@claudexor/cli 1.0.1

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 joi-lab
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,22 @@
+# @claudexor/cli
+
+The Claudexor command-line interface — the primary supported entry point of
+[Claudexor](https://github.com/razzant/claudexor): a harness-agnostic AI
+coding control plane over Codex CLI, Claude Code, Cursor CLI, and OpenCode.
+
+Install the friendly bin wrapper instead of depending on this package
+directly:
+
+```bash
+npm install -g claudexor
+claudexor doctor
+```
+
+This package ships the CLI implementation and the explicit `./cli` and
+`./claudexord` entry exports; the GLOBAL bin names are owned by the bare
+`claudexor` wrapper package (one bin owner, no collisions), so
+`npm install -g @claudexor/cli` intentionally installs NO bins — install
+`claudexor` instead. It follows the
+monorepo's lockstep version; the STABLE contract is the CLI surface itself
+(`claudexor help --json`) and the documented `--json` outputs — not this
+package's internal module shape.

package/dist/args.d.ts

@@ -0,0 +1,12 @@
+export interface ParsedArgs {
+    _: string[];
+    flags: Record<string, string | boolean | Array<string | boolean>>;
+}
+/** Minimal, dependency-free arg parser: supports `--k v`, `--k=v`, and boolean `--k`. */
+export declare function parseArgs(argv: string[]): ParsedArgs;
+export declare function flagValues(args: ParsedArgs, key: string): Array<string | boolean>;
+export declare function flagStr(args: ParsedArgs, key: string): string | undefined;
+export declare function flagStringList(args: ParsedArgs, key: string): string[];
+export declare function flagBool(args: ParsedArgs, key: string): boolean;
+export declare function requiredStringFlagError(args: ParsedArgs, keys: readonly string[]): string | null;
+//# sourceMappingURL=args.d.ts.map

package/dist/args.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"args.d.ts","sourceRoot":"","sources":["../src/args.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,UAAU;IACzB,CAAC,EAAE,MAAM,EAAE,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,GAAG,KAAK,CAAC,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC;CACnE;AAOD,yFAAyF;AACzF,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,UAAU,CAqCpD;AAED,wBAAgB,UAAU,CAAC,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,MAAM,GAAG,KAAK,CAAC,MAAM,GAAG,OAAO,CAAC,CAIjF;AAED,wBAAgB,OAAO,CAAC,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAIzE;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE,CAWtE;AAED,wBAAgB,QAAQ,CAAC,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAI/D;AAED,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,GAAG,IAAI,CAQhG"}

package/dist/args.js

@@ -0,0 +1,88 @@
+import { BOOLEAN_FLAGS } from "./command-registry.js";
+// Flags that never take a value (`--flag token` must leave `token` a
+// positional instead of eating it; `--flag=value` still works for explicit
+// `true`/`false`) are a PROJECTION of the command registry — see
+// command-registry.ts, the one owner of the CLI surface.
+/** Minimal, dependency-free arg parser: supports `--k v`, `--k=v`, and boolean `--k`. */
+export function parseArgs(argv) {
+    const _ = [];
+    const flags = Object.create(null);
+    const setFlag = (key, value) => {
+        const existing = flags[key];
+        if (Array.isArray(existing)) {
+            existing.push(value);
+        }
+        else if (existing !== undefined) {
+            flags[key] = [existing, value];
+        }
+        else {
+            flags[key] = value;
+        }
+    };
+    for (let i = 0; i < argv.length; i++) {
+        const a = argv[i] ?? "";
+        if (a.startsWith("--")) {
+            const eq = a.indexOf("=");
+            if (eq >= 0) {
+                setFlag(a.slice(2, eq), a.slice(eq + 1));
+            }
+            else {
+                const key = a.slice(2);
+                const next = argv[i + 1];
+                if (next !== undefined && !next.startsWith("--") && !BOOLEAN_FLAGS.has(key)) {
+                    setFlag(key, next);
+                    i++;
+                }
+                else {
+                    setFlag(key, true);
+                }
+            }
+        }
+        else {
+            _.push(a);
+        }
+    }
+    return { _, flags };
+}
+export function flagValues(args, key) {
+    const v = args.flags[key];
+    if (v === undefined)
+        return [];
+    return Array.isArray(v) ? v : [v];
+}
+export function flagStr(args, key) {
+    const values = flagValues(args, key);
+    const v = values[values.length - 1];
+    return typeof v === "string" ? v : undefined;
+}
+export function flagStringList(args, key) {
+    const out = [];
+    for (const value of flagValues(args, key)) {
+        if (typeof value !== "string")
+            continue;
+        for (const part of value.split(",")) {
+            const token = part.trim();
+            if (!token)
+                throw new Error(`invalid --${key} value (empty comma-separated entry)`);
+            out.push(token);
+        }
+    }
+    return out;
+}
+export function flagBool(args, key) {
+    const values = flagValues(args, key);
+    const v = values[values.length - 1];
+    return v === true || v === "true";
+}
+export function requiredStringFlagError(args, keys) {
+    for (const key of keys) {
+        if (!Object.prototype.hasOwnProperty.call(args.flags, key))
+            continue;
+        for (const value of flagValues(args, key)) {
+            if (typeof value !== "string" || value.trim() === "")
+                return `claudexor: --${key} requires a value`;
+        }
+    }
+    return null;
+}
+//# sourceMappingURL=args.js.map

package/dist/args.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"args.js","sourceRoot":"","sources":["../src/args.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAOtD,qEAAqE;AACrE,2EAA2E;AAC3E,iEAAiE;AACjE,yDAAyD;AAEzD,yFAAyF;AACzF,MAAM,UAAU,SAAS,CAAC,IAAc;IACtC,MAAM,CAAC,GAAa,EAAE,CAAC;IACvB,MAAM,KAAK,GAA+D,MAAM,CAAC,MAAM,CAAC,IAAI,CAG3F,CAAC;IACF,MAAM,OAAO,GAAG,CAAC,GAAW,EAAE,KAAuB,EAAQ,EAAE;QAC7D,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5B,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvB,CAAC;aAAM,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAClC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACjC,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACrB,CAAC;IACH,CAAC,CAAC;IACF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACxB,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACvB,MAAM,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC1B,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;gBACZ,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;YAC3C,CAAC;iBAAM,CAAC;gBACN,MAAM,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBACvB,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;gBACzB,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC5E,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;oBACnB,CAAC,EAAE,CAAC;gBACN,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;gBACrB,CAAC;YACH,CAAC;QACH,CAAC;aAAM,CAAC;YACN,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACZ,CAAC;IACH,CAAC;IACD,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,IAAgB,EAAE,GAAW;IACtD,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC1B,IAAI,CAAC,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IAC/B,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,IAAgB,EAAE,GAAW;IACnD,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACrC,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACpC,OAAO,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAAgB,EAAE,GAAW;IAC1D,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,KAAK,IAAI,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;QAC1C,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,SAAS;QACxC,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YACpC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YAC1B,IAAI,CAAC,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,aAAa,GAAG,sCAAsC,CAAC,CAAC;YACpF,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,IAAgB,EAAE,GAAW;IACpD,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACrC,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACpC,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,MAAM,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,IAAgB,EAAE,IAAuB;IAC/E,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC;YAAE,SAAS;QACrE,KAAK,MAAM,KAAK,IAAI,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;YAC1C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE;gBAAE,OAAO,gBAAgB,GAAG,mBAAmB,CAAC;QACtG,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/attachment-resolver.d.ts

@@ -0,0 +1,11 @@
+import type { Attachment, AttachmentInput } from "@claudexor/schema";
+export declare function attachmentError(message: string): Error & {
+    status: number;
+};
+/**
+ * Resolve inbound attachments (base64 `data`, or an existing `path`) to durable
+ * Attachments under a scoped dir OUTSIDE any worktree, so they never enter a git
+ * diff. base64 is decoded ONCE here and `jobs.json` never carries the bytes.
+ */
+export declare function resolveAttachments(inputs: AttachmentInput[] | undefined): Attachment[];
+//# sourceMappingURL=attachment-resolver.d.ts.map

package/dist/attachment-resolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"attachment-resolver.d.ts","sourceRoot":"","sources":["../src/attachment-resolver.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAUrE,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,KAAK,GAAG;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,CAE3E;AAWD;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,eAAe,EAAE,GAAG,SAAS,GAAG,UAAU,EAAE,CA8BtF"}

package/dist/attachment-resolver.js

@@ -0,0 +1,61 @@
+import { existsSync, lstatSync, mkdirSync, writeFileSync } from "node:fs";
+import { isAbsolute, join } from "node:path";
+import { daemonDir } from "@claudexor/daemon";
+import { newId } from "@claudexor/util";
+/** Filename allowlist (no regex governance): keep only safe chars for the stored name. */
+function safeAttachmentName(name) {
+    const allowed = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789._-";
+    let s = "";
+    for (const ch of name)
+        s += allowed.includes(ch) ? ch : "_";
+    return (s || "attachment").slice(0, 120);
+}
+export function attachmentError(message) {
+    return Object.assign(new Error(message), { status: 400 });
+}
+function decodeBase64AttachmentData(data, index) {
+    const normalized = data.replaceAll("\r", "").replaceAll("\n", "");
+    const decoded = Buffer.from(normalized, "base64");
+    if (decoded.length === 0 || decoded.toString("base64") !== normalized) {
+        throw attachmentError(`attachment ${index} data must be non-empty valid base64`);
+    }
+    return decoded;
+}
+/**
+ * Resolve inbound attachments (base64 `data`, or an existing `path`) to durable
+ * Attachments under a scoped dir OUTSIDE any worktree, so they never enter a git
+ * diff. base64 is decoded ONCE here and `jobs.json` never carries the bytes.
+ */
+export function resolveAttachments(inputs) {
+    if (!inputs || inputs.length === 0)
+        return [];
+    const dir = join(daemonDir(), "attachments", newId("attb"));
+    mkdirSync(dir, { recursive: true, mode: 0o700 });
+    const out = [];
+    for (const [index, a] of inputs.entries()) {
+        const hasData = typeof a.data === "string" && a.data.length > 0;
+        const attachmentPath = typeof a.path === "string" ? a.path.trim() : "";
+        const hasPath = attachmentPath.length > 0;
+        if (hasData && hasPath) {
+            throw attachmentError(`attachment ${index} must include either data or path, not both`);
+        }
+        if (hasData) {
+            const path = join(dir, `${newId("f")}-${safeAttachmentName(a.name)}`);
+            writeFileSync(path, decodeBase64AttachmentData(a.data ?? "", index), { mode: 0o600 });
+            out.push({ id: newId("att"), kind: a.kind, mime: a.mime, name: a.name, path });
+            continue;
+        }
+        if (!hasPath) {
+            throw attachmentError(`attachment ${index} must include data or an absolute file path`);
+        }
+        if (!isAbsolute(attachmentPath)) {
+            throw attachmentError(`attachment ${index} path must be absolute: ${attachmentPath}`);
+        }
+        if (!existsSync(attachmentPath) || !lstatSync(attachmentPath).isFile()) {
+            throw attachmentError(`attachment ${index} path does not exist or is not a file: ${attachmentPath}`);
+        }
+        out.push({ id: newId("att"), kind: a.kind, mime: a.mime, name: a.name, path: attachmentPath });
+    }
+    return out;
+}
+//# sourceMappingURL=attachment-resolver.js.map

package/dist/attachment-resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"attachment-resolver.js","sourceRoot":"","sources":["../src/attachment-resolver.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC1E,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAC;AAGxC,0FAA0F;AAC1F,SAAS,kBAAkB,CAAC,IAAY;IACtC,MAAM,OAAO,GAAG,mEAAmE,CAAC;IACpF,IAAI,CAAC,GAAG,EAAE,CAAC;IACX,KAAK,MAAM,EAAE,IAAI,IAAI;QAAE,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;IAC5D,OAAO,CAAC,CAAC,IAAI,YAAY,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,OAAe;IAC7C,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;AAC5D,CAAC;AAED,SAAS,0BAA0B,CAAC,IAAY,EAAE,KAAa;IAC7D,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAClE,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IAClD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,UAAU,EAAE,CAAC;QACtE,MAAM,eAAe,CAAC,cAAc,KAAK,sCAAsC,CAAC,CAAC;IACnF,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAqC;IACtE,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAC9C,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5D,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACjD,MAAM,GAAG,GAAiB,EAAE,CAAC;IAC7B,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;QAC1C,MAAM,OAAO,GAAG,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;QAChE,MAAM,cAAc,GAAG,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvE,MAAM,OAAO,GAAG,cAAc,CAAC,MAAM,GAAG,CAAC,CAAC;QAC1C,IAAI,OAAO,IAAI,OAAO,EAAE,CAAC;YACvB,MAAM,eAAe,CAAC,cAAc,KAAK,6CAA6C,CAAC,CAAC;QAC1F,CAAC;QACD,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACtE,aAAa,CAAC,IAAI,EAAE,0BAA0B,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACtF,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAC/E,SAAS;QACX,CAAC;QACD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,eAAe,CAAC,cAAc,KAAK,6CAA6C,CAAC,CAAC;QAC1F,CAAC;QACD,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;YAChC,MAAM,eAAe,CAAC,cAAc,KAAK,2BAA2B,cAAc,EAAE,CAAC,CAAC;QACxF,CAAC;QACD,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;YACvE,MAAM,eAAe,CAAC,cAAc,KAAK,0CAA0C,cAAc,EAAE,CAAC,CAAC;QACvG,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;IACjG,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/capabilities.d.ts

@@ -0,0 +1,13 @@
+import { AgentCapabilityCatalog } from "@claudexor/schema";
+/** MCP tool names from the server's own descriptor producer (noop runner). */
+export declare function mcpToolNames(): readonly string[];
+/**
+ * Compose the AgentCapabilityCatalog from the existing truth producers:
+ * gateway.statusAll (manifest + doctor), the model-truth service, the user
+ * config (configured models), the CLI command registry, and the schema's own
+ * closed vocabularies. Shared verbatim by the daemon's GET /agent-capabilities
+ * service, the `claudexor capabilities` verb, and the MCP
+ * `claudexor_capabilities` tool — three views, one composer.
+ */
+export declare function buildAgentCapabilityCatalog(): Promise<AgentCapabilityCatalog>;
+//# sourceMappingURL=capabilities.d.ts.map

package/dist/capabilities.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"capabilities.d.ts","sourceRoot":"","sources":["../src/capabilities.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,sBAAsB,EASvB,MAAM,mBAAmB,CAAC;AAQ3B,8EAA8E;AAC9E,wBAAgB,YAAY,IAAI,SAAS,MAAM,EAAE,CAEhD;AAKD;;;;;;;GAOG;AACH,wBAAsB,2BAA2B,IAAI,OAAO,CAAC,sBAAsB,CAAC,CA8EnF"}

package/dist/capabilities.js

@@ -0,0 +1,90 @@
+import { AccessProfile, AgentCapabilityCatalog, ControlRunStartRequest, MODE_MUTABILITY, ModeKind, RUN_START_CLIENT_REJECTED_KEYS, RunApplyState, WorkspaceMode, } from "@claudexor/schema";
+import { loadConfig } from "@claudexor/config";
+import { validateModel } from "@claudexor/core";
+import { defaultClaudexorTools } from "@claudexor/mcp-server";
+import { CLAUDEXOR_VERSION } from "@claudexor/util";
+import { CLI_COMMANDS } from "./command-registry.js";
+import { buildGateway, harnessModels } from "./registry.js";
+/** MCP tool names from the server's own descriptor producer (noop runner). */
+export function mcpToolNames() {
+    return defaultClaudexorTools(async () => "").map((t) => t.name);
+}
+/** Sentinel for user-level probes with no project root (same as claudexord). */
+const NO_PROJECT_ROOT = "/nonexistent-claudexor-project";
+/**
+ * Compose the AgentCapabilityCatalog from the existing truth producers:
+ * gateway.statusAll (manifest + doctor), the model-truth service, the user
+ * config (configured models), the CLI command registry, and the schema's own
+ * closed vocabularies. Shared verbatim by the daemon's GET /agent-capabilities
+ * service, the `claudexor capabilities` verb, and the MCP
+ * `claudexor_capabilities` tool — three views, one composer.
+ */
+export async function buildAgentCapabilityCatalog() {
+    const statuses = await buildGateway({ includeFakes: false }).statusAll({ cwd: NO_PROJECT_ROOT });
+    const cfg = loadConfig(NO_PROJECT_ROOT);
+    const harnesses = await Promise.all(statuses.map(async (s) => {
+        // Model truth degrades soft: a catalog is a status surface, so an
+        // unreachable vendor CLI yields source=none instead of throwing the
+        // whole catalog away. The fallback is the full typed response shape.
+        const truth = await harnessModels(s.id, NO_PROJECT_ROOT, false).catch(() => ({ harnessId: s.id, models: [], source: "none", verifiedAgainst: null }));
+        const configured = cfg.global.harnesses[s.id]?.default_model ?? null;
+        const check = configured
+            ? validateModel(configured, truth.models.map((m) => m.id), truth.source === "api" ? "api" : "manifest")
+            : null;
+        const profile = s.manifest?.capability_profile;
+        // Settings can disable a harness outright (harnesses.<id>.enabled=false);
+        // routing drops it, so the catalog must not advertise it as available.
+        const enabled = cfg.global.harnesses[s.id]?.enabled !== false;
+        return {
+            id: s.id,
+            enabled,
+            displayName: s.manifest?.display_name ?? s.id,
+            status: s.status,
+            providerFamily: s.manifest?.provider_family ?? "unknown",
+            enabledIntents: [...s.enabledIntents],
+            disabledIntents: [...s.disabledIntents],
+            reasons: [...s.reasons],
+            configuredModel: configured,
+            configuredModelValid: check ? check.status === "ok" : null,
+            models: { source: truth.source, count: truth.models.length, verifiedAgainst: truth.verifiedAgainst },
+            webPolicy: s.manifest?.capabilities.web_policy ?? "none",
+            imageInput: profile?.image_input ?? "none",
+            effortLevels: [...(s.manifest?.capabilities.effort_levels ?? [])],
+            accessProfilesSupported: [...(s.manifest?.access_profiles_supported ?? [])],
+            readonlyMechanism: profile?.access_control.readonly_mechanism ?? "none",
+        };
+    }));
+    // Run-control keys are DERIVED from the schema shape, minus the keys the
+    // daemon rejects from direct clients (thread-turn pipeline internals) —
+    // one shared list in @claudexor/schema keeps catalog and guards in lockstep.
+    const rejected = new Set(RUN_START_CLIENT_REJECTED_KEYS);
+    const runControlKeys = Object.keys(ControlRunStartRequest.shape)
+        .filter((k) => !rejected.has(k))
+        .sort();
+    return AgentCapabilityCatalog.parse({
+        ok: true,
+        version: CLAUDEXOR_VERSION,
+        generatedAt: new Date().toISOString(),
+        harnesses,
+        availableHarnesses: harnesses.filter((h) => h.status === "ok" && h.enabled).map((h) => h.id),
+        modes: [...ModeKind.options],
+        runControlKeys,
+        mutability: {
+            readOnlyModes: ModeKind.options.filter((m) => MODE_MUTABILITY[m] === "read"),
+            writeModes: ModeKind.options.filter((m) => MODE_MUTABILITY[m] === "write"),
+            isolationKinds: ["envelope", "live"],
+            workspaceModes: [...WorkspaceMode.options],
+            accessProfiles: [...AccessProfile.options],
+            applyModes: ["apply", "commit", "branch", "pr"],
+        },
+        cliCommands: CLI_COMMANDS.map((c) => ({
+            id: c.id,
+            mutability: c.mutability,
+            stability: c.stability,
+            recovery: c.recovery === true,
+        })),
+        mcpTools: [...mcpToolNames()],
+        runApplyStates: [...RunApplyState.options],
+    });
+}
+//# sourceMappingURL=capabilities.js.map

package/dist/capabilities.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capabilities.js","sourceRoot":"","sources":["../src/capabilities.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,aAAa,EACb,sBAAsB,EACtB,sBAAsB,EACtB,eAAe,EACf,QAAQ,EACR,8BAA8B,EAC9B,aAAa,EACb,aAAa,GAGd,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAE5D,8EAA8E;AAC9E,MAAM,UAAU,YAAY;IAC1B,OAAO,qBAAqB,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AAClE,CAAC;AAED,gFAAgF;AAChF,MAAM,eAAe,GAAG,gCAAgC,CAAC;AAEzD;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B;IAC/C,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,eAAe,EAAE,CAAC,CAAC;IACjG,MAAM,GAAG,GAAG,UAAU,CAAC,eAAe,CAAC,CAAC;IAExC,MAAM,SAAS,GAAqB,MAAM,OAAO,CAAC,GAAG,CACnD,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE;QACvB,kEAAkE;QAClE,oEAAoE;QACpE,qEAAqE;QACrE,MAAM,KAAK,GAAiC,MAAM,aAAa,CAAC,CAAC,CAAC,EAAE,EAAE,eAAe,EAAE,KAAK,CAAC,CAAC,KAAK,CACjG,GAAiC,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC,CAC7G,CAAC;QACF,MAAM,UAAU,GAAG,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,aAAa,IAAI,IAAI,CAAC;QACrE,MAAM,KAAK,GAAG,UAAU;YACtB,CAAC,CAAC,aAAa,CACX,UAAU,EACV,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAC7B,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAC5C;YACH,CAAC,CAAC,IAAI,CAAC;QACT,MAAM,OAAO,GAAG,CAAC,CAAC,QAAQ,EAAE,kBAAkB,CAAC;QAC/C,0EAA0E;QAC1E,uEAAuE;QACvE,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,OAAO,KAAK,KAAK,CAAC;QAC9D,OAAO;YACL,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,OAAO;YACP,WAAW,EAAE,CAAC,CAAC,QAAQ,EAAE,YAAY,IAAI,CAAC,CAAC,EAAE;YAC7C,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,cAAc,EAAE,CAAC,CAAC,QAAQ,EAAE,eAAe,IAAI,SAAS;YACxD,cAAc,EAAE,CAAC,GAAG,CAAC,CAAC,cAAc,CAAC;YACrC,eAAe,EAAE,CAAC,GAAG,CAAC,CAAC,eAAe,CAAC;YACvC,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC;YACvB,eAAe,EAAE,UAAU;YAC3B,oBAAoB,EAAE,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI;YAC1D,MAAM,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,eAAe,EAAE,KAAK,CAAC,eAAe,EAAE;YACpG,SAAS,EAAE,CAAC,CAAC,QAAQ,EAAE,YAAY,CAAC,UAAU,IAAI,MAAM;YACxD,UAAU,EAAE,OAAO,EAAE,WAAW,IAAI,MAAM;YAC1C,YAAY,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,YAAY,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC;YACjE,uBAAuB,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,yBAAyB,IAAI,EAAE,CAAC,CAAC;YAC3E,iBAAiB,EAAE,OAAO,EAAE,cAAc,CAAC,kBAAkB,IAAI,MAAM;SACxE,CAAC;IACJ,CAAC,CAAC,CACH,CAAC;IAEF,yEAAyE;IACzE,wEAAwE;IACxE,6EAA6E;IAC7E,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAS,8BAA8B,CAAC,CAAC;IACjE,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC;SAC7D,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;SAC/B,IAAI,EAAE,CAAC;IAEV,OAAO,sBAAsB,CAAC,KAAK,CAAC;QAClC,EAAE,EAAE,IAAI;QACR,OAAO,EAAE,iBAAiB;QAC1B,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACrC,SAAS;QACT,kBAAkB,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,IAAI,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5F,KAAK,EAAE,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC;QAC5B,cAAc;QACd,UAAU,EAAE;YACV,aAAa,EAAE,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC;YAC5E,UAAU,EAAE,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC;YAC1E,cAAc,EAAE,CAAC,UAAU,EAAE,MAAM,CAAC;YACpC,cAAc,EAAE,CAAC,GAAG,aAAa,CAAC,OAAO,CAAC;YAC1C,cAAc,EAAE,CAAC,GAAG,aAAa,CAAC,OAAO,CAAC;YAC1C,UAAU,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC;SAChD;QACD,WAAW,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACpC,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,UAAU,EAAE,CAAC,CAAC,UAAU;YACxB,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,QAAQ,EAAE,CAAC,CAAC,QAAQ,KAAK,IAAI;SAC9B,CAAC,CAAC;QACH,QAAQ,EAAE,CAAC,GAAG,YAAY,EAAE,CAAC;QAC7B,cAAc,EAAE,CAAC,GAAG,aAAa,CAAC,OAAO,CAAC;KAC3C,CAAC,CAAC;AACL,CAAC"}

package/dist/claudexord.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=claudexord.d.ts.map

package/dist/claudexord.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"claudexord.d.ts","sourceRoot":"","sources":["../src/claudexord.ts"],"names":[],"mappings":""}