@rosthq/cli 0.7.119 → 0.7.121
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +25 -1
- package/dist/commands/onboarding.d.ts +12 -0
- package/dist/commands/onboarding.d.ts.map +1 -1
- package/dist/generated/command-manifest.d.ts.map +1 -1
- package/dist/generator/groups.d.ts.map +1 -1
- package/dist/implementation-credential-store.d.ts.map +1 -1
- package/dist/index.d.ts +1 -0
- package/dist/index.d.ts.map +1 -1
- package/dist/index.js +3839 -2078
- package/dist/index.js.map +4 -4
- package/dist/mcp-install.d.ts +3 -3
- package/dist/mcp-install.d.ts.map +1 -1
- package/dist/runner-serve.d.ts +1 -0
- package/dist/runner-serve.d.ts.map +1 -1
- package/dist/skill-trust.d.ts +1 -1
- package/dist/token-store.d.ts +63 -0
- package/dist/token-store.d.ts.map +1 -1
- package/package.json +1 -1
- package/prompts/how-tos/human-confirmations.md +3 -1
package/dist/mcp-install.d.ts
CHANGED
|
@@ -16,7 +16,6 @@ export type McpInstallOptions = {
|
|
|
16
16
|
json: boolean;
|
|
17
17
|
expiry: McpExpiryOption;
|
|
18
18
|
rotateTokenId?: string;
|
|
19
|
-
skipPermissions: boolean;
|
|
20
19
|
};
|
|
21
20
|
export declare function parseMcpInstallOptions(args: string[]): McpInstallOptions;
|
|
22
21
|
export declare class PendingConfirmationError extends Error {
|
|
@@ -36,11 +35,12 @@ export declare function renderMcpInstall(input: {
|
|
|
36
35
|
client: CommandClient;
|
|
37
36
|
appUrl: string;
|
|
38
37
|
options: McpInstallOptions;
|
|
39
|
-
|
|
40
|
-
|
|
38
|
+
confirm?: (question: string) => Promise<boolean>;
|
|
39
|
+
renderGate?: (gate: string) => void;
|
|
41
40
|
}): Promise<{
|
|
42
41
|
stdout: string;
|
|
43
42
|
stderr: string;
|
|
43
|
+
exitCode: 0 | 1;
|
|
44
44
|
}>;
|
|
45
45
|
export declare function renderMcpBootstrapInstall(input: {
|
|
46
46
|
appUrl: string;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"mcp-install.d.ts","sourceRoot":"","sources":["../src/mcp-install.ts"],"names":[],"mappings":"AAEA,OAAO,EAAsB,KAAK,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAE7E,OAAO,KAAK,EAAE,iCAAiC,EAAE,MAAM,sCAAsC,CAAC;AAyE9F,MAAM,MAAM,aAAa,GAAG,aAAa,GAAG,OAAO,GAAG,QAAQ,CAAC;AAM/D,MAAM,MAAM,eAAe,GACvB;IAAE,IAAI,EAAE,SAAS,CAAA;CAAE,GACnB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC9B;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAErB,MAAM,MAAM,iBAAiB,GAAG;IAC9B,MAAM,EAAE,aAAa,CAAC;IAOtB,KAAK,CAAC,EAAE,cAAc,GAAG,MAAM,CAAC;IAChC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,OAAO,CAAC;IACd,MAAM,EAAE,eAAe,CAAC;IAExB,aAAa,CAAC,EAAE,MAAM,CAAC;
|
|
1
|
+
{"version":3,"file":"mcp-install.d.ts","sourceRoot":"","sources":["../src/mcp-install.ts"],"names":[],"mappings":"AAEA,OAAO,EAAsB,KAAK,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAE7E,OAAO,KAAK,EAAE,iCAAiC,EAAE,MAAM,sCAAsC,CAAC;AAyE9F,MAAM,MAAM,aAAa,GAAG,aAAa,GAAG,OAAO,GAAG,QAAQ,CAAC;AAM/D,MAAM,MAAM,eAAe,GACvB;IAAE,IAAI,EAAE,SAAS,CAAA;CAAE,GACnB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC9B;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAErB,MAAM,MAAM,iBAAiB,GAAG;IAC9B,MAAM,EAAE,aAAa,CAAC;IAOtB,KAAK,CAAC,EAAE,cAAc,GAAG,MAAM,CAAC;IAChC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,OAAO,CAAC;IACd,MAAM,EAAE,eAAe,CAAC;IAExB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB,CAAC;AAEF,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,iBAAiB,CA+DxE;AA4BD,qBAAa,wBAAyB,SAAQ,KAAK;IACjD,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;gBAEjB,KAAK,EAAE;QAAE,cAAc,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE;IAc7G,gBAAgB,IAAI,MAAM;CA0B3B;AAED,wBAAsB,gBAAgB,CAAC,KAAK,EAAE;IAC5C,MAAM,EAAE,aAAa,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,iBAAiB,CAAC;IAG3B,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAGjD,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CACrC,GAAG,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,CAAA;CAAE,CAAC,CA+I/D;AAMD,wBAAgB,yBAAyB,CAAC,KAAK,EAAE;IAC/C,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,aAAa,CAAC;IACtB,UAAU,EAAE,iCAAiC,CAAC;IAC9C,IAAI,EAAE,OAAO,CAAC;CACf,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CA6BrC"}
|
package/dist/runner-serve.d.ts
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"runner-serve.d.ts","sourceRoot":"","sources":["../src/runner-serve.ts"],"names":[],"mappings":"AAAA,OAAO,EAAuC,KAAK,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAS5F,OAAO,EAA2F,KAAK,iBAAiB,EAAE,KAAK,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AAE/K,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AA8BzD,OAAO,EAAgI,KAAK,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC7L,OAAO,EAYL,KAAK,WAAW,EAChB,KAAK,WAAW,EACjB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAA4C,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAexF,KAAK,aAAa,GAAG;IACnB,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IAC1C,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;CAC3C,CAAC;AAEF,KAAK,kBAAkB,GAAG;IACxB,EAAE,EAAE,aAAa,CAAC;IAClB,MAAM,CAAC,EAAE,aAAa,GAAG,IAAI,CAAC;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IAGzB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,KAAK,WAAW,GAAG;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;IACxD,qBAAqB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;CAC3D,CAAC;AAEF,KAAK,oBAAoB,GAAG;IAC1B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AAMF,KAAK,qBAAqB,GAAG;IAC3B,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,gBAAgB,CAAC,EAAE;QACjB,MAAM,EAAE,iBAAiB,GAAG,aAAa,CAAC;QAC1C,SAAS,EAAE,aAAa,GAAG,IAAI,CAAC;QAChC,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC;CACH,CAAC;AAEF,KAAK,kBAAkB,GAAG;IACxB,MAAM,EAAE,qBAAqB,CAAC;IAC9B,KAAK,EAAE,qBAAqB,CAAC;IAC7B,OAAO,EAAE;QAAE,IAAI,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;QAAC,OAAO,EAAE,OAAO,GAAG,QAAQ,GAAG,KAAK,GAAG,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,GAAG,MAAM,CAAA;KAAE,CAAC;IAChH,eAAe,EAAE;QAAE,gBAAgB,EAAE,OAAO,CAAA;KAAE,CAAC;IAI/C,WAAW,CAAC,EAAE,MAAM,CAAC;IAMrB,SAAS,CAAC,EAAE,MAAM,CAAC;IAMnB,WAAW,CAAC,EAAE,MAAM,CAAC;
|
|
1
|
+
{"version":3,"file":"runner-serve.d.ts","sourceRoot":"","sources":["../src/runner-serve.ts"],"names":[],"mappings":"AAAA,OAAO,EAAuC,KAAK,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAS5F,OAAO,EAA2F,KAAK,iBAAiB,EAAE,KAAK,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AAE/K,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AA8BzD,OAAO,EAAgI,KAAK,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC7L,OAAO,EAYL,KAAK,WAAW,EAChB,KAAK,WAAW,EACjB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAA4C,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAexF,KAAK,aAAa,GAAG;IACnB,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IAC1C,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;CAC3C,CAAC;AAEF,KAAK,kBAAkB,GAAG;IACxB,EAAE,EAAE,aAAa,CAAC;IAClB,MAAM,CAAC,EAAE,aAAa,GAAG,IAAI,CAAC;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IAGzB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,KAAK,WAAW,GAAG;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;IACxD,qBAAqB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;CAC3D,CAAC;AAEF,KAAK,oBAAoB,GAAG;IAC1B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AAMF,KAAK,qBAAqB,GAAG;IAC3B,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,gBAAgB,CAAC,EAAE;QACjB,MAAM,EAAE,iBAAiB,GAAG,aAAa,CAAC;QAC1C,SAAS,EAAE,aAAa,GAAG,IAAI,CAAC;QAChC,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC;CACH,CAAC;AAEF,KAAK,kBAAkB,GAAG;IACxB,MAAM,EAAE,qBAAqB,CAAC;IAC9B,KAAK,EAAE,qBAAqB,CAAC;IAC7B,OAAO,EAAE;QAAE,IAAI,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;QAAC,OAAO,EAAE,OAAO,GAAG,QAAQ,GAAG,KAAK,GAAG,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,GAAG,MAAM,CAAA;KAAE,CAAC;IAChH,eAAe,EAAE;QAAE,gBAAgB,EAAE,OAAO,CAAA;KAAE,CAAC;IAI/C,WAAW,CAAC,EAAE,MAAM,CAAC;IAMrB,SAAS,CAAC,EAAE,MAAM,CAAC;IAMnB,WAAW,CAAC,EAAE,MAAM,CAAC;IAGrB,cAAc,EAAE,GAAG,CAAC;IACpB,GAAG,EAAE;QAAE,SAAS,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IACpD,EAAE,EAAE;QAAE,SAAS,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,aAAa,EAAE,OAAO,CAAA;KAAE,CAAC;IAG3E,SAAS,EAAE;QAAE,mBAAmB,EAAE,MAAM,CAAC;QAAC,8BAA8B,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IAC1F,IAAI,EAAE;QAAE,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;CAC7C,CAAC;AAEF,KAAK,eAAe,GAAG;IACrB,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,eAAe,EAAE,MAAM,CAAC;IACxB,kBAAkB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC5C,aAAa,EAAE,MAAM,CAAC;IACtB,uBAAuB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjD,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B,CAAC;AAKF,KAAK,aAAa,GAAG,MAAM,GAAG,QAAQ,GAAG,OAAO,CAAC;AACjD,KAAK,YAAY,GAAG,QAAQ,GAAG,OAAO,CAAC;AAEvC,KAAK,WAAW,GAAG;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,OAAO,CAAC;IACd,OAAO,EAAE,aAAa,CAAC;IAIvB,OAAO,EAAE,WAAW,CAAC;IAIrB,WAAW,EAAE,WAAW,CAAC;IACzB,mBAAmB,EAAE,OAAO,CAAC;IAG7B,OAAO,EAAE,MAAM,CAAC;IAGhB,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAG1B,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAG7B,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AA+CF,wBAAsB,cAAc,CAAC,OAAO,EAAE,kBAAkB,GAAG,OAAO,CAAC,MAAM,CAAC,CA+KjF;AAgFD,wBAAgB,4BAA4B,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,GAAG,IAAI,CAGzF;AAcD,wBAAgB,kBAAkB,CAAC,KAAK,EAAE;IACxC,YAAY,EAAE,kBAAkB,CAAC;IACjC,SAAS,EAAE,eAAe,CAAC;IAC3B,sBAAsB,EAAE,MAAM,EAAE,CAAC;IACjC,qBAAqB,EAAE,MAAM,GAAG,IAAI,CAAC;CACtC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAS1B;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE;IACvC,SAAS,EAAE,OAAO,KAAK,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,kBAAkB,CAAC;IACjC,EAAE,EAAE,aAAa,CAAC;IAClB,SAAS,EAAE,MAAM,eAAe,CAAC;IAGjC,aAAa,EAAE,MAAM,MAAM,EAAE,CAAC;IAK9B,qBAAqB,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC;IAC3C,2BAA2B,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;CAClD,GAAG,MAAM,IAAI,CAiDb;AAoMD,wBAAsB,wBAAwB,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAW5F;AAwVD,eAAO,MAAM,uBAAuB,IAAI,CAAC;AACzC,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAK9E;AAgFD,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,OAAO,GAAG,QAAQ,GAAG,cAAc,CAa1E;AAQD,wBAAsB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAgB1E;AA0DD,wBAAgB,iCAAiC,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAI3E;AAwiBD,KAAK,cAAc,GAAG;IACpB,IAAI,EAAE,UAAU,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,GAAG,MAAM,CAAC;IACzD,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,KAAK,gBAAgB,GAAG;IACtB,EAAE,EAAE,OAAO,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,eAAe,CAAC,EAAE,MAAM,CAAC;IAGzB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAG9B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,cAAc,EAAE,CAAC;IAI5B,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IAIxB,UAAU,CAAC,EAAE,MAAM,CAAC;IAKpB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,eAAe,CAAC,EAAE,MAAM,CAAC;IAGzB,YAAY,CAAC,EAAE,iBAAiB,CAAC;IAKjC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,CAAC;AAKF,MAAM,MAAM,cAAc,GAAG;IAC3B,SAAS,EAAE,OAAO,KAAK,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,WAAW,CAAC;IACnB,MAAM,EAAE,WAAW,CAAC;IACpB,EAAE,EAAE,aAAa,CAAC;IAClB,MAAM,EAAE,UAAU,CAAC;IAenB,iBAAiB,CAAC,EAAE,OAAO,CAAC;CAC7B,CAAC;AAOF,MAAM,MAAM,cAAc,GAAG;IAC3B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B,CAAC;AAKF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,OAAO,EAAE,uBAAuB,CAAC,SAAS,CAAC,CAAC;IAI5C,kBAAkB,EAAE,MAAM,EAAE,CAAC;IAK7B,iBAAiB,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,YAAY,EAAE,WAAW,GAAG,iBAAiB,CAAC;IAC9C,YAAY,EAAE,MAAM,GAAG,MAAM,CAAC;IAG9B,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAGlB,uBAAuB,EAAE,OAAO,CAAC;CAClC,CAAC;AAIF,wBAAgB,4BAA4B,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,uBAAuB,GAAG,IAAI,CAM1G;AAqBD,wBAAgB,eAAe,CAAC,KAAK,EAAE;IACrC,IAAI,EAAE,YAAY,GAAG,gBAAgB,CAAC;IACtC,SAAS,EAAE,uBAAuB,GAAG,IAAI,CAAC;IAE1C,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB,GAAG,gBAAgB,CA8CnB;AAKD,wBAAgB,gBAAgB,CAAC,KAAK,EAAE;IACtC,OAAO,EAAE,YAAY,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,gBAAgB,CAAC;IACvB,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAIrC,oBAAoB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAS1C,wBAAwB,CAAC,EAAE,OAAO,CAAC;IAOnC,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC1B,GAAG;IAAE,OAAO,EAAE,YAAY,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAA;CAAE,CAsE5C;AAkMD,eAAO,MAAM,uBAAuB,OAAQ,CAAC;AAC7C,eAAO,MAAM,6BAA6B,MAAM,CAAC;AAYjD,wBAAgB,sBAAsB,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,GAAG;IAAE,YAAY,CAAC,EAAE,MAAM,EAAE,CAAA;CAAE,CAMnG;AAqFD,wBAAgB,eAAe,CAAC,KAAK,EAAE;IACrC,IAAI,EAAE,YAAY,GAAG,gBAAgB,CAAC;IACtC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,SAAS,EAAE,uBAAuB,GAAG,IAAI,CAAC;IAC1C,YAAY,EAAE,OAAO,CAAC;CACvB,GAAG,MAAM,CA2FT;AAgCD,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAG9E;AA8BD,wBAAsB,eAAe,CACnC,GAAG,EAAE,cAAc,EACnB,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAClC,OAAO,EAAE,YAAY,EACrB,IAAI,EAAE,YAAY,GAAG,gBAAgB,EACrC,uBAAuB,CAAC,EAAE,MAAM,EAKhC,qBAAqB,CAAC,EAAE,MAAM,EAC9B,KAAK,CAAC,EAAE,cAAc,GACrB,OAAO,CAAC,gBAAgB,CAAC,CA4R3B;AAkVD,wBAAsB,iBAAiB,CACrC,GAAG,EAAE,cAAc,EACnB,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAClC,SAAS,EAAE,uBAAuB,EAClC,OAAO,EAAE,YAAY,GACpB,OAAO,CAAC,gBAAgB,CAAC,CA4C3B;AAwGD,wBAAgB,eAAe,CAAC,KAAK,EAAE,YAAY,GAAG,IAAI,CAgBzD;AAOD,wBAAgB,eAAe,CAAC,KAAK,EAAE;IACrC,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;IACvB,qBAAqB,EAAE,OAAO,CAAC;IAC/B,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAErC,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B,GAAG,OAAO,CAAC,gBAAgB,CAAC,CA6G5B;AAqFD,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,MAAM,GAAG,cAAc,EAAE,CAmBtE;AAMD,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,MAAM,GAAG,iBAAiB,GAAG,SAAS,CAoBtF"}
|
package/dist/skill-trust.d.ts
CHANGED
|
@@ -27,8 +27,8 @@ export declare const skillManifestSchema: z.ZodObject<{
|
|
|
27
27
|
maxCli: z.ZodNullable<z.ZodString>;
|
|
28
28
|
}, z.core.$strict>;
|
|
29
29
|
supportedClients: z.ZodArray<z.ZodEnum<{
|
|
30
|
-
"claude-code": "claude-code";
|
|
31
30
|
codex: "codex";
|
|
31
|
+
"claude-code": "claude-code";
|
|
32
32
|
cursor: "cursor";
|
|
33
33
|
}>>;
|
|
34
34
|
doctrine: z.ZodObject<{
|
package/dist/token-store.d.ts
CHANGED
|
@@ -15,15 +15,77 @@ export type TokenStore = {
|
|
|
15
15
|
* Seam over `child_process.execFile` that also supports feeding the child's
|
|
16
16
|
* stdin. Secrets are delivered via `options.input` (never argv), so they stay
|
|
17
17
|
* out of process listings (`ps`), shell history, and the args a test inspects.
|
|
18
|
+
*
|
|
19
|
+
* `timeoutMs` (DER-2646) is a gh-style hard bound: it maps straight onto
|
|
20
|
+
* Node's own `execFile` `timeout`/`killSignal` options, so a child that never
|
|
21
|
+
* returns on its own — e.g. `security` blocked reading a password prompt from
|
|
22
|
+
* the controlling terminal instead of stdin — is killed and the promise
|
|
23
|
+
* rejects instead of hanging the caller forever.
|
|
18
24
|
*/
|
|
19
25
|
type ExecFileOptions = {
|
|
20
26
|
readonly input?: string;
|
|
27
|
+
readonly timeoutMs?: number;
|
|
21
28
|
};
|
|
22
29
|
export type ExecFile = (file: string, args: readonly string[], options?: ExecFileOptions) => Promise<{
|
|
23
30
|
stdout: string;
|
|
24
31
|
stderr: string;
|
|
25
32
|
}>;
|
|
26
33
|
export declare const runExecFile: ExecFile;
|
|
34
|
+
/** gh-style bound on a keychain write (DER-2646) — never wait longer than this
|
|
35
|
+
* for `security` to finish before falling over to the file store. Generous
|
|
36
|
+
* enough that a legitimate (slow, e.g. login-keychain-unlock GUI prompt) write
|
|
37
|
+
* still completes; short enough that a hung write never blocks a login. */
|
|
38
|
+
export declare const KEYCHAIN_WRITE_TIMEOUT_MS = 10000;
|
|
39
|
+
/** gh-style bound on the best-effort `delete-generic-password` cleanup that
|
|
40
|
+
* `write()`'s fall-over paths run after already committing the session to the
|
|
41
|
+
* file store (DER-2646 P1, Codex review 2026-07-28). The write's own timeout
|
|
42
|
+
* only bounds the write — a keychain wedged the same way on delete can still
|
|
43
|
+
* hang the cleanup call indefinitely and, with it, `login --device`, even
|
|
44
|
+
* though the file-store fall-over the cleanup follows has already succeeded.
|
|
45
|
+
* `clear()` swallows every failure (timeout included) unconditionally, so a
|
|
46
|
+
* cleanup that times out here is genuinely best-effort: never thrown, never
|
|
47
|
+
* blocking, and (invariant #5) the secret never appears on this path either
|
|
48
|
+
* way, since `clear()` takes no secret and only classifies structural fields. */
|
|
49
|
+
export declare const KEYCHAIN_CLEAR_TIMEOUT_MS = 10000;
|
|
50
|
+
/**
|
|
51
|
+
* Escapes `value` for embedding inside a double-quoted argument on a
|
|
52
|
+
* `security -i` command line: backslash first (a bare trailing backslash
|
|
53
|
+
* would otherwise escape the closing quote), then double-quote. Verified
|
|
54
|
+
* against the real `security -i` parser (DER-2646 manual testing) to
|
|
55
|
+
* round-trip backslashes, quotes, and shell metacharacters (`#`, `;`, `|`,
|
|
56
|
+
* `>`, `` ` ``, `$()`, `'`) byte-for-byte — the interpreter performs no shell
|
|
57
|
+
* expansion inside its own quotes.
|
|
58
|
+
*/
|
|
59
|
+
export declare function escapeSecurityInteractiveArgument(value: string): string;
|
|
60
|
+
/**
|
|
61
|
+
* Builds the single-line `add-generic-password` command fed to `security -i`
|
|
62
|
+
* (DER-2646). Supplying `-w "<value>"` inline means `security`'s own
|
|
63
|
+
* interpreter already has the password data by the time it parses the line,
|
|
64
|
+
* so it never falls back to interactively prompting the controlling terminal
|
|
65
|
+
* for "password data for new item:" — the original hang. The secret still
|
|
66
|
+
* only ever rides the child's stdin (never argv/`ps`).
|
|
67
|
+
*
|
|
68
|
+
* Returns `null` when the assembled line would exceed the interpreter's
|
|
69
|
+
* internal line-buffer limit; the caller must treat that identically to a
|
|
70
|
+
* write failure and fall over rather than risk a truncated/corrupt write.
|
|
71
|
+
*/
|
|
72
|
+
export declare function buildKeychainInteractiveWriteCommand(service: string, account: string, secret: string): string | null;
|
|
73
|
+
/** Thrown by {@link writeKeychainSecretInteractive} on any failure to write —
|
|
74
|
+
* timeout, non-zero exit, or a secret too large for a single interactive
|
|
75
|
+
* command line. Its message is always a fixed, non-secret-bearing string;
|
|
76
|
+
* never the underlying `security` error (invariant #5 — see
|
|
77
|
+
* {@link describeExecFailure}). */
|
|
78
|
+
export declare class KeychainInteractiveWriteError extends Error {
|
|
79
|
+
constructor(message: string);
|
|
80
|
+
}
|
|
81
|
+
/**
|
|
82
|
+
* Writes `secret` to the macOS Keychain via `security -i` batch mode, bounded
|
|
83
|
+
* by `timeoutMs` (DER-2646). On timeout, non-zero exit, or an oversized
|
|
84
|
+
* secret, throws {@link KeychainInteractiveWriteError} — callers (the
|
|
85
|
+
* `Darwin*TokenStore` classes) must catch this and fall over to the file
|
|
86
|
+
* store rather than let a keychain problem block login.
|
|
87
|
+
*/
|
|
88
|
+
export declare function writeKeychainSecretInteractive(run: ExecFile, service: string, account: string, secret: string, timeoutMs?: number): Promise<void>;
|
|
27
89
|
export declare class KeychainTokenStore implements TokenStore {
|
|
28
90
|
protected readonly run: ExecFile;
|
|
29
91
|
constructor(run?: ExecFile);
|
|
@@ -73,6 +135,7 @@ export declare class DarwinTokenStore extends KeychainTokenStore {
|
|
|
73
135
|
private readFileStoreBestEffort;
|
|
74
136
|
private keychainReadBackFailed;
|
|
75
137
|
private warnKeychainNotReadableBack;
|
|
138
|
+
private warnKeychainWriteFailed;
|
|
76
139
|
private selectBackend;
|
|
77
140
|
}
|
|
78
141
|
/**
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"token-store.d.ts","sourceRoot":"","sources":["../src/token-store.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,QAAA,MAAM,aAAa;;;;kBAIR,CAAC;AAEZ,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAEvD,MAAM,MAAM,UAAU,GAAG;IACvB,IAAI,IAAI,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;IACnC,KAAK,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1C,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,QAAQ,IAAI,MAAM,CAAC;CACpB,CAAC;AAEF
|
|
1
|
+
{"version":3,"file":"token-store.d.ts","sourceRoot":"","sources":["../src/token-store.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,QAAA,MAAM,aAAa;;;;kBAIR,CAAC;AAEZ,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAEvD,MAAM,MAAM,UAAU,GAAG;IACvB,IAAI,IAAI,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;IACnC,KAAK,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1C,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,QAAQ,IAAI,MAAM,CAAC;CACpB,CAAC;AAEF;;;;;;;;;;GAUG;AACH,KAAK,eAAe,GAAG;IAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAChF,MAAM,MAAM,QAAQ,GAAG,CACrB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,OAAO,CAAC,EAAE,eAAe,KACtB,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAEjD,eAAO,MAAM,WAAW,EAAE,QAqBtB,CAAC;AAKL;;;2EAG2E;AAC3E,eAAO,MAAM,yBAAyB,QAAS,CAAC;AAEhD;;;;;;;;;iFASiF;AACjF,eAAO,MAAM,yBAAyB,QAAS,CAAC;AAchD;;;;;;;;GAQG;AACH,wBAAgB,iCAAiC,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEvE;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,oCAAoC,CAClD,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,GACb,MAAM,GAAG,IAAI,CAYf;AAED;;;;mCAImC;AACnC,qBAAa,6BAA8B,SAAQ,KAAK;gBAC1C,OAAO,EAAE,MAAM;CAI5B;AAoBD;;;;;;GAMG;AACH,wBAAsB,8BAA8B,CAClD,GAAG,EAAE,QAAQ,EACb,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,SAAS,GAAE,MAAkC,GAC5C,OAAO,CAAC,IAAI,CAAC,CAcf;AAED,qBAAa,kBAAmB,YAAW,UAAU;IACvC,SAAS,CAAC,QAAQ,CAAC,GAAG,EAAE,QAAQ;gBAAb,GAAG,GAAE,QAAsB;IAEpD,IAAI,IAAI,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAgBlC,KAAK,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAUzC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAe5B,QAAQ,IAAI,MAAM;CAGnB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,qBAAa,gBAAiB,SAAQ,kBAAkB;IAOpD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;IAC1B,OAAO,CAAC,QAAQ,CAAC,MAAM;IAPzB,OAAO,CAAC,OAAO,CAAoC;IACnD,OAAO,CAAC,iBAAiB,CAA2D;IACpF,OAAO,CAAC,SAAS,CAA+B;gBAG9C,GAAG,GAAE,QAAsB,EACV,QAAQ,CAAC,EAAE,MAAM,YAAA,EACjB,MAAM,GAAE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAkB;IAK9D,IAAI,IAAI,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAclC,KAAK,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAgDzC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAS5B,QAAQ,IAAI,MAAM;IAc3B,OAAO,CAAC,IAAI;YAIE,uBAAuB;YAUvB,sBAAsB;IASpC,OAAO,CAAC,2BAA2B;IAQnC,OAAO,CAAC,uBAAuB;YAWjB,aAAa;CAmB5B;AAED;;;;;;;;;GASG;AACH,qBAAa,2BAA4B,YAAW,UAAU;IAChD,OAAO,CAAC,QAAQ,CAAC,GAAG;gBAAH,GAAG,GAAE,QAAsB;IAElD,IAAI,IAAI,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAalC,KAAK,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IASzC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAQ5B,QAAQ,IAAI,MAAM;CAGnB;AAED;;;;GAIG;AACH,qBAAa,uBAAwB,YAAW,UAAU;IAC5C,OAAO,CAAC,QAAQ,CAAC,GAAG;gBAAH,GAAG,GAAE,QAAsB;IAElD,IAAI,IAAI,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAalC,KAAK,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IASzC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAQ5B,QAAQ,IAAI,MAAM;CAGnB;AAED,qBAAa,cAAe,YAAW,UAAU;IACnC,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBAAR,QAAQ,SAAqB;IAEpD,IAAI,IAAI,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAelC,KAAK,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAOzC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAI5B,QAAQ,IAAI,MAAM;YAIJ,cAAc;CAI7B;AAED,MAAM,MAAM,uBAAuB,GAAG;IACpC,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC3B,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,MAAM,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;CAC5C,CAAC;AAEF,wBAAgB,gBAAgB,CAAC,OAAO,GAAE,uBAA4B,GAAG,UAAU,CA0ClF;AAUD;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAK/D;AA+BD,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,CAEhE;AAoCD,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAmBzD;AAED,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAWxD;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAKzD"}
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
---
|
|
2
2
|
name: human-confirmations
|
|
3
|
-
version:
|
|
3
|
+
version: 15
|
|
4
4
|
model: n/a
|
|
5
5
|
temperature: 0
|
|
6
6
|
output_schema: text
|
|
@@ -71,7 +71,9 @@ The following registry commands require human confirmation or a credential flow:
|
|
|
71
71
|
| `member.remove` | `human_required` |
|
|
72
72
|
| `member.update` | `human_required` |
|
|
73
73
|
| `onboarding.finish` | `human_required` |
|
|
74
|
+
| `onboarding.setup` | `human_required` |
|
|
74
75
|
| `runner.revoke` | `human_required` |
|
|
76
|
+
| `seat.create_complete` | `human_required` |
|
|
75
77
|
| `seat.decommission` | `human_required` |
|
|
76
78
|
| `seat.reparent` | `human_required` |
|
|
77
79
|
| `seat.set_type` | `human_required` |
|