@skrr-ai/cli 0.1.120 → 0.1.122

package/dist/commands/store/gallery-admissions/preview.d.ts

@@ -0,0 +1,15 @@
+import { BaseCommand } from '../../../base-command';
+/** The server grants only curators access; do not print or persist a bearer URL. */
+export default class StoreGalleryAdmissionsPreview extends BaseCommand {
+    static description: string;
+    static args: {
+        id: import("@oclif/core/interfaces").Arg<string, Record<string, unknown>>;
+        imageId: import("@oclif/core/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static flags: {
+        kind: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+        output: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+        json: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+    };
+    run(): Promise<void>;
+}

package/dist/commands/store/gallery-admissions/preview.js

@@ -0,0 +1,48 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const node_crypto_1 = require("node:crypto");
+const promises_1 = require("node:fs/promises");
+const core_1 = require("@oclif/core");
+const data_provider_1 = require("@skrr-ai/data-provider");
+const base_command_1 = require("../../../base-command");
+/** The server grants only curators access; do not print or persist a bearer URL. */
+class StoreGalleryAdmissionsPreview extends base_command_1.BaseCommand {
+    static description = 'Download one frozen review image for inspection';
+    static args = {
+        id: core_1.Args.string({ description: 'Gallery review request ID', required: true, ignoreStdin: true }),
+        imageId: core_1.Args.string({ description: 'Image ID from show', required: true, ignoreStdin: true }),
+    };
+    static flags = {
+        kind: core_1.Flags.string({ options: ['action', 'service'], required: true }),
+        output: core_1.Flags.string({ description: 'New local file to write (will not overwrite)', required: true }),
+        json: core_1.Flags.boolean({ description: 'Output a file receipt as JSON' }),
+    };
+    async run() {
+        this.requireAuth();
+        const { args, flags } = await this.parse(StoreGalleryAdmissionsPreview);
+        try {
+            if (flags.output === '-')
+                throw new Error('Choose a local file path for --output.');
+            const kind = flags.kind;
+            const { review } = await data_provider_1.dataService.getStoreGalleryAdmission(kind, args.id);
+            const image = review.images?.find((item) => item.id === args.imageId);
+            if (!image || !/^[a-f0-9]{64}$/i.test(image.sha256)) {
+                throw new Error('Image or verified SHA-256 is missing from this review.');
+            }
+            const bytes = Buffer.from(await data_provider_1.dataService.downloadStoreGalleryAdmissionImage(kind, args.id, args.imageId));
+            const digest = (0, node_crypto_1.createHash)('sha256').update(bytes).digest('hex');
+            if (digest !== image.sha256.toLowerCase())
+                throw new Error('Image bytes do not match the frozen review digest.');
+            await (0, promises_1.writeFile)(flags.output, bytes, { flag: 'wx', mode: 0o600 });
+            const receipt = { requestId: args.id, kind, revision: review.revision, digest: review.digest, imageId: args.imageId, sha256: digest, path: flags.output, bytes: bytes.length };
+            if (flags.json)
+                this.log(JSON.stringify(receipt));
+            else
+                this.log(`Wrote ${bytes.length} bytes to ${flags.output} (sha256:${digest}). Review revision ${review.revision}, digest ${review.digest}.`);
+        }
+        catch (err) {
+            this.handleApiError(err);
+        }
+    }
+}
+exports.default = StoreGalleryAdmissionsPreview;

package/dist/commands/store/gallery-admissions/refuse.d.ts

@@ -0,0 +1,15 @@
+import { BaseCommand } from '../../../base-command';
+export default class StoreGalleryAdmissionsRefuse extends BaseCommand {
+    static description: string;
+    static args: {
+        id: import("@oclif/core/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static flags: {
+        kind: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+        revision: import("@oclif/core/interfaces").OptionFlag<number, import("@oclif/core/interfaces").CustomOptions>;
+        digest: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+        note: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+        json: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+    };
+    run(): Promise<void>;
+}

package/dist/commands/store/gallery-admissions/refuse.js

@@ -0,0 +1,35 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const core_1 = require("@oclif/core");
+const data_provider_1 = require("@skrr-ai/data-provider");
+const base_command_1 = require("../../../base-command");
+class StoreGalleryAdmissionsRefuse extends base_command_1.BaseCommand {
+    static description = 'Refuse a frozen gallery revision with a publisher-facing reason';
+    static args = { id: core_1.Args.string({ description: 'Gallery review request ID', required: true, ignoreStdin: true }) };
+    static flags = {
+        kind: core_1.Flags.string({ options: ['action', 'service'], required: true }),
+        revision: core_1.Flags.integer({ required: true, min: 0, description: 'Revision from the review details' }),
+        digest: core_1.Flags.string({ required: true, description: 'Digest from the review details' }),
+        note: core_1.Flags.string({ required: true, description: 'Reason the publisher can act on (at least 8 characters)' }),
+        json: core_1.Flags.boolean({ description: 'Output as JSON' }),
+    };
+    async run() {
+        this.requireAuth();
+        const { args, flags } = await this.parse(StoreGalleryAdmissionsRefuse);
+        try {
+            if (flags.note.trim().length < 8)
+                throw new Error('A refusal needs a note of at least 8 characters.');
+            const result = await data_provider_1.dataService.refuseStoreGalleryAdmission(flags.kind, args.id, {
+                revision: flags.revision, digest: flags.digest, note: flags.note.trim(),
+            });
+            if (flags.json)
+                this.log(JSON.stringify(result, null, 2));
+            else
+                this.log(`Refused gallery revision ${flags.revision}.`);
+        }
+        catch (err) {
+            this.handleApiError(err);
+        }
+    }
+}
+exports.default = StoreGalleryAdmissionsRefuse;

package/dist/commands/store/gallery-admissions/show.d.ts

@@ -0,0 +1,12 @@
+import { BaseCommand } from '../../../base-command';
+export default class StoreGalleryAdmissionsShow extends BaseCommand {
+    static description: string;
+    static args: {
+        id: import("@oclif/core/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static flags: {
+        kind: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+        json: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+    };
+    run(): Promise<void>;
+}

package/dist/commands/store/gallery-admissions/show.js

@@ -0,0 +1,55 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const core_1 = require("@oclif/core");
+const data_provider_1 = require("@skrr-ai/data-provider");
+const base_command_1 = require("../../../base-command");
+class StoreGalleryAdmissionsShow extends base_command_1.BaseCommand {
+    static description = 'Inspect a frozen gallery review and its image digests';
+    static args = { id: core_1.Args.string({ description: 'Gallery review request ID', required: true, ignoreStdin: true }) };
+    static flags = {
+        kind: core_1.Flags.string({ options: ['action', 'service'], required: true }),
+        json: core_1.Flags.boolean({ description: 'Output as JSON' }),
+    };
+    async run() {
+        this.requireAuth();
+        const { args, flags } = await this.parse(StoreGalleryAdmissionsShow);
+        try {
+            const result = await data_provider_1.dataService.getStoreGalleryAdmission(flags.kind, args.id);
+            if (flags.json) {
+                this.log(JSON.stringify(result, null, 2));
+                return;
+            }
+            const r = result.review;
+            this.log(`${r.entityType}\t${r.id}\t${r.entityId}\t${r.status}`);
+            this.log(`Revision: ${r.revision}\nDigest: ${r.digest}`);
+            // Service reviews include frozen listing context. Show the context that
+            // belongs to this submission, not the mutable current listing, so the
+            // reviewer can judge the images against what was actually submitted.
+            if (r.listing) {
+                this.log(`Title: ${r.listing.title}`);
+                if (r.listing.description)
+                    this.log(`Description: ${r.listing.description}`);
+                this.log(`Price: ${r.listing.price}`);
+            }
+            if (r.artifactVersionId)
+                this.log(`Artifact version: ${r.artifactVersionId}`);
+            if (r.offerVersionId)
+                this.log(`Offer version: ${r.offerVersionId}`);
+            if (r.note)
+                this.log(`Decision note: ${r.note}`);
+            if (!r.images?.length)
+                this.log(r.status === 'pending' || r.status === 'pending_review'
+                    ? 'No images in this revision. Approval removes the current gallery.'
+                    : 'No images in this revision.');
+            for (const image of r.images || []) {
+                this.log(`Image ${image.id}\tsha256:${image.sha256}${image.mimeType ? `\t${image.mimeType}` : ''}${image.alt ? `\t${image.alt}` : ''}`);
+            }
+            if (r.images?.length)
+                this.log('Use store gallery-admissions preview with an image ID and --output to inspect its bytes.');
+        }
+        catch (err) {
+            this.handleApiError(err);
+        }
+    }
+}
+exports.default = StoreGalleryAdmissionsShow;

package/dist/commands/tasks/list.js

@@ -752,10 +752,18 @@ class TasksList extends base_command_1.BaseCommand {
         }
         const r = response;
         const items = r?.data ?? [];
+        if (flags.q && (r?.degraded || r?.incomplete || r?.truncated || r?.search?.candidates_may_be_truncated || r?.search?.comment_search_incomplete)) {
+            this.warn('Search may be incomplete. Inspect --json diagnostics.');
+        }
+        if (flags.q && r?.search?.semantics === 'case_insensitive_substring') {
+            this.warn('Search is using literal database matching; typo tolerance may be unavailable.');
+        }
         if (items.length === 0) {
             this.log(emptyTasksMessage(flags, this.config.bin));
             for (const line of (0, list_output_1.warningLines)(prefixWarnings))
                 this.log(line);
+            if (r?.next_cursor)
+                this.log(`Next page: --cursor ${r.next_cursor}`);
             return;
         }
         const rows = items.map((t) => {

package/dist/commands/tasks/search.d.ts

@@ -0,0 +1 @@
+export { default } from '../search/tasks';

package/dist/commands/tasks/search.js

@@ -0,0 +1,9 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.default = void 0;
+// Both spellings share one implementation and result contract.
+var tasks_1 = require("../search/tasks");
+Object.defineProperty(exports, "default", { enumerable: true, get: function () { return __importDefault(tasks_1).default; } });

package/dist/generated/agent-guides.json

@@ -691,7 +691,7 @@
                         "id": "delivery-statuses",
                         "title": "Delivery statuses",
                         "readWhen": "a send answered and you need to know what its status means",
-                        "tokens": 723,
+                        "tokens": 726,
                         "aliases": [],
                         "explains": [
                             "agent_not_authorized_for_session",
@@ -709,7 +709,7 @@
                 ]
             }
         ],
-        "hash": "dbdf1cf8629e980d7946574d0fb3b06dedc0a96a77c89d016f653b01eb6a8d9a",
+        "hash": "da48eab97c0c8b0102894a1256266cd67df3611313caec27ffff1ef2c2ec87ae",
         "tokens": 544
     },
     "routedIndex": {
@@ -2027,7 +2027,7 @@
             "routed": false,
             "aliases": [],
             "body": "## Concept model\n\nAn **Agent Update** is a deliberate owner-facing message. It is conversation, not\nrecord: what durably changed belongs to the work's own records, and the message\npoints at it.\n\n## Agent Updates\n\nProactively message the owner whenever it would improve their ability to steer the work, understand\na meaningful change, or stay confidently involved. Adapt to the task, uncertainty and stakes, the\nuser's engagement, what you have already communicated, and any per-agent style direction. Do not\nfollow a fixed schedule or manufacture status chatter.\n\n- Choose the semantic kind: `milestone` for a meaningful completed stage, `status` for a\n  useful non-blocking checkpoint, `decision` for a concrete choice, `blocker` when user action is needed to\n  continue, and one `result` for the terminal outcome (including failure).\n- Declare the attention intent with `--attention ambient|notify|interrupt`: `ambient` stays in\n  the durable timeline by default, `notify` is worth seeing soon, and `interrupt` is reserved for\n  work that is blocked or genuinely time-sensitive. The system and the user choose delivery channels and native\n  presentation; attention never directly selects an Android channel, iOS interruption level, sound, or critical\n  alert, and never bypasses notification preferences, quiet hours, Focus, or rate limits.\n- Say what is newly true and what it changes for the work. Include the next step, decision, or\n  uncertainty when it would help the user; do not force every message into a fixed template.\n- Write like a capable teammate giving a busy owner a real, in-the-moment briefing — not like a\n  system log, a customer-service script, or a task template. Open on the thing itself, never on a\n  subject line (\"Status on the refactor:\", \"Quick update:\"). In the user's language, lead with the\n  fresh fact, decision, or risk; then make clear why it matters and what happens next. Where the\n  evidence is available, ground the update in one or two useful specifics: the affected thing, the\n  evidence, the timing, or the trade-off.\n  Use plain, varied sentences and only the confidence the evidence earns. Keep them short: where a\n  dash would staple two clauses into one, use two sentences instead. Be warm and direct, but\n  never manufacture familiarity, emotion, certainty, or colour that is not true. Avoid AI-shaped\n  filler such as \"I am pleased to report\", \"completed / in progress / next step\" recaps,\n  \"I will continue to monitor\", \"feel free to let me know\", ceremonial thanks, and vague claims\n  such as \"the optimization is complete\". Say the thing instead: \"The migration is in; the\n  slowest query fell from 2.8s to 420ms. I am running the full regression now and will flag any\n  breakage before merge.\" Treat that as a standard of specificity, not a rigid script. Do not make\n  a message longer merely to sound human.\n- Task context and card presentation are separate. A managed session's task context is derived\n  server-side, but a message shows no Task Card unless you explicitly choose `--attach-task-card`\n  (or `presentation.taskCard: true`). Use a card when it materially helps the user open or follow the\n  live task; omit it for ordinary conversational updates.\n- In a hand-started session, use `skrr agent message context --agent <id>` when recent\n  updates, read state, or a user's reply would help your judgment. It supplies observations, not a\n  schedule or a command to send.\n- In a skrr-managed session, do not pass task, run, or session identity: skrr derives it.\n  In a hand-started session, add `--task <task-id>` only when you know the correct task; it is\n  declared context.\n- Prefer one message for one thought. For a conversational owner DM — such as a pitch, invitation,\n  question, or progress update — when a draft exceeds roughly 320 characters or contains two independent thoughts,\n  normally use a 2–4 message human-scale sequence with `--part \"<next thought>\"` and one explicit semantic\n  `--idempotency-key`. Do not fragment a single thought merely to send more messages, and never split text\n  mechanically: choose the semantic boundaries yourself. If one part does not reach the user, the remaining parts\n  are deliberately not sent — the user would otherwise read your thoughts out of order.\n- An idempotency key names ONE update for this agent permanently, so make it specific to this run\n  (for example `<task-id>:verify-complete`). Reuse it only to retry that same update: reused with\n  the same text it is dropped as a duplicate, and with different text it is rejected.\n- A non-`delivered` status (`held`, `approval_required`, `duplicate`, `dropped`) is a policy\n  outcome, not an error. It is never a reason to bypass this command with a direct DM or Slack\n  call — this is the only sanctioned agent-to-user path.\n\n## Authority\n\n| Actor | May do | Only a person may do |\n| --- | --- | --- |\n| Agent | Decide to message; declare kind, attention intent, task context and a task card | Choose the delivery channel or native presentation; release a held or approval-gated intent |\n| Person | Everything an Agent may do | — |\n\n## Live state\n\n- `skrr agent message context --agent <id>` — recent updates, read state and owner engagement, as observations for the decision above.\n\n## Related guides\n\n- `tasks` — the records an update points at, and the durable version of what changed.\n- `agents` — which Agent a session speaks as; its `identity` section owns the agent-context refusals.",
-            "hash": "40d317231d49b148679d13df5c33673a8bcdafd8053602f3e050e618315f78c9",
+            "hash": "2ca0bfacfd5ac8edcfe5e36ca344d8698f02874e2786646c4f03bea28ca623d9",
             "tokens": 1359,
             "sections": [
                 {
@@ -2073,7 +2073,7 @@
                     "id": "delivery-statuses",
                     "title": "Delivery statuses",
                     "readWhen": "a send answered and you need to know what its status means",
-                    "tokens": 723,
+                    "tokens": 726,
                     "aliases": [],
                     "explains": [
                         "agent_not_authorized_for_session",
@@ -8053,7 +8053,7 @@
                     "id": "delivery-statuses",
                     "title": "Delivery statuses",
                     "readWhen": "a send answered and you need to know what its status means",
-                    "tokens": 723,
+                    "tokens": 726,
                     "aliases": [],
                     "explains": [
                         "agent_not_authorized_for_session",
@@ -8130,7 +8130,7 @@
                     "id": "delivery-statuses",
                     "title": "Delivery statuses",
                     "readWhen": "a send answered and you need to know what its status means",
-                    "tokens": 723,
+                    "tokens": 726,
                     "aliases": [],
                     "explains": [
                         "agent_not_authorized_for_session",
@@ -8206,7 +8206,7 @@
                     "id": "delivery-statuses",
                     "title": "Delivery statuses",
                     "readWhen": "a send answered and you need to know what its status means",
-                    "tokens": 723,
+                    "tokens": 726,
                     "aliases": [],
                     "explains": [
                         "agent_not_authorized_for_session",
@@ -8244,9 +8244,9 @@
                 "delivery_mode_ask_first",
                 "delivery_policy_unavailable"
             ],
-            "body": "Read this when a send answered and you need to know what its status means.\n\n| Status | Meaning |\n| --- | --- |\n| `submitted` | recorded, not yet dispatched — still owned by the platform |\n| `held` | policy withheld it for now; it may still be delivered — `reason` says why |\n| `re_evaluation` | being re-checked against policy — still owned by the platform |\n| `approval_required` | waiting on the person’s approval; `initiativeId` names what they act on |\n| `authorized` | cleared for dispatch — still owned by the platform |\n| `dispatching` | being delivered right now |\n| `delivered` | reached the user |\n| `transport_failed` | delivery errored; `retryable` and `retryAfter` say whether to try again |\n| `dropped` | will not be delivered — read `reason` and change the request before resending |\n| `expired` | outlived its window before delivery |\n| `cancelled` | withdrawn before delivery |\n| `duplicate` | the idempotency key already carried this identical update — the earlier send stands |\n| `accepted` | an earlier send already delivered this update |\n| `failed` | the transport could not deliver; `retryable` says whether a retry can help |\n| `queued_offline` | held by the local daemon until it can reach the platform — still in flight |\n| `refused` | a guard declined the send; `reason` names it |\n| `unknown` | the transport could not certify the outcome |\n\nA `held`, `approval_required` or `dropped` result carries `reason`; an approval\ncarries `initiativeId` for the person to act on; a transport failure carries\n`retryable` and `retryAfter`. The exit code is `0` while the platform still owns\nthe outcome — `3` is retryable non-delivery, `4` terminal.\n\n## Refusals\n\n| Code | Cause | Fix |\n| --- | --- | --- |\n| `agent_not_authorized_for_session` | The send names an agent the session is not bound to | Drop `--agent`, or send as the agent the session runs |\n| `session_claim_required` | No session or claim authorizes the send | Run inside the managed session, or sign in and send as the person |\n| `context_task_not_authorized_for_session` | The declared `--task` is not this session's | Omit `--task`; a managed session derives it |\n| `task_context_forbidden` | The declared task is not accessible to the sender | Omit `--task`, or name a task you can see |\n| `main_chat_disabled` | The owner's main chat is off | Tell the person; do not route around it |\n| `destination_not_allowed` | Workspace policy excludes this destination | Send to an allowed destination, or ask the person to change policy |\n| `delivery_mode_off` | The owner's delivery mode delivers nothing | Do not resend; say it in the conversation instead |\n| `delivery_mode_suggestions_only` | Policy keeps the update as a suggestion | Leave it — the person sees it in-product |\n| `delivery_mode_ask_first` | Policy wants the person's approval first | Wait for the approval; do not resend |\n| `delivery_policy_unavailable` | Policy could not be read, so the send failed closed | Retry once; if it repeats, tell the person |",
-            "hash": "9275d762097f417bca3fc2f5b8d643036cd818af68438ed72cd6374cb134df99",
-            "tokens": 723,
+            "body": "Read this when a send answered and you need to know what its status means.\n\n| Status | Meaning |\n| --- | --- |\n| `submitted` | recorded, not yet dispatched — still owned by the platform |\n| `held` | policy withheld it for now; it may still be delivered — `reason` says why |\n| `re_evaluation` | being re-checked against policy — still owned by the platform |\n| `approval_required` | waiting on the person’s approval; `initiativeId` names what they act on |\n| `authorized` | cleared for dispatch — still owned by the platform |\n| `dispatching` | being delivered right now |\n| `delivered` | reached the user |\n| `transport_failed` | delivery errored; `retryable` and `retryAfter` say whether to try again |\n| `dropped` | will not be delivered — read `reason` and change the request before resending |\n| `expired` | outlived its window before delivery |\n| `cancelled` | withdrawn before delivery |\n| `duplicate` | the idempotency key already carried this identical update — the earlier send stands |\n| `accepted` | an earlier send already delivered this update |\n| `failed` | the transport could not deliver; `retryable` says whether a retry can help |\n| `queued_offline` | held by the local daemon until it can reach the platform — still in flight |\n| `refused` | a guard declined the send; `reason` names it |\n| `unknown` | the transport could not certify the outcome |\n\nA `held`, `approval_required` or `dropped` result carries `reason`; an approval\ncarries `initiativeId` for the person to act on; a transport failure carries\n`retryable` and `retryAfter`. The exit code is `0` while the platform still owns\nthe outcome — `3` is retryable non-delivery, `4` terminal.\n\n## Refusals\n\n| Code | Cause | Fix |\n| --- | --- | --- |\n| `agent_not_authorized_for_session` | The send names an agent the session is not bound to | Drop `--agent`, or send as the agent the session runs |\n| `session_claim_required` | No session or claim authorizes the send | Run inside the managed session, or sign in and send as the person |\n| `context_task_not_authorized_for_session` | The declared `--task` is not this session's | Omit `--task`; a managed session derives it |\n| `task_context_forbidden` | The declared task was not found or is not accessible in this workspace | Check the task and workspace, or omit `--task` |\n| `main_chat_disabled` | The owner's main chat is off | Tell the person; do not route around it |\n| `destination_not_allowed` | Workspace policy excludes this destination | Send to an allowed destination, or ask the person to change policy |\n| `delivery_mode_off` | The owner's delivery mode delivers nothing | Do not resend; say it in the conversation instead |\n| `delivery_mode_suggestions_only` | Policy keeps the update as a suggestion | Leave it — the person sees it in-product |\n| `delivery_mode_ask_first` | Policy wants the person's approval first | Wait for the approval; do not resend |\n| `delivery_policy_unavailable` | Policy could not be read, so the send failed closed | Retry once; if it repeats, tell the person |",
+            "hash": "ccd29be3e464db42898f221deca9c8f831c1929d0370d05a0c333def57172a3d",
+            "tokens": 726,
             "sections": [
                 {
                     "id": "writing",
@@ -8291,7 +8291,7 @@
                     "id": "delivery-statuses",
                     "title": "Delivery statuses",
                     "readWhen": "a send answered and you need to know what its status means",
-                    "tokens": 723,
+                    "tokens": 726,
                     "aliases": [],
                     "explains": [
                         "agent_not_authorized_for_session",

package/dist/lib/api-error-reason.d.ts

@@ -0,0 +1,2 @@
+/** The reason-only refusal used by session-scoped API routes. */
+export declare function reasonOnlyCode(body: unknown): string | undefined;

package/dist/lib/api-error-reason.js

@@ -0,0 +1,14 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.reasonOnlyCode = reasonOnlyCode;
+/** The reason-only refusal used by session-scoped API routes. */
+function reasonOnlyCode(body) {
+    if (!body || typeof body !== 'object' || Array.isArray(body))
+        return undefined;
+    const value = body;
+    if (value.ok !== false || typeof value.reason !== 'string')
+        return undefined;
+    const reason = value.reason.trim();
+    return reason.length <= 160 && /^[A-Za-z][A-Za-z0-9]*(?:[_-][A-Za-z0-9]+)+$/.test(reason)
+        ? reason : undefined;
+}

package/dist/lib/api-fetch.js

@@ -31,6 +31,7 @@ exports.hasHumanSession = hasHumanSession;
  * switch to `dataService.*` without touching the wire contract.
  */
 const config_1 = require("./config");
+const api_error_reason_1 = require("./api-error-reason");
 // ADD-CLI8 — `readFromBackend` is only used inside `hasHumanSession()`
 // (see below), NOT by `apiFetch`. Kept as a module-scope import
 // rather than inlined into `hasHumanSession` because (a) ES modules
@@ -282,6 +283,8 @@ async function apiFetch(pathOrUrl, opts = {}) {
                 const parsed = JSON.parse(text);
                 if (typeof parsed.code === 'string')
                     code = parsed.code;
+                else
+                    code = (0, api_error_reason_1.reasonOnlyCode)(parsed);
             }
             catch {
                 /* non-JSON body */

package/dist/lib/command-miss.js

@@ -105,6 +105,7 @@ function describeTaskCommandRedirect(config, parts, typedWords) {
     if (lower[0] === 'tasks' &&
         lower[1] === 'search' &&
         hasTopic(config, 'tasks') &&
+        config.findCommand('tasks:search') === undefined &&
         config.findCommand(exports.TASK_COMMAND_MISS_TARGETS.search) !== undefined) {
         const query = typedWords.slice(2).join(' ').trim();
         const target = `${config.bin} tasks list --q ${query ? JSON.stringify(query) : '<query>'}`;

package/dist/lib/search-display.d.ts

@@ -0,0 +1,7 @@
+/** Keep untrusted search content from controlling or reordering a terminal. */
+export declare function searchDisplayText(value: string): string;
+/** Cursor values stay opaque, but must be safe to print and copy into a shell. */
+export declare function isPrintableSearchCursor(value: string): boolean;
+export declare function shellSearchCursor(value: string): string;
+/** A missing or malformed list is an error, not proof of zero matches. */
+export declare function isSearchListPage(value: unknown): boolean;

package/dist/lib/search-display.js

@@ -0,0 +1,31 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.searchDisplayText = searchDisplayText;
+exports.isPrintableSearchCursor = isPrintableSearchCursor;
+exports.shellSearchCursor = shellSearchCursor;
+exports.isSearchListPage = isSearchListPage;
+const node_util_1 = require("node:util");
+/** Keep untrusted search content from controlling or reordering a terminal. */
+function searchDisplayText(value) {
+    return (0, node_util_1.stripVTControlCharacters)(value)
+        .replace(/[\u0000-\u001f\u007f-\u009f\u202a-\u202e\u2066-\u2069]/g, ' ')
+        .replace(/\s+/g, ' ')
+        .trim();
+}
+/** Cursor values stay opaque, but must be safe to print and copy into a shell. */
+function isPrintableSearchCursor(value) {
+    return value.length > 0 && !/[\u0000-\u001f\u007f-\u009f\u202a-\u202e\u2066-\u2069]/.test(value);
+}
+function shellSearchCursor(value) {
+    return /^[A-Za-z0-9_@%+=:,./-]+$/.test(value) ? value : `'${value.replace(/'/g, `'\\''`)}'`;
+}
+/** A missing or malformed list is an error, not proof of zero matches. */
+function isSearchListPage(value) {
+    if (!value || typeof value !== 'object' || Array.isArray(value))
+        return false;
+    const page = value;
+    return Array.isArray(page.data) && page.data.every((row) => row && typeof row === 'object' && !Array.isArray(row)) &&
+        (page.has_more === undefined || typeof page.has_more === 'boolean') &&
+        (page.next_cursor === undefined || page.next_cursor === null ||
+            (typeof page.next_cursor === 'string' && isPrintableSearchCursor(page.next_cursor)));
+}

package/dist/lib/skill-store-pagination.d.ts

@@ -0,0 +1,8 @@
+/** The Store can return an empty page while more candidates remain to inspect. */
+export declare function skillStoreSearchIncomplete(response: unknown): boolean;
+export declare function skillStorePageState(response: unknown, cursor?: string): {
+    hasMore: boolean;
+    nextCursor?: string;
+    invalidCursor: boolean;
+};
+export declare function reportSkillStorePage(response: unknown, cursor: string | undefined, log: (message: string) => void, warn: (message: string) => void): void;

package/dist/lib/skill-store-pagination.js

@@ -0,0 +1,35 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.skillStoreSearchIncomplete = skillStoreSearchIncomplete;
+exports.skillStorePageState = skillStorePageState;
+exports.reportSkillStorePage = reportSkillStorePage;
+/** The Store can return an empty page while more candidates remain to inspect. */
+function skillStoreSearchIncomplete(response) {
+    if (!response || Array.isArray(response) || typeof response !== 'object')
+        return false;
+    const page = response;
+    return page.partial === true || page.semanticUnavailable === true;
+}
+function skillStorePageState(response, cursor) {
+    if (!response || Array.isArray(response) || typeof response !== 'object') {
+        return { hasMore: false, invalidCursor: false };
+    }
+    const page = response;
+    if (page.has_more !== true)
+        return { hasMore: false, invalidCursor: false };
+    // Server cursors are opaque base64 tokens. Do not print arbitrary terminal
+    // control characters from a malformed response, or suggest a cursor loop.
+    const next = typeof page.after === 'string' && /^[A-Za-z0-9_+/=-]{1,4096}$/.test(page.after)
+        ? page.after
+        : undefined;
+    if (!next || next === cursor)
+        return { hasMore: true, invalidCursor: true };
+    return { hasMore: true, nextCursor: next, invalidCursor: false };
+}
+function reportSkillStorePage(response, cursor, log, warn) {
+    const page = skillStorePageState(response, cursor);
+    if (page.nextCursor)
+        log(`Next page: --cursor ${page.nextCursor}`);
+    else if (page.invalidCursor)
+        warn('More results may exist, but the server did not provide a usable next cursor.');
+}

package/dist/node_modules/@skrr-ai/auth-core/dist/cjs/credentialEnvelopeBridge.d.ts

@@ -54,6 +54,16 @@ export declare function splitKeyConvergencePolicy(): {
     converge: boolean;
     reason: 'daemon_key_pinned' | 'daemon_key_refused';
 };
+/** Open only the existing wrapped DEK. Recovery must never enroll a new key,
+ * consolidate profile paths or replace an unreadable envelope. A caller gets
+ * an error if the existing file or the platform's read-only unwrap is unsafe
+ * or unavailable. This intentionally does not load retired keys; credentials
+ * that require one remain unavailable rather than triggering a migration. */
+export declare function initExistingCredEnvelope(profile: string): Promise<void>;
+/** First enrollment for a reserved desktop background profile. Existing or
+ * ambiguous state is opened read-only or refused; it is never re-enrolled.
+ * The caller must validate the reservation before calling this function. */
+export declare function initNewIndependentCredEnvelope(profile: string): Promise<void>;
 /**
  * Initialize the envelope path. Idempotent — second call when state is
  * non-uninit returns immediately.