@skrr-ai/cli 0.1.117 → 0.1.118

package/dist/lib/task-write-attribution.js

@@ -4,7 +4,7 @@ exports.ACCOUNT_ATTRIBUTION_NOTICE = exports.AGENT_BINDING_GUIDANCE = void 0;
 exports.taskWriteAttribution = taskWriteAttribution;
 exports.attributionLines = attributionLines;
 exports.runtimeWriteAttribution = runtimeWriteAttribution;
-exports.AGENT_BINDING_GUIDANCE = 'Assign this runtime in skrr → Engines, then run in its authenticated Agent session. ' +
+exports.AGENT_BINDING_GUIDANCE = 'Run `skrr tasks start <task>` to execute in the assigned Agent’s authenticated runtime. ' +
     'An --agent flag or an environment Agent id cannot establish authenticated authorship.';
 exports.ACCOUNT_ATTRIBUTION_NOTICE = 'Without authenticated Agent provenance, Task writes are attributed to the signed-in account. ' +
     'An account-attributed assessment is not proof of an independent human check.';

package/dist/lib/usd-micros.d.ts

@@ -7,3 +7,30 @@
  * Returns null for anything that is not a positive amount with ≤ 2 decimals.
  */
 export declare function usdToMicros(amount: string): number | null;
+/**
+ * The same parse, but "0" is a price too: `--expected-price 0` pins free.
+ * Returns null for anything that is not an amount with ≤ 2 decimals.
+ */
+export declare function usdToMicrosOrZero(amount: string): number | null;
+/**
+ * `--expected-price` as micros: `undefined` when the flag was not passed,
+ * `null` when the value is not a USD amount.
+ */
+export declare function expectedPriceFlagMicros(value: string | undefined): number | null | undefined;
+/**
+ * The refusal text when `--expected-price` does not match what a paid
+ * install would now charge — one wording for every install command so the
+ * pin reads the same whichever listing it guarded (OSK-18256).
+ */
+export declare function expectedPriceMismatchMessage(expectedMicros: number, chargeMicros: number): string;
+/**
+ * A `--json` payload with every unstated-unit store price restated in
+ * dollars: a numeric `price`, `listPrice` or `charge` (integer micro-USD,
+ * the one unit store prices travel the wire in — see `storePricing.ts` in
+ * `@skrr-ai/data-provider`) gains a sibling `<name>Usd` in dollars, so a
+ * reader never has to know the conversion (OSK-18256). Fields that already
+ * name their unit (`amountMicros`, `*Micros`) and anything that is not a
+ * finite number pass through untouched; the wire fields themselves keep
+ * their values.
+ */
+export declare function withUsdPrices<T>(payload: T): T;

package/dist/lib/usd-micros.js

@@ -1,6 +1,11 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.usdToMicros = usdToMicros;
+exports.usdToMicrosOrZero = usdToMicrosOrZero;
+exports.expectedPriceFlagMicros = expectedPriceFlagMicros;
+exports.expectedPriceMismatchMessage = expectedPriceMismatchMessage;
+exports.withUsdPrices = withUsdPrices;
+const data_provider_1 = require("@skrr-ai/data-provider");
 /**
  * Parse a user-typed USD amount ("5", "2.50") into integer micros.
  *
@@ -10,12 +15,72 @@ exports.usdToMicros = usdToMicros;
  * Returns null for anything that is not a positive amount with ≤ 2 decimals.
  */
 function usdToMicros(amount) {
+    const cents = parseUsdCents(amount);
+    if (cents === null || cents <= 0)
+        return null;
+    return cents * 10_000;
+}
+/**
+ * The same parse, but "0" is a price too: `--expected-price 0` pins free.
+ * Returns null for anything that is not an amount with ≤ 2 decimals.
+ */
+function usdToMicrosOrZero(amount) {
+    const cents = parseUsdCents(amount);
+    return cents === null ? null : cents * 10_000;
+}
+function parseUsdCents(amount) {
     const trimmed = amount.trim();
     if (!/^\d+(\.\d{1,2})?$/.test(trimmed))
         return null;
     const [whole, frac = ''] = trimmed.split('.');
     const cents = Number(whole) * 100 + Number(frac.padEnd(2, '0'));
-    if (!Number.isSafeInteger(cents) || cents <= 0)
+    // cents * 10_000 must stay an exact integer micros value.
+    if (!Number.isSafeInteger(cents) || cents > Number.MAX_SAFE_INTEGER / 10_000)
         return null;
-    return cents * 10_000;
+    return cents;
+}
+/**
+ * `--expected-price` as micros: `undefined` when the flag was not passed,
+ * `null` when the value is not a USD amount.
+ */
+function expectedPriceFlagMicros(value) {
+    return value === undefined ? undefined : usdToMicrosOrZero(value);
+}
+/**
+ * The refusal text when `--expected-price` does not match what a paid
+ * install would now charge — one wording for every install command so the
+ * pin reads the same whichever listing it guarded (OSK-18256).
+ */
+function expectedPriceMismatchMessage(expectedMicros, chargeMicros) {
+    return (`--expected-price ${(0, data_provider_1.formatStoreAcquisitionPrice)(expectedMicros)} does not match the price ` +
+        `the listing now charges (${(0, data_provider_1.formatStoreAcquisitionPrice)(chargeMicros)}). ` +
+        'Nothing was installed — read the price again and ask the person before buying.');
+}
+/** Fields that carry a store price in integer micro-USD without saying so. */
+const MICROS_PRICE_FIELDS = new Set(['price', 'listPrice', 'charge']);
+/**
+ * A `--json` payload with every unstated-unit store price restated in
+ * dollars: a numeric `price`, `listPrice` or `charge` (integer micro-USD,
+ * the one unit store prices travel the wire in — see `storePricing.ts` in
+ * `@skrr-ai/data-provider`) gains a sibling `<name>Usd` in dollars, so a
+ * reader never has to know the conversion (OSK-18256). Fields that already
+ * name their unit (`amountMicros`, `*Micros`) and anything that is not a
+ * finite number pass through untouched; the wire fields themselves keep
+ * their values.
+ */
+function withUsdPrices(payload) {
+    if (Array.isArray(payload)) {
+        return payload.map((item) => withUsdPrices(item));
+    }
+    if (payload === null || typeof payload !== 'object') {
+        return payload;
+    }
+    const out = {};
+    for (const [key, value] of Object.entries(payload)) {
+        out[key] = withUsdPrices(value);
+        if (MICROS_PRICE_FIELDS.has(key) && typeof value === 'number' && Number.isFinite(value)) {
+            out[`${key}Usd`] = (0, data_provider_1.listingPriceMicrosToUsd)(value);
+        }
+    }
+    return out;
 }

package/dist/node_modules/@skrr-ai/auth-core/dist/cjs/harnessPermissionControls.d.ts

@@ -30,3 +30,20 @@ export interface HarnessPermissionControlReport {
  * rather than a green badge. Additive fields are stripped for compatibility.
  */
 export declare function parseHarnessPermissionControls(value: unknown): HarnessPermissionControls | null;
+/** Last-reported local configuration and adapter protocol, never authority. */
+export interface HarnessSessionPolicyReport {
+    version: 1;
+    configuredDefault: {
+        provider: 'claude';
+        engine: 'sdk' | 'cli';
+        permissionMode: 'default' | 'acceptEdits' | 'plan' | 'bypassPermissions';
+    } | null;
+    taskCommandApproval: {
+        protocol: 'task_command_once_v1';
+        adapters: readonly {
+            provider: 'claude';
+            engine: 'sdk';
+        }[];
+    } | null;
+}
+export declare function parseHarnessSessionPolicyReport(value: unknown): HarnessSessionPolicyReport | null;

package/dist/node_modules/@skrr-ai/auth-core/dist/cjs/harnessPermissionControls.js

@@ -18,7 +18,8 @@ var __copyProps = (to, from, except, desc) => {
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 var harnessPermissionControls_exports = {};
 __export(harnessPermissionControls_exports, {
-  parseHarnessPermissionControls: () => parseHarnessPermissionControls
+  parseHarnessPermissionControls: () => parseHarnessPermissionControls,
+  parseHarnessSessionPolicyReport: () => parseHarnessSessionPolicyReport
 });
 module.exports = __toCommonJS(harnessPermissionControls_exports);
 const PLAN = ["harness", "reported-actions", "unsupported", "unknown"];
@@ -63,7 +64,39 @@ function parseHarnessPermissionControls(value) {
     return null;
   }
 }
+function parseHarnessSessionPolicyReport(value) {
+  try {
+    if (!value || typeof value !== "object" || Array.isArray(value))
+      return null;
+    const row = value;
+    if (row.version !== 1)
+      return null;
+    let configuredDefault = null;
+    let taskCommandApproval = null;
+    const config = row.configuredDefault;
+    if (config && typeof config === "object" && !Array.isArray(config) && config.provider === "claude" && ["sdk", "cli"].includes(config.engine) && ["default", "acceptEdits", "plan", "bypassPermissions"].includes(config.permissionMode)) {
+      configuredDefault = Object.freeze({
+        provider: "claude",
+        engine: config.engine,
+        permissionMode: config.permissionMode
+      });
+    }
+    const approval = row.taskCommandApproval;
+    if (approval && typeof approval === "object" && !Array.isArray(approval) && approval.protocol === "task_command_once_v1" && Array.isArray(approval.adapters) && approval.adapters.length === 1 && approval.adapters[0]?.provider === "claude" && approval.adapters[0]?.engine === "sdk") {
+      taskCommandApproval = Object.freeze({
+        protocol: "task_command_once_v1",
+        adapters: Object.freeze([
+          Object.freeze({ provider: "claude", engine: "sdk" })
+        ])
+      });
+    }
+    return Object.freeze({ version: 1, configuredDefault, taskCommandApproval });
+  } catch {
+    return null;
+  }
+}
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
-  parseHarnessPermissionControls
+  parseHarnessPermissionControls,
+  parseHarnessSessionPolicyReport
 });

package/dist/node_modules/@skrr-ai/auth-core/dist/esm/harnessPermissionControls.d.ts

@@ -30,3 +30,20 @@ export interface HarnessPermissionControlReport {
  * rather than a green badge. Additive fields are stripped for compatibility.
  */
 export declare function parseHarnessPermissionControls(value: unknown): HarnessPermissionControls | null;
+/** Last-reported local configuration and adapter protocol, never authority. */
+export interface HarnessSessionPolicyReport {
+    version: 1;
+    configuredDefault: {
+        provider: 'claude';
+        engine: 'sdk' | 'cli';
+        permissionMode: 'default' | 'acceptEdits' | 'plan' | 'bypassPermissions';
+    } | null;
+    taskCommandApproval: {
+        protocol: 'task_command_once_v1';
+        adapters: readonly {
+            provider: 'claude';
+            engine: 'sdk';
+        }[];
+    } | null;
+}
+export declare function parseHarnessSessionPolicyReport(value: unknown): HarnessSessionPolicyReport | null;

package/dist/node_modules/@skrr-ai/auth-core/dist/esm/harnessPermissionControls.js

@@ -57,3 +57,47 @@ export function parseHarnessPermissionControls(value) {
         return null;
     }
 }
+export function parseHarnessSessionPolicyReport(value) {
+    try {
+        if (!value || typeof value !== 'object' || Array.isArray(value))
+            return null;
+        const row = value;
+        if (row.version !== 1)
+            return null;
+        let configuredDefault = null;
+        let taskCommandApproval = null;
+        const config = row.configuredDefault;
+        if (config &&
+            typeof config === 'object' &&
+            !Array.isArray(config) &&
+            config.provider === 'claude' &&
+            ['sdk', 'cli'].includes(config.engine) &&
+            ['default', 'acceptEdits', 'plan', 'bypassPermissions'].includes(config.permissionMode)) {
+            configuredDefault = Object.freeze({
+                provider: 'claude',
+                engine: config.engine,
+                permissionMode: config.permissionMode,
+            });
+        }
+        const approval = row.taskCommandApproval;
+        if (approval &&
+            typeof approval === 'object' &&
+            !Array.isArray(approval) &&
+            approval.protocol === 'task_command_once_v1' &&
+            Array.isArray(approval.adapters) &&
+            approval.adapters.length === 1 &&
+            approval.adapters[0]?.provider === 'claude' &&
+            approval.adapters[0]?.engine === 'sdk') {
+            taskCommandApproval = Object.freeze({
+                protocol: 'task_command_once_v1',
+                adapters: Object.freeze([
+                    Object.freeze({ provider: 'claude', engine: 'sdk' }),
+                ]),
+            });
+        }
+        return Object.freeze({ version: 1, configuredDefault, taskCommandApproval });
+    }
+    catch {
+        return null;
+    }
+}

package/dist/node_modules/@skrr-ai/auth-core/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@skrr-ai/auth-core",
-  "version": "0.4.30",
+  "version": "0.4.31",
   "main": "dist/cjs/index.js",
   "types": "dist/esm/index.d.ts",
   "exports": {