@skrr-ai/cli 0.1.45 → 0.1.47

package/dist/base-command.d.ts

@@ -311,14 +311,26 @@ export declare abstract class BaseCommand extends Command {
         body: unknown;
         idempotencyKey: string;
     }): never;
-    protected failWithCliError({ message, code, status, exit, retryable, details, }: {
+    protected failWithCliError({ message, code, status, exit, retryable, details, requestId, }: {
         message: string;
         code: string;
         status?: number;
         exit: number;
         retryable: boolean;
         details?: unknown;
+        /** The server's `X-Request-ID` for the refused call, when there was one. */
+        requestId?: string;
     }): never;
+    /**
+     * The server's `X-Request-ID` for the most recent refused API call.
+     *
+     * The CLI prints its own refusals but not the id the server logged them
+     * against, so matching one to a log line meant guessing from timestamps. On
+     * an account with several clients that misattributes: a 409 raised by
+     * another session's concurrent image update was nearly filed as a CLI retry
+     * bug (2026-09-18).
+     */
+    private lastApiRequestId?;
     private writeJsonCliError;
     protected wantsJsonOutput(): boolean;
 }

package/dist/base-command.js

@@ -853,9 +853,26 @@ class BaseCommand extends core_1.Command {
      * envelope carry the same identifying text.
      */
     handleApiError(err, { subject } = {}) {
+        // An error this command already raised for the user is not an API failure
+        // to translate. `this.error()` throws a CLIError carrying `oclif.exit`, and
+        // under --json it is the ExitError thrown AFTER `writeJsonCliError` already
+        // printed the envelope. When the raise sits inside the try whose catch is
+        // this call, re-wrapping it printed a SECOND envelope (`--json` saw the
+        // real message followed by `EEXIT: 1`) and rewrote the caller's exit code
+        // to 1 — `agents actions create --prompt ""` did exactly that. Pass it
+        // through so `catch()` renders it once, with its code and exit intact.
+        if (err instanceof Error) {
+            const raised = err;
+            if (isOclifExitError(raised) || typeof raised.oclif?.exit === 'number') {
+                throw err;
+            }
+        }
         const say = (message) => withSubject(subject, message);
         if (err instanceof Error) {
             const e = err;
+            // Remembered once here rather than threaded through every branch below:
+            // each one ends in `failWithCliError`, and the id belongs on all of them.
+            this.lastApiRequestId = e.requestId;
             const body = parseErrorBody(e.body);
             const bodyCode = stringProp(body, 'code') || stringProp(body, 'errorType');
             const bodyMessage = stringProp(body, 'message') || stringProp(body, 'error');
@@ -1242,9 +1259,9 @@ class BaseCommand extends core_1.Command {
             details: { outboxId: queuedId, idempotencyKey: write.idempotencyKey },
         });
     }
-    failWithCliError({ message, code, status, exit, retryable, details, }) {
+    failWithCliError({ message, code, status, exit, retryable, details, requestId, }) {
         if (this.wantsJsonOutput()) {
-            this.writeJsonCliError({ message, code, status, exit, retryable, details });
+            this.writeJsonCliError({ message, code, status, exit, retryable, details, requestId });
         }
         // Human path. Deliberately stderr-only: stdout is the SUCCESS channel, so
         // `id=$(skrr tasks start "$x")` and `sky ... | jq` are never fed error
@@ -1277,7 +1294,17 @@ class BaseCommand extends core_1.Command {
             ...(suggestion ? { suggestions: [suggestion] } : {}),
         });
     }
-    writeJsonCliError({ message, code, status, exit, retryable, details, }) {
+    /**
+     * The server's `X-Request-ID` for the most recent refused API call.
+     *
+     * The CLI prints its own refusals but not the id the server logged them
+     * against, so matching one to a log line meant guessing from timestamps. On
+     * an account with several clients that misattributes: a 409 raised by
+     * another session's concurrent image update was nearly filed as a CLI retry
+     * bug (2026-09-18).
+     */
+    lastApiRequestId;
+    writeJsonCliError({ message, code, status, exit, retryable, details, requestId, }) {
         this.log(JSON.stringify({
             ok: false,
             error: {
@@ -1287,6 +1314,13 @@ class BaseCommand extends core_1.Command {
                 retryable,
                 command: this.id ?? null,
                 server: this.cliConfig?.baseURL ?? null,
+                // The id the server logged this refusal against. Without it, a
+                // refused call can only be matched to a log line by guessing from
+                // timestamps — which, with several clients on one account,
+                // attributes another session's request to yours.
+                ...(requestId || this.lastApiRequestId
+                    ? { requestId: requestId ?? this.lastApiRequestId }
+                    : {}),
                 ...(details ? { details } : {}),
             },
         }, null, 2));

package/dist/commands/agents/actions/create.js

@@ -81,8 +81,11 @@ class AgentsActionsCreate extends base_command_1.BaseCommand {
         let replayed = false;
         try {
             const title = typeof body.title === 'string' ? body.title.trim() : '';
-            if (!title)
-                this.error('Action title is required. Pass --title or include title.', { exit: 1 });
+            if (!title) {
+                this.error(typeof body.title === 'string'
+                    ? 'The action title was provided but is empty. Pass non-empty text to --title or title in --from-json.'
+                    : 'Action title is required. Pass --title or include title.', { exit: 1 });
+            }
             const kind = body.kind === 'builtin' ? 'builtin' : 'prompt';
             // No read of the library: position is assigned by the server at the
             // moment of the append, so it cannot be computed from a stale copy. An
@@ -97,7 +100,9 @@ class AgentsActionsCreate extends base_command_1.BaseCommand {
             if (kind === 'builtin') {
                 const builtinType = body.builtinType;
                 if (!agent_actions_1.BUILTIN_ACTION_TYPES.includes(builtinType)) {
-                    this.error(`--builtin-type is required for built-in actions.`, { exit: 1 });
+                    this.error(builtinType === undefined
+                        ? '--builtin-type is required for built-in actions.'
+                        : `Invalid --builtin-type "${String(builtinType)}" — expected one of ${agent_actions_1.BUILTIN_ACTION_TYPES.join(', ')}.`, { exit: 1 });
                 }
                 created = (0, agent_actions_1.makeBuiltinAction)({
                     scope,
@@ -118,7 +123,9 @@ class AgentsActionsCreate extends base_command_1.BaseCommand {
             else {
                 const prompt = typeof body.prompt === 'string' ? body.prompt : '';
                 if (!prompt.trim()) {
-                    this.error('Prompt actions require --prompt or prompt in --from-json.', { exit: 1 });
+                    this.error(typeof body.prompt === 'string'
+                        ? 'The prompt was provided but is empty. Pass non-empty text to --prompt or prompt in --from-json.'
+                        : 'Prompt actions require --prompt or prompt in --from-json.', { exit: 1 });
                 }
                 // Embedded built-in actions (chip source of truth). The prompt keeps the
                 // inline `[[action:refId]]` tokens (positional); the server expands each

package/dist/commands/browser/cloud-agents.js

@@ -22,6 +22,10 @@ class BrowserCloudAgents extends core_1.Command {
             description: 'allow, deny, or status',
             required: true,
             options: ['allow', 'deny', 'status'],
+            // Without this oclif reads stdin for a missing positional, so the command
+            // hangs when run from a pipe or a non-tty instead of refusing. Enforced
+            // by ARG_IMPLICIT_STDIN_ENABLED in the command-hygiene audit.
+            ignoreStdin: true,
         }),
     };
     static flags = {

package/dist/commands/code/handover.d.ts

@@ -21,6 +21,15 @@ import { BaseCommand } from '../../base-command';
  * code in the cloud (`skrr machines hosted start --repo` is the second, and stays the
  * right choice when you want a persistent machine instead of a one-shot job).
  *
+ * ── `--carry-session` ──────────────────────────────────────────────────────
+ *
+ * The transcript CAN travel once the engine implements the session-export
+ * contract (docs/architecture/sky-code-session-export-contract-2026-08-21.md):
+ * `session export <id> --format json` on the engine writes a versioned envelope
+ * to stdout. This flag runs exactly that contract and folds the export into the
+ * prompt — the endpoint's only carrier. An engine that predates the contract
+ * is a clean refusal, never a silent fallback to brief-only.
+ *
  * ── The safety gate is the point ───────────────────────────────────────────
  *
  * The runtime CLONES FROM GITHUB at `--base`. Uncommitted or unpushed work is
@@ -38,6 +47,8 @@ export default class CodeHandover extends BaseCommand {
         base: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         'allow-dirty': import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
         browser: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+        'carry-session': import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+        session: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         json: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
     };
     /** Run git, returning null rather than throwing — every caller has a fallback. */

package/dist/commands/code/handover.js

@@ -4,8 +4,10 @@ const core_1 = require("@oclif/core");
 const node_child_process_1 = require("node:child_process");
 const node_crypto_1 = require("node:crypto");
 const data_provider_1 = require("@skrr-ai/data-provider");
+const auth_core_1 = require("@skrr-ai/auth-core");
 const base_command_1 = require("../../base-command");
 const code_handover_1 = require("../../lib/code-handover");
+const first_party_harness_1 = require("../../lib/first-party-harness");
 /**
  * `skrr code handover` — hand the work in this directory to an agent running on
  * a cloud runtime.
@@ -28,6 +30,15 @@ const code_handover_1 = require("../../lib/code-handover");
  * code in the cloud (`skrr machines hosted start --repo` is the second, and stays the
  * right choice when you want a persistent machine instead of a one-shot job).
  *
+ * ── `--carry-session` ──────────────────────────────────────────────────────
+ *
+ * The transcript CAN travel once the engine implements the session-export
+ * contract (docs/architecture/sky-code-session-export-contract-2026-08-21.md):
+ * `session export <id> --format json` on the engine writes a versioned envelope
+ * to stdout. This flag runs exactly that contract and folds the export into the
+ * prompt — the endpoint's only carrier. An engine that predates the contract
+ * is a clean refusal, never a silent fallback to brief-only.
+ *
  * ── The safety gate is the point ───────────────────────────────────────────
  *
  * The runtime CLONES FROM GITHUB at `--base`. Uncommitted or unpushed work is
@@ -36,11 +47,13 @@ const code_handover_1 = require("../../lib/code-handover");
  * the pull request. This refuses by default and says what to do.
  */
 class CodeHandover extends base_command_1.BaseCommand {
-    static description = 'Hand the work in this directory to an agent on a cloud runtime';
+    static description = 'Hand the work in this directory to an agent on a cloud runtime ' +
+        '(--carry-session also carries the engine session transcript, when the engine supports export)';
     static examples = [
         '<%= config.bin %> code handover --to "Frontend Agent" --brief "finish the bundle-size fix"',
         '<%= config.bin %> code handover --to agent_abc --brief "continue the parser refactor" --base main',
         '<%= config.bin %> code handover --to "Engineer" --brief "..." --allow-dirty --json',
+        '<%= config.bin %> code handover --to "Engineer" --brief "..." --carry-session --session <engine-session-id>',
     ];
     static flags = {
         to: core_1.Flags.string({
@@ -64,6 +77,17 @@ class CodeHandover extends base_command_1.BaseCommand {
         browser: core_1.Flags.boolean({
             description: 'Give the receiving agent a browser. Refused where the deployment has no browser runtime, never run without one.',
         }),
+        'carry-session': core_1.Flags.boolean({
+            description: `Export the engine session transcript (\`${auth_core_1.FIRST_PARTY_HARNESS.provider} session export\`) ` +
+                'and carry it into the handover. Opt-in because carrying a whole session is a cost the ' +
+                'user should choose. Refused outright when the engine predates the export contract — ' +
+                'there is no silent fallback to brief-only.',
+            default: false,
+        }),
+        session: core_1.Flags.string({
+            description: 'Engine session id to export with --carry-session (default: the session id the engine ' +
+                `exports to its environment — ${(0, auth_core_1.firstPartyHarnessEngineEnvNames)('sessionId').join(' or ')})`,
+        }),
         json: core_1.Flags.boolean({ description: 'Output the created task as JSON' }),
     };
     /** Run git, returning null rather than throwing — every caller has a fallback. */
@@ -105,6 +129,76 @@ class CodeHandover extends base_command_1.BaseCommand {
         if (!safety.safe && !flags['allow-dirty']) {
             this.error((0, code_handover_1.formatUnsafeHandover)(gitState, safety));
         }
+        if (flags.session && !flags['carry-session']) {
+            this.warn('--session has no effect without --carry-session.');
+        }
+        // ── Optional: carry the engine session. A refused export is terminal —
+        // the flag promised the transcript would travel, so dispatching without it
+        // would silently deliver a different product than the one asked for. ────
+        let sessionExport = null;
+        let carriedSessionId = null;
+        if (flags['carry-session']) {
+            const { path: engineBin } = (0, first_party_harness_1.resolveEngine)();
+            if (!engineBin)
+                this.error((0, first_party_harness_1.notInstalledMessage)());
+            // `--session` wins; otherwise the variable the engine stamps into
+            // processes it spawns (current namespace, then the legacy spelling).
+            const sessionId = flags.session || (0, auth_core_1.readFirstPartyHarnessEngineEnv)(process.env, 'sessionId').value;
+            if (!sessionId) {
+                this.error('--carry-session needs the engine session to carry. Pass --session <engine-session-id>, ' +
+                    `or run inside a session that exports ${(0, auth_core_1.firstPartyHarnessEngineEnvNames)('sessionId')[0]}.`);
+            }
+            carriedSessionId = sessionId;
+            let stdout;
+            try {
+                stdout = (0, node_child_process_1.execFileSync)(engineBin, ['session', 'export', sessionId, '--format', 'json'], {
+                    encoding: 'utf8',
+                    stdio: ['ignore', 'pipe', 'pipe'],
+                    maxBuffer: 64 * 1024 * 1024,
+                });
+            }
+            catch (err) {
+                const e = err;
+                const failure = (0, code_handover_1.classifySessionExportError)(e);
+                if (failure.kind === 'unknown-session') {
+                    this.error(`No engine session "${sessionId}" — the engine found nothing to carry.\n` +
+                        `  ${failure.detail}`);
+                }
+                this.error(`This engine does not support session export — --carry-session requires a ` +
+                    `${auth_core_1.FIRST_PARTY_HARNESS_ENGINE.appName} engine implementing the session-export contract ` +
+                    '(docs/architecture/sky-code-session-export-contract-2026-08-21.md).\n' +
+                    `  ${failure.detail}\n` +
+                    '  Re-run without --carry-session to hand over the situation only, or upgrade the engine.');
+            }
+            const envelope = (0, code_handover_1.parseSessionExportEnvelope)(stdout);
+            if (!envelope) {
+                // Exit 0 but no contract envelope is a deviation, not a success: the
+                // one shape this side may depend on (C2) did not arrive, so attaching
+                // the output anyway would be guessing with someone else's session.
+                this.error('The engine ran `session export` but did not produce the contract envelope ' +
+                    '({version, sessionId, messages[], truncated}) — this build predates or deviates from ' +
+                    'the export contract, so nothing was attached.');
+            }
+            // The endpoint's prompt cap is 50000 chars; the transcript gets what the
+            // brief and the git context leave behind.
+            const budget = 50000 -
+                (0, code_handover_1.composeHandoverPrompt)({
+                    brief: flags.brief,
+                    repoFullName,
+                    branch,
+                    headSha: this.git(['rev-parse', '--short', 'HEAD']),
+                    recentCommits: this.git(['log', '--oneline', '-5']),
+                    localWorkNotCarried: safety.localWorkNotCarried,
+                }).length -
+                128;
+            sessionExport = (0, code_handover_1.renderSessionTranscript)(envelope, Math.max(0, budget));
+            if (sessionExport.totalCount > 0 && sessionExport.carriedCount === 0) {
+                // A "carried" block containing zero messages is a lie about what moved.
+                // The brief --brief plus git context already consumed the prompt budget.
+                this.error('The session transcript does not fit the 50000-character task prompt alongside this ' +
+                    'brief — nothing would be carried. Shorten --brief, or re-run without --carry-session.');
+            }
+        }
         // ── Target agent: id or name, from the agents this user can see. ────────
         let agents = [];
         try {
@@ -145,6 +239,7 @@ class CodeHandover extends base_command_1.BaseCommand {
             headSha: this.git(['rev-parse', '--short', 'HEAD']),
             recentCommits: this.git(['log', '--oneline', '-5']),
             localWorkNotCarried: safety.localWorkNotCarried,
+            sessionTranscript: sessionExport?.text,
         });
         let result;
         try {
@@ -173,6 +268,14 @@ class CodeHandover extends base_command_1.BaseCommand {
         const url = task.previewUrl ?? task.prUrl;
         if (url)
             this.log(`  ${String(url)}`);
+        if (sessionExport) {
+            const qualifiers = [
+                sessionExport.engineTruncated ? 'engine-truncated' : null,
+                sessionExport.clipped ? 'clipped to fit' : null,
+            ].filter(Boolean);
+            this.log(`  session ${carriedSessionId} — ${sessionExport.carriedCount}/${sessionExport.totalCount} ` +
+                `messages carried${qualifiers.length ? ` (${qualifiers.join(', ')})` : ''}`);
+        }
         if (safety.localWorkNotCarried) {
             this.log('  note   local uncommitted/unpushed work was not carried over.');
         }

package/dist/commands/code/install.js

@@ -57,6 +57,37 @@ class CodeInstall extends base_command_1.BaseCommand {
         catch (err) {
             this.handleApiError(err);
         }
+        // The daemon distinguishes three refusals, and only one of them attaches a
+        // job worth following:
+        //
+        // - `alreadyInstalled` carries the LAST job the provider ran — context, not
+        //   this request's work. Following it replays a stale outcome as though it
+        //   had just happened: `code install` on an engine one release behind
+        //   reprinted the previous update's log tail verbatim and reported that job
+        //   as its result (OSK-10650). The right answer is the daemon's own
+        //   installDisabledReason plus where the update actually comes from.
+        // - `alreadyRunning` carries the LIVE job — following it attaches the user
+        //   to work that is really in flight, which is what they asked for.
+        // - `started` carries the job this request began.
+        if (started.alreadyInstalled) {
+            if (flags.json) {
+                this.log(JSON.stringify({ daemonId, ...started }, null, 2));
+                return;
+            }
+            const state = started.provider;
+            const reason = state?.installDisabledReason?.trim();
+            const version = state?.version?.trim();
+            this.log(`Nothing to do on ${daemonId} — ${reason || 'Already installed.'}${version ? ` (${version})` : ''}`);
+            if (state?.updatable === true) {
+                this.log(`To update it: ${this.config.bin} code update`);
+            }
+            else {
+                const why = state?.updateDisabledReason?.trim();
+                if (why)
+                    this.log(`Updating: ${why}`);
+            }
+            return;
+        }
         const jobId = started.job?.id;
         // A 202 carrying NO job is not a queued install. It is the daemon
         // acknowledging the call and returning nothing, and the route builds its

package/dist/commands/code/update.d.ts

@@ -0,0 +1,46 @@
+import { BaseCommand } from '../../base-command';
+/**
+ * `skrr code update` — pull the engine's signed release down through the daemon.
+ *
+ * ── Why this command exists ────────────────────────────────────────────────
+ *
+ * The update verb has been API-exposed and daemon-implemented since OSK-10096 —
+ * `POST /api/daemons/:id/cli-installers/:provider/update` re-fetches the signed
+ * manifest and installs whatever the channel points at. But the only CLI that
+ * reached it was `skrr harnesses install <provider> --update`: a flag on a
+ * command a `code` user has no reason to read. On stable that left no
+ * discoverable path at all — `code install` answered "Already installed." with
+ * no next step, and the channel moving past the installed build was invisible
+ * from the surface that owns the engine (OSK-10650).
+ *
+ * So this adds a SURFACE and no mechanism. Same route `harnesses install
+ * --update` posts, same inventory pre-check, same 504 recovery — one update
+ * path, spelled where the engine's users look.
+ */
+export default class CodeUpdate extends BaseCommand {
+    static description: string;
+    static examples: string[];
+    static flags: {
+        daemon: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        wait: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+        json: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+    };
+    run(): Promise<void>;
+    /** Which daemon the update targets, by the rule every daemon-picking command shares. */
+    private resolveTarget;
+    /**
+     * The daemon id to update through, or the refusal — identical rules to
+     * `code install`: a Dedicated Runtime's own machine is image-managed, several
+     * connected daemons get named rather than guessed.
+     */
+    private updateTarget;
+    /**
+     * Start the update, and survive a gateway that cut the request off — the same
+     * 504 recovery `harnesses install --update` uses: the relay can drop the
+     * answer while the daemon runs the job it started, so on a server-side
+     * failure we ask the daemon and follow the job it reports.
+     */
+    private start;
+    /** Follow a job to its end, or report why it could not be followed (and return nothing). */
+    private follow;
+}

package/dist/commands/code/update.js

@@ -0,0 +1,242 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const core_1 = require("@oclif/core");
+const auth_core_1 = require("@skrr-ai/auth-core");
+const base_command_1 = require("../../base-command");
+const cli_installers_1 = require("../../lib/cli-installers");
+const daemon_target_1 = require("../../lib/daemon-target");
+const first_party_harness_1 = require("../../lib/first-party-harness");
+/**
+ * `skrr code update` — pull the engine's signed release down through the daemon.
+ *
+ * ── Why this command exists ────────────────────────────────────────────────
+ *
+ * The update verb has been API-exposed and daemon-implemented since OSK-10096 —
+ * `POST /api/daemons/:id/cli-installers/:provider/update` re-fetches the signed
+ * manifest and installs whatever the channel points at. But the only CLI that
+ * reached it was `skrr harnesses install <provider> --update`: a flag on a
+ * command a `code` user has no reason to read. On stable that left no
+ * discoverable path at all — `code install` answered "Already installed." with
+ * no next step, and the channel moving past the installed build was invisible
+ * from the surface that owns the engine (OSK-10650).
+ *
+ * So this adds a SURFACE and no mechanism. Same route `harnesses install
+ * --update` posts, same inventory pre-check, same 504 recovery — one update
+ * path, spelled where the engine's users look.
+ */
+class CodeUpdate extends base_command_1.BaseCommand {
+    static description = `Update the ${auth_core_1.FIRST_PARTY_HARNESS.displayName} engine on this machine, through the daemon`;
+    static examples = [
+        '<%= config.bin %> code update',
+        '<%= config.bin %> code update --daemon <daemon-id>',
+        '<%= config.bin %> code update --json',
+    ];
+    static flags = {
+        daemon: core_1.Flags.string({
+            description: 'Which daemon runs the update. Defaults to this machine on a Dedicated Runtime, otherwise to the only active one; required when you have several.',
+        }),
+        wait: core_1.Flags.boolean({
+            default: true,
+            allowNo: true,
+            description: 'Follow the update job until it finishes. --no-wait returns the job id.',
+        }),
+        json: core_1.Flags.boolean({ description: 'Emit the result as JSON' }),
+    };
+    async run() {
+        const { flags } = await this.parse(CodeUpdate);
+        const daemonId = this.updateTarget(await this.resolveTarget(flags.daemon));
+        // Ask the inventory before posting: a daemon older than managed updates has
+        // no handler for the request and would leave it to time out, and an engine
+        // that updates some other way has a reason the daemon already words.
+        let inventory;
+        try {
+            inventory = await (0, cli_installers_1.listCliInstallers)(daemonId, this.resolvedCredential);
+        }
+        catch (err) {
+            this.handleApiError(err);
+        }
+        const row = (inventory.providers ?? []).find((p) => (0, auth_core_1.isFirstPartyHarnessProvider)(p.provider));
+        if (!row) {
+            this.failWithCliError({
+                message: `${auth_core_1.FIRST_PARTY_HARNESS.displayName} is not installed on ${daemonId}. ` +
+                    `Install it with \`${this.config.bin} code install\`.`,
+                code: 'NOT_INSTALLED',
+                exit: 1,
+                retryable: false,
+            });
+        }
+        if (row.updatable === undefined) {
+            this.failWithCliError({
+                message: `The daemon ${daemonId} (${inventory.daemonVersion ?? 'version not reported'}) cannot update ${auth_core_1.FIRST_PARTY_HARNESS.displayName}: it predates managed updates. ` +
+                    `Update the daemon, then run this again.`,
+                code: 'DAEMON_UPDATE_UNSUPPORTED',
+                exit: 1,
+                retryable: false,
+            });
+        }
+        if (!row.updatable) {
+            this.failWithCliError({
+                message: row.updateDisabledReason?.trim() ||
+                    `${auth_core_1.FIRST_PARTY_HARNESS.displayName}: the daemon cannot update it here.`,
+                code: 'CLI_NOT_UPDATABLE',
+                exit: 1,
+                retryable: false,
+            });
+        }
+        const start = await this.start(daemonId, flags.json === true);
+        if (!start)
+            return;
+        const jobId = start.job?.id;
+        if (!start.started || !jobId) {
+            if (flags.json) {
+                this.log(JSON.stringify({ daemonId, ...start }, null, 2));
+                return;
+            }
+            this.log(start.alreadyRunning
+                ? `${auth_core_1.FIRST_PARTY_HARNESS.displayName}: an install or update is already running (job ${start.job?.id ?? 'unknown'}).`
+                : `${auth_core_1.FIRST_PARTY_HARNESS.displayName}: ${start.provider?.updateDisabledReason?.trim() || 'the daemon started no update job.'}`);
+            return;
+        }
+        if (!flags.wait) {
+            if (flags.json) {
+                this.log(JSON.stringify({ daemonId, ...start }, null, 2));
+                return;
+            }
+            this.log(`Update started on ${daemonId} — job ${jobId}.`);
+            return;
+        }
+        if (!flags.json) {
+            this.logToStderr(`Updating ${auth_core_1.FIRST_PARTY_HARNESS.displayName} ${row.version ? `${row.version} ` : ''}on ${daemonId}…`);
+        }
+        const job = await this.follow(daemonId, jobId, flags.json === true);
+        if (!job)
+            return;
+        if (flags.json) {
+            this.log(JSON.stringify({ daemonId, job }, null, 2));
+            if (job.status !== 'succeeded')
+                process.exitCode = 1;
+            return;
+        }
+        if (job.status === 'failed') {
+            this.failWithCliError({
+                message: job.error || 'The update failed and the daemon gave no reason.',
+                code: 'UPDATE_FAILED',
+                exit: 1,
+                retryable: false,
+            });
+        }
+        this.log((0, cli_installers_1.updateOutcomeLine)(job) ??
+            `${auth_core_1.FIRST_PARTY_HARNESS.displayName} updated${job.installedVersion ? ` to ${job.installedVersion}` : ''}.`);
+    }
+    /** Which daemon the update targets, by the rule every daemon-picking command shares. */
+    async resolveTarget(explicit) {
+        try {
+            return await (0, daemon_target_1.resolveDaemonTarget)({
+                explicit,
+                local: (0, daemon_target_1.localMachine)({ baseURL: this.cliConfig?.baseURL }),
+                listActiveDaemons: () => (0, daemon_target_1.listConnectedDaemons)(this.resolvedCredential),
+            });
+        }
+        catch (err) {
+            this.handleApiError(err);
+        }
+    }
+    /**
+     * The daemon id to update through, or the refusal — identical rules to
+     * `code install`: a Dedicated Runtime's own machine is image-managed, several
+     * connected daemons get named rather than guessed.
+     */
+    updateTarget(target) {
+        if (target.kind === 'daemon')
+            return target.daemonId;
+        if (target.kind === 'this-machine') {
+            this.failWithCliError({
+                message: target.explicit
+                    ? first_party_harness_1.DEDICATED_RUNTIME_ENGINE_MESSAGE
+                    : `${first_party_harness_1.DEDICATED_RUNTIME_ENGINE_MESSAGE} This command updates the machine it runs on; ` +
+                        'to update another of your machines, name it with --daemon.',
+                code: 'DEDICATED_RUNTIME_ENGINE_SHIPS_WITH_IMAGE',
+                exit: 1,
+                retryable: false,
+            });
+        }
+        if (target.kind === 'none') {
+            this.failWithCliError({
+                message: 'No daemon is connected for this account, so nothing can perform the update. ' +
+                    `Start the background service on this computer with \`${this.config.bin} daemon start\`, then run this again.`,
+                code: 'NO_DAEMON',
+                exit: 1,
+                retryable: false,
+            });
+        }
+        const { daemons } = target;
+        const choices = daemons
+            .slice(0, 10)
+            .map((d) => `  ${d.id}  ${d.name || '—'}`)
+            .join('\n');
+        this.failWithCliError({
+            message: `${daemons.length} connected daemons — say which machine should update the engine:\n${choices}\n` +
+                `Pass one with --daemon, or see each daemon id in the DAEMON ID column of \`${this.config.bin} harnesses list\`.`,
+            code: 'AMBIGUOUS_DAEMON',
+            exit: 1,
+            retryable: false,
+        });
+    }
+    /**
+     * Start the update, and survive a gateway that cut the request off — the same
+     * 504 recovery `harnesses install --update` uses: the relay can drop the
+     * answer while the daemon runs the job it started, so on a server-side
+     * failure we ask the daemon and follow the job it reports.
+     */
+    async start(daemonId, json) {
+        try {
+            return await (0, cli_installers_1.startManagedCliUpdate)(daemonId, PROVIDER, this.resolvedCredential);
+        }
+        catch (err) {
+            const status = err.status ?? 0;
+            if (status >= 500 || status === 408) {
+                const job = await (0, cli_installers_1.jobStartedDespiteTimeout)(daemonId, PROVIDER, this.resolvedCredential);
+                if (job?.id) {
+                    if (!json) {
+                        this.logToStderr(`The request to ${daemonId} did not come back (HTTP ${status}), but the daemon started job ${job.id}. Following it.`);
+                    }
+                    return { started: true, job };
+                }
+            }
+            this.handleApiError(err);
+            return undefined;
+        }
+    }
+    /** Follow a job to its end, or report why it could not be followed (and return nothing). */
+    async follow(daemonId, jobId, json) {
+        const outcome = await (0, cli_installers_1.followManagedCliInstallJob)({
+            daemonId,
+            jobId,
+            credential: this.resolvedCredential,
+            onLogLine: json ? undefined : (line) => this.logToStderr(`  ${line}`),
+        });
+        if (outcome.kind === 'missing') {
+            this.failWithCliError({
+                message: `The daemon no longer has update job ${jobId}.`,
+                code: 'JOB_MISSING',
+                exit: 1,
+                retryable: false,
+            });
+            return undefined;
+        }
+        if (outcome.kind === 'timeout') {
+            this.failWithCliError({
+                message: `Still updating after ${Math.round(cli_installers_1.INSTALL_MAX_WAIT_MS / 60000)} minutes — the daemon is ` +
+                    `still working on job ${jobId}. Check \`${this.config.bin} code doctor\` in a while.`,
+                code: 'UPDATE_PENDING',
+                exit: 1,
+                retryable: true,
+            });
+            return undefined;
+        }
+        return outcome.job;
+    }
+}
+exports.default = CodeUpdate;
+/** Same canonical provider id `code install` posts — read from the identity module. */
+const PROVIDER = auth_core_1.FIRST_PARTY_HARNESS.provider;