@codespar/cli 0.6.2 → 0.8.0

package/dist/output.js.map

@@ -1 +1 @@
-{"version":3,"file":"output.js","sourceRoot":"","sources":["../src/output.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,MAAM,SAAS,GACb,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,SAAS;IAClC,OAAO,CAAC,GAAG,CAAC,WAAW,KAAK,GAAG;IAC/B,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,KAAK,SAAS,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAElE,SAAS,IAAI,CAAC,IAAY,EAAE,KAAa;IACvC,OAAO,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC5E,CAAC;AAED,MAAM,CAAC,MAAM,CAAC,GAAG;IACf,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC;IACpB,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC;IACrB,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC;IACvB,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC;IACrB,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC;IACxB,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC;IACtB,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC;CACvB,CAAC;AAEF,6EAA6E;AAC7E,MAAM,UAAU,EAAE,CAAC,KAA8B;IAC/C,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IACxD,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC;QAC3B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC7D,CAAC;AACH,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,KAAK,CAAC,OAAiB,EAAE,IAAgB;IACvD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC;QAC9C,OAAO;IACT,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAClC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAC5D,CAAC;IACF,MAAM,GAAG,GAAG,CAAC,KAAe,EAAE,EAAE,CAC9B,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAE5D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAC1D,KAAK,MAAM,GAAG,IAAI,IAAI;QAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;AAChE,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,IAAI,CAAC,KAAc;IACjC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;AAC9D,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,IAAI,CAAC,GAAW;IAC9B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;AAClD,CAAC;AACD,MAAM,UAAU,OAAO,CAAC,GAAW;IACjC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;AACnD,CAAC;AACD,MAAM,UAAU,IAAI,CAAC,GAAW;IAC9B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;AACpD,CAAC"}
+{"version":3,"file":"output.js","sourceRoot":"","sources":["../src/output.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,MAAM,SAAS,GACb,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,SAAS;IAClC,OAAO,CAAC,GAAG,CAAC,WAAW,KAAK,GAAG;IAC/B,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,KAAK,SAAS,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAElE,SAAS,IAAI,CAAC,IAAY,EAAE,KAAa;IACvC,OAAO,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC5E,CAAC;AAED,MAAM,CAAC,MAAM,CAAC,GAAG;IACf,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC;IACpB,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC;IACrB,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC;IACvB,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC;IACrB,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC;IACxB,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC;IACtB,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC;CACvB,CAAC;AAEF,6EAA6E;AAC7E,MAAM,UAAU,EAAE,CAAC,KAA8B;IAC/C,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IACxD,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC;QAC3B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC7D,CAAC;AACH,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,KAAK,CAAC,OAAiB,EAAE,IAAgB;IACvD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC;QAC9C,OAAO;IACT,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAClC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAC5D,CAAC;IACF,MAAM,GAAG,GAAG,CAAC,KAAe,EAAE,EAAE,CAC9B,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAE5D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAC1D,KAAK,MAAM,GAAG,IAAI,IAAI;QAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;AAChE,CAAC;AAED,kEAAkE;AAClE;;;;;GAKG;AACH,MAAM,UAAU,MAAM,CAAC,KAAgC;IACrD,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IAC3C,OAAO,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAC1E,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,KAAgC;IACzD,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IAC3C,OAAO,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;AAC5F,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,KAAgC;IACtD,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IAC3C,OAAO,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;AAClF,CAAC;AAED,MAAM,UAAU,IAAI,CAAC,KAAc;IACjC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;AAC9D,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,IAAI,CAAC,GAAW;IAC9B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;AAClD,CAAC;AACD,MAAM,UAAU,OAAO,CAAC,GAAW;IACjC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;AACnD,CAAC;AACD,MAAM,UAAU,IAAI,CAAC,GAAW;IAC9B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;AACpD,CAAC;AAED,mDAAmD;AACnD,SAAS,QAAQ,CAAC,CAAU;IAC1B,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;AAC1E,CAAC;AAED,SAAS,IAAI,CAAC,CAAU;IACtB,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,SAAS;QAAE,OAAO,GAAG,CAAC;IAC9C,MAAM,CAAC,GAAG,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IACxD,OAAO,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC;AACnD,CAAC;AAED,iFAAiF;AACjF,SAAS,YAAY,CAAC,KAA8B;IAClD,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IACzE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC1C,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,MAAM,CAAC,CAAC,CAAwB,CAAC;IACrD,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AACrB,CAAC;AAED,MAAM,WAAW,GAAG,CAAC,CAAC;AAEtB;;;;;;GAMG;AACH,MAAM,UAAU,YAAY,CAAC,KAAc;IACzC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAC1C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC;QAC9C,OAAO;IACT,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC;QAClE,OAAO;IACT,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,UAAU,CAAC,KAAK,CAAC,CAAC;QAClB,OAAO;IACT,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,KAAgC,CAAC;QAChD,MAAM,UAAU,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;QACxC,IAAI,UAAU,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3C,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,UAAU,CAAC;YAC/B,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;YACnF,UAAU,CAAC,IAAI,CAAC,CAAC;YACjB,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACjC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC3B,IAAI,CAAC,IAAI,CAAC,CAAC;YACb,CAAC;YACD,OAAO;QACT,CAAC;IACH,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,CAAC;AACd,CAAC;AAED,SAAS,UAAU,CAAC,IAAwB;IAC1C,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC;QAC9C,OAAO;IACT,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QAC7F,IAAI,CAAC,IAAI,CAAC,CAAC;QACX,OAAO;IACT,CAAC;IACD,MAAM,IAAI,GAAG,IAA8C,CAAC;IAC5D,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YACzC,IAAI,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;gBAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,IAAI,CAAC,IAAI,CAAC,CAAC;QACX,OAAO;IACT,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;IAC5C,KAAK,CACH,KAAK,EACL,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAClD,CAAC;IACF,IAAI,OAAO,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;QAClC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,CAAC,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,wCAAwC,CAAC,CACjF,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/surface.js

@@ -0,0 +1,473 @@
+/**
+ * The CLI's command surface, derived from the published API surface.
+ *
+ * Two sources, both published, neither retyped here:
+ *
+ *   `API_OPERATIONS` (@codespar/sdk)               — every REST operation of
+ *                                                    the served OpenAPI document
+ *   `SHARED_META_TOOL_DEFINITIONS` (@codespar/types,
+ *    re-exported by @codespar/sdk)                 — the 15 agent-facing meta-tools
+ *
+ * A resource command group is a path prefix plus a name; the subcommands
+ * under it are computed from the operation rows that live under that
+ * prefix. There is no per-route code: adding a group is one row in
+ * `PUBLISHED_GROUPS`, and a route added to the served document appears as
+ * a subcommand the next time the SDK snapshot is refreshed.
+ *
+ * `auditSurface()` is the checker behind the coverage gate
+ * (`__tests__/surface-coverage.test.ts`): it takes the surface as an
+ * argument instead of reading the module's own constants, so the gate can
+ * run it against synthetic inputs and prove it fails when it should.
+ */
+import { API_OPERATIONS, SHARED_META_TOOL_DEFINITIONS } from "@codespar/sdk";
+/** Every operation of the served document, as plain rows. */
+export const OPERATIONS = API_OPERATIONS.map((row) => ({
+    method: row.method,
+    path: row.path,
+    body: row.body,
+}));
+/* ── Census ───────────────────────────────────────────────────────── */
+/**
+ * The resource group an operation belongs to, for census purposes: the
+ * first path segment after the version prefix (`/v1/wallets/{id}/ledger`
+ * → `wallets`), or `(non-v1) <segment>` for the handful of unversioned
+ * routes. Coarse on purpose — the census asks "does this family of
+ * routes have any CLI at all", not "is every route wired".
+ */
+export function censusGroup(path) {
+    const segments = path.split("/").filter(Boolean);
+    if (segments[0] !== "v1")
+        return `(non-v1) ${segments[0] ?? ""}`;
+    return segments[1] ?? "";
+}
+/** Every census group of the served document, with its operations. */
+export function census(operations = OPERATIONS) {
+    const groups = new Map();
+    for (const op of operations) {
+        const key = censusGroup(op.path);
+        const bucket = groups.get(key);
+        if (bucket)
+            bucket.push(op);
+        else
+            groups.set(key, [op]);
+    }
+    return groups;
+}
+/**
+ * The resource groups this CLI publishes. Each row is a prefix; an
+ * operation belongs to the LONGEST prefix that matches it, so
+ * `/v1/consumers/{}/dda/...` lands in `boletos` and every other
+ * `/v1/consumers/...` route lands in `consumers`.
+ *
+ * Onda 4 of the API matrix (v2.1.1) names admin, sellers, mcp-servers,
+ * consumers and boletos; core#125 adds the money methods (wallets,
+ * triggers, and the meta-tools below). `admin` is absent on purpose: the
+ * served document declares no `/v1/admin/*` operation, so there is
+ * nothing to derive a command from (see SURFACE_EXCEPTIONS).
+ */
+export const PUBLISHED_GROUPS = [
+    {
+        name: "consumers",
+        prefix: "/v1/consumers",
+        description: "Consumers: profile, Pix keys, Pix lookups, receipts, contact verification",
+    },
+    {
+        name: "boletos",
+        prefix: "/v1/consumers/{}/dda",
+        description: "DDA boletos: subscribe a document, list the boletos it receives",
+    },
+    {
+        name: "sellers",
+        prefix: "/v1/sellers",
+        description: "Sellers: onboarding status, custody, pending settlement, ledger",
+    },
+    {
+        name: "mcp-servers",
+        prefix: "/v1/mcp-servers",
+        description: "Tenant MCP servers: register, validate, list, patch a tool, sweep platform fees",
+    },
+    {
+        name: "wallets",
+        prefix: "/v1/wallets",
+        description: "Wallets: balances, ledger, funding sources, execute, transfer, custody",
+    },
+    {
+        name: "triggers",
+        prefix: "/v1/triggers",
+        description: "Triggers (webhooks): endpoints, deliveries, DLQ, secret rotation, redelivery",
+    },
+    // Both families below arrived in the served document when packages/core
+    // refreshed openapi-snapshot.json to 221 operations (core#143). They are
+    // published, not excepted: the coverage gate reserves an exception for a
+    // family with no terminal use, and both of these end at a person.
+    {
+        name: "consents",
+        prefix: "/v1/consents",
+        description: "Consent tokens: mint the token whose URL the consumer opens to authorise an agent",
+    },
+    {
+        name: "consumer-payments",
+        prefix: "/v1/consumer-payments",
+        description: "Consumer payments: execute a payment on a consumer's behalf, with the audit chain (execute-stream returns SSE)",
+    },
+];
+/** `{anything}` → `{}`, so a prefix matches whatever the params are called. */
+function normalise(path) {
+    return path.replace(/\{[^}]*\}/g, "{}");
+}
+function isParam(segment) {
+    return segment.startsWith("{") && segment.endsWith("}");
+}
+/** Segment-wise prefix test: `/v1/consumers/{}/dda` matches `/v1/consumers/{cid}/dda/boletos`. */
+function underPrefix(path, prefix) {
+    const p = normalise(path).split("/");
+    const q = prefix.split("/");
+    if (p.length < q.length)
+        return false;
+    return q.every((segment, i) => segment === p[i]);
+}
+/** The group spec that claims an operation: the longest matching prefix. */
+export function claimingGroup(path, groups = PUBLISHED_GROUPS) {
+    let best;
+    for (const spec of groups) {
+        if (!underPrefix(path, spec.prefix))
+            continue;
+        if (!best || spec.prefix.length > best.prefix.length)
+            best = spec;
+    }
+    return best;
+}
+const COLLECTION_VERB = {
+    get: "list",
+    post: "create",
+    put: "set",
+    patch: "update",
+    delete: "delete",
+};
+/**
+ * Derive the subcommands of one group.
+ *
+ * The name of a subcommand is a pure function of the operation set, not
+ * of the order rows appear in: the literal segments below the group's
+ * prefix form a suffix, and the suffix is used bare when it identifies
+ * exactly one operation in the group, or prefixed with the method's verb
+ * when two or more operations share it (`triggers list-deliveries` vs
+ * `triggers get-deliveries`). A route with no literal suffix is named
+ * after its verb alone (`list`, `get`, `create`, `update`, `delete`), and
+ * a suffix that merely repeats the group name collapses to the verb too
+ * (`GET /v1/consumers/{}/dda/boletos` is `boletos list`, not
+ * `boletos boletos`).
+ *
+ * The names are pinned in `__tests__/resource-commands.test.ts`, so a
+ * spec change that renames an existing command is a red test, not a
+ * silent break in someone's script.
+ */
+export function deriveGroup(spec, operations = OPERATIONS, groups = PUBLISHED_GROUPS) {
+    const rows = operations.filter((op) => claimingGroup(op.path, groups)?.name === spec.name);
+    const depth = spec.prefix.split("/").length;
+    const parsed = rows.map((op) => {
+        const all = op.path.split("/").filter(Boolean);
+        const segments = op.path.split("/").slice(depth);
+        const literals = segments.filter((s) => !isParam(s));
+        // Positionals come from the WHOLE path, not just the part below the
+        // prefix: `boletos` hangs off `/v1/consumers/{consumerId}/dda`, and
+        // dropping the parameter the prefix passes over would build a command
+        // that cannot address a consumer at all.
+        const params = all.filter(isParam).map((s) => s.slice(1, -1));
+        const endsWithParam = segments.length > 0 && isParam(segments[segments.length - 1]);
+        const suffix = literals.join("-");
+        const verb = op.method === "get" ? (endsWithParam ? "get" : "list") : COLLECTION_VERB[op.method];
+        return { op, suffix, verb, params };
+    });
+    const suffixCount = new Map();
+    for (const p of parsed)
+        suffixCount.set(p.suffix, (suffixCount.get(p.suffix) ?? 0) + 1);
+    const commands = parsed.map(({ op, suffix, verb, params }) => {
+        const bare = suffix === "" || suffix === spec.name;
+        const name = bare ? verb : suffixCount.get(suffix) === 1 ? suffix : `${verb}-${suffix}`;
+        return {
+            name,
+            method: op.method,
+            path: op.path,
+            params,
+            acceptsBody: op.body !== null,
+        };
+    });
+    return { spec, commands };
+}
+/** Every published group, derived. */
+export function derivedSurface(groups = PUBLISHED_GROUPS, operations = OPERATIONS) {
+    return groups.map((spec) => deriveGroup(spec, operations, groups));
+}
+/* ── Meta-tools ───────────────────────────────────────────────────── */
+/**
+ * The 15 agent-facing meta-tools, read from the published definitions.
+ * Never a list written here: `@codespar/types` publishes the names, the
+ * input schemas and the closed vocabularies (ent#933), and the CLI shows
+ * exactly those.
+ */
+export const META_TOOLS = SHARED_META_TOOL_DEFINITIONS;
+export function metaToolNames() {
+    return Object.keys(META_TOOLS);
+}
+export function metaToolDefinition(name) {
+    return Object.prototype.hasOwnProperty.call(META_TOOLS, name) ? META_TOOLS[name] : undefined;
+}
+/**
+ * The closed vocabulary of a meta-tool's `action` property, or an empty
+ * array when the tool has no `action` (codespar_kyc discriminates on
+ * `check_type`, codespar_discover on `use_case`).
+ */
+export function metaToolActions(name) {
+    return metaToolDefinition(name)?.contract.enums?.action ?? [];
+}
+/**
+ * Census groups with no derived command group, each with a reason and a
+ * date. This list is a ratchet: it may shrink, never grow. Adding an
+ * entry to get the gate green is the wrong move — the machinery makes a
+ * group one row in `PUBLISHED_GROUPS`.
+ *
+ * Only census groups belong here. The admin/account family the API
+ * matrix names has no entry because it has no served route to except:
+ * `surface-coverage.test.ts` asserts the document still declares no
+ * `/v1/admin/*` operation, and goes red the day it does.
+ */
+export const SURFACE_EXCEPTIONS = {
+    "(non-v1) .well-known": {
+        reason: "OAuth protected-resource and authorization-server discovery documents. Read by MCP clients during handshake, never by a person at a terminal.",
+        since: "2026-09-10",
+    },
+    "(non-v1) oauth": {
+        reason: "OAuth register/authorize/token. A browser redirect flow; `codespar login` and `codespar connect start` are the terminal-side entrances.",
+        since: "2026-09-10",
+    },
+    "(non-v1) openapi.json": {
+        reason: "The served spec document itself. `npm run spec:refresh` in packages/core is the maintained way to pull it, and it regenerates the client at the same time.",
+        since: "2026-09-10",
+    },
+    "openapi.json": {
+        reason: "Versioned alias of the served spec document. Same reason as the unversioned one: spec:refresh, not a CLI command.",
+        since: "2026-09-10",
+    },
+    servers: {
+        reason: "Covered by the pre-existing `codespar servers list|show` commands (hand-written paths).",
+        since: "2026-09-10",
+    },
+    sessions: {
+        reason: "Covered by the pre-existing `codespar sessions list|show|close` and `codespar execute` commands (hand-written paths).",
+        since: "2026-09-10",
+    },
+    connections: {
+        reason: "Covered by the pre-existing `codespar connect list|start|revoke` commands.",
+        since: "2026-09-10",
+    },
+    connect: {
+        reason: "POST /v1/connect/start is what `codespar connect start` calls.",
+        since: "2026-09-10",
+    },
+    whoami: {
+        reason: "Covered by the pre-existing `codespar whoami` command.",
+        since: "2026-09-10",
+    },
+    "tool-calls": {
+        reason: "Covered by the pre-existing `codespar payment-status` and `codespar verification-status` commands, including their SSE streams.",
+        since: "2026-09-10",
+    },
+    "meta-tools": {
+        reason: "POST /v1/meta-tools/discover is what `codespar discover` calls.",
+        since: "2026-09-10",
+    },
+    "webhook-endpoints": {
+        reason: "The same ten operations as `triggers`, under the older path family. The CLI publishes the canonical `triggers` name only; wiring both would double the surface for one backend.",
+        since: "2026-09-10",
+    },
+    mandates: {
+        reason: "Org-scoped mandate lifecycle (pause/resume/revoke). `codespar mandate create|verify` covers issuance and offline verification; the lifecycle verbs are wave-5 work in the matrix.",
+        since: "2026-09-10",
+    },
+    orgs: {
+        reason: "Org administration (agents, keys, audit config, approvals, data-subject anonymisation). Not in onda 4 of the matrix.",
+        since: "2026-09-10",
+    },
+    organizations: {
+        reason: "Single org read. Not in onda 4 of the matrix.",
+        since: "2026-09-10",
+    },
+    projects: {
+        reason: "Project CRUD and settings history. Dashboard surface; not in onda 4 of the matrix.",
+        since: "2026-09-10",
+    },
+    policies: {
+        reason: "Policy CRUD and reorder. Not in onda 4 of the matrix.",
+        since: "2026-09-10",
+    },
+    "policy-evaluations": {
+        reason: "Policy evaluation log. Not in onda 4 of the matrix.",
+        since: "2026-09-10",
+    },
+    evaluations: {
+        reason: "Evaluation log alias. Not in onda 4 of the matrix.",
+        since: "2026-09-10",
+    },
+    "audit-events": {
+        reason: "Audit event stream, incidents and config. Not in onda 4 of the matrix.",
+        since: "2026-09-10",
+    },
+    audit: {
+        reason: "Audit event alias. Not in onda 4 of the matrix.",
+        since: "2026-09-10",
+    },
+    approvals: {
+        reason: "Approval reads used by the caller-side poll in approval-status.ts, not by an operator at a terminal.",
+        since: "2026-09-10",
+    },
+    "commerce-memory": {
+        reason: "Counterparties, interactions, preferences, negotiations and insights. Not in onda 4 of the matrix.",
+        since: "2026-09-10",
+    },
+    counterparties: {
+        reason: "Counterparty reads outside commerce-memory. Not in onda 4 of the matrix.",
+        since: "2026-09-10",
+    },
+    "payment-links": {
+        reason: "Payment link CRUD. Dashboard surface; not in onda 4 of the matrix.",
+        since: "2026-09-10",
+    },
+    paywalls: {
+        reason: "Paywall reads and stats. Dashboard surface; not in onda 4 of the matrix.",
+        since: "2026-09-10",
+    },
+    providers: {
+        reason: "Provider catalog and auth schemas. `codespar servers` and `codespar wizard` are the terminal entrances.",
+        since: "2026-09-10",
+    },
+    agents: {
+        reason: "Agent registration and key rotation. Security-sensitive; wants its own design pass, not a derived command.",
+        since: "2026-09-10",
+    },
+    ofb: {
+        reason: "Open Finance Brasil consent lifecycle. Browser redirect flow; not in onda 4 of the matrix.",
+        since: "2026-09-10",
+    },
+    "bank-consents": {
+        reason: "Single bank-consent read, alias of the ofb family. Not in onda 4 of the matrix.",
+        since: "2026-09-10",
+    },
+    "consent-records": {
+        reason: "Single consent-record read. Not in onda 4 of the matrix.",
+        since: "2026-09-10",
+    },
+    "account-applications": {
+        reason: "Single account-application read. Belongs with the admin/account family that has no served routes yet.",
+        since: "2026-09-10",
+    },
+    kyc: {
+        reason: "GET /v1/kyc/onboard/{proposalId}/status. Reachable as `codespar tool codespar_kyc --action status`.",
+        since: "2026-09-10",
+    },
+    cards: {
+        reason: "Single card read. Reachable as `codespar tool codespar_issue --action card-get`.",
+        since: "2026-09-10",
+    },
+    issuer: {
+        reason: "Issuer-side card read, alias of the cards family. Same meta-tool covers it.",
+        since: "2026-09-10",
+    },
+    "funding-sources": {
+        reason: "Single funding-source read. The wallet-scoped ones are wired under `codespar wallets`.",
+        since: "2026-09-10",
+    },
+    facilitator: {
+        reason: "x402 facilitator executions. Machine-to-machine surface driven by the x402 rail, not by an operator.",
+        since: "2026-09-10",
+    },
+    cart: {
+        reason: "Mercado Livre / iFood cart connect starts. Browser redirect flow; `codespar connect start` is the terminal entrance.",
+        since: "2026-09-10",
+    },
+    fees: {
+        reason: "Fee schedule reads. Pricing surface; not in onda 4 of the matrix.",
+        since: "2026-09-10",
+    },
+    events: {
+        reason: "Event replay. Operational recovery tool; wants an explicit confirmation design, not a derived command.",
+        since: "2026-09-10",
+    },
+    generate: {
+        reason: "Server-generation helper used by the dashboard scaffolder. `codespar init` is the terminal scaffolder.",
+        since: "2026-09-10",
+    },
+    discovery: {
+        reason: "Discovery manifest, read by agent clients during handshake.",
+        since: "2026-09-10",
+    },
+    health: {
+        reason: "Liveness probe. `curl` is the right tool and needs no API key.",
+        since: "2026-09-10",
+    },
+};
+/** How many exceptions the gate expects. Lower it when one goes away. */
+export const EXCEPTION_PIN = 43;
+const ISO_DATE = /^\d{4}-\d{2}-\d{2}$/;
+const MIN_REASON = 20;
+/**
+ * The check itself, as a pure function of the surface handed to it. The
+ * gate runs it twice on synthetic inputs — once on a surface that is
+ * covered, once on a surface that is not — so a checker that cannot fail
+ * is caught by its own controls.
+ */
+export function auditSurface(input) {
+    const violations = [];
+    const covered = new Set(input.coveredGroups);
+    const census = new Set(input.censusGroups);
+    for (const group of input.censusGroups) {
+        if (covered.has(group))
+            continue;
+        const exception = input.exceptions[group];
+        if (!exception) {
+            violations.push({
+                kind: "uncovered-group",
+                subject: group,
+                detail: `resource group "${group}" has no command and no written exception`,
+            });
+            continue;
+        }
+        if (!exception.reason || exception.reason.trim().length < MIN_REASON) {
+            violations.push({
+                kind: "empty-reason",
+                subject: group,
+                detail: `exception for "${group}" has no usable reason (needs at least ${MIN_REASON} characters saying why)`,
+            });
+        }
+        if (!ISO_DATE.test(exception.since ?? "")) {
+            violations.push({
+                kind: "bad-date",
+                subject: group,
+                detail: `exception for "${group}" has no ISO date (YYYY-MM-DD) saying when it was written`,
+            });
+        }
+    }
+    for (const group of Object.keys(input.exceptions)) {
+        if (census.has(group) && !covered.has(group))
+            continue;
+        violations.push({
+            kind: "stale-exception",
+            subject: group,
+            detail: covered.has(group)
+                ? `"${group}" has a command AND an exception — delete the exception`
+                : `"${group}" is not a resource group of the served document — delete the exception`,
+        });
+    }
+    const invocable = new Set(input.invocableMetaTools);
+    for (const name of input.publishedMetaTools) {
+        if (invocable.has(name))
+            continue;
+        violations.push({
+            kind: "meta-tool-missing",
+            subject: name,
+            detail: `meta-tool "${name}" is published but the CLI cannot invoke it`,
+        });
+    }
+    return violations;
+}
+//# sourceMappingURL=surface.js.map

package/dist/surface.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"surface.js","sourceRoot":"","sources":["../src/surface.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,cAAc,EAAE,4BAA4B,EAAE,MAAM,eAAe,CAAC;AAY7E,6DAA6D;AAC7D,MAAM,CAAC,MAAM,UAAU,GAA4B,cAAc,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IAC9E,MAAM,EAAE,GAAG,CAAC,MAAoB;IAChC,IAAI,EAAE,GAAG,CAAC,IAAc;IACxB,IAAI,EAAE,GAAG,CAAC,IAAqB;CAChC,CAAC,CAAC,CAAC;AAEJ,yEAAyE;AAEzE;;;;;;GAMG;AACH,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACjD,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,IAAI;QAAE,OAAO,YAAY,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;IACjE,OAAO,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,MAAM,CACpB,aAAsC,UAAU;IAEhD,MAAM,MAAM,GAAG,IAAI,GAAG,EAA0B,CAAC;IACjD,KAAK,MAAM,EAAE,IAAI,UAAU,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAG,WAAW,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;QACjC,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,MAAM;YAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;;YACvB,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IAC7B,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAaD;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAyB;IACpD;QACE,IAAI,EAAE,WAAW;QACjB,MAAM,EAAE,eAAe;QACvB,WAAW,EAAE,2EAA2E;KACzF;IACD;QACE,IAAI,EAAE,SAAS;QACf,MAAM,EAAE,sBAAsB;QAC9B,WAAW,EAAE,iEAAiE;KAC/E;IACD;QACE,IAAI,EAAE,SAAS;QACf,MAAM,EAAE,aAAa;QACrB,WAAW,EAAE,iEAAiE;KAC/E;IACD;QACE,IAAI,EAAE,aAAa;QACnB,MAAM,EAAE,iBAAiB;QACzB,WAAW,EAAE,iFAAiF;KAC/F;IACD;QACE,IAAI,EAAE,SAAS;QACf,MAAM,EAAE,aAAa;QACrB,WAAW,EAAE,wEAAwE;KACtF;IACD;QACE,IAAI,EAAE,UAAU;QAChB,MAAM,EAAE,cAAc;QACtB,WAAW,EAAE,8EAA8E;KAC5F;IACD,wEAAwE;IACxE,yEAAyE;IACzE,yEAAyE;IACzE,kEAAkE;IAClE;QACE,IAAI,EAAE,UAAU;QAChB,MAAM,EAAE,cAAc;QACtB,WAAW,EAAE,mFAAmF;KACjG;IACD;QACE,IAAI,EAAE,mBAAmB;QACzB,MAAM,EAAE,uBAAuB;QAC/B,WAAW,EACT,gHAAgH;KACnH;CACF,CAAC;AAqBF,+EAA+E;AAC/E,SAAS,SAAS,CAAC,IAAY;IAC7B,OAAO,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,OAAO,CAAC,OAAe;IAC9B,OAAO,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;AAC1D,CAAC;AAED,kGAAkG;AAClG,SAAS,WAAW,CAAC,IAAY,EAAE,MAAc;IAC/C,MAAM,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACrC,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC5B,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACtC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,EAAE,EAAE,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACnD,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,aAAa,CAC3B,IAAY,EACZ,SAA+B,gBAAgB;IAE/C,IAAI,IAA2B,CAAC;IAChC,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;QAC1B,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC;YAAE,SAAS;QAC9C,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM;YAAE,IAAI,GAAG,IAAI,CAAC;IACpE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,eAAe,GAA+B;IAClD,GAAG,EAAE,MAAM;IACX,IAAI,EAAE,QAAQ;IACd,GAAG,EAAE,KAAK;IACV,KAAK,EAAE,QAAQ;IACf,MAAM,EAAE,QAAQ;CACjB,CAAC;AAEF;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,WAAW,CACzB,IAAe,EACf,aAAsC,UAAU,EAChD,SAA+B,gBAAgB;IAE/C,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,aAAa,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3F,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;IAE5C,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE;QAC7B,MAAM,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC/C,MAAM,QAAQ,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACjD,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;QACrD,oEAAoE;QACpE,oEAAoE;QACpE,sEAAsE;QACtE,yCAAyC;QACzC,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9D,MAAM,aAAa,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,CAAC;QACrF,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClC,MAAM,IAAI,GAAG,EAAE,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC;QACjG,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,MAAM,WAAW,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC9C,KAAK,MAAM,CAAC,IAAI,MAAM;QAAE,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAExF,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE;QAC3D,MAAM,IAAI,GAAG,MAAM,KAAK,EAAE,IAAI,MAAM,KAAK,IAAI,CAAC,IAAI,CAAC;QACnD,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,MAAM,EAAE,CAAC;QACxF,OAAO;YACL,IAAI;YACJ,MAAM,EAAE,EAAE,CAAC,MAAM;YACjB,IAAI,EAAE,EAAE,CAAC,IAAI;YACb,MAAM;YACN,WAAW,EAAE,EAAE,CAAC,IAAI,KAAK,IAAI;SAC9B,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AAC5B,CAAC;AAED,sCAAsC;AACtC,MAAM,UAAU,cAAc,CAC5B,SAA+B,gBAAgB,EAC/C,aAAsC,UAAU;IAEhD,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC;AACrE,CAAC;AAED,yEAAyE;AAEzE;;;;;GAKG;AACH,MAAM,CAAC,MAAM,UAAU,GACrB,4BAA4B,CAAC;AAE/B,MAAM,UAAU,aAAa;IAC3B,OAAO,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,OAAO,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC/F,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,OAAO,kBAAkB,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,IAAI,EAAE,CAAC;AAChE,CAAC;AAWD;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAA+C;IAC5E,sBAAsB,EAAE;QACtB,MAAM,EACJ,+IAA+I;QACjJ,KAAK,EAAE,YAAY;KACpB;IACD,gBAAgB,EAAE;QAChB,MAAM,EACJ,yIAAyI;QAC3I,KAAK,EAAE,YAAY;KACpB;IACD,uBAAuB,EAAE;QACvB,MAAM,EACJ,4JAA4J;QAC9J,KAAK,EAAE,YAAY;KACpB;IACD,cAAc,EAAE;QACd,MAAM,EACJ,mHAAmH;QACrH,KAAK,EAAE,YAAY;KACpB;IACD,OAAO,EAAE;QACP,MAAM,EAAE,yFAAyF;QACjG,KAAK,EAAE,YAAY;KACpB;IACD,QAAQ,EAAE;QACR,MAAM,EACJ,uHAAuH;QACzH,KAAK,EAAE,YAAY;KACpB;IACD,WAAW,EAAE;QACX,MAAM,EAAE,4EAA4E;QACpF,KAAK,EAAE,YAAY;KACpB;IACD,OAAO,EAAE;QACP,MAAM,EAAE,gEAAgE;QACxE,KAAK,EAAE,YAAY;KACpB;IACD,MAAM,EAAE;QACN,MAAM,EAAE,wDAAwD;QAChE,KAAK,EAAE,YAAY;KACpB;IACD,YAAY,EAAE;QACZ,MAAM,EACJ,iIAAiI;QACnI,KAAK,EAAE,YAAY;KACpB;IACD,YAAY,EAAE;QACZ,MAAM,EAAE,iEAAiE;QACzE,KAAK,EAAE,YAAY;KACpB;IACD,mBAAmB,EAAE;QACnB,MAAM,EACJ,iLAAiL;QACnL,KAAK,EAAE,YAAY;KACpB;IACD,QAAQ,EAAE;QACR,MAAM,EACJ,mLAAmL;QACrL,KAAK,EAAE,YAAY;KACpB;IACD,IAAI,EAAE;QACJ,MAAM,EAAE,sHAAsH;QAC9H,KAAK,EAAE,YAAY;KACpB;IACD,aAAa,EAAE;QACb,MAAM,EAAE,+CAA+C;QACvD,KAAK,EAAE,YAAY;KACpB;IACD,QAAQ,EAAE;QACR,MAAM,EAAE,oFAAoF;QAC5F,KAAK,EAAE,YAAY;KACpB;IACD,QAAQ,EAAE;QACR,MAAM,EAAE,uDAAuD;QAC/D,KAAK,EAAE,YAAY;KACpB;IACD,oBAAoB,EAAE;QACpB,MAAM,EAAE,qDAAqD;QAC7D,KAAK,EAAE,YAAY;KACpB;IACD,WAAW,EAAE;QACX,MAAM,EAAE,oDAAoD;QAC5D,KAAK,EAAE,YAAY;KACpB;IACD,cAAc,EAAE;QACd,MAAM,EAAE,wEAAwE;QAChF,KAAK,EAAE,YAAY;KACpB;IACD,KAAK,EAAE;QACL,MAAM,EAAE,iDAAiD;QACzD,KAAK,EAAE,YAAY;KACpB;IACD,SAAS,EAAE;QACT,MAAM,EAAE,sGAAsG;QAC9G,KAAK,EAAE,YAAY;KACpB;IACD,iBAAiB,EAAE;QACjB,MAAM,EAAE,oGAAoG;QAC5G,KAAK,EAAE,YAAY;KACpB;IACD,cAAc,EAAE;QACd,MAAM,EAAE,0EAA0E;QAClF,KAAK,EAAE,YAAY;KACpB;IACD,eAAe,EAAE;QACf,MAAM,EAAE,oEAAoE;QAC5E,KAAK,EAAE,YAAY;KACpB;IACD,QAAQ,EAAE;QACR,MAAM,EAAE,0EAA0E;QAClF,KAAK,EAAE,YAAY;KACpB;IACD,SAAS,EAAE;QACT,MAAM,EAAE,yGAAyG;QACjH,KAAK,EAAE,YAAY;KACpB;IACD,MAAM,EAAE;QACN,MAAM,EAAE,4GAA4G;QACpH,KAAK,EAAE,YAAY;KACpB;IACD,GAAG,EAAE;QACH,MAAM,EAAE,4FAA4F;QACpG,KAAK,EAAE,YAAY;KACpB;IACD,eAAe,EAAE;QACf,MAAM,EAAE,iFAAiF;QACzF,KAAK,EAAE,YAAY;KACpB;IACD,iBAAiB,EAAE;QACjB,MAAM,EAAE,0DAA0D;QAClE,KAAK,EAAE,YAAY;KACpB;IACD,sBAAsB,EAAE;QACtB,MAAM,EAAE,uGAAuG;QAC/G,KAAK,EAAE,YAAY;KACpB;IACD,GAAG,EAAE;QACH,MAAM,EAAE,qGAAqG;QAC7G,KAAK,EAAE,YAAY;KACpB;IACD,KAAK,EAAE;QACL,MAAM,EAAE,kFAAkF;QAC1F,KAAK,EAAE,YAAY;KACpB;IACD,MAAM,EAAE;QACN,MAAM,EAAE,6EAA6E;QACrF,KAAK,EAAE,YAAY;KACpB;IACD,iBAAiB,EAAE;QACjB,MAAM,EAAE,wFAAwF;QAChG,KAAK,EAAE,YAAY;KACpB;IACD,WAAW,EAAE;QACX,MAAM,EAAE,sGAAsG;QAC9G,KAAK,EAAE,YAAY;KACpB;IACD,IAAI,EAAE;QACJ,MAAM,EAAE,sHAAsH;QAC9H,KAAK,EAAE,YAAY;KACpB;IACD,IAAI,EAAE;QACJ,MAAM,EAAE,mEAAmE;QAC3E,KAAK,EAAE,YAAY;KACpB;IACD,MAAM,EAAE;QACN,MAAM,EAAE,wGAAwG;QAChH,KAAK,EAAE,YAAY;KACpB;IACD,QAAQ,EAAE;QACR,MAAM,EAAE,wGAAwG;QAChH,KAAK,EAAE,YAAY;KACpB;IACD,SAAS,EAAE;QACT,MAAM,EAAE,6DAA6D;QACrE,KAAK,EAAE,YAAY;KACpB;IACD,MAAM,EAAE;QACN,MAAM,EAAE,gEAAgE;QACxE,KAAK,EAAE,YAAY;KACpB;CACF,CAAC;AAEF,yEAAyE;AACzE,MAAM,CAAC,MAAM,aAAa,GAAG,EAAE,CAAC;AA2BhC,MAAM,QAAQ,GAAG,qBAAqB,CAAC;AACvC,MAAM,UAAU,GAAG,EAAE,CAAC;AAEtB;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,KAAmB;IAC9C,MAAM,UAAU,GAAgB,EAAE,CAAC;IACnC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IAC7C,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IAE3C,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;QACvC,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,SAAS;QACjC,MAAM,SAAS,GAAG,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QAC1C,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,UAAU,CAAC,IAAI,CAAC;gBACd,IAAI,EAAE,iBAAiB;gBACvB,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,mBAAmB,KAAK,2CAA2C;aAC5E,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,IAAI,CAAC,SAAS,CAAC,MAAM,IAAI,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,UAAU,EAAE,CAAC;YACrE,UAAU,CAAC,IAAI,CAAC;gBACd,IAAI,EAAE,cAAc;gBACpB,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,kBAAkB,KAAK,0CAA0C,UAAU,yBAAyB;aAC7G,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC;YAC1C,UAAU,CAAC,IAAI,CAAC;gBACd,IAAI,EAAE,UAAU;gBAChB,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,kBAAkB,KAAK,2DAA2D;aAC3F,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;QAClD,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,SAAS;QACvD,UAAU,CAAC,IAAI,CAAC;YACd,IAAI,EAAE,iBAAiB;YACvB,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC;gBACxB,CAAC,CAAC,IAAI,KAAK,yDAAyD;gBACpE,CAAC,CAAC,IAAI,KAAK,yEAAyE;SACvF,CAAC,CAAC;IACL,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;IACpD,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,kBAAkB,EAAE,CAAC;QAC5C,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,SAAS;QAClC,UAAU,CAAC,IAAI,CAAC;YACd,IAAI,EAAE,mBAAmB;YACzB,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,cAAc,IAAI,6CAA6C;SACxE,CAAC,CAAC;IACL,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC"}

package/dist/version.js

@@ -1,8 +1,21 @@
+import { createRequire } from "node:module";
 /**
- * Single source of truth for the CLI version. Imported by index.ts (the
- * --version flag + banner) and api.ts (the User-Agent header) so the two
- * can never drift. Keep in sync with package.json on release (prepublishOnly
- * could assert equality if drift ever recurs).
+ * The CLI version, read from the package manifest.
+ *
+ * This was a hand-written literal, kept "in sync with package.json on
+ * release". It drifted: 0.6.0, 0.6.1, 0.6.2 and 0.7.0 each bumped the
+ * manifest and left the literal at 0.5.5, so the published 0.7.0 tarball
+ * introduced itself as 0.5.5 in `--version`, in the banner and in every
+ * User-Agent it sent (core#144). Three numbers for one release, and the
+ * one the user read was the oldest.
+ *
+ * Reading the manifest removes the class rather than detecting it: npm
+ * always publishes package.json, and it sits one directory above both
+ * `src/` and `dist/`, so the same specifier resolves in the repo and in
+ * the installed package. `createRequire` and not a JSON import because
+ * `rootDir` is `./src` — an import would pull the manifest into the
+ * compilation and tsc would refuse it as outside the root.
  */
-export const VERSION = "0.5.5";
+const require = createRequire(import.meta.url);
+export const VERSION = require("../package.json").version;
 //# sourceMappingURL=version.js.map

package/dist/version.js.map

@@ -1 +1 @@
-{"version":3,"file":"version.js","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,CAAC,MAAM,OAAO,GAAG,OAAO,CAAC"}
+{"version":3,"file":"version.js","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE5C;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAE/C,MAAM,CAAC,MAAM,OAAO,GAAY,OAAO,CAAC,iBAAiB,CAAyB,CAAC,OAAO,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@codespar/cli",
-  "version": "0.6.2",
+  "version": "0.8.0",
   "description": "CodeSpar CLI. The agentic OS for money movement in Latin America, from your terminal: authenticate, browse servers, mint mandates, execute tools, manage sessions, stream logs.",
   "type": "module",
   "bin": {