@skrr-ai/cli 0.1.42 → 0.1.44

package/dist/commands/views/list.js

@@ -4,6 +4,7 @@ const core_1 = require("@oclif/core");
 const data_provider_1 = require("@skrr-ai/data-provider");
 const base_command_1 = require("../../base-command");
 const format_1 = require("../../lib/format");
+const task_view_render_1 = require("../../lib/task-view-render");
 const web_url_1 = require("../../lib/web-url");
 class ViewsList extends base_command_1.BaseCommand {
     static description = 'List personalized Task Views';
@@ -30,13 +31,13 @@ class ViewsList extends base_command_1.BaseCommand {
             name: view.name,
             type: view.viewType,
             group: view.groupBy,
-            tasks: view.taskIds.length ? String(view.taskIds.length) : 'criteria',
+            selection: (0, task_view_render_1.summarizeTaskViewSelection)(view),
             id: view.id,
         })), [
             { key: 'name', header: 'NAME', maxWidth: 36 },
             { key: 'type', header: 'TYPE' },
             { key: 'group', header: 'GROUP BY' },
-            { key: 'tasks', header: 'SELECTION' },
+            { key: 'selection', header: 'SELECTION', maxWidth: 48 },
             { key: 'id', header: 'ID' },
         ], (line) => this.log(line));
     }

package/dist/commands/views/show.js

@@ -33,6 +33,8 @@ class ViewsShow extends base_command_1.BaseCommand {
             this.log(line);
         }
         this.log(result.url);
+        // The criteria are half the answer; the tasks they select are the other.
+        this.log(`Tasks: ${this.config.bin} tasks list --view ${view.id}`);
     }
 }
 exports.default = ViewsShow;

package/dist/lib/agentic-stream.d.ts

@@ -1,9 +1,15 @@
 /**
- * The answer a question gets when no terminal exists to ask it on. Written to the
- * agent, so it says what happened and what to do rather than pretending a person
- * replied.
+ * Why a question was dismissed when no terminal exists to ask it on. It is the
+ * REASON for a dismissal, never an answer: it travels as the value of the
+ * reserved `_dismissed` key, which every consumer already reads as "nobody
+ * answered" — the web card sends the same key when a person closes it.
+ *
+ * It used to be written into every question's answer slot (OSK-9767). That was
+ * harmless text for Claude's AskUserQuestion, but a Devin form elicitation read
+ * it as the field's value and was answered `accept` with this sentence filled in
+ * — consent nobody gave, on a form nobody saw (OSK-10274).
  */
-export declare const NON_INTERACTIVE_QUESTION_ANSWER: string;
+export declare const NON_INTERACTIVE_QUESTION_DISMISSAL: string;
 export type AgenticStreamEvent = {
     type: string;
     sessionId?: string;

package/dist/lib/agentic-stream.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.AgenticStreamClient = exports.USER_CONNECTION_CAP_CODE = exports.NON_INTERACTIVE_QUESTION_ANSWER = void 0;
+exports.AgenticStreamClient = exports.USER_CONNECTION_CAP_CODE = exports.NON_INTERACTIVE_QUESTION_DISMISSAL = void 0;
 exports.writeJsonLine = writeJsonLine;
 exports.envelopesText = envelopesText;
 exports.envelopeKey = envelopeKey;
@@ -20,11 +20,17 @@ const data_provider_1 = require("@skrr-ai/data-provider");
 const config_1 = require("./config");
 const publicEndpoints_generated_1 = require("./publicEndpoints.generated");
 /**
- * The answer a question gets when no terminal exists to ask it on. Written to the
- * agent, so it says what happened and what to do rather than pretending a person
- * replied.
+ * Why a question was dismissed when no terminal exists to ask it on. It is the
+ * REASON for a dismissal, never an answer: it travels as the value of the
+ * reserved `_dismissed` key, which every consumer already reads as "nobody
+ * answered" — the web card sends the same key when a person closes it.
+ *
+ * It used to be written into every question's answer slot (OSK-9767). That was
+ * harmless text for Claude's AskUserQuestion, but a Devin form elicitation read
+ * it as the field's value and was answered `accept` with this sentence filled in
+ * — consent nobody gave, on a form nobody saw (OSK-10274).
  */
-exports.NON_INTERACTIVE_QUESTION_ANSWER = 'No answer: this turn was started non-interactively (no terminal), so nobody can reply to ' +
+exports.NON_INTERACTIVE_QUESTION_DISMISSAL = 'No answer: this turn was started non-interactively (no terminal), so nobody can reply to ' +
     'questions. Proceed with your best judgement, or finish by stating exactly what you need.';
 /**
  * Write exactly one complete JSON value on one line.
@@ -710,13 +716,21 @@ class AgenticStreamClient {
         // "Not answered … timed out", at the cost of the whole wait. Answer at once
         // instead, saying why, so the agent proceeds or states what it needs. An
         // explicit `input` (tests, an embedding caller) is treated as interactive.
+        //
+        // "At once" is a DISMISSAL, never an answer. Nothing goes in any question's
+        // answer slot: a harness that turns answers into structured consent (an ACP
+        // form elicitation) would otherwise accept whatever text sits there
+        // (OSK-10274). The reason rides on `_dismissed`, where the server maps it to
+        // a dismissal for daemon sessions and a cloud session still reads why.
         const interactive = this.options.input !== undefined || Boolean(process.stdin.isTTY);
         const answers = {};
-        for (const question of event.questions ?? []) {
-            const answer = interactive
-                ? await this.ask(`${question.header ?? 'Question'}: ${question.question}\n> `)
-                : exports.NON_INTERACTIVE_QUESTION_ANSWER;
-            answers[question.header ?? question.question] = answer;
+        if (interactive) {
+            for (const question of event.questions ?? []) {
+                answers[question.header ?? question.question] = await this.ask(`${question.header ?? 'Question'}: ${question.question}\n> `);
+            }
+        }
+        else {
+            answers._dismissed = exports.NON_INTERACTIVE_QUESTION_DISMISSAL;
         }
         if (event.questionId && this.socket) {
             this.socket.emit('question:answer', {
@@ -824,7 +838,7 @@ class AgenticStreamClient {
             this.renderedText = this.accumulated;
         }
         else if (event.type === 'question.answered' && event.nonInteractive) {
-            output.write('\n[question] no terminal to answer on, so the agent was told to proceed without an answer\n');
+            output.write('\n[question] no terminal to answer on, so the question was dismissed unanswered\n');
             this.renderedText = this.accumulated;
         }
     }

package/dist/lib/api-fetch.js

@@ -93,9 +93,14 @@ async function apiFetch(pathOrUrl, opts = {}) {
             ? assertTrustedAutonomousUrl(pathOrUrl, baseURL)
             : pathOrUrl
         : `${baseURL.replace(/\/+$/, '')}${pathOrUrl.startsWith('/') ? '' : '/'}${pathOrUrl}`;
+    // A FormData body passes through untouched — fetch sets the multipart
+    // boundary itself, and stringifying would destroy it. Upload commands
+    // (tasks attachments) need this on the session-scoped path, which is not
+    // in dataService.
+    const isFormData = typeof FormData !== 'undefined' && opts.body instanceof FormData;
     let body;
     if (opts.body !== undefined && method !== 'GET') {
-        body = JSON.stringify(opts.body);
+        body = isFormData ? opts.body : JSON.stringify(opts.body);
     }
     // Same rule as every `dataService` write (`@skrr-ai/data-provider`
     // idempotency), chosen once so the 401 retries below resend the same key.
@@ -145,7 +150,7 @@ async function apiFetch(pathOrUrl, opts = {}) {
             Accept: 'application/json',
             'X-Oversky-Origin': (0, refresh_1.getCliOrigin)(),
         };
-        if (opts.body !== undefined && method !== 'GET') {
+        if (opts.body !== undefined && method !== 'GET' && !isFormData) {
             headers['Content-Type'] = 'application/json';
         }
         if (credential.token) {

package/dist/lib/cli-installers.d.ts

@@ -34,10 +34,7 @@ export interface ManagedCliProviderState {
     updateDisabledReason?: string | null;
     platformSupported?: boolean;
     authentication?: ManagedCliAuthentication | null;
-    job?: {
-        id?: string;
-        status?: string;
-    } | null;
+    job?: ManagedCliInstallJob | null;
 }
 export interface CliInstallersResponse {
     daemonId?: string;
@@ -155,6 +152,7 @@ export interface ManagedCliInstallJob {
     status: 'queued' | 'running' | 'succeeded' | 'failed';
     /** `update` for an in-place update; absent from an older daemon, meaning install. */
     kind?: 'install' | 'update';
+    startedAt?: string;
     previousVersion?: string | null;
     installedVersion?: string | null;
     error?: string;
@@ -184,6 +182,17 @@ export interface StartInstallResponse {
     };
 }
 export declare function startManagedCliInstall(daemonId: string, provider: string, credential?: unknown): Promise<StartInstallResponse>;
+/**
+ * How long after a start request times out a job for the same provider is taken
+ * to be the one that request began.
+ *
+ * The relay holds the request while the daemon answers, and a gateway can cut
+ * that off at its own deadline: an update returned HTTP 504 after 21.9s while
+ * the job it started ran to success, and the caller was told the outcome was
+ * unknown (OSK-10096 verifier). A job that started within this window of the
+ * request is that request's job.
+ */
+export declare const START_TIMEOUT_JOB_WINDOW_MS = 120000;
 /** Ask the daemon to update an installed CLI in place (OSK-10096). */
 export declare function startManagedCliUpdate(daemonId: string, provider: string, credential?: unknown): Promise<StartInstallResponse>;
 /**
@@ -191,6 +200,16 @@ export declare function startManagedCliUpdate(daemonId: string, provider: string
  * "Updated Claude Code 2.1.270 → 2.1.280." or "Claude Code is still 2.1.270:
  * its updater found nothing newer." Null when the job does not carry both.
  */
+/**
+ * The job a timed-out start request began, or null when none can be claimed.
+ *
+ * Read from the daemon's own inventory rather than assumed: it is the only
+ * party that knows whether the request reached it.
+ */
+export declare function jobStartedDespiteTimeout(daemonId: string, provider: string, credential?: unknown, opts?: {
+    now?: number;
+    windowMs?: number;
+}): Promise<ManagedCliInstallJob | null>;
 export declare function updateOutcomeLine(job: ManagedCliInstallJob): string | null;
 export declare function readManagedCliInstallJob(daemonId: string, jobId: string, credential?: unknown): Promise<{
     job?: ManagedCliInstallJob;

package/dist/lib/cli-installers.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.INSTALL_POLL_INTERVAL_MS = exports.INSTALL_MAX_WAIT_MS = exports.ROW_READINESS_TIMEOUT_MS = exports.MANAGED_CLI_PROVIDER_SINCE = void 0;
+exports.INSTALL_POLL_INTERVAL_MS = exports.INSTALL_MAX_WAIT_MS = exports.START_TIMEOUT_JOB_WINDOW_MS = exports.ROW_READINESS_TIMEOUT_MS = exports.MANAGED_CLI_PROVIDER_SINCE = void 0;
 exports.describeProvidersNotOffered = describeProvidersNotOffered;
 exports.providersNotOffered = providersNotOffered;
 exports.listCliInstallers = listCliInstallers;
@@ -10,6 +10,7 @@ exports.readinessKey = readinessKey;
 exports.readinessForRows = readinessForRows;
 exports.startManagedCliInstall = startManagedCliInstall;
 exports.startManagedCliUpdate = startManagedCliUpdate;
+exports.jobStartedDespiteTimeout = jobStartedDespiteTimeout;
 exports.updateOutcomeLine = updateOutcomeLine;
 exports.readManagedCliInstallJob = readManagedCliInstallJob;
 exports.unseenLogLines = unseenLogLines;
@@ -88,12 +89,14 @@ function describeProvidersNotOffered(missing) {
         .join(', ');
 }
 function providersNotOffered(offered, known) {
-    // Canonicalize BOTH sides. An older daemon answers under the spelling it was
-    // built with — the 0.8.35 build reports the first-party harness under its
-    // older spelling, so a raw comparison against the current one reported it missing on
-    // a machine where it is installed and working. Caught by running this against
-    // the very daemon the finding was about: the first version of this helper
-    // said "Not offered: devin, <first-party harness>" when only `devin` was true.
+    // Canonicalize BOTH sides. A daemon answers under the spelling it was built
+    // with — during the rename window the 0.8.35 build reported the first-party
+    // harness under its older spelling, so a raw comparison against the current
+    // one reported it missing on a machine where it was installed and working (the
+    // first version of this helper said "Not offered: devin, <first-party
+    // harness>" when only `devin` was true). This is INGRESS, so it canonicalizes
+    // accepted spellings only: since contract a retired spelling is not the
+    // harness, and a daemon still answering under one predates the wire release.
     const seen = new Set((offered ?? []).map((provider) => canonical(provider.provider)).filter(Boolean));
     return known.filter((provider) => !seen.has(canonical(provider)));
 }
@@ -126,9 +129,17 @@ function readinessOf(provider) {
                 ok: false,
             };
         }
+        // Every other not-ready state tells the reader what to do next, so this one
+        // does too. Name the install command only when the daemon says it can
+        // install the provider. Otherwise the daemon's own reason, or the bare
+        // fact, is the whole answer.
+        const key = canonical(provider.provider);
         return {
             label: 'not-installed',
-            detail: provider.installDisabledReason || 'No binary for this provider on this machine.',
+            detail: provider.installDisabledReason ||
+                (provider.installable === true && key
+                    ? `No binary for this provider on this machine. Install it with \`skrr harnesses install ${key}\`.`
+                    : 'No binary for this provider on this machine.'),
             ok: false,
         };
     }
@@ -214,6 +225,17 @@ async function readinessForRows(rows, credential, opts = {}) {
 async function startManagedCliInstall(daemonId, provider, credential) {
     return (0, api_fetch_1.apiFetch)(`/api/daemons/${encodeURIComponent(daemonId)}/cli-installers/${encodeURIComponent(provider)}/install`, { method: 'POST', body: {}, credential: credential });
 }
+/**
+ * How long after a start request times out a job for the same provider is taken
+ * to be the one that request began.
+ *
+ * The relay holds the request while the daemon answers, and a gateway can cut
+ * that off at its own deadline: an update returned HTTP 504 after 21.9s while
+ * the job it started ran to success, and the caller was told the outcome was
+ * unknown (OSK-10096 verifier). A job that started within this window of the
+ * request is that request's job.
+ */
+exports.START_TIMEOUT_JOB_WINDOW_MS = 120_000;
 /** Ask the daemon to update an installed CLI in place (OSK-10096). */
 async function startManagedCliUpdate(daemonId, provider, credential) {
     return (0, api_fetch_1.apiFetch)(`/api/daemons/${encodeURIComponent(daemonId)}/cli-installers/${encodeURIComponent(provider)}/update`, { method: 'POST', body: {}, credential: credential });
@@ -223,6 +245,32 @@ async function startManagedCliUpdate(daemonId, provider, credential) {
  * "Updated Claude Code 2.1.270 → 2.1.280." or "Claude Code is still 2.1.270:
  * its updater found nothing newer." Null when the job does not carry both.
  */
+/**
+ * The job a timed-out start request began, or null when none can be claimed.
+ *
+ * Read from the daemon's own inventory rather than assumed: it is the only
+ * party that knows whether the request reached it.
+ */
+async function jobStartedDespiteTimeout(daemonId, provider, credential, opts = {}) {
+    let response;
+    try {
+        response = await listCliInstallers(daemonId, credential);
+    }
+    catch {
+        return null;
+    }
+    const row = (response.providers ?? []).find((entry) => canonical(entry.provider) === canonical(provider));
+    const job = row?.job;
+    if (!job?.id)
+        return null;
+    if (job.status === 'queued' || job.status === 'running')
+        return job;
+    const startedAt = job.startedAt ? Date.parse(job.startedAt) : NaN;
+    if (!Number.isFinite(startedAt))
+        return null;
+    const now = opts.now ?? Date.now();
+    return now - startedAt <= (opts.windowMs ?? exports.START_TIMEOUT_JOB_WINDOW_MS) ? job : null;
+}
 function updateOutcomeLine(job) {
     const before = job.previousVersion;
     const after = job.installedVersion;

package/dist/lib/daemon-setup.d.ts

@@ -28,6 +28,7 @@
  * whole area has been removing. So: asked when there is someone to ask, skipped
  * with an instruction when there is not, and never on the opt-out.
  */
+import { type LegacyStateReport } from '@skrr-ai/auth-core';
 import { confirm } from './prompt';
 export interface DaemonSetupOutcome {
     status: 'installed' | 'declined' | 'skipped' | 'failed';
@@ -41,9 +42,25 @@ export interface DaemonSetupOptions {
     confirmImpl?: typeof confirm;
     interactive?: boolean;
     log?: (line: string) => void;
+    /** Injected by tests. */
+    findLegacyStateImpl?: () => LegacyStateReport;
 }
+/**
+ * Refuse, before anything is fetched or asked, on a machine still carrying state
+ * from the previous product identity.
+ *
+ * The runtime refuses the same machine in `skrrd install`, and it is right to —
+ * but that check can only run once there is a runtime to run it, so onboarding
+ * downloaded a release, asked "Set it up now?", and only then stopped (OSK-6895).
+ * The detection is a read of two directory names, so the CLI does it first and
+ * the refusal names `skrr daemon install`, the command the person actually uses.
+ * The runtime's own check stays: `skrrd install` can be run directly.
+ *
+ * Returns true when it refused, having printed why and what to run.
+ */
+export declare function refuseOnLegacyLocalState(log: (line: string) => void, findImpl?: () => LegacyStateReport): boolean;
 /**
  * Ask, then install. Returns without touching anything when there is nobody to
- * ask or the operator has opted out.
+ * ask, the operator has opted out, or the machine still needs its cutover.
  */
 export declare function offerDaemonSetup(opts?: DaemonSetupOptions): Promise<DaemonSetupOutcome>;

package/dist/lib/daemon-setup.js

@@ -1,5 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.refuseOnLegacyLocalState = refuseOnLegacyLocalState;
 exports.offerDaemonSetup = offerDaemonSetup;
 /**
  * daemon-setup.ts — offer to set this machine up, at the moment we can.
@@ -31,15 +32,40 @@ exports.offerDaemonSetup = offerDaemonSetup;
  * whole area has been removing. So: asked when there is someone to ask, skipped
  * with an instruction when there is not, and never on the opt-out.
  */
+const auth_core_1 = require("@skrr-ai/auth-core");
 const prompt_1 = require("./prompt");
 const daemon_binding_1 = require("./daemon-binding");
 const daemon_handoff_opt_out_1 = require("./daemon-handoff-opt-out");
 const exec_runtime_binary_1 = require("./exec-runtime-binary");
 const daemon_installer_1 = require("./daemon-installer");
 const ssh_detect_1 = require("./ssh-detect");
+/**
+ * Refuse, before anything is fetched or asked, on a machine still carrying state
+ * from the previous product identity.
+ *
+ * The runtime refuses the same machine in `skrrd install`, and it is right to —
+ * but that check can only run once there is a runtime to run it, so onboarding
+ * downloaded a release, asked "Set it up now?", and only then stopped (OSK-6895).
+ * The detection is a read of two directory names, so the CLI does it first and
+ * the refusal names `skrr daemon install`, the command the person actually uses.
+ * The runtime's own check stays: `skrrd install` can be run directly.
+ *
+ * Returns true when it refused, having printed why and what to run.
+ */
+function refuseOnLegacyLocalState(log, findImpl = auth_core_1.findLegacyLocalState) {
+    const report = findImpl();
+    if (!report.hasLegacyState)
+        return false;
+    log('');
+    for (const line of (0, auth_core_1.describeLegacyState)(report, 'skrr daemon').split('\n')) {
+        log(line ? `  ${line}` : '');
+    }
+    log('');
+    return true;
+}
 /**
  * Ask, then install. Returns without touching anything when there is nobody to
- * ask or the operator has opted out.
+ * ask, the operator has opted out, or the machine still needs its cutover.
  */
 async function offerDaemonSetup(opts = {}) {
     const env = opts.env ?? process.env;
@@ -51,6 +77,12 @@ async function offerDaemonSetup(opts = {}) {
     if (optOut) {
         return { status: 'skipped', detail: `skipped by ${optOut}` };
     }
+    if (refuseOnLegacyLocalState(log, opts.findLegacyStateImpl)) {
+        return {
+            status: 'skipped',
+            detail: 'state from the previous product identity is still here — finish the cutover above, then run `skrr daemon install`',
+        };
+    }
     const interactive = opts.interactive ?? !(0, ssh_detect_1.isNonInteractive)();
     if (!interactive) {
         // A prompt with no terminal hangs forever, which is worse than the extra

package/dist/lib/dedicated-machines.js

@@ -845,8 +845,10 @@ function selectDedicatedAttachHarness(lease, harnesses, engine) {
     }
     const providers = [...new Set(rows.map((row) => row.provider))];
     if (engine) {
-        // Any accepted spelling of an engine names it: a user who typed the first-party
-        // harness's older name means the row stored under its canonical one.
+        // Any ACCEPTED spelling of an engine names it — during a rename's alias window,
+        // a user who typed the first-party harness's older name means the row stored
+        // under its canonical one. A retired spelling is accepted nowhere, so it names
+        // no engine here either (`isSameHarnessProvider`).
         const match = rows.find((row) => (0, auth_core_1.isSameHarnessProvider)(row.provider, engine));
         if (!match) {
             return {

package/dist/lib/file-mime.js

@@ -68,7 +68,7 @@ const MIME_TYPES = {
     '.md': 'text/markdown',
     '.mjs': 'text/javascript',
     '.mkv': 'video/mkv',
-    '.mov': 'video/mov',
+    '.mov': 'video/quicktime',
     '.mp3': 'audio/mpeg',
     '.mp4': 'video/mp4',
     '.ogv': 'video/ogv',

package/dist/lib/first-party-harness-agent.d.ts

@@ -83,7 +83,7 @@ interface AgentRow {
     defaultForHarness?: string;
 }
 export interface FirstPartyHarnessAgentDeps {
-    /** Agents this user may run. Bounded; see `ROSTER_LIMIT`. */
+    /** Agents this user may run. Paged and bounded; see `ROSTER_MAX`. */
     listAgents?: (signal?: AbortSignal) => Promise<AgentRow[]>;
     /** Direct read, for an id outside the bounded roster. `null` when unreadable. */
     getAgent?: (id: string, signal?: AbortSignal) => Promise<AgentRow | null>;
@@ -158,4 +158,19 @@ export declare function readConfiguredAgentId(): string | undefined;
 export declare function setConfiguredAgentId(ref: string, deps?: FirstPartyHarnessAgentDeps, options?: FirstPartyHarnessAgentOptions): Promise<FirstPartyHarnessAgent>;
 /** Remove the setting. Returns what was there, so the caller can say so. */
 export declare function clearConfiguredAgentId(): string | undefined;
+/** One `/api/agents` response: a list page, or a bare array from an older server. */
+export type AgentRosterPage = {
+    data?: AgentRow[];
+    agents?: AgentRow[];
+    has_more?: boolean;
+    after?: string | null;
+} | AgentRow[];
+/**
+ * Read roster pages until the server reports no more, up to `max` rows.
+ *
+ * A page that does not say `has_more` with a usable `after` cursor ends the walk,
+ * so an older server that ignores `cursor` (or returns a bare array) costs exactly
+ * the one request it always did.
+ */
+export declare function collectRosterPages(fetchPage: (cursor?: string) => Promise<AgentRosterPage>, max?: number): Promise<AgentRow[]>;
 export {};

package/dist/lib/first-party-harness-agent.js

@@ -55,18 +55,26 @@ exports.resolveFirstPartyHarnessAgent = resolveFirstPartyHarnessAgent;
 exports.readConfiguredAgentId = readConfiguredAgentId;
 exports.setConfiguredAgentId = setConfiguredAgentId;
 exports.clearConfiguredAgentId = clearConfiguredAgentId;
+exports.collectRosterPages = collectRosterPages;
 const auth_core_1 = require("@skrr-ai/auth-core");
 const data_provider_1 = require("@skrr-ai/data-provider");
 const api_fetch_1 = require("./api-fetch");
 const config_1 = require("./config");
 const first_party_harness_managed_1 = require("./first-party-harness-managed");
+/** Page size for one `/api/agents` roster request. */
+const ROSTER_PAGE_SIZE = 100;
 /**
- * How many agents the refusal is allowed to look at.
+ * The most agents the roster will read, across pages.
  *
- * A bound rather than pagination: this list exists to answer "did you mean one of
- * these?", and a user with more agents than this is a user who will pass the flag.
+ * The roster is not only the refusal's "did you mean" list. Resolution also finds
+ * the user's EXISTING default agent in it (`createDefault: false`) and matches a
+ * configured agent by name, so one fixed page answered "you have no default agent"
+ * for an account whose default was agent 198 of 210 (found by the end-to-end run
+ * on 2026-09-17). Pages are followed until the server says there are no more, up
+ * to this bound, which keeps a pathological account from turning one session
+ * start into an unbounded crawl.
  */
-const ROSTER_LIMIT = 100;
+const ROSTER_MAX = 1000;
 /** How many candidates a refusal prints before it summarizes the rest. */
 const CANDIDATES_SHOWN = 12;
 class FirstPartyHarnessAgentError extends Error {
@@ -220,7 +228,7 @@ async function resolveFirstPartyHarnessAgent(explicit, deps = {}, options = {})
         const created = options.createDefault === false
             ? null
             : await (deps.ensureDefaultAgent ?? ensureDefaultAgent)(
-            // Canonical: what the server stores. It accepts every spelling.
+            // Canonical: what the server stores, and the one spelling every server accepts.
             auth_core_1.FIRST_PARTY_HARNESS.provider, options.signal);
         if (created?.id) {
             return {
@@ -330,11 +338,12 @@ function readRawConfigKey() {
  * first real session read. Returns whether the file now holds it under the
  * neutral key.
  *
- * Reading alone used to leave it where it was, which is safe only while that key
- * is still an accepted spelling. The contract phase empties the identity's
- * aliases, `legacyAgentConfigKeys()` then stops naming the old key, and a user
+ * Reading alone used to leave it where it was. `legacyAgentConfigKeys()` keeps
+ * naming an old key after its spelling is retired (it reads the identity's
+ * ARTIFACT spellings, since the file predates the rename), but a key that is only
+ * ever read is one the next pruning of `formerSpellings` would strand, and a user
  * who never ran `--set`, `--clear` or logout would silently lose their setting.
- * Moving it here retires the old key long before that date.
+ * Moving it on the first session read retires the old key long before that.
  *
  * Only the session path calls this — `skrr code doctor` reports and never
  * writes. Best-effort: an unwritable config is left alone and still read.
@@ -368,14 +377,35 @@ function writeConfigKey(id) {
  * `fields=summary` drops the prompt-sized fields; this needs an id and a name.
  */
 async function listAgents(signal) {
-    const response = await (0, api_fetch_1.apiFetch)(`/api/agents?limit=${ROSTER_LIMIT}&fields=summary&requiredPermission=${data_provider_1.PermissionBits.EDIT}`, signal ? { signal } : {});
-    if (Array.isArray(response))
-        return response;
-    if (Array.isArray(response?.data))
-        return response.data;
-    if (Array.isArray(response?.agents))
-        return response.agents;
-    return [];
+    return collectRosterPages((cursor) => (0, api_fetch_1.apiFetch)(`/api/agents?limit=${ROSTER_PAGE_SIZE}&fields=summary&requiredPermission=${data_provider_1.PermissionBits.EDIT}` +
+        (cursor ? `&cursor=${encodeURIComponent(cursor)}` : ''), signal ? { signal } : {}));
+}
+/**
+ * Read roster pages until the server reports no more, up to `max` rows.
+ *
+ * A page that does not say `has_more` with a usable `after` cursor ends the walk,
+ * so an older server that ignores `cursor` (or returns a bare array) costs exactly
+ * the one request it always did.
+ */
+async function collectRosterPages(fetchPage, max = ROSTER_MAX) {
+    const rows = [];
+    let cursor;
+    do {
+        const response = await fetchPage(cursor);
+        const page = Array.isArray(response)
+            ? response
+            : Array.isArray(response?.data)
+                ? response.data
+                : Array.isArray(response?.agents)
+                    ? response.agents
+                    : [];
+        rows.push(...page);
+        const next = !Array.isArray(response) && response?.has_more === true && typeof response.after === 'string'
+            ? response.after
+            : undefined;
+        cursor = next && next !== cursor && page.length > 0 ? next : undefined;
+    } while (cursor && rows.length < max);
+    return rows.slice(0, max);
 }
 /**
  * The caller's own user id, memoized FOR THIS PROCESS ONLY.