@skrr-ai/cli 0.1.36 → 0.1.38

package/dist/lib/dedicated-machines.js

@@ -21,6 +21,10 @@ exports.writeDedicatedRuntimeFileChunk = writeDedicatedRuntimeFileChunk;
 exports.parseDedicatedCopyEndpoints = parseDedicatedCopyEndpoints;
 exports.dedicatedLeaseId = dedicatedLeaseId;
 exports.dedicatedLeaseState = dedicatedLeaseState;
+exports.dedicatedDestroyRetentionNote = dedicatedDestroyRetentionNote;
+exports.dedicatedScopeMonthSpendCents = dedicatedScopeMonthSpendCents;
+exports.dedicatedLeaseCapCell = dedicatedLeaseCapCell;
+exports.dedicatedLeaseStatusCell = dedicatedLeaseStatusCell;
 exports.dedicatedLeaseDisplayName = dedicatedLeaseDisplayName;
 exports.formatUsdCents = formatUsdCents;
 exports.dedicatedSpendSummary = dedicatedSpendSummary;
@@ -33,6 +37,9 @@ exports.dedicatedLeaseIdForDaemon = dedicatedLeaseIdForDaemon;
 exports.dedicatedTerminalHarness = dedicatedTerminalHarness;
 exports.selectDedicatedAttachHarness = selectDedicatedAttachHarness;
 exports.dedicatedCatalogFromProducts = dedicatedCatalogFromProducts;
+exports.dedicatedCatalogSizeLines = dedicatedCatalogSizeLines;
+exports.dedicatedCreateSummary = dedicatedCreateSummary;
+exports.dedicatedCatalogPriceLineOutput = dedicatedCatalogPriceLineOutput;
 exports.dedicatedRuntimeApiErrorCode = dedicatedRuntimeApiErrorCode;
 exports.dedicatedRuntimeApiErrorDetails = dedicatedRuntimeApiErrorDetails;
 exports.formatDedicatedRuntimeApiError = formatDedicatedRuntimeApiError;
@@ -300,6 +307,71 @@ function dedicatedLeaseId(lease) {
 function dedicatedLeaseState(lease) {
     return String(lease?.state ?? 'unknown');
 }
+/**
+ * What `destroy` should say when it keeps the workspace — or null when it does
+ * not.
+ *
+ * A destroy under retention class standard/extended archives the lease and keeps
+ * its workspace volume, which keeps billing storage until it is purged. Nothing
+ * said so at the moment it mattered: `destroy` printed the new state and exited,
+ * `list` showed `archived` in the same column as `terminated`, and the one way to
+ * find out was the bill (OSK-9593).
+ */
+function dedicatedDestroyRetentionNote(priorLease, opts) {
+    if (opts.purge || !priorLease)
+        return null;
+    if (priorLease.state === 'archived')
+        return null; // destroying an archived lease purges it
+    const retentionClass = String(priorLease.storage?.retentionClass || 'none');
+    if (!opts.retain && retentionClass === 'none')
+        return null;
+    const id = dedicatedLeaseId(priorLease) || '<lease-id>';
+    const why = opts.retain ? '--retain-storage' : `retention class ${retentionClass}`;
+    return (`The workspace is kept (${why}), and its storage keeps billing until you delete it: ` +
+        `${opts.bin} machines dedicated destroy ${id} --purge-storage`);
+}
+const DEDICATED_TERMINAL_STATES = new Set(['terminated', 'failed', 'lost']);
+/**
+ * Month-to-date Dedicated Runtime spend for the scope a `list` shows.
+ *
+ * `billing.currentMonthSpendCents` is the SCOPE's spend for the product — the
+ * server aggregates by owner scope, not by lease — so every row carried the same
+ * figure, and a column headed MONTH/CAP on per-machine rows read as that
+ * machine's cost when it was every machine's (OSK-9576). It is said once instead.
+ */
+function dedicatedScopeMonthSpendCents(leases) {
+    for (const lease of leases) {
+        const cents = lease?.billing
+            ?.currentMonthSpendCents;
+        if (typeof cents === 'number' && Number.isFinite(cents))
+            return cents;
+    }
+    return null;
+}
+/**
+ * A lease's own cap, marked when the scope's spend has reached it. The mark is
+ * left off a terminal lease: its cap can no longer stop anything, and
+ * "$11.06/$10.00 OVER" on a machine terminated days ago read as that machine
+ * having overrun.
+ */
+function dedicatedLeaseCapCell(lease) {
+    const billing = lease?.billing;
+    if (!billing || typeof billing.monthlySpendLimitCents !== 'number')
+        return '-';
+    const reached = billing.spendingLimitExceeded && !DEDICATED_TERMINAL_STATES.has(dedicatedLeaseState(lease));
+    return `${formatUsdCents(billing.monthlySpendLimitCents)}${reached ? ' · reached' : ''}`;
+}
+/**
+ * A lease's STATUS cell. `archived` and `terminated` are both "gone" to read, and
+ * only one of them is still charging — so a lease billing retained storage says
+ * so (OSK-9593).
+ */
+function dedicatedLeaseStatusCell(lease) {
+    const state = dedicatedLeaseState(lease);
+    const billableState = lease?.billing
+        ?.billableState;
+    return billableState === 'storage' ? `${state} · billing storage` : state;
+}
 function dedicatedLeaseDisplayName(lease) {
     return lease?.displayName ? String(lease.displayName) : '-';
 }
@@ -310,7 +382,17 @@ function formatUsdCents(cents) {
     const sign = cents < 0 ? '-' : '';
     return `${sign}$${(Math.abs(cents) / 100).toFixed(2)}`;
 }
-/** `this month $1.23 of $500.00 cap`, or why that sentence cannot be written. */
+/**
+ * `$1.23 this month for machines of this type · $500.00 cap for this machine`,
+ * or why that sentence cannot be written.
+ *
+ * The two figures are different scopes and the sentence has to say so. The spend
+ * is a shared pot the server computes for (owner, team, machineProduct), so every
+ * lease of the same product reports the same number — a machine created minutes
+ * ago with no active seconds still reports the month's total. The cap is this
+ * lease's own. Printed as "$1.23 this month of $500.00 cap" the only available
+ * reading was that this machine had spent it.
+ */
 function dedicatedSpendSummary(lease) {
     const billing = lease.billing;
     if (!billing)
@@ -321,7 +403,10 @@ function dedicatedSpendSummary(lease) {
     }
     const spent = billing.currentMonthSpendCents;
     const projected = billing.projectedCurrentMonthSpendCents;
-    const parts = [`${formatUsdCents(spent)} this month of ${formatUsdCents(cap)} cap`];
+    const parts = [
+        `${formatUsdCents(spent)} this month for machines of this type`,
+        `${formatUsdCents(cap)} cap for this machine`,
+    ];
     if (typeof projected === 'number' && projected !== spent) {
         parts.push(`projected ${formatUsdCents(projected)}`);
     }
@@ -743,14 +828,128 @@ function dedicatedCatalogFromProducts(payload) {
             : {}),
         retentionClasses: configuration.retentionClasses || [],
         backupProfiles: configuration.backupProfiles || [],
+        ...(typeof configuration.defaultSizePreset === 'string'
+            ? { defaultSizePreset: configuration.defaultSizePreset }
+            : {}),
+        ...(typeof configuration.defaultRetentionClass === 'string'
+            ? { defaultRetentionClass: configuration.defaultRetentionClass }
+            : {}),
+        ...(typeof configuration.defaultBackupProfile === 'string'
+            ? { defaultBackupProfile: configuration.defaultBackupProfile }
+            : {}),
         defaultMonthlySpendingLimitCents: billing.defaultMonthlySpendingLimitCents,
         maxUserMonthlySpendingLimitCents: billing.maxUserMonthlySpendingLimitCents,
         priceLines: Array.isArray(presentation.priceLines)
             ? presentation.priceLines
             : [],
+        ...(typeof billing.priceBook?.version === 'string'
+            ? { priceBookVersion: billing.priceBook.version }
+            : {}),
         ...(typeof presentation.headline === 'string' ? { headline: presentation.headline } : {}),
     };
 }
+/**
+ * The catalog's size rows: spec, the size's own hourly price, and which one
+ * `create` uses by default. The rows used to carry spec alone, sorted by name,
+ * so the $1.40/hr tier came first with nothing saying what it cost or that
+ * $0.65/hr standard was the default; a reader had to join two blocks by name.
+ */
+function dedicatedCatalogSizeLines(catalog) {
+    return catalog.sizes.map((size) => {
+        const spec = [
+            size.vcpus ? `${size.vcpus} vCPU` : '',
+            size.memoryGiB ? `${size.memoryGiB} GiB RAM` : '',
+            size.accelerator || '',
+            typeof size.rateCentsPerHour === 'number' && size.rateCentsPerHour > 0
+                ? `${formatUsdCents(size.rateCentsPerHour)}/hr`
+                : '',
+        ]
+            .filter(Boolean)
+            .join(' · ');
+        const isDefault = size.id !== undefined && size.id === catalog.defaultSizePreset;
+        return `  ${String(size.id).padEnd(14)}${spec}${isDefault ? '  (default)' : ''}`;
+    });
+}
+/**
+ * What a create is about to buy, in the words and numbers the catalog uses.
+ *
+ * `create` provisioned a billable machine the moment it ran — no confirmation,
+ * no dry run, and every omitted flag silently took a paid default — while
+ * `destroy` asked first. A loop probing size validation bought two real
+ * machines, one of them $1.40/hr (OSK-9592). This is what `create` now shows
+ * before it asks, and what `--dry-run` prints instead of creating.
+ *
+ * Every default comes from the catalog, never from this file: a CLI that
+ * restates a default it does not own is how `--storage-gb` once billed twice the
+ * product's disk. A value the catalog does not declare is shown as "server
+ * default" rather than guessed.
+ */
+function dedicatedCreateSummary(catalog, choices) {
+    const size = catalog?.sizes.find((entry) => entry.id === choices.sizePreset);
+    const spec = size
+        ? [
+            size.vcpus ? `${size.vcpus} vCPU` : '',
+            size.memoryGiB ? `${size.memoryGiB} GiB RAM` : '',
+            typeof size.rateCentsPerHour === 'number' && size.rateCentsPerHour > 0
+                ? `${formatUsdCents(size.rateCentsPerHour)} per running hour`
+                : '',
+        ]
+            .filter(Boolean)
+            .join(' · ')
+        : 'not in the catalog this server offers';
+    const storagePrice = catalog?.priceLines.find((line) => line.cadence === 'per-gb-month');
+    const storageGb = choices.storageGb ?? catalog?.storage?.defaultGb;
+    const storage = storageGb !== undefined
+        ? `${storageGb} GiB${choices.storageGb === undefined ? ' (catalog default)' : ''}`
+        : 'server default';
+    const retentionClass = choices.retentionClass ?? catalog?.defaultRetentionClass;
+    const retention = retentionClass
+        ? `${retentionClass}${choices.retentionClass === undefined ? ' (catalog default)' : ''}`
+        : 'server default';
+    const retains = retentionClass !== undefined && retentionClass !== 'none';
+    const capCents = choices.spendingLimitCents ?? catalog?.defaultMonthlySpendingLimitCents;
+    const cap = capCents !== undefined && capCents !== null
+        ? `${formatUsdCents(capCents)} per month${choices.spendingLimitCents === undefined ? ' (catalog default)' : ''}`
+        : 'server default';
+    return [
+        `Create Dedicated Runtime "${choices.name}" — it bills while it runs:`,
+        `  size         ${choices.sizePreset} — ${spec}`,
+        `  storage      ${storage}${storagePrice?.display ? ` — ${storagePrice.display}` : ''}`,
+        `  retention    ${retention}${retains ? ' — destroy keeps the workspace, and its storage bills until you purge it' : ''}`,
+        `  monthly cap  ${cap}`,
+    ];
+}
+/**
+ * The catalog's money lines, grouped by what each amount IS.
+ *
+ * A start hold and a monthly cap used to print under "Prices" beside the hourly
+ * rates, so starting a machine read as a 33c charge and "$500 default monthly
+ * cap" read as a bill (OSK-9536). A line with no `kind` comes from a server that
+ * predates it and is shown the way every line used to be: as a charge.
+ */
+function dedicatedCatalogPriceLineOutput(priceLines, priceBookVersion) {
+    // The version is what a charge dispute later cites; it was in the payload and
+    // the command dropped it (OSK-9562).
+    const pricesHeading = priceBookVersion ? `Prices (price book ${priceBookVersion})` : 'Prices';
+    const groups = [
+        { kind: 'charge', heading: pricesHeading },
+        { kind: 'hold', heading: 'Held against your cap at start (not billed)' },
+        { kind: 'limit', heading: 'Monthly caps (--spending-limit-cents)' },
+    ];
+    if (priceLines.length === 0)
+        return ['', pricesHeading, '  not published by this server'];
+    const output = [];
+    for (const group of groups) {
+        const lines = priceLines.filter((line) => (line.kind || 'charge') === group.kind);
+        if (lines.length === 0)
+            continue;
+        output.push('', group.heading);
+        for (const line of lines) {
+            output.push(`  ${line.display || `${formatUsdCents(line.amountCents)} ${line.label || ''}`}`);
+        }
+    }
+    return output;
+}
 /**
  * Dedicated Runtime commands are unusually likely to meet a server that has
  * never heard of them.
@@ -867,9 +1066,44 @@ function dedicatedRuntimeApiErrorDetails(err) {
  */
 function describeRefusalReasons(err) {
     const details = dedicatedRuntimeApiErrorDetails(err);
+    const spend = describeSpendingCapRefusal(err.body, details);
+    if (spend)
+        return spend;
     const sentences = (0, harnesses_1.describeHealthReasonSentences)(details?.reasons, details?.state);
     return sentences ? ` Reasons: ${sentences}` : '';
 }
+/**
+ * The numbers behind a cap refusal: the cap, this month's spend so far, and
+ * where the refused action would have taken it — plus the command that raises
+ * the cap. Without them "would exceed the monthly cap" left a user guessing by
+ * how much, and which cap (OSK-9552).
+ */
+function describeSpendingCapRefusal(body, details) {
+    let code;
+    try {
+        code = JSON.parse(body || '{}').code;
+    }
+    catch {
+        return '';
+    }
+    if (code !== 'RUNTIME_SPENDING_LIMIT_EXCEEDED' || !details)
+        return '';
+    const cents = (key) => {
+        const value = details[key];
+        return typeof value === 'number' && Number.isFinite(value) ? value : null;
+    };
+    const limit = cents('limitCents');
+    const spent = cents('currentSpendCents');
+    const projected = cents('projectedCents');
+    const parts = [
+        limit !== null ? `Cap ${formatUsdCents(limit)}` : '',
+        spent !== null ? `spent this month ${formatUsdCents(spent)}` : '',
+        projected !== null ? `this would bring it to ${formatUsdCents(projected)}` : '',
+    ].filter(Boolean);
+    if (parts.length === 0)
+        return '';
+    return ` ${parts.join('; ')}. Raise the cap with \`machines dedicated spending-limit <lease-id> --cents <n>\`.`;
+}
 function formatDedicatedRuntimeApiError(err) {
     if (!(err instanceof api_fetch_1.ApiFetchError) || !err.body) {
         return null;

package/dist/lib/failed-lookup.d.ts

@@ -0,0 +1,3 @@
+export declare function isFailedLookupValue(value: unknown): boolean;
+/** The shared explanation, so every resolver refuses in the same words. */
+export declare function describeFailedLookupValue(value: string, noun: string): string;

package/dist/lib/failed-lookup.js

@@ -0,0 +1,40 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isFailedLookupValue = isFailedLookupValue;
+exports.describeFailedLookupValue = describeFailedLookupValue;
+/**
+ * Values a script produces when a lookup upstream has ALREADY failed.
+ *
+ * `jq -r .id` on a missing field prints `null`. A JavaScript value that was
+ * never set stringifies to `undefined`; an object to `[object Object]`. Python
+ * prints `None`, Ruby `nil`, and a boolean field read as an id gives `true` or
+ * `false`. No person types any of these as a reference to a Task, a Space or a
+ * member — and a script passes one exactly when its previous step went wrong.
+ *
+ * The reference resolvers are generous by design: a person can type part of a
+ * title, and when exactly one title contains it, that is the one they meant.
+ * The same generosity turned `tasks complete "$ID"` with `ID=null` into
+ * "complete whichever single task mentions null". So these are refused before
+ * any search runs. Matching is on the WHOLE trimmed value, case-insensitively:
+ * a real title that merely contains one of these words still resolves.
+ */
+const FAILED_LOOKUP_VALUES = new Set([
+    'null',
+    'undefined',
+    'none',
+    'nil',
+    'nan',
+    'true',
+    'false',
+    '[object object]',
+]);
+function isFailedLookupValue(value) {
+    return typeof value === 'string' && FAILED_LOOKUP_VALUES.has(value.trim().toLowerCase());
+}
+/** The shared explanation, so every resolver refuses in the same words. */
+function describeFailedLookupValue(value, noun) {
+    return (`"${value.trim()}" is not a ${noun} reference — it is what a failed lookup prints ` +
+        '(for example `jq -r` on a missing field, or an unset variable). Refusing to search ' +
+        'names for it, because a single accidental match would be acted on.\n' +
+        '  → check the step that produced this value; it most likely failed.');
+}

package/dist/lib/first-party-harness-agent.js

@@ -242,10 +242,17 @@ async function resolveFirstPartyHarnessAgent(explicit, deps = {}, options = {})
     // Asked, not told: the caller opted out of creation, so "no default" is a fact
     // about this machine rather than a failure, and the remedy is a real command.
     if (options.createDefault === false) {
-        throw new FirstPartyHarnessAgentError('agent-unset', `nothing is configured and you have no ${auth_core_1.FIRST_PARTY_HARNESS.displayName} default agent yet. ` +
+        throw new FirstPartyHarnessAgentError('agent-unset', 
+        // No roster here. The question was which agent a session runs as, and a
+        // hundred names in front of the one sentence that answers it buried the
+        // answer (OSK-9396). A person choosing one has `agents list` for that.
+        `nothing is configured and you have no ${auth_core_1.FIRST_PARTY_HARNESS.displayName} default agent yet. ` +
             'One is created automatically the first time you run a managed session — ' +
             `or make it now with \`${auth_core_1.FIRST_PARTY_HARNESS.command} skrr-agent --create\`` +
-            (rows.length ? `. Yours: ${candidates(rows)}` : ''));
+            (rows.length
+                ? `, or pick one of your ${rows.length} with ` +
+                    `\`${auth_core_1.FIRST_PARTY_HARNESS.command} skrr-agent --set <id-or-name>\` (see \`skrr agents list\`)`
+                : ''));
     }
     // The endpoint answered without an agent. Nothing here can repair that, but
     // the user still has every ordinary way to name one.
@@ -419,6 +426,13 @@ async function currentUserId(signal) {
  * function only after the flag, the config key, and the sole-owned-agent branch
  * have all declined, which is why the extra round trip is acceptable.
  */
+/**
+ * Deliberately NOT `dataService.ensureDefaultAgent`, which `agents
+ * ensure-default` uses for the same endpoint. This path takes an `AbortSignal`
+ * and the caller below distinguishes an abort from a refusal — reporting "no
+ * default agent" for a caller whose deadline expired sends someone to fix the
+ * wrong thing. The shared helper cannot carry a signal, so this one stays.
+ */
 async function ensureDefaultAgent(harness, signal) {
     const response = await (0, api_fetch_1.apiFetch)('/api/agents/default', {
         method: 'POST',

package/dist/lib/first-party-harness-doctor.d.ts

@@ -35,6 +35,21 @@ export interface DoctorCheck {
     detail: string;
     /** What to do about it. Only present when there is something to do. */
     remedy?: string;
+    /** The files and directories a check looked at, for `--json` consumers. */
+    sources?: DoctorSource[];
+}
+/** One place the engine reads instructions or skills from. */
+export interface DoctorSource {
+    /** As a person would type it: relative for the project, `~/` for the user. */
+    path: string;
+    kind: 'instructions' | 'skills';
+    owner: 'engine' | 'compatibility';
+    scope: 'project' | 'user';
+    present: boolean;
+    /** Skill directories holding a SKILL.md; only for a present skill root. */
+    skills?: number;
+    /** Why the engine will not read it although it exists, when it will not. */
+    disabled?: string;
 }
 export interface DoctorReport {
     checks: DoctorCheck[];

package/dist/lib/first-party-harness-doctor.js

@@ -36,6 +36,7 @@ exports.projectStateDir = projectStateDir;
 exports.runDoctor = runDoctor;
 exports.formatReport = formatReport;
 const node_fs_1 = require("node:fs");
+const node_os_1 = require("node:os");
 const node_path_1 = __importDefault(require("node:path"));
 const first_party_harness_1 = require("./first-party-harness");
 const auth_core_1 = require("@skrr-ai/auth-core");
@@ -285,40 +286,138 @@ function stateDirCheck(cwd, env) {
     ];
     return { name: 'state-paths', status: 'ok', detail: parts.join('; ') };
 }
-function compatCheck(cwd, env) {
-    // Report both the engine's own writable instruction surfaces and read-only
-    // compatibility sources so "where did this instruction come from?" has an
-    // answer — a WL-2 acceptance criterion.
-    const root = node_path_1.default.resolve(cwd);
-    const own = [];
-    for (const file of [
-        node_path_1.default.join(projectStateDir(root), 'AGENTS.md'),
-        node_path_1.default.join((0, first_party_harness_1.engineInstructionHome)(env), 'AGENTS.md'),
-    ]) {
-        if ((0, node_fs_1.existsSync)(file))
-            own.push(file);
+/**
+ * Skill directories directly under `root` that hold a SKILL.md.
+ *
+ * A symlinked skill directory counts: installers and dotfile managers link
+ * skills in, and a count that skipped them reported 11 of a root's 31.
+ */
+function countSkills(root) {
+    try {
+        return (0, node_fs_1.readdirSync)(root).filter((name) => {
+            try {
+                return ((0, node_fs_1.statSync)(node_path_1.default.join(root, name)).isDirectory() &&
+                    (0, node_fs_1.existsSync)(node_path_1.default.join(root, name, 'SKILL.md')));
+            }
+            catch {
+                return false;
+            }
+        }).length;
     }
-    const compatibility = [];
-    for (const rel of ['AGENTS.md', 'CLAUDE.md', '.agents/skills', '.claude/skills']) {
-        if ((0, node_fs_1.existsSync)(node_path_1.default.join(root, rel)))
-            compatibility.push(rel);
+    catch {
+        return 0;
     }
-    if (own.length === 0 && compatibility.length === 0) {
+}
+function compatCheck(cwd, env) {
+    // Report every instruction and skill source the engine reads, owned and
+    // compatibility alike, so "where did this come from?" has an answer — a WL-2
+    // acceptance criterion.
+    //
+    // It named two skill roots, project-level only, as bare directory names: the
+    // user-level `~/.agents/skills` and `~/.claude/skills` the engine also reads
+    // were missing, an empty root and a full one looked the same, and nothing said
+    // why a machine's other roots (.devin, .windsurf, .codex, …) were absent — so
+    // a reader could not tell "not read" from "not reported" (OSK-9357). The set
+    // below is the engine's documented compatibility contract
+    // (opencode-white-label-implementation-plan §7.2); roots beyond it reach a
+    // session only when the daemon links them in, which `skrr skills local` shows.
+    const root = node_path_1.default.resolve(cwd);
+    const home = env.HOME || (0, node_os_1.homedir)();
+    const projectDir = auth_core_1.FIRST_PARTY_HARNESS_ENGINE.projectDirectory;
+    const noCompatPrompts = Boolean(env[auth_core_1.FIRST_PARTY_HARNESS_ENGINE.env.noCompatPrompts]);
+    const engineHomeDir = (0, first_party_harness_1.engineInstructionHome)(env);
+    const shown = (abs) => abs.startsWith(root + node_path_1.default.sep)
+        ? node_path_1.default.relative(root, abs)
+        : abs.startsWith(home + node_path_1.default.sep)
+            ? `~/${node_path_1.default.relative(home, abs)}`
+            : abs;
+    const declared = [
+        {
+            abs: node_path_1.default.join(root, projectDir, 'AGENTS.md'),
+            kind: 'instructions',
+            owner: 'engine',
+            scope: 'project',
+        },
+        {
+            abs: node_path_1.default.join(engineHomeDir, 'AGENTS.md'),
+            kind: 'instructions',
+            owner: 'engine',
+            scope: 'user',
+        },
+        {
+            abs: node_path_1.default.join(root, 'AGENTS.md'),
+            kind: 'instructions',
+            owner: 'compatibility',
+            scope: 'project',
+        },
+        {
+            abs: node_path_1.default.join(root, 'CLAUDE.md'),
+            kind: 'instructions',
+            owner: 'compatibility',
+            scope: 'project',
+            ...(noCompatPrompts ? { disabled: auth_core_1.FIRST_PARTY_HARNESS_ENGINE.env.noCompatPrompts } : {}),
+        },
+        {
+            abs: node_path_1.default.join(home, '.claude', 'CLAUDE.md'),
+            kind: 'instructions',
+            owner: 'compatibility',
+            scope: 'user',
+            ...(noCompatPrompts ? { disabled: auth_core_1.FIRST_PARTY_HARNESS_ENGINE.env.noCompatPrompts } : {}),
+        },
+        {
+            abs: node_path_1.default.join(root, '.agents', 'skills'),
+            kind: 'skills',
+            owner: 'compatibility',
+            scope: 'project',
+        },
+        {
+            abs: node_path_1.default.join(root, '.claude', 'skills'),
+            kind: 'skills',
+            owner: 'compatibility',
+            scope: 'project',
+        },
+        {
+            abs: node_path_1.default.join(home, '.agents', 'skills'),
+            kind: 'skills',
+            owner: 'compatibility',
+            scope: 'user',
+        },
+        {
+            abs: node_path_1.default.join(home, '.claude', 'skills'),
+            kind: 'skills',
+            owner: 'compatibility',
+            scope: 'user',
+        },
+    ];
+    const sources = declared.map(({ abs, ...source }) => {
+        const present = (0, node_fs_1.existsSync)(abs);
         return {
-            name: 'compat-sources',
-            status: 'ok',
-            detail: `no ${auth_core_1.FIRST_PARTY_HARNESS.displayName}-owned or compatibility instruction files in this project`,
+            path: shown(abs),
+            ...source,
+            present,
+            ...(source.kind === 'skills' && present ? { skills: countSkills(abs) } : {}),
         };
-    }
-    const details = [];
-    if (own.length > 0)
-        details.push(`${auth_core_1.FIRST_PARTY_HARNESS.displayName}-owned: ${own.join(', ')}`);
-    if (compatibility.length > 0)
-        details.push(`compatibility (read-only): ${compatibility.join(', ')}`);
+    });
+    const describe = (source) => {
+        if (!source.present)
+            return `${source.path} (absent)`;
+        if (source.disabled)
+            return `${source.path} (off: ${source.disabled})`;
+        if (source.kind === 'skills') {
+            return `${source.path} (${source.skills} skill${source.skills === 1 ? '' : 's'})`;
+        }
+        return source.path;
+    };
+    const owned = sources.filter((source) => source.owner === 'engine');
+    const compatibility = sources.filter((source) => source.owner === 'compatibility');
     return {
         name: 'compat-sources',
         status: 'ok',
-        detail: details.join('; '),
+        detail: `${auth_core_1.FIRST_PARTY_HARNESS.displayName}-owned: ${owned.map(describe).join(', ')}; ` +
+            `compatibility (read-only): ${compatibility.map(describe).join(', ')}. ` +
+            'A daemon-hosted session also gets the skills its daemon discovers under other roots ' +
+            '(.devin, .windsurf, .codex, …) — `skrr skills local` lists them.',
+        sources,
     };
 }
 function opencodeCheck(cwd) {