@skrr-ai/cli 0.1.93 → 0.1.95

package/dist/lib/commitments.js

@@ -1,9 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.COMMITMENT_CLI_EVALUATORS = exports.COMMITMENT_CREATE_KEYS = exports.COMMITMENT_REMEDIATION_ACTIONS = exports.COMMITMENT_FEEDBACK_KINDS = exports.commitmentApi = exports.commitmentPackApi = exports.MAX_COMMITMENT_INTERVAL_MS = exports.MIN_COMMITMENT_INTERVAL_MS = exports.COMMITMENT_EXECUTION_ISOLATION_MODES = exports.COMMITMENT_AUTHORABLE_AUTONOMY_MODES = exports.COMMITMENT_AUTONOMY_MODES = exports.COMMITMENT_AUTHORABLE_CADENCE_MODES = exports.COMMITMENT_KIND_VALUES = exports.COMMITMENT_STATUSES = exports.COMMITMENT_CADENCE_MAX_TIMES = exports.COMMITMENT_CADENCE_TIME_PATTERN = exports.COMMITMENT_CADENCE_MODES = exports.COMMITMENT_TEMPLATE_IDS = exports.COMMITMENT_WATCHED_SOURCES = void 0;
-exports.storedAutonomyModeForAuthoring = storedAutonomyModeForAuthoring;
-exports.authoringAutonomyModeForStored = authoringAutonomyModeForStored;
-exports.commitmentAutonomyLabel = commitmentAutonomyLabel;
+exports.COMMITMENT_CLI_EVALUATORS = exports.COMMITMENT_CREATE_KEYS = exports.COMMITMENT_REMEDIATION_ACTIONS = exports.COMMITMENT_FEEDBACK_KINDS = exports.commitmentApi = exports.commitmentPackApi = exports.MAX_COMMITMENT_INTERVAL_MS = exports.MIN_COMMITMENT_INTERVAL_MS = exports.COMMITMENT_EXECUTION_ISOLATION_MODES = exports.COMMITMENT_AUTHORABLE_CADENCE_MODES = exports.COMMITMENT_KIND_VALUES = exports.COMMITMENT_STATUSES = exports.COMMITMENT_CADENCE_MAX_TIMES = exports.COMMITMENT_CADENCE_TIME_PATTERN = exports.COMMITMENT_CADENCE_MODES = exports.COMMITMENT_TEMPLATE_IDS = exports.COMMITMENT_WATCHED_SOURCES = void 0;
 exports.permissionLines = permissionLines;
 exports.retiredFieldsLine = retiredFieldsLine;
 exports.readCommitmentAgentDirective = readCommitmentAgentDirective;
@@ -14,14 +11,11 @@ exports.describeCommitmentConcurrency = describeCommitmentConcurrency;
 exports.parseIntervalToMs = parseIntervalToMs;
 exports.buildWatchedSources = buildWatchedSources;
 exports.describeEvidenceHealth = describeEvidenceHealth;
-exports.describeStalledHealth = describeStalledHealth;
 exports.describeIntervalMs = describeIntervalMs;
 exports.buildSuccessCriteria = buildSuccessCriteria;
 exports.cadenceLabel = cadenceLabel;
 exports.renderCommitmentList = renderCommitmentList;
-exports.effectiveAutonomyMode = effectiveAutonomyMode;
 exports.extractStandstillFromCheck = extractStandstillFromCheck;
-exports.describeAutonomyLine = describeAutonomyLine;
 exports.describeExecutorBlocked = describeExecutorBlocked;
 exports.renderCommitmentSummary = renderCommitmentSummary;
 exports.describeWakeDecision = describeWakeDecision;
@@ -63,7 +57,6 @@ Object.defineProperty(exports, "COMMITMENT_TEMPLATE_IDS", { enumerable: true, ge
 Object.defineProperty(exports, "COMMITMENT_CADENCE_MODES", { enumerable: true, get: function () { return data_provider_1.COMMITMENT_CADENCE_MODES; } });
 Object.defineProperty(exports, "COMMITMENT_CADENCE_TIME_PATTERN", { enumerable: true, get: function () { return data_provider_1.COMMITMENT_CADENCE_TIME_PATTERN; } });
 Object.defineProperty(exports, "COMMITMENT_CADENCE_MAX_TIMES", { enumerable: true, get: function () { return data_provider_1.COMMITMENT_CADENCE_MAX_TIMES; } });
-Object.defineProperty(exports, "COMMITMENT_AUTONOMY_MODES", { enumerable: true, get: function () { return data_provider_1.COMMITMENT_AUTONOMY_MODES; } });
 Object.defineProperty(exports, "COMMITMENT_EXECUTION_ISOLATION_MODES", { enumerable: true, get: function () { return data_provider_1.COMMITMENT_EXECUTION_ISOLATION_MODES; } });
 Object.defineProperty(exports, "COMMITMENT_STATUSES", { enumerable: true, get: function () { return data_provider_1.COMMITMENT_STATUSES; } });
 Object.defineProperty(exports, "COMMITMENT_KIND_VALUES", { enumerable: true, get: function () { return data_provider_1.COMMITMENT_KIND_VALUES; } });
@@ -74,34 +67,6 @@ const triggers_1 = require("./triggers");
 /** Derived from the installed compatibility vocabulary so the CLI remains
  * safe even while data-provider and CLI packages roll out separately. */
 exports.COMMITMENT_AUTHORABLE_CADENCE_MODES = data_provider_1.COMMITMENT_CADENCE_MODES.filter((mode) => mode !== 'sampled');
-exports.COMMITMENT_AUTHORABLE_AUTONOMY_MODES = ['monitor', 'prepare', 'execute'];
-function storedAutonomyModeForAuthoring(mode) {
-    if (mode === 'monitor')
-        return 'suggestions_only';
-    if (mode === 'prepare')
-        return 'ask_first';
-    if (mode === 'execute')
-        return 'auto_run';
-    throw new Error(`Unsupported autonomy mode: ${mode}. Use monitor, prepare, or execute.`);
-}
-function authoringAutonomyModeForStored(mode) {
-    if (mode === 'ask_first')
-        return 'prepare';
-    if (mode === 'auto_run' || mode === 'auto_run_limited')
-        return 'execute';
-    return 'monitor';
-}
-function commitmentAutonomyLabel(mode) {
-    if (mode === 'suggestions_only')
-        return 'Monitor';
-    if (mode === 'ask_first')
-        return 'Prepare';
-    if (mode === 'auto_run' || mode === 'auto_run_limited')
-        return 'Execute';
-    if (mode === 'off')
-        return 'Legacy off (pause the Commitment)';
-    return mode || '-';
-}
 /**
  * Interval bounds for `cadence.intervalMs`.
  *
@@ -151,8 +116,7 @@ exports.commitmentPackApi = {
     preflight: (id, nextRunCount) => data_provider_1.request.post(`${packBase(id)}/preflight`, {
         ...(typeof nextRunCount === 'number' ? { nextRunCount } : {}),
     }),
-    shadow: (id) => data_provider_1.request.post(`${packBase(id)}/shadow`, {}),
-    promote: (id) => data_provider_1.request.post(`${packBase(id)}/promote`, {}),
+    activate: (id) => data_provider_1.request.post(`${packBase(id)}/activate`, {}),
 };
 exports.commitmentApi = {
     /**
@@ -217,8 +181,6 @@ exports.commitmentApi = {
     pause: (id) => data_provider_1.request.post(`${base(id)}/pause`, {}),
     resume: (id) => data_provider_1.request.post(`${base(id)}/resume`, {}),
     complete: (id) => data_provider_1.request.post(`${base(id)}/complete`, {}),
-    autonomy: (id, body) => data_provider_1.request.post(`${base(id)}/autonomy`, body),
-    mode: (id, body) => data_provider_1.request.post(`${base(id)}/mode`, body),
     delivery: (id, body) => data_provider_1.request.post(`${base(id)}/delivery`, body),
     receipts: (id, query = 1) => data_provider_1.request.get((0, triggers_1.withQuery)(`${base(id)}/receipts`, typeof query === 'number' ? { limit: query } : query)),
     receiptQuarterlyMetrics: (id, year, quarter) => data_provider_1.request.get((0, triggers_1.withQuery)(`${base(id)}/receipt-metrics/quarterly`, { year, quarter })),
@@ -325,6 +287,9 @@ exports.commitmentApi = {
      * investigation of the same drift most needs answered before it starts.
      */
     hypotheses: (id, query = {}) => data_provider_1.request.get((0, triggers_1.withQuery)(`${base(id)}/hypotheses`, query)),
+    evaluations: (id, query = {}) => data_provider_1.request.get((0, triggers_1.withQuery)(`${base(id)}/evaluations`, query)),
+    createEvaluation: (id, body) => data_provider_1.request.post(`${base(id)}/evaluations`, body),
+    retryEvaluationLearning: (id, scheduleId) => data_provider_1.request.post(`${base(id)}/evaluations/${encodeURIComponent(scheduleId)}/retry-learning`, {}),
     observations: (id, query = {}) => data_provider_1.request.get((0, triggers_1.withQuery)(`${base(id)}/observations`, query)),
     /* ------------------------------------------------------------------------ *
      * Steering
@@ -334,7 +299,7 @@ exports.commitmentApi = {
     /** Bounded, named corrections — never a free-form contract edit. */
     remediate: (id, body) => data_provider_1.request.post(`${base(id)}/remediation`, body),
     /** Approve/reject an Agent-proposed cadence change the server parked. */
-    decideAutonomyRequest: (id, requestId, approved) => data_provider_1.request.post(`${base(id)}/autonomy-requests/${encodeURIComponent(requestId)}/decision`, {
+    decideCadenceRequest: (id, requestId, approved) => data_provider_1.request.post(`${base(id)}/cadence-requests/${encodeURIComponent(requestId)}/decision`, {
         approved,
     }),
     linkGoal: (id, goalId) => data_provider_1.request.put(`${base(id)}/goals/${encodeURIComponent(goalId)}`, {}),
@@ -351,7 +316,6 @@ exports.COMMITMENT_REMEDIATION_ACTIONS = [
     'pause_commitment',
     'mute_user_nudges',
     'reduce_nudge_frequency',
-    'tighten_policy',
     'mark_noop',
 ];
 /** The only keys `createBodySchema` (a `z.strictObject`) accepts. */
@@ -427,8 +391,8 @@ function parseCommitmentConcurrencyLimit(input) {
     if (['unlimited', 'unbounded', 'none', 'null'].includes(raw))
         return null;
     const value = Number(raw);
-    if (!Number.isSafeInteger(value) || value < 1 || value > 100) {
-        throw new Error('--max-concurrent-runs must be "unlimited" or an integer from 1 to 100.');
+    if (!Number.isSafeInteger(value) || value < 0 || value > 100) {
+        throw new Error('--max-concurrent-runs must be "unlimited" or an integer from 0 to 100.');
     }
     return value;
 }
@@ -453,7 +417,7 @@ function commitmentConcurrencyEnvelopePatch({ rawValue, reason, autonomous = pro
     };
 }
 function describeCommitmentConcurrency(commitment) {
-    const envelope = commitment.policy?.autonomyEnvelope;
+    const envelope = commitment.policy?.executionBudget;
     const limit = envelope?.maxConcurrentRuns;
     const decision = envelope?.maxConcurrentRunsDecision;
     if (limit == null) {
@@ -638,57 +602,6 @@ function describeEvidenceHealth(health, criteriaCount) {
     }
     return `${state}${detail}`;
 }
-/**
- * Why a commitment is `stalled`, in the reconciler's own words.
- *
- * These clauses are the CLI voicing of the `details` table in
- * `CommitmentLivenessReconciler.alertCopy` — an operator who gets the alert
- * ("<name> is stalled — its expected checks are no longer arriving") and then
- * runs `commitments show` must read the same sentence, or the two surfaces look
- * like two different problems.
- *
- * `contract_version_mismatch` has no entry there because it is not a diagnosis;
- * the reconciler synthesises it when the running contract is fenced behind the
- * authored one. It still reaches `state.liveness.diagnosisKind`, so it needs a
- * clause here or the one case with an obvious fix prints bare.
- */
-const STALLED_DIAGNOSES = {
-    scheduler_stalled: 'its expected checks are no longer arriving',
-    work_failing: 'every recent run reached the agent and failed while doing the work',
-    runtime_failing: 'recent runs never started — the runtime refused them',
-    result_rejected: 'every recent run reached the agent, but its result was rejected',
-    observation_unreadable: 'the latest check could not read every configured source',
-    execution_budget_exhausted: 'recent planned work was skipped — the execution budget is exhausted',
-    no_advancement: 'no server-recorded advancement exists inside the declared window',
-    owner_action_blocked: 'a completed work run is blocked pending owner action',
-    contract_version_mismatch: 'the running contract is older than the authored one; its triggers have not resynced',
-};
-/**
- * `stalled` is a verdict, not a reason. Printed bare it reads like `unknown`
- * with a harsher word, and the operator's next move is to go and read run
- * history to find what the reconciler had already decided. Returns undefined
- * for every other health value, including `unknown` — "nobody has judged" has
- * no diagnosis to name.
- */
-function describeStalledHealth(commitment) {
-    if (commitment.state?.health !== 'stalled')
-        return undefined;
-    const liveness = (commitment.state?.liveness || {});
-    const kind = typeof liveness.diagnosisKind === 'string' ? liveness.diagnosisKind : undefined;
-    const clause = (kind && STALLED_DIAGNOSES[kind]) ||
-        'this loop has stopped producing; the reconciler did not record which check failed';
-    // What refused and what to change, when the reconciler recorded them
-    // (OSK-12137). A machine failure has a specific fix; printing only the
-    // verdict would send the owner to read run history for it.
-    const code = typeof liveness.diagnosisCode === 'string' && liveness.diagnosisCode
-        ? ` (${liveness.diagnosisCode})`
-        : '';
-    const since = typeof liveness.unhealthySinceAt === 'string' ? ` (since ${liveness.unhealthySinceAt})` : '';
-    const fix = typeof liveness.diagnosisFix === 'string' && liveness.diagnosisFix
-        ? ` — ${liveness.diagnosisFix}`
-        : '';
-    return `${clause}${code}${since}${fix}`;
-}
 /** Render an interval back as a compact human string. */
 function describeIntervalMs(ms) {
     if (!ms || !Number.isFinite(ms))
@@ -777,16 +690,18 @@ function renderCommitmentList(commitments, log) {
         id: o.id ?? '-',
         title: o.title ?? '-',
         status: o.status ?? '-',
-        health: o.state?.health ?? '-',
+        outcome: o.assessment?.label ?? 'Unknown',
+        evidence: o.assessment?.evidence ?? 'unavailable',
+        operation: o.assessment?.operation ?? 'blocked',
         cadence: cadenceLabel(o),
-        autonomy: (0, commitment_product_1.productModeLabel)(o.policy?.autonomyMode),
         agent: o.agentId ?? '-',
     })), [
         { key: 'title', header: 'TITLE', maxWidth: 34 },
         { key: 'status', header: 'STATUS', maxWidth: 10 },
-        { key: 'health', header: 'HEALTH', maxWidth: 16 },
+        { key: 'outcome', header: 'OUTCOME', maxWidth: 16 },
+        { key: 'evidence', header: 'EVIDENCE', maxWidth: 14 },
+        { key: 'operation', header: 'OPERATION', maxWidth: 12 },
         { key: 'cadence', header: 'CADENCE', maxWidth: 10 },
-        { key: 'autonomy', header: 'MODE', maxWidth: 18 },
         { key: 'agent', header: 'AGENT', verbatim: true },
         // Commitment ids are routinely pasted into `check-now`, so this column
         // is never clipped. Widening the guess (28 → 44) fixed today's
@@ -794,32 +709,6 @@ function renderCommitmentList(commitments, log) {
         { key: 'id', header: 'ID', verbatim: true },
     ], log);
 }
-/**
- * The autonomy mode a check ACTUALLY ran at, read from its policy trace
- * (OSK-4881).
- *
- * A check records the Mode it actually used in `decision.policyTrace`. For the
- * v2 product contract, only an explicit Workspace-admin constraint may lower
- * the declared Mode; legacy checks may still carry older effective-mode traces.
- * Either `autonomyMode` or `effectiveAutonomyMode` answers what governed that
- * particular run. Returns undefined when the trace carries neither.
- *
- * Exported for tests.
- */
-function effectiveAutonomyMode(check) {
-    const trace = check?.decision?.policyTrace;
-    if (!Array.isArray(trace))
-        return undefined;
-    for (const entry of trace) {
-        if (!entry || typeof entry !== 'object')
-            continue;
-        const e = entry;
-        const mode = e.autonomyMode ?? e.effectiveAutonomyMode;
-        if (typeof mode === 'string' && mode.length)
-            return mode;
-    }
-    return undefined;
-}
 /**
  * A `commitment_standstill` policyTrace entry, extracted from the latest
  * check's decision. The arbiter appends it whenever a quiet posture is the
@@ -864,14 +753,6 @@ function extractStandstillFromCheck(check) {
  *
  * Exported for tests.
  */
-function describeAutonomyLine(commitment, latestCheck) {
-    const stated = commitment.policy?.autonomyMode ?? '-';
-    const effective = effectiveAutonomyMode(latestCheck);
-    if (effective && effective !== stated) {
-        return `${(0, commitment_product_1.productModeLabel)(stated)} (effective: ${(0, commitment_product_1.productModeLabel)(effective)} — constrained by configured policy)`;
-    }
-    return (0, commitment_product_1.productModeLabel)(stated);
-}
 /**
  * One-line rendering of `commitment.executorBlocked` — the B4/A7 signal that
  * the executor's targets are all unusable: `{reason:'quota'|'offline'|'waiting_for_machine', until?,
@@ -927,21 +808,17 @@ latestCheck) {
     if (commitment.target?.deadlineAt)
         log(`Deadline:  ${commitment.target.deadlineAt}`);
     log(`Cadence:   ${cadenceLabel(commitment)}`);
-    log(`Mode:      ${describeAutonomyLine(commitment, latestCheck)}`);
     log(`Delivery:  ${(0, commitment_product_1.deliveryLabel)(commitment.delivery?.mode)}${commitment.delivery?.repo ? ` · ${commitment.delivery.repo}` : ''}${commitment.delivery?.baseBranch ? ` → ${commitment.delivery.baseBranch}` : ''}`);
     log(`Concurrency: ${describeCommitmentConcurrency(commitment)}`);
     const criteria = commitment.target?.successCriteria || [];
     const evidenceHealth = latestCheck?.inputs?.evidenceHealth;
     const evidenceLine = describeEvidenceHealth(evidenceHealth, criteria.length);
-    const health = commitment.state?.health ?? 'unknown';
-    const unevidenceableExplanation = health === 'unknown' && evidenceHealth?.state === 'unevidenceable_criteria'
-        ? ' — evidence cannot establish a positive health verdict as configured'
-        : '';
-    // The two explanations are mutually exclusive by construction: one only fires
-    // on `unknown`, the other only on `stalled`.
-    const stalledExplanation = describeStalledHealth(commitment);
-    const healthExplanation = unevidenceableExplanation || (stalledExplanation ? ` — ${stalledExplanation}` : '');
-    log(`Health:    ${health}${healthExplanation}`);
+    const assessment = commitment.assessment
+        ? (0, data_provider_1.readCommitmentAssessment)(commitment.assessment)
+        : undefined;
+    log(`Assessment: ${assessment?.label ?? 'Unknown'}`);
+    log(`Evidence:   ${assessment?.evidence ?? 'unavailable'}`);
+    log(`Operation:  ${assessment?.operation ?? 'blocked'}${assessment?.operationReason ? ` — ${assessment.operationReason}` : ''}`);
     if (commitment.state?.lastCheckedAt)
         log(`Checked:   ${commitment.state.lastCheckedAt}`);
     if (typeof commitment.state?.consecutiveUnresolvedChecks === 'number') {
@@ -1016,8 +893,8 @@ const INVOCATION_SKIP_REASONS = {
     state_watch_intact: 'watch intact',
     // NAMES THE ENVELOPE, not "autonomy", because they are different fields.
     //
-    // The server sets this code from `autonomyEnvelope.enabled !== true`
-    // (`WakeIntentResolver.js:35`, `CommitmentAutonomyService.js:12`). It was
+    // The server sets this code from `executionBudget.enabled !== true`
+    // (`WakeIntentResolver.js:35`, `CommitmentCadenceService.js:12`). It was
     // rendered as "autonomy off", which a reader maps onto `policy.autonomyMode`
     // — the field the CLI prints as `Autonomy:` and the one `commitments autonomy`
     // sets. So a commitment sitting at `suggestions_only` reported "autonomy off",

package/dist/lib/daemon-installer.d.ts

@@ -20,6 +20,8 @@ export interface DaemonInstallOptions {
     feedBase?: string;
     /** Injected for tests; defaults to global fetch. */
     fetchImpl?: typeof fetch;
+    /** Cancel an in-progress install, including consumption of a response body. */
+    signal?: AbortSignal;
     /**
      * Trust anchors. Defaults to the pinned production set; tests substitute a
      * generated keypair, exactly as the first-party harness installer does. Passing an EMPTY

package/dist/lib/daemon-installer.js

@@ -105,19 +105,106 @@ function daemonPlatformKey(platform = process.platform, arch = process.arch) {
 function fail(code, error) {
     return { ok: false, code, error };
 }
-async function getWithTimeout(url, timeoutMs, fetchImpl) {
+class DownloadSizeLimitError extends Error {
+    constructor(maxBytes) {
+        super(`download exceeds the size ceiling (${maxBytes} bytes)`);
+        this.name = 'DownloadSizeLimitError';
+    }
+}
+/**
+ * Own the request until EOF, rather than releasing its deadline at headers.
+ * Count delivered bytes before retaining them; Content-Length is only an early
+ * refusal, since it may be absent, incorrect, or describe compressed bytes.
+ */
+async function getBytesWithTimeout(url, timeoutMs, maxBytes, fetchImpl, signal) {
+    signal?.throwIfAborted();
     const controller = new AbortController();
-    const timer = setTimeout(() => controller.abort(), timeoutMs);
+    let response;
+    let reader;
+    const cancelBody = (reason) => {
+        // Cancellation is best effort: a broken producer must not extend the
+        // deadline by returning a cancel promise that never settles.
+        try {
+            const cancelled = reader ? reader.cancel(reason) : response?.body?.cancel(reason);
+            void cancelled?.catch(() => undefined);
+        }
+        catch { /* response may already be closed */ }
+    };
+    let rejectAbort;
+    const aborted = new Promise((_, reject) => { rejectAbort = reject; });
+    const onAbort = () => {
+        rejectAbort(controller.signal.reason);
+        cancelBody(controller.signal.reason);
+    };
+    controller.signal.addEventListener('abort', onAbort, { once: true });
+    const onCallerAbort = () => controller.abort(signal?.reason);
+    signal?.addEventListener('abort', onCallerAbort, { once: true });
+    const timer = setTimeout(() => controller.abort(new Error(`download timed out after ${timeoutMs} ms`)), timeoutMs);
     try {
-        return await fetchImpl(url, {
+        const requested = fetchImpl(url, {
             signal: controller.signal,
             headers: { 'User-Agent': 'skrr-cli (daemon install)' },
+        }).then((res) => {
+            response = res;
+            // Injected transports can ignore AbortSignal. Dispose a response that
+            // arrives after our deadline rather than leaving its connection open.
+            if (controller.signal.aborted)
+                cancelBody(controller.signal.reason);
+            return res;
         });
+        const downloaded = (async () => {
+            response = await requested;
+            controller.signal.throwIfAborted();
+            if (!response.ok)
+                throw new Error(`returned HTTP ${response.status}`);
+            const contentLength = response.headers.get('content-length');
+            if (contentLength && /^\d+$/.test(contentLength.trim()) && Number(contentLength) > maxBytes) {
+                throw new DownloadSizeLimitError(maxBytes);
+            }
+            if (!response.body)
+                return Buffer.alloc(0);
+            reader = response.body.getReader();
+            // Grow one buffer rather than retaining a separate allocation per chunk.
+            // A producer emitting tiny chunks must not defeat the byte ceiling with
+            // unbounded chunk metadata.
+            let bytes = Buffer.alloc(0);
+            let receivedBytes = 0;
+            for (;;) {
+                const { done, value } = await reader.read();
+                controller.signal.throwIfAborted();
+                if (done)
+                    break;
+                if (value.byteLength > maxBytes - receivedBytes)
+                    throw new DownloadSizeLimitError(maxBytes);
+                const neededBytes = receivedBytes + value.byteLength;
+                if (neededBytes > bytes.byteLength) {
+                    const nextBytes = Buffer.allocUnsafe(Math.min(maxBytes, Math.max(64 * 1_024, bytes.byteLength * 2, neededBytes)));
+                    bytes.copy(nextBytes, 0, 0, receivedBytes);
+                    bytes = nextBytes;
+                }
+                bytes.set(value, receivedBytes);
+                receivedBytes += value.byteLength;
+            }
+            return bytes.subarray(0, receivedBytes);
+        })();
+        // Race the entire transfer once: racing each read retains an abort-promise
+        // reaction per chunk until the download ends.
+        return await Promise.race([downloaded, aborted]);
+    }
+    catch (err) {
+        controller.abort(err);
+        throw err;
     }
     finally {
         clearTimeout(timer);
+        signal?.removeEventListener('abort', onCallerAbort);
+        controller.signal.removeEventListener('abort', onAbort);
+        reader?.releaseLock();
     }
 }
+function errorMessage(error) {
+    return error instanceof Error ? error.message : String(error);
+}
 /** Fetch `<feedBase>/latest/daemon-version.json` and verify its signature. */
 async function fetchVerifiedDaemonManifest(opts = {}) {
     const env = opts.env ?? process.env;
@@ -125,19 +212,16 @@ async function fetchVerifiedDaemonManifest(opts = {}) {
     const fetchImpl = opts.fetchImpl ?? fetch;
     const keys = opts.keys ?? auth_core_1.OVERSKY_RELEASE_PUBLIC_KEYS;
     const url = `${feedBase}/latest/daemon-version.json`;
-    let res;
+    let text;
     try {
-        res = await getWithTimeout(url, MANIFEST_TIMEOUT_MS, fetchImpl);
+        const bytes = await getBytesWithTimeout(url, MANIFEST_TIMEOUT_MS, MAX_MANIFEST_BYTES, fetchImpl, opts.signal);
+        text = bytes.toString('utf8');
     }
     catch (err) {
-        return fail('manifest_unreachable', `${url}: ${err.message}`);
-    }
-    if (!res.ok) {
-        return fail('manifest_unreachable', `${url} returned HTTP ${res.status}`);
-    }
-    const text = await res.text();
-    if (text.length > MAX_MANIFEST_BYTES) {
-        return fail('manifest_malformed', 'release manifest is implausibly large');
+        if (err instanceof DownloadSizeLimitError) {
+            return fail('manifest_malformed', 'release manifest is implausibly large');
+        }
+        return fail('manifest_unreachable', `${url}: ${errorMessage(err)}`);
     }
     let manifest;
     try {
@@ -172,7 +256,7 @@ async function installDaemon(opts = {}) {
     if (!platformKey) {
         return fail('unsupported_platform', `no daemon build for ${process.platform}-${process.arch}`);
     }
-    const fetched = await fetchVerifiedDaemonManifest({ env, feedBase, fetchImpl, keys });
+    const fetched = await fetchVerifiedDaemonManifest({ env, feedBase, fetchImpl, keys, signal: opts.signal });
     if (!('manifest' in fetched))
         return fetched;
     const { manifest } = fetched;
@@ -193,18 +277,10 @@ async function installDaemon(opts = {}) {
     }
     let bytes;
     try {
-        const res = await getWithTimeout(artifact.url, ARTIFACT_TIMEOUT_MS, fetchImpl);
-        if (!res.ok) {
-            return fail('download_failed', `${artifact.url} returned HTTP ${res.status}`);
-        }
-        const buf = Buffer.from(await res.arrayBuffer());
-        if (buf.byteLength > MAX_ARTIFACT_BYTES) {
-            return fail('download_failed', 'downloaded artifact exceeds the size ceiling');
-        }
-        bytes = buf;
+        bytes = await getBytesWithTimeout(artifact.url, ARTIFACT_TIMEOUT_MS, MAX_ARTIFACT_BYTES, fetchImpl, opts.signal);
     }
     catch (err) {
-        return fail('download_failed', `${artifact.url}: ${err.message}`);
+        return fail('download_failed', `${artifact.url}: ${errorMessage(err)}`);
     }
     const actual = (0, node_crypto_1.createHash)('sha256').update(bytes).digest('hex');
     if (actual !== artifact.sha256.toLowerCase()) {

package/dist/lib/first-party-harness-doctor.js

@@ -41,6 +41,7 @@ const node_path_1 = __importDefault(require("node:path"));
 const first_party_harness_1 = require("./first-party-harness");
 const auth_core_1 = require("@skrr-ai/auth-core");
 const harness_tiers_1 = require("./harness-tiers");
+const first_party_harness_update_1 = require("./first-party-harness-update");
 const first_party_harness_managed_1 = require("./first-party-harness-managed");
 const first_party_harness_project_trust_1 = require("./first-party-harness-project-trust");
 /**
@@ -103,7 +104,7 @@ function releaseChannelCheck(env) {
         name: 'release-channel',
         status: 'ok',
         detail: `${channel} — ${canonical}`,
-        remedy: 'Fetch that URL to see whether the channel has a published release, and which version.' +
+        remedy: 'Run `skrr code update --check` to verify the published release, or fetch that URL to inspect it.' +
             (alsoTried.length ? ` If it has none, an installer also tries ${alsoTried.join(', ')}.` : ''),
     };
 }
@@ -245,6 +246,34 @@ function engineCheck(env) {
         remedy: `Install the engine (\`${auth_core_1.FIRST_PARTY_HARNESS.command} install\`), or set ${pathVar} to an existing build.`,
     };
 }
+function engineUpdateCheck(env) {
+    const update = (0, first_party_harness_update_1.getLocalCodeUpdateStatus)(env);
+    const last = update.lastAttempt;
+    const completed = typeof last?.completedAt === 'number' ? new Date(last.completedAt) : null;
+    const completedAt = completed && Number.isFinite(completed.getTime()) ? completed.toISOString() : null;
+    const details = [
+        `installed ${update.installedVersion ?? (update.activePath ? 'version not recorded' : 'none')}`,
+        `owner ${update.owner}`,
+        update.installedVerified ? 'signed release verified' : null,
+        update.offeredVersion ? `latest ${update.offeredVersion}` : 'channel not checked recently',
+        last
+            ? `last ${last.operation}: ${last.status}${completedAt ? ` at ${completedAt}` : ''}`
+            : 'no recorded update attempt',
+    ]
+        .filter(Boolean)
+        .join('; ');
+    return {
+        name: 'engine-update',
+        status: last?.status === 'failed' || update.state === 'check-failed' ? 'warn' : 'ok',
+        detail: details,
+        remedy: last?.status === 'failed'
+            ? `${last.error ?? last.code ?? 'Update failed.'} ${update.owner === 'managed' ? 'Retry with `skrr code update`.' : (update.message ?? update.command)}`
+            : (update.message ??
+                (update.state === 'update-available'
+                    ? 'Run `skrr code update` to install the signed release.'
+                    : 'Run `skrr code update --check` to check the signed channel; `skrr code rollback` restores the previous verified release.')),
+    };
+}
 function stateDirCheck(cwd, env) {
     const project = projectStateDir(cwd);
     const user = (0, first_party_harness_1.engineHome)(env);
@@ -863,6 +892,7 @@ function agentAttributionCheck() {
 function runDoctor(cwd = process.cwd(), env = process.env) {
     const checks = [
         engineCheck(env),
+        engineUpdateCheck(env),
         releaseChannelCheck(env),
         stateDirCheck(cwd, env),
         compatCheck(cwd, env),

package/dist/lib/first-party-harness-remote-install.d.ts

@@ -0,0 +1,71 @@
+import { BaseCommand } from '../base-command';
+/**
+ * `skrr code install` — install the engine from the terminal.
+ *
+ * ── Why this command exists ────────────────────────────────────────────────
+ *
+ * `skrr code`'s not-installed message offered exactly two routes and neither
+ * worked without a browser: "In the web app: the runtime menu … → Install", or
+ * point the engine-path override at a build you already have — which is the thing
+ * you are trying to obtain, and the route that gives up provenance. So the
+ * ordinary case for a coding harness (a dev box over SSH, a CI runner, a cloud
+ * VM) had no way in (dogfood OSK-276).
+ *
+ * Nothing underneath was missing. The daemon has performed the verified install
+ * since 2026-08-08, and `POST /api/daemons/:id/cli-installers/:provider/install`
+ * has fronted it since June. The install was API-exposed and CLI-unreachable —
+ * the shape the root `CLAUDE.md` names under CLI ↔ API parity: "an endpoint the
+ * API exposes must be reachable from `skrr`."
+ *
+ * So this adds a SURFACE and no mechanism. Same route the web app posts, same
+ * daemon job, same signature verification. A second install path would be a
+ * second thing to keep in step with the first, and the first is the one that
+ * verifies the signed manifest.
+ */
+export default class CodeInstall extends BaseCommand {
+    static description: string;
+    static examples: string[];
+    static flags: {
+        daemon: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        wait: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+        json: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+    };
+    run(): Promise<void>;
+    /** Which daemon the install targets, by the rule every daemon-picking command shares. */
+    private resolveTarget;
+    /**
+     * The daemon id to install through, or the refusal.
+     *
+     * Refuses rather than guessing when several are active. Picking one would mean
+     * installing a hundred megabytes onto a machine the user was not thinking
+     * about. The candidates are CONNECTED daemons by the id the installer routes
+     * take (`listConnectedDaemons`), so the error names values that work — the
+     * Daemon resource list `skrr list-daemons` prints is a different id space
+     * (OSK-9993).
+     *
+     * A Dedicated Runtime's own machine is refused here, before any request. The
+     * daemon and the API refuse it too; saying so locally is what keeps the answer
+     * the same whether or not this machine's daemon is reachable, and whether or
+     * not it has published its id. Another of the owner's machines, named with
+     * `--daemon`, is not this machine and goes to the API like anywhere else.
+     */
+    private installTarget;
+    /**
+     * What the daemon says about this provider, when it started no job.
+     *
+     * Read from the SAME list route the web app uses, so the CLI reports the
+     * daemon's own words rather than inventing an explanation for silence. Best
+     * effort: a failure here means falling back to the honest "does not say why",
+     * never to a guess.
+     */
+    private installerNote;
+    /**
+     * Poll the job until it settles, printing each new log line.
+     *
+     * The daemon already writes a progress log — "Fetching the signed release
+     * manifest", "Verified and installed …" — and it is the only account
+     * of a hundred-megabyte download the user is waiting on. Printing only the
+     * lines not yet seen keeps a poll loop from repeating the whole log.
+     */
+    private followJob;
+}