@skrr-ai/cli 0.1.39 → 0.1.41

package/README.md

@@ -38,7 +38,7 @@ observability), and shared links.
 | **spaces widgets**                    | `list`, `add`, `remove`                                                                                                                                                                                                                                                                                                                                                                                                                                                                               |
 | **spaces skills**                     | `list`, `add`, `remove`, `pin`                                                                                                                                                                                                                                                                                                                                                                                                                                                                        |
 | **spaces labels**                     | `list`, `add`, `remove` (attach/detach; filter with `spaces list --label`)                                                                                                                                                                                                                                                                                                                                                                                                                            |
-| **labels**                            | `list`, `palette`, `create`, `update`, `archive`, `restore`, `delete`, `reorder` (unified labels across `user`, `space`, and `workspace` scopes)                                                                                                                                                                                                                                                                                                                                                      |
+| **labels**                            | `list`, `palette`, `create`, `update`, `archive`, `restore`, `delete`, `reorder` (unified labels across `user` and `workspace` scopes)                                                                                                                                                                                                                                                                                                                                                       |
 | **chats triggers**                    | `show`, `set`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         |
 | **dm**                                | `list`, `show`, `messages`, `threads`, `thread show/messages/follow/mute/share`, `send` (agent 1:1 main chat and Slack-style Thread controls)                                                                                                                                                                                                                                                                                                                                                         |
 | **diagnostics**                       | `context`, `doctor`, `usage`, `commands` (agent-friendly runtime identity, readiness, progressive token-budgeted discovery, and complete machine-readable schemas)                                                                                                                                                                                                                                                                                                                                    |

package/dist/base-command.d.ts

@@ -338,6 +338,15 @@ export interface ParsedGlobals {
     workspace?: string;
 }
 export declare function parseGlobalFlags(argv: readonly string[]): ParsedGlobals;
+/**
+ * The typed `code` and message an API refusal carried, read the way
+ * `handleApiError` reads them, for a command that answers one code itself
+ * before falling back to the uniform translation.
+ */
+export declare function apiRefusal(err: unknown): {
+    code?: string;
+    message?: string;
+};
 /**
  * Prefix a failure message with the resource it is about.
  *

package/dist/base-command.js

@@ -3,6 +3,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.Flags = exports.BaseCommand = exports.resolveProfileFromArgv = void 0;
 exports.assigneePayloadNeedsResolution = assigneePayloadNeedsResolution;
 exports.parseGlobalFlags = parseGlobalFlags;
+exports.apiRefusal = apiRefusal;
 exports.withSubject = withSubject;
 exports.describeHarnessUnavailable = describeHarnessUnavailable;
 exports.describeGitHubUnavailable = describeGitHubUnavailable;
@@ -16,6 +17,7 @@ exports.isTypedServerRefusal = isTypedServerRefusal;
 exports.isRetryableFailure = isRetryableFailure;
 const core_1 = require("@oclif/core");
 Object.defineProperty(exports, "Flags", { enumerable: true, get: function () { return core_1.Flags; } });
+const option_hint_1 = require("./lib/option-hint");
 const failed_lookup_1 = require("./lib/failed-lookup");
 // Re-exported from its home in `lib/keychain`, beside the other profile
 // functions. It lived here while `init()` was its only caller; a lib module
@@ -308,7 +310,7 @@ class BaseCommand extends core_1.Command {
                     // to log in again. Reachable in the ordinary way — a cold machine
                     // running several skrr commands at once has every process brokering,
                     // because none of them has a token yet.
-                    process.stderr.write('[skrr] The local skrr runtime is being rate-limited while brokering logins. ' +
+                    process.stderr.write('[skrr] The skrr background service on this computer is being rate-limited while brokering logins. ' +
                         'This is transient — retry in a few minutes, or run `skrr login` to sign in directly.\n');
                 }
                 else if (autoResult.outcome.reason === 'base_url_mismatch' &&
@@ -316,7 +318,7 @@ class BaseCommand extends core_1.Command {
                     // The user is about to see "Not signed in" — give them the
                     // exact fix. One stderr line so it doesn't pollute --json
                     // consumers on stdout.
-                    process.stderr.write(`[skrr] Local skrr runtime is logged in to ${autoResult.outcome.daemonServerUrl}, ` +
+                    process.stderr.write(`[skrr] The skrr background service on this computer is logged in to ${autoResult.outcome.daemonServerUrl}, ` +
                         `but skrr is configured for ${this.cliConfig.baseURL}. ` +
                         `Run \`skrr login --base-url ${autoResult.outcome.daemonServerUrl}\` to use the daemon.\n`);
                 }
@@ -788,6 +790,13 @@ class BaseCommand extends core_1.Command {
         if (retiredHint) {
             err.message = `${err.message}\n\n${retiredHint}`;
         }
+        // Sibling domains spell one lifecycle differently (`in_progress` for a
+        // space, `active` for a goal), and oclif's enum refusal named neither the
+        // difference nor the value to use (OSK-9735).
+        const optionHint = (0, option_hint_1.invalidOptionHint)(err.message || '');
+        if (optionHint) {
+            err.message = `${err.message}\n\n${optionHint}`;
+        }
         if (this.wantsJsonOutput()) {
             const exit = err.exitCode ?? err.oclif?.exit ?? 1;
             process.exitCode = exit;
@@ -1347,6 +1356,20 @@ function stringProp(obj, key) {
     const value = obj?.[key];
     return typeof value === 'string' && value.trim() ? value.trim() : undefined;
 }
+/**
+ * The typed `code` and message an API refusal carried, read the way
+ * `handleApiError` reads them, for a command that answers one code itself
+ * before falling back to the uniform translation.
+ */
+function apiRefusal(err) {
+    if (!(err instanceof Error))
+        return {};
+    const body = parseErrorBody(err.body);
+    return {
+        code: stringProp(body, 'code') || stringProp(body, 'errorType'),
+        message: stringProp(body, 'message') || stringProp(body, 'error'),
+    };
+}
 /**
  * Prefix a failure message with the resource it is about.
  *
@@ -1614,7 +1637,7 @@ function describeDaemonScopedCredential(bin, scope = 'daemon', source) {
         ? `The stored credential has ${scope === 'daemon-install' ? 'daemon-install' : 'daemon'} scope`
         : `This command received a ${scopeLabel} credential`;
     return (`${subject}, which cannot access user API commands. ` +
-        `Run \`${bin} login\` to create a CLI credential. For the local runtime itself, use \`${bin} daemon login\`.`);
+        `Run \`${bin} login\` to create a CLI credential. For the background service on this computer, use \`${bin} daemon login\`.`);
 }
 /**
  * Did the server MEAN this 5xx, or did it fall over?

package/dist/commands/agent-shares/list-for.js

@@ -4,6 +4,7 @@ const core_1 = require("@oclif/core");
 const data_provider_1 = require("@skrr-ai/data-provider");
 const base_command_1 = require("../../base-command");
 const format_1 = require("../../lib/format");
+const share_rows_1 = require("../../lib/share-rows");
 class AgentSharesListFor extends base_command_1.BaseCommand {
     static description = 'List all users an agent has been shared with';
     static examples = [
@@ -37,10 +38,10 @@ class AgentSharesListFor extends base_command_1.BaseCommand {
             return;
         }
         const rows = items.map((s) => ({
-            shareId: String(s.id ?? s._id ?? '-'),
-            recipient: String(s.recipientId ?? s.recipient ?? s.to ?? '-'),
+            shareId: (0, share_rows_1.shareIdOf)(s),
+            recipient: (0, share_rows_1.sharePartyLabel)(s.recipient ?? s.recipientId ?? s.to),
             status: String(s.status ?? '-'),
-            sharedAt: formatTime(s.createdAt ?? s.sharedAt),
+            sharedAt: (0, format_1.localTime)(s.createdAt ?? s.sharedAt),
         }));
         (0, format_1.renderTable)(rows, [
             { key: 'shareId', header: 'SHARE ID' },
@@ -56,11 +57,3 @@ class AgentSharesListFor extends base_command_1.BaseCommand {
     }
 }
 exports.default = AgentSharesListFor;
-function formatTime(value) {
-    try {
-        return new Date(String(value)).toISOString().slice(0, 19).replace('T', ' ');
-    }
-    catch {
-        return String(value ?? '-');
-    }
-}

package/dist/commands/agent-shares/received.js

@@ -4,6 +4,7 @@ const core_1 = require("@oclif/core");
 const data_provider_1 = require("@skrr-ai/data-provider");
 const base_command_1 = require("../../base-command");
 const format_1 = require("../../lib/format");
+const share_rows_1 = require("../../lib/share-rows");
 class AgentSharesReceived extends base_command_1.BaseCommand {
     static description = 'List agent shares received by the current user';
     static examples = [
@@ -44,12 +45,12 @@ class AgentSharesReceived extends base_command_1.BaseCommand {
             return;
         }
         const rows = items.map((s) => ({
-            shareId: String(s.id ?? s._id ?? '-'),
+            shareId: (0, share_rows_1.shareIdOf)(s),
             agentId: String(s.agentId ?? '-'),
             agentName: String(s.agentName ?? s.agent?.name ?? '-'),
-            from: String(s.senderId ?? s.from ?? s.owner ?? '-'),
+            from: (0, share_rows_1.sharePartyLabel)(s.owner ?? s.senderId ?? s.from),
             status: String(s.status ?? '-'),
-            sharedAt: formatTime(s.createdAt ?? s.sharedAt),
+            sharedAt: (0, format_1.localTime)(s.createdAt ?? s.sharedAt),
         }));
         (0, format_1.renderTable)(rows, [
             { key: 'shareId', header: 'SHARE ID' },
@@ -67,11 +68,3 @@ class AgentSharesReceived extends base_command_1.BaseCommand {
     }
 }
 exports.default = AgentSharesReceived;
-function formatTime(value) {
-    try {
-        return new Date(String(value)).toISOString().slice(0, 19).replace('T', ' ');
-    }
-    catch {
-        return String(value ?? '-');
-    }
-}

package/dist/commands/agent-shares/sent.js

@@ -4,6 +4,7 @@ const core_1 = require("@oclif/core");
 const data_provider_1 = require("@skrr-ai/data-provider");
 const base_command_1 = require("../../base-command");
 const format_1 = require("../../lib/format");
+const share_rows_1 = require("../../lib/share-rows");
 class AgentSharesSent extends base_command_1.BaseCommand {
     static description = 'List agent shares sent by the current user';
     static examples = [
@@ -41,12 +42,12 @@ class AgentSharesSent extends base_command_1.BaseCommand {
             return;
         }
         const rows = items.map((s) => ({
-            shareId: String(s.id ?? s._id ?? '-'),
+            shareId: (0, share_rows_1.shareIdOf)(s),
             agentId: String(s.agentId ?? '-'),
             agentName: String(s.agentName ?? s.agent?.name ?? '-'),
-            to: String(s.recipientId ?? s.to ?? s.recipient ?? '-'),
+            to: (0, share_rows_1.sharePartyLabel)(s.recipient ?? s.recipientId ?? s.to),
             status: String(s.status ?? '-'),
-            sharedAt: formatTime(s.createdAt ?? s.sharedAt),
+            sharedAt: (0, format_1.localTime)(s.createdAt ?? s.sharedAt),
         }));
         (0, format_1.renderTable)(rows, [
             { key: 'shareId', header: 'SHARE ID' },
@@ -64,11 +65,3 @@ class AgentSharesSent extends base_command_1.BaseCommand {
     }
 }
 exports.default = AgentSharesSent;
-function formatTime(value) {
-    try {
-        return new Date(String(value)).toISOString().slice(0, 19).replace('T', ' ');
-    }
-    catch {
-        return String(value ?? '-');
-    }
-}

package/dist/commands/agent-shares/with.js

@@ -4,6 +4,7 @@ const core_1 = require("@oclif/core");
 const data_provider_1 = require("@skrr-ai/data-provider");
 const base_command_1 = require("../../base-command");
 const format_1 = require("../../lib/format");
+const share_rows_1 = require("../../lib/share-rows");
 class AgentSharesWith extends base_command_1.BaseCommand {
     static description = 'Show all agent shares with a specific user';
     static examples = [
@@ -39,11 +40,11 @@ class AgentSharesWith extends base_command_1.BaseCommand {
             return;
         }
         const toRows = (items) => items.map((s) => ({
-            shareId: String(s.id ?? s._id ?? '-'),
+            shareId: (0, share_rows_1.shareIdOf)(s),
             agentId: String(s.agentId ?? '-'),
             agentName: String(s.agentName ?? s.agent?.name ?? '-'),
             status: String(s.status ?? '-'),
-            sharedAt: formatTime(s.createdAt ?? s.sharedAt),
+            sharedAt: (0, format_1.localTime)(s.createdAt ?? s.sharedAt),
         }));
         const columns = [
             { key: 'shareId', header: 'SHARE ID' },
@@ -69,11 +70,3 @@ class AgentSharesWith extends base_command_1.BaseCommand {
     }
 }
 exports.default = AgentSharesWith;
-function formatTime(value) {
-    try {
-        return new Date(String(value)).toISOString().slice(0, 19).replace('T', ' ');
-    }
-    catch {
-        return String(value ?? '-');
-    }
-}

package/dist/commands/agents/activity.js

@@ -162,7 +162,7 @@ class AgentsActivity extends base_command_1.BaseCommand {
         }
         else {
             (0, format_1.renderTable)(entries.map((entry) => ({
-                when: entry.at ? new Date(entry.at).toISOString().slice(0, 19).replace('T', ' ') : '-',
+                when: (0, format_1.localTime)(entry.at),
                 kind: entry.kind,
                 title: (0, format_1.truncate)(entry.title, 50),
                 detail: (0, format_1.truncate)(entry.detail, 40),

package/dist/commands/agents/api-actions/add.js

@@ -3,6 +3,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 const core_1 = require("@oclif/core");
 const promises_1 = require("node:fs/promises");
 const data_provider_1 = require("@skrr-ai/data-provider");
+const runtime_tool_support_1 = require("../../../lib/runtime-tool-support");
 const base_command_1 = require("../../../base-command");
 /**
  * Attach (or re-attach) an OpenAPI document to an agent as a tool surface.
@@ -199,6 +200,11 @@ class AgentsApiActionsAdd extends base_command_1.BaseCommand {
         }
         this.log(`${flags['action-id'] ? 'Updated' : 'Added'} an OpenAPI action on agent ${args.agentId} — ` +
             `${functions.length} operation(s) on ${domain}`);
+        const actionId = result[1]?.action_id;
+        if (flags.auth === data_provider_1.AuthTypeEnum.OAuth && actionId) {
+            const redirectUrl = new URL(`/api/actions/${encodeURIComponent(actionId)}/oauth/callback`, this.cliConfig.baseURL).toString();
+            this.log((0, runtime_tool_support_1.oauthActionNotice)(redirectUrl));
+        }
         this.printAgentUrl(args.agentId);
     }
 }

package/dist/commands/agents/chat.js

@@ -12,6 +12,7 @@ const node_fs_1 = require("node:fs");
 const core_1 = require("@oclif/core");
 const data_provider_1 = require("@skrr-ai/data-provider");
 const base_command_1 = require("../../base-command");
+const agent_home_workspace_1 = require("../../lib/agent-home-workspace");
 const agentic_stream_1 = require("../../lib/agentic-stream");
 const web_url_1 = require("../../lib/web-url");
 const local_skills_1 = require("../../lib/local-skills");
@@ -302,7 +303,10 @@ class AgentsChat extends base_command_1.BaseCommand {
                 exit: 2,
             });
         }
-        const { refs, problems } = (0, local_skills_1.resolveLocalSkillRefs)(inventory.skills ?? [], requested);
+        const { refs, problems } = (0, local_skills_1.resolveLocalSkillRefs)(inventory.skills ?? [], requested, {
+            snapshot: inventory.cwdResolved !== true,
+            daemonId,
+        });
         if (problems.length > 0) {
             this.error(problems.join('\n'), { exit: 2 });
         }
@@ -446,6 +450,7 @@ class AgentsChat extends base_command_1.BaseCommand {
         const prompt = localSkills
             ? (0, local_skills_1.withSkillInvocations)(flags.prompt, localSkills.refs)
             : flags.prompt;
+        await (0, agent_home_workspace_1.applyAgentHomeWorkspaceDefault)(args.agentId, (agentId) => data_provider_1.dataService.getAgentById({ agent_id: agentId }));
         let started;
         try {
             started = await data_provider_1.dataService.startAgenticChat({

package/dist/commands/agents/create.d.ts

@@ -64,6 +64,13 @@ export declare function agentCreateMissingFields(payload: Record<string, unknown
  * a failed create would be worse than the silence.
  */
 export declare function unappliedPayloadKeys(sent: Record<string, unknown>, created: unknown, ignore?: readonly string[]): string[];
+/**
+ * Why a key can come back missing. Both readings are live: a typo of a real
+ * field (`max_turns` for `maxTurns`), and a real field only the server sets
+ * (`nativeRole`, `author`). Naming only the first told a caller who had tried
+ * to claim a platform role that they had misspelled something.
+ */
+export declare function unappliedPayloadKeysWarning(keys: readonly string[]): string;
 export declare function backgroundLoopLines(agentId: string, relationshipLoopsSkipped: boolean): string[];
 export default class AgentsCreate extends BaseCommand {
     static description: string;

package/dist/commands/agents/create.js

@@ -3,10 +3,12 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.agentCreateMissingFieldsMessage = agentCreateMissingFieldsMessage;
 exports.agentCreateMissingFields = agentCreateMissingFields;
 exports.unappliedPayloadKeys = unappliedPayloadKeys;
+exports.unappliedPayloadKeysWarning = unappliedPayloadKeysWarning;
 exports.backgroundLoopLines = backgroundLoopLines;
 const core_1 = require("@oclif/core");
 const data_provider_1 = require("@skrr-ai/data-provider");
 const agent_visual_refs_1 = require("../../lib/agent-visual-refs");
+const runtime_tool_support_1 = require("../../lib/runtime-tool-support");
 const base_command_1 = require("../../base-command");
 const execution_target_1 = require("../../lib/execution-target");
 const prompt_1 = require("../../lib/prompt");
@@ -105,6 +107,17 @@ function unappliedPayloadKeys(sent, created, ignore = []) {
         .filter((key) => !Object.prototype.hasOwnProperty.call(back, key))
         .sort();
 }
+/**
+ * Why a key can come back missing. Both readings are live: a typo of a real
+ * field (`max_turns` for `maxTurns`), and a real field only the server sets
+ * (`nativeRole`, `author`). Naming only the first told a caller who had tried
+ * to claim a platform role that they had misspelled something.
+ */
+function unappliedPayloadKeysWarning(keys) {
+    const one = keys.length === 1;
+    return (`The server did not keep ${keys.join(', ')}: ${one ? 'it is not an agent field' : 'they are not agent fields'}, ` +
+        `or only the server sets ${one ? 'it' : 'them'}. \`skrr agents show <id> --json\` shows what the agent stores.`);
+}
 function backgroundLoopLines(agentId, relationshipLoopsSkipped) {
     if (relationshipLoopsSkipped) {
         return [
@@ -189,7 +202,10 @@ class AgentsCreate extends base_command_1.BaseCommand {
             description: 'Default Claude permission mode for sessions',
             options: ['default', 'acceptEdits', 'bypassPermissions', 'plan'],
         }),
-        tools: core_1.Flags.string({ description: 'Tools JSON array' }),
+        tools: core_1.Flags.string({
+            description: 'Tools JSON array of plugin keys, e.g. \'["calculator"]\'. `skrr agents tools` lists the keys, ' +
+                'and which of them an agent turn can call.',
+        }),
         'model-parameters': core_1.Flags.string({ description: 'Model parameters JSON object' }),
         'agent-ids': core_1.Flags.string({ description: 'Delegated agent IDs JSON array' }),
         'network-mode': core_1.Flags.string({ description: 'Agent network mode' }),
@@ -368,8 +384,9 @@ class AgentsCreate extends base_command_1.BaseCommand {
         // Agent document field and is intentionally absent from the response.
         const unapplied = unappliedPayloadKeys(payload, created, ['relationshipLoops']);
         if (unapplied.length > 0) {
-            this.warn(`The server did not keep ${unapplied.join(', ')} — ${unapplied.length === 1 ? 'that field is' : 'those fields are'} not part of the agent it created. Check \`skrr agents show <id> --json\`.`);
+            this.warn(unappliedPayloadKeysWarning(unapplied));
         }
+        await (0, runtime_tool_support_1.warnPluginsNotLoaded)(payload.tools, (message) => this.warn(message));
         if (flags.json) {
             this.log(JSON.stringify((0, web_url_1.withAgentUrl)(this.cliConfig.baseURL, created), null, 2));
             return;

package/dist/commands/agents/manager/ensure.d.ts

@@ -0,0 +1,18 @@
+import { BaseCommand } from '../../../base-command';
+/**
+ * Create or repair this account's Agent Manager (the HR Agent).
+ *
+ * Wraps `POST /api/agents/manager/ensure`. New accounts get an HR Agent at
+ * signup; accounts that predate it had no way to get one (OSK-9745), and a
+ * signup whose provisioning failed part-way was never finished (OSK-9785).
+ * IDEMPOTENT: run it again and it reports the existing agent, or what it had
+ * to repair.
+ */
+export default class AgentsManagerEnsure extends BaseCommand {
+    static description: string;
+    static examples: string[];
+    static flags: {
+        json: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+    };
+    run(): Promise<void>;
+}

package/dist/commands/agents/manager/ensure.js

@@ -0,0 +1,56 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const core_1 = require("@oclif/core");
+const data_provider_1 = require("@skrr-ai/data-provider");
+const base_command_1 = require("../../../base-command");
+const web_url_1 = require("../../../lib/web-url");
+/**
+ * Create or repair this account's Agent Manager (the HR Agent).
+ *
+ * Wraps `POST /api/agents/manager/ensure`. New accounts get an HR Agent at
+ * signup; accounts that predate it had no way to get one (OSK-9745), and a
+ * signup whose provisioning failed part-way was never finished (OSK-9785).
+ * IDEMPOTENT: run it again and it reports the existing agent, or what it had
+ * to repair.
+ */
+class AgentsManagerEnsure extends base_command_1.BaseCommand {
+    static description = "Create your Agent Manager (HR Agent) if you don't have one, or repair it if it is incomplete";
+    static examples = [
+        '<%= config.bin %> agents manager ensure',
+        '<%= config.bin %> agents manager ensure --workspace <workspace-id> --json',
+    ];
+    static flags = {
+        json: core_1.Flags.boolean({ description: 'Output as JSON' }),
+    };
+    async run() {
+        this.requireAuth();
+        const { flags } = await this.parse(AgentsManagerEnsure);
+        let result;
+        try {
+            result = await data_provider_1.dataService.ensureAgentManager();
+        }
+        catch (err) {
+            this.handleApiError(err);
+        }
+        const agent = (0, web_url_1.withAgentUrl)(this.cliConfig.baseURL, {
+            ...result.agent,
+        });
+        if (flags.json) {
+            this.log(JSON.stringify({ ...result, agent }, null, 2));
+            return;
+        }
+        const label = `${result.agent.id} — ${result.agent.name}`;
+        if (result.created) {
+            this.log(`Created your Agent Manager: ${label}`);
+        }
+        else if (result.repaired.length > 0) {
+            this.log(`Repaired your Agent Manager (${result.repaired.join(', ')}): ${label}`);
+        }
+        else {
+            this.log(`You already have an Agent Manager: ${label}`);
+        }
+        this.log(`Workspace: ${result.workspaceId}`);
+        this.log(`URL: ${agent.url ?? '-'}`);
+    }
+}
+exports.default = AgentsManagerEnsure;

package/dist/commands/agents/show.js

@@ -179,6 +179,10 @@ class AgentsShow extends base_command_1.BaseCommand {
         }
         const tools = Array.isArray(a.tools) ? a.tools : [];
         this.log(`Tools:       ${tools.length === 0 ? '(none)' : tools.join(', ')}`);
+        if (tools.length > 0) {
+            // Stored, not loaded: the runtime has none of these yet (OSK-9750, OSK-9754).
+            this.log('             (saved on the agent; the agent runtime does not load these yet)');
+        }
         if (a.description) {
             this.log('');
             this.log('Description:');

package/dist/commands/agents/tools/auth.d.ts

@@ -1,4 +1,10 @@
 import { BaseCommand } from '../../../base-command';
+/**
+ * A credential's help text for a terminal. Plugin manifests write it as HTML
+ * with the signup link in an anchor; stripping the tags alone would keep
+ * "see Our Docs" and drop the URL, which is the part worth printing.
+ */
+export declare function credentialHelpText(description: string): string;
 /**
  * Whether this account has credentials for one tool.
  *

package/dist/commands/agents/tools/auth.js

@@ -1,8 +1,18 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.credentialHelpText = credentialHelpText;
 const core_1 = require("@oclif/core");
 const data_provider_1 = require("@skrr-ai/data-provider");
 const base_command_1 = require("../../../base-command");
+const html_text_1 = require("../../../lib/html-text");
+/**
+ * A credential's help text for a terminal. Plugin manifests write it as HTML
+ * with the signup link in an anchor; stripping the tags alone would keep
+ * "see Our Docs" and drop the URL, which is the part worth printing.
+ */
+function credentialHelpText(description) {
+    return (0, html_text_1.htmlToDisplayText)(description.replace(/<a\s[^>]*href=['"]([^'"]+)['"][^>]*>(.*?)<\/a>/gi, '$2 ($1)'));
+}
 /**
  * Whether this account has credentials for one tool.
  *
@@ -33,9 +43,25 @@ class AgentsToolsAuth extends base_command_1.BaseCommand {
             this.log(JSON.stringify(result, null, 2));
             return;
         }
+        const missing = result.missing ?? [];
         this.log(result.authenticated
             ? `${args.toolId}: authenticated`
-            : `${args.toolId}: not authenticated${result.message ? ` — ${result.message}` : ''}`);
+            : `${args.toolId}: not authenticated${missing.length === 0 && result.message ? ` — ${result.message}` : ''}`);
+        // The answer's next question is "what do I supply, and where do I get it"
+        // (OSK-9550); the manifest carries both, so print them.
+        if (missing.length > 0) {
+            this.log('Missing credentials:');
+            for (const credential of missing) {
+                this.log(`  ${credential.authField}  ${credential.label ?? ''}`.trimEnd());
+                if (credential.description) {
+                    this.log(`    ${credentialHelpText(credential.description)}`);
+                }
+            }
+            this.log('Add them where you add this tool to an agent in the web app.');
+        }
+        if (result.agentRuntime === false) {
+            this.log(`Agent turns cannot call ${args.toolId}: it saves output through a web request an agent turn does not have.`);
+        }
     }
 }
 exports.default = AgentsToolsAuth;

package/dist/commands/agents/tools/index.js

@@ -2,6 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 const core_1 = require("@oclif/core");
 const data_provider_1 = require("@skrr-ai/data-provider");
+const runtime_tool_support_1 = require("../../../lib/runtime-tool-support");
 const base_command_1 = require("../../../base-command");
 const format_1 = require("../../../lib/format");
 /**
@@ -63,15 +64,24 @@ class AgentsToolsList extends base_command_1.BaseCommand {
             pluginKey: tool.pluginKey,
             name: tool.name,
             auth: authState(tool),
+            agent: (0, runtime_tool_support_1.agentRuntimeLabel)(tool),
             description: String(tool.description ?? ''),
         })), [
             { key: 'pluginKey', header: 'PLUGIN KEY', verbatim: true },
             { key: 'name', header: 'NAME', maxWidth: 28 },
             { key: 'auth', header: 'AUTH' },
+            { key: 'agent', header: 'AGENT' },
             { key: 'description', header: 'DESCRIPTION', maxWidth: 52 },
         ], (line) => this.log(line));
         this.log('');
-        this.log('PLUGIN KEY is what --tools stores, e.g. --tools \'["web_search"]\'.');
+        // The example must be a key this list printed (OSK-9600: it was web_search),
+        // preferably one that works without credentials.
+        const example = rows.find((tool) => !tool.authConfig?.length) ?? rows[0];
+        this.log(`PLUGIN KEY is what --tools stores, e.g. --tools '["${example.pluginKey}"]'.`);
+        this.log(runtime_tool_support_1.AGENT_COLUMN_FOOTNOTE);
+        if (rows.some((tool) => tool.authConfig?.length && !tool.authenticated)) {
+            this.log('`skrr agents tools auth <plugin-key>` names the credentials a tool still needs.');
+        }
     }
 }
 exports.default = AgentsToolsList;

package/dist/commands/agents/triggers/policy.d.ts

@@ -15,6 +15,7 @@ export default class AgentsTriggersPolicy extends BaseCommand {
         'max-per-hour': import("@oclif/core/lib/interfaces").OptionFlag<number | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         'working-hours': import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         'quiet-hours': import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        'followup-budget': import("@oclif/core/lib/interfaces").OptionFlag<string[] | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
     };
     run(): Promise<void>;
 }

package/dist/commands/agents/triggers/policy.js

@@ -8,6 +8,28 @@ const triggers_1 = require("../../../lib/triggers");
 // used to carry its own copy that stopped one rung short, so `auto_run` was
 // accepted by the API and unreachable from the CLI.
 const data_provider_1 = require("@skrr-ai/data-provider");
+/** `watch=10 checkin=default` → `{ watch: 10, checkin: null }`; the server validates the pools. */
+function parseFollowUpBudget(values) {
+    if (!values || values.length === 0)
+        return undefined;
+    const budget = {};
+    for (const entry of (0, triggers_1.splitRepeated)(values) ?? []) {
+        const [pool, raw] = entry.split('=');
+        if (!pool || raw === undefined || raw === '') {
+            throw new Error(`--followup-budget expects pool=count, got "${entry}"`);
+        }
+        if (raw === 'default') {
+            budget[pool] = null;
+            continue;
+        }
+        const count = Number(raw);
+        if (!Number.isInteger(count) || count < 0) {
+            throw new Error(`--followup-budget ${pool} must be a non-negative integer or "default"`);
+        }
+        budget[pool] = count;
+    }
+    return budget;
+}
 class AgentsTriggersPolicy extends base_command_1.BaseCommand {
     static description = "Show or update an agent's initiative policy for agent-scoped triggers";
     static examples = [
@@ -38,6 +60,10 @@ class AgentsTriggersPolicy extends base_command_1.BaseCommand {
         'max-per-hour': core_1.Flags.integer({ description: 'Agent initiative hourly fire cap' }),
         'working-hours': core_1.Flags.string({ description: 'Policy workingHours JSON object' }),
         'quiet-hours': core_1.Flags.string({ description: 'Policy quietHours JSON object' }),
+        'followup-budget': core_1.Flags.string({
+            description: 'Daily follow-up creation cap for this agent, as pool=count (pools: watch, checkin, act; count "default" clears it). Repeatable',
+            multiple: true,
+        }),
     };
     async run() {
         this.requireAuth();
@@ -52,6 +78,7 @@ class AgentsTriggersPolicy extends base_command_1.BaseCommand {
                 maxPerHour: flags['max-per-hour'],
                 workingHours: (0, triggers_1.parseJsonObject)(flags['working-hours'], '--working-hours'),
                 quietHours: (0, triggers_1.parseJsonObject)(flags['quiet-hours'], '--quiet-hours'),
+                followUpBudget: parseFollowUpBudget(flags['followup-budget']),
             });
         }
         catch (err) {
@@ -77,6 +104,11 @@ class AgentsTriggersPolicy extends base_command_1.BaseCommand {
         this.log(`Allowed kinds:    ${Array.isArray(policy.allowedKinds) ? policy.allowedKinds.join(', ') : '-'}`);
         this.log(`Max fires/day:    ${String(policy.maxFiresPerDay ?? '-')}`);
         this.log(`Max/hour:         ${String(policy.maxPerHour ?? '-')}`);
+        const followUpBudget = policy.followUpBudget;
+        const budgetEntries = Object.entries(followUpBudget ?? {}).filter(([, v]) => v != null);
+        this.log(`Follow-up caps:   ${budgetEntries.length > 0
+            ? budgetEntries.map(([pool, cap]) => `${pool} ${String(cap)}/day`).join(', ')
+            : 'defaults'}`);
         if (Object.keys(counts).length > 0) {
             this.log(`Triggers:         ${String(counts.total ?? 0)} total, ${String(counts.enabled ?? 0)} enabled`);
         }