@skrr-ai/cli 0.1.46 → 0.1.48

package/README.md

@@ -53,7 +53,7 @@ observability), and shared links.
 | **tasks result**                      | `submit`, `show` (immutable Result versions and exact Review state)                                                                                                                                                                                                                                                                                                                                                                                                                                   |
 | **tasks resource**                    | `add`, `list` (versioned inputs, references, evidence, attachments, and Deliverables)                                                                                                                                                                                                                                                                                                                                                                                                                 |
 | **tasks deliverable**                 | `add`, `list`, `confirm` (the user-facing produced-Resource workflow)                                                                                                                                                                                                                                                                                                                                                                                                                                 |
-| **tasks labels**                      | `list`, `create`, `delete`                                                                                                                                                                                                                                                                                                                                                                                                                                                                            |
+| **tasks labels**                      | `list`, `create`, `delete`, `attach`, `detach`, `suggest` (label vocabulary + per-task attachment; `suggest` asks the model to pick from the declared vocabulary, advisory only)                                                                                                                                                                                                                                                                                                                         |
 | **tasks approvals**                   | `list`, `create`, `delete`, `resolve`                                                                                                                                                                                                                                                                                                                                                                                                                                                                 |
 | **tasks attachments**                 | `list`, `delete`, `upload`, `download`                                                                                                                                                                                                                                                                                                                                                                                                                                                                |
 | **integrations**                      | `toolkits`, `search`, `execute`, `tools list`, `tools allow`, `connections connect`, `connections list`, `connections finalize`, `connections disconnect`, `connections reconnect`                                                                                                                                                                                                                                                                                                                    |

package/dist/base-command.d.ts

@@ -403,6 +403,24 @@ export declare function describeHarnessUnavailable(body: Record<string, unknown>
  * Exported for tests.
  */
 export declare function describeGitHubUnavailable(): string;
+/**
+ * Frame a typed `LABEL_SUGGESTION_UNAVAILABLE` failure as what it is — the
+ * suggestion's hosted-inference call found no billing payer — rather than a
+ * control-plane outage.
+ *
+ * `POST /api/tasks/:taskId/labels/suggest` answers 503 with this code when
+ * `resolveHostedUtilityBillingContext` cannot resolve a payer. The generic
+ * 503 handler would otherwise announce "service outage, retry once it
+ * recovers" and record an incident — all false: the platform answered, the
+ * task and its labels are untouched, and an immediate retry resolves the
+ * same nothing. Lead with the server's `cause`/`remedy` when present (the
+ * 5xx redaction boundary lets both through), falling back to the CLI's own
+ * sentence keyed on the code — in production the redaction generalizes the
+ * message to "An unexpected error occurred."
+ *
+ * Exported for tests.
+ */
+export declare function describeLabelSuggestionUnavailable(body: Record<string, unknown> | null, bin?: string): string;
 /** A deployment setting cannot recover through a client retry. */
 export declare function describeGitHubAppNotConfigured(): string;
 export declare function describeResourceNotFound(serverMessage: string | undefined, bin?: string, baseURL?: string): string | null;

package/dist/base-command.js

@@ -7,6 +7,7 @@ exports.apiRefusal = apiRefusal;
 exports.withSubject = withSubject;
 exports.describeHarnessUnavailable = describeHarnessUnavailable;
 exports.describeGitHubUnavailable = describeGitHubUnavailable;
+exports.describeLabelSuggestionUnavailable = describeLabelSuggestionUnavailable;
 exports.describeGitHubAppNotConfigured = describeGitHubAppNotConfigured;
 exports.describeResourceNotFound = describeResourceNotFound;
 exports.describeAssigneeNotInSpace = describeAssigneeNotInSpace;
@@ -19,6 +20,7 @@ const core_1 = require("@oclif/core");
 Object.defineProperty(exports, "Flags", { enumerable: true, get: function () { return core_1.Flags; } });
 const option_hint_1 = require("./lib/option-hint");
 const failed_lookup_1 = require("./lib/failed-lookup");
+const http_error_1 = require("./lib/http-error");
 // Re-exported from its home in `lib/keychain`, beside the other profile
 // functions. It lived here while `init()` was its only caller; a lib module
 // needing it would otherwise have to import the command base class, and with
@@ -797,9 +799,27 @@ class BaseCommand extends core_1.Command {
         if (optionHint) {
             err.message = `${err.message}\n\n${optionHint}`;
         }
+        // A transport error that reaches here uncaught still carries the server's
+        // coded refusal in its body — node adapter `err.body` text, axios-shaped
+        // `err.response.data` — but the envelope below reads only `err.code` and
+        // the transport line. `commitments import` answered a fingerprint-mismatch
+        // 400 as `CLI_PARSE_ERROR` while the body named the mismatch. Lift the
+        // body's code and message onto the error so the JSON envelope and the
+        // `super.catch` line both report the refusal the API actually sent.
+        const httpBody = (0, http_error_1.httpBodyOf)(err);
+        const httpStatus = (0, http_error_1.httpStatusOf)(err);
+        if (httpBody && httpStatus !== undefined && httpStatus >= 400) {
+            const bodyCode = stringProp(httpBody, 'code') || stringProp(httpBody, 'errorType');
+            const bodyMessage = stringProp(httpBody, 'message') || stringProp(httpBody, 'error');
+            err.code ??= bodyCode || `HTTP_${httpStatus}`;
+            if (bodyMessage && !err.message.includes(bodyMessage)) {
+                err.message = `${bodyMessage} — ${err.message}`;
+            }
+        }
         if (this.wantsJsonOutput()) {
             const exit = err.exitCode ?? err.oclif?.exit ?? 1;
             process.exitCode = exit;
+            const details = detailsFromCaughtError(err) ?? httpBody;
             this.log(JSON.stringify({
                 ok: false,
                 error: {
@@ -808,7 +828,7 @@ class BaseCommand extends core_1.Command {
                     retryable: err.retryable ?? false,
                     command: this.id ?? null,
                     server: this.cliConfig?.baseURL ?? null,
-                    ...(detailsFromCaughtError(err) ? { details: detailsFromCaughtError(err) } : {}),
+                    ...(details ? { details } : {}),
                 },
             }, null, 2));
             return;
@@ -931,6 +951,20 @@ class BaseCommand extends core_1.Command {
                     details: body ?? undefined,
                 });
             }
+            else if (bodyCode === 'LABEL_SUGGESTION_UNAVAILABLE') {
+                // The label-suggestion route found no inference payer — a per-call
+                // condition the API deliberately reported, not a platform outage,
+                // even though it answers 503. Intercept before the outage heuristic
+                // so the user is not told skrr is down and no incident is recorded.
+                this.failWithCliError({
+                    message: say(describeLabelSuggestionUnavailable(body, this.config.bin)),
+                    code: bodyCode,
+                    status: e.status,
+                    exit: 1,
+                    retryable: false,
+                    details: body ?? undefined,
+                });
+            }
             else if (bodyCode === 'ASSIGNEE_NOT_IN_SPACE') {
                 // Code-specific enrichment takes precedence over the status heuristic:
                 // the server rejects a non-member assignee by id with no next step, so
@@ -1467,6 +1501,32 @@ function describeGitHubUnavailable() {
     return ('GitHub is temporarily unreachable, so this request could not be completed. ' +
         'skrr itself answered, so this is not a skrr outage — try again shortly.');
 }
+/**
+ * Frame a typed `LABEL_SUGGESTION_UNAVAILABLE` failure as what it is — the
+ * suggestion's hosted-inference call found no billing payer — rather than a
+ * control-plane outage.
+ *
+ * `POST /api/tasks/:taskId/labels/suggest` answers 503 with this code when
+ * `resolveHostedUtilityBillingContext` cannot resolve a payer. The generic
+ * 503 handler would otherwise announce "service outage, retry once it
+ * recovers" and record an incident — all false: the platform answered, the
+ * task and its labels are untouched, and an immediate retry resolves the
+ * same nothing. Lead with the server's `cause`/`remedy` when present (the
+ * 5xx redaction boundary lets both through), falling back to the CLI's own
+ * sentence keyed on the code — in production the redaction generalizes the
+ * message to "An unexpected error occurred."
+ *
+ * Exported for tests.
+ */
+function describeLabelSuggestionUnavailable(body, bin = 'skrr') {
+    const cause = stringProp(body, 'cause') ||
+        'Label suggestion is unavailable — it runs on hosted inference, and no ' +
+            'billing payer could be resolved for this call.';
+    const remedy = stringProp(body, 'remedy') ||
+        `Attach a label directly with \`${bin} tasks labels attach <task-id> --label <id>\` — ` +
+            'a suggestion is a convenience, not a requirement.';
+    return `${cause}\n  → ${remedy}`;
+}
 /** A deployment setting cannot recover through a client retry. */
 function describeGitHubAppNotConfigured() {
     return ('The GitHub App is not configured on this deployment. ' +

package/dist/commands/agents/chat.d.ts

@@ -120,6 +120,27 @@ export declare function chatStreamHeaderLines(input: {
     agentUrl?: string | null;
     threadRootMessageId?: string;
 }): string[];
+/**
+ * The machine-pinning fragment of the chat-start payload. `--local-skill`
+ * already pins through the resolved skill daemon; `--daemon` alone pins the
+ * turn the same way (OSK-11797 — the flag was previously accepted and
+ * dropped). 'local' is the fail-closed pin: the server refuses rather than
+ * silently running on another machine when the named daemon is unavailable.
+ */
+export declare function daemonPinFields(localSkills: {
+    daemonId: string;
+    refs: Array<{
+        name: string;
+        pathHash: string;
+    }>;
+} | null, daemonFlag: string | undefined): {
+    executionEnvironment: 'local';
+    preferredDaemonId: string;
+    skillRefs?: Array<{
+        name: string;
+        pathHash: string;
+    }>;
+} | Record<string, never>;
 export default class AgentsChat extends BaseCommand {
     static description: string;
     static examples: string[];

package/dist/commands/agents/chat.js

@@ -8,6 +8,7 @@ exports.inspectTurnCommand = inspectTurnCommand;
 exports.noOutputFailureMessage = noOutputFailureMessage;
 exports.noStreamJsonPayload = noStreamJsonPayload;
 exports.chatStreamHeaderLines = chatStreamHeaderLines;
+exports.daemonPinFields = daemonPinFields;
 const node_fs_1 = require("node:fs");
 const core_1 = require("@oclif/core");
 const data_provider_1 = require("@skrr-ai/data-provider");
@@ -190,6 +191,26 @@ function chatStreamHeaderLines(input) {
     lines.push(`Agent URL: ${agentUrl ?? '-'}`);
     return lines;
 }
+/**
+ * The machine-pinning fragment of the chat-start payload. `--local-skill`
+ * already pins through the resolved skill daemon; `--daemon` alone pins the
+ * turn the same way (OSK-11797 — the flag was previously accepted and
+ * dropped). 'local' is the fail-closed pin: the server refuses rather than
+ * silently running on another machine when the named daemon is unavailable.
+ */
+function daemonPinFields(localSkills, daemonFlag) {
+    if (localSkills) {
+        return {
+            skillRefs: localSkills.refs,
+            executionEnvironment: 'local',
+            preferredDaemonId: localSkills.daemonId,
+        };
+    }
+    if (daemonFlag) {
+        return { executionEnvironment: 'local', preferredDaemonId: daemonFlag };
+    }
+    return {};
+}
 class AgentsChat extends base_command_1.BaseCommand {
     static description = 'Run an agent turn with live streaming, tool events, cancellation, and reconnects';
     static examples = [
@@ -246,8 +267,10 @@ class AgentsChat extends base_command_1.BaseCommand {
             multiple: true,
         }),
         daemon: core_1.Flags.string({
-            description: 'The machine whose skills --local-skill names. Defaults to your only connected daemon.',
-            dependsOn: ['local-skill'],
+            description: 'Run this turn on this machine — a daemon id from `skrr daemons`. With ' +
+                '--local-skill it names the machine whose skills are invoked; without it ' +
+                'the turn itself is pinned to that daemon and fails rather than running ' +
+                'elsewhere if it is unavailable.',
         }),
         task: core_1.Flags.string({
             description: 'Bind this turn to a task (UUID or OSK-####). Injects the canonical task id, ' +
@@ -461,13 +484,7 @@ class AgentsChat extends base_command_1.BaseCommand {
                 // turn is asked to run on the machine that listed them. An agent whose
                 // execution policy places it elsewhere keeps that placement, and the
                 // run fails saying why rather than running without the skill.
-                ...(localSkills
-                    ? {
-                        skillRefs: localSkills.refs,
-                        executionEnvironment: 'local',
-                        preferredDaemonId: localSkills.daemonId,
-                    }
-                    : {}),
+                ...daemonPinFields(localSkills, flags.daemon),
             });
         }
         catch (err) {

package/dist/commands/balance/usage/breakdown.d.ts

@@ -0,0 +1,14 @@
+import type { TSkyCodeUsageBreakdown } from '@skrr-ai/data-provider';
+import { BaseCommand } from '../../../base-command';
+export default class BalanceUsageBreakdown extends BaseCommand {
+    static description: string;
+    static examples: string[];
+    static flags: {
+        json: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+        from: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        to: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        'product-family': import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+    };
+    run(): Promise<void>;
+}
+export declare function renderSkyCodeUsageBreakdown(breakdown: TSkyCodeUsageBreakdown, log: (line: string) => void): void;

package/dist/commands/balance/usage/breakdown.js

@@ -0,0 +1,68 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.renderSkyCodeUsageBreakdown = renderSkyCodeUsageBreakdown;
+const core_1 = require("@oclif/core");
+const auth_core_1 = require("@skrr-ai/auth-core");
+const base_command_1 = require("../../../base-command");
+const balance_1 = require("../../../lib/balance");
+class BalanceUsageBreakdown extends base_command_1.BaseCommand {
+    static description = `Aggregate settled ${auth_core_1.FIRST_PARTY_HARNESS.displayName} usage by model, surface, agent and member`;
+    static examples = [
+        '<%= config.bin %> balance usage breakdown',
+        '<%= config.bin %> balance usage breakdown --json',
+        '<%= config.bin %> balance usage breakdown --workspace <workspace-id>',
+        '<%= config.bin %> balance usage breakdown --from 2026-09-01 --to 2026-09-15',
+        '<%= config.bin %> balance usage breakdown --product-family sky-code-api',
+    ];
+    static flags = {
+        json: core_1.Flags.boolean({ description: 'Output as JSON' }),
+        from: core_1.Flags.string({ description: 'Inclusive ISO start time; defaults to 30 days ago' }),
+        to: core_1.Flags.string({ description: 'Inclusive ISO end time; defaults to now' }),
+        'product-family': core_1.Flags.string({
+            description: 'Restrict to one product family (e.g. sky-code-api for PAYG spend)',
+        }),
+    };
+    async run() {
+        this.requireAuth();
+        const { flags } = await this.parse(BalanceUsageBreakdown);
+        const workspaceId = flags.workspace;
+        let breakdown;
+        try {
+            breakdown = await (0, balance_1.getSkyCodeUsageBreakdown)(workspaceId, {
+                from: flags.from,
+                to: flags.to,
+                productFamily: flags['product-family'],
+            });
+        }
+        catch (error) {
+            this.handleApiError(error);
+        }
+        if (flags.json) {
+            this.log(JSON.stringify(breakdown, null, 2));
+            return;
+        }
+        renderSkyCodeUsageBreakdown(breakdown, (line) => this.log(line));
+    }
+}
+exports.default = BalanceUsageBreakdown;
+function renderSkyCodeUsageBreakdown(breakdown, log) {
+    log(`${auth_core_1.FIRST_PARTY_HARNESS.displayName} usage breakdown · ${breakdown.ownerType} ${breakdown.ownerId}`);
+    log(`  Window ${breakdown.from} to ${breakdown.to}`);
+    log(`  Total ${(0, balance_1.formatCreditsWithUsd)(breakdown.total.usageMicros)} across ${breakdown.total.events} settled authorization${breakdown.total.events === 1 ? '' : 's'}`);
+    const section = (title, rows) => {
+        if (rows.length === 0)
+            return;
+        log(`  ${title}`);
+        for (const row of rows) {
+            const balance = row.balanceMicros > 0 ? ` · ${(0, balance_1.formatMicros)(row.balanceMicros)} billed to balance` : '';
+            log(`    ${row.label}  ${(0, balance_1.formatCreditsWithUsd)(row.usageMicros)} · ${row.events} event${row.events === 1 ? '' : 's'}${balance}`);
+        }
+    };
+    section('By model', breakdown.byModel.map((row) => ({
+        ...row,
+        label: [row.provider, row.model].filter(Boolean).join('/') || 'unknown',
+    })));
+    section('By surface', breakdown.bySurface.map((row) => ({ ...row, label: row.surface ?? 'unknown' })));
+    section('By agent', breakdown.byAgent.map((row) => ({ ...row, label: row.agentId ?? 'unattributed' })));
+    section('By member', breakdown.byMember.map((row) => ({ ...row, label: row.memberUserId ?? 'unattributed' })));
+}

package/dist/commands/balance/usage.js

@@ -51,8 +51,32 @@ function renderSkyCodeUsage(usage, log) {
     log(`  5-hour limit            ${(0, balance_1.formatCreditsWithUsd)(usage.fiveHour.limitUsageMicros)}`);
     log(`  5-hour reset            ${usage.fiveHour.resetsAt ?? 'unavailable'}`);
     log(`  Concurrent sessions     ${usage.fiveHour.activeSessions}/${usage.fiveHour.maxConcurrentSessions}`);
+    if (usage.weekly) {
+        log(`  Weekly used             ${(0, balance_1.formatCreditsWithUsd)(usage.weekly.usedUsageMicros)}`);
+        log(`  Weekly reserved         ${(0, balance_1.formatCreditsWithUsd)(usage.weekly.reservedUsageMicros)}`);
+        log(`  Weekly limit            ${(0, balance_1.formatCreditsWithUsd)(usage.weekly.limitUsageMicros)}`);
+        log(`  Weekly reset            ${usage.weekly.resetsAt ?? 'unavailable'}`);
+    }
+    if (usage.weeklyPremium && usage.weeklyPremium.limitUsageMicros > 0) {
+        log(`  Premium weekly used     ${(0, balance_1.formatCreditsWithUsd)(usage.weeklyPremium.usedUsageMicros)}`);
+        log(`  Premium weekly reserved ${(0, balance_1.formatCreditsWithUsd)(usage.weeklyPremium.reservedUsageMicros)}`);
+        log(`  Premium weekly limit    ${(0, balance_1.formatCreditsWithUsd)(usage.weeklyPremium.limitUsageMicros)}`);
+        log(`  Premium weekly reset    ${usage.weeklyPremium.resetsAt ?? 'unavailable'}`);
+    }
+    if (usage.degraded) {
+        log(`  Economy fallback        ${(0, balance_1.formatCreditsWithUsd)(usage.degraded.usedUsageMicros)} used of ${(0, balance_1.formatCreditsWithUsd)(usage.degraded.includedUsageMicros)}`);
+    }
     log(`  Available overage       ${(0, balance_1.formatCreditsWithUsd)(usage.balance.availableMicros)}`);
     log(`  Overage consent         ${usage.overageEnabled ? 'enabled' : 'disabled'}`);
+    if (usage.overage) {
+        log(`  Overage mode            ${usage.overage.mode}`);
+        if (usage.overage.mode === 'postpaid') {
+            log(`  Postpaid accrued        ${(0, balance_1.formatCreditsWithUsd)(usage.overage.postpaidAccruedMicros ?? 0)}`);
+        }
+        if (usage.overage.spendCapMicros != null) {
+            log(`  Overage spend cap       ${(0, balance_1.formatCreditsWithUsd)(usage.overage.spendCapMicros)}`);
+        }
+    }
     if (usage.dataStatus === 'partial') {
         if (usage.partialReasons?.includes('missing_entitlement_period')) {
             log('  Entitlement             period unavailable; catalog limits shown');

package/dist/commands/code/handover.d.ts

@@ -25,8 +25,8 @@ import { BaseCommand } from '../../base-command';
  *
  * The transcript CAN travel once the engine implements the session-export
  * contract (docs/architecture/sky-code-session-export-contract-2026-08-21.md):
- * `sky-code session export <id> --format json` writes a versioned envelope to
- * stdout. This flag runs exactly that contract and folds the export into the
+ * `session export <id> --format json` on the engine writes a versioned envelope
+ * to stdout. This flag runs exactly that contract and folds the export into the
  * prompt — the endpoint's only carrier. An engine that predates the contract
  * is a clean refusal, never a silent fallback to brief-only.
  *

package/dist/commands/code/handover.js

@@ -4,6 +4,7 @@ const core_1 = require("@oclif/core");
 const node_child_process_1 = require("node:child_process");
 const node_crypto_1 = require("node:crypto");
 const data_provider_1 = require("@skrr-ai/data-provider");
+const auth_core_1 = require("@skrr-ai/auth-core");
 const base_command_1 = require("../../base-command");
 const code_handover_1 = require("../../lib/code-handover");
 const first_party_harness_1 = require("../../lib/first-party-harness");
@@ -33,8 +34,8 @@ const first_party_harness_1 = require("../../lib/first-party-harness");
  *
  * The transcript CAN travel once the engine implements the session-export
  * contract (docs/architecture/sky-code-session-export-contract-2026-08-21.md):
- * `sky-code session export <id> --format json` writes a versioned envelope to
- * stdout. This flag runs exactly that contract and folds the export into the
+ * `session export <id> --format json` on the engine writes a versioned envelope
+ * to stdout. This flag runs exactly that contract and folds the export into the
  * prompt — the endpoint's only carrier. An engine that predates the contract
  * is a clean refusal, never a silent fallback to brief-only.
  *
@@ -77,15 +78,15 @@ class CodeHandover extends base_command_1.BaseCommand {
             description: 'Give the receiving agent a browser. Refused where the deployment has no browser runtime, never run without one.',
         }),
         'carry-session': core_1.Flags.boolean({
-            description: 'Export the engine session transcript (`sky-code session export`) and carry it into the ' +
-                'handover. Opt-in because carrying a whole session is a cost the user should choose. ' +
-                'Refused outright when the engine predates the export contract — there is no silent ' +
-                'fallback to brief-only.',
+            description: `Export the engine session transcript (\`${auth_core_1.FIRST_PARTY_HARNESS.provider} session export\`) ` +
+                'and carry it into the handover. Opt-in because carrying a whole session is a cost the ' +
+                'user should choose. Refused outright when the engine predates the export contract — ' +
+                'there is no silent fallback to brief-only.',
             default: false,
         }),
         session: core_1.Flags.string({
             description: 'Engine session id to export with --carry-session (default: the session id the engine ' +
-                'exports to its environment — SKRR_CODE_SESSION_ID or SKY_CODE_SESSION_ID)',
+                `exports to its environment — ${(0, auth_core_1.firstPartyHarnessEngineEnvNames)('sessionId').join(' or ')})`,
         }),
         json: core_1.Flags.boolean({ description: 'Output the created task as JSON' }),
     };
@@ -142,12 +143,10 @@ class CodeHandover extends base_command_1.BaseCommand {
                 this.error((0, first_party_harness_1.notInstalledMessage)());
             // `--session` wins; otherwise the variable the engine stamps into
             // processes it spawns (current namespace, then the legacy spelling).
-            const sessionId = flags.session ||
-                process.env.SKRR_CODE_SESSION_ID?.trim() ||
-                process.env.SKY_CODE_SESSION_ID?.trim();
+            const sessionId = flags.session || (0, auth_core_1.readFirstPartyHarnessEngineEnv)(process.env, 'sessionId').value;
             if (!sessionId) {
                 this.error('--carry-session needs the engine session to carry. Pass --session <engine-session-id>, ' +
-                    'or run inside a session that exports SKRR_CODE_SESSION_ID.');
+                    `or run inside a session that exports ${(0, auth_core_1.firstPartyHarnessEngineEnvNames)('sessionId')[0]}.`);
             }
             carriedSessionId = sessionId;
             let stdout;
@@ -165,8 +164,8 @@ class CodeHandover extends base_command_1.BaseCommand {
                     this.error(`No engine session "${sessionId}" — the engine found nothing to carry.\n` +
                         `  ${failure.detail}`);
                 }
-                this.error('This engine does not support session export — --carry-session requires a sky-code ' +
-                    'engine implementing the session-export contract ' +
+                this.error(`This engine does not support session export — --carry-session requires a ` +
+                    `${auth_core_1.FIRST_PARTY_HARNESS_ENGINE.appName} engine implementing the session-export contract ` +
                     '(docs/architecture/sky-code-session-export-contract-2026-08-21.md).\n' +
                     `  ${failure.detail}\n` +
                     '  Re-run without --carry-session to hand over the situation only, or upgrade the engine.');

package/dist/commands/code/install.js

@@ -57,6 +57,37 @@ class CodeInstall extends base_command_1.BaseCommand {
         catch (err) {
             this.handleApiError(err);
         }
+        // The daemon distinguishes three refusals, and only one of them attaches a
+        // job worth following:
+        //
+        // - `alreadyInstalled` carries the LAST job the provider ran — context, not
+        //   this request's work. Following it replays a stale outcome as though it
+        //   had just happened: `code install` on an engine one release behind
+        //   reprinted the previous update's log tail verbatim and reported that job
+        //   as its result (OSK-10650). The right answer is the daemon's own
+        //   installDisabledReason plus where the update actually comes from.
+        // - `alreadyRunning` carries the LIVE job — following it attaches the user
+        //   to work that is really in flight, which is what they asked for.
+        // - `started` carries the job this request began.
+        if (started.alreadyInstalled) {
+            if (flags.json) {
+                this.log(JSON.stringify({ daemonId, ...started }, null, 2));
+                return;
+            }
+            const state = started.provider;
+            const reason = state?.installDisabledReason?.trim();
+            const version = state?.version?.trim();
+            this.log(`Nothing to do on ${daemonId} — ${reason || 'Already installed.'}${version ? ` (${version})` : ''}`);
+            if (state?.updatable === true) {
+                this.log(`To update it: ${this.config.bin} code update`);
+            }
+            else {
+                const why = state?.updateDisabledReason?.trim();
+                if (why)
+                    this.log(`Updating: ${why}`);
+            }
+            return;
+        }
         const jobId = started.job?.id;
         // A 202 carrying NO job is not a queued install. It is the daemon
         // acknowledging the call and returning nothing, and the route builds its

package/dist/commands/code/update.d.ts

@@ -0,0 +1,46 @@
+import { BaseCommand } from '../../base-command';
+/**
+ * `skrr code update` — pull the engine's signed release down through the daemon.
+ *
+ * ── Why this command exists ────────────────────────────────────────────────
+ *
+ * The update verb has been API-exposed and daemon-implemented since OSK-10096 —
+ * `POST /api/daemons/:id/cli-installers/:provider/update` re-fetches the signed
+ * manifest and installs whatever the channel points at. But the only CLI that
+ * reached it was `skrr harnesses install <provider> --update`: a flag on a
+ * command a `code` user has no reason to read. On stable that left no
+ * discoverable path at all — `code install` answered "Already installed." with
+ * no next step, and the channel moving past the installed build was invisible
+ * from the surface that owns the engine (OSK-10650).
+ *
+ * So this adds a SURFACE and no mechanism. Same route `harnesses install
+ * --update` posts, same inventory pre-check, same 504 recovery — one update
+ * path, spelled where the engine's users look.
+ */
+export default class CodeUpdate extends BaseCommand {
+    static description: string;
+    static examples: string[];
+    static flags: {
+        daemon: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        wait: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+        json: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+    };
+    run(): Promise<void>;
+    /** Which daemon the update targets, by the rule every daemon-picking command shares. */
+    private resolveTarget;
+    /**
+     * The daemon id to update through, or the refusal — identical rules to
+     * `code install`: a Dedicated Runtime's own machine is image-managed, several
+     * connected daemons get named rather than guessed.
+     */
+    private updateTarget;
+    /**
+     * Start the update, and survive a gateway that cut the request off — the same
+     * 504 recovery `harnesses install --update` uses: the relay can drop the
+     * answer while the daemon runs the job it started, so on a server-side
+     * failure we ask the daemon and follow the job it reports.
+     */
+    private start;
+    /** Follow a job to its end, or report why it could not be followed (and return nothing). */
+    private follow;
+}