@skrr-ai/cli 0.1.48 → 0.1.50

package/dist/node_modules/@skrr-ai/auth-core/dist/esm/types.d.ts

@@ -62,6 +62,11 @@ export interface TokenPair {
  *   - TOKEN_*         — access-token specific (server pushes 4402 close;
  *                       daemon classifies as TOKEN_INVALID/TOKEN_EXPIRED).
  *   - SESSION_REVOKED — admin/forensic revoke; whole family burned.
+ *   - DEVICE_KEY_MISMATCH — the refresh carried a device proof signed by a key
+ *                       other than the one enrolled on this daemon's row
+ *                       (server code `DEVICE_PROOF_THUMBPRINT_MISMATCH`).
+ *                       The daemon signs every retry with the same key, so
+ *                       retrying can never succeed.
  *   - UNKNOWN_401     — server returned 401 with a code we don't
  *                       recognize. Treated as permanent (better to prompt
  *                       re-auth than to loop forever) but tagged
@@ -74,7 +79,7 @@ export interface TokenPair {
  * Without this, the client `describeAuthFailure` exhaustiveness check
  * was silently broken for the non-REFRESH branches.
  */
-export type PermanentAuthReason = 'REFRESH_INVALID' | 'REFRESH_REUSED' | 'REFRESH_EXPIRED' | 'SESSION_REVOKED' | 'TOKEN_INVALID' | 'TOKEN_EXPIRED' | 'UNKNOWN_401';
+export type PermanentAuthReason = 'REFRESH_INVALID' | 'REFRESH_REUSED' | 'REFRESH_EXPIRED' | 'SESSION_REVOKED' | 'DEVICE_KEY_MISMATCH' | 'TOKEN_INVALID' | 'TOKEN_EXPIRED' | 'UNKNOWN_401';
 export declare class PermanentAuthFailure extends Error {
     readonly code: PermanentAuthReason;
     constructor(code: PermanentAuthReason, message: string);

package/dist/node_modules/@skrr-ai/auth-core/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@skrr-ai/auth-core",
-  "version": "0.4.3",
+  "version": "0.4.4",
   "main": "dist/cjs/index.js",
   "types": "dist/esm/index.d.ts",
   "exports": {
@@ -43,6 +43,46 @@
         "types": "./dist/cjs/harnessSkillLayout.d.ts",
         "default": "./dist/cjs/harnessSkillLayout.js"
       }
+    },
+    "./daemon-tool-approval": {
+      "import": {
+        "types": "./dist/esm/daemonToolApproval.d.ts",
+        "default": "./dist/esm/daemonToolApproval.js"
+      },
+      "require": {
+        "types": "./dist/cjs/daemonToolApproval.d.ts",
+        "default": "./dist/cjs/daemonToolApproval.js"
+      }
+    },
+    "./session-permission-authority": {
+      "import": {
+        "types": "./dist/esm/sessionPermissionAuthority.d.ts",
+        "default": "./dist/esm/sessionPermissionAuthority.js"
+      },
+      "require": {
+        "types": "./dist/cjs/sessionPermissionAuthority.d.ts",
+        "default": "./dist/cjs/sessionPermissionAuthority.js"
+      }
+    },
+    "./credential-session": {
+      "import": {
+        "types": "./dist/esm/credentialSession.d.ts",
+        "default": "./dist/esm/credentialSession.js"
+      },
+      "require": {
+        "types": "./dist/cjs/credentialSession.d.ts",
+        "default": "./dist/cjs/credentialSession.js"
+      }
+    },
+    "./cli-handoff-wire": {
+      "import": {
+        "types": "./dist/esm/cliHandoffWire.d.ts",
+        "default": "./dist/esm/cliHandoffWire.js"
+      },
+      "require": {
+        "types": "./dist/cjs/cliHandoffWire.d.ts",
+        "default": "./dist/cjs/cliHandoffWire.js"
+      }
     }
   },
   "dependencies": {