@uzolab/skillhub 0.12.0 → 0.13.0

package/dist/bin.js

@@ -28568,10 +28568,38 @@ var inviteeSchema = external_exports.object({
 }).refine((v) => v.email === void 0 !== (v.githubHandle === void 0), {
   message: "Provide exactly one of email or githubHandle"
 });
+var inviteDeliverySchema = external_exports.discriminatedUnion("status", [
+  external_exports.object({
+    status: external_exports.literal("sent"),
+    /** The address the message was ADDRESSED to, even when a redirect rewrote it. */
+    to: external_exports.email(),
+    /** True when a non-production redirect sent it somewhere other than `to`. */
+    redirected: external_exports.boolean()
+  }),
+  external_exports.object({
+    status: external_exports.literal("skipped"),
+    reason: external_exports.enum(["no-address", "logged", "not-configured", "mail-disabled"])
+  }),
+  external_exports.object({
+    status: external_exports.literal("rate-limited"),
+    /**
+     * Whole seconds until this caller may cause another message. Always ≥ 1, so a
+     * surface can always state a wait rather than having to hedge about one.
+     */
+    retryAfterSeconds: external_exports.number().int().positive()
+  }),
+  external_exports.object({ status: external_exports.literal("failed"), retryable: external_exports.boolean() })
+]);
 var inviteIssuedSchema = external_exports.object({
   invite: inviteSchema,
   /** Shareable redemption link — contains the token; shown once at issuance. */
-  inviteUrl: external_exports.url()
+  inviteUrl: external_exports.url(),
+  /**
+   * What the invitation email did. Present on every issuance, including the ones
+   * that mailed nothing, so a caller reports the outcome it was given rather than
+   * the one it intended.
+   */
+  delivery: inviteDeliverySchema
 });
 var create = authedBase.errors(pickErrors("CONFLICT", "PLAN_LIMIT")).route({ method: "POST", path: "/orgs", summary: "Create an organization" }).input(
   external_exports.object({
@@ -28654,11 +28682,29 @@ var membersRemove = authedBase.errors(pickErrors("NOT_FOUND", "FORBIDDEN", "CONF
     userHandle: handleSchema
   })
 ).output(external_exports.object({ removed: external_exports.literal(true) }));
+var auditList = authedBase.errors(pickErrors("NOT_FOUND", "FORBIDDEN", "PLAN_LIMIT")).route({
+  method: "GET",
+  path: "/orgs/{handle}/audit",
+  summary: "List the organization audit log"
+}).input(
+  external_exports.object({
+    handle: handleSchema,
+    /** Filter by dotted action name, e.g. `org.members.invite`. */
+    action: external_exports.string().min(1).optional(),
+    /** Filter by acting user handle. */
+    actorHandle: handleSchema.optional(),
+    since: timestampSchema.optional(),
+    until: timestampSchema.optional()
+  }).extend(paginationInputSchema.shape)
+).output(paginatedOutputSchema(auditEntrySchema));
 var orgsContract = {
   create,
   get,
   update,
   listMine,
+  audit: {
+    list: auditList
+  },
   members: {
     list: membersList,
     invite: membersInvite,
@@ -28804,7 +28850,7 @@ var grantsInvite = authedBase.errors(pickErrors("NOT_FOUND", "FORBIDDEN", "CONFL
     role: registryRoleSchema
   })
 ).output(inviteIssuedSchema);
-var auditList = authedBase.errors(pickErrors("NOT_FOUND", "FORBIDDEN", "PLAN_LIMIT")).route({
+var auditList2 = authedBase.errors(pickErrors("NOT_FOUND", "FORBIDDEN", "PLAN_LIMIT")).route({
   method: "GET",
   path: "/registries/{ownerHandle}/{slug}/audit",
   summary: "List the registry audit log"
@@ -28836,7 +28882,7 @@ var registriesContract = {
     invite: grantsInvite
   },
   audit: {
-    list: auditList
+    list: auditList2
   },
   reviewQueue
 };
@@ -28877,7 +28923,18 @@ var requestChanges = authedBase.errors(pickErrors("NOT_FOUND", "FORBIDDEN")).rou
     /** The reviewer's optional note to the author (Markdown, ≤16 KiB). */
     message: external_exports.string().trim().min(1).max(16384).optional()
   })
-).output(reviewDecisionSchema);
+).output(
+  external_exports.object({
+    /** The persisted standing decision this call wrote. */
+    decision: reviewDecisionSchema,
+    /**
+     * How many notification rows this call wrote — 0 when there was nobody to
+     * notify, the best-effort inbox write failed, or a retry re-derived rows
+     * that already existed. Never a count of intended recipients.
+     */
+    notifiedCount: external_exports.number().int().nonnegative()
+  })
+);
 var reviewsContract = {
   comments: {
     list: commentsList,
@@ -37455,7 +37512,7 @@ import { spawn } from "child_process";
 import process4 from "process";
 
 // src/version.ts
-var CLI_VERSION = "0.12.0";
+var CLI_VERSION = "0.13.0";
 
 // src/commands/login.ts
 var loginOutputSchema = external_exports.object({
@@ -38564,7 +38621,16 @@ var registryOutputSchema = external_exports.discriminatedUnion("action", [
     role: registryRoleSchema,
     invite: inviteSchema,
     /** One-time redemption link — shown once at issuance, like the server does. */
-    inviteUrl: external_exports.string()
+    inviteUrl: external_exports.string(),
+    /**
+     * What the invitation email did, exactly as the server reported it.
+     *
+     * Carried rather than dropped because a script consuming this output has the
+     * same question a person does — is the invitee going to hear about this, or do
+     * I have to send them the link? — and the answer is not derivable from
+     * anything else in the payload.
+     */
+    delivery: inviteDeliverySchema
   })
 ]);
 outputSchemaRegistry.register("registry", registryOutputSchema);
@@ -38666,14 +38732,46 @@ async function runRegistryInvite(context, input, client) {
     ref: formatRegistryRef(path19),
     role,
     invite: issued.invite,
-    inviteUrl: issued.inviteUrl
+    inviteUrl: issued.inviteUrl,
+    delivery: issued.delivery
   };
   context.output.result(payload, (colors) => {
     const who = "email" in invitee ? invitee.email : `@${invitee.githubHandle}`;
-    return `${colors.green("\u2713")} invited ${who} to ${formatRegistryRef(path19)} as ${role}
+    const headline = issued.delivery.status === "sent" && !issued.delivery.redirected ? `${colors.green("\u2713")} invited ${who} to ${formatRegistryRef(path19)} as ${role}` : `${colors.green("\u2713")} invite created for ${who} on ${formatRegistryRef(path19)} as ${role}
+${colors.dim(deliveryNote(issued.delivery))}`;
+    return `${headline}
 invite link (share it \u2014 shown only now): ${issued.inviteUrl}`;
   });
 }
+function deliveryNote(delivery) {
+  switch (delivery.status) {
+    case "sent":
+      return "the email was redirected to a test mailbox, not to the invitee \u2014 send them the link";
+    case "skipped":
+      switch (delivery.reason) {
+        case "no-address":
+          return "a GitHub handle has no email address \u2014 the link is the only way to deliver it";
+        case "logged":
+          return "this environment logs mail instead of sending it \u2014 send them the link";
+        case "not-configured":
+          return "email is not configured on this deployment \u2014 send them the link";
+        case "mail-disabled":
+          return "email is switched off on this deployment \u2014 send them the link";
+        default: {
+          const unreachable = delivery.reason;
+          throw new Error(`unhandled skip reason: ${String(unreachable)}`);
+        }
+      }
+    case "rate-limited":
+      return `no email was sent: this account has emailed too many invitations recently (retry in about ${String(Math.max(1, Math.round(delivery.retryAfterSeconds / 60)))} minutes) \u2014 the invite is valid, so send them the link`;
+    case "failed":
+      return "no email was sent \u2014 the invite is valid, so send them the link";
+    default: {
+      const unreachable = delivery;
+      throw new Error(`unhandled invite delivery: ${JSON.stringify(unreachable)}`);
+    }
+  }
+}
 var command15 = defineCommand({
   meta: { name: "registry", description: DESCRIPTION10 },
   args: {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@uzolab/skillhub",
-  "version": "0.12.0",
+  "version": "0.13.0",
   "description": "SkillHub — npm for agent skills: publish, review, and sync SKILL.md packages from registries your team owns.",
   "keywords": [
     "agent-skills",