@skrr-ai/cli 0.1.124 → 0.1.126

package/dist/commands/agents/chat.d.ts

@@ -25,6 +25,28 @@ export declare const DETACH_EXIT_CODE = 130;
  * answers true.
  */
 export declare const STREAM_LOST_EXIT_CODE = 75;
+/**
+ * The signals that stop a running chat.
+ *
+ * Ctrl-C was the only one handled (OSK-2938). SIGTERM (a CI cancel, `timeout`, a process manager) and
+ * SIGHUP (the terminal closing) killed the CLI in under 100 ms with no cancel sent, so the agent kept
+ * running tools on the person's machine with nobody watching and held the folder, and the next message
+ * was refused as `managed_task_workspace_busy` (OSK-20677). `machines dedicated cp` already treats all
+ * three as cancel and exits as a shell would; this does the same.
+ */
+export declare const INTERRUPT_SIGNALS: readonly ["SIGINT", "SIGTERM", "SIGHUP"];
+export type InterruptSignal = (typeof INTERRUPT_SIGNALS)[number];
+/** 128 plus the signal's number, as a shell reports a process the signal killed: 130, 143, 129. */
+export declare function interruptExitCode(signal: InterruptSignal | null): number;
+/**
+ * The cancel notice, in words that fit the signal. "Press Ctrl-C again" is wrong advice after a
+ * SIGTERM, and after SIGHUP nobody is looking: the terminal that would show it is gone.
+ */
+export declare function cancelNotice(input: {
+    signal: InterruptSignal;
+    sessionId: string;
+    graceSeconds: number;
+}): string | null;
 /**
  * Exit code for a streamed run that reached its terminal state: 1 when it
  * failed, 0 otherwise.
@@ -59,6 +81,31 @@ export declare function interruptedDetachMessage(input: {
     /** The second Ctrl-C: the CLI stopped waiting rather than running out the grace period. */
     forced?: boolean;
 }): string;
+/**
+ * `--jsonl` prints `text.delta` as a real delta unless `--cumulative` asks for the whole answer
+ * so far in every event. The cumulative form costs the square of the answer's length (a 57 KB
+ * answer printed 34.6 MB, OSK-20596), which is the wrong default for the mode scripts and other
+ * agents drive. `--incremental` is the old opt-in for what is now the default and changes nothing.
+ */
+export declare function jsonlTextForm(flags: {
+    cumulative?: boolean;
+}): {
+    incrementalText: boolean;
+};
+/**
+ * What to say when the user pressed Ctrl-C and the server then confirmed the run ended.
+ *
+ * The warning printed at the keypress ("a tool call already running on the runtime is not
+ * guaranteed to stop") is written before the outcome is known. When the run settles as `aborted`
+ * it is no longer the whole truth, and left as the last line it reads as a cancel that failed:
+ * the CLI exited without a word, the prompt came back, and a person could not tell whether to go
+ * and kill something (OSK-20603). A script has `run.result {status: "aborted"}`; a terminal gets
+ * this line. It claims what the server said, that the run ended, and nothing about processes.
+ */
+export declare function cancelledRunMessage(input: {
+    sessionId: string;
+    conversationId?: string | null;
+}): string;
 /**
  * What the durable record says about a turn, read from its messages.
  *
@@ -228,6 +275,7 @@ export default class AgentsChat extends BaseCommand {
         'thread-root': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
         'no-stream': import("@oclif/core/interfaces").BooleanFlag<boolean>;
         quick: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        cumulative: import("@oclif/core/interfaces").BooleanFlag<boolean>;
         incremental: import("@oclif/core/interfaces").BooleanFlag<boolean>;
         jsonl: import("@oclif/core/interfaces").BooleanFlag<boolean>;
         json: import("@oclif/core/interfaces").BooleanFlag<boolean>;

package/dist/commands/agents/chat.js

@@ -1,8 +1,12 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.MAX_HANDOVER_WAIT_SECONDS = exports.DEFAULT_HANDOVER_WAIT_SECONDS = exports.STREAM_LOST_EXIT_CODE = exports.DETACH_EXIT_CODE = void 0;
+exports.MAX_HANDOVER_WAIT_SECONDS = exports.DEFAULT_HANDOVER_WAIT_SECONDS = exports.INTERRUPT_SIGNALS = exports.STREAM_LOST_EXIT_CODE = exports.DETACH_EXIT_CODE = void 0;
+exports.interruptExitCode = interruptExitCode;
+exports.cancelNotice = cancelNotice;
 exports.streamedResultExitCode = streamedResultExitCode;
 exports.interruptedDetachMessage = interruptedDetachMessage;
+exports.jsonlTextForm = jsonlTextForm;
+exports.cancelledRunMessage = cancelledRunMessage;
 exports.reconcileTerminalFromMessages = reconcileTerminalFromMessages;
 exports.handoverStateFromMessages = handoverStateFromMessages;
 exports.handoverInterruptMessage = handoverInterruptMessage;
@@ -47,6 +51,35 @@ exports.DETACH_EXIT_CODE = 130;
  * answers true.
  */
 exports.STREAM_LOST_EXIT_CODE = 75;
+/**
+ * The signals that stop a running chat.
+ *
+ * Ctrl-C was the only one handled (OSK-2938). SIGTERM (a CI cancel, `timeout`, a process manager) and
+ * SIGHUP (the terminal closing) killed the CLI in under 100 ms with no cancel sent, so the agent kept
+ * running tools on the person's machine with nobody watching and held the folder, and the next message
+ * was refused as `managed_task_workspace_busy` (OSK-20677). `machines dedicated cp` already treats all
+ * three as cancel and exits as a shell would; this does the same.
+ */
+exports.INTERRUPT_SIGNALS = ['SIGINT', 'SIGTERM', 'SIGHUP'];
+/** 128 plus the signal's number, as a shell reports a process the signal killed: 130, 143, 129. */
+function interruptExitCode(signal) {
+    if (signal === 'SIGTERM')
+        return 143;
+    if (signal === 'SIGHUP')
+        return 129;
+    return exports.DETACH_EXIT_CODE;
+}
+/**
+ * The cancel notice, in words that fit the signal. "Press Ctrl-C again" is wrong advice after a
+ * SIGTERM, and after SIGHUP nobody is looking: the terminal that would show it is gone.
+ */
+function cancelNotice(input) {
+    if (input.signal === 'SIGHUP')
+        return null;
+    const again = input.signal === 'SIGINT' ? 'press Ctrl-C again' : `send ${input.signal} again`;
+    return (`\nCancelling run ${input.sessionId}… (waiting up to ${input.graceSeconds}s; ${again} to detach). ` +
+        'A tool call already running on the runtime is not guaranteed to stop.');
+}
 /**
  * Exit code for a streamed run that reached its terminal state: 1 when it
  * failed, 0 otherwise.
@@ -88,6 +121,29 @@ function interruptedDetachMessage(input) {
             ? ''
             : ', and look for a surviving process with `ps -ef | grep -i claude`'));
 }
+/**
+ * `--jsonl` prints `text.delta` as a real delta unless `--cumulative` asks for the whole answer
+ * so far in every event. The cumulative form costs the square of the answer's length (a 57 KB
+ * answer printed 34.6 MB, OSK-20596), which is the wrong default for the mode scripts and other
+ * agents drive. `--incremental` is the old opt-in for what is now the default and changes nothing.
+ */
+function jsonlTextForm(flags) {
+    return { incrementalText: flags.cumulative !== true };
+}
+/**
+ * What to say when the user pressed Ctrl-C and the server then confirmed the run ended.
+ *
+ * The warning printed at the keypress ("a tool call already running on the runtime is not
+ * guaranteed to stop") is written before the outcome is known. When the run settles as `aborted`
+ * it is no longer the whole truth, and left as the last line it reads as a cancel that failed:
+ * the CLI exited without a word, the prompt came back, and a person could not tell whether to go
+ * and kill something (OSK-20603). A script has `run.result {status: "aborted"}`; a terminal gets
+ * this line. It claims what the server said, that the run ended, and nothing about processes.
+ */
+function cancelledRunMessage(input) {
+    return (`Run ${input.sessionId} cancelled: the server confirmed it ended.` +
+        (input.conversationId ? ` Continue the conversation with --conversation ${input.conversationId}.` : ''));
+}
 /**
  * What the durable record says about a turn, read from its messages.
  *
@@ -379,20 +435,29 @@ class AgentsChat extends base_command_1.BaseCommand {
                 'agent’s runtime, tools, session, or working directory and cannot perform work — ' +
                 'it is for inline text assistance. Use --no-stream for a real turn.',
         }),
+        cumulative: core_1.Flags.boolean({
+            description: 'With --jsonl, make `text.delta` carry the whole answer so far in `text` (plus `delta`, ' +
+                'the characters it adds, when it only appends) and repeat the envelopes that ' +
+                '`session.output` already carries: the form --jsonl had before it was incremental by ' +
+                'default. A long answer written this way grows with the square of its length ' +
+                '(a 57 KB answer printed 34.6 MB), so use it only for a consumer that must read ' +
+                'the answer from any single event.',
+            dependsOn: ['jsonl'],
+            exclusive: ['incremental'],
+        }),
         incremental: core_1.Flags.boolean({
-            description: 'With --jsonl, make `text.delta` a real delta: it carries only `delta`, the characters ' +
-                'it adds, instead of the whole answer so far, and leaves out the envelopes that ' +
-                '`session.output` already carries. A rewrite that is not an append arrives as ' +
-                '`replace`, the new full text. `run.result` still holds the whole answer. Without it ' +
-                'a long answer written as JSON lines grows with the square of its length.',
+            hidden: true,
+            description: 'No longer needed: --jsonl is incremental by default. Accepted so scripts that already ' +
+                'pass it keep working.',
             dependsOn: ['jsonl'],
         }),
         jsonl: core_1.Flags.boolean({
             description: 'Emit one JSON event per line while streaming. Every line is a complete JSON value. ' +
-                'Assistant text arrives as `text.delta` whose `text` is the CUMULATIVE answer so far, ' +
-                'not a delta — take the last one, or `run.result` at the end. Each `text.delta` also ' +
-                'carries `delta`, the characters it adds, when it only appends to the one before; ' +
-                'with --incremental it carries nothing else of the text (see that flag). The same text is ' +
+                'Assistant text arrives as `text.delta`, a real delta: `delta` is the characters it ' +
+                'adds, and a rewrite that is not an append arrives as `replace`, the new full text. ' +
+                'Append the `delta`s, or take `run.result` at the end, which always holds the whole ' +
+                'answer. (--cumulative restores the older form, where `text` is the whole answer so ' +
+                'far; it grows with the square of the answer.) The same text is ' +
                 'mirrored inside `session.output` envelopes for consumers that want the raw stream, ' +
                 'so folding both doubles the answer: pick ONE lane. A widget the agent wrote ' +
                 '(a block of CSS, HTML and JavaScript the apps draw) is its text description in ' +
@@ -813,7 +878,7 @@ class AgentsChat extends base_command_1.BaseCommand {
             sessionId: started.sessionId,
             conversationId,
             jsonl: flags.jsonl,
-            incrementalText: flags.incremental,
+            ...jsonlTextForm(flags),
             quiet,
             approveTools: flags['approve-tools'],
             reconcileTerminal,
@@ -848,10 +913,22 @@ class AgentsChat extends base_command_1.BaseCommand {
             detach = () => resolve('detached');
         });
         let interrupts = 0;
+        // The signal that started the stop. Its exit status is what a script reads (130, 143 or 129).
+        let interruptedBy = null;
+        // After SIGHUP the terminal is gone and a write to it throws; the notice is lost, the stop is not.
+        const writeNotice = (fd, text) => {
+            try {
+                (0, node_fs_1.writeSync)(fd, text);
+            }
+            catch (_error) {
+                /* the terminal that would show this is closed */
+            }
+        };
         let forcedDetachAnnounced = false;
         let graceTimer = null;
-        const onInterrupt = () => {
+        const onInterrupt = (signal = 'SIGINT') => {
             interrupts += 1;
+            interruptedBy ??= signal;
             const action = interruptAction({ interrupts, awaitingHandover: client.awaitingHandover() });
             if (action === 'stop-handover-wait') {
                 // Nothing to cancel and nothing to grace-wait for: stop at once.
@@ -862,7 +939,7 @@ class AgentsChat extends base_command_1.BaseCommand {
                         conversationId: started.conversationId,
                     });
                     if (flags.jsonl) {
-                        (0, node_fs_1.writeSync)(process.stdout.fd, `${JSON.stringify({
+                        writeNotice(process.stdout.fd, `${JSON.stringify({
                             type: 'run.detached',
                             sessionId: started.sessionId,
                             conversationId: started.conversationId,
@@ -872,9 +949,9 @@ class AgentsChat extends base_command_1.BaseCommand {
                         })}\n`);
                     }
                     else {
-                        (0, node_fs_1.writeSync)(process.stderr.fd, `\n${message}\n`);
+                        writeNotice(process.stderr.fd, `\n${message}\n`);
                     }
-                    process.exitCode = exports.DETACH_EXIT_CODE;
+                    process.exitCode = interruptExitCode(interruptedBy);
                 }
                 client.close();
                 detach?.();
@@ -883,9 +960,13 @@ class AgentsChat extends base_command_1.BaseCommand {
             if (action === 'cancel') {
                 client.cancel();
                 if (!flags.jsonl) {
-                    this.log(`\nCancelling run ${started.sessionId}… (waiting up to ${CANCEL_GRACE_MS / 1000}s; ` +
-                        'press Ctrl-C again to detach). A tool call already running on the runtime is ' +
-                        'not guaranteed to stop.');
+                    const notice = cancelNotice({
+                        signal,
+                        sessionId: started.sessionId,
+                        graceSeconds: CANCEL_GRACE_MS / 1000,
+                    });
+                    if (notice)
+                        writeNotice(process.stdout.fd, `${notice}\n`);
                 }
                 graceTimer = setTimeout(() => detach?.(), CANCEL_GRACE_MS);
                 graceTimer.unref?.();
@@ -899,7 +980,7 @@ class AgentsChat extends base_command_1.BaseCommand {
                     forced: true,
                 });
                 if (flags.jsonl) {
-                    (0, node_fs_1.writeSync)(process.stdout.fd, `${JSON.stringify({
+                    writeNotice(process.stdout.fd, `${JSON.stringify({
                         type: 'run.detached',
                         sessionId: started.sessionId,
                         conversationId: started.conversationId,
@@ -908,13 +989,14 @@ class AgentsChat extends base_command_1.BaseCommand {
                     })}\n`);
                 }
                 else {
-                    (0, node_fs_1.writeSync)(process.stderr.fd, `\n${message}\n`);
+                    writeNotice(process.stderr.fd, `\n${message}\n`);
                 }
-                process.exitCode = exports.DETACH_EXIT_CODE;
+                process.exitCode = interruptExitCode(interruptedBy);
             }
             detach?.();
         };
-        process.on('SIGINT', onInterrupt);
+        for (const name of exports.INTERRUPT_SIGNALS)
+            process.on(name, onInterrupt);
         try {
             // OSK-2944 — the run was ACCEPTED before we ever tried to attach. If the
             // stream cannot be attached, that is a lost view of a live run, not a
@@ -954,7 +1036,7 @@ class AgentsChat extends base_command_1.BaseCommand {
                 // 130 only when a signal actually caused this; otherwise the stream was
                 // lost and claiming SIGINT lies to every script reading the code
                 // (OSK-7660).
-                const exit = interrupts > 0 ? exports.DETACH_EXIT_CODE : exports.STREAM_LOST_EXIT_CODE;
+                const exit = interrupts > 0 ? interruptExitCode(interruptedBy) : exports.STREAM_LOST_EXIT_CODE;
                 if (flags.jsonl) {
                     (0, agentic_stream_1.writeJsonLine)(process.stdout, {
                         type: 'run.detached',
@@ -1005,11 +1087,23 @@ class AgentsChat extends base_command_1.BaseCommand {
                     this.error(noOutput, { exit: 1 });
                 this.log(result.text);
             }
+            else if (result.status === 'aborted' && interruptedBy !== 'SIGHUP') {
+                // Streaming human mode: say the cancel took, rather than leave the keypress warning last.
+                // (Not after SIGHUP: the terminal that would show it is gone.)
+                this.log(`\n${cancelledRunMessage({ sessionId: started.sessionId, conversationId: started.conversationId })}`);
+            }
+            // A run stopped by SIGTERM or SIGHUP ends the way a shell reports a process the signal killed,
+            // so a script can tell a cancelled run from one that finished. Ctrl-C keeps its existing status
+            // (a cancel that took is a success, a detach is 130).
+            if (interruptedBy === 'SIGTERM' || interruptedBy === 'SIGHUP') {
+                process.exitCode = interruptExitCode(interruptedBy);
+            }
         }
         finally {
             if (graceTimer)
                 clearTimeout(graceTimer);
-            process.removeListener('SIGINT', onInterrupt);
+            for (const name of exports.INTERRUPT_SIGNALS)
+                process.removeListener(name, onInterrupt);
             client.close();
         }
     }

package/dist/generated/agent-guides.json

@@ -350,7 +350,7 @@
                         "id": "memory",
                         "title": "Where an Agent's knowledge lives",
                         "readWhen": "you need to read or change what an Agent knows, or tell its Memory from its configuration",
-                        "tokens": 858,
+                        "tokens": 891,
                         "aliases": [],
                         "explains": [
                             "MEMORY_NOT_MOUNTED",
@@ -489,7 +489,7 @@
                 "version": 4,
                 "routed": true,
                 "aliases": [],
-                "tokens": 861,
+                "tokens": 865,
                 "sections": [
                     {
                         "id": "model",
@@ -709,7 +709,7 @@
                 ]
             }
         ],
-        "hash": "da48eab97c0c8b0102894a1256266cd67df3611313caec27ffff1ef2c2ec87ae",
+        "hash": "3581ad4744d3aae5df82a9358ddb6f87e823b4928104006581e16b3a4d821b2e",
         "tokens": 544
     },
     "routedIndex": {
@@ -1063,7 +1063,7 @@
                         "id": "memory",
                         "title": "Where an Agent's knowledge lives",
                         "readWhen": "you need to read or change what an Agent knows, or tell its Memory from its configuration",
-                        "tokens": 858,
+                        "tokens": 891,
                         "aliases": [],
                         "explains": [
                             "MEMORY_NOT_MOUNTED",
@@ -1202,7 +1202,7 @@
                 "version": 4,
                 "routed": true,
                 "aliases": [],
-                "tokens": 861,
+                "tokens": 865,
                 "sections": [
                     {
                         "id": "model",
@@ -1353,7 +1353,7 @@
                 ]
             }
         ],
-        "hash": "ac18c43c11f5a755bd8f80f49323edc91d9ee75d3448a18e5ffc7ba30a484bbc",
+        "hash": "2f65b076744f03768c49bce61d58f4ee26354c007316777602a3567f3d71f35d",
         "tokens": 493
     },
     "cards": {
@@ -1676,7 +1676,7 @@
             "routed": true,
             "aliases": [],
             "body": "## Concept model\n\n| Noun | Question it answers |\n| --- | --- |\n| **Agent** | Who acts, and with which identity, instructions, model, tools and tone? |\n| **Harness** | Which provider runs its turns, on which machine? One machine × one provider: Claude Code and Codex on one laptop are two Harnesses. |\n| **Machine** | Which computer: a personal machine running the daemon, a Dedicated Runtime, or a Hosted Machine? |\n| **Release** | Which exact, installable snapshot of the Agent's portable specification? |\n| **Role** | Which portable responsibility (purpose, scope, parameters) can be installed on an Agent? |\n| **Memory Store** | What does the Agent know, kept for the Agent or for a Space? |\n| **Notepad** | What does one person privately want this Agent to keep in mind? |\n\n## Decide\n\n- **Who am I?** The managed identity block in your instruction file names the Agent this machine\n  speaks as. `--agent <agent-id>` chooses which Agent a message speaks as. Neither sets authorship:\n  the server records the author of every write from the authenticated runtime, and `skrr context`\n  reports only whether this runtime carries an Agent binding.\n- How it writes (shorter, plainer, warmer) is **tone**. What it does or must never do is an\n  **instruction block**. Neither belongs in a Memory Store or the Notepad.\n- A preference the person tells you to remember is a Memory proposal they review, not an edit to\n  your own instructions. Work to do later, or to keep checking, belongs to a commitment.\n- Where it runs is its execution targets. A Machine is not a Harness: pin the Harness.\n\n## Workflow\n\n### Change an Agent's configuration\n\n1. Read the current value of exactly what you will change, on the Agent the owner named.\n2. Make the narrowest change asked for: add or edit one instruction block rather than replacing\n   all of them.\n3. Read the resolved state back and report that. A workspace policy can override a tone you set.\n\nThe commands for each step are in the `configure` section; `--help` gives their flags.\n\n## Authority\n\n| Actor | May do | Only a person may do |\n| --- | --- | --- |\n| Agent | Read any Agent it can view; when the owner asks, change an Agent's instructions, tone, model or tools, create an Agent, or delete one the owner's own message names; propose a Memory change | Widen an Agent's permissions: permission mode, network egress, tool sign-in; publish, list, price or share an Agent; connect a channel; choose paid compute; approve a Memory promotion; set Memory governance |\n| Person | Everything in both columns | — |\n\nAn Agent never widens its own permissions or membership, even where a command would accept it.\n\n## Live state\n\n- `skrr agents show <agent-id> --expanded` — the full configuration, execution targets included.\n- `skrr agents instructions show <agent-id>` — the instruction blocks in order, with instance ids.\n- `skrr agents tone show <agent-id>` — the tone it actually writes in, and where that came from.\n- `skrr harnesses list` and `skrr machines list` — Harness ids and the Machines they run on.\n- `skrr memory mounts resolve --agent <agent-id>` — the Memory Stores it can read or write.\n\n## Related guides\n\n- `commitments` — what an Agent is responsible for over time, and making something happen later.\n- `learning` — teaching an Agent a preference or procedure that lasts.\n- `spaces` — admitting an Agent to a Space.\n- `store` — publishing an Agent release.",
-            "hash": "f5c941dd33a0972a57433e00234c9d6a86e5897c32e950e91b0d40d26142119f",
+            "hash": "accb2eed6a5f6f0fe16c9bec8bd2233ecda3111976e36215e81ea61491ebe93b",
             "tokens": 944,
             "sections": [
                 {
@@ -1716,7 +1716,7 @@
                     "id": "memory",
                     "title": "Where an Agent's knowledge lives",
                     "readWhen": "you need to read or change what an Agent knows, or tell its Memory from its configuration",
-                    "tokens": 858,
+                    "tokens": 891,
                     "aliases": [],
                     "explains": [
                         "MEMORY_NOT_MOUNTED",
@@ -1861,9 +1861,9 @@
             "version": 4,
             "routed": true,
             "aliases": [],
-            "body": "## Concept model\n\n| Noun | Question it answers |\n| --- | --- |\n| Memory | What does the agent durably know — a fact in a versioned Agent or Space Store? |\n| Lesson | What reviewed instruction applies — a Memory node typed `knowledge`, `preference`, `procedure`, `exemplar`, `rubric` or `capability`? |\n| Lesson state | May it reach runtime context — `candidate` (proposed), `active`, `needs_attention` (stopped because its evidence changed) or `archived` (history only)? |\n| Use receipt | What happened when one exact lesson version was used — `presented`, `applied`, `verified` or `failed`, at the strength the server assigned? |\n| Notepad | What did the agent note for itself — private scratch, never reviewed knowledge? |\n| Skill | What is installed and invoked — the executable artifact a reviewed lesson can compile into? |\n\n## Decide\n\n- A durable **fact** belongs in Memory. A **rule, preference or procedure** that should govern future work belongs in a lesson, and every lesson enters as a `candidate` a person must review.\n- The agent's own working notes belong in its **Notepad** — never something the person asked to stick.\n- A reviewed procedure that should become invocable or publishable becomes a **Skill**.\n- Never use a lesson to grant access: it cannot open a file, install a credential, widen a membership or authorize a tool action.\n\n## Workflow\n\n### Make a rule stick\n\n1. Restate it exactly — the trigger, the action and the exception — and choose its kind.\n2. File it for review. Never write it straight into canonical Memory or your own instructions.\n\nWhere the current Task is filed does not choose a Memory Store. The default below is deliberately\nAgent-owned; use a Space scope only after `skrr memory mounts resolve` confirms that Space Store is\nmounted for this session.\n\n```bash\nskrr memory proposals create --agent <agent-id> --scope agent:<agent-id> \\\n  --kind <kind> --path <path> --content \"<the rule as stated>\"\n```\n\n3. Report it as awaiting the person's review — a candidate, not something learned.\n\n### Act on a lesson\n\n1. Only `active` lessons reach runtime context; check `applicability` and `exclusions` before relying on one.\n2. Act under ordinary tool and permission authority — the lesson itself grants nothing.\n3. The runtime records a use receipt against the exact version; a self-report counts as a claim, not an observation.\n\n## Authority\n\n| Actor | May do | Only a person may do |\n| --- | --- | --- |\n| Agent | Propose candidates; reinforce an active lesson whose content did not change; stop using one | Activate, change or restore active instructions |\n| Person | Review, activate and change instructions; dismiss candidates; grant evidence use; install and publish a Skill; own adaptive-learning consent | — |\n\n## Live state\n\n- `skrr memory proposals list --agent <agent-id> --scope <scope>` — proposals awaiting review (`proposed` is the default status).\n- `skrr learning status` — the person's adaptive-learning consent, learned state and serving fallback.\n- `skrr agents notepad show <agent-id>` — the agent's private notes.\n\n## Related guides\n\n- `store` — publishing a lesson as a Skill release, and installing Skills.\n- `agents` — the agent's Memory, Notepad and instructions.",
-            "hash": "b228b2fa45eec60cfbf3fb451bcc68061931197d947ed2d7da0cf97251ad6533",
-            "tokens": 861,
+            "body": "## Concept model\n\n| Noun | Question it answers |\n| --- | --- |\n| Memory | What does the agent durably know — a fact in a versioned Agent or Space Store? |\n| Lesson | What reviewed instruction applies — a Memory node typed `knowledge`, `preference`, `procedure`, `exemplar`, `rubric` or `capability`? |\n| Lesson state | May it reach runtime context — `candidate` (proposed), `active`, `needs_attention` (stopped because its evidence changed) or `archived` (history only)? |\n| Use receipt | What happened when one exact lesson version was used — `presented`, `applied`, `verified` or `failed`, at the strength the server assigned? |\n| Notepad | What did the agent note for itself — private scratch, never reviewed knowledge? |\n| Skill | What is installed and invoked — the executable artifact a reviewed lesson can compile into? |\n\n## Decide\n\n- A durable **fact** belongs in Memory. A **rule, preference or procedure** that should govern future work belongs in a lesson, and every lesson enters as a `candidate` a person must review.\n- The agent's own working notes belong in its **Notepad** — never something the person asked to stick.\n- A reviewed procedure that should become invocable or publishable becomes a **Skill**.\n- Never use a lesson to grant access: it cannot open a file, install a credential, widen a membership or authorize a tool action.\n\n## Workflow\n\n### Make a rule stick\n\n1. Restate it exactly — the trigger, the action and the exception — and choose its kind.\n2. File it for review. Never write it straight into canonical Memory or your own instructions.\n\nWhere the current Task is filed does not choose a Memory Store. The default below is deliberately\nAgent-owned; use a Space scope only after this session's mounts confirm that Space Store is mounted.\n\n`skrr memory mounts resolve` shows the mounts.\n\n```bash\nskrr memory proposals create --agent <agent-id> --scope agent:<agent-id> \\\n  --kind <kind> --path <path> --content \"<the rule as stated>\"\n```\n\n3. Report it as awaiting the person's review — a candidate, not something learned.\n\n### Act on a lesson\n\n1. Only `active` lessons reach runtime context; check `applicability` and `exclusions` before relying on one.\n2. Act under ordinary tool and permission authority — the lesson itself grants nothing.\n3. The runtime records a use receipt against the exact version; a self-report counts as a claim, not an observation.\n\n## Authority\n\n| Actor | May do | Only a person may do |\n| --- | --- | --- |\n| Agent | Propose candidates; reinforce an active lesson whose content did not change; stop using one | Activate, change or restore active instructions |\n| Person | Review, activate and change instructions; dismiss candidates; grant evidence use; install and publish a Skill; own adaptive-learning consent | — |\n\n## Live state\n\n- `skrr memory proposals list --agent <agent-id> --scope <scope>` — proposals awaiting review (`proposed` is the default status).\n- `skrr learning status` — the person's adaptive-learning consent, learned state and serving fallback.\n- `skrr agents notepad show <agent-id>` — the agent's private notes.\n\n## Related guides\n\n- `store` — publishing a lesson as a Skill release, and installing Skills.\n- `agents` — the agent's Memory, Notepad and instructions.",
+            "hash": "6c69c94f8070907742b4513feea16b30aa0f99cf632eb7ef74b85ea8991ed305",
+            "tokens": 865,
             "sections": [
                 {
                     "id": "model",
@@ -5437,7 +5437,7 @@
                     "id": "memory",
                     "title": "Where an Agent's knowledge lives",
                     "readWhen": "you need to read or change what an Agent knows, or tell its Memory from its configuration",
-                    "tokens": 858,
+                    "tokens": 891,
                     "aliases": [],
                     "explains": [
                         "MEMORY_NOT_MOUNTED",
@@ -5513,7 +5513,7 @@
                     "id": "memory",
                     "title": "Where an Agent's knowledge lives",
                     "readWhen": "you need to read or change what an Agent knows, or tell its Memory from its configuration",
-                    "tokens": 858,
+                    "tokens": 891,
                     "aliases": [],
                     "explains": [
                         "MEMORY_NOT_MOUNTED",
@@ -5590,7 +5590,7 @@
                     "id": "memory",
                     "title": "Where an Agent's knowledge lives",
                     "readWhen": "you need to read or change what an Agent knows, or tell its Memory from its configuration",
-                    "tokens": 858,
+                    "tokens": 891,
                     "aliases": [],
                     "explains": [
                         "MEMORY_NOT_MOUNTED",
@@ -5625,9 +5625,9 @@
                 "MEMORY_VERSION_CONFLICT",
                 "NODE_REFERENCE_REQUIRED"
             ],
-            "body": "Read this when you need to read or change what an Agent knows, or tell its Memory from its configuration.\n\n| Where              | What it holds                                                              | Who changes it                           |\n| ------------------ | -------------------------------------------------------------------------- | ---------------------------------------- |\n| Agent Memory Store | What this Agent knows, as versioned topics                                 | The Agent, through its own mounted store |\n| Space Memory Store | What a Space knows; mounted only for a member of that Space                | An Agent proposes; a person approves     |\n| Notepad            | One person's private notes to this Agent, read on that person's chat turns | That person                              |\n| Persona files      | Who the Agent is and who it works for (SOUL, IDENTITY, USER and others)    | The owner, or the Agent about itself     |\n\nInstructions and tone are configuration, not Memory: what the Agent must always do goes in an\ninstruction block, and how it writes goes in its tone.\n\nRules:\n\n- Resolve the mounts before you read or write. A store mounted read-only takes neither writes nor\n  proposals from you: keep the topic in the Agent's own store, where a person can promote it.\n- A Task or command's `--space` chooses where that work is filed and supplies request context; it\n  does **not** select or mount a Space Memory Store. Run `skrr memory mounts resolve` first, then\n  name one of the mounted scopes. When the requested Space Store is absent, use the Agent Store\n  only for Agent-owned knowledge; never treat that fallback as shared Space Memory.\n- An Agent's change to a Space Memory Store is always a proposal. It changes nothing until a\n  person approves it, and only a person may approve promoting an Agent topic into a Space or\n  admitting personal data to one.\n- A change to an existing topic names the version it read. When the topic has moved on, read the\n  latest version and retry against it; never overwrite it.\n- Everyone with edit access to the Agent can read its Agent Memory Store.\n- What the Agent may remember (read and write scopes, retention, evidence) is governance, and\n  governance is the owner's.\n\nUse the canonical commands: `skrr memory mounts`, `skrr memory topics`, `skrr memory proposals`,\n`skrr memory versions`. The ungrouped commands such as `skrr memory list` and `skrr memory tree`\naddress older pools: what one surface holds does not exist in the other. `--agent` selects whose\nMemory you act on; it does not change who is signed in.\n\n## Example\n\nFind what the Agent already knows before adding to it, then propose the addition.\n\n```bash\nskrr memory mounts resolve --agent <agent-id> --space <space-id> --json\nskrr memory topics list --agent <agent-id> --space <space-id> --scope \"space:<space-id>\"\nskrr memory proposals create --agent <agent-id> --space <space-id> --scope \"space:<space-id>\" \\\n  --path /team/release-process --content \"Releases need a green smoke test.\" --evidence task:<task-id>\n```\n\n## Refusals\n\n| Code                             | Cause                                            | Fix                                                     |\n| -------------------------------- | ------------------------------------------------ | ------------------------------------------------------- |\n| `MEMORY_NOT_MOUNTED`             | The target store is not mounted for this session; `--space` alone does not mount it | Run `memory mounts resolve`; choose a writable mounted scope, or use Agent-owned Memory without claiming it is shared |\n| `MEMORY_STORE_READ_ONLY`         | The target store is mounted read-only            | Write to the Agent's own store; a person can promote it |\n| `MEMORY_SPACE_PROPOSAL_REQUIRED` | An Agent wrote straight to a Space Memory Store  | Submit it as a proposal                                 |\n| `MEMORY_VERSION_CONFLICT`        | The topic changed since you read it              | Read the latest version and retry against it            |\n| `NODE_REFERENCE_REQUIRED`        | The request named no topic                       | Pass one of `memoryId`, `nodeId` or `path`              |",
-            "hash": "4ff05f37d8557901fb27c3cdfc3251c006554f7c74476952dac37cbea5a5610b",
-            "tokens": 858,
+            "body": "Read this when you need to read or change what an Agent knows, or tell its Memory from its configuration.\n\n| Where              | What it holds                                                              | Who changes it                           |\n| ------------------ | -------------------------------------------------------------------------- | ---------------------------------------- |\n| Agent Memory Store | What this Agent knows, as versioned topics                                 | The Agent, through its own mounted store |\n| Space Memory Store | What a Space knows; mounted only for a member of that Space                | An Agent proposes; a person approves     |\n| Notepad            | One person's private notes to this Agent, read on that person's chat turns | That person                              |\n| Persona files      | Who the Agent is and who it works for (SOUL, IDENTITY, USER and others)    | The owner, or the Agent about itself     |\n\nInstructions and tone are configuration, not Memory: what the Agent must always do goes in an\ninstruction block, and how it writes goes in its tone.\n\nRules:\n\n- Resolve the mounts before you read or write. A store mounted read-only takes neither writes nor\n  proposals from you: keep the topic in the Agent's own store, where a person can promote it.\n- The Space a Task or call names chooses where that work is filed and supplies request context; it\n  does **not** select or mount a Space Memory Store. Resolve the mounts first, then name one of the\n  mounted scopes. When the requested Space Store is absent, use the Agent Store only for\n  Agent-owned knowledge; never treat that fallback as shared Space Memory.\n- An Agent's change to a Space Memory Store is always a proposal. It changes nothing until a\n  person approves it, and only a person may approve promoting an Agent topic into a Space or\n  admitting personal data to one.\n- A change to an existing topic names the version it read. When the topic has moved on, read the\n  latest version and retry against it; never overwrite it.\n- Everyone with edit access to the Agent can read its Agent Memory Store.\n- What the Agent may remember (read and write scopes, retention, evidence) is governance, and\n  governance is the owner's.\n\nUse the canonical commands: `skrr memory mounts`, `skrr memory topics`, `skrr memory proposals`,\n`skrr memory versions`. The ungrouped commands such as `skrr memory list` and `skrr memory tree`\naddress older pools: what one surface holds does not exist in the other. `--agent` selects whose\nMemory you act on; it does not change who is signed in. `--space` chooses where a command's work is\nfiled and never mounts a store: run `skrr memory mounts resolve` first, then pass one of the\nmounted scopes with `--scope`.\n\n## Example\n\nFind what the Agent already knows before adding to it, then propose the addition.\n\n```bash\nskrr memory mounts resolve --agent <agent-id> --space <space-id> --json\nskrr memory topics list --agent <agent-id> --space <space-id> --scope \"space:<space-id>\"\nskrr memory proposals create --agent <agent-id> --space <space-id> --scope \"space:<space-id>\" \\\n  --path /team/release-process --content \"Releases need a green smoke test.\" --evidence task:<task-id>\n```\n\n## Refusals\n\n| Code                             | Cause                                            | Fix                                                     |\n| -------------------------------- | ------------------------------------------------ | ------------------------------------------------------- |\n| `MEMORY_NOT_MOUNTED`             | The target store is not mounted for this session; naming a Space alone does not mount it | Resolve the mounts; choose a writable mounted scope, or use Agent-owned Memory without claiming it is shared |\n| `MEMORY_STORE_READ_ONLY`         | The target store is mounted read-only            | Write to the Agent's own store; a person can promote it |\n| `MEMORY_SPACE_PROPOSAL_REQUIRED` | An Agent wrote straight to a Space Memory Store  | Submit it as a proposal                                 |\n| `MEMORY_VERSION_CONFLICT`        | The topic changed since you read it              | Read the latest version and retry against it            |\n| `NODE_REFERENCE_REQUIRED`        | The request named no topic                       | Pass one of `memoryId`, `nodeId` or `path`              |",
+            "hash": "8a5bafc440947aa93782c6d0b196c08f83a0656c4eafd1439990ba99f35c30ce",
+            "tokens": 891,
             "sections": [
                 {
                     "id": "model",
@@ -5666,7 +5666,7 @@
                     "id": "memory",
                     "title": "Where an Agent's knowledge lives",
                     "readWhen": "you need to read or change what an Agent knows, or tell its Memory from its configuration",
-                    "tokens": 858,
+                    "tokens": 891,
                     "aliases": [],
                     "explains": [
                         "MEMORY_NOT_MOUNTED",
@@ -5741,7 +5741,7 @@
                     "id": "memory",
                     "title": "Where an Agent's knowledge lives",
                     "readWhen": "you need to read or change what an Agent knows, or tell its Memory from its configuration",
-                    "tokens": 858,
+                    "tokens": 891,
                     "aliases": [],
                     "explains": [
                         "MEMORY_NOT_MOUNTED",

package/dist/lib/agentic-stream.js

@@ -775,6 +775,12 @@ function endsWithIgnoringWhitespace(whole, tail) {
     const wanted = solid(tail);
     return wanted.length > 0 && solid(whole).endsWith(wanted);
 }
+/** `head` is the start of `whole`, whitespace aside. */
+function startsWithIgnoringWhitespace(whole, head) {
+    const solid = (value) => value.replace(/\s+/g, '');
+    const wanted = solid(head);
+    return wanted.length > 0 && solid(whole).startsWith(wanted);
+}
 class AgenticStreamClient {
     options;
     socket = null;
@@ -2456,10 +2462,18 @@ class AgenticStreamClient {
         // `' \n\n::::skrr-ui{'`), so the harness's last block is not a byte-for-byte suffix of the
         // accumulation even though it is its tail, and taking it as the answer would drop
         // everything the agent said before the tool call (OSK-16934).
+        //
+        // The other way round is the same defect from the other end: a result that is a strict
+        // PREFIX of the accumulation was cut to a length cap, not written as the answer. The daemon
+        // keeps the first 4000 characters of a turn's text for the result it reports, so every local
+        // answer longer than that came back as its first 4000 characters, cut mid-word, with
+        // `status: completed` (OSK-20616). What streamed is the longer record of the same words.
         const accumulationIsSuperset = finalText.length > 0 &&
             this.accumulated.length > finalText.length &&
             (this.accumulated.endsWith(finalText) ||
-                endsWithIgnoringWhitespace(this.accumulated, finalText));
+                endsWithIgnoringWhitespace(this.accumulated, finalText) ||
+                this.accumulated.startsWith(finalText) ||
+                startsWithIgnoringWhitespace(this.accumulated, finalText));
         if (event.publicProjection === 'lookback_answer_v1' && typeof event.result === 'string') {
             this.accumulated = event.result;
         }

package/dist/node_modules/@skrr-ai/auth-core/dist/cjs/scheduled-stream-wire.cjs

@@ -0,0 +1,98 @@
+'use strict';
+
+// Content-addressed source-envelope manifest. A manifest is completeness
+// evidence only after an authenticated native response binds it to its exact
+// dispatch, and every listed envelope has been independently retained.
+const { createHash } = require('node:crypto');
+const MAX_EVENTS = 1024;
+const MAX_EVENT_BYTES = 256 * 1024;
+const MAX_TOTAL_BYTES = 8 * 1024 * 1024;
+const HASH = /^[0-9a-f]{64}$/;
+const id = value => typeof value === 'string' && value.length > 0 && value.length <= 240;
+const digest = value => createHash('sha256').update(value, 'utf8').digest('hex');
+
+function sorted(value) {
+  if (Array.isArray(value)) return value.map(sorted);
+  if (value && typeof value === 'object') return Object.fromEntries(
+    Object.keys(value).sort().map(key => [key, sorted(value[key])]));
+  return value;
+}
+function normalize(envelope) {
+  // JSON round-trip defines the wire representation, rejects cycles, and
+  // removes undefined properties in the same way as the uploader.
+  const value = JSON.parse(JSON.stringify(envelope));
+  if (!value || typeof value !== 'object' || Array.isArray(value) ||
+      !id(value.id) || !value.ev || typeof value.ev !== 'object' || Array.isArray(value.ev))
+    throw new TypeError('Invalid scheduled stream envelope');
+  // These fields are owned by the server or are independently authenticated
+  // native receipts, not part of the replayable provider stream.
+  for (const key of ['__seq', 'userSeq', '__degraded', 'messageId', 'managedEventType']) delete value[key];
+  for (const key of ['autonomousSourceExecutorTerminal', 'autonomousSourceExecutorNotStarted',
+    'ordinaryExecutorTerminal', 'personalContextInvocationTerminal', 'personalContextInvocationNotStarted'])
+    delete value.ev[key];
+  return JSON.stringify(sorted(value));
+}
+function fingerprint(envelope) {
+  const json = normalize(envelope);
+  const bytes = Buffer.byteLength(json, 'utf8');
+  if (bytes > MAX_EVENT_BYTES) throw new RangeError('Scheduled stream envelope exceeds the limit');
+  return { hash: digest(json), bytes, json };
+}
+function create(binding) {
+  if (!binding || ![binding.runId, binding.sessionId, binding.requestId, binding.dispatchId].every(id))
+    throw new TypeError('Invalid scheduled stream binding');
+  let closed = false;
+  let unavailable = null;
+  let totalBytes = 0;
+  const hashes = [];
+  return {
+    add(envelopes) {
+      if (closed) throw new Error('Scheduled stream manifest is already closed');
+      if (unavailable || !Array.isArray(envelopes)) return;
+      for (const envelope of envelopes) {
+        if (hashes.length >= MAX_EVENTS) { unavailable = 'event_limit'; break; }
+        let entry;
+        try { entry = fingerprint(envelope); }
+        catch { unavailable = 'invalid_or_oversize_event'; break; }
+        if (totalBytes + entry.bytes > MAX_TOTAL_BYTES) { unavailable = 'byte_limit'; break; }
+        hashes.push(entry.hash);
+        totalBytes += entry.bytes;
+      }
+      // A partial prefix is never a manifest.
+      if (unavailable) { hashes.length = 0; totalBytes = 0; }
+    },
+    finish() {
+      if (closed) throw new Error('Scheduled stream manifest is already closed');
+      closed = true;
+      if (unavailable) return { unavailable };
+      return { manifest: { version: 1, algorithm: 'sha256', runId: binding.runId,
+        sessionId: binding.sessionId, requestId: binding.requestId, dispatchId: binding.dispatchId,
+        count: hashes.length, totalBytes, hashes: [...hashes] } };
+    },
+  };
+}
+function validate(manifest, binding) {
+  return Boolean(manifest && typeof manifest === 'object' && !Array.isArray(manifest) &&
+    Object.keys(manifest).sort().join(',') === 'algorithm,count,dispatchId,hashes,requestId,runId,sessionId,totalBytes,version' &&
+    manifest.version === 1 && manifest.algorithm === 'sha256' &&
+    ['runId', 'sessionId', 'requestId', 'dispatchId'].every(key => id(binding?.[key]) && manifest[key] === binding[key]) &&
+    Number.isSafeInteger(manifest.count) && manifest.count >= 0 && manifest.count <= MAX_EVENTS &&
+    Number.isSafeInteger(manifest.totalBytes) && manifest.totalBytes >= 0 && manifest.totalBytes <= MAX_TOTAL_BYTES &&
+    Array.isArray(manifest.hashes) && manifest.hashes.length === manifest.count &&
+    manifest.hashes.every(value => typeof value === 'string' && HASH.test(value)));
+}
+function verify(manifest, binding, envelopes) {
+  if (!validate(manifest, binding) || !Array.isArray(envelopes) || envelopes.length !== manifest.count)
+    return false;
+  let totalBytes = 0;
+  try {
+    for (let index = 0; index < envelopes.length; index += 1) {
+      const entry = fingerprint(envelopes[index]);
+      if (entry.hash !== manifest.hashes[index]) return false;
+      totalBytes += entry.bytes;
+      if (totalBytes > MAX_TOTAL_BYTES) return false;
+    }
+  } catch { return false; }
+  return totalBytes === manifest.totalBytes;
+}
+module.exports = { MAX_EVENTS, MAX_EVENT_BYTES, MAX_TOTAL_BYTES, normalize, fingerprint, create, validate, verify };

package/dist/node_modules/@skrr-ai/auth-core/dist/cjs/scheduled-stream-wire.d.cts

@@ -0,0 +1,15 @@
+export interface ScheduledStreamBinding { runId: string; sessionId: string; requestId: string; dispatchId: string }
+export interface ScheduledStreamManifest extends ScheduledStreamBinding {
+  version: 1; algorithm: 'sha256'; count: number; totalBytes: number; hashes: string[];
+}
+export const MAX_EVENTS: number;
+export const MAX_EVENT_BYTES: number;
+export const MAX_TOTAL_BYTES: number;
+export function normalize(envelope: unknown): string;
+export function fingerprint(envelope: unknown): { hash: string; bytes: number; json: string };
+export function create(binding: ScheduledStreamBinding): {
+  add(envelopes: unknown): void;
+  finish(): { manifest: ScheduledStreamManifest } | { unavailable: string };
+};
+export function validate(manifest: unknown, binding: ScheduledStreamBinding): boolean;
+export function verify(manifest: unknown, binding: ScheduledStreamBinding, envelopes: unknown): boolean;