@skrr-ai/cli 0.1.8 → 0.1.9

package/dist/lib/tasks.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.TASK_WORK_EVENT_KINDS = void 0;
+exports.TASK_WORK_EVENT_KINDS = exports.TASK_PRIORITIES = void 0;
 exports.releasePinRepairGuard = releasePinRepairGuard;
 exports.taskUpdateMutationGuard = taskUpdateMutationGuard;
 exports.executionIsolationFromWorktreeFlag = executionIsolationFromWorktreeFlag;
@@ -30,7 +30,7 @@ exports.normalizeBulkUpdateInput = normalizeBulkUpdateInput;
 const data_provider_1 = require("@skrr-ai/data-provider");
 const prompt_1 = require("./prompt");
 const projects_1 = require("./projects");
-const TASK_PRIORITIES = ['low', 'medium', 'high', 'critical'];
+exports.TASK_PRIORITIES = ['low', 'medium', 'high', 'critical'];
 const DESCRIPTION_FORMATS = ['html', 'markdown', 'plain'];
 /**
  * The kinds `tasks events append --kind` will accept.
@@ -201,8 +201,8 @@ function validateTaskCreatePayload(payload) {
         errors.push(`descriptionFormat must be one of: ${DESCRIPTION_FORMATS.join(', ')}`);
     }
     if (payload.priority !== undefined &&
-        !TASK_PRIORITIES.includes(payload.priority)) {
-        errors.push(`priority must be one of: ${TASK_PRIORITIES.join(', ')}`);
+        !exports.TASK_PRIORITIES.includes(payload.priority)) {
+        errors.push(`priority must be one of: ${exports.TASK_PRIORITIES.join(', ')}`);
     }
     if (payload.externalKey !== undefined && !isBoundedString(payload.externalKey, 1, 300)) {
         errors.push('externalKey must be a non-empty string at most 300 characters');
@@ -566,9 +566,12 @@ function taskRef(task) {
     return '';
 }
 function formatTaskLabel(task) {
-    const id = taskId(task) || '?';
+    // Ref first, id as the fallback — matching every other entity's confirmation
+    // (see `lib/created-line.ts`). Printing both put a uuid in front of the ref a
+    // person would actually type, and the `View it at` line already carries the id.
     const ref = taskRef(task);
-    return `${id}${ref ? ` (${ref})` : ''} — ${String(task.title ?? '(no title)')}`;
+    const label = ref || taskId(task) || '?';
+    return `${label} — ${String(task.title ?? '(no title)')}`;
 }
 function hasTaskAssignee(task) {
     return (stringArray(task?.assigneeAgentIds).length > 0 || stringArray(task?.assigneeUserIds).length > 0);

package/dist/lib/update-check.js

@@ -138,7 +138,7 @@ function buildNudgeLine(currentVersion, latest, npmPackage) {
     if (!latest || !isOlderVersion(currentVersion, latest))
         return null;
     const pkg = npmPackage || '@skrr-ai/cli';
-    return (`[sky] Update available: ${currentVersion} → ${latest}. ` +
+    return (`[skrr] Update available: ${currentVersion} → ${latest}. ` +
         `Run \`npm update -g ${pkg}\` (or update the skrr app). ` +
         `Silence with OVERSKY_NO_UPDATE_NUDGE=1.\n`);
 }

package/dist/lib/usage-discovery.js

@@ -95,7 +95,7 @@ function buildUsageReference(manifest, domainInput, options = {}) {
 }
 function renderUsageOverview(overview) {
     const lines = [
-        `Sky command domains (${overview.domains.length}; manifest-derived).`,
+        `skrr command domains (${overview.domains.length}; manifest-derived).`,
         'Read one domain at a time: skrr usage <domain>.',
         ...overview.domains.map(({ domain }) => domain),
     ];

package/dist/lib/web-url.js

@@ -40,6 +40,7 @@ exports.withNorthstarUrl = withNorthstarUrl;
 exports.withAgentUrl = withAgentUrl;
 exports.withDataUrls = withDataUrls;
 exports.workflowUrlFrom = workflowUrlFrom;
+const publicEndpoints_generated_1 = require("./publicEndpoints.generated");
 /**
  * Site-relative canonical path for an entity, or `null` when the required id is
  * missing. When a task/goal knows its hosting space we emit the canonical
@@ -141,8 +142,18 @@ function webUrl(baseURL, ref) {
  * custom) passes through unchanged — only the known skrr api hosts are mapped.
  */
 const WEB_ORIGIN_FROM_API = {
+    // DERIVED from the one domain contract, not hand-listed. The hand-listed
+    // version knew only the pre-rename hosts, so `api.skrr.ai` — the CURRENT prod
+    // API origin — mapped to nothing and fell through unchanged, and every link
+    // the CLI printed from that baseURL would point at the API host instead of
+    // the SPA. Deriving it means the next environment cannot be silently omitted.
+    ...Object.fromEntries(Object.values(publicEndpoints_generated_1.OVERSKY_ENVIRONMENT_ENDPOINTS).map((e) => [
+        e.realtimeUrl.toLowerCase(),
+        e.appUrl,
+    ])),
+    // Prod's retained previous origin. `oversky.ai` still resolves and is
+    // deliberately kept (LEGACY_PROD_BASE_URL), so its api. host must map too.
     'https://api.oversky.ai': 'https://oversky.ai',
-    'https://api.oversky.dev': 'https://oversky.dev',
 };
 function toWebOrigin(baseURL) {
     const trimmed = trimTrailingSlash(baseURL);

package/dist/node_modules/@skrr-ai/auth-core/dist/cjs/credentialResolver.d.ts

@@ -215,7 +215,7 @@ export declare class AuthHelperUnavailableError extends Error {
 /**
  * L6.1 — typed error thrown when the workspace-trust gate blocks a
  * project- or local-scope helper. Surfaces the actionable next step
- * (`oversky trust accept`) to the user; the daemon catches and presents
+ * (`skrrd trust accept`) to the user; the daemon catches and presents
  * this without falling through to OAuth.
  */
 export declare class AuthHelperUntrustedError extends Error {

package/dist/node_modules/@skrr-ai/auth-core/dist/cjs/credentialResolver.js

@@ -137,7 +137,7 @@ exports.AuthHelperUnavailableError = AuthHelperUnavailableError;
 /**
  * L6.1 — typed error thrown when the workspace-trust gate blocks a
  * project- or local-scope helper. Surfaces the actionable next step
- * (`oversky trust accept`) to the user; the daemon catches and presents
+ * (`skrrd trust accept`) to the user; the daemon catches and presents
  * this without falling through to OAuth.
  */
 class AuthHelperUntrustedError extends Error {
@@ -146,7 +146,7 @@ class AuthHelperUntrustedError extends Error {
     helperPath;
     constructor(helperPath, origin, reason) {
         super(`OVERSKY_AUTH_HELPER (${origin}-scope) is not trusted for this workspace ` +
-            `(reason: ${reason}). Run \`oversky trust accept\` to allow it.`);
+            `(reason: ${reason}). Run \`skrrd trust accept\` to allow it.`);
         this.name = 'AuthHelperUntrustedError';
         this.origin = origin;
         this.reason = reason;

package/dist/node_modules/@skrr-ai/auth-core/dist/cjs/index.d.ts

@@ -35,3 +35,4 @@ export { HARNESS_TIERS, getHarnessTier, credentialPolicyForTier, tierPermitsConf
 export { sanitizeSpawnEnv, SENSITIVE_ENV_VARS, SENSITIVE_ENV_PREFIXES, SENSITIVE_ENV_SUFFIXES, SENSITIVE_ENV_PREFIX_EXCEPTIONS, } from './spawnEnv.js';
 export { CONFIG_DIR_NAME, LEGACY_CONFIG_DIR_NAMES, NATIVE_ID_PREFIX, LEGACY_NATIVE_ID_PREFIXES, DEFAULT_BINARY_NAME, } from './localIdentity.js';
 export { findLegacyLocalState, describeLegacyState, type LegacyStateFinding, type LegacyStateReport, } from './legacyStatePreflight.js';
+export { DEFAULT_SKY_CODE_CHANNEL, DEFAULT_SKY_CODE_FEED_BASE, SKY_CODE_CHANNELS, SKY_CODE_CHANNEL_ENV, SKY_CODE_MANIFEST_FILE, isSkyCodeChannel, resolveChannelManifestUrl, resolveSkyCodeChannel, skyCodeChannelPrefix, skyCodeFeedBase, SKY_CODE_FEED_BASE_ENV, type SkyCodeChannel, } from './skyCodeChannels.js';

package/dist/node_modules/@skrr-ai/auth-core/dist/cjs/index.js

@@ -11,7 +11,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.challenge = exports.generateVerifier = exports.invalidateHeadersHelperCache = exports.runHeadersHelper = exports.SENTINEL_TRIGGERING_FAILURES = exports.__resetAuthHelperFailureReasonForTest = exports.getLastAuthHelperFailureReason = exports.getDefaultHelperTtlMs = exports.invokeAuthHelper = exports.AuthHelperUnavailableError = exports.AuthHelperUntrustedError = exports.CI_TOKEN_PREFIX = exports.classifyTokenKind = exports.invalidateAuthHelperCache = exports.__resetCredentialResolverForTest = exports.CREDENTIAL_PRECEDENCE = exports.CredentialResolver = exports.__setFdReaderForTest = exports.readAuthFromFd = exports.createRefreshScheduler = exports.UNKNOWN_401_BUDGET = exports.__resetUnknown401StreaksForTest = exports.__refreshDiagnostics = exports.installLockExitHandlers = exports.clearReauthState = exports.needsReauthState = exports.persistReauthState = exports.withAuthLock = exports.revokeDaemonRefreshSession = exports.refreshDaemonToken = exports.classifyRefreshResponse = exports.EXIT_NEEDS_REAUTH = exports.formatReauthMessage = exports.handleMidStreamAuthExpiry = exports.isAuthExpiredSseEvent = exports.decodeJwtPayload = exports.decodeJwtExpiry = exports.TransientAuthFailure = exports.PermanentAuthFailure = exports.emitAuthTelemetry = exports.getAuthBinaryName = exports.getAuthKillSwitches = exports.getAuthConfigDir = exports.getAuthLogger = exports.configureAuthCore = exports.OAUTH_CLI_SCOPE = exports.isDaemonScope = exports.VALID_DAEMON_SCOPE_SET = exports.ALL_DAEMON_SCOPES = exports.SCOPES = void 0;
 exports.tokenHash = exports.publicJwkFromX = exports.normalizeHtu = exports.jwkThumbprint = exports.generateDeviceKeyPair = exports.buildDeviceProof = exports.zeroizeKekCaches = exports.WindowsKek = exports.registerZeroizeHook = exports.MacosKek = exports.LinuxKek = exports.KekUnavailableError = exports.UnavailableKek = exports.InMemoryKek = exports.getKekStrategy = exports.__setKekStrategyForTest = exports.credEnvelopeWrap = exports.credEnvelopeUnwrap = exports.credEnvelopeSerialize = exports.credSealBuffer = exports.credOpenBuffer = exports.CRED_KEY_LEN = exports.isCredEnvelopeString = exports.generateDek = exports.CRED_ENVELOPE_MAGIC = exports.credEnvelopeEncrypt = exports.credEnvelopeDeserialize = exports.credEnvelopeDecrypt = exports.buildCredentialAad = exports.isValidRecoveryCode = exports.normalizeRecoveryCode = exports.parseRecoveryCode = exports.formatRecoveryCode = exports.MAX_TTL_DAYS = exports.MIN_TTL_DAYS = exports.parseTtlDays = exports.LoginExchangeError = exports.LoginInitError = exports.loginWithLocalhost = exports.LocalCallbackMalformedError = exports.LocalCallbackDeniedError = exports.LocalCallbackStateMismatchError = exports.LocalCallbackTimeoutError = exports.LocalCallbackBindError = exports.LocalCallbackError = exports.DEFAULT_LOGIN_TIMEOUT_MS = exports.startLocalCallback = exports.verifyChallenge = exports.safeEqual = exports.generateState = void 0;
 exports.getHarnessTier = exports.HARNESS_TIERS = exports.pairUint8ArrayToBase64Url = exports.pairUint8ArrayToBase64 = exports.parsePairUrl = exports.parsePairPlaintext = exports.parsePairBundle = exports.openPairBundleBase64 = exports.generatePairKeyPair = exports.buildPairUrl = exports.buildPairAad = exports.pairBase64UrlToUint8Array = exports.pairBase64ToUint8Array = exports.assemblePairBundleBase64 = exports.PairBundleError = exports.PAIR_SECRET_LEN = exports.PAIR_PUBKEY_LEN = exports.PAIR_NONCE_LEN = exports.PAIR_BUNDLE_MAX_BASE64_LEN = exports.PAIR_AAD_MAX_LEN = exports.PAIR_AAD_PREFIX = exports.__resetCachedDaemonIdForTest = exports.legacyDaemonUuids = exports.ensureMachineDaemonId = exports.__getDeviceIdentityStateForTest = exports.__setDeviceIdentityStateForTest = exports.__enrollmentBackoffPathForTest = exports.__enrollmentMarkerPathForTest = exports.__privateKeyPathForTest = exports.__publicKeyPathForTest = exports.describeDeviceIdentityState = exports.getDevicePublicKey = exports.isDeviceIdentityActive = exports.clearEnrollmentMarker = exports.enrollWithServer = exports.signServerRequest = exports.resetDeviceIdentity = exports.initDeviceIdentity = exports.__resetShutdownGuardForTest = exports.__getCredEnvelopeStateForTest = exports.__setCredEnvelopeStateForTest = exports.__wrappedDekFilePathForTest = exports.maybeDecryptOnRead = exports.maybeEncryptForWrite = exports.describeCredEnvelopeState = exports.isCredEnvelopeActive = exports.shutdownCredEnvelope = exports.resetCredEnvelope = exports.initCredEnvelope = exports.verifyDeviceProof = void 0;
-exports.describeLegacyState = exports.findLegacyLocalState = exports.DEFAULT_BINARY_NAME = exports.LEGACY_NATIVE_ID_PREFIXES = exports.NATIVE_ID_PREFIX = exports.LEGACY_CONFIG_DIR_NAMES = exports.CONFIG_DIR_NAME = exports.SENSITIVE_ENV_PREFIX_EXCEPTIONS = exports.SENSITIVE_ENV_SUFFIXES = exports.SENSITIVE_ENV_PREFIXES = exports.SENSITIVE_ENV_VARS = exports.sanitizeSpawnEnv = exports.tierPermitsConfiguredAutoMode = exports.credentialPolicyForTier = void 0;
+exports.SKY_CODE_FEED_BASE_ENV = exports.skyCodeFeedBase = exports.skyCodeChannelPrefix = exports.resolveSkyCodeChannel = exports.resolveChannelManifestUrl = exports.isSkyCodeChannel = exports.SKY_CODE_MANIFEST_FILE = exports.SKY_CODE_CHANNEL_ENV = exports.SKY_CODE_CHANNELS = exports.DEFAULT_SKY_CODE_FEED_BASE = exports.DEFAULT_SKY_CODE_CHANNEL = exports.describeLegacyState = exports.findLegacyLocalState = exports.DEFAULT_BINARY_NAME = exports.LEGACY_NATIVE_ID_PREFIXES = exports.NATIVE_ID_PREFIX = exports.LEGACY_CONFIG_DIR_NAMES = exports.CONFIG_DIR_NAME = exports.SENSITIVE_ENV_PREFIX_EXCEPTIONS = exports.SENSITIVE_ENV_SUFFIXES = exports.SENSITIVE_ENV_PREFIXES = exports.SENSITIVE_ENV_VARS = exports.sanitizeSpawnEnv = exports.tierPermitsConfiguredAutoMode = exports.credentialPolicyForTier = void 0;
 // Daemon scope vocabulary — single source of truth for non-Mongoose tiers
 // (daemon, desktop, cli). Schema-bound canonical lives in
 // `@skrr-ai/data-schemas/common/daemonScopes`; the two are kept byte-equal
@@ -303,3 +303,15 @@ Object.defineProperty(exports, "DEFAULT_BINARY_NAME", { enumerable: true, get: f
 var legacyStatePreflight_js_1 = require("./legacyStatePreflight.js");
 Object.defineProperty(exports, "findLegacyLocalState", { enumerable: true, get: function () { return legacyStatePreflight_js_1.findLegacyLocalState; } });
 Object.defineProperty(exports, "describeLegacyState", { enumerable: true, get: function () { return legacyStatePreflight_js_1.describeLegacyState; } });
+var skyCodeChannels_js_1 = require("./skyCodeChannels.js");
+Object.defineProperty(exports, "DEFAULT_SKY_CODE_CHANNEL", { enumerable: true, get: function () { return skyCodeChannels_js_1.DEFAULT_SKY_CODE_CHANNEL; } });
+Object.defineProperty(exports, "DEFAULT_SKY_CODE_FEED_BASE", { enumerable: true, get: function () { return skyCodeChannels_js_1.DEFAULT_SKY_CODE_FEED_BASE; } });
+Object.defineProperty(exports, "SKY_CODE_CHANNELS", { enumerable: true, get: function () { return skyCodeChannels_js_1.SKY_CODE_CHANNELS; } });
+Object.defineProperty(exports, "SKY_CODE_CHANNEL_ENV", { enumerable: true, get: function () { return skyCodeChannels_js_1.SKY_CODE_CHANNEL_ENV; } });
+Object.defineProperty(exports, "SKY_CODE_MANIFEST_FILE", { enumerable: true, get: function () { return skyCodeChannels_js_1.SKY_CODE_MANIFEST_FILE; } });
+Object.defineProperty(exports, "isSkyCodeChannel", { enumerable: true, get: function () { return skyCodeChannels_js_1.isSkyCodeChannel; } });
+Object.defineProperty(exports, "resolveChannelManifestUrl", { enumerable: true, get: function () { return skyCodeChannels_js_1.resolveChannelManifestUrl; } });
+Object.defineProperty(exports, "resolveSkyCodeChannel", { enumerable: true, get: function () { return skyCodeChannels_js_1.resolveSkyCodeChannel; } });
+Object.defineProperty(exports, "skyCodeChannelPrefix", { enumerable: true, get: function () { return skyCodeChannels_js_1.skyCodeChannelPrefix; } });
+Object.defineProperty(exports, "skyCodeFeedBase", { enumerable: true, get: function () { return skyCodeChannels_js_1.skyCodeFeedBase; } });
+Object.defineProperty(exports, "SKY_CODE_FEED_BASE_ENV", { enumerable: true, get: function () { return skyCodeChannels_js_1.SKY_CODE_FEED_BASE_ENV; } });

package/dist/node_modules/@skrr-ai/auth-core/dist/cjs/kek/linux.js

@@ -84,8 +84,21 @@ const DBUS_TRANSPORT_ERRORS = [
     'No such interface',
     'Cannot autolaunch',
 ];
-/** HKDF-SHA256 parameters for Tier-3. Stable across versions; bumping the
- *  `v1` suffix would silently invalidate every wrapped DEK on disk. */
+/**
+ * HKDF-SHA256 parameters for Tier-3. Stable across versions: ANY change
+ * silently invalidates every wrapped DEK on disk.
+ *
+ * That includes the brand. These strings are cryptographic derivation inputs
+ * that happen to read like a name, so a rename sweep produces exactly the same
+ * outcome as bumping the `v1` suffix — every credential on every machine
+ * becomes undecryptable, with no error at write time and a failure that
+ * surfaces only when someone next tries to unwrap. The KEK's SERVICE name moved
+ * to `ai.skrr.daemon.kek`; these did not, and must not.
+ *
+ * Rotating them deliberately is a re-issue, not a rename: it needs the old
+ * envelope discarded and credentials re-obtained, which is a decision with a
+ * user-visible cost rather than a string edit.
+ */
 const HKDF_SALT = Buffer.from('oversky-cred-kek-salt-v1');
 const HKDF_INFO = Buffer.from('oversky-cred-kek-v1');
 /** Filesystem paths for Tier-3 IKM components. */
@@ -299,7 +312,7 @@ async function writeKekToSecretService(kek, service, account) {
     }
     const b64 = kek.toString('base64');
     try {
-        await exec('secret-tool', ['store', '--label=OverSky daemon master KEK', 'service', service, 'account', account], { input: b64 });
+        await exec('secret-tool', ['store', '--label=skrr daemon master KEK', 'service', service, 'account', account], { input: b64 });
     }
     catch (err) {
         throw new types_js_1.KekUnavailableError(KIND_LIBSECRET, 'secret-tool store failed', { cause: err });

package/dist/node_modules/@skrr-ai/auth-core/dist/cjs/legacyStatePreflight.d.ts

@@ -55,13 +55,4 @@ export interface LegacyStateReport {
  * real `~` passes or fails based on who runs it.
  */
 export declare function findLegacyLocalState(home?: string): LegacyStateReport;
-/**
- * The message shown when preflight refuses.
- *
- * Written for someone who has just been stopped and wants to know why and what
- * to do — so it names the exact paths, says explicitly that nothing was touched,
- * and points at the runbook rather than improvising a fix. It does NOT offer a
- * `--force`: the operator's next step is the backup the runbook specifies, and
- * a flag that skips a safety check is the flag everyone learns to paste.
- */
 export declare function describeLegacyState(report: LegacyStateReport, binaryName: string): string;

package/dist/node_modules/@skrr-ai/auth-core/dist/cjs/legacyStatePreflight.js

@@ -58,6 +58,13 @@ function findLegacyLocalState(home = node_os_1.default.homedir()) {
  * `--force`: the operator's next step is the backup the runbook specifies, and
  * a flag that skips a safety check is the flag everyone learns to paste.
  */
+/**
+ * The pre-rename runtime binary. Named in the refusal above because deregistering
+ * the OLD service is the one step the NEW binary cannot do: `uninstall` resolves
+ * the current profile's label (`ai.skrr.daemon.*`), and the legacy sweep is wired
+ * only into the install path.
+ */
+const LEGACY_BINARY_NAME = 'oversky';
 function describeLegacyState(report, binaryName) {
     const lines = [];
     lines.push('Found state from the previous product identity on this machine:');
@@ -72,7 +79,17 @@ function describeLegacyState(report, binaryName) {
     lines.push('Nothing above has been read, copied or removed. Follow the team cutover');
     lines.push('runbook — it takes a backup first — and then run this again:');
     lines.push('');
-    lines.push(`  ${binaryName} uninstall     # stop and deregister the old service`);
+    // The OLD binary, deliberately: it is the one that knows the old service
+    // label. `<current> uninstall` resolves the CURRENT profile's label and would
+    // report success while leaving the pre-rename service registered. Guarded by
+    // "only if" rather than omitted, because this module inspects directories and
+    // has no way to know whether that binary is still on PATH.
+    lines.push(`  ${LEGACY_BINARY_NAME} uninstall     # only if the old runtime is still installed —`);
+    lines.push(`                        # it is the one that knows the old service label`);
     lines.push('  # then remove the directories listed above, per the runbook');
+    lines.push('');
+    lines.push(`Any pre-rename service still registered is swept by \`${binaryName} install\``);
+    lines.push('once those directories are gone, so re-running the install completes the');
+    lines.push('cutover either way.');
     return lines.join('\n');
 }

package/dist/node_modules/@skrr-ai/auth-core/dist/cjs/loginLocalhost.js

@@ -354,15 +354,15 @@ function htmlShell(title, accent, headline, body) {
 function successHtml() {
     const headline = `<div class="badge"><svg viewBox="0 0 24 24"><path d="M5 13l4 4L19 7"/></svg></div>
     <h1>Authorized</h1>`;
-    return htmlShell('OverSky — Authorized', '#10b981', headline, 'You can close this tab and return to your terminal.');
+    return htmlShell('skrr — Authorized', '#10b981', headline, 'You can close this tab and return to your terminal.');
 }
 function declinedHtml() {
     const headline = `<div class="badge" style="background:#64748b"><svg viewBox="0 0 24 24"><path d="M6 6l12 12M18 6L6 18"/></svg></div>
     <h1>Authorization declined</h1>`;
-    return htmlShell('OverSky — Authorization declined', '#64748b', headline, 'You can close this tab. Run the CLI command again to retry.');
+    return htmlShell('skrr — Authorization declined', '#64748b', headline, 'You can close this tab. Run the CLI command again to retry.');
 }
 function genericFailureHtml() {
     const headline = `<div class="badge" style="background:#ef4444"><svg viewBox="0 0 24 24"><path d="M12 8v4M12 16h.01M21 12a9 9 0 11-18 0 9 9 0 0118 0z"/></svg></div>
     <h1>Authorization error</h1>`;
-    return htmlShell('OverSky — Authorization error', '#ef4444', headline, 'Something went wrong. You can close this tab and retry from the terminal.');
+    return htmlShell('skrr — Authorization error', '#ef4444', headline, 'Something went wrong. You can close this tab and retry from the terminal.');
 }

package/dist/node_modules/@skrr-ai/auth-core/dist/cjs/messages.js

@@ -18,8 +18,8 @@ const REASON_HUMAN = {
     SESSION_REVOKED: 'Your session was ended (you signed out elsewhere or your password changed).',
     TOKEN_EXPIRED: 'Your access token has expired.',
     TOKEN_INVALID: 'Your saved credentials are no longer valid.',
-    UNKNOWN_401: 'OverSky needs you to sign in again.',
-    UNKNOWN: 'OverSky needs you to sign in again.',
+    UNKNOWN_401: 'skrr needs you to sign in again.',
+    UNKNOWN: 'skrr needs you to sign in again.',
 };
 function formatReauthMessage(reason) {
     const norm = REASON_HUMAN[reason] || REASON_HUMAN.UNKNOWN;
@@ -28,7 +28,7 @@ function formatReauthMessage(reason) {
     const cmd = isHeadless ? `${bin} login --device` : `${bin} login`;
     return [
         '',
-        'OverSky cannot connect — re-authentication required.',
+        'skrr cannot connect — re-authentication required.',
         `  Reason: ${norm}`,
         '',
         `  To continue, run:  ${cmd}`,

package/dist/node_modules/@skrr-ai/auth-core/dist/cjs/runtime.d.ts

@@ -49,9 +49,13 @@ export interface AuthCoreConfig {
      * per-profile and silently killed the `legacyDaemonUuids()` fold safety net
      * (it scanned `<profileDir>/profiles/*`, which never exists). See OSK-1478.
      *
-     * Default: falls back to `configDir()` when unset. The CLI's `configDir` is
-     * already the machine root (`~/.skrr`), so it needs no wiring; the daemon
-     * wires this explicitly to its root `CONFIG_DIR` in `auth/configure.ts`.
+     * Default: falls back to `configDir()` when unset. BOTH callers now wire it
+     * explicitly — the daemon to its root `CONFIG_DIR` in `auth/configure.ts`,
+     * and the CLI in `auth-core-init.ts`. The CLI's used to need no wiring
+     * because its `configDir` was unconditionally the machine root; that stopped
+     * being true when `configDir` became profile-aware, and an unwired default
+     * would have drifted `cliId` per profile — which the server rejects, because
+     * it binds that value into the JWT `did` claim.
      */
     machineConfigDir?: () => string;
     /** Logger used by all stateful helpers. */

package/dist/node_modules/@skrr-ai/auth-core/dist/cjs/skyCodeChannels.d.ts

@@ -0,0 +1,96 @@
+/**
+ * skrr Code update channels — the vocabulary, in the ONE place both readers resolve.
+ *
+ * It lived in `daemon/src/sky-code/channels.ts`, whose only importer was the
+ * daemon's own installer. That was fine while the daemon was the only thing that
+ * needed it, and it stopped being fine the moment a user could be told to go
+ * looking: `skrr code`'s not-installed message promised that `skrr code doctor`
+ * would name "which channel this machine follows and whether that channel has a
+ * published release", and the CLI had no access to any of it — so the sentence
+ * described a diagnosis nobody had written (dogfood OSK-274).
+ *
+ * A MIRROR in the CLI was the obvious alternative and is the wrong answer here,
+ * with precedent: OSK-3894 shipped exactly that for the harness trust tiers and
+ * OSK-3897 removed it, because a mirror proves two copies agree rather than
+ * proving there is one copy. `harnessTrust.ts` moved into this package for that
+ * reason, the daemon re-exports it, and a static check keeps the daemon from
+ * quietly redeclaring. This follows that road rather than reopening the one it
+ * replaced.
+ *
+ * Only the VOCABULARY moves — channel names, the env var, the default, and the
+ * URL shape. The installer, the signature verification and the promotion
+ * machinery stay in the daemon, which is the only process that performs them.
+ */
+/** Channels in promotion order. Index order IS the promotion order. */
+export declare const SKY_CODE_CHANNELS: readonly ["internal", "canary", "beta", "stable"];
+export type SkyCodeChannel = (typeof SKY_CODE_CHANNELS)[number];
+/**
+ * The channel a build without an explicit setting follows.
+ *
+ * `stable`, and never inferred from anything else. A default that drifted with
+ * the build (say, dev builds silently on `canary`) would mean a user's update
+ * path depended on how their binary happened to be produced.
+ */
+export declare const DEFAULT_SKY_CODE_CHANNEL: SkyCodeChannel;
+/** Env var selecting the channel. Explicit opt-in; never set implicitly. */
+export declare const SKY_CODE_CHANNEL_ENV = "OVERSKY_SKY_CODE_CHANNEL";
+/** Manifest filename, under a channel prefix or an immutable release prefix. */
+export declare const SKY_CODE_MANIFEST_FILE = "sky-code-version.json";
+export declare function isSkyCodeChannel(value: unknown): value is SkyCodeChannel;
+/**
+ * The channel this process should follow.
+ *
+ * An unrecognised value falls back to the default rather than throwing. A
+ * typo'd channel must not brick updates altogether — that turns a harmless
+ * mistake into an un-updatable machine, which is the failure the updater exists
+ * to prevent. The caller is handed `invalid` so it can say so out loud.
+ */
+export declare function resolveSkyCodeChannel(env?: NodeJS.ProcessEnv): {
+    channel: SkyCodeChannel;
+    invalid?: string;
+};
+/**
+ * Where a channel's signed manifest lives.
+ *
+ * `stable` is NOT special-cased to `latest/`. Two paths that must always agree
+ * is a pair that eventually will not, and the one that disagrees silently is
+ * the one serving production. `latest/` remains for the daemon feed and for
+ * anything already pointing at it; skrr Code channel clients read
+ * `channels/<name>/` uniformly.
+ */
+export declare function skyCodeChannelPrefix(channel: SkyCodeChannel): string;
+/**
+ * Manifest URL for a channel, or for a pinned version.
+ *
+ * A pinned version wins over the channel and reads its immutable per-release
+ * copy: pinning means "this exact build", and a channel pointer that moved
+ * underneath would make the pin a suggestion.
+ *
+ * Builds only MANIFEST urls, never artifact ones. `buildManifestMessage` signs
+ * version, minimum, forceUpdate and the per-platform sha256s; `buildArtifactMessage`
+ * signs the artifact URL. Neither signs a channel — so artifact URLs stay
+ * channel-independent and promotion is a COPY OF AN ALREADY-SIGNED OBJECT that
+ * never needs the release key. Put the channel in the artifact URL instead and
+ * every promotion becomes a re-signing ceremony, which decides whether the
+ * ed25519 key has to be reachable from routine automation. A helper here that
+ * adjusted artifact urls would silently reintroduce exactly that coupling.
+ */
+export declare function resolveChannelManifestUrl(input: {
+    base: string;
+    manifestFilename: string;
+    channel: SkyCodeChannel;
+    pinnedVersion?: string | null;
+}): string;
+/** Default public feed. Mirrors the daemon's `updates.oversky.ai/daemon` prefix. */
+export declare const DEFAULT_SKY_CODE_FEED_BASE = "https://updates.oversky.ai/sky-code";
+/**
+ * Feed override, read at call time rather than module load so a test or an
+ * operator can repoint it without re-importing.
+ *
+ * Explicit-only: a production user must never be silently enrolled onto a
+ * different feed. Selecting a feed changes WHICH signed manifest is read, never
+ * WHETHER the signature is checked — every artifact is verified against the
+ * pinned keys regardless of where it came from.
+ */
+export declare const SKY_CODE_FEED_BASE_ENV = "OVERSKY_SKY_CODE_UPDATE_FEED_BASE";
+export declare function skyCodeFeedBase(env?: NodeJS.ProcessEnv): string;

package/dist/node_modules/@skrr-ai/auth-core/dist/cjs/skyCodeChannels.js

@@ -0,0 +1,115 @@
+"use strict";
+/**
+ * skrr Code update channels — the vocabulary, in the ONE place both readers resolve.
+ *
+ * It lived in `daemon/src/sky-code/channels.ts`, whose only importer was the
+ * daemon's own installer. That was fine while the daemon was the only thing that
+ * needed it, and it stopped being fine the moment a user could be told to go
+ * looking: `skrr code`'s not-installed message promised that `skrr code doctor`
+ * would name "which channel this machine follows and whether that channel has a
+ * published release", and the CLI had no access to any of it — so the sentence
+ * described a diagnosis nobody had written (dogfood OSK-274).
+ *
+ * A MIRROR in the CLI was the obvious alternative and is the wrong answer here,
+ * with precedent: OSK-3894 shipped exactly that for the harness trust tiers and
+ * OSK-3897 removed it, because a mirror proves two copies agree rather than
+ * proving there is one copy. `harnessTrust.ts` moved into this package for that
+ * reason, the daemon re-exports it, and a static check keeps the daemon from
+ * quietly redeclaring. This follows that road rather than reopening the one it
+ * replaced.
+ *
+ * Only the VOCABULARY moves — channel names, the env var, the default, and the
+ * URL shape. The installer, the signature verification and the promotion
+ * machinery stay in the daemon, which is the only process that performs them.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SKY_CODE_FEED_BASE_ENV = exports.DEFAULT_SKY_CODE_FEED_BASE = exports.SKY_CODE_MANIFEST_FILE = exports.SKY_CODE_CHANNEL_ENV = exports.DEFAULT_SKY_CODE_CHANNEL = exports.SKY_CODE_CHANNELS = void 0;
+exports.isSkyCodeChannel = isSkyCodeChannel;
+exports.resolveSkyCodeChannel = resolveSkyCodeChannel;
+exports.skyCodeChannelPrefix = skyCodeChannelPrefix;
+exports.resolveChannelManifestUrl = resolveChannelManifestUrl;
+exports.skyCodeFeedBase = skyCodeFeedBase;
+/** Channels in promotion order. Index order IS the promotion order. */
+exports.SKY_CODE_CHANNELS = ['internal', 'canary', 'beta', 'stable'];
+/**
+ * The channel a build without an explicit setting follows.
+ *
+ * `stable`, and never inferred from anything else. A default that drifted with
+ * the build (say, dev builds silently on `canary`) would mean a user's update
+ * path depended on how their binary happened to be produced.
+ */
+exports.DEFAULT_SKY_CODE_CHANNEL = 'stable';
+/** Env var selecting the channel. Explicit opt-in; never set implicitly. */
+exports.SKY_CODE_CHANNEL_ENV = 'OVERSKY_SKY_CODE_CHANNEL';
+/** Manifest filename, under a channel prefix or an immutable release prefix. */
+exports.SKY_CODE_MANIFEST_FILE = 'sky-code-version.json';
+function isSkyCodeChannel(value) {
+    return typeof value === 'string' && exports.SKY_CODE_CHANNELS.includes(value);
+}
+/**
+ * The channel this process should follow.
+ *
+ * An unrecognised value falls back to the default rather than throwing. A
+ * typo'd channel must not brick updates altogether — that turns a harmless
+ * mistake into an un-updatable machine, which is the failure the updater exists
+ * to prevent. The caller is handed `invalid` so it can say so out loud.
+ */
+function resolveSkyCodeChannel(env = process.env) {
+    const raw = env[exports.SKY_CODE_CHANNEL_ENV]?.trim();
+    if (!raw)
+        return { channel: exports.DEFAULT_SKY_CODE_CHANNEL };
+    if (isSkyCodeChannel(raw))
+        return { channel: raw };
+    return { channel: exports.DEFAULT_SKY_CODE_CHANNEL, invalid: raw };
+}
+/**
+ * Where a channel's signed manifest lives.
+ *
+ * `stable` is NOT special-cased to `latest/`. Two paths that must always agree
+ * is a pair that eventually will not, and the one that disagrees silently is
+ * the one serving production. `latest/` remains for the daemon feed and for
+ * anything already pointing at it; skrr Code channel clients read
+ * `channels/<name>/` uniformly.
+ */
+function skyCodeChannelPrefix(channel) {
+    return `channels/${channel}/`;
+}
+/**
+ * Manifest URL for a channel, or for a pinned version.
+ *
+ * A pinned version wins over the channel and reads its immutable per-release
+ * copy: pinning means "this exact build", and a channel pointer that moved
+ * underneath would make the pin a suggestion.
+ *
+ * Builds only MANIFEST urls, never artifact ones. `buildManifestMessage` signs
+ * version, minimum, forceUpdate and the per-platform sha256s; `buildArtifactMessage`
+ * signs the artifact URL. Neither signs a channel — so artifact URLs stay
+ * channel-independent and promotion is a COPY OF AN ALREADY-SIGNED OBJECT that
+ * never needs the release key. Put the channel in the artifact URL instead and
+ * every promotion becomes a re-signing ceremony, which decides whether the
+ * ed25519 key has to be reachable from routine automation. A helper here that
+ * adjusted artifact urls would silently reintroduce exactly that coupling.
+ */
+function resolveChannelManifestUrl(input) {
+    const base = input.base.replace(/\/+$/, '');
+    if (input.pinnedVersion) {
+        return `${base}/releases/${input.pinnedVersion}/${input.manifestFilename}`;
+    }
+    return `${base}/${skyCodeChannelPrefix(input.channel)}${input.manifestFilename}`;
+}
+/** Default public feed. Mirrors the daemon's `updates.oversky.ai/daemon` prefix. */
+exports.DEFAULT_SKY_CODE_FEED_BASE = 'https://updates.oversky.ai/sky-code';
+/**
+ * Feed override, read at call time rather than module load so a test or an
+ * operator can repoint it without re-importing.
+ *
+ * Explicit-only: a production user must never be silently enrolled onto a
+ * different feed. Selecting a feed changes WHICH signed manifest is read, never
+ * WHETHER the signature is checked — every artifact is verified against the
+ * pinned keys regardless of where it came from.
+ */
+exports.SKY_CODE_FEED_BASE_ENV = 'OVERSKY_SKY_CODE_UPDATE_FEED_BASE';
+function skyCodeFeedBase(env = process.env) {
+    const override = (env[exports.SKY_CODE_FEED_BASE_ENV] || '').trim();
+    return (override || exports.DEFAULT_SKY_CODE_FEED_BASE).replace(/\/+$/, '');
+}

package/dist/node_modules/@skrr-ai/auth-core/dist/esm/credentialResolver.d.ts

@@ -215,7 +215,7 @@ export declare class AuthHelperUnavailableError extends Error {
 /**
  * L6.1 — typed error thrown when the workspace-trust gate blocks a
  * project- or local-scope helper. Surfaces the actionable next step
- * (`oversky trust accept`) to the user; the daemon catches and presents
+ * (`skrrd trust accept`) to the user; the daemon catches and presents
  * this without falling through to OAuth.
  */
 export declare class AuthHelperUntrustedError extends Error {

package/dist/node_modules/@skrr-ai/auth-core/dist/esm/credentialResolver.js

@@ -130,7 +130,7 @@ export class AuthHelperUnavailableError extends Error {
 /**
  * L6.1 — typed error thrown when the workspace-trust gate blocks a
  * project- or local-scope helper. Surfaces the actionable next step
- * (`oversky trust accept`) to the user; the daemon catches and presents
+ * (`skrrd trust accept`) to the user; the daemon catches and presents
  * this without falling through to OAuth.
  */
 export class AuthHelperUntrustedError extends Error {
@@ -139,7 +139,7 @@ export class AuthHelperUntrustedError extends Error {
     helperPath;
     constructor(helperPath, origin, reason) {
         super(`OVERSKY_AUTH_HELPER (${origin}-scope) is not trusted for this workspace ` +
-            `(reason: ${reason}). Run \`oversky trust accept\` to allow it.`);
+            `(reason: ${reason}). Run \`skrrd trust accept\` to allow it.`);
         this.name = 'AuthHelperUntrustedError';
         this.origin = origin;
         this.reason = reason;

package/dist/node_modules/@skrr-ai/auth-core/dist/esm/index.d.ts

@@ -35,3 +35,4 @@ export { HARNESS_TIERS, getHarnessTier, credentialPolicyForTier, tierPermitsConf
 export { sanitizeSpawnEnv, SENSITIVE_ENV_VARS, SENSITIVE_ENV_PREFIXES, SENSITIVE_ENV_SUFFIXES, SENSITIVE_ENV_PREFIX_EXCEPTIONS, } from './spawnEnv.js';
 export { CONFIG_DIR_NAME, LEGACY_CONFIG_DIR_NAMES, NATIVE_ID_PREFIX, LEGACY_NATIVE_ID_PREFIXES, DEFAULT_BINARY_NAME, } from './localIdentity.js';
 export { findLegacyLocalState, describeLegacyState, type LegacyStateFinding, type LegacyStateReport, } from './legacyStatePreflight.js';
+export { DEFAULT_SKY_CODE_CHANNEL, DEFAULT_SKY_CODE_FEED_BASE, SKY_CODE_CHANNELS, SKY_CODE_CHANNEL_ENV, SKY_CODE_MANIFEST_FILE, isSkyCodeChannel, resolveChannelManifestUrl, resolveSkyCodeChannel, skyCodeChannelPrefix, skyCodeFeedBase, SKY_CODE_FEED_BASE_ENV, type SkyCodeChannel, } from './skyCodeChannels.js';

package/dist/node_modules/@skrr-ai/auth-core/dist/esm/index.js

@@ -142,3 +142,4 @@ export { CONFIG_DIR_NAME, LEGACY_CONFIG_DIR_NAMES, NATIVE_ID_PREFIX, LEGACY_NATI
 /* Pre-rename state detection. Callers REFUSE on a positive result; nothing here
    reads, copies or removes what it finds (§7.2, §8.4). */
 export { findLegacyLocalState, describeLegacyState, } from './legacyStatePreflight.js';
+export { DEFAULT_SKY_CODE_CHANNEL, DEFAULT_SKY_CODE_FEED_BASE, SKY_CODE_CHANNELS, SKY_CODE_CHANNEL_ENV, SKY_CODE_MANIFEST_FILE, isSkyCodeChannel, resolveChannelManifestUrl, resolveSkyCodeChannel, skyCodeChannelPrefix, skyCodeFeedBase, SKY_CODE_FEED_BASE_ENV, } from './skyCodeChannels.js';

package/dist/node_modules/@skrr-ai/auth-core/dist/esm/kek/linux.js

@@ -74,8 +74,21 @@ const DBUS_TRANSPORT_ERRORS = [
     'No such interface',
     'Cannot autolaunch',
 ];
-/** HKDF-SHA256 parameters for Tier-3. Stable across versions; bumping the
- *  `v1` suffix would silently invalidate every wrapped DEK on disk. */
+/**
+ * HKDF-SHA256 parameters for Tier-3. Stable across versions: ANY change
+ * silently invalidates every wrapped DEK on disk.
+ *
+ * That includes the brand. These strings are cryptographic derivation inputs
+ * that happen to read like a name, so a rename sweep produces exactly the same
+ * outcome as bumping the `v1` suffix — every credential on every machine
+ * becomes undecryptable, with no error at write time and a failure that
+ * surfaces only when someone next tries to unwrap. The KEK's SERVICE name moved
+ * to `ai.skrr.daemon.kek`; these did not, and must not.
+ *
+ * Rotating them deliberately is a re-issue, not a rename: it needs the old
+ * envelope discarded and credentials re-obtained, which is a decision with a
+ * user-visible cost rather than a string edit.
+ */
 const HKDF_SALT = Buffer.from('oversky-cred-kek-salt-v1');
 const HKDF_INFO = Buffer.from('oversky-cred-kek-v1');
 /** Filesystem paths for Tier-3 IKM components. */
@@ -289,7 +302,7 @@ async function writeKekToSecretService(kek, service, account) {
     }
     const b64 = kek.toString('base64');
     try {
-        await exec('secret-tool', ['store', '--label=OverSky daemon master KEK', 'service', service, 'account', account], { input: b64 });
+        await exec('secret-tool', ['store', '--label=skrr daemon master KEK', 'service', service, 'account', account], { input: b64 });
     }
     catch (err) {
         throw new KekUnavailableError(KIND_LIBSECRET, 'secret-tool store failed', { cause: err });

package/dist/node_modules/@skrr-ai/auth-core/dist/esm/legacyStatePreflight.d.ts

@@ -55,13 +55,4 @@ export interface LegacyStateReport {
  * real `~` passes or fails based on who runs it.
  */
 export declare function findLegacyLocalState(home?: string): LegacyStateReport;
-/**
- * The message shown when preflight refuses.
- *
- * Written for someone who has just been stopped and wants to know why and what
- * to do — so it names the exact paths, says explicitly that nothing was touched,
- * and points at the runbook rather than improvising a fix. It does NOT offer a
- * `--force`: the operator's next step is the backup the runbook specifies, and
- * a flag that skips a safety check is the flag everyone learns to paste.
- */
 export declare function describeLegacyState(report: LegacyStateReport, binaryName: string): string;