@finchtech/cli 0.3.0 → 0.3.1

package/README.md

@@ -36,8 +36,12 @@ Task and Skill business discovery and preparation stay in the Remote MCP server.
 
 ## ZIP import and SkillRoot publication
 
+Version 0.3.1 fixes Skill search continuation: pass the returned `nextCursor` unchanged as
+`--cursor`. Search uses the server rules; the CLI does not implement a matching algorithm.
+Older clients receive an upgrade message from the Skill search API.
+
 Version 0.3.0 upgrades Skill publication and encrypted delivery together. Upgrade with
-`pnpm add -g @finchtech/cli@0.3.0` and verify `finch --version` before publishing new Skills
+`pnpm add -g @finchtech/cli@0.3.1` and verify `finch --version` before publishing new Skills
 or downloading encrypted Skills from the upgraded gateway. Older CLI versions cannot use
 the new encrypted delivery, including for historical Skills; 0.3.0 retains historical package support.
 
@@ -57,3 +61,7 @@ SkillRoot exactly as supplied, matching Browser publication metadata; omission m
 Equal public file bytes, paths, name, summary, version and history produce equal roots. Encrypted
 publications use random keys/IVs and need not produce the same root. Updates send the proposed
 manifest for server validation; URI intents are prepared after the new chain binding is confirmed.
+
+Finch-managed publication key requests use a signed timestamp and a one-time nonce. Each request is
+valid for five minutes; retrying after expiry or a lost response requires a fresh signature. The
+gateway rejects older CLI publication requests without timestamps. Historical downloads are unchanged.

package/dist/finch.js

@@ -6675,6 +6675,17 @@ var init_crypto = __esm({
 });
 
 // ../../packages/skill-content/src/delivery-message.ts
+function parsePublicationNonce(nonce) {
+  const match = /^publication:([1-9][0-9]{0,15}):([A-Za-z0-9_-]{1,128})$/u.exec(nonce);
+  if (!match) return null;
+  const timestamp = Number(match[1]);
+  return Number.isSafeInteger(timestamp) ? timestamp : null;
+}
+function buildPublicationNonce(random, timestamp = Date.now()) {
+  const nonce = `publication:${timestamp}:${random}`;
+  if (parsePublicationNonce(nonce) === null) throw new Error("Invalid publication nonce.");
+  return nonce;
+}
 function buildKeyRequestMessage(ref, wallet, nonce) {
   return [PREAMBLE, `chain: ${ref.chainId}`, `skill: ${ref.skillId}`, `version: ${ref.version}`, `wallet: ${wallet.toLowerCase()}`, `nonce: ${nonce}`].join("\n");
 }
@@ -15109,7 +15120,7 @@ var init_testnet_purchase_v1 = __esm({
 });
 
 // ../../packages/agent-market-contracts/src/v1/public-catalog.ts
-var publicCatalogCursorSchema, PUBLIC_BUYER_SERVICE_FIELDS, publicAgentAvailabilitySchema, publicAgentSlowmistAuditStatusValues, publicAgentSlowmistAuditReportSchema, publicSummaryProperties, publicBuyerServiceSchema, canonicalInvocationSchemaDocument, canonicalArtifactDocument, canonicalJsonTextSchema, artifactContractPreimageSchema, publicDocumentProperties, publicAgentOnOfferSchema, publicAgentOnDetailSchema, publicDirectDetailSchema, publicCatalogDetailResponseSchema, publicCatalogListRequestSchema, publicCatalogListResponseSchema, publicCatalogSearchRequestSchema, publicCatalogSearchResponseSchema, PUBLIC_CATALOG_MCP_ANY_OF_SCOPES, PUBLIC_CATALOG_SEARCH_CONTRACT, PUBLIC_CATALOG_CANONICAL_DOCS;
+var publicCatalogCursorSchema, PUBLIC_BUYER_SERVICE_FIELDS, publicAgentAvailabilitySchema, publicAgentSlowmistAuditStatusValues, publicAgentSlowmistAuditReportSchema, publicSummaryProperties, publicBuyerServiceSchema, canonicalInvocationSchemaDocument, canonicalArtifactDocument, canonicalJsonTextSchema, artifactContractPreimageSchema, publicDocumentProperties, publicAgentOnOfferSchema, publicAgentOnDetailSchema, publicDirectDetailSchema, publicCatalogDetailResponseSchema, publicCatalogListRequestSchema, publicCatalogListResponseSchema, publicCatalogSearchCursorSchema, publicCatalogSearchRequestSchema, publicCatalogSearchResponseSchema, PUBLIC_CATALOG_MCP_ANY_OF_SCOPES, PUBLIC_CATALOG_SEARCH_CONTRACT, PUBLIC_CATALOG_CANONICAL_DOCS;
 var init_public_catalog = __esm({
   "../../packages/agent-market-contracts/src/v1/public-catalog.ts"() {
     "use strict";
@@ -15259,6 +15270,7 @@ var init_public_catalog = __esm({
       services: { type: "array", maxItems: 100, items: publicBuyerServiceSchema },
       nextCursor: { anyOf: [publicCatalogCursorSchema, { type: "null" }] }
     });
+    publicCatalogSearchCursorSchema = { type: "string", minLength: 1, maxLength: 512, pattern: "^[A-Za-z0-9_-]+$" };
     publicCatalogSearchRequestSchema = strictObjectSchema({
       query: {
         type: "string",
@@ -15266,13 +15278,17 @@ var init_public_catalog = __esm({
         maxLength: 200,
         "x-finch-normalization": "NFC",
         "x-finch-max-utf8-bytes": 200,
-        "x-finch-case-sensitive": true,
-        "x-finch-matching": "literal_substring"
+        "x-finch-case-sensitive": false,
+        "x-finch-matching": "all_words_substring_and_name_typo"
       },
-      cursor: publicCatalogCursorSchema,
+      cursor: publicCatalogSearchCursorSchema,
       limit: { type: "integer", minimum: 1, maximum: 100 }
     }, ["query"]);
-    publicCatalogSearchResponseSchema = publicCatalogListResponseSchema;
+    publicCatalogSearchResponseSchema = strictObjectSchema({
+      services: { type: "array", maxItems: 100, items: publicBuyerServiceSchema },
+      totalCount: { type: "integer", minimum: 0 },
+      nextCursor: { anyOf: [publicCatalogSearchCursorSchema, { type: "null" }] }
+    });
     PUBLIC_CATALOG_MCP_ANY_OF_SCOPES = Object.freeze([
       "agent_market:discover",
       "agent_market:buyer:read"
@@ -15280,9 +15296,12 @@ var init_public_catalog = __esm({
     PUBLIC_CATALOG_SEARCH_CONTRACT = Object.freeze({
       normalization: "NFC",
       maxUtf8Bytes: 200,
-      caseSensitive: true,
-      matching: "literal_substring",
-      fields: Object.freeze(["displayName", "description"])
+      cursor: "opaque_filter_bound_v2",
+      widthFolding: "fullwidth_ascii",
+      separators: "whitespace_hyphen_underscore",
+      caseSensitive: false,
+      matching: "all_words_substring_and_name_typo",
+      fields: Object.freeze(["displayName", "slug", "description", "integrationFamily", "seller"])
     });
     PUBLIC_CATALOG_CANONICAL_DOCS = Object.freeze({
       visibility: "active_publications_only",
@@ -16753,7 +16772,7 @@ var init_schemas = __esm({
     taskListRequestSchema = strictObjectSchema2({
       q: { type: "string", maxLength: 200 },
       section: { type: "string", enum: ["active", "ended"] },
-      sort: { type: "string", enum: ["latest", "hot", "top"] },
+      sort: { type: "string", enum: ["latest", "hot", "top", "relevance"] },
       taskStatus: { type: "string", enum: ["all", "active", "upcoming", "ended"] },
       participationModel: { type: "string", enum: ["competition", "collaborative"] },
       page: positiveInteger,
@@ -32914,6 +32933,22 @@ var init_chains = __esm({
   }
 });
 
+// ../../packages/deployment-manifest/src/platform/web-analytics.json
+var web_analytics_default;
+var init_web_analytics = __esm({
+  "../../packages/deployment-manifest/src/platform/web-analytics.json"() {
+    web_analytics_default = {
+      schemaVersion: 1,
+      kind: "web_analytics",
+      environments: {
+        local: { measurementId: null },
+        test: { measurementId: null },
+        production: { measurementId: "G-ZZJYKRBJEY" }
+      }
+    };
+  }
+});
+
 // ../../packages/deployment-manifest/src/platform/web-localization.json
 var web_localization_default;
 var init_web_localization = __esm({
@@ -33208,11 +33243,12 @@ function getSkillDeliveryDeploymentByChainId(chainId) {
   if (!environment3) throw new DeploymentManifestError(`Skill delivery has no reviewed binding for chain ${chainId}.`);
   return getSkillDeliveryDeployment(environment3, chainId);
 }
-var internalAppSchema, internalAppsEnvironmentSchema, internalAppsManifestSchema, disabledServiceSchema, taskPlatformManifestSchema, skillDeliveryBindingSchema, skillDeliveryEnvironmentSchema, skillDeliveryManifestSchema, internalAppsManifest, taskPlatformManifest, skillDeliveryManifest, webLocalizationPolicySchema, webLocalizationManifest;
+var internalAppSchema, internalAppsEnvironmentSchema, internalAppsManifestSchema, disabledServiceSchema, taskPlatformManifestSchema, skillDeliveryBindingSchema, skillDeliveryEnvironmentSchema, skillDeliveryManifestSchema, internalAppsManifest, taskPlatformManifest, skillDeliveryManifest, webLocalizationPolicySchema, webLocalizationManifest, webAnalyticsPolicySchema, webAnalyticsManifest;
 var init_platform = __esm({
   "../../packages/deployment-manifest/src/platform/index.ts"() {
     "use strict";
     init_zod();
+    init_web_analytics();
     init_web_localization();
     init_chains();
     init_shared();
@@ -33326,6 +33362,18 @@ var init_platform = __esm({
       kind: external_exports.literal("web_localization"),
       environments: external_exports.strictObject({ local: webLocalizationPolicySchema, test: webLocalizationPolicySchema, production: webLocalizationPolicySchema })
     }).parse(web_localization_default);
+    webAnalyticsPolicySchema = external_exports.strictObject({
+      measurementId: external_exports.string().regex(/^G-[A-Z0-9]+$/u).nullable()
+    });
+    webAnalyticsManifest = external_exports.strictObject({
+      schemaVersion: external_exports.literal(1),
+      kind: external_exports.literal("web_analytics"),
+      environments: external_exports.strictObject({
+        local: webAnalyticsPolicySchema,
+        test: webAnalyticsPolicySchema,
+        production: webAnalyticsPolicySchema
+      })
+    }).parse(web_analytics_default);
   }
 });
 
@@ -54331,6 +54379,7 @@ var init_api2 = __esm({
       }
       async request(options) {
         const headers = new Headers(options.headers);
+        if (options.path.split("?")[0] === "/api/v1/skill-market/skills") headers.set("X-Finch-Search-Version", "2");
         if (options.bearer !== void 0) headers.set("authorization", `Bearer ${options.bearer}`);
         if (options.idempotencyKey !== void 0) headers.set("idempotency-key", options.idempotencyKey);
         let body;
@@ -56044,7 +56093,7 @@ var init_skill_local_flow = __esm({
         return required2(this.api.fetchSkillStoredContent, "Skill content relay").call(this.api, uri, bearer);
       }
       async contentKey(context, chainId, skillId, version6) {
-        const message = buildKeyRequestMessage({ chainId, skillId: BigInt(skillId), version: version6 }, context.walletAddress, `publication:${this.nonce()}`);
+        const message = buildKeyRequestMessage({ chainId, skillId: BigInt(skillId), version: version6 }, context.walletAddress, buildPublicationNonce(this.nonce()));
         const signature = await this.signer.signMessage({ privateKey: context.privateKey, message });
         const result2 = await required2(this.api.requestSkillContentKey, "Skill content-key request").call(this.api, {
           chainId,
@@ -58435,7 +58484,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "@finchtech/cli",
-      version: "0.3.0",
+      version: "0.3.1",
       description: "Finch Agent CLI for wallet-owned marketplace and MCP workflows.",
       type: "module",
       bin: {
@@ -58902,8 +58951,8 @@ async function routeCommand(arguments_, application) {
       query.limit = Number(options["--limit"]);
     }
     if (options["--cursor"] !== void 0) {
-      if (!/^(?:0|[1-9][0-9]{0,9})$/u.test(options["--cursor"]) || Number(options["--cursor"]) > 2147483647) {
-        throw new TypeError("--cursor must be a canonical non-negative 32-bit integer.");
+      if (!/^[A-Za-z0-9_-]{1,512}$/u.test(options["--cursor"])) {
+        throw new TypeError("--cursor must be the opaque nextCursor returned by search.");
       }
       query.cursor = options["--cursor"];
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@finchtech/cli",
-  "version": "0.3.0",
+  "version": "0.3.1",
   "description": "Finch Agent CLI for wallet-owned marketplace and MCP workflows.",
   "type": "module",
   "bin": {
@@ -34,11 +34,11 @@
     "typescript-eslint": "8.67.0",
     "viem": "2.55.15",
     "vitest": "4.1.10",
-    "@finch/deployment-manifest": "0.1.0",
-    "@finch/task-market-contracts": "0.1.0",
-    "@finch/skill-content": "0.1.0",
     "@finch/agent-market-contracts": "0.1.0",
-    "@finch/skill-market-contracts": "0.1.0"
+    "@finch/skill-content": "0.1.0",
+    "@finch/deployment-manifest": "0.1.0",
+    "@finch/skill-market-contracts": "0.1.0",
+    "@finch/task-market-contracts": "0.1.0"
   },
   "scripts": {
     "build": "esbuild src/bootstrap.ts --bundle --platform=node --format=esm --target=node20 --outfile=dist/finch.js --banner:js=\"#!/usr/bin/env node\"",