@skrr-ai/cli 0.1.31 → 0.1.33

package/dist/commands/logout.js

@@ -37,6 +37,7 @@ exports.shouldSkipLocalLogout = shouldSkipLocalLogout;
 const core_1 = require("@oclif/core");
 const base_command_1 = require("../base-command");
 const config_1 = require("../lib/config");
+const first_party_harness_managed_1 = require("../lib/first-party-harness-managed");
 const auth_storage_1 = require("../lib/auth-storage");
 const refresh_1 = require("../lib/refresh");
 const api_fetch_1 = require("../lib/api-fetch");
@@ -212,10 +213,13 @@ class Logout extends base_command_1.BaseCommand {
         //
         // This rebuilds the object rather than deleting keys, which is what strips
         // the tokens — so every field worth keeping has to be named here, and one
-        // that is not named is dropped SILENTLY. `skyCodeAgentId` was in exactly
-        // that position: `skrr code` told users to set it, and the next `skrr logout`
-        // erased it with no message. It is preserved for the same reason `baseURL`
-        // and `cliId` are — this machine's settings outlive one session.
+        // that is not named is dropped SILENTLY. The `skrr code` agent setting was in
+        // exactly that position: `skrr code` told users to set it, and the next
+        // `skrr logout` erased it with no message. It is preserved for the same reason
+        // `baseURL` and `cliId` are — this machine's settings outlive one session.
+        //
+        // Read under every key it has had and written back under the neutral one, so a
+        // logout on a machine an older CLI configured also finishes that key's move.
         //
         // It is re-resolved through the NEXT caller's own roster, so an id they
         // cannot reach is refused by name rather than silently attributed. That is
@@ -225,10 +229,11 @@ class Logout extends base_command_1.BaseCommand {
         // would bill it. `skrr code skrr-agent --show` reports the resolved agent
         // and where it came from, which is the intended way to notice.
         const cfg = (0, config_1.loadConfig)();
+        const agentSetting = (0, first_party_harness_managed_1.readAgentSetting)(cfg);
         (0, config_1.saveConfig)({
             baseURL: cfg.baseURL,
             ...(cfg.cliId ? { cliId: cfg.cliId } : {}),
-            ...(cfg.skyCodeAgentId ? { skyCodeAgentId: cfg.skyCodeAgentId } : {}),
+            ...(agentSetting.value ? { [first_party_harness_managed_1.AGENT_CONFIG_KEY]: agentSetting.value } : {}),
             ...(cfg.credentials ? { credentials: cfg.credentials } : {}),
             migrated: { ...(cfg.migrated ?? {}), authOutOfConfig: true },
         });

package/dist/commands/machines/dedicated/attach.js

@@ -4,6 +4,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 const core_1 = require("@oclif/core");
+const auth_core_1 = require("@skrr-ai/auth-core");
 const dedicated_lease_command_1 = require("../../../lib/dedicated-lease-command");
 const dedicated_machines_1 = require("../../../lib/dedicated-machines");
 const harnesses_1 = require("../../../lib/harnesses");
@@ -40,7 +41,7 @@ class DedicatedMachinesAttach extends dedicated_lease_command_1.DedicatedLeaseCo
             description: 'Agent to attach. Inside an agent session it defaults to that agent (OVERSKY_SESSION_AGENT_ID).',
         }),
         engine: core_1.Flags.string({
-            description: 'Which engine row to attach when the machine registered several (claude, codex, sky-code). Required only when it is ambiguous.',
+            description: `Which engine row to attach when the machine registered several (claude, codex, ${auth_core_1.FIRST_PARTY_HARNESS.provider}, oversky). Required only when it is ambiguous.`,
         }),
         'rebind-tasks': core_1.Flags.boolean({
             description: 'Publish the updated agent release and move dormant assigned task pins to it. Running and finished tasks are never changed.',

package/dist/commands/tasks/runs.js

@@ -5,6 +5,7 @@ exports.runNeedsFailureReason = runNeedsFailureReason;
 exports.failureFromRun = failureFromRun;
 exports.renderRunFailures = renderRunFailures;
 const core_1 = require("@oclif/core");
+const auth_core_1 = require("@skrr-ai/auth-core");
 const data_provider_1 = require("@skrr-ai/data-provider");
 const base_command_1 = require("../../base-command");
 const format_1 = require("../../lib/format");
@@ -34,7 +35,8 @@ function formatRunExecutor(run) {
     }
     const env = run.executionEnvironment;
     if (typeof env === 'string' && env.trim() !== '') {
-        return env;
+        // Canonical: a run recorded before or after a harness rename prints one name.
+        return String((0, auth_core_1.canonicalExecutionEnvironment)(env));
     }
     return '-';
 }

package/dist/commands/workspaces/use.js

@@ -1,6 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 const core_1 = require("@oclif/core");
+const auth_core_1 = require("@skrr-ai/auth-core");
 const base_command_1 = require("../../base-command");
 const config_1 = require("../../lib/config");
 const workspaces_1 = require("../../lib/workspaces");
@@ -87,7 +88,7 @@ class WorkspacesUse extends base_command_1.BaseCommand {
             return;
         }
         this.log(`Now working in ${selected.name ?? selected.id} (${selected.id}).`);
-        this.log('New agents and `skrr code` sessions resolve here. --workspace still wins per command.');
+        this.log(`New agents and \`${auth_core_1.FIRST_PARTY_HARNESS.command}\` sessions resolve here. --workspace still wins per command.`);
     }
 }
 exports.default = WorkspacesUse;

package/dist/lib/adaptive-learning.d.ts

@@ -0,0 +1,37 @@
+export interface AdaptiveLearningConsent {
+    personalizationAllowed: boolean;
+    sharedTrainingAllowed: boolean;
+    policyVersion: string;
+    source: 'explicit' | 'default_off' | 'workspace_policy' | string;
+    stateGeneration: number;
+    decidedAt: string | null;
+}
+export interface LearnedPreference {
+    key: string;
+    value: unknown;
+    confidence: number;
+    source: 'explicit' | 'inferred' | 'aggregate' | string;
+    evidenceCategory: string;
+    evidenceCount: number;
+}
+export interface AdaptiveLearningState {
+    id: string;
+    policyNamespace: string;
+    scopeKey: string;
+    stateVersion: number;
+    modelVersion: string;
+    featureViewVersion: string;
+    posteriorVersion: string;
+    sampleCount: number;
+    preferences?: LearnedPreference[];
+}
+export interface AdaptiveLearningStateResponse {
+    items: AdaptiveLearningState[];
+    count: number;
+}
+export declare function consentPatch(input: {
+    personalization?: 'on' | 'off';
+    sharedTraining?: 'on' | 'off';
+}): Record<string, boolean>;
+export declare function servingSummary(consent: AdaptiveLearningConsent, state: AdaptiveLearningStateResponse): string;
+export declare function formatLearningStatus(consent: AdaptiveLearningConsent, state: AdaptiveLearningStateResponse): string;

package/dist/lib/adaptive-learning.js

@@ -0,0 +1,39 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.consentPatch = consentPatch;
+exports.servingSummary = servingSummary;
+exports.formatLearningStatus = formatLearningStatus;
+function consentPatch(input) {
+    const patch = {};
+    if (input.personalization !== undefined) {
+        patch.personalizationAllowed = input.personalization === 'on';
+    }
+    if (input.sharedTraining !== undefined) {
+        patch.sharedTrainingAllowed = input.sharedTraining === 'on';
+    }
+    return patch;
+}
+function servingSummary(consent, state) {
+    if (!consent.personalizationAllowed)
+        return 'deterministic baseline (personalization off)';
+    if (!state.items.length)
+        return 'deterministic baseline (cold start)';
+    return 'One Voice authoritative; learned policy is shadow-only';
+}
+function formatLearningStatus(consent, state) {
+    const lines = [
+        `Personalization: ${consent.personalizationAllowed ? 'on' : 'off'}`,
+        `Shared model training: ${consent.sharedTrainingAllowed ? 'on' : 'off'}`,
+        `Serving: ${servingSummary(consent, state)}`,
+        `Consent: ${consent.source} · ${consent.policyVersion} · generation ${consent.stateGeneration}`,
+        `Learned states: ${state.count}`,
+    ];
+    for (const row of state.items) {
+        const recommendation = row.preferences?.find((item) => item.key === 'recommended_action');
+        lines.push(`- ${row.policyNamespace} / ${row.scopeKey}: v${row.stateVersion}, samples=${row.sampleCount}` +
+            (recommendation
+                ? `, recommended=${String(recommendation.value)} (${recommendation.source})`
+                : ''));
+    }
+    return lines.join('\n');
+}

package/dist/lib/code-handover.d.ts

@@ -3,7 +3,7 @@
  *
  * Exported and pure so the parts that decide whether a handover is SAFE are
  * unit-testable without an oclif runtime, a git checkout, or a live API — the
- * convention `buildEngineArgs` follows in `lib/sky-code.ts`. The command itself
+ * convention `buildEngineArgs` follows in `lib/first-party-harness.ts`. The command itself
  * only collects facts and prints.
  */
 /** `owner/name` from any GitHub remote URL shape. */

package/dist/lib/code-handover.js

@@ -4,7 +4,7 @@
  *
  * Exported and pure so the parts that decide whether a handover is SAFE are
  * unit-testable without an oclif runtime, a git checkout, or a live API — the
- * convention `buildEngineArgs` follows in `lib/sky-code.ts`. The command itself
+ * convention `buildEngineArgs` follows in `lib/first-party-harness.ts`. The command itself
  * only collects facts and prints.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
@@ -13,6 +13,7 @@ exports.evaluateHandoverSafety = evaluateHandoverSafety;
 exports.formatUnsafeHandover = formatUnsafeHandover;
 exports.composeHandoverPrompt = composeHandoverPrompt;
 exports.matchAgent = matchAgent;
+const auth_core_1 = require("@skrr-ai/auth-core");
 /** `owner/name` from any GitHub remote URL shape. */
 function parseGitHubRepo(remoteUrl) {
     if (!remoteUrl || !remoteUrl.trim()) {
@@ -69,7 +70,7 @@ function composeHandoverPrompt(input) {
         input.brief.trim(),
         '',
         '---',
-        `Handed over from a local skrr Code session in ${input.repoFullName} on ${input.branch}${at}.`,
+        `Handed over from a local ${auth_core_1.FIRST_PARTY_HARNESS.displayName} session in ${input.repoFullName} on ${input.branch}${at}.`,
         input.recentCommits ? `Recent commits:\n${input.recentCommits}` : null,
         input.localWorkNotCarried
             ? 'NOTE: local uncommitted or unpushed work was NOT carried over — you are working from the pushed state of this branch.'

package/dist/lib/config.d.ts

@@ -33,16 +33,22 @@ export interface CliConfig {
      * OSK-3892 — the agent a locally-hosted `skrr code` session is attributed to.
      *
      * `skrr code` is the local arm of an AGENT's harness: the cloud dispatches to
-     * sky-code as an agent, and a human running it here runs the same harness. So a
-     * managed session needs an agent, and this is where a user records the one they
-     * normally work as instead of typing `--oversky-agent` every time.
+     * the first-party harness as an agent, and a human running it here runs the same
+     * harness. So a managed session needs an agent, and this is where a user records
+     * the one they normally work as instead of typing `--skrr-agent` every time.
      *
      * Deliberately NOT a fallback for anything else. It is read only by the managed
      * acquisition in `skrr code`; every other command keeps its own agent resolution
      * (`agent-resolver.ts`), whose precedence is different and whose callers are
      * often inside a daemon session that already binds one.
+     *
+     * The key is brand-neutral. Earlier CLIs wrote the same setting under a key
+     * named after the product; those are still read, through
+     * `readAgentSetting` in `first-party-harness-managed.ts`, which is the only
+     * reader — never read this field directly, or an older machine's setting is
+     * silently ignored.
      */
-    skyCodeAgentId?: string;
+    firstPartyHarnessAgentId?: string;
     /**
      * The workspace this machine works in, chosen once with `skrr workspaces use`.
      *
@@ -167,6 +173,26 @@ export declare function isEnvAuthOverride(): boolean;
  * resolver and every existing install read it.
  */
 export declare function configRoot(env?: NodeJS.ProcessEnv): string;
+/**
+ * The PRE-RENAME config root — the generation between `.sky` and `.skrr`.
+ *
+ * This was missing from the fallback chain, which went straight from `.skrr` to
+ * `.sky` and skipped the directory that every current install actually has.
+ * The effect is not a missing preference: with no config found, `loadConfig`
+ * returns DEFAULT_CONFIG, whose baseURL is the DEV deployment — so a CLI that
+ * had been pointed at production silently starts addressing dev, and its
+ * `workspaceId` is gone. Nothing errors; commands just answer about a different
+ * backend.
+ *
+ * This read "the production apex", and said the drift ran the other way. It did
+ * not: DEFAULT_CONFIG has been dev since it was written, forty lines further up.
+ * The direction matters here more than most stale comments, because it is the
+ * difference between a lost session and one that silently addresses production.
+ *
+ * Note the filename differs by generation: `.sky` used `config.json`, `.oversky`
+ * and `.skrr` use `cli-config.json`.
+ */
+export declare function priorConfigDir(): string;
 /**
  * Read the config file. Returns defaults if missing. Throws on corrupt JSON.
  * Performs a one-shot legacy → new copy when only the legacy file exists, so

package/dist/lib/config.js

@@ -39,6 +39,7 @@ exports.describeDeployment = describeDeployment;
 exports.canonicalizeKnownBaseURL = canonicalizeKnownBaseURL;
 exports.isEnvAuthOverride = isEnvAuthOverride;
 exports.configRoot = configRoot;
+exports.priorConfigDir = priorConfigDir;
 exports.loadConfig = loadConfig;
 exports.saveConfig = saveConfig;
 exports.getConfigPath = getConfigPath;
@@ -280,7 +281,7 @@ function newConfigDir() {
  *
  * Everything else follows the profile, because everything else IS the
  * deployment: `baseURL`, who you are there (`userId`, `email`), and what you
- * chose there (`workspaceId`, `skyCodeAgentId`).
+ * chose there (`workspaceId`, `firstPartyHarnessAgentId`).
  */
 const MACHINE_SCOPED_KEYS = ['cliId', 'credentials', 'migrated'];
 /**

package/dist/lib/daemon-installer.d.ts

@@ -22,7 +22,7 @@ export interface DaemonInstallOptions {
     fetchImpl?: typeof fetch;
     /**
      * Trust anchors. Defaults to the pinned production set; tests substitute a
-     * generated keypair, exactly as the sky-code installer does. Passing an EMPTY
+     * generated keypair, exactly as the first-party harness installer does. Passing an EMPTY
      * set does not disable verification here — every non-`ok` verdict is a
      * refusal, so an unconfigured trust root turns installs off rather than
      * turning checking off.

package/dist/lib/daemon-target.js

@@ -49,11 +49,11 @@ exports.listActiveDaemons = listActiveDaemons;
 const api_fetch_1 = require("./api-fetch");
 const daemonBroker_1 = require("./daemonBroker");
 const daemon_ref_1 = require("./daemon-ref");
-const sky_code_1 = require("./sky-code");
+const first_party_harness_1 = require("./first-party-harness");
 function localMachine(options = {}) {
     const env = options.env ?? process.env;
     const getuid = 'getuid' in options ? options.getuid : process.getuid?.bind(process);
-    if (!(0, sky_code_1.isDedicatedRuntimeWorkload)(env, getuid))
+    if (!(0, first_party_harness_1.isDedicatedRuntimeWorkload)(env, getuid))
         return { dedicatedRuntime: false, daemonId: null };
     return { dedicatedRuntime: true, daemonId: publishedDaemonId(options) };
 }

package/dist/lib/dedicated-lease-command.js

@@ -131,8 +131,9 @@ class DedicatedLeaseCommand extends base_command_1.BaseCommand {
                 this.failWithCliError({
                     message,
                     code: (0, dedicated_machines_1.dedicatedRuntimeApiErrorCode)(err) ?? 'CLI_ERROR',
+                    status: err instanceof api_fetch_1.ApiFetchError ? err.status : undefined,
                     exit: 1,
-                    retryable: false,
+                    retryable: dedicatedRuntimeApiErrorRetryable(err),
                     details: (0, dedicated_machines_1.dedicatedRuntimeApiErrorDetails)(err),
                 });
             }

package/dist/lib/dedicated-machines.d.ts

@@ -418,8 +418,8 @@ export declare function dedicatedDeletionLines(lease: DedicatedLease, now?: Date
  * A lease payload names no daemon (provider and daemon ids are deliberately
  * absent), so the join goes the other way: each row a guest daemon registers
  * carries `metadata.machineLeaseId` and `metadata.machineProduct`. One daemon
- * writes one row PER ENGINE it announces (claude, codex, sky-code, or `oversky`
- * when it announces none), all sharing the daemon id.
+ * writes one row PER ENGINE it announces (claude, codex, the first-party harness,
+ * or `oversky` when it announces none), all sharing the daemon id.
  */
 export declare function dedicatedLeaseHarnesses(lease: Pick<DedicatedLease, 'id'>, harnesses: readonly Harness[]): Harness[];
 /**

package/dist/lib/dedicated-machines.js

@@ -36,6 +36,7 @@ exports.dedicatedCatalogFromProducts = dedicatedCatalogFromProducts;
 exports.dedicatedRuntimeApiErrorCode = dedicatedRuntimeApiErrorCode;
 exports.dedicatedRuntimeApiErrorDetails = dedicatedRuntimeApiErrorDetails;
 exports.formatDedicatedRuntimeApiError = formatDedicatedRuntimeApiError;
+const auth_core_1 = require("@skrr-ai/auth-core");
 const api_fetch_1 = require("./api-fetch");
 const edge_error_page_1 = require("./edge-error-page");
 const harnesses_1 = require("./harnesses");
@@ -622,8 +623,8 @@ function dedicatedDeletionLines(lease, now = new Date()) {
  * A lease payload names no daemon (provider and daemon ids are deliberately
  * absent), so the join goes the other way: each row a guest daemon registers
  * carries `metadata.machineLeaseId` and `metadata.machineProduct`. One daemon
- * writes one row PER ENGINE it announces (claude, codex, sky-code, or `oversky`
- * when it announces none), all sharing the daemon id.
+ * writes one row PER ENGINE it announces (claude, codex, the first-party harness,
+ * or `oversky` when it announces none), all sharing the daemon id.
  */
 function dedicatedLeaseHarnesses(lease, harnesses) {
     const seenAt = (harness) => Date.parse(harness.lastSeenAt || '') || 0;
@@ -689,7 +690,9 @@ function selectDedicatedAttachHarness(lease, harnesses, engine) {
     }
     const providers = [...new Set(rows.map((row) => row.provider))];
     if (engine) {
-        const match = rows.find((row) => row.provider === engine);
+        // Any accepted spelling of an engine names it: a user who typed the first-party
+        // harness's older name means the row stored under its canonical one.
+        const match = rows.find((row) => (0, auth_core_1.isSameHarnessProvider)(row.provider, engine));
         if (!match) {
             return {
                 error: `${lease.id} has no "${engine}" engine. Registered: ${providers.join(', ')}.`,

package/dist/lib/exec-runtime-binary.d.ts

@@ -57,8 +57,8 @@ export declare function normalizeRuntimeGlobalArgs(args: readonly string[]): str
  *
  * An install instruction is only worth what it installs. Renaming these
  * before the tap and repository move produces a message that reads correct
- * and fails when followed — the same defect as the "install it with
- * `sky code install`" hint, which named a command that never existed.
+ * and fails when followed — the same defect as the old hint that told users to
+ * run `code install` under the previous CLI name, a command that never existed.
  *
  * They move when the Homebrew tap is published (that work is tracked
  * separately) and when the repository is renamed — not before, and not as

package/dist/lib/exec-runtime-binary.js

@@ -187,8 +187,8 @@ function isExecutable(p) {
  *
  * An install instruction is only worth what it installs. Renaming these
  * before the tap and repository move produces a message that reads correct
- * and fails when followed — the same defect as the "install it with
- * `sky code install`" hint, which named a command that never existed.
+ * and fails when followed — the same defect as the old hint that told users to
+ * run `code install` under the previous CLI name, a command that never existed.
  *
  * They move when the Homebrew tap is published (that work is tracked
  * separately) and when the repository is renamed — not before, and not as

package/dist/lib/{sky-code-agent.d.ts → first-party-harness-agent.d.ts}

@@ -1,10 +1,10 @@
 /**
- * OSK-3892 — which AGENT a locally-hosted skrr Code session belongs to.
+ * OSK-3892 — which AGENT a locally-hosted first-party harness session belongs to.
  *
  * ── Why a session needs an agent at all ────────────────────────────────────
  *
  * `skrr code` is the local arm of an agent's harness. The cloud dispatches to
- * sky-code AS an agent, and a human running it here runs the same harness against
+ * the first-party harness AS an agent, and a human running it here runs the same harness against
  * the same server contract — so the session is attributed to an agent the user
  * names.
  *
@@ -15,8 +15,8 @@
  *
  * ── Resolution order, and why it ends in a refusal ─────────────────────────
  *
- *   1. `--oversky-agent <id-or-name>`
- *   2. `skyCodeAgentId` in `~/.skrr/cli-config.json`
+ *   1. `--skrr-agent <id-or-name>` (or its older spelling, `--oversky-agent`)
+ *   2. `AGENT_CONFIG_KEY` in `~/.skrr/cli-config.json` (or the key earlier CLIs wrote)
  *   3. the user's single agent, when they have exactly one AND AUTHORED IT
  *   4. the user's own DEFAULT agent for this harness, created on first use
  *
@@ -48,11 +48,11 @@
  * `--oversky-agent` fail inside any daemon-spawned CLI child. Its error TYPE and
  * its habit of listing what it found are worth copying; its precedence is not.
  */
-export type SkyCodeAgentSource = 'flag' | 'config' | 'sole-agent' | 'default-agent';
-export interface SkyCodeAgent {
+export type FirstPartyHarnessAgentSource = 'flag' | 'config' | 'sole-agent' | 'default-agent';
+export interface FirstPartyHarnessAgent {
     id: string;
     name?: string;
-    source: SkyCodeAgentSource;
+    source: FirstPartyHarnessAgentSource;
     /**
      * True only on the run that actually minted the default agent, so the CLI can
      * say so once instead of on every session. The server reports it as 201 vs
@@ -60,10 +60,10 @@ export interface SkyCodeAgent {
      */
     createdNow?: boolean;
 }
-export type SkyCodeAgentFailure = 'agent-unknown' | 'agent-ambiguous' | 'agent-unset' | 'agent-lookup-failed';
-export declare class SkyCodeAgentError extends Error {
-    readonly code: SkyCodeAgentFailure;
-    constructor(code: SkyCodeAgentFailure, message: string);
+export type FirstPartyHarnessAgentFailure = 'agent-unknown' | 'agent-ambiguous' | 'agent-unset' | 'agent-lookup-failed';
+export declare class FirstPartyHarnessAgentError extends Error {
+    readonly code: FirstPartyHarnessAgentFailure;
+    constructor(code: FirstPartyHarnessAgentFailure, message: string);
 }
 interface AgentRow {
     id?: string;
@@ -77,11 +77,12 @@ interface AgentRow {
      * Set when this row IS the caller's auto-created default for a harness. Also
      * already on the wire, for the same reason — which is what lets a read-only
      * caller recognise an existing default without asking the get-or-create
-     * endpoint to establish one.
+     * endpoint to establish one. A stored row may carry any accepted spelling of
+     * the harness, so it is compared with `isFirstPartyHarnessProvider`, never `===`.
      */
     defaultForHarness?: string;
 }
-export interface SkyCodeAgentDeps {
+export interface FirstPartyHarnessAgentDeps {
     /** Agents this user may run. Bounded; see `ROSTER_LIMIT`. */
     listAgents?: (signal?: AbortSignal) => Promise<AgentRow[]>;
     /** Direct read, for an id outside the bounded roster. `null` when unreadable. */
@@ -99,7 +100,7 @@ interface DefaultAgentRow extends AgentRow {
     /** Whether THIS call created it (server 201) rather than found it (200). */
     created?: boolean;
 }
-export interface SkyCodeAgentOptions {
+export interface FirstPartyHarnessAgentOptions {
     /**
      * OSK-3892 — the CALLER's deadline for the whole managed acquisition.
      *
@@ -120,8 +121,8 @@ export interface SkyCodeAgentOptions {
     /**
      * How a refusal NAMES an explicitly-supplied reference.
      *
-     * Defaults to `--oversky-agent`, which is how a session receives one. `skrr code
-     * oversky-agent --set` passes its own spelling so a bad value does not send the
+     * Defaults to `--skrr-agent`, which is how a session receives one. `skrr code
+     * skrr-agent --set` passes its own spelling so a bad value does not send the
      * user to fix a flag they never typed.
      */
     explicitLabel?: string;
@@ -143,18 +144,18 @@ export interface SkyCodeAgentOptions {
  * a refusal listable. That is worth just as much care — a wrong pick is not a
  * breach, it is a bill someone else reads weeks later — but it is a different job.
  */
-export declare function resolveSkyCodeAgent(explicit?: string, deps?: SkyCodeAgentDeps, options?: SkyCodeAgentOptions): Promise<SkyCodeAgent>;
+export declare function resolveFirstPartyHarnessAgent(explicit?: string, deps?: FirstPartyHarnessAgentDeps, options?: FirstPartyHarnessAgentOptions): Promise<FirstPartyHarnessAgent>;
 /** The stored value, unresolved — for a `--show` that must report "unset" honestly. */
 export declare function readConfiguredAgentId(): string | undefined;
 /**
  * Persist the agent `skrr code` runs as when no flag is passed.
  *
- * Resolves through the SAME roster `resolveSkyCodeAgent` uses, for two reasons: a
+ * Resolves through the SAME roster `resolveFirstPartyHarnessAgent` uses, for two reasons: a
  * typo is refused while the user is still looking at it rather than at the start
  * of some later session, and what lands on disk is always a canonical id. Storing
  * the display name a user typed would silently break on the next rename.
  */
-export declare function setConfiguredAgentId(ref: string, deps?: SkyCodeAgentDeps, options?: SkyCodeAgentOptions): Promise<SkyCodeAgent>;
+export declare function setConfiguredAgentId(ref: string, deps?: FirstPartyHarnessAgentDeps, options?: FirstPartyHarnessAgentOptions): Promise<FirstPartyHarnessAgent>;
 /** Remove the setting. Returns what was there, so the caller can say so. */
 export declare function clearConfiguredAgentId(): string | undefined;
 export {};