@skrr-ai/cli 0.1.38 → 0.1.40

package/README.md

@@ -38,7 +38,7 @@ observability), and shared links.
 | **spaces widgets**                    | `list`, `add`, `remove`                                                                                                                                                                                                                                                                                                                                                                                                                                                                               |
 | **spaces skills**                     | `list`, `add`, `remove`, `pin`                                                                                                                                                                                                                                                                                                                                                                                                                                                                        |
 | **spaces labels**                     | `list`, `add`, `remove` (attach/detach; filter with `spaces list --label`)                                                                                                                                                                                                                                                                                                                                                                                                                            |
-| **labels**                            | `list`, `palette`, `create`, `update`, `archive`, `restore`, `delete`, `reorder` (unified labels across `user`, `space`, and `workspace` scopes)                                                                                                                                                                                                                                                                                                                                                      |
+| **labels**                            | `list`, `palette`, `create`, `update`, `archive`, `restore`, `delete`, `reorder` (unified labels across `user` and `workspace` scopes)                                                                                                                                                                                                                                                                                                                                                       |
 | **chats triggers**                    | `show`, `set`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         |
 | **dm**                                | `list`, `show`, `messages`, `threads`, `thread show/messages/follow/mute/share`, `send` (agent 1:1 main chat and Slack-style Thread controls)                                                                                                                                                                                                                                                                                                                                                         |
 | **diagnostics**                       | `context`, `doctor`, `usage`, `commands` (agent-friendly runtime identity, readiness, progressive token-budgeted discovery, and complete machine-readable schemas)                                                                                                                                                                                                                                                                                                                                    |

package/bin/dev-fallback.js

@@ -245,6 +245,14 @@ function findAlternateCli({
 function missingLocalCommandBuild({ cliRoot, argv, fileSystem = fs, verifySourceIdentity = true }) {
   const commandsDirectory = path.join(cliRoot, 'dist', 'commands');
   const sourceCommandsDirectory = path.join(cliRoot, 'src', 'commands');
+  // Staleness is a relation between a build and its SOURCE, so a CLI without
+  // source — every installed npm package, which ships `dist` and no `src` — has
+  // nothing to be stale against. Every check below is a development-checkout
+  // guard. Only the per-command one happened to notice: it looks a source file
+  // up first. The `--version` branch did not, read the missing source-digest
+  // manifest as a missing build, and made an installed 0.1.38 report whatever
+  // other `skrr` was on the PATH, or fail (OSK-9883).
+  if (!fileSystem.existsSync(sourceCommandsDirectory)) return null;
   let commandBuildManifest;
   try {
     commandBuildManifest = JSON.parse(

package/dist/base-command.js

@@ -16,6 +16,7 @@ exports.isTypedServerRefusal = isTypedServerRefusal;
 exports.isRetryableFailure = isRetryableFailure;
 const core_1 = require("@oclif/core");
 Object.defineProperty(exports, "Flags", { enumerable: true, get: function () { return core_1.Flags; } });
+const option_hint_1 = require("./lib/option-hint");
 const failed_lookup_1 = require("./lib/failed-lookup");
 // Re-exported from its home in `lib/keychain`, beside the other profile
 // functions. It lived here while `init()` was its only caller; a lib module
@@ -788,6 +789,13 @@ class BaseCommand extends core_1.Command {
         if (retiredHint) {
             err.message = `${err.message}\n\n${retiredHint}`;
         }
+        // Sibling domains spell one lifecycle differently (`in_progress` for a
+        // space, `active` for a goal), and oclif's enum refusal named neither the
+        // difference nor the value to use (OSK-9735).
+        const optionHint = (0, option_hint_1.invalidOptionHint)(err.message || '');
+        if (optionHint) {
+            err.message = `${err.message}\n\n${optionHint}`;
+        }
         if (this.wantsJsonOutput()) {
             const exit = err.exitCode ?? err.oclif?.exit ?? 1;
             process.exitCode = exit;

package/dist/commands/agents/create.d.ts

@@ -64,6 +64,13 @@ export declare function agentCreateMissingFields(payload: Record<string, unknown
  * a failed create would be worse than the silence.
  */
 export declare function unappliedPayloadKeys(sent: Record<string, unknown>, created: unknown, ignore?: readonly string[]): string[];
+/**
+ * Why a key can come back missing. Both readings are live: a typo of a real
+ * field (`max_turns` for `maxTurns`), and a real field only the server sets
+ * (`nativeRole`, `author`). Naming only the first told a caller who had tried
+ * to claim a platform role that they had misspelled something.
+ */
+export declare function unappliedPayloadKeysWarning(keys: readonly string[]): string;
 export declare function backgroundLoopLines(agentId: string, relationshipLoopsSkipped: boolean): string[];
 export default class AgentsCreate extends BaseCommand {
     static description: string;

package/dist/commands/agents/create.js

@@ -3,6 +3,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.agentCreateMissingFieldsMessage = agentCreateMissingFieldsMessage;
 exports.agentCreateMissingFields = agentCreateMissingFields;
 exports.unappliedPayloadKeys = unappliedPayloadKeys;
+exports.unappliedPayloadKeysWarning = unappliedPayloadKeysWarning;
 exports.backgroundLoopLines = backgroundLoopLines;
 const core_1 = require("@oclif/core");
 const data_provider_1 = require("@skrr-ai/data-provider");
@@ -105,6 +106,17 @@ function unappliedPayloadKeys(sent, created, ignore = []) {
         .filter((key) => !Object.prototype.hasOwnProperty.call(back, key))
         .sort();
 }
+/**
+ * Why a key can come back missing. Both readings are live: a typo of a real
+ * field (`max_turns` for `maxTurns`), and a real field only the server sets
+ * (`nativeRole`, `author`). Naming only the first told a caller who had tried
+ * to claim a platform role that they had misspelled something.
+ */
+function unappliedPayloadKeysWarning(keys) {
+    const one = keys.length === 1;
+    return (`The server did not keep ${keys.join(', ')}: ${one ? 'it is not an agent field' : 'they are not agent fields'}, ` +
+        `or only the server sets ${one ? 'it' : 'them'}. \`skrr agents show <id> --json\` shows what the agent stores.`);
+}
 function backgroundLoopLines(agentId, relationshipLoopsSkipped) {
     if (relationshipLoopsSkipped) {
         return [
@@ -368,7 +380,7 @@ class AgentsCreate extends base_command_1.BaseCommand {
         // Agent document field and is intentionally absent from the response.
         const unapplied = unappliedPayloadKeys(payload, created, ['relationshipLoops']);
         if (unapplied.length > 0) {
-            this.warn(`The server did not keep ${unapplied.join(', ')} — ${unapplied.length === 1 ? 'that field is' : 'those fields are'} not part of the agent it created. Check \`skrr agents show <id> --json\`.`);
+            this.warn(unappliedPayloadKeysWarning(unapplied));
         }
         if (flags.json) {
             this.log(JSON.stringify((0, web_url_1.withAgentUrl)(this.cliConfig.baseURL, created), null, 2));

package/dist/commands/agents/triggers/policy.d.ts

@@ -15,6 +15,7 @@ export default class AgentsTriggersPolicy extends BaseCommand {
         'max-per-hour': import("@oclif/core/lib/interfaces").OptionFlag<number | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         'working-hours': import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         'quiet-hours': import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        'followup-budget': import("@oclif/core/lib/interfaces").OptionFlag<string[] | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
     };
     run(): Promise<void>;
 }

package/dist/commands/agents/triggers/policy.js

@@ -8,6 +8,28 @@ const triggers_1 = require("../../../lib/triggers");
 // used to carry its own copy that stopped one rung short, so `auto_run` was
 // accepted by the API and unreachable from the CLI.
 const data_provider_1 = require("@skrr-ai/data-provider");
+/** `watch=10 checkin=default` → `{ watch: 10, checkin: null }`; the server validates the pools. */
+function parseFollowUpBudget(values) {
+    if (!values || values.length === 0)
+        return undefined;
+    const budget = {};
+    for (const entry of (0, triggers_1.splitRepeated)(values) ?? []) {
+        const [pool, raw] = entry.split('=');
+        if (!pool || raw === undefined || raw === '') {
+            throw new Error(`--followup-budget expects pool=count, got "${entry}"`);
+        }
+        if (raw === 'default') {
+            budget[pool] = null;
+            continue;
+        }
+        const count = Number(raw);
+        if (!Number.isInteger(count) || count < 0) {
+            throw new Error(`--followup-budget ${pool} must be a non-negative integer or "default"`);
+        }
+        budget[pool] = count;
+    }
+    return budget;
+}
 class AgentsTriggersPolicy extends base_command_1.BaseCommand {
     static description = "Show or update an agent's initiative policy for agent-scoped triggers";
     static examples = [
@@ -38,6 +60,10 @@ class AgentsTriggersPolicy extends base_command_1.BaseCommand {
         'max-per-hour': core_1.Flags.integer({ description: 'Agent initiative hourly fire cap' }),
         'working-hours': core_1.Flags.string({ description: 'Policy workingHours JSON object' }),
         'quiet-hours': core_1.Flags.string({ description: 'Policy quietHours JSON object' }),
+        'followup-budget': core_1.Flags.string({
+            description: 'Daily follow-up creation cap for this agent, as pool=count (pools: watch, checkin, act; count "default" clears it). Repeatable',
+            multiple: true,
+        }),
     };
     async run() {
         this.requireAuth();
@@ -52,6 +78,7 @@ class AgentsTriggersPolicy extends base_command_1.BaseCommand {
                 maxPerHour: flags['max-per-hour'],
                 workingHours: (0, triggers_1.parseJsonObject)(flags['working-hours'], '--working-hours'),
                 quietHours: (0, triggers_1.parseJsonObject)(flags['quiet-hours'], '--quiet-hours'),
+                followUpBudget: parseFollowUpBudget(flags['followup-budget']),
             });
         }
         catch (err) {
@@ -77,6 +104,11 @@ class AgentsTriggersPolicy extends base_command_1.BaseCommand {
         this.log(`Allowed kinds:    ${Array.isArray(policy.allowedKinds) ? policy.allowedKinds.join(', ') : '-'}`);
         this.log(`Max fires/day:    ${String(policy.maxFiresPerDay ?? '-')}`);
         this.log(`Max/hour:         ${String(policy.maxPerHour ?? '-')}`);
+        const followUpBudget = policy.followUpBudget;
+        const budgetEntries = Object.entries(followUpBudget ?? {}).filter(([, v]) => v != null);
+        this.log(`Follow-up caps:   ${budgetEntries.length > 0
+            ? budgetEntries.map(([pool, cap]) => `${pool} ${String(cap)}/day`).join(', ')
+            : 'defaults'}`);
         if (Object.keys(counts).length > 0) {
             this.log(`Triggers:         ${String(counts.total ?? 0)} total, ${String(counts.enabled ?? 0)} enabled`);
         }

package/dist/commands/agents/update.js

@@ -186,13 +186,14 @@ class AgentsUpdate extends base_command_1.BaseCommand {
             this.handleApiError(err);
         }
         // The same check `agents create` makes. Without it, a key the server does
-        // not model — or a typo of one that it does, `max_turns` for `maxTurns` —
-        // was discarded with the same "Updated agent" line as a real change.
+        // not model, a typo of one that it does (`max_turns` for `maxTurns`), or a
+        // field only the server sets was discarded with the same "Updated agent"
+        // line as a real change.
         // `removeProjectIds` is an instruction, not a stored field, so it never
         // comes back and is not reported.
         const unapplied = (0, create_1.unappliedPayloadKeys)(payload, updated, ['removeProjectIds']);
         if (unapplied.length > 0) {
-            this.warn(`The server did not keep ${unapplied.join(', ')} — ${unapplied.length === 1 ? 'that field is' : 'those fields are'} not part of the agent. Check \`skrr agents show <id> --json\` for the field names it stores.`);
+            this.warn((0, create_1.unappliedPayloadKeysWarning)(unapplied));
         }
         if (flags.json) {
             this.log(JSON.stringify((0, web_url_1.withAgentUrl)(this.cliConfig.baseURL, updated), null, 2));

package/dist/commands/followups/observability.js

@@ -24,7 +24,7 @@ const outcomes = (terminal) => Object.entries(terminal)
  * every agent only with `--all-agents`.
  */
 class FollowupsObservability extends base_command_1.BaseCommand {
-    static description = 'Per-agent, per-kind rollup — created, outcomes, escalation, budget, check-in silence';
+    static description = 'Per-agent, per-kind rollup — created, outcomes, escalation, spend, budget, check-in silence';
     static examples = [
         '<%= config.bin %> followups observability',
         '<%= config.bin %> followups observability --agent agent_1',
@@ -93,6 +93,9 @@ class FollowupsObservability extends base_command_1.BaseCommand {
                 outcomes: outcomes(kind.terminal),
                 escalated: rate(kind.escalationRate),
                 fires: String(kind.fires),
+                spend: kind.spend
+                    ? `$${kind.spend.today.toFixed(2)} / $${kind.spend.total.toFixed(2)}`
+                    : '—',
                 budget: kind.budget ? `${kind.budget.used}/${kind.budget.limit ?? '∞'}` : '—',
                 silence: rate(kind.silenceRate),
             })), [
@@ -104,11 +107,12 @@ class FollowupsObservability extends base_command_1.BaseCommand {
                 { key: 'outcomes', header: 'OUTCOMES' },
                 { key: 'escalated', header: 'ESCALATED' },
                 { key: 'fires', header: 'FIRES' },
+                { key: 'spend', header: 'SPENT TODAY/ALL' },
                 { key: 'budget', header: 'TODAY/LIMIT' },
                 { key: 'silence', header: 'SILENT' },
             ], (line) => this.log(line));
         });
-        this.log(`\nAs of ${report.generatedAt ?? 'now'}. TODAY/LIMIT is the daily budget (reminders are not metered); SILENT is how often a check-in chose to stay quiet.`);
+        this.log(`\nAs of ${report.generatedAt ?? 'now'}. SPENT is the agent turns these follow-ups woke (USD, today / all time); TODAY/LIMIT is the daily creation budget (reminders are not metered); SILENT is how often a check-in chose to stay quiet.`);
     }
 }
 exports.default = FollowupsObservability;

package/dist/commands/followups/remind.js

@@ -15,11 +15,14 @@ class FollowupsRemind extends base_command_1.BaseCommand {
     static description = 'Remind the owner at a time — the reminder follow-up';
     static examples = [
         '<%= config.bin %> followups remind --subject task:OSK-42 --content "pick the deploy up" --in 2h',
-        '<%= config.bin %> followups remind --subject conversation:conv_9 --content "ask how the move went" --at 2026-09-20T09:00:00Z',
+        '<%= config.bin %> followups remind --subject conversation:conv_9 --content "ask how the move went" --at 2026-09-20T09:00:00Z --active --agent agent_1',
         '<%= config.bin %> followups remind --subject task:OSK-42 --content "ping me" --at 2026-09-20T09:00:00Z --active --agent agent_1',
     ];
     static flags = {
-        subject: core_1.Flags.string({ description: 'Subject ref: type:externalKey', required: true }),
+        subject: core_1.Flags.string({
+            description: 'Subject ref: type:externalKey. A passive reminder attaches to a task, project, goal or wiki_page; use --active for a conversation',
+            required: true,
+        }),
         content: core_1.Flags.string({ description: "The reminder's own words", required: true }),
         at: core_1.Flags.string({ description: 'ISO-8601 instant to remind at', exclusive: ['in'] }),
         in: core_1.Flags.string({

package/dist/commands/followups/reschedule.js

@@ -42,7 +42,8 @@ class FollowupsReschedule extends base_command_1.BaseCommand {
             this.log(JSON.stringify(result, null, 2));
             return;
         }
-        this.log(`Follow-up ${args.id} rescheduled to ${at}.`);
+        const next = result.followup?.nextRunAt;
+        this.log(`Follow-up ${args.id} rescheduled to ${typeof next === 'string' ? next : at}.`);
     }
 }
 exports.default = FollowupsReschedule;

package/dist/commands/followups/show.js

@@ -35,6 +35,10 @@ class FollowupsShow extends base_command_1.BaseCommand {
             ['intent', row.intentKey],
             ['producer', row.producer],
             ['terminal', row.terminal ? `${row.terminal} (${row.terminalReason ?? '—'})` : undefined],
+            [
+                'settled',
+                row.terminal ? `${row.terminalAt ?? '—'} by ${row.terminalBy ?? 'unknown'}` : undefined,
+            ],
             ['deadline', row.deadlineAt],
             ['escalated to', row.escalatedInitiativeId],
         ]) {

package/dist/commands/followups/watch.d.ts

@@ -15,6 +15,7 @@ import { BaseCommand } from '../../base-command';
  *              cannot stop is a leak.
  */
 export default class FollowupsWatch extends BaseCommand {
+    static summary: string;
     static description: string;
     static examples: string[];
     static flags: {

package/dist/commands/followups/watch.js

@@ -21,7 +21,11 @@ const triggers_1 = require("../../lib/triggers");
  *              cannot stop is a leak.
  */
 class FollowupsWatch extends base_command_1.BaseCommand {
-    static description = 'Watch an asynchronous tail until it settles — the watch follow-up';
+    static summary = 'Watch an asynchronous tail until it settles — the watch follow-up';
+    static description = [
+        'Two forms, and they cost different amounts. Prefer the predicate form whenever the state is readable over HTTPS: --url + --until is evaluated by the server, wakes the agent once when the condition settles, and always ends at --deadline.',
+        "The recipe form (--check / --success / --abort) wakes the agent for one turn per check, and every turn counts against the agent's watch budget. Use it only for a check a predicate cannot express.",
+    ].join('\n\n');
     static examples = [
         '<%= config.bin %> followups watch --subject task:OSK-42 --why "deploy still running" --url https://ci.example.com/api/build/9 --until \'{"path":"status","op":"equals","value":"done"}\' --deadline 6h',
         '<%= config.bin %> followups watch --subject task:OSK-42 --why "pr review" --check "gh pr view 42 --json state" --success "state == MERGED" --abort "state == CLOSED" --wait event --wait-entity github --wait-event pull_request_merged --wait-fallback 2h',
@@ -34,7 +38,7 @@ class FollowupsWatch extends base_command_1.BaseCommand {
         // predicate form
         url: core_1.Flags.string({ description: 'HTTPS endpoint to observe (predicate form)' }),
         until: core_1.Flags.string({
-            description: 'Predicate tree as JSON (predicate form): a leaf {"path","op","value"} or {"all"|"any": [...]}. op is equals, not_equals, contains, starts_with, in, gt, lt, exists, … — an unknown op is refused with the full list',
+            description: 'Predicate tree as JSON (predicate form — the server evaluates it; no agent turn per check): a leaf {"path","op","value"} or {"all"|"any": [...]}. op is equals, not_equals, contains, starts_with, in, gt, lt, exists, … — an unknown op is refused with the full list',
         }),
         grant: core_1.Flags.string({ description: 'Grant id supplying the watch credentials' }),
         deadline: core_1.Flags.string({ description: 'When the watch must stop (predicate form, required)' }),
@@ -43,7 +47,9 @@ class FollowupsWatch extends base_command_1.BaseCommand {
         'root-path': core_1.Flags.string({ description: 'JSON root path inside the response' }),
         'resume-prompt': core_1.Flags.string({ description: 'What to tell the settling turn' }),
         // recipe form
-        check: core_1.Flags.string({ description: 'The deterministic check to run (recipe form)' }),
+        check: core_1.Flags.string({
+            description: 'The check the agent runs (recipe form) — every check wakes the agent for one turn, counted against the watch budget',
+        }),
         success: core_1.Flags.string({ description: 'What state means the wait resolved (recipe form)' }),
         abort: core_1.Flags.string({ description: 'When to stop and escalate (recipe form)' }),
         wait: core_1.Flags.string({

package/dist/commands/machines/dedicated/create.js

@@ -72,11 +72,15 @@ class DedicatedMachinesCreate extends dedicated_lease_command_1.DedicatedLeaseCo
         if (flags.repository !== undefined && !(0, dedicated_machines_1.isDedicatedRepositoryRef)(flags.repository)) {
             this.error(`--repository must look like owner/repo, got "${flags.repository}".`, { exit: 2 });
         }
+        // The server trims the preset, so ' standard' buys a standard machine; the
+        // preview must judge the same value, or it calls a size it is about to buy
+        // "not in the catalog" and then buys it anyway (OSK-9592).
+        const sizePreset = flags['size-preset'].trim();
         const requestId = flags['request-id'] || newRequestId();
         const body = (0, dedicated_machines_1.dedicatedRuntimeCreateInput)({
             requestId,
             displayName: flags.name,
-            sizePreset: flags['size-preset'],
+            sizePreset,
             monthlySpendingLimitCents: flags['spending-limit-cents'],
             regionClass: flags['region-class'],
             storageGb: flags['storage-gb'],
@@ -93,7 +97,7 @@ class DedicatedMachinesCreate extends dedicated_lease_command_1.DedicatedLeaseCo
             const catalog = await this.readCatalogForSummary();
             const summary = (0, dedicated_machines_1.dedicatedCreateSummary)(catalog, {
                 name: flags.name,
-                sizePreset: flags['size-preset'],
+                sizePreset,
                 storageGb: flags['storage-gb'],
                 retentionClass: flags['retention-class'],
                 spendingLimitCents: flags['spending-limit-cents'],

package/dist/commands/machines/dedicated/destroy.js

@@ -73,16 +73,16 @@ class DedicatedMachinesDestroy extends dedicated_lease_command_1.DedicatedLeaseC
         else if (flags['retain-storage'])
             retentionIntent = 'retain';
         const response = await this.callDedicated(() => (0, dedicated_machines_1.destroyDedicatedRuntime)(leaseId, { ...this.scopeFrom(flags), retentionIntent }));
-        await this.reportLeaseAction(response, flags, { kind: 'destroyed' }, 'Destroying');
-        if (!flags.json) {
-            const note = (0, dedicated_machines_1.dedicatedDestroyRetentionNote)(prior, {
-                purge: Boolean(flags['purge-storage']),
-                retain: Boolean(flags['retain-storage']),
-                bin: this.config.bin,
-            });
-            if (note)
-                this.log(note);
-        }
+        const note = (0, dedicated_machines_1.dedicatedDestroyRetentionNote)(prior, {
+            purge: Boolean(flags['purge-storage']),
+            retain: Boolean(flags['retain-storage']),
+            bin: this.config.bin,
+        });
+        // A script reading --json is exactly the caller that never sees a printed
+        // line, so the kept-and-billing fact rides in the document too (OSK-9593).
+        await this.reportLeaseAction(response, flags, { kind: 'destroyed' }, 'Destroying', note ? { storageNote: note } : {});
+        if (!flags.json && note)
+            this.log(note);
     }
 }
 exports.default = DedicatedMachinesDestroy;

package/dist/commands/machines/dedicated/exec.js

@@ -55,6 +55,8 @@ class DedicatedMachinesExec extends base_command_1.BaseCommand {
     // What a script depends on, in the help a script author reads (OSK-8703).
     static description = [
         'Runs the command once, as the workload user, in /workspace or --cwd, through a shell with no TTY. ' +
+            'The workload user can read /workspace but writes only under user-data/ (its HOME) and repos/, so a ' +
+            'command that writes to its starting directory needs --cwd user-data or a path under one of those. ' +
             'Give it after -- as words (each one quoted for you), or as one shell string with --command; not both. ' +
             'The agent shell policy does not apply. A start whose answer is lost is followed up under the same ' +
             'request id, never run a second time.',
@@ -95,7 +97,7 @@ class DedicatedMachinesExec extends base_command_1.BaseCommand {
             description: 'Command to run as one shell string, instead of the words after --',
         }),
         cwd: core_1.Flags.string({
-            description: 'Working directory, relative to /workspace (for example repos/app)',
+            description: 'Working directory, relative to /workspace (for example repos/app or user-data). /workspace itself is not writable by the workload user.',
         }),
         timeout: core_1.Flags.string({
             description: `How long to let it run, such as 30s or 5m (default 2m, max ${dedicated_machines_1.DEDICATED_EXEC_MAX_TIMEOUT_MS / 60000}m). The process group is killed at the deadline.`,

package/dist/commands/machines/dedicated/price-book.d.ts

@@ -0,0 +1,17 @@
+import { DedicatedLeaseCommand } from '../../../lib/dedicated-lease-command';
+/**
+ * `skrr machines dedicated price-book` — the operator's answer to "under what
+ * policy, and at what margin, is each tier sold".
+ *
+ * `catalog` is the customer view: prices and the book version, never a cost or
+ * a policy. This is admin-only on the server, because costs and margins are not
+ * customer facts.
+ */
+export default class DedicatedMachinesPriceBook extends DedicatedLeaseCommand {
+    static description: string;
+    static examples: string[];
+    static flags: {
+        json: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+    };
+    run(): Promise<void>;
+}

package/dist/commands/machines/dedicated/price-book.js

@@ -0,0 +1,35 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const core_1 = require("@oclif/core");
+const dedicated_lease_command_1 = require("../../../lib/dedicated-lease-command");
+const dedicated_machines_1 = require("../../../lib/dedicated-machines");
+/**
+ * `skrr machines dedicated price-book` — the operator's answer to "under what
+ * policy, and at what margin, is each tier sold".
+ *
+ * `catalog` is the customer view: prices and the book version, never a cost or
+ * a policy. This is admin-only on the server, because costs and margins are not
+ * customer facts.
+ */
+class DedicatedMachinesPriceBook extends dedicated_lease_command_1.DedicatedLeaseCommand {
+    static description = 'Show the Dedicated Runtime price book an operator audits: version, pricing policy, and each tier rate, cost and margin (admin only)';
+    static examples = [
+        '<%= config.bin %> machines dedicated price-book',
+        '<%= config.bin %> machines dedicated price-book --json',
+    ];
+    static flags = {
+        json: core_1.Flags.boolean({ description: 'Output as JSON' }),
+    };
+    async run() {
+        this.requireAuth();
+        const { flags } = await this.parse(DedicatedMachinesPriceBook);
+        const read = await this.callDedicated(() => (0, dedicated_machines_1.getDedicatedOperatorPriceBook)());
+        if (flags.json) {
+            this.log(JSON.stringify(read, null, 2));
+            return;
+        }
+        for (const line of (0, dedicated_machines_1.dedicatedOperatorPriceBookLines)(read))
+            this.log(line);
+    }
+}
+exports.default = DedicatedMachinesPriceBook;

package/dist/commands/tasks/lifecycle/detach.js

@@ -43,11 +43,26 @@ class TasksLifecycleDetach extends base_command_1.BaseCommand {
                 return this.log('No lifecycle is attached to this Task — nothing to detach.');
             this.log(`Would detach ${lifecycle.packId ? `pack ${lifecycle.packId}` : `definition ${lifecycle.definitionId}`}` +
                 ` at generation ${lifecycle.generation}, stage ${lifecycle.currentStageKey ?? '—'}.`);
-            this.log('  The run is cancelled and kept as history; nothing already recorded is removed.');
-            this.log('  The generation is bumped, so no in-flight writer from the old run can land.');
+            if (lifecycle.runId) {
+                this.log('  The run is cancelled and kept as history; nothing already recorded is removed.');
+                this.log('  The generation is bumped, so no in-flight writer from the old run can land.');
+            }
+            else {
+                this.log('  It has not started, so there is no run to cancel.');
+            }
             this.log('  Re-attaching afterwards starts a NEW generation — it does not resume this one.');
             return;
         }
+        // The server clears runId on detach, so whether there WAS a run to cancel
+        // is only knowable before the write. Best-effort: a failed read must not
+        // block the detach, it only costs the sentence its precision.
+        let hadRun;
+        try {
+            hadRun = Boolean((await data_provider_1.dataService.getTaskLifecycle(taskId)).lifecycle?.runId);
+        }
+        catch {
+            hadRun = undefined;
+        }
         let response;
         try {
             response = await data_provider_1.dataService.detachTaskLifecycle({
@@ -62,9 +77,15 @@ class TasksLifecycleDetach extends base_command_1.BaseCommand {
             return this.log(JSON.stringify(response, null, 2));
         const lifecycle = response.lifecycle;
         // Name what changed. "Detached lifecycle from the Task." left the reader to
-        // diff the state afterwards to learn what had happened.
-        this.log(`Detached${lifecycle?.packId ? ` pack ${lifecycle.packId}` : ''} — the run is cancelled and` +
-            ` kept as history, and the binding is now generation ${lifecycle?.generation ?? '?'}` +
+        // diff the state afterwards to learn what had happened — and saying a run
+        // was cancelled when none had started is the same problem the other way.
+        const runSentence = hadRun === false
+            ? 'it had not started, so there was no run to cancel'
+            : hadRun
+                ? 'the run is cancelled and kept as history'
+                : 'any run is cancelled and kept as history';
+        this.log(`Detached${lifecycle?.packId ? ` pack ${lifecycle.packId}` : ''} — ${runSentence},` +
+            ` and the binding is now generation ${lifecycle?.generation ?? '?'}` +
             ` (${lifecycle?.status ?? 'detached'}).`);
         this.log('Re-attach with: skrr tasks lifecycle attach <task-id> --pack <pack>');
     }

package/dist/lib/dedicated-lease-command.d.ts

@@ -61,7 +61,9 @@ export declare abstract class DedicatedLeaseCommand extends BaseCommand {
         timeout?: string;
         interval?: number;
         workspace?: string;
-    }, goal: DedicatedWaitGoal | null, verb: string): Promise<void>;
+    }, goal: DedicatedWaitGoal | null, verb: string, 
+    /** Fields a `--json` caller needs that the server response does not carry. */
+    jsonExtra?: Record<string, unknown>): Promise<void>;
 }
 /** The same transient verdict BaseCommand gives an ordinary API call. */
 export declare function dedicatedRuntimeApiErrorRetryable(err: unknown): boolean;

package/dist/lib/dedicated-lease-command.js

@@ -127,7 +127,10 @@ class DedicatedLeaseCommand extends base_command_1.BaseCommand {
             return await fn();
         }
         catch (err) {
-            const message = (0, dedicated_machines_1.formatDedicatedRuntimeApiError)(err);
+            const message = (0, dedicated_machines_1.formatDedicatedRuntimeApiError)(err, {
+                command: this.id,
+                bin: this.config.bin,
+            });
             if (message) {
                 this.failWithCliError({
                     message,
@@ -145,7 +148,9 @@ class DedicatedLeaseCommand extends base_command_1.BaseCommand {
      * Print the lease an action returned, or wait for its operation to finish
      * first when `--wait` was passed.
      */
-    async reportLeaseAction(response, flags, goal, verb) {
+    async reportLeaseAction(response, flags, goal, verb, 
+    /** Fields a `--json` caller needs that the server response does not carry. */
+    jsonExtra = {}) {
         let lease = response?.lease;
         const id = (0, dedicated_machines_1.dedicatedLeaseId)(lease);
         if (flags.wait && goal && id) {
@@ -201,7 +206,7 @@ class DedicatedLeaseCommand extends base_command_1.BaseCommand {
             }
         }
         if (flags.json) {
-            this.log(JSON.stringify({ ...(response || {}), lease }, null, 2));
+            this.log(JSON.stringify({ ...(response || {}), lease, ...jsonExtra }, null, 2));
             return;
         }
         this.log(`Dedicated Runtime ${id || 'unknown'} ${(0, dedicated_machines_1.dedicatedLeaseState)(lease)}.`);

package/dist/lib/dedicated-machines.d.ts

@@ -221,6 +221,46 @@ export declare function dedicatedRuntimeCreateInput(input: {
  */
 export declare function isDedicatedRepositoryRef(value: string): boolean;
 export declare function createDedicatedRuntime(input: CreateDedicatedRuntimeInput): Promise<DedicatedRuntimeResponse>;
+/** One offered tier as the operator price book checks it. */
+export interface DedicatedPriceBookPresetCheck {
+    sizePreset: string;
+    customerRateCentsPerHour: number | null;
+    providerCostCentsPerHour: number | null;
+    grossMarginBps: number | null;
+    priced: boolean;
+    providerCostRecorded: boolean;
+    marginTargetMet: boolean;
+}
+/** `GET /api/machines/dedicated/price-book` — admin only. */
+export interface DedicatedOperatorPriceBook {
+    timestamp?: string;
+    availability: 'available' | 'disabled';
+    disabledReason: string | null;
+    configError: string | null;
+    priceBook: {
+        required: boolean;
+        approved: boolean;
+        version: string | null;
+        pricingPolicyRef: string | null;
+        targetGrossMarginBps: number | null;
+        missingReason: string | null;
+        presetChecks: DedicatedPriceBookPresetCheck[];
+    };
+    sizeAvailability: Array<{
+        id: string;
+        offered: boolean;
+        withheldReason: string | null;
+    }>;
+}
+/**
+ * The Dedicated Runtime price book as an operator reads it: which version and
+ * which pricing policy, and each tier's rate, cost and margin. The customer
+ * catalog carries none of the policy or cost facts, and the admin plane that
+ * also serves this is not deployed in production (OSK-9562).
+ */
+export declare function getDedicatedOperatorPriceBook(): Promise<DedicatedOperatorPriceBook>;
+/** Human lines for `machines dedicated price-book`. Pure, so it can be pinned. */
+export declare function dedicatedOperatorPriceBookLines(read: DedicatedOperatorPriceBook): string[];
 export declare function listDedicatedRuntimes(options?: {
     limit?: number;
     state?: string;
@@ -603,5 +643,12 @@ export declare function dedicatedRuntimeApiErrorCode(err: unknown): string | und
  * second list would only drift from the first.
  */
 export declare function dedicatedRuntimeApiErrorDetails(err: unknown): Record<string, unknown> | undefined;
-export declare function formatDedicatedRuntimeApiError(err: unknown): string | null;
+/** What a refused command knows about itself, so advice can be one it can follow. */
+export interface DedicatedApiErrorContext {
+    /** oclif command id, e.g. `machines:dedicated:create`. */
+    command?: string;
+    bin?: string;
+    leaseId?: string;
+}
+export declare function formatDedicatedRuntimeApiError(err: unknown, context?: DedicatedApiErrorContext): string | null;
 export {};