@withandeo/cli 0.19.9 → 0.19.10

package/dist/public-skill-contract.d.ts

@@ -0,0 +1,21 @@
+export declare const PUBLIC_SKILL_URL = "https://agents.withandeo.com/public/skills/andeo";
+export declare const PUBLIC_SKILL_KEY = "public/andeo/v1/latest.json";
+export declare const MAX_PUBLIC_SKILL_BYTES: number;
+export interface PublicSkillFile {
+    path: string;
+    content: string;
+    sha256: string;
+    bytes: number;
+}
+export interface PublicSkillBundle {
+    schema: "andeo.public-skill/v1";
+    name: "andeo";
+    revision: string;
+    minimumCliVersion: string;
+    files: PublicSkillFile[];
+}
+export declare function publicSkillPath(path: string): boolean;
+export declare function parsePublicSkillBundle(value: unknown): PublicSkillBundle;
+export declare function publicSkillRevisionInput(bundle: Pick<PublicSkillBundle, "minimumCliVersion" | "files">): string;
+export declare function verifyPublicSkillBundle(bundle: PublicSkillBundle, sha256: (bytes: Uint8Array<ArrayBuffer>) => Promise<string>): Promise<void>;
+//# sourceMappingURL=public-skill-contract.d.ts.map

package/dist/public-skill-contract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"public-skill-contract.d.ts","sourceRoot":"","sources":["../src/public-skill-contract.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,gBAAgB,qDAAqD,CAAC;AACnF,eAAO,MAAM,gBAAgB,gCAAgC,CAAC;AAC9D,eAAO,MAAM,sBAAsB,QAAc,CAAC;AAElD,MAAM,WAAW,eAAe;IAAG,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE;AACjG,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,uBAAuB,CAAC;IAChC,IAAI,EAAE,OAAO,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,KAAK,EAAE,eAAe,EAAE,CAAC;CAC1B;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAErD;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,OAAO,GAAG,iBAAiB,CAkBxE;AAED,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,IAAI,CAAC,iBAAiB,EAAE,mBAAmB,GAAG,OAAO,CAAC,GAAG,MAAM,CAG/G;AAED,wBAAsB,uBAAuB,CAAC,MAAM,EAAE,iBAAiB,EACrE,MAAM,EAAE,CAAC,KAAK,EAAE,UAAU,CAAC,WAAW,CAAC,KAAK,OAAO,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAO5E"}

package/dist/public-skill-contract.js

@@ -0,0 +1,47 @@
+export const PUBLIC_SKILL_URL = "https://agents.withandeo.com/public/skills/andeo";
+export const PUBLIC_SKILL_KEY = "public/andeo/v1/latest.json";
+export const MAX_PUBLIC_SKILL_BYTES = 1024 * 1024;
+export function publicSkillPath(path) {
+    return path === "SKILL.md" || /^references\/[A-Za-z0-9][A-Za-z0-9._-]*\.md$/u.test(path);
+}
+export function parsePublicSkillBundle(value) {
+    const hash = /^[a-f0-9]{64}$/u;
+    if (!record(value) || value.schema !== "andeo.public-skill/v1" || value.name !== "andeo"
+        || typeof value.revision !== "string" || !hash.test(value.revision)
+        || typeof value.minimumCliVersion !== "string" || !/^\d{1,6}\.\d{1,6}\.\d{1,6}$/u.test(value.minimumCliVersion)
+        || !Array.isArray(value.files) || value.files.length < 1 || value.files.length > 100)
+        throw invalid();
+    const paths = new Set();
+    const files = value.files.map(file => {
+        if (!record(file) || typeof file.path !== "string" || file.path.length > 240 || !publicSkillPath(file.path)
+            || paths.has(file.path) || typeof file.content !== "string" || file.content.length > MAX_PUBLIC_SKILL_BYTES
+            || typeof file.sha256 !== "string" || !hash.test(file.sha256) || !Number.isSafeInteger(file.bytes)
+            || file.bytes < 1 || file.bytes > 512 * 1024)
+            throw invalid();
+        paths.add(file.path);
+        return { path: file.path, content: file.content, sha256: file.sha256, bytes: file.bytes };
+    });
+    if (!paths.has("SKILL.md"))
+        throw invalid();
+    return { schema: "andeo.public-skill/v1", name: "andeo", revision: value.revision,
+        minimumCliVersion: value.minimumCliVersion, files };
+}
+export function publicSkillRevisionInput(bundle) {
+    return JSON.stringify({ minimumCliVersion: bundle.minimumCliVersion,
+        files: bundle.files.map(({ path, sha256, bytes }) => ({ path, sha256, bytes })) });
+}
+export async function verifyPublicSkillBundle(bundle, sha256) {
+    const encoder = new TextEncoder();
+    for (const file of bundle.files) {
+        const bytes = encoder.encode(file.content);
+        if (bytes.byteLength !== file.bytes || await sha256(bytes) !== file.sha256)
+            throw invalid();
+    }
+    if (await sha256(encoder.encode(publicSkillRevisionInput(bundle))) !== bundle.revision)
+        throw invalid();
+}
+function record(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function invalid() { return new Error("The public Andeo skill bundle is invalid."); }
+//# sourceMappingURL=public-skill-contract.js.map

package/dist/public-skill-contract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"public-skill-contract.js","sourceRoot":"","sources":["../src/public-skill-contract.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,gBAAgB,GAAG,kDAAkD,CAAC;AACnF,MAAM,CAAC,MAAM,gBAAgB,GAAG,6BAA6B,CAAC;AAC9D,MAAM,CAAC,MAAM,sBAAsB,GAAG,IAAI,GAAG,IAAI,CAAC;AAWlD,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,OAAO,IAAI,KAAK,UAAU,IAAI,+CAA+C,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC3F,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,KAAc;IACnD,MAAM,IAAI,GAAG,iBAAiB,CAAC;IAC/B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,uBAAuB,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO;WACjF,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;WAChE,OAAO,KAAK,CAAC,iBAAiB,KAAK,QAAQ,IAAI,CAAC,8BAA8B,CAAC,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC;WAC5G,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,GAAG;QAAE,MAAM,OAAO,EAAE,CAAC;IAC1G,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE;QACnC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC;eACpG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,sBAAsB;eACxG,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC;eAC9F,IAAI,CAAC,KAAgB,GAAG,CAAC,IAAK,IAAI,CAAC,KAAgB,GAAG,GAAG,GAAG,IAAI;YAAE,MAAM,OAAO,EAAE,CAAC;QAC1F,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrB,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,KAAe,EAAE,CAAC;IACtG,CAAC,CAAC,CAAC;IACH,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC;QAAE,MAAM,OAAO,EAAE,CAAC;IAC5C,OAAO,EAAE,MAAM,EAAE,uBAAuB,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ;QAC/E,iBAAiB,EAAE,KAAK,CAAC,iBAAiB,EAAE,KAAK,EAAE,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,MAA8D;IACrG,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;QACjE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;AACvF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,MAAyB,EACrE,MAA2D;IAC3D,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAClC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QAChC,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC3C,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI,CAAC,KAAK,IAAI,MAAM,MAAM,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,MAAM;YAAE,MAAM,OAAO,EAAE,CAAC;IAC9F,CAAC;IACD,IAAI,MAAM,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,wBAAwB,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,QAAQ;QAAE,MAAM,OAAO,EAAE,CAAC;AAC1G,CAAC;AAED,SAAS,MAAM,CAAC,KAAc;IAC5B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AACD,SAAS,OAAO,KAAK,OAAO,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC,CAAC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@withandeo/cli",
-  "version": "0.19.9",
+  "version": "0.19.10",
   "description": "Developer CLI for Andeo applications",
   "type": "module",
   "license": "UNLICENSED",

package/skill/publication.json

@@ -0,0 +1,3 @@
+{
+  "minimumCliVersion": "0.19.10"
+}

package/skill/tender-accounts/SKILL.md

@@ -75,7 +75,8 @@ The source defaults to HEAD; the destination remains independent. Confirm the
 returned `sourceRevision` and `sourceDiffersFromHead`. Dirty files are excluded,
 and reviewed repositories still protect their default branch.
 
-For a protected managed repository, read the managed-source reference and use
+For a managed repository with source protection or an explicit native-preview
+agent merge grant, verify the exact branch preview, read the managed-source reference and use
 `andeo source merge --head BRANCH --title TITLE --expected-head PUSHED_SHA --idempotency-key KEY --wait --json`
 to request hosted landing and follow the saved publication policy. Inspect required
 human review, deployment and cleanup outcomes separately; do not push main to bypass them.

package/skill/tender-accounts/references/managed-source.md

@@ -2,8 +2,10 @@
 
 ## Request merge and deployment
 
-On a protected repository, push the committed feature branch, then request one
-exact hosted merge. Read `capabilities` and `source merge-policy show` first.
+On a managed repository, push the committed feature branch and verify its exact
+native preview, then request one hosted merge. Read `capabilities`,
+`source merge-policy show` and `source policy show` first. Exercise the changed
+behavior on the preview; a successful build alone is not behavioral verification.
 
 ```sh
 andeo source push --branch feat/account-copy --json
@@ -23,6 +25,16 @@ review; `--expected-snapshot N` pins the inspected snapshot.
 Human review remains the default. A merchant administrator may explicitly grant
 stable principal IDs with `source merge-policy set --mode agent --principals IDS
 --expected-revision N --idempotency-key KEY [--execution-seconds 300..86400]`.
+This native-preview grant works with source protection enabled or disabled;
+enabling protection is not required. With protection disabled, a saved grant for
+the CLI credential's owner is required before merge admission. Ordinary developer
+access is insufficient. The grant, owner access, exact refs and preview evidence
+are rechecked before landing and publication. An administrator can configure the
+grant through the CLI once; eligible merges need no console intervention.
+Source protection independently blocks direct writes that bypass Andeo. Leaving
+it disabled does not guarantee that every push to main followed preview review.
+Do not push main directly as a substitute for this merge operation. Post-landing
+branch cleanup retains the branch while source protection is disabled.
 Changed validation/dependency inputs and artifact capabilities still require
 review. Merge policy and default-branch publication policy are separate grants.
 Preview-only publication returns `publication_not_enabled` after successful landing.

package/skill/tender-accounts/references/skills.md

@@ -1,5 +1,12 @@
 # Authenticated skills
 
+The global Andeo guide is public and updates independently of CLI releases.
+Run `andeo skill install --agent codex --force --json` to refresh its latest
+compatible revision, without login. Check the returned source and revision;
+`--bundled` selects the CLI's offline snapshot. `andeo doctor` checks global
+guidance against the public revision. The private practice skills below still
+require authentication and do not use this public endpoint.
+
 Andeo distributes rolling implementation guidance through the authenticated CLI. The CLI is the access boundary: catalog and file reads use the current Andeo credential against the agent API, and the API reads private objects without returning an R2 URL.
 
 ## Discover and read