@dharma-ai-labs/agent-fabric 0.2.108 → 0.2.110

package/dist/index.js

@@ -39,13 +39,15 @@ import { connectDemoDevice, verifyDemoDevice } from './demoEnrollment.js';
 import { performDemoPeerAction, withDemoDeviceLock } from './demoPeer.js';
 import { demoRepositoryPackage } from './demoPackage.js';
 import { demoDeviceAndPackageStatus } from './demoStatus.js';
+import { prepareDemoSigningUpgradeProof, readDemoSigningUpgradeContext } from './demoSigningUpgradeProof.js';
+import { submitDemoSigningUpgradeProof } from './demoSigningUpgradeSubmission.js';
 import { runDemoWatch } from './demoWatch.js';
 import { runDemoSupervisor } from './demoSupervisor.js';
 import { demoWatchRegistrationKey, listDemoWatchRegistrations } from './demoWatchRegistry.js';
 import { createDemoWatchHealthRecorder } from './demoWatchHealth.js';
 import { demoWatchStatus, disableDemoWatch, enableDemoWatch, inspectDemoWatchSupervisor } from './demoWatchControl.js';
 export { openCooperativeInboxSession } from './cooperativeInboxSession.js';
-const VERSION = '0.2.108';
+const VERSION = '0.2.110';
 const USAGE = CLI_USAGE;
 const execFileAsync = promisify(execFile);
 const LOCAL_PROVIDER_IDS = ['codex', 'claude', 'agy', 'hermes'];
@@ -5896,7 +5898,8 @@ export async function run(argv) {
     if (flags.has('version') || command === 'version')
         return { version: VERSION };
     if (command === 'demo' && ['connect', 'status', 'role', 'peers', 'ask', 'reply', 'inbox', 'ack', 'resume',
-        'package', 'package-status', 'watch', 'watch-enable', 'watch-status', 'watch-disable']
+        'package', 'package-status', 'watch', 'watch-enable', 'watch-status', 'watch-disable',
+        'signing-client-proof', 'signing-owner-proof']
         .includes(String(subcommand))) {
         const hqUrl = normalizeHqUrl(portalUrl(flags));
         const organizationId = required(flags, 'organization-id');
@@ -5911,11 +5914,16 @@ export async function run(argv) {
             throw new Error('Local Git remote does not match the private Demo repository binding.');
         }
         const watchControl = ['watch-enable', 'watch-status', 'watch-disable'].includes(String(subcommand));
+        const signingProof = ['signing-client-proof', 'signing-owner-proof'].includes(String(subcommand));
+        if (signingProof && subcommand === 'signing-owner-proof' && flags.has('submit')) {
+            throw new Error('Owner signing approval requires explicit browser confirmation.');
+        }
         if (watchControl && await realpath(root) !== workspace) {
             throw new Error('Demo watch setup must select the exact Git repository root.');
         }
         if (flags.has('dry-run'))
-            return { ok: true, stage: watchControl ? 'demo_watch_plan' : 'demo_device_plan',
+            return { ok: true, stage: signingProof ? 'demo_signing_proof_plan'
+                    : watchControl ? 'demo_watch_plan' : 'demo_device_plan',
                 organizationId, repositoryId, normalizedRepository, workspaceVerified: true,
                 repositoryPackageState: 'not_connected' };
         const grant = subcommand === 'connect' ? required(flags, 'grant') : null;
@@ -5923,6 +5931,12 @@ export async function run(argv) {
             hqUrl, organizationId, repositoryId, normalizedRepository,
             installationId: await loadOrCreateInstallationId(), stateRoot: dharmaHome(),
         };
+        if (signingProof) {
+            const context = await readDemoSigningUpgradeContext(resolve(required(flags, 'review-context')));
+            if (flags.has('submit'))
+                return withDemoDeviceLock(scope, () => submitDemoSigningUpgradeProof(scope, context));
+            return withDemoDeviceLock(scope, () => prepareDemoSigningUpgradeProof(scope, context, subcommand === 'signing-owner-proof' ? 'owner' : 'client'));
+        }
         if (watchControl) {
             const existing = (await listDemoWatchRegistrations(dharmaHome()))
                 .find(row => row.hqUrl === hqUrl && row.organizationId === organizationId && row.repositoryId === repositoryId);