        !hasTopic(config, 'task') &&
+        hasTopic(config, exports.TASK_COMMAND_MISS_TARGETS.topic)) {
+        const target = `${config.bin} ${exports.TASK_COMMAND_MISS_TARGETS.topic} --help`;
+        return {
+            message: `\`${config.bin} task\` is not a topic; use \`${config.bin} tasks\` for Task commands.`,
+            fix: `See \`${target}\`.`,
+            suggestions: [target],
+        };
+    }
+    if (lower[0] === 'tasks' &&
+        lower[1] === 'search' &&
+        hasTopic(config, 'tasks') &&
+        config.findCommand(exports.TASK_COMMAND_MISS_TARGETS.search) !== undefined) {
+        const query = typedWords.slice(2).join(' ').trim();
+        const target = `${config.bin} tasks list --q ${query ? JSON.stringify(query) : '<query>'}`;
+        return {
+            message: `\`${config.bin} tasks search\` is not a command; search Tasks with \`${config.bin} tasks list --q\`.`,
+            fix: `Run \`${target}\`.`,
+            suggestions: [target],
+        };
+    }
+    if (lower.length === 3 &&
+        lower[0] === 'tasks' &&
+        lower[1] === 'result' &&
+        hasTopic(config, 'tasks:result')) {
+        const task = typedWords[2] ?? parts[2];
+        const targets = [
+            config.findCommand(exports.TASK_COMMAND_MISS_TARGETS.resultShow) !== undefined
+                ? {
+                    command: `${config.bin} tasks result show ${task}`,
+                    answers: 'read the current Result',
+                }
+                : null,
+            config.findCommand(exports.TASK_COMMAND_MISS_TARGETS.resultSubmit) !== undefined
+                ? {
+                    command: `${config.bin} tasks result submit ${task} --summary "<summary>"`,
+                    answers: 'submit a Result',
+                }
+                : null,
+        ].filter((target) => target !== null);
+        if (targets.length === 0)
+            return null;
+        return {
+            message: `\`${config.bin} ${typedWords.slice(0, 3).join(' ')}\` is not a command; ` +
+                `\`${config.bin} tasks result\` is a topic.`,
+            fix: targets.map((target) => `  \`${target.command}\` — ${target.answers}`).join('\n'),
+            suggestions: targets.map((target) => target.command),
+        };
+    }
+    return null;
+}
 const WHOAMI = {
     id: 'whoami',
     answers: 'who you are signed in as, which server, and where the credential came from',
@@ -147,12 +224,28 @@ const DEPENDENCY_WORKFLOW = [
     },
 ];
 const TASK_OPERATIONS = [
-    { id: 'tasks:guide', usage: 'tasks guide', answers: 'find the commands for Task planning, dependencies, execution, and results' },
+    {
+        id: 'guide',
+        usage: 'guide tasks',
+        answers: 'read the tasks guide — planning, dependencies, execution, and results',
+    },
 ];
 const TASK_PREFLIGHT = [
-    { id: 'tasks:preflight', usage: 'tasks preflight <task>', answers: 'read workflow blockers and execution prerequisites without starting work; shell execution remains unverified' },
-    { id: 'tasks:actionability', usage: 'tasks actionability <task>', answers: 'read the canonical next actor and allowed workflow actions' },
-    { id: 'tasks:start', usage: 'tasks start <task> --dry-run', answers: 'read only the server execution preview; never starts a Run' },
+    {
+        id: 'tasks:preflight',
+        usage: 'tasks preflight <task>',
+        answers: 'read workflow blockers and execution prerequisites without starting work; shell execution remains unverified',
+    },
+    {
+        id: 'tasks:actionability',
+        usage: 'tasks actionability <task>',
+        answers: 'read the canonical next actor and allowed workflow actions',
+    },
+    {
+        id: 'tasks:start',
+        usage: 'tasks start <task> --dry-run',
+        answers: 'read only the server execution preview; never starts a Run',
+    },
 ];
 const WORKFLOW_HINTS = {
     'spaces:projects': PROJECT_WORKFLOW,
@@ -167,6 +260,33 @@ const WORKFLOW_HINTS = {
     'tasks:doctor': TASK_PREFLIGHT,
     'tasks:readiness': TASK_PREFLIGHT,
 };
+/**
+ * `<topic> guide`, the pre-`skrr guide` spelling of "read the guide for that
+ * domain". A topic with no `guide` command of its own (`agents guide`,
+ * `store guide`, or an alias like `task-management guide`) is the reader
+ * asking for the front door — the ids come from the bundled registry, so a
+ * new guide becomes reachable here the release it ships, never by a second
+ * list kept in this file.
+ */
+const BUNDLED_GUIDE_NAMES = agent_guides_json_1.default.index.guides;
+function describeGuideRedirect(config, parts) {
+    if (parts.length !== 2 || parts[1].toLowerCase() !== 'guide')
+        return null;
+    // `skrr guide` itself must exist, and a real `<topic> guide` command answers for itself.
+    if (config.findCommand('guide') === undefined)
+        return null;
+    const typed = parts[0].toLowerCase();
+    const guide = BUNDLED_GUIDE_NAMES.find((entry) => entry.id === typed || (entry.aliases ?? []).includes(typed));
+    if (!guide)
+        return null;
+    const read = `${config.bin} guide ${guide.id}`;
+    return {
+        message: `\`${config.bin} ${parts.join(' ')}\` is not a command; ` +
+            `guides are read through \`${config.bin} guide\`.`,
+        fix: `  \`${read}\` — the ${guide.id} guide`,
+        suggestions: [read],
+    };
+}
 function describeIntentMiss(config, parts) {
     // An installed command (even one whose module cannot load) always owns its name.
     const known = [...config.commandIDs, ...config.topicNames];
@@ -285,8 +405,8 @@ function helpSubjectId(tokens, config) {
     return taken.join(':');
 }
 /** The text form: exactly what a miss has always printed. */
-function describeCommandMiss(config, id) {
-    const miss = analyzeCommandMiss(config, id);
+function describeCommandMiss(config, id, typedWords) {
+    const miss = analyzeCommandMiss(config, id, typedWords);
     return miss.fix ? `${miss.message}\n${miss.fix}` : miss.message;
 }
 /**
@@ -301,13 +421,19 @@ function describeCommandMiss(config, id) {
  *     suggest the nearest siblings under the same topic before falling back to
  *     the whole command list.
  */
-function analyzeCommandMiss(config, id) {
+function analyzeCommandMiss(config, id, typedWords) {
     const parts = String(id ?? '')
         .split(':')
         .filter(Boolean);
+    const taskRedirect = describeTaskCommandRedirect(config, parts, typedWords ?? parts);
+    if (taskRedirect)
+        return taskRedirect;
     const intent = describeIntentMiss(config, parts);
     if (intent)
         return intent;
+    const guideRedirect = describeGuideRedirect(config, parts);
+    if (guideRedirect)
+        return guideRedirect;
     for (let take = parts.length - 1; take >= 1; take -= 1) {
         const found = config.findCommand(parts.slice(0, take).join(':'));
         if (!found)
@@ -514,7 +640,7 @@ function typedCommandWords(id, rawArgv) {
  * the report found it.
  */
 function commandMissEnvelope(config, id, words) {
-    const miss = analyzeCommandMiss(config, id);
+    const miss = analyzeCommandMiss(config, id, words);
     return {
         ok: false,
         error: {

package/dist/lib/commerce-command.d.ts

@@ -16,8 +16,8 @@
  * required will not be fired with `{}` just because a path was omitted.
  */
 export declare const jsonBodyFlags: {
-    file: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
-    json: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+    file: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    json: import("@oclif/core/interfaces").BooleanFlag<boolean>;
 };
 export interface JsonBodyOwner {
     error(message: string, options?: {

package/dist/lib/commitment-endpoints.d.ts

@@ -1,7 +1,7 @@
 import { withQuery } from './triggers';
 export declare const ENDPOINT_CAPABILITIES: readonly ["push", "reply", "structuredAsk"];
 /** Derived from the one destination registry; never a second list. */
-export declare const COMMITMENT_ENDPOINT_DESTINATIONS: ("email" | "pinned" | "app_owner_dm" | "slack_owner_dm" | "slack_channel" | "main" | "discord_owner_dm" | "user_notify")[];
+export declare const COMMITMENT_ENDPOINT_DESTINATIONS: ("email" | "main" | "pinned" | "app_owner_dm" | "slack_owner_dm" | "slack_channel" | "discord_owner_dm" | "user_notify")[];
 export type EndpointCapability = (typeof ENDPOINT_CAPABILITIES)[number];
 export interface CommitmentEndpoint {
     id: string;

package/dist/lib/computer-use.js

@@ -20,7 +20,12 @@ async function forwardComputerUseCommand(command, action, argv) {
     };
     try {
         if ((await (0, exec_runtime_binary_1.runtimeBinarySupportsSubcommand)('computer-use')) === false) {
-            return fail('This local daemon does not support Computer Use. Update skrrd, then retry.', 'runtime_unsupported', 2);
+            return fail('The installed runtime command does not support Computer Use. ' +
+                'Run `skrr daemon status --json` to identify the running installation, then ' +
+                '`skrr update --check --json` to inspect available releases. ' +
+                'If the running daemon belongs to the Skrr desktop app, update that app. ' +
+                'An up-to-date runtime command can differ from the running daemon, and the latest ' +
+                'release may not include Computer Use yet. Retry only with a compatible official runtime.', 'runtime_unsupported', 2);
         }
         command.exit(await (0, exec_runtime_binary_1.execRuntimeBinary)(buildComputerUseArgs(action, argv)));
     }

package/dist/lib/continuityPreferences.d.ts

@@ -0,0 +1,3 @@
+import type { ContinuityPreferencesResponse, UpdateContinuityPreferencesRequest } from '@skrr-ai/data-provider';
+export declare function continuityPreferencesInput(raw: unknown, explicitAgentId?: string): UpdateContinuityPreferencesRequest;
+export declare function continuityPreferencesLines(result: ContinuityPreferencesResponse): string[];

package/dist/lib/continuityPreferences.js

@@ -0,0 +1,42 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.continuityPreferencesInput = continuityPreferencesInput;
+exports.continuityPreferencesLines = continuityPreferencesLines;
+function continuityPreferencesInput(raw, explicitAgentId) {
+    if (!raw || typeof raw !== 'object' || Array.isArray(raw))
+        throw new Error('Expected a preferences update object.');
+    const body = raw;
+    const allowed = ['agentId', 'expectedRevision', 'proactiveContributions', 'automaticReturns', 'allowHostedInference', 'inherit'];
+    if (Object.keys(body).some((key) => !allowed.includes(key)))
+        throw new Error('Unsupported preferences field. Supply only settings, scope and expectedRevision.');
+    if (!Number.isSafeInteger(body.expectedRevision) || body.expectedRevision < 0)
+        throw new Error('expectedRevision must be a nonnegative integer from the selected scope.');
+    if (body.agentId !== undefined && (typeof body.agentId !== 'string' || !body.agentId.trim()))
+        throw new Error('agentId must be a nonempty string.');
+    if (explicitAgentId && body.agentId && explicitAgentId !== body.agentId)
+        throw new Error('--agent conflicts with agentId in the input.');
+    const agentId = explicitAgentId || body.agentId;
+    const fields = ['proactiveContributions', 'automaticReturns', 'allowHostedInference'];
+    for (const key of fields) {
+        if (body[key] !== undefined && typeof body[key] !== 'boolean' && !(key === 'allowHostedInference' && body[key] === null))
+            throw new Error(`${key} must be a boolean${key === 'allowHostedInference' ? ' or null to inherit' : ''}.`);
+    }
+    if (body.inherit !== undefined && body.inherit !== true)
+        throw new Error('inherit must be true when supplied.');
+    if (body.inherit === true && (!agentId || fields.some((key) => body[key] !== undefined)))
+        throw new Error('inherit requires an agentId and cannot be combined with individual settings.');
+    if (body.inherit !== true && !fields.some((key) => body[key] !== undefined))
+        throw new Error('Supply at least one preference setting or inherit:true.');
+    return { ...body, ...(agentId ? { agentId } : {}) };
+}
+function continuityPreferencesLines(result) {
+    const hosted = result.settings.allowHostedInference;
+    return [
+        `Scope: ${result.scope.agentId ? `agent ${result.scope.agentId}` : 'account'} (r${result.revision})`,
+        `Proactive contributions: ${result.preferences.proactiveContributions ? 'on' : 'off'}`,
+        `Automatic returns: ${result.preferences.automaticReturns ? 'on' : 'off'}`,
+        `Hosted continuity analysis: ${hosted === null ? 'inherit' : hosted ? 'allowed' : 'disallowed'}`,
+        `Effective hosted permission: ${result.preferences.effectiveHostedInferenceAllowed ? 'allowed' : 'disallowed'}`,
+        'Hosted permission covers private continuity analysis separately from the primary agent route; it does not guarantee an available inference route.',
+    ];
+}

package/dist/lib/dedicated-lease-command.d.ts

@@ -7,9 +7,9 @@ import { type DedicatedWaitGoal } from './dedicated-wait';
  * is a field, not a state (see `dedicated-wait.ts`).
  */
 export declare const dedicatedWaitFlags: {
-    wait: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
-    timeout: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
-    interval: import("@oclif/core/lib/interfaces").OptionFlag<number | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+    wait: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+    timeout: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    interval: import("@oclif/core/interfaces").OptionFlag<number | undefined, import("@oclif/core/interfaces").CustomOptions>;
 };
 /** The lease argument that means "the machine this command is running on". */
 export declare const DEDICATED_SELF_LEASE = "self";

package/dist/lib/dedicated-service-command.d.ts

@@ -7,15 +7,15 @@ import { DedicatedServiceChannel, type ServiceVerb, type TerminalVerb } from './
  * mutual-exclusion rules differ.
  */
 export declare const serviceSpecFlags: {
-    name: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
-    cwd: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
-    env: import("@oclif/core/lib/interfaces").OptionFlag<string[] | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
-    restart: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
-    notify: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
-    'stop-timeout': import("@oclif/core/lib/interfaces").OptionFlag<number | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
-    'limit-memory': import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
-    'limit-cpu': import("@oclif/core/lib/interfaces").OptionFlag<number | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
-    'limit-pids': import("@oclif/core/lib/interfaces").OptionFlag<number | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+    name: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    cwd: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    env: import("@oclif/core/interfaces").OptionFlag<string[] | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    restart: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    notify: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+    'stop-timeout': import("@oclif/core/interfaces").OptionFlag<number | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    'limit-memory': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    'limit-cpu': import("@oclif/core/interfaces").OptionFlag<number | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    'limit-pids': import("@oclif/core/interfaces").OptionFlag<number | undefined, import("@oclif/core/interfaces").CustomOptions>;
 };
 /** The lease arg every service command takes, with `self` support. */
 export declare const SERVICE_LEASE_ARG_DESCRIPTION = "Dedicated Runtime lease id, or `self` when running on the machine itself";

package/dist/lib/exec-runtime-binary.d.ts

@@ -53,7 +53,7 @@ export declare function normalizeRuntimeGlobalArgs(args: readonly string[]): str
  * `dush1023/skrr/skrrd`, `raw.githubusercontent.com/dush1023/skrr/...` and
  * `github.com/dush1023/skrr` — none of which exist. The tap
  * `dush1023/homebrew-skrr` 404s; only `dush1023/homebrew-oversky` is
- * published, and the repository is still `dush1023/OverSky`.
+ * published, and the repository is still `skrr-ai/OverSky`.
  *
  * An install instruction is only worth what it installs. Renaming these
  * before the tap and repository move produces a message that reads correct

package/dist/lib/exec-runtime-binary.js

@@ -183,7 +183,7 @@ function isExecutable(p) {
  * `dush1023/skrr/skrrd`, `raw.githubusercontent.com/dush1023/skrr/...` and
  * `github.com/dush1023/skrr` — none of which exist. The tap
  * `dush1023/homebrew-skrr` 404s; only `dush1023/homebrew-oversky` is
- * published, and the repository is still `dush1023/OverSky`.
+ * published, and the repository is still `skrr-ai/OverSky`.
  *
  * An install instruction is only worth what it installs. Renaming these
  * before the tap and repository move produces a message that reads correct
@@ -200,8 +200,8 @@ function notInstalledMessage() {
         '',
         'Install:',
         '  macOS:   brew install dush1023/oversky/oversky',
-        '  Linux:   curl -fsSL https://raw.githubusercontent.com/dush1023/OverSky/main/scripts/install-daemon.sh | bash',
-        '  Other:   https://github.com/dush1023/OverSky#installation',
+        '  Linux:   curl -fsSL https://raw.githubusercontent.com/skrr-ai/OverSky/main/scripts/install-daemon.sh | bash',
+        '  Other:   https://github.com/skrr-ai/OverSky#installation',
         '',
         'Once installed, re-run your command.',
     ].join('\n');

package/dist/lib/first-party-harness-remote-install.d.ts

@@ -26,9 +26,9 @@ export default class CodeInstall extends BaseCommand {
     static description: string;
     static examples: string[];
     static flags: {
-        daemon: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
-        wait: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
-        json: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+        daemon: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        wait: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        json: import("@oclif/core/interfaces").BooleanFlag<boolean>;
     };
     run(): Promise<void>;
     /** Which daemon the install targets, by the rule every daemon-picking command shares. */

package/dist/lib/first-party-harness-remote-update.d.ts

@@ -21,9 +21,9 @@ export default class CodeUpdate extends BaseCommand {
     static description: string;
     static examples: string[];
     static flags: {
-        daemon: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
-        wait: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
-        json: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+        daemon: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        wait: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        json: import("@oclif/core/interfaces").BooleanFlag<boolean>;
     };
     run(): Promise<void>;
     /** Which daemon the update targets, by the rule every daemon-picking command shares. */

package/dist/lib/followups.d.ts

@@ -23,7 +23,7 @@ export declare function settledLine(id: string, result: Record<string, unknown>,
  * (OSK-9676). Refused at parse time instead, so it renders where a missing
  * argument does, with usage, before any request is sent.
  */
-export declare const followUpIdArg: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;
+export declare const followUpIdArg: import("@oclif/core/interfaces").Arg<string, Record<string, unknown>>;
 export { FOLLOWUP_KINDS, FOLLOWUP_STATES, FOLLOWUP_RESOLVE_OUTCOMES, type FollowUpKind, } from '@skrr-ai/data-provider';
 export declare const WATCH_WAIT_KINDS: readonly ["clock", "event", "poll_until"];
 export type WatchWaitKind = (typeof WATCH_WAIT_KINDS)[number];

package/dist/lib/guide-pointer.d.ts

@@ -0,0 +1,15 @@
+/** The one section a refusal code points at, plus the command that reads it. */
+export interface AgentGuidePointer {
+    id: string;
+    section: string;
+    /** `skrr guide <id> <section>` — what the `Guide:` line and `error.guide.command` carry. */
+    command: string;
+}
+/**
+ * The pointer for a refusal code: `{id, section, command}`, or `null` when no
+ * section explains it, the error carries no code, or the bundled vocabulary is
+ * unavailable. Never throws.
+ */
+export declare function agentGuidePointerFor(code: string | null | undefined): AgentGuidePointer | null;
+/** The `Guide:` line a refusal's human text ends with. */
+export declare function agentGuidePointerLine(pointer: AgentGuidePointer): string;