@skrr-ai/cli 0.1.43 → 0.1.44

package/dist/commands/tasks/create.d.ts

@@ -71,6 +71,12 @@ export default class TasksCreate extends BaseCommand {
         'lifecycle-pack': import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
     };
     run(): Promise<void>;
+    /**
+     * A create refusal, translated. `TASK_GOAL_NOT_FOUND` names the goal id this
+     * command sent and the flag that gets past it, where the server's sentence
+     * names API fields (OSK-10219); everything else is the uniform translation.
+     */
+    private failTaskCreate;
     private createTaskOrRecover;
     /**
      * Predict the create route's `ASSIGNEE_NOT_IN_SPACE` degradation for a

package/dist/commands/tasks/create.js

@@ -333,7 +333,7 @@ class TasksCreate extends base_command_1.BaseCommand {
                 instantiated = (await data_provider_1.dataService.createTask(payload));
             }
             catch (err) {
-                this.handleApiError(err);
+                this.failTaskCreate(err, payload, flags.goal !== undefined);
             }
             const root = instantiated.rootTask ||
                 (instantiated.rootTasks || [])[0];
@@ -475,7 +475,7 @@ class TasksCreate extends base_command_1.BaseCommand {
                 }
             }
             if (!(defaultAgentResolution.applied && failureCode === 'ASSIGNEE_NOT_IN_SPACE')) {
-                this.handleApiError(err);
+                this.failTaskCreate(err, payload, flags.goal !== undefined);
             }
             delete payload.assigneeAgentIds;
             delete payload.assigneeUserIds;
@@ -502,7 +502,7 @@ class TasksCreate extends base_command_1.BaseCommand {
                 createRecovery = result.recovery;
             }
             catch (retryErr) {
-                this.handleApiError(retryErr);
+                this.failTaskCreate(retryErr, payload, flags.goal !== undefined);
             }
         }
         const url = (0, web_url_1.taskUrlFrom)(this.cliConfig.baseURL, created);
@@ -537,6 +537,29 @@ class TasksCreate extends base_command_1.BaseCommand {
             this.log(`View it at ${url}`);
         await (0, task_instruction_offer_1.maybeOfferTaskManagementInstructions)((message) => this.log(message));
     }
+    /**
+     * A create refusal, translated. `TASK_GOAL_NOT_FOUND` names the goal id this
+     * command sent and the flag that gets past it, where the server's sentence
+     * names API fields (OSK-10219); everything else is the uniform translation.
+     */
+    failTaskCreate(err, payload, goalFromFlag) {
+        const goalId = payload.goalId;
+        if ((0, base_command_1.apiRefusal)(err).code === tasks_1.TASK_GOAL_NOT_FOUND && typeof goalId === 'string' && goalId) {
+            this.failWithCliError({
+                message: (0, tasks_1.describeTaskGoalNotFound)({
+                    goalId,
+                    command: 'create',
+                    bin: this.config.bin,
+                    goalSource: goalFromFlag ? 'flag' : 'json',
+                }),
+                code: tasks_1.TASK_GOAL_NOT_FOUND,
+                status: 400,
+                exit: 1,
+                retryable: false,
+            });
+        }
+        this.handleApiError(err);
+    }
     async createTaskOrRecover(payload) {
         try {
             return {

package/dist/commands/tasks/labels/attach.js

@@ -28,6 +28,10 @@ class TasksLabelsAttach extends base_command_1.BaseCommand {
     static flags = {
         json: core_1.Flags.boolean({ description: 'Output the updated task as JSON' }),
         'label-id': core_1.Flags.string({
+            // `--label` is what `spaces labels add` takes and what the managed
+            // task-management instructions tell every agent to type; without the
+            // alias that documented command died at parse.
+            aliases: ['label'],
             description: 'Label to attach — id, or a name from `skrr labels list --applicable-to task`. An unknown name is refused, never created (repeatable).',
             multiple: true,
             required: true,

package/dist/commands/tasks/list.d.ts

@@ -58,6 +58,7 @@ export default class TasksList extends BaseCommand {
         tag: import("@oclif/core/lib/interfaces").OptionFlag<string[] | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         'label-id': import("@oclif/core/lib/interfaces").OptionFlag<string[] | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         q: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        view: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         limit: import("@oclif/core/lib/interfaces").OptionFlag<number, import("@oclif/core/lib/interfaces").CustomOptions>;
         cursor: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         calendar: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;

package/dist/commands/tasks/list.js

@@ -48,6 +48,7 @@ const FILTER_FLAGS = new Set([
     'tag',
     'label-id',
     'q',
+    'view',
 ]);
 /**
  * What the zero-row case is allowed to say. The bare `No tasks.` was step 3
@@ -182,6 +183,7 @@ function buildListParams(flags, assigneeUserId) {
             ? { labelIds: flag('label-id') }
             : {}),
         q: flag('q'),
+        ...(flag('view') ? { taskViewId: flag('view') } : {}),
         limit: flag('limit'),
         cursor: flag('cursor'),
     };
@@ -205,6 +207,7 @@ class TasksList extends base_command_1.BaseCommand {
         '<%= config.bin %> tasks list --actionable-by agent --actionable-for-agent <agent-id>',
         '<%= config.bin %> tasks list --needs-me',
         '<%= config.bin %> tasks list --dri me',
+        '<%= config.bin %> tasks list --view <task-view-id>',
         '<%= config.bin %> tasks list --calendar 2026-08-01..2026-08-31 --json',
     ];
     static flags = {
@@ -314,6 +317,12 @@ class TasksList extends base_command_1.BaseCommand {
             multiple: true,
         }),
         q: core_1.Flags.string({ description: 'Free-text search query' }),
+        // A saved Task View is a query; this is the one place outside the browser
+        // that runs it (OSK-4651). Resolved server-side by the same evaluator the
+        // view subscriptions use, over the tasks this caller may read.
+        view: core_1.Flags.string({
+            description: 'Only tasks a saved Task View selects (task_view_…; see `views list`). Combines with other filters',
+        }),
         limit: core_1.Flags.integer({ description: 'Max results', default: 50 }),
         cursor: core_1.Flags.string({ description: 'Pagination cursor from a previous page' }),
         calendar: core_1.Flags.string({

package/dist/commands/tasks/show.d.ts

@@ -10,6 +10,29 @@ import { BaseCommand } from '../../base-command';
  * exists for them to show.
  */
 export declare function taskPointerLines(t: Record<string, unknown>, ref: string, bin?: string): string[];
+/**
+ * The `Labels:` value.
+ *
+ * `labels attach` writes ids, and without this line the only way to see
+ * whether one landed was to attach it again and read "No change — labels
+ * already attached" (OSK-10313). Names, because an id is not something a
+ * person recognises — but an id beats nothing, so a vocabulary that could not
+ * be read (or a label missing from it) degrades per entry rather than failing
+ * the command or hiding the label.
+ */
+export declare function labelsLine(labelIds?: string[], nameById?: Map<string, string>): string;
+/**
+ * The `Executor:` value — who does this task, and whether anyone said so.
+ *
+ * It printed `legacy / inferred` whenever `executionMode` was absent, which is
+ * the normal result of `tasks create` without `--execution-mode`. A task made
+ * ten seconds earlier by the most ordinary invocation there is read as old data
+ * made the deprecated way (OSK-4629). The executor is now the one the server
+ * acts on (`resolveTaskExecutor`, shared with `TaskActionability`), and the
+ * value says when it is implied by the assignees rather than declared, because
+ * reassigning the task changes only the implied kind.
+ */
+export declare function taskExecutorLabel(t: Record<string, unknown>, bin?: string): string;
 /**
  * The failure rows of `tasks show`, when there are any. (S3 dogfood finding)
  *

package/dist/commands/tasks/show.js

@@ -1,6 +1,8 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.taskPointerLines = taskPointerLines;
+exports.labelsLine = labelsLine;
+exports.taskExecutorLabel = taskExecutorLabel;
 exports.taskFailureLines = taskFailureLines;
 const core_1 = require("@oclif/core");
 const data_provider_1 = require("@skrr-ai/data-provider");
@@ -11,6 +13,7 @@ const task_closure_1 = require("../../lib/task-closure");
 const task_resolver_1 = require("../../lib/task-resolver");
 const web_url_1 = require("../../lib/web-url");
 const html_text_1 = require("../../lib/html-text");
+const label_ref_1 = require("../../lib/label-ref");
 const format_1 = require("../../lib/format");
 /**
  * Where to look next — as COMMANDS, not as facts about the task.
@@ -39,6 +42,46 @@ function taskPointerLines(t, ref, bin = 'skrr') {
         ...pointers.map(([command, what]) => `  ${command.padEnd(width)}  ${what}`),
     ];
 }
+/**
+ * The `Labels:` value.
+ *
+ * `labels attach` writes ids, and without this line the only way to see
+ * whether one landed was to attach it again and read "No change — labels
+ * already attached" (OSK-10313). Names, because an id is not something a
+ * person recognises — but an id beats nothing, so a vocabulary that could not
+ * be read (or a label missing from it) degrades per entry rather than failing
+ * the command or hiding the label.
+ */
+function labelsLine(labelIds, nameById) {
+    const ids = (labelIds ?? []).filter((id) => typeof id === 'string' && id.length > 0);
+    if (ids.length === 0)
+        return '-';
+    return ids.map((id) => nameById?.get(id) ?? id).join(', ');
+}
+/**
+ * The `Executor:` value — who does this task, and whether anyone said so.
+ *
+ * It printed `legacy / inferred` whenever `executionMode` was absent, which is
+ * the normal result of `tasks create` without `--execution-mode`. A task made
+ * ten seconds earlier by the most ordinary invocation there is read as old data
+ * made the deprecated way (OSK-4629). The executor is now the one the server
+ * acts on (`resolveTaskExecutor`, shared with `TaskActionability`), and the
+ * value says when it is implied by the assignees rather than declared, because
+ * reassigning the task changes only the implied kind.
+ */
+function taskExecutorLabel(t, bin = 'skrr') {
+    const executor = (0, data_provider_1.resolveTaskExecutor)(t);
+    switch (executor.source) {
+        case 'declared':
+            return executor.mode;
+        case 'assignees':
+            return `${executor.mode} (not declared; implied by the ${executor.mode} assignees)`;
+        case 'mixed-assignees':
+            return `not chosen — Human and Agent assignees; pick one with \`${bin} tasks update --execution-mode\``;
+        case 'unassigned':
+            return '-';
+    }
+}
 /**
  * The failure rows of `tasks show`, when there are any. (S3 dogfood finding)
  *
@@ -284,7 +327,7 @@ class TasksShow extends base_command_1.BaseCommand {
             }
             this.log(`Result:      ${priorLine}`);
         }
-        this.log(`Executor:    ${t.executionMode ?? 'legacy / inferred'}`);
+        this.log(`Executor:    ${taskExecutorLabel(t, this.config.bin)}`);
         this.log(`Priority:    ${t.priority ?? '-'}`);
         this.log(`Parent:      ${t.parentId ?? '-'}`);
         this.log(`Space:       ${t.spaceId ?? '-'}`);
@@ -293,6 +336,23 @@ class TasksShow extends base_command_1.BaseCommand {
         // was no way to tell an ignored flag from an honoured one.
         this.log(`Project:     ${t.projectId ?? '-'}`);
         this.log(`Goal:        ${t.goalId ?? '-'}`);
+        // Printed for the same reason Project is: `labels attach` writes ids, and
+        // without this line the only way to see whether one landed was to attach
+        // it again and read "No change — labels already attached" (OSK-10313).
+        // Names, because an id is not something a person recognises; a vocabulary
+        // read that fails prints the ids rather than failing the whole command.
+        const labelIds = Array.isArray(t.labelIds) ? t.labelIds : [];
+        let labelNames;
+        if (labelIds.length > 0) {
+            try {
+                const vocabulary = await (0, label_ref_1.collectLabelVocabulary)({ applicableTo: 'task' });
+                labelNames = new Map(vocabulary.map((row) => [row.id, row.name]));
+            }
+            catch {
+                // A vocabulary that cannot be read prints ids; see labelsLine.
+            }
+        }
+        this.log(`Labels:      ${labelsLine(labelIds, labelNames)}`);
         this.log(`Author:      ${t.author ?? '-'}`);
         const dri = t.dri;
         if (dri?.resolved) {

package/dist/commands/tasks/update.js

@@ -403,6 +403,18 @@ class TasksUpdate extends base_command_1.BaseCommand {
             });
         }
         catch (err) {
+            // The server's refusal says "detach the goal with goalId: null", which is
+            // not something a CLI user can type. Name the id sent and `--goal none`.
+            const goalId = payload.goalId;
+            if ((0, base_command_1.apiRefusal)(err).code === tasks_2.TASK_GOAL_NOT_FOUND && typeof goalId === 'string' && goalId) {
+                this.failWithCliError({
+                    message: (0, tasks_2.describeTaskGoalNotFound)({ goalId, command: 'update', bin: this.config.bin }),
+                    code: tasks_2.TASK_GOAL_NOT_FOUND,
+                    status: 400,
+                    exit: 1,
+                    retryable: false,
+                });
+            }
             this.handleApiError(err);
         }
         // Postcondition, not a prediction — see `droppedEstimateWarning`. On stderr

package/dist/commands/views/create.js

@@ -19,7 +19,10 @@ class ViewsCreate extends base_command_1.BaseCommand {
         'from-json': core_1.Flags.string({ description: 'JSON Task View body' }),
         name: core_1.Flags.string({ description: 'View name' }),
         description: core_1.Flags.string({ description: 'Short explanation shown in the modal' }),
-        type: core_1.Flags.string({ options: [...vocabulary_1.VIEW_TYPES], description: 'Layout' }),
+        type: core_1.Flags.string({
+            options: [...vocabulary_1.VIEW_TYPES],
+            description: `Layout (default: ${vocabulary_1.TASK_VIEW_DEFAULT_TYPE})`,
+        }),
         'task-id': core_1.Flags.string({ multiple: true, description: 'Include this exact task ID' }),
         space: core_1.Flags.string({ multiple: true, description: 'Limit to this Space ID' }),
         // Status labels are per-Space. The API bounds and normalizes values but
@@ -41,7 +44,7 @@ class ViewsCreate extends base_command_1.BaseCommand {
         }),
         'group-by': core_1.Flags.string({
             options: [...vocabulary_1.VIEW_GROUP_BY_VALUES],
-            description: 'Grouping dimension',
+            description: `Grouping dimension (default: ${vocabulary_1.TASK_VIEW_DEFAULT_GROUP_BY})`,
         }),
         sort: core_1.Flags.string({
             options: [...vocabulary_1.VIEW_SORT_KEYS],
@@ -107,6 +110,13 @@ class ViewsCreate extends base_command_1.BaseCommand {
             return void this.log(JSON.stringify(result, null, 2));
         }
         this.log(`Created Task View ${view.id}`);
+        // What the SERVER saved, read back from the response — not an echo of the
+        // flags. Creation is the one moment the caller still knows what they meant
+        // to type, so it is where a filter that silently did not take has to show
+        // (dogfood OSK-4646). Same renderer as `views show`.
+        for (const line of (0, task_view_render_1.describeTaskView)(view)) {
+            this.log(line);
+        }
         this.log(result.url);
         if (warning)
             this.warn(warning);

package/dist/commands/views/list.js

@@ -4,6 +4,7 @@ const core_1 = require("@oclif/core");
 const data_provider_1 = require("@skrr-ai/data-provider");
 const base_command_1 = require("../../base-command");
 const format_1 = require("../../lib/format");
+const task_view_render_1 = require("../../lib/task-view-render");
 const web_url_1 = require("../../lib/web-url");
 class ViewsList extends base_command_1.BaseCommand {
     static description = 'List personalized Task Views';
@@ -30,13 +31,13 @@ class ViewsList extends base_command_1.BaseCommand {
             name: view.name,
             type: view.viewType,
             group: view.groupBy,
-            tasks: view.taskIds.length ? String(view.taskIds.length) : 'criteria',
+            selection: (0, task_view_render_1.summarizeTaskViewSelection)(view),
             id: view.id,
         })), [
             { key: 'name', header: 'NAME', maxWidth: 36 },
             { key: 'type', header: 'TYPE' },
             { key: 'group', header: 'GROUP BY' },
-            { key: 'tasks', header: 'SELECTION' },
+            { key: 'selection', header: 'SELECTION', maxWidth: 48 },
             { key: 'id', header: 'ID' },
         ], (line) => this.log(line));
     }

package/dist/commands/views/show.js

@@ -33,6 +33,8 @@ class ViewsShow extends base_command_1.BaseCommand {
             this.log(line);
         }
         this.log(result.url);
+        // The criteria are half the answer; the tasks they select are the other.
+        this.log(`Tasks: ${this.config.bin} tasks list --view ${view.id}`);
     }
 }
 exports.default = ViewsShow;

package/dist/lib/agentic-stream.d.ts

@@ -1,9 +1,15 @@
 /**
- * The answer a question gets when no terminal exists to ask it on. Written to the
- * agent, so it says what happened and what to do rather than pretending a person
- * replied.
+ * Why a question was dismissed when no terminal exists to ask it on. It is the
+ * REASON for a dismissal, never an answer: it travels as the value of the
+ * reserved `_dismissed` key, which every consumer already reads as "nobody
+ * answered" — the web card sends the same key when a person closes it.
+ *
+ * It used to be written into every question's answer slot (OSK-9767). That was
+ * harmless text for Claude's AskUserQuestion, but a Devin form elicitation read
+ * it as the field's value and was answered `accept` with this sentence filled in
+ * — consent nobody gave, on a form nobody saw (OSK-10274).
  */
-export declare const NON_INTERACTIVE_QUESTION_ANSWER: string;
+export declare const NON_INTERACTIVE_QUESTION_DISMISSAL: string;
 export type AgenticStreamEvent = {
     type: string;
     sessionId?: string;

package/dist/lib/agentic-stream.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.AgenticStreamClient = exports.USER_CONNECTION_CAP_CODE = exports.NON_INTERACTIVE_QUESTION_ANSWER = void 0;
+exports.AgenticStreamClient = exports.USER_CONNECTION_CAP_CODE = exports.NON_INTERACTIVE_QUESTION_DISMISSAL = void 0;
 exports.writeJsonLine = writeJsonLine;
 exports.envelopesText = envelopesText;
 exports.envelopeKey = envelopeKey;
@@ -20,11 +20,17 @@ const data_provider_1 = require("@skrr-ai/data-provider");
 const config_1 = require("./config");
 const publicEndpoints_generated_1 = require("./publicEndpoints.generated");
 /**
- * The answer a question gets when no terminal exists to ask it on. Written to the
- * agent, so it says what happened and what to do rather than pretending a person
- * replied.
+ * Why a question was dismissed when no terminal exists to ask it on. It is the
+ * REASON for a dismissal, never an answer: it travels as the value of the
+ * reserved `_dismissed` key, which every consumer already reads as "nobody
+ * answered" — the web card sends the same key when a person closes it.
+ *
+ * It used to be written into every question's answer slot (OSK-9767). That was
+ * harmless text for Claude's AskUserQuestion, but a Devin form elicitation read
+ * it as the field's value and was answered `accept` with this sentence filled in
+ * — consent nobody gave, on a form nobody saw (OSK-10274).
  */
-exports.NON_INTERACTIVE_QUESTION_ANSWER = 'No answer: this turn was started non-interactively (no terminal), so nobody can reply to ' +
+exports.NON_INTERACTIVE_QUESTION_DISMISSAL = 'No answer: this turn was started non-interactively (no terminal), so nobody can reply to ' +
     'questions. Proceed with your best judgement, or finish by stating exactly what you need.';
 /**
  * Write exactly one complete JSON value on one line.
@@ -710,13 +716,21 @@ class AgenticStreamClient {
         // "Not answered … timed out", at the cost of the whole wait. Answer at once
         // instead, saying why, so the agent proceeds or states what it needs. An
         // explicit `input` (tests, an embedding caller) is treated as interactive.
+        //
+        // "At once" is a DISMISSAL, never an answer. Nothing goes in any question's
+        // answer slot: a harness that turns answers into structured consent (an ACP
+        // form elicitation) would otherwise accept whatever text sits there
+        // (OSK-10274). The reason rides on `_dismissed`, where the server maps it to
+        // a dismissal for daemon sessions and a cloud session still reads why.
         const interactive = this.options.input !== undefined || Boolean(process.stdin.isTTY);
         const answers = {};
-        for (const question of event.questions ?? []) {
-            const answer = interactive
-                ? await this.ask(`${question.header ?? 'Question'}: ${question.question}\n> `)
-                : exports.NON_INTERACTIVE_QUESTION_ANSWER;
-            answers[question.header ?? question.question] = answer;
+        if (interactive) {
+            for (const question of event.questions ?? []) {
+                answers[question.header ?? question.question] = await this.ask(`${question.header ?? 'Question'}: ${question.question}\n> `);
+            }
+        }
+        else {
+            answers._dismissed = exports.NON_INTERACTIVE_QUESTION_DISMISSAL;
         }
         if (event.questionId && this.socket) {
             this.socket.emit('question:answer', {
@@ -824,7 +838,7 @@ class AgenticStreamClient {
             this.renderedText = this.accumulated;
         }
         else if (event.type === 'question.answered' && event.nonInteractive) {
-            output.write('\n[question] no terminal to answer on, so the agent was told to proceed without an answer\n');
+            output.write('\n[question] no terminal to answer on, so the question was dismissed unanswered\n');
             this.renderedText = this.accumulated;
         }
     }

package/dist/lib/cli-installers.js

@@ -129,9 +129,17 @@ function readinessOf(provider) {
                 ok: false,
             };
         }
+        // Every other not-ready state tells the reader what to do next, so this one
+        // does too. Name the install command only when the daemon says it can
+        // install the provider. Otherwise the daemon's own reason, or the bare
+        // fact, is the whole answer.
+        const key = canonical(provider.provider);
         return {
             label: 'not-installed',
-            detail: provider.installDisabledReason || 'No binary for this provider on this machine.',
+            detail: provider.installDisabledReason ||
+                (provider.installable === true && key
+                    ? `No binary for this provider on this machine. Install it with \`skrr harnesses install ${key}\`.`
+                    : 'No binary for this provider on this machine.'),
             ok: false,
         };
     }

package/dist/lib/daemon-setup.d.ts

@@ -28,6 +28,7 @@
  * whole area has been removing. So: asked when there is someone to ask, skipped
  * with an instruction when there is not, and never on the opt-out.
  */
+import { type LegacyStateReport } from '@skrr-ai/auth-core';
 import { confirm } from './prompt';
 export interface DaemonSetupOutcome {
     status: 'installed' | 'declined' | 'skipped' | 'failed';
@@ -41,9 +42,25 @@ export interface DaemonSetupOptions {
     confirmImpl?: typeof confirm;
     interactive?: boolean;
     log?: (line: string) => void;
+    /** Injected by tests. */
+    findLegacyStateImpl?: () => LegacyStateReport;
 }
+/**
+ * Refuse, before anything is fetched or asked, on a machine still carrying state
+ * from the previous product identity.
+ *
+ * The runtime refuses the same machine in `skrrd install`, and it is right to —
+ * but that check can only run once there is a runtime to run it, so onboarding
+ * downloaded a release, asked "Set it up now?", and only then stopped (OSK-6895).
+ * The detection is a read of two directory names, so the CLI does it first and
+ * the refusal names `skrr daemon install`, the command the person actually uses.
+ * The runtime's own check stays: `skrrd install` can be run directly.
+ *
+ * Returns true when it refused, having printed why and what to run.
+ */
+export declare function refuseOnLegacyLocalState(log: (line: string) => void, findImpl?: () => LegacyStateReport): boolean;
 /**
  * Ask, then install. Returns without touching anything when there is nobody to
- * ask or the operator has opted out.
+ * ask, the operator has opted out, or the machine still needs its cutover.
  */
 export declare function offerDaemonSetup(opts?: DaemonSetupOptions): Promise<DaemonSetupOutcome>;

package/dist/lib/daemon-setup.js

@@ -1,5 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.refuseOnLegacyLocalState = refuseOnLegacyLocalState;
 exports.offerDaemonSetup = offerDaemonSetup;
 /**
  * daemon-setup.ts — offer to set this machine up, at the moment we can.
@@ -31,15 +32,40 @@ exports.offerDaemonSetup = offerDaemonSetup;
  * whole area has been removing. So: asked when there is someone to ask, skipped
  * with an instruction when there is not, and never on the opt-out.
  */
+const auth_core_1 = require("@skrr-ai/auth-core");
 const prompt_1 = require("./prompt");
 const daemon_binding_1 = require("./daemon-binding");
 const daemon_handoff_opt_out_1 = require("./daemon-handoff-opt-out");
 const exec_runtime_binary_1 = require("./exec-runtime-binary");
 const daemon_installer_1 = require("./daemon-installer");
 const ssh_detect_1 = require("./ssh-detect");
+/**
+ * Refuse, before anything is fetched or asked, on a machine still carrying state
+ * from the previous product identity.
+ *
+ * The runtime refuses the same machine in `skrrd install`, and it is right to —
+ * but that check can only run once there is a runtime to run it, so onboarding
+ * downloaded a release, asked "Set it up now?", and only then stopped (OSK-6895).
+ * The detection is a read of two directory names, so the CLI does it first and
+ * the refusal names `skrr daemon install`, the command the person actually uses.
+ * The runtime's own check stays: `skrrd install` can be run directly.
+ *
+ * Returns true when it refused, having printed why and what to run.
+ */
+function refuseOnLegacyLocalState(log, findImpl = auth_core_1.findLegacyLocalState) {
+    const report = findImpl();
+    if (!report.hasLegacyState)
+        return false;
+    log('');
+    for (const line of (0, auth_core_1.describeLegacyState)(report, 'skrr daemon').split('\n')) {
+        log(line ? `  ${line}` : '');
+    }
+    log('');
+    return true;
+}
 /**
  * Ask, then install. Returns without touching anything when there is nobody to
- * ask or the operator has opted out.
+ * ask, the operator has opted out, or the machine still needs its cutover.
  */
 async function offerDaemonSetup(opts = {}) {
     const env = opts.env ?? process.env;
@@ -51,6 +77,12 @@ async function offerDaemonSetup(opts = {}) {
     if (optOut) {
         return { status: 'skipped', detail: `skipped by ${optOut}` };
     }
+    if (refuseOnLegacyLocalState(log, opts.findLegacyStateImpl)) {
+        return {
+            status: 'skipped',
+            detail: 'state from the previous product identity is still here — finish the cutover above, then run `skrr daemon install`',
+        };
+    }
     const interactive = opts.interactive ?? !(0, ssh_detect_1.isNonInteractive)();
     if (!interactive) {
         // A prompt with no terminal hangs forever, which is worse than the extra

package/dist/lib/first-party-harness-agent.d.ts

@@ -83,7 +83,7 @@ interface AgentRow {
     defaultForHarness?: string;
 }
 export interface FirstPartyHarnessAgentDeps {
-    /** Agents this user may run. Bounded; see `ROSTER_LIMIT`. */
+    /** Agents this user may run. Paged and bounded; see `ROSTER_MAX`. */
     listAgents?: (signal?: AbortSignal) => Promise<AgentRow[]>;
     /** Direct read, for an id outside the bounded roster. `null` when unreadable. */
     getAgent?: (id: string, signal?: AbortSignal) => Promise<AgentRow | null>;
@@ -158,4 +158,19 @@ export declare function readConfiguredAgentId(): string | undefined;
 export declare function setConfiguredAgentId(ref: string, deps?: FirstPartyHarnessAgentDeps, options?: FirstPartyHarnessAgentOptions): Promise<FirstPartyHarnessAgent>;
 /** Remove the setting. Returns what was there, so the caller can say so. */
 export declare function clearConfiguredAgentId(): string | undefined;
+/** One `/api/agents` response: a list page, or a bare array from an older server. */
+export type AgentRosterPage = {
+    data?: AgentRow[];
+    agents?: AgentRow[];
+    has_more?: boolean;
+    after?: string | null;
+} | AgentRow[];
+/**
+ * Read roster pages until the server reports no more, up to `max` rows.
+ *
+ * A page that does not say `has_more` with a usable `after` cursor ends the walk,
+ * so an older server that ignores `cursor` (or returns a bare array) costs exactly
+ * the one request it always did.
+ */
+export declare function collectRosterPages(fetchPage: (cursor?: string) => Promise<AgentRosterPage>, max?: number): Promise<AgentRow[]>;
 export {};