@everfur/cli 0.9.0 → 0.9.1

package/dist/{chunk-J7SL4FA7.js → chunk-FLW4ZANY.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 /*! @everfur/cli. Copyright (c) 2026 Strand Health Inc. dba Everfur. All rights reserved. Use is subject to the Everfur SDK License: https://docs.everfur.com/license */
-import { ENVIRONMENTS, ENVELOPE_SHAPE, SURFACES, VERIFY_IDENTITY_MODES, digestOfProjection, ephemeralCredential, refusal, API_BASE_URL_BY_ENVIRONMENT, fetchContract, NO_CONTRACT_CACHE, systemClock, fetchTransport, describeFailure, loadDecisionSpaceFromContract, uuidFromKey, resolveEndpoint, createApiClient, createContractProvider, nodeContractCache, CLI_VERSION, withPrefix, isJsonObject, REFUSAL_POLICY, error_explanation_v1_schema_default, verification_v1_schema_default, diagnosis_v1_schema_default, plan_v1_schema_default, NEXT_ACTIONS, IDENTITY_QUESTION, IDENTITY_TREE, CAPABILITY_QUESTION, CAPABILITIES_TREE, WEB_EMBEDDING_QUESTION, PLATFORM_TREE, loadDecisionSpace, nodeFileSystem, expandCapabilities, detectThemeFromText, planIntegration, parseOrigin, parseLoaderUrl, isEverfurLoaderHost, EVERFUR_LOADER_HOSTS, resolveCredential, PARTNER_KEY, runVerification, themePropFromSource, normalizeSurfaces, failedResult, buildSupportBundle, chooseWidgetAuth, DIAGNOSTICS_PATH, diagnoseFailure, parseDiagnostics, buildDiagnosisDocument, toolCodeExplanation, resolveOffline, resolveWithoutRegistry, knownCodes, loadErrorRegistryFromContract, loadErrorRegistry, resolveAfterRegistryMiss, TOOL_CODES, registryAlsoIn, buildExplanationDocument, nextActionFor, CLAIMS_INBOUND_SECRET, WEBHOOK_SIGNING_SECRET, detectProject, BASE_URL_ENV_VAR, checkTenantMode, isWorkspaceRootEvidence, plannableCapabilities, blockedCapabilities, offlineDocument, toolCodeMeaning, SESSION_TOKEN, PLAN_DOCUMENT_KIND, PLAN_SCHEMA_VERSION, secretKeyHostProblem, ALLOW_CUSTOM_API_HOST_ENV_VAR, PARTNER_SECRET_KEY, SESSION_MINT_TREE, BACKEND_LANGUAGE_QUESTION, ALL_CAPABILITIES, WEBHOOK_PUBLIC_PATH, WEBHOOK_RECEIVER_PATH, TransportError, webhookRouteFile, importPath, hmacSha256, hmacSha256Hex, API_BASE_URL_PLACEHOLDER } from './chunk-OHA3JVME.js';
+import { ENVIRONMENTS, ENVELOPE_SHAPE, SURFACES, VERIFY_IDENTITY_MODES, digestOfProjection, ephemeralCredential, refusal, API_BASE_URL_BY_ENVIRONMENT, fetchContract, NO_CONTRACT_CACHE, systemClock, fetchTransport, describeFailure, loadDecisionSpaceFromContract, uuidFromKey, resolveEndpoint, createApiClient, createContractProvider, nodeContractCache, CLI_VERSION, withPrefix, isJsonObject, REFUSAL_POLICY, error_explanation_v1_schema_default, verification_v1_schema_default, diagnosis_v1_schema_default, plan_v1_schema_default, NEXT_ACTIONS, IDENTITY_QUESTION, IDENTITY_TREE, CAPABILITY_QUESTION, CAPABILITIES_TREE, WEB_EMBEDDING_QUESTION, PLATFORM_TREE, loadDecisionSpace, nodeFileSystem, expandCapabilities, detectThemeFromText, planIntegration, parseOrigin, parseLoaderUrl, isEverfurLoaderHost, EVERFUR_LOADER_HOSTS, resolveCredential, PARTNER_KEY, runVerification, themePropFromSource, normalizeSurfaces, failedResult, buildSupportBundle, chooseWidgetAuth, DIAGNOSTICS_PATH, diagnoseFailure, parseDiagnostics, buildDiagnosisDocument, toolCodeExplanation, resolveOffline, resolveWithoutRegistry, knownCodes, loadErrorRegistryFromContract, loadErrorRegistry, resolveAfterRegistryMiss, TOOL_CODES, registryAlsoIn, buildExplanationDocument, nextActionFor, CLAIMS_INBOUND_SECRET, WEBHOOK_SIGNING_SECRET, detectProject, BASE_URL_ENV_VAR, checkTenantMode, isWorkspaceRootEvidence, plannableCapabilities, blockedCapabilities, offlineDocument, toolCodeMeaning, SESSION_TOKEN, PLAN_DOCUMENT_KIND, PLAN_SCHEMA_VERSION, secretKeyHostProblem, ALLOW_CUSTOM_API_HOST_ENV_VAR, PARTNER_SECRET_KEY, SESSION_MINT_TREE, BACKEND_LANGUAGE_QUESTION, ALL_CAPABILITIES, WEBHOOK_PUBLIC_PATH, WEBHOOK_RECEIVER_PATH, TransportError, webhookRouteFile, importPath, hmacSha256, hmacSha256Hex, API_BASE_URL_PLACEHOLDER } from './chunk-VUXILRME.js';
 import { z } from 'zod';
 import { McpServer, ResourceTemplate } from '@modelcontextprotocol/sdk/server/mcp.js';
 import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
@@ -1956,8 +1956,16 @@ var INBOUND_CODES = Object.freeze([
     "inbound_sandbox",
     409,
     "fix_mapping",
-    "The endpoint's signing has no signed time (a body-only signature or a secret header), and the mapping names no event_time, so it cannot be activated.",
-    "Add event_time to the mapping, save it and activate again."
+    "The endpoint's signing has no signed time (a body-only signature or a secret header), and the mapping names no event_time, so the mapping cannot be activated, or an endpoint with that signing cannot be created.",
+    "Add event_time to the mapping, save it and activate it, then create the endpoint or activate again. Or sign over a timestamp (hmac with signed_payload timestamp_body)."
+  ),
+  inbound(
+    "endpoint_exists",
+    "inbound_sandbox",
+    409,
+    "stop",
+    "The sandbox tenant already has its inbound endpoint, and it has one at most. Its URL and secret were shown once, when it was created. Nothing was created.",
+    `Set ${INBOUND_URL_ENV} from where it was saved. For a new secret call ${SETUP} with rotate_secret: true, for a new URL with rotate_token: true. No route deletes a sandbox endpoint.`
   ),
   inbound(
     "events_invalid",
@@ -2044,8 +2052,13 @@ var CLAIMS_EVENT_TYPES = Object.freeze([
   "claim.failed",
   "claim.duplicate",
   "claim.decided",
+  "insured_pet.profile.ready",
+  "insured_pet.profile.updated",
   "webhook_endpoint.test"
 ]);
+var CLAIMS_TESTABLE_EVENT_TYPES = Object.freeze(
+  CLAIMS_EVENT_TYPES.filter((type) => !type.startsWith("insured_pet."))
+);
 var CLAIMS_DELIVERY_TIMEOUT_SECONDS = 10;
 var CLAIMS_RECEIVER_SLOW_SECONDS = 5;
 var CLAIMS_ROUTES = Object.freeze({
@@ -2947,6 +2960,12 @@ export async function processEverfurEvent(
       if (claimId === null) return;
       await store.saveClaimEvent(claimId, event.type, data);
       return;
+    case 'insured_pet.profile.ready':
+    case 'insured_pet.profile.updated':
+      // REPLACE: an insured pet's profile, keyed by insured_pet_id (pet_ref can be null). ready comes once, updated once
+      // per later version; keep the highest version. Each field is null when not known; read the full profile from
+      // profile_path. Neither event names a claim or carries a record.
+      return;
     default:
       // A type this file does not know yet: it was acknowledged, and is logged rather than refused.
       console.warn('everfur webhooks: unhandled event type', event.type);
@@ -3933,6 +3952,11 @@ def process_event(
             return
         kept.save_claim_event(claim_id, event_type, data)
         return
+    if event_type in ("insured_pet.profile.ready", "insured_pet.profile.updated"):
+        # REPLACE: an insured pet's profile, keyed by insured_pet_id (pet_ref can be None). ready comes once, updated once
+        # per later version; keep the highest version. Each field is None when not known; read the full profile from
+        # profile_path. Neither event names a claim or carries a record.
+        return
     # A type this file does not know yet: it was acknowledged, and is logged rather than refused.
     log.warning("everfur webhooks: unhandled event type %s", event_type)
 
@@ -6917,6 +6941,13 @@ async function createEndpoint(args, context, ports) {
     }
     return inboundFailure(answer, action, CREATE_404);
   }
+  if (answer.status === 409 && bodyCode(answer.value) === "event_time_mapping_required") {
+    return refusal(
+      "CLAIMS_MAPPING_INVALID",
+      "The signing config signs no time (a body-only signature or a secret header), and the active mapping names no event_time, so the API refused it (event_time_mapping_required). Nothing was created. Sign over a timestamp (hmac with signed_payload timestamp_body), or add event_time to the mapping and activate it first.",
+      { action, status: 409, code: "event_time_mapping_required", request_id: answer.requestId }
+    );
+  }
   if (answer.status === 409) {
     return refusal(
       "CLAIMS_INBOUND_ENDPOINT_EXISTS",
@@ -7834,7 +7865,7 @@ var SEND_CLAIMS_TEST_EVENTS_INPUT_SHAPE = {
   description: z.string().min(1).max(200).optional().describe("create_endpoint: a label for the endpoint."),
   enabled_events: z.array(ENABLED_EVENT).min(1).max(CLAIMS_EVENT_TYPES.length + 1).optional().describe('create_endpoint: the event types the endpoint receives, or ["*"] for all. Default ["*"].'),
   endpoint_id: z.string().min(1).max(128).optional().describe("delete_endpoint and send_test_event: the endpoint, as list_endpoints names it."),
-  event_type: z.enum(CLAIMS_EVENT_TYPES).optional().describe('send_test_event: the synthetic event to send. Its data carries "synthetic": true and a SYN-TEST- claim id.'),
+  event_type: z.enum(CLAIMS_TESTABLE_EVENT_TYPES).optional().describe('send_test_event: the synthetic event to send. Its data carries "synthetic": true and a SYN-TEST- claim id.'),
   secret_env_file: z.string().min(1).max(1024).optional().describe("create_endpoint: absolute path of a local env file the endpoint's signing secret is appended to as EVERFUR_WEBHOOK_SECRET=..., created with mode 600 when missing. The API shows the secret once; this tool writes it there and never returns it. The file must not already set EVERFUR_WEBHOOK_SECRET. It must be named .env or .env.<name>, inside the project this server runs in or ~/.config/everfur, ignored by git, and not a symlink."),
   confirmation_code: z.string().min(1).max(32).optional().describe("create_endpoint: the one-time code the PERSON typed back, when the first call asked for one (the code is in a local file they open; never read it yourself). Not needed when this client asks the person directly.")
 };
@@ -7931,7 +7962,13 @@ function sandboxServerKey(context) {
     )
   };
 }
-function sandboxFailure(failure, action) {
+var WEBHOOK_CAPABILITY = {
+  list_endpoints: "partner_events.event.read",
+  create_endpoint: "partner_events.endpoint.update",
+  delete_endpoint: "partner_events.endpoint.update",
+  send_test_event: "partner_events.endpoint.update"
+};
+function sandboxFailure(failure, action, capability) {
   if (failure.kind === "http") {
     const retryAfter = failure.retrySignals?.retryAfter ?? null;
     const details = {
@@ -7955,6 +7992,13 @@ function sandboxFailure(failure, action) {
         details
       );
     }
+    if (failure.status === 403 && capability !== void 0) {
+      return refusal(
+        "CLAIMS_SANDBOX_CALL_FAILED",
+        `The sandbox call answered 403 ${failure.code ?? "(no code)"}: a restricted key needs the ${capability} capability for this action. Use a key with it, or have it granted to this restricted key.`,
+        { ...details, capability }
+      );
+    }
     return refusal(
       "CLAIMS_SANDBOX_CALL_FAILED",
       `The sandbox call answered ${failure.status} ${failure.code ?? "(no code)"}.` + (failure.code === null ? "" : " everfur_explain_claims_error explains the code."),
@@ -7983,7 +8027,7 @@ async function sendClaimsTestEventsTool(args, context, ports = {}) {
     return argumentsInvalid(action, ["endpoint_id"], `${action} needs endpoint_id, as list_endpoints names it.`);
   }
   if (action === "send_test_event" && args.event_type === void 0) {
-    return argumentsInvalid(action, ["event_type"], `send_test_event needs event_type, one of ${CLAIMS_EVENT_TYPES.join(", ")}.`);
+    return argumentsInvalid(action, ["event_type"], `send_test_event needs event_type, one of ${CLAIMS_TESTABLE_EVENT_TYPES.join(", ")}.`);
   }
   const scope = localScope(context.env, context.cwd);
   if (action === "create_endpoint") {
@@ -8014,7 +8058,7 @@ async function sendClaimsTestEventsTool(args, context, ports = {}) {
   const credentials = { [CLAIMS_SECRET_KEY_HEADER]: key.credential };
   if (action === "list_endpoints") {
     const answer2 = await client.request({ method: "GET", path: SANDBOX_ROUTE, credentials });
-    if (!answer2.ok) return sandboxFailure(answer2, action);
+    if (!answer2.ok) return sandboxFailure(answer2, action, WEBHOOK_CAPABILITY[action]);
     const parsed2 = z.object({ data: z.array(WEBHOOK_ENDPOINT) }).safeParse(answer2.value);
     if (!parsed2.success) return refusal("CLAIMS_SANDBOX_CALL_FAILED", "The endpoint list came back in an unexpected shape.", { action, request_id: answer2.requestId });
     return { isError: false, document: { ok: true, action, endpoints: parsed2.data.data.map(relayEndpoint) } };
@@ -8026,7 +8070,7 @@ async function sendClaimsTestEventsTool(args, context, ports = {}) {
       enabled_events: [...args.enabled_events ?? ["*"]]
     };
     const answer2 = await client.request({ method: "POST", path: SANDBOX_ROUTE, credentials, body });
-    if (!answer2.ok) return sandboxFailure(answer2, action);
+    if (!answer2.ok) return sandboxFailure(answer2, action, WEBHOOK_CAPABILITY[action]);
     const parsed2 = WEBHOOK_ENDPOINT.extend({ signing_secret: z.string().startsWith("whsec_") }).safeParse(answer2.value);
     if (!parsed2.success) {
       return refusal("CLAIMS_SANDBOX_CALL_FAILED", "The created endpoint came back in an unexpected shape; its secret was not written.", { action, request_id: answer2.requestId });
@@ -8055,7 +8099,7 @@ async function sendClaimsTestEventsTool(args, context, ports = {}) {
   const endpointPath = `${SANDBOX_ROUTE}/${encodeURIComponent(args.endpoint_id)}`;
   if (action === "delete_endpoint") {
     const answer2 = await client.request({ method: "DELETE", path: endpointPath, credentials });
-    if (!answer2.ok) return sandboxFailure(answer2, action);
+    if (!answer2.ok) return sandboxFailure(answer2, action, WEBHOOK_CAPABILITY[action]);
     return { isError: false, document: { ok: true, action, endpoint_id: args.endpoint_id, deleted: true } };
   }
   const answer = await client.request({
@@ -8064,7 +8108,7 @@ async function sendClaimsTestEventsTool(args, context, ports = {}) {
     credentials,
     body: { event_type: args.event_type }
   });
-  if (!answer.ok) return sandboxFailure(answer, action);
+  if (!answer.ok) return sandboxFailure(answer, action, WEBHOOK_CAPABILITY[action]);
   const parsed = z.object({ event_id: z.string(), delivery_id: z.string() }).safeParse(answer.value);
   if (!parsed.success) return refusal("CLAIMS_SANDBOX_CALL_FAILED", "The test event answer came back in an unexpected shape.", { action, request_id: answer.requestId });
   return {

package/dist/{chunk-UZZJUV5A.js → chunk-FWEDPKKK.js}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 /*! @everfur/cli. Copyright (c) 2026 Strand Health Inc. dba Everfur. All rights reserved. Use is subject to the Everfur SDK License: https://docs.everfur.com/license */
-import { hostnameOf, listen, close, writeJson, serveStatelessMcp } from './chunk-JI6USLIZ.js';
-import { createHostedTokenVerifier, tokenBucketOf, isAccessTokenShaped, buildServer, MCP_SCOPE, tenantContextOf, sendTestUserRef, hostedVerifyUserRef, REVOKED_AUTHORIZATION_REMEDY, SYNTHETIC_USER_REF_PREFIX } from './chunk-J7SL4FA7.js';
-import { BASE_URL_ENV_VAR, resolveEndpoint, fetchTransport, systemClock, createApiClient, withPrefix, ephemeralCredential, validateContractText, isJsonObject, describeFailure } from './chunk-OHA3JVME.js';
+import { hostnameOf, listen, close, writeJson, serveStatelessMcp } from './chunk-JURZYOMH.js';
+import { createHostedTokenVerifier, tokenBucketOf, isAccessTokenShaped, buildServer, MCP_SCOPE, tenantContextOf, sendTestUserRef, hostedVerifyUserRef, REVOKED_AUTHORIZATION_REMEDY, SYNTHETIC_USER_REF_PREFIX } from './chunk-FLW4ZANY.js';
+import { BASE_URL_ENV_VAR, resolveEndpoint, fetchTransport, systemClock, createApiClient, withPrefix, ephemeralCredential, validateContractText, isJsonObject, describeFailure } from './chunk-VUXILRME.js';
 import { createServer } from 'http';
 import { InvalidTokenError, TooManyRequestsError, TemporarilyUnavailableError } from '@modelcontextprotocol/sdk/server/auth/errors.js';
 import { isIP } from 'net';

package/dist/{chunk-JI6USLIZ.js → chunk-JURZYOMH.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 /*! @everfur/cli. Copyright (c) 2026 Strand Health Inc. dba Everfur. All rights reserved. Use is subject to the Everfur SDK License: https://docs.everfur.com/license */
-import { buildServer } from './chunk-J7SL4FA7.js';
+import { buildServer } from './chunk-FLW4ZANY.js';
 import { createServer } from 'http';
 import { timingSafeEqual } from 'crypto';
 import { StreamableHTTPServerTransport } from '@modelcontextprotocol/sdk/server/streamableHttp.js';

package/dist/{chunk-UROEKBHB.js → chunk-LALDS2WR.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 /*! @everfur/cli. Copyright (c) 2026 Strand Health Inc. dba Everfur. All rights reserved. Use is subject to the Everfur SDK License: https://docs.everfur.com/license */
-import { VERIFY_IDENTITY_MODES, SURFACES, ENVIRONMENTS, BASE_URL_ENV_VAR, MIN_TIMEOUT_MS, MAX_TIMEOUT_MS, DEFAULT_TIMEOUT_MS, ALL_CAPABILITIES, expandCapabilities, errorOutcome, describeFailure, failureDetails, countsAsNotOn, diagnoseVerdict, isJsonObject, succeed, CAPABILITY_QUESTION, CAPABILITIES_TREE, WEB_EMBEDDING_QUESTION, PLATFORM_TREE, loadDecisionSpace, fetchContract, contractUnavailableOutcome, loadDecisionSpaceFromContract, parseEnvironment, checkTenantMode, detectProject, planIntegration, fail, ExitCode, DOCS_KEY, resolveContractPath, validateContractFile, buildSupportBundle, renderSupportBundle, chooseWidgetAuth, DIAGNOSTICS_PATH, diagnoseFailure, parseDiagnostics, buildDiagnosisDocument, PARTNER_KEY, SESSION_TOKEN, resolveCredential, ADMIN_TOKEN, withPrefix, parseOrigin, parseLoaderUrl, parseSurfaces, parseIdentityMode, runVerification, PARTNER_SECRET_KEY, resolveOffline, resolveWithoutRegistry, knownCodes, loadErrorRegistryFromContract, loadErrorRegistry, resolveAfterRegistryMiss, registryAlsoIn, buildExplanationDocument, renderExplanation, alsoInLines, resolveEndpoint, isCorrelatableRequestId, EMPTY_REGISTRY, createApiClient, offlineDocument, renderOffline, IDENTITY_QUESTION, IDENTITY_TREE, BACKEND_LANGUAGE_QUESTION, SESSION_MINT_TREE, CREDENTIAL_SPECS } from './chunk-OHA3JVME.js';
+import { VERIFY_IDENTITY_MODES, SURFACES, ENVIRONMENTS, BASE_URL_ENV_VAR, MIN_TIMEOUT_MS, MAX_TIMEOUT_MS, DEFAULT_TIMEOUT_MS, ALL_CAPABILITIES, expandCapabilities, errorOutcome, describeFailure, failureDetails, countsAsNotOn, diagnoseVerdict, isJsonObject, succeed, CAPABILITY_QUESTION, CAPABILITIES_TREE, WEB_EMBEDDING_QUESTION, PLATFORM_TREE, loadDecisionSpace, fetchContract, contractUnavailableOutcome, loadDecisionSpaceFromContract, parseEnvironment, checkTenantMode, detectProject, planIntegration, fail, ExitCode, DOCS_KEY, resolveContractPath, validateContractFile, buildSupportBundle, renderSupportBundle, chooseWidgetAuth, DIAGNOSTICS_PATH, diagnoseFailure, parseDiagnostics, buildDiagnosisDocument, PARTNER_KEY, SESSION_TOKEN, resolveCredential, ADMIN_TOKEN, withPrefix, parseOrigin, parseLoaderUrl, parseSurfaces, parseIdentityMode, runVerification, PARTNER_SECRET_KEY, resolveOffline, resolveWithoutRegistry, knownCodes, loadErrorRegistryFromContract, loadErrorRegistry, resolveAfterRegistryMiss, registryAlsoIn, buildExplanationDocument, renderExplanation, alsoInLines, resolveEndpoint, isCorrelatableRequestId, EMPTY_REGISTRY, createApiClient, offlineDocument, renderOffline, IDENTITY_QUESTION, IDENTITY_TREE, BACKEND_LANGUAGE_QUESTION, SESSION_MINT_TREE, CREDENTIAL_SPECS } from './chunk-VUXILRME.js';
 import { isAbsolute, resolve } from 'path';
 
 // src/cli/format.ts

package/dist/{chunk-OHA3JVME.js → chunk-VUXILRME.js}

@@ -5476,8 +5476,8 @@ function booleanAttribute(outcome, key) {
 }
 
 // src/version.ts
-var CLI_VERSION = "0.9.0";
-var CLI_PUBLISHED_VERSION = "0.8.0";
+var CLI_VERSION = "0.9.1";
+var CLI_PUBLISHED_VERSION = "0.9.0";
 
 // src/commands/diagnose/reasons.ts
 var REASON_CODES = Object.freeze([
@@ -17267,8 +17267,8 @@ var MEANINGS = Object.freeze({
     nextAction: "Tell the developer to run the tool from the local MCP server or the CLI."
   },
   CLAIMS_MAPPING_INVALID: {
-    tools: [CLAIMS_SAVE],
-    meaning: "The mapping does not pass the mapping checks (error.details.problems: a path, a transform, a limit, or pii_paths hiding a field the mapping reads), or the API refused to save or activate it. Nothing was saved or activated.",
+    tools: [CLAIMS_SAVE, CLAIMS_SETUP],
+    meaning: "The mapping does not pass the mapping checks (error.details.problems: a path, a transform, a limit, or pii_paths hiding a field the mapping reads), or the API refused to save or activate it, or refused a signing config that signs no time while the mapping names no event_time (error.details.code event_time_mapping_required). Nothing was saved, activated or created.",
     nextAction: "Fix each problem in the mapping (everfur_propose_claims_mapping can propose one again), then save again."
   },
   CLAIMS_MAPPING_CONFIRMATION_REQUIRED: {

package/dist/everfur-mcp-hosted.js

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 /*! @everfur/cli. Copyright (c) 2026 Strand Health Inc. dba Everfur. All rights reserved. Use is subject to the Everfur SDK License: https://docs.everfur.com/license */
-import { loadHostedMcpConfig, startHostedMcpServer } from './chunk-UZZJUV5A.js';
-import './chunk-JI6USLIZ.js';
-import './chunk-J7SL4FA7.js';
-import { CLI_VERSION } from './chunk-OHA3JVME.js';
+import { loadHostedMcpConfig, startHostedMcpServer } from './chunk-FWEDPKKK.js';
+import './chunk-JURZYOMH.js';
+import './chunk-FLW4ZANY.js';
+import { CLI_VERSION } from './chunk-VUXILRME.js';
 
 // src/bin/everfur-mcp-hosted.ts
 async function main() {

package/dist/everfur-mcp-http.js

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 /*! @everfur/cli. Copyright (c) 2026 Strand Health Inc. dba Everfur. All rights reserved. Use is subject to the Everfur SDK License: https://docs.everfur.com/license */
-import { startRemoteMcpServer, loadRemoteMcpConfig } from './chunk-JI6USLIZ.js';
-import './chunk-J7SL4FA7.js';
-import { CLI_VERSION } from './chunk-OHA3JVME.js';
+import { startRemoteMcpServer, loadRemoteMcpConfig } from './chunk-JURZYOMH.js';
+import './chunk-FLW4ZANY.js';
+import { CLI_VERSION } from './chunk-VUXILRME.js';
 
 // src/bin/everfur-mcp-http.ts
 async function main() {

package/dist/everfur-mcp.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 /*! @everfur/cli. Copyright (c) 2026 Strand Health Inc. dba Everfur. All rights reserved. Use is subject to the Everfur SDK License: https://docs.everfur.com/license */
-import { runStdioServer } from './chunk-J7SL4FA7.js';
-import { CLI_VERSION } from './chunk-OHA3JVME.js';
+import { runStdioServer } from './chunk-FLW4ZANY.js';
+import { CLI_VERSION } from './chunk-VUXILRME.js';
 
 // src/bin/everfur-mcp.ts
 if (process.argv.slice(2).includes("--version")) {

package/dist/everfur.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 /*! @everfur/cli. Copyright (c) 2026 Strand Health Inc. dba Everfur. All rights reserved. Use is subject to the Everfur SDK License: https://docs.everfur.com/license */
-import { runCli } from './chunk-UROEKBHB.js';
-import { ExitCode, systemClock, fetchTransport, CLI_VERSION, nodeFileSystem, nodeContractCache } from './chunk-OHA3JVME.js';
+import { runCli } from './chunk-LALDS2WR.js';
+import { ExitCode, systemClock, fetchTransport, CLI_VERSION, nodeFileSystem, nodeContractCache } from './chunk-VUXILRME.js';
 
 // src/bin/everfur.ts
 async function main() {

package/dist/index.d.ts

@@ -3651,6 +3651,6 @@ declare function parseSuppliedFacts(capabilitiesRaw: string | null, identityRaw:
  * install, and a bundled artifact. `tests/unit/version.test.ts` asserts this constant equals
  * the package.json version, so the two cannot drift.
  */
-declare const CLI_VERSION = "0.9.0";
+declare const CLI_VERSION = "0.9.1";
 
 export { ADMIN_TOKEN, API_PREFIX, type ApiClient, type ApiFailure, type ApiResult, type ApiSuccess, BASE_URL_ENV_VAR, type BlockedCapability, type BlockedOutcome, CLI_VERSION, COMMANDS, CREDENTIAL_SPECS, type Capability, type CapabilityDiagnosis, type ClockPort, type Command, type CommandContext, type CommandOutcome, type ContractValidationOutcome, type Credential, type CredentialSpec, DEFAULT_TIMEOUT_MS, type DecisionSpace, type DecisionSpaceProvenance, type DecisionTree, type DetectedDependency, type DetectedTheme, type Diagnosis, EMPTY_REGISTRY, ERRORS_DOCUMENT_KEY, type ErrorRegistry, type ErrorRegistryEntry, ExitCode, type FileSystemPort, type FormatOptions, type FormattedOutput, type HttpMethod, type HttpRequest, type HttpResponse, IDEMPOTENT_METHODS, type IdentityMode, MISSING_FACT_NAMES, type MissingFact, type MissingFactName, type Outcome, PARTNER_KEY, PARTNER_SECRET_KEY, PLAN_DOCUMENT_KIND, PLAN_SCHEMA_VERSION, type PackageManager, type PlanDocument, type PlanInput, type PlanPrinciple, type PlanStep, type PlanWarning, type PositionalSpec, type ProjectDetection, type ProjectType, REASON_CODES, REDACTED, type ReasonCode, type RegistryLoad, type RequestSpec, type ResolvedCredential, type ResolvedEndpoint, type RunOptions, SCHEMAS, SESSION_TOKEN, type SandboxCreateStatus, type SandboxCreation, type SchemaValidation, type SchemaViolation, type SessionMintLanguage, type StepResult, THEME_TOKEN_ORDER, type TerminalOutcome, type ThemeConfidence, type ThemeDetection, type ThemeEvidence, type ThemeSource, type ThemeToken, TransportError, type TransportPort, type TreeOption, type TreeQuestion, type Verification, type VerifyStep, type WalkResult, apiUrl, buildDecisionSpace, buildDiagnosisDocument, buildExplanationDocument, buildSandboxDocument, buildVerificationDocument, clampTimeout, createApiClient, createMemoryFileSystem, createRecordingClock, describeFailure, detectProject, detectTheme, detectThemeFromText, digestOfProjection, digestsEqual, editDistance, entryFromRow, ephemeralCredential, errorCodeOf, failureDetails, failureOutcome, fetchTransport, formatOutcome, isCorrelatableRequestId, isIdempotent, isKnownReasonCode, loadDecisionSpace, loadErrorRegistry, matchCommand, missingFactsFor, nextActionFor as nextActionForErrorCode, nextActionFor$1 as nextActionForReason, nextActionsFor, nodeFileSystem, parseCapabilities, parseDiagnostics, parseIdentityMode, parseSessionMintLanguage, parseSuppliedFacts, planIntegration, projectSandboxCreate, renderDiagnosis, renderExplanation, renderPlan, renderSandboxCreate, renderVerification, resolveContractPath, resolveCredential, resolveEndpoint, runCli, runVerification, suggestCodes, systemClock, validateContractFile, validateContractPublicEnvelope, validateDiagnosisDocument, validateErrorExplanationDocument, validatePlanDocument, validateSandboxCreateDocument, validateVerificationDocument, verifyDigest, walkSingle, walkTree, withPrefix };

package/dist/index.js

@@ -1,4 +1,4 @@
 #!/usr/bin/env node
 /*! @everfur/cli. Copyright (c) 2026 Strand Health Inc. dba Everfur. All rights reserved. Use is subject to the Everfur SDK License: https://docs.everfur.com/license */
-export { COMMANDS, buildSandboxDocument, buildVerificationDocument, failureOutcome, formatOutcome, matchCommand, nextActionsFor, parseCapabilities, parseIdentityMode, parseSessionMintLanguage, parseSuppliedFacts, projectSandboxCreate, renderDiagnosis, renderPlan, renderSandboxCreate, renderVerification, runCli } from './chunk-UROEKBHB.js';
-export { ADMIN_TOKEN, API_PREFIX, BASE_URL_ENV_VAR, CLI_VERSION, CREDENTIAL_SPECS, DEFAULT_TIMEOUT_MS, EMPTY_REGISTRY, ERRORS_DOCUMENT_KEY, ExitCode, IDEMPOTENT_METHODS, MISSING_FACT_NAMES, PARTNER_KEY, PARTNER_SECRET_KEY, PLAN_DOCUMENT_KIND, PLAN_SCHEMA_VERSION, REASON_CODES, REDACTED, SCHEMAS, SESSION_TOKEN, THEME_TOKEN_ORDER, TransportError, apiUrl, buildDecisionSpace, buildDiagnosisDocument, buildExplanationDocument, clampTimeout, createApiClient, createMemoryFileSystem, createRecordingClock, describeFailure, detectProject, detectTheme, detectThemeFromText, digestOfProjection, digestsEqual, editDistance, entryFromRow, ephemeralCredential, errorCodeOf, failureDetails, fetchTransport, isCorrelatableRequestId, isIdempotent, isKnownReasonCode, loadDecisionSpace, loadErrorRegistry, missingFactsFor, nextActionFor2 as nextActionForErrorCode, nextActionFor as nextActionForReason, nodeFileSystem, parseDiagnostics, planIntegration, renderExplanation, resolveContractPath, resolveCredential, resolveEndpoint, runVerification, suggestCodes, systemClock, validateContractFile, validateContractPublicEnvelope, validateDiagnosisDocument, validateErrorExplanationDocument, validatePlanDocument, validateSandboxCreateDocument, validateVerificationDocument, verifyDigest, walkSingle, walkTree, withPrefix } from './chunk-OHA3JVME.js';
+export { COMMANDS, buildSandboxDocument, buildVerificationDocument, failureOutcome, formatOutcome, matchCommand, nextActionsFor, parseCapabilities, parseIdentityMode, parseSessionMintLanguage, parseSuppliedFacts, projectSandboxCreate, renderDiagnosis, renderPlan, renderSandboxCreate, renderVerification, runCli } from './chunk-LALDS2WR.js';
+export { ADMIN_TOKEN, API_PREFIX, BASE_URL_ENV_VAR, CLI_VERSION, CREDENTIAL_SPECS, DEFAULT_TIMEOUT_MS, EMPTY_REGISTRY, ERRORS_DOCUMENT_KEY, ExitCode, IDEMPOTENT_METHODS, MISSING_FACT_NAMES, PARTNER_KEY, PARTNER_SECRET_KEY, PLAN_DOCUMENT_KIND, PLAN_SCHEMA_VERSION, REASON_CODES, REDACTED, SCHEMAS, SESSION_TOKEN, THEME_TOKEN_ORDER, TransportError, apiUrl, buildDecisionSpace, buildDiagnosisDocument, buildExplanationDocument, clampTimeout, createApiClient, createMemoryFileSystem, createRecordingClock, describeFailure, detectProject, detectTheme, detectThemeFromText, digestOfProjection, digestsEqual, editDistance, entryFromRow, ephemeralCredential, errorCodeOf, failureDetails, fetchTransport, isCorrelatableRequestId, isIdempotent, isKnownReasonCode, loadDecisionSpace, loadErrorRegistry, missingFactsFor, nextActionFor2 as nextActionForErrorCode, nextActionFor as nextActionForReason, nodeFileSystem, parseDiagnostics, planIntegration, renderExplanation, resolveContractPath, resolveCredential, resolveEndpoint, runVerification, suggestCodes, systemClock, validateContractFile, validateContractPublicEnvelope, validateDiagnosisDocument, validateErrorExplanationDocument, validatePlanDocument, validateSandboxCreateDocument, validateVerificationDocument, verifyDigest, walkSingle, walkTree, withPrefix } from './chunk-VUXILRME.js';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@everfur/cli",
-  "version": "0.9.0",
+  "version": "0.9.1",
   "description": "Everfur CLI: plan, verify, and diagnose an Everfur pet-health integration from the terminal.",
   "license": "SEE LICENSE IN LICENSE.md",
   "type": "module",