@skrr-ai/cli 0.1.115 → 0.1.117

package/dist/node_modules/@skrr-ai/auth-core/dist/cjs/runtime.js

@@ -1,136 +1,122 @@
 "use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
 };
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.configureAuthCore = configureAuthCore;
-exports.getAuthLogger = getAuthLogger;
-exports.getAuthConfigDir = getAuthConfigDir;
-exports.getAuthMachineConfigDir = getAuthMachineConfigDir;
-exports.getAuthKillSwitches = getAuthKillSwitches;
-exports.getAuthBinaryName = getAuthBinaryName;
-exports.getCredEnvelopeFailClosed = getCredEnvelopeFailClosed;
-exports.emitAuthTelemetry = emitAuthTelemetry;
-exports.notifyResponseObserver = notifyResponseObserver;
-exports.__resetAuthCoreForTest = __resetAuthCoreForTest;
-/**
- * runtime.ts — dependency-injection seam for @skrr-ai/auth-core.
- *
- * The package never imports the daemon's `logger` or `config` directly. Each
- * consumer (daemon, CLI, Electron main) calls `configureAuthCore()` once at
- * startup with its own logger, config-dir resolver, and kill-switch source.
- * Until configured, sensible no-op defaults apply so imports never crash and
- * unit tests can exercise pure helpers without setup.
- *
- * Why DI not module-globals: the same auth substrate must serve binaries
- * with different home dirs (`~/.skrr`, and historically `~/.skrr`), different log sinks
- * (winston, console, oclif), and different rollback flags. A single shared
- * runtime is fine; hard-coding either choice into the package would force
- * every consumer onto the daemon's conventions.
- */
-const node_os_1 = __importDefault(require("node:os"));
-const node_path_1 = __importDefault(require("node:path"));
-const localIdentity_js_1 = require("./localIdentity.js");
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var runtime_exports = {};
+__export(runtime_exports, {
+  __resetAuthCoreForTest: () => __resetAuthCoreForTest,
+  configureAuthCore: () => configureAuthCore,
+  emitAuthTelemetry: () => emitAuthTelemetry,
+  getAuthBinaryName: () => getAuthBinaryName,
+  getAuthConfigDir: () => getAuthConfigDir,
+  getAuthKillSwitches: () => getAuthKillSwitches,
+  getAuthLogger: () => getAuthLogger,
+  getAuthMachineConfigDir: () => getAuthMachineConfigDir,
+  getCredEnvelopeFailClosed: () => getCredEnvelopeFailClosed,
+  notifyResponseObserver: () => notifyResponseObserver
+});
+module.exports = __toCommonJS(runtime_exports);
+var import_node_os = __toESM(require("node:os"), 1);
+var import_node_path = __toESM(require("node:path"), 1);
+var import_localIdentity = require("./localIdentity.js");
 const DEFAULT_LOGGER = {
-    debug: () => undefined,
-    info: () => undefined,
-    warn: (...args) => {
-        if (process.env.NODE_ENV !== 'test')
-            console.warn('[auth-core]', ...args);
-    },
-    error: (...args) => {
-        if (process.env.NODE_ENV !== 'test')
-            console.error('[auth-core]', ...args);
-    },
+  debug: () => void 0,
+  info: () => void 0,
+  warn: (...args) => {
+    if (process.env.NODE_ENV !== "test")
+      console.warn("[auth-core]", ...args);
+  },
+  error: (...args) => {
+    if (process.env.NODE_ENV !== "test")
+      console.error("[auth-core]", ...args);
+  }
 };
 const DEFAULT_CONFIG = {
-    configDir: () => node_path_1.default.join(node_os_1.default.homedir(), localIdentity_js_1.CONFIG_DIR_NAME),
-    logger: DEFAULT_LOGGER,
-    killSwitches: {},
-    binaryName: localIdentity_js_1.DEFAULT_BINARY_NAME,
+  configDir: () => import_node_path.default.join(import_node_os.default.homedir(), import_localIdentity.CONFIG_DIR_NAME),
+  logger: DEFAULT_LOGGER,
+  killSwitches: {},
+  binaryName: import_localIdentity.DEFAULT_BINARY_NAME
 };
 let _config = DEFAULT_CONFIG;
-/**
- * Wire up the auth-core runtime. Call once at process startup, before any
- * other auth-core function. Subsequent calls replace the previous config —
- * useful for tests but not intended for production code paths.
- */
 function configureAuthCore(config) {
-    _config = {
-        ...DEFAULT_CONFIG,
-        ..._config,
-        ...config,
-        killSwitches: { ...(_config.killSwitches ?? {}), ...(config.killSwitches ?? {}) },
-    };
+  _config = {
+    ...DEFAULT_CONFIG,
+    ..._config,
+    ...config,
+    killSwitches: { ..._config.killSwitches ?? {}, ...config.killSwitches ?? {} }
+  };
 }
 function getAuthLogger() {
-    return _config.logger;
+  return _config.logger;
 }
 function getAuthConfigDir() {
-    return _config.configDir();
+  return _config.configDir();
 }
-/**
- * Resolve the machine-scoped root dir (see `machineConfigDir` on
- * `AuthCoreConfig`). Falls back to the profile-scoped `configDir()` when no
- * machine root is wired, preserving pre-OSK-1478 behavior for consumers whose
- * `configDir` is already the machine root (e.g. the CLI).
- */
 function getAuthMachineConfigDir() {
-    return (_config.machineConfigDir ?? _config.configDir)();
+  return (_config.machineConfigDir ?? _config.configDir)();
 }
 function getAuthKillSwitches() {
-    return _config.killSwitches ?? {};
+  return _config.killSwitches ?? {};
 }
 function getAuthBinaryName() {
-    return _config.binaryName ?? localIdentity_js_1.DEFAULT_BINARY_NAME;
+  return _config.binaryName ?? import_localIdentity.DEFAULT_BINARY_NAME;
 }
-/**
- * Resolve whether the credential envelope path should fail-closed on writes
- * when not active. Honors the explicit `configureAuthCore({credEnvelopeFailClosed})`
- * first; otherwise resolves from the env.
- *
- * Default after the 2026-04-28 audit M2 flip: fail-closed for everyone.
- * Operators can opt back to fail-open via `OVERSKY_KEK_REQUIRED=0` (or
- * `=false`, case-insensitive) as an emergency rollback only — it is NOT a
- * feature flag. Any other value, including unset, means fail-closed.
- */
 function getCredEnvelopeFailClosed() {
-    if (typeof _config.credEnvelopeFailClosed === 'boolean') {
-        return _config.credEnvelopeFailClosed;
-    }
-    // Default after 2026-04-28 audit M2 flip: fail-closed for everyone.
-    // Operators can opt back to fail-open via OVERSKY_KEK_REQUIRED=0
-    // (emergency rollback only). Any other value — including unset —
-    // means fail-closed.
-    const raw = (process.env.OVERSKY_KEK_REQUIRED ?? '').toLowerCase();
-    return raw !== '0' && raw !== 'false';
+  if (typeof _config.credEnvelopeFailClosed === "boolean") {
+    return _config.credEnvelopeFailClosed;
+  }
+  const raw = (process.env.OVERSKY_KEK_REQUIRED ?? "").toLowerCase();
+  return raw !== "0" && raw !== "false";
 }
-/**
- * Emit a telemetry event via the consumer-supplied logEvent callback.
- * No-op when the callback is not configured. Never throws.
- */
 function emitAuthTelemetry(event) {
-    try {
-        _config.logEvent?.(event);
-    }
-    catch {
-        /* telemetry is best-effort — never let it crash auth paths */
-    }
+  try {
+    _config.logEvent?.(event);
+  } catch {
+  }
 }
-/**
- * Hand a freshly-received HTTP response to the consumer's `observeResponse`
- * callback. No-op when the callback is not configured. Never throws — the
- * caller (refresh.ts) must continue regardless of observer state.
- */
 function notifyResponseObserver(response) {
-    try {
-        _config.observeResponse?.(response);
-    }
-    catch {
-        /* observation is best-effort — never let a buggy observer crash refresh */
-    }
+  try {
+    _config.observeResponse?.(response);
+  } catch {
+  }
 }
-/** Test-only: restore defaults. Not exported from the package barrel. */
 function __resetAuthCoreForTest() {
-    _config = DEFAULT_CONFIG;
+  _config = DEFAULT_CONFIG;
 }
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  __resetAuthCoreForTest,
+  configureAuthCore,
+  emitAuthTelemetry,
+  getAuthBinaryName,
+  getAuthConfigDir,
+  getAuthKillSwitches,
+  getAuthLogger,
+  getAuthMachineConfigDir,
+  getCredEnvelopeFailClosed,
+  notifyResponseObserver
+});

package/dist/node_modules/@skrr-ai/auth-core/dist/cjs/sessionPermissionAuthority.js

@@ -1,48 +1,51 @@
 "use strict";
-/** Commitment context never overrides Agent permissions. Version 3 admission
- * rejects old contracts; typed Task delivery is a separate frozen operation. */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.COMMITMENT_AGENT_PERMISSIONS_CAPABILITY = exports.SESSION_PERMISSION_SOURCES = void 0;
-exports.normalizeSessionPermissionSource = normalizeSessionPermissionSource;
-exports.permissionSourceForContract = permissionSourceForContract;
-exports.contractGovernsPermissions = contractGovernsPermissions;
-exports.permissionGoverningContract = permissionGoverningContract;
-/** The wire vocabulary for `permissionSource`. Top-level session field. */
-exports.SESSION_PERMISSION_SOURCES = ['agent'];
-/**
- * The daemon capability that proves a build honours `permissionSource`. The
- * server announces it in preflight and refuses to dispatch a Commitment Run to
- * a daemon without it (`COMMITMENT_AGENT_PERMISSIONS_RUNTIME_UNSUPPORTED`), so
- * the marker never reaches a daemon that would ignore it.
- */
-exports.COMMITMENT_AGENT_PERMISSIONS_CAPABILITY = 'commitment_execution_contract_v3';
-/**
- * Untrusted wire input: anything but an exact vocabulary literal reads as
- * absent. An unknown marker carries no authority. Contract admission is validated separately.
- */
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var sessionPermissionAuthority_exports = {};
+__export(sessionPermissionAuthority_exports, {
+  COMMITMENT_AGENT_PERMISSIONS_CAPABILITY: () => COMMITMENT_AGENT_PERMISSIONS_CAPABILITY,
+  SESSION_PERMISSION_SOURCES: () => SESSION_PERMISSION_SOURCES,
+  contractGovernsPermissions: () => contractGovernsPermissions,
+  normalizeSessionPermissionSource: () => normalizeSessionPermissionSource,
+  permissionGoverningContract: () => permissionGoverningContract,
+  permissionSourceForContract: () => permissionSourceForContract
+});
+module.exports = __toCommonJS(sessionPermissionAuthority_exports);
+const SESSION_PERMISSION_SOURCES = ["agent"];
+const COMMITMENT_AGENT_PERMISSIONS_CAPABILITY = "commitment_execution_contract_v3";
 function normalizeSessionPermissionSource(value) {
-    return exports.SESSION_PERMISSION_SOURCES.includes(value)
-        ? value
-        : undefined;
+  return SESSION_PERMISSION_SOURCES.includes(value) ? value : void 0;
 }
-/**
- * What the server stamps on the wire for this contract. A `commitment`
- * contract no longer carries permissions (OSK-11975); every other contract
- * kind keeps its own authority and stamps nothing.
- */
 function permissionSourceForContract(contract) {
-    return contract?.kind === 'commitment' ? 'agent' : undefined;
+  return contract?.kind === "commitment" ? "agent" : void 0;
 }
-/** Only typed Task delivery owns an effect-specific permission boundary.
- * A Commitment is context for the Agent and cannot grant or restrict tools.
- */
 function contractGovernsPermissions(contract, _permissionSource) {
-    return Boolean(contract && contract.kind !== 'commitment');
+  return Boolean(contract && contract.kind !== "commitment");
 }
-/**
- * The contract when it governs permissions, else `undefined` — for the sites
- * that used `executionContract` as "is this run permission-fenced".
- */
 function permissionGoverningContract(contract, permissionSource) {
-    return contract && contractGovernsPermissions(contract, permissionSource) ? contract : undefined;
+  return contract && contractGovernsPermissions(contract, permissionSource) ? contract : void 0;
 }
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  COMMITMENT_AGENT_PERMISSIONS_CAPABILITY,
+  SESSION_PERMISSION_SOURCES,
+  contractGovernsPermissions,
+  normalizeSessionPermissionSource,
+  permissionGoverningContract,
+  permissionSourceForContract
+});