@skrr-ai/cli 0.1.39 → 0.1.41

package/dist/commands/spaces/heartbeats/status.js

@@ -4,6 +4,7 @@ const core_1 = require("@oclif/core");
 const data_provider_1 = require("@skrr-ai/data-provider");
 const base_command_1 = require("../../../base-command");
 const space_output_1 = require("../../../lib/space-output");
+const format_1 = require("../../../lib/format");
 class SpacesHeartbeatsStatus extends base_command_1.BaseCommand {
     static description = 'Get the live status of a heartbeat for an agent in a space';
     static examples = [
@@ -45,16 +46,8 @@ class SpacesHeartbeatsStatus extends base_command_1.BaseCommand {
         // `running`/`nextRun`/`jobKey` which always rendered "no" / "-".
         const s = result;
         this.log(`Running:        ${s.isRunning === true ? 'yes' : 'no'}`);
-        this.log(`Next Run:       ${s.nextRunAt ? formatTime(s.nextRunAt) : '-'}`);
+        this.log(`Next Run:       ${s.nextRunAt ? (0, format_1.localTime)(s.nextRunAt) : '-'}`);
         this.log(`BullMQ Job Key: ${s.bullmqJobKey ?? '-'}`);
     }
 }
 exports.default = SpacesHeartbeatsStatus;
-function formatTime(value) {
-    try {
-        return new Date(String(value)).toISOString().slice(0, 19).replace('T', ' ');
-    }
-    catch {
-        return String(value);
-    }
-}

package/dist/commands/tasks/activity.js

@@ -19,7 +19,7 @@ function activityRow(entry) {
                     : `system:${actor.service}`
         : (entry.userId ?? entry.actorId);
     return {
-        time: formatTime(entry.occurredAt ?? entry.timestamp ?? entry.createdAt),
+        time: (0, format_1.localTime)(entry.occurredAt ?? entry.timestamp ?? entry.createdAt),
         event: (0, format_1.formatCell)(entry.action ?? entry.event ?? entry.type),
         actor: (0, format_1.formatCell)(actorText),
         details: (0, format_1.formatCell)(entry.data ?? entry.details ?? entry.metadata),
@@ -71,15 +71,6 @@ function runFailuresFromActivity(entries) {
     }
     return out;
 }
-/** Same contract as `tasks monitor`'s timestamp column — never throws, never prints "undefined". */
-function formatTime(value) {
-    if (!value)
-        return '-';
-    const date = new Date(String(value));
-    if (Number.isNaN(date.getTime()))
-        return String(value);
-    return date.toISOString().slice(0, 19).replace('T', ' ');
-}
 class TasksActivity extends base_command_1.BaseCommand {
     static description = 'Show the immutable, multi-actor Activity ledger for a Task';
     static examples = [

package/dist/commands/tasks/approvals/list.js

@@ -5,14 +5,6 @@ const core_1 = require("@oclif/core");
 const data_provider_1 = require("@skrr-ai/data-provider");
 const base_command_1 = require("../../../base-command");
 const format_1 = require("../../../lib/format");
-function formatTime(value) {
-    try {
-        return new Date(String(value)).toISOString().slice(0, 19).replace('T', ' ');
-    }
-    catch {
-        return String(value);
-    }
-}
 /**
  * One approval document → one table row.
  *
@@ -27,7 +19,7 @@ function approvalRow(a) {
         type: (0, format_1.formatCell)(a.type),
         status: (0, format_1.formatCell)(a.status),
         approver: (0, format_1.formatCell)(a.approverAgentId ?? a.approverUserId ?? a.approver),
-        created: a.createdAt ? formatTime(a.createdAt) : '-',
+        created: a.createdAt ? (0, format_1.localTime)(a.createdAt) : '-',
     };
 }
 class TasksApprovalsList extends base_command_1.BaseCommand {

package/dist/commands/tasks/attachments/list.js

@@ -5,14 +5,6 @@ const core_1 = require("@oclif/core");
 const data_provider_1 = require("@skrr-ai/data-provider");
 const base_command_1 = require("../../../base-command");
 const format_1 = require("../../../lib/format");
-function formatTime(value) {
-    try {
-        return new Date(String(value)).toISOString().slice(0, 19).replace('T', ' ');
-    }
-    catch {
-        return String(value);
-    }
-}
 function humanBytes(bytes) {
     const n = Number(bytes);
     if (!Number.isFinite(n))
@@ -41,7 +33,7 @@ function attachmentRow(a) {
         filename: (0, format_1.formatCell)(a.originalName ?? a.filename ?? a.name),
         size: humanBytes(a.size ?? a.fileSize),
         mime: (0, format_1.formatCell)(a.mimeType ?? a.contentType),
-        uploaded: a.createdAt ? formatTime(a.createdAt) : '-',
+        uploaded: a.createdAt ? (0, format_1.localTime)(a.createdAt) : '-',
     };
 }
 class TasksAttachmentsList extends base_command_1.BaseCommand {

package/dist/commands/tasks/comments/list.js

@@ -5,14 +5,6 @@ const data_provider_1 = require("@skrr-ai/data-provider");
 const base_command_1 = require("../../../base-command");
 const format_1 = require("../../../lib/format");
 const task_resolver_1 = require("../../../lib/task-resolver");
-function formatTime(value) {
-    try {
-        return new Date(String(value)).toISOString().slice(0, 19).replace('T', ' ');
-    }
-    catch {
-        return String(value);
-    }
-}
 class TasksCommentsList extends base_command_1.BaseCommand {
     static description = 'List comments on a task';
     static examples = [
@@ -76,7 +68,7 @@ class TasksCommentsList extends base_command_1.BaseCommand {
             return;
         }
         const rows = items.map((c) => ({
-            time: formatTime(c.createdAt),
+            time: (0, format_1.localTime)(c.createdAt),
             author: String(c.authorAgentId ?? c.authorUserId ?? c.author ?? '-'),
             body: (0, format_1.truncate)(String(c.body ?? c.content ?? '-'), 60),
             id: String(c.id ?? c._id ?? '-'),

package/dist/commands/tasks/dri-status.js

@@ -3,14 +3,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 const core_1 = require("@oclif/core");
 const data_provider_1 = require("@skrr-ai/data-provider");
 const base_command_1 = require("../../base-command");
-function formatTime(value) {
-    try {
-        return new Date(String(value)).toISOString().slice(0, 19).replace('T', ' ');
-    }
-    catch {
-        return String(value);
-    }
-}
+const format_1 = require("../../lib/format");
 class TasksDriStatus extends base_command_1.BaseCommand {
     static description = 'Show DRI agent status for a task';
     static examples = [
@@ -40,7 +33,7 @@ class TasksDriStatus extends base_command_1.BaseCommand {
         const s = result;
         this.log(`Status:        ${s.status ?? '-'}`);
         this.log(`Mode:          ${s.mode ?? '-'}`);
-        this.log(`Started At:    ${s.startedAt ? formatTime(s.startedAt) : '-'}`);
+        this.log(`Started At:    ${s.startedAt ? (0, format_1.localTime)(s.startedAt) : '-'}`);
         this.log(`Total:         ${s.totalSubtasks ?? s.total ?? '-'}`);
         this.log(`Done:          ${s.doneCount ?? s.done ?? '-'}`);
         this.log(`In Progress:   ${s.inProgressCount ?? s.inProgress ?? '-'}`);

package/dist/commands/tasks/events/append.js

@@ -18,15 +18,17 @@ class TasksEventsAppend extends base_command_1.BaseCommand {
     static summary = 'DEPRECATED compatibility spelling for `tasks updates add` — append a legacy task event';
     // The FULL mapping, not a sample of it. The previous description named
     // `handoff`/`checkpoint` and `started|lifecycle` and stopped — so a caller
-    // passing `--kind evidence` had no way to learn, before writing, that it
-    // becomes a `verification` Update. Those are different claims: `evidence`
-    // says a flow was exercised, `verification` says a claim was CHECKED, and the
-    // typed-Update vocabulary exists precisely so the two cannot be confused.
+    // passing `--kind evidence` had no way to learn, before writing, what it
+    // became. It used to become a `verification` with an invented `inconclusive`
+    // result; `evidence` says a flow was exercised, `verification` says a claim was
+    // CHECKED, so it now becomes `progress` and keeps the evidence as a reference
+    // (OSK-9312).
     // Mirrors `LEGACY_KIND_TO_UPDATE_TYPE` in `api/server/services/TaskWorkEvent.js`.
     static description = 'DEPRECATED compatibility adapter for the historical Event vocabulary. Every kind is ' +
         'stored as a canonical Update of a DIFFERENT name, so read this before relying on one: ' +
-        '`evidence` and `verification` both become `verification`; `checkpoint`, `changed`, ' +
-        '`completed` and `handoff` all become `progress`; `input_requested` and `failed` become ' +
+        '`verification` becomes a passed `verification`; `evidence`, `checkpoint`, `changed`, ' +
+        "`completed` and `handoff` all become `progress` (evidence text is kept as the Update's reference, " +
+        'with no invented result); `input_requested` and `failed` become ' +
         '`blocker`; `decision` stays `decision`. `--kind started|lifecycle` writes only to the ' +
         'Activity ledger and will NOT appear in `tasks updates list`. Use `tasks updates add` ' +
         'instead, which writes the type you name.';
@@ -129,7 +131,7 @@ class TasksEventsAppend extends base_command_1.BaseCommand {
              * where it happens to be true. `finding` and `progress` exist only on the
              * canonical command; `evidence`, `checkpoint` and the rest only here.
              */
-            this.log(`\`tasks events append --kind ${written.canonicalType}\` maps onto ` +
+            this.log(`\`tasks events append --kind ${flags.kind}\` maps onto ` +
                 `\`${this.config.bin} tasks updates add --type ${written.canonicalType}\`, which is the ` +
                 'canonical command. Their vocabularies differ otherwise — `--type ' +
                 'progress|finding` exist only there — and `tasks updates list` reads them back.');

package/dist/commands/tasks/execution-timeline.js

@@ -4,14 +4,6 @@ const core_1 = require("@oclif/core");
 const data_provider_1 = require("@skrr-ai/data-provider");
 const base_command_1 = require("../../base-command");
 const format_1 = require("../../lib/format");
-function formatTime(value) {
-    try {
-        return new Date(String(value)).toISOString().slice(0, 19).replace('T', ' ');
-    }
-    catch {
-        return String(value);
-    }
-}
 class TasksExecutionTimeline extends base_command_1.BaseCommand {
     static description = 'Show execution timeline for a task';
     static examples = [
@@ -49,7 +41,7 @@ class TasksExecutionTimeline extends base_command_1.BaseCommand {
             return;
         }
         const rows = items.map((entry) => ({
-            timestamp: formatTime(entry.timestamp ?? entry.createdAt),
+            timestamp: (0, format_1.localTime)(entry.timestamp ?? entry.createdAt),
             event: String(entry.event ?? entry.type ?? '-'),
             duration: entry.durationMs != null ? `${entry.durationMs}ms` : '-',
             tokens: String(entry.tokens ?? entry.totalTokens ?? '-'),

package/dist/commands/tasks/lifecycle/detach.js

@@ -43,11 +43,26 @@ class TasksLifecycleDetach extends base_command_1.BaseCommand {
                 return this.log('No lifecycle is attached to this Task — nothing to detach.');
             this.log(`Would detach ${lifecycle.packId ? `pack ${lifecycle.packId}` : `definition ${lifecycle.definitionId}`}` +
                 ` at generation ${lifecycle.generation}, stage ${lifecycle.currentStageKey ?? '—'}.`);
-            this.log('  The run is cancelled and kept as history; nothing already recorded is removed.');
-            this.log('  The generation is bumped, so no in-flight writer from the old run can land.');
+            if (lifecycle.runId) {
+                this.log('  The run is cancelled and kept as history; nothing already recorded is removed.');
+                this.log('  The generation is bumped, so no in-flight writer from the old run can land.');
+            }
+            else {
+                this.log('  It has not started, so there is no run to cancel.');
+            }
             this.log('  Re-attaching afterwards starts a NEW generation — it does not resume this one.');
             return;
         }
+        // The server clears runId on detach, so whether there WAS a run to cancel
+        // is only knowable before the write. Best-effort: a failed read must not
+        // block the detach, it only costs the sentence its precision.
+        let hadRun;
+        try {
+            hadRun = Boolean((await data_provider_1.dataService.getTaskLifecycle(taskId)).lifecycle?.runId);
+        }
+        catch {
+            hadRun = undefined;
+        }
         let response;
         try {
             response = await data_provider_1.dataService.detachTaskLifecycle({
@@ -62,9 +77,15 @@ class TasksLifecycleDetach extends base_command_1.BaseCommand {
             return this.log(JSON.stringify(response, null, 2));
         const lifecycle = response.lifecycle;
         // Name what changed. "Detached lifecycle from the Task." left the reader to
-        // diff the state afterwards to learn what had happened.
-        this.log(`Detached${lifecycle?.packId ? ` pack ${lifecycle.packId}` : ''} — the run is cancelled and` +
-            ` kept as history, and the binding is now generation ${lifecycle?.generation ?? '?'}` +
+        // diff the state afterwards to learn what had happened — and saying a run
+        // was cancelled when none had started is the same problem the other way.
+        const runSentence = hadRun === false
+            ? 'it had not started, so there was no run to cancel'
+            : hadRun
+                ? 'the run is cancelled and kept as history'
+                : 'any run is cancelled and kept as history';
+        this.log(`Detached${lifecycle?.packId ? ` pack ${lifecycle.packId}` : ''} — ${runSentence},` +
+            ` and the binding is now generation ${lifecycle?.generation ?? '?'}` +
             ` (${lifecycle?.status ?? 'detached'}).`);
         this.log('Re-attach with: skrr tasks lifecycle attach <task-id> --pack <pack>');
     }

package/dist/commands/tasks/monitor.js

@@ -205,7 +205,7 @@ async function fetchRecentEvents(tasks, limit) {
                     ref: String(task.identifier ?? task.taskNumber ?? '-'),
                     taskId: (0, tasks_1.taskId)(task),
                     event: String(record.event ?? record.type ?? '-'),
-                    time: formatTime(record.timestamp ?? record.createdAt),
+                    time: (0, format_1.localTime)(record.timestamp ?? record.createdAt),
                     run: String(record.runId ?? '-'),
                 };
             });
@@ -216,11 +216,3 @@ async function fetchRecentEvents(tasks, limit) {
     }));
     return responses.flat();
 }
-function formatTime(value) {
-    if (!value)
-        return '-';
-    const date = new Date(String(value));
-    if (Number.isNaN(date.getTime()))
-        return String(value);
-    return date.toISOString().slice(0, 19).replace('T', ' ');
-}

package/dist/commands/tasks/result/submit.js

@@ -122,6 +122,15 @@ class TasksResultSubmit extends base_command_1.BaseCommand {
                 : await data_provider_1.dataService.submitTaskResult({ taskId: task.id, data });
         }
         catch (error) {
+            // A closed Task refuses a Result. Name the two ways forward here, where
+            // the commands are known: the API's own message stays surface-neutral
+            // (OSK-10031).
+            const refusal = (0, base_command_1.apiRefusal)(error);
+            if (refusal.code === 'TASK_REOPEN_REQUIRED') {
+                this.error(`${refusal.message ?? 'This Task is closed.'}\n` +
+                    `→ Reopen it and submit again: ${this.config.bin} tasks move ${task.id} --status in_progress\n` +
+                    `→ Or record the Result and close it in one step: ${this.config.bin} tasks complete ${task.id} --summary "…"`, { exit: 1, code: 'TASK_REOPEN_REQUIRED' });
+            }
             this.handleApiError(error);
         }
         const url = (0, web_url_1.taskUrlFrom)(this.cliConfig.baseURL, { id: task.id });

package/dist/commands/tasks/runs.js

@@ -10,14 +10,6 @@ const data_provider_1 = require("@skrr-ai/data-provider");
 const base_command_1 = require("../../base-command");
 const format_1 = require("../../lib/format");
 const activity_1 = require("./activity");
-function formatTime(value) {
-    try {
-        return new Date(String(value)).toISOString().slice(0, 19).replace('T', ' ');
-    }
-    catch {
-        return String(value);
-    }
-}
 /**
  * OSK-4836 — say WHERE a run executed. A named daemon wins over the environment
  * label; an environment with no daemon is the cloud worker (or a runtime whose
@@ -163,7 +155,7 @@ class TasksRuns extends base_command_1.BaseCommand {
             runId: String(run.runId ?? run.id ?? run._id ?? '-'),
             status: String(run.status ?? '-'),
             executor: formatRunExecutor(run),
-            started: run.startedAt ? formatTime(run.startedAt) : '-',
+            started: run.startedAt ? (0, format_1.localTime)(run.startedAt) : '-',
             duration: run.durationMs != null ? `${run.durationMs}ms` : '-',
             tokens: String(run.totalTokens ?? run.tokens ?? '-'),
         }));

package/dist/commands/tasks/show.js

@@ -11,6 +11,7 @@ const task_closure_1 = require("../../lib/task-closure");
 const task_resolver_1 = require("../../lib/task-resolver");
 const web_url_1 = require("../../lib/web-url");
 const html_text_1 = require("../../lib/html-text");
+const format_1 = require("../../lib/format");
 /**
  * Where to look next — as COMMANDS, not as facts about the task.
  *
@@ -67,7 +68,7 @@ function taskPointerLines(t, ref, bin = 'skrr') {
  */
 function taskFailureLines(t, bin = 'skrr') {
     const error = typeof t.executionError === 'string' ? t.executionError.trim() : '';
-    const failedAt = t.lastFailedAt ? formatTime(t.lastFailedAt) : null;
+    const failedAt = t.lastFailedAt ? (0, format_1.localTime)(t.lastFailedAt) : null;
     const isFailed = t.status === 'failed';
     if (!error && !failedAt && !isFailed)
         return [];
@@ -335,7 +336,7 @@ class TasksShow extends base_command_1.BaseCommand {
                 this.log(`Previews:    ${delivery.previewLinks.length}`);
             }
             if (delivery.prStateUpdatedAt)
-                this.log(`PR updated:  ${formatTime(delivery.prStateUpdatedAt)}`);
+                this.log(`PR updated:  ${(0, format_1.localTime)(delivery.prStateUpdatedAt)}`);
         }
         // Prefer server-enriched names; fall back to bare ids under --no-enrich.
         const enrichedSkills = Array.isArray(t._pinnedSkills)
@@ -369,9 +370,9 @@ class TasksShow extends base_command_1.BaseCommand {
                 .join(', ')} (attached; injected on every run)`);
         }
         if (t.createdAt)
-            this.log(`Created:     ${formatTime(t.createdAt)}`);
+            this.log(`Created:     ${(0, format_1.localTime)(t.createdAt)}`);
         if (t.updatedAt)
-            this.log(`Updated:     ${formatTime(t.updatedAt)}`);
+            this.log(`Updated:     ${(0, format_1.localTime)(t.updatedAt)}`);
         /**
          * Say which Task model this row belongs to, on the one surface everybody
          * reads first.
@@ -434,11 +435,3 @@ class TasksShow extends base_command_1.BaseCommand {
     }
 }
 exports.default = TasksShow;
-function formatTime(value) {
-    try {
-        return new Date(String(value)).toISOString().slice(0, 19).replace('T', ' ');
-    }
-    catch {
-        return String(value);
-    }
-}

package/dist/commands/token/list.d.ts

@@ -11,11 +11,19 @@ import { BaseCommand } from '../../base-command';
  *
  * `GET /api/auth/sessions/refresh` has served exactly this list all along; it
  * was simply not reachable from the CLI.
+ *
+ * The server returns at most `--limit` rows and says whether it left any out.
+ * It used to stop at 100 without saying so, and the session somebody went
+ * looking for — an old daemon's, still holding the login a purge refusal named
+ * — was exactly the one past the cut (OSK-9980). So a partial list says it is
+ * partial, and `--kind daemon` is the short way to the row that matters.
  */
 export default class TokenList extends BaseCommand {
     static description: string;
     static examples: string[];
     static flags: {
+        kind: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        limit: import("@oclif/core/lib/interfaces").OptionFlag<number | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         json: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
     };
     run(): Promise<void>;

package/dist/commands/token/list.js

@@ -4,6 +4,7 @@ const core_1 = require("@oclif/core");
 const base_command_1 = require("../../base-command");
 const api_fetch_1 = require("../../lib/api-fetch");
 const format_1 = require("../../lib/format");
+const SESSION_KINDS = ['web', 'daemon', 'cli', 'ci'];
 /**
  * `skrr token list`
  *
@@ -16,20 +17,44 @@ const format_1 = require("../../lib/format");
  *
  * `GET /api/auth/sessions/refresh` has served exactly this list all along; it
  * was simply not reachable from the CLI.
+ *
+ * The server returns at most `--limit` rows and says whether it left any out.
+ * It used to stop at 100 without saying so, and the session somebody went
+ * looking for — an old daemon's, still holding the login a purge refusal named
+ * — was exactly the one past the cut (OSK-9980). So a partial list says it is
+ * partial, and `--kind daemon` is the short way to the row that matters.
  */
 class TokenList extends base_command_1.BaseCommand {
     static description = 'List the active sessions a minted token belongs to — the other half of `token mint`';
     static examples = [
         '<%= config.bin %> token list',
-        '<%= config.bin %> token list --json',
+        '<%= config.bin %> token list --kind daemon',
+        '<%= config.bin %> token list --kind cli --limit 500 --json',
     ];
-    static flags = { json: core_1.Flags.boolean({ description: 'Output JSON' }) };
+    static flags = {
+        kind: core_1.Flags.string({
+            description: 'Only sessions of this kind',
+            options: [...SESSION_KINDS],
+        }),
+        limit: core_1.Flags.integer({
+            description: 'Most sessions to list (server maximum 500)',
+            min: 1,
+            max: 500,
+        }),
+        json: core_1.Flags.boolean({ description: 'Output JSON' }),
+    };
     async run() {
         this.requireAuth();
         const { flags } = await this.parse(TokenList);
+        const query = new URLSearchParams();
+        if (flags.kind)
+            query.set('kind', flags.kind);
+        if (flags.limit)
+            query.set('limit', String(flags.limit));
+        const suffix = query.toString() ? `?${query.toString()}` : '';
         let data = null;
         try {
-            data = await (0, api_fetch_1.apiFetch)('/api/auth/sessions/refresh', {
+            data = await (0, api_fetch_1.apiFetch)(`/api/auth/sessions/refresh${suffix}`, {
                 method: 'GET',
                 credential: this.resolvedCredential,
             });
@@ -37,9 +62,17 @@ class TokenList extends base_command_1.BaseCommand {
         catch (err) {
             this.handleApiError(err);
         }
-        const sessions = data?.sessions || [];
-        if (flags.json)
-            return this.log(JSON.stringify({ sessions, count: sessions.length }, null, 2));
+        // Filtered here as well: a server from before `kind` existed ignores the
+        // parameter and returns every kind, and `--kind daemon` must never list a
+        // web session as if it were one.
+        const sessions = (data?.sessions || []).filter((session) => !flags.kind || session.kind === flags.kind);
+        // A server from before `hasMore` stopped at 100 and said nothing about it,
+        // and ignores `--limit` too — so it gets its own, weaker statement.
+        const olderServer = data?.hasMore === undefined;
+        const hasMore = olderServer ? (data?.sessions?.length ?? 0) >= 100 : data?.hasMore === true;
+        if (flags.json) {
+            return this.log(JSON.stringify({ sessions, count: sessions.length, hasMore }, null, 2));
+        }
         if (!sessions.length)
             return this.log('No active sessions.');
         (0, format_1.renderTable)(sessions.map((session) => ({
@@ -48,6 +81,8 @@ class TokenList extends base_command_1.BaseCommand {
             // The operator's own name for the credential wins over a derived
             // device string — it is what they would search by.
             device: session.label || session.device || '-',
+            // What `instructions`, `machines` and a purge refusal call it.
+            daemon: session.daemonId || '-',
             ip: session.ip || '-',
             lastActive: session.lastActiveAt || session.createdAt || '-',
             // The session you are typing in. Revoking it signs THIS machine out,
@@ -57,11 +92,21 @@ class TokenList extends base_command_1.BaseCommand {
             { key: 'id', header: 'ID' },
             { key: 'kind', header: 'KIND' },
             { key: 'device', header: 'DEVICE', maxWidth: 34 },
+            { key: 'daemon', header: 'DAEMON', maxWidth: 40 },
             { key: 'ip', header: 'IP' },
             { key: 'lastActive', header: 'LAST ACTIVE' },
             { key: 'current', header: 'CURRENT' },
         ], (line) => this.log(line));
         this.log('');
+        if (hasMore && olderServer) {
+            this.log('This server lists at most 100 sessions and does not say whether it left any out, so older ones may be missing.');
+        }
+        else if (hasMore) {
+            const remedy = flags.kind
+                ? 'Raise --limit (up to 500) to see them.'
+                : 'Narrow the list with --kind, or raise --limit (up to 500).';
+            this.log(`Showing the ${sessions.length} most recently active sessions; older ones were left out. ${remedy}`);
+        }
         this.log('Retire one with: skrr token revoke <id>');
     }
 }

package/dist/help.js

@@ -46,26 +46,22 @@ class SkrrHelp extends core_1.Help {
      */
     async showRootHelp() {
         this.log('GETTING STARTED');
-        this.log('  skrr login             Sign in. Offers to set this machine up if it has no runtime.');
-        this.log('  skrr daemon install    Install the runtime by hand (fetches the signed release).');
+        this.log('  skrr login             Sign in. Offers to install the background service if this computer has none.');
+        this.log('  skrr daemon install    Install the background service by hand (fetches the signed release).');
         this.log('');
         return super.showRootHelp();
     }
     async showHelp(argv) {
-        // Mirror oclif's own id resolution: the topic separator is a space here, so
-        // the id is the leading non-flag tokens joined with `:`.
-        const tokens = [];
-        for (const token of argv) {
-            if (token.startsWith('-'))
-                break;
-            tokens.push(token);
-        }
-        const id = tokens.join(':');
+        // Resolve the id exactly as running the same words would — a word after a
+        // command that takes arguments is an argument, not part of the name
+        // (OSK-10099: `harnesses install devin --help` was refused).
+        const lookup = (0, command_miss_1.lookupFromConfig)(this.config);
+        const id = (0, command_miss_1.helpSubjectId)(argv, lookup);
         // A bare topic (`skrr daemon`) has no command but DOES have help to show,
         // so it must fall through — only an id that is neither a command nor a
         // topic is a miss.
         if (id && !this.config.findCommand(id) && !this.config.findTopic(id)) {
-            throw new Error((0, command_miss_1.describeCommandMiss)((0, command_miss_1.lookupFromConfig)(this.config), id));
+            throw new Error((0, command_miss_1.describeCommandMiss)(lookup, id));
         }
         return super.showHelp(argv);
     }

package/dist/lib/agent-home-workspace.d.ts

@@ -0,0 +1,19 @@
+/**
+ * The workspace an `agents chat` turn runs in when the caller named none.
+ *
+ * A turn with no workspace context reaches the server without `X-Workspace-Id`.
+ * The server lets it through after checking membership in the agent's own
+ * workspace, but the agent runtime then has no workspace, so the shared
+ * workspace memory tier refuses with "no workspace context" (OSK-9937). By
+ * owner decision the CLI now uses the agent's home workspace in that case: the
+ * same thing the web app sends, and the only workspace the server would accept
+ * for that agent anyway.
+ *
+ * Never applied when anything already chose: `--workspace`, an exported
+ * `OVERSKY_WORKSPACE_ID`, or `skrr workspaces use` (all arrive as that env var),
+ * and never inside an autonomous Agent process, whose workspace belongs to its
+ * daemon session.
+ */
+export declare function applyAgentHomeWorkspaceDefault(agentId: string, lookup: (agentId: string) => Promise<{
+    workspaceId?: string | null;
+} | null | undefined>, env?: NodeJS.ProcessEnv): Promise<string | null>;

package/dist/lib/agent-home-workspace.js

@@ -0,0 +1,39 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.applyAgentHomeWorkspaceDefault = applyAgentHomeWorkspaceDefault;
+/**
+ * The workspace an `agents chat` turn runs in when the caller named none.
+ *
+ * A turn with no workspace context reaches the server without `X-Workspace-Id`.
+ * The server lets it through after checking membership in the agent's own
+ * workspace, but the agent runtime then has no workspace, so the shared
+ * workspace memory tier refuses with "no workspace context" (OSK-9937). By
+ * owner decision the CLI now uses the agent's home workspace in that case: the
+ * same thing the web app sends, and the only workspace the server would accept
+ * for that agent anyway.
+ *
+ * Never applied when anything already chose: `--workspace`, an exported
+ * `OVERSKY_WORKSPACE_ID`, or `skrr workspaces use` (all arrive as that env var),
+ * and never inside an autonomous Agent process, whose workspace belongs to its
+ * daemon session.
+ */
+async function applyAgentHomeWorkspaceDefault(agentId, lookup, env = process.env) {
+    if (env.OVERSKY_AUTONOMOUS_SESSION === '1')
+        return null;
+    if (env.OVERSKY_WORKSPACE_ID?.trim())
+        return null;
+    let agent;
+    try {
+        agent = await lookup(agentId);
+    }
+    catch {
+        // Unreadable agent: keep the headerless request. The server still decides
+        // access, and the chat call itself reports a missing or forbidden agent.
+        return null;
+    }
+    const workspaceId = typeof agent?.workspaceId === 'string' ? agent.workspaceId.trim() : '';
+    if (!workspaceId)
+        return null;
+    env.OVERSKY_WORKSPACE_ID = workspaceId;
+    return workspaceId;
+}

package/dist/lib/agent-resolver.js

@@ -38,7 +38,7 @@ async function resolveAgentIdentity(explicitAgentId) {
         if (explicitAgentId && explicitAgentId !== runtime.agent.id) {
             throw new AgentResolutionError({
                 code: 'AGENT_CONTEXT_CONFLICT',
-                message: 'This local runtime is bound to OVERSKY_SESSION_AGENT_ID. Do not override it with another agent ID.',
+                message: 'This session is bound to the agent in OVERSKY_SESSION_AGENT_ID. Do not override it with another agent ID.',
                 suggestion: 'Use the bound session agent, or start a new daemon session for a different agent.',
                 details: {
                     explicitAgentId,
@@ -129,7 +129,7 @@ function resolveSessionAgentIdentity(explicitAgentId, env = process.env) {
     if (explicitAgentId && explicitAgentId !== runtime.agent.id) {
         throw new AgentResolutionError({
             code: 'AGENT_CONTEXT_CONFLICT',
-            message: 'This local runtime is bound to OVERSKY_SESSION_AGENT_ID. Do not override it with another agent ID.',
+            message: 'This session is bound to the agent in OVERSKY_SESSION_AGENT_ID. Do not override it with another agent ID.',
             suggestion: 'Use the bound session agent, or start a new daemon session for a different agent.',
             details: {
                 explicitAgentId,