@claudexor/cli 3.1.1 → 3.2.0

package/dist/delegation-belt-descriptor.js

@@ -1,6 +1,5 @@
 import { existsSync } from "node:fs";
-import { dirname, join } from "node:path";
-import { fileURLToPath } from "node:url";
+import { resolve } from "node:path";
 import { DEFAULT_MAX_SUBRUNS, delegationEnv } from "@claudexor/mcp-server";
 import { defaultSocketPath } from "@claudexor/daemon";
 import { DelegationBeltUnavailableError } from "@claudexor/core";
@@ -24,75 +23,58 @@ export function beltDaemonDiscoveryEnv() {
     return {
         CLAUDEXOR_CONFIG_DIR: userConfigDir(),
         CLAUDEXOR_DAEMON_SOCK: defaultSocketPath(),
+        // The belt intentionally points at the parent daemon's non-default root
+        // from inside a scoped HOME. Mark that override as deliberate so an
+        // inherited matching host-plugin version cannot misclassify it as stale
+        // plugin_artifact_skew before MCP initialize.
+        CLAUDEXOR_ROOT_MODE: "explicit",
     };
 }
 /**
- * The ordered `cli.js` candidates that host `mcp serve-belt`, most-preferred
- * first: adjacent to the launching process, then adjacent to THIS module. The
- * belt descriptor is built INSIDE the daemon process, so `process.argv[1]` is
- * `claudexord.js` — the daemon entry, which has NO `mcp serve-belt` subcommand.
- * In npm/dev `dist/`, `cli.js` is a genuine sibling of `claudexord.js`. In the
- * single-file macOS app bundle the daemon is `claudexord.bundle.cjs` in
- * `Contents/Resources` with NO sibling `cli.js` — so BOTH candidates can be
- * absent, and the fallback must not be trusted blindly.
+ * Resolve the exact entry that started THIS daemon. `runClaudexordEntry()`
+ * dispatches `mcp serve-belt` before daemon initialization, so the same path
+ * works for direct dev/npm `claudexord.js`, the npm bin wrapper, and the
+ * packaged single-file `claudexord.bundle.cjs`. There is no adjacent-file
+ * guess and no second CLI copy in the app closure.
  */
-export function beltCliEntryCandidates(argv1 = process.argv[1]) {
-    const out = [];
-    if (argv1)
-        out.push(join(dirname(argv1), "cli.js"));
-    const own = join(dirname(fileURLToPath(import.meta.url)), "cli.js");
-    if (!out.includes(own))
-        out.push(own);
-    return out;
-}
-/**
- * Absolute path to the CLI entry (`cli.js`) that hosts `mcp serve-belt`, or
- * `undefined` when NO candidate exists on disk. EVERY candidate — including the
- * module-relative fallback — is existence-validated: a descriptor that points
- * at a missing `cli.js` spawns `node <missing> mcp serve-belt`, which
- * MODULE_NOT_FOUNDs inside the harness; the belt reports `failed`, the harness
- * silently answers from its own native subagent, and the run terminalizes a
- * false success (QA-024). Returning `undefined` lets the descriptor builder
- * refuse TYPED at preflight instead of emitting a dead descriptor.
- *
- * This mirrors the browser launcher's resolution: prefer the entry adjacent to
- * the launching process (survives symlinked / wrapped launches), then fall back
- * to this module's own directory — but never return an unchecked path.
- */
-export function resolveCliEntry(argv1 = process.argv[1]) {
-    return beltCliEntryCandidates(argv1).find((candidate) => existsSync(candidate));
+export function resolveDaemonEntry(argv1 = process.argv[1]) {
+    if (!argv1)
+        return undefined;
+    const entry = resolve(argv1);
+    return existsSync(entry) ? entry : undefined;
 }
 /**
  * Build the delegation belt MCP-server descriptor injected into a delegate
- * agent run's sandbox (D32). The child harness spawns `node cli.js mcp
- * serve-belt` (which discovers this same daemon and starts bounded isolated
- * sub-runs). The belt process reads its policy from the injected env: depth 0
+ * agent run's sandbox (D32). The child harness re-enters the exact running
+ * daemon entry as `node <daemon-entry> mcp serve-belt`; that entry dispatches
+ * the side-effect-free belt server before daemon startup. The belt process
+ * reads its policy from the injected env: depth 0
  * (top-level — the sub-runs it starts carry no belt, so nesting cannot exceed
- * 1), the sub-run cap, and a snapshot of the parent's paid-budget headroom.
+ * 1), the sub-run cap, and a conservative snapshot of the parent's paid-budget
+ * headroom. The daemon-lifetime shared ledger remains the authoritative cap.
  *
- * TYPED PREFLIGHT REFUSAL (QA-024): when no `cli.js` entry exists (the packaged
- * single-file bundle without a sibling CLI), this throws
- * `DelegationBeltUnavailableError` naming the probed paths and the remedy — it
- * never emits a descriptor that would MODULE_NOT_FOUND inside the harness and
- * degrade into a silent native-subagent false success. Packaging shipping a
- * real belt entry is Ф4 territory; until then the honest packaged behavior for
- * `--delegate` is this refusal.
+ * QA-024 remains fail-closed: when the executing daemon entry cannot be
+ * resolved on disk, throw before harness spawn instead of emitting a dead MCP
+ * descriptor that could silently degrade to a native subagent.
  */
-export function buildDelegationBeltDescriptor(paidBudget, cliEntry = resolveCliEntry(), discoveryEnv = beltDaemonDiscoveryEnv()) {
-    if (!cliEntry) {
-        const probed = beltCliEntryCandidates();
-        throw new DelegationBeltUnavailableError(`--delegate cannot start the Claudexor delegation belt: no 'cli.js' entry that hosts 'mcp serve-belt' exists (probed: ${probed.join(", ") || "<none>"}). This is the packaged single-file bundle without a bundled CLI entry — the belt would MODULE_NOT_FOUND inside the harness and silently degrade to a native subagent. Re-run without --delegate, or use an install that ships cli.js next to the daemon.`);
+export function buildDelegationBeltDescriptor(paidBudget, daemonEntry = resolveDaemonEntry(), discoveryEnv = beltDaemonDiscoveryEnv()) {
+    if (!daemonEntry) {
+        throw new DelegationBeltUnavailableError("--delegate cannot start the Claudexor delegation belt: the running daemon entry could not be resolved on disk. Re-run without --delegate, or repair/update the Claudexor runtime.");
     }
     return {
         name: "claudexor",
         command: process.execPath,
-        args: [cliEntry, "mcp", "serve-belt"],
+        args: [daemonEntry, "mcp", "serve-belt"],
+        required: true,
         env: {
             // Daemon discovery FIRST so the delegation-policy vars can never be
             // clobbered by a discovery key (disjoint namespaces, but explicit).
             ...discoveryEnv,
             ...delegationEnv({
                 parentRunId: "",
+                // Rebound by the orchestrator from the normalized run input before the
+                // descriptor reaches any lane; empty fails closed at the tool boundary.
+                repoRoot: "",
                 depth: 0,
                 maxSubRuns: DEFAULT_MAX_SUBRUNS,
                 parentBudget: paidBudget ?? { kind: "unlimited" },
@@ -100,4 +82,19 @@ export function buildDelegationBeltDescriptor(paidBudget, cliEntry = resolveCliE
         },
     };
 }
+/** Composition-root policy: only a known pre-start entry absence may degrade
+ * Delegate to ordinary Agent. The orchestrator receives requested=true plus a
+ * null belt and owns the durable runtime_unavailable receipt. */
+export function delegationBeltForRun(requested, paidBudget, daemonEntry = resolveDaemonEntry(), discoveryEnv = beltDaemonDiscoveryEnv()) {
+    if (!requested)
+        return null;
+    try {
+        return buildDelegationBeltDescriptor(paidBudget, daemonEntry ?? null, discoveryEnv);
+    }
+    catch (error) {
+        if (error instanceof DelegationBeltUnavailableError)
+            return null;
+        throw error;
+    }
+}
 //# sourceMappingURL=delegation-belt-descriptor.js.map

package/dist/delegation-belt-descriptor.js.map

@@ -1 +1 @@
-{"version":3,"file":"delegation-belt-descriptor.js","sourceRoot":"","sources":["../src/delegation-belt-descriptor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,mBAAmB,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC3E,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,8BAA8B,EAAE,MAAM,iBAAiB,CAAC;AACjE,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAGhD;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,sBAAsB;IACpC,OAAO;QACL,oBAAoB,EAAE,aAAa,EAAE;QACrC,qBAAqB,EAAE,iBAAiB,EAAE;KAC3C,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,sBAAsB,CAAC,QAA4B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IAChF,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,IAAI,KAAK;QAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC;IACpD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;IACpE,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACtC,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,eAAe,CAAC,QAA4B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IACzE,OAAO,sBAAsB,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;AAClF,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,6BAA6B,CAC3C,UAAkC,EAClC,WAA+B,eAAe,EAAE,EAChD,eAAuC,sBAAsB,EAAE;IAE/D,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,MAAM,GAAG,sBAAsB,EAAE,CAAC;QACxC,MAAM,IAAI,8BAA8B,CACtC,wHACE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,QACvB,2PAA2P,CAC5P,CAAC;IACJ,CAAC;IACD,OAAO;QACL,IAAI,EAAE,WAAW;QACjB,OAAO,EAAE,OAAO,CAAC,QAAQ;QACzB,IAAI,EAAE,CAAC,QAAQ,EAAE,KAAK,EAAE,YAAY,CAAC;QACrC,GAAG,EAAE;YACH,oEAAoE;YACpE,oEAAoE;YACpE,GAAG,YAAY;YACf,GAAG,aAAa,CAAC;gBACf,WAAW,EAAE,EAAE;gBACf,KAAK,EAAE,CAAC;gBACR,UAAU,EAAE,mBAAmB;gBAC/B,YAAY,EAAE,UAAU,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE;aAClD,CAAC;SACH;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"delegation-belt-descriptor.js","sourceRoot":"","sources":["../src/delegation-belt-descriptor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,mBAAmB,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC3E,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,8BAA8B,EAAE,MAAM,iBAAiB,CAAC;AACjE,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAGhD;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,sBAAsB;IACpC,OAAO;QACL,oBAAoB,EAAE,aAAa,EAAE;QACrC,qBAAqB,EAAE,iBAAiB,EAAE;QAC1C,wEAAwE;QACxE,oEAAoE;QACpE,wEAAwE;QACxE,8CAA8C;QAC9C,mBAAmB,EAAE,UAAU;KAChC,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAChC,KAAK,GAAuB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IAE3C,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IAC7B,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC/C,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,6BAA6B,CAC3C,UAAkC,EAClC,WAAW,GAA8B,kBAAkB,EAAE,EAC7D,YAAY,GAA2B,sBAAsB,EAAE;IAE/D,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,IAAI,8BAA8B,CACtC,mLAAmL,CACpL,CAAC;IACJ,CAAC;IACD,OAAO;QACL,IAAI,EAAE,WAAW;QACjB,OAAO,EAAE,OAAO,CAAC,QAAQ;QACzB,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,EAAE,YAAY,CAAC;QACxC,QAAQ,EAAE,IAAI;QACd,GAAG,EAAE;YACH,oEAAoE;YACpE,oEAAoE;YACpE,GAAG,YAAY;YACf,GAAG,aAAa,CAAC;gBACf,WAAW,EAAE,EAAE;gBACf,uEAAuE;gBACvE,wEAAwE;gBACxE,QAAQ,EAAE,EAAE;gBACZ,KAAK,EAAE,CAAC;gBACR,UAAU,EAAE,mBAAmB;gBAC/B,YAAY,EAAE,UAAU,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE;aAClD,CAAC;SACH;KACF,CAAC;AACJ,CAAC;AAED;;iEAEiE;AACjE,MAAM,UAAU,oBAAoB,CAClC,SAAkB,EAClB,UAAkC,EAClC,WAAW,GAA8B,kBAAkB,EAAE,EAC7D,YAAY,GAA2B,sBAAsB,EAAE;IAE/D,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IAC5B,IAAI,CAAC;QACH,OAAO,6BAA6B,CAAC,UAAU,EAAE,WAAW,IAAI,IAAI,EAAE,YAAY,CAAC,CAAC;IACtF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,8BAA8B;YAAE,OAAO,IAAI,CAAC;QACjE,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/delegation-capability.d.ts

@@ -0,0 +1,4 @@
+import { DelegationCapability, type HarnessManifest } from "@claudexor/schema";
+/** One producer for the installed-runtime x harness Delegate capability. */
+export declare function delegationCapabilityFor(manifest: HarnessManifest | null | undefined, runtimeAvailable?: boolean): DelegationCapability;
+//# sourceMappingURL=delegation-capability.d.ts.map

package/dist/delegation-capability.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delegation-capability.d.ts","sourceRoot":"","sources":["../src/delegation-capability.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,KAAK,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAG/E,4EAA4E;AAC5E,wBAAgB,uBAAuB,CACrC,QAAQ,EAAE,eAAe,GAAG,IAAI,GAAG,SAAS,EAC5C,gBAAgB,UAAqC,GACpD,oBAAoB,CAyBtB"}

package/dist/delegation-capability.js

@@ -0,0 +1,29 @@
+import { DelegationCapability } from "@claudexor/schema";
+import { resolveDaemonEntry } from "./delegation-belt-descriptor.js";
+/** One producer for the installed-runtime x harness Delegate capability. */
+export function delegationCapabilityFor(manifest, runtimeAvailable = resolveDaemonEntry() !== undefined) {
+    const requiresFullAccess = manifest?.capability_profile.mcp_injection_requires_full_access ?? false;
+    if (manifest?.capability_profile.mcp_injection !== true) {
+        return DelegationCapability.parse({
+            available: false,
+            reason: "manifest_unsupported",
+            remediation: "Choose a harness that supports Claudexor MCP injection.",
+            requiresFullAccess,
+        });
+    }
+    if (!runtimeAvailable) {
+        return DelegationCapability.parse({
+            available: false,
+            reason: "runtime_unavailable",
+            remediation: "Update or repair the Claudexor runtime to restore Delegate.",
+            requiresFullAccess,
+        });
+    }
+    return DelegationCapability.parse({
+        available: true,
+        reason: "ready",
+        remediation: null,
+        requiresFullAccess,
+    });
+}
+//# sourceMappingURL=delegation-capability.js.map

package/dist/delegation-capability.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delegation-capability.js","sourceRoot":"","sources":["../src/delegation-capability.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAwB,MAAM,mBAAmB,CAAC;AAC/E,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AAErE,4EAA4E;AAC5E,MAAM,UAAU,uBAAuB,CACrC,QAA4C,EAC5C,gBAAgB,GAAG,kBAAkB,EAAE,KAAK,SAAS;IAErD,MAAM,kBAAkB,GACtB,QAAQ,EAAE,kBAAkB,CAAC,kCAAkC,IAAI,KAAK,CAAC;IAC3E,IAAI,QAAQ,EAAE,kBAAkB,CAAC,aAAa,KAAK,IAAI,EAAE,CAAC;QACxD,OAAO,oBAAoB,CAAC,KAAK,CAAC;YAChC,SAAS,EAAE,KAAK;YAChB,MAAM,EAAE,sBAAsB;YAC9B,WAAW,EAAE,yDAAyD;YACtE,kBAAkB;SACnB,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,OAAO,oBAAoB,CAAC,KAAK,CAAC;YAChC,SAAS,EAAE,KAAK;YAChB,MAAM,EAAE,qBAAqB;YAC7B,WAAW,EAAE,6DAA6D;YAC1E,kBAAkB;SACnB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,oBAAoB,CAAC,KAAK,CAAC;QAChC,SAAS,EAAE,IAAI;QACf,MAAM,EAAE,OAAO;QACf,WAAW,EAAE,IAAI;QACjB,kBAAkB;KACnB,CAAC,CAAC;AACL,CAAC"}

package/dist/delegation-daemon-binding.d.ts

@@ -0,0 +1,8 @@
+import type { DaemonServer } from "@claudexor/daemon";
+import { DelegationBudgetAuthority } from "@claudexor/orchestrator";
+/** Break the composition-root callback cycle without weakening cancellation ownership. */
+export declare function createDelegationDaemonBinding(): {
+    authority: DelegationBudgetAuthority;
+    bind(server: Pick<DaemonServer, "cancelJob">): void;
+};
+//# sourceMappingURL=delegation-daemon-binding.d.ts.map

package/dist/delegation-daemon-binding.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delegation-daemon-binding.d.ts","sourceRoot":"","sources":["../src/delegation-daemon-binding.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAC;AAEpE,0FAA0F;AAC1F,wBAAgB,6BAA6B,IAAI;IAC/C,SAAS,EAAE,yBAAyB,CAAC;IACrC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,YAAY,EAAE,WAAW,CAAC,GAAG,IAAI,CAAC;CACrD,CAaA"}

package/dist/delegation-daemon-binding.js

@@ -0,0 +1,18 @@
+import { DelegationBudgetAuthority } from "@claudexor/orchestrator";
+/** Break the composition-root callback cycle without weakening cancellation ownership. */
+export function createDelegationDaemonBinding() {
+    let server = null;
+    return {
+        authority: new DelegationBudgetAuthority({
+            cancelAdmission: (jobId) => {
+                if (!server)
+                    throw new Error("daemon cancellation authority is not initialized");
+                server.cancelJob(jobId);
+            },
+        }),
+        bind(value) {
+            server = value;
+        },
+    };
+}
+//# sourceMappingURL=delegation-daemon-binding.js.map

package/dist/delegation-daemon-binding.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delegation-daemon-binding.js","sourceRoot":"","sources":["../src/delegation-daemon-binding.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAC;AAEpE,0FAA0F;AAC1F,MAAM,UAAU,6BAA6B;IAI3C,IAAI,MAAM,GAA2C,IAAI,CAAC;IAC1D,OAAO;QACL,SAAS,EAAE,IAAI,yBAAyB,CAAC;YACvC,eAAe,EAAE,CAAC,KAAK,EAAE,EAAE;gBACzB,IAAI,CAAC,MAAM;oBAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;gBACjF,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YAC1B,CAAC;SACF,CAAC;QACF,IAAI,CAAC,KAAK;YACR,MAAM,GAAG,KAAK,CAAC;QACjB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/delegation-output.d.ts

@@ -0,0 +1,18 @@
+import type { RunFailure } from "@claudexor/schema";
+export interface DelegationReceipt {
+    requested?: boolean;
+    effective?: boolean;
+    used?: boolean;
+    reason?: string | null;
+    remediation?: string | null;
+}
+export declare function projectDelegation(detail: Record<string, unknown> | null): DelegationReceipt | null;
+export declare function terminalDetailFields(detail: Record<string, unknown> | null): {
+    outcomeBanner?: string;
+    delegation?: DelegationReceipt;
+    applyEligibility?: Record<string, unknown>;
+    failure?: RunFailure;
+};
+export declare function terminalDelegationLines(receipt: DelegationReceipt | null): string[];
+export declare function inspectDelegationLines(receipt: DelegationReceipt | null): string[];
+//# sourceMappingURL=delegation-output.d.ts.map

package/dist/delegation-output.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delegation-output.d.ts","sourceRoot":"","sources":["../src/delegation-output.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAEpD,MAAM,WAAW,iBAAiB;IAChC,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B;AAED,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,GACrC,iBAAiB,GAAG,IAAI,CAE1B;AAED,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,GAAG;IAC5E,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,iBAAiB,CAAC;IAC/B,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC3C,OAAO,CAAC,EAAE,UAAU,CAAC;CACtB,CAWA;AAED,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,iBAAiB,GAAG,IAAI,GAAG,MAAM,EAAE,CAanF;AAED,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,iBAAiB,GAAG,IAAI,GAAG,MAAM,EAAE,CAclF"}

package/dist/delegation-output.js

@@ -0,0 +1,47 @@
+import { projectApplyEligibility, projectOutcomeBanner, projectRunFailure, projectRunLineage, } from "./run-detail-projections.js";
+export function projectDelegation(detail) {
+    return projectRunLineage(detail).delegation;
+}
+export function terminalDetailFields(detail) {
+    const outcomeBanner = projectOutcomeBanner(detail);
+    const delegation = projectDelegation(detail);
+    const applyEligibility = projectApplyEligibility(detail);
+    const failure = projectRunFailure(detail);
+    return {
+        ...(outcomeBanner ? { outcomeBanner } : {}),
+        ...(delegation ? { delegation } : {}),
+        ...(applyEligibility ? { applyEligibility } : {}),
+        ...(failure ? { failure } : {}),
+    };
+}
+export function terminalDelegationLines(receipt) {
+    if (receipt?.requested !== true)
+        return [];
+    const partiallyDegraded = receipt.reason === "partially_degraded";
+    return [
+        `  delegation: effective=${String(receipt.effective)} used=${String(receipt.used)} reason=${String(receipt.reason ?? "unknown")}`,
+        ...(receipt.effective === true && !partiallyDegraded
+            ? []
+            : [
+                partiallyDegraded
+                    ? "  WARNING: one selected lane continued without Delegate; inspect its typed requirement receipt."
+                    : "  WARNING: continued without Delegate; inspect the run for the typed cause.",
+            ]),
+    ];
+}
+export function inspectDelegationLines(receipt) {
+    if (!receipt)
+        return [];
+    const lines = [
+        `delegation: requested=${String(receipt.requested)} effective=${String(receipt.effective)} used=${String(receipt.used)} reason=${String(receipt.reason ?? "unknown")}`,
+    ];
+    if (receipt.requested && (!receipt.effective || receipt.reason === "partially_degraded")) {
+        lines.push(receipt.reason === "partially_degraded"
+            ? "WARNING: Delegate was unavailable on one selected lane; that lane continued as ordinary Agent."
+            : `WARNING: Delegate was unavailable; this run continued as ordinary Agent (${receipt.reason ?? "unknown"}).`);
+        if (receipt.remediation)
+            lines.push(`  next: ${receipt.remediation}`);
+    }
+    return lines;
+}
+//# sourceMappingURL=delegation-output.js.map

package/dist/delegation-output.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delegation-output.js","sourceRoot":"","sources":["../src/delegation-output.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,uBAAuB,EACvB,oBAAoB,EACpB,iBAAiB,EACjB,iBAAiB,GAClB,MAAM,6BAA6B,CAAC;AAWrC,MAAM,UAAU,iBAAiB,CAC/B,MAAsC;IAEtC,OAAO,iBAAiB,CAAC,MAAM,CAAC,CAAC,UAAsC,CAAC;AAC1E,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,MAAsC;IAMzE,MAAM,aAAa,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;IACnD,MAAM,UAAU,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAC7C,MAAM,gBAAgB,GAAG,uBAAuB,CAAC,MAAM,CAAC,CAAC;IACzD,MAAM,OAAO,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAC1C,OAAO;QACL,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3C,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjD,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAChC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,OAAiC;IACvE,IAAI,OAAO,EAAE,SAAS,KAAK,IAAI;QAAE,OAAO,EAAE,CAAC;IAC3C,MAAM,iBAAiB,GAAG,OAAO,CAAC,MAAM,KAAK,oBAAoB,CAAC;IAClE,OAAO;QACL,2BAA2B,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,SAAS,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,MAAM,CAAC,OAAO,CAAC,MAAM,IAAI,SAAS,CAAC,EAAE;QACjI,GAAG,CAAC,OAAO,CAAC,SAAS,KAAK,IAAI,IAAI,CAAC,iBAAiB;YAClD,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC;gBACE,iBAAiB;oBACf,CAAC,CAAC,iGAAiG;oBACnG,CAAC,CAAC,6EAA6E;aAClF,CAAC;KACP,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,OAAiC;IACtE,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,CAAC;IACxB,MAAM,KAAK,GAAG;QACZ,yBAAyB,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,cAAc,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,SAAS,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,MAAM,CAAC,OAAO,CAAC,MAAM,IAAI,SAAS,CAAC,EAAE;KACvK,CAAC;IACF,IAAI,OAAO,CAAC,SAAS,IAAI,CAAC,CAAC,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,MAAM,KAAK,oBAAoB,CAAC,EAAE,CAAC;QACzF,KAAK,CAAC,IAAI,CACR,OAAO,CAAC,MAAM,KAAK,oBAAoB;YACrC,CAAC,CAAC,gGAAgG;YAClG,CAAC,CAAC,4EAA4E,OAAO,CAAC,MAAM,IAAI,SAAS,IAAI,CAChH,CAAC;QACF,IAAI,OAAO,CAAC,WAAW;YAAE,KAAK,CAAC,IAAI,CAAC,WAAW,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/harness-command.d.ts

@@ -0,0 +1,13 @@
+import { type ParsedArgs } from "./args.js";
+/**
+ * `claudexor harness list [--all]` and `claudexor harness install <id>`.
+ * Fakes are test fixtures, not real harnesses; `--all` reveals them. The
+ * install verb is the disclosed pinned installer (harness-installer.ts,
+ * issue #89): exact npm pins for claude/codex/opencode, the human-verified
+ * PTY path for cursor, and nothing executes without disclosure. Flags are
+ * verb-owned (registry `subcommandFlags`): `harness list --yes` or
+ * `harness install --all` is a loud exit-2 usage error, never a silently
+ * ignored flag (INV-021).
+ */
+export declare function harnessCommand(args: ParsedArgs, json: boolean): number;
+//# sourceMappingURL=harness-command.d.ts.map

package/dist/harness-command.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"harness-command.d.ts","sourceRoot":"","sources":["../src/harness-command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAY,KAAK,UAAU,EAAE,MAAM,WAAW,CAAC;AAMtD;;;;;;;;;GASG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,GAAG,MAAM,CAkBtE"}

package/dist/harness-command.js

@@ -0,0 +1,35 @@
+import { flagBool } from "./args.js";
+import { print, printJson, printUsageError } from "./cli-io.js";
+import { subcommandFlagScopeError } from "./command-scope.js";
+import { harnessInstallCommand } from "./harness-installer.js";
+import { buildRegistry } from "./registry.js";
+/**
+ * `claudexor harness list [--all]` and `claudexor harness install <id>`.
+ * Fakes are test fixtures, not real harnesses; `--all` reveals them. The
+ * install verb is the disclosed pinned installer (harness-installer.ts,
+ * issue #89): exact npm pins for claude/codex/opencode, the human-verified
+ * PTY path for cursor, and nothing executes without disclosure. Flags are
+ * verb-owned (registry `subcommandFlags`): `harness list --yes` or
+ * `harness install --all` is a loud exit-2 usage error, never a silently
+ * ignored flag (INV-021).
+ */
+export function harnessCommand(args, json) {
+    const sub = args._[1] ?? "";
+    const scopeError = subcommandFlagScopeError("harness", sub, Object.keys(args.flags));
+    if (scopeError)
+        return printUsageError(json, scopeError);
+    if (args._[1] === "list") {
+        const includeFakes = flagBool(args, "all");
+        const ids = [...buildRegistry({ includeFakes }).keys()];
+        if (json)
+            printJson({ harnesses: ids });
+        else
+            ids.forEach((id) => print(id));
+        return 0;
+    }
+    if (args._[1] === "install") {
+        return harnessInstallCommand(args, json);
+    }
+    return printUsageError(json, "usage: claudexor harness list [--all] | install <claude|codex|cursor|opencode> [--dry-run] [--yes]");
+}
+//# sourceMappingURL=harness-command.js.map

package/dist/harness-command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"harness-command.js","sourceRoot":"","sources":["../src/harness-command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAmB,MAAM,WAAW,CAAC;AACtD,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAChE,OAAO,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAE9C;;;;;;;;;GASG;AACH,MAAM,UAAU,cAAc,CAAC,IAAgB,EAAE,IAAa;IAC5D,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC5B,MAAM,UAAU,GAAG,wBAAwB,CAAC,SAAS,EAAE,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IACrF,IAAI,UAAU;QAAE,OAAO,eAAe,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACzD,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC;QACzB,MAAM,YAAY,GAAG,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC3C,MAAM,GAAG,GAAG,CAAC,GAAG,aAAa,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACxD,IAAI,IAAI;YAAE,SAAS,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;;YACnC,GAAG,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;QACpC,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;QAC5B,OAAO,qBAAqB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,eAAe,CACpB,IAAI,EACJ,oGAAoG,CACrG,CAAC;AACJ,CAAC"}

package/dist/harness-installer.d.ts

@@ -0,0 +1,79 @@
+/**
+ * `claudexor harness install` — the disclosed, pinned remote vendor installer
+ * (issue #89; restored from the PR #82 cut with the security objections
+ * fixed).
+ *
+ * Contract:
+ * - npm-distributed harnesses (claude/codex/opencode) install ONE exact
+ *   version — the per-package vendor-version SSOT — never `@latest`. npm
+ *   verifies the registry integrity checksum for an exact version, so the
+ *   pin is a real guarantee. For claude/codex that SSOT is the value the
+ *   model/effort freshness gates verified; the opencode pin is a
+ *   deterministic install target, NOT a verification claim (no recorded
+ *   fixture yet — see packages/harness-opencode vendor-cli-version.ts).
+ * - cursor has no npm artifact and CANNOT be pinned. Instead of pretending,
+ *   the HUMAN is the verifier: the complete vendor script is downloaded first
+ *   (never piped to a shell), its size and sha256 are printed, and it runs in
+ *   the visible PTY the operator is watching — the same principle as
+ *   interactive SSH auth.
+ * - NOTHING executes without disclosure: the exact command and install
+ *   destination print first, and execution needs a TTY confirmation or an
+ *   explicit `--yes` (the macOS flow confirms against this module's own
+ *   `--dry-run --json` disclosure before passing `--yes`).
+ * - failures are typed and loud; a failed download or non-zero installer exit
+ *   never reads as success, and the temp download dir is removed on every
+ *   path.
+ * - `--json` keeps stdout pure: exactly ONE JSON object. In json mode every
+ *   human progress line goes to stderr and child processes (npm/curl/the
+ *   vendor script) run with their stdout routed onto stderr, so vendor
+ *   output stays visible without corrupting the machine envelope.
+ */
+import { spawnSync } from "node:child_process";
+import { existsSync, mkdirSync } from "node:fs";
+import { type ParsedArgs } from "./args.js";
+export declare const INSTALLABLE_HARNESSES: readonly ["claude", "codex", "cursor", "opencode"];
+export type InstallableHarness = (typeof INSTALLABLE_HARNESSES)[number];
+export declare function isInstallableHarness(value: string): value is InstallableHarness;
+/** Exact npm pins. Each version ALIASES the harness package's vendor-version
+ * SSOT (vendor-cli-version.ts there). For claude/codex that is the version
+ * this release's freshness gates verified; the opencode pin is a
+ * deterministic install target only — no recorded verification fixture
+ * vouches for it (its vendor-cli-version.ts discloses this). Cursor is
+ * absent deliberately: it ships no npm artifact (see the cursor branch
+ * below). */
+export type HarnessInstallVerification = "release_verified" | "deterministic_only" | "human_observed";
+export declare const CURSOR_INSTALL_URL = "https://cursor.com/install";
+export interface HarnessInstallerDisclosure {
+    harness: InstallableHarness;
+    command: string;
+    installLocation: string;
+    /** Exact vendor version the command installs; null ONLY for cursor, which
+     * has no pinnable artifact (disclosed, never faked). */
+    pinnedVersion: string | null;
+    /** Evidence behind the install target. Package-registry integrity verifies
+     * downloaded bytes for every npm pin, but only release_verified means the
+     * exact vendor version was exercised by this release's freshness gates. */
+    verification: HarnessInstallVerification;
+}
+export declare function harnessInstallerDisclosure(harness: InstallableHarness): HarnessInstallerDisclosure;
+export interface HarnessInstallRunResult {
+    exitCode: number;
+    /** Set when the installer refused loudly WITHOUT running the vendor
+     * payload (failed/unreadable download); never a silent partial install. */
+    refusal?: string;
+}
+export declare function runHarnessInstaller(harness: InstallableHarness, options?: {
+    home?: string;
+    nodePath?: string;
+    spawn?: typeof spawnSync;
+    mkdir?: typeof mkdirSync;
+    exists?: typeof existsSync;
+    /** `--json` stdout purity: route human progress lines AND child stdout
+     * to stderr, so stdout carries exactly one JSON object (the caller's
+     * final envelope). Human mode keeps everything on stdout as before. */
+    json?: boolean;
+}): HarnessInstallRunResult;
+export declare function harnessInstallCommand(args: ParsedArgs, json: boolean, 
+/** Test seam: forwarded to `runHarnessInstaller` (spawn/home/... fakes). */
+runnerOptions?: Omit<NonNullable<Parameters<typeof runHarnessInstaller>[1]>, "json">): number;
+//# sourceMappingURL=harness-installer.d.ts.map

package/dist/harness-installer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"harness-installer.d.ts","sourceRoot":"","sources":["../src/harness-installer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAE/C,OAAO,EAAE,UAAU,EAAE,SAAS,EAA+C,MAAM,SAAS,CAAC;AAQ7F,OAAO,EAAY,KAAK,UAAU,EAAE,MAAM,WAAW,CAAC;AAGtD,eAAO,MAAM,qBAAqB,YAAI,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,CAAU,CAAC;AACxF,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,qBAAqB,CAAC,CAAC,MAAM,CAAC,CAAC;AAExE,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,kBAAkB,CAE/E;AAED;;;;;;aAMa;AACb,MAAM,MAAM,0BAA0B,GACpC,kBAAkB,GAAG,oBAAoB,GAAG,gBAAgB,CAAC;AA6B/D,eAAO,MAAM,kBAAkB,+BAA+B,CAAC;AAE/D,MAAM,WAAW,0BAA0B;IACzC,OAAO,EAAE,kBAAkB,CAAC;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,eAAe,EAAE,MAAM,CAAC;IACxB;4DACwD;IACxD,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B;;+EAE2E;IAC3E,YAAY,EAAE,0BAA0B,CAAC;CAC1C;AAED,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,kBAAkB,GAC1B,0BAA0B,CAoB5B;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,EAAE,MAAM,CAAC;IACjB;+EAC2E;IAC3E,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,kBAAkB,EAC3B,OAAO,GAAE;IACP,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,OAAO,SAAS,CAAC;IACzB,KAAK,CAAC,EAAE,OAAO,SAAS,CAAC;IACzB,MAAM,CAAC,EAAE,OAAO,UAAU,CAAC;IAC3B;;2EAEuE;IACvE,IAAI,CAAC,EAAE,OAAO,CAAC;CACX,GACL,uBAAuB,CAwFzB;AAyCD,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,UAAU,EAChB,IAAI,EAAE,OAAO;AACb,4EAA4E;AAC5E,aAAa,GAAE,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,OAAO,mBAAmB,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAM,GACvF,MAAM,CAoDR"}