@everfur/cli 0.6.0 → 0.7.0

package/dist/{chunk-GDH5F4QE.js → chunk-DE7AGMJD.js}

@@ -4832,7 +4832,7 @@ function sdkInstallSpec() {
   return `${SDK_PACKAGE}@^${SDK_MIN_VERSION}` ;
 }
 var SDK_PACKAGE_PLATFORMS = /* @__PURE__ */ new Set(["expo-managed", "bare-react-native", "web"]);
-var SDK_MIN_VERSION = "0.10.0";
+var SDK_MIN_VERSION = "0.11.0";
 var SDK_WEB_MIN_VERSION = SDK_MIN_VERSION;
 var SDK_TELEVET_MIN_VERSION = SDK_MIN_VERSION;
 function sdkInstallSpecFor(options) {
@@ -5433,7 +5433,7 @@ function booleanAttribute(outcome, key) {
 }
 
 // src/version.ts
-var CLI_VERSION = "0.6.0";
+var CLI_VERSION = "0.7.0";
 var CLI_PUBLISHED_VERSION = "0.5.0";
 
 // src/commands/diagnose/reasons.ts
@@ -13823,8 +13823,8 @@ function planIntegration(input) {
 // src/registry/sdk/client/contract/contract.generated.ts
 var CONTRACT_SOURCE = Object.freeze({
   digestAlgorithm: "sha256",
-  digest: "6863b6fba6f545dab1877fa04badc35737f987d60c7bfbcfa94d09793d25237b",
-  generatedAt: "2026-10-06T14:37:02Z",
+  digest: "860245ebc1d82ec87e76bd5d9eb33d845fddc73ab1998b9e7b67457defe81f48",
+  generatedAt: "2026-10-07T05:52:37Z",
   capabilitySchemaVersion: 1,
   errorSchemaVersion: 1
 });
@@ -13896,6 +13896,7 @@ var CONTRACT_RETRYABILITY = Object.freeze([
   Object.freeze({ wireCode: "records_consent_required", envelope: "http_envelope", httpStatus: 409, retryable: false }),
   Object.freeze({ wireCode: "sandbox_only", envelope: "http_envelope", httpStatus: 403, retryable: false }),
   Object.freeze({ wireCode: "session_required", envelope: "http_envelope", httpStatus: 403, retryable: false }),
+  Object.freeze({ wireCode: "session_revoked", envelope: "http_envelope", httpStatus: 401, retryable: false }),
   Object.freeze({ wireCode: "share_limit_reached", envelope: "http_envelope", httpStatus: 429, retryable: false }),
   Object.freeze({ wireCode: "slow_down", envelope: "oauth_error", httpStatus: 429, retryable: true }),
   Object.freeze({ wireCode: "species_unsupported", envelope: "http_envelope", httpStatus: 422, retryable: false }),
@@ -13907,6 +13908,7 @@ var CONTRACT_RETRYABILITY = Object.freeze([
   Object.freeze({ wireCode: "token_invalid", envelope: "http_envelope", httpStatus: 422, retryable: false }),
   Object.freeze({ wireCode: "unavailable", envelope: "sse_frame", httpStatus: 200, retryable: true }),
   Object.freeze({ wireCode: "unavailable", envelope: "http_envelope", httpStatus: 503, retryable: true }),
+  Object.freeze({ wireCode: "unrestrictedKeyRequired", envelope: "http_envelope", httpStatus: 403, retryable: false }),
   Object.freeze({ wireCode: "unsupported_grant_type", envelope: "oauth_error", httpStatus: 400, retryable: false }),
   Object.freeze({ wireCode: "unsupported_response_type", envelope: "oauth_error", httpStatus: 302, retryable: false }),
   Object.freeze({ wireCode: "verify_mint_rate_limited", envelope: "http_envelope", httpStatus: 429, retryable: true }),
@@ -13947,6 +13949,13 @@ var NORMALIZED_FOLD = Object.freeze({
   authExpired: "authExpired",
   unavailable: "serviceUnavailable",
   session_required: "sessionRequired",
+  // The partner revoked this member's sessions (POST /widget/v1/sessions/revoke, or a member erasure) and
+  // this bearer predates the revocation. It folds to `authExpired`, NOT `authRejected`: the registry says
+  // the SDK's single refresh mints a new session, which works whenever the partner backend still mints one
+  // for this member, so it takes the same 401 -> re-mint -> replay-once path as an expired token. A refused
+  // re-mint, or a second 401 after it, settles `authRejected` and raises `session_expired` as before, so it
+  // cannot spin a refresh loop. A failed revocation check answers 503 `unavailable`, never this code.
+  session_revoked: "authExpired",
   accessDenied: "accessDenied",
   invalidRequest: "sdkUpdateRequired",
   // the session mints (POST /widget/v1/sessions and the identity bridge): a refused credential is the
@@ -13956,6 +13965,10 @@ var NORMALIZED_FOLD = Object.freeze({
   rateLimited: "rateLimited",
   // a restricted key without the route's capability: a 403 that a retry or a fresh token cannot fix
   insufficientCapability: "accessDenied",
+  // POST /widget/v1/sessions/revoke called with a restricted key: only the unrestricted secret key may
+  // revoke, decided on the key's shape alone. A partner_server 403 that no retry or fresh token fixes, so it
+  // folds with `insufficientCapability`. It never reaches a device runtime.
+  unrestrictedKeyRequired: "accessDenied",
   // the partner events server surface (POST/GET /partners/events). Every one is a non-retryable input
   // fault, so each folds to validationFailed; the 413 matches the ValidationException the rest of the API
   // answers for an oversized body. `idempotency_key_reused` is the same client bug as
@@ -14313,12 +14326,12 @@ function userFacingError(code) {
 var MANIFEST_default = {
   sdk: {
     name: "@everfur/sdk",
-    version: "0.10.0"
+    version: "0.11.0"
   },
   files: [
     {
       path: "client/contract/contract.generated.ts",
-      sha256: "9462084408bec0fcd65d3b5f0403655b223135bc5f0994a49c6cf361592275bb"
+      sha256: "7d0a933511698d009787ae98833f9ac4be12f49b4157d710bdff3dac758f4a92"
     },
     {
       path: "client/errors/EverfurError.ts",
@@ -14330,7 +14343,7 @@ var MANIFEST_default = {
     },
     {
       path: "client/errors/contract.ts",
-      sha256: "a8503124b5feffd6c10c2d25af5708bdc24fbc774a7ead26dd1c4594184e7e1f"
+      sha256: "eb68d4729cf54c7d6935096cef1372cbdbfbc34f73b7b5b436302506a5204cc7"
     },
     {
       path: "client/theme/adjustments.ts",

package/dist/{chunk-KIX4GJKB.js → chunk-SD2FC3O6.js}

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { buildServer } from './chunk-REQLWFQZ.js';
+import { buildServer } from './chunk-YTDADMVX.js';
 import { createServer } from 'http';
 import { timingSafeEqual } from 'crypto';
 import { StreamableHTTPServerTransport } from '@modelcontextprotocol/sdk/server/streamableHttp.js';

package/dist/{chunk-4WAGFCO2.js → chunk-VNPBR7JA.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
-import { hostnameOf, listen, close, writeJson, serveStatelessMcp } from './chunk-KIX4GJKB.js';
-import { createHostedTokenVerifier, tokenBucketOf, isAccessTokenShaped, buildServer, MCP_SCOPE, tenantContextOf, sendTestUserRef, hostedVerifyUserRef, REVOKED_AUTHORIZATION_REMEDY, SYNTHETIC_USER_REF_PREFIX } from './chunk-REQLWFQZ.js';
-import { BASE_URL_ENV_VAR, resolveEndpoint, fetchTransport, systemClock, createApiClient, withPrefix, ephemeralCredential, validateContractText, isJsonObject, describeFailure } from './chunk-GDH5F4QE.js';
+import { hostnameOf, listen, close, writeJson, serveStatelessMcp } from './chunk-SD2FC3O6.js';
+import { createHostedTokenVerifier, tokenBucketOf, isAccessTokenShaped, buildServer, MCP_SCOPE, tenantContextOf, sendTestUserRef, hostedVerifyUserRef, REVOKED_AUTHORIZATION_REMEDY, SYNTHETIC_USER_REF_PREFIX } from './chunk-YTDADMVX.js';
+import { BASE_URL_ENV_VAR, resolveEndpoint, fetchTransport, systemClock, createApiClient, withPrefix, ephemeralCredential, validateContractText, isJsonObject, describeFailure } from './chunk-DE7AGMJD.js';
 import { createServer } from 'http';
 import { InvalidTokenError, TooManyRequestsError, TemporarilyUnavailableError } from '@modelcontextprotocol/sdk/server/auth/errors.js';
 import { isIP } from 'net';

package/dist/{chunk-WDZLDFN3.js → chunk-XGOPVELV.js}

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { VERIFY_IDENTITY_MODES, SURFACES, ENVIRONMENTS, BASE_URL_ENV_VAR, MIN_TIMEOUT_MS, MAX_TIMEOUT_MS, DEFAULT_TIMEOUT_MS, ALL_CAPABILITIES, expandCapabilities, errorOutcome, describeFailure, failureDetails, countsAsNotOn, diagnoseVerdict, isJsonObject, succeed, CAPABILITY_QUESTION, CAPABILITIES_TREE, WEB_EMBEDDING_QUESTION, PLATFORM_TREE, loadDecisionSpace, fetchContract, contractUnavailableOutcome, loadDecisionSpaceFromContract, parseEnvironment, checkTenantMode, detectProject, planIntegration, fail, ExitCode, DOCS_KEY, resolveContractPath, validateContractFile, buildSupportBundle, renderSupportBundle, chooseWidgetAuth, DIAGNOSTICS_PATH, diagnoseFailure, parseDiagnostics, buildDiagnosisDocument, PARTNER_KEY, SESSION_TOKEN, resolveCredential, ADMIN_TOKEN, withPrefix, parseOrigin, parseLoaderUrl, parseSurfaces, parseIdentityMode, runVerification, PARTNER_SECRET_KEY, resolveOffline, resolveWithoutRegistry, knownCodes, loadErrorRegistryFromContract, loadErrorRegistry, resolveAfterRegistryMiss, registryAlsoIn, buildExplanationDocument, renderExplanation, alsoInLines, resolveEndpoint, isCorrelatableRequestId, EMPTY_REGISTRY, createApiClient, offlineDocument, renderOffline, IDENTITY_QUESTION, IDENTITY_TREE, BACKEND_LANGUAGE_QUESTION, SESSION_MINT_TREE, CREDENTIAL_SPECS } from './chunk-GDH5F4QE.js';
+import { VERIFY_IDENTITY_MODES, SURFACES, ENVIRONMENTS, BASE_URL_ENV_VAR, MIN_TIMEOUT_MS, MAX_TIMEOUT_MS, DEFAULT_TIMEOUT_MS, ALL_CAPABILITIES, expandCapabilities, errorOutcome, describeFailure, failureDetails, countsAsNotOn, diagnoseVerdict, isJsonObject, succeed, CAPABILITY_QUESTION, CAPABILITIES_TREE, WEB_EMBEDDING_QUESTION, PLATFORM_TREE, loadDecisionSpace, fetchContract, contractUnavailableOutcome, loadDecisionSpaceFromContract, parseEnvironment, checkTenantMode, detectProject, planIntegration, fail, ExitCode, DOCS_KEY, resolveContractPath, validateContractFile, buildSupportBundle, renderSupportBundle, chooseWidgetAuth, DIAGNOSTICS_PATH, diagnoseFailure, parseDiagnostics, buildDiagnosisDocument, PARTNER_KEY, SESSION_TOKEN, resolveCredential, ADMIN_TOKEN, withPrefix, parseOrigin, parseLoaderUrl, parseSurfaces, parseIdentityMode, runVerification, PARTNER_SECRET_KEY, resolveOffline, resolveWithoutRegistry, knownCodes, loadErrorRegistryFromContract, loadErrorRegistry, resolveAfterRegistryMiss, registryAlsoIn, buildExplanationDocument, renderExplanation, alsoInLines, resolveEndpoint, isCorrelatableRequestId, EMPTY_REGISTRY, createApiClient, offlineDocument, renderOffline, IDENTITY_QUESTION, IDENTITY_TREE, BACKEND_LANGUAGE_QUESTION, SESSION_MINT_TREE, CREDENTIAL_SPECS } from './chunk-DE7AGMJD.js';
 import { isAbsolute, resolve } from 'path';
 
 // src/cli/format.ts

package/dist/{chunk-REQLWFQZ.js → chunk-YTDADMVX.js}

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { ENVIRONMENTS, ENVELOPE_SHAPE, SURFACES, VERIFY_IDENTITY_MODES, refusal, API_BASE_URL_BY_ENVIRONMENT, fetchContract, NO_CONTRACT_CACHE, systemClock, fetchTransport, describeFailure, loadDecisionSpaceFromContract, uuidFromKey, resolveEndpoint, createApiClient, createContractProvider, nodeContractCache, CLI_VERSION, withPrefix, ephemeralCredential, isJsonObject, REFUSAL_POLICY, error_explanation_v1_schema_default, verification_v1_schema_default, diagnosis_v1_schema_default, plan_v1_schema_default, NEXT_ACTIONS, IDENTITY_QUESTION, IDENTITY_TREE, CAPABILITY_QUESTION, CAPABILITIES_TREE, WEB_EMBEDDING_QUESTION, PLATFORM_TREE, loadDecisionSpace, nodeFileSystem, expandCapabilities, detectThemeFromText, planIntegration, parseOrigin, parseLoaderUrl, isEverfurLoaderHost, EVERFUR_LOADER_HOSTS, resolveCredential, PARTNER_KEY, runVerification, themePropFromSource, normalizeSurfaces, failedResult, buildSupportBundle, chooseWidgetAuth, DIAGNOSTICS_PATH, diagnoseFailure, parseDiagnostics, buildDiagnosisDocument, toolCodeExplanation, resolveOffline, resolveWithoutRegistry, knownCodes, loadErrorRegistryFromContract, loadErrorRegistry, resolveAfterRegistryMiss, TOOL_CODES, registryAlsoIn, buildExplanationDocument, nextActionFor, digestOfProjection, detectProject, BASE_URL_ENV_VAR, checkTenantMode, isWorkspaceRootEvidence, plannableCapabilities, blockedCapabilities, offlineDocument, toolCodeMeaning, SESSION_TOKEN, SESSION_MINT_TREE, BACKEND_LANGUAGE_QUESTION, ALL_CAPABILITIES } from './chunk-GDH5F4QE.js';
+import { ENVIRONMENTS, ENVELOPE_SHAPE, SURFACES, VERIFY_IDENTITY_MODES, refusal, API_BASE_URL_BY_ENVIRONMENT, fetchContract, NO_CONTRACT_CACHE, systemClock, fetchTransport, describeFailure, loadDecisionSpaceFromContract, uuidFromKey, resolveEndpoint, createApiClient, createContractProvider, nodeContractCache, CLI_VERSION, withPrefix, ephemeralCredential, isJsonObject, REFUSAL_POLICY, error_explanation_v1_schema_default, verification_v1_schema_default, diagnosis_v1_schema_default, plan_v1_schema_default, NEXT_ACTIONS, IDENTITY_QUESTION, IDENTITY_TREE, CAPABILITY_QUESTION, CAPABILITIES_TREE, WEB_EMBEDDING_QUESTION, PLATFORM_TREE, loadDecisionSpace, nodeFileSystem, expandCapabilities, detectThemeFromText, planIntegration, parseOrigin, parseLoaderUrl, isEverfurLoaderHost, EVERFUR_LOADER_HOSTS, resolveCredential, PARTNER_KEY, runVerification, themePropFromSource, normalizeSurfaces, failedResult, buildSupportBundle, chooseWidgetAuth, DIAGNOSTICS_PATH, diagnoseFailure, parseDiagnostics, buildDiagnosisDocument, toolCodeExplanation, resolveOffline, resolveWithoutRegistry, knownCodes, loadErrorRegistryFromContract, loadErrorRegistry, resolveAfterRegistryMiss, TOOL_CODES, registryAlsoIn, buildExplanationDocument, nextActionFor, digestOfProjection, detectProject, BASE_URL_ENV_VAR, checkTenantMode, isWorkspaceRootEvidence, plannableCapabilities, blockedCapabilities, offlineDocument, toolCodeMeaning, SESSION_TOKEN, SESSION_MINT_TREE, BACKEND_LANGUAGE_QUESTION, ALL_CAPABILITIES } from './chunk-DE7AGMJD.js';
 import { z } from 'zod';
 import { McpServer, ResourceTemplate } from '@modelcontextprotocol/sdk/server/mcp.js';
 import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';

package/dist/everfur-mcp-hosted.js

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
-import { loadHostedMcpConfig, startHostedMcpServer } from './chunk-4WAGFCO2.js';
-import './chunk-KIX4GJKB.js';
-import './chunk-REQLWFQZ.js';
-import { CLI_VERSION } from './chunk-GDH5F4QE.js';
+import { loadHostedMcpConfig, startHostedMcpServer } from './chunk-VNPBR7JA.js';
+import './chunk-SD2FC3O6.js';
+import './chunk-YTDADMVX.js';
+import { CLI_VERSION } from './chunk-DE7AGMJD.js';
 
 // src/bin/everfur-mcp-hosted.ts
 async function main() {

package/dist/everfur-mcp-http.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
-import { startRemoteMcpServer, loadRemoteMcpConfig } from './chunk-KIX4GJKB.js';
-import './chunk-REQLWFQZ.js';
-import { CLI_VERSION } from './chunk-GDH5F4QE.js';
+import { startRemoteMcpServer, loadRemoteMcpConfig } from './chunk-SD2FC3O6.js';
+import './chunk-YTDADMVX.js';
+import { CLI_VERSION } from './chunk-DE7AGMJD.js';
 
 // src/bin/everfur-mcp-http.ts
 async function main() {

package/dist/everfur-mcp.js

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
-import { runStdioServer } from './chunk-REQLWFQZ.js';
-import { CLI_VERSION } from './chunk-GDH5F4QE.js';
+import { runStdioServer } from './chunk-YTDADMVX.js';
+import { CLI_VERSION } from './chunk-DE7AGMJD.js';
 
 // src/bin/everfur-mcp.ts
 if (process.argv.slice(2).includes("--version")) {

package/dist/everfur.js

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
-import { runCli } from './chunk-WDZLDFN3.js';
-import { ExitCode, systemClock, fetchTransport, CLI_VERSION, nodeFileSystem, nodeContractCache } from './chunk-GDH5F4QE.js';
+import { runCli } from './chunk-XGOPVELV.js';
+import { ExitCode, systemClock, fetchTransport, CLI_VERSION, nodeFileSystem, nodeContractCache } from './chunk-DE7AGMJD.js';
 
 // src/bin/everfur.ts
 async function main() {

package/dist/index.d.ts

@@ -3647,6 +3647,6 @@ declare function parseSuppliedFacts(capabilitiesRaw: string | null, identityRaw:
  * install, and a bundled artifact. `tests/unit/version.test.ts` asserts this constant equals
  * the package.json version, so the two cannot drift.
  */
-declare const CLI_VERSION = "0.6.0";
+declare const CLI_VERSION = "0.7.0";
 
 export { ADMIN_TOKEN, API_PREFIX, type ApiClient, type ApiFailure, type ApiResult, type ApiSuccess, BASE_URL_ENV_VAR, type BlockedCapability, type BlockedOutcome, CLI_VERSION, COMMANDS, CREDENTIAL_SPECS, type Capability, type CapabilityDiagnosis, type ClockPort, type Command, type CommandContext, type CommandOutcome, type ContractValidationOutcome, type Credential, type CredentialSpec, DEFAULT_TIMEOUT_MS, type DecisionSpace, type DecisionSpaceProvenance, type DecisionTree, type DetectedDependency, type DetectedTheme, type Diagnosis, EMPTY_REGISTRY, ERRORS_DOCUMENT_KEY, type ErrorRegistry, type ErrorRegistryEntry, ExitCode, type FileSystemPort, type FormatOptions, type FormattedOutput, type HttpMethod, type HttpRequest, type HttpResponse, IDEMPOTENT_METHODS, type IdentityMode, MISSING_FACT_NAMES, type MissingFact, type MissingFactName, type Outcome, PARTNER_KEY, PARTNER_SECRET_KEY, PLAN_DOCUMENT_KIND, PLAN_SCHEMA_VERSION, type PackageManager, type PlanDocument, type PlanInput, type PlanPrinciple, type PlanStep, type PlanWarning, type PositionalSpec, type ProjectDetection, type ProjectType, REASON_CODES, REDACTED, type ReasonCode, type RegistryLoad, type RequestSpec, type ResolvedCredential, type ResolvedEndpoint, type RunOptions, SCHEMAS, SESSION_TOKEN, type SandboxCreateStatus, type SandboxCreation, type SchemaValidation, type SchemaViolation, type SessionMintLanguage, type StepResult, THEME_TOKEN_ORDER, type TerminalOutcome, type ThemeConfidence, type ThemeDetection, type ThemeEvidence, type ThemeSource, type ThemeToken, TransportError, type TransportPort, type TreeOption, type TreeQuestion, type Verification, type VerifyStep, type WalkResult, apiUrl, buildDecisionSpace, buildDiagnosisDocument, buildExplanationDocument, buildSandboxDocument, buildVerificationDocument, clampTimeout, createApiClient, createMemoryFileSystem, createRecordingClock, describeFailure, detectProject, detectTheme, detectThemeFromText, digestOfProjection, digestsEqual, editDistance, entryFromRow, ephemeralCredential, errorCodeOf, failureDetails, failureOutcome, fetchTransport, formatOutcome, isCorrelatableRequestId, isIdempotent, isKnownReasonCode, loadDecisionSpace, loadErrorRegistry, matchCommand, missingFactsFor, nextActionFor as nextActionForErrorCode, nextActionFor$1 as nextActionForReason, nextActionsFor, nodeFileSystem, parseCapabilities, parseDiagnostics, parseIdentityMode, parseSessionMintLanguage, parseSuppliedFacts, planIntegration, projectSandboxCreate, renderDiagnosis, renderExplanation, renderPlan, renderSandboxCreate, renderVerification, resolveContractPath, resolveCredential, resolveEndpoint, runCli, runVerification, suggestCodes, systemClock, validateContractFile, validateContractPublicEnvelope, validateDiagnosisDocument, validateErrorExplanationDocument, validatePlanDocument, validateSandboxCreateDocument, validateVerificationDocument, verifyDigest, walkSingle, walkTree, withPrefix };

package/dist/index.js

@@ -1,3 +1,3 @@
 #!/usr/bin/env node
-export { COMMANDS, buildSandboxDocument, buildVerificationDocument, failureOutcome, formatOutcome, matchCommand, nextActionsFor, parseCapabilities, parseIdentityMode, parseSessionMintLanguage, parseSuppliedFacts, projectSandboxCreate, renderDiagnosis, renderPlan, renderSandboxCreate, renderVerification, runCli } from './chunk-WDZLDFN3.js';
-export { ADMIN_TOKEN, API_PREFIX, BASE_URL_ENV_VAR, CLI_VERSION, CREDENTIAL_SPECS, DEFAULT_TIMEOUT_MS, EMPTY_REGISTRY, ERRORS_DOCUMENT_KEY, ExitCode, IDEMPOTENT_METHODS, MISSING_FACT_NAMES, PARTNER_KEY, PARTNER_SECRET_KEY, PLAN_DOCUMENT_KIND, PLAN_SCHEMA_VERSION, REASON_CODES, REDACTED, SCHEMAS, SESSION_TOKEN, THEME_TOKEN_ORDER, TransportError, apiUrl, buildDecisionSpace, buildDiagnosisDocument, buildExplanationDocument, clampTimeout, createApiClient, createMemoryFileSystem, createRecordingClock, describeFailure, detectProject, detectTheme, detectThemeFromText, digestOfProjection, digestsEqual, editDistance, entryFromRow, ephemeralCredential, errorCodeOf, failureDetails, fetchTransport, isCorrelatableRequestId, isIdempotent, isKnownReasonCode, loadDecisionSpace, loadErrorRegistry, missingFactsFor, nextActionFor2 as nextActionForErrorCode, nextActionFor as nextActionForReason, nodeFileSystem, parseDiagnostics, planIntegration, renderExplanation, resolveContractPath, resolveCredential, resolveEndpoint, runVerification, suggestCodes, systemClock, validateContractFile, validateContractPublicEnvelope, validateDiagnosisDocument, validateErrorExplanationDocument, validatePlanDocument, validateSandboxCreateDocument, validateVerificationDocument, verifyDigest, walkSingle, walkTree, withPrefix } from './chunk-GDH5F4QE.js';
+export { COMMANDS, buildSandboxDocument, buildVerificationDocument, failureOutcome, formatOutcome, matchCommand, nextActionsFor, parseCapabilities, parseIdentityMode, parseSessionMintLanguage, parseSuppliedFacts, projectSandboxCreate, renderDiagnosis, renderPlan, renderSandboxCreate, renderVerification, runCli } from './chunk-XGOPVELV.js';
+export { ADMIN_TOKEN, API_PREFIX, BASE_URL_ENV_VAR, CLI_VERSION, CREDENTIAL_SPECS, DEFAULT_TIMEOUT_MS, EMPTY_REGISTRY, ERRORS_DOCUMENT_KEY, ExitCode, IDEMPOTENT_METHODS, MISSING_FACT_NAMES, PARTNER_KEY, PARTNER_SECRET_KEY, PLAN_DOCUMENT_KIND, PLAN_SCHEMA_VERSION, REASON_CODES, REDACTED, SCHEMAS, SESSION_TOKEN, THEME_TOKEN_ORDER, TransportError, apiUrl, buildDecisionSpace, buildDiagnosisDocument, buildExplanationDocument, clampTimeout, createApiClient, createMemoryFileSystem, createRecordingClock, describeFailure, detectProject, detectTheme, detectThemeFromText, digestOfProjection, digestsEqual, editDistance, entryFromRow, ephemeralCredential, errorCodeOf, failureDetails, fetchTransport, isCorrelatableRequestId, isIdempotent, isKnownReasonCode, loadDecisionSpace, loadErrorRegistry, missingFactsFor, nextActionFor2 as nextActionForErrorCode, nextActionFor as nextActionForReason, nodeFileSystem, parseDiagnostics, planIntegration, renderExplanation, resolveContractPath, resolveCredential, resolveEndpoint, runVerification, suggestCodes, systemClock, validateContractFile, validateContractPublicEnvelope, validateDiagnosisDocument, validateErrorExplanationDocument, validatePlanDocument, validateSandboxCreateDocument, validateVerificationDocument, verifyDigest, walkSingle, walkTree, withPrefix } from './chunk-DE7AGMJD.js';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@everfur/cli",
-  "version": "0.6.0",
+  "version": "0.7.0",
   "description": "Everfur CLI: plan, verify, and diagnose an Everfur pet-health integration from the terminal.",
   "license": "MIT",
   "type": "module",