@alwaysmeticulous/cli 2.326.1 → 2.327.0

package/dist/commands/onboard/check-vcs-link.js

@@ -0,0 +1,111 @@
+"use strict";
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="8be9103a-3329-5dae-8710-57f517474b0a")}catch(e){}}();
+
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.confirmVcsLinkIfNeeded = void 0;
+const client_1 = require("@alwaysmeticulous/client");
+const chalk_1 = __importDefault(require("chalk"));
+const inquirer_1 = __importDefault(require("inquirer"));
+const cli_user_error_1 = require("../../utils/cli-user-error");
+const docs_urls_1 = require("./docs-urls");
+const VCS_LABEL = {
+    github: "GitHub",
+    gitlab: "GitLab",
+    bitbucket: "Bitbucket",
+};
+/**
+ * Warns when the Meticulous project is not linked to its VCS host and asks
+ * whether to carry on. Linking is not required for the install itself — only
+ * for PR/MR status checks — so skipping is always allowed. The host is taken
+ * from the local remote, falling back to GitHub when the remote is missing or
+ * unrecognised (the GitHub App is the primary integration).
+ */
+const confirmVcsLinkIfNeeded = async (options) => {
+    const { project, context } = options;
+    if (!project) {
+        return;
+    }
+    const host = vcsForCiProvider(context.ciProvider) ?? "github";
+    const linked = isVcsLinked(context, host);
+    if (linked === true) {
+        return;
+    }
+    const configureUrl = configureUrlFor(context, host);
+    const projectLabel = context.orgAndProject ?? project.name;
+    if (linked === null) {
+        console.log(chalk_1.default.yellow(`  Could not confirm whether ${projectLabel} is linked to ${VCS_LABEL[host]}. Continuing.`));
+        if (configureUrl) {
+            console.log(chalk_1.default.dim(`  If CI status checks fail later, link the repo here: ${configureUrl}`));
+        }
+        return;
+    }
+    console.log(chalk_1.default.yellow(host === "github"
+        ? `  Warning: no Meticulous GitHub App is linked to ${projectLabel}.`
+        : `  Warning: ${projectLabel} is not linked to ${VCS_LABEL[host]} yet.`));
+    console.log(chalk_1.default.dim(`  Meticulous cannot post status checks on your ${host === "gitlab" ? "merge" : "pull"} requests until it is linked:`));
+    if (configureUrl) {
+        console.log(`  ${chalk_1.default.cyan(configureUrl)}`);
+    }
+    if (!context.repoUrl) {
+        console.log(chalk_1.default.dim("  This repository also has no `origin` remote yet — add one (`git remote add origin <url>`) so the branch can be pushed and the PR opened."));
+    }
+    console.log("");
+    // Nothing here blocks the install, so a non-interactive run just carries on.
+    if (!(0, client_1.isInteractiveContext)()) {
+        return;
+    }
+    const { skipForNow } = await inquirer_1.default.prompt([
+        {
+            type: "confirm",
+            name: "skipForNow",
+            message: "Skip this for now and continue the install?",
+            default: true,
+        },
+    ]);
+    if (!skipForNow) {
+        throw new cli_user_error_1.CliUserError([
+            `Link ${projectLabel} to ${VCS_LABEL[host]}, then re-run \`meticulous onboard\`.`,
+            ...(configureUrl ? [`  ${configureUrl}`] : []),
+        ].join("\n"));
+    }
+};
+exports.confirmVcsLinkIfNeeded = confirmVcsLinkIfNeeded;
+const vcsForCiProvider = (ciProvider) => {
+    switch (ciProvider) {
+        case "github-actions":
+            return "github";
+        case "gitlab-ci":
+            return "gitlab";
+        case "bitbucket-pipelines":
+            return "bitbucket";
+        default:
+            return null;
+    }
+};
+const isVcsLinked = (context, vcs) => {
+    switch (vcs) {
+        case "github":
+            return context.isGitHubIntegrationActive;
+        case "gitlab":
+            return context.isGitLabIntegrationActive;
+        case "bitbucket":
+            return context.isBitbucketIntegrationActive;
+    }
+};
+const configureUrlFor = (context, vcs) => {
+    switch (vcs) {
+        case "github":
+            // Point people at the GitHub Actions install guide rather than the
+            // org configure-projects UI — that page walks through installing the app.
+            return docs_urls_1.GITHUB_ACTIONS_DOCS_URL;
+        case "gitlab":
+            return context.gitlabConfigureProjectsUrl;
+        case "bitbucket":
+            return context.bitbucketConfigureProjectsUrl;
+    }
+};
+//# sourceMappingURL=check-vcs-link.js.map
+//# debugId=8be9103a-3329-5dae-8710-57f517474b0a

package/dist/commands/onboard/check-vcs-link.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-vcs-link.js","sources":["../../../src/commands/onboard/check-vcs-link.ts"],"sourceRoot":"","names":[],"mappings":";;;;;;;;AACA,qDAAgE;AAChE,kDAA0B;AAC1B,wDAAgC;AAChC,+DAA0D;AAC1D,2CAAsD;AAKtD,MAAM,SAAS,GAA8B;IAC3C,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,QAAQ;IAChB,SAAS,EAAE,WAAW;CACvB,CAAC;AAEF;;;;;;GAMG;AACI,MAAM,sBAAsB,GAAG,KAAK,EAAE,OAG5C,EAAiB,EAAE;IAClB,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;IACrC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO;IACT,CAAC;IAED,MAAM,IAAI,GAAG,gBAAgB,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,QAAQ,CAAC;IAC9D,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC1C,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,OAAO;IACT,CAAC;IAED,MAAM,YAAY,GAAG,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACpD,MAAM,YAAY,GAAG,OAAO,CAAC,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC;IAE3D,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,OAAO,CAAC,GAAG,CACT,eAAK,CAAC,MAAM,CACV,+BAA+B,YAAY,iBAAiB,SAAS,CAAC,IAAI,CAAC,eAAe,CAC3F,CACF,CAAC;QACF,IAAI,YAAY,EAAE,CAAC;YACjB,OAAO,CAAC,GAAG,CACT,eAAK,CAAC,GAAG,CACP,yDAAyD,YAAY,EAAE,CACxE,CACF,CAAC;QACJ,CAAC;QACD,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CACT,eAAK,CAAC,MAAM,CACV,IAAI,KAAK,QAAQ;QACf,CAAC,CAAC,oDAAoD,YAAY,GAAG;QACrE,CAAC,CAAC,cAAc,YAAY,qBAAqB,SAAS,CAAC,IAAI,CAAC,OAAO,CAC1E,CACF,CAAC;IACF,OAAO,CAAC,GAAG,CACT,eAAK,CAAC,GAAG,CACP,kDAAkD,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,+BAA+B,CACtH,CACF,CAAC;IACF,IAAI,YAAY,EAAE,CAAC;QACjB,OAAO,CAAC,GAAG,CAAC,KAAK,eAAK,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;IAC/C,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QACrB,OAAO,CAAC,GAAG,CACT,eAAK,CAAC,GAAG,CACP,4IAA4I,CAC7I,CACF,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,6EAA6E;IAC7E,IAAI,CAAC,IAAA,6BAAoB,GAAE,EAAE,CAAC;QAC5B,OAAO;IACT,CAAC;IAED,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,kBAAQ,CAAC,MAAM,CAA0B;QACpE;YACE,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,YAAY;YAClB,OAAO,EAAE,6CAA6C;YACtD,OAAO,EAAE,IAAI;SACd;KACF,CAAC,CAAC;IAEH,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,IAAI,6BAAY,CACpB;YACE,QAAQ,YAAY,OAAO,SAAS,CAAC,IAAI,CAAC,uCAAuC;YACjF,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,KAAK,YAAY,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;SAC/C,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;IACJ,CAAC;AACH,CAAC,CAAC;AAhFW,QAAA,sBAAsB,0BAgFjC;AAEF,MAAM,gBAAgB,GAAG,CACvB,UAA4C,EAC1B,EAAE;IACpB,QAAQ,UAAU,EAAE,CAAC;QACnB,KAAK,gBAAgB;YACnB,OAAO,QAAQ,CAAC;QAClB,KAAK,WAAW;YACd,OAAO,QAAQ,CAAC;QAClB,KAAK,qBAAqB;YACxB,OAAO,WAAW,CAAC;QACrB;YACE,OAAO,IAAI,CAAC;IAChB,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,WAAW,GAAG,CAClB,OAA2B,EAC3B,GAAc,EACE,EAAE;IAClB,QAAQ,GAAG,EAAE,CAAC;QACZ,KAAK,QAAQ;YACX,OAAO,OAAO,CAAC,yBAAyB,CAAC;QAC3C,KAAK,QAAQ;YACX,OAAO,OAAO,CAAC,yBAAyB,CAAC;QAC3C,KAAK,WAAW;YACd,OAAO,OAAO,CAAC,4BAA4B,CAAC;IAChD,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,eAAe,GAAG,CACtB,OAA2B,EAC3B,GAAc,EACC,EAAE;IACjB,QAAQ,GAAG,EAAE,CAAC;QACZ,KAAK,QAAQ;YACX,mEAAmE;YACnE,0EAA0E;YAC1E,OAAO,mCAAuB,CAAC;QACjC,KAAK,QAAQ;YACX,OAAO,OAAO,CAAC,0BAA0B,CAAC;QAC5C,KAAK,WAAW;YACd,OAAO,OAAO,CAAC,6BAA6B,CAAC;IACjD,CAAC;AACH,CAAC,CAAC","debugId":"8be9103a-3329-5dae-8710-57f517474b0a"}

package/dist/commands/onboard/codex-mcp.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Writes the canonical Meticulous MCP server into a Codex `config.toml`,
+ * stripping any repo-supplied definition first. Codex binds the first table it
+ * sees under `mcp_servers.Meticulous`, so a leftover stdio server (with
+ * `command`/`args`) would keep running under the official name — hence the
+ * careful, TOML-aware sanitisation below.
+ */
+export declare const mergeCodexMcp: (projectRoot: string, relativePath: string, mcpUrl: string) => void;
+/**
+ * Splits out `[mcp_servers.Meticulous]` or a nested
+ * `[mcp_servers.Meticulous.*]` table and its body. `sectionBody` is `null`
+ * when no such section is present. Callers that must remove every copy
+ * should loop until `sectionBody` is `null`.
+ */
+export declare const splitCodexMeticulousSection: (contents: string) => {
+    remainder: string;
+    sectionBody: string | null;
+};
+/**
+ * Accepts only blank lines and a single `url = "<canonical>"` assignment
+ * (optional surrounding whitespace / quotes). Any other key rejects.
+ */
+export declare const isCanonicalCodexMeticulousSectionBody: (sectionBody: string, mcpUrl: string) => boolean;
+//# sourceMappingURL=codex-mcp.d.ts.map

package/dist/commands/onboard/codex-mcp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-mcp.d.ts","sourceRoot":"","sources":["../../../src/commands/onboard/codex-mcp.ts"],"names":[],"mappings":"AAIA;;;;;;GAMG;AACH,eAAO,MAAM,aAAa,gBACX,MAAM,gBACL,MAAM,UACZ,MAAM,KACb,IA0DF,CAAC;AA8MF;;;;;GAKG;AACH,eAAO,MAAM,2BAA2B,aAC5B,MAAM,KACf;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;CA8BjD,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,qCAAqC,gBACnC,MAAM,UACX,MAAM,KACb,OAkBF,CAAC"}

package/dist/commands/onboard/codex-mcp.js

@@ -0,0 +1,302 @@
+"use strict";
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="ac2471d6-dbc8-5949-a5c8-63e2a74bbaa2")}catch(e){}}();
+
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isCanonicalCodexMeticulousSectionBody = exports.splitCodexMeticulousSection = exports.mergeCodexMcp = void 0;
+const fs_1 = require("fs");
+const cli_user_error_1 = require("../../utils/cli-user-error");
+const safe_repo_fs_1 = require("./safe-repo-fs");
+/**
+ * Writes the canonical Meticulous MCP server into a Codex `config.toml`,
+ * stripping any repo-supplied definition first. Codex binds the first table it
+ * sees under `mcp_servers.Meticulous`, so a leftover stdio server (with
+ * `command`/`args`) would keep running under the official name — hence the
+ * careful, TOML-aware sanitisation below.
+ */
+const mergeCodexMcp = (projectRoot, relativePath, mcpUrl) => {
+    const absolutePath = (0, safe_repo_fs_1.resolveSafeWritePath)(projectRoot, relativePath);
+    const existing = (0, fs_1.existsSync)(absolutePath)
+        ? (0, fs_1.readFileSync)(absolutePath, "utf8")
+        : "";
+    // Strip every Meticulous table (duplicates and nested
+    // `[mcp_servers.Meticulous.*]` included). A single canonical body is the
+    // only case that may stay as-is.
+    const sectionBodies = [];
+    let remainder = existing;
+    for (;;) {
+        const split = (0, exports.splitCodexMeticulousSection)(remainder);
+        if (split.sectionBody === null) {
+            remainder = split.remainder;
+            break;
+        }
+        sectionBodies.push(split.sectionBody);
+        remainder = split.remainder;
+    }
+    // Stripping `[table]` headers is safe, but assignments are not: their values
+    // can span lines, and a complete `mcp_servers` value cannot be extended with
+    // a sub-table at all. Abort instead of writing something broken.
+    const blocker = findCodexBlocker(remainder);
+    if (blocker !== null) {
+        throw new cli_user_error_1.CliUserError(blocker.kind === "meticulous-definition"
+            ? `${relativePath} defines the Meticulous MCP server as \`${blocker.line}\`, ` +
+                `which onboard cannot safely rewrite. Remove that entry and re-run onboard.`
+            : `${relativePath} assigns \`mcp_servers\` a complete value ` +
+                `(\`${blocker.line}\`). TOML does not allow adding ` +
+                `\`[mcp_servers.Meticulous]\` to it, so onboard cannot configure the ` +
+                `MCP server. Rewrite it as a \`[mcp_servers]\` table (removing any ` +
+                `Meticulous entry), then re-run onboard.`);
+    }
+    // Same rule as JSON: the section must exist *and* contain only the
+    // canonical `url` — a bare header (or a header with `command`/`args`/etc.)
+    // must be overwritten.
+    if (sectionBodies.length === 1 &&
+        (0, exports.isCanonicalCodexMeticulousSectionBody)(sectionBodies[0], mcpUrl)) {
+        return;
+    }
+    const base = remainder.length === 0 || remainder.endsWith("\n")
+        ? remainder
+        : `${remainder}\n`;
+    const leadingNewline = base.length === 0 ? "" : "\n";
+    (0, safe_repo_fs_1.writeFileSafeSync)(projectRoot, relativePath, `${base}${leadingNewline}[mcp_servers.Meticulous]\nurl = "${mcpUrl}"\n`);
+};
+exports.mergeCodexMcp = mergeCodexMcp;
+/** Decodes a TOML basic-string body so `"Metic\u0075lous"` compares equal. */
+const decodeTomlBasicString = (raw) => {
+    const simple = {
+        b: "\b",
+        t: "\t",
+        n: "\n",
+        f: "\f",
+        r: "\r",
+        '"': '"',
+        "\\": "\\",
+    };
+    let out = "";
+    for (let index = 0; index < raw.length; index += 1) {
+        if (raw[index] !== "\\") {
+            out += raw[index];
+            continue;
+        }
+        index += 1;
+        const escape = raw[index];
+        if (escape === undefined) {
+            return null;
+        }
+        if (escape === "u" || escape === "U") {
+            const width = escape === "u" ? 4 : 8;
+            const hex = raw.slice(index + 1, index + 1 + width);
+            if (hex.length !== width || !/^[0-9a-fA-F]+$/u.test(hex)) {
+                return null;
+            }
+            out += String.fromCodePoint(parseInt(hex, 16));
+            index += width;
+            continue;
+        }
+        const decoded = simple[escape];
+        if (decoded === undefined) {
+            return null;
+        }
+        out += decoded;
+    }
+    return out;
+};
+/** Reads one TOML key (bare, basic-quoted or literal-quoted) at `start`. */
+const readTomlKey = (line, start) => {
+    const quote = line[start];
+    if (quote === '"' || quote === "'") {
+        let index = start + 1;
+        let raw = "";
+        while (index < line.length) {
+            const char = line[index];
+            if (quote === '"' && char === "\\") {
+                raw += line.slice(index, index + 2);
+                index += 2;
+                continue;
+            }
+            if (char === quote) {
+                const key = quote === '"' ? decodeTomlBasicString(raw) : raw;
+                return key === null ? null : { key, next: index + 1 };
+            }
+            raw += char;
+            index += 1;
+        }
+        return null;
+    }
+    const bare = /^[A-Za-z0-9_-]+/u.exec(line.slice(start));
+    return bare ? { key: bare[0], next: start + bare[0].length } : null;
+};
+const skipTomlSpace = (line, start) => {
+    let index = start;
+    while (line[index] === " " || line[index] === "\t") {
+        index += 1;
+    }
+    return index;
+};
+/**
+ * Parses a TOML table header into its key path, or `null` when the line is not
+ * a header. Accepts everything TOML permits and the previous regex did not:
+ * indentation, whitespace around `[`, `.` and `]`, quoted keys, array-of-table
+ * `[[...]]` headers, and a trailing comment.
+ */
+const parseTomlTableHeaderPath = (line) => {
+    let index = skipTomlSpace(line, 0);
+    if (line[index] !== "[") {
+        return null;
+    }
+    index += 1;
+    const isArrayOfTables = line[index] === "[";
+    if (isArrayOfTables) {
+        index += 1;
+    }
+    const path = [];
+    for (;;) {
+        index = skipTomlSpace(line, index);
+        const key = readTomlKey(line, index);
+        if (!key) {
+            return null;
+        }
+        path.push(key.key);
+        index = skipTomlSpace(line, key.next);
+        if (line[index] === ".") {
+            index += 1;
+            continue;
+        }
+        if (line[index] === "]") {
+            index += 1;
+            break;
+        }
+        return null;
+    }
+    if (isArrayOfTables) {
+        if (line[index] !== "]") {
+            return null;
+        }
+        index += 1;
+    }
+    index = skipTomlSpace(line, index);
+    // Callers may pass the line with its terminator still attached.
+    const trailing = line.slice(index).replace(/\r?\n?$/u, "");
+    if (trailing.length > 0 && !trailing.startsWith("#")) {
+        return null;
+    }
+    return path;
+};
+/**
+ * Parses the dotted key path of a TOML assignment (`a.b = …`), so a value
+ * assignment can be compared against the table a `[header]` would define.
+ */
+const parseTomlAssignmentKeyPath = (line) => {
+    let index = skipTomlSpace(line, 0);
+    if (index >= line.length || line[index] === "#" || line[index] === "[") {
+        return null;
+    }
+    const path = [];
+    for (;;) {
+        index = skipTomlSpace(line, index);
+        const key = readTomlKey(line, index);
+        if (!key) {
+            return null;
+        }
+        path.push(key.key);
+        index = skipTomlSpace(line, key.next);
+        if (line[index] === ".") {
+            index += 1;
+            continue;
+        }
+        return line[index] === "=" ? path : null;
+    }
+};
+const isMeticulousMcpPath = (path) => path.length >= 2 && path[0] === "mcp_servers" && path[1] === "Meticulous";
+/**
+ * Finds an assignment that stops onboard from writing the canonical table:
+ *
+ * - a Meticulous definition outside a `[table]` header (a dotted assignment, or
+ *   an inline table under `[mcp_servers]`), which can carry `command`/`args`;
+ * - a direct value assignment to root `mcp_servers` (`mcp_servers = { … }` or a
+ *   scalar). TOML treats those as complete values, so appending
+ *   `[mcp_servers.Meticulous]` would produce a file Codex cannot parse.
+ *
+ * A dotted `mcp_servers.Other = …` is fine — TOML allows adding sub-tables to
+ * tables defined that way.
+ */
+const findCodexBlocker = (contents) => {
+    let table = [];
+    for (const rawLine of contents.split(/\r?\n/u)) {
+        const headerPath = parseTomlTableHeaderPath(rawLine);
+        if (headerPath) {
+            table = headerPath;
+            continue;
+        }
+        const keyPath = parseTomlAssignmentKeyPath(rawLine);
+        if (!keyPath) {
+            continue;
+        }
+        const combined = [...table, ...keyPath];
+        if (isMeticulousMcpPath(combined)) {
+            return { kind: "meticulous-definition", line: rawLine.trim() };
+        }
+        if (combined.length === 1 && combined[0] === "mcp_servers") {
+            return { kind: "inextensible-mcp-servers", line: rawLine.trim() };
+        }
+    }
+    return null;
+};
+/**
+ * Splits out `[mcp_servers.Meticulous]` or a nested
+ * `[mcp_servers.Meticulous.*]` table and its body. `sectionBody` is `null`
+ * when no such section is present. Callers that must remove every copy
+ * should loop until `sectionBody` is `null`.
+ */
+const splitCodexMeticulousSection = (contents) => {
+    const lines = contents.split(/(?<=\n)/u);
+    const headerIndex = lines.findIndex((line) => {
+        const path = parseTomlTableHeaderPath(line);
+        return path !== null && isMeticulousMcpPath(path);
+    });
+    if (headerIndex === -1) {
+        return { remainder: contents, sectionBody: null };
+    }
+    // The section body runs until the next header of any table.
+    let bodyEndIndex = lines.length;
+    for (let index = headerIndex + 1; index < lines.length; index += 1) {
+        if (parseTomlTableHeaderPath(lines[index]) !== null) {
+            bodyEndIndex = index;
+            break;
+        }
+    }
+    const sectionBody = lines.slice(headerIndex + 1, bodyEndIndex).join("");
+    const before = lines.slice(0, headerIndex).join("");
+    const afterSection = lines.slice(bodyEndIndex).join("");
+    const cleanedBefore = before.replace(/(?:\r?\n)+$/u, "\n");
+    const remainder = cleanedBefore.length === 0
+        ? afterSection.replace(/^(?:\r?\n)+/u, "")
+        : `${cleanedBefore}${afterSection}`;
+    return { remainder, sectionBody };
+};
+exports.splitCodexMeticulousSection = splitCodexMeticulousSection;
+/**
+ * Accepts only blank lines and a single `url = "<canonical>"` assignment
+ * (optional surrounding whitespace / quotes). Any other key rejects.
+ */
+const isCanonicalCodexMeticulousSectionBody = (sectionBody, mcpUrl) => {
+    let sawUrl = false;
+    for (const rawLine of sectionBody.split(/\r?\n/u)) {
+        const line = rawLine.trim();
+        if (line.length === 0 || line.startsWith("#")) {
+            continue;
+        }
+        const match = /^url\s*=\s*(?:"([^"]*)"|'([^']*)'|(\S+))\s*$/u.exec(line);
+        if (!match || sawUrl) {
+            return false;
+        }
+        const value = match[1] ?? match[2] ?? match[3];
+        if (value !== mcpUrl) {
+            return false;
+        }
+        sawUrl = true;
+    }
+    return sawUrl;
+};
+exports.isCanonicalCodexMeticulousSectionBody = isCanonicalCodexMeticulousSectionBody;
+//# sourceMappingURL=codex-mcp.js.map
+//# debugId=ac2471d6-dbc8-5949-a5c8-63e2a74bbaa2

package/dist/commands/onboard/codex-mcp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-mcp.js","sources":["../../../src/commands/onboard/codex-mcp.ts"],"sourceRoot":"","names":[],"mappings":";;;;;AAAA,2BAA8C;AAC9C,+DAA0D;AAC1D,iDAAyE;AAEzE;;;;;;GAMG;AACI,MAAM,aAAa,GAAG,CAC3B,WAAmB,EACnB,YAAoB,EACpB,MAAc,EACR,EAAE;IACR,MAAM,YAAY,GAAG,IAAA,mCAAoB,EAAC,WAAW,EAAE,YAAY,CAAC,CAAC;IACrE,MAAM,QAAQ,GAAG,IAAA,eAAU,EAAC,YAAY,CAAC;QACvC,CAAC,CAAC,IAAA,iBAAY,EAAC,YAAY,EAAE,MAAM,CAAC;QACpC,CAAC,CAAC,EAAE,CAAC;IAEP,sDAAsD;IACtD,yEAAyE;IACzE,iCAAiC;IACjC,MAAM,aAAa,GAAa,EAAE,CAAC;IACnC,IAAI,SAAS,GAAG,QAAQ,CAAC;IACzB,SAAS,CAAC;QACR,MAAM,KAAK,GAAG,IAAA,mCAA2B,EAAC,SAAS,CAAC,CAAC;QACrD,IAAI,KAAK,CAAC,WAAW,KAAK,IAAI,EAAE,CAAC;YAC/B,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;YAC5B,MAAM;QACR,CAAC;QACD,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QACtC,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;IAC9B,CAAC;IAED,6EAA6E;IAC7E,6EAA6E;IAC7E,iEAAiE;IACjE,MAAM,OAAO,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC;IAC5C,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,MAAM,IAAI,6BAAY,CACpB,OAAO,CAAC,IAAI,KAAK,uBAAuB;YACtC,CAAC,CAAC,GAAG,YAAY,2CAA2C,OAAO,CAAC,IAAI,MAAM;gBAC1E,4EAA4E;YAChF,CAAC,CAAC,GAAG,YAAY,4CAA4C;gBACzD,MAAM,OAAO,CAAC,IAAI,kCAAkC;gBACpD,sEAAsE;gBACtE,oEAAoE;gBACpE,yCAAyC,CAChD,CAAC;IACJ,CAAC;IAED,mEAAmE;IACnE,2EAA2E;IAC3E,uBAAuB;IACvB,IACE,aAAa,CAAC,MAAM,KAAK,CAAC;QAC1B,IAAA,6CAAqC,EAAC,aAAa,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,EAC/D,CAAC;QACD,OAAO;IACT,CAAC;IAED,MAAM,IAAI,GACR,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC;QAChD,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,GAAG,SAAS,IAAI,CAAC;IACvB,MAAM,cAAc,GAAG,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACrD,IAAA,gCAAiB,EACf,WAAW,EACX,YAAY,EACZ,GAAG,IAAI,GAAG,cAAc,oCAAoC,MAAM,KAAK,CACxE,CAAC;AACJ,CAAC,CAAC;AA9DW,QAAA,aAAa,iBA8DxB;AAEF,8EAA8E;AAC9E,MAAM,qBAAqB,GAAG,CAAC,GAAW,EAAiB,EAAE;IAC3D,MAAM,MAAM,GAA2B;QACrC,CAAC,EAAE,IAAI;QACP,CAAC,EAAE,IAAI;QACP,CAAC,EAAE,IAAI;QACP,CAAC,EAAE,IAAI;QACP,CAAC,EAAE,IAAI;QACP,GAAG,EAAE,GAAG;QACR,IAAI,EAAE,IAAI;KACX,CAAC;IACF,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,GAAG,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACnD,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC;YACxB,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;YAClB,SAAS;QACX,CAAC;QACD,KAAK,IAAI,CAAC,CAAC;QACX,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC;QAC1B,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;YACrC,MAAM,KAAK,GAAG,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACrC,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC;YACpD,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBACzD,OAAO,IAAI,CAAC;YACd,CAAC;YACD,GAAG,IAAI,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC;YAC/C,KAAK,IAAI,KAAK,CAAC;YACf,SAAS;QACX,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;QAC/B,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,OAAO,IAAI,CAAC;QACd,CAAC;QACD,GAAG,IAAI,OAAO,CAAC;IACjB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC,CAAC;AAEF,4EAA4E;AAC5E,MAAM,WAAW,GAAG,CAClB,IAAY,EACZ,KAAa,EACyB,EAAE;IACxC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1B,IAAI,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,GAAG,EAAE,CAAC;QACnC,IAAI,KAAK,GAAG,KAAK,GAAG,CAAC,CAAC;QACtB,IAAI,GAAG,GAAG,EAAE,CAAC;QACb,OAAO,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;YAC3B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;YACzB,IAAI,KAAK,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;gBACnC,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;gBACpC,KAAK,IAAI,CAAC,CAAC;gBACX,SAAS;YACX,CAAC;YACD,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;gBACnB,MAAM,GAAG,GAAG,KAAK,KAAK,GAAG,CAAC,CAAC,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;gBAC7D,OAAO,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,GAAG,CAAC,EAAE,CAAC;YACxD,CAAC;YACD,GAAG,IAAI,IAAI,CAAC;YACZ,KAAK,IAAI,CAAC,CAAC;QACb,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,IAAI,GAAG,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;IACxD,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACtE,CAAC,CAAC;AAEF,MAAM,aAAa,GAAG,CAAC,IAAY,EAAE,KAAa,EAAU,EAAE;IAC5D,IAAI,KAAK,GAAG,KAAK,CAAC;IAClB,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC;QACnD,KAAK,IAAI,CAAC,CAAC;IACb,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AAEF;;;;;GAKG;AACH,MAAM,wBAAwB,GAAG,CAAC,IAAY,EAAmB,EAAE;IACjE,IAAI,KAAK,GAAG,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACnC,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,EAAE,CAAC;QACxB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,KAAK,IAAI,CAAC,CAAC;IACX,MAAM,eAAe,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC;IAC5C,IAAI,eAAe,EAAE,CAAC;QACpB,KAAK,IAAI,CAAC,CAAC;IACb,CAAC;IAED,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,SAAS,CAAC;QACR,KAAK,GAAG,aAAa,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACnC,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACrC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACnB,KAAK,GAAG,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QAEtC,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,EAAE,CAAC;YACxB,KAAK,IAAI,CAAC,CAAC;YACX,SAAS;QACX,CAAC;QACD,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,EAAE,CAAC;YACxB,KAAK,IAAI,CAAC,CAAC;YACX,MAAM;QACR,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,eAAe,EAAE,CAAC;QACpB,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,EAAE,CAAC;YACxB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,KAAK,IAAI,CAAC,CAAC;IACb,CAAC;IAED,KAAK,GAAG,aAAa,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACnC,gEAAgE;IAChE,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAC3D,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACrD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC,CAAC;AAEF;;;GAGG;AACH,MAAM,0BAA0B,GAAG,CAAC,IAAY,EAAmB,EAAE;IACnE,IAAI,KAAK,GAAG,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACnC,IAAI,KAAK,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,EAAE,CAAC;QACvE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,SAAS,CAAC;QACR,KAAK,GAAG,aAAa,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACnC,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACrC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACnB,KAAK,GAAG,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QAEtC,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,EAAE,CAAC;YACxB,KAAK,IAAI,CAAC,CAAC;YACX,SAAS;QACX,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IAC3C,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,mBAAmB,GAAG,CAAC,IAAc,EAAW,EAAE,CACtD,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,aAAa,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,YAAY,CAAC;AAO5E;;;;;;;;;;;GAWG;AACH,MAAM,gBAAgB,GAAG,CAAC,QAAgB,EAAuB,EAAE;IACjE,IAAI,KAAK,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC/C,MAAM,UAAU,GAAG,wBAAwB,CAAC,OAAO,CAAC,CAAC;QACrD,IAAI,UAAU,EAAE,CAAC;YACf,KAAK,GAAG,UAAU,CAAC;YACnB,SAAS;QACX,CAAC;QACD,MAAM,OAAO,GAAG,0BAA0B,CAAC,OAAO,CAAC,CAAC;QACpD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,SAAS;QACX,CAAC;QACD,MAAM,QAAQ,GAAG,CAAC,GAAG,KAAK,EAAE,GAAG,OAAO,CAAC,CAAC;QACxC,IAAI,mBAAmB,CAAC,QAAQ,CAAC,EAAE,CAAC;YAClC,OAAO,EAAE,IAAI,EAAE,uBAAuB,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;QACjE,CAAC;QACD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,aAAa,EAAE,CAAC;YAC3D,OAAO,EAAE,IAAI,EAAE,0BAA0B,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;QACpE,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC,CAAC;AAEF;;;;;GAKG;AACI,MAAM,2BAA2B,GAAG,CACzC,QAAgB,EACmC,EAAE;IACrD,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACzC,MAAM,WAAW,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE;QAC3C,MAAM,IAAI,GAAG,wBAAwB,CAAC,IAAI,CAAC,CAAC;QAC5C,OAAO,IAAI,KAAK,IAAI,IAAI,mBAAmB,CAAC,IAAI,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IACH,IAAI,WAAW,KAAK,CAAC,CAAC,EAAE,CAAC;QACvB,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IACpD,CAAC;IAED,4DAA4D;IAC5D,IAAI,YAAY,GAAG,KAAK,CAAC,MAAM,CAAC;IAChC,KAAK,IAAI,KAAK,GAAG,WAAW,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACnE,IAAI,wBAAwB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YACpD,YAAY,GAAG,KAAK,CAAC;YACrB,MAAM;QACR,CAAC;IACH,CAAC;IAED,MAAM,WAAW,GAAG,KAAK,CAAC,KAAK,CAAC,WAAW,GAAG,CAAC,EAAE,YAAY,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACxE,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACpD,MAAM,YAAY,GAAG,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAExD,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;IAC3D,MAAM,SAAS,GACb,aAAa,CAAC,MAAM,KAAK,CAAC;QACxB,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC;QAC1C,CAAC,CAAC,GAAG,aAAa,GAAG,YAAY,EAAE,CAAC;IAExC,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC;AACpC,CAAC,CAAC;AAhCW,QAAA,2BAA2B,+BAgCtC;AAEF;;;GAGG;AACI,MAAM,qCAAqC,GAAG,CACnD,WAAmB,EACnB,MAAc,EACL,EAAE;IACX,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,KAAK,MAAM,OAAO,IAAI,WAAW,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAC9C,SAAS;QACX,CAAC;QACD,MAAM,KAAK,GAAG,+CAA+C,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzE,IAAI,CAAC,KAAK,IAAI,MAAM,EAAE,CAAC;YACrB,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC;QAC/C,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;YACrB,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,GAAG,IAAI,CAAC;IAChB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AArBW,QAAA,qCAAqC,yCAqBhD","debugId":"ac2471d6-dbc8-5949-a5c8-63e2a74bbaa2"}

package/dist/commands/onboard/customer-agents.d.ts

@@ -0,0 +1,9 @@
+/**
+ * The subset of the canonical admin-cli onboard agents that is safe to ship to
+ * customers. Read from JSON so `scripts/copy-onboard-templates.mjs` can share the
+ * same list without duplicating it: the published bundle and the source-mode
+ * fallback in materialize-workspace.ts must never disagree about which agents a
+ * customer onboarding run is allowed to use.
+ */
+export declare const CUSTOMER_AGENT_NAMES: readonly string[];
+//# sourceMappingURL=customer-agents.d.ts.map

package/dist/commands/onboard/customer-agents.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"customer-agents.d.ts","sourceRoot":"","sources":["../../../src/commands/onboard/customer-agents.ts"],"names":[],"mappings":"AAEA;;;;;;GAMG;AACH,eAAO,MAAM,oBAAoB,EAAE,SAAS,MAAM,EACf,CAAC"}

package/dist/commands/onboard/customer-agents.js

@@ -0,0 +1,19 @@
+"use strict";
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="ffc884ee-798b-5ea8-94b5-7826d87511dc")}catch(e){}}();
+
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CUSTOMER_AGENT_NAMES = void 0;
+const customer_agents_json_1 = __importDefault(require("./customer-agents.json"));
+/**
+ * The subset of the canonical admin-cli onboard agents that is safe to ship to
+ * customers. Read from JSON so `scripts/copy-onboard-templates.mjs` can share the
+ * same list without duplicating it: the published bundle and the source-mode
+ * fallback in materialize-workspace.ts must never disagree about which agents a
+ * customer onboarding run is allowed to use.
+ */
+exports.CUSTOMER_AGENT_NAMES = customer_agents_json_1.default.customerAgentNames;
+//# sourceMappingURL=customer-agents.js.map
+//# debugId=ffc884ee-798b-5ea8-94b5-7826d87511dc

package/dist/commands/onboard/customer-agents.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"customer-agents.js","sources":["../../../src/commands/onboard/customer-agents.ts"],"sourceRoot":"","names":[],"mappings":";;;;;;;;AAAA,kFAAoD;AAEpD;;;;;;GAMG;AACU,QAAA,oBAAoB,GAC/B,8BAAc,CAAC,kBAAkB,CAAC","debugId":"ffc884ee-798b-5ea8-94b5-7826d87511dc"}

package/dist/commands/onboard/customer-agents.json

@@ -0,0 +1,17 @@
+{
+    "customerAgentNames": [
+        "auth-setup",
+        "ci-setup",
+        "csp-setup",
+        "false-positive-prevention",
+        "feature-flag-setup",
+        "local-simulation-verification",
+        "persisted-graphql-queries",
+        "recorder-installation",
+        "replay-fetch-retry-compatibility",
+        "reviewer",
+        "service-worker-compatibility",
+        "session-context",
+        "shared-worker-compatibility"
+    ]
+}

package/dist/commands/onboard/customer-docs.d.ts

@@ -0,0 +1,21 @@
+/**
+ * The public-docs source files (webapp-frontend docs content) that the
+ * customer-facing agent playbooks cite as `.claude/docs/<path>`. They must be
+ * bundled into the onboard workspace: the live docs pages render the
+ * framework-specific recorder snippets and the GitLab/Bitbucket CI tabs
+ * client-side, so a WebFetch of the page cannot retrieve them.
+ *
+ * Read from JSON so `scripts/copy-onboard-templates.mjs` can share the same
+ * list without duplicating it (same pattern as customer-agents.json).
+ */
+export declare const CUSTOMER_DOC_FILES: readonly string[];
+/** Doc directories copied recursively (framework-specific recorder snippets). */
+export declare const CUSTOMER_DOC_DIRS: readonly string[];
+/**
+ * webapp-frontend modules outside the docs content directory that those docs
+ * import constants from (doc URLs, support email). Not copied into the
+ * workspace: they are read while inlining those constants into the docs, so the
+ * published build mirrors them at the same `src/...` paths the imports use.
+ */
+export declare const CUSTOMER_DOC_IMPORT_FILES: readonly string[];
+//# sourceMappingURL=customer-docs.d.ts.map

package/dist/commands/onboard/customer-docs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"customer-docs.d.ts","sourceRoot":"","sources":["../../../src/commands/onboard/customer-docs.ts"],"names":[],"mappings":"AAEA;;;;;;;;;GASG;AACH,eAAO,MAAM,kBAAkB,EAAE,SAAS,MAAM,EAA0B,CAAC;AAE3E,iFAAiF;AACjF,eAAO,MAAM,iBAAiB,EAAE,SAAS,MAAM,EAAyB,CAAC;AAEzE;;;;;GAKG;AACH,eAAO,MAAM,yBAAyB,EAAE,SAAS,MAAM,EAC7B,CAAC"}

package/dist/commands/onboard/customer-docs.js

@@ -0,0 +1,31 @@
+"use strict";
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="38b0ef74-ba77-54b5-a609-ec09831564bd")}catch(e){}}();
+
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CUSTOMER_DOC_IMPORT_FILES = exports.CUSTOMER_DOC_DIRS = exports.CUSTOMER_DOC_FILES = void 0;
+const customer_docs_json_1 = __importDefault(require("./customer-docs.json"));
+/**
+ * The public-docs source files (webapp-frontend docs content) that the
+ * customer-facing agent playbooks cite as `.claude/docs/<path>`. They must be
+ * bundled into the onboard workspace: the live docs pages render the
+ * framework-specific recorder snippets and the GitLab/Bitbucket CI tabs
+ * client-side, so a WebFetch of the page cannot retrieve them.
+ *
+ * Read from JSON so `scripts/copy-onboard-templates.mjs` can share the same
+ * list without duplicating it (same pattern as customer-agents.json).
+ */
+exports.CUSTOMER_DOC_FILES = customer_docs_json_1.default.docFiles;
+/** Doc directories copied recursively (framework-specific recorder snippets). */
+exports.CUSTOMER_DOC_DIRS = customer_docs_json_1.default.docDirs;
+/**
+ * webapp-frontend modules outside the docs content directory that those docs
+ * import constants from (doc URLs, support email). Not copied into the
+ * workspace: they are read while inlining those constants into the docs, so the
+ * published build mirrors them at the same `src/...` paths the imports use.
+ */
+exports.CUSTOMER_DOC_IMPORT_FILES = customer_docs_json_1.default.importFiles;
+//# sourceMappingURL=customer-docs.js.map
+//# debugId=38b0ef74-ba77-54b5-a609-ec09831564bd

package/dist/commands/onboard/customer-docs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"customer-docs.js","sources":["../../../src/commands/onboard/customer-docs.ts"],"sourceRoot":"","names":[],"mappings":";;;;;;;;AAAA,8EAAgD;AAEhD;;;;;;;;;GASG;AACU,QAAA,kBAAkB,GAAsB,4BAAY,CAAC,QAAQ,CAAC;AAE3E,iFAAiF;AACpE,QAAA,iBAAiB,GAAsB,4BAAY,CAAC,OAAO,CAAC;AAEzE;;;;;GAKG;AACU,QAAA,yBAAyB,GACpC,4BAAY,CAAC,WAAW,CAAC","debugId":"38b0ef74-ba77-54b5-a609-ec09831564bd"}

package/dist/commands/onboard/customer-docs.json

@@ -0,0 +1,35 @@
+{
+    "docFiles": [
+        "how-to/recorder-script.ts",
+        "session-recording/recorder-npm-dependency.ts",
+        "recorder-getting-started.ts",
+        "github-actions-v2.ts",
+        "constants.ts",
+        "how-to/link-gitlab.ts",
+        "how-to/link-bitbucket.ts",
+        "cloud-replay.ts",
+        "ci.ts",
+        "how-to/auth/bypassing-auth.ts",
+        "how-to/auth/enabling-full-auth.ts",
+        "how-to/troubleshoot-auth.ts",
+        "how-to/window-meticulous-object.ts",
+        "how-to/typescript-types.ts",
+        "how-to/fix-false-positive-diffs.ts",
+        "how-to/enable-source-coverage.ts",
+        "how-to/testing-feature-flags.ts",
+        "how-to/record-session-context.ts",
+        "session-recording/csp-exceptions.ts",
+        "how-to/testing-multiple-apps-or-app-variants.ts",
+        "how-to/configure-ignore-patterns.ts",
+        "how-to/troubleshoot-failed-simulations.ts",
+        "onboarding-guide.ts",
+        "ci/not-yet-run-checks.ts",
+        "reference/cli-commands.ts",
+        "additional-guides/backend-recorder.ts"
+    ],
+    "docDirs": ["recorder-snippets"],
+    "importFiles": [
+        "src/lib/next/next.constants.ts",
+        "src/lib/utils/internal-urls/docs-urls.utils.ts"
+    ]
+}

package/dist/commands/onboard/detect-framework.d.ts

@@ -0,0 +1,26 @@
+export type FrameworkKind = "nextjs-pages" | "nextjs-app" | "react-spa" | "vue-spa" | "angular-spa" | "remix" | "nuxt" | "sveltekit" | "svelte" | "unknown";
+export type RenderingMode = "csr" | "ssg" | "ssr" | "unknown";
+/**
+ * How sure the heuristic is about an unsupported-SSR verdict. `"high"` means a
+ * config file or router marker said so; `"ambiguous"` means we inferred it from
+ * a dependency or directory name and could be misreading a supported app.
+ */
+export type UnsupportedSsrConfidence = "high" | "ambiguous";
+export interface FrameworkDetection {
+    framework: FrameworkKind;
+    rendering: RenderingMode;
+    /** True when SSR is detected and it is not Next.js Pages SSR. */
+    isUnsupportedSsr: boolean;
+    /** Null unless `isUnsupportedSsr` is true. */
+    unsupportedSsrConfidence: UnsupportedSsrConfidence | null;
+    details: string[];
+}
+/**
+ * Heuristic framework + rendering detection for the onboard SSR gate.
+ * The agentic reviewer still re-validates during install.
+ */
+export declare const detectFramework: (projectRoot: string) => FrameworkDetection;
+/** Shown before asking whether to continue with a detected unsupported setup. */
+export declare const unsupportedSsrWarningMessage: (detection: FrameworkDetection) => string;
+export declare const unsupportedSsrMessage: (detection: FrameworkDetection) => string;
+//# sourceMappingURL=detect-framework.d.ts.map

package/dist/commands/onboard/detect-framework.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"detect-framework.d.ts","sourceRoot":"","sources":["../../../src/commands/onboard/detect-framework.ts"],"names":[],"mappings":"AAGA,MAAM,MAAM,aAAa,GACrB,cAAc,GACd,YAAY,GACZ,WAAW,GACX,SAAS,GACT,aAAa,GACb,OAAO,GACP,MAAM,GACN,WAAW,GACX,QAAQ,GACR,SAAS,CAAC;AAEd,MAAM,MAAM,aAAa,GAAG,KAAK,GAAG,KAAK,GAAG,KAAK,GAAG,SAAS,CAAC;AAE9D;;;;GAIG;AACH,MAAM,MAAM,wBAAwB,GAAG,MAAM,GAAG,WAAW,CAAC;AAE5D,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,aAAa,CAAC;IACzB,SAAS,EAAE,aAAa,CAAC;IACzB,iEAAiE;IACjE,gBAAgB,EAAE,OAAO,CAAC;IAC1B,8CAA8C;IAC9C,wBAAwB,EAAE,wBAAwB,GAAG,IAAI,CAAC;IAC1D,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAsLD;;;GAGG;AACH,eAAO,MAAM,eAAe,gBAAiB,MAAM,KAAG,kBA+IrD,CAAC;AAEF,iFAAiF;AACjF,eAAO,MAAM,4BAA4B,cAC5B,kBAAkB,KAC5B,MAUW,CAAC;AAEf,eAAO,MAAM,qBAAqB,cAAe,kBAAkB,KAAG,MAcxD,CAAC"}