@skrr-ai/cli 0.1.40 → 0.1.42

package/dist/commands/harnesses/ping.js

@@ -4,6 +4,7 @@ exports.isPingSuccess = isPingSuccess;
 const core_1 = require("@oclif/core");
 const base_command_1 = require("../../base-command");
 const harnesses_1 = require("../../lib/harnesses");
+const cli_installers_1 = require("../../lib/cli-installers");
 /**
  * Is this machine actually reachable right now?
  *
@@ -84,6 +85,9 @@ class HarnessesPing extends base_command_1.BaseCommand {
                     this.log(result.latencyMs != null
                         ? `Answered in ${result.latencyMs}ms.`
                         : 'Answered (no latency reported).');
+                    // Answering proves the daemon is reachable, not that this harness can
+                    // run a turn — a signed-out Devin answers too (OSK-9263).
+                    await this.logReadiness(args.harness);
                 }
                 else {
                     this.log(`Ping ${result.status}${result.error ? `: ${result.error}` : ''}.`);
@@ -104,5 +108,22 @@ class HarnessesPing extends base_command_1.BaseCommand {
             await new Promise((resolve) => setTimeout(resolve, POLL_INTERVAL_MS));
         }
     }
+    /** Best-effort: never turns a successful ping into a failure. */
+    async logReadiness(harnessId) {
+        try {
+            const response = await (0, harnesses_1.getHarness)(harnessId);
+            const harness = response?.harness ??
+                response;
+            if (!harness?.daemonId)
+                return;
+            const readiness = await (0, cli_installers_1.readinessByProvider)(harness.daemonId, this.resolvedCredential);
+            const verdict = readiness?.get((0, cli_installers_1.readinessKey)(harness.provider));
+            if (verdict)
+                this.log(`Readiness: ${verdict.label} — ${verdict.detail}`);
+        }
+        catch {
+            // A readiness read is extra information; the ping already answered.
+        }
+    }
 }
 exports.default = HarnessesPing;

package/dist/commands/harnesses/show.d.ts

@@ -25,3 +25,25 @@ export default class HarnessesShow extends BaseCommand {
  * still falls through to the general answer rather than being guessed at.
  */
 export declare function describeWrongHarnessRef(ref: string): string;
+type HarnessRefResolution = {
+    kind: 'harness';
+    id: string;
+} | {
+    kind: 'message';
+    message: string;
+} | {
+    kind: 'none';
+};
+/**
+ * Resolve a reference that is not a full harness id against this account's
+ * rows: a unique id prefix or a unique name selects the harness; a machine uuid
+ * prefix or an ambiguous match explains itself. `none` falls through to the
+ * shape-based message.
+ */
+export declare function resolveHarnessRef(ref: string): Promise<HarnessRefResolution>;
+export declare function pickHarnessRef(rows: Array<{
+    _id: string;
+    name?: string;
+    machineUuid?: string;
+}>, ref: string): HarnessRefResolution;
+export {};

package/dist/commands/harnesses/show.js

@@ -1,11 +1,16 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.describeWrongHarnessRef = describeWrongHarnessRef;
+exports.resolveHarnessRef = resolveHarnessRef;
+exports.pickHarnessRef = pickHarnessRef;
 const core_1 = require("@oclif/core");
 const base_command_1 = require("../../base-command");
 const harness_provider_input_1 = require("../../lib/harness-provider-input");
 const harnesses_1 = require("../../lib/harnesses");
+const harness_labels_1 = require("../../lib/harness-labels");
+const cli_installers_1 = require("../../lib/cli-installers");
 const api_fetch_1 = require("../../lib/api-fetch");
+const data_provider_1 = require("@skrr-ai/data-provider");
 class HarnessesShow extends base_command_1.BaseCommand {
     static description = 'Show one harness — one provider on one machine';
     static examples = [
@@ -29,20 +34,30 @@ class HarnessesShow extends base_command_1.BaseCommand {
         }
         catch (err) {
             // The server answers a malformed id with "Invalid harness ID", which says
-            // nothing about what a valid one IS or where to get one. The sibling
-            // `machines show` already sets the expectation by accepting what its own
-            // list prints, so failing here with no pointer is the odd one out.
-            // The readable text lives in `body`, not `message` — `message` is
-            // "HTTP 400 Bad Request — GET /api/harnesses/<id>". Any 400 on this
-            // lookup is the id being wrong, so branch on the status.
-            if (err instanceof api_fetch_1.ApiFetchError && err.status === 400) {
-                this.error(`Not a harness id: ${args.harness}\n${describeWrongHarnessRef(args.harness)}`, {
-                    exit: 1,
-                });
+            // nothing about what a valid one IS or where to get one. The readable
+            // text lives in `body`, not `message`, and any 400 on this lookup is the
+            // id being wrong, so branch on the status.
+            if (!(err instanceof api_fetch_1.ApiFetchError && err.status === 400)) {
+                this.handleApiError(err);
+                return;
+            }
+            // Before refusing, try what other commands PRINT: the head of a harness
+            // id, a harness name, or a machine uuid. `machines show` accepts prefixes
+            // and names; this sibling answered the same input with a generic "24
+            // hexadecimal characters" (OSK-9313).
+            const resolved = await resolveHarnessRef(args.harness);
+            if (resolved.kind !== 'harness') {
+                const why = resolved.kind === 'message' ? resolved.message : describeWrongHarnessRef(args.harness);
+                this.error(`Not a harness id: ${args.harness}\n${why}`, { exit: 1 });
+                return;
+            }
+            try {
+                response = await (0, harnesses_1.getHarness)(resolved.id);
+            }
+            catch (retryErr) {
+                this.handleApiError(retryErr);
                 return;
             }
-            this.handleApiError(err);
-            return;
         }
         const stored = response?.harness;
         // Canonical spelling in every output, whichever spelling the row was stored under.
@@ -53,13 +68,30 @@ class HarnessesShow extends base_command_1.BaseCommand {
             this.error(`No harness ${args.harness}.`, { exit: 1 });
             return;
         }
+        // `status online` is a heartbeat, not "this harness can run a turn": a
+        // Devin that is installed and not signed in read as fully usable (OSK-9263).
+        // Asked of the daemon, so only for a live local row; best-effort.
+        const readiness = harness.daemonId &&
+            harness.harnessLocation === 'local' &&
+            harness.status === 'online' &&
+            !harness.superseded
+            ? await (0, cli_installers_1.readinessByProvider)(harness.daemonId, this.resolvedCredential)
+            : null;
+        const verdict = readiness?.get((0, cli_installers_1.readinessKey)(harness.provider));
         if (flags.json) {
-            this.log(JSON.stringify(harness, null, 2));
+            // `authStatus` is the DAEMON's sign-in to skrr, the same on every row of a
+            // daemon, so a script read a signed-out Devin as "ok" (OSK-9263/OSK-9265
+            // verifiers). `readiness` is the per-provider answer the text prints;
+            // null when it was not asked (not a live local row) or not reported.
+            this.log(JSON.stringify({ ...harness, readiness: verdict ?? null }, null, 2));
             return;
         }
-        this.log(`${harness.name || harness._id}`);
+        // The same rule the list applies (OSK-9649): a no-engine placeholder's
+        // stored name is "oversky — <machine>", which headed this view with a
+        // provider name that is not one.
+        this.log(`${harness.name ? (0, data_provider_1.canonicalizeHarnessLabel)(harness.name) : harness._id}`);
         this.log(`  id          ${harness._id}`);
-        this.log(`  provider    ${harness.provider}`);
+        this.log(`  provider    ${(0, harness_labels_1.harnessProviderDescription)(harness.provider)}`);
         // `harnessLocation` is the difference between "your laptop" and "a cloud row",
         // and it decides which verbs apply: ping and claudeEngine are local-only.
         // When YOUR alias is covering the shared name, say so and show both. The
@@ -67,11 +99,11 @@ class HarnessesShow extends base_command_1.BaseCommand {
         // value `harnesses update --name` just wrote appears on no surface at all,
         // and you cannot tell you are reading your own label rather than the one
         // everyone else sees.
-        if (harness.aliased && harness.sharedName && harness.sharedName !== harness.name) {
+        if ((0, harness_labels_1.isAliasCoveringSharedName)(harness)) {
             this.log(`  shared name ${harness.sharedName}  (your alias is showing instead)`);
         }
         this.log(`  mode        ${harness.harnessLocation ?? 'unknown'}`);
-        this.log(`  status      ${harness.status ?? 'unknown'}`);
+        this.log(`  status      ${(0, harness_labels_1.harnessStatusLabel)(harness)}`);
         // Only for the claude provider. The daemon stamps `claudeEngine` on every
         // harness it registers, so printing it whenever it is set labels a
         // first-party harness or `codex` row with how CLAUDE Code would run — a fact about a
@@ -81,6 +113,12 @@ class HarnessesShow extends base_command_1.BaseCommand {
         }
         if (harness.daemonId)
             this.log(`  daemon      ${harness.daemonId}`);
+        if (verdict) {
+            this.log(`  readiness   ${verdict.label} — ${verdict.detail}`);
+        }
+        else if (readiness) {
+            this.log('  readiness   not reported — this daemon does not track credentials for this provider');
+        }
         if (harness.lastSeenAt)
             this.log(`  last seen   ${harness.lastSeenAt}`);
     }
@@ -105,6 +143,14 @@ function describeWrongHarnessRef(ref) {
     if (/^daemon_/.test(ref)) {
         return `That is a daemon id. \`skrr machines show ${ref}\` takes those. ${seeIds}`;
     }
+    if (/^(dedicated-runtime-|hosted-machine-|hosted-runtime-)/.test(ref)) {
+        // Printed in the DAEMON ID column for a rented machine, so it is the same
+        // redirect as `daemon_…`, not a malformed harness id (OSK-9313).
+        return `That is a daemon id. \`skrr machines show ${ref}\` takes those. ${seeIds}`;
+    }
+    if (/^sbs_/.test(ref)) {
+        return `That is a hosted machine id. \`skrr machines show ${ref}\` takes those. ${seeIds}`;
+    }
     if (/^machine:/.test(ref)) {
         return `That is a machine id. \`skrr machines show ${ref}\` takes those. ${seeIds}`;
     }
@@ -118,3 +164,56 @@ function describeWrongHarnessRef(ref) {
     }
     return `A harness id is 24 hexadecimal characters. ${seeIds}`;
 }
+/**
+ * Resolve a reference that is not a full harness id against this account's
+ * rows: a unique id prefix or a unique name selects the harness; a machine uuid
+ * prefix or an ambiguous match explains itself. `none` falls through to the
+ * shape-based message.
+ */
+async function resolveHarnessRef(ref) {
+    if (!ref.trim())
+        return { kind: 'none' };
+    let rows;
+    try {
+        const res = await (0, api_fetch_1.apiFetch)('/api/harnesses');
+        rows = res.harnesses ?? [];
+    }
+    catch {
+        return { kind: 'none' };
+    }
+    return pickHarnessRef(rows, ref);
+}
+function pickHarnessRef(rows, ref) {
+    const typed = ref.trim();
+    const needle = typed.toLowerCase();
+    const byId = rows.filter((r) => r._id.toLowerCase().startsWith(needle));
+    if (byId.length === 1)
+        return { kind: 'harness', id: byId[0]._id };
+    const byName = rows.filter((r) => typeof r.name === 'string' &&
+        (r.name.toLowerCase() === needle ||
+            (0, data_provider_1.canonicalizeHarnessLabel)(r.name).toLowerCase() === needle));
+    if (byName.length === 1)
+        return { kind: 'harness', id: byName[0]._id };
+    const ambiguous = byId.length > 1 ? byId : byName;
+    if (ambiguous.length > 1) {
+        const shown = ambiguous
+            .slice(0, 5)
+            .map((r) => `${r._id}${r.name ? ` (${(0, data_provider_1.canonicalizeHarnessLabel)(r.name)})` : ''}`);
+        return {
+            kind: 'message',
+            message: `"${typed}" matches ${ambiguous.length} harnesses: ${shown.join(', ')}${ambiguous.length > shown.length ? `, and ${ambiguous.length - shown.length} more` : ''}. Use a longer prefix or the full id.`,
+        };
+    }
+    const machine = rows.find((r) => {
+        const uuid = (r.machineUuid ?? '').toLowerCase();
+        const tail = uuid.includes(':') ? uuid.slice(uuid.indexOf(':') + 1) : uuid;
+        return uuid.startsWith(needle) || tail.startsWith(needle);
+    });
+    if (machine) {
+        return {
+            kind: 'message',
+            message: `That is a machine. \`skrr machines show ${typed}\` takes those; its harnesses are listed there.`,
+        };
+    }
+    return { kind: 'none' };
+}

package/dist/commands/harnesses/update.d.ts

@@ -1,4 +1,5 @@
 import { BaseCommand } from '../../base-command';
+import { getHarness } from '../../lib/harnesses';
 /**
  * Rename an harness, or change how Claude Code runs on it.
  *
@@ -23,3 +24,10 @@ export default class HarnessesUpdate extends BaseCommand {
     };
     run(): Promise<void>;
 }
+/**
+ * `--name` sets the name everyone sees. When YOUR alias covers it, you will not
+ * see the new name anywhere you look, and "Updated <name>." read as though the
+ * rename had not happened (OSK-10004). Best-effort: a failed re-read keeps the
+ * plain receipt rather than failing a write that succeeded.
+ */
+export declare function sharedRenameMessage(harnessId: string, name: string, read?: typeof getHarness): Promise<string>;

package/dist/commands/harnesses/update.js

@@ -1,8 +1,10 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.sharedRenameMessage = sharedRenameMessage;
 const core_1 = require("@oclif/core");
 const base_command_1 = require("../../base-command");
 const harnesses_1 = require("../../lib/harnesses");
+const harness_labels_1 = require("../../lib/harness-labels");
 /**
  * Rename an harness, or change how Claude Code runs on it.
  *
@@ -53,7 +55,9 @@ class HarnessesUpdate extends base_command_1.BaseCommand {
                 this.log(JSON.stringify(response, null, 2));
                 return;
             }
-            this.log(`Updated ${response?.harness?.name || args.harness}.`);
+            this.log(flags.name === undefined
+                ? `Updated ${response?.harness?.name || args.harness}.`
+                : await sharedRenameMessage(args.harness, flags.name));
         }
         catch (err) {
             this.handleApiError(err);
@@ -61,3 +65,23 @@ class HarnessesUpdate extends base_command_1.BaseCommand {
     }
 }
 exports.default = HarnessesUpdate;
+/**
+ * `--name` sets the name everyone sees. When YOUR alias covers it, you will not
+ * see the new name anywhere you look, and "Updated <name>." read as though the
+ * rename had not happened (OSK-10004). Best-effort: a failed re-read keeps the
+ * plain receipt rather than failing a write that succeeded.
+ */
+async function sharedRenameMessage(harnessId, name, read = harnesses_1.getHarness) {
+    let row;
+    try {
+        row = (await read(harnessId))?.harness;
+    }
+    catch {
+        row = undefined;
+    }
+    if (row && (0, harness_labels_1.isAliasCoveringSharedName)(row)) {
+        return (`Updated the shared name to "${name}" — everyone this harness is shared with sees it.\n` +
+            `You still see your alias "${row.name}". \`skrr harnesses alias ${harnessId} --clear\` shows you the shared name too.`);
+    }
+    return `Updated ${name}.`;
+}

package/dist/commands/harnesses/usage.d.ts

@@ -17,6 +17,8 @@ export type UsageRow = {
     inputTokens?: number;
     outputTokens?: number;
     cachedInputTokens?: number;
+    /** Prompt-cache writes; absent from usage recorded before OSK-10006. */
+    cacheCreationInputTokens?: number;
 };
 /**
  * The rows to render, whichever spelling the server used.

package/dist/commands/harnesses/usage.js

@@ -42,7 +42,10 @@ function selectUsageRows(payload) {
 /** The HARNESS cell, under either spelling of the id. */
 function usageRowHarnessCell(row) {
     const id = row.harnessId ?? row.runtimeId;
-    return id ? String(id).slice(0, 12) : '-';
+    // The FULL id. Twelve characters looked tidy and named nothing: a daemon's
+    // rows share a long prefix, so `6a985ed278b7` matched six harnesses and no
+    // command took it back (OSK-10007).
+    return id ? String(id) : '-';
 }
 const SHARED_COLUMNS = [
     { key: 'provider', header: 'PROVIDER' },
@@ -51,6 +54,7 @@ const SHARED_COLUMNS = [
     { key: 'in', header: 'INPUT' },
     { key: 'out', header: 'OUTPUT' },
     { key: 'cached', header: 'CACHED' },
+    { key: 'cacheWrite', header: 'CACHE WRITE' },
 ];
 /**
  * The rows differ as much as the two envelopes do.
@@ -73,6 +77,7 @@ function buildUsageTable(rows, perHarness) {
         in: count(r.inputTokens),
         out: count(r.outputTokens),
         cached: count(r.cachedInputTokens),
+        cacheWrite: count(r.cacheCreationInputTokens),
     });
     if (perHarness) {
         const buckets = [...rows].sort((a, b) => String(a.bucketHour ?? '') < String(b.bucketHour ?? '') ? 1 : -1);
@@ -143,7 +148,7 @@ class HarnessesUsage extends base_command_1.BaseCommand {
             this.log('');
             this.log(`Total: ${count(totals.sessions)} sessions · ${usd(totals.totalCostUsd)} · ` +
                 `${count(totals.inputTokens)} in / ${count(totals.outputTokens)} out / ` +
-                `${count(totals.cachedInputTokens)} cached`);
+                `${count(totals.cachedInputTokens)} cached / ${count(totals.cacheCreationInputTokens)} cache write`);
             // SAY WHICH PROVIDERS THAT TOTAL COVERS.
             //
             // It was presented as the account total and is not: the ingestion path is

package/dist/commands/instructions/status.js

@@ -93,6 +93,19 @@ class InstructionsStatus extends base_command_1.BaseCommand {
             // the sentence.
             { key: 'status', header: 'STATUS', maxWidth: 78 },
         ], (line) => this.log(line));
+        // The re-bind commands the STATUS column points at. Only for a target whose
+        // daemon is not live while another daemon on the SAME machine is: that is
+        // the case a re-install could never fix (OSK-9961).
+        const rebinds = response.targets
+            .filter((target) => target.desiredState === 'installed' && target.status === 'pending')
+            .map((target) => (0, instruction_input_1.rebindCommandFor)(target, liveDaemonIds))
+            .filter((command) => Boolean(command));
+        if (rebinds.length > 0) {
+            this.log('');
+            this.log('Re-bind these targets to the daemon now running on their machine:');
+            for (const command of rebinds)
+                this.log(`  ${command}`);
+        }
         // Where the text went.
         //
         // The count in the STATUS column says skrr overwrote something you

package/dist/commands/instructions/update-target.d.ts

@@ -9,6 +9,7 @@ export default class InstructionsUpdateTarget extends BaseCommand {
         tracking: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         pin: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         label: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        daemon: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         json: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
     };
     run(): Promise<void>;

package/dist/commands/instructions/update-target.js

@@ -4,7 +4,7 @@ const core_1 = require("@oclif/core");
 const data_provider_1 = require("@skrr-ai/data-provider");
 const base_command_1 = require("../../base-command");
 class InstructionsUpdateTarget extends base_command_1.BaseCommand {
-    static description = 'Update a target prompt or version policy without changing its placement';
+    static description = 'Update a target prompt, version policy, label, or the daemon on its machine that syncs it';
     static args = {
         target: core_1.Args.string({ description: 'Target ID', required: true, ignoreStdin: true }),
     };
@@ -13,13 +13,20 @@ class InstructionsUpdateTarget extends base_command_1.BaseCommand {
         tracking: core_1.Flags.string({ description: 'Version policy', options: ['latest', 'pinned'] }),
         pin: core_1.Flags.string({ description: 'Pinned version ID (implies pinned tracking)' }),
         label: core_1.Flags.string({ description: 'New target label' }),
+        daemon: core_1.Flags.string({
+            description: 'Re-bind the target to this daemon. It must run on the same machine: a target stays with its file.',
+        }),
         json: core_1.Flags.boolean({ description: 'Output as JSON' }),
     };
     async run() {
         this.requireAuth();
         const { args, flags } = await this.parse(InstructionsUpdateTarget);
-        if (!flags.bundle && !flags.tracking && !flags.pin && flags.label === undefined) {
-            this.error('Provide --bundle, --tracking, --pin, or --label', { exit: 2 });
+        if (!flags.bundle &&
+            !flags.tracking &&
+            !flags.pin &&
+            flags.label === undefined &&
+            !flags.daemon) {
+            this.error('Provide --bundle, --tracking, --pin, --label, or --daemon', { exit: 2 });
         }
         const trackingMode = (flags.pin ? 'pinned' : flags.tracking);
         let response;
@@ -29,6 +36,7 @@ class InstructionsUpdateTarget extends base_command_1.BaseCommand {
                 trackingMode,
                 pinnedVersionId: flags.pin,
                 label: flags.label,
+                daemonId: flags.daemon,
             });
         }
         catch (error) {

package/dist/commands/login.js

@@ -40,8 +40,8 @@ const auth_storage_1 = require("../lib/auth-storage");
  */
 class Login extends base_command_1.BaseCommand {
     static description = 'Sign in to a skrr instance (PKCE localhost callback; device-code fallback). ' +
-        'On an interactive first login without a local runtime, skrr offers to install it as a ' +
-        'background service. Choose no, or set SKRR_SKIP_DAEMON_HANDOFF=1 before running this ' +
+        'On an interactive first login on a computer without the skrr background service, skrr ' +
+        'offers to install it. Choose no, or set SKRR_SKIP_DAEMON_HANDOFF=1 before running this ' +
         'command, to skip that optional setup.';
     static examples = [
         '<%= config.bin %> login',
@@ -56,7 +56,7 @@ class Login extends base_command_1.BaseCommand {
     static flags = {
         env: core_1.Flags.string({
             description: 'Deployment to sign in to. Shorthand for the matching --base-url, and the same ' +
-                'environment names the skrrd runtime CLI accepts.',
+                'environment names `skrrd`, the background service, accepts.',
             options: Object.keys(config_1.ENVIRONMENT_BASE_URLS),
         }),
         'base-url': core_1.Flags.string({
@@ -64,7 +64,7 @@ class Login extends base_command_1.BaseCommand {
             description: 'API base URL to save and use (e.g. https://skrr.ai)',
         }),
         server: core_1.Flags.string({
-            description: 'Alias for --base-url, matching the skrrd runtime CLI.',
+            description: 'Alias for --base-url, matching `skrrd`, the background service.',
         }),
         'device-code': core_1.Flags.boolean({
             description: 'Force the device-code flow (skip the PKCE localhost callback).',
@@ -206,7 +206,7 @@ class Login extends base_command_1.BaseCommand {
                         handoff = await (0, daemonHandoff_1.handOffToLocalDaemon)(process.env, { loginFlow: result.flow });
                     }
                     else if (setup.status === 'failed') {
-                        this.log(`Could not set up the runtime: ${setup.detail}.`);
+                        this.log(`Could not set up the background service: ${setup.detail}.`);
                     }
                     else {
                         this.log(`This machine is not set up — ${setup.detail}.`);

package/dist/commands/machines/list.js

@@ -23,7 +23,7 @@ class MachinesList extends base_command_1.BaseCommand {
         // with the one live machine at the top and a wall of dead ones after it
         // (OSK-7639). A list exists so someone can pick a row.
         all: core_1.Flags.boolean({
-            description: 'Include machines that are offline or terminated. Off by default — dead sandboxes ' +
+            description: 'Include machines that are offline, paused, stopped or terminated. Off by default — dead sandboxes ' +
                 'accumulate forever and bury the ones you can use.',
         }),
     };
@@ -48,7 +48,7 @@ class MachinesList extends base_command_1.BaseCommand {
         const all = machines;
         const shown = flags.all ? all : all.filter((m) => (0, machines_1.isReachableMachine)(m));
         if (shown.length === 0) {
-            this.log(`No machine is reachable right now. ${all.length} offline/terminated — see them with --all.`);
+            this.log(`No machine is reachable right now (${(0, machines_1.hiddenMachinesSummary)(all)}) — see them with --all.`);
             return;
         }
         (0, format_1.renderTable)(shown.map((m) => ({
@@ -67,16 +67,15 @@ class MachinesList extends base_command_1.BaseCommand {
             // printed "7/23" beside a status of `online`.
             harnesses: `${m.onlineHarnessCount}/${(0, machines_1.liveHarnessCount)(m)}`,
             platform: m.platform ? `${m.platform}${m.arch ? `/${m.arch}` : ''}` : '-',
-            seen: m.lastSeenAt
-                ? new Date(m.lastSeenAt).toISOString().slice(0, 16).replace('T', ' ')
-                : '-',
+            // Local time with the zone in the header, as `harnesses list` prints it (OSK-10005).
+            seen: (0, format_1.localStamp)(m.lastSeenAt),
         })), [
             { key: 'id', header: 'ID', verbatim: true },
             { key: 'name', header: 'NAME', maxWidth: 28 },
             { key: 'status', header: 'STATUS' },
             { key: 'harnesses', header: 'ONLINE' },
             { key: 'platform', header: 'PLATFORM' },
-            { key: 'seen', header: 'LAST SEEN' },
+            { key: 'seen', header: `LAST SEEN (${(0, format_1.localZone)()})` },
         ], (line) => this.log(line));
         // Why a machine is not `online`, under the table. `degraded` on its own is
         // unactionable — the dogfood note on this output was "I still do not know
@@ -89,10 +88,10 @@ class MachinesList extends base_command_1.BaseCommand {
                 this.log(`  ${m.preferences?.name || m.name}: ${m.statusReason}`);
             }
         }
-        const hidden = all.length - shown.length;
-        if (hidden > 0) {
+        if (shown.length < all.length) {
+            const hidden = all.filter((m) => !shown.includes(m));
             this.log('');
-            this.log(`${hidden} offline or terminated machine(s) hidden — pass --all to include them.`);
+            this.log(`${hidden.length} machine(s) hidden (${(0, machines_1.hiddenMachinesSummary)(hidden)}) — pass --all to include them.`);
         }
     }
 }

package/dist/commands/machines/show.js

@@ -4,6 +4,8 @@ const core_1 = require("@oclif/core");
 const base_command_1 = require("../../base-command");
 const format_1 = require("../../lib/format");
 const machines_1 = require("../../lib/machines");
+const cli_installers_1 = require("../../lib/cli-installers");
+const harness_labels_1 = require("../../lib/harness-labels");
 /** One machine: its identity, its harnesses, and what you may do to it. */
 class MachinesShow extends base_command_1.BaseCommand {
     static description = 'Show one machine — its identity, harnesses, and available actions';
@@ -49,7 +51,10 @@ class MachinesShow extends base_command_1.BaseCommand {
         this.log(`${machine.preferences?.name || machine.name}`);
         this.log(`  id           ${machine.id}`);
         this.log(`  identity     ${machine.identityKind}`);
-        this.log(`  status       ${machine.status}`);
+        // The label the lists print. A paused lease read `paused` in both tables and
+        // `offline` here, with the reason one line below (OSK-9996). `--json` keeps
+        // the server's `status`; the lease state rides beside it.
+        this.log(`  status       ${(0, machines_1.machineStateLabel)(machine)}`);
         // The status alone does not say what to do. Naming the rows that decided it
         // is the actionable half — bring that provider back, or forget the row.
         if (machine.statusReason)
@@ -61,7 +66,11 @@ class MachinesShow extends base_command_1.BaseCommand {
         if (machine.platform) {
             this.log(`  platform     ${machine.platform}${machine.arch ? `/${machine.arch}` : ''}`);
         }
-        this.log(`  last seen    ${machine.lastSeenAt ?? '-'}`);
+        // Local time, zone named — the same clock `harnesses list` prints. This line
+        // printed a raw UTC ISO string while the harness table below printed UTC
+        // with no marker, so one row read 15:26 in `harnesses list` and 22:26 here
+        // (OSK-10005).
+        this.log(`  last seen    ${machine.lastSeenAt ? `${(0, format_1.localStamp)(machine.lastSeenAt)} ${(0, format_1.localZone)()}` : '-'}`);
         if (machine.preferences?.description) {
             this.log(`  description  ${machine.preferences.description}`);
         }
@@ -78,6 +87,28 @@ class MachinesShow extends base_command_1.BaseCommand {
         // header whose count read like a summary of rows it then printed anyway
         // (OSK-9389). `--all` shows them, and `--json` always carries every row.
         const shown = flags.all ? harnesses : harnesses.filter((h) => !h.superseded);
+        // The daemon's own standing with skrr is ONE fact about the machine, not a
+        // per-provider one: it is written across every row of a daemon at once. It
+        // sat in a per-row column and answered `ok` for a Devin its CLI called
+        // "Not logged in" (OSK-9265), so it is printed once, here.
+        const daemonSignIn = harnesses.find((h) => !h.superseded && h.authStatus)?.authStatus;
+        if (daemonSignIn)
+            this.log(`  daemon auth  ${daemonSignIn}  (the daemon's sign-in to skrr)`);
+        // Per-provider readiness — installed, too old, signed in — asked of the
+        // daemon itself, so only while it is connected. Best-effort: a daemon that
+        // cannot answer leaves the column out rather than failing the command.
+        // Keyed by DAEMON as well as provider: one machine can run several daemons
+        // (profiles), and each answers only for itself.
+        // The same read `harnesses list` makes (readinessForRows): one per daemon,
+        // in parallel and bounded.
+        const daemonIds = [
+            ...new Set(shown
+                .filter((h) => h.status === 'online' && !h.superseded && h.daemonId)
+                .map((h) => h.daemonId)),
+        ];
+        const rowReadiness = await (0, cli_installers_1.readinessForRows)(shown, this.resolvedCredential);
+        const readinessFor = rowReadiness.lookup;
+        const readiness = rowReadiness.answered > 0 ? rowReadiness : null;
         this.log('');
         this.log(`Harnesses (${machine.onlineHarnessCount}/${live} online` +
             (flags.all && superseded > 0 ? `, ${superseded} superseded by newer registrations` : '') +
@@ -85,36 +116,34 @@ class MachinesShow extends base_command_1.BaseCommand {
         if (shown.length > 0) {
             (0, format_1.renderTable)(shown.map((h) => ({
                 id: (0, format_1.formatCell)(h.id),
-                provider: (0, format_1.formatCell)(h.provider),
+                // Canonical, and `none` for a no-engine placeholder — the stored
+                // `oversky` printed here after the harnesses list stopped (OSK-9649).
+                provider: (0, harness_labels_1.harnessProviderLabel)(h.provider),
                 // Liveness only. Whether a newer registration replaced the row is a
                 // different fact — a superseded row can have been online — so it
                 // gets its own column rather than overwriting this one.
                 status: (0, format_1.formatCell)(h.status),
                 registration: h.superseded ? 'superseded' : 'current',
-                // `authStatus` is the DAEMON's standing with skrr, not this
-                // provider's standing with its vendor. It is written across every row
-                // of a daemon at once (`HarnessService.markAuthOkAfterRegister` does
-                // one `updateMany({owner, daemonId})`), so it is structurally the
-                // same value for all of them and can never answer "is this harness
-                // signed in". Under a bare `AUTH` header it read as the second
-                // question and answered `ok` for a Devin whose own CLI said
-                // "Not logged in." The header now names what the value is.
-                auth: (0, format_1.formatCell)(h.authStatus),
-                seen: h.lastSeenAt
-                    ? new Date(h.lastSeenAt).toISOString().slice(0, 16).replace('T', ' ')
-                    : '-',
+                readiness: readinessFor(h)?.label ?? '-',
+                seen: (0, format_1.localStamp)(h.lastSeenAt),
             })), [
                 { key: 'id', header: 'HARNESS ID' },
                 { key: 'provider', header: 'PROVIDER' },
                 { key: 'status', header: 'STATUS' },
                 ...(flags.all ? [{ key: 'registration', header: 'REGISTRATION' }] : []),
-                { key: 'auth', header: 'DAEMON AUTH' },
-                { key: 'seen', header: 'LAST SEEN' },
+                ...(readiness ? [{ key: 'readiness', header: 'READINESS' }] : []),
+                { key: 'seen', header: `LAST SEEN (${(0, format_1.localZone)()})` },
             ], (line) => this.log(`  ${line}`));
         }
         if (!flags.all && superseded > 0) {
             this.log(`  ${superseded} superseded registration(s) hidden — pass --all to include them.`);
         }
+        if (readiness && shown.some((h) => !readinessFor(h))) {
+            this.log('  READINESS "-": offline, or its daemon does not report credential state for that provider.');
+        }
+        if (!readiness && daemonIds.length > 0) {
+            this.log(`  Readiness per provider: skrr harnesses installers --daemon ${daemonIds[0]}`);
+        }
         // Print what is PERMITTED, not the whole control map: a list of six
         // booleans mostly reading false is noise, and the useful question is
         // "what can I do to this machine right now".