@canonical/pragma-cli 0.34.0 → 0.36.0

package/dist/src/kernel/completion/templates/index.js

@@ -0,0 +1,23 @@
+/**
+ * The static shell-completion templates — one emitter per shell, all fed by
+ * the same completion model.
+ *
+ * The three exports are the domain: each takes the model and returns the text
+ * of a script `setup completions` writes to disk. They are grouped because
+ * they are interchangeable answers to one question — which shell is this — and
+ * because they must stay in step: a fact the model carries has to be
+ * expressible in all three, so a change to one is a change to all three.
+ *
+ * What the barrel does NOT expose is the rendering layer underneath
+ * (`shared.ts`): the per-verb views, the token allowlist re-assertion, the
+ * name/flag list derivations. Those exist so the scripts cannot disagree about
+ * structure, and they are safe only in the emit context they were built for —
+ * every token they return has been re-checked against the safety allowlist on
+ * its way into script text. Offering them across the domain boundary would
+ * offer a way to compose that text without that check, which is the one thing
+ * this domain exists to make impossible.
+ */
+export { bashScript } from "./bash.js";
+export { fishScript } from "./fish.js";
+export { zshScript } from "./zsh.js";
+//# sourceMappingURL=index.js.map

package/dist/src/kernel/completion/templates/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/kernel/completion/templates/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC"}

package/dist/src/kernel/completion/templates/shared.js

@@ -0,0 +1,98 @@
+/**
+ * Shared rendering helpers for the static shell-completion templates.
+ *
+ * Everything a template interpolates flows through here: tokens are
+ * re-asserted against the safety allowlist at emit time (belt-and-braces on
+ * top of the model-build gate), and the per-(noun,verb) views give each shell
+ * the same case-table data, so the three scripts can never disagree about
+ * structure. All lists are derived from the model — the templates contain no
+ * live names of their own.
+ */
+import { assertSafeToken } from "../model.js";
+export { assertSafeToken } from "../model.js";
+/**
+ * Every verb view of the model, in deterministic order (nouns sorted, each
+ * noun's self-verb first, then its sub-verbs sorted).
+ */
+export function verbViews(model) {
+    const views = [];
+    for (const entry of model.nouns) {
+        if (entry.selfVerb) {
+            views.push({
+                noun: entry.noun,
+                verb: entry.selfVerb,
+                self: true,
+                key: `${entry.noun}/`,
+                skipWords: 1,
+            });
+        }
+        for (const verb of entry.verbs) {
+            views.push({
+                noun: entry.noun,
+                verb,
+                self: false,
+                key: `${entry.noun}/${verb.label}`,
+                skipWords: 2,
+            });
+        }
+    }
+    return views;
+}
+/**
+ * Join already-validated tokens into a script word list, re-asserting each
+ * (flags are validated on their bare name — the dashes are ours).
+ *
+ * @param tokens - The tokens to inline.
+ * @param where - Human-readable location for the throw message.
+ * @returns The space-joined list, safe to place inside double quotes.
+ * @throws Error when any token fails the allowlist.
+ */
+export function wordList(tokens, where) {
+    for (const token of tokens) {
+        assertSafeToken(token.replace(/^--?/, ""), where);
+    }
+    return tokens.join(" ");
+}
+/** The noun tokens offered at the root. */
+export function nounNames(model) {
+    return model.nouns.map((entry) => entry.noun);
+}
+/** Global flag names offered at the root (includes `rootOnly`). */
+export function rootFlagNames(model) {
+    return model.globalFlags.map((flag) => flag.flag);
+}
+/** Global flag names offered after a noun (excludes `rootOnly`). */
+export function globalFlagNames(model) {
+    return model.globalFlags
+        .filter((flag) => flag.rootOnly !== true)
+        .map((flag) => flag.flag);
+}
+/** Global flags that take a value (their values are inlined per shell). */
+export function globalValueFlags(model) {
+    return model.globalFlags.filter((flag) => flag.takesValue);
+}
+/** The flag names a view offers: verb + mutation (iff mutates) + globals. */
+export function offeredFlagNames(model, view) {
+    return [
+        ...view.verb.flags.map((flag) => flag.flag),
+        ...(view.verb.mutates ? model.mutationFlags.map((flag) => flag.flag) : []),
+        ...globalFlagNames(model),
+    ];
+}
+/**
+ * Every value-taking flag in scope for a view (verb + globals) — the flags
+ * whose values a positional-index scan must skip.
+ */
+export function valueFlagNames(model, view) {
+    return [
+        ...view.verb.flags
+            .filter((flag) => flag.takesValue)
+            .map((flag) => flag.flag),
+        ...globalValueFlags(model).map((flag) => flag.flag),
+    ];
+}
+/** Whether a view has any flag of its own to name (beyond the globals). */
+export function hasOwnFlags(view) {
+    return view.verb.flags.length > 0 || view.verb.mutates;
+}
+//# sourceMappingURL=shared.js.map

package/dist/src/kernel/completion/templates/shared.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shared.js","sourceRoot":"","sources":["../../../../../src/kernel/completion/templates/shared.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAQ9C,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAgB9C;;;GAGG;AACH,MAAM,UAAU,SAAS,CAAC,KAAsB;IAC9C,MAAM,KAAK,GAAe,EAAE,CAAC;IAC7B,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAChC,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YACnB,KAAK,CAAC,IAAI,CAAC;gBACT,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,IAAI,EAAE,KAAK,CAAC,QAAQ;gBACpB,IAAI,EAAE,IAAI;gBACV,GAAG,EAAE,GAAG,KAAK,CAAC,IAAI,GAAG;gBACrB,SAAS,EAAE,CAAC;aACb,CAAC,CAAC;QACL,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YAC/B,KAAK,CAAC,IAAI,CAAC;gBACT,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,IAAI;gBACJ,IAAI,EAAE,KAAK;gBACX,GAAG,EAAE,GAAG,KAAK,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE;gBAClC,SAAS,EAAE,CAAC;aACb,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,QAAQ,CAAC,MAAyB,EAAE,KAAa;IAC/D,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;IACpD,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC1B,CAAC;AAED,2CAA2C;AAC3C,MAAM,UAAU,SAAS,CAAC,KAAsB;IAC9C,OAAO,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAgB,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAC3D,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,aAAa,CAAC,KAAsB;IAClD,OAAO,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACpD,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,eAAe,CAAC,KAAsB;IACpD,OAAO,KAAK,CAAC,WAAW;SACrB,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC;SACxC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC9B,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,gBAAgB,CAAC,KAAsB;IACrD,OAAO,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;AAC7D,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,gBAAgB,CAC9B,KAAsB,EACtB,IAAc;IAEd,OAAO;QACL,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;QAC3C,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,GAAG,eAAe,CAAC,KAAK,CAAC;KAC1B,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAC5B,KAAsB,EACtB,IAAc;IAEd,OAAO;QACL,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK;aACf,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC;aACjC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;QAC3B,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;KACpD,CAAC;AACJ,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,WAAW,CAAC,IAAc;IACxC,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;AACzD,CAAC"}

package/dist/src/kernel/completion/templates/zsh.js

@@ -0,0 +1,201 @@
+// biome-ignore-all lint/suspicious/noTemplateCurlyInString: zsh parameter expansions, not JS templates
+/**
+ * The zsh completion script (static tier). Requires zsh >= 5.
+ *
+ * Deliberately a `compadd`-table script, NOT `_arguments` — `_arguments`
+ * would interpolate param docs into its spec strings, an injection surface
+ * the grammar must never open. Structure is inlined as literal `compadd --`
+ * arguments (the `--` guard keeps dash-leading candidates data); files go
+ * through `_files`; only `{kind:"names"}` contexts exec the CLI, ingesting
+ * `pragma __complete` output via the newline-split `${(f)...}` expansion —
+ * candidates are never word-split or evaluated. That exec is gated by
+ * `minChars`. No `eval`, no backticks.
+ */
+import { globalFlagNames, globalValueFlags, hasOwnFlags, nounNames, offeredFlagNames, rootFlagNames, valueFlagNames, verbViews, wordList, } from "./shared.js";
+/** A shell-safe function-name base for the bin (`pragma` -> `_pragma`). */
+function fnBase(binName) {
+    return `_${binName.replace(/[^A-Za-z0-9_]/g, "_")}`;
+}
+/** The zsh action completing a value source, or undefined for `none`. */
+function sourceAction(source, fn) {
+    switch (source.kind) {
+        case "values":
+            return `compadd -- ${wordList(source.values, "zsh values")}`;
+        case "files":
+            return "_files";
+        case "names":
+            return `${fn}_dynamic`;
+        case "none":
+            return undefined;
+    }
+}
+/** The `noun/verb/--flag` case arms answering flag-value contexts. */
+function flagValueArms(model, fn) {
+    const arms = [];
+    for (const view of verbViews(model)) {
+        for (const flag of view.verb.flags) {
+            if (!flag.takesValue)
+                continue;
+            const action = sourceAction(flag.source, fn);
+            arms.push(`    ${view.key}/${flag.flag}) ${action === undefined ? "return 0" : `${action}; return 0`} ;;`);
+        }
+    }
+    return arms;
+}
+/** The global `--flag` case arms (e.g. --format, --detail values). */
+function globalValueArms(model, fn) {
+    return globalValueFlags(model).flatMap((flag) => {
+        const action = sourceAction(flag.source, fn);
+        return action === undefined
+            ? []
+            : [`    ${flag.flag}) ${action}; return 0 ;;`];
+    });
+}
+/** The `noun/verb` case arms offering per-verb flag names. */
+function flagNameArms(model) {
+    return verbViews(model)
+        .filter(hasOwnFlags)
+        .map((view) => `      ${view.key}) compadd -- ${wordList(offeredFlagNames(model, view), "zsh flags")}; return 0 ;;`);
+}
+/** The `noun` case arms offering sub-verb labels. */
+function verbArms(model) {
+    return model.nouns
+        .filter((entry) => entry.verbs.length > 0)
+        .map((entry) => `      ${entry.noun}) compadd -- ${wordList(entry.verbs.map((verb) => verb.label), "zsh verbs")}; return 0 ;;`);
+}
+/** The positional case arm for one view, or undefined when it offers nothing. */
+function positionalArm(model, view, fn) {
+    const slots = [];
+    view.verb.positionals.forEach((positional, index) => {
+        const action = sourceAction(positional.source, fn);
+        if (action === undefined)
+            return;
+        const last = index === view.verb.positionals.length - 1;
+        const pattern = positional.variadic && last ? "*" : String(index);
+        slots.push(`        ${pattern}) ${action} ;;`);
+    });
+    if (slots.length === 0)
+        return undefined;
+    return [
+        `    ${view.key})`,
+        `      ${fn}_pos ${view.skipWords} "${wordList(valueFlagNames(model, view), "zsh value flags")}"`,
+        '      case "$POS" in',
+        ...slots,
+        "      esac",
+        "      ;;",
+    ].join("\n");
+}
+/** Wrap case arms in a `case` statement, or nothing when there are no arms. */
+function caseBlock(subject, arms, indent) {
+    if (arms.length === 0)
+        return [];
+    return [`${indent}case ${subject} in`, ...arms, `${indent}esac`];
+}
+/**
+ * Render the zsh completion script.
+ *
+ * @param model - The completion model.
+ * @param binName - The binary to complete (function names derive from it).
+ * @param minChars - Minimum typed chars before a name source execs `__complete`.
+ * @returns The script text.
+ */
+export function zshScript(model, binName, minChars) {
+    const fn = fnBase(binName);
+    const positionalArms = verbViews(model).flatMap((view) => {
+        const arm = positionalArm(model, view, fn);
+        return arm === undefined ? [] : [arm];
+    });
+    const globalValueSkips = globalValueFlags(model)
+        .map((flag) => flag.flag)
+        .join("|");
+    const verbSection = verbArms(model).length === 0
+        ? []
+        : [
+            "",
+            "  # verbs",
+            '  if [[ -z "$verb" ]]; then',
+            ...caseBlock('"$noun"', verbArms(model), "    "),
+            "  fi",
+        ];
+    const lines = [
+        `#compdef ${binName}`,
+        `# ${binName} zsh completion (static tier) — generated by \`${binName} setup completions\`. Do not edit.`,
+        "# Structure (nouns, verbs, flags, enum values) is inlined and never execs;",
+        `# entity arguments call \`${binName} __complete\` (storeless, never-throw);`,
+        "# file arguments use _files. Requires zsh >= 5.",
+        `${fn}_dynamic() {`,
+        ...(minChars > 0 ? [`  (( \${#cur} >= ${minChars} )) || return 0`] : []),
+        "  local -a _matches",
+        `  _matches=("\${(f)$(${binName} __complete -- "\${(@)words[2,CURRENT]}" 2>/dev/null)}")`,
+        '  (( ${#_matches[@]} == 1 )) && [[ -z "${_matches[1]}" ]] && return 0',
+        '  compadd -- "${_matches[@]}"',
+        "}",
+        `${fn}_pos() {`,
+        '  local skip="$1" vflags=" $2 " w',
+        "  local -i i",
+        "  POS=0",
+        "  for ((i = 2; i < CURRENT; i++)); do",
+        '    w="${words[i]}"',
+        '    case "$w" in',
+        '      -*) [[ "$vflags" == *" $w "* ]] && ((i++)) ;;',
+        "      *) if (( skip > 0 )); then (( skip-- )); else (( POS++ )); fi ;;",
+        "    esac",
+        "  done",
+        "}",
+        `${fn}() {`,
+        "  local cur prev noun verb w",
+        "  local -i i POS",
+        '  cur="${words[CURRENT]}"',
+        '  prev="${words[CURRENT-1]}"',
+        "  # Split an inline --flag=value word so the value routes as a flag value",
+        "  # (mirrors parse.ts). zsh keeps `--flag=value` as one word, so recover",
+        "  # $prev=flag and $cur=value before the flag-value cases below.",
+        '  if [[ "$cur" == --*=* ]]; then',
+        '    prev="${cur%%=*}"',
+        '    cur="${cur#*=}"',
+        "  fi",
+        '  noun="" verb="" POS=0',
+        "  for ((i = 2; i < CURRENT; i++)); do",
+        '    w="${words[i]}"',
+        '    case "$w" in',
+        `      ${globalValueSkips}) ((i++)) ;;`,
+        "      -*) ;;",
+        "      *)",
+        '        if [[ -z "$noun" ]]; then noun="$w"',
+        '        elif [[ -z "$verb" ]]; then verb="$w"',
+        "        fi",
+        "        ;;",
+        "    esac",
+        "  done",
+        "",
+        "  # flag values (verb-scoped, then global)",
+        ...caseBlock('"$noun/$verb/$prev"', flagValueArms(model, fn), "  "),
+        ...caseBlock('"$prev"', globalValueArms(model, fn), "  "),
+        "",
+        "  # flag names",
+        '  if [[ "$cur" == -* ]]; then',
+        ...caseBlock('"$noun/$verb"', flagNameArms(model), "    "),
+        '    if [[ -z "$noun" ]]; then',
+        `      compadd -- ${wordList(rootFlagNames(model), "zsh root flags")}`,
+        "    else",
+        `      compadd -- ${wordList(globalFlagNames(model), "zsh global flags")}`,
+        "    fi",
+        "    return 0",
+        "  fi",
+        "",
+        "  # nouns",
+        '  if [[ -z "$noun" ]]; then',
+        `    compadd -- ${wordList(nounNames(model), "zsh nouns")}`,
+        "    return 0",
+        "  fi",
+        ...verbSection,
+        "",
+        "  # positionals",
+        ...caseBlock('"$noun/$verb"', positionalArms, "  "),
+        "}",
+        `${fn} "$@"`,
+        "",
+    ];
+    return lines.join("\n");
+}
+//# sourceMappingURL=zsh.js.map

package/dist/src/kernel/completion/templates/zsh.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"zsh.js","sourceRoot":"","sources":["../../../../../src/kernel/completion/templates/zsh.ts"],"names":[],"mappings":"AAAA,uGAAuG;AACvG;;;;;;;;;;;GAWG;AAGH,OAAO,EACL,eAAe,EACf,gBAAgB,EAChB,WAAW,EACX,SAAS,EACT,gBAAgB,EAChB,aAAa,EAEb,cAAc,EACd,SAAS,EACT,QAAQ,GACT,MAAM,aAAa,CAAC;AAErB,2EAA2E;AAC3E,SAAS,MAAM,CAAC,OAAe;IAC7B,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,gBAAgB,EAAE,GAAG,CAAC,EAAE,CAAC;AACtD,CAAC;AAED,yEAAyE;AACzE,SAAS,YAAY,CACnB,MAAwB,EACxB,EAAU;IAEV,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,KAAK,QAAQ;YACX,OAAO,cAAc,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,EAAE,CAAC;QAC/D,KAAK,OAAO;YACV,OAAO,QAAQ,CAAC;QAClB,KAAK,OAAO;YACV,OAAO,GAAG,EAAE,UAAU,CAAC;QACzB,KAAK,MAAM;YACT,OAAO,SAAS,CAAC;IACrB,CAAC;AACH,CAAC;AAED,sEAAsE;AACtE,SAAS,aAAa,CAAC,KAAsB,EAAE,EAAU;IACvD,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,KAAK,MAAM,IAAI,IAAI,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;QACpC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YACnC,IAAI,CAAC,IAAI,CAAC,UAAU;gBAAE,SAAS;YAC/B,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YAC7C,IAAI,CAAC,IAAI,CACP,OAAO,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,MAAM,YAAY,KAAK,CAChG,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,sEAAsE;AACtE,SAAS,eAAe,CAAC,KAAsB,EAAE,EAAU;IACzD,OAAO,gBAAgB,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;QAC9C,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC7C,OAAO,MAAM,KAAK,SAAS;YACzB,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,IAAI,KAAK,MAAM,eAAe,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;AACL,CAAC;AAED,8DAA8D;AAC9D,SAAS,YAAY,CAAC,KAAsB;IAC1C,OAAO,SAAS,CAAC,KAAK,CAAC;SACpB,MAAM,CAAC,WAAW,CAAC;SACnB,GAAG,CACF,CAAC,IAAI,EAAE,EAAE,CACP,SAAS,IAAI,CAAC,GAAG,gBAAgB,QAAQ,CAAC,gBAAgB,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,WAAW,CAAC,eAAe,CACvG,CAAC;AACN,CAAC;AAED,qDAAqD;AACrD,SAAS,QAAQ,CAAC,KAAsB;IACtC,OAAO,KAAK,CAAC,KAAK;SACf,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;SACzC,GAAG,CACF,CAAC,KAAK,EAAE,EAAE,CACR,SAAS,KAAK,CAAC,IAAI,gBAAgB,QAAQ,CACzC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,EACrC,WAAW,CACZ,eAAe,CACnB,CAAC;AACN,CAAC;AAED,iFAAiF;AACjF,SAAS,aAAa,CACpB,KAAsB,EACtB,IAAc,EACd,EAAU;IAEV,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,KAAK,EAAE,EAAE;QAClD,MAAM,MAAM,GAAG,YAAY,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACnD,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO;QACjC,MAAM,IAAI,GAAG,KAAK,KAAK,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC;QACxD,MAAM,OAAO,GAAG,UAAU,CAAC,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAClE,KAAK,CAAC,IAAI,CAAC,WAAW,OAAO,KAAK,MAAM,KAAK,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IACH,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACzC,OAAO;QACL,OAAO,IAAI,CAAC,GAAG,GAAG;QAClB,SAAS,EAAE,QAAQ,IAAI,CAAC,SAAS,KAAK,QAAQ,CAAC,cAAc,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,iBAAiB,CAAC,GAAG;QACjG,sBAAsB;QACtB,GAAG,KAAK;QACR,YAAY;QACZ,UAAU;KACX,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,+EAA+E;AAC/E,SAAS,SAAS,CAChB,OAAe,EACf,IAAuB,EACvB,MAAc;IAEd,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACjC,OAAO,CAAC,GAAG,MAAM,QAAQ,OAAO,KAAK,EAAE,GAAG,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,CAAC;AACnE,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,SAAS,CACvB,KAAsB,EACtB,OAAe,EACf,QAAgB;IAEhB,MAAM,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;IAC3B,MAAM,cAAc,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;QACvD,MAAM,GAAG,GAAG,aAAa,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QAC3C,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IACH,MAAM,gBAAgB,GAAG,gBAAgB,CAAC,KAAK,CAAC;SAC7C,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;SACxB,IAAI,CAAC,GAAG,CAAC,CAAC;IACb,MAAM,WAAW,GACf,QAAQ,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC;QAC1B,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC;YACE,EAAE;YACF,WAAW;YACX,6BAA6B;YAC7B,GAAG,SAAS,CAAC,SAAS,EAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;YAChD,MAAM;SACP,CAAC;IAER,MAAM,KAAK,GAAG;QACZ,YAAY,OAAO,EAAE;QACrB,KAAK,OAAO,kDAAkD,OAAO,oCAAoC;QACzG,4EAA4E;QAC5E,6BAA6B,OAAO,yCAAyC;QAC7E,iDAAiD;QACjD,GAAG,EAAE,cAAc;QACnB,GAAG,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,oBAAoB,QAAQ,iBAAiB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACxE,qBAAqB;QACrB,wBAAwB,OAAO,0DAA0D;QACzF,uEAAuE;QACvE,+BAA+B;QAC/B,GAAG;QACH,GAAG,EAAE,UAAU;QACf,mCAAmC;QACnC,cAAc;QACd,SAAS;QACT,uCAAuC;QACvC,qBAAqB;QACrB,kBAAkB;QAClB,qDAAqD;QACrD,wEAAwE;QACxE,UAAU;QACV,QAAQ;QACR,GAAG;QACH,GAAG,EAAE,MAAM;QACX,8BAA8B;QAC9B,kBAAkB;QAClB,2BAA2B;QAC3B,8BAA8B;QAC9B,2EAA2E;QAC3E,0EAA0E;QAC1E,kEAAkE;QAClE,kCAAkC;QAClC,uBAAuB;QACvB,qBAAqB;QACrB,MAAM;QACN,yBAAyB;QACzB,uCAAuC;QACvC,qBAAqB;QACrB,kBAAkB;QAClB,SAAS,gBAAgB,cAAc;QACvC,cAAc;QACd,UAAU;QACV,6CAA6C;QAC7C,+CAA+C;QAC/C,YAAY;QACZ,YAAY;QACZ,UAAU;QACV,QAAQ;QACR,EAAE;QACF,4CAA4C;QAC5C,GAAG,SAAS,CAAC,qBAAqB,EAAE,aAAa,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,IAAI,CAAC;QACnE,GAAG,SAAS,CAAC,SAAS,EAAE,eAAe,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,IAAI,CAAC;QACzD,EAAE;QACF,gBAAgB;QAChB,+BAA+B;QAC/B,GAAG,SAAS,CAAC,eAAe,EAAE,YAAY,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAC1D,+BAA+B;QAC/B,oBAAoB,QAAQ,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,gBAAgB,CAAC,EAAE;QACtE,UAAU;QACV,oBAAoB,QAAQ,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE,kBAAkB,CAAC,EAAE;QAC1E,QAAQ;QACR,cAAc;QACd,MAAM;QACN,EAAE;QACF,WAAW;QACX,6BAA6B;QAC7B,kBAAkB,QAAQ,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,WAAW,CAAC,EAAE;QAC3D,cAAc;QACd,MAAM;QACN,GAAG,WAAW;QACd,EAAE;QACF,iBAAiB;QACjB,GAAG,SAAS,CAAC,eAAe,EAAE,cAAc,EAAE,IAAI,CAAC;QACnD,GAAG;QACH,GAAG,EAAE,OAAO;QACZ,EAAE;KACH,CAAC;IACF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}

package/dist/src/kernel/completion/types.js

@@ -0,0 +1,13 @@
+/**
+ * Shapes of the completion engine — the model both tiers share, the parsed
+ * request the `__complete` resolver answers, and the dynamic-tier seam.
+ *
+ * The model is derived from the capability modules (the specs), NOT parsed
+ * from `surface.v2.json`: the emitted surface deliberately omits enum values,
+ * param kinds, and the `complete` field, and the grammar must not grow for a
+ * projection. Agreement with the covenant is transitive — the projection
+ * agreement test pins the model's noun/verb/flag sets to `emitSurface`, which
+ * conformance pins to the golden.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/src/kernel/completion/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../src/kernel/completion/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG"}

package/dist/src/kernel/config/defaults.js

@@ -0,0 +1,17 @@
+/**
+ * Built-in configuration defaults — the validated distribution config.
+ *
+ * The lowest config layer is the distribution's own `pragma.conf.ts` (package
+ * root), STATICALLY imported so it travels with the emitted modules (no fs read
+ * — `evaluateProjectConfig` stats/imports from disk, which is right for a
+ * consumer's config and wrong for the distribution's own) and validated through
+ * the same `parseRawConfig` as every
+ * other layer. Statically imported by `readConfig` (itself dynamic-imported,
+ * off the `--help`/`__complete` fast path) and by its own test, so the eager
+ * validation and the zod import here add nothing to the storeless surfaces —
+ * the lazy.test.ts module-graph probe covers that boundary.
+ */
+import rawConfig from "../../../pragma.conf.js";
+import { parseRawConfig } from "./schema.js";
+export default parseRawConfig(rawConfig, "pragma.conf.ts");
+//# sourceMappingURL=defaults.js.map

package/dist/src/kernel/config/defaults.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"defaults.js","sourceRoot":"","sources":["../../../../src/kernel/config/defaults.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,SAAS,MAAM,yBAAyB,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAE7C,eAAe,cAAc,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC"}

package/dist/src/kernel/config/evaluateProjectConfig.js

@@ -0,0 +1,126 @@
+/**
+ * Evaluate `pragma.config.ts` with an invalidating cache (D7).
+ *
+ * The project config is real TypeScript — evaluated via the runtime's native
+ * dynamic import of the file's `default` export. Because evaluation is the cost,
+ * the validated (JSON-serializable) result is cached under
+ * `$XDG_STATE_HOME/pragma/config-cache/<key>.json`. Warm path: derive key →
+ * cache hit → `JSON.parse` (sub-ms). Cold path: import → validate → write cache.
+ *
+ * The cache key is `sha256(path + entry-mtime + VERSION)`, NOT a hash of the
+ * entry file's bytes. This means:
+ *   - editing the entry file bumps its mtime → new key → re-evaluation, in every
+ *     process (the byte-hash scheme missed nothing here, but see the limitation);
+ *   - a pragma upgrade bumps VERSION → new key → re-evaluation (a new binary must
+ *     never serve a config the old one cached).
+ *
+ * LIMITATION (accepted, per the review fold): a *transitively*-imported file
+ * (e.g. `./pkgs.ts`) edited without touching the entry's mtime is not detected
+ * across processes. The fix that would catch it — bundling the config and keying
+ * on the bundle hash — would blow the warm-load budget on every load. Touch the
+ * entry (or bump VERSION) to force a rebuild.
+ *
+ * THE CONFIG IS THE CONSUMER'S OWN TYPESCRIPT, and this is the one place the
+ * distribution executes code it did not author. `pragma` ships on a `node`
+ * shebang, so that import is served by node's type STRIPPING — which erases
+ * annotations and refuses syntax that would need real emit (`enum`, `namespace`,
+ * parameter properties). Those are rejected with `ERR_UNSUPPORTED_TYPESCRIPT_SYNTAX`,
+ * which {@link evaluateProjectConfig} names specifically rather than letting it
+ * arrive as an anonymous load failure. The `engines` floor (node >= 22.18) is what
+ * makes stripping default-on — and the range excludes 23.0-23.5, which satisfy
+ * a bare `>=22.18` but predate the 23.x line's own default-on release (23.6).
+ */
+import { createHash } from "node:crypto";
+import { mkdirSync, readFileSync, renameSync, statSync, writeFileSync, } from "node:fs";
+import { join } from "node:path";
+import { pathToFileURL } from "node:url";
+import { PROJECT_CONFIG_FILENAME, VERSION } from "../../constants.js";
+import { PragmaError } from "../error/index.js";
+import { configCacheDir } from "./paths.js";
+import { parseRawConfig } from "./schema.js";
+/** The cache file path for a given key. */
+function cachePathFor(key) {
+    return join(configCacheDir(), `${key}.json`);
+}
+/**
+ * The cache key for a project-config file: `sha256(path + mtime + VERSION)`.
+ * Cheap to compute (a `stat`, not a full read) and threaded onto the import URL
+ * below so a long-lived process re-evaluates when the key changes.
+ */
+function cacheKey(path) {
+    const { mtimeMs } = statSync(path);
+    return createHash("sha256")
+        .update(`${path}\u0000${mtimeMs}\u0000${VERSION}`)
+        .digest("hex");
+}
+/** Best-effort atomic write of the validated config to the cache. */
+function writeCache(cachePath, config) {
+    try {
+        mkdirSync(configCacheDir(), { recursive: true });
+        const tempPath = `${cachePath}.tmp`;
+        writeFileSync(tempPath, JSON.stringify(config));
+        renameSync(tempPath, cachePath);
+    }
+    catch {
+        // A read-only or racing cache is non-fatal — evaluation still returns.
+    }
+}
+/**
+ * Evaluate a project config file, serving a warm cache hit when possible.
+ *
+ * @param path - Absolute path to `pragma.config.{ts,js}`.
+ * @returns The validated raw config the file declares.
+ * @throws PragmaError with code `CONFIG_ERROR` when the evaluated shape is bad.
+ * @note Impure — reads the file, may import it, and writes the cache.
+ */
+export async function evaluateProjectConfig(path) {
+    const key = cacheKey(path);
+    const cachePath = cachePathFor(key);
+    try {
+        return JSON.parse(readFileSync(cachePath, "utf-8"));
+    }
+    catch {
+        // Cache miss — evaluate below.
+    }
+    // Cache-bust the dynamic import with the key so a long-lived process (the
+    // `mcp` server, which re-reads config per tool call) picks up an edited entry
+    // instead of a previously imported module. Node honours the query; under Bun
+    // the module cache is path-keyed and ignores it, but a fresh process always
+    // re-reads, so cross-process correctness holds regardless.
+    const url = `${pathToFileURL(path).href}?v=${key}`;
+    // Evaluating real TypeScript can throw for reasons `parseRawConfig` never sees:
+    // a syntax error, a bad import, or a top-level throw in the config module. Left
+    // unwrapped, that raw throw collapses to INTERNAL_ERROR ("report this
+    // issue") on EVERY command that reads config. Name it: a CONFIG_ERROR that
+    // identifies the offending file and the underlying reason.
+    let module;
+    try {
+        module = (await import(url));
+    }
+    catch (error) {
+        if (error instanceof PragmaError)
+            throw error;
+        const reason = error instanceof Error ? error.message : String(error);
+        // Node strips types rather than compiling them, so a config using syntax that
+        // needs real emit fails here with a message naming neither the constraint nor
+        // the fix. Say both — this is a supported config that simply must be written
+        // in erasable TypeScript, and the author has no other way to learn that.
+        const { code } = (error ?? {});
+        if (code === "ERR_UNSUPPORTED_TYPESCRIPT_SYNTAX") {
+            throw PragmaError.configError(`Your ${PROJECT_CONFIG_FILENAME} uses TypeScript syntax that cannot be erased: ${reason}`, {
+                recovery: {
+                    message: `Rewrite it in erasable TypeScript — types, interfaces and \`satisfies\` are fine; \`enum\`, \`namespace\` and constructor parameter properties are not. A plain object literal with a \`default\` export always works.`,
+                },
+            });
+        }
+        throw PragmaError.configError(`Cannot load project config ${path}: ${reason}`, {
+            recovery: {
+                message: `Fix the error in your ${PROJECT_CONFIG_FILENAME} (it must evaluate to a default export), then try again.`,
+            },
+        });
+    }
+    const config = parseRawConfig(module.default, path);
+    writeCache(cachePath, config);
+    return config;
+}
+//# sourceMappingURL=evaluateProjectConfig.js.map

package/dist/src/kernel/config/evaluateProjectConfig.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evaluateProjectConfig.js","sourceRoot":"","sources":["../../../../src/kernel/config/evaluateProjectConfig.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACL,SAAS,EACT,YAAY,EACZ,UAAU,EACV,QAAQ,EACR,aAAa,GACd,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,uBAAuB,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AACtE,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAG7C,2CAA2C;AAC3C,SAAS,YAAY,CAAC,GAAW;IAC/B,OAAO,IAAI,CAAC,cAAc,EAAE,EAAE,GAAG,GAAG,OAAO,CAAC,CAAC;AAC/C,CAAC;AAED;;;;GAIG;AACH,SAAS,QAAQ,CAAC,IAAY;IAC5B,MAAM,EAAE,OAAO,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IACnC,OAAO,UAAU,CAAC,QAAQ,CAAC;SACxB,MAAM,CAAC,GAAG,IAAI,SAAS,OAAO,SAAS,OAAO,EAAE,CAAC;SACjD,MAAM,CAAC,KAAK,CAAC,CAAC;AACnB,CAAC;AAED,qEAAqE;AACrE,SAAS,UAAU,CAAC,SAAiB,EAAE,MAAiB;IACtD,IAAI,CAAC;QACH,SAAS,CAAC,cAAc,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACjD,MAAM,QAAQ,GAAG,GAAG,SAAS,MAAM,CAAC;QACpC,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;QAChD,UAAU,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,uEAAuE;IACzE,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,IAAY;IACtD,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC3B,MAAM,SAAS,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IAEpC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,CAAc,CAAC;IACnE,CAAC;IAAC,MAAM,CAAC;QACP,+BAA+B;IACjC,CAAC;IAED,0EAA0E;IAC1E,8EAA8E;IAC9E,6EAA6E;IAC7E,4EAA4E;IAC5E,2DAA2D;IAC3D,MAAM,GAAG,GAAG,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,IAAI,MAAM,GAAG,EAAE,CAAC;IACnD,gFAAgF;IAChF,gFAAgF;IAChF,sEAAsE;IACtE,2EAA2E;IAC3E,2DAA2D;IAC3D,IAAI,MAA6B,CAAC;IAClC,IAAI,CAAC;QACH,MAAM,GAAG,CAAC,MAAM,MAAM,CAAC,GAAG,CAAC,CAA0B,CAAC;IACxD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,WAAW;YAAE,MAAM,KAAK,CAAC;QAC9C,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACtE,8EAA8E;QAC9E,8EAA8E;QAC9E,6EAA6E;QAC7E,yEAAyE;QACzE,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,KAAK,IAAI,EAAE,CAAuB,CAAC;QACrD,IAAI,IAAI,KAAK,mCAAmC,EAAE,CAAC;YACjD,MAAM,WAAW,CAAC,WAAW,CAC3B,QAAQ,uBAAuB,kDAAkD,MAAM,EAAE,EACzF;gBACE,QAAQ,EAAE;oBACR,OAAO,EAAE,wNAAwN;iBAClO;aACF,CACF,CAAC;QACJ,CAAC;QACD,MAAM,WAAW,CAAC,WAAW,CAC3B,8BAA8B,IAAI,KAAK,MAAM,EAAE,EAC/C;YACE,QAAQ,EAAE;gBACR,OAAO,EAAE,yBAAyB,uBAAuB,0DAA0D;aACpH;SACF,CACF,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACpD,UAAU,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAC9B,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/src/kernel/config/findProjectConfig.js

@@ -0,0 +1,43 @@
+/**
+ * Locate the nearest project config by walking up from `cwd`.
+ *
+ * Looks for `<bin>.config.ts` (or, as a compiled-binary fallback,
+ * `<bin>.config.js`) at or above `cwd`. The walk is bounded: it stops after
+ * the first directory containing `.git` (the repo root), after the home
+ * directory, and at the filesystem root — a config outside the repo or home
+ * never leaks in. Ported from the v1 `findProjectConfigPath`.
+ */
+import { existsSync } from "node:fs";
+import { homedir } from "node:os";
+import { dirname, join, resolve } from "node:path";
+import { BIN_NAME, PROJECT_CONFIG_FILENAME } from "../../constants.js";
+/** Candidate project-config filenames, in preference order. */
+const CANDIDATES = [PROJECT_CONFIG_FILENAME, `${BIN_NAME}.config.js`];
+/**
+ * Find the nearest project config file at or above `cwd`.
+ *
+ * @param cwd - Directory to start the walk from.
+ * @returns The absolute path of the nearest config, or `undefined`.
+ * @note Impure — probes the filesystem while walking up.
+ */
+export function findProjectConfig(cwd) {
+    const home = homedir();
+    let dir = resolve(cwd);
+    while (true) {
+        for (const name of CANDIDATES) {
+            const candidate = join(dir, name);
+            if (existsSync(candidate)) {
+                return candidate;
+            }
+        }
+        if (existsSync(join(dir, ".git")) || dir === home) {
+            return undefined;
+        }
+        const parent = dirname(dir);
+        if (parent === dir) {
+            return undefined;
+        }
+        dir = parent;
+    }
+}
+//# sourceMappingURL=findProjectConfig.js.map

package/dist/src/kernel/config/findProjectConfig.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"findProjectConfig.js","sourceRoot":"","sources":["../../../../src/kernel/config/findProjectConfig.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,QAAQ,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAEvE,+DAA+D;AAC/D,MAAM,UAAU,GAAG,CAAC,uBAAuB,EAAE,GAAG,QAAQ,YAAY,CAAU,CAAC;AAE/E;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAAC,GAAW;IAC3C,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;IACvB,IAAI,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IAEvB,OAAO,IAAI,EAAE,CAAC;QACZ,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;YAC9B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAClC,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC1B,OAAO,SAAS,CAAC;YACnB,CAAC;QACH,CAAC;QACD,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YAClD,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;YACnB,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,GAAG,GAAG,MAAM,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/src/kernel/config/firstRun.js

@@ -0,0 +1,34 @@
+/**
+ * The setup hint — the read-only replacement for first-run seeding.
+ *
+ * Onboarding used to WRITE. A pipeline step ran before dispatch on every
+ * non-help invocation and created `$XDG_CONFIG_HOME/<bin>/config.json`, so
+ * `skill list` — a read — mutated the machine before the user had consented to
+ * anything, and a banner interleaved itself into the output of runs that were
+ * mutating something else entirely. The config layers already treat the missing
+ * file as "every field at its built-in default", so the write bought nothing.
+ *
+ * Seeding is now a setup target, created inside a consented run. What is left
+ * here is a STATELESS hint: shown when the global config file is absent, on
+ * read-only surfaces only. There is no marker file — a marker is itself a
+ * pre-consent write, which is the exact defect being removed — because the
+ * presence of the config IS the state.
+ */
+import { existsSync } from "node:fs";
+import { BIN_NAME, ISSUES_URL } from "../../constants.js";
+import { globalConfigPath } from "./paths.js";
+/**
+ * The hint lines for a machine that has not been set up, or none when it has.
+ *
+ * @returns The lines to print, or an empty array.
+ * @note Impure — probes the global config path.
+ */
+export function setupHintLines() {
+    if (existsSync(globalConfigPath()))
+        return [];
+    return [
+        `${BIN_NAME} is pre-release — report issues at ${ISSUES_URL}.`,
+        `Run \`${BIN_NAME} setup\` to configure this machine.`,
+    ];
+}
+//# sourceMappingURL=firstRun.js.map

package/dist/src/kernel/config/firstRun.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"firstRun.js","sourceRoot":"","sources":["../../../../src/kernel/config/firstRun.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAE9C;;;;;GAKG;AACH,MAAM,UAAU,cAAc;IAC5B,IAAI,UAAU,CAAC,gBAAgB,EAAE,CAAC;QAAE,OAAO,EAAE,CAAC;IAC9C,OAAO;QACL,GAAG,QAAQ,sCAAsC,UAAU,GAAG;QAC9D,SAAS,QAAQ,qCAAqC;KACvD,CAAC;AACJ,CAAC"}