@blogic-cz/agent-tools 0.16.0 → 0.17.0

package/dist/shared/exec.d.ts

@@ -0,0 +1,23 @@
+import { ChildProcessSpawner } from "effect/unstable/process";
+import { Effect, Schema } from "effect";
+declare const ExecError_base: Schema.Class<ExecError, Schema.TaggedStruct<"ExecError", {
+    readonly message: Schema.String;
+    readonly command: Schema.String;
+    readonly exitCode: Schema.Number;
+    readonly stderr: Schema.String;
+}>, import("effect/Cause").YieldableError>;
+export declare class ExecError extends ExecError_base {
+}
+export declare const collectProcessOutput: (process: ChildProcessSpawner.ChildProcessHandle) => Effect.Effect<{
+    stdout: string;
+    stderr: string;
+    exitCode: ChildProcessSpawner.ExitCode;
+}, import("effect/PlatformError").PlatformError, never>;
+export declare const execEffect: (commandStr: string, timeoutMs?: number) => Effect.Effect<{
+    stdout: string;
+    stderr: string;
+    exitCode: number;
+}, ExecError, ChildProcessSpawner.ChildProcessSpawner>;
+export declare const quoteShellArg: (value: string) => string;
+export {};
+//# sourceMappingURL=exec.d.ts.map

package/dist/shared/exec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"exec.d.ts","sourceRoot":"","sources":["../../src/shared/exec.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgB,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC5E,OAAO,EAAE,MAAM,EAAE,MAAM,EAAU,MAAM,QAAQ,CAAC;;;;;;;AAIhD,qBAAa,SAAU,SAAQ,cAK7B;CAAG;AAEL,eAAO,MAAM,oBAAoB,GAAI,SAAS,mBAAmB,CAAC,kBAAkB;;;;uDAUhF,CAAC;AAEL,eAAO,MAAM,UAAU,GACrB,YAAY,MAAM,EAClB,YAAW,MAA2B,KACrC,MAAM,CAAC,MAAM,CACd;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,EACpD,SAAS,EACT,mBAAmB,CAAC,mBAAmB,CAsCtC,CAAC;AAEJ,eAAO,MAAM,aAAa,GAAI,OAAO,MAAM,WAA0C,CAAC"}

package/dist/shared/format.d.ts

@@ -0,0 +1,7 @@
+import { Flag } from "effect/unstable/cli";
+import type { BaseResult, OutputFormat } from "./types";
+export declare const formatOption: Flag.Flag<"json" | "toon">;
+export declare function formatOutput<T extends BaseResult>(result: T, format: OutputFormat): string;
+export declare function formatAny<T>(data: T, format: OutputFormat): string;
+export declare const logFormatted: <T>(data: T, format: OutputFormat) => import("effect/Effect").Effect<void, never, never>;
+//# sourceMappingURL=format.d.ts.map

package/dist/shared/format.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"format.d.ts","sourceRoot":"","sources":["../../src/shared/format.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,qBAAqB,CAAC;AAI3C,OAAO,KAAK,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAExD,eAAO,MAAM,YAAY,4BAGxB,CAAC;AAEF,wBAAgB,YAAY,CAAC,CAAC,SAAS,UAAU,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,YAAY,GAAG,MAAM,CAK1F;AAED,wBAAgB,SAAS,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,YAAY,GAAG,MAAM,CAKlE;AAED,eAAO,MAAM,YAAY,GAAI,CAAC,EAAE,MAAM,CAAC,EAAE,QAAQ,YAAY,uDACvB,CAAC"}

package/dist/shared/index.d.ts

@@ -0,0 +1,12 @@
+export type { BaseResult, CommandOptions, CommandResult, Environment, OutputFormat, ToolResult, } from "./types";
+export { formatAny, formatOption, formatOutput, logFormatted } from "./format";
+export { expandPath, runCommand, runShellCommand } from "./bun";
+export { commonArgOptions, parseCommonArgs } from "./cli";
+export { renderCauseToStderr } from "./error-renderer";
+export { dumpCommandSchema, makeSchemaCommand, type CommandSchema } from "./schema-dump";
+export declare const VERSION: string;
+export { execEffect, type ExecError } from "./exec";
+export { createThrottle, type ThrottleError } from "./throttle";
+export { aggregateByField, deduplicateLines, formatCountSummary, parseTextTable, stripEmptyColumns, truncateRows, } from "./transform";
+export { transformLogOutput } from "./log-transform";
+//# sourceMappingURL=index.d.ts.map

package/dist/shared/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/shared/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,UAAU,EACV,cAAc,EACd,aAAa,EACb,WAAW,EACX,YAAY,EACZ,UAAU,GACX,MAAM,SAAS,CAAC;AAEjB,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAE/E,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,OAAO,CAAC;AAEhE,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,OAAO,CAAC;AAE1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAEvD,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,KAAK,aAAa,EAAE,MAAM,eAAe,CAAC;AAIzF,eAAO,MAAM,OAAO,QAAc,CAAC;AAEnC,OAAO,EAAE,UAAU,EAAE,KAAK,SAAS,EAAE,MAAM,QAAQ,CAAC;AAEpD,OAAO,EAAE,cAAc,EAAE,KAAK,aAAa,EAAE,MAAM,YAAY,CAAC;AAEhE,OAAO,EACL,gBAAgB,EAChB,gBAAgB,EAChB,kBAAkB,EAClB,cAAc,EACd,iBAAiB,EACjB,YAAY,GACb,MAAM,aAAa,CAAC;AAErB,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC"}

package/dist/shared/k8s-probe.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Shared kubectl API-server reachability probe, used by every VPN-gated tool
+ * (db-tool, k8s-tool) to fail fast instead of hanging on a silently unreachable cluster.
+ *
+ * Hitting `/version` via `--raw` is the cheapest authenticated round-trip; `--request-timeout`
+ * bounds it so an unreachable server (VPN down / off the office network, or the cluster API
+ * degraded) fails in ~`timeoutMs` with a clear message instead of waiting out the tool's full
+ * command/tunnel timeout.
+ */
+export declare function buildApiProbeArgs(kubeconfig: string | undefined, context: string, timeoutMs: number): string[];
+//# sourceMappingURL=k8s-probe.d.ts.map

package/dist/shared/k8s-probe.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"k8s-probe.d.ts","sourceRoot":"","sources":["../../src/shared/k8s-probe.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAC/B,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,MAAM,GAChB,MAAM,EAAE,CASV"}

package/dist/shared/log-transform.d.ts

@@ -0,0 +1,2 @@
+export declare function transformLogOutput(rawOutput: string): string;
+//# sourceMappingURL=log-transform.d.ts.map

package/dist/shared/log-transform.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"log-transform.d.ts","sourceRoot":"","sources":["../../src/shared/log-transform.ts"],"names":[],"mappings":"AAgOA,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAe5D"}

package/dist/shared/path.d.ts

@@ -0,0 +1,2 @@
+export declare const joinPath: (first: string, ...rest: readonly string[]) => string;
+//# sourceMappingURL=path.d.ts.map

package/dist/shared/path.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"path.d.ts","sourceRoot":"","sources":["../../src/shared/path.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,QAAQ,GAAI,OAAO,MAAM,EAAE,GAAG,MAAM,SAAS,MAAM,EAAE,WAYjE,CAAC"}

package/dist/shared/prerequisites/config.d.ts

@@ -0,0 +1,6 @@
+import type { AgentToolsConfig, VpnPrerequisite, ProfilePrerequisites } from "#config/types";
+import type { PrerequisiteResolution } from "#shared/prerequisites/types";
+export declare function normalizeProfilePrerequisites(profile: ProfilePrerequisites): readonly VpnPrerequisite[];
+export declare function resolveProfilePrerequisites(config: AgentToolsConfig, profile: ProfilePrerequisites): PrerequisiteResolution;
+export declare function resolveEnvironmentScopedPrerequisites(profile: ProfilePrerequisites, environment: ProfilePrerequisites): ProfilePrerequisites;
+//# sourceMappingURL=config.d.ts.map

package/dist/shared/prerequisites/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../../src/shared/prerequisites/config.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAC7F,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AAE1E,wBAAgB,6BAA6B,CAC3C,OAAO,EAAE,oBAAoB,GAC5B,SAAS,eAAe,EAAE,CAa5B;AAED,wBAAgB,2BAA2B,CACzC,MAAM,EAAE,gBAAgB,EACxB,OAAO,EAAE,oBAAoB,GAC5B,sBAAsB,CAcxB;AAKD,wBAAgB,qCAAqC,CACnD,OAAO,EAAE,oBAAoB,EAC7B,WAAW,EAAE,oBAAoB,GAChC,oBAAoB,CAWtB"}

package/dist/shared/prerequisites/driver-commands.d.ts

@@ -0,0 +1,19 @@
+import { ChildProcess } from "effect/unstable/process";
+import type { ResolvedVpnDriver } from "#shared/prerequisites/types";
+import type { SanitizedVpnDriver } from "#shared/prerequisites/store";
+export type VpnDriverAction = "status" | "start" | "stop";
+export type VpnCommandSpec = {
+    readonly executable: string;
+    readonly args: readonly string[];
+};
+export declare const sanitizeVpnDriver: (driver: ResolvedVpnDriver) => SanitizedVpnDriver;
+export declare const vpnCommandSpec: (driver: SanitizedVpnDriver, action: VpnDriverAction) => VpnCommandSpec;
+export declare const makeParentVpnCommand: (driver: ResolvedVpnDriver, action: VpnDriverAction, secret?: string) => {
+    command: ChildProcess.StandardCommand;
+    label: string;
+};
+export declare const parseVpnStatus: (driver: SanitizedVpnDriver, result: {
+    readonly stdout: string;
+    readonly exitCode: number;
+}) => boolean | undefined;
+//# sourceMappingURL=driver-commands.d.ts.map

package/dist/shared/prerequisites/driver-commands.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"driver-commands.d.ts","sourceRoot":"","sources":["../../../src/shared/prerequisites/driver-commands.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAEvD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AACrE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AAEtE,MAAM,MAAM,eAAe,GAAG,QAAQ,GAAG,OAAO,GAAG,MAAM,CAAC;AAC1D,MAAM,MAAM,cAAc,GAAG;IAAE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,CAAC;AAE/F,eAAO,MAAM,iBAAiB,GAAI,QAAQ,iBAAiB,KAAG,kBAQ7D,CAAC;AAEF,eAAO,MAAM,cAAc,GACzB,QAAQ,kBAAkB,EAC1B,QAAQ,eAAe,KACtB,cA4BF,CAAC;AAEF,eAAO,MAAM,oBAAoB,GAC/B,QAAQ,iBAAiB,EACzB,QAAQ,eAAe,EACvB,SAAS,MAAM;;;CAUhB,CAAC;AAEF,eAAO,MAAM,cAAc,GACzB,QAAQ,kBAAkB,EAC1B,QAAQ;IAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,KAC7D,OAAO,GAAG,SAkBZ,CAAC"}

package/dist/shared/prerequisites/errors.d.ts

@@ -0,0 +1,10 @@
+import { Schema } from "effect";
+declare const PrerequisiteRunError_base: Schema.Class<PrerequisiteRunError, Schema.TaggedStruct<"PrerequisiteRunError", {
+    readonly message: Schema.String;
+    readonly hint: Schema.optionalKey<Schema.String>;
+}>, import("effect/Cause").YieldableError>;
+export declare class PrerequisiteRunError extends PrerequisiteRunError_base {
+}
+export declare const isPrerequisiteRunError: (error: unknown) => error is PrerequisiteRunError;
+export {};
+//# sourceMappingURL=errors.d.ts.map

package/dist/shared/prerequisites/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../../src/shared/prerequisites/errors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;;;;;AAEhC,qBAAa,oBAAqB,SAAQ,yBAMzC;CAAG;AAEJ,eAAO,MAAM,sBAAsB,GAAI,OAAO,OAAO,KAAG,KAAK,IAAI,oBAC1B,CAAC"}

package/dist/shared/prerequisites/guardian-entry.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=guardian-entry.d.ts.map

package/dist/shared/prerequisites/guardian-entry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"guardian-entry.d.ts","sourceRoot":"","sources":["../../../src/shared/prerequisites/guardian-entry.ts"],"names":[],"mappings":""}

package/dist/shared/prerequisites/guardian.d.ts

@@ -0,0 +1,41 @@
+import type { SanitizedVpnDriver } from "#shared/prerequisites/store";
+import { VpnStore } from "#shared/prerequisites/store";
+import type { VpnCleanupPolicy } from "#shared/prerequisites/types";
+export type GuardianInitMessage = {
+    readonly type: "INIT";
+    readonly driver: SanitizedVpnDriver;
+    readonly runtimeRoot: string;
+    readonly leaseId: string;
+    readonly guardianId: string;
+    readonly ownerPid: number;
+    readonly cleanup: VpnCleanupPolicy;
+    readonly idleDisconnectMs: number;
+    readonly disconnectTimeoutMs: number;
+};
+export type GuardianReleaseMessage = {
+    readonly type: "RELEASE";
+    readonly leaseId: string;
+};
+export type GuardianInboundMessage = GuardianInitMessage | GuardianReleaseMessage;
+export type GuardianOutboundMessage = {
+    readonly type: "READY";
+    readonly leaseId: string;
+    readonly guardianId: string;
+} | {
+    readonly type: "RELEASED";
+    readonly leaseId: string;
+} | {
+    readonly type: "ERROR";
+    readonly message: string;
+};
+export type GuardianCommandRunner = (action: "status" | "stop", timeoutMs: number) => Promise<{
+    readonly stdout: string;
+    readonly stderr: string;
+    readonly exitCode: number;
+}>;
+export declare const makeGuardianCommandRunner: (driver: SanitizedVpnDriver) => GuardianCommandRunner;
+export declare function stopWhenIdle(store: VpnStore, init: GuardianInitMessage, runCommand: GuardianCommandRunner, now?: () => number): Promise<void>;
+export declare function runGuardian(init: GuardianInitMessage, send: (message: GuardianOutboundMessage) => void, runCommand?: GuardianCommandRunner): Promise<{
+    release: () => Promise<void>;
+}>;
+//# sourceMappingURL=guardian.d.ts.map

package/dist/shared/prerequisites/guardian.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"guardian.d.ts","sourceRoot":"","sources":["../../../src/shared/prerequisites/guardian.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AACtE,OAAO,EAAE,QAAQ,EAAE,MAAM,6BAA6B,CAAC;AAEvD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAEpE,MAAM,MAAM,mBAAmB,GAAG;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC;IACpC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,gBAAgB,CAAC;IACnC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;CACtC,CAAC;AACF,MAAM,MAAM,sBAAsB,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAC5F,MAAM,MAAM,sBAAsB,GAAG,mBAAmB,GAAG,sBAAsB,CAAC;AAClF,MAAM,MAAM,uBAAuB,GAC/B;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GACjF;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACvD;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAEzD,MAAM,MAAM,qBAAqB,GAAG,CAClC,MAAM,EAAE,QAAQ,GAAG,MAAM,EACzB,SAAS,EAAE,MAAM,KACd,OAAO,CAAC;IAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAU9F,eAAO,MAAM,yBAAyB,GACnC,QAAQ,kBAAkB,KAAG,qBAiB7B,CAAC;AAOJ,wBAAsB,YAAY,CAChC,KAAK,EAAE,QAAQ,EACf,IAAI,EAAE,mBAAmB,EACzB,UAAU,EAAE,qBAAqB,EACjC,GAAG,GAAE,MAAM,MAAiB,GAC3B,OAAO,CAAC,IAAI,CAAC,CAsDf;AAED,wBAAgB,WAAW,CACzB,IAAI,EAAE,mBAAmB,EACzB,IAAI,EAAE,CAAC,OAAO,EAAE,uBAAuB,KAAK,IAAI,EAChD,UAAU,GAAE,qBAA8D,GACzE,OAAO,CAAC;IAAE,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE,CAAC,CAoC3C"}

package/dist/shared/prerequisites/index.d.ts

@@ -0,0 +1,6 @@
+export { runWithProfilePrerequisites } from "#shared/prerequisites/runtime";
+export { resolveEnvironmentScopedPrerequisites } from "#shared/prerequisites/config";
+export { isPrerequisiteRunError, PrerequisiteRunError } from "#shared/prerequisites/errors";
+export type { PrerequisiteCommandResult, PrerequisiteCommandRunner, } from "#shared/prerequisites/types";
+export type { ProfilePrerequisites, VpnPrerequisite } from "#config/types";
+//# sourceMappingURL=index.d.ts.map

package/dist/shared/prerequisites/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/shared/prerequisites/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,2BAA2B,EAAE,MAAM,+BAA+B,CAAC;AAE5E,OAAO,EAAE,qCAAqC,EAAE,MAAM,8BAA8B,CAAC;AAErF,OAAO,EAAE,sBAAsB,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AAE5F,YAAY,EACV,yBAAyB,EACzB,yBAAyB,GAC1B,MAAM,6BAA6B,CAAC;AAErC,YAAY,EAAE,oBAAoB,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC"}

package/dist/shared/prerequisites/runtime.d.ts

@@ -0,0 +1,26 @@
+import { Effect } from "effect";
+import type { AgentToolsConfig, ProfilePrerequisites } from "#config/types";
+import type { PrerequisiteCommandRunner } from "#shared/prerequisites/types";
+import { PrerequisiteRunError } from "#shared/prerequisites/errors";
+export declare const DEFAULT_VPN_IDLE_DISCONNECT_MS = 30000;
+type TimeoutScheduler = (callback: () => void, delayMs: number) => () => void;
+export declare const scheduleLongTimeout: (callback: () => void, timeoutMs: number, now?: () => number, schedule?: TimeoutScheduler) => () => void;
+export declare const vpnStartFailureMessage: (key: string, stderr: string, redactStderr: boolean) => string;
+export declare const missingVpnSecretError: (key: string) => PrerequisiteRunError;
+type GuardianSpawner = typeof Bun.spawn;
+type ReleasableGuardian = {
+    readonly release: () => Promise<void>;
+};
+export declare const releaseHeldLeases: (leases: readonly {
+    readonly guardian: ReleasableGuardian;
+}[]) => Effect.Effect<void, never, never>;
+export declare const closeVpnStoreAfter: <A, E>(key: string, guardian: ReleasableGuardian, close: () => void, body: Effect.Effect<A, E, never>) => Effect.Effect<A, E | PrerequisiteRunError, never>;
+export declare const runWithProfilePrerequisites: <A, E, CommandError>(config: AgentToolsConfig, profile: ProfilePrerequisites, runCommand: PrerequisiteCommandRunner<CommandError>, effect: Effect.Effect<A, E, never>, options?: {
+    /** Caller proved the target is already reachable: skip the VPN entirely (no status, no lease). */
+    alreadySatisfied?: boolean;
+    tryWithoutPrerequisites?: boolean;
+    runGuardianInProcess?: boolean;
+    guardianSpawn?: GuardianSpawner;
+}) => Effect.Effect<A, E | PrerequisiteRunError, never>;
+export {};
+//# sourceMappingURL=runtime.d.ts.map

package/dist/shared/prerequisites/runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../../src/shared/prerequisites/runtime.ts"],"names":[],"mappings":"AAEA,OAAO,EAAY,MAAM,EAAkB,MAAM,QAAQ,CAAC;AAE1D,OAAO,KAAK,EAAE,gBAAgB,EAAE,oBAAoB,EAAa,MAAM,eAAe,CAAC;AACvF,OAAO,KAAK,EACV,yBAAyB,EAG1B,MAAM,6BAA6B,CAAC;AASrC,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AAIpE,eAAO,MAAM,8BAA8B,QAAS,CAAC;AAOrD,KAAK,gBAAgB,GAAG,CAAC,QAAQ,EAAE,MAAM,IAAI,EAAE,OAAO,EAAE,MAAM,KAAK,MAAM,IAAI,CAAC;AAE9E,eAAO,MAAM,mBAAmB,GAC9B,UAAU,MAAM,IAAI,EACpB,WAAW,MAAM,EACjB,MAAK,MAAM,MAAiB,EAC5B,WAAU,gBAGT,eAoBF,CAAC;AAMF,eAAO,MAAM,sBAAsB,GAAI,KAAK,MAAM,EAAE,QAAQ,MAAM,EAAE,cAAc,OAAO,WAGxF,CAAC;AAEF,eAAO,MAAM,qBAAqB,GAAI,KAAK,MAAM,yBAI7C,CAAC;AAqEL,KAAK,eAAe,GAAG,OAAO,GAAG,CAAC,KAAK,CAAC;AA+UxC,KAAK,kBAAkB,GAAG;IAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE,CAAC;AAUpE,eAAO,MAAM,iBAAiB,GAAI,QAAQ,SAAS;IAAE,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAA;CAAE,EAAE,sCAMzF,CAAC;AAEN,eAAO,MAAM,kBAAkB,GAAI,CAAC,EAAE,CAAC,EACrC,KAAK,MAAM,EACX,UAAU,kBAAkB,EAC5B,OAAO,MAAM,IAAI,EACjB,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,KAC/B,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,GAAG,oBAAoB,EAAE,KAAK,CAc/C,CAAC;AA6OL,eAAO,MAAM,2BAA2B,GAAI,CAAC,EAAE,CAAC,EAAE,YAAY,EAC5D,QAAQ,gBAAgB,EACxB,SAAS,oBAAoB,EAC7B,YAAY,yBAAyB,CAAC,YAAY,CAAC,EACnD,QAAQ,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,EAClC,UAAU;IACR,kGAAkG;IAClG,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,uBAAuB,CAAC,EAAE,OAAO,CAAC;IAClC,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,aAAa,CAAC,EAAE,eAAe,CAAC;CACjC,KACA,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,GAAG,oBAAoB,EAAE,KAAK,CAgElD,CAAC"}

package/dist/shared/prerequisites/store.d.ts

@@ -0,0 +1,99 @@
+import type { ResolvedVpnDriver, VpnCleanupPolicy } from "#shared/prerequisites/types";
+export type VpnLifecycle = "DOWN" | "EXTERNAL" | "CHECKING" | "STARTING" | "ACTIVE" | "IDLE" | "STOPPING" | "UNKNOWN";
+export type VpnLeaseStatus = "PENDING" | "ACTIVE";
+export type VpnOperationKind = "CHECK" | "START" | "STOP";
+export type SanitizedVpnDriver = {
+    readonly type: "macos-scutil";
+    readonly platform: "darwin";
+    readonly serviceName: string;
+} | {
+    readonly type: "linux-nmcli";
+    readonly platform: "linux";
+    readonly connectionName: string;
+} | {
+    readonly type: "windows-rasdial";
+    readonly platform: "win32";
+    readonly entryName: string;
+};
+export type VpnStateSnapshot = {
+    readonly lifecycle: VpnLifecycle;
+    readonly managedEpochId: string | null;
+    readonly operationId: string | null;
+    readonly operationKind: VpnOperationKind | null;
+    readonly operationToken: string | null;
+    readonly operationPid: number | null;
+    readonly revision: number;
+    readonly idleDeadline: number | null;
+    readonly evidence: string | null;
+    readonly adoptExternalAfterStart: boolean;
+    readonly updatedAt: number;
+    readonly pendingLeases: number;
+    readonly activeLeases: number;
+};
+export type OperationGuard = {
+    readonly operationId: string;
+    readonly token: string;
+    readonly revision: number;
+};
+export declare class VpnStoreError extends Error {
+    readonly hint = "Stop all agent-tools processes, then remove this VPN state directory before retrying.";
+    constructor(message: string, options?: ErrorOptions);
+}
+export declare const sanitizeVpnDriver: (driver: ResolvedVpnDriver) => SanitizedVpnDriver;
+export declare const canonicalDriverIdentity: (driver: SanitizedVpnDriver) => string;
+export declare const getVpnStoreLocation: (driver: SanitizedVpnDriver, root?: string) => {
+    identity: string;
+    root: string;
+    directory: string;
+    databasePath: string;
+};
+export declare class VpnStore {
+    private readonly db;
+    readonly directory: string;
+    readonly databasePath: string;
+    private constructor();
+    static open(driver: SanitizedVpnDriver, options?: {
+        root?: string;
+        now?: number;
+    }): VpnStore;
+    close(): void;
+    settings(): {
+        journalMode: string | undefined;
+        synchronous: number | undefined;
+        userVersion: number | undefined;
+    };
+    private immediate;
+    snapshot(): VpnStateSnapshot;
+    reserveLease(input: {
+        leaseId: string;
+        guardianId: string;
+        ownerPid: number;
+        cleanup: VpnCleanupPolicy;
+        now: number;
+    }): VpnStateSnapshot;
+    activateLease(leaseId: string, guardianId: string, now: number): boolean;
+    claimCheck(operationId: string, token: string, ownerPid: number, now: number): OperationGuard | undefined;
+    claimExternalCheck(operationId: string, token: string, ownerPid: number, now: number): OperationGuard | undefined;
+    claimStart(operationId: string, token: string, ownerPid: number, now: number): OperationGuard | undefined;
+    private claimOperation;
+    claimStop(operationId: string, token: string, ownerPid: number, now: number): OperationGuard | undefined;
+    commitCheck(guard: OperationGuard, connected: boolean, now: number): boolean;
+    commitStart(guard: OperationGuard, result: "managed" | "external" | "down" | "unknown", managedEpochId: string, evidence: string, now: number): boolean;
+    commitStop(guard: OperationGuard, disconnected: boolean, evidence: string, now: number): boolean;
+    reconcileOperation(snapshot: VpnStateSnapshot, connected: boolean | undefined, now: number): boolean;
+    /** Recovers terminal UNKNOWN from an observed status; fenced so it can never take ownership from a holder. */
+    reconcileUnknown(snapshot: VpnStateSnapshot, connected: boolean, now: number): boolean;
+    private commitOperation;
+    releaseLease(input: {
+        leaseId: string;
+        guardianId: string;
+        idleDisconnectMs: number;
+        now: number;
+    }): {
+        released: boolean;
+        deadline: number | null;
+    };
+    abandonLease(leaseId: string, now: number): boolean;
+    deleteDeadLeases(isPidLive: (pid: number) => boolean, idleDisconnectMs: number, now: number): number;
+}
+//# sourceMappingURL=store.d.ts.map

package/dist/shared/prerequisites/store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../../src/shared/prerequisites/store.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAQvF,MAAM,MAAM,YAAY,GACpB,MAAM,GACN,UAAU,GACV,UAAU,GACV,UAAU,GACV,QAAQ,GACR,MAAM,GACN,UAAU,GACV,SAAS,CAAC;AACd,MAAM,MAAM,cAAc,GAAG,SAAS,GAAG,QAAQ,CAAC;AAClD,MAAM,MAAM,gBAAgB,GAAG,OAAO,GAAG,OAAO,GAAG,MAAM,CAAC;AAE1D,MAAM,MAAM,kBAAkB,GAC1B;IAAE,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GAC5F;IAAE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;CAAE,GAC7F;IAAE,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC;AAEjG,MAAM,MAAM,gBAAgB,GAAG;IAC7B,QAAQ,CAAC,SAAS,EAAE,YAAY,CAAC;IACjC,QAAQ,CAAC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IACvC,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,aAAa,EAAE,gBAAgB,GAAG,IAAI,CAAC;IAChD,QAAQ,CAAC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IACvC,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,QAAQ,CAAC,uBAAuB,EAAE,OAAO,CAAC;IAC1C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B,CAAC;AAmBF,qBAAa,aAAc,SAAQ,KAAK;IACtC,QAAQ,CAAC,IAAI,2FAAmB;gBAEpB,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,YAAY;CAIpD;AAED,eAAO,MAAM,iBAAiB,GAAI,QAAQ,iBAAiB,KAAG,kBAQ7D,CAAC;AAEF,eAAO,MAAM,uBAAuB,GAAI,QAAQ,kBAAkB,KAAG,MAoBpE,CAAC;AAKF,eAAO,MAAM,mBAAmB,GAAI,QAAQ,kBAAkB,EAAE,OAAO,MAAM;;;;;CAU5E,CAAC;AAoFF,qBAAa,QAAQ;IAEjB,OAAO,CAAC,QAAQ,CAAC,EAAE;IACnB,QAAQ,CAAC,SAAS,EAAE,MAAM;IAC1B,QAAQ,CAAC,YAAY,EAAE,MAAM;IAH/B,OAAO;IAMP,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,kBAAkB,EAAE,OAAO,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,QAAQ;IA+D5F,KAAK;IAKL,QAAQ;;;;;IAWR,OAAO,CAAC,SAAS;IAajB,QAAQ,IAAI,gBAAgB;IAgC5B,YAAY,CAAC,KAAK,EAAE;QAClB,OAAO,EAAE,MAAM,CAAC;QAChB,UAAU,EAAE,MAAM,CAAC;QACnB,QAAQ,EAAE,MAAM,CAAC;QACjB,OAAO,EAAE,gBAAgB,CAAC;QAC1B,GAAG,EAAE,MAAM,CAAC;KACb,GAAG,gBAAgB;IAoBpB,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO;IAYxE,UAAU,CACR,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM,EAChB,GAAG,EAAE,MAAM,GACV,cAAc,GAAG,SAAS;IAI7B,kBAAkB,CAChB,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM,EAChB,GAAG,EAAE,MAAM,GACV,cAAc,GAAG,SAAS;IAI7B,UAAU,CACR,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM,EAChB,GAAG,EAAE,MAAM,GACV,cAAc,GAAG,SAAS;IAI7B,OAAO,CAAC,cAAc;IAwBtB,SAAS,CACP,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM,EAChB,GAAG,EAAE,MAAM,GACV,cAAc,GAAG,SAAS;IAgB7B,WAAW,CAAC,KAAK,EAAE,cAAc,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO;IAa5E,WAAW,CACT,KAAK,EAAE,cAAc,EACrB,MAAM,EAAE,SAAS,GAAG,UAAU,GAAG,MAAM,GAAG,SAAS,EACnD,cAAc,EAAE,MAAM,EACtB,QAAQ,EAAE,MAAM,EAChB,GAAG,EAAE,MAAM,GACV,OAAO;IAmBV,UAAU,CAAC,KAAK,EAAE,cAAc,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO;IAWhG,kBAAkB,CAChB,QAAQ,EAAE,gBAAgB,EAC1B,SAAS,EAAE,OAAO,GAAG,SAAS,EAC9B,GAAG,EAAE,MAAM,GACV,OAAO;IAiCV,8GAA8G;IAC9G,gBAAgB,CAAC,QAAQ,EAAE,gBAAgB,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO;IAqBtF,OAAO,CAAC,eAAe;IAmCvB,YAAY,CAAC,KAAK,EAAE;QAClB,OAAO,EAAE,MAAM,CAAC;QAChB,UAAU,EAAE,MAAM,CAAC;QACnB,gBAAgB,EAAE,MAAM,CAAC;QACzB,GAAG,EAAE,MAAM,CAAC;KACb,GAAG;QAAE,QAAQ,EAAE,OAAO,CAAC;QAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE;IA2ClD,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO;IA4CnD,gBAAgB,CACd,SAAS,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,EACnC,gBAAgB,EAAE,MAAM,EACxB,GAAG,EAAE,MAAM,GACV,MAAM;CA+CV"}

package/dist/shared/prerequisites/types.d.ts

@@ -0,0 +1,39 @@
+import { Schema, type Effect } from "effect";
+import type { ChildProcess } from "effect/unstable/process";
+import type { LinuxNmcliVpnDriverConfig, MacosScutilVpnDriverConfig, VpnPrerequisite, WindowsRasdialVpnDriverConfig } from "#config/types";
+export type PrerequisiteResolution = {
+    success: true;
+    prerequisites: readonly VpnPrerequisite[];
+} | {
+    success: false;
+    error: string;
+    hint: string;
+};
+export type SupportedPlatform = "darwin" | "linux" | "win32";
+export type ResolvedVpnDriver = (MacosScutilVpnDriverConfig & {
+    platform: "darwin";
+    serviceName: string;
+}) | (LinuxNmcliVpnDriverConfig & {
+    platform: "linux";
+    connectionName: string;
+}) | (WindowsRasdialVpnDriverConfig & {
+    platform: "win32";
+    entryName: string;
+});
+export type VpnDriverResolution = {
+    success: true;
+    driver: ResolvedVpnDriver;
+} | {
+    success: false;
+    error: string;
+    hint: string;
+};
+export declare const VpnCleanupPolicy: Schema.Literals<readonly ["leave-running", "stop-if-started"]>;
+export type VpnCleanupPolicy = Schema.Schema.Type<typeof VpnCleanupPolicy>;
+export type PrerequisiteCommandResult = {
+    readonly stdout: string;
+    readonly stderr: string;
+    readonly exitCode: number;
+};
+export type PrerequisiteCommandRunner<E> = (command: ChildProcess.Command, label: string) => Effect.Effect<PrerequisiteCommandResult, E, never>;
+//# sourceMappingURL=types.d.ts.map

package/dist/shared/prerequisites/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/shared/prerequisites/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,KAAK,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC7C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAE5D,OAAO,KAAK,EACV,yBAAyB,EACzB,0BAA0B,EAC1B,eAAe,EACf,6BAA6B,EAC9B,MAAM,eAAe,CAAC;AAEvB,MAAM,MAAM,sBAAsB,GAC9B;IAAE,OAAO,EAAE,IAAI,CAAC;IAAC,aAAa,EAAE,SAAS,eAAe,EAAE,CAAA;CAAE,GAC5D;IAAE,OAAO,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAEpD,MAAM,MAAM,iBAAiB,GAAG,QAAQ,GAAG,OAAO,GAAG,OAAO,CAAC;AAE7D,MAAM,MAAM,iBAAiB,GACzB,CAAC,0BAA0B,GAAG;IAAE,QAAQ,EAAE,QAAQ,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,CAAC,GAC1E,CAAC,yBAAyB,GAAG;IAAE,QAAQ,EAAE,OAAO,CAAC;IAAC,cAAc,EAAE,MAAM,CAAA;CAAE,CAAC,GAC3E,CAAC,6BAA6B,GAAG;IAAE,QAAQ,EAAE,OAAO,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAE/E,MAAM,MAAM,mBAAmB,GAC3B;IAAE,OAAO,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,iBAAiB,CAAA;CAAE,GAC5C;IAAE,OAAO,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAEpD,eAAO,MAAM,gBAAgB,gEAAwD,CAAC;AACtF,MAAM,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE3E,MAAM,MAAM,yBAAyB,GAAG;IACtC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,yBAAyB,CAAC,CAAC,IAAI,CACzC,OAAO,EAAE,YAAY,CAAC,OAAO,EAC7B,KAAK,EAAE,MAAM,KACV,MAAM,CAAC,MAAM,CAAC,yBAAyB,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC"}

package/dist/shared/prerequisites/vpn.d.ts

@@ -0,0 +1,5 @@
+import type { VpnConfig } from "#config/types";
+import type { ResolvedVpnDriver, VpnDriverResolution } from "#shared/prerequisites/types";
+export declare function resolveVpnDriverConfig(config: VpnConfig, platform?: typeof process.platform): VpnDriverResolution;
+export declare function missingVpnToolHint(driver: ResolvedVpnDriver): string;
+//# sourceMappingURL=vpn.d.ts.map

package/dist/shared/prerequisites/vpn.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vpn.d.ts","sourceRoot":"","sources":["../../../src/shared/prerequisites/vpn.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAmB,MAAM,eAAe,CAAC;AAChE,OAAO,KAAK,EACV,iBAAiB,EAEjB,mBAAmB,EACpB,MAAM,6BAA6B,CAAC;AAgErC,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,SAAS,EACjB,QAAQ,GAAE,OAAO,OAAO,CAAC,QAA2B,GACnD,mBAAmB,CA+CrB;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,iBAAiB,GAAG,MAAM,CAUpE"}

package/dist/shared/schema-dump.d.ts

@@ -0,0 +1,27 @@
+import { Command } from "effect/unstable/cli";
+/**
+ * Machine-readable command-tree dump so an agent can discover the whole CLI surface in ONE call
+ * instead of repeated `--help` round-trips (the top remaining discovery friction in the usage audit).
+ */
+export type FlagSchema = {
+    readonly name: string;
+    readonly type?: string;
+    readonly choices?: readonly string[];
+    readonly description?: string;
+    readonly aliases?: readonly string[];
+};
+export type CommandSchema = {
+    readonly name: string;
+    readonly description?: string;
+    readonly flags: readonly FlagSchema[];
+    readonly subcommands: readonly CommandSchema[];
+};
+export declare const dumpCommandSchema: (command: unknown) => CommandSchema;
+/**
+ * Builds the `commands` subcommand for a tool. Pass a thunk returning the tool's root command so the
+ * dump reflects the fully-assembled tree (the root is defined after its subcommands, incl. this one).
+ */
+export declare const makeSchemaCommand: (getRoot: () => unknown) => Command.Command<"commands", {
+    readonly format: "json" | "toon";
+}, {}, never, never>;
+//# sourceMappingURL=schema-dump.d.ts.map

package/dist/shared/schema-dump.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema-dump.d.ts","sourceRoot":"","sources":["../../src/shared/schema-dump.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAK9C;;;GAGG;AACH,MAAM,MAAM,UAAU,GAAG;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACtC,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,KAAK,EAAE,SAAS,UAAU,EAAE,CAAC;IACtC,QAAQ,CAAC,WAAW,EAAE,SAAS,aAAa,EAAE,CAAC;CAChD,CAAC;AAiDF,eAAO,MAAM,iBAAiB,GAAI,SAAS,OAAO,KAAG,aASpD,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,iBAAiB,GAAI,SAAS,MAAM,OAAO;;oBAOrD,CAAC"}

package/dist/shared/throttle.d.ts

@@ -0,0 +1,17 @@
+import { Effect, Schema } from "effect";
+declare const ThrottleError_base: Schema.Class<ThrottleError, Schema.TaggedStruct<"ThrottleError", {
+    readonly message: Schema.String;
+    readonly label: Schema.String;
+    readonly limit: Schema.Number;
+    readonly windowMs: Schema.Number;
+}>, import("effect/Cause").YieldableError>;
+export declare class ThrottleError extends ThrottleError_base {
+}
+export declare const createThrottle: (opts: {
+    maxPerMinute: number;
+    label: string;
+}) => {
+    check: () => Effect.Effect<void, ThrottleError>;
+};
+export {};
+//# sourceMappingURL=throttle.d.ts.map

package/dist/shared/throttle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"throttle.d.ts","sourceRoot":"","sources":["../../src/shared/throttle.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAO,MAAM,EAAE,MAAM,QAAQ,CAAC;;;;;;;AAI7C,qBAAa,aAAc,SAAQ,kBAKjC;CAAG;AAEL,eAAO,MAAM,cAAc,GAAI,MAAM;IAAE,YAAY,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE;iBAGxD,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,aAAa,CAAC;CAoBrD,CAAC"}

package/dist/shared/transform.d.ts

@@ -0,0 +1,49 @@
+type DeduplicateOptions = {
+    normalizeTimestamps?: boolean;
+    normalizeUUIDs?: boolean;
+    normalizeHex?: boolean;
+    normalizeNumbers?: boolean;
+    normalizePaths?: boolean;
+    maxUniqueLines?: number;
+};
+/**
+ * Deduplicate consecutive identical lines after normalization.
+ * Normalizes timestamps, UUIDs, hex strings, large numbers before comparison.
+ * Returns lines with [×N] suffix for collapsed runs.
+ */
+export declare function deduplicateLines(text: string, options?: DeduplicateOptions): string;
+/**
+ * Parse kubectl-style whitespace-aligned text tables.
+ * Handles multi-word headers (e.g., "NOMINATED NODE" → "NOMINATED_NODE").
+ * Returns structured array of row objects keyed by header name.
+ */
+export declare function parseTextTable(text: string): {
+    headers: string[];
+    rows: Record<string, string>[];
+};
+/**
+ * Count occurrences of values for a given field across items.
+ * Returns a map of value → count, sorted by count descending.
+ */
+export declare function aggregateByField<T extends Record<string, unknown>>(items: T[], field: keyof T & string): Record<string, number>;
+/**
+ * Format aggregated counts into a human-readable summary string.
+ * Example: formatCountSummary({Running: 30, Error: 3}, 33, "pods") → "33 pods: 30 Running, 3 Error"
+ */
+export declare function formatCountSummary(counts: Record<string, number>, total: number, label: string): string;
+/**
+ * Truncate an array of rows to a maximum length, returning metadata about truncation.
+ */
+export declare function truncateRows<T>(data: T[], limit: number): {
+    rows: T[];
+    truncated: boolean;
+    total: number;
+    showing: number;
+};
+/**
+ * Remove columns/keys from records where ALL values are empty/null/undefined.
+ * Optionally remove columns where >threshold% of values are empty.
+ */
+export declare function stripEmptyColumns<T extends Record<string, unknown>>(records: T[], threshold?: number): T[];
+export {};
+//# sourceMappingURL=transform.d.ts.map

package/dist/shared/transform.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transform.d.ts","sourceRoot":"","sources":["../../src/shared/transform.ts"],"names":[],"mappings":"AAAA,KAAK,kBAAkB,GAAG;IACxB,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,CAAC;AAyCF;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE,kBAAuB,GAAG,MAAM,CAsDvF;AA8CD;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG;IAC5C,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC;CAChC,CA0BA;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChE,KAAK,EAAE,CAAC,EAAE,EACV,KAAK,EAAE,MAAM,CAAC,GAAG,MAAM,GACtB,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CA+BxB;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC9B,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,MAAM,GACZ,MAAM,CAQR;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,CAAC,EAC5B,IAAI,EAAE,CAAC,EAAE,EACT,KAAK,EAAE,MAAM,GACZ;IAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IAAC,SAAS,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAUnE;AAcD;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjE,OAAO,EAAE,CAAC,EAAE,EACZ,SAAS,SAAM,GACd,CAAC,EAAE,CAmCL"}

package/dist/shared/types.d.ts

@@ -0,0 +1,30 @@
+export type OutputFormat = "json" | "toon";
+export type Environment = "local" | "test" | "prod";
+export type BaseResult = {
+    success: boolean;
+    error?: string;
+    executionTimeMs: number;
+    nextCommand?: string;
+    retryable?: boolean;
+    hint?: string;
+};
+export type ToolResult = BaseResult & {
+    message: string;
+    data?: unknown;
+};
+export type CommandOptions = {
+    cwd?: string;
+    env?: Record<string, string>;
+    timeout?: number;
+    killSignal?: NodeJS.Signals;
+};
+export type CommandResult = {
+    success: boolean;
+    stdout: string;
+    stderr: string;
+    exitCode: number;
+    signalCode: NodeJS.Signals | null;
+    timedOut: boolean;
+    executionTimeMs: number;
+};
+//# sourceMappingURL=types.d.ts.map

package/dist/shared/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/shared/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,MAAM,CAAC;AAC3C,MAAM,MAAM,WAAW,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,CAAC;AAEpD,MAAM,MAAM,UAAU,GAAG;IACvB,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,eAAe,EAAE,MAAM,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,CAAC;AAGF,MAAM,MAAM,UAAU,GAAG,UAAU,GAAG;IACpC,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC3B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC,OAAO,CAAC;CAC7B,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;IAClC,QAAQ,EAAE,OAAO,CAAC;IAClB,eAAe,EAAE,MAAM,CAAC;CACzB,CAAC"}