@proagentstore/cli 0.4.118 → 0.4.120

package/dist/bootstrap.js

@@ -8,7 +8,7 @@ import {
   newestPayload,
   olderThan,
   payloadAt
-} from "./chunk-LQ57ADUG.js";
+} from "./chunk-NNA7VZ6W.js";
 
 // src/bootstrap.ts
 import { existsSync } from "fs";

package/dist/browser-runner/local-apply/bridge.js

@@ -55,8 +55,14 @@ const PAGINATION_NAME = /^(next|previous|prev|more|load more|show more|see more|
 const STEP_NAME = /^(next|continue|back|previous|add( another)?|upload|attach|browse|choose( a)? file|select( a)? file|remove|edit|expand|collapse|show more)\b/i;
 /** A tick that is a legal or privacy agreement: the owner's call, not the CLI's. */
 const CONSENT_NAME = /\b(agree|consent|terms|privacy|acknowledge|certify|accept|declaration|gdpr)\b/i;
-/** A field that is a credential: a sign-in, never an application answer. */
-const CREDENTIAL_NAME = /password|passcode|one[- ]?time|\botp\b|verification code|security code|2fa|two[- ]factor/i;
+/**
+ * A field that is a credential: a sign-in, never an application answer. It includes the box an emailed or texted
+ * one-time code goes into (#1014) — "Enter the 6-digit code we emailed you", "Sign-in code" — which has no password
+ * field beside it, so the page check never sees a sign-in: the CLI is stopped at the field and the owner takes the
+ * exact session over (#1013). The Runner holds no mailbox access and never reads, asks for or types a code itself.
+ * Ordinary "code" answers (a postcode, a promo or referral code) are not credentials.
+ */
+export const CREDENTIAL_NAME = /password|passcode|one[- ]?time|\botp\b|2fa|two[- ]factor|\b(?:verification|security|sign[- ]?in|log[- ]?in|login|access|authentication|confirmation) code\b|\b\d[- ]?digit code\b|\bcode (?:that )?we (?:sent|emailed|texted)\b|\bcode (?:sent|emailed|texted) to\b/i;
 /** Keys that move between fields without entering or activating anything. */
 const SAFE_KEYS = /^(Tab|Shift\+Tab|Arrow(Up|Down|Left|Right)|Escape|Home|End|PageUp|PageDown)$/;
 /**

package/dist/{chunk-LQ57ADUG.js → chunk-NNA7VZ6W.js}

@@ -70,14 +70,26 @@ function runNpm(args, options) {
   const npm = npmInvocation(args);
   return run(npm.file, npm.args, { ...options, ...npm.windowsVerbatimArguments ? { windowsVerbatimArguments: true } : {} });
 }
-async function latestPublishedVersion(timeoutMs = 3e4, signal) {
+async function latestPublishedRelease(timeoutMs = 3e4, signal, deps = {}) {
   try {
-    const { stdout } = await runNpm(["view", CLI_PACKAGE, "version"], { timeout: timeoutMs, signal });
-    return stdout.trim() || null;
-  } catch {
-    return null;
+    const { stdout } = await (deps.runNpm ?? runNpm)(["view", CLI_PACKAGE, "version"], { timeout: timeoutMs, signal });
+    const version = String(stdout).trim();
+    return version ? { version } : { error: "npm printed no version" };
+  } catch (e) {
+    return { error: npmFailure(e) };
   }
 }
+function npmFailure(e) {
+  const err = e;
+  const stderr = String(err?.stderr ?? "").split(/\r?\n/).map((l) => l.trim()).filter(Boolean);
+  const npmErrors = stderr.filter((l) => /npm (ERR!|error)/i.test(l));
+  const why = npmErrors.slice(0, 2).join(" ") || stderr.at(-1) || (err?.killed || err?.signal ? `npm did not answer in time (${String(err.signal ?? "killed")})` : "") || (typeof err?.code === "string" ? `npm could not be started (${err.code}: ${String(err.message ?? "")})` : "") || String(err?.message ?? e);
+  return why.replace(/\s+/g, " ").trim().slice(0, 300);
+}
+async function latestPublishedVersion(timeoutMs = 3e4, signal) {
+  const r = await latestPublishedRelease(timeoutMs, signal);
+  return "version" in r ? r.version : null;
+}
 async function npmInstallInto(dir, version) {
   try {
     await runNpm(["install", "--prefix", dir, "--omit=dev", "--no-audit", "--no-fund", "--no-save", `${CLI_PACKAGE}@${version}`], { timeout: 5 * 6e4 });
@@ -120,6 +132,7 @@ export {
   cachedPayloads,
   newestPayload,
   runNpm,
+  latestPublishedRelease,
   latestPublishedVersion,
   installPayload
 };

package/dist/index.js

@@ -4,10 +4,10 @@ import {
   CLI_PACKAGE,
   installPayload,
   isVersion,
-  latestPublishedVersion,
+  latestPublishedRelease,
   olderThan,
   runNpm
-} from "./chunk-LQ57ADUG.js";
+} from "./chunk-NNA7VZ6W.js";
 
 // src/index.ts
 import { createRequire as createRequire3 } from "module";
@@ -1305,7 +1305,7 @@ function restartUpArgs(opts) {
 }
 function planRunnerUpdate(f) {
   if (f.fromSource) return { action: "refused", current: f.current, reason: "This runner runs from a source checkout \u2014 update it with `git pull` there, not npm." };
-  if (!f.latest) return { action: "refused", current: f.current, reason: `npm could not be asked for the latest ${CLI_PACKAGE} from this machine.`, retryable: true };
+  if (!f.latest) return { action: "refused", current: f.current, reason: `npm could not be asked for the latest ${CLI_PACKAGE} from this machine${f.latestError ? `: ${f.latestError}` : "."}`, retryable: true };
   if (!olderThan(f.current, f.latest)) return { action: "up-to-date", current: f.current };
   if (!f.restarter) {
     return {
@@ -2341,10 +2341,12 @@ async function connectViaRelay(instanceIds, localUrl, runnerToken, opts, force =
   };
   const updateFacts = async (signal) => {
     const { busy, observations } = await workLook(signal);
+    const release = await latestPublishedRelease(void 0, signal);
     return {
       observations,
       current: CLI_VERSION,
-      latest: await latestPublishedVersion(void 0, signal),
+      latest: "version" in release ? release.version : null,
+      ..."error" in release ? { latestError: release.error } : {},
       fromSource: runsFromSource(),
       restarter: restarterFrom(process.env),
       // A restart ends browser/application work too. Give these durable names to the same

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@proagentstore/cli",
-  "version": "0.4.118",
+  "version": "0.4.120",
   "description": "CLI for creating, publishing, and running ProAgentStore agents",
   "license": "MIT",
   "type": "module",