@skrr-ai/cli 0.1.41 → 0.1.43

package/dist/commands/balance/overage.js

@@ -1,10 +1,11 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 const core_1 = require("@oclif/core");
+const auth_core_1 = require("@skrr-ai/auth-core");
 const base_command_1 = require("../../base-command");
 const balance_1 = require("../../lib/balance");
 class BalanceOverage extends base_command_1.BaseCommand {
-    static description = 'Enable or disable personal Sky Code overage after included allowance is exhausted';
+    static description = `Enable or disable personal ${auth_core_1.FIRST_PARTY_HARNESS.displayName} overage after included allowance is exhausted`;
     static examples = [
         '<%= config.bin %> balance overage enabled',
         '<%= config.bin %> balance overage disabled',
@@ -12,7 +13,7 @@ class BalanceOverage extends base_command_1.BaseCommand {
     ];
     static args = {
         state: core_1.Args.string({
-            description: 'Whether personal stored balance may pay for Sky Code overage',
+            description: `Whether personal stored balance may pay for ${auth_core_1.FIRST_PARTY_HARNESS.displayName} overage`,
             required: true,
             options: ['enabled', 'disabled'],
             ignoreStdin: true,
@@ -34,7 +35,7 @@ class BalanceOverage extends base_command_1.BaseCommand {
             this.log(JSON.stringify({ ownerType: 'user', overageEnabled: result?.enabled === true }, null, 2));
             return;
         }
-        this.log(`Sky Code overage ${result?.enabled ? 'enabled' : 'disabled'} for your personal billing account.`);
+        this.log(`${auth_core_1.FIRST_PARTY_HARNESS.displayName} overage ${result?.enabled ? 'enabled' : 'disabled'} for your personal billing account.`);
         this.log(result?.enabled
             ? 'New admissions may use stored balance after included allowance is exhausted.'
             : 'New admissions will stop when included allowance is exhausted.');

package/dist/commands/balance/plan.js

@@ -2,12 +2,13 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.renderSkyCodePlan = renderSkyCodePlan;
 const core_1 = require("@oclif/core");
+const auth_core_1 = require("@skrr-ai/auth-core");
 const data_provider_1 = require("@skrr-ai/data-provider");
 const base_command_1 = require("../../base-command");
 const balance_1 = require("../../lib/balance");
 const web_url_1 = require("../../lib/web-url");
 class BalancePlan extends base_command_1.BaseCommand {
-    static description = 'Show your Sky Code plan, renewal state, available tiers, and the matching lifecycle page';
+    static description = `Show your ${auth_core_1.FIRST_PARTY_HARNESS.displayName} plan, renewal state, available tiers, and the matching lifecycle page`;
     static examples = [
         '<%= config.bin %> balance plan',
         '<%= config.bin %> balance plan --json',
@@ -33,7 +34,7 @@ class BalancePlan extends base_command_1.BaseCommand {
 }
 exports.default = BalancePlan;
 function renderSkyCodePlan(subscription, lifecycleUrl, log) {
-    log(`Sky Code plan — ${subscription.tierName}`);
+    log(`${auth_core_1.FIRST_PARTY_HARNESS.displayName} plan — ${subscription.tierName}`);
     log(`  Status                  ${subscription.status}`);
     log(`  Price                   $${subscription.monthlyPriceUsd}/month`);
     log(`  Current period          ${subscription.currentPeriodStart ?? 'not started'}`);
@@ -43,10 +44,13 @@ function renderSkyCodePlan(subscription, lifecycleUrl, log) {
     log(`  Concurrent sessions     ${subscription.concurrentSessions ?? 'not reported'}`);
     log(`  Requests per minute     ${subscription.rateLimitPerMin}`);
     log('');
-    log('Available Sky Code plans:');
-    for (const key of data_provider_1.SKY_CODE_PLAN_KEYS.filter((plan) => plan !== 'free')) {
-        const plan = data_provider_1.SKY_CODE_PLAN_CATALOG[key];
-        log(`  ${plan.displayName.padEnd(18)} $${plan.monthlyPriceUsd}/month · ` +
+    log(`Available ${auth_core_1.FIRST_PARTY_HARNESS.displayName} plans:`);
+    const paidPlans = data_provider_1.SKY_CODE_PLAN_KEYS.filter((plan) => plan !== 'free').map((key) => data_provider_1.SKY_CODE_PLAN_CATALOG[key]);
+    // Padded to the longest name rather than a fixed width: plan names embed the
+    // product's display name, whose length is not this renderer's to assume.
+    const nameWidth = Math.max(...paidPlans.map((plan) => plan.displayName.length)) + 1;
+    for (const plan of paidPlans) {
+        log(`  ${plan.displayName.padEnd(nameWidth)} $${plan.monthlyPriceUsd}/month · ` +
             `${(0, data_provider_1.usageMicrosToDisplayCredits)(plan.includedUsageMicros).toLocaleString()} monthly credits · ` +
             `${(0, data_provider_1.usageMicrosToDisplayCredits)(plan.fiveHourUsageMicros).toLocaleString()} per 5 hours · ` +
             `${plan.concurrentSessions} sessions · ${plan.requestsPerMinute} RPM`);

package/dist/commands/balance/usage/events.js

@@ -2,10 +2,11 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.renderSkyCodeUsageEvents = renderSkyCodeUsageEvents;
 const core_1 = require("@oclif/core");
+const auth_core_1 = require("@skrr-ai/auth-core");
 const base_command_1 = require("../../../base-command");
 const balance_1 = require("../../../lib/balance");
 class BalanceUsageEvents extends base_command_1.BaseCommand {
-    static description = 'List the Sky Code charges and run/session attribution behind aggregate allowance usage';
+    static description = `List the ${auth_core_1.FIRST_PARTY_HARNESS.displayName} charges and run/session attribution behind aggregate allowance usage`;
     static examples = [
         '<%= config.bin %> balance usage events',
         '<%= config.bin %> balance usage events --limit 20 --json',
@@ -44,7 +45,7 @@ class BalanceUsageEvents extends base_command_1.BaseCommand {
 }
 exports.default = BalanceUsageEvents;
 function renderSkyCodeUsageEvents(events, log) {
-    log(`Sky Code usage events · ${events.ownerType} ${events.ownerId}`);
+    log(`${auth_core_1.FIRST_PARTY_HARNESS.displayName} usage events · ${events.ownerType} ${events.ownerId}`);
     log(`  Window ${events.from} to ${events.to}`);
     if (events.items.length === 0) {
         log('  No usage events in this window.');

package/dist/commands/balance/usage.js

@@ -2,6 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.renderSkyCodeUsage = renderSkyCodeUsage;
 const core_1 = require("@oclif/core");
+const auth_core_1 = require("@skrr-ai/auth-core");
 const base_command_1 = require("../../base-command");
 const balance_1 = require("../../lib/balance");
 /**
@@ -40,7 +41,7 @@ class BalanceUsage extends base_command_1.BaseCommand {
 }
 exports.default = BalanceUsage;
 function renderSkyCodeUsage(usage, log) {
-    log(`Sky Code ${usage.plan ?? 'current'} plan · ${usage.ownerType} ${usage.ownerId}`);
+    log(`${auth_core_1.FIRST_PARTY_HARNESS.displayName} ${usage.plan ?? 'current'} plan · ${usage.ownerType} ${usage.ownerId}`);
     log(`  Monthly used            ${(0, balance_1.formatCreditsWithUsd)(usage.monthly.usedUsageMicros)}`);
     log(`  Monthly reserved        ${(0, balance_1.formatCreditsWithUsd)(usage.monthly.reservedUsageMicros)}`);
     log(`  Monthly remaining       ${(0, balance_1.formatCreditsWithUsd)(usage.monthly.remainingUsageMicros)}`);

package/dist/commands/browser/install.js

@@ -23,8 +23,9 @@ class BrowserInstall extends core_1.Command {
     async run() {
         const { flags } = await this.parse(BrowserInstall);
         const args = ['install'];
-        // Any spelling of the first-party harness is accepted here and handed to the
-        // daemon in the spelling every installed daemon understands.
+        // Any ACCEPTED spelling of the first-party harness is handed to the daemon in
+        // the wire spelling; anything else — a retired spelling included — is forwarded
+        // unchanged for the daemon's own parser to accept or refuse.
         if (flags.harness)
             args.push('--harness', (0, harness_provider_input_1.daemonHarnessArgument)(flags.harness));
         if (flags.config)

package/dist/commands/browser/uninstall.js

@@ -23,8 +23,9 @@ class BrowserUninstall extends core_1.Command {
     async run() {
         const { flags } = await this.parse(BrowserUninstall);
         const args = ['uninstall'];
-        // Any spelling of the first-party harness is accepted here and handed to the
-        // daemon in the spelling every installed daemon understands.
+        // Any ACCEPTED spelling of the first-party harness is handed to the daemon in
+        // the wire spelling; anything else — a retired spelling included — is forwarded
+        // unchanged for the daemon's own parser to accept or refuse.
         if (flags.harness)
             args.push('--harness', (0, harness_provider_input_1.daemonHarnessArgument)(flags.harness));
         if (flags.config)

package/dist/commands/code/install.js

@@ -4,7 +4,6 @@ const core_1 = require("@oclif/core");
 const auth_core_1 = require("@skrr-ai/auth-core");
 const base_command_1 = require("../../base-command");
 const api_fetch_1 = require("../../lib/api-fetch");
-const daemon_ref_1 = require("../../lib/daemon-ref");
 const daemon_target_1 = require("../../lib/daemon-target");
 const first_party_harness_1 = require("../../lib/first-party-harness");
 /**
@@ -84,11 +83,11 @@ class CodeInstall extends base_command_1.BaseCommand {
             // survive in mine.
             const reason = await this.installerNote(daemonId);
             if (reason) {
-                this.log(`Nothing to do on ${(0, daemon_ref_1.formatDaemonRef)(daemonId)} — ${reason}`);
+                this.log(`Nothing to do on ${daemonId} — ${reason}`);
                 return;
             }
             this.failWithCliError({
-                message: `The daemon on ${(0, daemon_ref_1.formatDaemonRef)(daemonId)} accepted the request and returned no ` +
+                message: `The daemon on ${daemonId} accepted the request and returned no ` +
                     'install job, and does not say why. Nothing has been shown to start. ' +
                     `Check what it offers with \`${this.config.bin} harnesses installers --daemon ${daemonId}\`, and ` +
                     `\`${this.config.bin} code doctor\` here once you expect it to have landed.`,
@@ -104,7 +103,7 @@ class CodeInstall extends base_command_1.BaseCommand {
                 this.log(JSON.stringify({ daemonId, ...started }, null, 2));
                 return;
             }
-            this.log(`Install started on ${(0, daemon_ref_1.formatDaemonRef)(daemonId)} — job ${jobId}.`);
+            this.log(`Install started on ${daemonId} — job ${jobId}.`);
             return;
         }
         const job = await this.followJob(daemonId, jobId, flags.json === true);
@@ -202,8 +201,9 @@ class CodeInstall extends base_command_1.BaseCommand {
     async installerNote(daemonId) {
         try {
             const res = await (0, api_fetch_1.apiFetch)(`/api/daemons/${encodeURIComponent(daemonId)}/cli-installers`, { credential: this.resolvedCredential });
-            // Any spelling: a daemon lists the provider the way it registered it, and
-            // one that predates or postdates a rename spells it differently.
+            // Any accepted spelling: a daemon lists the provider the way it registered it,
+            // and during a rename's alias window one that predates or postdates the flip
+            // spells it differently.
             const row = (res.providers ?? []).find((p) => (0, auth_core_1.isFirstPartyHarnessProvider)(p.provider));
             const reason = row?.installDisabledReason?.trim();
             if (!reason)

package/dist/commands/followups/remind.js

@@ -95,6 +95,10 @@ class FollowupsRemind extends base_command_1.BaseCommand {
             return;
         }
         const row = response.followup;
+        if (response.reused && response.rescheduled) {
+            this.log(`Moved: ${row?.id} now fires at ${row?.nextRunAt ?? at} — the same reminder already existed, so it was rescheduled rather than duplicated.`);
+            return;
+        }
         if (response.reused) {
             this.log(`Already armed: ${row?.id} — the same reminder exists and was not duplicated.`);
             return;

package/dist/commands/harnesses/install.d.ts

@@ -1,4 +1,5 @@
 import { BaseCommand } from '../../base-command';
+import { type ManagedCliProviderState } from '../../lib/cli-installers';
 /**
  * Install one managed coding-agent CLI on a machine.
  *
@@ -33,9 +34,37 @@ export default class HarnessesInstall extends BaseCommand {
     static flags: {
         json: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
         daemon: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        update: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
     };
     run(): Promise<void>;
+    /**
+     * Update an installed CLI in place (OSK-10096).
+     *
+     * Asks the inventory first rather than posting blind: a daemon older than
+     * managed updates has no handler for the request and would leave it to time
+     * out, and a CLI that updates some other way (the copy inside Devin.app) has a
+     * reason the daemon already words. Both are answered before anything runs.
+     */
+    private update;
+    /**
+     * Start an install or update, and survive a gateway that cut the request off.
+     *
+     * The relay holds the request while the daemon answers, and a gateway can end
+     * it first: an update returned HTTP 504 after 21.9s while the job it started
+     * ran to success, and the caller was told the outcome was unknown (OSK-10096
+     * verifier). The daemon is the only party that knows whether the request
+     * arrived, so on a server-side failure we ask it, and follow the job it
+     * started rather than reporting a result we do not have.
+     */
+    private start;
+    /** Follow a job to its end, or report why it could not be followed (and return nothing). */
+    private follow;
     /** What the daemon says about this provider right now, best effort. */
     private installerNote;
     private daemonIdFor;
 }
+/**
+ * The next step after "Already installed.": how to update it, or where its
+ * update comes from — or nothing from a daemon that cannot say (OSK-10096).
+ */
+export declare function updateHint(provider: string, state: ManagedCliProviderState | undefined, bin: string): string | null;

package/dist/commands/harnesses/install.js

@@ -1,10 +1,10 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.updateHint = updateHint;
 const core_1 = require("@oclif/core");
 const data_provider_1 = require("@skrr-ai/data-provider");
 const base_command_1 = require("../../base-command");
 const cli_installers_1 = require("../../lib/cli-installers");
-const daemon_ref_1 = require("../../lib/daemon-ref");
 const daemon_target_1 = require("../../lib/daemon-target");
 /**
  * Install one managed coding-agent CLI on a machine.
@@ -32,10 +32,11 @@ const daemon_target_1 = require("../../lib/daemon-target");
  * come back as an opaque refusal.
  */
 class HarnessesInstall extends base_command_1.BaseCommand {
-    static description = 'Install a managed coding-agent CLI (claude, codex, devin, …) on one of your machines';
+    static description = 'Install a managed coding-agent CLI (claude, codex, devin, …) on one of your machines, or update one already installed (--update)';
     static examples = [
         '<%= config.bin %> harnesses install devin',
         '<%= config.bin %> harnesses install codex --daemon daemon_07c086e3c249_cli_default',
+        '<%= config.bin %> harnesses install claude --update',
     ];
     static args = {
         provider: core_1.Args.string({
@@ -49,6 +50,9 @@ class HarnessesInstall extends base_command_1.BaseCommand {
         daemon: core_1.Flags.string({
             description: 'Which machine to install on. Defaults to your only connected daemon; required when several are connected.',
         }),
+        update: core_1.Flags.boolean({
+            description: "Update the CLI already installed, with that CLI's own updater. When a CLI updates some other way (e.g. inside its desktop app), the daemon says so instead.",
+        }),
     };
     async run() {
         this.requireAuth();
@@ -66,14 +70,13 @@ class HarnessesInstall extends base_command_1.BaseCommand {
             listActiveDaemons: () => (0, daemon_target_1.listConnectedDaemons)(this.resolvedCredential),
         });
         const daemonId = this.daemonIdFor(target);
-        let start;
-        try {
-            start = await (0, cli_installers_1.startManagedCliInstall)(daemonId, provider, this.resolvedCredential);
-        }
-        catch (err) {
-            this.handleApiError(err);
+        if (flags.update) {
+            await this.update(daemonId, provider, Boolean(flags.json));
             return;
         }
+        const start = await this.start(daemonId, provider, () => (0, cli_installers_1.startManagedCliInstall)(daemonId, provider, this.resolvedCredential), Boolean(flags.json));
+        if (!start)
+            return;
         const jobId = start.job?.id;
         if (!start.started || !jobId) {
             // The daemon declined and already knows why. Read its own reason off the
@@ -83,27 +86,22 @@ class HarnessesInstall extends base_command_1.BaseCommand {
             const reason = start.provider?.installDisabledReason?.trim() ||
                 (await this.installerNote(daemonId, provider));
             this.log(reason ? `${provider}: ${reason}` : `${provider}: the daemon started no install job.`);
+            // "Already installed." used to be the end of the road: the product could
+            // install a CLI and then had no word about updating it (OSK-10096).
+            if (start.alreadyInstalled) {
+                const next = updateHint(provider, start.provider, this.config.bin);
+                if (next)
+                    this.log(next);
+            }
             return;
         }
+        // The raw id: it is what `--daemon` takes, and a formatDaemonRef prefix of a
+        // `daemon_<hash>_…` id reads `d_daemon_4...` for every local daemon (OSK-10182).
         if (!flags.json)
-            this.logToStderr(`Installing ${provider} on ${(0, daemon_ref_1.formatDaemonRef)(daemonId)}…`);
-        const outcome = await (0, cli_installers_1.followManagedCliInstallJob)({
-            daemonId,
-            jobId,
-            credential: this.resolvedCredential,
-            onLogLine: flags.json ? undefined : (line) => this.logToStderr(`  ${line}`),
-        });
-        if (outcome.kind === 'missing') {
-            this.error(`The daemon no longer has install job ${jobId}.`, { exit: 1 });
-            return;
-        }
-        if (outcome.kind === 'timeout') {
-            // Not a failure: the daemon is still working, and calling this failed
-            // would send someone to debug a download that is going fine.
-            this.error(`Still installing after ${Math.round(cli_installers_1.INSTALL_MAX_WAIT_MS / 60000)} minutes — the daemon is still working on job ${jobId}. Check \`${this.config.bin} harnesses installers\` in a while.`, { exit: 1 });
+            this.logToStderr(`Installing ${provider} on ${daemonId}…`);
+        const job = await this.follow(daemonId, jobId, 'install', Boolean(flags.json));
+        if (!job)
             return;
-        }
-        const job = outcome.job;
         if (flags.json) {
             this.log(JSON.stringify({ daemonId, provider, job }, null, 2));
             if (job.status !== 'succeeded')
@@ -123,6 +121,123 @@ class HarnessesInstall extends base_command_1.BaseCommand {
         const state = await this.installerNote(daemonId, provider, true);
         this.log(`${provider} installed.${state ? ` ${state}` : ''}`);
     }
+    /**
+     * Update an installed CLI in place (OSK-10096).
+     *
+     * Asks the inventory first rather than posting blind: a daemon older than
+     * managed updates has no handler for the request and would leave it to time
+     * out, and a CLI that updates some other way (the copy inside Devin.app) has a
+     * reason the daemon already words. Both are answered before anything runs.
+     */
+    async update(daemonId, provider, json) {
+        let inventory;
+        try {
+            inventory = await (0, cli_installers_1.listCliInstallers)(daemonId, this.resolvedCredential);
+        }
+        catch (err) {
+            this.handleApiError(err);
+            return;
+        }
+        const row = (inventory.providers ?? []).find((p) => (0, data_provider_1.normalizeManagedCliProvider)(p.provider) === provider);
+        if (!row || row.updatable === undefined) {
+            this.failWithCliError({
+                message: `The daemon ${daemonId} (${inventory.daemonVersion ?? 'version not reported'}) cannot update ${provider}: it predates managed updates. ` +
+                    `Update the daemon, then run this again — \`${this.config.bin} daemon status\` says how.`,
+                code: 'DAEMON_UPDATE_UNSUPPORTED',
+                exit: 1,
+                retryable: false,
+            });
+            return;
+        }
+        if (!row.updatable) {
+            this.failWithCliError({
+                message: `${provider}: ${row.updateDisabledReason?.trim() || 'the daemon cannot update it here.'}`,
+                code: 'CLI_NOT_UPDATABLE',
+                exit: 1,
+                retryable: false,
+            });
+            return;
+        }
+        const start = await this.start(daemonId, provider, () => (0, cli_installers_1.startManagedCliUpdate)(daemonId, provider, this.resolvedCredential), json);
+        if (!start)
+            return;
+        const jobId = start.job?.id;
+        if (!start.started || !jobId) {
+            this.log(start.alreadyRunning
+                ? `${provider}: an install or update is already running (job ${start.job?.id ?? 'unknown'}).`
+                : `${provider}: ${start.provider?.updateDisabledReason?.trim() || 'the daemon started no update job.'}`);
+            return;
+        }
+        if (!json) {
+            this.logToStderr(`Updating ${provider} ${row.version ? `${row.version} ` : ''}on ${daemonId}…`);
+        }
+        const job = await this.follow(daemonId, jobId, 'update', json);
+        if (!job)
+            return;
+        if (json) {
+            this.log(JSON.stringify({ daemonId, provider, job }, null, 2));
+            if (job.status !== 'succeeded')
+                process.exitCode = 1;
+            return;
+        }
+        if (job.status === 'failed') {
+            this.error(`Updating ${provider} failed: ${job.error || 'the daemon gave no reason.'}`, {
+                exit: 1,
+            });
+            return;
+        }
+        this.log((0, cli_installers_1.updateOutcomeLine)(job) ??
+            `${provider} updated${job.installedVersion ? ` to ${job.installedVersion}` : ''}.`);
+    }
+    /**
+     * Start an install or update, and survive a gateway that cut the request off.
+     *
+     * The relay holds the request while the daemon answers, and a gateway can end
+     * it first: an update returned HTTP 504 after 21.9s while the job it started
+     * ran to success, and the caller was told the outcome was unknown (OSK-10096
+     * verifier). The daemon is the only party that knows whether the request
+     * arrived, so on a server-side failure we ask it, and follow the job it
+     * started rather than reporting a result we do not have.
+     */
+    async start(daemonId, provider, begin, json) {
+        try {
+            return await begin();
+        }
+        catch (err) {
+            const status = err.status ?? 0;
+            if (status >= 500 || status === 408) {
+                const job = await (0, cli_installers_1.jobStartedDespiteTimeout)(daemonId, provider, this.resolvedCredential);
+                if (job?.id) {
+                    if (!json) {
+                        this.logToStderr(`The request to ${daemonId} did not come back (HTTP ${status}), but the daemon started job ${job.id}. Following it.`);
+                    }
+                    return { started: true, job };
+                }
+            }
+            this.handleApiError(err);
+            return undefined;
+        }
+    }
+    /** Follow a job to its end, or report why it could not be followed (and return nothing). */
+    async follow(daemonId, jobId, verb, json) {
+        const outcome = await (0, cli_installers_1.followManagedCliInstallJob)({
+            daemonId,
+            jobId,
+            credential: this.resolvedCredential,
+            onLogLine: json ? undefined : (line) => this.logToStderr(`  ${line}`),
+        });
+        if (outcome.kind === 'missing') {
+            this.error(`The daemon no longer has ${verb} job ${jobId}.`, { exit: 1 });
+            return undefined;
+        }
+        if (outcome.kind === 'timeout') {
+            // Not a failure: the daemon is still working, and calling this failed
+            // would send someone to debug a download that is going fine.
+            this.error(`Still ${verb === 'install' ? 'installing' : 'updating'} after ${Math.round(cli_installers_1.INSTALL_MAX_WAIT_MS / 60000)} minutes — the daemon is still working on job ${jobId}. Check \`${this.config.bin} harnesses installers\` in a while.`, { exit: 1 });
+            return undefined;
+        }
+        return outcome.job;
+    }
     /** What the daemon says about this provider right now, best effort. */
     async installerNote(daemonId, provider, readiness = false) {
         try {
@@ -175,3 +290,16 @@ class HarnessesInstall extends base_command_1.BaseCommand {
     }
 }
 exports.default = HarnessesInstall;
+/**
+ * The next step after "Already installed.": how to update it, or where its
+ * update comes from — or nothing from a daemon that cannot say (OSK-10096).
+ */
+function updateHint(provider, state, bin) {
+    if (!state || state.updatable === undefined)
+        return null;
+    if (state.updatable) {
+        return `To update it: ${bin} harnesses install ${provider} --update`;
+    }
+    const reason = state.updateDisabledReason?.trim();
+    return reason ? `Updating: ${reason}` : null;
+}

package/dist/commands/harnesses/installers.d.ts

@@ -1,4 +1,5 @@
 import { BaseCommand } from '../../base-command';
+import { type ManagedCliProviderState } from '../../lib/cli-installers';
 /**
  * What each managed provider's state is on one machine.
  *
@@ -43,3 +44,12 @@ export default class HarnessesInstallers extends BaseCommand {
      */
     private daemonIdFor;
 }
+/**
+ * What each installed CLI's update story is, as sentences under the table.
+ *
+ * Sentences, not a column: an update reason is "the copy inside Devin.app
+ * updates with that app", which no column fits. Silent for a daemon that
+ * reports no update fields at all — it cannot say, and inventing "no" for it
+ * would be worse than nothing.
+ */
+export declare function updateNotes(providers: readonly ManagedCliProviderState[], bin: string): string[];

package/dist/commands/harnesses/installers.js

@@ -1,5 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.updateNotes = updateNotes;
 const core_1 = require("@oclif/core");
 const base_command_1 = require("../../base-command");
 const data_provider_1 = require("@skrr-ai/data-provider");
@@ -126,6 +127,14 @@ class HarnessesInstallers extends base_command_1.BaseCommand {
             for (const note of notes)
                 this.log(`  ${note.provider}: ${note.detail}`);
         }
+        // The VERSION column is where a reader asks "can I get a newer one", and
+        // the answer lived only in `--json` (OSK-10096 verifier).
+        const updateLines = updateNotes(providers, this.config.bin);
+        if (updateLines.length > 0) {
+            this.log('');
+            for (const line of updateLines)
+                this.log(`  ${line}`);
+        }
         // A provider the platform knows and this daemon did not mention. Without
         // this it simply is not on the list, which reads as dropped support rather
         // than as an older daemon — `devin` arrived in the 0.8.45 daemon release, so 0.8.35
@@ -177,3 +186,25 @@ class HarnessesInstallers extends base_command_1.BaseCommand {
     }
 }
 exports.default = HarnessesInstallers;
+/**
+ * What each installed CLI's update story is, as sentences under the table.
+ *
+ * Sentences, not a column: an update reason is "the copy inside Devin.app
+ * updates with that app", which no column fits. Silent for a daemon that
+ * reports no update fields at all — it cannot say, and inventing "no" for it
+ * would be worse than nothing.
+ */
+function updateNotes(providers, bin) {
+    const lines = [];
+    for (const provider of providers) {
+        if (provider.updatable === true) {
+            lines.push(`${provider.provider}: update it with \`${bin} harnesses install ${provider.provider} --update\``);
+        }
+    }
+    for (const provider of providers) {
+        if (provider.updatable === false && provider.installed && provider.updateDisabledReason) {
+            lines.push(`${provider.provider}: ${provider.updateDisabledReason}`);
+        }
+    }
+    return lines;
+}

package/dist/commands/harnesses/list.js

@@ -421,8 +421,9 @@ class HarnessesList extends base_command_1.BaseCommand {
         // mode. Materialize that default before the request so JSON cannot quietly
         // return every historical offline row while the table shows seven live ones.
         const status = flags.online ? 'online' : (flags.status ?? (flags.all ? undefined : 'online'));
-        // Any spelling of the first-party harness filters the same rows; the server is
-        // asked for the canonical one, which it matches against every stored spelling.
+        // Any accepted spelling of the first-party harness filters the same rows; the
+        // server is asked for the canonical one, which it matches against every
+        // accepted stored spelling.
         const provider = flags.provider ? (0, harness_provider_input_1.canonicalHarnessInput)(flags.provider) : undefined;
         const params = new URLSearchParams();
         const serverStatus = serverStatusParam(status);

package/dist/commands/skills/import-as-actions.js

@@ -140,35 +140,26 @@ class SkillsImportAsActions extends base_command_1.BaseCommand {
             this.handleApiError(err);
             return;
         }
-        const failed = result.results.filter((r) => r.status === 'failed');
+        const { rows, summary, failed } = (0, local_skills_1.summarizeSkillActionImport)(result);
         if (flags.json) {
             this.log(JSON.stringify(result, null, 2));
         }
         else {
-            (0, format_1.renderTable)(result.results.map((r) => ({
-                skill: r.name,
-                import: r.status,
-                action: r.actionCreated
-                    ? 'created'
-                    : (r.actionSkippedReason ??
-                        r.actionError ??
-                        (r.status === 'failed' ? '-' : 'not added')),
-                detail: r.error ?? '',
-            })), [
+            (0, format_1.renderTable)(rows, [
                 { key: 'skill', header: 'SKILL' },
                 { key: 'import', header: 'IMPORT' },
                 { key: 'action', header: 'ACTION' },
                 { key: 'detail', header: 'DETAIL' },
             ], (line) => this.log(line));
-            this.log(`${result.actionsCreated} action(s) created on ${result.targetAgentId}; ` +
-                `${failed.length} skill(s) failed.`);
+            this.log(summary);
             if (result.actionsError) {
                 this.log(`The skills imported, but their actions could not be added: ${result.actionsError.message}`);
             }
         }
         // Partial success is normal and reported above; exit non-zero only when
-        // something the caller asked for did not happen.
-        if (failed.length > 0 || result.actionsError)
+        // something the caller asked for did not happen — including an action the
+        // full library could not take.
+        if (failed)
             this.exit(1);
     }
 }

package/dist/commands/tasks/attachments/set-role.d.ts

@@ -0,0 +1,24 @@
+import { BaseCommand } from '../../../base-command';
+/**
+ * `skrr tasks attachments set-role <task> <attachment> --role …`
+ *
+ * The one way to change what an existing asset IS on a Task. Its real use is
+ * promotion: an agent may only upload `evidence` or `deliverable`, because an
+ * `input` is forwarded into every future Run of the Task — so when an agent's
+ * screenshot should become an input, a person promotes it here. The server
+ * refuses the call from an agent, whatever credential it holds, and moves the
+ * asset's ledger link with the role.
+ */
+export default class TasksAttachmentsSetRole extends BaseCommand {
+    static description: string;
+    static examples: string[];
+    static args: {
+        id: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;
+        attachmentId: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static flags: {
+        role: import("@oclif/core/lib/interfaces").OptionFlag<string, import("@oclif/core/lib/interfaces").CustomOptions>;
+        json: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+    };
+    run(): Promise<void>;
+}