@skrr-ai/cli 0.1.66 → 0.1.67

package/dist/node_modules/@skrr-ai/auth-core/dist/esm/deviceIdentityBridge.js

@@ -80,6 +80,26 @@ function publicKeyPath(profile) {
 function privateKeyPath(profile) {
     return path.join(profileConfigDir(profile), PRIVATE_KEY_FILENAME);
 }
+function storedKeyMaterialExists(profile) {
+    let files;
+    try {
+        files = [publicKeyPath(profile), privateKeyPath(profile), enrollmentMarkerPath(profile)];
+    }
+    catch {
+        return true;
+    }
+    for (const file of files) {
+        try {
+            fs.lstatSync(file);
+            return true;
+        }
+        catch (err) {
+            if (err.code !== 'ENOENT')
+                return true;
+        }
+    }
+    return false;
+}
 function enrollmentMarkerPath(profile) {
     return path.join(profileConfigDir(profile), ENROLLMENT_MARKER_FILENAME);
 }
@@ -319,7 +339,7 @@ async function consolidateDeviceIdentity(profile) {
  *   2. Generate fresh keypair and persist. Failure to persist is a hard
  *      error landing in disabled+persist_failed.
  */
-export async function initDeviceIdentity(profile) {
+export async function initDeviceIdentity(profile, options = {}) {
     if (_state.kind !== 'uninit')
         return;
     if (typeof profile !== 'string' || profile.length === 0) {
@@ -354,6 +374,18 @@ export async function initDeviceIdentity(profile) {
         });
         return;
     }
+    // A first install has neither file. If either file already exists, a null
+    // load is a lost, corrupt or temporarily unreadable identity. Replacing it
+    // during ordinary boot would make the next refresh sign with a key the
+    // server has never pinned, turning a local read failure into an unexpected
+    // DEVICE_KEY_MISMATCH. Only an explicit interactive login may replace it;
+    // that login proves the new key and re-pins it before issuing credentials.
+    const hasStoredKey = storedKeyMaterialExists(profile);
+    if (hasStoredKey && !options.recoverUnreadable) {
+        _state = { kind: 'disabled', reason: 'unreadable_key' };
+        emit('recovery_required', false, { profile, reason: 'stored_key_unreadable' });
+        return;
+    }
     let fresh;
     try {
         fresh = generateDeviceKeyPair();
@@ -393,9 +425,9 @@ export async function initDeviceIdentity(profile) {
     });
 }
 /**
- * Reset state. With `clearOnDisk=true` deletes both keypair files —
- * used by `oversky logout` / `sky logout` so a freshly-logged-in user
- * gets a fresh device identity that the daemon will see on its next start.
+ * Reset in-memory state. With `clearOnDisk=true` deletes both keypair files.
+ * Machine-wide sign-out may use that option; ordinary CLI sign-out preserves
+ * the daemon's pinned identity.
  */
 export async function resetDeviceIdentity(opts) {
     if (opts?.clearOnDisk && opts.profile) {

package/dist/node_modules/@skrr-ai/data-provider/index.js

@@ -44752,6 +44752,10 @@ var gR = Object.freeze({ __proto__: null, acceptAgentIntuition: function(e2, t2,
   return oR.get(e2 ? "".concat(vr(), "?workspaceId=").concat(encodeURIComponent(e2)) : vr());
 }, getStorePublisherFollowOverlay: function(e2) {
   return oR.get(xr(e2));
+}, getStorePublisherFollows: function(e2) {
+  return oR.get((function(e3) {
+    return "".concat(er(), "/publisher-follows").concat(e3 ? "?cursor=".concat(encodeURIComponent(e3)) : "");
+  })(e2));
 }, getStorePublisherNamespaces: function(e2) {
   return oR.get(hr(e2));
 }, getStorePublisherProfileEditor: function(e2) {
@@ -44767,7 +44771,7 @@ var gR = Object.freeze({ __proto__: null, acceptAgentIntuition: function(e2, t2,
 }, getStoreReleaseAdmissions: function(e2) {
   return oR.get((function(e3) {
     var t2 = new URLSearchParams();
-    (null == e3 ? void 0 : e3.state) && t2.set("state", e3.state), (null == e3 ? void 0 : e3.limit) && t2.set("limit", String(e3.limit));
+    (null == e3 ? void 0 : e3.state) && t2.set("state", e3.state), (null == e3 ? void 0 : e3.limit) && t2.set("limit", String(e3.limit)), (null == e3 ? void 0 : e3.artifactAfter) && t2.set("artifactAfter", e3.artifactAfter);
     var n2 = t2.toString();
     return "".concat(er(), "/admissions").concat(n2 ? "?".concat(n2) : "");
   })(e2));
@@ -46890,6 +46894,10 @@ var gR = Object.freeze({ __proto__: null, acceptAgentIntuition: function(e2, t2,
   return oR.patch(Aa(e2), { unarchive: true });
 }, unfollowStorePublisherByHandle: function(e2) {
   return oR.delete(xr(e2));
+}, unfollowStorePublisherById: function(e2) {
+  return oR.delete((function(e3) {
+    return "".concat(er(), "/publisher-follows/").concat(encodeURIComponent(e3));
+  })(e2));
 }, uninstallStoreAgent: function(e2) {
   var t2 = e2.agentId, n2 = e2.erase;
   return oR.post((function(e3) {