@skrr-ai/cli 0.1.62 → 0.1.63

package/dist/commands/daemon/login.js

@@ -3,6 +3,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 const core_1 = require("@oclif/core");
 const daemon_binding_1 = require("../../lib/daemon-binding");
 const exec_runtime_binary_1 = require("../../lib/exec-runtime-binary");
+const live_runtime_binary_1 = require("../../lib/live-runtime-binary");
 /**
  * `skrr daemon login` — authenticate the local runtime.
  *
@@ -37,11 +38,28 @@ class DaemonLogin extends core_1.Command {
         // (OSK-296).
         const argv = this.argv;
         try {
+            const boundArgv = (0, daemon_binding_1.bindToCliSession)(argv);
+            // A re-login must prove the key the running service uses. A development
+            // skrrd earlier on PATH can have a different auth configuration and
+            // silently leave the service's server pin unchanged (OSK-12758).
+            const pathBinary = (0, exec_runtime_binary_1.findRuntimeBinary)();
+            const decision = pathBinary
+                ? (0, live_runtime_binary_1.decideStatusBinary)(pathBinary, (0, live_runtime_binary_1.profileFromArgs)(boundArgv), (0, live_runtime_binary_1.defaultLiveRuntimeDeps)())
+                : null;
+            if (decision?.kind === 'mismatch') {
+                this.error(`The live daemon runs ${decision.live}, but this command found ${decision.binary} on PATH. ` +
+                    'Run login with the live daemon program so it proves the same device key.');
+            }
+            if (decision?.kind === 'forward-live') {
+                this.warn(`Signing in with the live daemon binary ${decision.binary}.`);
+            }
             // `--cwd` is deliberately NOT defaulted here. `skrrd login` resolves it
             // from the installed service definition, which is the only authoritative
             // answer; guessing it from the CLI's cwd is exactly the mistake that made
             // the old default wrong.
-            const code = await (0, exec_runtime_binary_1.execRuntimeBinary)(['login', ...(0, daemon_binding_1.bindToCliSession)(argv)]);
+            const code = await (0, exec_runtime_binary_1.execRuntimeBinary)(['login', ...boundArgv], {
+                binary: decision?.binary,
+            });
             this.exit(code);
         }
         catch (err) {

package/dist/lib/exec-runtime-binary.js

@@ -214,8 +214,8 @@ function notInstalledMessage() {
  */
 function execRuntimeBinary(args, opts = {}) {
     return new Promise((resolve, reject) => {
-        // `binary` lets `status` render from the LIVE daemon's program rather than
-        // the first one on PATH (OSK-12102); every other verb forwards to PATH.
+        // `binary` lets status and login use the LIVE daemon's program rather than
+        // the first one on PATH (OSK-12102, OSK-12758).
         const bin = opts.binary ?? findRuntimeBinary();
         if (!bin) {
             reject(new Error('runtime-binary-not-installed'));

package/dist/lib/live-runtime-binary.js

@@ -10,7 +10,8 @@ exports.scriptFromArgs = scriptFromArgs;
 exports.defaultLiveRuntimeDeps = defaultLiveRuntimeDeps;
 /**
  * Which runtime binary is the LIVE daemon running, and is it the one
- * `skrr daemon status` is about to forward to? (OSK-12102)
+ * `skrr daemon status` or `skrr daemon login` is about to forward to?
+ * (OSK-12102, OSK-12758)
  *
  * `execRuntimeBinary` forwards to the first `skrrd` on PATH. That is right for
  * lifecycle verbs, where PATH order is the person's choice of install. It is

package/dist/node_modules/@skrr-ai/data-provider/index.js

@@ -48514,7 +48514,7 @@ exports.ACCEPTED_AGENT_TRIGGER_FIRE_OUTCOMES = ["succeeded", "in_progress", "awa
   var r2 = null === (t2 = e2.resolution) || void 0 === t2 ? void 0 : t2.closure;
   return r2 ? (null !== (o2 = null === (n2 = r2.overrode) || void 0 === n2 ? void 0 : n2.length) && void 0 !== o2 ? o2 : 0) > 0 ? "overridden" : false === r2.closable ? "open_items" : r2.degraded ? "unrecorded" : "clean" : "unrecorded";
 }, exports.deriveTaskCompletion = function(e2) {
-  var t2, n2 = (function(e3) {
+  var t2, n2, o2 = (function(e3) {
     for (var t3 = false !== e3.evidenceRead, n3 = (e3.deliverables || []).filter(function(e4) {
       return gb(e4);
     }), o3 = null, r3 = 0, a3 = n3; r3 < a3.length; r3++) {
@@ -48526,23 +48526,23 @@ exports.ACCEPTED_AGENT_TRIGGER_FIRE_OUTCOMES = ["succeeded", "in_progress", "awa
   if (!(function(e3) {
     return e3.statusType ? "completed" === e3.statusType : "done" === e3.status;
   })(e2)) {
-    var o2 = Sb(e2);
-    return { state: "not_done", label: hb.not_done, sentence: "".concat(hb.not_done, ", because ").concat(Tb(o2.text)), reason: o2, alsoOutstanding: [], evidence: n2 };
+    var r2 = Sb(e2);
+    return { state: "not_done", label: hb.not_done, sentence: "".concat(hb.not_done, ", because ").concat(Tb(r2.text)), reason: r2, alsoOutstanding: [], evidence: o2 };
   }
-  var r2 = [], a2 = e2.closure;
-  n2.read || r2.push("The record of what was produced could not be read just now."), (null === (t2 = null == a2 ? void 0 : a2.overrode) || void 0 === t2 ? void 0 : t2.length) && r2.push("Someone closed it past a gate its owner had declared.");
-  for (var i2 = 0, s2 = Gy(a2); i2 < s2.length; i2++) {
-    var c2 = s2[i2];
-    r2.push(c2);
+  var a2 = [], i2 = e2.closure;
+  o2.read || a2.push("The record of what was produced could not be read just now."), (null === (t2 = null == i2 ? void 0 : i2.overrode) || void 0 === t2 ? void 0 : t2.length) && a2.push("Someone closed it past a gate its owner had declared.");
+  for (var s2 = 0, c2 = Gy(i2); s2 < c2.length; s2++) {
+    var l2 = c2[s2];
+    a2.push(l2);
   }
-  if (a2 || r2.push("It was closed before the platform recorded what it was closed over."), n2.read && (0 === n2.arrived ? r2.push("Nothing it produced was recorded, so there is nothing here to look at.") : n2.aboveSelfReport || r2.push("The only thing standing behind what it produced is ".concat(lb(n2.highestLevel), "."))), 0 === r2.length) {
-    var l2 = "".concat((function(e3) {
+  if (i2 || a2.push("It was closed before the platform recorded what it was closed over."), o2.read && (0 === o2.arrived ? a2.push((null === (n2 = e2.deliverables) || void 0 === n2 ? void 0 : n2.some(Boolean)) ? "A deliverable is recorded, but its availability has not been confirmed." : "No deliverable is recorded for this task.") : o2.aboveSelfReport || a2.push("The only thing standing behind what it produced is ".concat(lb(o2.highestLevel), "."))), 0 === a2.length) {
+    var u2 = "".concat((function(e3) {
       return e3 ? e3[0].toUpperCase() + e3.slice(1) : e3;
-    })(lb(n2.highestLevel)), " stands behind what it produced.");
-    return { state: "done_and_checked", label: hb.done_and_checked, sentence: "".concat(hb.done_and_checked, " \u2014 ").concat(Tb(l2)), reason: { text: l2, phrased: true, code: null }, alsoOutstanding: [], evidence: n2 };
+    })(lb(o2.highestLevel)), " stands behind what it produced.");
+    return { state: "done_and_checked", label: hb.done_and_checked, sentence: "".concat(hb.done_and_checked, " \u2014 ").concat(Tb(u2)), reason: { text: u2, phrased: true, code: null }, alsoOutstanding: [], evidence: o2 };
   }
-  var u2 = r2[0], d2 = r2.slice(1);
-  return { state: "done_needs_your_eyes", label: hb.done_needs_your_eyes, sentence: "".concat(hb.done_needs_your_eyes, " \u2014 ").concat(Tb(u2)), reason: { text: u2, phrased: true, code: null }, alsoOutstanding: d2, evidence: n2 };
+  var d2 = a2[0], p2 = a2.slice(1);
+  return { state: "done_needs_your_eyes", label: hb.done_needs_your_eyes, sentence: "".concat(hb.done_needs_your_eyes, " \u2014 ").concat(Tb(d2)), reason: { text: d2, phrased: true, code: null }, alsoOutstanding: p2, evidence: o2 };
 }, exports.deriveWorkEdges = function(e2) {
   for (var t2, n2, o2 = /* @__PURE__ */ new Map(), r2 = 0, a2 = e2; r2 < a2.length; r2++) {
     var i2 = a2[r2];