@ekanos/cli 0.17.1 → 0.18.0

package/README.md

@@ -30,6 +30,7 @@ npx @ekanos/cli dev
 | `catalog`  | `ekanos catalog [<product-slug>]` — what a source can already use (`GET /api/partner/catalog`): every product, Experiences then Integrations as `sources products` splits them (the two list the same products), enabled, switched off or available to enable, with its tools and their input schemas, whose connection an agent run uses, agent triggers and generated setup steps. Check it before building something the source may already have.                                                               |
 | `agents`   | `ekanos agents init | list | show | pull | apply | publish | rollback | archive | unarchive` — the source's agents, held by Ekanos (`/api/partner/agents`). `init` sets up a folder for designing agents with Claude (the `build-agent` and `ekanos-platform` skills, the docs MCP server, a CLAUDE.md) without scaffolding an integration. `apply` stores a new version as a draft, `publish` makes a version the one every team runs, `rollback` publishes an earlier one, `archive` retires one no team has on. Either seat applies; only the source admin publishes or archives.
 | `teams`    | A Source admin's teams (`/api/partner/teams`): members, connections, and each team's agents. `ekanos teams agents create <team> --from <dir> [--personal]` builds the team's own agent — or, with `--personal`, your own, which acts for you and only you change — from the same `agent.json` (+ `AGENT.md`, + `skills/<slug>/`) that `agents apply` reads; `teams agents apply <team> <dir> [--base-version <n>]` creates or changes it from that file. You become its creator, so you must be an active member of the team. `teams triggers add <team> <key> schedule\|webhook …` starts it; a webhook token goes to a `0600` file under `~/.ekanos/secrets`, never the output. Someone else's personal agent is refused for every write (`PERSONAL_AGENT_CREATOR_ONLY`). |
+| `names` | `ekanos names claim <slug> [--reason <text>] \| status <slug>` — request an approved global package name and see where the request stands (`/api/partner/names/claims`). A package that is not global is named under your Source's namespace (`acme/google-drive`); `ekanos.json` keeps the bare slug. |
 | `reviewers` | `ekanos reviewers list \| add <email> --reach source\|team [--team <slug>] \| remove <email> [--team <slug>]` — a Source admin names who decides agent reply drafts held under an `approve` policy (`/api/partner/reviewers`). A `source`-reach reviewer decides every team's drafts; a `team`-reach reviewer one team's. The reviewer must be a member of one of the Source's teams. |
 | `workflows` | `ekanos workflows list \| show \| pull \| apply \| enable \| disable \| run \| runs list\|show\|cancel \| approvals list\|approve\|reject --team <slug>` — a team's workflows, for its Source admin (`/api/partner/teams/<team>/workflows`). A workflow is the JSON the visual editor saves; `apply` creates a draft (or replaces one with `--update`) through the editor's own checks, including the Custom Code security review and approval gates before writes; `enable` re-checks it and asks you to approve what Custom Code reaches (`--confirm-access` in a script); `run --dry-run` rehearses it with writes recorded, not sent. Needs the Workflows Experience on for the Source; a member's personal workflow is never reachable. |
 | `use`      | `ekanos use <source-slug>` — set this project's publish target to a source you hold a seat on. Refuses (`forbidden`, with your actual seats in the hint) for a slug you don't hold a seat on, so a typo can't silently repoint a project.                                                                                                                     |

package/dist/commands/catalog.js

@@ -2,6 +2,7 @@ import { loginHint } from '../auth/host-trust.js';
 import { refreshStoredSession, requireSession, resolveAuthEnvironment, } from '../auth/session.js';
 import { fetchSourceCatalog, } from '../catalog-api.js';
 import { authRequiredError } from '../errors.js';
+import { hostPredatesFeatures, productGroup } from '../product-kinds.js';
 import { resolveSourceTarget } from '../source-target.js';
 import { pluralize } from '../ui.js';
 import { withDocsHint } from './agents-init.js';
@@ -64,13 +65,19 @@ function actorLabel(actor, product) {
         : ACTOR_LABEL[actor];
 }
 const KIND_TITLE = {
+    feature: 'Features',
     experience: 'Experiences',
     integration: 'Integrations',
 };
 function catalogSummary(ui, catalog) {
-    // The same split as `ekanos sources products`: Experiences, then Integrations.
-    const blocks = ['experience', 'integration'].map((kind) => {
-        const products = catalog.products.filter((product) => product.kind === kind);
+    // The same split as `ekanos sources products`: Features, Experiences (only
+    // when there are any), then Integrations. A host from before the Features
+    // rename calls a Feature an `experience`.
+    const legacyHost = hostPredatesFeatures(catalog.products);
+    const kinds = ['feature', 'experience', 'integration'].filter((kind) => kind !== 'experience' ||
+        catalog.products.some((product) => productGroup(product, legacyHost) === 'experience'));
+    const blocks = kinds.map((kind) => {
+        const products = catalog.products.filter((product) => productGroup(product, legacyHost) === kind);
         return ui.result({
             title: `${KIND_TITLE[kind]} on ${catalog.source.slug} (${products.length})`,
             tone: 'ok',
@@ -101,10 +108,7 @@ function productDetail(ui, product) {
     var _a;
     const rows = [
         ['What', (_a = product.summary) !== null && _a !== void 0 ? _a : '—'],
-        [
-            'Kind',
-            product.kind === 'experience' ? 'Ekanos Experience' : 'Integration',
-        ],
+        ['Kind', product.kind === 'integration' ? 'Integration' : 'Ekanos Feature'],
         [
             'Status',
             [STATUS_LABEL[product.availability], enableNeeds(product)]

package/dist/commands/catalog.js.map

@@ -1 +1 @@
-{"version":3,"file":"catalog.js","sourceRoot":"","sources":["../../src/commands/catalog.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAEL,oBAAoB,EACpB,cAAc,EACd,sBAAsB,GACvB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAEL,kBAAkB,GACnB,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAE9C,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAW,SAAS,EAAE,MAAM,OAAO,CAAC;AAC3C,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAW7C;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,GAAe,EACf,IAAiB;IAEjB,MAAM,GAAG,GAAG,sBAAsB,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE;QAC3D,UAAU,EAAE,IAAI,CAAC,GAAG;KACrB,CAAC,CAAC;IACH,IAAI,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IAElC,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IAC/D,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC;IAE3B,MAAM,KAAK,GAAG,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;IACjE,IAAI,MAAM,GAAG,MAAM,kBAAkB,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;IAC5E,IAAI,MAAM,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;QACrC,OAAO,GAAG,MAAM,oBAAoB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACnD,MAAM,GAAG,MAAM,kBAAkB,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;IAC1E,CAAC;IACD,MAAM,OAAO,GAAG,cAAc,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAE5C,wEAAwE;IACxE,OAAO,GAAG,CAAC,OAAO,iBACd,IAAI,EAAE,GAAG,CAAC,IAAI,IAAK,OAAO,GAC5B,IAAI,CAAC,OAAO;QACV,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAC;QAC7C,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CACpE,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CACrB,MAAgC,EAChC,GAAoB;IAEpB,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC,OAAO,CAAC;IAClD,MAAM,iBAAiB,CACrB,mBAAmB,GAAG,CAAC,IAAI,wCAAwC,EACnE,SAAS,CAAC,GAAG,CAAC,CACf,CAAC;AACJ,CAAC;AAED,MAAM,YAAY,GAAG;IACnB,OAAO,EAAE,wBAAwB;IACjC,YAAY,EAAE,2DAA2D;IACzE,SAAS,EAAE,aAAa;CAChB,CAAC;AAEX,MAAM,YAAY,GAAG;IACnB,OAAO,EAAE,WAAW;IACpB,YAAY,EAAE,gBAAgB;IAC9B,SAAS,EAAE,eAAe;CAClB,CAAC;AAEX,0EAA0E;AAC1E,MAAM,WAAW,GAAG;IAClB,MAAM,EAAE,QAAQ;IAChB,YAAY,EAAE,cAAc;IAC5B,IAAI,EAAE,MAAM;CACJ,CAAC;AAEX,oEAAoE;AACpE,SAAS,UAAU,CACjB,KAAgC,EAChC,OAAuB;IAEvB,OAAO,KAAK,KAAK,MAAM,IAAI,OAAO,CAAC,KAAK,KAAK,MAAM;QACjD,CAAC,CAAC,aAAa;QACf,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,GAAG;IACjB,UAAU,EAAE,aAAa;IACzB,WAAW,EAAE,cAAc;CACnB,CAAC;AAEX,SAAS,cAAc,CAAC,EAAM,EAAE,OAAsB;IACpD,+EAA+E;IAC/E,MAAM,MAAM,GAAI,CAAC,YAAY,EAAE,aAAa,CAAW,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACnE,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,CACtC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,IAAI,CACnC,CAAC;QACF,OAAO,EAAE,CAAC,MAAM,CAAC;YACf,KAAK,EAAE,GAAG,UAAU,CAAC,IAAI,CAAC,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,MAAM,GAAG;YAC3E,IAAI,EAAE,IAAI;YACV,IAAI,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAoB,EAAE,CAAC;gBAChD,OAAO,CAAC,IAAI;gBACZ;oBACE,YAAY,CAAC,OAAO,CAAC,YAAY,CAAC;oBAClC,OAAO,CAAC,IAAI;oBACZ,aAAa,CAAC,OAAO,CAAC;oBACtB,QAAQ,CAAC,OAAO,CAAC;iBAClB;qBACE,MAAM,CAAC,OAAO,CAAC;qBACf,IAAI,CAAC,KAAK,CAAC;aACf,CAAC;SACH,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,MAAM,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,CAC1C,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,UAAU,KAAK,KAAK,CAC1C,CAAC,MAAM,CAAC;IACT,OAAO;QACL,GAAG,MAAM;QACT,EAAE,CAAC,IAAI,CACL,GAAG,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE;YAC1E,CAAC,YAAY,GAAG,CAAC;gBACf,CAAC,CAAC,KAAK,YAAY,6GAA6G;gBAChI,CAAC,CAAC,EAAE,CAAC;YACP,4HAA4H,CAC/H;KACF,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AACjB,CAAC;AAED,SAAS,aAAa,CAAC,EAAM,EAAE,OAAuB;;IACpD,MAAM,IAAI,GAAkC;QAC1C,CAAC,MAAM,QAAE,OAAO,CAAC,OAAO,mCAAI,GAAG,CAAC;QAChC;YACE,MAAM;YACN,OAAO,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,aAAa;SACpE;QACD;YACE,QAAQ;YACR,CAAC,YAAY,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC;iBACvD,MAAM,CAAC,OAAO,CAAC;iBACf,IAAI,CAAC,KAAK,CAAC;SACf;KACF,CAAC;IACF,IAAI,OAAO,CAAC,UAAU,KAAK,KAAK,EAAE,CAAC;QACjC,IAAI,CAAC,IAAI,CAAC;YACR,SAAS;YACT,sFAAsF;SACvF,CAAC,CAAC;IACL,CAAC;IACD,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;QACvB,IAAI,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,kBAAkB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IACrE,CAAC;IACD,IAAI,OAAO,CAAC,cAAc,KAAK,IAAI,EAAE,CAAC;QACpC,IAAI,CAAC,IAAI,CAAC,CAAC,iBAAiB,EAAE,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;IACjE,CAAC;IACD,IACE,OAAO,CAAC,eAAe,KAAK,IAAI;QAChC,OAAO,CAAC,eAAe,KAAK,SAAS,EACrC,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,CAAC,kBAAkB,EAAE,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;IACnE,CAAC;IACD,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7B,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAC5D,CAAC;IACD,IAAI,OAAO,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnC,IAAI,CAAC,IAAI,CAAC;YACR,gBAAgB;YAChB,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,EAAE,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;SACnE,CAAC,CAAC;IACL,CAAC;IACD,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;QAC3B,IAAI,CAAC,IAAI,CAAC,CAAC,cAAc,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC;IACtD,CAAC;IACD,IAAI,OAAO,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClC,IAAI,CAAC,IAAI,CAAC;YACR,OAAO;YACP,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,kBAAC;gBAC1C,GAAG,KAAK,GAAG,CAAC,MAAM,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,KAAK,UAAU,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,OAAO,IAAI,CAAC,MAAM,EAAE;oBACjG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC5C,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,WAAW,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1D,GAAG,OAAC,IAAI,CAAC,YAAY,mCAAI,EAAE,CAAC,CAAC,GAAG,CAC9B,CAAC,IAAI,EAAE,SAAS,EAAE,EAAE,CAClB,MAAM,MAAM,CAAC,YAAY,CAAC,EAAE,GAAG,SAAS,CAAC,KAAK,IAAI,EAAE,CACvD;aACF,GAAA,CAAC;SACH,CAAC,CAAC;IACL,CAAC;IAED,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;AACzE,CAAC;AAED,SAAS,aAAa,CAAC,OAAuB;IAC5C,IAAI,OAAO,CAAC,UAAU,KAAK,KAAK;QAAE,OAAO,yBAAyB,CAAC;IACnE,MAAM,KAAK,GAAG;QACZ,OAAO,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI;QACzE,OAAO,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC;YAC5B,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,WAAW,CAAC,MAAM,EAAE,eAAe,CAAC;YACxD,CAAC,CAAC,IAAI;KACT,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAClB,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;;GAGG;AACH,SAAS,QAAQ,CAAC,OAAuB;IACvC,IAAI,OAAO,CAAC,UAAU,KAAK,KAAK;QAAE,OAAO,EAAE,CAAC;IAC5C,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IACnC,IAAI,KAAK;QAAE,OAAO,KAAK,CAAC;IAExB,MAAM,IAAI,GAAG,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC;IACxE,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC;IAC5D,OAAO;QACL,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI;QACjE,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,IAAI;KACvD;SACE,MAAM,CAAC,OAAO,CAAC;SACf,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,2EAA2E;AAC3E,SAAS,WAAW,CAAC,OAAuB;IAC1C,IAAI,OAAO,CAAC,YAAY,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACpD,IAAI,OAAO,CAAC,YAAY,KAAK,YAAY,EAAE,CAAC;QAC1C,OAAO,8BAA8B,CAAC;IACxC,CAAC;IACD,OAAO,OAAO,CAAC,KAAK;QAClB,CAAC,CAAC,uFAAuF,OAAO,CAAC,IAAI,IAAI;QACzG,CAAC,CAAC,sBAAsB,CAAC;AAC7B,CAAC;AAED;;;;GAIG;AACH,SAAS,kBAAkB,CAAC,UAA6B;IACvD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,QAAQ,UAAU,CAAC,WAAW,EAAE,CAAC;QAC/B,KAAK,QAAQ;YACX,OAAO,CAAC,2CAA2C,CAAC,CAAC;QACvD,KAAK,MAAM;YACT,KAAK,CAAC,IAAI,CACR,sEAAsE,CACvE,CAAC;YACF,MAAM;QACR,KAAK,QAAQ;YACX,KAAK,CAAC,IAAI,CACR,mPAAmP,CACpP,CAAC;YACF,MAAM;IACV,CAAC;IACD,IAAI,UAAU,CAAC,gBAAgB,KAAK,aAAa,EAAE,CAAC;QAClD,KAAK,CAAC,IAAI,CACR,4MAA4M;YAC1M,CAAC,UAAU,CAAC,gBAAgB,KAAK,WAAW;gBAC1C,CAAC,CAAC,kBAAkB;gBACpB,CAAC,CAAC,0BAA0B,CAAC,CAClC,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,SAAS,YAAY,CAAC,IAAiB;IACrC,MAAM,IAAI,GACR,GAAG,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,WAAW,KAAK,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,WAAW,EAAE,GAAG;QAClG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACrD,IAAI,CAAC,IAAI,CAAC,WAAW;QAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IAErC,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;IACzD,MAAM,QAAQ,GAAG,IAAI,GAAG,CACtB,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC;QACtC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,MAAM,CAC9B,CAAC,GAAG,EAAiB,EAAE,CAAC,OAAO,GAAG,KAAK,QAAQ,CAChD;QACH,CAAC,CAAC,EAAE,CACP,CAAC;IACF,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE;QAC7D,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;QACjC,MAAM,IAAI,GAAG,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;QACtE,MAAM,WAAW,GACf,OAAO,QAAQ,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC;QACzE,OAAO,CACL,MAAM,GAAG,EAAE;YACX,CAAC,IAAI,EAAE,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC;iBAC1C,MAAM,CAAC,OAAO,CAAC;iBACf,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;iBAC/D,IAAI,CAAC,EAAE,CAAC;YACX,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CACzC,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;AACpE,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACzE,CAAC,CAAE,KAAiC;QACpC,CAAC,CAAC,EAAE,CAAC;AACT,CAAC","sourcesContent":["import type {\n  CatalogConnection,\n  CatalogProduct,\n  CatalogSetupStep,\n  CatalogTool,\n  SourceCatalog,\n} from '@ekanos/integration-schema';\n\nimport { loginHint } from '../auth/host-trust';\nimport {\n  type AuthEnvironment,\n  refreshStoredSession,\n  requireSession,\n  resolveAuthEnvironment,\n} from '../auth/session';\nimport {\n  type FetchSourceCatalogResult,\n  fetchSourceCatalog,\n} from '../catalog-api';\nimport type { CliContext } from '../context';\nimport { authRequiredError } from '../errors';\nimport type { ExitCode } from '../exit-codes';\nimport { resolveSourceTarget } from '../source-target';\nimport { type Ui, pluralize } from '../ui';\nimport { withDocsHint } from './agents-init';\n\nexport interface CatalogArgs {\n  host?: string;\n  source?: string;\n  /** One product's detail, when given. */\n  product?: string;\n  dir: string;\n  env: Record<string, string | undefined>;\n}\n\n/**\n * `catalog` — what the Source can already do (plan 239.0). Lists every\n * product the Source can use, Experiences then Integrations as `ekanos\n * sources products` splits them, with its tools, agent events and the steps\n * left to set it up; `ekanos catalog <product>` shows one in full, with each\n * tool's inputs and whose connection an agent run uses.\n *\n * Read before building: an agent migration asks it first, so a capability\n * the Source already has is set up rather than rebuilt. Works outside a\n * project — the Source comes from `--source`, else `ekanos.json`, else the\n * caller's only seat.\n */\nexport async function runCatalog(\n  ctx: CliContext,\n  args: CatalogArgs,\n): Promise<ExitCode> {\n  const env = resolveAuthEnvironment(ctx, args.host, args.env, {\n    projectDir: args.dir,\n  });\n  let session = requireSession(env);\n\n  const resolved = await resolveSourceTarget(env, session, args);\n  session = resolved.session;\n\n  const query = { source: resolved.source, product: args.product };\n  let result = await fetchSourceCatalog(env.host, session.accessToken, query);\n  if (result.status === 'unauthorized') {\n    session = await refreshStoredSession(env, session);\n    result = await fetchSourceCatalog(env.host, session.accessToken, query);\n  }\n  const catalog = requireCatalog(result, env);\n\n  // The agent-design tip belongs on the overview only, not every product.\n  return ctx.succeed(\n    { host: env.host, ...catalog },\n    args.product\n      ? productDetail(ctx.ui, catalog.products[0]!)\n      : withDocsHint(ctx.ui, args.dir, catalogSummary(ctx.ui, catalog)),\n  );\n}\n\nfunction requireCatalog(\n  result: FetchSourceCatalogResult,\n  env: AuthEnvironment,\n): SourceCatalog {\n  if (result.status === 'ok') return result.catalog;\n  throw authRequiredError(\n    `The session for ${env.host} could not authorize the catalog read.`,\n    loginHint(env),\n  );\n}\n\nconst STATUS_LABEL = {\n  enabled: 'Enabled on this Source',\n  'turned-off': 'Not enabled — granted, but a Flag or plan switches it off',\n  available: 'Not enabled',\n} as const;\n\nconst SHORT_STATUS = {\n  enabled: '✓ enabled',\n  'turned-off': '✗ switched off',\n  available: '✗ not enabled',\n} as const;\n\n/** Who does a setup step, in words. The wire value `ekanos` is Vastly. */\nconst ACTOR_LABEL = {\n  ekanos: 'Vastly',\n  source_admin: 'Source admin',\n  team: 'team',\n} as const;\n\n/** A `team` step on a per-person product is each person's to do. */\nfunction actorLabel(\n  actor: CatalogSetupStep['actor'],\n  product: CatalogProduct,\n): string {\n  return actor === 'team' && product.scope === 'user'\n    ? 'each person'\n    : ACTOR_LABEL[actor];\n}\n\nconst KIND_TITLE = {\n  experience: 'Experiences',\n  integration: 'Integrations',\n} as const;\n\nfunction catalogSummary(ui: Ui, catalog: SourceCatalog): string {\n  // The same split as `ekanos sources products`: Experiences, then Integrations.\n  const blocks = (['experience', 'integration'] as const).map((kind) => {\n    const products = catalog.products.filter(\n      (product) => product.kind === kind,\n    );\n    return ui.result({\n      title: `${KIND_TITLE[kind]} on ${catalog.source.slug} (${products.length})`,\n      tone: 'ok',\n      rows: products.map((product): [string, string] => [\n        product.slug,\n        [\n          SHORT_STATUS[product.availability],\n          product.name,\n          describeShape(product),\n          nextStep(product),\n        ]\n          .filter(Boolean)\n          .join(' · '),\n      ]),\n    });\n  });\n\n  const unregistered = catalog.products.filter(\n    (product) => product.registered === false,\n  ).length;\n  return [\n    ...blocks,\n    ui.hint(\n      `${pluralize(catalog.products.length, 'product')} on ${catalog.source.slug}` +\n        (unregistered > 0\n          ? `, ${unregistered} with no package on this host (listed so this matches \"ekanos sources products\"; nothing here can use them)`\n          : '') +\n        `. \"ekanos catalog <product>\" shows tools with their inputs, whose connection agent runs use, agent events and setup steps.`,\n    ),\n  ].join('\\n\\n');\n}\n\nfunction productDetail(ui: Ui, product: CatalogProduct): string {\n  const rows: [string, string | string[]][] = [\n    ['What', product.summary ?? '—'],\n    [\n      'Kind',\n      product.kind === 'experience' ? 'Ekanos Experience' : 'Integration',\n    ],\n    [\n      'Status',\n      [STATUS_LABEL[product.availability], enableNeeds(product)]\n        .filter(Boolean)\n        .join(' — '),\n    ],\n  ];\n  if (product.registered === false) {\n    rows.push([\n      'Package',\n      'None on this host — nothing here can use it until a build that ships it is deployed.',\n    ]);\n  }\n  if (product.connection) {\n    rows.push(['Connections', describeConnection(product.connection)]);\n  }\n  if (product.connectedTeams !== null) {\n    rows.push(['Teams connected', String(product.connectedTeams)]);\n  }\n  if (\n    product.connectedPeople !== null &&\n    product.connectedPeople !== undefined\n  ) {\n    rows.push(['People connected', String(product.connectedPeople)]);\n  }\n  if (product.tools.length > 0) {\n    rows.push(['Tools', product.tools.flatMap(describeTool)]);\n  }\n  if (product.agentEvents.length > 0) {\n    rows.push([\n      'Agent triggers',\n      product.agentEvents.map((event) => `${event.id} — ${event.label}`),\n    ]);\n  }\n  if (product.agentReplyTool) {\n    rows.push(['Replies with', product.agentReplyTool]);\n  }\n  if (product.setupSteps.length > 0) {\n    rows.push([\n      'Setup',\n      product.setupSteps.flatMap((step, index) => [\n        `${index + 1}. [${step.state}] ${step.title} (${actorLabel(step.actor, product)}) — ${step.detail}` +\n          (step.guideUrl ? ` ${step.guideUrl}` : ''),\n        ...(step.consoleUrl ? [`   Open ${step.consoleUrl}`] : []),\n        ...(step.instructions ?? []).map(\n          (line, lineIndex) =>\n            `   ${String.fromCharCode(97 + lineIndex)}. ${line}`,\n        ),\n      ]),\n    ]);\n  }\n\n  return ui.result({ title: `${product.name} (${product.slug})`, rows });\n}\n\nfunction describeShape(product: CatalogProduct): string {\n  if (product.registered === false) return 'no package on this host';\n  const parts = [\n    product.tools.length > 0 ? pluralize(product.tools.length, 'tool') : null,\n    product.agentEvents.length > 0\n      ? pluralize(product.agentEvents.length, 'agent trigger')\n      : null,\n  ].filter(Boolean);\n  return parts.join(', ');\n}\n\n/**\n * What stands between the Source and using it. A product only Vastly can\n * enable says so instead of counting steps nobody on the Source can take.\n */\nfunction nextStep(product: CatalogProduct): string {\n  if (product.registered === false) return '';\n  const needs = enableNeeds(product);\n  if (needs) return needs;\n\n  const open = product.setupSteps.filter((step) => step.state === 'todo');\n  const ours = open.filter((step) => step.actor !== 'ekanos');\n  return [\n    ours.length > 0 ? `${pluralize(ours.length, 'step')} left` : null,\n    ours.length < open.length ? 'waiting on Vastly' : null,\n  ]\n    .filter(Boolean)\n    .join(', ');\n}\n\n/** Who has to enable a product that is not enabled, or null when it is. */\nfunction enableNeeds(product: CatalogProduct): string | null {\n  if (product.availability === 'enabled') return null;\n  if (product.availability === 'turned-off') {\n    return 'needs Vastly to switch it on';\n  }\n  return product.owned\n    ? `built by this Source — its Source admin enables it (\"ekanos sources products enable ${product.slug}\")`\n    : 'needs a Vastly grant';\n}\n\n/**\n * Whose connection a product's calls use: the team's, each person's own (on a\n * team or provided agent, the creator's, lent to whoever the run acts for),\n * or the Source's, when a Source admin connected it once for every team.\n */\nfunction describeConnection(connection: CatalogConnection): string[] {\n  const lines: string[] = [];\n  switch (connection.connectedBy) {\n    case 'nobody':\n      return ['Nothing to connect — it works as shipped.'];\n    case 'team':\n      lines.push(\n        \"Each team connects its own. An agent run uses its team's connection.\",\n      );\n      break;\n    case 'person':\n      lines.push(\n        \"Each person connects their own. An agent run uses its creator's own connection — on a personal agent that is the person it runs for, including its schedule and webhook runs; on a team or provided agent it is lent to whoever the run acts for.\",\n      );\n      break;\n  }\n  if (connection.sourceConnection !== 'unsupported') {\n    lines.push(\n      `A Source admin can connect it once for every team (\"ekanos apps connect\"): a provided agent whose template marks it Source-owned then uses the Source's connection, limited to the team's routed records. ` +\n        (connection.sourceConnection === 'connected'\n          ? 'This Source has.'\n          : 'This Source has not yet.'),\n    );\n  }\n  return lines;\n}\n\n/**\n * A tool, then its inputs one per line from its JSON schema — what an agent\n * designer needs to see which other tool supplies an id.\n */\nfunction describeTool(tool: CatalogTool): string[] {\n  const head =\n    `${tool.name} (${tool.effect}${tool.sensitivity === 'undeclared' ? '' : `, ${tool.sensitivity}`})` +\n    (tool.description ? ` — ${tool.description}` : '');\n  if (!tool.inputSchema) return [head];\n\n  const properties = asRecord(tool.inputSchema.properties);\n  const required = new Set(\n    Array.isArray(tool.inputSchema.required)\n      ? tool.inputSchema.required.filter(\n          (key): key is string => typeof key === 'string',\n        )\n      : [],\n  );\n  const inputs = Object.entries(properties).map(([key, value]) => {\n    const property = asRecord(value);\n    const type = typeof property.type === 'string' ? property.type : null;\n    const description =\n      typeof property.description === 'string' ? property.description : null;\n    return (\n      `   ${key}` +\n      [type, required.has(key) ? 'required' : null]\n        .filter(Boolean)\n        .map((part, index) => (index === 0 ? `: ${part}` : `, ${part}`))\n        .join('') +\n      (description ? ` — ${description}` : '')\n    );\n  });\n  return [head, ...(inputs.length > 0 ? inputs : ['   no inputs'])];\n}\n\nfunction asRecord(value: unknown): Record<string, unknown> {\n  return typeof value === 'object' && value !== null && !Array.isArray(value)\n    ? (value as Record<string, unknown>)\n    : {};\n}\n"]}
+{"version":3,"file":"catalog.js","sourceRoot":"","sources":["../../src/commands/catalog.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAEL,oBAAoB,EACpB,cAAc,EACd,sBAAsB,GACvB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAEL,kBAAkB,GACnB,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAE9C,OAAO,EAAE,oBAAoB,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AACtE,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAW,SAAS,EAAE,MAAM,OAAO,CAAC;AAC3C,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAW7C;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,GAAe,EACf,IAAiB;IAEjB,MAAM,GAAG,GAAG,sBAAsB,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE;QAC3D,UAAU,EAAE,IAAI,CAAC,GAAG;KACrB,CAAC,CAAC;IACH,IAAI,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IAElC,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IAC/D,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC;IAE3B,MAAM,KAAK,GAAG,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;IACjE,IAAI,MAAM,GAAG,MAAM,kBAAkB,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;IAC5E,IAAI,MAAM,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;QACrC,OAAO,GAAG,MAAM,oBAAoB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACnD,MAAM,GAAG,MAAM,kBAAkB,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;IAC1E,CAAC;IACD,MAAM,OAAO,GAAG,cAAc,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAE5C,wEAAwE;IACxE,OAAO,GAAG,CAAC,OAAO,iBACd,IAAI,EAAE,GAAG,CAAC,IAAI,IAAK,OAAO,GAC5B,IAAI,CAAC,OAAO;QACV,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAC;QAC7C,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CACpE,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CACrB,MAAgC,EAChC,GAAoB;IAEpB,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC,OAAO,CAAC;IAClD,MAAM,iBAAiB,CACrB,mBAAmB,GAAG,CAAC,IAAI,wCAAwC,EACnE,SAAS,CAAC,GAAG,CAAC,CACf,CAAC;AACJ,CAAC;AAED,MAAM,YAAY,GAAG;IACnB,OAAO,EAAE,wBAAwB;IACjC,YAAY,EAAE,2DAA2D;IACzE,SAAS,EAAE,aAAa;CAChB,CAAC;AAEX,MAAM,YAAY,GAAG;IACnB,OAAO,EAAE,WAAW;IACpB,YAAY,EAAE,gBAAgB;IAC9B,SAAS,EAAE,eAAe;CAClB,CAAC;AAEX,0EAA0E;AAC1E,MAAM,WAAW,GAAG;IAClB,MAAM,EAAE,QAAQ;IAChB,YAAY,EAAE,cAAc;IAC5B,IAAI,EAAE,MAAM;CACJ,CAAC;AAEX,oEAAoE;AACpE,SAAS,UAAU,CACjB,KAAgC,EAChC,OAAuB;IAEvB,OAAO,KAAK,KAAK,MAAM,IAAI,OAAO,CAAC,KAAK,KAAK,MAAM;QACjD,CAAC,CAAC,aAAa;QACf,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,GAAG;IACjB,OAAO,EAAE,UAAU;IACnB,UAAU,EAAE,aAAa;IACzB,WAAW,EAAE,cAAc;CACnB,CAAC;AAEX,SAAS,cAAc,CAAC,EAAM,EAAE,OAAsB;IACpD,2EAA2E;IAC3E,0EAA0E;IAC1E,0CAA0C;IAC1C,MAAM,UAAU,GAAG,oBAAoB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC1D,MAAM,KAAK,GAAI,CAAC,SAAS,EAAE,YAAY,EAAE,aAAa,CAAW,CAAC,MAAM,CACtE,CAAC,IAAI,EAAE,EAAE,CACP,IAAI,KAAK,YAAY;QACrB,OAAO,CAAC,QAAQ,CAAC,IAAI,CACnB,CAAC,OAAO,EAAE,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,UAAU,CAAC,KAAK,YAAY,CAChE,CACJ,CAAC;IACF,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QAChC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,CACtC,CAAC,OAAO,EAAE,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,UAAU,CAAC,KAAK,IAAI,CACxD,CAAC;QACF,OAAO,EAAE,CAAC,MAAM,CAAC;YACf,KAAK,EAAE,GAAG,UAAU,CAAC,IAAI,CAAC,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,MAAM,GAAG;YAC3E,IAAI,EAAE,IAAI;YACV,IAAI,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAoB,EAAE,CAAC;gBAChD,OAAO,CAAC,IAAI;gBACZ;oBACE,YAAY,CAAC,OAAO,CAAC,YAAY,CAAC;oBAClC,OAAO,CAAC,IAAI;oBACZ,aAAa,CAAC,OAAO,CAAC;oBACtB,QAAQ,CAAC,OAAO,CAAC;iBAClB;qBACE,MAAM,CAAC,OAAO,CAAC;qBACf,IAAI,CAAC,KAAK,CAAC;aACf,CAAC;SACH,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,MAAM,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,CAC1C,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,UAAU,KAAK,KAAK,CAC1C,CAAC,MAAM,CAAC;IACT,OAAO;QACL,GAAG,MAAM;QACT,EAAE,CAAC,IAAI,CACL,GAAG,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE;YAC1E,CAAC,YAAY,GAAG,CAAC;gBACf,CAAC,CAAC,KAAK,YAAY,6GAA6G;gBAChI,CAAC,CAAC,EAAE,CAAC;YACP,4HAA4H,CAC/H;KACF,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AACjB,CAAC;AAED,SAAS,aAAa,CAAC,EAAM,EAAE,OAAuB;;IACpD,MAAM,IAAI,GAAkC;QAC1C,CAAC,MAAM,QAAE,OAAO,CAAC,OAAO,mCAAI,GAAG,CAAC;QAChC,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,gBAAgB,CAAC;QAC3E;YACE,QAAQ;YACR,CAAC,YAAY,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC;iBACvD,MAAM,CAAC,OAAO,CAAC;iBACf,IAAI,CAAC,KAAK,CAAC;SACf;KACF,CAAC;IACF,IAAI,OAAO,CAAC,UAAU,KAAK,KAAK,EAAE,CAAC;QACjC,IAAI,CAAC,IAAI,CAAC;YACR,SAAS;YACT,sFAAsF;SACvF,CAAC,CAAC;IACL,CAAC;IACD,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;QACvB,IAAI,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,kBAAkB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IACrE,CAAC;IACD,IAAI,OAAO,CAAC,cAAc,KAAK,IAAI,EAAE,CAAC;QACpC,IAAI,CAAC,IAAI,CAAC,CAAC,iBAAiB,EAAE,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;IACjE,CAAC;IACD,IACE,OAAO,CAAC,eAAe,KAAK,IAAI;QAChC,OAAO,CAAC,eAAe,KAAK,SAAS,EACrC,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,CAAC,kBAAkB,EAAE,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;IACnE,CAAC;IACD,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7B,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAC5D,CAAC;IACD,IAAI,OAAO,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnC,IAAI,CAAC,IAAI,CAAC;YACR,gBAAgB;YAChB,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,EAAE,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;SACnE,CAAC,CAAC;IACL,CAAC;IACD,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;QAC3B,IAAI,CAAC,IAAI,CAAC,CAAC,cAAc,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC;IACtD,CAAC;IACD,IAAI,OAAO,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClC,IAAI,CAAC,IAAI,CAAC;YACR,OAAO;YACP,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,kBAAC;gBAC1C,GAAG,KAAK,GAAG,CAAC,MAAM,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,KAAK,UAAU,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,OAAO,IAAI,CAAC,MAAM,EAAE;oBACjG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC5C,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,WAAW,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1D,GAAG,OAAC,IAAI,CAAC,YAAY,mCAAI,EAAE,CAAC,CAAC,GAAG,CAC9B,CAAC,IAAI,EAAE,SAAS,EAAE,EAAE,CAClB,MAAM,MAAM,CAAC,YAAY,CAAC,EAAE,GAAG,SAAS,CAAC,KAAK,IAAI,EAAE,CACvD;aACF,GAAA,CAAC;SACH,CAAC,CAAC;IACL,CAAC;IAED,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;AACzE,CAAC;AAED,SAAS,aAAa,CAAC,OAAuB;IAC5C,IAAI,OAAO,CAAC,UAAU,KAAK,KAAK;QAAE,OAAO,yBAAyB,CAAC;IACnE,MAAM,KAAK,GAAG;QACZ,OAAO,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI;QACzE,OAAO,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC;YAC5B,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,WAAW,CAAC,MAAM,EAAE,eAAe,CAAC;YACxD,CAAC,CAAC,IAAI;KACT,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAClB,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;;GAGG;AACH,SAAS,QAAQ,CAAC,OAAuB;IACvC,IAAI,OAAO,CAAC,UAAU,KAAK,KAAK;QAAE,OAAO,EAAE,CAAC;IAC5C,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IACnC,IAAI,KAAK;QAAE,OAAO,KAAK,CAAC;IAExB,MAAM,IAAI,GAAG,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC;IACxE,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC;IAC5D,OAAO;QACL,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI;QACjE,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,IAAI;KACvD;SACE,MAAM,CAAC,OAAO,CAAC;SACf,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,2EAA2E;AAC3E,SAAS,WAAW,CAAC,OAAuB;IAC1C,IAAI,OAAO,CAAC,YAAY,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACpD,IAAI,OAAO,CAAC,YAAY,KAAK,YAAY,EAAE,CAAC;QAC1C,OAAO,8BAA8B,CAAC;IACxC,CAAC;IACD,OAAO,OAAO,CAAC,KAAK;QAClB,CAAC,CAAC,uFAAuF,OAAO,CAAC,IAAI,IAAI;QACzG,CAAC,CAAC,sBAAsB,CAAC;AAC7B,CAAC;AAED;;;;GAIG;AACH,SAAS,kBAAkB,CAAC,UAA6B;IACvD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,QAAQ,UAAU,CAAC,WAAW,EAAE,CAAC;QAC/B,KAAK,QAAQ;YACX,OAAO,CAAC,2CAA2C,CAAC,CAAC;QACvD,KAAK,MAAM;YACT,KAAK,CAAC,IAAI,CACR,sEAAsE,CACvE,CAAC;YACF,MAAM;QACR,KAAK,QAAQ;YACX,KAAK,CAAC,IAAI,CACR,mPAAmP,CACpP,CAAC;YACF,MAAM;IACV,CAAC;IACD,IAAI,UAAU,CAAC,gBAAgB,KAAK,aAAa,EAAE,CAAC;QAClD,KAAK,CAAC,IAAI,CACR,4MAA4M;YAC1M,CAAC,UAAU,CAAC,gBAAgB,KAAK,WAAW;gBAC1C,CAAC,CAAC,kBAAkB;gBACpB,CAAC,CAAC,0BAA0B,CAAC,CAClC,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,SAAS,YAAY,CAAC,IAAiB;IACrC,MAAM,IAAI,GACR,GAAG,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,WAAW,KAAK,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,WAAW,EAAE,GAAG;QAClG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACrD,IAAI,CAAC,IAAI,CAAC,WAAW;QAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IAErC,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;IACzD,MAAM,QAAQ,GAAG,IAAI,GAAG,CACtB,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC;QACtC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,MAAM,CAC9B,CAAC,GAAG,EAAiB,EAAE,CAAC,OAAO,GAAG,KAAK,QAAQ,CAChD;QACH,CAAC,CAAC,EAAE,CACP,CAAC;IACF,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE;QAC7D,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;QACjC,MAAM,IAAI,GAAG,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;QACtE,MAAM,WAAW,GACf,OAAO,QAAQ,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC;QACzE,OAAO,CACL,MAAM,GAAG,EAAE;YACX,CAAC,IAAI,EAAE,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC;iBAC1C,MAAM,CAAC,OAAO,CAAC;iBACf,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;iBAC/D,IAAI,CAAC,EAAE,CAAC;YACX,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CACzC,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;AACpE,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACzE,CAAC,CAAE,KAAiC;QACpC,CAAC,CAAC,EAAE,CAAC;AACT,CAAC","sourcesContent":["import type {\n  CatalogConnection,\n  CatalogProduct,\n  CatalogSetupStep,\n  CatalogTool,\n  SourceCatalog,\n} from '@ekanos/integration-schema';\n\nimport { loginHint } from '../auth/host-trust';\nimport {\n  type AuthEnvironment,\n  refreshStoredSession,\n  requireSession,\n  resolveAuthEnvironment,\n} from '../auth/session';\nimport {\n  type FetchSourceCatalogResult,\n  fetchSourceCatalog,\n} from '../catalog-api';\nimport type { CliContext } from '../context';\nimport { authRequiredError } from '../errors';\nimport type { ExitCode } from '../exit-codes';\nimport { hostPredatesFeatures, productGroup } from '../product-kinds';\nimport { resolveSourceTarget } from '../source-target';\nimport { type Ui, pluralize } from '../ui';\nimport { withDocsHint } from './agents-init';\n\nexport interface CatalogArgs {\n  host?: string;\n  source?: string;\n  /** One product's detail, when given. */\n  product?: string;\n  dir: string;\n  env: Record<string, string | undefined>;\n}\n\n/**\n * `catalog` — what the Source can already do (plan 239.0). Lists every\n * product the Source can use, Experiences then Integrations as `ekanos\n * sources products` splits them, with its tools, agent events and the steps\n * left to set it up; `ekanos catalog <product>` shows one in full, with each\n * tool's inputs and whose connection an agent run uses.\n *\n * Read before building: an agent migration asks it first, so a capability\n * the Source already has is set up rather than rebuilt. Works outside a\n * project — the Source comes from `--source`, else `ekanos.json`, else the\n * caller's only seat.\n */\nexport async function runCatalog(\n  ctx: CliContext,\n  args: CatalogArgs,\n): Promise<ExitCode> {\n  const env = resolveAuthEnvironment(ctx, args.host, args.env, {\n    projectDir: args.dir,\n  });\n  let session = requireSession(env);\n\n  const resolved = await resolveSourceTarget(env, session, args);\n  session = resolved.session;\n\n  const query = { source: resolved.source, product: args.product };\n  let result = await fetchSourceCatalog(env.host, session.accessToken, query);\n  if (result.status === 'unauthorized') {\n    session = await refreshStoredSession(env, session);\n    result = await fetchSourceCatalog(env.host, session.accessToken, query);\n  }\n  const catalog = requireCatalog(result, env);\n\n  // The agent-design tip belongs on the overview only, not every product.\n  return ctx.succeed(\n    { host: env.host, ...catalog },\n    args.product\n      ? productDetail(ctx.ui, catalog.products[0]!)\n      : withDocsHint(ctx.ui, args.dir, catalogSummary(ctx.ui, catalog)),\n  );\n}\n\nfunction requireCatalog(\n  result: FetchSourceCatalogResult,\n  env: AuthEnvironment,\n): SourceCatalog {\n  if (result.status === 'ok') return result.catalog;\n  throw authRequiredError(\n    `The session for ${env.host} could not authorize the catalog read.`,\n    loginHint(env),\n  );\n}\n\nconst STATUS_LABEL = {\n  enabled: 'Enabled on this Source',\n  'turned-off': 'Not enabled — granted, but a Flag or plan switches it off',\n  available: 'Not enabled',\n} as const;\n\nconst SHORT_STATUS = {\n  enabled: '✓ enabled',\n  'turned-off': '✗ switched off',\n  available: '✗ not enabled',\n} as const;\n\n/** Who does a setup step, in words. The wire value `ekanos` is Vastly. */\nconst ACTOR_LABEL = {\n  ekanos: 'Vastly',\n  source_admin: 'Source admin',\n  team: 'team',\n} as const;\n\n/** A `team` step on a per-person product is each person's to do. */\nfunction actorLabel(\n  actor: CatalogSetupStep['actor'],\n  product: CatalogProduct,\n): string {\n  return actor === 'team' && product.scope === 'user'\n    ? 'each person'\n    : ACTOR_LABEL[actor];\n}\n\nconst KIND_TITLE = {\n  feature: 'Features',\n  experience: 'Experiences',\n  integration: 'Integrations',\n} as const;\n\nfunction catalogSummary(ui: Ui, catalog: SourceCatalog): string {\n  // The same split as `ekanos sources products`: Features, Experiences (only\n  // when there are any), then Integrations. A host from before the Features\n  // rename calls a Feature an `experience`.\n  const legacyHost = hostPredatesFeatures(catalog.products);\n  const kinds = (['feature', 'experience', 'integration'] as const).filter(\n    (kind) =>\n      kind !== 'experience' ||\n      catalog.products.some(\n        (product) => productGroup(product, legacyHost) === 'experience',\n      ),\n  );\n  const blocks = kinds.map((kind) => {\n    const products = catalog.products.filter(\n      (product) => productGroup(product, legacyHost) === kind,\n    );\n    return ui.result({\n      title: `${KIND_TITLE[kind]} on ${catalog.source.slug} (${products.length})`,\n      tone: 'ok',\n      rows: products.map((product): [string, string] => [\n        product.slug,\n        [\n          SHORT_STATUS[product.availability],\n          product.name,\n          describeShape(product),\n          nextStep(product),\n        ]\n          .filter(Boolean)\n          .join(' · '),\n      ]),\n    });\n  });\n\n  const unregistered = catalog.products.filter(\n    (product) => product.registered === false,\n  ).length;\n  return [\n    ...blocks,\n    ui.hint(\n      `${pluralize(catalog.products.length, 'product')} on ${catalog.source.slug}` +\n        (unregistered > 0\n          ? `, ${unregistered} with no package on this host (listed so this matches \"ekanos sources products\"; nothing here can use them)`\n          : '') +\n        `. \"ekanos catalog <product>\" shows tools with their inputs, whose connection agent runs use, agent events and setup steps.`,\n    ),\n  ].join('\\n\\n');\n}\n\nfunction productDetail(ui: Ui, product: CatalogProduct): string {\n  const rows: [string, string | string[]][] = [\n    ['What', product.summary ?? '—'],\n    ['Kind', product.kind === 'integration' ? 'Integration' : 'Ekanos Feature'],\n    [\n      'Status',\n      [STATUS_LABEL[product.availability], enableNeeds(product)]\n        .filter(Boolean)\n        .join(' — '),\n    ],\n  ];\n  if (product.registered === false) {\n    rows.push([\n      'Package',\n      'None on this host — nothing here can use it until a build that ships it is deployed.',\n    ]);\n  }\n  if (product.connection) {\n    rows.push(['Connections', describeConnection(product.connection)]);\n  }\n  if (product.connectedTeams !== null) {\n    rows.push(['Teams connected', String(product.connectedTeams)]);\n  }\n  if (\n    product.connectedPeople !== null &&\n    product.connectedPeople !== undefined\n  ) {\n    rows.push(['People connected', String(product.connectedPeople)]);\n  }\n  if (product.tools.length > 0) {\n    rows.push(['Tools', product.tools.flatMap(describeTool)]);\n  }\n  if (product.agentEvents.length > 0) {\n    rows.push([\n      'Agent triggers',\n      product.agentEvents.map((event) => `${event.id} — ${event.label}`),\n    ]);\n  }\n  if (product.agentReplyTool) {\n    rows.push(['Replies with', product.agentReplyTool]);\n  }\n  if (product.setupSteps.length > 0) {\n    rows.push([\n      'Setup',\n      product.setupSteps.flatMap((step, index) => [\n        `${index + 1}. [${step.state}] ${step.title} (${actorLabel(step.actor, product)}) — ${step.detail}` +\n          (step.guideUrl ? ` ${step.guideUrl}` : ''),\n        ...(step.consoleUrl ? [`   Open ${step.consoleUrl}`] : []),\n        ...(step.instructions ?? []).map(\n          (line, lineIndex) =>\n            `   ${String.fromCharCode(97 + lineIndex)}. ${line}`,\n        ),\n      ]),\n    ]);\n  }\n\n  return ui.result({ title: `${product.name} (${product.slug})`, rows });\n}\n\nfunction describeShape(product: CatalogProduct): string {\n  if (product.registered === false) return 'no package on this host';\n  const parts = [\n    product.tools.length > 0 ? pluralize(product.tools.length, 'tool') : null,\n    product.agentEvents.length > 0\n      ? pluralize(product.agentEvents.length, 'agent trigger')\n      : null,\n  ].filter(Boolean);\n  return parts.join(', ');\n}\n\n/**\n * What stands between the Source and using it. A product only Vastly can\n * enable says so instead of counting steps nobody on the Source can take.\n */\nfunction nextStep(product: CatalogProduct): string {\n  if (product.registered === false) return '';\n  const needs = enableNeeds(product);\n  if (needs) return needs;\n\n  const open = product.setupSteps.filter((step) => step.state === 'todo');\n  const ours = open.filter((step) => step.actor !== 'ekanos');\n  return [\n    ours.length > 0 ? `${pluralize(ours.length, 'step')} left` : null,\n    ours.length < open.length ? 'waiting on Vastly' : null,\n  ]\n    .filter(Boolean)\n    .join(', ');\n}\n\n/** Who has to enable a product that is not enabled, or null when it is. */\nfunction enableNeeds(product: CatalogProduct): string | null {\n  if (product.availability === 'enabled') return null;\n  if (product.availability === 'turned-off') {\n    return 'needs Vastly to switch it on';\n  }\n  return product.owned\n    ? `built by this Source — its Source admin enables it (\"ekanos sources products enable ${product.slug}\")`\n    : 'needs a Vastly grant';\n}\n\n/**\n * Whose connection a product's calls use: the team's, each person's own (on a\n * team or provided agent, the creator's, lent to whoever the run acts for),\n * or the Source's, when a Source admin connected it once for every team.\n */\nfunction describeConnection(connection: CatalogConnection): string[] {\n  const lines: string[] = [];\n  switch (connection.connectedBy) {\n    case 'nobody':\n      return ['Nothing to connect — it works as shipped.'];\n    case 'team':\n      lines.push(\n        \"Each team connects its own. An agent run uses its team's connection.\",\n      );\n      break;\n    case 'person':\n      lines.push(\n        \"Each person connects their own. An agent run uses its creator's own connection — on a personal agent that is the person it runs for, including its schedule and webhook runs; on a team or provided agent it is lent to whoever the run acts for.\",\n      );\n      break;\n  }\n  if (connection.sourceConnection !== 'unsupported') {\n    lines.push(\n      `A Source admin can connect it once for every team (\"ekanos apps connect\"): a provided agent whose template marks it Source-owned then uses the Source's connection, limited to the team's routed records. ` +\n        (connection.sourceConnection === 'connected'\n          ? 'This Source has.'\n          : 'This Source has not yet.'),\n    );\n  }\n  return lines;\n}\n\n/**\n * A tool, then its inputs one per line from its JSON schema — what an agent\n * designer needs to see which other tool supplies an id.\n */\nfunction describeTool(tool: CatalogTool): string[] {\n  const head =\n    `${tool.name} (${tool.effect}${tool.sensitivity === 'undeclared' ? '' : `, ${tool.sensitivity}`})` +\n    (tool.description ? ` — ${tool.description}` : '');\n  if (!tool.inputSchema) return [head];\n\n  const properties = asRecord(tool.inputSchema.properties);\n  const required = new Set(\n    Array.isArray(tool.inputSchema.required)\n      ? tool.inputSchema.required.filter(\n          (key): key is string => typeof key === 'string',\n        )\n      : [],\n  );\n  const inputs = Object.entries(properties).map(([key, value]) => {\n    const property = asRecord(value);\n    const type = typeof property.type === 'string' ? property.type : null;\n    const description =\n      typeof property.description === 'string' ? property.description : null;\n    return (\n      `   ${key}` +\n      [type, required.has(key) ? 'required' : null]\n        .filter(Boolean)\n        .map((part, index) => (index === 0 ? `: ${part}` : `, ${part}`))\n        .join('') +\n      (description ? ` — ${description}` : '')\n    );\n  });\n  return [head, ...(inputs.length > 0 ? inputs : ['   no inputs'])];\n}\n\nfunction asRecord(value: unknown): Record<string, unknown> {\n  return typeof value === 'object' && value !== null && !Array.isArray(value)\n    ? (value as Record<string, unknown>)\n    : {};\n}\n"]}

package/dist/commands/names.d.ts

@@ -0,0 +1,19 @@
+import type { CliContext } from '../context.js';
+import type { ExitCode } from '../exit-codes.js';
+export declare const NAMES_SUBCOMMANDS: readonly ['claim', 'status'];
+export interface NamesArgs {
+    host?: string;
+    source?: string;
+    /** `claim <slug>`, `status <slug>`. */
+    positionals: readonly string[];
+    reason?: string;
+    dir: string;
+    env: Record<string, string | undefined>;
+}
+/**
+ * `names` - a global package name is approved by a super admin. `claim`
+ * requests one for a slug; `status` says where the request stands. A package
+ * that is not global needs no claim: it is named under the Source's own
+ * namespace.
+ */
+export declare function runNames(ctx: CliContext, args: NamesArgs): Promise<ExitCode>;

package/dist/commands/names.js

@@ -0,0 +1,122 @@
+import { SLUG_PATTERN } from '@ekanos/integration-schema';
+import { loginHint } from '../auth/host-trust.js';
+import { refreshStoredSession, requireSession, resolveAuthEnvironment, } from '../auth/session.js';
+import { authRequiredError, usageError } from '../errors.js';
+import { getNameClaim, requestNameClaim, } from '../names-api.js';
+import { resolveSourceTarget } from '../source-target.js';
+export const NAMES_SUBCOMMANDS = ['claim', 'status'];
+const USAGE = 'Run one of: ekanos names claim <slug> [--reason <text>] [--source <slug>], ekanos names status <slug> [--source <slug>].';
+/**
+ * `names` - a global package name is approved by a super admin. `claim`
+ * requests one for a slug; `status` says where the request stands. A package
+ * that is not global needs no claim: it is named under the Source's own
+ * namespace.
+ */
+export async function runNames(ctx, args) {
+    var _a;
+    const [rawSubcommand, rawSlug, ...extra] = args.positionals;
+    const subcommand = parseSubcommand(rawSubcommand);
+    if (extra.length > 0) {
+        throw usageError(`Unexpected argument "${extra[0]}".`, USAGE);
+    }
+    if (subcommand === 'status' && args.reason !== undefined) {
+        throw usageError('names status takes no --reason.', USAGE);
+    }
+    const slug = requireSlug(rawSlug, subcommand);
+    const reason = ((_a = args.reason) === null || _a === void 0 ? void 0 : _a.trim()) || undefined;
+    const env = resolveAuthEnvironment(ctx, args.host, args.env, {
+        projectDir: args.dir,
+    });
+    const resolved = await resolveSourceTarget(env, requireSession(env), args);
+    const call = withOneRefresh(env, resolved.session);
+    const source = resolved.source;
+    if (subcommand === 'claim') {
+        const claim = await call((token) => requestNameClaim(env.host, token, Object.assign({ source,
+            slug }, (reason ? { reason } : {}))));
+        return ctx.succeed(Object.assign({ host: env.host, source }, claim), ctx.ui.result({
+            title: `Requested the global name ${claim.slug}`,
+            tone: 'ok',
+            rows: [
+                ['Name', claim.slug],
+                ['Status', claim.status],
+                ['Source', source],
+            ],
+            notes: [
+                'A super admin decides it. Check with "ekanos names status ' +
+                    `${claim.slug}".`,
+                'Until it is approved, publish restricted: the package is named under your Source namespace.',
+            ],
+        }));
+    }
+    const status = await call((token) => getNameClaim(env.host, token, source, slug));
+    return ctx.succeed(Object.assign({ host: env.host, source }, status), ctx.ui.result({
+        title: statusTitle(status),
+        tone: status.status === 'approved' ? 'ok' : 'warn',
+        rows: [
+            ['Name', status.slug],
+            ['Status', status.status],
+            ...(status.requestedAt
+                ? [['Requested', status.requestedAt]]
+                : []),
+            ...(status.decidedAt ? [['Decided', status.decidedAt]] : []),
+            ...(status.reason ? [['Reason', status.reason]] : []),
+        ],
+        notes: statusNotes(status),
+    }));
+}
+function statusTitle(status) {
+    switch (status.status) {
+        case 'none':
+            return `No claim for ${status.slug}`;
+        case 'requested':
+            return `The claim for ${status.slug} is waiting for a super admin`;
+        case 'approved':
+            return `${status.slug} is an approved global name`;
+        case 'rejected':
+            return `The claim for ${status.slug} was rejected`;
+    }
+}
+function statusNotes(status) {
+    switch (status.status) {
+        case 'none':
+            return [`Request it: "ekanos names claim ${status.slug}".`];
+        case 'requested':
+            return ['Publish restricted in the meantime.'];
+        case 'approved':
+            return ['Publish with availability.mode "global" in ekanos.json.'];
+        case 'rejected':
+            return [
+                'Publish restricted under your Source namespace, or claim a different name.',
+            ];
+    }
+}
+function withOneRefresh(env, initial) {
+    let session = initial;
+    return async (send) => {
+        let result = await send(session.accessToken);
+        if (result.status === 'unauthorized') {
+            session = await refreshStoredSession(env, session);
+            result = await send(session.accessToken);
+        }
+        if (result.status === 'ok')
+            return result.data;
+        throw authRequiredError(`The session for ${env.host} could not authorize the names call.`, loginHint(env));
+    };
+}
+function parseSubcommand(value) {
+    const match = NAMES_SUBCOMMANDS.find((name) => name === value);
+    if (match)
+        return match;
+    throw usageError(value
+        ? `Unknown names subcommand "${value}".`
+        : 'names needs a subcommand.', USAGE);
+}
+function requireSlug(value, subcommand) {
+    const slug = value === null || value === void 0 ? void 0 : value.trim().toLowerCase();
+    if (slug && SLUG_PATTERN.test(slug))
+        return slug;
+    throw usageError(value
+        ? `"${value}" is not a package slug (kebab-case, no namespace).`
+        : 'Name the package slug.', `e.g. "ekanos names ${subcommand} google-drive". ekanos.json keeps the bare slug.`);
+}
+//# sourceMappingURL=names.js.map

package/dist/commands/names.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"names.js","sourceRoot":"","sources":["../../src/commands/names.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAG1D,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAEL,oBAAoB,EACpB,cAAc,EACd,sBAAsB,GACvB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAE1D,OAAO,EAGL,YAAY,EACZ,gBAAgB,GACjB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAEvD,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAU,CAAC;AAG9D,MAAM,KAAK,GACT,0HAA0H,CAAC;AAY7H;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,GAAe,EACf,IAAe;;IAEf,MAAM,CAAC,aAAa,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC;IAC5D,MAAM,UAAU,GAAG,eAAe,CAAC,aAAa,CAAC,CAAC;IAClD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,UAAU,CAAC,wBAAwB,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAChE,CAAC;IACD,IAAI,UAAU,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACzD,MAAM,UAAU,CAAC,iCAAiC,EAAE,KAAK,CAAC,CAAC;IAC7D,CAAC;IACD,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAG,CAAA,MAAA,IAAI,CAAC,MAAM,0CAAE,IAAI,EAAE,KAAI,SAAS,CAAC;IAEhD,MAAM,GAAG,GAAG,sBAAsB,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE;QAC3D,UAAU,EAAE,IAAI,CAAC,GAAG;KACrB,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,GAAG,EAAE,cAAc,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;IAC3E,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;IAE/B,IAAI,UAAU,KAAK,OAAO,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CACjC,gBAAgB,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,kBAC9B,MAAM;YACN,IAAI,IACD,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAC7B,CACH,CAAC;QAEF,OAAO,GAAG,CAAC,OAAO,iBACd,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,IAAK,KAAK,GAClC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC;YACZ,KAAK,EAAE,6BAA6B,KAAK,CAAC,IAAI,EAAE;YAChD,IAAI,EAAE,IAAI;YACV,IAAI,EAAE;gBACJ,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC;gBACpB,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC;gBACxB,CAAC,QAAQ,EAAE,MAAM,CAAC;aACnB;YACD,KAAK,EAAE;gBACL,4DAA4D;oBAC1D,GAAG,KAAK,CAAC,IAAI,IAAI;gBACnB,6FAA6F;aAC9F;SACF,CAAC,CACH,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAClC,YAAY,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,CAC5C,CAAC;IAEF,OAAO,GAAG,CAAC,OAAO,iBACd,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,IAAK,MAAM,GACnC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC;QACZ,KAAK,EAAE,WAAW,CAAC,MAAM,CAAC;QAC1B,IAAI,EAAE,MAAM,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM;QAClD,IAAI,EAAE;YACJ,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC;YACrB,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC;YACzB,GAAG,CAAC,MAAM,CAAC,WAAW;gBACpB,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,MAAM,CAAC,WAAW,CAAU,CAAC;gBAC9C,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,MAAM,CAAC,SAAS,CAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACrE,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;SAC/D;QACD,KAAK,EAAE,WAAW,CAAC,MAAM,CAAC;KAC3B,CAAC,CACH,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,MAAuB;IAC1C,QAAQ,MAAM,CAAC,MAAM,EAAE,CAAC;QACtB,KAAK,MAAM;YACT,OAAO,gBAAgB,MAAM,CAAC,IAAI,EAAE,CAAC;QACvC,KAAK,WAAW;YACd,OAAO,iBAAiB,MAAM,CAAC,IAAI,+BAA+B,CAAC;QACrE,KAAK,UAAU;YACb,OAAO,GAAG,MAAM,CAAC,IAAI,6BAA6B,CAAC;QACrD,KAAK,UAAU;YACb,OAAO,iBAAiB,MAAM,CAAC,IAAI,eAAe,CAAC;IACvD,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,MAAuB;IAC1C,QAAQ,MAAM,CAAC,MAAM,EAAE,CAAC;QACtB,KAAK,MAAM;YACT,OAAO,CAAC,mCAAmC,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC;QAC9D,KAAK,WAAW;YACd,OAAO,CAAC,qCAAqC,CAAC,CAAC;QACjD,KAAK,UAAU;YACb,OAAO,CAAC,yDAAyD,CAAC,CAAC;QACrE,KAAK,UAAU;YACb,OAAO;gBACL,4EAA4E;aAC7E,CAAC;IACN,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,GAAoB,EAAE,OAAsB;IAClE,IAAI,OAAO,GAAG,OAAO,CAAC;IAEtB,OAAO,KAAK,EACV,IAAyD,EAC7C,EAAE;QACd,IAAI,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAC7C,IAAI,MAAM,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;YACrC,OAAO,GAAG,MAAM,oBAAoB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YACnD,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAC3C,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI;YAAE,OAAO,MAAM,CAAC,IAAI,CAAC;QAC/C,MAAM,iBAAiB,CACrB,mBAAmB,GAAG,CAAC,IAAI,sCAAsC,EACjE,SAAS,CAAC,GAAG,CAAC,CACf,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,KAAyB;IAChD,MAAM,KAAK,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC;IAC/D,IAAI,KAAK;QAAE,OAAO,KAAK,CAAC;IACxB,MAAM,UAAU,CACd,KAAK;QACH,CAAC,CAAC,6BAA6B,KAAK,IAAI;QACxC,CAAC,CAAC,2BAA2B,EAC/B,KAAK,CACN,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAClB,KAAyB,EACzB,UAA2B;IAE3B,MAAM,IAAI,GAAG,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,IAAI,GAAG,WAAW,EAAE,CAAC;IACzC,IAAI,IAAI,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACjD,MAAM,UAAU,CACd,KAAK;QACH,CAAC,CAAC,IAAI,KAAK,qDAAqD;QAChE,CAAC,CAAC,wBAAwB,EAC5B,sBAAsB,UAAU,kDAAkD,CACnF,CAAC;AACJ,CAAC","sourcesContent":["import { SLUG_PATTERN } from '@ekanos/integration-schema';\n\nimport type { StoredSession } from '../auth/credential-store';\nimport { loginHint } from '../auth/host-trust';\nimport {\n  type AuthEnvironment,\n  refreshStoredSession,\n  requireSession,\n  resolveAuthEnvironment,\n} from '../auth/session';\nimport type { CliContext } from '../context';\nimport { authRequiredError, usageError } from '../errors';\nimport type { ExitCode } from '../exit-codes';\nimport {\n  type NameClaimStatus,\n  type NamesApiResult,\n  getNameClaim,\n  requestNameClaim,\n} from '../names-api';\nimport { resolveSourceTarget } from '../source-target';\n\nexport const NAMES_SUBCOMMANDS = ['claim', 'status'] as const;\ntype NamesSubcommand = (typeof NAMES_SUBCOMMANDS)[number];\n\nconst USAGE =\n  'Run one of: ekanos names claim <slug> [--reason <text>] [--source <slug>], ekanos names status <slug> [--source <slug>].';\n\nexport interface NamesArgs {\n  host?: string;\n  source?: string;\n  /** `claim <slug>`, `status <slug>`. */\n  positionals: readonly string[];\n  reason?: string;\n  dir: string;\n  env: Record<string, string | undefined>;\n}\n\n/**\n * `names` - a global package name is approved by a super admin. `claim`\n * requests one for a slug; `status` says where the request stands. A package\n * that is not global needs no claim: it is named under the Source's own\n * namespace.\n */\nexport async function runNames(\n  ctx: CliContext,\n  args: NamesArgs,\n): Promise<ExitCode> {\n  const [rawSubcommand, rawSlug, ...extra] = args.positionals;\n  const subcommand = parseSubcommand(rawSubcommand);\n  if (extra.length > 0) {\n    throw usageError(`Unexpected argument \"${extra[0]}\".`, USAGE);\n  }\n  if (subcommand === 'status' && args.reason !== undefined) {\n    throw usageError('names status takes no --reason.', USAGE);\n  }\n  const slug = requireSlug(rawSlug, subcommand);\n  const reason = args.reason?.trim() || undefined;\n\n  const env = resolveAuthEnvironment(ctx, args.host, args.env, {\n    projectDir: args.dir,\n  });\n  const resolved = await resolveSourceTarget(env, requireSession(env), args);\n  const call = withOneRefresh(env, resolved.session);\n  const source = resolved.source;\n\n  if (subcommand === 'claim') {\n    const claim = await call((token) =>\n      requestNameClaim(env.host, token, {\n        source,\n        slug,\n        ...(reason ? { reason } : {}),\n      }),\n    );\n\n    return ctx.succeed(\n      { host: env.host, source, ...claim },\n      ctx.ui.result({\n        title: `Requested the global name ${claim.slug}`,\n        tone: 'ok',\n        rows: [\n          ['Name', claim.slug],\n          ['Status', claim.status],\n          ['Source', source],\n        ],\n        notes: [\n          'A super admin decides it. Check with \"ekanos names status ' +\n            `${claim.slug}\".`,\n          'Until it is approved, publish restricted: the package is named under your Source namespace.',\n        ],\n      }),\n    );\n  }\n\n  const status = await call((token) =>\n    getNameClaim(env.host, token, source, slug),\n  );\n\n  return ctx.succeed(\n    { host: env.host, source, ...status },\n    ctx.ui.result({\n      title: statusTitle(status),\n      tone: status.status === 'approved' ? 'ok' : 'warn',\n      rows: [\n        ['Name', status.slug],\n        ['Status', status.status],\n        ...(status.requestedAt\n          ? [['Requested', status.requestedAt] as const]\n          : []),\n        ...(status.decidedAt ? [['Decided', status.decidedAt] as const] : []),\n        ...(status.reason ? [['Reason', status.reason] as const] : []),\n      ],\n      notes: statusNotes(status),\n    }),\n  );\n}\n\nfunction statusTitle(status: NameClaimStatus): string {\n  switch (status.status) {\n    case 'none':\n      return `No claim for ${status.slug}`;\n    case 'requested':\n      return `The claim for ${status.slug} is waiting for a super admin`;\n    case 'approved':\n      return `${status.slug} is an approved global name`;\n    case 'rejected':\n      return `The claim for ${status.slug} was rejected`;\n  }\n}\n\nfunction statusNotes(status: NameClaimStatus): string[] {\n  switch (status.status) {\n    case 'none':\n      return [`Request it: \"ekanos names claim ${status.slug}\".`];\n    case 'requested':\n      return ['Publish restricted in the meantime.'];\n    case 'approved':\n      return ['Publish with availability.mode \"global\" in ekanos.json.'];\n    case 'rejected':\n      return [\n        'Publish restricted under your Source namespace, or claim a different name.',\n      ];\n  }\n}\n\nfunction withOneRefresh(env: AuthEnvironment, initial: StoredSession) {\n  let session = initial;\n\n  return async <T>(\n    send: (accessToken: string) => Promise<NamesApiResult<T>>,\n  ): Promise<T> => {\n    let result = await send(session.accessToken);\n    if (result.status === 'unauthorized') {\n      session = await refreshStoredSession(env, session);\n      result = await send(session.accessToken);\n    }\n    if (result.status === 'ok') return result.data;\n    throw authRequiredError(\n      `The session for ${env.host} could not authorize the names call.`,\n      loginHint(env),\n    );\n  };\n}\n\nfunction parseSubcommand(value: string | undefined): NamesSubcommand {\n  const match = NAMES_SUBCOMMANDS.find((name) => name === value);\n  if (match) return match;\n  throw usageError(\n    value\n      ? `Unknown names subcommand \"${value}\".`\n      : 'names needs a subcommand.',\n    USAGE,\n  );\n}\n\nfunction requireSlug(\n  value: string | undefined,\n  subcommand: NamesSubcommand,\n): string {\n  const slug = value?.trim().toLowerCase();\n  if (slug && SLUG_PATTERN.test(slug)) return slug;\n  throw usageError(\n    value\n      ? `\"${value}\" is not a package slug (kebab-case, no namespace).`\n      : 'Name the package slug.',\n    `e.g. \"ekanos names ${subcommand} google-drive\". ekanos.json keeps the bare slug.`,\n  );\n}\n"]}

package/dist/commands/publish.d.ts

@@ -1,10 +1,12 @@
 import type { Finding } from '@ekanos/integration-schema';
 import type { StoredSession } from '../auth/credential-store.js';
-import { type AuthEnvironment } from '../auth/session.js';
+import { type AuthEnvironment, resolveAuthEnvironment } from '../auth/session.js';
 import type { CliContext } from '../context.js';
 import type { ExitCode } from '../exit-codes.js';
 import { type LoadedProject } from '../project.js';
+import { submitArchive } from '../publish-api.js';
 import { assertSchemaNotSkewed } from '../schema-skew.js';
+import { type SourceSeat } from '../sources-api.js';
 import { checkForUpdate } from '../update-notice.js';
 /**
  * Escalate the checks in `PUBLISH_ERROR_ESCALATIONS` from `warn` to `error`
@@ -48,7 +50,7 @@ export interface PublishArgs {
     all?: boolean;
 }
 /** Where the resolved source slug came from — governs the confirmation rules below. */
-interface SourceResolution {
+export interface SourceResolution {
     source: string;
     /** True iff `--source` was passed THIS invocation. */
     explicit: boolean;
@@ -95,6 +97,37 @@ export interface PreparedSubmission {
  * and the repo verb (which gates every package before submitting any).
  */
 export declare function prepareIntegrationSubmission(ctx: CliContext, args: PublishArgs): Promise<PreparedSubmission>;
+/**
+ * The publish-target verification gate.
+ *
+ * FORBIDDEN (exit 5) whenever the resolved source is not among the caller's
+ * seats — regardless of whether it came from `--source` or ekanos.json.
+ * Beyond that, the confirmation rules branch on how the source was resolved:
+ *
+ *  - `--source` THIS invocation: explicit is consent. Proceed.
+ *  - ekanos.json, exactly one seat held (which must be the match, or the
+ *    FORBIDDEN check above would have already fired): proceed, but say so —
+ *    there is nothing to disambiguate, but the target should never be silent.
+ *  - ekanos.json, multiple seats held: the ambiguous case this mechanism
+ *    exists for. Only when BOTH human (non-JSON) mode AND stdin is a real
+ *    TTY does it print the target and require an explicit y/N confirm
+ *    (`--yes` skips it) — see `canPrompt` below for why stdin matters, not
+ *    just stdout. Every other combination (JSON mode, or human mode with a
+ *    closed/non-interactive stdin) NEVER prompts — it proceeds only with
+ *    `--yes`, otherwise VALIDATION (exit 3) with the seat list, naming
+ *    `--source`, `--yes` and `ekanos use`.
+ */
+export declare function verifyPublishTarget(ctx: CliContext, env: AuthEnvironment, session: StoredSession, args: SourceResolution & {
+    slug: string;
+    version: string;
+    yes: boolean;
+    /** Real interactivity signal for stdin — see `canPrompt` below. */
+    stdinIsTTY: boolean;
+    confirm: (question: string) => Promise<boolean>;
+}): Promise<{
+    sourceSeat: SourceSeat;
+    session: StoredSession;
+}>;
 /**
  * The real, non-test y/N prompt. Reads a line from stdin and writes the
  * question to stderr, so it never touches stdout — the one stream the JSON
@@ -108,6 +141,24 @@ export declare function prepareIntegrationSubmission(ctx: CliContext, args: Publ
  * is only ever invoked behind.
  */
 export declare function promptYesNo(question: string): Promise<boolean>;
+export declare function submitWithOneRefresh(env: ReturnType<typeof resolveAuthEnvironment>, session: StoredSession, payload: Parameters<typeof submitArchive>[2]): Promise<import("../publish-api.js").SubmissionReceipt>;
+/**
+ * Resolve the source slug (flag → ekanos.json) and whether it was given
+ * EXPLICITLY this invocation — the fact `verifyPublishTarget` uses to decide
+ * whether a confirmation is even in play. `flag !== undefined` (rather than
+ * "non-empty after trim") is deliberate: an explicit `--source` that is
+ * effectively empty is still a caller who typed the flag, not one who
+ * fell through to ekanos.json.
+ */
+export declare function resolveSourceSlug(env: AuthEnvironment, session: StoredSession, flag: string | undefined, 
+/** Anything that carries the project's saved `source`: an integration project or an experience's ekanos.json. */
+loaded: {
+    project: {
+        source?: string;
+    };
+}): Promise<SourceResolution & {
+    session: StoredSession;
+}>;
 /**
  * Persist the chosen source AND host into ekanos.json after a SUCCESSFUL
  * publish, so the next publish — and every other host-taking verb — needs no
@@ -145,4 +196,3 @@ export declare function buildManifest(loaded: LoadedProject, files: string[]): s
  * source of truth, the same field npm would publish.
  */
 export declare function readProjectVersion(projectDir: string): string;
-export {};

package/dist/commands/publish.js

@@ -2,13 +2,14 @@ import { findRepoRoot } from '@ekanos/integration-schema/repo';
 import * as fs from 'node:fs';
 import * as path from 'node:path';
 import { refreshStoredSession, requireSession, resolveAuthEnvironment, } from '../auth/session.js';
-import { forbiddenError, gateFailedError, preconditionError, usageError, validationError, } from '../errors.js';
+import { CliError, forbiddenError, gateFailedError, preconditionError, usageError, validationError, } from '../errors.js';
 import { readProjectKind } from '../experience/project.js';
 import { runExperiencePublish } from '../experience/publish.js';
 import { renderFindings } from '../findings-renderer.js';
+import { lookupSlug } from '../names-api.js';
 import { packProject } from '../pack.js';
 import { loadProject, serializeProject } from '../project.js';
-import { MAX_MANIFEST_BYTES, stillUnauthorized, submitArchive, } from '../publish-api.js';
+import { MAX_MANIFEST_BYTES, globalNameUnapprovedError, stillUnauthorized, submitArchive, } from '../publish-api.js';
 import { runRepoPublish } from '../repo/publish.js';
 import { assertSchemaNotSkewed } from '../schema-skew.js';
 import { fetchSeatsWithOneRefresh } from '../seats.js';
@@ -79,6 +80,11 @@ export async function runPublish(ctx, args) {
             dir: args.dir,
             dryRun: args.dryRun === true,
             env: args.env,
+            host: args.host,
+            source: args.source,
+            yes: args.yes,
+            stdinIsTTY: args.stdinIsTTY,
+            confirm: args.confirm,
         });
     }
     const prepared = await prepareIntegrationSubmission(ctx, args);
@@ -120,7 +126,8 @@ export async function runPublish(ctx, args) {
  * the host.
  */
 export async function submitPrepared(ctx, args, prepared) {
-    var _a, _b;
+    var _a;
+    var _b, _c, _d, _e, _f, _g;
     const { loaded, skew, notice, env, version, slug, resolution } = prepared;
     // The 100%-certainty mechanism: confirm the resolved source is one the
     // caller actually holds a seat on — and, when it was resolved IMPLICITLY
@@ -133,10 +140,14 @@ export async function submitPrepared(ctx, args, prepared) {
         slug,
         version,
         yes: args.yes,
-        stdinIsTTY: (_a = args.stdinIsTTY) !== null && _a !== void 0 ? _a : process.stdin.isTTY === true,
-        confirm: (_b = args.confirm) !== null && _b !== void 0 ? _b : promptYesNo,
+        stdinIsTTY: (_b = args.stdinIsTTY) !== null && _b !== void 0 ? _b : process.stdin.isTTY === true,
+        confirm: (_c = args.confirm) !== null && _c !== void 0 ? _c : promptYesNo,
     });
     const source = verified.sourceSeat.slug;
+    const availability = (_a = loaded.project.availability) === null || _a === void 0 ? void 0 : _a.mode;
+    // Say the full name the host will use, and refuse an unapproved global
+    // name, before anything is packed.
+    const lookup = await preflightName(ctx, env, verified.session, source, slug, availability);
     ctx.log(`Packing ${slug}@${version}…`);
     const packed = packProject(loaded.projectDir);
     const manifest = buildManifest(loaded, packed.files);
@@ -144,15 +155,13 @@ export async function submitPrepared(ctx, args, prepared) {
         ctx.log(ctx.ui.ok(`${ctx.ui.glyphs.ok} packed ${slug}@${version} (${packed.files.length} files).`));
     }
     ctx.log(`Submitting to ${env.host} (source "${source}")…`);
-    const receipt = await submitWithOneRefresh(env, verified.session, {
-        source,
+    const receipt = await submitWithOneRefresh(env, verified.session, Object.assign({ source,
         slug,
         version,
-        manifest,
-        archive: packed.archive,
-    });
+        manifest, archive: packed.archive }, (availability ? { availability } : {})));
+    const displayName = (_e = (_d = receipt.displayName) !== null && _d !== void 0 ? _d : lookup === null || lookup === void 0 ? void 0 : lookup.displayName) !== null && _e !== void 0 ? _e : receipt.slug;
     if (!ctx.jsonMode) {
-        ctx.log(ctx.ui.ok(`${ctx.ui.glyphs.ok} submitted ${receipt.slug}@${receipt.version} ` +
+        ctx.log(ctx.ui.ok(`${ctx.ui.glyphs.ok} submitted ${displayName}@${receipt.version} ` +
             `(state "${receipt.state}").`));
     }
     const persisted = persistProjectFields(loaded, source, env.host);
@@ -165,7 +174,7 @@ export async function submitPrepared(ctx, args, prepared) {
                 id: verified.sourceSeat.id,
                 slug: verified.sourceSeat.slug,
                 name: verified.sourceSeat.name,
-            }, slug: receipt.slug, version: receipt.version, submissionId: receipt.submissionId, state: receipt.state, archiveSha256: receipt.archiveSha256, files: packed.files, sourcePersisted: persisted.source, hostPersisted: persisted.host, hostOverride: persisted.hostOverride }, (skew.status === 'project-older'
+            }, slug: receipt.slug, namespace: (_g = (_f = receipt.namespace) !== null && _f !== void 0 ? _f : lookup === null || lookup === void 0 ? void 0 : lookup.namespace) !== null && _g !== void 0 ? _g : null, displayName, version: receipt.version, submissionId: receipt.submissionId, state: receipt.state, archiveSha256: receipt.archiveSha256, files: packed.files, sourcePersisted: persisted.source, hostPersisted: persisted.host, hostOverride: persisted.hostOverride }, (skew.status === 'project-older'
             ? {
                 schemaSkew: {
                     status: skew.status,
@@ -177,7 +186,7 @@ export async function submitPrepared(ctx, args, prepared) {
         human: ctx.ui.result({
             title: 'Submitted',
             rows: [
-                ['Integration', `${receipt.slug}@${receipt.version}`],
+                ['Integration', `${displayName}@${receipt.version}`],
                 ['State', receipt.state],
                 ['Source', source],
                 ['Host', shortHost(env.host)],
@@ -200,6 +209,37 @@ export async function submitPrepared(ctx, args, prepared) {
         }),
     };
 }
+/**
+ * Ask the host what it will call this slug for the Source, before packing.
+ * An unapproved global name stops the publish here. Any other answer - an
+ * older host without the route, a server error, a shape this CLI does not
+ * read - is not a reason to stop: the submission itself is authoritative, and
+ * the bare slug stands in for the name.
+ */
+async function preflightName(ctx, env, session, source, slug, availability) {
+    let lookup = null;
+    try {
+        let result = await lookupSlug(env.host, session.accessToken, source, slug, availability);
+        if (result.status === 'unauthorized') {
+            const refreshed = await refreshStoredSession(env, session);
+            result = await lookupSlug(env.host, refreshed.accessToken, source, slug, availability);
+        }
+        if (result.status === 'ok')
+            lookup = result.lookup;
+    }
+    catch (error) {
+        if (!(error instanceof CliError))
+            throw error;
+        ctx.log(`Could not pre-check the name of ${slug} (${error.message}); continuing.`);
+    }
+    if ((lookup === null || lookup === void 0 ? void 0 : lookup.status) === 'global_unapproved') {
+        throw globalNameUnapprovedError(slug);
+    }
+    if ((lookup === null || lookup === void 0 ? void 0 : lookup.displayName) && !ctx.jsonMode) {
+        ctx.log(`Publishing as ${lookup.displayName}.`);
+    }
+    return lookup;
+}
 /**
  * Everything `publish` does before it gates a project: sign-in, load, schema
  * skew, toolchain check, source resolution. Shared by the single-project verb
@@ -256,7 +296,7 @@ export async function prepareIntegrationSubmission(ctx, args) {
  *    `--yes`, otherwise VALIDATION (exit 3) with the seat list, naming
  *    `--source`, `--yes` and `ekanos use`.
  */
-async function verifyPublishTarget(ctx, env, session, args) {
+export async function verifyPublishTarget(ctx, env, session, args) {
     var _a, _b;
     const result = await fetchSeatsWithOneRefresh(env, session);
     if (result.status === 'unauthorized') {
@@ -348,7 +388,7 @@ export async function promptYesNo(question) {
         rl.close();
     }
 }
-async function submitWithOneRefresh(env, session, payload) {
+export async function submitWithOneRefresh(env, session, payload) {
     const first = await submitArchive(env.host, session.accessToken, payload);
     if (first.status === 'ok')
         return first.receipt;
@@ -368,7 +408,9 @@ async function submitWithOneRefresh(env, session, payload) {
  * effectively empty is still a caller who typed the flag, not one who
  * fell through to ekanos.json.
  */
-async function resolveSourceSlug(env, session, flag, loaded) {
+export async function resolveSourceSlug(env, session, flag, 
+/** Anything that carries the project's saved `source`: an integration project or an experience's ekanos.json. */
+loaded) {
     const explicit = flag !== undefined;
     const raw = flag !== null && flag !== void 0 ? flag : loaded.project.source;
     if (!raw || raw.trim().length === 0) {