@celilo/core 0.11.1 → 0.13.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@celilo/core",
-  "version": "0.11.1",
+  "version": "0.13.0",
   "description": "Lightweight shared core for Celilo CLI tools — command registry, NDJSON API protocol, and remote SSH client. No Ink/React/drizzle/aws-sdk transitive deps, so an MCP server can reach the transport without installing the full CLI.",
   "type": "module",
   "main": "./src/index.ts",

package/src/command-registry.ts

@@ -742,6 +742,33 @@ export const COMMANDS: CommandDef[] = [
           },
         ],
       },
+      {
+        name: 'jail',
+        description:
+          "Get or set one module's hook jail policy (auto|off|required). Omit the policy to show the effective value and which source produced it; --clear removes the row so the module follows the system's hooks.jail_policy again",
+        args: [
+          { name: 'id', description: 'Module ID', completion: 'module_ids' },
+          {
+            name: 'policy',
+            description:
+              'auto (jail when a backend is available), off (never jail), or required (an unavailable jail is a hard failure); omit to show the effective policy',
+          },
+        ],
+        flags: [
+          {
+            name: 'clear',
+            description:
+              "Remove the module's recorded policy so it follows the system's hooks.jail_policy again",
+            takesValue: false,
+          },
+          {
+            name: 'force',
+            description:
+              'Skip the confirmation interview when the new policy is weaker than the system-wide one',
+            takesValue: false,
+          },
+        ],
+      },
       {
         name: 'secret',
         description: 'Manage module secrets',
@@ -826,6 +853,50 @@ export const COMMANDS: CommandDef[] = [
         description: 'Pre-flight check: validate module is ready for deployment',
         args: [{ name: 'id', description: 'Module ID', completion: 'module_ids' }],
       },
+      {
+        name: 'check',
+        description: 'Run drift-detection checks against a third-party module directory',
+        args: [{ name: 'path', description: 'Module directory (defaults to ".")' }],
+        flags: [
+          {
+            name: 'no-build',
+            description: 'Skip `bunx tsc --noEmit` (fast iteration, or no TypeScript surface)',
+            takesValue: false,
+          },
+          {
+            name: 'json',
+            description: 'Emit the structured Check[] payload instead of formatted text',
+            takesValue: false,
+          },
+          {
+            name: 'strict',
+            description: 'Treat warnings as failures (any non-OK is a non-zero exit)',
+            takesValue: false,
+          },
+        ],
+      },
+      {
+        name: 'changeset',
+        description: 'Author a version changeset for a module (.changeset/<name>.md)',
+        args: [{ name: 'module-dir', description: 'Module directory (defaults to ".")' }],
+        flags: [
+          {
+            name: 'bump',
+            description: 'Version bump type: major, minor or patch (required)',
+            takesValue: true,
+          },
+          {
+            name: 'message',
+            description: 'Changeset body text (default: "<bump> change to <module-id>.")',
+            takesValue: true,
+          },
+          {
+            name: 'name',
+            description: 'Changeset filename stem (default: auto-generated slug)',
+            takesValue: true,
+          },
+        ],
+      },
       {
         name: 'status',
         description: 'Show detailed module status',
@@ -1213,6 +1284,7 @@ export const COMMANDS: CommandDef[] = [
             takesValue: true,
             valueHint: 'dmz app secure internal external',
           },
+          { name: 'json', description: 'Machine-readable JSON output', takesValue: false },
         ],
       },
       {
@@ -1300,6 +1372,18 @@ export const COMMANDS: CommandDef[] = [
               { name: 'key', description: 'Config key', completion: 'system_config_keys' },
               { name: 'value', description: 'Config value' },
             ],
+            // `handleSystemConfigSet` has honoured `flags.force` since the
+            // hooks.jail_policy interview gate landed, and its unit test drives
+            // the handler directly, so the flag was tested and unreachable:
+            // the parser rejected `--force` with "does not accept any flags".
+            flags: [
+              {
+                name: 'force',
+                description:
+                  'Skip the confirmation interview for values that change security posture (hooks.jail_policy off)',
+                takesValue: false,
+              },
+            ],
           },
           {
             name: 'get',
@@ -1402,6 +1486,12 @@ export const COMMANDS: CommandDef[] = [
         description:
           'Diagnose system prerequisites, @celilo/* version drift, and (on a management plane) fleet-runtime drift',
         flags: [
+          {
+            name: 'deep',
+            description:
+              'Also measure the host plane: one SSH per system for module integrity, plus aspect coverage (celilo#1308: the doctor prescribed --deep before the registry declared it)',
+            takesValue: false,
+          },
           {
             name: 'fix',
             description:
@@ -1661,6 +1751,45 @@ export const COMMANDS: CommandDef[] = [
         description:
           'Per-subscriber delivery history (success rate, last delivery, recent failures)',
       },
+      {
+        name: 'install-daemon',
+        description: 'Write a supervisor unit (systemd/launchd) for the build-bus webhook receiver',
+        flags: [
+          {
+            name: 'system',
+            description: 'System-scope unit (/etc/systemd/system or LaunchDaemons)',
+            takesValue: false,
+          },
+          {
+            name: 'secret',
+            description:
+              'Shared HMAC secret incoming webhooks sign with (or CELILO_BUS_SECRET env)',
+            takesValue: true,
+          },
+          { name: 'port', description: 'TCP port to listen on (default 8123)', takesValue: true },
+          {
+            name: 'dispatch',
+            description:
+              'Render a combined unit (receiver + hook dispatcher) for boxes with no events daemon',
+            takesValue: false,
+          },
+          {
+            name: 'print',
+            description: 'Render the unit to stdout without writing (Ansible seam)',
+            takesValue: false,
+          },
+          {
+            name: 'celilo-path',
+            description: 'Explicit celilo binary path for ExecStart',
+            takesValue: true,
+          },
+        ],
+      },
+      {
+        name: 'uninstall-daemon',
+        description: 'Remove the build-bus receiver supervisor unit',
+        flags: [{ name: 'system', description: 'System-scope unit', takesValue: false }],
+      },
     ],
   },
   {

package/src/protocol.ts

@@ -100,6 +100,14 @@ export type ProgressMessage = z.infer<typeof ProgressMessageSchema>;
 export const LogMessageSchema = z.object({
   type: z.literal('log'),
   message: z.string(),
+  /**
+   * Which child stream the line came from. The server merges nothing —
+   * each stream is pumped separately — but the message schema is the only
+   * place the distinction can survive the trip, so it is recorded here
+   * (celilo#1362). Optional so an older client parses a newer server
+   * unchanged; unmarked lines are stdout.
+   */
+  stream: z.enum(['stdout', 'stderr']).optional(),
 });
 export type LogMessage = z.infer<typeof LogMessageSchema>;
 

package/src/remote-client.ts

@@ -190,6 +190,11 @@ function applyMessage(
       // Nest under the active step so the footer isn't corrupted; otherwise print.
       if (display.hasPending) {
         display.subEvent(msg.message);
+      } else if (msg.stream === 'stderr') {
+        // The server names each log line's origin stream; keep stderr on
+        // stderr locally so diagnostics never masquerade as command output
+        // (celilo#1362). Unmarked lines are stdout from an older server.
+        process.stderr.write(`${msg.message}\n`);
       } else {
         out.write(`${msg.message}\n`);
       }