@skrr-ai/cli 0.1.59 → 0.1.60

package/dist/commands/followups/checkin.js

@@ -20,7 +20,7 @@ class FollowupsCheckin extends base_command_1.BaseCommand {
         '<%= config.bin %> followups checkin --subject task:OSK-42 --why "weekly touch-base" --frequency "0 9 * * MON" --timezone America/New_York',
     ];
     static flags = {
-        subject: core_1.Flags.string({ description: 'Subject ref: type:externalKey', required: true }),
+        subject: core_1.Flags.string({ description: followups_1.FOLLOWUP_SUBJECT_FLAG_HELP, required: true }),
         why: core_1.Flags.string({ description: 'Why this wake exists, in one line', required: true }),
         in: core_1.Flags.string({
             description: 'Duration from now (90m, 2h) — the once form',
@@ -41,8 +41,21 @@ class FollowupsCheckin extends base_command_1.BaseCommand {
         json: core_1.Flags.boolean({ description: 'Output as JSON' }),
     };
     async run() {
-        this.requireAuth();
         const { flags } = await this.parse(FollowupsCheckin);
+        let subject;
+        try {
+            subject = (0, followups_1.parseSubjectRef)(flags.subject);
+        }
+        catch (err) {
+            this.failWithCliError({
+                message: err instanceof Error ? err.message : String(err),
+                code: 'FOLLOWUP_SUBJECT_INVALID',
+                exit: 2,
+                retryable: false,
+            });
+            return;
+        }
+        this.requireAuth();
         if (!flags.in && !flags.frequency) {
             this.failWithCliError({
                 message: 'Either --in <duration> or --frequency <cron> is required.',
@@ -71,7 +84,7 @@ class FollowupsCheckin extends base_command_1.BaseCommand {
                 kind: 'checkin',
                 producer: agent.boundToSession ? 'agent_in_turn' : 'user_explicit',
                 agentId: agent.id,
-                subject: (0, followups_1.parseSubjectRef)(flags.subject),
+                subject,
                 why: flags.why,
                 ...(flags.in ? { form: 'once', in: flags.in } : {}),
                 ...(flags.frequency

package/dist/lib/agentic-stream.d.ts

@@ -201,6 +201,13 @@ export type ProjectedToolEvent = {
  * of the run. The pairing is unambiguous within a turn.
  */
 export declare function projectDaemonToolEvents(envelopes: unknown[], namesByCall: Map<string, string>): ProjectedToolEvent[];
+/**
+ * The exact output the daemon's Codex backend writes on a tool item that an
+ * approval declined (`codexToolItemEndOutput` in daemon/src/backends/codex.ts).
+ * Pinned against that source by agentic-stream.spec.ts, so a rewording there
+ * fails here instead of silently reverting these calls to `[tool failed]`.
+ */
+export declare const CODEX_DECLINED_TOOL_OUTPUTS: readonly string[];
 /**
  * The line printed when a tool call ends, in the words its status earns.
  *

package/dist/lib/agentic-stream.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.AgenticStreamClient = exports.USER_CONNECTION_CAP_CODE = exports.TYPE_AHEAD_DISCARD_MS = exports.NON_INTERACTIVE_QUESTION_DISMISSAL = void 0;
+exports.AgenticStreamClient = exports.USER_CONNECTION_CAP_CODE = exports.CODEX_DECLINED_TOOL_OUTPUTS = exports.TYPE_AHEAD_DISCARD_MS = exports.NON_INTERACTIVE_QUESTION_DISMISSAL = void 0;
 exports.writeJsonLine = writeJsonLine;
 exports.discardTypeAhead = discardTypeAhead;
 exports.describePermissionTarget = describePermissionTarget;
@@ -298,12 +298,48 @@ function projectDaemonToolEvents(envelopes, namesByCall) {
                 ...(call ? { toolUseId: call } : {}),
                 ...(name ? { toolName: name } : {}),
                 ...(ev.output !== undefined ? { toolResponse: ev.output } : {}),
-                ...(typeof ev.status === 'string' ? { status: ev.status } : {}),
+                ...(typeof ev.status === 'string' ? { status: daemonToolEndStatus(ev) } : {}),
             });
         }
     }
     return out;
 }
+/**
+ * The exact output the daemon's Codex backend writes on a tool item that an
+ * approval declined (`codexToolItemEndOutput` in daemon/src/backends/codex.ts).
+ * Pinned against that source by agentic-stream.spec.ts, so a rewording there
+ * fails here instead of silently reverting these calls to `[tool failed]`.
+ */
+exports.CODEX_DECLINED_TOOL_OUTPUTS = [
+    'Declined: the approval was refused, so the command did not run.',
+    'Declined: the approval was refused, so the edit was not applied.',
+];
+/**
+ * A daemon `tool-call-end` status, with a Codex decline read as `denied`.
+ *
+ * OSK-12480 — a Codex `exec_command` a person or a policy refused ends as an
+ * app-server item with status `declined`, which the daemon writes on the wire
+ * as `failed`: the envelope's status vocabulary (`ToolCallEndStatusSchema`,
+ * enforced at the server's persistence boundary) has no `denied`, so the
+ * daemon cannot say it there without breaking every server that predates it.
+ * What it does say is the output — a sentence it authors for exactly that
+ * case, and never for a call that ran. So the stream printed `[tool failed]`
+ * for a command that never started, where the daemon's Claude-style path
+ * (OSK-12469) prints `[tool denied] … (it did not run)`.
+ *
+ * Only that exact output upgrades a `failed`: a genuine failure keeps its
+ * status, and so does a decline Codex gave its own output (the status quo,
+ * never a misclassification).
+ */
+function daemonToolEndStatus(ev) {
+    const status = ev.status;
+    if (status === 'failed' &&
+        typeof ev.output === 'string' &&
+        exports.CODEX_DECLINED_TOOL_OUTPUTS.includes(ev.output)) {
+        return 'denied';
+    }
+    return status;
+}
 /**
  * The line printed when a tool call ends, in the words its status earns.
  *

package/dist/lib/followups.d.ts

@@ -120,6 +120,13 @@ export type ResolvedFollowUpAgent = {
      */
     boundToSession: boolean;
 };
+/**
+ * A trigger subject becomes a durable concurrency key, so it cannot be prose.
+ * Keep this grammar aligned with TriggerEngine's subject validation and the
+ * FollowUpService storage limit.
+ */
+export declare const FOLLOWUP_SUBJECT_EXTERNAL_KEY_RE: RegExp;
+export declare const FOLLOWUP_SUBJECT_FLAG_HELP = "Subject ref: type:externalKey (externalKey: letters, digits, _ - . : / # @ + ~; no spaces)";
 /**
  * Which agent a follow-up belongs to.
  *

package/dist/lib/followups.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.followupsApi = exports.WATCH_WAIT_KINDS = exports.FOLLOWUP_RESOLVE_OUTCOMES = exports.FOLLOWUP_STATES = exports.FOLLOWUP_KINDS = exports.followUpIdArg = void 0;
+exports.followupsApi = exports.FOLLOWUP_SUBJECT_FLAG_HELP = exports.FOLLOWUP_SUBJECT_EXTERNAL_KEY_RE = exports.WATCH_WAIT_KINDS = exports.FOLLOWUP_RESOLVE_OUTCOMES = exports.FOLLOWUP_STATES = exports.FOLLOWUP_KINDS = exports.followUpIdArg = void 0;
 exports.settledLine = settledLine;
 exports.recipeWatchBoundsRefusal = recipeWatchBoundsRefusal;
 exports.resolveFollowUpAgent = resolveFollowUpAgent;
@@ -115,6 +115,13 @@ function recipeWatchBoundsRefusal(waitKind, passed) {
             : 'A recipe watch ends through its --wait.',
     ].join(' ');
 }
+/**
+ * A trigger subject becomes a durable concurrency key, so it cannot be prose.
+ * Keep this grammar aligned with TriggerEngine's subject validation and the
+ * FollowUpService storage limit.
+ */
+exports.FOLLOWUP_SUBJECT_EXTERNAL_KEY_RE = /^[A-Za-z0-9_\-.:/#@+~]{1,300}$/;
+exports.FOLLOWUP_SUBJECT_FLAG_HELP = 'Subject ref: type:externalKey (externalKey: letters, digits, _ - . : / # @ + ~; no spaces)';
 /**
  * Which agent a follow-up belongs to.
  *
@@ -154,11 +161,17 @@ function resolveFollowUpAgent(explicitAgentId, env = process.env) {
 }
 /** A `type:externalKey` subject ref → the subject block the API wants. */
 function parseSubjectRef(ref) {
-    const idx = ref.indexOf(':');
-    if (idx <= 0 || idx === ref.length - 1) {
+    const value = ref.trim();
+    const idx = value.indexOf(':');
+    if (idx <= 0 || idx === value.length - 1) {
         throw new Error(`--subject must be "type:externalKey" (e.g. task:OSK-42, conversation:conv_123), got "${ref}"`);
     }
-    return { type: ref.slice(0, idx), externalKey: ref.slice(idx + 1) };
+    const type = value.slice(0, idx);
+    const externalKey = value.slice(idx + 1);
+    if (!exports.FOLLOWUP_SUBJECT_EXTERNAL_KEY_RE.test(externalKey)) {
+        throw new Error('--subject has an invalid external key. Use type:externalKey; the key may contain only letters, digits, _ - . : / # @ + ~ (no spaces). Put descriptive text in --why.');
+    }
+    return { type, externalKey };
 }
 /* ------------------------------------------------------------------ *
  * API                                                                  *

package/dist/node_modules/@skrr-ai/data-provider/index.js

@@ -43615,6 +43615,10 @@ var vA = Object.freeze({ __proto__: null, acceptAgentIntuition: function(e2, t2,
   return cA.get($i(e2));
 }, getGroupChatHistorySnapshot: function(e2, t2) {
   return cA.get(oo(e2, t2));
+}, getGroupChatHistorySnapshotComposerState: function(e2) {
+  return cA.get((function(e3) {
+    return "".concat(no(e3), "/composer");
+  })(e2));
 }, getGroupChatInvitations: function(e2, t2) {
   return cA.get(os(e2, t2));
 }, getGroupChatMessages: function(e2, t2) {
@@ -44754,6 +44758,8 @@ var vA = Object.freeze({ __proto__: null, acceptAgentIntuition: function(e2, t2,
   return cA.get(to(e2));
 }, listGroupChatFolders: function(e2) {
   return cA.get($n(e2));
+}, listGroupChatHistorySnapshots: function(e2) {
+  return cA.get(no(e2));
 }, listGroupChatSpaces: function(e2, t2) {
   return cA.get(us(e2), { params: t2 });
 }, listGroupChatWidgets: function(e2) {