@skrr-ai/cli 0.1.122 → 0.1.124

package/dist/commands/agents/chat.d.ts

@@ -155,6 +155,12 @@ export declare function noOutputFailureMessage(input: {
     text?: string;
     conversationId?: string | null;
 }): string | null;
+/**
+ * What a failed run says for itself. The reason is whatever the terminal event
+ * carries (see `terminalFailureMessage`); only a failure that carries none gets
+ * the generic sentence.
+ */
+export declare function agentRunFailureMessage(result: Pick<AgenticStreamResult, 'lastEvent'>): string;
 export declare function noStreamJsonPayload(input: {
     result: AgenticStreamResult;
     conversationId?: string;
@@ -222,6 +228,7 @@ export default class AgentsChat extends BaseCommand {
         'thread-root': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
         'no-stream': import("@oclif/core/interfaces").BooleanFlag<boolean>;
         quick: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        incremental: import("@oclif/core/interfaces").BooleanFlag<boolean>;
         jsonl: import("@oclif/core/interfaces").BooleanFlag<boolean>;
         json: import("@oclif/core/interfaces").BooleanFlag<boolean>;
         'repair-wait': import("@oclif/core/interfaces").OptionFlag<number, import("@oclif/core/interfaces").CustomOptions>;

package/dist/commands/agents/chat.js

@@ -9,6 +9,7 @@ exports.handoverInterruptMessage = handoverInterruptMessage;
 exports.interruptAction = interruptAction;
 exports.inspectTurnCommand = inspectTurnCommand;
 exports.noOutputFailureMessage = noOutputFailureMessage;
+exports.agentRunFailureMessage = agentRunFailureMessage;
 exports.noStreamJsonPayload = noStreamJsonPayload;
 exports.chatStreamHeaderLines = chatStreamHeaderLines;
 exports.daemonPinFields = daemonPinFields;
@@ -259,6 +260,14 @@ function noOutputFailureMessage(input) {
     return (`The turn ended with no output (status: ${input.status}). ` +
         `It may have failed on the runtime. Inspect it with: ${inspectTurnCommand(input.conversationId)}`);
 }
+/**
+ * What a failed run says for itself. The reason is whatever the terminal event
+ * carries (see `terminalFailureMessage`); only a failure that carries none gets
+ * the generic sentence.
+ */
+function agentRunFailureMessage(result) {
+    return (0, agentic_stream_1.terminalFailureMessage)(result.lastEvent) ?? 'Agent run failed';
+}
 function noStreamJsonPayload(input) {
     const { result, conversationId, agentId, baseURL, threadRootMessageId } = input;
     return {
@@ -281,9 +290,9 @@ function noStreamJsonPayload(input) {
             ? {
                 failureReason: result.lastEvent?.reason ??
                     result.lastEvent?.code ??
-                    result.lastEvent?.message ??
+                    (0, agentic_stream_1.terminalFailureMessage)(result.lastEvent) ??
                     'agent_run_failed',
-                error: result.lastEvent?.message ?? 'Agent run failed',
+                error: agentRunFailureMessage(result),
                 terminalEvent: result.lastEvent,
             }
             : {}),
@@ -370,10 +379,20 @@ class AgentsChat extends base_command_1.BaseCommand {
                 'agent’s runtime, tools, session, or working directory and cannot perform work — ' +
                 'it is for inline text assistance. Use --no-stream for a real turn.',
         }),
+        incremental: core_1.Flags.boolean({
+            description: 'With --jsonl, make `text.delta` a real delta: it carries only `delta`, the characters ' +
+                'it adds, instead of the whole answer so far, and leaves out the envelopes that ' +
+                '`session.output` already carries. A rewrite that is not an append arrives as ' +
+                '`replace`, the new full text. `run.result` still holds the whole answer. Without it ' +
+                'a long answer written as JSON lines grows with the square of its length.',
+            dependsOn: ['jsonl'],
+        }),
         jsonl: core_1.Flags.boolean({
             description: 'Emit one JSON event per line while streaming. Every line is a complete JSON value. ' +
                 'Assistant text arrives as `text.delta` whose `text` is the CUMULATIVE answer so far, ' +
-                'not a delta — take the last one, or `run.result` at the end. The same text is ' +
+                'not a delta — take the last one, or `run.result` at the end. Each `text.delta` also ' +
+                'carries `delta`, the characters it adds, when it only appends to the one before; ' +
+                'with --incremental it carries nothing else of the text (see that flag). The same text is ' +
                 'mirrored inside `session.output` envelopes for consumers that want the raw stream, ' +
                 'so folding both doubles the answer: pick ONE lane. A widget the agent wrote ' +
                 '(a block of CSS, HTML and JavaScript the apps draw) is its text description in ' +
@@ -392,7 +411,11 @@ class AgentsChat extends base_command_1.BaseCommand {
                 'and local-harness runs alike. A `session.notice` with `notice: ' +
                 '"harness-session-reset"` means the local harness could not resume its previous ' +
                 'session and started a new one, which does not see earlier turns of the ' +
-                'conversation; `message` says why. A `permission.resolved` says ' +
+                'conversation; `message` says why. `notice: "model-request-retrying"` means the ' +
+                'model rejected or could not answer a request and the harness is retrying it: ' +
+                '`message` names the cause (for example the model rejecting the credentials on ' +
+                'this machine, HTTP 403) and the attempt, a few times per retry episode, so a ' +
+                'run that looks quiet is not. A `permission.resolved` says ' +
                 'how a local harness permission request was decided: `decidedBy` in words, and ' +
                 '`basis` — `person` (with `surface`), `mode` (with `mode`), `policy` or ' +
                 '`session-grant` — beside the wire `by`. When a platform update restarts the server ' +
@@ -404,7 +427,9 @@ class AgentsChat extends base_command_1.BaseCommand {
                 'the machine finished; `run.failed` with `handover.outcome: "machine_failed"` and the ' +
                 'machine\'s reason when it did not; or `run.failed` with `handover.outcome: "expired"` ' +
                 'and the original failure when --repair-wait ran out (exit 1 for both). Ctrl-C during ' +
-                'the wait emits `run.detached` with `handedOver: true` and exits 130.',
+                'the wait emits `run.detached` with `handedOver: true` and exits 130. Whenever a run ' +
+                'fails, `run.failed` carries `message`, the reason in words as the platform gave it (the ' +
+                'same sentence a terminal prints after `Error:`), beside the short `reason`.',
         }),
         json: core_1.Flags.boolean({
             description: 'Emit the final one-shot response as JSON (use with --no-stream)',
@@ -788,6 +813,7 @@ class AgentsChat extends base_command_1.BaseCommand {
             sessionId: started.sessionId,
             conversationId,
             jsonl: flags.jsonl,
+            incrementalText: flags.incremental,
             quiet,
             approveTools: flags['approve-tools'],
             reconcileTerminal,
@@ -966,7 +992,7 @@ class AgentsChat extends base_command_1.BaseCommand {
                     process.exitCode = 1;
             }
             else if (result.status === 'failed') {
-                this.error(String(result.lastEvent?.message ?? 'Agent run failed'), { exit: 1 });
+                this.error(agentRunFailureMessage(result), { exit: 1 });
             }
             else if (quiet) {
                 // Non-streaming human output: the answer the turn produced.

package/dist/commands/agents/delete.d.ts

@@ -8,6 +8,14 @@ import { BaseCommand } from '../../base-command';
 export declare function agentRemovalQuestion(agentId: string, kind: AgentRemovalKind | null): string;
 /** What happened, read from the server's response rather than predicted. */
 export declare function agentRemovalReport(agentId: string, response: DeleteAgentResponse | undefined): string;
+/**
+ * What became of the agent's Personal Context data, read from the same response
+ * (OSK-20112). The agent row is gone as soon as the delete returns, but data
+ * derived from its connected sources is erased separately: `Deleted agent` must
+ * never stand in for "erased". Nothing is printed when the server reported
+ * nothing (an older server, or an uninstall, which erases nothing).
+ */
+export declare function agentErasureReport(response: DeleteAgentResponse | undefined): string[];
 export default class AgentsDelete extends BaseCommand {
     static description: string;
     static examples: string[];

package/dist/commands/agents/delete.js

@@ -2,6 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.agentRemovalQuestion = agentRemovalQuestion;
 exports.agentRemovalReport = agentRemovalReport;
+exports.agentErasureReport = agentErasureReport;
 const core_1 = require("@oclif/core");
 const data_provider_1 = require("@skrr-ai/data-provider");
 const base_command_1 = require("../../base-command");
@@ -38,6 +39,19 @@ function agentRemovalReport(agentId, response) {
             return `Deleted agent ${agentId}`;
     }
 }
+/**
+ * What became of the agent's Personal Context data, read from the same response
+ * (OSK-20112). The agent row is gone as soon as the delete returns, but data
+ * derived from its connected sources is erased separately: `Deleted agent` must
+ * never stand in for "erased". Nothing is printed when the server reported
+ * nothing (an older server, or an uninstall, which erases nothing).
+ */
+function agentErasureReport(response) {
+    if ((0, data_provider_1.agentRemovalKind)(response) !== 'deleted')
+        return [];
+    const erasure = response && 'erasure' in response ? response.erasure : undefined;
+    return (0, data_provider_1.describePersonalContextErasure)(erasure)?.lines ?? [];
+}
 class AgentsDelete extends base_command_1.BaseCommand {
     static description = 'Delete an agent you created (irreversible), or uninstall one installed from the store (reinstalling restores it)';
     static examples = [
@@ -89,6 +103,8 @@ class AgentsDelete extends base_command_1.BaseCommand {
             this.handleApiError(err);
         }
         this.log(agentRemovalReport(args.id, response));
+        for (const line of agentErasureReport(response))
+            this.log(line);
     }
 }
 exports.default = AgentsDelete;

package/dist/commands/context.js

@@ -64,6 +64,13 @@ class Context extends base_command_1.BaseCommand {
                 path: (0, config_1.getConfigPath)(),
                 cliId: (0, cli_id_1.resolveCliId)(this.cliConfig) ?? null,
             },
+            // Silent about the DAEMON's device key on purpose (OSK-20507). This is the CLI's
+            // own sign-in, and the CLI never requires a device key (OSK-12063), so an
+            // unreadable one changes nothing an agent reading this can do. The daemon's
+            // account of its key is `skrr daemon status` (`problems`, from `/health`
+            // `deviceIdentity`), and the one line a `skrr` process prints about it is the
+            // notice in `lib/auth-core-init.ts`. Adding it here would put a machine fact
+            // beside a per-process one and read as this credential's state.
             auth: {
                 signedIn: Boolean(this.resolvedCredential?.token),
                 tokenSource: this.credentialSourceLabel(),

package/dist/commands/followups/act.js

@@ -100,6 +100,9 @@ class FollowupsAct extends base_command_1.BaseCommand {
             this.log(JSON.stringify(response, null, 2));
             return;
         }
+        const producerNotice = (0, followups_1.producerDowngradeNotice)(response);
+        if (producerNotice)
+            this.log(producerNotice);
         const row = response.followup;
         if (response.reused) {
             this.log(`Already armed: ${row?.id} — the same act exists and was not duplicated.`);

package/dist/commands/followups/checkin.js

@@ -126,6 +126,9 @@ class FollowupsCheckin extends base_command_1.BaseCommand {
             this.log(JSON.stringify(response, null, 2));
             return;
         }
+        const producerNotice = (0, followups_1.producerDowngradeNotice)(response);
+        if (producerNotice)
+            this.log(producerNotice);
         const row = response.followup;
         if (response.reused) {
             this.log(reusedMessage(row, subject, flags.why));

package/dist/commands/followups/remind.js

@@ -102,6 +102,9 @@ class FollowupsRemind extends base_command_1.BaseCommand {
             this.log(JSON.stringify(response, null, 2));
             return;
         }
+        const producerNotice = (0, followups_1.producerDowngradeNotice)(response);
+        if (producerNotice)
+            this.log(producerNotice);
         const row = response.followup;
         if (response.reused && response.rescheduled) {
             this.log(`Moved: ${row?.id} now fires at ${row?.nextRunAt ?? at} — the same reminder already existed, so it was rescheduled rather than duplicated.`);

package/dist/commands/followups/show.js

@@ -42,7 +42,7 @@ class FollowupsShow extends base_command_1.BaseCommand {
             ['says', row.content],
             ['why', row.why],
             ['intent', row.intentKey],
-            ['producer', row.producer],
+            ['producer', row.producerLabel ? `${row.producer} (${row.producerLabel})` : row.producer],
             ['gate', row.gate ? (GATE_LABEL[row.gate] ?? row.gate) : undefined],
             ['terminal', row.terminal ? `${row.terminal} (${row.terminalReason ?? '—'})` : undefined],
             [

package/dist/commands/followups/watch.js

@@ -237,6 +237,9 @@ class FollowupsWatch extends base_command_1.BaseCommand {
             this.log(JSON.stringify(response, null, 2));
             return;
         }
+        const producerNotice = (0, followups_1.producerDowngradeNotice)(response);
+        if (producerNotice)
+            this.log(producerNotice);
         const row = response.followup;
         if (response.reused) {
             this.log(`Already armed: ${row?.id} — an identical watch exists and was not duplicated.`);

package/dist/commands/search/workspace.js

@@ -104,7 +104,7 @@ class SearchWorkspace extends base_command_1.BaseCommand {
             url: `${(0, web_url_1.webOrigin)(this.cliConfig.baseURL)}${item.href}`,
         }));
         if (flags.json) {
-            this.log(JSON.stringify({ ...response, results }, null, 2));
+            this.printJsonResult({ ...response, results });
             return;
         }
         for (const diagnostic of new Set(response.diagnostics || []))

package/dist/commands/store/gallery-admissions/approve.js

@@ -24,7 +24,7 @@ class StoreGalleryAdmissionsApprove extends base_command_1.BaseCommand {
                 revision: flags.revision, digest: flags.digest, imagesReviewed: true, ...(flags.note ? { note: flags.note } : {}),
             });
             if (flags.json)
-                this.log(JSON.stringify(result, null, 2));
+                this.printJsonResult(result);
             else
                 this.log(`Approved gallery revision ${flags.revision}.`);
         }

package/dist/commands/store/gallery-admissions/preview.js

@@ -36,7 +36,7 @@ class StoreGalleryAdmissionsPreview extends base_command_1.BaseCommand {
             await (0, promises_1.writeFile)(flags.output, bytes, { flag: 'wx', mode: 0o600 });
             const receipt = { requestId: args.id, kind, revision: review.revision, digest: review.digest, imageId: args.imageId, sha256: digest, path: flags.output, bytes: bytes.length };
             if (flags.json)
-                this.log(JSON.stringify(receipt));
+                this.printJsonResult(receipt);
             else
                 this.log(`Wrote ${bytes.length} bytes to ${flags.output} (sha256:${digest}). Review revision ${review.revision}, digest ${review.digest}.`);
         }

package/dist/commands/store/gallery-admissions/refuse.js

@@ -23,7 +23,7 @@ class StoreGalleryAdmissionsRefuse extends base_command_1.BaseCommand {
                 revision: flags.revision, digest: flags.digest, note: flags.note.trim(),
             });
             if (flags.json)
-                this.log(JSON.stringify(result, null, 2));
+                this.printJsonResult(result);
             else
                 this.log(`Refused gallery revision ${flags.revision}.`);
         }

package/dist/commands/store/gallery-admissions/show.js

@@ -16,7 +16,7 @@ class StoreGalleryAdmissionsShow extends base_command_1.BaseCommand {
         try {
             const result = await data_provider_1.dataService.getStoreGalleryAdmission(flags.kind, args.id);
             if (flags.json) {
-                this.log(JSON.stringify(result, null, 2));
+                this.printJsonResult(result);
                 return;
             }
             const r = result.review;

package/dist/lib/agentic-stream.d.ts

@@ -11,11 +11,31 @@ import { type PublicProjection, type AssistantTextJoiner } from '@skrr-ai/data-p
  * — consent nobody gave, on a form nobody saw (OSK-10274).
  */
 export declare const NON_INTERACTIVE_QUESTION_DISMISSAL: string;
+/**
+ * A terminal that has printed the header and nothing else for several seconds looks hung. The
+ * first line comes after this long with no output at all, and then again at this interval
+ * (OSK-20427). Typical waits are 4 to 6 seconds before the first words, so a quick reply
+ * prints nothing extra.
+ */
+export declare const WAITING_NOTICE_AFTER_MS = 2500;
+export declare const WAITING_NOTICE_EVERY_MS = 10000;
 export type AgenticStreamEvent = {
     type: string;
     sessionId?: string;
     [key: string]: unknown;
 };
+/**
+ * The sentence a failed run's terminal event gives for why it failed.
+ *
+ * The server's failure funnel (`handleSessionFailure`) sends `errors: [<sentence>]`
+ * and a short `reason`, never a `message`; other terminal events carry `message`,
+ * and a few an `error` string. Every reader used to look at `message` alone, so a
+ * run the platform refused ("no valid release package", "insufficient balance", a
+ * runtime that was not there) ended as `Error: Agent run failed` with the reason
+ * sitting unread in the same event (OSK-20410). One reader, in one order: the
+ * explicit `message`, then `error`, then the first entry of `errors`.
+ */
+export declare function terminalFailureMessage(event: Record<string, unknown> | null | undefined): string | undefined;
 export type AgenticStreamResult = {
     sessionId: string;
     responseMessageId?: string;
@@ -161,6 +181,12 @@ export type AgenticStreamOptions = {
     /** Action-required notices when stdout is reserved for a final result. */
     statusOutput?: NodeJS.WritableStream;
     jsonl?: boolean;
+    /**
+     * With `jsonl`, a `text.delta` carries only the characters it adds (`delta`), not the whole
+     * answer so far, and not the envelopes `session.output` already carries. A rewrite that is not
+     * an append arrives as `replace`, the new full text. `run.result` still holds the whole answer.
+     */
+    incrementalText?: boolean;
     approveTools?: boolean;
     input?: NodeJS.ReadableStream;
     output?: NodeJS.WritableStream;
@@ -579,6 +605,12 @@ export declare class AgenticStreamClient {
     private readonly openQuestionPrompts;
     /** Text already written to the terminal, for suffix-only rendering. */
     private renderedText;
+    /** The "still waiting" line for a terminal run with no output yet (OSK-20427). */
+    private waitingTimer;
+    private waitingStartedAt;
+    private outputSeen;
+    /** The cumulative text of the last `text.delta` written as JSON, for `delta`/`replace`. */
+    private lastJsonlText;
     private idleTimer;
     /** Releases a connect wait still in flight; `close()` calls it. */
     private abandonConnectWait;
@@ -777,6 +809,20 @@ export declare class AgenticStreamClient {
      * passed through, preserving prior behaviour.
      */
     private emitToolEvent;
+    /**
+     * Say so when a terminal run has been quiet since it started. Human output only: a script
+     * reading --jsonl has the events, and --quiet asked for nothing but the answer.
+     */
+    private trackWaiting;
+    private stopWaiting;
+    /**
+     * A `text.delta` is named for a delta and carries the whole answer so far (`text`), so a long
+     * answer written as JSON lines grows with the square of its length: 207 events for a 2.4 KB
+     * answer came to about 250 KB (OSK-20428). The contract stays, since scripts take the last one;
+     * `delta` is added to it, and `incrementalText` turns the cumulative text and the duplicated
+     * envelopes off for a consumer that wants only what is new.
+     */
+    private jsonlView;
     private emit;
     /**
      * Human-mode lines for the hand-over wait. Returns true when the event is

package/dist/lib/agentic-stream.js

@@ -1,6 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.AgenticStreamClient = exports.USER_CONNECTION_CAP_CODE = exports.CODEX_DECLINED_TOOL_OUTPUTS = exports.TYPE_AHEAD_DISCARD_MS = exports.HANDOVER_POLL_INTERVAL_MS = exports.DAEMON_HANDOVER_REASON = exports.WORKER_REPLACED_CODE = exports.NON_INTERACTIVE_QUESTION_DISMISSAL = void 0;
+exports.AgenticStreamClient = exports.USER_CONNECTION_CAP_CODE = exports.CODEX_DECLINED_TOOL_OUTPUTS = exports.TYPE_AHEAD_DISCARD_MS = exports.HANDOVER_POLL_INTERVAL_MS = exports.DAEMON_HANDOVER_REASON = exports.WORKER_REPLACED_CODE = exports.WAITING_NOTICE_EVERY_MS = exports.WAITING_NOTICE_AFTER_MS = exports.NON_INTERACTIVE_QUESTION_DISMISSAL = void 0;
+exports.terminalFailureMessage = terminalFailureMessage;
 exports.isDaemonHandoverFailure = isDaemonHandoverFailure;
 exports.formatWaitDuration = formatWaitDuration;
 exports.writeJsonLine = writeJsonLine;
@@ -46,6 +47,47 @@ const dpop_auth_1 = require("./dpop-auth");
  */
 exports.NON_INTERACTIVE_QUESTION_DISMISSAL = 'No answer: this turn was started non-interactively (no terminal), so nobody can reply to ' +
     'questions. Proceed with your best judgement, or finish by stating exactly what you need.';
+/**
+ * A terminal that has printed the header and nothing else for several seconds looks hung. The
+ * first line comes after this long with no output at all, and then again at this interval
+ * (OSK-20427). Typical waits are 4 to 6 seconds before the first words, so a quick reply
+ * prints nothing extra.
+ */
+exports.WAITING_NOTICE_AFTER_MS = 2500;
+exports.WAITING_NOTICE_EVERY_MS = 10_000;
+/** What counts as the run having said something, so the waiting line stops. */
+const OUTPUT_EVENT_TYPES = new Set([
+    'text.delta',
+    'tool.started',
+    'tool.completed',
+    'session.notice',
+    'permission.requested',
+    'run.completed',
+    'run.failed',
+    'run.aborted',
+    'run.handed_over',
+]);
+/**
+ * The sentence a failed run's terminal event gives for why it failed.
+ *
+ * The server's failure funnel (`handleSessionFailure`) sends `errors: [<sentence>]`
+ * and a short `reason`, never a `message`; other terminal events carry `message`,
+ * and a few an `error` string. Every reader used to look at `message` alone, so a
+ * run the platform refused ("no valid release package", "insufficient balance", a
+ * runtime that was not there) ended as `Error: Agent run failed` with the reason
+ * sitting unread in the same event (OSK-20410). One reader, in one order: the
+ * explicit `message`, then `error`, then the first entry of `errors`.
+ */
+function terminalFailureMessage(event) {
+    if (!event)
+        return undefined;
+    const sentence = (value) => typeof value === 'string' && value.trim() ? value : undefined;
+    const entryText = (entry) => sentence(entry) ?? sentence(entry?.message);
+    const fromList = Array.isArray(event.errors)
+        ? event.errors.map(entryText).find((entry) => entry !== undefined)
+        : undefined;
+    return sentence(event.message) ?? sentence(event.error) ?? fromList;
+}
 /**
  * OSK-13517 / OSK-13543 — the one failure that is not an ending.
  *
@@ -807,6 +849,12 @@ class AgenticStreamClient {
     openQuestionPrompts = new Map();
     /** Text already written to the terminal, for suffix-only rendering. */
     renderedText = '';
+    /** The "still waiting" line for a terminal run with no output yet (OSK-20427). */
+    waitingTimer = null;
+    waitingStartedAt = 0;
+    outputSeen = false;
+    /** The cumulative text of the last `text.delta` written as JSON, for `delta`/`replace`. */
+    lastJsonlText = '';
     idleTimer = null;
     /** Releases a connect wait still in flight; `close()` calls it. */
     abandonConnectWait = null;
@@ -1012,6 +1060,7 @@ class AgenticStreamClient {
         if (this.replayTimer)
             clearTimeout(this.replayTimer);
         this.replayTimer = null;
+        this.stopWaiting();
         this.stopHandoverTimers();
         this.pendingEnvelopes.clear();
         this.browserPermissionRequests.clear();
@@ -1079,10 +1128,7 @@ class AgenticStreamClient {
         const deadlineTimer = setTimeout(() => void this.expireHandover(), opts.maxWaitMs);
         const pollTimer = setInterval(() => this.requestHandoverRead(), opts.pollIntervalMs ?? exports.HANDOVER_POLL_INTERVAL_MS);
         this.handover = { event, startedAt, deadlineTimer, pollTimer, reading: null, readAgain: false };
-        const firstError = Array.isArray(event.errors) && typeof event.errors[0] === 'string'
-            ? event.errors[0]
-            : undefined;
-        const message = typeof event.message === 'string' && event.message ? event.message : firstError;
+        const message = terminalFailureMessage(event);
         this.emit({
             type: 'run.handed_over',
             sessionId: this.options.sessionId,
@@ -1745,6 +1791,10 @@ class AgenticStreamClient {
             return;
         }
         if (!this.options.approveTools || !this.socket) {
+            // This CLI makes the decision and nobody is asked, so it says so FIRST. The bound path used
+            // to return before any event, and the only lines a person saw were the server's "The
+            // response was admitted. Tool execution is not confirmed.", which read like an approval.
+            this.emit({ ...event, type: 'permission.denied', reason: 'noninteractive_or_not_enabled' });
             if (event.toolUseId) {
                 if (await this.sendBoundPermissionDecision(event, false, { reason: 'CLI was not started with --approve-tools', automatic: true }))
                     return;
@@ -1759,7 +1809,6 @@ class AgenticStreamClient {
                     automatic: true,
                 });
             }
-            this.emit({ ...event, type: 'permission.denied', reason: 'noninteractive_or_not_enabled' });
             return;
         }
         /**
@@ -1782,6 +1831,14 @@ class AgenticStreamClient {
          */
         const interactive = this.options.input !== undefined || Boolean(process.stdin.isTTY);
         if (!interactive) {
+            // Announced before it is sent, as the denial is: the bound path used to return first, so
+            // "allowed by --approve-tools" never reached a person who used the flag.
+            this.emit({
+                ...event,
+                type: 'permission.approved',
+                auto: true,
+                reason: 'approved by --approve-tools, which was given with no terminal to ask at',
+            });
             if (await this.sendBoundPermissionDecision(event, true))
                 return;
             this.socket.emit('permission:approve', {
@@ -1789,12 +1846,6 @@ class AgenticStreamClient {
                 toolUseId: event.toolUseId,
                 toolName: event.toolName,
             });
-            this.emit({
-                ...event,
-                type: 'permission.approved',
-                auto: true,
-                reason: 'approved by --approve-tools, which was given with no terminal to ask at',
-            });
             return;
         }
         const prompt = new AbortController();
@@ -2084,6 +2135,60 @@ class AgenticStreamClient {
             return;
         this.emit(event);
     }
+    /**
+     * Say so when a terminal run has been quiet since it started. Human output only: a script
+     * reading --jsonl has the events, and --quiet asked for nothing but the answer.
+     */
+    trackWaiting(event, output) {
+        if (OUTPUT_EVENT_TYPES.has(event.type)) {
+            this.outputSeen = true;
+            this.stopWaiting();
+            return;
+        }
+        if (event.type !== 'run.started' || this.outputSeen || this.waitingTimer)
+            return;
+        this.waitingStartedAt = Date.now();
+        const schedule = (first) => {
+            this.waitingTimer = setTimeout(() => {
+                this.waitingTimer = null;
+                if (this.outputSeen || this.closed)
+                    return;
+                const seconds = Math.floor((Date.now() - this.waitingStartedAt) / 1000);
+                output.write(first
+                    ? '[run] waiting for the agent to start answering…\n'
+                    : `[run] still waiting for the agent (${seconds} s)…\n`);
+                schedule(false);
+            }, first ? exports.WAITING_NOTICE_AFTER_MS : exports.WAITING_NOTICE_EVERY_MS);
+            // A reminder must never be the reason the process stays alive.
+            this.waitingTimer.unref?.();
+        };
+        schedule(true);
+    }
+    stopWaiting() {
+        if (this.waitingTimer)
+            clearTimeout(this.waitingTimer);
+        this.waitingTimer = null;
+    }
+    /**
+     * A `text.delta` is named for a delta and carries the whole answer so far (`text`), so a long
+     * answer written as JSON lines grows with the square of its length: 207 events for a 2.4 KB
+     * answer came to about 250 KB (OSK-20428). The contract stays, since scripts take the last one;
+     * `delta` is added to it, and `incrementalText` turns the cumulative text and the duplicated
+     * envelopes off for a consumer that wants only what is new.
+     */
+    jsonlView(event) {
+        if (event.type !== 'text.delta' || typeof event.text !== 'string')
+            return event;
+        const previous = this.lastJsonlText;
+        const text = event.text;
+        this.lastJsonlText = text;
+        const appended = text.startsWith(previous) ? text.slice(previous.length) : undefined;
+        if (!this.options.incrementalText) {
+            return appended === undefined ? event : { ...event, delta: appended };
+        }
+        const { text: _text, envelopes: _envelopes, ...rest } = event;
+        return appended === undefined ? { ...rest, replace: text } : { ...rest, delta: appended };
+    }
     emit(event) {
         this.lastEvent = event;
         this.options.onEvent?.(event);
@@ -2108,9 +2213,10 @@ class AgenticStreamClient {
             return;
         const output = this.options.output ?? process.stdout;
         if (this.options.jsonl) {
-            writeJsonLine(output, event);
+            writeJsonLine(output, this.jsonlView(event));
             return;
         }
+        this.trackWaiting(event, output);
         if (event.type === 'run.started') {
             const permission = describeRunPermission(event);
             if (permission)
@@ -2192,6 +2298,12 @@ class AgenticStreamClient {
             output.write(`\n[question] ${why}\n`);
             this.renderedText = this.answerText();
         }
+        else if (event.type === 'permission.denied' && event.reason === 'noninteractive_or_not_enabled') {
+            // Said out loud, because nobody was asked and the agent will not say it plainly: this run
+            // had no terminal to ask at and was not given --approve-tools, so the call was refused.
+            output.write(`\n[permission] ${describePermission(event)} denied: nobody could be asked, and this run was not started with --approve-tools\n`);
+            this.renderedText = this.answerText();
+        }
         else if (event.type === 'permission.approved' && event.auto === true) {
             // Said out loud, because nobody was asked: the flag approved it, and a
             // reader of this log should see which tools that covered (OSK-10323).
@@ -2379,7 +2491,16 @@ class AgenticStreamClient {
                 output.write(append);
             output.write('\n');
         }
-        this.emit({ ...event, type: `run.${status}` });
+        // A failed run states why under the one key a script reads (`message`), whichever
+        // shape the terminal event used. `lastEvent` below stays the event as received.
+        const failureMessage = status === 'failed' && !(typeof event.message === 'string' && event.message.trim())
+            ? terminalFailureMessage(event)
+            : undefined;
+        this.emit({
+            ...event,
+            ...(failureMessage ? { message: failureMessage } : {}),
+            type: `run.${status}`,
+        });
         this.close();
         this.terminalResult = {
             sessionId: this.options.sessionId,

package/dist/lib/auth-core-init.d.ts

@@ -38,9 +38,22 @@ export declare function plainCredentialEnvelopeWarning(args: readonly unknown[])
 export declare const CREDENTIAL_KEY_CHANGED_NOTICE: string;
 /**
  * The one line an unreadable device key prints when no credential-key change
- * explains it. The CLI never enrolls or requires a device key (OSK-12063), so
- * this degrades a proof, not access — say exactly that.
+ * explains it (OSK-20506).
+ *
+ * The CLI never enrolls or requires a device key (OSK-12063), so this degrades a
+ * proof, not a sign-in: say exactly that. What it must not do is point at
+ * `skrr login`. That signs this CLI in on its own and never creates or replaces a
+ * device key, so a person who followed it would be told the same thing on the next
+ * command. Only an interactive daemon sign-in mints a key and re-pins it, and which
+ * one depends on who runs the daemon, so this uses the sentence the hand-off
+ * refusals use for the same repair (`daemonSignInRemedy`) rather than a second
+ * spelling.
+ *
+ * `profile` names the command for a non-default profile: a bare `skrr daemon login`
+ * signs the default daemon in and leaves this one as it was (OSK-16435).
  */
+export declare function deviceKeyRecoveryRequiredNotice(profile?: string): string;
+/** The notice for the default profile. */
 export declare const DEVICE_KEY_RECOVERY_REQUIRED_NOTICE: string;
 export declare function createCredentialEnvelopeWarningPresenter(): (args: readonly unknown[]) => string | null;
 type DedicatedGenerationPreparationOptions = {