@skrr-ai/cli 0.1.40 → 0.1.41

package/dist/commands/daemon/index.js

@@ -37,10 +37,10 @@ class Daemon extends core_1.Command {
             this.log((0, exec_runtime_binary_1.notInstalledMessage)());
             this.exit(127);
         }
-        this.log(`runtime binary: ${bin}`);
+        this.log(`background service binary: ${bin}`);
         this.log('');
-        this.log('Local runtime:');
-        this.log('  skrr daemon install    — install the runtime as a background service');
+        this.log('Background service on this computer:');
+        this.log('  skrr daemon install    — install it as a background service');
         this.log('  skrr daemon uninstall  — remove that service (local state is left alone)');
         this.log('  skrr daemon start      — start the daemon');
         this.log('  skrr daemon stop       — stop the daemon');

package/dist/commands/daemon/install.js

@@ -35,7 +35,7 @@ class DaemonInstall extends core_1.Command {
     // whole topic, and without a per-command alias only the bare topic
     // resolved: every subcommand under it failed.
     static aliases = ['daemons:install'];
-    static summary = 'Install the local skrr runtime as a background service';
+    static summary = 'Install the skrr background service on this computer';
     static description = (0, exec_runtime_binary_1.forwardedFlagsNote)('install', {
         binds: true,
         bootstrapsRuntime: true,
@@ -57,11 +57,11 @@ class DaemonInstall extends core_1.Command {
         // is a floor under the missing case, not a second update channel competing
         // with the daemon's own.
         if (!(0, exec_runtime_binary_1.isCurrentRuntimeBinary)((0, exec_runtime_binary_1.findRuntimeBinary)())) {
-            this.log('No local skrr runtime found. Fetching the signed release...');
+            this.log('No skrr background service installed on this computer. Fetching the signed release...');
             const outcome = await (0, daemon_installer_1.installDaemon)();
             if (!outcome.ok) {
                 this.log('');
-                this.log(`  Could not install the runtime: ${outcome.error}`);
+                this.log(`  Could not install the background service: ${outcome.error}`);
                 this.log('');
                 this.log('  You can install it directly instead:');
                 this.log('    macOS:   brew install dush1023/oversky/oversky');
@@ -84,7 +84,7 @@ class DaemonInstall extends core_1.Command {
                 // Reachable only if the runtime vanished between the bootstrap above
                 // and this line. Saying so beats repeating install instructions for
                 // something that was just installed.
-                this.log('The skrr runtime disappeared between installing it and running it.');
+                this.log('The skrr background service disappeared between installing it and running it.');
                 this.exit(127);
             }
             throw err;

package/dist/commands/daemon/login.js

@@ -28,7 +28,7 @@ const exec_runtime_binary_1 = require("../../lib/exec-runtime-binary");
  */
 class DaemonLogin extends core_1.Command {
     static aliases = ['daemons:login'];
-    static summary = 'Authenticate the local skrr runtime (separate from `skrr login`)';
+    static summary = 'Authenticate the skrr background service on this computer (separate from `skrr login`)';
     static description = (0, exec_runtime_binary_1.forwardedFlagsNote)('login', { binds: true });
     static strict = false; // forward all args verbatim — see run()
     async run() {

package/dist/commands/daemon/logs.d.ts

@@ -17,6 +17,7 @@ export interface DaemonLogsFlags {
     lines?: number;
     stderr?: boolean;
     path?: boolean;
+    profile?: string;
 }
 /**
  * Older daemons already kept logs in this profile-scoped location, even
@@ -50,7 +51,7 @@ export declare function describeLogAge(mtimeMs: number, now?: number): {
     line: string;
     stale: boolean;
 };
-export declare function resolveLegacyDaemonLogPath(flags: Pick<DaemonLogsFlags, 'stderr'>, options?: {
+export declare function resolveLegacyDaemonLogPath(flags: Pick<DaemonLogsFlags, 'stderr' | 'profile'>, options?: {
     home?: string;
     env?: NodeJS.ProcessEnv;
 }): string;
@@ -81,6 +82,7 @@ export default class DaemonLogs extends Command {
         lines: import("@oclif/core/lib/interfaces").OptionFlag<number | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         stderr: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
         path: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+        profile: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
     };
     static examples: string[];
     run(): Promise<void>;

package/dist/commands/daemon/logs.js

@@ -64,8 +64,14 @@ function describeLogAge(mtimeMs, now = Date.now()) {
 function resolveLegacyDaemonLogPath(flags, options = {}) {
     const home = options.home ?? (0, node_os_1.homedir)();
     const env = options.env ?? process.env;
+    // An explicit --profile outranks the environment, as it does everywhere else.
+    const fromFlag = flags.profile?.trim();
     const fromEnv = env.OVERSKY_PROFILE?.trim();
-    let profile = fromEnv && PROFILE_NAME.test(fromEnv) ? fromEnv : undefined;
+    let profile = fromFlag && PROFILE_NAME.test(fromFlag)
+        ? fromFlag
+        : fromEnv && PROFILE_NAME.test(fromEnv)
+            ? fromEnv
+            : undefined;
     if (!profile) {
         try {
             const pinned = (0, node_fs_1.readFileSync)(node_path_1.default.join(home, '.skrr', 'profile.lock'), 'utf8').trim();
@@ -110,6 +116,8 @@ function readDaemonLogTail(filePath, maxLines) {
  */
 function buildOverskyLogsArgs(flags) {
     return [
+        // The runtime's own global option, placed before the subcommand.
+        ...(flags.profile ? ['--profile', flags.profile] : []),
         'logs',
         ...(flags.follow ? ['--follow'] : []),
         ...(flags.lines !== undefined ? ['--lines', String(flags.lines)] : []),
@@ -149,6 +157,12 @@ class DaemonLogs extends core_1.Command {
         path: core_1.Flags.boolean({
             description: 'Print the resolved log file path and exit',
         }),
+        // Every other daemon verb reaches a non-default profile with --profile; this
+        // one could only be steered by OVERSKY_PROFILE (OSK-10001).
+        profile: core_1.Flags.string({
+            char: 'p',
+            description: 'Read the logs of this daemon profile instead of the active one',
+        }),
     };
     static examples = [
         '<%= config.bin %> daemon logs',
@@ -156,6 +170,7 @@ class DaemonLogs extends core_1.Command {
         '<%= config.bin %> daemon logs --lines 500',
         '<%= config.bin %> daemon logs --stderr',
         '<%= config.bin %> daemon logs --path',
+        '<%= config.bin %> daemon logs --profile dogfood-laptop --lines 50',
     ];
     async run() {
         const { flags } = await this.parse(DaemonLogs);

package/dist/commands/daemon/start.js

@@ -34,19 +34,19 @@ class DaemonStart extends core_1.Command {
             const status = await (0, exec_runtime_binary_1.execRuntimeBinaryCapture)((0, runtime_start_verification_1.statusArgsForStart)(argv));
             const verification = (0, runtime_start_verification_1.verifyRuntimeStart)(status.stdout, status.code, argv);
             if (verification.status === 'reauth_required') {
-                this.logToStderr(`Local runtime did not start: profile '${verification.profile}' requires ` +
+                this.logToStderr(`The background service did not start: profile '${verification.profile}' requires ` +
                     `re-authentication (reason: ${verification.reason ?? 'UNKNOWN'}). Run ` +
                     `\`${verification.recoveryCommand}\`, then retry \`skrr daemon start\`.`);
                 this.exit(runtime_start_verification_1.DAEMON_START_REAUTH_EXIT);
             }
             if (verification.status === 'not_running') {
-                this.logToStderr(`Local runtime did not remain running after skrrd exited successfully ` +
+                this.logToStderr(`The background service did not keep running after skrrd exited successfully ` +
                     `(profile '${verification.profile}', service status: ` +
                     `${verification.runtimeStatus ?? 'unknown'}). Run \`skrr daemon logs\` for the reason.`);
                 this.exit(runtime_start_verification_1.DAEMON_START_UNVERIFIED_EXIT);
             }
             if (verification.status === 'unreadable_status') {
-                this.logToStderr(`skrrd start exited successfully, but skrr could not verify a running local runtime ` +
+                this.logToStderr(`skrrd start exited successfully, but skrr could not verify a running background service ` +
                     `for profile '${verification.profile}'; refusing to report success. ` +
                     'Run `skrr daemon status` and `skrr daemon logs` for the reason.');
                 this.exit(runtime_start_verification_1.DAEMON_START_UNVERIFIED_EXIT);

package/dist/commands/daemon/status.d.ts

@@ -1,4 +1,13 @@
 import { Command } from '@oclif/core';
+/**
+ * The status report is the runtime's, and it describes the daemon: running,
+ * connected, which credential. Whether the coding-agent CLIs on the machine can
+ * actually run a turn — installed, signed in — is a different command, and
+ * nothing on this surface named it (OSK-10002). One line after a successful
+ * human report; never inside `--json`, whose contract is one document, and
+ * never after `--help` or a failure, where it would be noise beside the point.
+ */
+export declare function readinessPointer(argv: readonly string[], exitCode: number): string | null;
 export default class DaemonStatus extends Command {
     static aliases: string[];
     static summary: string;

package/dist/commands/daemon/status.js

@@ -1,7 +1,26 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.readinessPointer = readinessPointer;
 const core_1 = require("@oclif/core");
 const exec_runtime_binary_1 = require("../../lib/exec-runtime-binary");
+/**
+ * The status report is the runtime's, and it describes the daemon: running,
+ * connected, which credential. Whether the coding-agent CLIs on the machine can
+ * actually run a turn — installed, signed in — is a different command, and
+ * nothing on this surface named it (OSK-10002). One line after a successful
+ * human report; never inside `--json`, whose contract is one document, and
+ * never after `--help` or a failure, where it would be noise beside the point.
+ */
+function readinessPointer(argv, exitCode) {
+    if (exitCode !== 0)
+        return null;
+    if (argv.some((arg) => arg === '--json' || arg === '--help' || arg === '-h'))
+        return null;
+    // Runnable as printed: `installers` picks the only connected daemon itself,
+    // and lists the ids to choose from when there are several (OSK-10002 verifier).
+    return ('  Coding agents: which CLIs are installed on this machine, and signed in where the daemon can tell — ' +
+        '`skrr harnesses installers` (add `--daemon <Daemon ID above>` if several daemons are connected)');
+}
 class DaemonStatus extends core_1.Command {
     // `skrr daemons <sub>` — the plural is advertised as an alias for the
     // whole topic, and without a per-command alias only the bare topic
@@ -23,6 +42,9 @@ class DaemonStatus extends core_1.Command {
         const argv = this.argv;
         try {
             const code = await (0, exec_runtime_binary_1.execRuntimeBinary)(['status', ...argv]);
+            const pointer = readinessPointer(argv, code);
+            if (pointer)
+                this.log(pointer);
             this.exit(code);
         }
         catch (err) {

package/dist/commands/dm/messages.js

@@ -87,7 +87,7 @@ class DmMessages extends base_command_1.BaseCommand {
             return;
         }
         (0, format_1.renderTable)(selected.map((message) => ({
-            when: formatTime(message.createdAt),
+            when: (0, format_1.localTime)(message.createdAt),
             role: String(message.sender ?? (message.isCreatedByUser ? 'user' : 'assistant')),
             text: textFromMessage(message).replace(/\s+/g, ' ').trim(),
             id: String(message.messageId ?? message._id ?? message.id ?? '-'),
@@ -100,16 +100,6 @@ class DmMessages extends base_command_1.BaseCommand {
     }
 }
 exports.default = DmMessages;
-function formatTime(value) {
-    if (!value)
-        return '-';
-    try {
-        return new Date(String(value)).toISOString().slice(0, 19);
-    }
-    catch {
-        return String(value);
-    }
-}
 function textFromMessage(message) {
     if (typeof message.text === 'string')
         return message.text;

package/dist/commands/followups/cancel.js

@@ -44,7 +44,7 @@ class FollowupsCancel extends base_command_1.BaseCommand {
             this.log(JSON.stringify(result, null, 2));
             return;
         }
-        this.log(`Follow-up ${args.id} cancelled.`);
+        this.log((0, followups_1.settledLine)(args.id, result, 'cancelled'));
     }
 }
 exports.default = FollowupsCancel;

package/dist/commands/followups/resolve.js

@@ -48,7 +48,7 @@ class FollowupsResolve extends base_command_1.BaseCommand {
             this.log(JSON.stringify(result, null, 2));
             return;
         }
-        this.log(`Follow-up ${args.id} settled: ${flags.outcome}.`);
+        this.log((0, followups_1.settledLine)(args.id, result, `settled: ${flags.outcome}`));
     }
 }
 exports.default = FollowupsResolve;

package/dist/commands/followups/show.js

@@ -3,6 +3,15 @@ Object.defineProperty(exports, "__esModule", { value: true });
 const core_1 = require("@oclif/core");
 const base_command_1 = require("../../base-command");
 const followups_1 = require("../../lib/followups");
+/** What each gate posture means for whoever reads `show`. */
+const GATE_LABEL = {
+    exempt_silent: 'fires without approval (silent)',
+    exempt_user_directed: 'fires without approval (you asked for it)',
+    exempt_system: 'fires without approval (system)',
+    user_directed_guarded: 'fires without approval (you asked for it); still held by quiet hours, approval-only action classes and the spend cap',
+    autonomy_ladder: "follows the agent's autonomy mode",
+    approval_ladder: 'needs approval unless the autonomy mode allows it',
+};
 /** `skrr followups show <id>` — one follow-up, the same shape as the list rows. */
 class FollowupsShow extends base_command_1.BaseCommand {
     static description = 'Show one follow-up';
@@ -34,12 +43,19 @@ class FollowupsShow extends base_command_1.BaseCommand {
             ['why', row.why],
             ['intent', row.intentKey],
             ['producer', row.producer],
+            ['gate', row.gate ? (GATE_LABEL[row.gate] ?? row.gate) : undefined],
             ['terminal', row.terminal ? `${row.terminal} (${row.terminalReason ?? '—'})` : undefined],
             [
                 'settled',
                 row.terminal ? `${row.terminalAt ?? '—'} by ${row.terminalBy ?? 'unknown'}` : undefined,
             ],
             ['deadline', row.deadlineAt],
+            [
+                'waiting',
+                row.parkedAt && !row.terminal
+                    ? `on an offline machine since ${row.parkedAt} (escalates after 60 minutes)`
+                    : undefined,
+            ],
             ['escalated to', row.escalatedInitiativeId],
         ]) {
             if (value)

package/dist/commands/harnesses/forget.js

@@ -54,12 +54,29 @@ class HarnessesForget extends base_command_1.BaseCommand {
                 const current = await (0, harnesses_1.getHarness)(args.harness);
                 label = current?.harness?.name || args.harness;
             }
-            catch {
-                /* fall back to the id — the confirmation still has to happen */
+            catch (err) {
+                // Existence before consent (OSK-9995): asking "Forget harness X?" about
+                // a row that does not exist, then reporting NOT_FOUND only after --yes,
+                // made the prompt the first thing to fail. Any other read failure still
+                // falls back to the id — the confirmation has to happen regardless.
+                if (err instanceof api_fetch_1.ApiFetchError && err.status === 404) {
+                    // NOT_FOUND, the code `harnesses show` gives the same missing id, so a
+                    // script branching on the code sees one answer (OSK-9995 verifier).
+                    this.failWithCliError({
+                        message: `No harness on this account has id ${args.harness}. Run \`skrr harnesses list --all\` to see them.`,
+                        code: 'NOT_FOUND',
+                        status: 404,
+                        exit: 4,
+                        retryable: false,
+                    });
+                    return;
+                }
             }
             const ok = await this.confirm(`Forget harness "${label}"? Agents pinned to it lose their pin.`);
             if (!ok) {
-                this.log('Cancelled.');
+                // Non-zero because nothing was forgotten — the same rule as `tasks
+                // update`: a script can only read the exit code, and 0 read as success.
+                this.error('Cancelled — nothing was forgotten.', { exit: 1 });
                 return;
             }
         }

package/dist/commands/harnesses/install.js

@@ -47,7 +47,7 @@ class HarnessesInstall extends base_command_1.BaseCommand {
     static flags = {
         json: core_1.Flags.boolean({ description: 'Output as JSON' }),
         daemon: core_1.Flags.string({
-            description: 'Which machine to install on. Defaults to your only active daemon; required when several are active.',
+            description: 'Which machine to install on. Defaults to your only connected daemon; required when several are connected.',
         }),
     };
     async run() {
@@ -63,7 +63,7 @@ class HarnessesInstall extends base_command_1.BaseCommand {
         const target = await (0, daemon_target_1.resolveDaemonTarget)({
             explicit: flags.daemon,
             local: (0, daemon_target_1.localMachine)(),
-            listActiveDaemons: () => (0, daemon_target_1.listActiveDaemons)(this.resolvedCredential),
+            listActiveDaemons: () => (0, daemon_target_1.listConnectedDaemons)(this.resolvedCredential),
         });
         const daemonId = this.daemonIdFor(target);
         let start;
@@ -152,14 +152,26 @@ class HarnessesInstall extends base_command_1.BaseCommand {
             this.error('This machine is a Dedicated Runtime whose daemon has not published an id this process can read. Name a machine with --daemon.', { exit: 1 });
         }
         if (target.kind === 'none') {
-            this.error(`No active daemon is registered for this account, so nothing can perform the install. Start the local runtime with \`${this.config.bin} daemon start\`.`, { exit: 1 });
+            this.failWithCliError({
+                message: `No daemon is connected for this account, so nothing can perform the install. Start the background service on this computer with \`${this.config.bin} daemon start\`.`,
+                code: 'NO_DAEMON',
+                exit: 1,
+                retryable: false,
+            });
         }
         const choices = target.daemons
             .slice(0, 10)
-            .map((d) => `  ${(0, daemon_ref_1.formatDaemonRef)(d.id)}  ${d.name || '—'}`)
+            // Full ids: they are what `--daemon` takes (OSK-9993).
+            .map((d) => `  ${d.id}  ${d.name || '—'}`)
             .join('\n');
-        this.error(`${target.daemons.length} active daemons — say which machine to install on:\n${choices}\n` +
-            `Pass one with --daemon, or see them all with \`${this.config.bin} list-daemons\`.`, { exit: 1 });
+        // The same refusal, and the same code, as \`code install\` (OSK-9993 verifier).
+        this.failWithCliError({
+            message: `${target.daemons.length} connected daemons — say which machine to install on:\n${choices}\n` +
+                `Pass one with --daemon, or see each daemon id in the DAEMON ID column of \`${this.config.bin} harnesses list\`.`,
+            code: 'AMBIGUOUS_DAEMON',
+            exit: 1,
+            retryable: false,
+        });
     }
 }
 exports.default = HarnessesInstall;

package/dist/commands/harnesses/installers.d.ts

@@ -11,7 +11,7 @@ import { BaseCommand } from '../../base-command';
  *
  * That gap is not cosmetic, because `skrr harnesses list` answers a DIFFERENT
  * question and looks like it answers this one. Its `status` is the daemon's
- * socket, so on this account `skrr-code` read `online` with no binary installed
+ * socket, so on this account the first-party harness read `online` with no binary installed
  * at all, and `harnesses ping` answered it in 78ms — the daemon was there, the
  * harness was not. A user could not discover that from inside the product; it
  * took `command -v` in a shell.

package/dist/commands/harnesses/installers.js

@@ -4,7 +4,6 @@ const core_1 = require("@oclif/core");
 const base_command_1 = require("../../base-command");
 const data_provider_1 = require("@skrr-ai/data-provider");
 const cli_installers_1 = require("../../lib/cli-installers");
-const daemon_ref_1 = require("../../lib/daemon-ref");
 const daemon_target_1 = require("../../lib/daemon-target");
 const format_1 = require("../../lib/format");
 /**
@@ -19,7 +18,7 @@ const format_1 = require("../../lib/format");
  *
  * That gap is not cosmetic, because `skrr harnesses list` answers a DIFFERENT
  * question and looks like it answers this one. Its `status` is the daemon's
- * socket, so on this account `skrr-code` read `online` with no binary installed
+ * socket, so on this account the first-party harness read `online` with no binary installed
  * at all, and `harnesses ping` answered it in 78ms — the daemon was there, the
  * harness was not. A user could not discover that from inside the product; it
  * took `command -v` in a shell.
@@ -44,7 +43,7 @@ class HarnessesInstallers extends base_command_1.BaseCommand {
     static flags = {
         json: core_1.Flags.boolean({ description: 'Output as JSON' }),
         daemon: core_1.Flags.string({
-            description: 'Which machine to ask. Defaults to your only active daemon; required when several are active.',
+            description: 'Which machine to ask. Defaults to your only connected daemon; required when several are connected.',
         }),
     };
     async run() {
@@ -53,7 +52,7 @@ class HarnessesInstallers extends base_command_1.BaseCommand {
         const target = await (0, daemon_target_1.resolveDaemonTarget)({
             explicit: flags.daemon,
             local: (0, daemon_target_1.localMachine)(),
-            listActiveDaemons: () => (0, daemon_target_1.listActiveDaemons)(this.resolvedCredential),
+            listActiveDaemons: () => (0, daemon_target_1.listConnectedDaemons)(this.resolvedCredential),
         });
         const daemonId = this.daemonIdFor(target);
         let res;
@@ -65,8 +64,21 @@ class HarnessesInstallers extends base_command_1.BaseCommand {
             return;
         }
         const providers = res.providers ?? [];
+        // Computed before the output mode splits: a JSON reader needs the same
+        // "this daemon is older than that provider" signal the table prints, and
+        // the daemon version the header shows (OSK-9537 verifier).
+        const notOffered = providers.length > 0 ? (0, cli_installers_1.providersNotOffered)(providers, data_provider_1.MANAGED_CLI_PROVIDER_IDS) : [];
         if (flags.json) {
-            this.log(JSON.stringify({ daemonId, platform: res.platform, providers }, null, 2));
+            this.log(JSON.stringify({
+                daemonId,
+                platform: res.platform,
+                daemonVersion: res.daemonVersion ?? null,
+                providers,
+                notOffered: notOffered.map((provider) => ({
+                    provider,
+                    addedInDaemon: cli_installers_1.MANAGED_CLI_PROVIDER_SINCE[(0, cli_installers_1.readinessKey)(provider)] ?? null,
+                })),
+            }, null, 2));
             return;
         }
         if (providers.length === 0) {
@@ -116,12 +128,12 @@ class HarnessesInstallers extends base_command_1.BaseCommand {
         }
         // A provider the platform knows and this daemon did not mention. Without
         // this it simply is not on the list, which reads as dropped support rather
-        // than as an older daemon — `devin` arrived in daemon 0.8.43, so 0.8.35
+        // than as an older daemon — `devin` arrived in the 0.8.45 daemon release, so 0.8.35
         // answers with six providers and says nothing about the seventh.
-        const missing = (0, cli_installers_1.providersNotOffered)(providers, data_provider_1.MANAGED_CLI_PROVIDER_IDS);
+        const missing = notOffered;
         if (missing.length > 0) {
             this.log('');
-            this.log(`  Not offered by this daemon: ${missing.join(', ')}. ` +
+            this.log(`  Not offered by this daemon: ${(0, cli_installers_1.describeProvidersNotOffered)(missing)}. ` +
                 'That usually means the daemon is older than the provider — ' +
                 'check `skrr daemon status` for its version and how to update it.');
         }
@@ -142,14 +154,26 @@ class HarnessesInstallers extends base_command_1.BaseCommand {
             this.error('This machine is a Dedicated Runtime whose daemon has not published an id this process can read. Name a machine with --daemon.', { exit: 1 });
         }
         if (target.kind === 'none') {
-            this.error(`No active daemon is registered for this account, so nothing can report on it. Start the local runtime with \`${this.config.bin} daemon start\`.`, { exit: 1 });
+            this.failWithCliError({
+                message: `No daemon is connected for this account, so nothing can report on it. Start the background service on this computer with \`${this.config.bin} daemon start\`.`,
+                code: 'NO_DAEMON',
+                exit: 1,
+                retryable: false,
+            });
         }
         const choices = target.daemons
             .slice(0, 10)
-            .map((d) => `  ${(0, daemon_ref_1.formatDaemonRef)(d.id)}  ${d.name || '—'}`)
+            // Full ids: they are what `--daemon` takes (OSK-9993).
+            .map((d) => `  ${d.id}  ${d.name || '—'}`)
             .join('\n');
-        this.error(`${target.daemons.length} active daemons — say which machine to report on:\n${choices}\n` +
-            `Pass one with --daemon, or see them all with \`${this.config.bin} list-daemons\`.`, { exit: 1 });
+        // The same refusal, and the same code, as \`code install\` (OSK-9993 verifier).
+        this.failWithCliError({
+            message: `${target.daemons.length} connected daemons — say which machine to report on:\n${choices}\n` +
+                `Pass one with --daemon, or see each daemon id in the DAEMON ID column of \`${this.config.bin} harnesses list\`.`,
+            code: 'AMBIGUOUS_DAEMON',
+            exit: 1,
+            retryable: false,
+        });
     }
 }
 exports.default = HarnessesInstallers;

package/dist/commands/harnesses/list.d.ts

@@ -1,4 +1,5 @@
 import { BaseCommand } from '../../base-command';
+import { type ProviderReadiness } from '../../lib/cli-installers';
 /**
  * Minimal shape of a provider Harness row as returned by
  * `GET /api/harnesses` (`{ harnesses: WireHarness[] }`). Only the
@@ -71,6 +72,25 @@ export declare function shortMachineLabel(machineUuid?: string): string;
 export declare function emptyListMessage(input: {
     provider: string | null;
     local: boolean;
+    /** `--all` was passed, so suggesting it is noise (OSK-9285). */
+    all?: boolean;
+    /**
+     * Every provider this account has a row for, whatever its status, when the
+     * caller could read it. Absent or null: unknown, and nothing is claimed.
+     */
+    accountProviders?: readonly string[] | null;
+}): string;
+/**
+ * The NAME cell. `show` and `--json` said when YOUR alias covers the shared
+ * name; this table printed the alias as if it were the name everyone sees
+ * (OSK-10004). The marker leads because the column truncates from the right,
+ * and a trailing one is the first thing a long name would cut.
+ */
+export declare const ALIAS_MARKER = "*";
+export declare function harnessNameCell(row: {
+    name?: string;
+    sharedName?: string;
+    aliased?: boolean;
 }): string;
 /**
  * What the DEFAULT column says for one row.
@@ -89,9 +109,33 @@ export type HarnessSelection = {
     hiddenOffline: number;
     /** Rows dropped by `--limit` alone. */
     hiddenByLimit: number;
+    /**
+     * Superseded rows a status filter dropped — the ones `--status offline`
+     * leaves to `--status superseded`. Only superseded rows are counted: online
+     * rows the same filter drops were never offline, so they are not "hidden".
+     */
+    hiddenSuperseded: number;
     /** Rows that survived every filter, before the online-only default and `--limit`. */
     matched: number;
 };
+/**
+ * What `--status` accepts: exactly what the STATUS column prints (OSK-10005).
+ *
+ * The column says `superseded` for a row a later registration on the same
+ * machine replaced; the filter accepted only online|offline, so the one value
+ * that says "never coming back" could be read and never selected.
+ */
+export declare const HARNESS_STATUS_FILTERS: readonly ["online", "offline", "superseded"];
+/**
+ * The status to ask the SERVER for. Only `online` narrows there.
+ *
+ * Supersession is judged among the rows in one response — a row is superseded
+ * when a newer row for the same provider on the same machine exists. Asked for
+ * `offline` only, the server cannot see the live row that replaced an offline
+ * one, so it labelled that row `offline` while `--all` called it `superseded`.
+ * Online rows are never superseded, so that one filter is safe to push down.
+ */
+export declare function serverStatusParam(status: string | undefined): string | undefined;
 /**
  * Harness rows created before `harnessLocation` was introduced do not carry that
  * field.  A daemon id is the durable discriminator for those legacy rows:
@@ -145,6 +189,8 @@ export declare function selectHarnessRows(rows: HarnessRow[], options: {
     local: boolean;
     daemon?: string;
     limit?: number;
+    /** Keep only rows whose STATUS column reads this (`harnessStatusLabel`). */
+    status?: string;
     /** Hide offline rows (the human-readable default). */
     onlineOnly: boolean;
 }): HarnessSelection;
@@ -177,7 +223,9 @@ export type HarnessDefaults = {
     workspaceDefaultHarnessId?: string | null;
 };
 export type HarnessesJson = {
-    harnesses: HarnessRow[];
+    harnesses: Array<HarnessRow & {
+        readiness?: ProviderReadiness | null;
+    }>;
     filters: HarnessesFilters;
     defaults: HarnessDefaults;
     counts: {
@@ -189,6 +237,8 @@ export type HarnessesJson = {
         hiddenByLocal: number;
         /** Rows `--limit` dropped — raise `--limit` to get them back. */
         hiddenByLimit: number;
+        /** Superseded rows `--status` dropped — `--status superseded` lists them. */
+        hiddenSuperseded: number;
         /**
          * OSK-3385 — how many of the returned rows are `status: 'online'`.
          *
@@ -213,7 +263,22 @@ export type HarnessesJson = {
  * (`compareHarnessRows`), not in server order. Round 1 introduced that sort;
  * it is deliberate, so `.harnesses[0]` is the row you almost always want.
  */
-export declare function buildHarnessesJson(selection: HarnessSelection, filters: HarnessesFilters, defaults?: HarnessDefaults): HarnessesJson;
+export declare function buildHarnessesJson(selection: HarnessSelection, filters: HarnessesFilters, defaults?: HarnessDefaults, readiness?: (row: HarnessRow) => ProviderReadiness | undefined): HarnessesJson;
+/**
+ * What the READINESS column's non-answers mean, counted from the rows shown.
+ *
+ * Each footnote names a different next step, so they are not merged: a `-` on
+ * an offline row wants `--all`/a started daemon, a `-` on a provider the daemon
+ * does not manage (hermes, gemini) wants nothing, `unknown` is installed but
+ * unverifiable, and only a definite not-ready label (interactive-required,
+ * not-installed, …) has something to fix. Counting `unknown` as not ready
+ * would send the reader to fix eleven rows that are fine as far as anyone can
+ * tell.
+ */
+export declare function readinessFootnotes(rows: readonly HarnessRow[], readiness: {
+    lookup: (row: HarnessRow) => ProviderReadiness | undefined;
+    daemonAnswered: (row: HarnessRow) => boolean;
+}): string[];
 /**
  * Rows with the provider in its CANONICAL spelling.
  *
@@ -246,6 +311,13 @@ export default class HarnessesList extends BaseCommand {
         daemon: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         limit: import("@oclif/core/lib/interfaces").OptionFlag<number | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         local: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+        readiness: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
     };
     run(): Promise<void>;
+    /**
+     * The canonical providers this account has any row for, or null when that
+     * cannot be read. Asked only when a --provider filter came back empty, so
+     * the ordinary path pays nothing for it.
+     */
+    private accountProviders;
 }