@skrr-ai/cli 0.1.83 → 0.1.85

package/dist/lib/store-moderation.d.ts

@@ -0,0 +1,95 @@
+/**
+ * `/api/store/moderation/reports` — a Store curator's report queue and its
+ * dispositions (OSK-12597).
+ *
+ * Only the `store_curation` surface (the TRUST role) may use these; the server
+ * refuses everyone else, a system ADMIN with no functional role included. A
+ * curator may not disposition a report on a listing they published, or whose
+ * publisher shares a workspace with them (STORE_CURATION_CONFLICT_OF_INTEREST).
+ *
+ * Every route is written out at its own call site rather than composed from a
+ * builder, like the rest of the Store CLI: the parity checker reads the
+ * LITERAL at the call site.
+ */
+/** The disposition vocabulary, mirroring STORE_REPORT_DISPOSITIONS on the server. */
+export declare const STORE_REPORT_DISPOSITIONS: readonly ["dismiss", "warn", "delist", "ban"];
+export type StoreReportDisposition = (typeof STORE_REPORT_DISPOSITIONS)[number];
+/** What each disposition does, in the words a curator decides by. */
+export declare const STORE_REPORT_DISPOSITION_EFFECTS: Record<StoreReportDisposition, string>;
+/** A ban one curator requested, waiting for a different one to confirm. */
+export type StoreReportBanRequest = {
+    requestId: string;
+    requestedBy: string;
+    requestedAt?: string;
+    /** Withheld (absent) on a listing the reading curator is conflicted on. */
+    note?: string | null;
+};
+/** One open report as a curator reads it. Never the reporter's identity. */
+export type CuratorStoreReport = {
+    reportId: string;
+    agentId: string;
+    reason: string;
+    /** Withheld (null) on a listing the curator is conflicted on. */
+    description: string | null;
+    status: string;
+    moderationAction: string | null;
+    releaseId: string | null;
+    versionLabel: string | null;
+    createdAt?: string;
+    reviewedAt?: string | null;
+    /** A ban waiting for a second curator, or null. */
+    banRequest?: StoreReportBanRequest | null;
+    /** Why this curator may not disposition it, or null. */
+    conflict: string | null;
+};
+export type CuratorStoreReportQueue = {
+    reports: CuratorStoreReport[];
+    total: number;
+    limit: number;
+    skip: number;
+};
+export type StoreReportDispositionResult = {
+    disposition: {
+        reportId: string;
+        agentId: string;
+        action: StoreReportDisposition;
+        replayed: boolean;
+        reportStatus: string;
+        listingState?: string;
+        reportsClosed?: number;
+        publisherNotified: boolean;
+        /** True when a ban was recorded and now waits for a second curator. */
+        pendingConfirmation?: boolean;
+        banRequest?: StoreReportBanRequest | null;
+        requestedBy?: string;
+        confirmedBy?: string;
+    };
+};
+export type StoreReportBanWithdrawalResult = {
+    withdrawal: {
+        reportId: string;
+        agentId: string;
+        withdrawn: boolean;
+        replayed: boolean;
+        withdrawnRequest?: StoreReportBanRequest;
+    };
+};
+/** `GET /moderation/reports` — every report still waiting, oldest first. */
+export declare function listCuratorStoreReports(params?: {
+    agentId?: string;
+    limit?: number;
+    skip?: number;
+}): Promise<CuratorStoreReportQueue>;
+/** `POST /moderation/reports/:reportId/disposition` */
+export declare function dispositionStoreReport(reportId: string, body: {
+    action: StoreReportDisposition;
+    note: string;
+}): Promise<StoreReportDispositionResult>;
+/** `POST /moderation/reports/:reportId/ban-request/confirm` — the second curator. */
+export declare function confirmStoreReportBan(reportId: string, body: {
+    note: string;
+}): Promise<StoreReportDispositionResult>;
+/** `DELETE /moderation/reports/:reportId/ban-request` — withdraw a waiting ban. */
+export declare function withdrawStoreReportBan(reportId: string, body?: {
+    note?: string;
+}): Promise<StoreReportBanWithdrawalResult>;

package/dist/lib/store-moderation.js

@@ -0,0 +1,51 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.STORE_REPORT_DISPOSITION_EFFECTS = exports.STORE_REPORT_DISPOSITIONS = void 0;
+exports.listCuratorStoreReports = listCuratorStoreReports;
+exports.dispositionStoreReport = dispositionStoreReport;
+exports.confirmStoreReportBan = confirmStoreReportBan;
+exports.withdrawStoreReportBan = withdrawStoreReportBan;
+const api_fetch_1 = require("./api-fetch");
+const triggers_1 = require("./triggers");
+/**
+ * `/api/store/moderation/reports` — a Store curator's report queue and its
+ * dispositions (OSK-12597).
+ *
+ * Only the `store_curation` surface (the TRUST role) may use these; the server
+ * refuses everyone else, a system ADMIN with no functional role included. A
+ * curator may not disposition a report on a listing they published, or whose
+ * publisher shares a workspace with them (STORE_CURATION_CONFLICT_OF_INTEREST).
+ *
+ * Every route is written out at its own call site rather than composed from a
+ * builder, like the rest of the Store CLI: the parity checker reads the
+ * LITERAL at the call site.
+ */
+/** The disposition vocabulary, mirroring STORE_REPORT_DISPOSITIONS on the server. */
+exports.STORE_REPORT_DISPOSITIONS = ['dismiss', 'warn', 'delist', 'ban'];
+/** What each disposition does, in the words a curator decides by. */
+exports.STORE_REPORT_DISPOSITION_EFFECTS = {
+    dismiss: 'close the report, no action on the listing, publisher not told',
+    warn: 'listing stays up, publisher gets a moderator warning',
+    delist: 'listing suspended until a moderator restores it, publisher told',
+    ban: 'requests a permanent withdrawal; a different curator must confirm it (`store reports confirm-ban`)',
+};
+/** `GET /moderation/reports` — every report still waiting, oldest first. */
+async function listCuratorStoreReports(params = {}) {
+    return (0, api_fetch_1.apiFetch)((0, triggers_1.withQuery)('/api/store/moderation/reports', {
+        agentId: params.agentId,
+        limit: params.limit,
+        skip: params.skip,
+    }));
+}
+/** `POST /moderation/reports/:reportId/disposition` */
+async function dispositionStoreReport(reportId, body) {
+    return (0, api_fetch_1.apiFetch)(`/api/store/moderation/reports/${encodeURIComponent(reportId)}/disposition`, { method: 'POST', body });
+}
+/** `POST /moderation/reports/:reportId/ban-request/confirm` — the second curator. */
+async function confirmStoreReportBan(reportId, body) {
+    return (0, api_fetch_1.apiFetch)(`/api/store/moderation/reports/${encodeURIComponent(reportId)}/ban-request/confirm`, { method: 'POST', body });
+}
+/** `DELETE /moderation/reports/:reportId/ban-request` — withdraw a waiting ban. */
+async function withdrawStoreReportBan(reportId, body = {}) {
+    return (0, api_fetch_1.apiFetch)(`/api/store/moderation/reports/${encodeURIComponent(reportId)}/ban-request`, { method: 'DELETE', body });
+}

package/dist/lib/workspaces.d.ts

@@ -61,6 +61,79 @@ export declare function ambientWorkspaceId(env?: NodeJS.ProcessEnv): Promise<str
 export declare function clearAmbientWorkspaceCache(): void;
 /** `listWorkspaces`, keeping the envelope's caller-level fields. */
 export declare function listWorkspaceListing(): Promise<WorkspaceListing>;
+/**
+ * One event of a workspace's third-party (Store) agent audit trail (OSK-12588).
+ * The server builds it from an allow-list; this type is what it sends.
+ */
+export interface WorkspaceAgentAuditEvent {
+    id: string;
+    at: string;
+    kind: string;
+    actor: {
+        kind: 'user' | 'agent' | 'system' | string;
+        userId?: string | null;
+        agentId?: string | null;
+        tool?: string | null;
+        process?: string | null;
+        confirmedBy?: {
+            userId: string | null;
+            at: string | null;
+            acquisitionRequestId: string | null;
+        };
+    };
+    subject: {
+        memberUserId: string | null;
+        fulfillment: string | null;
+        listingId: string | null;
+        listingName: string | null;
+        installedAgentId: string | null;
+        installedAgentName: string | null;
+        teamOrderId: string | null;
+        sourceTeamId: string | null;
+        installedAgentIds: string[] | null;
+    };
+    release: {
+        releaseId: string | null;
+        versionLabel: string | null;
+        releaseNumber: number | null;
+        fromReleaseId: string | null;
+        fromVersionLabel: string | null;
+        direction: 'upgrade' | 'rollback' | 'same' | 'unknown' | null;
+        strategy: string | null;
+        mergeOutcome: string | null;
+    } | null;
+    outcome: Record<string, unknown>;
+    request: {
+        method: string | null;
+        path: string | null;
+        requestId: string | null;
+    };
+    observationScope: unknown;
+}
+export interface WorkspaceAgentAuditPage {
+    workspaceId: string;
+    events: WorkspaceAgentAuditEvent[];
+    hasMore: boolean;
+    nextCursor: string | null;
+    coverage: {
+        source: string;
+        kinds: string[];
+        notRecorded: string[];
+    };
+}
+export interface WorkspaceAgentAuditQuery {
+    kinds?: string[];
+    since?: string;
+    until?: string;
+    limit?: number;
+    cursor?: string;
+}
+/**
+ * `GET /api/workspaces/:workspaceId/audit/agent-lifecycle` — owner/admin only.
+ * The kind vocabulary is the server's; an unknown kind is its 400, not a
+ * second list kept here.
+ */
+export declare function listWorkspaceAgentAudit(workspaceId: string, query?: WorkspaceAgentAuditQuery): Promise<WorkspaceAgentAuditPage>;
 export declare function getWorkspace(workspaceId: string): Promise<WorkspaceRow>;
 /**
  * Resolve what a human typed to a workspace they are actually in.

package/dist/lib/workspaces.js

@@ -5,9 +5,11 @@ exports.listWorkspaces = listWorkspaces;
 exports.ambientWorkspaceId = ambientWorkspaceId;
 exports.clearAmbientWorkspaceCache = clearAmbientWorkspaceCache;
 exports.listWorkspaceListing = listWorkspaceListing;
+exports.listWorkspaceAgentAudit = listWorkspaceAgentAudit;
 exports.getWorkspace = getWorkspace;
 exports.matchWorkspace = matchWorkspace;
 const api_fetch_1 = require("./api-fetch");
+const triggers_1 = require("./triggers");
 /**
  * The server's workspace document can include presentation metadata such as an
  * avatar source. This CLI surface is a selector, not a workspace export: keep
@@ -121,6 +123,23 @@ async function listWorkspaceListing() {
     }
     return { rows, defaultWorkspaceId };
 }
+/**
+ * `GET /api/workspaces/:workspaceId/audit/agent-lifecycle` — owner/admin only.
+ * The kind vocabulary is the server's; an unknown kind is its 400, not a
+ * second list kept here.
+ */
+async function listWorkspaceAgentAudit(workspaceId, query = {}) {
+    // The query rides in `withQuery`, outside the path literal, so the CLI parity
+    // check can read the route this calls (a `?` suffix nested inside the literal
+    // truncates what it sees).
+    return (0, api_fetch_1.apiFetch)((0, triggers_1.withQuery)(`/api/workspaces/${encodeURIComponent(workspaceId)}/audit/agent-lifecycle`, {
+        kind: query.kinds?.length ? query.kinds.join(',') : undefined,
+        since: query.since || undefined,
+        until: query.until || undefined,
+        limit: query.limit || undefined,
+        cursor: query.cursor || undefined,
+    }));
+}
 async function getWorkspace(workspaceId) {
     return (0, api_fetch_1.apiFetch)(`/api/workspaces/${encodeURIComponent(workspaceId)}`);
 }

package/dist/node_modules/@skrr-ai/auth-core/dist/cjs/daemonPair.js

@@ -43,7 +43,7 @@ exports.generatePairKeyPair = generatePairKeyPair;
  *
  * Lifetime invariant: the ephemeral X25519 secret key NEVER persists. The
  * mobile generates one per pairing, uses it once, and discards. The daemon
- * generates one per `oversky pair` invocation, uses it for the duration
+ * generates one per `skrrd pair` invocation, uses it for the duration
  * of the polling window, and discards on success/failure/abort.
  */
 const tweetnacl_1 = __importDefault(require("tweetnacl"));

package/dist/node_modules/@skrr-ai/auth-core/dist/esm/daemonPair.js

@@ -25,7 +25,7 @@
  *
  * Lifetime invariant: the ephemeral X25519 secret key NEVER persists. The
  * mobile generates one per pairing, uses it once, and discards. The daemon
- * generates one per `oversky pair` invocation, uses it for the duration
+ * generates one per `skrrd pair` invocation, uses it for the duration
  * of the polling window, and discards on success/failure/abort.
  */
 import nacl from 'tweetnacl';