@ekanos/cli 0.16.0 → 0.17.0

package/dist/experience/project.d.ts

@@ -0,0 +1,52 @@
+import { type EkanosJson, type IntegrationEntry, type Lockfile } from '@ekanos/integration-schema';
+export declare const EKANOS_JSON = "ekanos.json";
+export declare const LOCK_FILE = "ekanos.lock.json";
+export declare const LOCAL_OVERRIDES_FILE = "ekanos.local.json";
+export declare const DEFAULT_CONTRACTS_DIR = "contracts";
+export declare const INTEGRATIONS_DTS = "src/.ekanos/integrations.d.ts";
+/** The previous name of the generated file, kept as a re-export for one version. */
+export declare const LEGACY_SLOTS_DTS = "src/.ekanos/slots.d.ts";
+export interface ExperienceProject {
+    /** Absolute project directory. */
+    dir: string;
+    ekanos: EkanosJson;
+    slug: string;
+    entry: string;
+    /** The integrations it depends on; operations are canonical ids. */
+    integrations: IntegrationEntry[];
+    /** True when ekanos.json still uses the deprecated `uses` key. */
+    deprecatedUses: boolean;
+    /** Old `uses` alias -> integration, where they differ (for the sync notice). */
+    renames: Record<string, string>;
+    /** Absolute directory holding the pinned contract snapshots. */
+    contractsDir: string;
+    /** The raw ekanos.json, key order preserved, for rewrites. */
+    raw: Record<string, unknown>;
+}
+/** `integration` when ekanos.json is absent or says so; used to route commands. */
+export declare function readProjectKind(dir: string): 'integration' | 'experience';
+/**
+ * Read and validate an experience's ekanos.json with the shared schema.
+ *
+ * A fresh scaffold has no integrations yet (you add them with `ekanos add`),
+ * which the shared schema rejects ("declares at least one integration"). That
+ * one rule is suspended here so `add` can bootstrap a project; `check` and
+ * `build` report the empty state themselves.
+ *
+ * The deprecated `uses` shape is read too: its entries come back as
+ * `integrations` (alias dropped) with `deprecatedUses` set and `renames`
+ * mapping each old alias to its integration, so `ekanos sync` can rewrite the
+ * file and say what code to update.
+ */
+export declare function readExperienceProject(dir: string): ExperienceProject;
+/** 2-space JSON with a trailing newline: the format every written file uses. */
+export declare function formatJson(value: unknown): string;
+/** Write only when the bytes differ. Returns whether the file changed. */
+export declare function writeIfChanged(file: string, content: string): boolean;
+export declare function readLockfile(project: ExperienceProject): Lockfile;
+export declare function writeLockfile(project: ExperienceProject, lock: Lockfile): boolean;
+/**
+ * Rewrite `integrations` in ekanos.json (short operation form), leaving every
+ * other key where it was and dropping the deprecated `uses`.
+ */
+export declare function writeIntegrations(project: ExperienceProject, integrations: IntegrationEntry[]): boolean;

package/dist/experience/project.js

@@ -0,0 +1,149 @@
+var __rest = (this && this.__rest) || function (s, e) {
+    var t = {};
+    for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p) && e.indexOf(p) < 0)
+        t[p] = s[p];
+    if (s != null && typeof Object.getOwnPropertySymbols === "function")
+        for (var i = 0, p = Object.getOwnPropertySymbols(s); i < p.length; i++) {
+            if (e.indexOf(p[i]) < 0 && Object.prototype.propertyIsEnumerable.call(s, p[i]))
+                t[p[i]] = s[p[i]];
+        }
+    return t;
+};
+import { EkanosJsonSchema, LockfileSchema, canonicalOperationId, experienceIntegrations, shortOperation, } from '@ekanos/integration-schema';
+import * as fs from 'node:fs';
+import * as path from 'node:path';
+import { notFoundError, validationError } from '../errors.js';
+export const EKANOS_JSON = 'ekanos.json';
+export const LOCK_FILE = 'ekanos.lock.json';
+export const LOCAL_OVERRIDES_FILE = 'ekanos.local.json';
+export const DEFAULT_CONTRACTS_DIR = 'contracts';
+export const INTEGRATIONS_DTS = 'src/.ekanos/integrations.d.ts';
+/** The previous name of the generated file, kept as a re-export for one version. */
+export const LEGACY_SLOTS_DTS = 'src/.ekanos/slots.d.ts';
+function readJson(file) {
+    let text;
+    try {
+        text = fs.readFileSync(file, 'utf8');
+    }
+    catch (_a) {
+        throw notFoundError(`No ${path.basename(file)} at ${file}.`, 'Run this from an Ekanos project directory, or pass --dir <path>.');
+    }
+    try {
+        return JSON.parse(text);
+    }
+    catch (error) {
+        throw validationError(`${file} is not valid JSON: ${error instanceof Error ? error.message : String(error)}`, 'Fix the syntax error and re-run.');
+    }
+}
+/** `integration` when ekanos.json is absent or says so; used to route commands. */
+export function readProjectKind(dir) {
+    try {
+        const raw = JSON.parse(fs.readFileSync(path.join(dir, EKANOS_JSON), 'utf8'));
+        return raw.kind === 'experience' ? 'experience' : 'integration';
+    }
+    catch (_a) {
+        return 'integration';
+    }
+}
+/**
+ * Read and validate an experience's ekanos.json with the shared schema.
+ *
+ * A fresh scaffold has no integrations yet (you add them with `ekanos add`),
+ * which the shared schema rejects ("declares at least one integration"). That
+ * one rule is suspended here so `add` can bootstrap a project; `check` and
+ * `build` report the empty state themselves.
+ *
+ * The deprecated `uses` shape is read too: its entries come back as
+ * `integrations` (alias dropped) with `deprecatedUses` set and `renames`
+ * mapping each old alias to its integration, so `ekanos sync` can rewrite the
+ * file and say what code to update.
+ */
+export function readExperienceProject(dir) {
+    var _a;
+    const absolute = path.resolve(dir);
+    const raw = readJson(path.join(absolute, EKANOS_JSON));
+    if (typeof raw !== 'object' || raw === null || Array.isArray(raw)) {
+        throw validationError(`${EKANOS_JSON} must be a JSON object.`, 'Fix it.');
+    }
+    const record = raw;
+    if (record.kind !== 'experience') {
+        throw validationError(`${EKANOS_JSON} is not an experience ("kind": "experience").`, 'Run experience commands in an experience project; scaffold one with "ekanos init --kind experience --slug <slug>".');
+    }
+    const declaredNone = !(Array.isArray(record.integrations) && record.integrations.length > 0) &&
+        !(Array.isArray(record.uses) && record.uses.length > 0);
+    const probe = declaredNone
+        ? Object.assign(Object.assign({}, record), { integrations: [PLACEHOLDER_INTEGRATION], uses: undefined }) : record;
+    const parsed = EkanosJsonSchema.safeParse(probe);
+    if (!parsed.success) {
+        throw validationError(`${EKANOS_JSON}: ${parsed.error.issues
+            .map((i) => `${i.path.join('.') || '(root)'}: ${i.message}`)
+            .join('; ')}`, 'Fix ekanos.json; the experience fields are slug, entry, integrations, contractsDir, allowImports, ignore.');
+    }
+    const ekanos = parsed.data;
+    const declared = declaredNone
+        ? { entries: [], deprecatedUses: false, renames: {} }
+        : experienceIntegrations(ekanos);
+    return {
+        dir: absolute,
+        ekanos,
+        slug: ekanos.slug,
+        entry: ekanos.entry,
+        integrations: declared.entries.map(withCanonicalOperations),
+        deprecatedUses: declared.deprecatedUses,
+        renames: declared.renames,
+        contractsDir: path.resolve(absolute, (_a = ekanos.contractsDir) !== null && _a !== void 0 ? _a : DEFAULT_CONTRACTS_DIR),
+        raw: record,
+    };
+}
+/** Operations as canonical `<integration>@<version>/<kind>/<name>` ids, for lookups against a contract. */
+function withCanonicalOperations(entry) {
+    return Object.assign(Object.assign({}, entry), { operations: entry.operations.map((id) => canonicalOperationId(entry, id)) });
+}
+/** 2-space JSON with a trailing newline: the format every written file uses. */
+export function formatJson(value) {
+    return `${JSON.stringify(value, null, 2)}\n`;
+}
+/** Write only when the bytes differ. Returns whether the file changed. */
+export function writeIfChanged(file, content) {
+    try {
+        if (fs.readFileSync(file, 'utf8') === content)
+            return false;
+    }
+    catch (_a) {
+        // missing: write below
+    }
+    fs.mkdirSync(path.dirname(file), { recursive: true });
+    fs.writeFileSync(file, content);
+    return true;
+}
+export function readLockfile(project) {
+    const file = path.join(project.dir, LOCK_FILE);
+    if (!fs.existsSync(file))
+        return { lockfileVersion: 1, integrations: {} };
+    const parsed = LockfileSchema.safeParse(readJson(file));
+    if (!parsed.success) {
+        throw validationError(`${LOCK_FILE}: ${parsed.error.issues.map((i) => `${i.path.join('.')}: ${i.message}`).join('; ')}`, 'Regenerate it with "ekanos sync".');
+    }
+    return parsed.data;
+}
+export function writeLockfile(project, lock) {
+    const integrations = Object.fromEntries(Object.entries(lock.integrations).sort(([a], [b]) => (a < b ? -1 : 1)));
+    return writeIfChanged(path.join(project.dir, LOCK_FILE), formatJson({ lockfileVersion: 1, integrations }));
+}
+const PLACEHOLDER_INTEGRATION = {
+    name: 'pending',
+    version: '0',
+    operations: ['tool/pending'],
+};
+/**
+ * Rewrite `integrations` in ekanos.json (short operation form), leaving every
+ * other key where it was and dropping the deprecated `uses`.
+ */
+export function writeIntegrations(project, integrations) {
+    const _a = project.raw, { uses: _uses } = _a, rest = __rest(_a, ["uses"]);
+    const next = Object.assign(Object.assign({}, rest), { integrations: integrations.map((entry) => (Object.assign(Object.assign({ name: entry.name, version: entry.version, operations: entry.operations.map(shortOperation) }, (entry.required === 'required' ? {} : { required: entry.required })), (entry.modes.length === 1 && entry.modes[0] === 'team'
+            ? {}
+            : { modes: entry.modes })))) });
+    return writeIfChanged(path.join(project.dir, EKANOS_JSON), formatJson(next));
+}
+//# sourceMappingURL=project.js.map

package/dist/experience/project.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project.js","sourceRoot":"","sources":["../../src/experience/project.ts"],"names":[],"mappings":";;;;;;;;;;;AAAA,OAAO,EAEL,gBAAgB,EAGhB,cAAc,EACd,oBAAoB,EACpB,sBAAsB,EACtB,cAAc,GACf,MAAM,4BAA4B,CAAC;AACpC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAE3D,MAAM,CAAC,MAAM,WAAW,GAAG,aAAa,CAAC;AACzC,MAAM,CAAC,MAAM,SAAS,GAAG,kBAAkB,CAAC;AAC5C,MAAM,CAAC,MAAM,oBAAoB,GAAG,mBAAmB,CAAC;AACxD,MAAM,CAAC,MAAM,qBAAqB,GAAG,WAAW,CAAC;AACjD,MAAM,CAAC,MAAM,gBAAgB,GAAG,+BAA+B,CAAC;AAChE,oFAAoF;AACpF,MAAM,CAAC,MAAM,gBAAgB,GAAG,wBAAwB,CAAC;AAoBzD,SAAS,QAAQ,CAAC,IAAY;IAC5B,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACvC,CAAC;eAAO,CAAC;QACP,MAAM,aAAa,CACjB,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,IAAI,GAAG,EACvC,kEAAkE,CACnE,CAAC;IACJ,CAAC;IACD,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,eAAe,CACnB,GAAG,IAAI,uBAAuB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EACtF,kCAAkC,CACnC,CAAC;IACJ,CAAC;AACH,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,eAAe,CAAC,GAAW;IACzC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CACpB,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE,MAAM,CAAC,CAC/B,CAAC;QAExB,OAAO,GAAG,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,aAAa,CAAC;IAClE,CAAC;eAAO,CAAC;QACP,OAAO,aAAa,CAAC;IACvB,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,qBAAqB,CAAC,GAAW;;IAC/C,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACnC,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC;IACvD,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAClE,MAAM,eAAe,CAAC,GAAG,WAAW,yBAAyB,EAAE,SAAS,CAAC,CAAC;IAC5E,CAAC;IACD,MAAM,MAAM,GAAG,GAA8B,CAAC;IAE9C,IAAI,MAAM,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QACjC,MAAM,eAAe,CACnB,GAAG,WAAW,+CAA+C,EAC7D,oHAAoH,CACrH,CAAC;IACJ,CAAC;IAED,MAAM,YAAY,GAChB,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,MAAM,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC;QACvE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC1D,MAAM,KAAK,GAAG,YAAY;QACxB,CAAC,iCAAM,MAAM,KAAE,YAAY,EAAE,CAAC,uBAAuB,CAAC,EAAE,IAAI,EAAE,SAAS,IACvE,CAAC,CAAC,MAAM,CAAC;IACX,MAAM,MAAM,GAAG,gBAAgB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACjD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,eAAe,CACnB,GAAG,WAAW,KAAK,MAAM,CAAC,KAAK,CAAC,MAAM;aACnC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;aAC3D,IAAI,CAAC,IAAI,CAAC,EAAE,EACf,2GAA2G,CAC5G,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC;IAC3B,MAAM,QAAQ,GAAG,YAAY;QAC3B,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE;QACrD,CAAC,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC;IAEnC,OAAO;QACL,GAAG,EAAE,QAAQ;QACb,MAAM;QACN,IAAI,EAAE,MAAM,CAAC,IAAc;QAC3B,KAAK,EAAE,MAAM,CAAC,KAAe;QAC7B,YAAY,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC;QAC3D,cAAc,EAAE,QAAQ,CAAC,cAAc;QACvC,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,YAAY,EAAE,IAAI,CAAC,OAAO,CACxB,QAAQ,QACR,MAAM,CAAC,YAAY,mCAAI,qBAAqB,CAC7C;QACD,GAAG,EAAE,MAAM;KACZ,CAAC;AACJ,CAAC;AAED,2GAA2G;AAC3G,SAAS,uBAAuB,CAAC,KAAuB;IACtD,uCACK,KAAK,KACR,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,oBAAoB,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,IACzE;AACJ,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,UAAU,CAAC,KAAc;IACvC,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;AAC/C,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,cAAc,CAAC,IAAY,EAAE,OAAe;IAC1D,IAAI,CAAC;QACH,IAAI,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,OAAO;YAAE,OAAO,KAAK,CAAC;IAC9D,CAAC;eAAO,CAAC;QACP,uBAAuB;IACzB,CAAC;IACD,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAEhC,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,OAA0B;IACrD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IAC/C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,eAAe,EAAE,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;IAC1E,MAAM,MAAM,GAAG,cAAc,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IACxD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,eAAe,CACnB,GAAG,SAAS,KAAK,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EACjG,mCAAmC,CACpC,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,OAA0B,EAC1B,IAAc;IAEd,MAAM,YAAY,GAAG,MAAM,CAAC,WAAW,CACrC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CACvE,CAAC;IAEF,OAAO,cAAc,CACnB,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,CAAC,EACjC,UAAU,CAAC,EAAE,eAAe,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,CACjD,CAAC;AACJ,CAAC;AAED,MAAM,uBAAuB,GAAG;IAC9B,IAAI,EAAE,SAAS;IACf,OAAO,EAAE,GAAG;IACZ,UAAU,EAAE,CAAC,cAAc,CAAC;CACpB,CAAC;AAEX;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAC/B,OAA0B,EAC1B,YAAgC;IAEhC,MAAM,KAA2B,OAAO,CAAC,GAAG,EAAtC,EAAE,IAAI,EAAE,KAAK,OAAyB,EAApB,IAAI,cAAtB,QAAwB,CAAc,CAAC;IAC7C,MAAM,IAAI,mCACL,IAAI,KACP,YAAY,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,+BACxC,IAAI,EAAE,KAAK,CAAC,IAAI,EAChB,OAAO,EAAE,KAAK,CAAC,OAAO,EACtB,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,cAAc,CAAC,IAC7C,CAAC,KAAK,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,GACnE,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,MAAM;YACvD,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,EAC3B,CAAC,GACJ,CAAC;IAEF,OAAO,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;AAC/E,CAAC","sourcesContent":["import {\n  type EkanosJson,\n  EkanosJsonSchema,\n  type IntegrationEntry,\n  type Lockfile,\n  LockfileSchema,\n  canonicalOperationId,\n  experienceIntegrations,\n  shortOperation,\n} from '@ekanos/integration-schema';\nimport * as fs from 'node:fs';\nimport * as path from 'node:path';\n\nimport { notFoundError, validationError } from '../errors';\n\nexport const EKANOS_JSON = 'ekanos.json';\nexport const LOCK_FILE = 'ekanos.lock.json';\nexport const LOCAL_OVERRIDES_FILE = 'ekanos.local.json';\nexport const DEFAULT_CONTRACTS_DIR = 'contracts';\nexport const INTEGRATIONS_DTS = 'src/.ekanos/integrations.d.ts';\n/** The previous name of the generated file, kept as a re-export for one version. */\nexport const LEGACY_SLOTS_DTS = 'src/.ekanos/slots.d.ts';\n\nexport interface ExperienceProject {\n  /** Absolute project directory. */\n  dir: string;\n  ekanos: EkanosJson;\n  slug: string;\n  entry: string;\n  /** The integrations it depends on; operations are canonical ids. */\n  integrations: IntegrationEntry[];\n  /** True when ekanos.json still uses the deprecated `uses` key. */\n  deprecatedUses: boolean;\n  /** Old `uses` alias -> integration, where they differ (for the sync notice). */\n  renames: Record<string, string>;\n  /** Absolute directory holding the pinned contract snapshots. */\n  contractsDir: string;\n  /** The raw ekanos.json, key order preserved, for rewrites. */\n  raw: Record<string, unknown>;\n}\n\nfunction readJson(file: string): unknown {\n  let text: string;\n  try {\n    text = fs.readFileSync(file, 'utf8');\n  } catch {\n    throw notFoundError(\n      `No ${path.basename(file)} at ${file}.`,\n      'Run this from an Ekanos project directory, or pass --dir <path>.',\n    );\n  }\n  try {\n    return JSON.parse(text);\n  } catch (error) {\n    throw validationError(\n      `${file} is not valid JSON: ${error instanceof Error ? error.message : String(error)}`,\n      'Fix the syntax error and re-run.',\n    );\n  }\n}\n\n/** `integration` when ekanos.json is absent or says so; used to route commands. */\nexport function readProjectKind(dir: string): 'integration' | 'experience' {\n  try {\n    const raw = JSON.parse(\n      fs.readFileSync(path.join(dir, EKANOS_JSON), 'utf8'),\n    ) as { kind?: unknown };\n\n    return raw.kind === 'experience' ? 'experience' : 'integration';\n  } catch {\n    return 'integration';\n  }\n}\n\n/**\n * Read and validate an experience's ekanos.json with the shared schema.\n *\n * A fresh scaffold has no integrations yet (you add them with `ekanos add`),\n * which the shared schema rejects (\"declares at least one integration\"). That\n * one rule is suspended here so `add` can bootstrap a project; `check` and\n * `build` report the empty state themselves.\n *\n * The deprecated `uses` shape is read too: its entries come back as\n * `integrations` (alias dropped) with `deprecatedUses` set and `renames`\n * mapping each old alias to its integration, so `ekanos sync` can rewrite the\n * file and say what code to update.\n */\nexport function readExperienceProject(dir: string): ExperienceProject {\n  const absolute = path.resolve(dir);\n  const raw = readJson(path.join(absolute, EKANOS_JSON));\n  if (typeof raw !== 'object' || raw === null || Array.isArray(raw)) {\n    throw validationError(`${EKANOS_JSON} must be a JSON object.`, 'Fix it.');\n  }\n  const record = raw as Record<string, unknown>;\n\n  if (record.kind !== 'experience') {\n    throw validationError(\n      `${EKANOS_JSON} is not an experience (\"kind\": \"experience\").`,\n      'Run experience commands in an experience project; scaffold one with \"ekanos init --kind experience --slug <slug>\".',\n    );\n  }\n\n  const declaredNone =\n    !(Array.isArray(record.integrations) && record.integrations.length > 0) &&\n    !(Array.isArray(record.uses) && record.uses.length > 0);\n  const probe = declaredNone\n    ? { ...record, integrations: [PLACEHOLDER_INTEGRATION], uses: undefined }\n    : record;\n  const parsed = EkanosJsonSchema.safeParse(probe);\n  if (!parsed.success) {\n    throw validationError(\n      `${EKANOS_JSON}: ${parsed.error.issues\n        .map((i) => `${i.path.join('.') || '(root)'}: ${i.message}`)\n        .join('; ')}`,\n      'Fix ekanos.json; the experience fields are slug, entry, integrations, contractsDir, allowImports, ignore.',\n    );\n  }\n\n  const ekanos = parsed.data;\n  const declared = declaredNone\n    ? { entries: [], deprecatedUses: false, renames: {} }\n    : experienceIntegrations(ekanos);\n\n  return {\n    dir: absolute,\n    ekanos,\n    slug: ekanos.slug as string,\n    entry: ekanos.entry as string,\n    integrations: declared.entries.map(withCanonicalOperations),\n    deprecatedUses: declared.deprecatedUses,\n    renames: declared.renames,\n    contractsDir: path.resolve(\n      absolute,\n      ekanos.contractsDir ?? DEFAULT_CONTRACTS_DIR,\n    ),\n    raw: record,\n  };\n}\n\n/** Operations as canonical `<integration>@<version>/<kind>/<name>` ids, for lookups against a contract. */\nfunction withCanonicalOperations(entry: IntegrationEntry): IntegrationEntry {\n  return {\n    ...entry,\n    operations: entry.operations.map((id) => canonicalOperationId(entry, id)),\n  };\n}\n\n/** 2-space JSON with a trailing newline: the format every written file uses. */\nexport function formatJson(value: unknown): string {\n  return `${JSON.stringify(value, null, 2)}\\n`;\n}\n\n/** Write only when the bytes differ. Returns whether the file changed. */\nexport function writeIfChanged(file: string, content: string): boolean {\n  try {\n    if (fs.readFileSync(file, 'utf8') === content) return false;\n  } catch {\n    // missing: write below\n  }\n  fs.mkdirSync(path.dirname(file), { recursive: true });\n  fs.writeFileSync(file, content);\n\n  return true;\n}\n\nexport function readLockfile(project: ExperienceProject): Lockfile {\n  const file = path.join(project.dir, LOCK_FILE);\n  if (!fs.existsSync(file)) return { lockfileVersion: 1, integrations: {} };\n  const parsed = LockfileSchema.safeParse(readJson(file));\n  if (!parsed.success) {\n    throw validationError(\n      `${LOCK_FILE}: ${parsed.error.issues.map((i) => `${i.path.join('.')}: ${i.message}`).join('; ')}`,\n      'Regenerate it with \"ekanos sync\".',\n    );\n  }\n\n  return parsed.data;\n}\n\nexport function writeLockfile(\n  project: ExperienceProject,\n  lock: Lockfile,\n): boolean {\n  const integrations = Object.fromEntries(\n    Object.entries(lock.integrations).sort(([a], [b]) => (a < b ? -1 : 1)),\n  );\n\n  return writeIfChanged(\n    path.join(project.dir, LOCK_FILE),\n    formatJson({ lockfileVersion: 1, integrations }),\n  );\n}\n\nconst PLACEHOLDER_INTEGRATION = {\n  name: 'pending',\n  version: '0',\n  operations: ['tool/pending'],\n} as const;\n\n/**\n * Rewrite `integrations` in ekanos.json (short operation form), leaving every\n * other key where it was and dropping the deprecated `uses`.\n */\nexport function writeIntegrations(\n  project: ExperienceProject,\n  integrations: IntegrationEntry[],\n): boolean {\n  const { uses: _uses, ...rest } = project.raw;\n  const next = {\n    ...rest,\n    integrations: integrations.map((entry) => ({\n      name: entry.name,\n      version: entry.version,\n      operations: entry.operations.map(shortOperation),\n      ...(entry.required === 'required' ? {} : { required: entry.required }),\n      ...(entry.modes.length === 1 && entry.modes[0] === 'team'\n        ? {}\n        : { modes: entry.modes }),\n    })),\n  };\n\n  return writeIfChanged(path.join(project.dir, EKANOS_JSON), formatJson(next));\n}\n"]}

package/dist/experience/publish.d.ts

@@ -0,0 +1,51 @@
+import type { CliContext } from '../context.js';
+import type { ExitCode } from '../exit-codes.js';
+import { type ExperienceCheckResult } from './checks.js';
+import { type ExperienceProject } from './project.js';
+export interface ExperiencePublishArgs {
+    dir: string;
+    dryRun: boolean;
+    env: Record<string, string | undefined>;
+}
+export interface ExperienceGate {
+    project: ExperienceProject;
+    result: ExperienceCheckResult;
+}
+/**
+ * The refusals and the gate every experience publish passes, before anything
+ * is built: active overrides, a tracked overrides file, `ignore` entries, then
+ * the experience checks. Throws a CliError for the first three; the findings
+ * come back for the caller to render (one envelope for one package, a table
+ * for a repo).
+ */
+export declare function gateExperience(args: ExperiencePublishArgs): Promise<ExperienceGate>;
+export interface PackedExperience {
+    slug: string;
+    version: string;
+    digest: string;
+    filename: string | undefined;
+    files: string[];
+    integrity: string | undefined;
+    /** Where the tarball was kept, when `artifactDir` was given. */
+    tarball: string | undefined;
+}
+/**
+ * Build the experience and pack it with `npm pack`, checking the tarball holds
+ * nothing but its own build output. `artifactDir` keeps the tarball (a repo
+ * dry run puts it under `.ekanos/publish/`); otherwise it is discarded.
+ */
+export declare function packExperience(gate: ExperienceGate, artifactDir?: string): Promise<PackedExperience>;
+/**
+ * `ekanos publish` for an experience. Defined, but gated:
+ *
+ * 1. Active integration overrides refuse it (exit 3, naming each integration and path): what
+ *    you ran is not what a host would resolve. An integration of the same repo is not an override.
+ * 2. A tracked ekanos.local.json, any `ignore` entry, or a failing gate refuse.
+ * 3. Without --dry-run it stops: the host cannot admit an experience yet.
+ * 4. With --dry-run it builds and packs, and checks the tarball holds no
+ *    integration code.
+ *
+ * Runs before any login: a dry run needs no session.
+ */
+export declare function runExperiencePublish(ctx: CliContext, args: ExperiencePublishArgs): Promise<ExitCode>;
+export declare const EXPERIENCE_NOT_SUPPORTED = "Publishing an experience is not supported by the host yet.";

package/dist/experience/publish.js

@@ -0,0 +1,144 @@
+import { execFileSync } from 'node:child_process';
+import * as fs from 'node:fs';
+import * as os from 'node:os';
+import * as path from 'node:path';
+import { activeOverridesFor, harnessPinsResolver } from '../dev-experience.js';
+import { gateFailedError, preconditionError, validationError } from '../errors.js';
+import { emitExperience } from './build.js';
+import { runExperienceChecks } from './checks.js';
+import { isOverridesFileTracked } from './overrides.js';
+import { LOCAL_OVERRIDES_FILE, readExperienceProject, } from './project.js';
+import { failOnErrors } from './report.js';
+/** What a packed experience may contain: its own build output and pins, nothing else. */
+const ALLOWED_PACK_PATHS = [
+    /^package\.json$/,
+    /^ekanos\.json$/,
+    /^manifest\.json$/,
+    /^ekanos\.lock\.json$/,
+    /^contracts\/[^/]+\.contract\.json$/,
+    /^contracts\/\.gitkeep$/,
+    /^dist\/[^/]+$/,
+    /^README\.md$/,
+    /^LICENSE$/,
+];
+/**
+ * The refusals and the gate every experience publish passes, before anything
+ * is built: active overrides, a tracked overrides file, `ignore` entries, then
+ * the experience checks. Throws a CliError for the first three; the findings
+ * come back for the caller to render (one envelope for one package, a table
+ * for a repo).
+ */
+export async function gateExperience(args) {
+    var _a;
+    const project = readExperienceProject(args.dir);
+    const overrides = await activeOverridesFor(project.dir, args.env);
+    if (overrides.length > 0) {
+        throw validationError(`Cannot publish with ${overrides.length} local integration override${overrides.length === 1 ? '' : 's'} active: ${overrides
+            .map((o) => `${o.integration} -> ${o.path}`)
+            .join(', ')}.`, `Delete ${LOCAL_OVERRIDES_FILE} (and unset EKANOS_INTEGRATION_OVERRIDE_*) so every integration resolves to its published version, then re-run.`);
+    }
+    if (isOverridesFileTracked(project)) {
+        throw validationError(`${LOCAL_OVERRIDES_FILE} is tracked by git.`, `It is per-developer: "git rm --cached ${LOCAL_OVERRIDES_FILE}" and add it to .gitignore.`);
+    }
+    const ignored = (_a = project.ekanos.ignore) !== null && _a !== void 0 ? _a : [];
+    if (ignored.length > 0) {
+        throw validationError(`ekanos.json "ignore" excludes ${ignored.join(', ')} from the boundary scan, so it cannot be published.`, 'Remove the "ignore" entries (move the archive out of the project) and re-run.');
+    }
+    const result = await runExperienceChecks(project, {
+        typecheck: false,
+        loadDefinition: true,
+        inlineSdk: args.env.EKANOS_INLINE_SDK,
+        pinsResolver: await harnessPinsResolver(project.dir, args.env),
+    });
+    return { project, result };
+}
+/**
+ * Build the experience and pack it with `npm pack`, checking the tarball holds
+ * nothing but its own build output. `artifactDir` keeps the tarball (a repo
+ * dry run puts it under `.ekanos/publish/`); otherwise it is discarded.
+ */
+export async function packExperience(gate, artifactDir) {
+    var _a;
+    const { project, result } = gate;
+    const output = await emitExperience(project, result);
+    const scratch = fs.mkdtempSync(path.join(os.tmpdir(), 'ekanos-exp-pack-'));
+    let packed;
+    let tarball;
+    try {
+        const stdout = execFileSync('npm', ['pack', '--json', '--ignore-scripts', '--pack-destination', scratch], { cwd: project.dir, encoding: 'utf8', stdio: ['ignore', 'pipe', 'pipe'] });
+        packed = JSON.parse(stdout);
+        const first = packed[0];
+        if (artifactDir && first) {
+            fs.mkdirSync(artifactDir, { recursive: true });
+            tarball = path.join(artifactDir, path.basename(first.filename));
+            fs.copyFileSync(path.join(scratch, first.filename), tarball);
+        }
+    }
+    catch (error) {
+        throw preconditionError(`npm pack failed: ${error instanceof Error ? error.message : String(error)}`, 'Make sure npm is installed and package.json "files" lists dist, manifest.json, ekanos.json, ekanos.lock.json and contracts.');
+    }
+    finally {
+        fs.rmSync(scratch, { recursive: true, force: true });
+    }
+    const entry = packed[0];
+    const files = ((_a = entry === null || entry === void 0 ? void 0 : entry.files) !== null && _a !== void 0 ? _a : []).map((f) => f.path);
+    const stray = files.filter((f) => !ALLOWED_PACK_PATHS.some((re) => re.test(f)));
+    if (stray.length > 0) {
+        throw validationError(`The package would ship files an experience must not contain: ${stray.slice(0, 5).join(', ')}.`, 'Restrict package.json "files" to dist, manifest.json, ekanos.json, ekanos.lock.json and contracts.');
+    }
+    for (const required of [
+        'manifest.json',
+        'dist/experience.js',
+        'ekanos.lock.json',
+    ]) {
+        if (!files.includes(required)) {
+            throw validationError(`The package would be missing ${required}.`, 'Add it to package.json "files".');
+        }
+    }
+    return {
+        slug: project.slug,
+        version: output.manifest.version,
+        digest: output.manifest.digest,
+        filename: entry === null || entry === void 0 ? void 0 : entry.filename,
+        files,
+        integrity: entry === null || entry === void 0 ? void 0 : entry.integrity,
+        tarball,
+    };
+}
+/**
+ * `ekanos publish` for an experience. Defined, but gated:
+ *
+ * 1. Active integration overrides refuse it (exit 3, naming each integration and path): what
+ *    you ran is not what a host would resolve. An integration of the same repo is not an override.
+ * 2. A tracked ekanos.local.json, any `ignore` entry, or a failing gate refuse.
+ * 3. Without --dry-run it stops: the host cannot admit an experience yet.
+ * 4. With --dry-run it builds and packs, and checks the tarball holds no
+ *    integration code.
+ *
+ * Runs before any login: a dry run needs no session.
+ */
+export async function runExperiencePublish(ctx, args) {
+    const gate = await gateExperience(args);
+    const { project, result } = gate;
+    const failed = failOnErrors(ctx, 'publish', result.findings, { slug: project.slug }, project.dir);
+    if (failed !== null)
+        return failed;
+    if (!args.dryRun) {
+        throw gateFailedError(EXPERIENCE_NOT_SUPPORTED, 'Run "ekanos publish --dry-run" to build and pack it; the host has no admission path for experiences until it ships one.');
+    }
+    const packed = await packExperience(gate);
+    return ctx.succeed({
+        slug: packed.slug,
+        version: packed.version,
+        digest: packed.digest,
+        dryRun: true,
+        package: {
+            filename: packed.filename,
+            files: packed.files,
+            integrity: packed.integrity,
+        },
+        published: false,
+    }, `Dry run: packed ${packed.slug}@${packed.version} (${packed.files.length} files, ${packed.digest.slice(0, 18)}…). Nothing was published.`);
+}
+export const EXPERIENCE_NOT_SUPPORTED = 'Publishing an experience is not supported by the host yet.';
+//# sourceMappingURL=publish.js.map

package/dist/experience/publish.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"publish.js","sourceRoot":"","sources":["../../src/experience/publish.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAGlC,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAC5E,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAEhF,OAAO,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,EAA8B,mBAAmB,EAAE,MAAM,UAAU,CAAC;AAC3E,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAEL,oBAAoB,EACpB,qBAAqB,GACtB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAQxC,yFAAyF;AACzF,MAAM,kBAAkB,GAAG;IACzB,iBAAiB;IACjB,gBAAgB;IAChB,kBAAkB;IAClB,sBAAsB;IACtB,oCAAoC;IACpC,wBAAwB;IACxB,eAAe;IACf,cAAc;IACd,WAAW;CACZ,CAAC;AAOF;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,IAA2B;;IAE3B,MAAM,OAAO,GAAG,qBAAqB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAEhD,MAAM,SAAS,GAAG,MAAM,kBAAkB,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;IAClE,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,MAAM,eAAe,CACnB,uBAAuB,SAAS,CAAC,MAAM,8BAA8B,SAAS,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,YAAY,SAAS;aACxH,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,WAAW,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;aAC3C,IAAI,CAAC,IAAI,CAAC,GAAG,EAChB,UAAU,oBAAoB,iHAAiH,CAChJ,CAAC;IACJ,CAAC;IAED,IAAI,sBAAsB,CAAC,OAAO,CAAC,EAAE,CAAC;QACpC,MAAM,eAAe,CACnB,GAAG,oBAAoB,qBAAqB,EAC5C,yCAAyC,oBAAoB,6BAA6B,CAC3F,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,SAAG,OAAO,CAAC,MAAM,CAAC,MAAM,mCAAI,EAAE,CAAC;IAC5C,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,eAAe,CACnB,iCAAiC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,qDAAqD,EACxG,+EAA+E,CAChF,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,OAAO,EAAE;QAChD,SAAS,EAAE,KAAK;QAChB,cAAc,EAAE,IAAI;QACpB,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,iBAAiB;QACrC,YAAY,EAAE,MAAM,mBAAmB,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC;KAC/D,CAAC,CAAC;IAEH,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;AAC7B,CAAC;AAaD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,IAAoB,EACpB,WAAoB;;IAEpB,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IACjC,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAErD,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,kBAAkB,CAAC,CAAC,CAAC;IAC3E,IAAI,MAIF,CAAC;IACH,IAAI,OAA2B,CAAC;IAChC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,YAAY,CACzB,KAAK,EACL,CAAC,MAAM,EAAE,QAAQ,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,OAAO,CAAC,EACrE,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAC1E,CAAC;QACF,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAkB,CAAC;QAC7C,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACxB,IAAI,WAAW,IAAI,KAAK,EAAE,CAAC;YACzB,EAAE,CAAC,SAAS,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC/C,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;YAChE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,iBAAiB,CACrB,oBAAoB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAC5E,6HAA6H,CAC9H,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACvD,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IACxB,MAAM,KAAK,GAAG,OAAC,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,KAAK,mCAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACtD,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CACxB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CACpD,CAAC;IACF,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,eAAe,CACnB,gEAAgE,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAC/F,oGAAoG,CACrG,CAAC;IACJ,CAAC;IACD,KAAK,MAAM,QAAQ,IAAI;QACrB,eAAe;QACf,oBAAoB;QACpB,kBAAkB;KACnB,EAAE,CAAC;QACF,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC9B,MAAM,eAAe,CACnB,gCAAgC,QAAQ,GAAG,EAC3C,iCAAiC,CAClC,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO;QACL,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO;QAChC,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM;QAC9B,QAAQ,EAAE,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,QAAQ;QACzB,KAAK;QACL,SAAS,EAAE,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,SAAS;QAC3B,OAAO;KACR,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,GAAe,EACf,IAA2B;IAE3B,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,CAAC;IACxC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IACjC,MAAM,MAAM,GAAG,YAAY,CACzB,GAAG,EACH,SAAS,EACT,MAAM,CAAC,QAAQ,EACf,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,EACtB,OAAO,CAAC,GAAG,CACZ,CAAC;IACF,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC;IAEnC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QACjB,MAAM,eAAe,CACnB,wBAAwB,EACxB,yHAAyH,CAC1H,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,CAAC;IAE1C,OAAO,GAAG,CAAC,OAAO,CAChB;QACE,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,MAAM,EAAE,IAAI;QACZ,OAAO,EAAE;YACP,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,SAAS,EAAE,MAAM,CAAC,SAAS;SAC5B;QACD,SAAS,EAAE,KAAK;KACjB,EACD,mBAAmB,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,KAAK,MAAM,CAAC,KAAK,CAAC,MAAM,WAAW,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,4BAA4B,CAC1I,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,wBAAwB,GACnC,4DAA4D,CAAC","sourcesContent":["import { execFileSync } from 'node:child_process';\nimport * as fs from 'node:fs';\nimport * as os from 'node:os';\nimport * as path from 'node:path';\n\nimport type { CliContext } from '../context';\nimport { activeOverridesFor, harnessPinsResolver } from '../dev-experience';\nimport { gateFailedError, preconditionError, validationError } from '../errors';\nimport type { ExitCode } from '../exit-codes';\nimport { emitExperience } from './build';\nimport { type ExperienceCheckResult, runExperienceChecks } from './checks';\nimport { isOverridesFileTracked } from './overrides';\nimport {\n  type ExperienceProject,\n  LOCAL_OVERRIDES_FILE,\n  readExperienceProject,\n} from './project';\nimport { failOnErrors } from './report';\n\nexport interface ExperiencePublishArgs {\n  dir: string;\n  dryRun: boolean;\n  env: Record<string, string | undefined>;\n}\n\n/** What a packed experience may contain: its own build output and pins, nothing else. */\nconst ALLOWED_PACK_PATHS = [\n  /^package\\.json$/,\n  /^ekanos\\.json$/,\n  /^manifest\\.json$/,\n  /^ekanos\\.lock\\.json$/,\n  /^contracts\\/[^/]+\\.contract\\.json$/,\n  /^contracts\\/\\.gitkeep$/,\n  /^dist\\/[^/]+$/,\n  /^README\\.md$/,\n  /^LICENSE$/,\n];\n\nexport interface ExperienceGate {\n  project: ExperienceProject;\n  result: ExperienceCheckResult;\n}\n\n/**\n * The refusals and the gate every experience publish passes, before anything\n * is built: active overrides, a tracked overrides file, `ignore` entries, then\n * the experience checks. Throws a CliError for the first three; the findings\n * come back for the caller to render (one envelope for one package, a table\n * for a repo).\n */\nexport async function gateExperience(\n  args: ExperiencePublishArgs,\n): Promise<ExperienceGate> {\n  const project = readExperienceProject(args.dir);\n\n  const overrides = await activeOverridesFor(project.dir, args.env);\n  if (overrides.length > 0) {\n    throw validationError(\n      `Cannot publish with ${overrides.length} local integration override${overrides.length === 1 ? '' : 's'} active: ${overrides\n        .map((o) => `${o.integration} -> ${o.path}`)\n        .join(', ')}.`,\n      `Delete ${LOCAL_OVERRIDES_FILE} (and unset EKANOS_INTEGRATION_OVERRIDE_*) so every integration resolves to its published version, then re-run.`,\n    );\n  }\n\n  if (isOverridesFileTracked(project)) {\n    throw validationError(\n      `${LOCAL_OVERRIDES_FILE} is tracked by git.`,\n      `It is per-developer: \"git rm --cached ${LOCAL_OVERRIDES_FILE}\" and add it to .gitignore.`,\n    );\n  }\n\n  const ignored = project.ekanos.ignore ?? [];\n  if (ignored.length > 0) {\n    throw validationError(\n      `ekanos.json \"ignore\" excludes ${ignored.join(', ')} from the boundary scan, so it cannot be published.`,\n      'Remove the \"ignore\" entries (move the archive out of the project) and re-run.',\n    );\n  }\n\n  const result = await runExperienceChecks(project, {\n    typecheck: false,\n    loadDefinition: true,\n    inlineSdk: args.env.EKANOS_INLINE_SDK,\n    pinsResolver: await harnessPinsResolver(project.dir, args.env),\n  });\n\n  return { project, result };\n}\n\nexport interface PackedExperience {\n  slug: string;\n  version: string;\n  digest: string;\n  filename: string | undefined;\n  files: string[];\n  integrity: string | undefined;\n  /** Where the tarball was kept, when `artifactDir` was given. */\n  tarball: string | undefined;\n}\n\n/**\n * Build the experience and pack it with `npm pack`, checking the tarball holds\n * nothing but its own build output. `artifactDir` keeps the tarball (a repo\n * dry run puts it under `.ekanos/publish/`); otherwise it is discarded.\n */\nexport async function packExperience(\n  gate: ExperienceGate,\n  artifactDir?: string,\n): Promise<PackedExperience> {\n  const { project, result } = gate;\n  const output = await emitExperience(project, result);\n\n  const scratch = fs.mkdtempSync(path.join(os.tmpdir(), 'ekanos-exp-pack-'));\n  let packed: Array<{\n    filename: string;\n    files: Array<{ path: string; size: number }>;\n    integrity?: string;\n  }>;\n  let tarball: string | undefined;\n  try {\n    const stdout = execFileSync(\n      'npm',\n      ['pack', '--json', '--ignore-scripts', '--pack-destination', scratch],\n      { cwd: project.dir, encoding: 'utf8', stdio: ['ignore', 'pipe', 'pipe'] },\n    );\n    packed = JSON.parse(stdout) as typeof packed;\n    const first = packed[0];\n    if (artifactDir && first) {\n      fs.mkdirSync(artifactDir, { recursive: true });\n      tarball = path.join(artifactDir, path.basename(first.filename));\n      fs.copyFileSync(path.join(scratch, first.filename), tarball);\n    }\n  } catch (error) {\n    throw preconditionError(\n      `npm pack failed: ${error instanceof Error ? error.message : String(error)}`,\n      'Make sure npm is installed and package.json \"files\" lists dist, manifest.json, ekanos.json, ekanos.lock.json and contracts.',\n    );\n  } finally {\n    fs.rmSync(scratch, { recursive: true, force: true });\n  }\n\n  const entry = packed[0];\n  const files = (entry?.files ?? []).map((f) => f.path);\n  const stray = files.filter(\n    (f) => !ALLOWED_PACK_PATHS.some((re) => re.test(f)),\n  );\n  if (stray.length > 0) {\n    throw validationError(\n      `The package would ship files an experience must not contain: ${stray.slice(0, 5).join(', ')}.`,\n      'Restrict package.json \"files\" to dist, manifest.json, ekanos.json, ekanos.lock.json and contracts.',\n    );\n  }\n  for (const required of [\n    'manifest.json',\n    'dist/experience.js',\n    'ekanos.lock.json',\n  ]) {\n    if (!files.includes(required)) {\n      throw validationError(\n        `The package would be missing ${required}.`,\n        'Add it to package.json \"files\".',\n      );\n    }\n  }\n\n  return {\n    slug: project.slug,\n    version: output.manifest.version,\n    digest: output.manifest.digest,\n    filename: entry?.filename,\n    files,\n    integrity: entry?.integrity,\n    tarball,\n  };\n}\n\n/**\n * `ekanos publish` for an experience. Defined, but gated:\n *\n * 1. Active integration overrides refuse it (exit 3, naming each integration and path): what\n *    you ran is not what a host would resolve. An integration of the same repo is not an override.\n * 2. A tracked ekanos.local.json, any `ignore` entry, or a failing gate refuse.\n * 3. Without --dry-run it stops: the host cannot admit an experience yet.\n * 4. With --dry-run it builds and packs, and checks the tarball holds no\n *    integration code.\n *\n * Runs before any login: a dry run needs no session.\n */\nexport async function runExperiencePublish(\n  ctx: CliContext,\n  args: ExperiencePublishArgs,\n): Promise<ExitCode> {\n  const gate = await gateExperience(args);\n  const { project, result } = gate;\n  const failed = failOnErrors(\n    ctx,\n    'publish',\n    result.findings,\n    { slug: project.slug },\n    project.dir,\n  );\n  if (failed !== null) return failed;\n\n  if (!args.dryRun) {\n    throw gateFailedError(\n      EXPERIENCE_NOT_SUPPORTED,\n      'Run \"ekanos publish --dry-run\" to build and pack it; the host has no admission path for experiences until it ships one.',\n    );\n  }\n\n  const packed = await packExperience(gate);\n\n  return ctx.succeed(\n    {\n      slug: packed.slug,\n      version: packed.version,\n      digest: packed.digest,\n      dryRun: true,\n      package: {\n        filename: packed.filename,\n        files: packed.files,\n        integrity: packed.integrity,\n      },\n      published: false,\n    },\n    `Dry run: packed ${packed.slug}@${packed.version} (${packed.files.length} files, ${packed.digest.slice(0, 18)}…). Nothing was published.`,\n  );\n}\n\nexport const EXPERIENCE_NOT_SUPPORTED =\n  'Publishing an experience is not supported by the host yet.';\n"]}

package/dist/experience/regenerate.d.ts

@@ -0,0 +1,10 @@
+import { type PinnedIntegration } from './pins.js';
+import { type ExperienceProject } from './project.js';
+/** Load every pinned snapshot. Integrations without one are returned as `missing`. */
+export declare function loadPins(project: ExperienceProject): {
+    pinned: PinnedIntegration[];
+    missing: string[];
+};
+/** Write `src/.ekanos/integrations.d.ts`; returns whether it changed. Idempotent. */
+export declare function regenerateIntegrations(project: ExperienceProject, pinned: readonly PinnedIntegration[]): boolean;
+export declare const LEGACY_SLOTS_DTS_CONTENT: string;

package/dist/experience/regenerate.js

@@ -0,0 +1,33 @@
+import * as fs from 'node:fs';
+import * as path from 'node:path';
+import { expectedIntegrationsDts } from './checks.js';
+import { loadPinnedContract } from './pins.js';
+import { INTEGRATIONS_DTS, LEGACY_SLOTS_DTS, writeIfChanged, } from './project.js';
+/** Load every pinned snapshot. Integrations without one are returned as `missing`. */
+export function loadPins(project) {
+    const pinned = [];
+    const missing = [];
+    for (const use of project.integrations) {
+        const contract = loadPinnedContract(project, use);
+        if (contract)
+            pinned.push({ use, contract });
+        else
+            missing.push(use.name);
+    }
+    return { pinned, missing };
+}
+/** Write `src/.ekanos/integrations.d.ts`; returns whether it changed. Idempotent. */
+export function regenerateIntegrations(project, pinned) {
+    const changed = writeIfChanged(path.join(project.dir, INTEGRATIONS_DTS), expectedIntegrationsDts(pinned));
+    // The file used to be `slots.d.ts`. A project that still has it (and lists
+    // it in its tsconfig) keeps compiling: it becomes a re-export for one version.
+    const legacy = path.join(project.dir, LEGACY_SLOTS_DTS);
+    const legacyChanged = fs.existsSync(legacy)
+        ? writeIfChanged(legacy, LEGACY_SLOTS_DTS_CONTENT)
+        : false;
+    return changed || legacyChanged;
+}
+export const LEGACY_SLOTS_DTS_CONTENT = '// DEPRECATED: this file is now src/.ekanos/integrations.d.ts. It re-exports it so an\n' +
+    '// existing tsconfig keeps working for this version; delete it and list integrations.d.ts instead.\n' +
+    "import './integrations';\n\nexport {};\n";
+//# sourceMappingURL=regenerate.js.map

package/dist/experience/regenerate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"regenerate.js","sourceRoot":"","sources":["../../src/experience/regenerate.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,OAAO,EAAE,uBAAuB,EAAE,MAAM,UAAU,CAAC;AACnD,OAAO,EAA0B,kBAAkB,EAAE,MAAM,QAAQ,CAAC;AACpE,OAAO,EAEL,gBAAgB,EAChB,gBAAgB,EAChB,cAAc,GACf,MAAM,WAAW,CAAC;AAEnB,sFAAsF;AACtF,MAAM,UAAU,QAAQ,CAAC,OAA0B;IAIjD,MAAM,MAAM,GAAwB,EAAE,CAAC;IACvC,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;QACvC,MAAM,QAAQ,GAAG,kBAAkB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAClD,IAAI,QAAQ;YAAE,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC;;YACxC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AAC7B,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,sBAAsB,CACpC,OAA0B,EAC1B,MAAoC;IAEpC,MAAM,OAAO,GAAG,cAAc,CAC5B,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,gBAAgB,CAAC,EACxC,uBAAuB,CAAC,MAAM,CAAC,CAChC,CAAC;IAEF,2EAA2E;IAC3E,+EAA+E;IAC/E,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;IACxD,MAAM,aAAa,GAAG,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC;QACzC,CAAC,CAAC,cAAc,CAAC,MAAM,EAAE,wBAAwB,CAAC;QAClD,CAAC,CAAC,KAAK,CAAC;IAEV,OAAO,OAAO,IAAI,aAAa,CAAC;AAClC,CAAC;AAED,MAAM,CAAC,MAAM,wBAAwB,GACnC,yFAAyF;IACzF,sGAAsG;IACtG,0CAA0C,CAAC","sourcesContent":["import * as fs from 'node:fs';\nimport * as path from 'node:path';\n\nimport { expectedIntegrationsDts } from './checks';\nimport { type PinnedIntegration, loadPinnedContract } from './pins';\nimport {\n  type ExperienceProject,\n  INTEGRATIONS_DTS,\n  LEGACY_SLOTS_DTS,\n  writeIfChanged,\n} from './project';\n\n/** Load every pinned snapshot. Integrations without one are returned as `missing`. */\nexport function loadPins(project: ExperienceProject): {\n  pinned: PinnedIntegration[];\n  missing: string[];\n} {\n  const pinned: PinnedIntegration[] = [];\n  const missing: string[] = [];\n  for (const use of project.integrations) {\n    const contract = loadPinnedContract(project, use);\n    if (contract) pinned.push({ use, contract });\n    else missing.push(use.name);\n  }\n\n  return { pinned, missing };\n}\n\n/** Write `src/.ekanos/integrations.d.ts`; returns whether it changed. Idempotent. */\nexport function regenerateIntegrations(\n  project: ExperienceProject,\n  pinned: readonly PinnedIntegration[],\n): boolean {\n  const changed = writeIfChanged(\n    path.join(project.dir, INTEGRATIONS_DTS),\n    expectedIntegrationsDts(pinned),\n  );\n\n  // The file used to be `slots.d.ts`. A project that still has it (and lists\n  // it in its tsconfig) keeps compiling: it becomes a re-export for one version.\n  const legacy = path.join(project.dir, LEGACY_SLOTS_DTS);\n  const legacyChanged = fs.existsSync(legacy)\n    ? writeIfChanged(legacy, LEGACY_SLOTS_DTS_CONTENT)\n    : false;\n\n  return changed || legacyChanged;\n}\n\nexport const LEGACY_SLOTS_DTS_CONTENT =\n  '// DEPRECATED: this file is now src/.ekanos/integrations.d.ts. It re-exports it so an\\n' +\n  '// existing tsconfig keeps working for this version; delete it and list integrations.d.ts instead.\\n' +\n  \"import './integrations';\\n\\nexport {};\\n\";\n"]}

package/dist/experience/report.d.ts

@@ -0,0 +1,9 @@
+import type { Finding } from '@ekanos/integration-schema';
+import type { CliContext } from '../context.js';
+import type { ExitCode } from '../exit-codes.js';
+/**
+ * Settle a command that produced findings: exit 3 with the findings in the
+ * envelope when any is an error, otherwise return null so the caller reports
+ * its own success (warnings ride along in `data.findings`).
+ */
+export declare function failOnErrors(ctx: CliContext, command: string, findings: readonly Finding[], data: Record<string, unknown>, cwd: string): ExitCode | null;

package/dist/experience/report.js

@@ -0,0 +1,23 @@
+import { validationError } from '../errors.js';
+import { renderFindings } from '../findings-renderer.js';
+/**
+ * Settle a command that produced findings: exit 3 with the findings in the
+ * envelope when any is an error, otherwise return null so the caller reports
+ * its own success (warnings ride along in `data.findings`).
+ */
+export function failOnErrors(ctx, command, findings, data, cwd) {
+    const errors = findings.filter((f) => f.severity === 'error');
+    if (errors.length === 0)
+        return null;
+    if (!ctx.jsonMode)
+        renderFindings(ctx, [...findings], { cwd });
+    return ctx.fail(validationError(`${errors.length} finding${errors.length === 1 ? '' : 's'} to fix.`, `Resolve the error findings in data.findings, then re-run "ekanos ${command}".`), Object.assign(Object.assign({}, data), { findings }), !ctx.jsonMode
+        ? {
+            findingsSummary: {
+                command: `ekanos ${command}`,
+                errorCount: errors.length,
+            },
+        }
+        : undefined);
+}
+//# sourceMappingURL=report.js.map

package/dist/experience/report.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"report.js","sourceRoot":"","sources":["../../src/experience/report.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAE5C,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAEtD;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAC1B,GAAe,EACf,OAAe,EACf,QAA4B,EAC5B,IAA6B,EAC7B,GAAW;IAEX,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC;IAC9D,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAErC,IAAI,CAAC,GAAG,CAAC,QAAQ;QAAE,cAAc,CAAC,GAAG,EAAE,CAAC,GAAG,QAAQ,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IAE/D,OAAO,GAAG,CAAC,IAAI,CACb,eAAe,CACb,GAAG,MAAM,CAAC,MAAM,WAAW,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,UAAU,EACnE,oEAAoE,OAAO,IAAI,CAChF,kCACI,IAAI,KAAE,QAAQ,KACnB,CAAC,GAAG,CAAC,QAAQ;QACX,CAAC,CAAC;YACE,eAAe,EAAE;gBACf,OAAO,EAAE,UAAU,OAAO,EAAE;gBAC5B,UAAU,EAAE,MAAM,CAAC,MAAM;aAC1B;SACF;QACH,CAAC,CAAC,SAAS,CACd,CAAC;AACJ,CAAC","sourcesContent":["import type { Finding } from '@ekanos/integration-schema';\n\nimport type { CliContext } from '../context';\nimport { validationError } from '../errors';\nimport type { ExitCode } from '../exit-codes';\nimport { renderFindings } from '../findings-renderer';\n\n/**\n * Settle a command that produced findings: exit 3 with the findings in the\n * envelope when any is an error, otherwise return null so the caller reports\n * its own success (warnings ride along in `data.findings`).\n */\nexport function failOnErrors(\n  ctx: CliContext,\n  command: string,\n  findings: readonly Finding[],\n  data: Record<string, unknown>,\n  cwd: string,\n): ExitCode | null {\n  const errors = findings.filter((f) => f.severity === 'error');\n  if (errors.length === 0) return null;\n\n  if (!ctx.jsonMode) renderFindings(ctx, [...findings], { cwd });\n\n  return ctx.fail(\n    validationError(\n      `${errors.length} finding${errors.length === 1 ? '' : 's'} to fix.`,\n      `Resolve the error findings in data.findings, then re-run \"ekanos ${command}\".`,\n    ),\n    { ...data, findings },\n    !ctx.jsonMode\n      ? {\n          findingsSummary: {\n            command: `ekanos ${command}`,\n            errorCount: errors.length,\n          },\n        }\n      : undefined,\n  );\n}\n"]}