@skrr-ai/cli 0.1.39 → 0.1.41

package/dist/commands/agents/update.js

@@ -4,6 +4,7 @@ const core_1 = require("@oclif/core");
 const data_provider_1 = require("@skrr-ai/data-provider");
 const agent_visual_refs_1 = require("../../lib/agent-visual-refs");
 const create_1 = require("./create");
+const runtime_tool_support_1 = require("../../lib/runtime-tool-support");
 const base_command_1 = require("../../base-command");
 const execution_target_1 = require("../../lib/execution-target");
 const prompt_1 = require("../../lib/prompt");
@@ -51,7 +52,10 @@ class AgentsUpdate extends base_command_1.BaseCommand {
             description: 'Default Claude permission mode for sessions',
             options: ['default', 'acceptEdits', 'bypassPermissions', 'plan'],
         }),
-        tools: core_1.Flags.string({ description: 'Tools JSON array' }),
+        tools: core_1.Flags.string({
+            description: 'Tools JSON array of plugin keys, e.g. \'["calculator"]\'. `skrr agents tools` lists the keys, ' +
+                'and which of them an agent turn can call.',
+        }),
         'model-parameters': core_1.Flags.string({ description: 'Model parameters JSON object' }),
         'agent-ids': core_1.Flags.string({ description: 'Delegated agent IDs JSON array' }),
         'network-mode': core_1.Flags.string({ description: 'Agent network mode' }),
@@ -186,14 +190,16 @@ class AgentsUpdate extends base_command_1.BaseCommand {
             this.handleApiError(err);
         }
         // The same check `agents create` makes. Without it, a key the server does
-        // not model — or a typo of one that it does, `max_turns` for `maxTurns` —
-        // was discarded with the same "Updated agent" line as a real change.
+        // not model, a typo of one that it does (`max_turns` for `maxTurns`), or a
+        // field only the server sets was discarded with the same "Updated agent"
+        // line as a real change.
         // `removeProjectIds` is an instruction, not a stored field, so it never
         // comes back and is not reported.
         const unapplied = (0, create_1.unappliedPayloadKeys)(payload, updated, ['removeProjectIds']);
         if (unapplied.length > 0) {
-            this.warn(`The server did not keep ${unapplied.join(', ')} — ${unapplied.length === 1 ? 'that field is' : 'those fields are'} not part of the agent. Check \`skrr agents show <id> --json\` for the field names it stores.`);
+            this.warn((0, create_1.unappliedPayloadKeysWarning)(unapplied));
         }
+        await (0, runtime_tool_support_1.warnPluginsNotLoaded)(payload.tools, (message) => this.warn(message));
         if (flags.json) {
             this.log(JSON.stringify((0, web_url_1.withAgentUrl)(this.cliConfig.baseURL, updated), null, 2));
             return;

package/dist/commands/code/install.d.ts

@@ -38,8 +38,10 @@ export default class CodeInstall extends BaseCommand {
      *
      * Refuses rather than guessing when several are active. Picking one would mean
      * installing a hundred megabytes onto a machine the user was not thinking
-     * about, and the list this reads is the same one `skrr list-daemons` prints —
-     * so the error can name the exact values that work.
+     * about. The candidates are CONNECTED daemons by the id the installer routes
+     * take (`listConnectedDaemons`), so the error names values that work — the
+     * Daemon resource list `skrr list-daemons` prints is a different id space
+     * (OSK-9993).
      *
      * A Dedicated Runtime's own machine is refused here, before any request. The
      * daemon and the API refuse it too; saying so locally is what keeps the answer

package/dist/commands/code/install.js

@@ -34,7 +34,7 @@ class CodeInstall extends base_command_1.BaseCommand {
     static description = `Install the ${auth_core_1.FIRST_PARTY_HARNESS.displayName} engine on this machine, through the daemon`;
     static examples = [
         '<%= config.bin %> code install',
-        '<%= config.bin %> code install --daemon d_6a323ae4...',
+        '<%= config.bin %> code install --daemon <daemon-id>',
         '<%= config.bin %> code install --json',
     ];
     static flags = {
@@ -90,7 +90,7 @@ class CodeInstall extends base_command_1.BaseCommand {
             this.failWithCliError({
                 message: `The daemon on ${(0, daemon_ref_1.formatDaemonRef)(daemonId)} accepted the request and returned no ` +
                     'install job, and does not say why. Nothing has been shown to start. ' +
-                    `Check what it offers with \`${this.config.bin} list-daemons\` for the machine, and ` +
+                    `Check what it offers with \`${this.config.bin} harnesses installers --daemon ${daemonId}\`, and ` +
                     `\`${this.config.bin} code doctor\` here once you expect it to have landed.`,
                 code: 'INSTALL_NOT_TRACKED',
                 exit: 1,
@@ -132,7 +132,7 @@ class CodeInstall extends base_command_1.BaseCommand {
             return await (0, daemon_target_1.resolveDaemonTarget)({
                 explicit,
                 local: (0, daemon_target_1.localMachine)({ baseURL: this.cliConfig?.baseURL }),
-                listActiveDaemons: () => (0, daemon_target_1.listActiveDaemons)(this.resolvedCredential),
+                listActiveDaemons: () => (0, daemon_target_1.listConnectedDaemons)(this.resolvedCredential),
             });
         }
         catch (err) {
@@ -144,8 +144,10 @@ class CodeInstall extends base_command_1.BaseCommand {
      *
      * Refuses rather than guessing when several are active. Picking one would mean
      * installing a hundred megabytes onto a machine the user was not thinking
-     * about, and the list this reads is the same one `skrr list-daemons` prints —
-     * so the error can name the exact values that work.
+     * about. The candidates are CONNECTED daemons by the id the installer routes
+     * take (`listConnectedDaemons`), so the error names values that work — the
+     * Daemon resource list `skrr list-daemons` prints is a different id space
+     * (OSK-9993).
      *
      * A Dedicated Runtime's own machine is refused here, before any request. The
      * daemon and the API refuse it too; saying so locally is what keeps the answer
@@ -169,8 +171,8 @@ class CodeInstall extends base_command_1.BaseCommand {
         }
         if (target.kind === 'none') {
             this.failWithCliError({
-                message: 'No active daemon is registered for this account, so nothing can perform the install. ' +
-                    `Start the local runtime with \`${this.config.bin} daemon start\`, then run this again.`,
+                message: 'No daemon is connected for this account, so nothing can perform the install. ' +
+                    `Start the background service on this computer with \`${this.config.bin} daemon start\`, then run this again.`,
                 code: 'NO_DAEMON',
                 exit: 1,
                 retryable: false,
@@ -179,11 +181,11 @@ class CodeInstall extends base_command_1.BaseCommand {
         const { daemons } = target;
         const choices = daemons
             .slice(0, 10)
-            .map((d) => `  ${(0, daemon_ref_1.formatDaemonRef)(d.id)}  ${d.name || '—'}`)
+            .map((d) => `  ${d.id}  ${d.name || '—'}`)
             .join('\n');
         this.failWithCliError({
-            message: `${daemons.length} active daemons — say which machine should install the engine:\n${choices}\n` +
-                `Pass one with --daemon, or see them all with \`${this.config.bin} list-daemons\`.`,
+            message: `${daemons.length} connected daemons — say which machine should install the engine:\n${choices}\n` +
+                `Pass one with --daemon, or see each daemon id in the DAEMON ID column of \`${this.config.bin} harnesses list\`.`,
             code: 'AMBIGUOUS_DAEMON',
             exit: 1,
             retryable: false,

package/dist/commands/convos/list.js

@@ -110,9 +110,7 @@ class ConvosList extends base_command_1.BaseCommand {
             // The owning agent is the field callers most often had to reach for --json
             // to see (and the one `--agent` filters on), so surface it in the table too.
             agent: String(c.agent_id ?? c.agentId ?? '-'),
-            updated: c.updatedAt
-                ? new Date(String(c.updatedAt)).toISOString().slice(0, 19).replace('T', ' ')
-                : '-',
+            updated: (0, format_1.localTime)(c.updatedAt),
         }));
         (0, format_1.renderTable)(rows, [
             { key: 'id', header: 'ID' },

package/dist/commands/convos/show.js

@@ -5,6 +5,7 @@ const core_1 = require("@oclif/core");
 const data_provider_1 = require("@skrr-ai/data-provider");
 const base_command_1 = require("../../base-command");
 const web_url_1 = require("../../lib/web-url");
+const format_1 = require("../../lib/format");
 class ConvosShow extends base_command_1.BaseCommand {
     static description = 'Show details for a single conversation';
     static examples = [
@@ -38,10 +39,10 @@ class ConvosShow extends base_command_1.BaseCommand {
         this.log(`Model:    ${c.model ?? '-'}`);
         this.log(`User:     ${c.user ?? '-'}`);
         if (c.createdAt) {
-            this.log(`Created:  ${formatTime(c.createdAt)}`);
+            this.log(`Created:  ${(0, format_1.localTime)(c.createdAt)}`);
         }
         if (c.updatedAt) {
-            this.log(`Updated:  ${formatTime(c.updatedAt)}`);
+            this.log(`Updated:  ${(0, format_1.localTime)(c.updatedAt)}`);
         }
         if (c.agent_id || c.agentId) {
             this.log(`Agent:    ${typeof c.agentName === 'string' && c.agentName ? `${c.agentName} (${c.agent_id ?? c.agentId})` : (c.agent_id ?? c.agentId)}`);
@@ -102,17 +103,9 @@ function formatHandoverParty(entry, baseURL) {
     if (entry.by)
         lines.push(`  By:           ${entry.by}`);
     if (entry.at)
-        lines.push(`  At:           ${formatTime(entry.at)}`);
+        lines.push(`  At:           ${(0, format_1.localTime)(entry.at)}`);
     // The reason last, because it is the sentence rather than a field.
     if (entry.reason)
         lines.push(`  Reason:       ${entry.reason}`);
     return lines;
 }
-function formatTime(value) {
-    try {
-        return new Date(String(value)).toISOString().slice(0, 19).replace('T', ' ');
-    }
-    catch {
-        return String(value);
-    }
-}

package/dist/commands/daemon/index.js

@@ -37,10 +37,10 @@ class Daemon extends core_1.Command {
             this.log((0, exec_runtime_binary_1.notInstalledMessage)());
             this.exit(127);
         }
-        this.log(`runtime binary: ${bin}`);
+        this.log(`background service binary: ${bin}`);
         this.log('');
-        this.log('Local runtime:');
-        this.log('  skrr daemon install    — install the runtime as a background service');
+        this.log('Background service on this computer:');
+        this.log('  skrr daemon install    — install it as a background service');
         this.log('  skrr daemon uninstall  — remove that service (local state is left alone)');
         this.log('  skrr daemon start      — start the daemon');
         this.log('  skrr daemon stop       — stop the daemon');

package/dist/commands/daemon/install.js

@@ -35,7 +35,7 @@ class DaemonInstall extends core_1.Command {
     // whole topic, and without a per-command alias only the bare topic
     // resolved: every subcommand under it failed.
     static aliases = ['daemons:install'];
-    static summary = 'Install the local skrr runtime as a background service';
+    static summary = 'Install the skrr background service on this computer';
     static description = (0, exec_runtime_binary_1.forwardedFlagsNote)('install', {
         binds: true,
         bootstrapsRuntime: true,
@@ -57,11 +57,11 @@ class DaemonInstall extends core_1.Command {
         // is a floor under the missing case, not a second update channel competing
         // with the daemon's own.
         if (!(0, exec_runtime_binary_1.isCurrentRuntimeBinary)((0, exec_runtime_binary_1.findRuntimeBinary)())) {
-            this.log('No local skrr runtime found. Fetching the signed release...');
+            this.log('No skrr background service installed on this computer. Fetching the signed release...');
             const outcome = await (0, daemon_installer_1.installDaemon)();
             if (!outcome.ok) {
                 this.log('');
-                this.log(`  Could not install the runtime: ${outcome.error}`);
+                this.log(`  Could not install the background service: ${outcome.error}`);
                 this.log('');
                 this.log('  You can install it directly instead:');
                 this.log('    macOS:   brew install dush1023/oversky/oversky');
@@ -84,7 +84,7 @@ class DaemonInstall extends core_1.Command {
                 // Reachable only if the runtime vanished between the bootstrap above
                 // and this line. Saying so beats repeating install instructions for
                 // something that was just installed.
-                this.log('The skrr runtime disappeared between installing it and running it.');
+                this.log('The skrr background service disappeared between installing it and running it.');
                 this.exit(127);
             }
             throw err;

package/dist/commands/daemon/login.js

@@ -28,7 +28,7 @@ const exec_runtime_binary_1 = require("../../lib/exec-runtime-binary");
  */
 class DaemonLogin extends core_1.Command {
     static aliases = ['daemons:login'];
-    static summary = 'Authenticate the local skrr runtime (separate from `skrr login`)';
+    static summary = 'Authenticate the skrr background service on this computer (separate from `skrr login`)';
     static description = (0, exec_runtime_binary_1.forwardedFlagsNote)('login', { binds: true });
     static strict = false; // forward all args verbatim — see run()
     async run() {

package/dist/commands/daemon/logs.d.ts

@@ -17,6 +17,7 @@ export interface DaemonLogsFlags {
     lines?: number;
     stderr?: boolean;
     path?: boolean;
+    profile?: string;
 }
 /**
  * Older daemons already kept logs in this profile-scoped location, even
@@ -50,7 +51,7 @@ export declare function describeLogAge(mtimeMs: number, now?: number): {
     line: string;
     stale: boolean;
 };
-export declare function resolveLegacyDaemonLogPath(flags: Pick<DaemonLogsFlags, 'stderr'>, options?: {
+export declare function resolveLegacyDaemonLogPath(flags: Pick<DaemonLogsFlags, 'stderr' | 'profile'>, options?: {
     home?: string;
     env?: NodeJS.ProcessEnv;
 }): string;
@@ -81,6 +82,7 @@ export default class DaemonLogs extends Command {
         lines: import("@oclif/core/lib/interfaces").OptionFlag<number | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         stderr: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
         path: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+        profile: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
     };
     static examples: string[];
     run(): Promise<void>;

package/dist/commands/daemon/logs.js

@@ -64,8 +64,14 @@ function describeLogAge(mtimeMs, now = Date.now()) {
 function resolveLegacyDaemonLogPath(flags, options = {}) {
     const home = options.home ?? (0, node_os_1.homedir)();
     const env = options.env ?? process.env;
+    // An explicit --profile outranks the environment, as it does everywhere else.
+    const fromFlag = flags.profile?.trim();
     const fromEnv = env.OVERSKY_PROFILE?.trim();
-    let profile = fromEnv && PROFILE_NAME.test(fromEnv) ? fromEnv : undefined;
+    let profile = fromFlag && PROFILE_NAME.test(fromFlag)
+        ? fromFlag
+        : fromEnv && PROFILE_NAME.test(fromEnv)
+            ? fromEnv
+            : undefined;
     if (!profile) {
         try {
             const pinned = (0, node_fs_1.readFileSync)(node_path_1.default.join(home, '.skrr', 'profile.lock'), 'utf8').trim();
@@ -110,6 +116,8 @@ function readDaemonLogTail(filePath, maxLines) {
  */
 function buildOverskyLogsArgs(flags) {
     return [
+        // The runtime's own global option, placed before the subcommand.
+        ...(flags.profile ? ['--profile', flags.profile] : []),
         'logs',
         ...(flags.follow ? ['--follow'] : []),
         ...(flags.lines !== undefined ? ['--lines', String(flags.lines)] : []),
@@ -149,6 +157,12 @@ class DaemonLogs extends core_1.Command {
         path: core_1.Flags.boolean({
             description: 'Print the resolved log file path and exit',
         }),
+        // Every other daemon verb reaches a non-default profile with --profile; this
+        // one could only be steered by OVERSKY_PROFILE (OSK-10001).
+        profile: core_1.Flags.string({
+            char: 'p',
+            description: 'Read the logs of this daemon profile instead of the active one',
+        }),
     };
     static examples = [
         '<%= config.bin %> daemon logs',
@@ -156,6 +170,7 @@ class DaemonLogs extends core_1.Command {
         '<%= config.bin %> daemon logs --lines 500',
         '<%= config.bin %> daemon logs --stderr',
         '<%= config.bin %> daemon logs --path',
+        '<%= config.bin %> daemon logs --profile dogfood-laptop --lines 50',
     ];
     async run() {
         const { flags } = await this.parse(DaemonLogs);

package/dist/commands/daemon/start.js

@@ -34,19 +34,19 @@ class DaemonStart extends core_1.Command {
             const status = await (0, exec_runtime_binary_1.execRuntimeBinaryCapture)((0, runtime_start_verification_1.statusArgsForStart)(argv));
             const verification = (0, runtime_start_verification_1.verifyRuntimeStart)(status.stdout, status.code, argv);
             if (verification.status === 'reauth_required') {
-                this.logToStderr(`Local runtime did not start: profile '${verification.profile}' requires ` +
+                this.logToStderr(`The background service did not start: profile '${verification.profile}' requires ` +
                     `re-authentication (reason: ${verification.reason ?? 'UNKNOWN'}). Run ` +
                     `\`${verification.recoveryCommand}\`, then retry \`skrr daemon start\`.`);
                 this.exit(runtime_start_verification_1.DAEMON_START_REAUTH_EXIT);
             }
             if (verification.status === 'not_running') {
-                this.logToStderr(`Local runtime did not remain running after skrrd exited successfully ` +
+                this.logToStderr(`The background service did not keep running after skrrd exited successfully ` +
                     `(profile '${verification.profile}', service status: ` +
                     `${verification.runtimeStatus ?? 'unknown'}). Run \`skrr daemon logs\` for the reason.`);
                 this.exit(runtime_start_verification_1.DAEMON_START_UNVERIFIED_EXIT);
             }
             if (verification.status === 'unreadable_status') {
-                this.logToStderr(`skrrd start exited successfully, but skrr could not verify a running local runtime ` +
+                this.logToStderr(`skrrd start exited successfully, but skrr could not verify a running background service ` +
                     `for profile '${verification.profile}'; refusing to report success. ` +
                     'Run `skrr daemon status` and `skrr daemon logs` for the reason.');
                 this.exit(runtime_start_verification_1.DAEMON_START_UNVERIFIED_EXIT);

package/dist/commands/daemon/status.d.ts

@@ -1,4 +1,13 @@
 import { Command } from '@oclif/core';
+/**
+ * The status report is the runtime's, and it describes the daemon: running,
+ * connected, which credential. Whether the coding-agent CLIs on the machine can
+ * actually run a turn — installed, signed in — is a different command, and
+ * nothing on this surface named it (OSK-10002). One line after a successful
+ * human report; never inside `--json`, whose contract is one document, and
+ * never after `--help` or a failure, where it would be noise beside the point.
+ */
+export declare function readinessPointer(argv: readonly string[], exitCode: number): string | null;
 export default class DaemonStatus extends Command {
     static aliases: string[];
     static summary: string;

package/dist/commands/daemon/status.js

@@ -1,7 +1,26 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.readinessPointer = readinessPointer;
 const core_1 = require("@oclif/core");
 const exec_runtime_binary_1 = require("../../lib/exec-runtime-binary");
+/**
+ * The status report is the runtime's, and it describes the daemon: running,
+ * connected, which credential. Whether the coding-agent CLIs on the machine can
+ * actually run a turn — installed, signed in — is a different command, and
+ * nothing on this surface named it (OSK-10002). One line after a successful
+ * human report; never inside `--json`, whose contract is one document, and
+ * never after `--help` or a failure, where it would be noise beside the point.
+ */
+function readinessPointer(argv, exitCode) {
+    if (exitCode !== 0)
+        return null;
+    if (argv.some((arg) => arg === '--json' || arg === '--help' || arg === '-h'))
+        return null;
+    // Runnable as printed: `installers` picks the only connected daemon itself,
+    // and lists the ids to choose from when there are several (OSK-10002 verifier).
+    return ('  Coding agents: which CLIs are installed on this machine, and signed in where the daemon can tell — ' +
+        '`skrr harnesses installers` (add `--daemon <Daemon ID above>` if several daemons are connected)');
+}
 class DaemonStatus extends core_1.Command {
     // `skrr daemons <sub>` — the plural is advertised as an alias for the
     // whole topic, and without a per-command alias only the bare topic
@@ -23,6 +42,9 @@ class DaemonStatus extends core_1.Command {
         const argv = this.argv;
         try {
             const code = await (0, exec_runtime_binary_1.execRuntimeBinary)(['status', ...argv]);
+            const pointer = readinessPointer(argv, code);
+            if (pointer)
+                this.log(pointer);
             this.exit(code);
         }
         catch (err) {

package/dist/commands/dm/messages.js

@@ -87,7 +87,7 @@ class DmMessages extends base_command_1.BaseCommand {
             return;
         }
         (0, format_1.renderTable)(selected.map((message) => ({
-            when: formatTime(message.createdAt),
+            when: (0, format_1.localTime)(message.createdAt),
             role: String(message.sender ?? (message.isCreatedByUser ? 'user' : 'assistant')),
             text: textFromMessage(message).replace(/\s+/g, ' ').trim(),
             id: String(message.messageId ?? message._id ?? message.id ?? '-'),
@@ -100,16 +100,6 @@ class DmMessages extends base_command_1.BaseCommand {
     }
 }
 exports.default = DmMessages;
-function formatTime(value) {
-    if (!value)
-        return '-';
-    try {
-        return new Date(String(value)).toISOString().slice(0, 19);
-    }
-    catch {
-        return String(value);
-    }
-}
 function textFromMessage(message) {
     if (typeof message.text === 'string')
         return message.text;

package/dist/commands/followups/cancel.js

@@ -44,7 +44,7 @@ class FollowupsCancel extends base_command_1.BaseCommand {
             this.log(JSON.stringify(result, null, 2));
             return;
         }
-        this.log(`Follow-up ${args.id} cancelled.`);
+        this.log((0, followups_1.settledLine)(args.id, result, 'cancelled'));
     }
 }
 exports.default = FollowupsCancel;

package/dist/commands/followups/observability.js

@@ -24,7 +24,7 @@ const outcomes = (terminal) => Object.entries(terminal)
  * every agent only with `--all-agents`.
  */
 class FollowupsObservability extends base_command_1.BaseCommand {
-    static description = 'Per-agent, per-kind rollup — created, outcomes, escalation, budget, check-in silence';
+    static description = 'Per-agent, per-kind rollup — created, outcomes, escalation, spend, budget, check-in silence';
     static examples = [
         '<%= config.bin %> followups observability',
         '<%= config.bin %> followups observability --agent agent_1',
@@ -93,6 +93,9 @@ class FollowupsObservability extends base_command_1.BaseCommand {
                 outcomes: outcomes(kind.terminal),
                 escalated: rate(kind.escalationRate),
                 fires: String(kind.fires),
+                spend: kind.spend
+                    ? `$${kind.spend.today.toFixed(2)} / $${kind.spend.total.toFixed(2)}`
+                    : '—',
                 budget: kind.budget ? `${kind.budget.used}/${kind.budget.limit ?? '∞'}` : '—',
                 silence: rate(kind.silenceRate),
             })), [
@@ -104,11 +107,12 @@ class FollowupsObservability extends base_command_1.BaseCommand {
                 { key: 'outcomes', header: 'OUTCOMES' },
                 { key: 'escalated', header: 'ESCALATED' },
                 { key: 'fires', header: 'FIRES' },
+                { key: 'spend', header: 'SPENT TODAY/ALL' },
                 { key: 'budget', header: 'TODAY/LIMIT' },
                 { key: 'silence', header: 'SILENT' },
             ], (line) => this.log(line));
         });
-        this.log(`\nAs of ${report.generatedAt ?? 'now'}. TODAY/LIMIT is the daily budget (reminders are not metered); SILENT is how often a check-in chose to stay quiet.`);
+        this.log(`\nAs of ${report.generatedAt ?? 'now'}. SPENT is the agent turns these follow-ups woke (USD, today / all time); TODAY/LIMIT is the daily creation budget (reminders are not metered); SILENT is how often a check-in chose to stay quiet.`);
     }
 }
 exports.default = FollowupsObservability;

package/dist/commands/followups/remind.js

@@ -15,11 +15,14 @@ class FollowupsRemind extends base_command_1.BaseCommand {
     static description = 'Remind the owner at a time — the reminder follow-up';
     static examples = [
         '<%= config.bin %> followups remind --subject task:OSK-42 --content "pick the deploy up" --in 2h',
-        '<%= config.bin %> followups remind --subject conversation:conv_9 --content "ask how the move went" --at 2026-09-20T09:00:00Z',
+        '<%= config.bin %> followups remind --subject conversation:conv_9 --content "ask how the move went" --at 2026-09-20T09:00:00Z --active --agent agent_1',
         '<%= config.bin %> followups remind --subject task:OSK-42 --content "ping me" --at 2026-09-20T09:00:00Z --active --agent agent_1',
     ];
     static flags = {
-        subject: core_1.Flags.string({ description: 'Subject ref: type:externalKey', required: true }),
+        subject: core_1.Flags.string({
+            description: 'Subject ref: type:externalKey. A passive reminder attaches to a task, project, goal or wiki_page; use --active for a conversation',
+            required: true,
+        }),
         content: core_1.Flags.string({ description: "The reminder's own words", required: true }),
         at: core_1.Flags.string({ description: 'ISO-8601 instant to remind at', exclusive: ['in'] }),
         in: core_1.Flags.string({

package/dist/commands/followups/reschedule.js

@@ -42,7 +42,8 @@ class FollowupsReschedule extends base_command_1.BaseCommand {
             this.log(JSON.stringify(result, null, 2));
             return;
         }
-        this.log(`Follow-up ${args.id} rescheduled to ${at}.`);
+        const next = result.followup?.nextRunAt;
+        this.log(`Follow-up ${args.id} rescheduled to ${typeof next === 'string' ? next : at}.`);
     }
 }
 exports.default = FollowupsReschedule;

package/dist/commands/followups/resolve.js

@@ -48,7 +48,7 @@ class FollowupsResolve extends base_command_1.BaseCommand {
             this.log(JSON.stringify(result, null, 2));
             return;
         }
-        this.log(`Follow-up ${args.id} settled: ${flags.outcome}.`);
+        this.log((0, followups_1.settledLine)(args.id, result, `settled: ${flags.outcome}`));
     }
 }
 exports.default = FollowupsResolve;

package/dist/commands/followups/show.js

@@ -3,6 +3,15 @@ Object.defineProperty(exports, "__esModule", { value: true });
 const core_1 = require("@oclif/core");
 const base_command_1 = require("../../base-command");
 const followups_1 = require("../../lib/followups");
+/** What each gate posture means for whoever reads `show`. */
+const GATE_LABEL = {
+    exempt_silent: 'fires without approval (silent)',
+    exempt_user_directed: 'fires without approval (you asked for it)',
+    exempt_system: 'fires without approval (system)',
+    user_directed_guarded: 'fires without approval (you asked for it); still held by quiet hours, approval-only action classes and the spend cap',
+    autonomy_ladder: "follows the agent's autonomy mode",
+    approval_ladder: 'needs approval unless the autonomy mode allows it',
+};
 /** `skrr followups show <id>` — one follow-up, the same shape as the list rows. */
 class FollowupsShow extends base_command_1.BaseCommand {
     static description = 'Show one follow-up';
@@ -34,8 +43,19 @@ class FollowupsShow extends base_command_1.BaseCommand {
             ['why', row.why],
             ['intent', row.intentKey],
             ['producer', row.producer],
+            ['gate', row.gate ? (GATE_LABEL[row.gate] ?? row.gate) : undefined],
             ['terminal', row.terminal ? `${row.terminal} (${row.terminalReason ?? '—'})` : undefined],
+            [
+                'settled',
+                row.terminal ? `${row.terminalAt ?? '—'} by ${row.terminalBy ?? 'unknown'}` : undefined,
+            ],
             ['deadline', row.deadlineAt],
+            [
+                'waiting',
+                row.parkedAt && !row.terminal
+                    ? `on an offline machine since ${row.parkedAt} (escalates after 60 minutes)`
+                    : undefined,
+            ],
             ['escalated to', row.escalatedInitiativeId],
         ]) {
             if (value)

package/dist/commands/followups/watch.d.ts

@@ -15,6 +15,7 @@ import { BaseCommand } from '../../base-command';
  *              cannot stop is a leak.
  */
 export default class FollowupsWatch extends BaseCommand {
+    static summary: string;
     static description: string;
     static examples: string[];
     static flags: {

package/dist/commands/followups/watch.js

@@ -21,7 +21,11 @@ const triggers_1 = require("../../lib/triggers");
  *              cannot stop is a leak.
  */
 class FollowupsWatch extends base_command_1.BaseCommand {
-    static description = 'Watch an asynchronous tail until it settles — the watch follow-up';
+    static summary = 'Watch an asynchronous tail until it settles — the watch follow-up';
+    static description = [
+        'Two forms, and they cost different amounts. Prefer the predicate form whenever the state is readable over HTTPS: --url + --until is evaluated by the server, wakes the agent once when the condition settles, and always ends at --deadline.',
+        "The recipe form (--check / --success / --abort) wakes the agent for one turn per check, and every turn counts against the agent's watch budget. Use it only for a check a predicate cannot express.",
+    ].join('\n\n');
     static examples = [
         '<%= config.bin %> followups watch --subject task:OSK-42 --why "deploy still running" --url https://ci.example.com/api/build/9 --until \'{"path":"status","op":"equals","value":"done"}\' --deadline 6h',
         '<%= config.bin %> followups watch --subject task:OSK-42 --why "pr review" --check "gh pr view 42 --json state" --success "state == MERGED" --abort "state == CLOSED" --wait event --wait-entity github --wait-event pull_request_merged --wait-fallback 2h',
@@ -34,7 +38,7 @@ class FollowupsWatch extends base_command_1.BaseCommand {
         // predicate form
         url: core_1.Flags.string({ description: 'HTTPS endpoint to observe (predicate form)' }),
         until: core_1.Flags.string({
-            description: 'Predicate tree as JSON (predicate form): a leaf {"path","op","value"} or {"all"|"any": [...]}. op is equals, not_equals, contains, starts_with, in, gt, lt, exists, … — an unknown op is refused with the full list',
+            description: 'Predicate tree as JSON (predicate form — the server evaluates it; no agent turn per check): a leaf {"path","op","value"} or {"all"|"any": [...]}. op is equals, not_equals, contains, starts_with, in, gt, lt, exists, … — an unknown op is refused with the full list',
         }),
         grant: core_1.Flags.string({ description: 'Grant id supplying the watch credentials' }),
         deadline: core_1.Flags.string({ description: 'When the watch must stop (predicate form, required)' }),
@@ -43,7 +47,9 @@ class FollowupsWatch extends base_command_1.BaseCommand {
         'root-path': core_1.Flags.string({ description: 'JSON root path inside the response' }),
         'resume-prompt': core_1.Flags.string({ description: 'What to tell the settling turn' }),
         // recipe form
-        check: core_1.Flags.string({ description: 'The deterministic check to run (recipe form)' }),
+        check: core_1.Flags.string({
+            description: 'The check the agent runs (recipe form) — every check wakes the agent for one turn, counted against the watch budget',
+        }),
         success: core_1.Flags.string({ description: 'What state means the wait resolved (recipe form)' }),
         abort: core_1.Flags.string({ description: 'When to stop and escalate (recipe form)' }),
         wait: core_1.Flags.string({

package/dist/commands/harnesses/forget.js

@@ -54,12 +54,29 @@ class HarnessesForget extends base_command_1.BaseCommand {
                 const current = await (0, harnesses_1.getHarness)(args.harness);
                 label = current?.harness?.name || args.harness;
             }
-            catch {
-                /* fall back to the id — the confirmation still has to happen */
+            catch (err) {
+                // Existence before consent (OSK-9995): asking "Forget harness X?" about
+                // a row that does not exist, then reporting NOT_FOUND only after --yes,
+                // made the prompt the first thing to fail. Any other read failure still
+                // falls back to the id — the confirmation has to happen regardless.
+                if (err instanceof api_fetch_1.ApiFetchError && err.status === 404) {
+                    // NOT_FOUND, the code `harnesses show` gives the same missing id, so a
+                    // script branching on the code sees one answer (OSK-9995 verifier).
+                    this.failWithCliError({
+                        message: `No harness on this account has id ${args.harness}. Run \`skrr harnesses list --all\` to see them.`,
+                        code: 'NOT_FOUND',
+                        status: 404,
+                        exit: 4,
+                        retryable: false,
+                    });
+                    return;
+                }
             }
             const ok = await this.confirm(`Forget harness "${label}"? Agents pinned to it lose their pin.`);
             if (!ok) {
-                this.log('Cancelled.');
+                // Non-zero because nothing was forgotten — the same rule as `tasks
+                // update`: a script can only read the exit code, and 0 read as success.
+                this.error('Cancelled — nothing was forgotten.', { exit: 1 });
                 return;
             }
         }