@skrr-ai/cli 0.1.114 → 0.1.116

package/dist/node_modules/@skrr-ai/auth-core/dist/esm/index.d.ts

@@ -6,7 +6,7 @@
  * wire up its logger, config dir, kill switches, and binary name — then
  * uses the rest of the API uniformly.
  */
-export { SCOPES, ALL_DAEMON_SCOPES, VALID_DAEMON_SCOPE_SET, isDaemonScope, OAUTH_CLI_SCOPE, type DaemonScope, type OAuthCliScope, type OAuthScope, } from './daemonScopes.js';
+export { SCOPES, ALL_DAEMON_SCOPES, DEFAULT_DAEMON_SCOPES, VALID_DAEMON_SCOPE_SET, isDaemonScope, OAUTH_CLI_SCOPE, type DaemonScope, type OAuthCliScope, type OAuthScope, } from './daemonScopes.js';
 export { configureAuthCore, getAuthLogger, getAuthConfigDir, getAuthKillSwitches, getAuthBinaryName, emitAuthTelemetry, type AuthCoreConfig, type AuthLogger, type AuthKillSwitches, type AuthTelemetryEvent, } from './runtime.js';
 export { PermanentAuthFailure, TransientAuthFailure, type PermanentAuthReason, type ReauthState, type TokenPair, } from './types.js';
 export { decodeJwtExpiry, decodeJwtPayload } from './jwtUtils.js';
@@ -48,3 +48,5 @@ export { resolveConfigRoot, configRootPath, isConfigRootOverridden } from './con
 export { PROFILES_SEGMENT, SUPERSEDED_MARKER_SUFFIX, SUPERSEDED_COPY_SUFFIX, profileStateDir, legacyProfileStateDir, resolveProfileStateDir, resolveProfileStateFile, profileStateFileLocations, profileStateFilePathsToClear, consolidateProfileState, type ResolvedProfileStateDir, type ConsolidationSpec, type ConsolidationStatus, type ConsolidationOutcome, } from './profileStateDir.js';
 export * from './harnessPermissionControls.js';
 export { compareReleaseVersions } from './releaseVersions.js';
+export * from './computerUse.js';
+export * from './desktopWire.js';

package/dist/node_modules/@skrr-ai/auth-core/dist/esm/index.js

@@ -10,7 +10,7 @@
 // (daemon, desktop, cli). Schema-bound canonical lives in
 // `@skrr-ai/data-schemas/common/daemonScopes`; the two are kept byte-equal
 // by the api-side parity test. See daemonScopes.ts header for details.
-export { SCOPES, ALL_DAEMON_SCOPES, VALID_DAEMON_SCOPE_SET, isDaemonScope, OAUTH_CLI_SCOPE, } from './daemonScopes.js';
+export { SCOPES, ALL_DAEMON_SCOPES, DEFAULT_DAEMON_SCOPES, VALID_DAEMON_SCOPE_SET, isDaemonScope, OAUTH_CLI_SCOPE, } from './daemonScopes.js';
 // Runtime / DI
 export { configureAuthCore, getAuthLogger, getAuthConfigDir, getAuthKillSwitches, getAuthBinaryName, emitAuthTelemetry, } from './runtime.js';
 // Types
@@ -184,3 +184,5 @@ export { resolveConfigRoot, configRootPath, isConfigRootOverridden } from './con
 export { PROFILES_SEGMENT, SUPERSEDED_MARKER_SUFFIX, SUPERSEDED_COPY_SUFFIX, profileStateDir, legacyProfileStateDir, resolveProfileStateDir, resolveProfileStateFile, profileStateFileLocations, profileStateFilePathsToClear, consolidateProfileState, } from './profileStateDir.js';
 export * from './harnessPermissionControls.js';
 export { compareReleaseVersions } from './releaseVersions.js';
+export * from './computerUse.js';
+export * from './desktopWire.js';

package/dist/node_modules/@skrr-ai/auth-core/dist/esm/restartArtifact.d.ts

@@ -0,0 +1,10 @@
+export interface RestartArtifact {
+    path: string;
+    mtimeMs: number;
+    sha256: string;
+}
+/**
+ * First-party build readiness identity; dependency/assets integrity remains the
+ * signed installer's authority. JS binds build files, not just index.js.
+ */
+export declare function captureRestartArtifact(input: string): RestartArtifact;

package/dist/node_modules/@skrr-ai/auth-core/dist/esm/restartArtifact.js

@@ -0,0 +1,138 @@
+import { createHash } from 'node:crypto';
+import { closeSync, constants, fstatSync, lstatSync, openSync, opendirSync, readSync, realpathSync, statSync } from 'node:fs';
+import { dirname, extname, join, relative, resolve } from 'node:path';
+const CODE_EXTENSIONS = new Set(['.js', '.cjs', '.mjs', '.json', '.node', '.wasm']);
+const OMIT_DIRECTORIES = new Set(['node_modules', '.git', '__tests__', '__fixtures__']);
+const MAX_FILES = 25_000;
+const MAX_BYTES = 256 * 1024 * 1024;
+const MAX_DEPTH = 32;
+const MAX_ENTRIES = 50_000;
+function stamp(file) {
+    const value = statSync(file, { bigint: true });
+    return `${value.dev}:${value.ino}:${value.size}:${value.mtimeNs}:${value.ctimeNs}`;
+}
+function executableHeader(bytes) {
+    const magic = bytes.subarray(0, 4).toString('hex');
+    return bytes.subarray(0, 2).toString() === 'MZ' ||
+        ['7f454c46', 'feedface', 'cefaedfe', 'feedfacf', 'cffaedfe', 'cafebabe', 'bebafeca', 'cafebabf', 'bfbafeca'].includes(magic);
+}
+/**
+ * First-party build readiness identity; dependency/assets integrity remains the
+ * signed installer's authority. JS binds build files, not just index.js.
+ */
+export function captureRestartArtifact(input) {
+    const path = resolve(input);
+    const entry = realpathSync(path);
+    const initialEntry = stamp(entry);
+    const extension = extname(entry);
+    const javascript = ['.js', '.cjs', '.mjs'].includes(extension);
+    const hash = createHash('sha256');
+    const seen = [];
+    let bytes = 0;
+    const addFile = (file, name) => {
+        if (seen.length >= MAX_FILES)
+            throw new Error('Restart build exceeds the file limit');
+        const before = stamp(file);
+        const fd = openSync(file, constants.O_RDONLY | (constants.O_NOFOLLOW ?? 0));
+        try {
+            const info = fstatSync(fd);
+            if (!info.isFile())
+                throw new Error('Restart build contains a linked or special code file');
+            if (info.size > MAX_BYTES - bytes)
+                throw new Error('Restart build exceeds the byte limit');
+            // Length framing prevents ambiguous file boundaries; read in bounded chunks
+            // so a file growing after fstat cannot defeat the snapshot's memory bound.
+            hash.update(JSON.stringify([name, info.size]));
+            const chunk = Buffer.allocUnsafe(64 * 1024);
+            let readBytes = 0;
+            for (;;) {
+                const count = readSync(fd, chunk, 0, Math.min(chunk.length, MAX_BYTES - bytes + 1), null);
+                if (!count)
+                    break;
+                if (!javascript && readBytes === 0 && !executableHeader(chunk.subarray(0, count))) {
+                    throw new Error('Restart artifact is not a supported native executable');
+                }
+                bytes += count;
+                readBytes += count;
+                if (bytes > MAX_BYTES)
+                    throw new Error('Restart build exceeds the byte limit');
+                hash.update(chunk.subarray(0, count));
+            }
+            if (readBytes !== info.size || (!javascript && readBytes === 0) || stamp(file) !== before) {
+                throw new Error('Restart build changed while its identity was captured');
+            }
+        }
+        finally {
+            closeSync(fd);
+        }
+        seen.push([file, before]);
+    };
+    if (javascript) {
+        hash.update('skrr-restart-javascript-v1\0');
+        const root = dirname(entry);
+        const directories = [];
+        let entries = 0;
+        const walk = (dir, depth) => {
+            if (depth > MAX_DEPTH)
+                throw new Error('Restart build exceeds the directory depth limit');
+            directories.push([dir, stamp(dir)]);
+            const names = [];
+            const directory = opendirSync(dir);
+            try {
+                for (let item = directory.readSync(); item; item = directory.readSync()) {
+                    if (++entries > MAX_ENTRIES)
+                        throw new Error('Restart build exceeds the directory entry limit');
+                    names.push(item.name);
+                }
+            }
+            finally {
+                directory.closeSync();
+            }
+            for (const name of names.sort()) {
+                if (OMIT_DIRECTORIES.has(name))
+                    continue;
+                const file = join(dir, name);
+                const info = lstatSync(file);
+                if (info.isSymbolicLink())
+                    throw new Error('Restart build contains a linked or special code file');
+                if (info.isDirectory()) {
+                    walk(file, depth + 1);
+                }
+                else if (CODE_EXTENSIONS.has(extname(name)) && !/\.(?:test|spec)\.[cm]?js$/.test(name)) {
+                    if (!info.isFile())
+                        throw new Error('Restart build contains a linked or special code file');
+                    addFile(file, relative(root, file).split('\\').join('/'));
+                }
+            }
+        };
+        walk(root, 0);
+        // Packaged builds already carry a dependency receipt made after pruning.
+        // Bind that authority as well as the declared dependency/version contract.
+        for (const name of ['package.json', 'dependency-receipt.json']) {
+            const metadataFile = join(root, '..', name);
+            try {
+                if (lstatSync(metadataFile).isFile())
+                    addFile(metadataFile, `../${name}`);
+                else
+                    throw new Error('Restart package metadata is not a regular file');
+            }
+            catch (error) {
+                if (error.code !== 'ENOENT')
+                    throw error;
+            }
+        }
+        if (directories.some(([dir, before]) => stamp(dir) !== before)) {
+            throw new Error('Restart build directory changed while its identity was captured');
+        }
+    }
+    else {
+        // Source/shell launchers are not complete artifacts: only native executable
+        // formats can take this path without a separately bound dependency tree.
+        addFile(entry, 'executable');
+    }
+    if (realpathSync(path) !== entry || stamp(entry) !== initialEntry ||
+        seen.some(([file, before]) => stamp(file) !== before)) {
+        throw new Error('Restart build changed while its identity was captured');
+    }
+    return { path, mtimeMs: statSync(entry).mtimeMs, sha256: hash.digest('hex') };
+}

package/dist/node_modules/@skrr-ai/auth-core/dist/esm/toolOperationOutcome.d.ts

@@ -0,0 +1,16 @@
+/** An operation receipt is separate from an SDK hook/carrier decision and from
+ * the agent turn's outcome. Only a producer or exact permission resolver writes
+ * this field; JSON inside tool stdout is never an observation. */
+export interface ToolOperationOutcomeV1 {
+    version: 1;
+    status: 'succeeded' | 'failed' | 'not_run' | 'unknown';
+    source: 'executor' | 'permission_resolver' | 'runtime_observer';
+    reason?: 'command_failed' | 'permission_denied' | 'unavailable_before_dispatch' | 'transport_unconfirmed' | 'background_pending' | 'unobserved' | 'conflicting_receipts';
+}
+/** Unknown/future versions cannot become an authoritative success. */
+export declare function readToolOperationOutcome(value: unknown): ToolOperationOutcomeV1 | undefined;
+export declare function unknownToolOperationOutcome(reason?: 'unobserved' | 'conflicting_receipts'): ToolOperationOutcomeV1;
+/** A late receipt can resolve missing evidence. Contradictory receipts stay
+ * unknown rather than silently choosing the last success. */
+export declare function mergeToolOperationOutcome(previous: unknown, next: unknown): ToolOperationOutcomeV1 | undefined;
+export declare function toolOperationState(value: unknown): 'completed' | 'error' | 'unreported' | undefined;

package/dist/node_modules/@skrr-ai/auth-core/dist/esm/toolOperationOutcome.js

@@ -0,0 +1,40 @@
+const statuses = new Set(['succeeded', 'failed', 'not_run', 'unknown']);
+const sources = new Set(['executor', 'permission_resolver', 'runtime_observer']);
+const reasons = new Set(['command_failed', 'permission_denied', 'unavailable_before_dispatch',
+    'transport_unconfirmed', 'background_pending', 'unobserved', 'conflicting_receipts']);
+/** Unknown/future versions cannot become an authoritative success. */
+export function readToolOperationOutcome(value) {
+    if (!value || typeof value !== 'object' || Array.isArray(value))
+        return undefined;
+    const v = value;
+    if (v.version !== 1 || typeof v.status !== 'string' || typeof v.source !== 'string' ||
+        !statuses.has(v.status) || !sources.has(v.source) ||
+        v.reason !== undefined && (typeof v.reason !== 'string' || !reasons.has(v.reason)) ||
+        v.source === 'runtime_observer' && v.status !== 'unknown' ||
+        v.source === 'permission_resolver' && v.status !== 'not_run')
+        return undefined;
+    return { version: 1, status: v.status,
+        source: v.source,
+        ...(v.reason === undefined ? {} : { reason: v.reason }) };
+}
+export function unknownToolOperationOutcome(reason = 'unobserved') {
+    return { version: 1, status: 'unknown', source: 'runtime_observer', reason };
+}
+/** A late receipt can resolve missing evidence. Contradictory receipts stay
+ * unknown rather than silently choosing the last success. */
+export function mergeToolOperationOutcome(previous, next) {
+    const before = readToolOperationOutcome(previous);
+    const after = readToolOperationOutcome(next);
+    if (!after)
+        return before;
+    if (!before || before.source === 'runtime_observer' && before.reason === 'unobserved')
+        return after;
+    if (after.source === 'runtime_observer' && after.reason === 'unobserved')
+        return before;
+    return JSON.stringify(before) === JSON.stringify(after) ? before : unknownToolOperationOutcome('conflicting_receipts');
+}
+export function toolOperationState(value) {
+    const outcome = readToolOperationOutcome(value);
+    return !outcome ? undefined : outcome.status === 'succeeded' ? 'completed'
+        : outcome.status === 'unknown' ? 'unreported' : 'error';
+}

package/dist/node_modules/@skrr-ai/auth-core/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@skrr-ai/auth-core",
-  "version": "0.4.27",
+  "version": "0.4.30",
   "main": "dist/cjs/index.js",
   "types": "dist/esm/index.d.ts",
   "exports": {
@@ -233,6 +233,46 @@
         "types": "./dist/cjs/sessionRevocation.d.ts",
         "default": "./dist/cjs/sessionRevocation.js"
       }
+    },
+    "./computer-use": {
+      "import": {
+        "types": "./dist/esm/computerUse.d.ts",
+        "default": "./dist/esm/computerUse.js"
+      },
+      "require": {
+        "types": "./dist/cjs/computerUse.d.ts",
+        "default": "./dist/cjs/computerUse.js"
+      }
+    },
+    "./desktop-wire": {
+      "import": {
+        "types": "./dist/esm/desktopWire.d.ts",
+        "default": "./dist/esm/desktopWire.js"
+      },
+      "require": {
+        "types": "./dist/cjs/desktopWire.d.ts",
+        "default": "./dist/cjs/desktopWire.js"
+      }
+    },
+    "./restart-artifact": {
+      "import": {
+        "types": "./dist/esm/restartArtifact.d.ts",
+        "default": "./dist/esm/restartArtifact.js"
+      },
+      "require": {
+        "types": "./dist/cjs/restartArtifact.d.ts",
+        "default": "./dist/cjs/restartArtifact.js"
+      }
+    },
+    "./tool-operation-outcome": {
+      "import": {
+        "types": "./dist/esm/toolOperationOutcome.d.ts",
+        "default": "./dist/esm/toolOperationOutcome.js"
+      },
+      "require": {
+        "types": "./dist/cjs/toolOperationOutcome.d.ts",
+        "default": "./dist/cjs/toolOperationOutcome.js"
+      }
     }
   },
   "dependencies": {