@skrr-ai/cli 0.1.49 → 0.1.51

package/dist/commands/spaces/update.js

@@ -135,6 +135,12 @@ class SpacesUpdate extends base_command_1.BaseCommand {
             description: 'Default task template for new tasks in this space — a template id, reference, or ' +
                 'exact title (the server resolves it to the template). Pass "none" to clear.',
         }),
+        'working-directory': core_1.Flags.string({
+            description: "Space-level working directory for this space's local Harness runs — an absolute " +
+                "path on the executing daemon's filesystem. The middle layer of task → space → " +
+                'agent: a per-task override wins, the agent default applies when neither is set. ' +
+                'Pass "none" to clear.',
+        }),
     };
     async run() {
         this.requireAuth();
@@ -159,11 +165,21 @@ class SpacesUpdate extends base_command_1.BaseCommand {
             autoStartOnBacklogExit: flags['auto-start-on-backlog-exit'],
             triageExternalIntake: flags['triage-external-intake'],
             defaultTaskTemplateId: clearable(flags['default-task-template']),
+            // Per-space working-directory default. 'none'/'clear'/'null' ⇒ null
+            // ($unset → resolution falls through to the agent default).
+            workingDirectory: (0, tasks_1.workingDirectoryFromFlag)(flags['working-directory']),
             estimateScale: flags['estimate-scale'],
             estimateScaleMigration: flags['estimate-migration'],
             defaultEstimate: flags['default-estimate'],
             useDefaultEstimateForUnestimated: flags['use-default-estimate'],
         });
+        // Post-merge, so --working-directory and --from-json are checked
+        // identically. A relative path stores fine and then silently falls back on
+        // the daemon at run time — refuse it here, where the mistake can be named.
+        const workingDirectoryError = (0, tasks_1.workingDirectoryValidationError)(payload.workingDirectory);
+        if (workingDirectoryError) {
+            this.error(workingDirectoryError, { exit: 2 });
+        }
         // Worktree-isolation default lives on the space's deliveryPolicy subdoc,
         // which the API replaces wholesale on update. Merge into the policy the user
         // supplied via --from-json, else the space's current policy, so setting just

package/dist/commands/tasks/create.d.ts

@@ -65,6 +65,7 @@ export default class TasksCreate extends BaseCommand {
         estimate: import("@oclif/core/lib/interfaces").OptionFlag<number | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         tag: import("@oclif/core/lib/interfaces").OptionFlag<string[] | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         'label-id': import("@oclif/core/lib/interfaces").OptionFlag<string[] | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        'working-directory': import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         worktree: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
         'lifecycle-definition': import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         'lifecycle-version': import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;

package/dist/commands/tasks/create.js

@@ -221,10 +221,16 @@ class TasksCreate extends base_command_1.BaseCommand {
         }),
         tag: core_1.Flags.string({ description: 'Tag (repeatable)', multiple: true }),
         'label-id': core_1.Flags.string({
+            aliases: ['label'],
             description: 'Attach a task label (repeatable) — id, or a name from `skrr labels list --applicable-to task`. ' +
                 'An unknown name is refused, never created. Manage labels with `skrr labels`.',
             multiple: true,
         }),
+        'working-directory': core_1.Flags.string({
+            description: "Working directory for this task's local Harness runs — an absolute path on " +
+                "the daemon's filesystem. Overrides the agent's default; omit to inherit the " +
+                'agent default, then the daemon session default.',
+        }),
         worktree: core_1.Flags.boolean({
             allowNo: true,
             description: "Isolate this task's autonomous runs in a one-shot git worktree (--worktree), " +

package/dist/commands/tasks/list.js

@@ -380,6 +380,7 @@ class TasksList extends base_command_1.BaseCommand {
             multiple: true,
         }),
         'label-id': core_1.Flags.string({
+            aliases: ['label'],
             description: 'Filter to tasks carrying EVERY listed label id (repeatable, AND-intersection)',
             multiple: true,
         }),

package/dist/commands/tasks/show.js

@@ -402,6 +402,51 @@ class TasksShow extends base_command_1.BaseCommand {
             this.log(`Result:      ${priorLine}`);
         }
         this.log(`Executor:    ${taskExecutorLabel(t, this.config.bin)}`);
+        // Effective run directory, resolved the same way the server resolves it —
+        // most specific scope wins: task → space → agent. The daemon layers below
+        // (session.defaultCwd → --cwd) are the daemon's own and cannot be read
+        // here, so when no owned layer wins the row is omitted rather than
+        // labelled "inherited". Two extra reads, paid only when the row can say
+        // something (a detail view).
+        if (typeof t.workingDirectory === 'string' && t.workingDirectory) {
+            this.log(`Directory:   ${t.workingDirectory} (task)`);
+        }
+        else {
+            let spaceDir = null;
+            let agentDir = null;
+            if (typeof t.spaceId === 'string' && t.spaceId) {
+                try {
+                    const space = (await data_provider_1.dataService.getSpace(t.spaceId));
+                    if (typeof space?.workingDirectory === 'string' && space.workingDirectory) {
+                        spaceDir = space.workingDirectory;
+                    }
+                }
+                catch {
+                    // Unreadable space → no claim, not a wrong one.
+                }
+            }
+            if (!spaceDir) {
+                const agentRef = (typeof t.driAgentId === 'string' && t.driAgentId) ||
+                    (Array.isArray(t.assigneeAgentIds) ? t.assigneeAgentIds[0] : null);
+                if (agentRef) {
+                    try {
+                        const agentRow = (await data_provider_1.dataService.getAgentById({
+                            agent_id: agentRef,
+                        }));
+                        if (typeof agentRow?.workingDirectory === 'string' && agentRow.workingDirectory) {
+                            agentDir = agentRow.workingDirectory;
+                        }
+                    }
+                    catch {
+                        // Same rule: unreadable → silence.
+                    }
+                }
+            }
+            const inheritedDir = spaceDir ?? agentDir;
+            if (inheritedDir) {
+                this.log(`Directory:   ${inheritedDir} (${spaceDir ? 'space' : 'agent'} default)`);
+            }
+        }
         this.log(`Priority:    ${t.priority ?? '-'}`);
         this.log(`Parent:      ${t.parentId ?? '-'}`);
         this.log(`Space:       ${t.spaceId ?? '-'}`);

package/dist/commands/tasks/update.d.ts

@@ -58,6 +58,7 @@ export default class TasksUpdate extends BaseCommand {
         tag: import("@oclif/core/lib/interfaces").OptionFlag<string[] | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         'label-id': import("@oclif/core/lib/interfaces").OptionFlag<string[] | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         'repair-release-pins': import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+        'working-directory': import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         worktree: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
     };
     run(): Promise<void>;

package/dist/commands/tasks/update.js

@@ -158,6 +158,7 @@ class TasksUpdate extends base_command_1.BaseCommand {
         }),
         tag: core_1.Flags.string({ description: 'Replace tags (repeatable)', multiple: true }),
         'label-id': core_1.Flags.string({
+            aliases: ['label'],
             description: 'Replace the task labels with these ids (repeatable, whole-list). ' +
                 'Use `skrr tasks labels attach/detach` for incremental changes.',
             multiple: true,
@@ -167,6 +168,11 @@ class TasksUpdate extends base_command_1.BaseCommand {
                 'rejected with AGENT_RELEASE_PIN_STATE_INVALID: pins that govern no current ' +
                 'assignee are dropped and broken ones are re-resolved (recorded in the activity log).',
         }),
+        'working-directory': core_1.Flags.string({
+            description: "Working directory for this task's local Harness runs — an absolute path on " +
+                'the daemon\'s filesystem. Overrides the agent\'s default. Pass "none" to ' +
+                'clear back to inheriting the agent default.',
+        }),
         worktree: core_1.Flags.boolean({
             allowNo: true,
             description: "Isolate this task's autonomous runs in a git worktree (--worktree) or force " +
@@ -347,6 +353,10 @@ class TasksUpdate extends base_command_1.BaseCommand {
             // Worktree isolation override. --worktree ⇒ 'ephemeral', --no-worktree ⇒
             // 'shared', omitted ⇒ unchanged. (Clear-to-inherit via --from-json.)
             executionIsolation: (0, tasks_2.executionIsolationFromWorktreeFlag)(flags.worktree),
+            // Per-task working-directory override. --working-directory <abs path> ⇒
+            // set; "none"/"clear"/"null" ⇒ null (clears → inherit the agent
+            // default); omitted ⇒ unchanged.
+            workingDirectory: (0, tasks_2.workingDirectoryFromFlag)(flags['working-directory']),
             // A mutation option, not a field — `undefined` unless explicitly asked
             // for, so it never counts toward the "nothing to update" check below.
             repairReleasePins: flags['repair-release-pins'] ? true : undefined,
@@ -360,6 +370,18 @@ class TasksUpdate extends base_command_1.BaseCommand {
                 retryable: false,
             });
         }
+        // Post-merge, so flag and --from-json inputs are checked identically. A
+        // relative path stores fine and then silently falls back at run time —
+        // refuse it here, where the mistake can still be named.
+        const workingDirectoryError = (0, tasks_2.workingDirectoryValidationError)(payload.workingDirectory);
+        if (workingDirectoryError) {
+            this.failWithCliError({
+                message: workingDirectoryError,
+                code: 'INVALID_TASK_WORKING_DIRECTORY',
+                exit: 2,
+                retryable: false,
+            });
+        }
         if (payloadKeys.length === 0) {
             this.failWithCliError({
                 message: 'Nothing to update. Pass at least one flag (e.g. --title) or --from-json.',

package/dist/commands/tasks/upsert.d.ts

@@ -20,6 +20,7 @@ export default class TasksUpsert extends BaseCommand {
         'assignee-user': import("@oclif/core/lib/interfaces").OptionFlag<string[] | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         'execution-mode': import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         'due-date': import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        'working-directory': import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         tag: import("@oclif/core/lib/interfaces").OptionFlag<string[] | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
     };
     run(): Promise<void>;

package/dist/commands/tasks/upsert.js

@@ -57,6 +57,10 @@ class TasksUpsert extends base_command_1.BaseCommand {
             options: ['agent', 'human'],
         }),
         'due-date': core_1.Flags.string({ description: 'Due date (ISO string)' }),
+        'working-directory': core_1.Flags.string({
+            description: "Working directory for this task's local Harness runs — an absolute path on " +
+                'the daemon\'s filesystem. Pass "none" to clear an existing override.',
+        }),
         tag: core_1.Flags.string({ description: 'Replace/create tag (repeatable)', multiple: true }),
     };
     async run() {
@@ -75,6 +79,18 @@ class TasksUpsert extends base_command_1.BaseCommand {
             });
         }
         const payload = (0, tasks_1.buildTaskCreatePayload)(body, flags);
+        // Checked here, not inside validateTaskCreatePayload's create-leg call —
+        // an upsert that resolves to UPDATE never reaches that validator, and a
+        // relative path would silently no-op at run time on the daemon.
+        const workingDirectoryError = (0, tasks_1.workingDirectoryValidationError)(payload.workingDirectory);
+        if (workingDirectoryError) {
+            this.failWithCliError({
+                message: workingDirectoryError,
+                code: 'INVALID_TASK_WORKING_DIRECTORY',
+                exit: 2,
+                retryable: false,
+            });
+        }
         let scope;
         try {
             scope = await (0, tasks_1.resolveTaskCreateScope)(payload);

package/dist/lib/agent-config.d.ts

@@ -1,5 +1,7 @@
 export declare const COMMITMENT_RESPONSIBILITY_LEVELS: readonly ["reasoning_only", "full_ownership"];
 export declare const REASONING_TOOL_ESCAPES: readonly ["bash", "browser"];
+/** Warning printed by the three retired Commitment permission flags (OSK-11975). */
+export declare const COMMITMENT_PERMISSION_FLAG_RETIRED = "This setting no longer has any effect: Commitment runs use the agent's own permissions.";
 export declare const RELEASE_INSTALL_CHANNELS: readonly ["latest", "manual"];
 /**
  * `09:00-18:00` or `09:00-18:00@America/Los_Angeles`, or a JSON object.

package/dist/lib/agent-config.js

@@ -1,12 +1,14 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.RELEASE_INSTALL_CHANNELS = exports.REASONING_TOOL_ESCAPES = exports.COMMITMENT_RESPONSIBILITY_LEVELS = void 0;
+exports.RELEASE_INSTALL_CHANNELS = exports.COMMITMENT_PERMISSION_FLAG_RETIRED = exports.REASONING_TOOL_ESCAPES = exports.COMMITMENT_RESPONSIBILITY_LEVELS = void 0;
 exports.parseWorkingHoursFlag = parseWorkingHoursFlag;
 exports.mergeAgentConfigFlags = mergeAgentConfigFlags;
 const prompt_1 = require("./prompt");
 const agent_visual_refs_1 = require("./agent-visual-refs");
 exports.COMMITMENT_RESPONSIBILITY_LEVELS = ['reasoning_only', 'full_ownership'];
 exports.REASONING_TOOL_ESCAPES = ['bash', 'browser'];
+/** Warning printed by the three retired Commitment permission flags (OSK-11975). */
+exports.COMMITMENT_PERMISSION_FLAG_RETIRED = "This setting no longer has any effect: Commitment runs use the agent's own permissions.";
 exports.RELEASE_INSTALL_CHANNELS = ['latest', 'manual'];
 /**
  * `09:00-18:00` or `09:00-18:00@America/Los_Angeles`, or a JSON object.

package/dist/lib/agentic-stream.d.ts

@@ -94,6 +94,20 @@ export type AgenticStreamOptions = {
     /** How long to keep trying to attach before reporting a detach. Default 30s. */
     attachTimeoutMs?: number;
 };
+/**
+ * What a permission request would DO, in one line a person can judge.
+ *
+ * The prompt used to be `Allow tool <name>?` and nothing else, so a shell
+ * approval read "Allow tool unknown? [y/N]" and a person approved a command
+ * they never saw (OSK-12119). The command, or else the path, or else the
+ * arguments, is the part that decides the answer.
+ *
+ * The text is chosen by the agent and printed to a terminal, so control
+ * characters are escaped: an embedded carriage return or escape sequence could
+ * otherwise redraw the line and show the person a different command than the
+ * one they are approving.
+ */
+export declare function describePermissionTarget(toolInput: unknown): string | null;
 /**
  * Small Node-side adapter for the existing Agentic Socket.IO contract.
  * It deliberately normalizes only lifecycle/text/tool events; the server's
@@ -159,6 +173,25 @@ export type ProjectedToolEvent = {
  * of the run. The pairing is unambiguous within a turn.
  */
 export declare function projectDaemonToolEvents(envelopes: unknown[], namesByCall: Map<string, string>): ProjectedToolEvent[];
+/**
+ * WHO or WHAT decided a permission request, as a reader needs it (OSK-12113).
+ *
+ * `by` names the surface or fallback that resolved the ask and is a closed wire
+ * enum; `basis` beside it says what decided. The distinction is the finding: an
+ * edit acceptEdits applied on its own was recorded `by: "cli"`, which read as
+ * the CLI user having approved something nobody was asked about.
+ */
+export declare function describePermissionDecider(ev: {
+    by?: unknown;
+    basis?: unknown;
+    mode?: unknown;
+    surface?: unknown;
+}): string;
+/**
+ * Daemon `permission-resolved` envelopes as `permission.resolved` events, named
+ * by the tool their `permission-ask` announced and carrying who decided.
+ */
+export declare function projectPermissionResolutions(envelopes: unknown[], toolsByRequest: Map<string, string>): AgenticStreamEvent[];
 /**
  * The part of a cumulative snapshot that has not been shown yet.
  *
@@ -262,8 +295,32 @@ export type SeqGap = {
     from: number;
     to: number;
 };
+/**
+ * `service` envelopes that carry a `notice` — words for the person, not
+ * diagnostics — projected as `session.notice` events. Today the only notice is
+ * `harness-session-reset`: the local harness could not resume its previous
+ * session and began a new one, so its local working context is gone.
+ */
+export declare function projectSessionNotices(envelopes: unknown[]): AgenticStreamEvent[];
 export declare function detectSeqGap(highestApplied: number, incoming: number): SeqGap | null;
-export declare function seqGapNotice(gap: SeqGap): string;
+/**
+ * The notice a reader sees when chunks went missing.
+ *
+ * It names `run.result` only when this client will actually fill `run.result`
+ * from the persisted message (`recordBackfill`). The sentence used to promise
+ * it unconditionally, while `run.result.text` was folded from the envelopes
+ * that DID arrive — so the one run told to trust `run.result` was the run whose
+ * `run.result.text` was empty, with the answer only in the record (OSK-12132).
+ */
+export declare function seqGapNotice(gap: SeqGap, options?: {
+    recordBackfill?: boolean;
+}): string;
+/**
+ * The permission mode a `run.started` reports, and where it came from
+ * (OSK-12089). `null` when the event carries no mode report at all — a cloud
+ * turn from an older server, say — so nothing is claimed.
+ */
+export declare function describeRunPermission(event: AgenticStreamEvent): string | null;
 export declare class AgenticStreamClient {
     private readonly options;
     private socket;
@@ -291,6 +348,8 @@ export declare class AgenticStreamClient {
     private readonly seenLifecycle;
     /** `call` → tool name, so a daemon `tool-call-end` can be named (OSK-7730). */
     private readonly toolNamesByCall;
+    /** `permission-ask` requestId → tool name, to name its resolution (OSK-12113). */
+    private readonly toolNamesByPermission;
     /** Text already written to the terminal, for suffix-only rendering. */
     private renderedText;
     private idleTimer;
@@ -372,6 +431,14 @@ export declare class AgenticStreamClient {
     private emitToolEvent;
     private emit;
     private finish;
+    /**
+     * The answer as the durable record holds it, for a run whose stream had a
+     * hole. Bounded: the record is written before the terminal event is sent, so
+     * it is normally there at once, and a record that stays silent must not hold
+     * the run open — the reader then gets what the stream delivered.
+     */
+    private readRecordedText;
+    private settle;
     /**
      * OSK-2944 — a transient connect failure must not end an ACCEPTED run.
      *