@skrr-ai/cli 0.1.120 → 0.1.121

package/dist/commands/search/workspace.d.ts

@@ -0,0 +1,19 @@
+import { BaseCommand } from '../../base-command';
+export { searchDisplayText } from '../../lib/search-display';
+export declare function searchDiagnosticMessage(code: string): string;
+/** Workspace search uses the same ACL-filtered index and result order as web. */
+export default class SearchWorkspace extends BaseCommand {
+    static description: string;
+    static examples: string[];
+    static args: {
+        query: import("@oclif/core/interfaces").Arg<string | undefined, Record<string, unknown>>;
+    };
+    static flags: {
+        query: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        type: import("@oclif/core/interfaces").OptionFlag<string[] | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        limit: import("@oclif/core/interfaces").OptionFlag<number, import("@oclif/core/interfaces").CustomOptions>;
+        cursor: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        json: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+    };
+    run(): Promise<void>;
+}

package/dist/commands/search/workspace.js

@@ -0,0 +1,126 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.searchDisplayText = void 0;
+exports.searchDiagnosticMessage = searchDiagnosticMessage;
+const core_1 = require("@oclif/core");
+const data_provider_1 = require("@skrr-ai/data-provider");
+const base_command_1 = require("../../base-command");
+const format_1 = require("../../lib/format");
+const search_query_1 = require("../../lib/search-query");
+const web_url_1 = require("../../lib/web-url");
+const search_display_1 = require("../../lib/search-display");
+var search_display_2 = require("../../lib/search-display");
+Object.defineProperty(exports, "searchDisplayText", { enumerable: true, get: function () { return search_display_2.searchDisplayText; } });
+function isSearchResponse(value) {
+    if (!value || typeof value !== 'object' || Array.isArray(value))
+        return false;
+    const response = value;
+    if (!Array.isArray(response.results) || (response.nextCursor !== null && (typeof response.nextCursor !== 'string' || !(0, search_display_1.isPrintableSearchCursor)(response.nextCursor))) ||
+        (response.diagnostics !== undefined && (!Array.isArray(response.diagnostics) || !response.diagnostics.every((item) => typeof item === 'string'))))
+        return false;
+    return response.results.every((item) => item && typeof item === 'object' && !Array.isArray(item) &&
+        ['id', 'type', 'entityId', 'title', 'href'].every((field) => typeof item[field] === 'string') &&
+        item.href.startsWith('/') && !item.href.startsWith('//') && !item.href.includes('\\') &&
+        !/[\u0000-\u001f\u007f]/.test(item.href) &&
+        ['identifier', 'excerpt'].every((field) => item[field] === undefined || typeof item[field] === 'string'));
+}
+function searchDiagnosticMessage(code) {
+    switch (code) {
+        case 'global_search_index_stale':
+            return 'The search index is catching up. Recent changes may be missing; retry shortly.';
+        case 'global_search_acl_unavailable':
+            return 'Access checks were unavailable. Results may be incomplete; retry shortly.';
+        case 'global_search_source_unavailable':
+            return 'Some current resources could not be checked. Results may be incomplete; retry shortly.';
+        case 'global_search_candidate_window_may_be_limited':
+            return 'This broad search may exceed the index result window. Narrow the query or select resource types.';
+        case 'global_search_candidate_window_unknown':
+            return 'The index result window could not be checked. Results may be incomplete; retry shortly.';
+        case 'global_search_invalid_candidate':
+            return 'The search index returned invalid candidates. Results may be incomplete; retry shortly.';
+        default:
+            return `Search may be incomplete (${(0, search_display_1.searchDisplayText)(code)}). Retry or inspect --json diagnostics.`;
+    }
+}
+/** Workspace search uses the same ACL-filtered index and result order as web. */
+class SearchWorkspace extends base_command_1.BaseCommand {
+    static description = 'Search supported resources in your workspace';
+    static examples = [
+        '<%= config.bin %> search workspace "deployment incident"',
+        '<%= config.bin %> search workspace pricing --type task --type wiki --json',
+    ];
+    static args = { query: core_1.Args.string({ description: 'Search term', ignoreStdin: true }) };
+    static flags = {
+        query: core_1.Flags.string({ char: 'q', description: 'Search term' }),
+        type: core_1.Flags.string({ multiple: true, description: 'Limit to resource types (repeatable; for example task, space, wiki, message)' }),
+        limit: core_1.Flags.integer({ default: 25, min: 1, max: 50, description: 'Results per page' }),
+        cursor: core_1.Flags.string({ description: 'Continue from a previous page' }),
+        json: core_1.Flags.boolean({ description: 'Output structured results and diagnostics' }),
+    };
+    async run() {
+        this.requireAuth();
+        const { args, flags } = await this.parse(SearchWorkspace);
+        const query = (0, search_query_1.resolveSearchQuery)(this, args.query, flags.query, 'search workspace');
+        // Session-only tokens cannot authenticate to the JWT route. Never adopt an
+        // ambient human credential to turn this into broader authority.
+        if (this.resolvedCredential.token?.startsWith('agst_')) {
+            this.failWithCliError({
+                message: 'Workspace search is not available with a session-scoped credential. Ask the workspace owner to enable the delegated CLI surface for a new Agent session, or search in a signed-in human session. Do not substitute a personal login inside the Agent.',
+                code: 'GLOBAL_SEARCH_SESSION_UNSUPPORTED', exit: 2, retryable: false,
+            });
+        }
+        let response;
+        try {
+            response = await data_provider_1.dataService.searchGlobal({ query, types: flags.type, limit: flags.limit, cursor: flags.cursor });
+        }
+        catch (err) {
+            const code = (0, base_command_1.apiRefusal)(err).code;
+            if (code === 'SEARCH_WORKSPACE_REQUIRED' || code === 'SEARCH_WORKSPACE_FORBIDDEN') {
+                this.failWithCliError({
+                    message: `Choose a workspace you belong to: run \`${this.config.bin} workspaces list\`, then \`${this.config.bin} workspaces use <workspace>\`, or pass --workspace <workspace-id>.`,
+                    code, status: 403, exit: 3, retryable: false,
+                });
+            }
+            if (code === 'INVALID_SEARCH_TYPE') {
+                const allowed = (0, base_command_1.apiRefusal)(err).body?.supportedTypes;
+                const types = Array.isArray(allowed)
+                    ? allowed.filter((type) => typeof type === 'string').map(search_display_1.searchDisplayText).filter(Boolean)
+                    : [];
+                this.failWithCliError({
+                    message: types.length
+                        ? `Unknown search type. Choose from: ${types.join(', ')}.`
+                        : 'Unknown search type. Run the command without --type to search all supported types.',
+                    code, status: 400, exit: 2, retryable: false,
+                });
+            }
+            this.handleApiError(err);
+        }
+        if (!isSearchResponse(response) || (flags.cursor && response.nextCursor === flags.cursor)) {
+            this.failWithCliError({ message: 'The server returned an invalid workspace search response. Retry or check server compatibility.',
+                code: 'GLOBAL_SEARCH_INVALID_RESPONSE', exit: 1, retryable: true });
+        }
+        const results = response.results.map((item) => ({
+            ...item,
+            url: `${(0, web_url_1.webOrigin)(this.cliConfig.baseURL)}${item.href}`,
+        }));
+        if (flags.json) {
+            this.log(JSON.stringify({ ...response, results }, null, 2));
+            return;
+        }
+        for (const diagnostic of new Set(response.diagnostics || []))
+            this.warn(searchDiagnosticMessage(diagnostic));
+        if (results.length) {
+            (0, format_1.renderTable)(results.map((item) => ({ type: (0, search_display_1.searchDisplayText)(item.type), id: (0, search_display_1.searchDisplayText)(item.identifier || item.entityId), title: (0, search_display_1.searchDisplayText)(item.title), excerpt: (0, search_display_1.searchDisplayText)(item.excerpt || ''), url: (0, search_display_1.searchDisplayText)(item.url || '-') })), [
+                { key: 'type', header: 'TYPE' }, { key: 'id', header: 'ID' },
+                { key: 'title', header: 'TITLE', maxWidth: 45 }, { key: 'excerpt', header: 'EXCERPT', maxWidth: 60 },
+                { key: 'url', header: 'URL', verbatim: true },
+            ], (line) => this.log(line));
+        }
+        else {
+            this.log('No results in this page of supported workspace resources.');
+        }
+        if (response.nextCursor)
+            this.log(`Next page: --cursor ${(0, search_display_1.shellSearchCursor)(response.nextCursor)}`);
+    }
+}
+exports.default = SearchWorkspace;

package/dist/commands/skills/browse.d.ts

@@ -16,6 +16,7 @@ export default class SkillsBrowse extends BaseCommand {
         category: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
         sort: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
         limit: import("@oclif/core/interfaces").OptionFlag<number, import("@oclif/core/interfaces").CustomOptions>;
+        cursor: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
     };
     run(): Promise<void>;
 }

package/dist/commands/skills/browse.js

@@ -7,6 +7,7 @@ const data_provider_1 = require("@skrr-ai/data-provider");
 const base_command_1 = require("../../base-command");
 const format_1 = require("../../lib/format");
 const usd_micros_1 = require("../../lib/usd-micros");
+const skill_store_pagination_1 = require("../../lib/skill-store-pagination");
 function skillBrowseDescription(skill) {
     const description = String(skill.description ?? '').trim();
     if (description && description !== '>' && description !== '|')
@@ -43,6 +44,7 @@ class SkillsBrowse extends base_command_1.BaseCommand {
             options: ['newest', 'popular', 'rating'],
         }),
         limit: core_1.Flags.integer({ description: 'Maximum number of results', default: 20 }),
+        cursor: core_1.Flags.string({ description: 'Continue from a previous page' }),
     };
     async run() {
         this.requireAuth();
@@ -59,6 +61,7 @@ class SkillsBrowse extends base_command_1.BaseCommand {
                 category: flags.category,
                 sort: flags.sort ? sortMap[flags.sort] : undefined,
                 limit: flags.limit,
+                cursor: flags.cursor,
             });
         }
         catch (err) {
@@ -71,7 +74,10 @@ class SkillsBrowse extends base_command_1.BaseCommand {
         const r = response;
         const items = Array.isArray(r) ? r : (r?.data ?? []);
         if (items.length === 0) {
-            this.log('No skills found.');
+            this.log((0, skill_store_pagination_1.skillStorePageState)(response, flags.cursor).hasMore
+                ? 'No skills on this page. More candidates remain.'
+                : 'No skills found.');
+            (0, skill_store_pagination_1.reportSkillStorePage)(response, flags.cursor, (message) => this.log(message), (message) => this.warn(message));
             return;
         }
         const rows = items.map(skillBrowseRow);
@@ -83,6 +89,7 @@ class SkillsBrowse extends base_command_1.BaseCommand {
             { key: 'installs', header: 'INSTALLS' },
             { key: 'description', header: 'DESCRIPTION', maxWidth: 60 },
         ], (line) => this.log(line));
+        (0, skill_store_pagination_1.reportSkillStorePage)(response, flags.cursor, (message) => this.log(message), (message) => this.warn(message));
     }
 }
 exports.default = SkillsBrowse;

package/dist/commands/skills/search.d.ts

@@ -17,6 +17,7 @@ export default class SkillsSearch extends BaseCommand {
         query: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
         category: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
         limit: import("@oclif/core/interfaces").OptionFlag<number, import("@oclif/core/interfaces").CustomOptions>;
+        cursor: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
     };
     run(): Promise<void>;
 }

package/dist/commands/skills/search.js

@@ -6,6 +6,7 @@ const base_command_1 = require("../../base-command");
 const format_1 = require("../../lib/format");
 const search_query_1 = require("../../lib/search-query");
 const usd_micros_1 = require("../../lib/usd-micros");
+const skill_store_pagination_1 = require("../../lib/skill-store-pagination");
 class SkillsSearch extends base_command_1.BaseCommand {
     static description = 'Search skills in the skrr store by keyword (same as `search skills`)';
     static examples = [
@@ -37,6 +38,7 @@ class SkillsSearch extends base_command_1.BaseCommand {
         query: core_1.Flags.string({ char: 'q', description: 'Search query' }),
         category: core_1.Flags.string({ description: 'Filter by category' }),
         limit: core_1.Flags.integer({ description: 'Maximum number of results', default: 20 }),
+        cursor: core_1.Flags.string({ description: 'Continue from a previous page' }),
     };
     async run() {
         this.requireAuth();
@@ -48,6 +50,7 @@ class SkillsSearch extends base_command_1.BaseCommand {
                 q: query,
                 category: flags.category,
                 limit: flags.limit,
+                cursor: flags.cursor,
             });
         }
         catch (err) {
@@ -59,8 +62,15 @@ class SkillsSearch extends base_command_1.BaseCommand {
         }
         const r = response;
         const items = Array.isArray(r) ? r : (r?.data ?? []);
+        const incomplete = (0, skill_store_pagination_1.skillStoreSearchIncomplete)(response);
+        if (incomplete)
+            this.warn('Skill store search may be incomplete. Try again or narrow your query.');
         if (items.length === 0) {
-            this.log(`No skills found matching '${query}'.`);
+            this.log((0, skill_store_pagination_1.skillStorePageState)(response, flags.cursor).hasMore
+                ? 'No skills matched on this page. More candidates remain.'
+                : incomplete ? 'No skills confirmed in the available search results.'
+                    : `No skills found matching '${query}'.`);
+            (0, skill_store_pagination_1.reportSkillStorePage)(response, flags.cursor, (message) => this.log(message), (message) => this.warn(message));
             return;
         }
         const rows = items.map((s) => ({
@@ -79,6 +89,7 @@ class SkillsSearch extends base_command_1.BaseCommand {
             { key: 'installs', header: 'INSTALLS' },
             { key: 'description', header: 'DESCRIPTION', maxWidth: 60 },
         ], (line) => this.log(line));
+        (0, skill_store_pagination_1.reportSkillStorePage)(response, flags.cursor, (message) => this.log(message), (message) => this.warn(message));
     }
 }
 exports.default = SkillsSearch;

package/dist/commands/spaces/list.d.ts

@@ -25,6 +25,7 @@ export default class SpacesList extends BaseCommand {
         status: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
         label: import("@oclif/core/interfaces").OptionFlag<string[] | undefined, import("@oclif/core/interfaces").CustomOptions>;
         'include-archived': import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        'archived-only': import("@oclif/core/interfaces").BooleanFlag<boolean>;
         q: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
         match: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
         limit: import("@oclif/core/interfaces").OptionFlag<number, import("@oclif/core/interfaces").CustomOptions>;

package/dist/commands/spaces/list.js

@@ -15,7 +15,7 @@ function noSpacesMatchedMessage(q, bin = 'skrr', mode = 'fuzzy') {
         : mode === 'phrase'
             ? 'Phrase matches use a literal case-insensitive substring; word order matters.'
             : 'Fuzzy discovery can use tokenized, typo-tolerant search or a substring fallback.';
-    return (`No spaces matched ${JSON.stringify(q)}.\n` +
+    return (`No spaces matched ${JSON.stringify(q)} on this page.\n` +
         `  → ${explanation} Fields: title, description and identifier.\n` +
         `  → retry with one distinctive word, or list them all with \`${bin} spaces list\`.`);
 }
@@ -45,6 +45,7 @@ class SpacesList extends base_command_1.BaseCommand {
         '<%= config.bin %> spaces list --q "always on" --match phrase',
         '<%= config.bin %> spaces list --q "My workspace" --match exact --json',
         '<%= config.bin %> spaces list --include-archived --json',
+        '<%= config.bin %> spaces list --archived-only --json',
         '<%= config.bin %> spaces list --compact --json',
         '<%= config.bin %> spaces list --fields id,identifier,title --ndjson',
     ];
@@ -62,7 +63,8 @@ class SpacesList extends base_command_1.BaseCommand {
             description: 'Filter by label ID (repeatable). Multiple labels AND together — a space must carry all of them.',
             multiple: true,
         }),
-        'include-archived': core_1.Flags.boolean({ description: 'Include archived spaces' }),
+        'include-archived': core_1.Flags.boolean({ description: 'Include archived spaces', exclusive: ['archived-only'] }),
+        'archived-only': core_1.Flags.boolean({ description: 'List only archived spaces', exclusive: ['include-archived'] }),
         q: core_1.Flags.string({
             description: 'Search title, description, or identifier. Default fuzzy discovery may tokenize and tolerate typos; ' +
                 'use --match phrase for a literal substring or --match exact for whole-field equality. Maximum 200 characters.',
@@ -86,6 +88,7 @@ class SpacesList extends base_command_1.BaseCommand {
                 ...(flags.label?.length ? { labelIds: flags.label } : {}),
                 ...(flags.q ? { q: flags.q, ...(flags.match ? { match: flags.match } : {}) } : {}),
                 includeArchived: flags['include-archived'],
+                archivedOnly: flags['archived-only'],
                 limit: flags.limit,
                 cursor: flags.cursor,
             });
@@ -107,6 +110,8 @@ class SpacesList extends base_command_1.BaseCommand {
         }
         const r = response;
         const items = r?.data ?? [];
+        if (flags.q && (r?.degraded || r?.warnings?.length))
+            this.warn('Search may be incomplete. Inspect --json diagnostics.');
         if (r?.search) {
             this.log(`Search: ${r.search.mode}; ${r.search.semantics}; backend=${r.search.backend}.`);
             if (r.search.candidates_may_be_truncated) {
@@ -116,7 +121,11 @@ class SpacesList extends base_command_1.BaseCommand {
         if (items.length === 0) {
             this.log(flags.q
                 ? noSpacesMatchedMessage(flags.q, this.config.bin, r?.search?.mode ?? 'fuzzy')
-                : noSpacesEmptyMessage(this.config.bin));
+                : flags['archived-only'] || flags.status || flags.label?.length || r?.next_cursor
+                    ? 'No spaces on this page under the current filters.'
+                    : noSpacesEmptyMessage(this.config.bin));
+            if (r?.next_cursor)
+                this.log(`Next page: --cursor ${r.next_cursor}`);
             return;
         }
         const rows = items.map((s) => ({

package/dist/commands/spaces/search.d.ts

@@ -0,0 +1 @@
+export { default } from '../search/spaces';

package/dist/commands/spaces/search.js

@@ -0,0 +1,9 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.default = void 0;
+// Both spellings share one implementation and result contract.
+var spaces_1 = require("../search/spaces");
+Object.defineProperty(exports, "default", { enumerable: true, get: function () { return __importDefault(spaces_1).default; } });

package/dist/commands/tasks/search.d.ts

@@ -0,0 +1 @@
+export { default } from '../search/tasks';

package/dist/commands/tasks/search.js

@@ -0,0 +1,9 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.default = void 0;
+// Both spellings share one implementation and result contract.
+var tasks_1 = require("../search/tasks");
+Object.defineProperty(exports, "default", { enumerable: true, get: function () { return __importDefault(tasks_1).default; } });

package/dist/lib/api-error-reason.d.ts

@@ -0,0 +1,2 @@
+/** The reason-only refusal used by session-scoped API routes. */
+export declare function reasonOnlyCode(body: unknown): string | undefined;

package/dist/lib/api-error-reason.js

@@ -0,0 +1,14 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.reasonOnlyCode = reasonOnlyCode;
+/** The reason-only refusal used by session-scoped API routes. */
+function reasonOnlyCode(body) {
+    if (!body || typeof body !== 'object' || Array.isArray(body))
+        return undefined;
+    const value = body;
+    if (value.ok !== false || typeof value.reason !== 'string')
+        return undefined;
+    const reason = value.reason.trim();
+    return reason.length <= 160 && /^[A-Za-z][A-Za-z0-9]*(?:[_-][A-Za-z0-9]+)+$/.test(reason)
+        ? reason : undefined;
+}

package/dist/lib/api-fetch.js

@@ -31,6 +31,7 @@ exports.hasHumanSession = hasHumanSession;
  * switch to `dataService.*` without touching the wire contract.
  */
 const config_1 = require("./config");
+const api_error_reason_1 = require("./api-error-reason");
 // ADD-CLI8 — `readFromBackend` is only used inside `hasHumanSession()`
 // (see below), NOT by `apiFetch`. Kept as a module-scope import
 // rather than inlined into `hasHumanSession` because (a) ES modules
@@ -282,6 +283,8 @@ async function apiFetch(pathOrUrl, opts = {}) {
                 const parsed = JSON.parse(text);
                 if (typeof parsed.code === 'string')
                     code = parsed.code;
+                else
+                    code = (0, api_error_reason_1.reasonOnlyCode)(parsed);
             }
             catch {
                 /* non-JSON body */

package/dist/lib/search-display.d.ts

@@ -0,0 +1,7 @@
+/** Keep untrusted search content from controlling or reordering a terminal. */
+export declare function searchDisplayText(value: string): string;
+/** Cursor values stay opaque, but must be safe to print and copy into a shell. */
+export declare function isPrintableSearchCursor(value: string): boolean;
+export declare function shellSearchCursor(value: string): string;
+/** A missing or malformed list is an error, not proof of zero matches. */
+export declare function isSearchListPage(value: unknown): boolean;

package/dist/lib/search-display.js

@@ -0,0 +1,31 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.searchDisplayText = searchDisplayText;
+exports.isPrintableSearchCursor = isPrintableSearchCursor;
+exports.shellSearchCursor = shellSearchCursor;
+exports.isSearchListPage = isSearchListPage;
+const node_util_1 = require("node:util");
+/** Keep untrusted search content from controlling or reordering a terminal. */
+function searchDisplayText(value) {
+    return (0, node_util_1.stripVTControlCharacters)(value)
+        .replace(/[\u0000-\u001f\u007f-\u009f\u202a-\u202e\u2066-\u2069]/g, ' ')
+        .replace(/\s+/g, ' ')
+        .trim();
+}
+/** Cursor values stay opaque, but must be safe to print and copy into a shell. */
+function isPrintableSearchCursor(value) {
+    return value.length > 0 && !/[\u0000-\u001f\u007f-\u009f\u202a-\u202e\u2066-\u2069]/.test(value);
+}
+function shellSearchCursor(value) {
+    return /^[A-Za-z0-9_@%+=:,./-]+$/.test(value) ? value : `'${value.replace(/'/g, `'\\''`)}'`;
+}
+/** A missing or malformed list is an error, not proof of zero matches. */
+function isSearchListPage(value) {
+    if (!value || typeof value !== 'object' || Array.isArray(value))
+        return false;
+    const page = value;
+    return Array.isArray(page.data) && page.data.every((row) => row && typeof row === 'object' && !Array.isArray(row)) &&
+        (page.has_more === undefined || typeof page.has_more === 'boolean') &&
+        (page.next_cursor === undefined || page.next_cursor === null ||
+            (typeof page.next_cursor === 'string' && isPrintableSearchCursor(page.next_cursor)));
+}

package/dist/lib/skill-store-pagination.d.ts

@@ -0,0 +1,8 @@
+/** The Store can return an empty page while more candidates remain to inspect. */
+export declare function skillStoreSearchIncomplete(response: unknown): boolean;
+export declare function skillStorePageState(response: unknown, cursor?: string): {
+    hasMore: boolean;
+    nextCursor?: string;
+    invalidCursor: boolean;
+};
+export declare function reportSkillStorePage(response: unknown, cursor: string | undefined, log: (message: string) => void, warn: (message: string) => void): void;

package/dist/lib/skill-store-pagination.js

@@ -0,0 +1,35 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.skillStoreSearchIncomplete = skillStoreSearchIncomplete;
+exports.skillStorePageState = skillStorePageState;
+exports.reportSkillStorePage = reportSkillStorePage;
+/** The Store can return an empty page while more candidates remain to inspect. */
+function skillStoreSearchIncomplete(response) {
+    if (!response || Array.isArray(response) || typeof response !== 'object')
+        return false;
+    const page = response;
+    return page.partial === true || page.semanticUnavailable === true;
+}
+function skillStorePageState(response, cursor) {
+    if (!response || Array.isArray(response) || typeof response !== 'object') {
+        return { hasMore: false, invalidCursor: false };
+    }
+    const page = response;
+    if (page.has_more !== true)
+        return { hasMore: false, invalidCursor: false };
+    // Server cursors are opaque base64 tokens. Do not print arbitrary terminal
+    // control characters from a malformed response, or suggest a cursor loop.
+    const next = typeof page.after === 'string' && /^[A-Za-z0-9_+/=-]{1,4096}$/.test(page.after)
+        ? page.after
+        : undefined;
+    if (!next || next === cursor)
+        return { hasMore: true, invalidCursor: true };
+    return { hasMore: true, nextCursor: next, invalidCursor: false };
+}
+function reportSkillStorePage(response, cursor, log, warn) {
+    const page = skillStorePageState(response, cursor);
+    if (page.nextCursor)
+        log(`Next page: --cursor ${page.nextCursor}`);
+    else if (page.invalidCursor)
+        warn('More results may exist, but the server did not provide a usable next cursor.');
+}

package/dist/node_modules/@skrr-ai/auth-core/dist/cjs/credentialEnvelopeBridge.d.ts

@@ -54,6 +54,16 @@ export declare function splitKeyConvergencePolicy(): {
     converge: boolean;
     reason: 'daemon_key_pinned' | 'daemon_key_refused';
 };
+/** Open only the existing wrapped DEK. Recovery must never enroll a new key,
+ * consolidate profile paths or replace an unreadable envelope. A caller gets
+ * an error if the existing file or the platform's read-only unwrap is unsafe
+ * or unavailable. This intentionally does not load retired keys; credentials
+ * that require one remain unavailable rather than triggering a migration. */
+export declare function initExistingCredEnvelope(profile: string): Promise<void>;
+/** First enrollment for a reserved desktop background profile. Existing or
+ * ambiguous state is opened read-only or refused; it is never re-enrolled.
+ * The caller must validate the reservation before calling this function. */
+export declare function initNewIndependentCredEnvelope(profile: string): Promise<void>;
 /**
  * Initialize the envelope path. Idempotent — second call when state is
  * non-uninit returns immediately.