@skrr-ai/cli 0.1.8 → 0.1.10

package/dist/commands/login.js

@@ -35,11 +35,11 @@ const auth_storage_1 = require("../lib/auth-storage");
  * `cliLoginWithRefreshToken` for the full rationale.
  */
 class Login extends base_command_1.BaseCommand {
-    static description = 'Sign in to an skrr instance (PKCE localhost callback; device-code fallback)';
+    static description = 'Sign in to a skrr instance (PKCE localhost callback; device-code fallback)';
     static examples = [
         '<%= config.bin %> login',
         '<%= config.bin %> login --env prod',
-        '<%= config.bin %> login --base-url https://oversky.ai',
+        '<%= config.bin %> login --base-url https://skrr.ai',
         '<%= config.bin %> login --server http://localhost:3090',
         '<%= config.bin %> login --device-code',
         '<%= config.bin %> login --port 1455',
@@ -49,15 +49,15 @@ class Login extends base_command_1.BaseCommand {
     static flags = {
         env: core_1.Flags.string({
             description: 'Deployment to sign in to. Shorthand for the matching --base-url, and the same ' +
-                'environment names the oversky daemon accepts.',
+                'environment names the skrrd runtime CLI accepts.',
             options: Object.keys(config_1.ENVIRONMENT_BASE_URLS),
         }),
         'base-url': core_1.Flags.string({
             char: 'u',
-            description: 'API base URL to save and use (e.g. https://oversky.ai)',
+            description: 'API base URL to save and use (e.g. https://skrr.ai)',
         }),
         server: core_1.Flags.string({
-            description: 'Alias for --base-url, matching the oversky daemon CLI.',
+            description: 'Alias for --base-url, matching the skrrd runtime CLI.',
         }),
         'device-code': core_1.Flags.boolean({
             description: 'Force the device-code flow (skip the PKCE localhost callback).',
@@ -90,41 +90,84 @@ class Login extends base_command_1.BaseCommand {
                 `(${explicitBaseUrl}). Pass one of them.`, { exit: 2 });
         }
         const requestedBaseUrl = envBaseUrl ?? explicitBaseUrl;
+        /**
+         * Undo the base-URL write if this login does not complete.
+         *
+         * The write has to happen FIRST — every path below reads `baseURL` to know
+         * which deployment it is authenticating against — and it used to be kept
+         * whatever happened next. So a login that refused left the CLI pointed at a
+         * deployment it holds no credential for, while correctly ignoring the
+         * credential it does hold, and every subsequent command answered
+         * `NOT_SIGNED_IN`. Including the ones that would explain why.
+         *
+         * Dogfooded as OSK-286: `skrr login --env dev` from a non-TTY wrote the new
+         * URL and then refused for want of a terminal. Recovery was editing
+         * `~/.skrr/cli-config.json` by hand, and nothing in the output said so.
+         *
+         * Hoisting the interactivity check ahead of the write would NOT have fixed
+         * it and would have broken something real: `cliLogin` can complete without a
+         * terminal through the daemon broker, which `lib/login.ts` calls out as the
+         * case that matters most on a headless box. The defect was never the order
+         * of the check — it was keeping a pointer the login never earned.
+         */
+        let undoBaseURL = null;
         if (requestedBaseUrl) {
             const existing = (0, config_1.loadConfig)();
+            const previousBaseURL = existing.baseURL;
             const nextBaseURL = (0, config_1.canonicalizeKnownBaseURL)(requestedBaseUrl);
+            if (previousBaseURL && previousBaseURL !== nextBaseURL) {
+                undoBaseURL = () => {
+                    // Re-read rather than reusing `existing`: the flow may have persisted
+                    // other fields (cliId, migration markers) before failing, and this
+                    // must put back the POINTER without discarding those.
+                    (0, config_1.saveConfig)({ ...(0, config_1.loadConfig)(), baseURL: previousBaseURL });
+                    (0, data_provider_1.setBaseURL)(previousBaseURL);
+                };
+            }
             (0, config_1.saveConfig)({ ...existing, baseURL: nextBaseURL });
             (0, data_provider_1.setBaseURL)(nextBaseURL);
             this.cliConfig = { ...this.cliConfig, baseURL: nextBaseURL };
         }
-        // Recovery-code path: skip interactive flow entirely.
-        if (flags['recovery-code']) {
-            await this.runRecoveryCodeLogin(flags['recovery-code']);
-            return;
-        }
-        // L13 — OVERSKY_REFRESH_TOKEN env-var bootstrap. Skipped when the user
-        // explicitly asked for `--device-code`; explicit flags always win
-        // over env vars. The recovery-code path above already returned, so
-        // we know we're not on that branch.
-        const envRefreshToken = process.env.OVERSKY_REFRESH_TOKEN;
-        if (envRefreshToken && !flags['device-code']) {
-            await this.runRefreshTokenLogin(envRefreshToken);
-            return;
-        }
         try {
-            const result = await (0, login_1.cliLogin)({
-                serverUrl: this.cliConfig.baseURL,
-                scope: flags.scope ?? 'cli',
-                forceDeviceCode: flags['device-code'],
-                port: flags.port,
-            });
-            this.log('');
-            this.log(`Signed in via ${result.flow}. Run \`${this.config.bin} whoami\` to confirm your identity.`);
+            // Recovery-code path: skip interactive flow entirely.
+            if (flags['recovery-code']) {
+                await this.runRecoveryCodeLogin(flags['recovery-code']);
+                undoBaseURL = null;
+                return;
+            }
+            // L13 — OVERSKY_REFRESH_TOKEN env-var bootstrap. Skipped when the user
+            // explicitly asked for `--device-code`; explicit flags always win
+            // over env vars. The recovery-code path above already returned, so
+            // we know we're not on that branch.
+            const envRefreshToken = process.env.OVERSKY_REFRESH_TOKEN;
+            if (envRefreshToken && !flags['device-code']) {
+                await this.runRefreshTokenLogin(envRefreshToken);
+                undoBaseURL = null;
+                return;
+            }
+            try {
+                const result = await (0, login_1.cliLogin)({
+                    serverUrl: this.cliConfig.baseURL,
+                    scope: flags.scope ?? 'cli',
+                    forceDeviceCode: flags['device-code'],
+                    port: flags.port,
+                });
+                // Only now is the new pointer earned.
+                undoBaseURL = null;
+                this.log('');
+                this.log(`Signed in via ${result.flow} on ${(0, config_1.describeDeployment)(this.cliConfig.baseURL)}. ` +
+                    `Run \`${this.config.bin} whoami\` to confirm your identity.`);
+            }
+            catch (err) {
+                // Everything structured in login.ts throws Error; surface the
+                // message through the standard handler.
+                this.handleApiError(err);
+            }
         }
-        catch (err) {
-            // Everything structured in login.ts throws Error; surface the
-            // message through the standard handler.
-            this.handleApiError(err);
+        finally {
+            // Runs for a thrown error and for oclif's own exit signals alike, which is
+            // why the restore lives here rather than in the catch above.
+            undoBaseURL?.();
         }
     }
     /**
@@ -159,7 +202,8 @@ class Login extends base_command_1.BaseCommand {
                 cliId,
             });
             this.log('');
-            this.log(`Signed in via ${result.flow} (OVERSKY_REFRESH_TOKEN). ` +
+            this.log(`Signed in via ${result.flow} (OVERSKY_REFRESH_TOKEN) on ` +
+                `${(0, config_1.describeDeployment)(this.cliConfig.baseURL)}. ` +
                 `Run \`${this.config.bin} whoami\` to confirm your identity.`);
         }
         catch (err) {
@@ -236,7 +280,8 @@ class Login extends base_command_1.BaseCommand {
                 : undefined,
         }, { serverOrigin: this.cliConfig.baseURL, clearReauth: true });
         this.log('');
-        this.log(`Signed in as ${result.user.email} via recovery code.`);
+        this.log(`Signed in as ${result.user.email} via recovery code on ` +
+            `${(0, config_1.describeDeployment)(this.cliConfig.baseURL)}.`);
         this.log(`Run \`${this.config.bin} whoami\` to confirm your identity.`);
     }
 }

package/dist/commands/logout.js

@@ -1,4 +1,37 @@
 "use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.shouldSkipLocalLogout = shouldSkipLocalLogout;
 const core_1 = require("@oclif/core");
@@ -9,6 +42,7 @@ const refresh_1 = require("../lib/refresh");
 const api_fetch_1 = require("../lib/api-fetch");
 const cred_envelope_1 = require("../lib/cred-envelope");
 const device_identity_1 = require("../lib/device-identity");
+const keychain = __importStar(require("../lib/keychain"));
 function shouldSkipLocalLogout(input) {
     return (!input.hasAnyStoredToken &&
         !input.hasUsableLocalToken &&
@@ -135,6 +169,18 @@ class Logout extends base_command_1.BaseCommand {
             // when the API host is unreachable.
         }
         (0, auth_storage_1.clearAllBackends)();
+        // Sweep the credentials this product wrote under its PREVIOUS brand.
+        //
+        // Without this, logout removed only the current service and still reported
+        // an unqualified "Signed out." — leaving the pre-rename CLI credential, the
+        // pre-rename daemon credentials and BOTH KEKs on the machine, so the sealed
+        // envelope and the key that unwraps it were both still there. `--all-devices`
+        // is documented for "a stolen-laptop incident", which is precisely when that
+        // is the wrong outcome.
+        //
+        // Reported rather than silent: this destroys credentials, and one of them
+        // may belong to a still-installed `oversky` binary.
+        const sweptLegacy = keychain.deleteLegacyBrandEntries();
         // L11/L12 — also wipe shared device-identity + envelope artifacts.
         // These files live under ~/.skrr/profiles/default/ and are shared
         // with the daemon, so a `skrr logout` here also rotates the daemon's
@@ -176,7 +222,7 @@ class Logout extends base_command_1.BaseCommand {
         // not the same as safe: if two people share one OS account and the second
         // holds EDIT on the agent the first pinned, the config branch is deliberately
         // ungated (naming a shared agent is a deliberate act) and their sessions
-        // would bill it. `skrr code oversky-agent --show` reports the resolved agent
+        // would bill it. `skrr code skrr-agent --show` reports the resolved agent
         // and where it came from, which is the intended way to notice.
         const cfg = (0, config_1.loadConfig)();
         (0, config_1.saveConfig)({
@@ -192,6 +238,11 @@ class Logout extends base_command_1.BaseCommand {
                 : 'Signed out from all devices.'
             : 'Signed out.';
         this.log(finalMessage);
+        if (sweptLegacy.length > 0) {
+            this.log(`Also removed ${sweptLegacy.length} credential${sweptLegacy.length === 1 ? '' : 's'} left by the previous product identity:`);
+            for (const service of sweptLegacy)
+                this.log(`  ${service}`);
+        }
     }
     /**
      * Iterate the user's daemon resources and revoke each one. Honors

package/dist/commands/machines/hosted/start.js

@@ -5,7 +5,7 @@ const node_crypto_1 = require("node:crypto");
 const base_command_1 = require("../../../base-command");
 const hosted_machines_1 = require("../../../lib/hosted-machines");
 class HostedMachinesStart extends base_command_1.BaseCommand {
-    static description = 'Start an skrr Hosted Machine';
+    static description = 'Start a skrr Hosted Machine';
     static examples = [
         '<%= config.bin %> machines hosted start --name scratch --wait',
         '<%= config.bin %> machines hosted start --repo acme/app --installation-id 123 --branch main --wait',

package/dist/commands/pair.js

@@ -39,8 +39,8 @@ function buildPairAad(daemonId, responseUserId) {
 }
 class Pair extends base_command_1.BaseCommand {
     static description = PAIR_FEATURE_ENABLED
-        ? 'Pair this daemon to an skrr account via the mobile app.'
-        : "Pair this daemon to an skrr account via the mobile app (mobile app integration pending; use 'oversky login' for now).";
+        ? 'Pair this daemon to a skrr account via the mobile app.'
+        : "Pair this daemon to a skrr account via the mobile app (mobile app integration pending; use 'skrr login' for now).";
     // H16 — hide from `--help` output unless the feature flag is on at
     // module load. oclif consults this static field when generating the
     // top-level command list.

package/dist/commands/projects/create.js

@@ -6,6 +6,7 @@ const base_command_1 = require("../../base-command");
 const space_argument_1 = require("../../lib/space-argument");
 const projects_1 = require("../../lib/projects");
 const web_url_1 = require("../../lib/web-url");
+const created_line_1 = require("../../lib/created-line");
 class ProjectsCreate extends base_command_1.BaseCommand {
     static description = 'Create a project in a space';
     static examples = [
@@ -68,7 +69,11 @@ class ProjectsCreate extends base_command_1.BaseCommand {
             this.log(JSON.stringify({ ...p, url }, null, 2));
             return;
         }
-        this.log(`Created project ${p.identifier ?? p.id ?? p._id ?? ''} — ${p.title ?? flags.title}`);
+        this.log((0, created_line_1.createdLine)('project', {
+            ref: p.identifier,
+            id: (p.id ?? p._id),
+            title: (p.title ?? flags.title),
+        }));
         if (url)
             this.log(`View it at ${url}`);
     }

package/dist/commands/projects/tasks.js

@@ -4,6 +4,7 @@ const core_1 = require("@oclif/core");
 const data_provider_1 = require("@skrr-ai/data-provider");
 const base_command_1 = require("../../base-command");
 const format_1 = require("../../lib/format");
+const web_url_1 = require("../../lib/web-url");
 /**
  * `skrr projects tasks <project>` — the tasks in a project.
  *
@@ -60,7 +61,11 @@ class ProjectsTasks extends base_command_1.BaseCommand {
             this.handleApiError(err, { subject: `project ${args.id}` });
         }
         if (flags.json) {
-            this.log(JSON.stringify(result, null, 2));
+            // The same task carries a `url` via `tasks list` and `spaces tasks`, and
+            // did not here — so whether a row was linkable depended on which command
+            // you happened to list it from. `withDataUrls` is the same helper those
+            // two use, and it leaves a non-list response untouched.
+            this.log(JSON.stringify((0, web_url_1.withDataUrls)(this.cliConfig.baseURL, result, web_url_1.taskUrlFrom), null, 2));
             return;
         }
         const items = result?.data ?? [];

package/dist/commands/revoke-daemon.js

@@ -3,6 +3,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 const core_1 = require("@oclif/core");
 const base_command_1 = require("../base-command");
 const api_fetch_1 = require("../lib/api-fetch");
+const daemon_ref_1 = require("../lib/daemon-ref");
 /**
  * `skrr revoke-daemon <id-or-prefix>`
  *
@@ -45,7 +46,10 @@ class RevokeDaemon extends base_command_1.BaseCommand {
     async run() {
         this.requireAuth();
         const { args, flags } = await this.parse(RevokeDaemon);
-        const input = args.idOrPrefix.trim();
+        // Accept what `list-daemons` prints, decoration and all — the DAEMON REF
+        // column is the obvious place to copy an id from, and it was the one
+        // value this command refused.
+        const input = (0, daemon_ref_1.normalizeDaemonRef)(args.idOrPrefix);
         // Resolve the full daemon ID (possibly from a prefix lookup).
         let resolvedId;
         let resolvedDaemon;
@@ -130,7 +134,7 @@ class RevokeDaemon extends base_command_1.BaseCommand {
             const any = list.daemons.find((d) => d.id.startsWith(prefix));
             if (any)
                 return { id: any.id, daemon: any };
-            this.error(`No daemon matches prefix "${prefix}".`, { exit: 1 });
+            this.error(`No daemon matches "${prefix}". Run \`skrr list-daemons\` to see the ids on this account.`, { exit: 1 });
         }
         if (active.length > 1) {
             const ids = active.map((d) => `  ${d.id}  (${d.name})`).join('\n');

package/dist/commands/set-capabilities.js

@@ -3,6 +3,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 const core_1 = require("@oclif/core");
 const base_command_1 = require("../base-command");
 const api_fetch_1 = require("../lib/api-fetch");
+const daemon_ref_1 = require("../lib/daemon-ref");
 /**
  * `skrr set-capabilities <id-or-prefix> <cap>[,<cap>…]`
  *
@@ -39,7 +40,10 @@ class SetCapabilities extends base_command_1.BaseCommand {
     async run() {
         this.requireAuth();
         const { args, flags } = await this.parse(SetCapabilities);
-        const input = args.idOrPrefix.trim();
+        // Accept what `list-daemons` prints, decoration and all — the DAEMON REF
+        // column is the obvious place to copy an id from, and it was the one
+        // value this command refused.
+        const input = (0, daemon_ref_1.normalizeDaemonRef)(args.idOrPrefix);
         const capabilities = args.capabilities
             .split(',')
             .map((s) => s.trim())
@@ -118,7 +122,7 @@ class SetCapabilities extends base_command_1.BaseCommand {
             const any = list.daemons.find((d) => d.id.startsWith(prefix));
             if (any)
                 return any.id;
-            this.error(`No daemon matches prefix "${prefix}".`, { exit: 2 });
+            this.error(`No daemon matches "${prefix}". Run \`skrr list-daemons\` to see the ids on this account.`, { exit: 2 });
         }
         if (active.length > 1) {
             const ids = active.map((d) => `  ${d.id}  (${d.name})`).join('\n');

package/dist/commands/skills/install.js

@@ -30,7 +30,7 @@ class SkillsInstall extends base_command_1.BaseCommand {
         const { args, flags } = await this.parse(SkillsInstall);
         if (flags.service && !flags.agent) {
             // One-line stderr warning; doesn't break --json consumers on stdout.
-            process.stderr.write('[sky] --service is deprecated for `skills install`; use --agent instead.\n');
+            process.stderr.write('[skrr] --service is deprecated for `skills install`; use --agent instead.\n');
         }
         const targetAgentId = flags.agent ?? flags.service ?? null;
         let result;

package/dist/commands/skills/library.js

@@ -28,10 +28,10 @@ class SkillsLibrary extends base_command_1.BaseCommand {
         this.requireAuth();
         const { flags } = await this.parse(SkillsLibrary);
         if (flags.agent && flags.service) {
-            process.stderr.write('[sky] both --agent and --service given; using --agent and ignoring --service.\n');
+            process.stderr.write('[skrr] both --agent and --service given; using --agent and ignoring --service.\n');
         }
         else if (flags.service && !flags.agent) {
-            process.stderr.write('[sky] --service is deprecated for `skills library`; use --agent instead.\n');
+            process.stderr.write('[skrr] --service is deprecated for `skills library`; use --agent instead.\n');
         }
         const agentId = flags.agent ?? flags.service;
         let response;

package/dist/commands/spaces/create.js

@@ -6,6 +6,7 @@ const api_fetch_1 = require("../../lib/api-fetch");
 const base_command_1 = require("../../base-command");
 const web_url_1 = require("../../lib/web-url");
 const prompt_1 = require("../../lib/prompt");
+const created_line_1 = require("../../lib/created-line");
 class SpacesCreate extends base_command_1.BaseCommand {
     static description = 'Create a new space';
     static examples = [
@@ -112,8 +113,11 @@ class SpacesCreate extends base_command_1.BaseCommand {
             this.log(JSON.stringify({ ...s, url }, null, 2));
             return;
         }
-        const parentNote = s.parentSpaceId ? ` (subspace of ${s.parentSpaceId})` : '';
-        this.log(`Created space ${s.id ?? s._id ?? '?'} - ${s.title ?? '(no title)'}${parentNote}`);
+        this.log((0, created_line_1.createdLine)('space', {
+            ref: s.identifier,
+            id: (s.id ?? s._id),
+            title: s.title,
+        }));
         if (url)
             this.log(`View it at ${url}`);
     }

package/dist/commands/tasks/complete.d.ts

@@ -92,7 +92,7 @@ export default class TasksComplete extends BaseCommand {
         'from-json': import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         status: import("@oclif/core/lib/interfaces").OptionFlag<string, import("@oclif/core/lib/interfaces").CustomOptions>;
         summary: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
-        artifacts: import("@oclif/core/lib/interfaces").OptionFlag<string, import("@oclif/core/lib/interfaces").CustomOptions>;
+        artifacts: import("@oclif/core/lib/interfaces").OptionFlag<string[], import("@oclif/core/lib/interfaces").CustomOptions>;
         artifact: import("@oclif/core/lib/interfaces").OptionFlag<string[] | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
         verdict: import("@oclif/core/lib/interfaces").OptionFlag<string, import("@oclif/core/lib/interfaces").CustomOptions>;
         outcome: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;

package/dist/commands/tasks/complete.js

@@ -151,10 +151,18 @@ class TasksComplete extends base_command_1.BaseCommand {
         }),
         summary: core_1.Flags.string({ description: 'Completion summary' }),
         artifacts: core_1.Flags.string({
-            description: 'Artifacts produced, or "none". Repeat --artifact for a list. The whole ' +
-                `TASK_OUTPUT block (status + summary + artifacts + verdict) must fit in ${data_provider_1.TASK_OUTPUT_BODY_MAX} ` +
+            description: 'Artifacts produced, or "none". Repeatable, and interchangeable with --artifact. ' +
+                `The whole TASK_OUTPUT block (status + summary + artifacts + verdict) must fit in ${data_provider_1.TASK_OUTPUT_BODY_MAX} ` +
                 'characters — link to commits, PRs, or file paths rather than pasting content.',
-            default: 'none',
+            // Repeatable, even though `--artifact` already is. The two spellings sit
+            // one letter apart and both read as "the artifacts go here", so the wrong
+            // one gets typed — and oclif answered that with "Flag --artifacts can only
+            // be specified once", which names the flag you used and not the sibling
+            // that does what you wanted. Dogfooded (OSK-266) by losing a completion
+            // call to exactly that, then re-running with the two references pre-joined
+            // into one string, which is the workaround rather than the shape.
+            multiple: true,
+            default: ['none'],
         }),
         artifact: core_1.Flags.string({
             description: 'A single artifact reference (repeatable); joined with commas. Prefer this ' +
@@ -201,11 +209,16 @@ class TasksComplete extends base_command_1.BaseCommand {
         const input = (0, prompt_1.mergeDefined)(jsonBody, {
             status: flags.status,
             summary: flags.summary,
-            // Repeated --artifact wins over the single --artifacts string; both
-            // normalize to the same one-line form the server stores.
-            artifacts: flags.artifact?.length
-                ? (0, data_provider_1.normalizeTaskOutputArtifacts)(flags.artifact)
-                : flags.artifacts,
+            // Both spellings, pooled, then normalized to the one-line form the server
+            // stores. Pooling rather than letting one win: someone who passes both has
+            // named artifacts in each, and silently dropping half of them is worse
+            // than either flag being unavailable.
+            artifacts: (0, data_provider_1.normalizeTaskOutputArtifacts)([
+                ...(flags.artifact ?? []),
+                // The literal default is dropped when it is only the default; a user
+                // who typed `--artifacts none` alongside a real one meant the real one.
+                ...(flags.artifacts ?? []).filter((value) => value !== 'none'),
+            ]) || 'none',
             verdict: flags.verdict,
         });
         let taskIdentity;

package/dist/commands/tasks/create.js

@@ -47,7 +47,10 @@ class TasksCreate extends base_command_1.BaseCommand {
                 '(OVERSKY_SESSION_AGENT_ID), to you when --execution-mode is human, or to nobody. ' +
                 'Cannot be combined with --execution-mode human.',
         }),
-        priority: core_1.Flags.string({ description: 'Task priority' }),
+        priority: core_1.Flags.string({
+            description: 'Task priority',
+            options: [...tasks_1.TASK_PRIORITIES],
+        }),
         parent: core_1.Flags.string({ description: 'Parent task ID' }),
         'spawned-by': core_1.Flags.string({
             description: 'Task whose execution produced this one (lineage). Distinct from --parent (containment) and blockers (ordering).',

package/dist/commands/tasks/current.js

@@ -18,7 +18,7 @@ class TasksCurrent extends base_command_1.BaseCommand {
         const current = (0, git_task_1.currentGitTaskBranch)();
         if (!current) {
             this.failWithCliError({
-                message: 'The current git branch does not identify an skrr task.',
+                message: 'The current git branch does not identify a skrr task.',
                 code: 'TASK_BRANCH_CONTEXT_MISSING',
                 exit: 2,
                 retryable: false,

package/dist/commands/tasks/delete.d.ts

@@ -7,6 +7,7 @@ export default class TasksDelete extends BaseCommand {
     };
     static flags: {
         yes: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+        json: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
     };
     run(): Promise<void>;
 }

package/dist/commands/tasks/delete.js

@@ -15,6 +15,11 @@ class TasksDelete extends base_command_1.BaseCommand {
     };
     static flags = {
         yes: core_1.Flags.boolean({ char: 'y', description: 'Skip confirmation prompt' }),
+        // Every sibling here takes --json, and a script that batches deletes
+        // reasonably passes it to all of them. This command rejected it with
+        // CLI_PARSE_ERROR, so a loop that discarded output — the normal shape for a
+        // cleanup loop — deleted nothing and reported nothing.
+        json: core_1.Flags.boolean({ description: 'Output as JSON' }),
     };
     async run() {
         this.requireAuth();
@@ -30,6 +35,8 @@ class TasksDelete extends base_command_1.BaseCommand {
             throw err;
         }
         if (!confirmed) {
+            if (flags.json)
+                return this.log(JSON.stringify({ deleted: false, id: args.id }, null, 2));
             this.log('Cancelled.');
             return;
         }
@@ -39,6 +46,8 @@ class TasksDelete extends base_command_1.BaseCommand {
         catch (err) {
             this.handleApiError(err);
         }
+        if (flags.json)
+            return this.log(JSON.stringify({ deleted: true, id: args.id }, null, 2));
         this.log(`Deleted task ${args.id}`);
     }
 }

package/dist/commands/tasks/export.js

@@ -5,6 +5,7 @@ const core_1 = require("@oclif/core");
 const data_provider_1 = require("@skrr-ai/data-provider");
 const base_command_1 = require("../../base-command");
 const list_1 = require("./list");
+const tasks_1 = require("../../lib/tasks");
 const task_transfer_1 = require("../../lib/task-transfer");
 /** The list filter vocabulary is intentionally mirrored here; request construction stays shared. */
 const FILTER_FLAGS = {
@@ -25,7 +26,10 @@ const FILTER_FLAGS = {
     'actionability-state': core_1.Flags.string({ description: 'Filter by readiness state' }),
     'actionability-reason': core_1.Flags.string({ description: 'Filter by readiness reason code' }),
     'needs-me': core_1.Flags.boolean({ description: 'Filter to human-actionable work addressed to you' }),
-    priority: core_1.Flags.string({ description: 'Filter by task priority' }),
+    priority: core_1.Flags.string({
+        description: 'Filter by task priority',
+        options: [...tasks_1.TASK_PRIORITIES],
+    }),
     'assignee-agent': core_1.Flags.string({ description: 'Filter by assigned agent ID' }),
     'assignee-user': core_1.Flags.string({ description: 'Filter by assigned user ID' }),
     mine: core_1.Flags.boolean({ description: 'Filter to tasks assigned to you' }),

package/dist/commands/tasks/follow-up.js

@@ -4,6 +4,7 @@ const core_1 = require("@oclif/core");
 const base_command_1 = require("../../base-command");
 const task_extras_1 = require("../../lib/task-extras");
 const prompt_1 = require("../../lib/prompt");
+const tasks_1 = require("../../lib/tasks");
 function parsePointers(values) {
     if (!values?.length)
         return undefined;
@@ -77,7 +78,7 @@ class TasksFollowUp extends base_command_1.BaseCommand {
         }),
         priority: core_1.Flags.string({
             description: 'Follow-up task priority',
-            options: ['low', 'medium', 'high', 'critical'],
+            options: [...tasks_1.TASK_PRIORITIES],
         }),
         tag: core_1.Flags.string({ description: 'Tag to add to the follow-up task', multiple: true }),
         'assignee-agent': core_1.Flags.string({

package/dist/commands/tasks/list.js

@@ -6,6 +6,7 @@ const data_provider_1 = require("@skrr-ai/data-provider");
 const base_command_1 = require("../../base-command");
 const web_url_1 = require("../../lib/web-url");
 const format_1 = require("../../lib/format");
+const tasks_1 = require("../../lib/tasks");
 /**
  * The task-list request bag is shared with import/export so every CLI list
  * surface serializes the same server-side filters. Keep user-id resolution in
@@ -156,7 +157,10 @@ class TasksList extends base_command_1.BaseCommand {
         'actionability-reason': core_1.Flags.string({
             description: 'Filter by machine-readable readiness reason code',
         }),
-        priority: core_1.Flags.string({ description: 'Filter by task priority' }),
+        priority: core_1.Flags.string({
+            description: 'Filter by task priority',
+            options: [...tasks_1.TASK_PRIORITIES],
+        }),
         estimate: core_1.Flags.integer({ description: 'Filter by an exact estimate value' }),
         'min-estimate': core_1.Flags.integer({
             description: 'Filter to tasks estimated at or above this value',

package/dist/commands/tasks/pr.js

@@ -32,7 +32,7 @@ class TasksPr extends base_command_1.BaseCommand {
         const current = (0, git_task_1.currentGitTaskBranch)();
         if (!current) {
             this.failWithCliError({
-                message: 'The current git branch does not identify an skrr task.',
+                message: 'The current git branch does not identify a skrr task.',
                 code: 'TASK_BRANCH_CONTEXT_MISSING',
                 exit: 2,
                 retryable: false,