@hasna/skills 0.8.0 → 0.8.2

package/dist/lib/remote-recurring.d.ts

@@ -0,0 +1,95 @@
+import { type RecurringRequest, type RecurringActivation, type RecurringPreview, type RecurringConsentView, type RecurringActivationResult, type RecurringPage, type RecurringOccurrenceView, type RecurringRevocation } from "./remote-recurring-contract.js";
+import type { RemoteWorkspaceIdentity } from "./remote-workspace-selection.js";
+export * from "./remote-recurring-contract.js";
+export interface RecurringCapability {
+    contractVersion: 1;
+    available: boolean;
+}
+export type RecurringListOptions = Readonly<{
+    limit?: number;
+    cursor?: string;
+}>;
+export type RecurringAction = "preview" | "draft" | "activate" | "list" | "get" | "occurrences" | "revoke";
+export type RecurringInputs = {
+    preview: RecurringRequest;
+    draft: {
+        draftId: string;
+    };
+    activate: {
+        draftId: string;
+        approval: RecurringActivation;
+    };
+    list: RecurringListOptions;
+    get: {
+        consentId: string;
+    };
+    occurrences: RecurringListOptions & {
+        consentId: string;
+    };
+    revoke: {
+        consentId: string;
+    };
+};
+export type RecurringResults = {
+    preview: RecurringPreview;
+    draft: RecurringPreview | null;
+    activate: RecurringActivationResult;
+    list: RecurringPage<RecurringConsentView>;
+    get: RecurringConsentView | null;
+    occurrences: RecurringPage<RecurringOccurrenceView>;
+    revoke: RecurringRevocation;
+};
+export declare class RecurringInputError extends Error {
+    readonly code = "RECURRING_INPUT_INVALID";
+    constructor();
+}
+export declare class RemoteRecurringUnavailableError extends Error {
+    readonly code = "RECURRING_UNAVAILABLE";
+    constructor();
+}
+export declare class RemoteRecurringReadError extends Error {
+    readonly code = "RECURRING_READ_FAILED";
+    constructor();
+}
+export declare class RemoteRecurringUnconfirmedError extends Error {
+    readonly code = "RECURRING_OUTCOME_UNKNOWN";
+    readonly outcomeUnknown = true;
+    constructor();
+}
+declare const failures: {
+    readonly RECURRING_INVALID_REQUEST: readonly [400, "Recurring parameters were refused."];
+    readonly RECURRING_INVALID_CURSOR: readonly [400, "Recurring page cursor was refused."];
+    readonly RECURRING_BODY_TOO_LARGE: readonly [413, "Recurring input exceeds the server limit."];
+    readonly RECURRING_UNAUTHENTICATED: readonly [401, "A current authenticated membership is required."];
+    readonly RECURRING_HUMAN_APPROVAL_REQUIRED: readonly [403, "A fresh human sign-in is required to activate recurring consent."];
+    readonly RECURRING_IMPERSONATION_DENIED: readonly [403, "Recurring changes are unavailable while impersonating."];
+    readonly RECURRING_AUTHORITY_REFUSED: readonly [403, "Current recurring authority was refused."];
+    readonly RECURRING_DEPLOYMENT_MISMATCH: readonly [403, "The recurring draft belongs to another deployment."];
+    readonly RECURRING_SKILL_CHANGED: readonly [409, "The recurring skill has changed."];
+    readonly RECURRING_TERMS_UNAVAILABLE: readonly [409, "The original recurring terms are unavailable."];
+    readonly RECURRING_QUOTE_EXCEEDS_CEILING: readonly [409, "The current quote exceeds the approved recurring ceiling."];
+    readonly RECURRING_NOT_FOUND: readonly [404, "Recurring state is unavailable for this account."];
+    readonly RECURRING_METHOD_NOT_ALLOWED: readonly [405, "The recurring operation is unsupported."];
+    readonly RECURRING_UNAVAILABLE: readonly [503, "Recurring operations are unavailable on this server."];
+    readonly INSUFFICIENT_SCOPE: readonly [403, "The credential lacks the required recurring scope."];
+    readonly RATE_LIMITED: readonly [429, "The recurring request limit was reached. Wait before another explicit request."];
+};
+export type RemoteRecurringErrorCode = keyof typeof failures;
+export declare class RemoteRecurringError extends Error {
+    readonly code: RemoteRecurringErrorCode;
+    readonly status: number;
+    constructor(code: RemoteRecurringErrorCode);
+}
+export declare function recurringFailure(value: unknown, status: number): RemoteRecurringErrorCode | null;
+/** Snapshot before any await. Validation does not substitute for server policy. */
+export declare function recurringInput<A extends RecurringAction>(action: A, raw: RecurringInputs[A]): RecurringInputs[A];
+export declare function parseRecurringCapability(value: unknown): RecurringCapability | undefined;
+export declare function assertRecurringCapability(value: unknown, action: RecurringAction): void;
+export declare function recurringRequest<A extends RecurringAction>(action: A, input: RecurringInputs[A]): {
+    path: string;
+    read: boolean;
+    method: string;
+    body: string | undefined;
+};
+/** Projects known response fields. Immutable terms remain exact and hash-bound. */
+export declare function parseRecurringResult<A extends RecurringAction>(action: A, value: unknown, input: RecurringInputs[A], identity: RemoteWorkspaceIdentity): RecurringResults[A];

package/dist/lib/selected-run.d.ts

@@ -1,8 +1,10 @@
 import type { ResolvedSkillSelection } from "../types/skill-selection.js";
 import type { SkillBundleEntry } from "./skill-bundle.js";
 import { type SelectionResolverOptions } from "./selection-resolver.js";
+import { type SelectedSecretBindings, type SelectedSecretsClient } from "./execution-secrets.js";
 export interface ResolvedSelectedRun {
     selection: ResolvedSkillSelection;
+    profileId: string;
     kind: "instruction" | "executable";
     entries: SkillBundleEntry[];
     manifest: Record<string, any>;
@@ -17,12 +19,29 @@ export interface SelectedLocalRunOptions {
     timeoutMs?: number;
     /** Only explicitly supplied environment values are available to declared secret references. */
     env?: Record<string, string>;
+    /** Explicit value-free vault grants; mutually exclusive with env. */
+    secretBindings?: SelectedSecretBindings;
+    /** SDK injection seam. The default uses the independently configured Secrets SDK. */
+    createSecretsClient?: () => SelectedSecretsClient;
 }
+export declare function prepareSelectedSecretBindings(selected: ResolvedSelectedRun, cwd?: string): Promise<SelectedSecretBindings>;
 export declare function executeSelectedLocal(selected: ResolvedSelectedRun, options?: SelectedLocalRunOptions): Promise<{
     exitCode: number;
     stdout: string;
     stderr: string;
     error?: string;
+    secretBinding?: {
+        schema: "hasna.skills-secret-bindings.v1";
+        selection: Pick<ResolvedSkillSelection, "slug" | "version" | "bundleDigest" | "workspaceId" | "authority" | "profileRevision"> & {
+            profileId: string;
+        };
+        consumer: {
+            stationId: string;
+            workspaceDirectory: string;
+        };
+        secretsAuthority: string;
+        bindings: Record<string, string>;
+    } | undefined;
     selection: ResolvedSkillSelection;
     target: "local";
     runtime: any;

package/dist/mcp/remote-recurring-tools.d.ts

@@ -0,0 +1,2 @@
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+export declare function registerRecurringTools(server: McpServer): void;

package/dist/sdk/index.d.ts

@@ -16,6 +16,8 @@
  * variable of its own. See lib/fleet-credentials.ts.
  */
 export { HttpProfileClient, createProfileClient, type ProfileClient } from "../lib/profile-client.js";
+export { resolveSelectedRun, executeSelectedLocal, prepareSelectedSecretBindings, type ResolvedSelectedRun, type SelectedLocalRunOptions } from "../lib/selected-run.js";
+export { readSelectedSecretBindings, type SelectedSecretBindings, type SelectedSecretsClient } from "../lib/execution-secrets.js";
 export type { SkillSelection, SkillProfile, ResolvedSkillSelection, ResolvedSkillProfile, StationSkillStateInput, StationSkillState } from "../types/skill-selection.js";
 export { MissingSkillsFleetError, SkillsFleetCredentialError, SKILLS_API_KEY_ENV, SKILLS_API_URL_ENV, SKILLS_APP, SKILLS_LOCAL_OPT_IN_ENV_KEYS, configuredSkillsApiUrl, isSkillsLocalOptIn, noticeLocalSkillsMode, normalizeSkillsApiOrigin, requireSkillsApiOrigin, requireSkillsFleet, resolveSkillsApiOrigin, resolveSkillsFleet, selectsSkillsLocalMode, skillsCredentialFilePath, skillsCredentialFiles, skillsCredentialOrReason, type HostedSkillsFleet, type LocalSkillsFleet, type SkillsFleet, type SkillsFleetErrorCode, type SkillsFleetOptions, } from "../lib/fleet-credentials.js";
 export * from "./server.js";
@@ -33,6 +35,10 @@ export * from "./spend.js";
 export * from "./offline.js";
 export * from "./execution/index.js";
 export { RemoteSkillsClient, createRemoteSkillsClient, RemoteRequestError, RemoteRouteUnsupportedError, RemoteCapabilityUnavailableError, RemoteQuoteUnavailableError, RemoteWorkspaceMemberError } from "../lib/remote-client.js";
+export * from "../lib/remote-recurring-contract.js";
+export { RecurringInputError, RemoteRecurringError, RemoteRecurringUnavailableError, RemoteRecurringReadError, RemoteRecurringUnconfirmedError } from "../lib/remote-recurring.js";
+export type { RecurringCapability, RecurringListOptions, RemoteRecurringErrorCode } from "../lib/remote-recurring.js";
+export { canonicalJson, canonicalJsonSha256 } from "../lib/canonical-json.js";
 export type { RemoteQuoteUnavailableCode } from "../lib/remote-client.js";
 export { RemoteCreditApprovalError, type RemoteRunApproval, type RemoteRunQuote, type RemoteCreditPack } from "../lib/remote-account.js";
 export { type RemoteInputFile, type RemoteInputFileDescriptor } from "../lib/remote-files.js";