@ref0/cli 0.12.0 → 0.12.1

package/dist/main.mjs

@@ -6660,12 +6660,15 @@ const RequestOrganization = Schema.Struct({
 /**
 * The result collected with the machine's two proofs: each included folder's identity and grant,
 * its agent's owner name and organizations, and excluded paths. Confirmation checks each saved
-* grant's live deadline in the Owner DO.
+* grant's live deadline in the Owner DO. Once a yes connected and the machine hasn't sent its
+* answer code, waiting says until when: `confirmBy`, when ref0 revokes each grant the machine
+* hasn't confirmed.
 */
 const RequestState = Schema.Union([
 	Schema.Struct({
 		state: Schema.Literal("waiting"),
-		expiresAt: Timestamp
+		expiresAt: Timestamp,
+		confirmBy: Schema.optionalKey(Timestamp)
 	}),
 	Schema.Struct({
 		state: Schema.Literal("connected"),
@@ -21400,7 +21403,7 @@ const grantForAgent = Effect.fnUntraced(function* (owner, agent) {
 * an update installs anew. Node, run from source, loads JSON only with the `type` attribute,
 * and only as a default export.
 */
-const cliVersion = "0.12.0";
+const cliVersion = "0.12.1";
 //#endregion
 //#region src/harness/hook-protocol.ts
 /**
@@ -21785,10 +21788,10 @@ const requestAttachment = Effect.fnUntraced(function* (asked) {
 	const withSecret = HttpApiMiddleware.layerClient(ApprovalSecret, ({ request, next }) => next(HttpClientRequest.bearerToken(request, collecting.secret)));
 	const collector = yield* ref0Client(config.api).pipe(Effect.provide(Layer.merge(anonymousCredential, withSecret)), Effect.provideService(HttpClient.HttpClient, http));
 	const params = { approval: started.approval };
-	const collect = Effect.flatMap(Ref.get(pasted), (answerCode) => collector.machineAttachments.collect({
+	const collect = (answerCode) => collector.machineAttachments.collect({
 		params,
 		payload: answerCode === void 0 ? {} : { answerCode }
-	})).pipe(Effect.map(Option.some), Effect.timeoutOrElse({
+	}).pipe(Effect.map(Option.some), Effect.timeoutOrElse({
 		duration: requestTimeout,
 		orElse: () => Effect.succeedNone
 	}), Effect.catchTags({
@@ -21798,13 +21801,19 @@ const requestAttachment = Effect.fnUntraced(function* (asked) {
 		HttpClientError: () => Effect.succeedNone,
 		SchemaError: () => Effect.succeedNone
 	}));
+	const lapsing = asking.some((folder) => Option.isSome(folder.replaces)) ? "Its new grants expire unconfirmed, and each folder’s connection from before still works." : "Its new grants expire unconfirmed.";
 	const giveUpAt = DateTime.toEpochMillis(started.expiresAt) + giveUpAfterMillis;
+	let confirmBy;
 	const answered = Effect.gen(function* () {
 		while (true) {
-			const state = yield* collect;
-			if (Option.isSome(state) && isEnded(state.value)) return state.value;
-			if ((yield* Clock.currentTimeMillis) > giveUpAt) {
+			const sent = yield* Ref.get(pasted);
+			const state = Option.getOrUndefined(yield* collect(sent));
+			if (state !== void 0 && isEnded(state)) return state;
+			if (state?.confirmBy !== void 0) confirmBy = DateTime.toEpochMillis(state.confirmBy);
+			if ((yield* Ref.get(pasted)) !== sent) continue;
+			if ((yield* Clock.currentTimeMillis) > (confirmBy ?? giveUpAt)) {
 				yield* endWait;
+				if (confirmBy !== void 0 && sent === void 0) return yield* sayFailed(`It was approved, but no code was pasted in time, so this machine kept nothing. ${lapsing} To connect this machine, run: ${again$1}`);
 				return yield* sayFailed(`ref0 hasn’t said how it ended, so this machine kept nothing. If it was approved, ref0 revokes its grants 10 minutes after it connected. To connect this machine, run: ${again$1}`);
 			}
 			yield* Effect.sleep(pollMillis);
@@ -21949,7 +21958,7 @@ const requestAttachment = Effect.fnUntraced(function* (asked) {
 			times: 2
 		}), Effect.catchTag("Unanswered", () => sayFailed("Couldn’t reach ref0 to abort it. If it’s approved anyway, ref0 revokes its grants 10 minutes after they connect, since this machine never kept them.")));
 		if (!isEnded(state)) {
-			if ((yield* Ref.get(pasted)) === void 0) return yield* sayFailed([["It was already answered, but no code was pasted, so this machine kept nothing.", asking.some((folder) => Option.isSome(folder.replaces)) ? "Its new grants expire unconfirmed, and each folder’s connection from before still works." : "Its new grants expire unconfirmed."]]);
+			if ((yield* Ref.get(pasted)) === void 0) return yield* sayFailed([["It was already answered, but no code was pasted, so this machine kept nothing.", lapsing]]);
 			yield* printBlocks([["It was already answered, so this machine waits to hear how."]]);
 		}
 		const connected = yield* finish(isEnded(state) ? state : yield* answered);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ref0/cli",
-  "version": "0.12.0",
+  "version": "0.12.1",
   "description": "ref0's command line, which connects an agent's machine to ref0",
   "license": "Apache-2.0",
   "repository": {
@@ -29,7 +29,7 @@
     "@effect/vitest": "4.0.0",
     "@ref0/contracts": "0.0.0",
     "@ref0/model": "0.0.0",
-    "@ref0/sdk": "0.12.0",
+    "@ref0/sdk": "0.12.1",
     "@types/node": "24.19.2",
     "smol-toml": "1.9.1",
     "typescript": "7.0.2",