@executioncontrolprotocol/cli 0.5.0 → 0.10.1

package/dist/commands/config/secrets/list.js

@@ -1,51 +1,21 @@
-import { Command, Flags } from "@oclif/core";
-import { configScopeFlags } from "../../../lib/config-flags.js";
-import { OS_PROVIDER_ID } from "../../../lib/secret-provider-ids.js";
-import { resolveDotenvPathFromConfig, resolveSecretPolicyFromConfig } from "../../../lib/secrets-config.js";
-import { loadConfigForDisplay } from "../../../lib/system-config-cli.js";
-import { createDefaultSecretBroker } from "@executioncontrolprotocol/runtime";
+import { Command } from "@oclif/core";
+import { getCliSecretsStore } from "../../../lib/secrets/store.js";
+/** List OS keychain secret keys. */
 export default class ConfigSecretsList extends Command {
-    static summary = "List secret keys for a provider (when supported)";
-    static flags = {
-        ...configScopeFlags,
-        provider: Flags.string({
-            char: "p",
-            description: `Provider id (e.g. ${OS_PROVIDER_ID})`,
-            required: true,
-        }),
-    };
+    static summary = "List secret keys in the OS keychain";
     async run() {
-        const { flags } = await this.parse(ConfigSecretsList);
-        const cwd = process.cwd();
-        const { config } = loadConfigForDisplay({
-            global: flags.global,
-            cwd,
-            explicit: flags.config,
-        });
-        const dotenvPath = resolveDotenvPathFromConfig(cwd, config);
-        const { registry } = createDefaultSecretBroker({
-            policy: resolveSecretPolicyFromConfig(config),
-            dotenvPath,
-            cwd,
-        });
-        const provider = registry.get(flags.provider);
-        if (!provider) {
-            this.error(`Unknown provider "${flags.provider}".`, { exit: 1 });
-        }
-        if (!provider.list) {
-            this.error(`Provider "${flags.provider}" does not support list.`, { exit: 1 });
-        }
-        const available = await provider.isAvailable();
+        const store = getCliSecretsStore();
+        const available = await store.isAvailable();
         if (!available) {
-            this.error(`Provider "${flags.provider}" is not available.`, { exit: 1 });
+            this.error("OS keychain is not available on this system.", { exit: 1 });
         }
-        const refs = await provider.list();
-        if (refs.length === 0) {
+        const keys = await store.list();
+        if (keys.length === 0) {
             this.log("(no entries)");
             return;
         }
-        for (const r of refs) {
-            this.log(`  ${r.key}`);
+        for (const key of keys) {
+            this.log(`  ${key}`);
         }
     }
 }

package/dist/commands/config/secrets/list.js.map

@@ -1 +1 @@
-{"version":3,"file":"list.js","sourceRoot":"","sources":["../../../../src/commands/config/secrets/list.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,EAAE,cAAc,EAAE,MAAM,qCAAqC,CAAC;AACrE,OAAO,EAAE,2BAA2B,EAAE,6BAA6B,EAAE,MAAM,gCAAgC,CAAC;AAC5G,OAAO,EAAE,oBAAoB,EAAE,MAAM,mCAAmC,CAAC;AACzE,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAE9E,MAAM,CAAC,OAAO,OAAO,iBAAkB,SAAQ,OAAO;IACpD,MAAM,CAAC,OAAO,GAAG,kDAAkD,CAAC;IAEpE,MAAM,CAAC,KAAK,GAAG;QACb,GAAG,gBAAgB;QACnB,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC;YACrB,IAAI,EAAE,GAAG;YACT,WAAW,EAAE,qBAAqB,cAAc,GAAG;YACnD,QAAQ,EAAE,IAAI;SACf,CAAC;KACH,CAAC;IAEF,KAAK,CAAC,GAAG;QACP,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;QACtD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAC1B,MAAM,EAAE,MAAM,EAAE,GAAG,oBAAoB,CAAC;YACtC,MAAM,EAAE,KAAK,CAAC,MAAiB;YAC/B,GAAG;YACH,QAAQ,EAAE,KAAK,CAAC,MAA4B;SAC7C,CAAC,CAAC;QACH,MAAM,UAAU,GAAG,2BAA2B,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC5D,MAAM,EAAE,QAAQ,EAAE,GAAG,yBAAyB,CAAC;YAC7C,MAAM,EAAE,6BAA6B,CAAC,MAAM,CAAC;YAC7C,UAAU;YACV,GAAG;SACJ,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,QAAS,CAAC,CAAC;QAC/C,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,IAAI,CAAC,KAAK,CAAC,qBAAqB,KAAK,CAAC,QAAQ,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;QACnE,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;YACnB,IAAI,CAAC,KAAK,CAAC,aAAa,KAAK,CAAC,QAAQ,0BAA0B,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;QACjF,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC;QAC/C,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,IAAI,CAAC,KAAK,CAAC,aAAa,KAAK,CAAC,QAAQ,qBAAqB,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;QAC5E,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtB,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;YACzB,OAAO;QACT,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;YACrB,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;QACzB,CAAC;IACH,CAAC"}
+{"version":3,"file":"list.js","sourceRoot":"","sources":["../../../../src/commands/config/secrets/list.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAA;AACrC,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAA;AAElE,oCAAoC;AACpC,MAAM,CAAC,OAAO,OAAO,iBAAkB,SAAQ,OAAO;IACpD,MAAM,CAAC,OAAO,GAAG,qCAAqC,CAAA;IAEtD,KAAK,CAAC,GAAG;QACP,MAAM,KAAK,GAAG,kBAAkB,EAAE,CAAA;QAClC,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,WAAW,EAAE,CAAA;QAC3C,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,IAAI,CAAC,KAAK,CAAC,8CAA8C,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAA;QACzE,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,CAAA;QAC/B,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtB,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC,CAAA;YACxB,OAAM;QACR,CAAC;QACD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,IAAI,CAAC,GAAG,CAAC,KAAK,GAAG,EAAE,CAAC,CAAA;QACtB,CAAC;IACH,CAAC"}

package/dist/commands/config/secrets/remove.d.ts

@@ -1,11 +1,9 @@
 import { Command } from "@oclif/core";
+/** Remove an OS keychain secret. */
 export default class ConfigSecretsRemove extends Command {
     static summary: string;
-    static flags: {
-        provider: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
-        key: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
-        global: import("@oclif/core/interfaces").BooleanFlag<boolean>;
-        config: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    static args: {
+        key: import("@oclif/core/interfaces").Arg<string, Record<string, unknown>>;
     };
     run(): Promise<void>;
 }

package/dist/commands/config/secrets/remove.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"remove.d.ts","sourceRoot":"","sources":["../../../../src/commands/config/secrets/remove.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAS,MAAM,aAAa,CAAC;AAW7C,MAAM,CAAC,OAAO,OAAO,mBAAoB,SAAQ,OAAO;IACtD,MAAM,CAAC,OAAO,SAA4B;IAE1C,MAAM,CAAC,KAAK;;;;;MAYV;IAEI,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;CA+B3B"}
+{"version":3,"file":"remove.d.ts","sourceRoot":"","sources":["../../../../src/commands/config/secrets/remove.ts"],"names":[],"mappings":"AAAA,OAAO,EAAQ,OAAO,EAAE,MAAM,aAAa,CAAA;AAI3C,oCAAoC;AACpC,MAAM,CAAC,OAAO,OAAO,mBAAoB,SAAQ,OAAO;IACtD,MAAM,CAAC,OAAO,SAAgD;IAE9D,MAAM,CAAC,IAAI;;MAKV;IAEK,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;CAY3B"}

package/dist/commands/config/secrets/remove.js

@@ -1,51 +1,25 @@
-import { Command, Flags } from "@oclif/core";
-import { configScopeFlags } from "../../../lib/config-flags.js";
-import { resolveDotenvPathFromConfig, resolveSecretPolicyFromConfig } from "../../../lib/secrets-config.js";
-import { loadConfigForDisplay } from "../../../lib/system-config-cli.js";
-import { canonicalSecretKeyForBinding, createDefaultSecretBroker, secretRefIdFromLogicalKey, } from "@executioncontrolprotocol/runtime";
+import { Args, Command } from "@oclif/core";
+import { canonicalSecretKey } from "@executioncontrolprotocol/secrets";
+import { getCliSecretsStore } from "../../../lib/secrets/store.js";
+/** Remove an OS keychain secret. */
 export default class ConfigSecretsRemove extends Command {
-    static summary = "Remove a stored secret";
-    static flags = {
-        ...configScopeFlags,
-        provider: Flags.string({
-            char: "p",
-            description: "Provider id",
-            required: true,
-        }),
-        key: Flags.string({
-            char: "k",
-            description: `Lookup key (same form as add)`,
+    static summary = "Remove a stored secret from the OS keychain";
+    static args = {
+        key: Args.string({
             required: true,
+            description: "Lookup key (same form as add)",
         }),
     };
     async run() {
-        const { flags } = await this.parse(ConfigSecretsRemove);
-        const cwd = process.cwd();
-        const { config } = loadConfigForDisplay({
-            global: flags.global,
-            cwd,
-            explicit: flags.config,
-        });
-        const dotenvPath = resolveDotenvPathFromConfig(cwd, config);
-        const { registry } = createDefaultSecretBroker({
-            policy: resolveSecretPolicyFromConfig(config),
-            dotenvPath,
-            cwd,
-        });
-        const provider = registry.get(flags.provider);
-        if (!provider) {
-            this.error(`Unknown provider "${flags.provider}".`, { exit: 1 });
-        }
-        if (!provider.delete) {
-            this.error(`Provider "${flags.provider}" does not support remove.`, { exit: 1 });
+        const { args } = await this.parse(ConfigSecretsRemove);
+        const store = getCliSecretsStore();
+        const available = await store.isAvailable();
+        if (!available) {
+            this.error("OS keychain is not available on this system.", { exit: 1 });
         }
-        const ref = {
-            id: secretRefIdFromLogicalKey(flags.key),
-            provider: flags.provider,
-            key: canonicalSecretKeyForBinding(flags.key),
-        };
-        await provider.delete(ref);
-        this.log(`Removed secret for provider "${flags.provider}" key "${flags.key}".`);
+        const key = canonicalSecretKey(args.key);
+        await store.delete(key);
+        this.log(`Removed secret for key "${key}".`);
     }
 }
 //# sourceMappingURL=remove.js.map

package/dist/commands/config/secrets/remove.js.map

@@ -1 +1 @@
-{"version":3,"file":"remove.js","sourceRoot":"","sources":["../../../../src/commands/config/secrets/remove.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,EAAE,2BAA2B,EAAE,6BAA6B,EAAE,MAAM,gCAAgC,CAAC;AAC5G,OAAO,EAAE,oBAAoB,EAAE,MAAM,mCAAmC,CAAC;AACzE,OAAO,EACL,4BAA4B,EAC5B,yBAAyB,EACzB,yBAAyB,GAC1B,MAAM,mCAAmC,CAAC;AAG3C,MAAM,CAAC,OAAO,OAAO,mBAAoB,SAAQ,OAAO;IACtD,MAAM,CAAC,OAAO,GAAG,wBAAwB,CAAC;IAE1C,MAAM,CAAC,KAAK,GAAG;QACb,GAAG,gBAAgB;QACnB,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC;YACrB,IAAI,EAAE,GAAG;YACT,WAAW,EAAE,aAAa;YAC1B,QAAQ,EAAE,IAAI;SACf,CAAC;QACF,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC;YAChB,IAAI,EAAE,GAAG;YACT,WAAW,EAAE,+BAA+B;YAC5C,QAAQ,EAAE,IAAI;SACf,CAAC;KACH,CAAC;IAEF,KAAK,CAAC,GAAG;QACP,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;QACxD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAC1B,MAAM,EAAE,MAAM,EAAE,GAAG,oBAAoB,CAAC;YACtC,MAAM,EAAE,KAAK,CAAC,MAAiB;YAC/B,GAAG;YACH,QAAQ,EAAE,KAAK,CAAC,MAA4B;SAC7C,CAAC,CAAC;QACH,MAAM,UAAU,GAAG,2BAA2B,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC5D,MAAM,EAAE,QAAQ,EAAE,GAAG,yBAAyB,CAAC;YAC7C,MAAM,EAAE,6BAA6B,CAAC,MAAM,CAAC;YAC7C,UAAU;YACV,GAAG;SACJ,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,QAAS,CAAC,CAAC;QAC/C,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,IAAI,CAAC,KAAK,CAAC,qBAAqB,KAAK,CAAC,QAAQ,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;QACnE,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;YACrB,IAAI,CAAC,KAAK,CAAC,aAAa,KAAK,CAAC,QAAQ,4BAA4B,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;QACnF,CAAC;QAED,MAAM,GAAG,GAAc;YACrB,EAAE,EAAE,yBAAyB,CAAC,KAAK,CAAC,GAAI,CAAC;YACzC,QAAQ,EAAE,KAAK,CAAC,QAAS;YACzB,GAAG,EAAE,4BAA4B,CAAC,KAAK,CAAC,GAAI,CAAC;SAC9C,CAAC;QACF,MAAM,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC3B,IAAI,CAAC,GAAG,CAAC,gCAAgC,KAAK,CAAC,QAAQ,UAAU,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC;IAClF,CAAC"}
+{"version":3,"file":"remove.js","sourceRoot":"","sources":["../../../../src/commands/config/secrets/remove.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,aAAa,CAAA;AAC3C,OAAO,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAA;AACtE,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAA;AAElE,oCAAoC;AACpC,MAAM,CAAC,OAAO,OAAO,mBAAoB,SAAQ,OAAO;IACtD,MAAM,CAAC,OAAO,GAAG,6CAA6C,CAAA;IAE9D,MAAM,CAAC,IAAI,GAAG;QACZ,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC;YACf,QAAQ,EAAE,IAAI;YACd,WAAW,EAAE,+BAA+B;SAC7C,CAAC;KACH,CAAA;IAED,KAAK,CAAC,GAAG;QACP,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAA;QACtD,MAAM,KAAK,GAAG,kBAAkB,EAAE,CAAA;QAClC,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,WAAW,EAAE,CAAA;QAC3C,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,IAAI,CAAC,KAAK,CAAC,8CAA8C,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAA;QACzE,CAAC;QAED,MAAM,GAAG,GAAG,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QACxC,MAAM,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;QACvB,IAAI,CAAC,GAAG,CAAC,2BAA2B,GAAG,IAAI,CAAC,CAAA;IAC9C,CAAC"}

package/dist/commands/config/secrets.d.ts

@@ -1,4 +1,5 @@
 import { Command } from "@oclif/core";
+/** Manage OS keychain secrets. */
 export default class ConfigSecrets extends Command {
     static summary: string;
     static description: string;

package/dist/commands/config/secrets.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"secrets.d.ts","sourceRoot":"","sources":["../../../src/commands/config/secrets.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAGtC,MAAM,CAAC,OAAO,OAAO,aAAc,SAAQ,OAAO;IAChD,MAAM,CAAC,OAAO,SAA0D;IAExE,MAAM,CAAC,WAAW,SAMkD;IAEpE,MAAM,CAAC,QAAQ,WAIb;IAEI,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;CAmB3B"}
+{"version":3,"file":"secrets.d.ts","sourceRoot":"","sources":["../../../src/commands/config/secrets.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAA;AAGrC,kCAAkC;AAClC,MAAM,CAAC,OAAO,OAAO,aAAc,SAAQ,OAAO;IAChD,MAAM,CAAC,OAAO,SAA+B;IAE7C,MAAM,CAAC,WAAW,SAGyC;IAE3D,MAAM,CAAC,QAAQ,WAKd;IAEK,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;CAgB3B"}

package/dist/commands/config/secrets.js

@@ -1,33 +1,29 @@
 import { Command } from "@oclif/core";
-import { OS_PROVIDER_ID } from "../../lib/secret-provider-ids.js";
+import { ECP_SECRET_REF_PROTOCOL_PREFIX } from "@executioncontrolprotocol/secrets";
+/** Manage OS keychain secrets. */
 export default class ConfigSecrets extends Command {
-    static summary = "Manage secrets (process.env, dot.env, os.secrets, …)";
-    static description = `Store and inspect secret values outside config files. Prefer os.secrets on Mac/Windows.
+    static summary = "Manage OS keychain secrets";
+    static description = `Store and inspect secret values in the OS keychain (outside config files).
 
 Subcommands:
-  add|get|remove|list     CRUD-style commands for a provider key
-  providers list|doctor   Availability and health
-  yaml get                Print secrets.* + security.secrets from the YAML file
-  yaml set-default-provider|set-policy   Edit non-secret YAML fields`;
+  add|get|remove|list     CRUD-style commands for OS secrets`;
     static examples = [
-        `ecp config secrets add --provider ${OS_PROVIDER_ID} --key server/fetch.token --prompt`,
-        `ecp config secrets get --provider ${OS_PROVIDER_ID} --key ecp.server.fetch.token`,
-        "ecp config secrets providers doctor",
+        "ecp config secrets add server/fetch.token",
+        "ecp config secrets add GITHUB_API_KEY --value ghp_xxx",
+        "ecp config secrets get server/fetch.token",
+        "ecp config secrets list",
     ];
     async run() {
         await this.parse(ConfigSecrets);
         this.log([
             "Usage: ecp config secrets <subcommand>",
             "",
-            `  add       Add or replace a secret (${OS_PROVIDER_ID}, …)`,
-            "  get       Read a secret (default: redacted preview)",
-            "  remove    Remove a stored secret",
-            "  list      List keys (when supported by provider)",
-            "  providers list|doctor",
-            "  yaml get  Print secrets + security.secrets blocks",
-            "  yaml set-default-provider <id>",
-            "  yaml set-policy <permissive|warn|strict>",
+            "  add KEY   Add or replace a secret (interactive paste; use --value for inline)",
+            "  get KEY   Read a secret (default: redacted preview; use --reveal for full value)",
+            "  remove KEY  Remove a stored secret",
+            "  list      List keys",
             "",
+            `Ref ids use the form ${ECP_SECRET_REF_PROTOCOL_PREFIX}<key>.`,
             "Run ecp config secrets <cmd> --help for flags.",
         ].join("\n"));
     }

package/dist/commands/config/secrets.js.map

@@ -1 +1 @@
-{"version":3,"file":"secrets.js","sourceRoot":"","sources":["../../../src/commands/config/secrets.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AACtC,OAAO,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AAElE,MAAM,CAAC,OAAO,OAAO,aAAc,SAAQ,OAAO;IAChD,MAAM,CAAC,OAAO,GAAG,sDAAsD,CAAC;IAExE,MAAM,CAAC,WAAW,GAAG;;;;;;qEAM8C,CAAC;IAEpE,MAAM,CAAC,QAAQ,GAAG;QAChB,qCAAqC,cAAc,oCAAoC;QACvF,qCAAqC,cAAc,+BAA+B;QAClF,qCAAqC;KACtC,CAAC;IAEF,KAAK,CAAC,GAAG;QACP,MAAM,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QAChC,IAAI,CAAC,GAAG,CACN;YACE,wCAAwC;YACxC,EAAE;YACF,wCAAwC,cAAc,MAAM;YAC5D,uDAAuD;YACvD,oCAAoC;YACpC,oDAAoD;YACpD,yBAAyB;YACzB,qDAAqD;YACrD,kCAAkC;YAClC,4CAA4C;YAC5C,EAAE;YACF,gDAAgD;SACjD,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;IACJ,CAAC"}
+{"version":3,"file":"secrets.js","sourceRoot":"","sources":["../../../src/commands/config/secrets.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAA;AACrC,OAAO,EAAE,8BAA8B,EAAE,MAAM,mCAAmC,CAAA;AAElF,kCAAkC;AAClC,MAAM,CAAC,OAAO,OAAO,aAAc,SAAQ,OAAO;IAChD,MAAM,CAAC,OAAO,GAAG,4BAA4B,CAAA;IAE7C,MAAM,CAAC,WAAW,GAAG;;;6DAGsC,CAAA;IAE3D,MAAM,CAAC,QAAQ,GAAG;QAChB,2CAA2C;QAC3C,uDAAuD;QACvD,2CAA2C;QAC3C,yBAAyB;KAC1B,CAAA;IAED,KAAK,CAAC,GAAG;QACP,MAAM,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAA;QAC/B,IAAI,CAAC,GAAG,CACN;YACE,wCAAwC;YACxC,EAAE;YACF,iFAAiF;YACjF,oFAAoF;YACpF,sCAAsC;YACtC,uBAAuB;YACvB,EAAE;YACF,wBAAwB,8BAA8B,QAAQ;YAC9D,gDAAgD;SACjD,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAA;IACH,CAAC"}

package/dist/commands/decode.d.ts

@@ -0,0 +1,18 @@
+import { EnvModuleCommand } from "../lib/env-module-command.js";
+/** Decode TOON or JSON into a workflow manifest. */
+export default class Decode extends EnvModuleCommand {
+    static summary: string;
+    static description: string;
+    static examples: string[];
+    static flags: {
+        format: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+        output: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        strict: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        env: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+    };
+    static args: {
+        "input-path": import("@oclif/core/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    run(): Promise<void>;
+}
+//# sourceMappingURL=decode.d.ts.map

package/dist/commands/decode.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"decode.d.ts","sourceRoot":"","sources":["../../src/commands/decode.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAA;AAG/D,oDAAoD;AACpD,MAAM,CAAC,OAAO,OAAO,MAAO,SAAQ,gBAAgB;IAClD,MAAM,CAAC,OAAO,SAAqD;IAEnE,MAAM,CAAC,WAAW,SAC+E;IAEjG,MAAM,CAAC,QAAQ,WAEd;IAED,MAAM,CAAC,KAAK;;;;;MAcX;IAED,MAAM,CAAC,IAAI;;MAKV;IAEK,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;CAmC3B"}

package/dist/commands/decode.js

@@ -0,0 +1,66 @@
+import { Args, Flags } from "@oclif/core";
+import { readFile, writeFile } from "node:fs/promises";
+import { runWithCommandError } from "../lib/command-helpers.js";
+import { EnvModuleCommand } from "../lib/env-module-command.js";
+import { formatToExtensionId, parseCliFormat } from "../lib/format-cli.js";
+/** Decode TOON or JSON into a workflow manifest. */
+export default class Decode extends EnvModuleCommand {
+    static summary = "Decode encoded workflow content to JSON manifest";
+    static description = "Read encoded workflow text and decode using format extensions bound in --env (default: JSON).";
+    static examples = [
+        "<%= config.bin %> <%= command.id %> workflow.toon --format toon --env environment.ts -o workflow.json",
+    ];
+    static flags = {
+        ...EnvModuleCommand.flags,
+        format: Flags.string({
+            description: "Input format: json or toon",
+            default: "json",
+        }),
+        output: Flags.string({
+            char: "o",
+            description: "Write manifest JSON to this file (stdout if omitted)",
+        }),
+        strict: Flags.boolean({
+            description: "Fail when decoded manifest is invalid",
+            default: false,
+        }),
+    };
+    static args = {
+        "input-path": Args.string({
+            required: true,
+            description: "Encoded workflow file",
+        }),
+    };
+    async run() {
+        const { args, flags } = await this.parse(Decode);
+        await runWithCommandError(this, async () => {
+            const format = parseCliFormat(flags.format);
+            if (format === "fluent") {
+                throw new Error("Fluent decode is not supported; use ecp compile for Fluent → manifest.");
+            }
+            const ecp = await this.loadEcp(flags);
+            const raw = await readFile(args["input-path"], "utf8");
+            const content = format === "json" && raw.trimStart().startsWith("{")
+                ? JSON.parse(raw)
+                : raw;
+            const extId = formatToExtensionId(format);
+            if (!extId) {
+                throw new Error(`Unknown format: ${format}`);
+            }
+            let op = ecp.decode(content).uses(extId);
+            if (flags.strict)
+                op = op.strict();
+            op = op.to("@executioncontrolprotocol.workflow");
+            const decoded = await op.process();
+            if (!decoded.success) {
+                throw new Error(decoded.diagnostics.map((d) => d.message).join("; ") || "Decode failed");
+            }
+            const json = JSON.stringify(decoded.result, null, 2);
+            if (flags.output)
+                await writeFile(flags.output, json, "utf8");
+            else
+                this.log(json);
+        });
+    }
+}
+//# sourceMappingURL=decode.js.map

package/dist/commands/decode.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"decode.js","sourceRoot":"","sources":["../../src/commands/decode.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,aAAa,CAAA;AACzC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AACtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAA;AAC/D,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAA;AAC/D,OAAO,EAAE,mBAAmB,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AAE1E,oDAAoD;AACpD,MAAM,CAAC,OAAO,OAAO,MAAO,SAAQ,gBAAgB;IAClD,MAAM,CAAC,OAAO,GAAG,kDAAkD,CAAA;IAEnE,MAAM,CAAC,WAAW,GAChB,+FAA+F,CAAA;IAEjG,MAAM,CAAC,QAAQ,GAAG;QAChB,uGAAuG;KACxG,CAAA;IAED,MAAM,CAAC,KAAK,GAAG;QACb,GAAG,gBAAgB,CAAC,KAAK;QACzB,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC;YACnB,WAAW,EAAE,4BAA4B;YACzC,OAAO,EAAE,MAAM;SAChB,CAAC;QACF,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC;YACnB,IAAI,EAAE,GAAG;YACT,WAAW,EAAE,sDAAsD;SACpE,CAAC;QACF,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC;YACpB,WAAW,EAAE,uCAAuC;YACpD,OAAO,EAAE,KAAK;SACf,CAAC;KACH,CAAA;IAED,MAAM,CAAC,IAAI,GAAG;QACZ,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC;YACxB,QAAQ,EAAE,IAAI;YACd,WAAW,EAAE,uBAAuB;SACrC,CAAC;KACH,CAAA;IAED,KAAK,CAAC,GAAG;QACP,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;QAChD,MAAM,mBAAmB,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE;YACzC,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;YAC3C,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;gBACxB,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAA;YAC3F,CAAC;YAED,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;YACrC,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC,CAAA;YACtD,MAAM,OAAO,GACX,MAAM,KAAK,MAAM,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;gBAClD,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;gBACjB,CAAC,CAAC,GAAG,CAAA;YAET,MAAM,KAAK,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAA;YACzC,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,MAAM,IAAI,KAAK,CAAC,mBAAmB,MAAM,EAAE,CAAC,CAAA;YAC9C,CAAC;YACD,IAAI,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;YACxC,IAAI,KAAK,CAAC,MAAM;gBAAE,EAAE,GAAG,EAAE,CAAC,MAAM,EAAE,CAAA;YAClC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,oCAAoC,CAAC,CAAA;YAEhD,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,EAAE,CAAA;YAClC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;gBACrB,MAAM,IAAI,KAAK,CACb,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,eAAe,CACxE,CAAA;YACH,CAAC;YACD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;YAEpD,IAAI,KAAK,CAAC,MAAM;gBAAE,MAAM,SAAS,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,CAAA;;gBACxD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QACrB,CAAC,CAAC,CAAA;IACJ,CAAC"}

package/dist/commands/describe.d.ts

@@ -0,0 +1,13 @@
+import { EnvModuleCommand } from "../lib/env-module-command.js";
+/** Describe environment capabilities, extensions, and policies. */
+export default class Describe extends EnvModuleCommand {
+    static summary: string;
+    static description: string;
+    static examples: string[];
+    static flags: {
+        query: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        env: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+    };
+    run(): Promise<void>;
+}
+//# sourceMappingURL=describe.d.ts.map

package/dist/commands/describe.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"describe.d.ts","sourceRoot":"","sources":["../../src/commands/describe.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAA;AAE/D,mEAAmE;AACnE,MAAM,CAAC,OAAO,OAAO,QAAS,SAAQ,gBAAgB;IACpD,MAAM,CAAC,OAAO,SAA4B;IAE1C,MAAM,CAAC,WAAW,SACoF;IAEtG,MAAM,CAAC,QAAQ,WAGd;IAED,MAAM,CAAC,KAAK;;;MAKX;IAEK,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;CAU3B"}

package/dist/commands/describe.js

@@ -0,0 +1,29 @@
+import { Flags } from "@oclif/core";
+import { readJsonFile, runWithCommandError } from "../lib/command-helpers.js";
+import { EnvModuleCommand } from "../lib/env-module-command.js";
+/** Describe environment capabilities, extensions, and policies. */
+export default class Describe extends EnvModuleCommand {
+    static summary = "Describe an environment";
+    static description = "Return a structured catalog of runtime features, extensions, capabilities, and policies for --env.";
+    static examples = [
+        "<%= config.bin %> <%= command.id %> --env examples/01-echo/environment.ts",
+        "<%= config.bin %> <%= command.id %> --env environment.ts --query query.json",
+    ];
+    static flags = {
+        ...EnvModuleCommand.flags,
+        query: Flags.string({
+            description: "Path to JSON file with a DescribeQuery filter object",
+        }),
+    };
+    async run() {
+        const { flags } = await this.parse(Describe);
+        await runWithCommandError(this, async () => {
+            const ecp = await this.loadEcp(flags);
+            const query = flags.query
+                ? await readJsonFile(flags.query, "--query")
+                : undefined;
+            this.log(JSON.stringify(await ecp.describe(query), null, 2));
+        });
+    }
+}
+//# sourceMappingURL=describe.js.map

package/dist/commands/describe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"describe.js","sourceRoot":"","sources":["../../src/commands/describe.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAA;AAEnC,OAAO,EAAE,YAAY,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAA;AAC7E,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAA;AAE/D,mEAAmE;AACnE,MAAM,CAAC,OAAO,OAAO,QAAS,SAAQ,gBAAgB;IACpD,MAAM,CAAC,OAAO,GAAG,yBAAyB,CAAA;IAE1C,MAAM,CAAC,WAAW,GAChB,oGAAoG,CAAA;IAEtG,MAAM,CAAC,QAAQ,GAAG;QAChB,2EAA2E;QAC3E,6EAA6E;KAC9E,CAAA;IAED,MAAM,CAAC,KAAK,GAAG;QACb,GAAG,gBAAgB,CAAC,KAAK;QACzB,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC;YAClB,WAAW,EAAE,sDAAsD;SACpE,CAAC;KACH,CAAA;IAED,KAAK,CAAC,GAAG;QACP,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;QAC5C,MAAM,mBAAmB,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE;YACzC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;YACrC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK;gBACvB,CAAC,CAAC,MAAM,YAAY,CAAgB,KAAK,CAAC,KAAK,EAAE,SAAS,CAAC;gBAC3D,CAAC,CAAC,SAAS,CAAA;YACb,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAA;QAC9D,CAAC,CAAC,CAAA;IACJ,CAAC"}

package/dist/commands/encode.d.ts

@@ -0,0 +1,18 @@
+import { EnvModuleCommand } from "../lib/env-module-command.js";
+/** Encode a workflow manifest to TOON, Fluent, or JSON. */
+export default class Encode extends EnvModuleCommand {
+    static summary: string;
+    static description: string;
+    static examples: string[];
+    static flags: {
+        format: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+        output: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        compact: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        env: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+    };
+    static args: {
+        "input-path": import("@oclif/core/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    run(): Promise<void>;
+}
+//# sourceMappingURL=encode.d.ts.map

package/dist/commands/encode.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"encode.d.ts","sourceRoot":"","sources":["../../src/commands/encode.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAA;AAG/D,2DAA2D;AAC3D,MAAM,CAAC,OAAO,OAAO,MAAO,SAAQ,gBAAgB;IAClD,MAAM,CAAC,OAAO,SAAwC;IAEtD,MAAM,CAAC,WAAW,SAC4F;IAE9G,MAAM,CAAC,QAAQ,WAGd;IAED,MAAM,CAAC,KAAK;;;;;MAcX;IAED,MAAM,CAAC,IAAI;;MAKV;IAEK,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;CA6B3B"}

package/dist/commands/encode.js

@@ -0,0 +1,63 @@
+import { Args, Flags } from "@oclif/core";
+import { loadWorkflowFile } from "@executioncontrolprotocol/core/loaders";
+import { writeFile } from "node:fs/promises";
+import { runWithCommandError } from "../lib/command-helpers.js";
+import { EnvModuleCommand } from "../lib/env-module-command.js";
+import { formatToExtensionId, parseCliFormat } from "../lib/format-cli.js";
+/** Encode a workflow manifest to TOON, Fluent, or JSON. */
+export default class Encode extends EnvModuleCommand {
+    static summary = "Encode a workflow to another format";
+    static description = "Load a workflow (.ts, .js, or .json) and encode it using format extensions bound in --env (default: JSON).";
+    static examples = [
+        "<%= config.bin %> <%= command.id %> workflow.json --format toon --env environment.ts -o workflow.toon",
+        "<%= config.bin %> <%= command.id %> workflow.json --format fluent --env environment.ts -o workflow.generated.ts",
+    ];
+    static flags = {
+        ...EnvModuleCommand.flags,
+        format: Flags.string({
+            description: "Output format: json, toon, or fluent",
+            default: "json",
+        }),
+        output: Flags.string({
+            char: "o",
+            description: "Write encoded output to this file (stdout if omitted)",
+        }),
+        compact: Flags.boolean({
+            description: "Compact output when supported by the format",
+            default: false,
+        }),
+    };
+    static args = {
+        "input-path": Args.string({
+            required: true,
+            description: "Workflow file (.ts, .js, or .json)",
+        }),
+    };
+    async run() {
+        const { args, flags } = await this.parse(Encode);
+        await runWithCommandError(this, async () => {
+            const format = parseCliFormat(flags.format);
+            const ecp = await this.loadEcp(flags);
+            const manifest = await loadWorkflowFile(args["input-path"]);
+            const extId = formatToExtensionId(format);
+            if (!extId) {
+                throw new Error(`Unknown format: ${format}`);
+            }
+            let op = ecp.encode(manifest).uses(extId);
+            if (flags.compact)
+                op = op.compact();
+            const encoded = await op.process();
+            if (!encoded.success) {
+                throw new Error(encoded.diagnostics.map((d) => d.message).join("; ") || "Encode failed");
+            }
+            const out = typeof encoded.result === "string"
+                ? encoded.result
+                : JSON.stringify(encoded.result, null, flags.compact ? 0 : 2);
+            if (flags.output)
+                await writeFile(flags.output, out, "utf8");
+            else
+                this.log(out);
+        });
+    }
+}
+//# sourceMappingURL=encode.js.map

package/dist/commands/encode.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"encode.js","sourceRoot":"","sources":["../../src/commands/encode.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,aAAa,CAAA;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,wCAAwC,CAAA;AACzE,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AAC5C,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAA;AAC/D,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAA;AAC/D,OAAO,EAAE,mBAAmB,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AAE1E,2DAA2D;AAC3D,MAAM,CAAC,OAAO,OAAO,MAAO,SAAQ,gBAAgB;IAClD,MAAM,CAAC,OAAO,GAAG,qCAAqC,CAAA;IAEtD,MAAM,CAAC,WAAW,GAChB,4GAA4G,CAAA;IAE9G,MAAM,CAAC,QAAQ,GAAG;QAChB,uGAAuG;QACvG,iHAAiH;KAClH,CAAA;IAED,MAAM,CAAC,KAAK,GAAG;QACb,GAAG,gBAAgB,CAAC,KAAK;QACzB,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC;YACnB,WAAW,EAAE,sCAAsC;YACnD,OAAO,EAAE,MAAM;SAChB,CAAC;QACF,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC;YACnB,IAAI,EAAE,GAAG;YACT,WAAW,EAAE,uDAAuD;SACrE,CAAC;QACF,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC;YACrB,WAAW,EAAE,6CAA6C;YAC1D,OAAO,EAAE,KAAK;SACf,CAAC;KACH,CAAA;IAED,MAAM,CAAC,IAAI,GAAG;QACZ,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC;YACxB,QAAQ,EAAE,IAAI;YACd,WAAW,EAAE,oCAAoC;SAClD,CAAC;KACH,CAAA;IAED,KAAK,CAAC,GAAG;QACP,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;QAChD,MAAM,mBAAmB,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE;YACzC,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;YAC3C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;YACrC,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAA;YAE3D,MAAM,KAAK,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAA;YACzC,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,MAAM,IAAI,KAAK,CAAC,mBAAmB,MAAM,EAAE,CAAC,CAAA;YAC9C,CAAC;YACD,IAAI,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;YACzC,IAAI,KAAK,CAAC,OAAO;gBAAE,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAA;YAEpC,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,EAAE,CAAA;YAClC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;gBACrB,MAAM,IAAI,KAAK,CACb,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,eAAe,CACxE,CAAA;YACH,CAAC;YACD,MAAM,GAAG,GACP,OAAO,OAAO,CAAC,MAAM,KAAK,QAAQ;gBAChC,CAAC,CAAC,OAAO,CAAC,MAAM;gBAChB,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;YAEjE,IAAI,KAAK,CAAC,MAAM;gBAAE,MAAM,SAAS,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,CAAA;;gBACvD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QACpB,CAAC,CAAC,CAAA;IACJ,CAAC"}

package/dist/commands/run.d.ts

@@ -1,23 +1,17 @@
-import { EcpEnvironmentCommand } from "../lib/ecp-environment-command.js";
-export default class Run extends EcpEnvironmentCommand {
+import { WorkflowEnvCommand } from "../lib/env-module-command.js";
+/** Execute a workflow in an environment. */
+export default class Run extends WorkflowEnvCommand {
     static summary: string;
-    static flags: {
-        input: import("@oclif/core/interfaces").OptionFlag<string[] | undefined, import("@oclif/core/interfaces").CustomOptions>;
-        model: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
-        provider: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
-        config: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
-        trace: import("@oclif/core/interfaces").BooleanFlag<boolean>;
-        "trace-dir": import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
-        logger: import("@oclif/core/interfaces").OptionFlag<string[] | undefined, import("@oclif/core/interfaces").CustomOptions>;
-        debug: import("@oclif/core/interfaces").BooleanFlag<boolean>;
-        environment: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
-    };
+    static description: string;
+    static examples: string[];
     static args: {
-        contextPath: import("@oclif/core/interfaces").Arg<string, Record<string, unknown>>;
+        "workflow-path": import("@oclif/core/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static flags: {
+        input: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        "dry-run": import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        env: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
     };
     run(): Promise<void>;
-    private createModelProviderOrFail;
-    private assertProviderAllowedByPolicy;
-    private assertModelAllowedByPolicy;
 }
 //# sourceMappingURL=run.d.ts.map

package/dist/commands/run.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"run.d.ts","sourceRoot":"","sources":["../../src/commands/run.ts"],"names":[],"mappings":"AAsCA,OAAO,EAAE,qBAAqB,EAAE,MAAM,mCAAmC,CAAC;AA+C1E,MAAM,CAAC,OAAO,OAAO,GAAI,SAAQ,qBAAqB;IACpD,MAAM,CAAC,OAAO,SAAgC;IAE9C,MAAM,CAAC,KAAK;;;;;;;;;;MA4CV;IAEF,MAAM,CAAC,IAAI;;MAKT;IAEI,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;IA2Q1B,OAAO,CAAC,yBAAyB;IAmBjC,OAAO,CAAC,6BAA6B;IAsBrC,OAAO,CAAC,0BAA0B;CAenC"}
+{"version":3,"file":"run.d.ts","sourceRoot":"","sources":["../../src/commands/run.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAA;AAEjE,4CAA4C;AAC5C,MAAM,CAAC,OAAO,OAAO,GAAI,SAAQ,kBAAkB;IACjD,MAAM,CAAC,OAAO,SAAmB;IAEjC,MAAM,CAAC,WAAW,SACyE;IAE3F,MAAM,CAAC,QAAQ,WAId;IAED,MAAM,CAAC,IAAI;;MAEV;IAED,MAAM,CAAC,KAAK;;;;MASX;IAEK,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;CAyB3B"}