@skrr-ai/cli 0.1.50 → 0.1.52

package/dist/commands/spaces/create.d.ts

@@ -19,6 +19,7 @@ export default class SpacesCreate extends BaseCommand {
         'group-chat': import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         parent: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         'inherit-access': import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+        'working-directory': import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
     };
     run(): Promise<void>;
 }

package/dist/commands/spaces/create.js

@@ -9,6 +9,7 @@ const label_ref_1 = require("../../lib/label-ref");
 const web_url_1 = require("../../lib/web-url");
 const prompt_1 = require("../../lib/prompt");
 const created_line_1 = require("../../lib/created-line");
+const tasks_1 = require("../../lib/tasks");
 class SpacesCreate extends base_command_1.BaseCommand {
     static description = 'Create a new space';
     static examples = [
@@ -51,6 +52,11 @@ class SpacesCreate extends base_command_1.BaseCommand {
             allowNo: true,
             description: 'Inherit members/permissions from the parent chain (default). Use --no-inherit-access to make a private subspace.',
         }),
+        'working-directory': core_1.Flags.string({
+            description: "Space-level working directory for this space's local Harness runs — an absolute " +
+                "path on the executing daemon's filesystem. The middle layer of task → space → " +
+                'agent: a per-task override wins, the agent default applies when neither is set.',
+        }),
     };
     async run() {
         this.requireAuth();
@@ -95,7 +101,18 @@ class SpacesCreate extends base_command_1.BaseCommand {
             groupChatId: flags['group-chat'],
             parentSpaceId: flags.parent,
             inheritAccess: flags['inherit-access'],
+            workingDirectory: (0, tasks_1.workingDirectoryFromFlag)(flags['working-directory']),
         });
+        // Post-merge, so --working-directory and --from-json are checked
+        // identically: a relative path is refused here rather than stored and
+        // silently fallen back from at run time on the daemon.
+        const workingDirectoryError = (0, tasks_1.workingDirectoryValidationError)(payload.workingDirectory);
+        if (workingDirectoryError) {
+            this.error(workingDirectoryError, { exit: 2 });
+        }
+        // 'none' on create means "no space default" — the field is absent anyway.
+        if (payload.workingDirectory === null)
+            delete payload.workingDirectory;
         if (!payload.title || typeof payload.title !== 'string') {
             this.error('A title is required. Pass --title "..." or include it in --from-json.', {
                 exit: 1,

package/dist/commands/spaces/show.js

@@ -57,6 +57,11 @@ class SpacesShow extends base_command_1.BaseCommand {
         this.log(`Leader:      ${s.leadAgentId ?? '-'}`);
         this.log(`Target Date: ${s.targetDate ?? '-'}`);
         this.log(`Goals:       ${Array.isArray(s.goalIds) ? s.goalIds.length : 0}`);
+        // Only when set — the space default is the middle layer of the
+        // task → space → agent cascade, and most spaces leave it unset.
+        if (typeof s.workingDirectory === 'string' && s.workingDirectory) {
+            this.log(`Directory:   ${s.workingDirectory}`);
+        }
         this.log(`Archived:    ${s.archivedAt ? 'yes' : 'no'}`);
         this.log(`Parent:      ${s.parentSpaceId ?? '(root)'}`);
         this.log(`Depth:       ${s.depth ?? 0}`);

package/dist/commands/spaces/update.d.ts

@@ -30,6 +30,7 @@ export default class SpacesUpdate extends BaseCommand {
         'auto-start-on-backlog-exit': import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
         'triage-external-intake': import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
         'default-task-template': import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        'working-directory': import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
     };
     run(): Promise<void>;
 }

package/dist/commands/spaces/update.js

@@ -135,6 +135,12 @@ class SpacesUpdate extends base_command_1.BaseCommand {
             description: 'Default task template for new tasks in this space — a template id, reference, or ' +
                 'exact title (the server resolves it to the template). Pass "none" to clear.',
         }),
+        'working-directory': core_1.Flags.string({
+            description: "Space-level working directory for this space's local Harness runs — an absolute " +
+                "path on the executing daemon's filesystem. The middle layer of task → space → " +
+                'agent: a per-task override wins, the agent default applies when neither is set. ' +
+                'Pass "none" to clear.',
+        }),
     };
     async run() {
         this.requireAuth();
@@ -159,11 +165,21 @@ class SpacesUpdate extends base_command_1.BaseCommand {
             autoStartOnBacklogExit: flags['auto-start-on-backlog-exit'],
             triageExternalIntake: flags['triage-external-intake'],
             defaultTaskTemplateId: clearable(flags['default-task-template']),
+            // Per-space working-directory default. 'none'/'clear'/'null' ⇒ null
+            // ($unset → resolution falls through to the agent default).
+            workingDirectory: (0, tasks_1.workingDirectoryFromFlag)(flags['working-directory']),
             estimateScale: flags['estimate-scale'],
             estimateScaleMigration: flags['estimate-migration'],
             defaultEstimate: flags['default-estimate'],
             useDefaultEstimateForUnestimated: flags['use-default-estimate'],
         });
+        // Post-merge, so --working-directory and --from-json are checked
+        // identically. A relative path stores fine and then silently falls back on
+        // the daemon at run time — refuse it here, where the mistake can be named.
+        const workingDirectoryError = (0, tasks_1.workingDirectoryValidationError)(payload.workingDirectory);
+        if (workingDirectoryError) {
+            this.error(workingDirectoryError, { exit: 2 });
+        }
         // Worktree-isolation default lives on the space's deliveryPolicy subdoc,
         // which the API replaces wholesale on update. Merge into the policy the user
         // supplied via --from-json, else the space's current policy, so setting just

package/dist/commands/tasks/create.d.ts

@@ -25,6 +25,11 @@ import { type TaskRecord } from '../../lib/tasks';
  * Same shape as `warnDroppedDefaultAssignees` below, which does this for a
  * silently-dropped assignee (OSK-4857).
  */
+/**
+ * `tagLabelWarning` for a task: the task-label vocabulary of the ambient
+ * workspace. Shared by `tasks create` and `tasks update`.
+ */
+export declare function taskTagLabelWarning(tags: string[] | undefined, attachedLabelIds: string[] | undefined): Promise<string>;
 export declare function droppedEstimateWarning(requested: number | undefined, written: Record<string, unknown> | null | undefined, spaceId?: string | null): string | null;
 /** A create may have committed before any of these response failures surfaced. */
 export declare function taskCreateMayHaveCommitted(error: unknown): boolean;
@@ -65,6 +70,7 @@ export default class TasksCreate extends BaseCommand {
         estimate: import("@oclif/core/lib/interfaces").OptionFlag<number | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         tag: import("@oclif/core/lib/interfaces").OptionFlag<string[] | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         'label-id': import("@oclif/core/lib/interfaces").OptionFlag<string[] | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        'working-directory': import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         worktree: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
         'lifecycle-definition': import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         'lifecycle-version': import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;

package/dist/commands/tasks/create.js

@@ -1,5 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.taskTagLabelWarning = taskTagLabelWarning;
 exports.droppedEstimateWarning = droppedEstimateWarning;
 exports.taskCreateMayHaveCommitted = taskCreateMayHaveCommitted;
 exports.taskMatchesCreateIdentity = taskMatchesCreateIdentity;
@@ -36,6 +37,16 @@ const web_url_1 = require("../../lib/web-url");
  * Same shape as `warnDroppedDefaultAssignees` below, which does this for a
  * silently-dropped assignee (OSK-4857).
  */
+/**
+ * `tagLabelWarning` for a task: the task-label vocabulary of the ambient
+ * workspace. Shared by `tasks create` and `tasks update`.
+ */
+function taskTagLabelWarning(tags, attachedLabelIds) {
+    return (0, label_ref_1.tagLabelWarning)(tags, attachedLabelIds, {
+        applicableTo: 'task',
+        ...(process.env.OVERSKY_WORKSPACE_ID ? { workspaceId: process.env.OVERSKY_WORKSPACE_ID } : {}),
+    });
+}
 function droppedEstimateWarning(requested, written, spaceId) {
     if (requested === undefined || requested === null)
         return null;
@@ -137,7 +148,8 @@ class TasksCreate extends base_command_1.BaseCommand {
             description: 'Stable caller-supplied idempotency key for create/upsert workflows',
         }),
         'default-agent': core_1.Flags.string({
-            description: 'Override the automatic assignee with an Agent. Use "auto" to inherit the space lead ' +
+            description: 'Override the automatic assignee with an Agent (it becomes the assignee that runs the task; ' +
+                '--assignee-agent names one directly). Use "auto" to inherit the space lead ' +
                 'agent. Without this, a task falls to the agent this session is bound to ' +
                 '(OVERSKY_SESSION_AGENT_ID), to you when --execution-mode is human, or to nobody. ' +
                 'Cannot be combined with --execution-mode human.',
@@ -161,8 +173,9 @@ class TasksCreate extends base_command_1.BaseCommand {
             description: 'Commitment ID that owns this task. Use for work created directly from a commitment without a linked goal.',
         }),
         project: core_1.Flags.string({
-            description: 'Canonical Project ID — attach the task to a project. A task created with a project ' +
-                "but no --space resolves and inherits the project's space.",
+            description: 'Project to attach the task to: its `id` (uuid; a pasted `_id` is accepted and rewritten ' +
+                'to the `id`), or its ref (OSK-P-5) with --space. Without --space the task inherits ' +
+                "the project's space.",
         }),
         cycle: core_1.Flags.string({
             description: 'Cycle ID, or "current" / "next" within the task Space',
@@ -174,7 +187,8 @@ class TasksCreate extends base_command_1.BaseCommand {
             description: 'Source message ID (requires --source-conversation or daemon session context)',
         }),
         'assignee-agent': core_1.Flags.string({
-            description: 'Assignee agent — id or name, resolved within --space (repeatable)',
+            description: 'Assignee agent: the agent that DOES the work when the task starts (the first listed runs). ' +
+                'Id or name, resolved within --space (repeatable)',
             multiple: true,
         }),
         'assignee-user': core_1.Flags.string({
@@ -182,7 +196,8 @@ class TasksCreate extends base_command_1.BaseCommand {
             multiple: true,
         }),
         'dri-agent': core_1.Flags.string({
-            description: 'Explicit accountable agent DRI (separate from assignees)',
+            description: 'Accountable agent (DRI), separate from assignees. `tasks start` runs an assignee, ' +
+                'not the DRI — use --assignee-agent for the agent that does the work',
         }),
         'dri-user': core_1.Flags.string({
             description: 'Explicit accountable human DRI (separate from assignees)',
@@ -219,13 +234,18 @@ class TasksCreate extends base_command_1.BaseCommand {
                 'ancestor it inherits from); with none set, the server drops the value. Set one with ' +
                 '`spaces update <space> --estimate-scale <scale> --estimate-migration <clear|migrate>`.',
         }),
-        tag: core_1.Flags.string({ description: 'Tag (repeatable)', multiple: true }),
+        tag: core_1.Flags.string({ description: label_ref_1.TAG_FLAG_HELP, multiple: true }),
         'label-id': core_1.Flags.string({
             aliases: ['label'],
             description: 'Attach a task label (repeatable) — id, or a name from `skrr labels list --applicable-to task`. ' +
                 'An unknown name is refused, never created. Manage labels with `skrr labels`.',
             multiple: true,
         }),
+        'working-directory': core_1.Flags.string({
+            description: "Working directory for this task's local Harness runs — an absolute path on " +
+                "the daemon's filesystem. Overrides the agent's default; omit to inherit the " +
+                'agent default, then the daemon session default.',
+        }),
         worktree: core_1.Flags.boolean({
             allowNo: true,
             description: "Isolate this task's autonomous runs in a one-shot git worktree (--worktree), " +
@@ -512,6 +532,11 @@ class TasksCreate extends base_command_1.BaseCommand {
         const estimateWarning = droppedEstimateWarning(flags.estimate, created, payload.spaceId);
         if (estimateWarning)
             this.warn(estimateWarning);
+        // A `--tag` spelled like a declared label is almost always a label someone
+        // meant to attach (OSK-12053). Say so; never convert it implicitly.
+        const tagWarning = await taskTagLabelWarning(flags.tag, resolvedLabelIds);
+        if (tagWarning)
+            this.warn(tagWarning);
         if (flags.json) {
             // The raw task row alone cannot tell a script the assignee it implicitly
             // asked for was dropped (`assigneeAgentIds: []`) from "nobody was ever

package/dist/commands/tasks/show.js

@@ -402,6 +402,51 @@ class TasksShow extends base_command_1.BaseCommand {
             this.log(`Result:      ${priorLine}`);
         }
         this.log(`Executor:    ${taskExecutorLabel(t, this.config.bin)}`);
+        // Effective run directory, resolved the same way the server resolves it —
+        // most specific scope wins: task → space → agent. The daemon layers below
+        // (session.defaultCwd → --cwd) are the daemon's own and cannot be read
+        // here, so when no owned layer wins the row is omitted rather than
+        // labelled "inherited". Two extra reads, paid only when the row can say
+        // something (a detail view).
+        if (typeof t.workingDirectory === 'string' && t.workingDirectory) {
+            this.log(`Directory:   ${t.workingDirectory} (task)`);
+        }
+        else {
+            let spaceDir = null;
+            let agentDir = null;
+            if (typeof t.spaceId === 'string' && t.spaceId) {
+                try {
+                    const space = (await data_provider_1.dataService.getSpace(t.spaceId));
+                    if (typeof space?.workingDirectory === 'string' && space.workingDirectory) {
+                        spaceDir = space.workingDirectory;
+                    }
+                }
+                catch {
+                    // Unreadable space → no claim, not a wrong one.
+                }
+            }
+            if (!spaceDir) {
+                const agentRef = (typeof t.driAgentId === 'string' && t.driAgentId) ||
+                    (Array.isArray(t.assigneeAgentIds) ? t.assigneeAgentIds[0] : null);
+                if (agentRef) {
+                    try {
+                        const agentRow = (await data_provider_1.dataService.getAgentById({
+                            agent_id: agentRef,
+                        }));
+                        if (typeof agentRow?.workingDirectory === 'string' && agentRow.workingDirectory) {
+                            agentDir = agentRow.workingDirectory;
+                        }
+                    }
+                    catch {
+                        // Same rule: unreadable → silence.
+                    }
+                }
+            }
+            const inheritedDir = spaceDir ?? agentDir;
+            if (inheritedDir) {
+                this.log(`Directory:   ${inheritedDir} (${spaceDir ? 'space' : 'agent'} default)`);
+            }
+        }
         this.log(`Priority:    ${t.priority ?? '-'}`);
         this.log(`Parent:      ${t.parentId ?? '-'}`);
         this.log(`Space:       ${t.spaceId ?? '-'}`);

package/dist/commands/tasks/start.d.ts

@@ -1,6 +1,7 @@
 import { BaseCommand } from '../../base-command';
 export default class TasksStart extends BaseCommand {
     static description: string;
+    static aliases: string[];
     static examples: string[];
     static args: {
         id: import("@oclif/core/lib/interfaces").Arg<string | undefined, Record<string, unknown>>;
@@ -13,3 +14,16 @@ export default class TasksStart extends BaseCommand {
     };
     run(): Promise<void>;
 }
+/**
+ * What to run next, printed after a start (OSK-12128). A start used to print
+ * two ids and stop, and the way to watch it was found by accident. Every
+ * command named here exists; `tasks-start.follow-up.spec.ts` pins that.
+ *
+ * The last line announces the files a local run adds to its working directory:
+ * the daemon writes a per-run instruction file (AGENTS.md for Codex, CLAUDE.md
+ * for a worktree session, plus any server-sent context file) when nothing is
+ * at that name, and removes what it wrote afterwards unless it was changed
+ * (`daemon/src/session-context-file.ts`). Unannounced, those were the first two
+ * files in a directory the task said to leave alone.
+ */
+export declare function startFollowUpLines(bin: string, taskRef: string): string[];

package/dist/commands/tasks/start.js

@@ -1,12 +1,17 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.startFollowUpLines = startFollowUpLines;
 const core_1 = require("@oclif/core");
 const data_provider_1 = require("@skrr-ai/data-provider");
 const base_command_1 = require("../../base-command");
 const task_resolver_1 = require("../../lib/task-resolver");
 const git_task_1 = require("../../lib/git-task");
 class TasksStart extends base_command_1.BaseCommand {
-    static description = 'Start execution of a task (spawns a conversation + session)';
+    static description = 'Start execution of a task: its assignee agent runs it in a new conversation + session. ' +
+        'Alias: tasks execute';
+    // `tasks execute` is the verb a first-time user reaches for, and it was
+    // "not a command" (OSK-12128). One command, two names.
+    static aliases = ['tasks:execute'];
     static examples = [
         '<%= config.bin %> tasks start <task-id>',
         '<%= config.bin %> tasks start',
@@ -109,6 +114,31 @@ class TasksStart extends base_command_1.BaseCommand {
             this.log(`${branch.created ? 'Created' : 'Checked out'} branch: ${branch.branch}`);
         this.log(`Conversation: ${result.conversationId}`);
         this.log(`Session:      ${result.sessionId}`);
+        for (const line of startFollowUpLines(this.config.bin, taskIdentity.id))
+            this.log(line);
     }
 }
 exports.default = TasksStart;
+/**
+ * What to run next, printed after a start (OSK-12128). A start used to print
+ * two ids and stop, and the way to watch it was found by accident. Every
+ * command named here exists; `tasks-start.follow-up.spec.ts` pins that.
+ *
+ * The last line announces the files a local run adds to its working directory:
+ * the daemon writes a per-run instruction file (AGENTS.md for Codex, CLAUDE.md
+ * for a worktree session, plus any server-sent context file) when nothing is
+ * at that name, and removes what it wrote afterwards unless it was changed
+ * (`daemon/src/session-context-file.ts`). Unannounced, those were the first two
+ * files in a directory the task said to leave alone.
+ */
+function startFollowUpLines(bin, taskRef) {
+    return [
+        '',
+        'Follow it:',
+        `  ${bin} tasks watch ${taskRef}            status until it finishes or fails`,
+        `  ${bin} tasks transcript ${taskRef}       what the agent has said so far`,
+        `  ${bin} tasks approvals list ${taskRef}   approval requests waiting on you`,
+        'On a local machine, the run may add its instruction file (AGENTS.md / CLAUDE.md) to the',
+        'working directory while it runs; files the run wrote are removed afterwards unless changed.',
+    ];
+}

package/dist/commands/tasks/update.d.ts

@@ -58,6 +58,7 @@ export default class TasksUpdate extends BaseCommand {
         tag: import("@oclif/core/lib/interfaces").OptionFlag<string[] | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         'label-id': import("@oclif/core/lib/interfaces").OptionFlag<string[] | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         'repair-release-pins': import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+        'working-directory': import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         worktree: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
     };
     run(): Promise<void>;

package/dist/commands/tasks/update.js

@@ -9,6 +9,7 @@ const tasks_1 = require("../../lib/tasks");
 const task_resolver_1 = require("../../lib/task-resolver");
 const tasks_2 = require("../../lib/tasks");
 const create_1 = require("./create");
+const label_ref_1 = require("../../lib/label-ref");
 class TasksUpdate extends base_command_1.BaseCommand {
     static description = 'Update an existing task (partial patch). Status and PROJECT changes go through ' +
         '`tasks move` — see `--goal` / `--space` below.';
@@ -156,7 +157,10 @@ class TasksUpdate extends base_command_1.BaseCommand {
             description: 'Remove a task from the list this one blocks (repeatable)',
             multiple: true,
         }),
-        tag: core_1.Flags.string({ description: 'Replace tags (repeatable)', multiple: true }),
+        tag: core_1.Flags.string({
+            description: `Replace tags (repeatable, whole-list). ${label_ref_1.TAG_FLAG_HELP}`,
+            multiple: true,
+        }),
         'label-id': core_1.Flags.string({
             aliases: ['label'],
             description: 'Replace the task labels with these ids (repeatable, whole-list). ' +
@@ -168,6 +172,11 @@ class TasksUpdate extends base_command_1.BaseCommand {
                 'rejected with AGENT_RELEASE_PIN_STATE_INVALID: pins that govern no current ' +
                 'assignee are dropped and broken ones are re-resolved (recorded in the activity log).',
         }),
+        'working-directory': core_1.Flags.string({
+            description: "Working directory for this task's local Harness runs — an absolute path on " +
+                'the daemon\'s filesystem. Overrides the agent\'s default. Pass "none" to ' +
+                'clear back to inheriting the agent default.',
+        }),
         worktree: core_1.Flags.boolean({
             allowNo: true,
             description: "Isolate this task's autonomous runs in a git worktree (--worktree) or force " +
@@ -348,6 +357,10 @@ class TasksUpdate extends base_command_1.BaseCommand {
             // Worktree isolation override. --worktree ⇒ 'ephemeral', --no-worktree ⇒
             // 'shared', omitted ⇒ unchanged. (Clear-to-inherit via --from-json.)
             executionIsolation: (0, tasks_2.executionIsolationFromWorktreeFlag)(flags.worktree),
+            // Per-task working-directory override. --working-directory <abs path> ⇒
+            // set; "none"/"clear"/"null" ⇒ null (clears → inherit the agent
+            // default); omitted ⇒ unchanged.
+            workingDirectory: (0, tasks_2.workingDirectoryFromFlag)(flags['working-directory']),
             // A mutation option, not a field — `undefined` unless explicitly asked
             // for, so it never counts toward the "nothing to update" check below.
             repairReleasePins: flags['repair-release-pins'] ? true : undefined,
@@ -361,6 +374,18 @@ class TasksUpdate extends base_command_1.BaseCommand {
                 retryable: false,
             });
         }
+        // Post-merge, so flag and --from-json inputs are checked identically. A
+        // relative path stores fine and then silently falls back at run time —
+        // refuse it here, where the mistake can still be named.
+        const workingDirectoryError = (0, tasks_2.workingDirectoryValidationError)(payload.workingDirectory);
+        if (workingDirectoryError) {
+            this.failWithCliError({
+                message: workingDirectoryError,
+                code: 'INVALID_TASK_WORKING_DIRECTORY',
+                exit: 2,
+                retryable: false,
+            });
+        }
         if (payloadKeys.length === 0) {
             this.failWithCliError({
                 message: 'Nothing to update. Pass at least one flag (e.g. --title) or --from-json.',
@@ -423,6 +448,9 @@ class TasksUpdate extends base_command_1.BaseCommand {
         const estimateWarning = (0, create_1.droppedEstimateWarning)(flags.estimate, updated, updated?.spaceId);
         if (estimateWarning)
             this.warn(estimateWarning);
+        const tagWarning = await (0, create_1.taskTagLabelWarning)(flags.tag, flags['label-id']);
+        if (tagWarning)
+            this.warn(tagWarning);
         if (flags.json) {
             this.log(JSON.stringify((0, web_url_1.withTaskUrl)(this.cliConfig.baseURL, updated), null, 2));
             return;

package/dist/commands/tasks/upsert.d.ts

@@ -20,6 +20,7 @@ export default class TasksUpsert extends BaseCommand {
         'assignee-user': import("@oclif/core/lib/interfaces").OptionFlag<string[] | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         'execution-mode': import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         'due-date': import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        'working-directory': import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         tag: import("@oclif/core/lib/interfaces").OptionFlag<string[] | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
     };
     run(): Promise<void>;

package/dist/commands/tasks/upsert.js

@@ -57,6 +57,10 @@ class TasksUpsert extends base_command_1.BaseCommand {
             options: ['agent', 'human'],
         }),
         'due-date': core_1.Flags.string({ description: 'Due date (ISO string)' }),
+        'working-directory': core_1.Flags.string({
+            description: "Working directory for this task's local Harness runs — an absolute path on " +
+                'the daemon\'s filesystem. Pass "none" to clear an existing override.',
+        }),
         tag: core_1.Flags.string({ description: 'Replace/create tag (repeatable)', multiple: true }),
     };
     async run() {
@@ -75,6 +79,18 @@ class TasksUpsert extends base_command_1.BaseCommand {
             });
         }
         const payload = (0, tasks_1.buildTaskCreatePayload)(body, flags);
+        // Checked here, not inside validateTaskCreatePayload's create-leg call —
+        // an upsert that resolves to UPDATE never reaches that validator, and a
+        // relative path would silently no-op at run time on the daemon.
+        const workingDirectoryError = (0, tasks_1.workingDirectoryValidationError)(payload.workingDirectory);
+        if (workingDirectoryError) {
+            this.failWithCliError({
+                message: workingDirectoryError,
+                code: 'INVALID_TASK_WORKING_DIRECTORY',
+                exit: 2,
+                retryable: false,
+            });
+        }
         let scope;
         try {
             scope = await (0, tasks_1.resolveTaskCreateScope)(payload);

package/dist/commands/whoami.js

@@ -10,6 +10,7 @@ const auth_storage_1 = require("../lib/auth-storage");
 const keychain_1 = require("../lib/keychain");
 const cred_envelope_1 = require("../lib/cred-envelope");
 const config_1 = require("../lib/config");
+const cli_id_1 = require("../lib/cli-id");
 /**
  * `skrr whoami`
  *
@@ -101,7 +102,7 @@ class Whoami extends base_command_1.BaseCommand {
             daemonId,
             server: this.cliConfig.baseURL,
             profile: (0, keychain_1.getActiveProfile)(),
-            cliId: this.cliConfig.cliId ?? null,
+            cliId: (0, cli_id_1.resolveCliId)(this.cliConfig) ?? null,
             token: {
                 source: this.credentialSourceLabel(),
                 kind: this.resolvedCredential.kind,
@@ -135,8 +136,9 @@ class Whoami extends base_command_1.BaseCommand {
         // where the login message sends you to find out where you are (OSK-301).
         this.log(`Server:         ${(0, config_1.describeDeployment)(this.cliConfig.baseURL)}`);
         this.log(`Profile:        ${(0, keychain_1.getActiveProfile)()}`);
-        if (this.cliConfig.cliId) {
-            this.log(`CLI ID:         ${this.cliConfig.cliId}`);
+        const cliId = (0, cli_id_1.resolveCliId)(this.cliConfig);
+        if (cliId) {
+            this.log(`CLI ID:         ${cliId}`);
         }
         this.log(`Token source:   ${this.credentialSourceLabel() ?? '(none)'}`);
         this.log(`Token kind:     ${this.resolvedCredential.kind}`);

package/dist/lib/agent-config.d.ts

@@ -2,6 +2,8 @@ export declare const COMMITMENT_RESPONSIBILITY_LEVELS: readonly ["reasoning_only
 export declare const REASONING_TOOL_ESCAPES: readonly ["bash", "browser"];
 /** Warning printed by the three retired Commitment permission flags (OSK-11975). */
 export declare const COMMITMENT_PERMISSION_FLAG_RETIRED = "This setting no longer has any effect: Commitment runs use the agent's own permissions.";
+/** The three retired flags themselves: accepted at parse, warned on, never sent. */
+export declare const RETIRED_COMMITMENT_PERMISSION_FLAGS: readonly ["reasoning-tool-escape", "commitment-responsibility", "commitment-responsibility-ceiling"];
 export declare const RELEASE_INSTALL_CHANNELS: readonly ["latest", "manual"];
 /**
  * `09:00-18:00` or `09:00-18:00@America/Los_Angeles`, or a JSON object.

package/dist/lib/agent-config.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.RELEASE_INSTALL_CHANNELS = exports.COMMITMENT_PERMISSION_FLAG_RETIRED = exports.REASONING_TOOL_ESCAPES = exports.COMMITMENT_RESPONSIBILITY_LEVELS = void 0;
+exports.RELEASE_INSTALL_CHANNELS = exports.RETIRED_COMMITMENT_PERMISSION_FLAGS = exports.COMMITMENT_PERMISSION_FLAG_RETIRED = exports.REASONING_TOOL_ESCAPES = exports.COMMITMENT_RESPONSIBILITY_LEVELS = void 0;
 exports.parseWorkingHoursFlag = parseWorkingHoursFlag;
 exports.mergeAgentConfigFlags = mergeAgentConfigFlags;
 const prompt_1 = require("./prompt");
@@ -9,6 +9,12 @@ exports.COMMITMENT_RESPONSIBILITY_LEVELS = ['reasoning_only', 'full_ownership'];
 exports.REASONING_TOOL_ESCAPES = ['bash', 'browser'];
 /** Warning printed by the three retired Commitment permission flags (OSK-11975). */
 exports.COMMITMENT_PERMISSION_FLAG_RETIRED = "This setting no longer has any effect: Commitment runs use the agent's own permissions.";
+/** The three retired flags themselves: accepted at parse, warned on, never sent. */
+exports.RETIRED_COMMITMENT_PERMISSION_FLAGS = [
+    'reasoning-tool-escape',
+    'commitment-responsibility',
+    'commitment-responsibility-ceiling',
+];
 exports.RELEASE_INSTALL_CHANNELS = ['latest', 'manual'];
 /**
  * `09:00-18:00` or `09:00-18:00@America/Los_Angeles`, or a JSON object.
@@ -102,15 +108,13 @@ function mergeAgentConfigFlags(body, flags) {
     if (flags['todo-working-hours'] !== undefined) {
         parsed.todoWorkingHours = parseWorkingHoursFlag(String(flags['todo-working-hours']));
     }
-    if (flags['reasoning-tool-escape'] !== undefined) {
-        parsed.reasoningToolEscapes = flags['reasoning-tool-escape'];
-    }
-    if (flags['commitment-responsibility'] !== undefined) {
-        parsed.commitmentResponsibilityDefault = flags['commitment-responsibility'];
-    }
-    if (flags['commitment-responsibility-ceiling'] !== undefined) {
-        parsed.commitmentResponsibilityCeiling = flags['commitment-responsibility-ceiling'];
-    }
+    // `--reasoning-tool-escape`, `--commitment-responsibility` and
+    // `--commitment-responsibility-ceiling` are retired (OSK-11975) and are
+    // deliberately NOT forwarded. The server still accepts and echoes the stored
+    // fields, so sending them wrote a value nothing reads and handed it back as
+    // if it were live — and "a ceiling a commitment may not exceed" is a safety
+    // claim a person then believes (OSK-12068). The flags stay parseable so old
+    // scripts do not break; oclif prints COMMITMENT_PERMISSION_FLAG_RETIRED.
     if (flags['tool-resources'] !== undefined) {
         parsed.tool_resources = JSON.parse(String(flags['tool-resources']));
     }