@skrr-ai/cli 0.1.36 → 0.1.38

package/dist/lib/label-scope.js

@@ -2,7 +2,7 @@
 /**
  * Shared plumbing for the unified label commands (`skrr labels …`).
  *
- * Labels are anchored to exactly one scope — a user, a space, or a workspace —
+ * Labels are anchored to exactly one scope — a user or a workspace —
  * via the `(scope, scopeId)` pair. That pair is simultaneously the uniqueness
  * key and the permission boundary server-side (see
  * `api/server/services/Labels/LabelService.js`), so every label command has to
@@ -11,12 +11,31 @@
  * id the server can infer (it falls back to the caller).
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.labelScopeFlags = exports.HEX_COLOR_RE = exports.LABEL_APPLICABLE = exports.LABEL_SCOPES = void 0;
+exports.labelScopeFlags = exports.HEX_COLOR_RE = exports.LABEL_APPLICABLE = exports.LABEL_SCOPES_INFERRED = exports.LABEL_SCOPES_REQUIRING_ID = exports.LABEL_SCOPES = void 0;
 exports.normalizeLabelColor = normalizeLabelColor;
 exports.resolveLabelScope = resolveLabelScope;
 exports.resolveApplicableTo = resolveApplicableTo;
 const core_1 = require("@oclif/core");
-exports.LABEL_SCOPES = ['user', 'space', 'workspace'];
+exports.LABEL_SCOPES = ['user', 'workspace'];
+/**
+ * Scopes whose id the server cannot infer, so `--scope-id` must name it.
+ *
+ * `resolveLabelScope` below and the `--scope-id` help text are BOTH derived
+ * from this, rather than each restating the list. They drifted once already:
+ * `0298b7e4fd` collapsed the vocabulary from three scopes to two, and the help
+ * kept advertising `--scope space` for months after the validator had stopped
+ * accepting it — so following `--help` produced `Expected --scope=space to be
+ * one of: user, workspace`, whose last line points back at the help that was
+ * wrong. Static prose describing a value set is how that happens; deriving it
+ * is what stops the next collapse doing the same.
+ */
+exports.LABEL_SCOPES_REQUIRING_ID = ['workspace'];
+const scopesRequiringId = () => exports.LABEL_SCOPES_REQUIRING_ID;
+/** Scopes the server resolves from the caller — passing an id is an error. */
+exports.LABEL_SCOPES_INFERRED = exports.LABEL_SCOPES.filter((scope) => !exports.LABEL_SCOPES_REQUIRING_ID.includes(scope));
+function joinScopes(scopes) {
+    return scopes.map((scope) => `--scope ${scope}`).join(' / ');
+}
 exports.LABEL_APPLICABLE = ['task', 'space', 'goal', 'routine'];
 /**
  * The server stores colors as bare 6-hex (`api/server/routes/labels.js` Zod is
@@ -34,7 +53,7 @@ exports.labelScopeFlags = {
         default: 'user',
     }),
     'scope-id': core_1.Flags.string({
-        description: 'Space or workspace ID — required for --scope space|workspace. Omit for --scope user (defaults to you).',
+        description: `Scope owner ID — required for ${joinScopes(scopesRequiringId())}. Omit for ${joinScopes(exports.LABEL_SCOPES_INFERRED)} (defaults to you).`,
     }),
 };
 /**
@@ -44,11 +63,12 @@ exports.labelScopeFlags = {
 function resolveLabelScope(flags) {
     const scope = (flags.scope ?? 'user');
     const scopeId = flags['scope-id'];
-    if ((scope === 'space' || scope === 'workspace') && !scopeId) {
+    const requiresId = exports.LABEL_SCOPES_REQUIRING_ID.includes(scope);
+    if (requiresId && !scopeId) {
         throw new Error(`--scope-id is required for --scope ${scope}.`);
     }
-    if (scope === 'user' && scopeId) {
-        throw new Error('--scope-id is not accepted for --scope user; user-scope labels are always your own.');
+    if (!requiresId && scopeId) {
+        throw new Error(`--scope-id is not accepted for --scope ${scope}; ${scope}-scope labels are always your own.`);
     }
     return { scope, ...(scopeId ? { scopeId } : {}) };
 }

package/dist/lib/local-skills.d.ts

@@ -0,0 +1,98 @@
+import type { DaemonLocalSkill } from '@skrr-ai/data-provider';
+/**
+ * Skills on a machine, as its daemon lists them — the CLI half of the `/` menu.
+ *
+ * `skrr` had two things called "skill" and commands for only one: store and
+ * workspace skills (`skills *`, `--skill <skill-id>`) had a full surface, while
+ * the skills in a machine's `.claude/skills` and sibling roots — the ones the
+ * web `/` menu offers — could be neither listed nor invoked, so a headless
+ * operator or a locally-running coding agent could not use them at all
+ * (OSK-9478). `skills local` lists them; `agents chat --local-skill` invokes
+ * one. Both resolve through here, so a name means the same skill in each.
+ */
+export type ConnectedDaemon = {
+    daemonId: string;
+    deviceName?: string | null;
+};
+/**
+ * Which machine to ask, or why there is no single answer.
+ *
+ * Resolves rather than guesses: picking one of several machines and reporting
+ * its skills as "the" answer is the same silent narrowing the listing exists
+ * to remove.
+ */
+export declare function chooseDaemon(active: ReadonlyArray<ConnectedDaemon>): {
+    daemonId: string;
+} | {
+    problem: string;
+    candidates: ConnectedDaemon[];
+};
+/** A skill with no declared triggers is invocable both ways — the walker's default. */
+export declare function isUserInvocable(skill: Pick<DaemonLocalSkill, 'triggers'>): boolean;
+/**
+ * Turn requested names into the references the server resolves.
+ *
+ * A request is `name`, or `<root>/<name>` when the same name exists under more
+ * than one root (`.claude/skills/review` vs `.agents/skills/review`). Each
+ * problem is reported in words that say what to type instead; nothing is
+ * dropped, because the server's own rule is that a skill the user picked and
+ * the turn did not load must fail the turn rather than run without it.
+ */
+export declare function resolveLocalSkillRefs(inventory: ReadonlyArray<DaemonLocalSkill>, requested: ReadonlyArray<string>): {
+    refs: Array<{
+        name: string;
+        pathHash: string;
+    }>;
+    problems: string[];
+};
+/**
+ * The prompt with a `/name` for every invoked skill it does not already name.
+ *
+ * The web composer sends the `/name` in the text beside the reference, and
+ * drops a reference whose `/name` is gone; a CLI turn carries the same pair so
+ * the agent reads the same invocation either way.
+ */
+export declare function withSkillInvocations(prompt: string, refs: ReadonlyArray<{
+    name: string;
+}>): string;
+/** Whether a skill argument names a place on disk rather than a store id. */
+export declare function looksLikeSkillPath(arg: string): boolean;
+export type LocalSkillSighting = {
+    daemonId: string;
+    deviceName?: string | null;
+    source?: string;
+};
+/**
+ * Where a skill with this name exists on the caller's connected machines.
+ *
+ * Best-effort by design: it runs only to word an error that is already going
+ * to be reported, so a machine that cannot be asked contributes nothing rather
+ * than replacing the real error with a second one.
+ */
+export declare function findLocalSkillsNamed(name: string): Promise<LocalSkillSighting[]>;
+/**
+ * The error for a skill argument a STORE command could not use.
+ *
+ * `skills install <name>` and `skills details <name>` answered a local skill's
+ * name or path with "Skill not found / NOT_FOUND": true of the store, and no
+ * help to someone the product had just told it reads their `.claude/skills`
+ * (OSK-9412). The answer depends on what the argument was, so it says which:
+ * a path (never a store id), a name found on a connected machine (needs no
+ * install), or neither (look the id up in the store).
+ */
+export declare function describeStoreSkillMiss(arg: string, sightings: ReadonlyArray<LocalSkillSighting>, command: 'install' | 'details'): string;
+/**
+ * The first daemon release whose walker scans the skill conventions — the
+ * project's `.claude/skills`, `.agents/skills`, `.devin/skills`,
+ * `.windsurf/skills` and the global `~/.claude/skills`. It arrived in
+ * `e9dfa732cd` and first shipped in 0.8.44; an older daemon scans only
+ * `claudeSession.skillsDir`, which is empty unless someone set it by hand.
+ */
+export declare const SKILL_CONVENTION_DISCOVERY_SINCE = "0.8.44";
+/**
+ * Whether a daemon's reported version is older than `floor`.
+ *
+ * Unknown or unparseable versions answer false: this decides only whether to
+ * add an explanation, and claiming an unknown daemon is old would be a guess.
+ */
+export declare function daemonPredates(version: string | null | undefined, floor: string): boolean;

package/dist/lib/local-skills.js

@@ -0,0 +1,195 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SKILL_CONVENTION_DISCOVERY_SINCE = void 0;
+exports.chooseDaemon = chooseDaemon;
+exports.isUserInvocable = isUserInvocable;
+exports.resolveLocalSkillRefs = resolveLocalSkillRefs;
+exports.withSkillInvocations = withSkillInvocations;
+exports.looksLikeSkillPath = looksLikeSkillPath;
+exports.findLocalSkillsNamed = findLocalSkillsNamed;
+exports.describeStoreSkillMiss = describeStoreSkillMiss;
+exports.daemonPredates = daemonPredates;
+const data_provider_1 = require("@skrr-ai/data-provider");
+/**
+ * Which machine to ask, or why there is no single answer.
+ *
+ * Resolves rather than guesses: picking one of several machines and reporting
+ * its skills as "the" answer is the same silent narrowing the listing exists
+ * to remove.
+ */
+function chooseDaemon(active) {
+    if (active.length === 1)
+        return { daemonId: active[0].daemonId };
+    if (active.length === 0) {
+        return {
+            problem: 'No connected machine. Start one with `skrr daemon start`, then try again.',
+            candidates: [],
+        };
+    }
+    return {
+        problem: `${active.length} machines are connected. Pick one with --daemon:`,
+        candidates: [...active],
+    };
+}
+/** A skill with no declared triggers is invocable both ways — the walker's default. */
+function isUserInvocable(skill) {
+    return !skill.triggers || skill.triggers.includes('user');
+}
+/**
+ * Turn requested names into the references the server resolves.
+ *
+ * A request is `name`, or `<root>/<name>` when the same name exists under more
+ * than one root (`.claude/skills/review` vs `.agents/skills/review`). Each
+ * problem is reported in words that say what to type instead; nothing is
+ * dropped, because the server's own rule is that a skill the user picked and
+ * the turn did not load must fail the turn rather than run without it.
+ */
+function resolveLocalSkillRefs(inventory, requested) {
+    const refs = [];
+    const problems = [];
+    const seen = new Set();
+    for (const raw of requested) {
+        const request = raw.trim().replace(/^\//, '');
+        const slash = request.lastIndexOf('/');
+        const root = slash > 0 ? request.slice(0, slash) : null;
+        const name = slash > 0 ? request.slice(slash + 1) : request;
+        const named = inventory.filter((skill) => skill.name === name);
+        const matches = root ? named.filter((skill) => skill.source === root) : named;
+        if (matches.length === 0) {
+            problems.push(named.length > 0
+                ? `No skill "${name}" under ${root}. It is under: ${named.map((s) => s.source ?? '?').join(', ')}.`
+                : `No skill named "${name}" on this machine. See \`skrr skills local\`.`);
+            continue;
+        }
+        if (matches.length > 1) {
+            problems.push(`"${name}" exists under ${matches.length} roots. Name one: ` +
+                matches.map((s) => `--local-skill ${s.source ?? '?'}/${name}`).join(' | '));
+            continue;
+        }
+        const [skill] = matches;
+        if (!isUserInvocable(skill)) {
+            problems.push(`"${name}" declares it is for the agent to reach for, not to invoke (triggers: model).`);
+            continue;
+        }
+        if (seen.has(skill.pathHash))
+            continue;
+        seen.add(skill.pathHash);
+        refs.push({ name: skill.name, pathHash: skill.pathHash });
+    }
+    return { refs, problems };
+}
+/**
+ * The prompt with a `/name` for every invoked skill it does not already name.
+ *
+ * The web composer sends the `/name` in the text beside the reference, and
+ * drops a reference whose `/name` is gone; a CLI turn carries the same pair so
+ * the agent reads the same invocation either way.
+ */
+function withSkillInvocations(prompt, refs) {
+    const missing = refs.filter((ref) => !new RegExp(`(^|\\s)/${ref.name.replace(/[.*+?^${}()|[\]\\]/g, '\\$&')}(?=\\s|$)`).test(prompt));
+    if (missing.length === 0)
+        return prompt;
+    return `${missing.map((ref) => `/${ref.name}`).join(' ')} ${prompt}`;
+}
+/** Whether a skill argument names a place on disk rather than a store id. */
+function looksLikeSkillPath(arg) {
+    return /[\\/]/.test(arg) || arg.startsWith('.') || arg.startsWith('~');
+}
+/**
+ * Where a skill with this name exists on the caller's connected machines.
+ *
+ * Best-effort by design: it runs only to word an error that is already going
+ * to be reported, so a machine that cannot be asked contributes nothing rather
+ * than replacing the real error with a second one.
+ */
+async function findLocalSkillsNamed(name) {
+    const bare = name.replace(/^\//, '');
+    let active = [];
+    try {
+        active = (await data_provider_1.dataService.getDaemons()).active ?? [];
+    }
+    catch {
+        return [];
+    }
+    const sightings = await Promise.all(active.map(async (daemon) => {
+        try {
+            const { skills } = await data_provider_1.dataService.getDaemonSkills(daemon.daemonId);
+            return (skills ?? [])
+                .filter((skill) => skill.name === bare)
+                .map((skill) => ({
+                daemonId: daemon.daemonId,
+                deviceName: daemon.deviceName,
+                source: skill.source,
+            }));
+        }
+        catch {
+            return [];
+        }
+    }));
+    return sightings.flat();
+}
+/**
+ * The error for a skill argument a STORE command could not use.
+ *
+ * `skills install <name>` and `skills details <name>` answered a local skill's
+ * name or path with "Skill not found / NOT_FOUND": true of the store, and no
+ * help to someone the product had just told it reads their `.claude/skills`
+ * (OSK-9412). The answer depends on what the argument was, so it says which:
+ * a path (never a store id), a name found on a connected machine (needs no
+ * install), or neither (look the id up in the store).
+ */
+function describeStoreSkillMiss(arg, sightings, command) {
+    const verb = command === 'install' ? 'installs' : 'shows';
+    if (looksLikeSkillPath(arg)) {
+        return [
+            `\`skills ${command}\` ${verb} a skill from the store by its id; "${arg}" is a path.`,
+            "A skill in one of your machine's skill roots needs no install.",
+            '→ See what your machine has: skrr skills local',
+            '→ Use one on a turn: skrr agents chat <agent-id> --local-skill <name>',
+        ].join('\n');
+    }
+    if (sightings.length > 0) {
+        const where = sightings
+            .map((s) => `${s.daemonId}${s.deviceName ? ` (${s.deviceName})` : ''}${s.source ? `, ${s.source}` : ''}`)
+            .join('; ');
+        return [
+            `No store skill has the id "${arg}", but a skill named "${arg}" is on your machine: ${where}.`,
+            'It needs no install.',
+            `→ Use it on a turn: skrr agents chat <agent-id> --local-skill ${arg.replace(/^\//, '')}`,
+        ].join('\n');
+    }
+    return [
+        `No store skill has the id "${arg}".`,
+        '→ Find a store id: skrr skills search <term>',
+        '→ Skills on your machine are not in the store: skrr skills local',
+    ].join('\n');
+}
+/**
+ * The first daemon release whose walker scans the skill conventions — the
+ * project's `.claude/skills`, `.agents/skills`, `.devin/skills`,
+ * `.windsurf/skills` and the global `~/.claude/skills`. It arrived in
+ * `e9dfa732cd` and first shipped in 0.8.44; an older daemon scans only
+ * `claudeSession.skillsDir`, which is empty unless someone set it by hand.
+ */
+exports.SKILL_CONVENTION_DISCOVERY_SINCE = '0.8.44';
+/**
+ * Whether a daemon's reported version is older than `floor`.
+ *
+ * Unknown or unparseable versions answer false: this decides only whether to
+ * add an explanation, and claiming an unknown daemon is old would be a guess.
+ */
+function daemonPredates(version, floor) {
+    const parse = (value) => {
+        const match = /^(\d+)\.(\d+)\.(\d+)/.exec(String(value ?? '').trim());
+        return match ? match.slice(1).map(Number) : null;
+    };
+    const have = parse(version);
+    const need = parse(floor);
+    if (!have || !need)
+        return false;
+    for (let i = 0; i < 3; i += 1) {
+        if (have[i] !== need[i])
+            return have[i] < need[i];
+    }
+    return false;
+}

package/dist/lib/machines.d.ts

@@ -59,6 +59,16 @@ export interface Machine {
     identityKind: MachineIdentityKind;
     name: string;
     status: 'online' | 'offline' | 'degraded';
+    /**
+     * One sentence naming what decided the status, or null when nothing needs
+     * explaining. Optional because the CLI ships separately from the server.
+     *
+     * `degraded` alone is unactionable, and on a laptop it is usually permanent —
+     * one offline row for a provider that was uninstalled holds the verdict
+     * forever, because supersession needs a NEWER row for the same provider and
+     * none will ever arrive.
+     */
+    statusReason?: string | null;
     machineUuid: string | null;
     stableDaemonId: string | null;
     daemonId: string | null;
@@ -135,14 +145,4 @@ export declare function listMachines(): Promise<Machine[]>;
 export declare function getMachine(machineId: string): Promise<Machine | null>;
 export declare function updateMachine(machineId: string, patch: MachinePreferencesPatch): Promise<Machine | null>;
 export declare function disconnectMachine(machineId: string): Promise<Record<string, unknown> | null>;
-/**
- * Resolve a user-supplied reference to exactly one machine.
- *
- * A machine is addressable by several ids (`id`, `machineUuid`,
- * `stableDaemonId`, `daemonId`) and `skrr harnesses list` prints a TRUNCATED
- * uuid, so the id a user has to hand is often a prefix of the one the API
- * wants. Resolving here keeps every command accepting the same references, and
- * makes an ambiguous prefix an error rather than a silent pick of the first
- * match.
- */
 export declare function resolveMachineRef(machines: Machine[], ref: string): Machine;

package/dist/lib/machines.js

@@ -93,13 +93,35 @@ async function disconnectMachine(machineId) {
  * makes an ambiguous prefix an error rather than a silent pick of the first
  * match.
  */
+/**
+ * The daemon ids a hosted machine's sandbox id can appear inside.
+ *
+ * `machines hosted list` prints `sbs_…`; the machine row carries
+ * `hosted-machine-sbs_…` as its daemon id. Composed rather than matched by
+ * substring so a longer id cannot be resolved by a shorter one's text.
+ */
+function hostedSandboxDaemonIds(ref) {
+    if (!ref.startsWith('sbs_'))
+        return [];
+    return [`hosted-machine-${ref}`, `hosted-job-machine-${ref}`];
+}
 function resolveMachineRef(machines, ref) {
     const needle = ref.trim();
     const lower = needle.toLowerCase();
     const exact = machines.filter((m) => m.id === needle ||
         m.machineUuid === needle ||
         m.stableDaemonId === needle ||
-        m.daemonId === needle);
+        m.daemonId === needle ||
+        // The sandbox id, which is the ONLY id `machines hosted list` prints.
+        // One hosted machine carries five identifiers and, before this, the one
+        // its own list showed you was the one `machines show` refused: the
+        // sandbox id appears here only INSIDE the daemon id, as
+        // `hosted-machine-<sbs_…>`, while `machines list --all` shows the same
+        // box as `lease:rtl_…` — a different random string entirely. Two lists,
+        // two unrelated-looking ids, no way on screen to tell they are one
+        // machine. Exact composition, not a substring search, so this cannot
+        // match a machine that merely contains the text.
+        hostedSandboxDaemonIds(needle).some((candidate) => m.daemonId === candidate));
     if (exact.length === 1)
         return exact[0];
     const byName = machines.filter((m) => m.name?.toLowerCase() === lower);

package/dist/lib/search-query.d.ts

@@ -0,0 +1,19 @@
+/**
+ * The search term, from a positional or `--query`, resolved the same way by
+ * both spellings of the same search.
+ *
+ * `skills search` and `search skills` run the identical store search. Neither
+ * accepted the obvious invocation — `skrr skills search git` — so the single
+ * most natural way to call a search command failed on both, and `--query` was
+ * `required` on both, which is what made it fail rather than prompt.
+ *
+ * Shared rather than copied because the two spellings staying in step is the
+ * whole point: the reason a reader could not tell them apart was that they had
+ * drifted (different one-liners, short flags on one of them), and a second copy
+ * of this is how that starts again.
+ */
+export declare function resolveSearchQuery(cmd: {
+    error: (message: string, options?: {
+        exit?: number;
+    }) => never;
+}, positional: string | undefined, flag: string | undefined, command: string): string;

package/dist/lib/search-query.js

@@ -0,0 +1,35 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveSearchQuery = resolveSearchQuery;
+/**
+ * The search term, from a positional or `--query`, resolved the same way by
+ * both spellings of the same search.
+ *
+ * `skills search` and `search skills` run the identical store search. Neither
+ * accepted the obvious invocation — `skrr skills search git` — so the single
+ * most natural way to call a search command failed on both, and `--query` was
+ * `required` on both, which is what made it fail rather than prompt.
+ *
+ * Shared rather than copied because the two spellings staying in step is the
+ * whole point: the reason a reader could not tell them apart was that they had
+ * drifted (different one-liners, short flags on one of them), and a second copy
+ * of this is how that starts again.
+ */
+function resolveSearchQuery(cmd, positional, flag, command) {
+    const fromPositional = positional?.trim();
+    const fromFlag = flag?.trim();
+    // Both given and DIFFERENT is a real ambiguity — refuse rather than pick.
+    // Both given and identical is a script that passes belt and braces; that is
+    // not an error and silently accepting it costs nobody anything.
+    if (fromPositional && fromFlag && fromPositional !== fromFlag) {
+        cmd.error(`Two different search terms: "${fromPositional}" and --query "${fromFlag}". Pass one.`, { exit: 2 });
+    }
+    const query = fromPositional || fromFlag;
+    if (!query) {
+        // `--query` used to be `required`, so oclif refused with its own generic
+        // sentence. Naming the shape people actually type is the point of the
+        // change, so the error names it too.
+        cmd.error(`What should I search for? Try \`skrr ${command} <term>\`.`, { exit: 2 });
+    }
+    return query;
+}

package/dist/lib/space-custom-actions.d.ts

@@ -0,0 +1,72 @@
+/**
+ * Shared shape for `skrr spaces actions add|update`.
+ *
+ * Both commands describe the same stored object, and they had drifted from the
+ * server that validates it (`spaceCustomActionSchema` in api/server/routes/spaces.js).
+ */
+import type { SpaceCustomAction, SpaceMemberActionsResponse } from '@skrr-ai/data-provider';
+/**
+ * The server's limit on `icon`, which is `z.string().max(4)`.
+ *
+ * The flag used to be documented as "Lucide icon name". It is not one: the web
+ * settings page renders `action.icon` as literal text, and almost no Lucide name
+ * fits in four characters, so following the help produced a 400 with a raw Zod
+ * message and no hint that an emoji was wanted (OSK-9631).
+ *
+ * Zod's `max` counts UTF-16 code units, not visible characters, so the check
+ * below uses `String.prototype.length` to agree with it exactly. Counting
+ * graphemes instead would accept a family emoji the server then refuses.
+ */
+export declare const SPACE_CUSTOM_ACTION_ICON_MAX = 4;
+export declare const spaceCustomActionIconFlag: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+export declare const spaceCustomActionLabelFlag: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+/** Refuse an icon the server would refuse, with a message that says what fits. */
+export declare function spaceCustomActionIconProblem(icon: unknown): string | null;
+type SpaceWithActions = {
+    id: string;
+    title?: string;
+    leadAgentId?: string | null;
+    customActions?: SpaceCustomAction[] | null;
+};
+/**
+ * Why a space's OWN actions cannot run, or null when they can.
+ *
+ * A space custom action runs as a task assigned to the Space Leader, so on a
+ * space with no Leader every one of them is dead on arrival. That fact used to
+ * live only in a tooltip on a disabled web button: `spaces actions add` reported
+ * success, `spaces actions list` listed the action happily, and nothing on the
+ * CLI said it could never run (OSK-9641).
+ */
+export declare function spaceActionsNotRunnableReason(space: Pick<SpaceWithActions, 'id' | 'leadAgentId'>, bin: string): string | null;
+/**
+ * Find a space custom action by the id `spaces actions list` prints, or by the
+ * `space-custom:<id>` form the projected quick-action surfaces use.
+ */
+export declare function findSpaceCustomAction(space: SpaceWithActions, ref: string): {
+    customAction: SpaceCustomAction;
+    index: number;
+} | {
+    problem: string;
+};
+export type SpaceQuickActionRow = {
+    source: 'space' | 'agent';
+    title: string;
+    owner: string;
+    type: string;
+    ref: string;
+    run: string;
+};
+/**
+ * Everything a space's action panel offers, in the order the web shows it: the
+ * space's own actions first, then the actions of member agents the caller can
+ * view, filtered by scope with the same predicate the web and server use.
+ *
+ * `spaces actions list` showed only the first half and `spaces actions
+ * available` a wider second half (every member agent, including ones the caller
+ * cannot run), so "what can I run here?" had no answer on the CLI (OSK-9641).
+ * Every row's `run` is a command `spaces actions run` accepts.
+ */
+export declare function spaceQuickActionRows(space: SpaceWithActions & {
+    labelIds?: string[] | null;
+}, members: SpaceMemberActionsResponse['agents'], bin: string): SpaceQuickActionRow[];
+export {};