@skrr-ai/cli 0.1.42 → 0.1.44

package/dist/node_modules/@skrr-ai/auth-core/dist/cjs/firstPartyHarnessChannels.js

@@ -28,14 +28,13 @@
  * file spells the product.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.SKY_CODE_FEED_BASE_ENV = exports.DEFAULT_SKY_CODE_FEED_BASE = exports.skyCodeChannelPrefix = exports.resolveSkyCodeChannel = exports.isSkyCodeChannel = exports.SKY_CODE_MANIFEST_FILE = exports.SKY_CODE_CHANNEL_ENV = exports.DEFAULT_SKY_CODE_CHANNEL = exports.SKY_CODE_CHANNELS = exports.DEFAULT_FIRST_PARTY_HARNESS_CHANNEL = exports.FIRST_PARTY_HARNESS_CHANNELS = void 0;
+exports.DEFAULT_FIRST_PARTY_HARNESS_CHANNEL = exports.FIRST_PARTY_HARNESS_CHANNELS = void 0;
 exports.isFirstPartyHarnessChannel = isFirstPartyHarnessChannel;
 exports.resolveFirstPartyHarnessChannel = resolveFirstPartyHarnessChannel;
 exports.firstPartyHarnessChannelPrefix = firstPartyHarnessChannelPrefix;
 exports.resolveChannelManifestUrl = resolveChannelManifestUrl;
 exports.firstPartyHarnessFeedBase = firstPartyHarnessFeedBase;
 exports.firstPartyHarnessFeedCandidates = firstPartyHarnessFeedCandidates;
-exports.skyCodeFeedBase = skyCodeFeedBase;
 const firstPartyHarness_js_1 = require("./firstPartyHarness.js");
 /** Channels in promotion order. Index order IS the promotion order. */
 exports.FIRST_PARTY_HARNESS_CHANNELS = ['internal', 'canary', 'beta', 'stable'];
@@ -126,61 +125,36 @@ function firstPartyHarnessFeedBase(env = process.env) {
  * Every place a manifest may be published, in the order an installer should
  * try them: the canonical spelling first, then each alias.
  *
- * Why a list: publishing writes every spelling, but an installer can ship before
- * the first release that does, and a machine can point at a feed published by
- * an older pipeline. An installer that asked only for the canonical path would
- * then find NOTHING and report "no release" on a feed that has one. Trying the
- * aliases on not-found closes that window in both directions without anyone
- * having to deploy in a particular order.
+ * Why a list: publishing writes every accepted spelling, but an installer can
+ * ship before the first release that does, and a machine can point at a feed
+ * published by an older pipeline. An installer that asked only for the canonical
+ * path would then find NOTHING and report "no release" on a feed that has one.
+ * Trying the aliases on not-found closes that window in both directions without
+ * anyone having to deploy in a particular order.
+ *
+ * WHICH spellings depends on what is being read, and the difference is the
+ * point:
+ *
+ *   - a CHANNEL pointer (`pinnedRelease` false) is current state. Only the
+ *     accepted spellings are tried: a former spelling's pointer stopped moving
+ *     when publishing stopped writing it, so falling back to one would install
+ *     whatever that channel named on the day of contract — a silent downgrade.
+ *   - a PINNED release (`pinnedRelease` true) is an immutable artifact. Former
+ *     spellings are tried too: a release published before the canonical prefix
+ *     existed lives only under the old one, and its signed bytes — artifact URLs
+ *     included — are the same wherever they are found.
  *
  * An operator override keeps its base and still tries each manifest filename,
  * since a dev feed staged by an older script names the file the old way.
  */
-function firstPartyHarnessFeedCandidates(env = process.env) {
+function firstPartyHarnessFeedCandidates(env = process.env, options = {}) {
     const override = (0, firstPartyHarness_js_1.readFirstPartyHarnessEnv)(env, 'updateFeedBase').value?.replace(/\/+$/, '');
-    return (0, firstPartyHarness_js_1.firstPartyHarnessSpellings)().map((provider) => ({
+    const spellings = options.pinnedRelease
+        ? (0, firstPartyHarness_js_1.firstPartyHarnessArtifactSpellings)()
+        : (0, firstPartyHarness_js_1.firstPartyHarnessSpellings)();
+    return spellings.map((provider) => ({
         base: override || (0, firstPartyHarness_js_1.firstPartyHarnessDefaultFeedBase)(provider),
         manifestFilename: (0, firstPartyHarness_js_1.firstPartyHarnessManifestFile)(provider),
         provider,
     }));
 }
-/* ── Deprecated names ───────────────────────────────────────────────────────
- *
- * `@skrr-ai/auth-core` is PUBLISHED, and the released CLI resolves it with a
- * caret range. An installed CLI that picks up this version must still find the
- * names it was compiled against, or it crashes at import. These aliases leave in
- * the contract phase (OSK-8663), with a minor-version bump — never a patch.
- *
- * The ones that name a feed name the LEGACY one, the spelling a caller compiled
- * against them was built for — the retired alias, not `wireProvider`, which has
- * moved to canonical.
- */
-/** The spelling the deprecated names were written for. */
-const LEGACY_SPELLING = firstPartyHarness_js_1.FIRST_PARTY_HARNESS.aliases[0] ?? firstPartyHarness_js_1.FIRST_PARTY_HARNESS.provider;
-/** @deprecated Use `FIRST_PARTY_HARNESS_CHANNELS`. */
-exports.SKY_CODE_CHANNELS = exports.FIRST_PARTY_HARNESS_CHANNELS;
-/** @deprecated Use `DEFAULT_FIRST_PARTY_HARNESS_CHANNEL`. */
-exports.DEFAULT_SKY_CODE_CHANNEL = exports.DEFAULT_FIRST_PARTY_HARNESS_CHANNEL;
-/** @deprecated Read the channel with `resolveFirstPartyHarnessChannel`; the variable has a neutral name now. */
-exports.SKY_CODE_CHANNEL_ENV = firstPartyHarness_js_1.FIRST_PARTY_HARNESS_ENV.channel.legacy[0];
-/** @deprecated Use `firstPartyHarnessManifestFile()`. Names the legacy file. */
-exports.SKY_CODE_MANIFEST_FILE = (0, firstPartyHarness_js_1.firstPartyHarnessManifestFile)(LEGACY_SPELLING);
-/** @deprecated Use `isFirstPartyHarnessChannel`. */
-exports.isSkyCodeChannel = isFirstPartyHarnessChannel;
-/** @deprecated Use `resolveFirstPartyHarnessChannel`. */
-exports.resolveSkyCodeChannel = resolveFirstPartyHarnessChannel;
-/** @deprecated Use `firstPartyHarnessChannelPrefix`. */
-exports.skyCodeChannelPrefix = firstPartyHarnessChannelPrefix;
-/** @deprecated Use `firstPartyHarnessDefaultFeedBase()`. Names the legacy feed. */
-exports.DEFAULT_SKY_CODE_FEED_BASE = (0, firstPartyHarness_js_1.firstPartyHarnessDefaultFeedBase)(LEGACY_SPELLING);
-/** @deprecated Read the feed with `firstPartyHarnessFeedBase`; the variable has a neutral name now. */
-exports.SKY_CODE_FEED_BASE_ENV = firstPartyHarness_js_1.FIRST_PARTY_HARNESS_ENV.updateFeedBase.legacy[0];
-/**
- * @deprecated Use `firstPartyHarnessFeedCandidates`. Keeps the LEGACY feed as its
- * default, because that is the only feed a caller compiled against this name knows
- * how to read.
- */
-function skyCodeFeedBase(env = process.env) {
-    const override = (0, firstPartyHarness_js_1.readFirstPartyHarnessEnv)(env, 'updateFeedBase').value;
-    return (override || (0, firstPartyHarness_js_1.firstPartyHarnessDefaultFeedBase)(LEGACY_SPELLING)).replace(/\/+$/, '');
-}

package/dist/node_modules/@skrr-ai/auth-core/dist/cjs/firstPartyHarnessHome.d.ts

@@ -20,9 +20,15 @@
  *      leave the legacy name as a relative symlink. (No legacy app name exists
  *      yet; this step is what an engine-namespace rename will use.)
  *   2. The BINARY follows the provider. Inside `<home>/bin`, if the canonical
- *      binary does not exist and an alias binary is a real file, rename it and
- *      each companion (rollback copy, provenance sidecar), leaving a relative
- *      symlink at every old name.
+ *      binary does not exist and a binary under an older spelling is a real
+ *      file, rename it and each companion (rollback copy, provenance sidecar),
+ *      leaving a relative symlink at every old name.
+ *
+ * "Older spelling" means every ARTIFACT spelling that is not canonical — the
+ * aliases AND the former spellings (`firstPartyHarnessArtifactSpellings`). An
+ * installed binary is an artifact: a machine that never ran a post-rename client
+ * still has its engine under the old name after that name stops being accepted
+ * anywhere, and it must still be moved rather than reinstalled beside.
  *
  * The two follow different names on purpose: the home is shared with the
  * engine, which reads its config and managed `AGENTS.md` from it, so it can only
@@ -73,7 +79,9 @@ export interface FirstPartyHarnessHomeFs {
  * Move a legacy engine home and binary onto the canonical names. See the file
  * header for the exact contract. Returns what it did; never throws.
  *
- * Inside `<home>/bin` it resolves the three layouts a rename can leave:
+ * Inside `<home>/bin` it resolves the three layouts a rename can leave. An
+ * "alias" below is any non-canonical artifact spelling — an accepted alias or a
+ * former spelling alike, since the file on disk does not know which it is now:
  *
  *   - canonical ABSENT, an alias is a real file — the ordinary legacy install.
  *     The alias moves to canonical and a link is left at its name.
@@ -96,13 +104,17 @@ export declare function migrateFirstPartyHarnessHome(options?: {
     fs?: FirstPartyHarnessHomeFs;
 }): FirstPartyHarnessHomeMigration;
 /**
- * Leave a relative symlink at every alias name — binary and provenance sidecar —
+ * Leave a relative symlink at every older name — binary and provenance sidecar —
  * that does not exist yet, pointing at the canonical file.
  *
  * Call after installing the canonical binary. A platform CLI or daemon installed
  * before a rename resolves the legacy name; the link keeps it on the current
- * engine. It never replaces anything that exists, whether a real file (an older
- * engine someone may still run) or a link someone else placed. Never throws.
+ * engine. "Older" includes FORMER spellings, not only aliases: an installed CLI
+ * cannot be telemetry-gated the way a connected daemon can, and it does not stop
+ * existing when its spelling stops being accepted, so the link outlives the
+ * alias window (`firstPartyHarnessBinaryNames`). It never replaces anything that
+ * exists, whether a real file (an older engine someone may still run) or a link
+ * someone else placed. Never throws.
  */
 export declare function linkFirstPartyHarnessAliases(options?: {
     env?: NodeJS.ProcessEnv;

package/dist/node_modules/@skrr-ai/auth-core/dist/cjs/firstPartyHarnessHome.js

@@ -21,9 +21,15 @@
  *      leave the legacy name as a relative symlink. (No legacy app name exists
  *      yet; this step is what an engine-namespace rename will use.)
  *   2. The BINARY follows the provider. Inside `<home>/bin`, if the canonical
- *      binary does not exist and an alias binary is a real file, rename it and
- *      each companion (rollback copy, provenance sidecar), leaving a relative
- *      symlink at every old name.
+ *      binary does not exist and a binary under an older spelling is a real
+ *      file, rename it and each companion (rollback copy, provenance sidecar),
+ *      leaving a relative symlink at every old name.
+ *
+ * "Older spelling" means every ARTIFACT spelling that is not canonical — the
+ * aliases AND the former spellings (`firstPartyHarnessArtifactSpellings`). An
+ * installed binary is an artifact: a machine that never ran a post-rename client
+ * still has its engine under the old name after that name stops being accepted
+ * anywhere, and it must still be moved rather than reinstalled beside.
  *
  * The two follow different names on purpose: the home is shared with the
  * engine, which reads its config and managed `AGENTS.md` from it, so it can only
@@ -54,6 +60,10 @@ const node_fs_1 = require("node:fs");
 const node_path_1 = __importDefault(require("node:path"));
 const configRoot_js_1 = require("./configRoot.js");
 const firstPartyHarness_js_1 = require("./firstPartyHarness.js");
+/** Every artifact spelling except the canonical one, newest first. */
+function olderSpellings() {
+    return (0, firstPartyHarness_js_1.firstPartyHarnessArtifactSpellings)().filter((spelling) => spelling !== firstPartyHarness_js_1.FIRST_PARTY_HARNESS.provider);
+}
 /** Suffix of the rollback copy the installer keeps beside the binary. */
 exports.FIRST_PARTY_HARNESS_PREVIOUS_SUFFIX = '.previous';
 /**
@@ -119,7 +129,9 @@ const NEWER_THRESHOLD_MS = 1000;
  * Move a legacy engine home and binary onto the canonical names. See the file
  * header for the exact contract. Returns what it did; never throws.
  *
- * Inside `<home>/bin` it resolves the three layouts a rename can leave:
+ * Inside `<home>/bin` it resolves the three layouts a rename can leave. An
+ * "alias" below is any non-canonical artifact spelling — an accepted alias or a
+ * former spelling alike, since the file on disk does not know which it is now:
  *
  *   - canonical ABSENT, an alias is a real file — the ordinary legacy install.
  *     The alias moves to canonical and a link is left at its name.
@@ -182,7 +194,7 @@ function migrateFirstPartyHarnessHome(options = {}) {
     const canonicalName = (0, firstPartyHarness_js_1.firstPartyHarnessBinaryName)(canonical, platform);
     const canonicalBinary = node_path_1.default.join(binDir, canonicalName);
     const canonicalStat = fs.lstat(canonicalBinary);
-    const aliasNames = firstPartyHarness_js_1.FIRST_PARTY_HARNESS.aliases.map((alias) => (0, firstPartyHarness_js_1.firstPartyHarnessBinaryName)(alias, platform));
+    const aliasNames = olderSpellings().map((spelling) => (0, firstPartyHarness_js_1.firstPartyHarnessBinaryName)(spelling, platform));
     /** Move `<from><suffix>` onto `<to><suffix>` and leave a link; `replaceable` says what may sit at the target. */
     const relocate = (fromName, suffix, replaceable) => {
         const from = node_path_1.default.join(binDir, `${fromName}${suffix}`);
@@ -271,13 +283,17 @@ function migrateFirstPartyHarnessHome(options = {}) {
     return { moved, errors };
 }
 /**
- * Leave a relative symlink at every alias name — binary and provenance sidecar —
+ * Leave a relative symlink at every older name — binary and provenance sidecar —
  * that does not exist yet, pointing at the canonical file.
  *
  * Call after installing the canonical binary. A platform CLI or daemon installed
  * before a rename resolves the legacy name; the link keeps it on the current
- * engine. It never replaces anything that exists, whether a real file (an older
- * engine someone may still run) or a link someone else placed. Never throws.
+ * engine. "Older" includes FORMER spellings, not only aliases: an installed CLI
+ * cannot be telemetry-gated the way a connected daemon can, and it does not stop
+ * existing when its spelling stops being accepted, so the link outlives the
+ * alias window (`firstPartyHarnessBinaryNames`). It never replaces anything that
+ * exists, whether a real file (an older engine someone may still run) or a link
+ * someone else placed. Never throws.
  */
 function linkFirstPartyHarnessAliases(options = {}) {
     const env = options.env ?? process.env;
@@ -293,8 +309,8 @@ function linkFirstPartyHarnessAliases(options = {}) {
     if (!isRealFile(fs.lstat(node_path_1.default.join(binDir, canonicalName)))) {
         return { moved, errors };
     }
-    for (const alias of firstPartyHarness_js_1.FIRST_PARTY_HARNESS.aliases) {
-        const aliasName = (0, firstPartyHarness_js_1.firstPartyHarnessBinaryName)(alias, platform);
+    for (const spelling of olderSpellings()) {
+        const aliasName = (0, firstPartyHarness_js_1.firstPartyHarnessBinaryName)(spelling, platform);
         // Sidecar FIRST: a verifier that finds the binary link must find its record.
         for (const suffix of [exports.FIRST_PARTY_HARNESS_PROVENANCE_SUFFIX, '']) {
             const target = `${canonicalName}${suffix}`;

package/dist/node_modules/@skrr-ai/auth-core/dist/cjs/harnessTrust.d.ts

@@ -49,11 +49,15 @@ export type HarnessTrustTier = 1 | 2 | 3;
  * in `daemon/src/harness-trust.ts` beside the gates that read it — the argument
  * belongs where the enforcement is, not in a shared vocabulary module.
  *
- * It is entered under EVERY spelling (`firstPartyHarnessSpellings`), not only the
- * canonical one. A backend name reaches this lookup from a daemon of any version,
- * and an alias that fell through to the Tier 3 default would silently strip the
- * harness of the trust the owner granted it — a failure that looks like a
- * permission prompt storm, not like a rename.
+ * It is entered under every ACCEPTED spelling (`firstPartyHarnessSpellings`), not
+ * only the canonical one. During a rename a backend name reaches this lookup from
+ * a daemon of any version, and an alias that fell through to the Tier 3 default
+ * would silently strip the harness of the trust the owner granted it — a failure
+ * that looks like a permission prompt storm, not like a rename.
+ *
+ * A FORMER spelling is deliberately absent. Nothing dispatches under one after
+ * contract, and a name that is not accepted must never inherit Tier 1 by being
+ * remembered: it falls to the default like any unknown backend.
  */
 export declare const HARNESS_TIERS: Readonly<Record<string, HarnessTrustTier>>;
 /**

package/dist/node_modules/@skrr-ai/auth-core/dist/cjs/harnessTrust.js

@@ -54,11 +54,15 @@ const firstPartyHarness_js_1 = require("./firstPartyHarness.js");
  * in `daemon/src/harness-trust.ts` beside the gates that read it — the argument
  * belongs where the enforcement is, not in a shared vocabulary module.
  *
- * It is entered under EVERY spelling (`firstPartyHarnessSpellings`), not only the
- * canonical one. A backend name reaches this lookup from a daemon of any version,
- * and an alias that fell through to the Tier 3 default would silently strip the
- * harness of the trust the owner granted it — a failure that looks like a
- * permission prompt storm, not like a rename.
+ * It is entered under every ACCEPTED spelling (`firstPartyHarnessSpellings`), not
+ * only the canonical one. During a rename a backend name reaches this lookup from
+ * a daemon of any version, and an alias that fell through to the Tier 3 default
+ * would silently strip the harness of the trust the owner granted it — a failure
+ * that looks like a permission prompt storm, not like a rename.
+ *
+ * A FORMER spelling is deliberately absent. Nothing dispatches under one after
+ * contract, and a name that is not accepted must never inherit Tier 1 by being
+ * remembered: it falls to the default like any unknown backend.
  */
 exports.HARNESS_TIERS = Object.freeze({
     // --- Tier 1: vendor first-party / audited ---

package/dist/node_modules/@skrr-ai/auth-core/dist/cjs/index.d.ts

@@ -37,7 +37,7 @@ export { CONFIG_DIR_NAME, LEGACY_CONFIG_DIR_NAMES, NATIVE_ID_PREFIX, LEGACY_NATI
 export { findLegacyLocalState, describeLegacyState, type LegacyStateFinding, type LegacyStateReport, } from './legacyStatePreflight.js';
 export * from './firstPartyHarness.js';
 export { FIRST_PARTY_HARNESS_PREVIOUS_SUFFIX, FIRST_PARTY_HARNESS_PROVENANCE_SUFFIX, firstPartyHarnessBinDir, firstPartyHarnessHomeDir, firstPartyHarnessInstalledBinaryPath, linkFirstPartyHarnessAliases, migrateFirstPartyHarnessHome, type FirstPartyHarnessHomeFs, type FirstPartyHarnessHomeMigration, } from './firstPartyHarnessHome.js';
-export { DEFAULT_FIRST_PARTY_HARNESS_CHANNEL, FIRST_PARTY_HARNESS_CHANNELS, firstPartyHarnessChannelPrefix, firstPartyHarnessFeedBase, firstPartyHarnessFeedCandidates, isFirstPartyHarnessChannel, resolveChannelManifestUrl, resolveFirstPartyHarnessChannel, type FirstPartyHarnessChannel, type FirstPartyHarnessFeedCandidate, DEFAULT_SKY_CODE_CHANNEL, DEFAULT_SKY_CODE_FEED_BASE, SKY_CODE_CHANNELS, SKY_CODE_CHANNEL_ENV, SKY_CODE_MANIFEST_FILE, isSkyCodeChannel, resolveSkyCodeChannel, skyCodeChannelPrefix, skyCodeFeedBase, SKY_CODE_FEED_BASE_ENV, type SkyCodeChannel, } from './firstPartyHarnessChannels.js';
+export { DEFAULT_FIRST_PARTY_HARNESS_CHANNEL, FIRST_PARTY_HARNESS_CHANNELS, firstPartyHarnessChannelPrefix, firstPartyHarnessFeedBase, firstPartyHarnessFeedCandidates, isFirstPartyHarnessChannel, resolveChannelManifestUrl, resolveFirstPartyHarnessChannel, type FirstPartyHarnessChannel, type FirstPartyHarnessFeedCandidate, } from './firstPartyHarnessChannels.js';
 export { OVERSKY_RELEASE_PUBLIC_KEYS, type ReleaseKey } from './releaseKeys.js';
 export { MAX_SIGS, buildArtifactMessage, buildManifestMessage, getDeltaFor, verifyArtifact, verifyManifest, type DaemonVersionManifest, type DeltaDescriptor, type ManifestSignature, type PlatformArtifact, type VerifyResult, } from './releaseManifest.js';
 export { resolveConfigRoot, configRootPath, isConfigRootOverridden } from './configRoot.js';

package/dist/node_modules/@skrr-ai/auth-core/dist/cjs/index.js

@@ -25,7 +25,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.challenge = exports.generateVerifier = exports.invalidateHeadersHelperCache = exports.runHeadersHelper = exports.SENTINEL_TRIGGERING_FAILURES = exports.__resetAuthHelperFailureReasonForTest = exports.getLastAuthHelperFailureReason = exports.getDefaultHelperTtlMs = exports.invokeAuthHelper = exports.AuthHelperUnavailableError = exports.AuthHelperUntrustedError = exports.CI_TOKEN_PREFIX = exports.classifyTokenKind = exports.invalidateAuthHelperCache = exports.__resetCredentialResolverForTest = exports.CREDENTIAL_PRECEDENCE = exports.CredentialResolver = exports.__setFdReaderForTest = exports.readAuthFromFd = exports.createRefreshScheduler = exports.UNKNOWN_401_BUDGET = exports.__resetUnknown401StreaksForTest = exports.__refreshDiagnostics = exports.installLockExitHandlers = exports.clearReauthState = exports.needsReauthState = exports.persistReauthState = exports.withAuthLock = exports.revokeDaemonRefreshSession = exports.refreshDaemonToken = exports.classifyRefreshResponse = exports.EXIT_NEEDS_REAUTH = exports.formatReauthMessage = exports.handleMidStreamAuthExpiry = exports.isAuthExpiredSseEvent = exports.decodeJwtPayload = exports.decodeJwtExpiry = exports.TransientAuthFailure = exports.PermanentAuthFailure = exports.emitAuthTelemetry = exports.getAuthBinaryName = exports.getAuthKillSwitches = exports.getAuthConfigDir = exports.getAuthLogger = exports.configureAuthCore = exports.OAUTH_CLI_SCOPE = exports.isDaemonScope = exports.VALID_DAEMON_SCOPE_SET = exports.ALL_DAEMON_SCOPES = exports.SCOPES = void 0;
 exports.tokenHash = exports.publicJwkFromX = exports.normalizeHtu = exports.jwkThumbprint = exports.generateDeviceKeyPair = exports.buildDeviceProof = exports.zeroizeKekCaches = exports.WindowsKek = exports.registerZeroizeHook = exports.MacosKek = exports.LinuxKek = exports.KekUnavailableError = exports.UnavailableKek = exports.InMemoryKek = exports.getKekStrategy = exports.__setKekStrategyForTest = exports.credEnvelopeWrap = exports.credEnvelopeUnwrap = exports.credEnvelopeSerialize = exports.credSealBuffer = exports.credOpenBuffer = exports.CRED_KEY_LEN = exports.isCredEnvelopeString = exports.generateDek = exports.CRED_ENVELOPE_MAGIC = exports.credEnvelopeEncrypt = exports.credEnvelopeDeserialize = exports.credEnvelopeDecrypt = exports.buildCredentialAad = exports.isValidRecoveryCode = exports.normalizeRecoveryCode = exports.parseRecoveryCode = exports.formatRecoveryCode = exports.MAX_TTL_DAYS = exports.MIN_TTL_DAYS = exports.parseTtlDays = exports.LoginExchangeError = exports.LoginInitError = exports.loginWithLocalhost = exports.LocalCallbackMalformedError = exports.LocalCallbackDeniedError = exports.LocalCallbackStateMismatchError = exports.LocalCallbackTimeoutError = exports.LocalCallbackBindError = exports.LocalCallbackError = exports.DEFAULT_LOGIN_TIMEOUT_MS = exports.startLocalCallback = exports.verifyChallenge = exports.safeEqual = exports.generateState = void 0;
 exports.getHarnessTier = exports.HARNESS_TIERS = exports.pairUint8ArrayToBase64Url = exports.pairUint8ArrayToBase64 = exports.parsePairUrl = exports.parsePairPlaintext = exports.parsePairBundle = exports.openPairBundleBase64 = exports.generatePairKeyPair = exports.buildPairUrl = exports.buildPairAad = exports.pairBase64UrlToUint8Array = exports.pairBase64ToUint8Array = exports.assemblePairBundleBase64 = exports.PairBundleError = exports.PAIR_SECRET_LEN = exports.PAIR_PUBKEY_LEN = exports.PAIR_NONCE_LEN = exports.PAIR_BUNDLE_MAX_BASE64_LEN = exports.PAIR_AAD_MAX_LEN = exports.PAIR_AAD_PREFIX = exports.__resetCachedDaemonIdForTest = exports.legacyDaemonUuids = exports.ensureMachineDaemonId = exports.__getDeviceIdentityStateForTest = exports.__setDeviceIdentityStateForTest = exports.__enrollmentBackoffPathForTest = exports.__enrollmentMarkerPathForTest = exports.__privateKeyPathForTest = exports.__publicKeyPathForTest = exports.describeDeviceIdentityState = exports.getDevicePublicKey = exports.isDeviceIdentityActive = exports.clearEnrollmentMarker = exports.enrollWithServer = exports.signServerRequest = exports.resetDeviceIdentity = exports.initDeviceIdentity = exports.__resetShutdownGuardForTest = exports.__getCredEnvelopeStateForTest = exports.__setCredEnvelopeStateForTest = exports.__wrappedDekFilePathForTest = exports.maybeDecryptOnRead = exports.maybeEncryptForWrite = exports.describeCredEnvelopeState = exports.isCredEnvelopeActive = exports.shutdownCredEnvelope = exports.resetCredEnvelope = exports.initCredEnvelope = exports.verifyDeviceProof = void 0;
-exports.isConfigRootOverridden = exports.configRootPath = exports.resolveConfigRoot = exports.verifyManifest = exports.verifyArtifact = exports.getDeltaFor = exports.buildManifestMessage = exports.buildArtifactMessage = exports.MAX_SIGS = exports.OVERSKY_RELEASE_PUBLIC_KEYS = exports.SKY_CODE_FEED_BASE_ENV = exports.skyCodeFeedBase = exports.skyCodeChannelPrefix = exports.resolveSkyCodeChannel = exports.isSkyCodeChannel = exports.SKY_CODE_MANIFEST_FILE = exports.SKY_CODE_CHANNEL_ENV = exports.SKY_CODE_CHANNELS = exports.DEFAULT_SKY_CODE_FEED_BASE = exports.DEFAULT_SKY_CODE_CHANNEL = exports.resolveFirstPartyHarnessChannel = exports.resolveChannelManifestUrl = exports.isFirstPartyHarnessChannel = exports.firstPartyHarnessFeedCandidates = exports.firstPartyHarnessFeedBase = exports.firstPartyHarnessChannelPrefix = exports.FIRST_PARTY_HARNESS_CHANNELS = exports.DEFAULT_FIRST_PARTY_HARNESS_CHANNEL = exports.migrateFirstPartyHarnessHome = exports.linkFirstPartyHarnessAliases = exports.firstPartyHarnessInstalledBinaryPath = exports.firstPartyHarnessHomeDir = exports.firstPartyHarnessBinDir = exports.FIRST_PARTY_HARNESS_PROVENANCE_SUFFIX = exports.FIRST_PARTY_HARNESS_PREVIOUS_SUFFIX = exports.describeLegacyState = exports.findLegacyLocalState = exports.DEFAULT_BINARY_NAME = exports.LEGACY_NATIVE_ID_PREFIXES = exports.NATIVE_ID_PREFIX = exports.LEGACY_CONFIG_DIR_NAMES = exports.CONFIG_DIR_NAME = exports.SENSITIVE_ENV_PREFIX_EXCEPTIONS = exports.SENSITIVE_ENV_NAME_TOKENS = exports.SENSITIVE_ENV_SUFFIXES = exports.SENSITIVE_ENV_PREFIXES = exports.SENSITIVE_ENV_VARS = exports.sanitizeSpawnEnv = exports.tierPermitsConfiguredAutoMode = exports.credentialPolicyForTier = void 0;
+exports.isConfigRootOverridden = exports.configRootPath = exports.resolveConfigRoot = exports.verifyManifest = exports.verifyArtifact = exports.getDeltaFor = exports.buildManifestMessage = exports.buildArtifactMessage = exports.MAX_SIGS = exports.OVERSKY_RELEASE_PUBLIC_KEYS = exports.resolveFirstPartyHarnessChannel = exports.resolveChannelManifestUrl = exports.isFirstPartyHarnessChannel = exports.firstPartyHarnessFeedCandidates = exports.firstPartyHarnessFeedBase = exports.firstPartyHarnessChannelPrefix = exports.FIRST_PARTY_HARNESS_CHANNELS = exports.DEFAULT_FIRST_PARTY_HARNESS_CHANNEL = exports.migrateFirstPartyHarnessHome = exports.linkFirstPartyHarnessAliases = exports.firstPartyHarnessInstalledBinaryPath = exports.firstPartyHarnessHomeDir = exports.firstPartyHarnessBinDir = exports.FIRST_PARTY_HARNESS_PROVENANCE_SUFFIX = exports.FIRST_PARTY_HARNESS_PREVIOUS_SUFFIX = exports.describeLegacyState = exports.findLegacyLocalState = exports.DEFAULT_BINARY_NAME = exports.LEGACY_NATIVE_ID_PREFIXES = exports.NATIVE_ID_PREFIX = exports.LEGACY_CONFIG_DIR_NAMES = exports.CONFIG_DIR_NAME = exports.SENSITIVE_ENV_PREFIX_EXCEPTIONS = exports.SENSITIVE_ENV_NAME_TOKENS = exports.SENSITIVE_ENV_SUFFIXES = exports.SENSITIVE_ENV_PREFIXES = exports.SENSITIVE_ENV_VARS = exports.sanitizeSpawnEnv = exports.tierPermitsConfiguredAutoMode = exports.credentialPolicyForTier = void 0;
 // Daemon scope vocabulary — single source of truth for non-Mongoose tiers
 // (daemon, desktop, cli). Schema-bound canonical lives in
 // `@skrr-ai/data-schemas/common/daemonScopes`; the two are kept byte-equal
@@ -341,18 +341,6 @@ Object.defineProperty(exports, "firstPartyHarnessFeedCandidates", { enumerable:
 Object.defineProperty(exports, "isFirstPartyHarnessChannel", { enumerable: true, get: function () { return firstPartyHarnessChannels_js_1.isFirstPartyHarnessChannel; } });
 Object.defineProperty(exports, "resolveChannelManifestUrl", { enumerable: true, get: function () { return firstPartyHarnessChannels_js_1.resolveChannelManifestUrl; } });
 Object.defineProperty(exports, "resolveFirstPartyHarnessChannel", { enumerable: true, get: function () { return firstPartyHarnessChannels_js_1.resolveFirstPartyHarnessChannel; } });
-// Deprecated names kept for installed CLIs that resolve this published package
-// with a caret range. Removed in the contract phase with a minor bump.
-Object.defineProperty(exports, "DEFAULT_SKY_CODE_CHANNEL", { enumerable: true, get: function () { return firstPartyHarnessChannels_js_1.DEFAULT_SKY_CODE_CHANNEL; } });
-Object.defineProperty(exports, "DEFAULT_SKY_CODE_FEED_BASE", { enumerable: true, get: function () { return firstPartyHarnessChannels_js_1.DEFAULT_SKY_CODE_FEED_BASE; } });
-Object.defineProperty(exports, "SKY_CODE_CHANNELS", { enumerable: true, get: function () { return firstPartyHarnessChannels_js_1.SKY_CODE_CHANNELS; } });
-Object.defineProperty(exports, "SKY_CODE_CHANNEL_ENV", { enumerable: true, get: function () { return firstPartyHarnessChannels_js_1.SKY_CODE_CHANNEL_ENV; } });
-Object.defineProperty(exports, "SKY_CODE_MANIFEST_FILE", { enumerable: true, get: function () { return firstPartyHarnessChannels_js_1.SKY_CODE_MANIFEST_FILE; } });
-Object.defineProperty(exports, "isSkyCodeChannel", { enumerable: true, get: function () { return firstPartyHarnessChannels_js_1.isSkyCodeChannel; } });
-Object.defineProperty(exports, "resolveSkyCodeChannel", { enumerable: true, get: function () { return firstPartyHarnessChannels_js_1.resolveSkyCodeChannel; } });
-Object.defineProperty(exports, "skyCodeChannelPrefix", { enumerable: true, get: function () { return firstPartyHarnessChannels_js_1.skyCodeChannelPrefix; } });
-Object.defineProperty(exports, "skyCodeFeedBase", { enumerable: true, get: function () { return firstPartyHarnessChannels_js_1.skyCodeFeedBase; } });
-Object.defineProperty(exports, "SKY_CODE_FEED_BASE_ENV", { enumerable: true, get: function () { return firstPartyHarnessChannels_js_1.SKY_CODE_FEED_BASE_ENV; } });
 // Daemon release trust: the pinned ed25519 keys and the canonical signature
 // messages. Shared because BOTH the daemon (self-update) and the CLI
 // (`skrr daemon install`, which runs when there is no daemon to ask) verify the

package/dist/node_modules/@skrr-ai/auth-core/dist/cjs/legacyStatePreflight.d.ts

@@ -55,4 +55,24 @@ export interface LegacyStateReport {
  * real `~` passes or fails based on who runs it.
  */
 export declare function findLegacyLocalState(home?: string): LegacyStateReport;
-export declare function describeLegacyState(report: LegacyStateReport, binaryName: string): string;
+/**
+ * Where the full procedure lives, by repository path. The refusal used to say
+ * "follow the team cutover runbook" without naming one, which stopped a person
+ * at a pointer they could not follow (OSK-6895). The steps the refusal prints
+ * are the runbook's own, so the path is for the parts a terminal message cannot
+ * carry: Linux and Windows service removal, Keychain entries, the old app.
+ */
+export declare const LEGACY_CUTOVER_RUNBOOK = "docs/runbooks/skrr-cutover-dev-machine.md";
+/**
+ * The message shown when preflight refuses.
+ *
+ * Written for someone who has just been stopped and wants to know why and what
+ * to do — so it names the exact paths, says explicitly that nothing was touched,
+ * and prints the cutover as commands to run rather than a pointer to follow. It
+ * does NOT offer a `--force`: the operator's next step is the backup, and a flag
+ * that skips a safety check is the flag everyone learns to paste.
+ *
+ * `command` is what the operator re-runs to install — `skrrd` when the runtime
+ * refused, `skrr daemon` when the CLI refused before fetching one.
+ */
+export declare function describeLegacyState(report: LegacyStateReport, command: string, platform?: NodeJS.Platform): string;

package/dist/node_modules/@skrr-ai/auth-core/dist/cjs/legacyStatePreflight.js

@@ -3,6 +3,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.LEGACY_CUTOVER_RUNBOOK = void 0;
 exports.findLegacyLocalState = findLegacyLocalState;
 exports.describeLegacyState = describeLegacyState;
 const node_fs_1 = __importDefault(require("node:fs"));
@@ -50,22 +51,69 @@ function findLegacyLocalState(home = node_os_1.default.homedir()) {
     return { findings, hasLegacyState: findings.length > 0 };
 }
 /**
- * The message shown when preflight refuses.
- *
- * Written for someone who has just been stopped and wants to know why and what
- * to do — so it names the exact paths, says explicitly that nothing was touched,
- * and points at the runbook rather than improvising a fix. It does NOT offer a
- * `--force`: the operator's next step is the backup the runbook specifies, and
- * a flag that skips a safety check is the flag everyone learns to paste.
- */
-/**
- * The pre-rename runtime binary. Named in the refusal above because deregistering
+ * The pre-rename runtime binary. Named in the refusal below because deregistering
  * the OLD service is the one step the NEW binary cannot do: `uninstall` resolves
  * the current profile's label (`ai.skrr.daemon.*`), and the legacy sweep is wired
  * only into the install path.
  */
 const LEGACY_BINARY_NAME = 'oversky';
-function describeLegacyState(report, binaryName) {
+/**
+ * Where the full procedure lives, by repository path. The refusal used to say
+ * "follow the team cutover runbook" without naming one, which stopped a person
+ * at a pointer they could not follow (OSK-6895). The steps the refusal prints
+ * are the runbook's own, so the path is for the parts a terminal message cannot
+ * carry: Linux and Windows service removal, Keychain entries, the old app.
+ */
+exports.LEGACY_CUTOVER_RUNBOOK = 'docs/runbooks/skrr-cutover-dev-machine.md';
+/** Credential file patterns the runbook strips from its backup (§5.5). */
+const BACKUP_CREDENTIAL_PATTERNS = ['auth.json', 'cli-auth.json', '*token*'];
+function posixQuote(value) {
+    return `'${value.split("'").join(`'\\''`)}'`;
+}
+function powershellQuote(value) {
+    return `'${value.split("'").join("''")}'`;
+}
+/**
+ * The commands for the three steps a person runs by hand, in the shell they are
+ * actually in. A POSIX `rm -rf` pasted into PowerShell is not an instruction.
+ */
+function cutoverCommands(paths, platform) {
+    if (platform === 'win32') {
+        const backupDir = '"$HOME\\skrr-cutover-backup"';
+        return {
+            backup: [
+                `New-Item -ItemType Directory -Force ${backupDir} | Out-Null`,
+                ...paths.map((p) => `Copy-Item -Recurse ${powershellQuote(p)} ${backupDir}`),
+                `Get-ChildItem -Recurse -File ${backupDir} -Include ${BACKUP_CREDENTIAL_PATTERNS.join(',')} | Remove-Item`,
+            ],
+            remove: paths.map((p) => `Remove-Item -Recurse -Force ${powershellQuote(p)}`),
+        };
+    }
+    const names = BACKUP_CREDENTIAL_PATTERNS.map((n) => `-name '${n}'`).join(' -o ');
+    return {
+        backup: [
+            'mkdir -p ~/skrr-cutover-backup && chmod 700 ~/skrr-cutover-backup',
+            `cp -a ${paths.map(posixQuote).join(' ')} ~/skrr-cutover-backup/`,
+            `find ~/skrr-cutover-backup -type f \\( ${names} \\) -delete`,
+        ],
+        remove: [`rm -rf ${paths.map(posixQuote).join(' ')}`],
+    };
+}
+/**
+ * The message shown when preflight refuses.
+ *
+ * Written for someone who has just been stopped and wants to know why and what
+ * to do — so it names the exact paths, says explicitly that nothing was touched,
+ * and prints the cutover as commands to run rather than a pointer to follow. It
+ * does NOT offer a `--force`: the operator's next step is the backup, and a flag
+ * that skips a safety check is the flag everyone learns to paste.
+ *
+ * `command` is what the operator re-runs to install — `skrrd` when the runtime
+ * refused, `skrr daemon` when the CLI refused before fetching one.
+ */
+function describeLegacyState(report, command, platform = process.platform) {
+    const paths = report.findings.map((f) => f.path);
+    const { backup, remove } = cutoverCommands(paths, platform);
     const lines = [];
     lines.push('Found state from the previous product identity on this machine:');
     lines.push('');
@@ -76,20 +124,28 @@ function describeLegacyState(report, binaryName) {
     lines.push('Installing beside it risks two runtimes holding two different service');
     lines.push('labels, each believing it owns the single-instance lock.');
     lines.push('');
-    lines.push('Nothing above has been read, copied or removed. Follow the team cutover');
-    lines.push('runbook — it takes a backup first — and then run this again:');
+    lines.push('Nothing above has been read, copied or removed, and no service was registered.');
+    lines.push('To finish the cutover:');
     lines.push('');
+    lines.push('  1. Keep a copy, with its credentials removed, in case you need an old setting:');
+    for (const line of backup)
+        lines.push(`       ${line}`);
     // The OLD binary, deliberately: it is the one that knows the old service
     // label. `<current> uninstall` resolves the CURRENT profile's label and would
     // report success while leaving the pre-rename service registered. Guarded by
     // "only if" rather than omitted, because this module inspects directories and
     // has no way to know whether that binary is still on PATH.
-    lines.push(`  ${LEGACY_BINARY_NAME} uninstall     # only if the old runtime is still installed —`);
-    lines.push(`                        # it is the one that knows the old service label`);
-    lines.push('  # then remove the directories listed above, per the runbook');
+    lines.push('  2. If the old runtime is still installed, deregister it with the old binary —');
+    lines.push('     it is the one that knows the old service label:');
+    lines.push(`       ${LEGACY_BINARY_NAME} uninstall`);
+    lines.push('  3. Remove the directories listed above:');
+    for (const line of remove)
+        lines.push(`       ${line}`);
+    lines.push('  4. Run this again:');
+    lines.push(`       ${command} install`);
     lines.push('');
-    lines.push(`Any pre-rename service still registered is swept by \`${binaryName} install\``);
-    lines.push('once those directories are gone, so re-running the install completes the');
-    lines.push('cutover either way.');
+    lines.push(`Any pre-rename service still registered is swept by \`${command} install\``);
+    lines.push('once those directories are gone, so step 4 completes the cutover either way.');
+    lines.push(`Full runbook, including Keychain entries and the old app: ${exports.LEGACY_CUTOVER_RUNBOOK}`);
     return lines.join('\n');
 }