@graphorin/cli 0.5.0

package/dist/index.d.ts

@@ -0,0 +1,46 @@
+import { AuditCommonOptions, AuditExportOptions, AuditExportResult, AuditPruneOptions, AuditVerifyResult, runAuditExport, runAuditPrune, runAuditVerify } from "./commands/audit.js";
+import { AuthCommonOptions, AuthListOptions, AuthLoginOptions, AuthRefreshOptions, AuthRevokeOptions, runAuthList, runAuthLogin, runAuthRefresh, runAuthRevoke, runAuthStatus } from "./commands/auth.js";
+import { CONSOLIDATOR_INVALID_TIER_EXIT, ConsolidatorCommonOptions, ConsolidatorSetTierOptions, ConsolidatorStatusResult, ConsolidatorStopOptions, runConsolidatorSetTier, runConsolidatorStatus, runConsolidatorStop } from "./commands/consolidator.js";
+import { DoctorCommandOptions, DoctorReport, expectedFileModes, runDoctor } from "./commands/doctor.js";
+import { GuardCommonOptions, GuardExplainOptions, GuardExplainResult, GuardStatusEntry, runGuardExplain, runGuardStatus } from "./commands/guard.js";
+import { InitCommandOptions, InitCommandResult, runInit } from "./commands/init.js";
+import { MemoryActivityConflict, MemoryActivityEvent, MemoryActivityOptions, MemoryActivityResult, MemoryCitingInsight, MemoryCommonOptions, MemoryConflictEntry, MemoryHistoryEntry, MemoryInspectEntity, MemoryInspectFact, MemoryInspectOptions, MemoryInspectResult, MemoryMigrateOptions, MemoryReviewItem, MemoryReviewOptions, MemoryReviewResult, MemoryStatusEmbedder, MemoryStatusResult, MemoryWhyOptions, MemoryWhyRecall, MemoryWhyResult, runMemoryActivity, runMemoryInspect, runMemoryMigrate, runMemoryReview, runMemoryStatus, runMemoryWhy } from "./commands/memory.js";
+import { MigrateCommandOptions, MigrateCommandResult, runMigrate } from "./commands/migrate.js";
+import { MigrateConfigOptions, MigrateConfigResult, runMigrateConfig } from "./commands/migrate-config.js";
+import { MigrateExportOptions, MigrateExportResult, runMigrateExport } from "./commands/migrate-export.js";
+import { PricingCommonOptions, PricingDiffOptions, PricingLookupOptions, PricingMissingOptions, PricingRefreshOptions, PricingStatusResult, runPricingDiff, runPricingLookup, runPricingMissing, runPricingRefresh, runPricingStatus } from "./commands/pricing.js";
+import { SecretsCommonOptions, SecretsDeleteOptions, SecretsGetOptions, SecretsGetResult, SecretsListOptions, SecretsRefOptions, SecretsRefResult, SecretsRotateOptions, SecretsSetOptions, runSecretsDelete, runSecretsGet, runSecretsList, runSecretsRef, runSecretsRotate, runSecretsSet } from "./commands/secrets.js";
+import { SkillTrustLevelInput, SkillsAuditOptions, SkillsCommonOptions, SkillsInspectOptions, SkillsInstallOptions, SkillsMigrateFrontmatterOptions, SkillsMigrateFrontmatterResult, runSkillsAudit, runSkillsInspect, runSkillsInstall, runSkillsMigrateFrontmatter } from "./commands/skills.js";
+import { SecretsSourceFlag, StartCommandOptions, runStart } from "./commands/start.js";
+import { StorageCleanupBackupsOptions, StorageCleanupBackupsResult, StorageCommonOptions, StorageEncryptOptions, StorageRekeyOptions, StorageStatusResult, runStorageCleanupBackups, runStorageEncrypt, runStorageRekey, runStorageStatus } from "./commands/storage.js";
+import { TelemetryStatusResult, runTelemetryDisable, runTelemetryEnable, runTelemetryInspect, runTelemetryStatus } from "./commands/telemetry.js";
+import { TokenCommonOptions, TokenCreateOptions, TokenCreateResult, TokenListOptions, TokenRekeyOptions, TokenRevokeOptions, TokenRotateOptions, TokenVerifyOptions, TokenVerifyResult, parseDuration, runTokenCreate, runTokenList, runTokenRekey, runTokenRevoke, runTokenRotate, runTokenVerify } from "./commands/token.js";
+import { ToolsLintOptions, ToolsLintReport, runToolsLint } from "./commands/tools-lint.js";
+import { TracesCommonOptions, TracesPruneOptions, TracesPruneResult, TracesStatusResult, runTracesPrune, runTracesStatus } from "./commands/traces.js";
+import { TriggersCommonOptions, TriggersDisableOptions, TriggersFireOptions, TriggersPruneOptions, TriggersPruneResult, TriggersStatusOptions, runTriggersDisable, runTriggersFire, runTriggersList, runTriggersPrune, runTriggersStatus } from "./commands/triggers.js";
+import "./commands/index.js";
+import { OfflineModeViolationError, assertNoNetworkInOfflineMode, checkOfflineModeBlocked, isOfflineMode } from "./internal/offline.js";
+
+//#region src/index.d.ts
+/**
+ * `@graphorin/cli` — operator CLI for the Graphorin framework.
+ *
+ * Phase 14a shipped the minimal `graphorin` binary with three
+ * lifecycle commands: `start`, `init`, and `migrate`. Phase 15
+ * extended the same binary with the operator surface (`doctor`,
+ * `token`, `secrets`, `audit`, `storage`, `memory`, `consolidator`,
+ * `triggers`, `auth`, `pricing`, `skills`, `traces`,
+ * `migrate-export`, `migrate-config`, `guard`, `telemetry`,
+ * `tools lint`).
+ *
+ * Every subcommand is exported as a typed library function so
+ * downstream automations can call them directly without spawning a
+ * child process.
+ *
+ * @packageDocumentation
+ */
+/** Canonical version constant. Mirrors the `package.json` version. */
+declare const VERSION = "0.5.0";
+//#endregion
+export { AuditCommonOptions, AuditExportOptions, AuditExportResult, AuditPruneOptions, AuditVerifyResult, AuthCommonOptions, AuthListOptions, AuthLoginOptions, AuthRefreshOptions, AuthRevokeOptions, CONSOLIDATOR_INVALID_TIER_EXIT, ConsolidatorCommonOptions, ConsolidatorSetTierOptions, ConsolidatorStatusResult, ConsolidatorStopOptions, DoctorCommandOptions, DoctorReport, GuardCommonOptions, GuardExplainOptions, GuardExplainResult, GuardStatusEntry, InitCommandOptions, InitCommandResult, MemoryActivityConflict, MemoryActivityEvent, MemoryActivityOptions, MemoryActivityResult, MemoryCitingInsight, MemoryCommonOptions, MemoryConflictEntry, MemoryHistoryEntry, MemoryInspectEntity, MemoryInspectFact, MemoryInspectOptions, MemoryInspectResult, MemoryMigrateOptions, MemoryReviewItem, MemoryReviewOptions, MemoryReviewResult, MemoryStatusEmbedder, MemoryStatusResult, MemoryWhyOptions, MemoryWhyRecall, MemoryWhyResult, MigrateCommandOptions, MigrateCommandResult, MigrateConfigOptions, MigrateConfigResult, MigrateExportOptions, MigrateExportResult, OfflineModeViolationError, PricingCommonOptions, PricingDiffOptions, PricingLookupOptions, PricingMissingOptions, PricingRefreshOptions, PricingStatusResult, SecretsCommonOptions, SecretsDeleteOptions, SecretsGetOptions, SecretsGetResult, SecretsListOptions, SecretsRefOptions, SecretsRefResult, SecretsRotateOptions, SecretsSetOptions, SecretsSourceFlag, SkillTrustLevelInput, SkillsAuditOptions, SkillsCommonOptions, SkillsInspectOptions, SkillsInstallOptions, SkillsMigrateFrontmatterOptions, SkillsMigrateFrontmatterResult, StartCommandOptions, StorageCleanupBackupsOptions, StorageCleanupBackupsResult, StorageCommonOptions, StorageEncryptOptions, StorageRekeyOptions, StorageStatusResult, TelemetryStatusResult, TokenCommonOptions, TokenCreateOptions, TokenCreateResult, TokenListOptions, TokenRekeyOptions, TokenRevokeOptions, TokenRotateOptions, TokenVerifyOptions, TokenVerifyResult, ToolsLintOptions, ToolsLintReport, TracesCommonOptions, TracesPruneOptions, TracesPruneResult, TracesStatusResult, TriggersCommonOptions, TriggersDisableOptions, TriggersFireOptions, TriggersPruneOptions, TriggersPruneResult, TriggersStatusOptions, VERSION, assertNoNetworkInOfflineMode, checkOfflineModeBlocked, expectedFileModes, isOfflineMode, parseDuration, runAuditExport, runAuditPrune, runAuditVerify, runAuthList, runAuthLogin, runAuthRefresh, runAuthRevoke, runAuthStatus, runConsolidatorSetTier, runConsolidatorStatus, runConsolidatorStop, runDoctor, runGuardExplain, runGuardStatus, runInit, runMemoryActivity, runMemoryInspect, runMemoryMigrate, runMemoryReview, runMemoryStatus, runMemoryWhy, runMigrate, runMigrateConfig, runMigrateExport, runPricingDiff, runPricingLookup, runPricingMissing, runPricingRefresh, runPricingStatus, runSecretsDelete, runSecretsGet, runSecretsList, runSecretsRef, runSecretsRotate, runSecretsSet, runSkillsAudit, runSkillsInspect, runSkillsInstall, runSkillsMigrateFrontmatter, runStart, runStorageCleanupBackups, runStorageEncrypt, runStorageRekey, runStorageStatus, runTelemetryDisable, runTelemetryEnable, runTelemetryInspect, runTelemetryStatus, runTokenCreate, runTokenList, runTokenRekey, runTokenRevoke, runTokenRotate, runTokenVerify, runToolsLint, runTracesPrune, runTracesStatus, runTriggersDisable, runTriggersFire, runTriggersList, runTriggersPrune, runTriggersStatus };
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","names":[],"sources":["../src/index.ts"],"sourcesContent":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;cAmBa,OAAA"}

package/dist/index.js

@@ -0,0 +1,47 @@
+import { runAuditExport, runAuditPrune, runAuditVerify } from "./commands/audit.js";
+import { OfflineModeViolationError, assertNoNetworkInOfflineMode, checkOfflineModeBlocked, isOfflineMode } from "./internal/offline.js";
+import { runAuthList, runAuthLogin, runAuthRefresh, runAuthRevoke, runAuthStatus } from "./commands/auth.js";
+import { CONSOLIDATOR_INVALID_TIER_EXIT, runConsolidatorSetTier, runConsolidatorStatus, runConsolidatorStop } from "./commands/consolidator.js";
+import { expectedFileModes, runDoctor } from "./commands/doctor.js";
+import { runGuardExplain, runGuardStatus } from "./commands/guard.js";
+import { runInit } from "./commands/init.js";
+import { runMemoryActivity, runMemoryInspect, runMemoryMigrate, runMemoryReview, runMemoryStatus, runMemoryWhy } from "./commands/memory.js";
+import { runStart } from "./commands/start.js";
+import { runMigrate } from "./commands/migrate.js";
+import { runMigrateConfig } from "./commands/migrate-config.js";
+import { runMigrateExport } from "./commands/migrate-export.js";
+import { runPricingDiff, runPricingLookup, runPricingMissing, runPricingRefresh, runPricingStatus } from "./commands/pricing.js";
+import { runSecretsDelete, runSecretsGet, runSecretsList, runSecretsRef, runSecretsRotate, runSecretsSet } from "./commands/secrets.js";
+import { runSkillsAudit, runSkillsInspect, runSkillsInstall, runSkillsMigrateFrontmatter } from "./commands/skills.js";
+import { runStorageCleanupBackups, runStorageEncrypt, runStorageRekey, runStorageStatus } from "./commands/storage.js";
+import { runTelemetryDisable, runTelemetryEnable, runTelemetryInspect, runTelemetryStatus } from "./commands/telemetry.js";
+import { parseDuration, runTokenCreate, runTokenList, runTokenRekey, runTokenRevoke, runTokenRotate, runTokenVerify } from "./commands/token.js";
+import { runToolsLint } from "./commands/tools-lint.js";
+import { runTracesPrune, runTracesStatus } from "./commands/traces.js";
+import { runTriggersDisable, runTriggersFire, runTriggersList, runTriggersPrune, runTriggersStatus } from "./commands/triggers.js";
+import "./commands/index.js";
+
+//#region src/index.ts
+/**
+* `@graphorin/cli` — operator CLI for the Graphorin framework.
+*
+* Phase 14a shipped the minimal `graphorin` binary with three
+* lifecycle commands: `start`, `init`, and `migrate`. Phase 15
+* extended the same binary with the operator surface (`doctor`,
+* `token`, `secrets`, `audit`, `storage`, `memory`, `consolidator`,
+* `triggers`, `auth`, `pricing`, `skills`, `traces`,
+* `migrate-export`, `migrate-config`, `guard`, `telemetry`,
+* `tools lint`).
+*
+* Every subcommand is exported as a typed library function so
+* downstream automations can call them directly without spawning a
+* child process.
+*
+* @packageDocumentation
+*/
+/** Canonical version constant. Mirrors the `package.json` version. */
+const VERSION = "0.5.0";
+
+//#endregion
+export { CONSOLIDATOR_INVALID_TIER_EXIT, OfflineModeViolationError, VERSION, assertNoNetworkInOfflineMode, checkOfflineModeBlocked, expectedFileModes, isOfflineMode, parseDuration, runAuditExport, runAuditPrune, runAuditVerify, runAuthList, runAuthLogin, runAuthRefresh, runAuthRevoke, runAuthStatus, runConsolidatorSetTier, runConsolidatorStatus, runConsolidatorStop, runDoctor, runGuardExplain, runGuardStatus, runInit, runMemoryActivity, runMemoryInspect, runMemoryMigrate, runMemoryReview, runMemoryStatus, runMemoryWhy, runMigrate, runMigrateConfig, runMigrateExport, runPricingDiff, runPricingLookup, runPricingMissing, runPricingRefresh, runPricingStatus, runSecretsDelete, runSecretsGet, runSecretsList, runSecretsRef, runSecretsRotate, runSecretsSet, runSkillsAudit, runSkillsInspect, runSkillsInstall, runSkillsMigrateFrontmatter, runStart, runStorageCleanupBackups, runStorageEncrypt, runStorageRekey, runStorageStatus, runTelemetryDisable, runTelemetryEnable, runTelemetryInspect, runTelemetryStatus, runTokenCreate, runTokenList, runTokenRekey, runTokenRevoke, runTokenRotate, runTokenVerify, runToolsLint, runTracesPrune, runTracesStatus, runTriggersDisable, runTriggersFire, runTriggersList, runTriggersPrune, runTriggersStatus };
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","names":[],"sources":["../src/index.ts"],"sourcesContent":["/**\n * `@graphorin/cli` — operator CLI for the Graphorin framework.\n *\n * Phase 14a shipped the minimal `graphorin` binary with three\n * lifecycle commands: `start`, `init`, and `migrate`. Phase 15\n * extended the same binary with the operator surface (`doctor`,\n * `token`, `secrets`, `audit`, `storage`, `memory`, `consolidator`,\n * `triggers`, `auth`, `pricing`, `skills`, `traces`,\n * `migrate-export`, `migrate-config`, `guard`, `telemetry`,\n * `tools lint`).\n *\n * Every subcommand is exported as a typed library function so\n * downstream automations can call them directly without spawning a\n * child process.\n *\n * @packageDocumentation\n */\n\n/** Canonical version constant. Mirrors the `package.json` version. */\nexport const VERSION = '0.5.0';\n\nexport * from './commands/index.js';\nexport {\n  assertNoNetworkInOfflineMode,\n  checkOfflineModeBlocked,\n  isOfflineMode,\n  OfflineModeViolationError,\n} from './internal/offline.js';\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAmBA,MAAa,UAAU"}

package/dist/internal/exit.js

@@ -0,0 +1,17 @@
+import process from "node:process";
+
+//#region src/internal/exit.ts
+/**
+* Numeric exit codes the CLI uses uniformly.
+*
+* @internal
+*/
+const EXIT_CODES = Object.freeze({
+	OK: 0,
+	RECOVERABLE_FAILURE: 1,
+	UNSUPPORTED: 2
+});
+
+//#endregion
+export { EXIT_CODES };
+//# sourceMappingURL=exit.js.map

package/dist/internal/exit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"exit.js","names":[],"sources":["../../src/internal/exit.ts"],"sourcesContent":["/**\n * Shared exit helpers. Phase 15 subcommands fail-fast through\n * {@link fail}; the helper writes the error message via the chosen\n * sink and then calls `process.exit(code)`. Tests stub `process.exit`\n * to convert the call into a thrown sentinel they can assert against.\n *\n * Exit codes follow the small documented contract:\n *\n *  - `0` — success (subcommand completed without warnings or with\n *    informational warnings only).\n *  - `1` — recoverable failure (config invalid, secret missing,\n *    threshold exceeded). Operator can fix and re-run.\n *  - `2` — unsupported invocation (e.g. `graphorin storage encrypt`\n *    when the Phase 16 sub-pack is not installed). Operator must\n *    install / configure something before retrying.\n *\n * @internal\n */\n\nimport process from 'node:process';\n\nimport { brand } from './output.js';\n\n/**\n * Numeric exit codes the CLI uses uniformly.\n *\n * @internal\n */\nexport const EXIT_CODES = Object.freeze({\n  OK: 0,\n  RECOVERABLE_FAILURE: 1,\n  UNSUPPORTED: 2,\n} as const);\n\n/**\n * Pretty-print an `Error`-shaped value without leaking secrets, then\n * exit. Re-uses `cause` chains when present.\n *\n * @internal\n */\nexport function fail(\n  err: unknown,\n  options: {\n    readonly code?: number;\n    readonly print?: (line: string) => void;\n  } = {},\n): never {\n  const code = options.code ?? EXIT_CODES.RECOVERABLE_FAILURE;\n  const print = options.print ?? ((line: string) => process.stderr.write(`${line}\\n`));\n  if (err instanceof Error) {\n    const kind = (err as { kind?: string }).kind;\n    const prefix = kind === undefined ? '' : `${kind}: `;\n    print(brand(`${prefix}${err.message}`));\n    const hint = (err as { hint?: string }).hint;\n    if (typeof hint === 'string' && hint.length > 0) {\n      print(brand(`hint: ${hint}`));\n    }\n  } else {\n    print(brand(`unknown error: ${String(err)}`));\n  }\n  process.exit(code);\n}\n"],"mappings":";;;;;;;;AA4BA,MAAa,aAAa,OAAO,OAAO;CACtC,IAAI;CACJ,qBAAqB;CACrB,aAAa;CACd,CAAU"}

package/dist/internal/load-config.js

@@ -0,0 +1,84 @@
+import { readFile, stat } from "node:fs/promises";
+import { isAbsolute, resolve } from "node:path";
+import { pathToFileURL } from "node:url";
+
+//#region src/internal/load-config.ts
+/**
+* Tiny config loader. Resolves the path the operator handed in (or
+* the per-platform default) and returns the raw {@link ServerConfigInput}
+* payload — strict validation happens later via
+* `parseServerConfig(...)` from `@graphorin/server`.
+*
+* Supported file kinds (decided by extension):
+*
+*  - `*.ts`  / `*.mts` / `*.cts` — re-imported through the platform
+*    loader; relies on Node's native TS support (or a registered
+*    loader) — Phase 14a leaves the operator to wire `tsx`, `ts-node`,
+*    or whatever they prefer when shipping a `.ts` config.
+*  - `*.js`  / `*.mjs`           — dynamic `import()`.
+*  - `*.json`                     — `readFile` + `JSON.parse`.
+*
+* The file is expected to default-export an object built via
+* `defineConfig({...})`.
+*
+* @internal
+*/
+const DEFAULT_FILENAMES = Object.freeze([
+	"graphorin.config.ts",
+	"graphorin.config.mjs",
+	"graphorin.config.js",
+	"graphorin.config.json"
+]);
+/**
+* Resolve the path the operator passed (or pick the first existing
+* default in `cwd`) and parse the config it exports.
+*
+* @stable
+*/
+async function loadConfig(pathArg, options = {}) {
+	const cwd = options.cwd ?? process.cwd();
+	let absolute;
+	if (pathArg !== void 0 && pathArg.length > 0) {
+		absolute = isAbsolute(pathArg) ? pathArg : resolve(cwd, pathArg);
+		await assertExists(absolute);
+	} else absolute = await firstExistingDefault(cwd);
+	const config = await importConfig(absolute);
+	return Object.freeze({
+		path: absolute,
+		config
+	});
+}
+async function firstExistingDefault(cwd) {
+	for (const name of DEFAULT_FILENAMES) {
+		const candidate = resolve(cwd, name);
+		try {
+			await stat(candidate);
+			return candidate;
+		} catch {}
+	}
+	throw new Error(`[graphorin/cli] no config file found in '${cwd}'. Looked for: ${DEFAULT_FILENAMES.join(", ")}.`);
+}
+async function assertExists(path) {
+	try {
+		await stat(path);
+	} catch (err) {
+		throw new Error(`[graphorin/cli] config file '${path}' not found.`, { cause: err });
+	}
+}
+async function importConfig(path) {
+	if (path.endsWith(".json")) {
+		const raw = await readFile(path, "utf8");
+		try {
+			return JSON.parse(raw);
+		} catch (err) {
+			throw new Error(`[graphorin/cli] config '${path}' is not valid JSON.`, { cause: err });
+		}
+	}
+	const mod = await import(pathToFileURL(path).href);
+	if (mod.default !== void 0) return mod.default;
+	return mod;
+}
+
+//#endregion
+export { loadConfig };
+//# sourceMappingURL=load-config.js.map

package/dist/internal/load-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"load-config.js","names":["DEFAULT_FILENAMES: ReadonlyArray<string>","absolute: string"],"sources":["../../src/internal/load-config.ts"],"sourcesContent":["/**\n * Tiny config loader. Resolves the path the operator handed in (or\n * the per-platform default) and returns the raw {@link ServerConfigInput}\n * payload — strict validation happens later via\n * `parseServerConfig(...)` from `@graphorin/server`.\n *\n * Supported file kinds (decided by extension):\n *\n *  - `*.ts`  / `*.mts` / `*.cts` — re-imported through the platform\n *    loader; relies on Node's native TS support (or a registered\n *    loader) — Phase 14a leaves the operator to wire `tsx`, `ts-node`,\n *    or whatever they prefer when shipping a `.ts` config.\n *  - `*.js`  / `*.mjs`           — dynamic `import()`.\n *  - `*.json`                     — `readFile` + `JSON.parse`.\n *\n * The file is expected to default-export an object built via\n * `defineConfig({...})`.\n *\n * @internal\n */\n\nimport { readFile, stat } from 'node:fs/promises';\nimport { isAbsolute, resolve } from 'node:path';\nimport { pathToFileURL } from 'node:url';\n\nimport type { ServerConfigInput } from '@graphorin/server';\n\n/**\n * @stable\n */\nexport interface LoadConfigOptions {\n  /** Override the resolved process.cwd(). Tests inject a fixture root. */\n  readonly cwd?: string;\n}\n\n/**\n * @stable\n */\nexport interface LoadedConfig {\n  readonly path: string;\n  readonly config: ServerConfigInput;\n}\n\nconst DEFAULT_FILENAMES: ReadonlyArray<string> = Object.freeze([\n  'graphorin.config.ts',\n  'graphorin.config.mjs',\n  'graphorin.config.js',\n  'graphorin.config.json',\n]);\n\n/**\n * Resolve the path the operator passed (or pick the first existing\n * default in `cwd`) and parse the config it exports.\n *\n * @stable\n */\nexport async function loadConfig(\n  pathArg: string | undefined,\n  options: LoadConfigOptions = {},\n): Promise<LoadedConfig> {\n  const cwd = options.cwd ?? process.cwd();\n  let absolute: string;\n  if (pathArg !== undefined && pathArg.length > 0) {\n    absolute = isAbsolute(pathArg) ? pathArg : resolve(cwd, pathArg);\n    await assertExists(absolute);\n  } else {\n    absolute = await firstExistingDefault(cwd);\n  }\n  const config = await importConfig(absolute);\n  return Object.freeze({ path: absolute, config });\n}\n\nasync function firstExistingDefault(cwd: string): Promise<string> {\n  for (const name of DEFAULT_FILENAMES) {\n    const candidate = resolve(cwd, name);\n    try {\n      await stat(candidate);\n      return candidate;\n    } catch {}\n  }\n  throw new Error(\n    `[graphorin/cli] no config file found in '${cwd}'. Looked for: ${DEFAULT_FILENAMES.join(', ')}.`,\n  );\n}\n\nasync function assertExists(path: string): Promise<void> {\n  try {\n    await stat(path);\n  } catch (err) {\n    throw new Error(`[graphorin/cli] config file '${path}' not found.`, { cause: err });\n  }\n}\n\nasync function importConfig(path: string): Promise<ServerConfigInput> {\n  if (path.endsWith('.json')) {\n    const raw = await readFile(path, 'utf8');\n    try {\n      return JSON.parse(raw) as ServerConfigInput;\n    } catch (err) {\n      throw new Error(`[graphorin/cli] config '${path}' is not valid JSON.`, { cause: err });\n    }\n  }\n  const url = pathToFileURL(path).href;\n  const mod = (await import(url)) as { default?: unknown };\n  if (mod.default !== undefined) return mod.default as ServerConfigInput;\n  return mod as unknown as ServerConfigInput;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AA2CA,MAAMA,oBAA2C,OAAO,OAAO;CAC7D;CACA;CACA;CACA;CACD,CAAC;;;;;;;AAQF,eAAsB,WACpB,SACA,UAA6B,EAAE,EACR;CACvB,MAAM,MAAM,QAAQ,OAAO,QAAQ,KAAK;CACxC,IAAIC;AACJ,KAAI,YAAY,UAAa,QAAQ,SAAS,GAAG;AAC/C,aAAW,WAAW,QAAQ,GAAG,UAAU,QAAQ,KAAK,QAAQ;AAChE,QAAM,aAAa,SAAS;OAE5B,YAAW,MAAM,qBAAqB,IAAI;CAE5C,MAAM,SAAS,MAAM,aAAa,SAAS;AAC3C,QAAO,OAAO,OAAO;EAAE,MAAM;EAAU;EAAQ,CAAC;;AAGlD,eAAe,qBAAqB,KAA8B;AAChE,MAAK,MAAM,QAAQ,mBAAmB;EACpC,MAAM,YAAY,QAAQ,KAAK,KAAK;AACpC,MAAI;AACF,SAAM,KAAK,UAAU;AACrB,UAAO;UACD;;AAEV,OAAM,IAAI,MACR,4CAA4C,IAAI,iBAAiB,kBAAkB,KAAK,KAAK,CAAC,GAC/F;;AAGH,eAAe,aAAa,MAA6B;AACvD,KAAI;AACF,QAAM,KAAK,KAAK;UACT,KAAK;AACZ,QAAM,IAAI,MAAM,gCAAgC,KAAK,eAAe,EAAE,OAAO,KAAK,CAAC;;;AAIvF,eAAe,aAAa,MAA0C;AACpE,KAAI,KAAK,SAAS,QAAQ,EAAE;EAC1B,MAAM,MAAM,MAAM,SAAS,MAAM,OAAO;AACxC,MAAI;AACF,UAAO,KAAK,MAAM,IAAI;WACf,KAAK;AACZ,SAAM,IAAI,MAAM,2BAA2B,KAAK,uBAAuB,EAAE,OAAO,KAAK,CAAC;;;CAI1F,MAAM,MAAO,MAAM,OADP,cAAc,KAAK,CAAC;AAEhC,KAAI,IAAI,YAAY,OAAW,QAAO,IAAI;AAC1C,QAAO"}

package/dist/internal/offline.d.ts

@@ -0,0 +1,58 @@
+//#region src/internal/offline.d.ts
+/**
+ * `GRAPHORIN_OFFLINE=1` enforcement. The framework promises zero
+ * implicit network calls (DEC-154 / ADR-041); the CLI mirrors the
+ * promise on the operator-facing side by surfacing the same flag
+ * every subcommand obeys.
+ *
+ * The flag is informational in Phase 14a — the three commands the
+ * binary ships do NOT make any outbound network calls. A future
+ * phase that exposes a network-using subcommand (e.g. `graphorin
+ * pricing refresh`) reads {@link isOfflineMode} to short-circuit.
+ *
+ * @internal
+ */
+/**
+ * `true` when `process.env.GRAPHORIN_OFFLINE` is set to `'1'` or
+ * `'true'` (case-insensitive). Mirrors the documented contract.
+ *
+ * @stable
+ */
+declare function isOfflineMode(env?: NodeJS.ProcessEnv): boolean;
+/**
+ * Throws when the operator opted into offline mode. Phase 14a calls
+ * this from every subcommand entry point so the contract is
+ * enforced uniformly.
+ *
+ * @stable
+ */
+declare function assertNoNetworkInOfflineMode(operation: string): void;
+/**
+ * Phase 15 helper for subcommands that informationally **may** make
+ * network calls (e.g. `graphorin auth login`, `graphorin pricing
+ * refresh`, `graphorin skills install`). When `GRAPHORIN_OFFLINE=1`
+ * is set the helper writes an explanatory branded line through the
+ * supplied sink (default: `process.stderr`) and returns `false`,
+ * letting the caller short-circuit cleanly without throwing. Returns
+ * `true` when the network is permitted.
+ *
+ * @stable
+ */
+declare function checkOfflineModeBlocked(operation: string, options?: {
+  readonly print?: (line: string) => void;
+  readonly env?: NodeJS.ProcessEnv;
+}): boolean;
+/**
+ * Raised when a CLI subcommand attempts a network call while
+ * `GRAPHORIN_OFFLINE=1` is set.
+ *
+ * @stable
+ */
+declare class OfflineModeViolationError extends Error {
+  readonly kind: "offline-mode-violation";
+  readonly operation: string;
+  constructor(operation: string);
+}
+//#endregion
+export { OfflineModeViolationError, assertNoNetworkInOfflineMode, checkOfflineModeBlocked, isOfflineMode };
+//# sourceMappingURL=offline.d.ts.map

package/dist/internal/offline.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"offline.d.ts","names":[],"sources":["../../src/internal/offline.ts"],"sourcesContent":[],"mappings":";;AAoBA;AAcA;AAgBA;AAmBA;;;;;;;;;;;;;;;iBAjDgB,aAAA,OAAmB,MAAA,CAAO;;;;;;;;iBAc1B,4BAAA;;;;;;;;;;;;iBAgBA,uBAAA;;iBAEqD,MAAA,CAAO;;;;;;;;cAiB/D,yBAAA,SAAkC,KAAA"}

package/dist/internal/offline.js

@@ -0,0 +1,72 @@
+//#region src/internal/offline.ts
+/**
+* `GRAPHORIN_OFFLINE=1` enforcement. The framework promises zero
+* implicit network calls (DEC-154 / ADR-041); the CLI mirrors the
+* promise on the operator-facing side by surfacing the same flag
+* every subcommand obeys.
+*
+* The flag is informational in Phase 14a — the three commands the
+* binary ships do NOT make any outbound network calls. A future
+* phase that exposes a network-using subcommand (e.g. `graphorin
+* pricing refresh`) reads {@link isOfflineMode} to short-circuit.
+*
+* @internal
+*/
+/**
+* `true` when `process.env.GRAPHORIN_OFFLINE` is set to `'1'` or
+* `'true'` (case-insensitive). Mirrors the documented contract.
+*
+* @stable
+*/
+function isOfflineMode(env = process.env) {
+	const raw = env.GRAPHORIN_OFFLINE;
+	if (raw === void 0) return false;
+	const normalized = raw.trim().toLowerCase();
+	return normalized === "1" || normalized === "true" || normalized === "yes";
+}
+/**
+* Throws when the operator opted into offline mode. Phase 14a calls
+* this from every subcommand entry point so the contract is
+* enforced uniformly.
+*
+* @stable
+*/
+function assertNoNetworkInOfflineMode(operation) {
+	if (!isOfflineMode()) return;
+	throw new OfflineModeViolationError(operation);
+}
+/**
+* Phase 15 helper for subcommands that informationally **may** make
+* network calls (e.g. `graphorin auth login`, `graphorin pricing
+* refresh`, `graphorin skills install`). When `GRAPHORIN_OFFLINE=1`
+* is set the helper writes an explanatory branded line through the
+* supplied sink (default: `process.stderr`) and returns `false`,
+* letting the caller short-circuit cleanly without throwing. Returns
+* `true` when the network is permitted.
+*
+* @stable
+*/
+function checkOfflineModeBlocked(operation, options = {}) {
+	if (!isOfflineMode(options.env ?? process.env)) return true;
+	(options.print ?? ((line) => process.stderr.write(`${line}\n`)))(`[graphorin/cli] GRAPHORIN_OFFLINE=1 — refusing to perform '${operation}'. Unset GRAPHORIN_OFFLINE to opt back in.`);
+	return false;
+}
+/**
+* Raised when a CLI subcommand attempts a network call while
+* `GRAPHORIN_OFFLINE=1` is set.
+*
+* @stable
+*/
+var OfflineModeViolationError = class extends Error {
+	kind = "offline-mode-violation";
+	operation;
+	constructor(operation) {
+		super(`[graphorin/cli] GRAPHORIN_OFFLINE=1 is set; refusing to perform a network operation: ${operation}.`);
+		this.name = "OfflineModeViolationError";
+		this.operation = operation;
+	}
+};
+
+//#endregion
+export { OfflineModeViolationError, assertNoNetworkInOfflineMode, checkOfflineModeBlocked, isOfflineMode };
+//# sourceMappingURL=offline.js.map

package/dist/internal/offline.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"offline.js","names":[],"sources":["../../src/internal/offline.ts"],"sourcesContent":["/**\n * `GRAPHORIN_OFFLINE=1` enforcement. The framework promises zero\n * implicit network calls (DEC-154 / ADR-041); the CLI mirrors the\n * promise on the operator-facing side by surfacing the same flag\n * every subcommand obeys.\n *\n * The flag is informational in Phase 14a — the three commands the\n * binary ships do NOT make any outbound network calls. A future\n * phase that exposes a network-using subcommand (e.g. `graphorin\n * pricing refresh`) reads {@link isOfflineMode} to short-circuit.\n *\n * @internal\n */\n\n/**\n * `true` when `process.env.GRAPHORIN_OFFLINE` is set to `'1'` or\n * `'true'` (case-insensitive). Mirrors the documented contract.\n *\n * @stable\n */\nexport function isOfflineMode(env: NodeJS.ProcessEnv = process.env): boolean {\n  const raw = env.GRAPHORIN_OFFLINE;\n  if (raw === undefined) return false;\n  const normalized = raw.trim().toLowerCase();\n  return normalized === '1' || normalized === 'true' || normalized === 'yes';\n}\n\n/**\n * Throws when the operator opted into offline mode. Phase 14a calls\n * this from every subcommand entry point so the contract is\n * enforced uniformly.\n *\n * @stable\n */\nexport function assertNoNetworkInOfflineMode(operation: string): void {\n  if (!isOfflineMode()) return;\n  throw new OfflineModeViolationError(operation);\n}\n\n/**\n * Phase 15 helper for subcommands that informationally **may** make\n * network calls (e.g. `graphorin auth login`, `graphorin pricing\n * refresh`, `graphorin skills install`). When `GRAPHORIN_OFFLINE=1`\n * is set the helper writes an explanatory branded line through the\n * supplied sink (default: `process.stderr`) and returns `false`,\n * letting the caller short-circuit cleanly without throwing. Returns\n * `true` when the network is permitted.\n *\n * @stable\n */\nexport function checkOfflineModeBlocked(\n  operation: string,\n  options: { readonly print?: (line: string) => void; readonly env?: NodeJS.ProcessEnv } = {},\n): boolean {\n  const env = options.env ?? process.env;\n  if (!isOfflineMode(env)) return true;\n  const sink = options.print ?? ((line: string) => process.stderr.write(`${line}\\n`));\n  sink(\n    `[graphorin/cli] GRAPHORIN_OFFLINE=1 — refusing to perform '${operation}'. Unset GRAPHORIN_OFFLINE to opt back in.`,\n  );\n  return false;\n}\n\n/**\n * Raised when a CLI subcommand attempts a network call while\n * `GRAPHORIN_OFFLINE=1` is set.\n *\n * @stable\n */\nexport class OfflineModeViolationError extends Error {\n  readonly kind = 'offline-mode-violation' as const;\n  readonly operation: string;\n\n  constructor(operation: string) {\n    super(\n      `[graphorin/cli] GRAPHORIN_OFFLINE=1 is set; refusing to perform a network operation: ${operation}.`,\n    );\n    this.name = 'OfflineModeViolationError';\n    this.operation = operation;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAoBA,SAAgB,cAAc,MAAyB,QAAQ,KAAc;CAC3E,MAAM,MAAM,IAAI;AAChB,KAAI,QAAQ,OAAW,QAAO;CAC9B,MAAM,aAAa,IAAI,MAAM,CAAC,aAAa;AAC3C,QAAO,eAAe,OAAO,eAAe,UAAU,eAAe;;;;;;;;;AAUvE,SAAgB,6BAA6B,WAAyB;AACpE,KAAI,CAAC,eAAe,CAAE;AACtB,OAAM,IAAI,0BAA0B,UAAU;;;;;;;;;;;;;AAchD,SAAgB,wBACd,WACA,UAAyF,EAAE,EAClF;AAET,KAAI,CAAC,cADO,QAAQ,OAAO,QAAQ,IACZ,CAAE,QAAO;AAEhC,EADa,QAAQ,WAAW,SAAiB,QAAQ,OAAO,MAAM,GAAG,KAAK,IAAI,GAEhF,8DAA8D,UAAU,4CACzE;AACD,QAAO;;;;;;;;AAST,IAAa,4BAAb,cAA+C,MAAM;CACnD,AAAS,OAAO;CAChB,AAAS;CAET,YAAY,WAAmB;AAC7B,QACE,wFAAwF,UAAU,GACnG;AACD,OAAK,OAAO;AACZ,OAAK,YAAY"}

package/dist/internal/output.d.ts

@@ -0,0 +1,56 @@
+//#region src/internal/output.d.ts
+/**
+ * Shared output helpers for Phase 15 subcommands. The CLI keeps three
+ * output flavours uniform across every command:
+ *
+ *  1. **Human** — single-line `[graphorin/cli] ...` messages on stderr
+ *     (the default path in Phase 14a; preserved for backward
+ *     compatibility).
+ *  2. **JSON** — one structured JSON document per subcommand emitted on
+ *     stdout when `--json` is set. Phase 15 commands that produce a
+ *     report (status / list / verify / lookup) ship a stable schema so
+ *     CI pipelines can consume them.
+ *  3. **Stub print sink** — every command accepts an optional
+ *     `print(line: string)` callback so unit tests can capture output
+ *     without spying on `process.stderr`.
+ *
+ * Helpers in this module are intentionally tiny — they exist so the
+ * sixteen Phase 15 subcommand groups share one channel surface
+ * (single-source-of-truth per Hard Rule 5 in the working plan).
+ *
+ * @internal
+ */
+/**
+ * Sink the CLI subcommands write human-readable lines through. The
+ * default sink writes a trailing newline to `process.stderr`. Tests
+ * inject a buffer.
+ *
+ * @internal
+ */
+type PrintSink = (line: string) => void;
+/**
+ * Sink the CLI uses when emitting structured JSON documents. Defaults
+ * to writing a single trailing newline to `process.stdout`. Tests
+ * inject a buffer.
+ *
+ * @internal
+ */
+type JsonSink = (payload: unknown) => void;
+/**
+ * Common output options every Phase 15 command honours.
+ *
+ * @stable
+ */
+interface CommonOutputOptions {
+  /** Emit a structured JSON document instead of human-readable text. */
+  readonly json?: boolean;
+  /** Force `--non-interactive` semantics (skip prompts; require flags / env). */
+  readonly nonInteractive?: boolean;
+  /** Test seam — capture human lines instead of writing to stderr. */
+  readonly print?: PrintSink;
+  /** Test seam — capture JSON documents instead of writing to stdout. */
+  readonly jsonPrint?: JsonSink;
+}
+//#endregion
+export { CommonOutputOptions };
+//# sourceMappingURL=output.d.ts.map

package/dist/internal/output.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"output.d.ts","names":[],"sources":["../../src/internal/output.ts"],"sourcesContent":[],"mappings":";;AA+BA;AAmBA;AAkBA;;;;;;;;;;;;;;;;;;;;;;;;;KArCY,SAAA;;;;;;;;KAmBA,QAAA;;;;;;UAkBK,mBAAA;;;;;;mBAME;;uBAEI"}

package/dist/internal/output.js

@@ -0,0 +1,86 @@
+import process from "node:process";
+
+//#region src/internal/output.ts
+/**
+* Shared output helpers for Phase 15 subcommands. The CLI keeps three
+* output flavours uniform across every command:
+*
+*  1. **Human** — single-line `[graphorin/cli] ...` messages on stderr
+*     (the default path in Phase 14a; preserved for backward
+*     compatibility).
+*  2. **JSON** — one structured JSON document per subcommand emitted on
+*     stdout when `--json` is set. Phase 15 commands that produce a
+*     report (status / list / verify / lookup) ship a stable schema so
+*     CI pipelines can consume them.
+*  3. **Stub print sink** — every command accepts an optional
+*     `print(line: string)` callback so unit tests can capture output
+*     without spying on `process.stderr`.
+*
+* Helpers in this module are intentionally tiny — they exist so the
+* sixteen Phase 15 subcommand groups share one channel surface
+* (single-source-of-truth per Hard Rule 5 in the working plan).
+*
+* @internal
+*/
+/**
+* Default `PrintSink` — appends a newline and writes to `stderr` so it
+* never collides with the JSON document on `stdout`.
+*
+* @internal
+*/
+function defaultPrintSink(line) {
+	process.stderr.write(`${line}\n`);
+}
+/**
+* Default `JsonSink` — writes a stable, two-space indented JSON
+* document to `stdout` plus a trailing newline so consumers can split
+* a multi-document stream by lines.
+*
+* @internal
+*/
+function defaultJsonSink(payload) {
+	process.stdout.write(`${JSON.stringify(payload, null, 2)}\n`);
+}
+/**
+* Emit either the JSON document or the human report depending on
+* `--json`. Used by every Phase 15 subcommand that produces a single
+* status payload (e.g. `graphorin doctor`, `graphorin token list`).
+*
+* @internal
+*/
+function emitReport(options, payload, human) {
+	if (options.json === true) {
+		(options.jsonPrint ?? defaultJsonSink)(payload);
+		return;
+	}
+	human();
+}
+/**
+* Format a status icon for human reports. The CLI is ASCII-only per
+* the Phase 15 spec (no emoji); the markers are unambiguous so
+* operators see at a glance what a row means.
+*
+* @internal
+*/
+function statusMarker(status) {
+	switch (status) {
+		case "ok": return "[OK]";
+		case "warn": return "[WARN]";
+		case "fail": return "[FAIL]";
+		case "skip": return "[SKIP]";
+		case "info": return "[INFO]";
+	}
+}
+/**
+* Standardised `[graphorin/cli] <message>` prefix every human-format
+* line carries. Centralised so every command renders the same brand.
+*
+* @internal
+*/
+function brand(line) {
+	return `[graphorin/cli] ${line}`;
+}
+
+//#endregion
+export { brand, defaultJsonSink, defaultPrintSink, emitReport, statusMarker };
+//# sourceMappingURL=output.js.map

package/dist/internal/output.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"output.js","names":[],"sources":["../../src/internal/output.ts"],"sourcesContent":["/**\n * Shared output helpers for Phase 15 subcommands. The CLI keeps three\n * output flavours uniform across every command:\n *\n *  1. **Human** — single-line `[graphorin/cli] ...` messages on stderr\n *     (the default path in Phase 14a; preserved for backward\n *     compatibility).\n *  2. **JSON** — one structured JSON document per subcommand emitted on\n *     stdout when `--json` is set. Phase 15 commands that produce a\n *     report (status / list / verify / lookup) ship a stable schema so\n *     CI pipelines can consume them.\n *  3. **Stub print sink** — every command accepts an optional\n *     `print(line: string)` callback so unit tests can capture output\n *     without spying on `process.stderr`.\n *\n * Helpers in this module are intentionally tiny — they exist so the\n * sixteen Phase 15 subcommand groups share one channel surface\n * (single-source-of-truth per Hard Rule 5 in the working plan).\n *\n * @internal\n */\n\nimport process from 'node:process';\n\n/**\n * Sink the CLI subcommands write human-readable lines through. The\n * default sink writes a trailing newline to `process.stderr`. Tests\n * inject a buffer.\n *\n * @internal\n */\nexport type PrintSink = (line: string) => void;\n\n/**\n * Default `PrintSink` — appends a newline and writes to `stderr` so it\n * never collides with the JSON document on `stdout`.\n *\n * @internal\n */\nexport function defaultPrintSink(line: string): void {\n  process.stderr.write(`${line}\\n`);\n}\n\n/**\n * Sink the CLI uses when emitting structured JSON documents. Defaults\n * to writing a single trailing newline to `process.stdout`. Tests\n * inject a buffer.\n *\n * @internal\n */\nexport type JsonSink = (payload: unknown) => void;\n\n/**\n * Default `JsonSink` — writes a stable, two-space indented JSON\n * document to `stdout` plus a trailing newline so consumers can split\n * a multi-document stream by lines.\n *\n * @internal\n */\nexport function defaultJsonSink(payload: unknown): void {\n  process.stdout.write(`${JSON.stringify(payload, null, 2)}\\n`);\n}\n\n/**\n * Common output options every Phase 15 command honours.\n *\n * @stable\n */\nexport interface CommonOutputOptions {\n  /** Emit a structured JSON document instead of human-readable text. */\n  readonly json?: boolean;\n  /** Force `--non-interactive` semantics (skip prompts; require flags / env). */\n  readonly nonInteractive?: boolean;\n  /** Test seam — capture human lines instead of writing to stderr. */\n  readonly print?: PrintSink;\n  /** Test seam — capture JSON documents instead of writing to stdout. */\n  readonly jsonPrint?: JsonSink;\n}\n\n/**\n * Emit either the JSON document or the human report depending on\n * `--json`. Used by every Phase 15 subcommand that produces a single\n * status payload (e.g. `graphorin doctor`, `graphorin token list`).\n *\n * @internal\n */\nexport function emitReport(\n  options: CommonOutputOptions,\n  payload: unknown,\n  human: () => void,\n): void {\n  if (options.json === true) {\n    const sink = options.jsonPrint ?? defaultJsonSink;\n    sink(payload);\n    return;\n  }\n  human();\n}\n\n/**\n * Format a status icon for human reports. The CLI is ASCII-only per\n * the Phase 15 spec (no emoji); the markers are unambiguous so\n * operators see at a glance what a row means.\n *\n * @internal\n */\nexport function statusMarker(status: 'ok' | 'warn' | 'fail' | 'skip' | 'info'): string {\n  switch (status) {\n    case 'ok':\n      return '[OK]';\n    case 'warn':\n      return '[WARN]';\n    case 'fail':\n      return '[FAIL]';\n    case 'skip':\n      return '[SKIP]';\n    case 'info':\n      return '[INFO]';\n  }\n}\n\n/**\n * Standardised `[graphorin/cli] <message>` prefix every human-format\n * line carries. Centralised so every command renders the same brand.\n *\n * @internal\n */\nexport function brand(line: string): string {\n  return `[graphorin/cli] ${line}`;\n}\n\n/**\n * Convenience helper — writes a branded message via the chosen sink.\n *\n * @internal\n */\nexport function brandedLine(options: CommonOutputOptions, line: string): void {\n  const sink = options.print ?? defaultPrintSink;\n  sink(brand(line));\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAuCA,SAAgB,iBAAiB,MAAoB;AACnD,SAAQ,OAAO,MAAM,GAAG,KAAK,IAAI;;;;;;;;;AAmBnC,SAAgB,gBAAgB,SAAwB;AACtD,SAAQ,OAAO,MAAM,GAAG,KAAK,UAAU,SAAS,MAAM,EAAE,CAAC,IAAI;;;;;;;;;AA0B/D,SAAgB,WACd,SACA,SACA,OACM;AACN,KAAI,QAAQ,SAAS,MAAM;AAEzB,GADa,QAAQ,aAAa,iBAC7B,QAAQ;AACb;;AAEF,QAAO;;;;;;;;;AAUT,SAAgB,aAAa,QAA0D;AACrF,SAAQ,QAAR;EACE,KAAK,KACH,QAAO;EACT,KAAK,OACH,QAAO;EACT,KAAK,OACH,QAAO;EACT,KAAK,OACH,QAAO;EACT,KAAK,OACH,QAAO;;;;;;;;;AAUb,SAAgB,MAAM,MAAsB;AAC1C,QAAO,mBAAmB"}

package/dist/internal/prompts.js

@@ -0,0 +1,49 @@
+import { stdin, stdout } from "node:process";
+import { createInterface } from "node:readline/promises";
+
+//#region src/internal/prompts.ts
+/**
+* Tiny wrapper around `readline` for interactive prompts. Avoids the
+* `enquirer` peer dependency for the minimal Phase 14a surface.
+*
+* @internal
+*/
+/**
+* @internal
+*/
+async function ask(question, defaultValue) {
+	const rl = createInterface({
+		input: stdin,
+		output: stdout
+	});
+	try {
+		const suffix = defaultValue !== void 0 ? ` (${defaultValue})` : "";
+		const answer = await rl.question(`${question}${suffix} `);
+		if (answer.length === 0 && defaultValue !== void 0) return defaultValue;
+		return answer;
+	} finally {
+		rl.close();
+	}
+}
+/**
+* @internal
+*/
+async function confirm(question, defaultValue) {
+	const normalized = (await ask(`${question} [${defaultValue ? "Y/n" : "y/N"}]`, defaultValue ? "y" : "n")).trim().toLowerCase();
+	if (normalized.length === 0) return defaultValue;
+	return normalized === "y" || normalized === "yes";
+}
+/**
+* @internal
+*/
+async function select(question, options, defaultValue) {
+	const trimmed = (await ask(`${question}\n${options.map((opt, idx) => `  ${idx + 1}. ${opt}${opt === defaultValue ? " (default)" : ""}`).join("\n")}\n>`, defaultValue)).trim();
+	const num = Number.parseInt(trimmed, 10);
+	if (Number.isFinite(num) && num >= 1 && num <= options.length) return options[num - 1];
+	if (options.includes(trimmed)) return trimmed;
+	return defaultValue;
+}
+
+//#endregion
+export { confirm, select };
+//# sourceMappingURL=prompts.js.map

package/dist/internal/prompts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompts.js","names":[],"sources":["../../src/internal/prompts.ts"],"sourcesContent":["/**\n * Tiny wrapper around `readline` for interactive prompts. Avoids the\n * `enquirer` peer dependency for the minimal Phase 14a surface.\n *\n * @internal\n */\n\nimport { stdin as input, stdout as output } from 'node:process';\nimport { createInterface } from 'node:readline/promises';\n\n/**\n * @internal\n */\nexport async function ask(question: string, defaultValue?: string): Promise<string> {\n  const rl = createInterface({ input, output });\n  try {\n    const suffix = defaultValue !== undefined ? ` (${defaultValue})` : '';\n    const answer = await rl.question(`${question}${suffix} `);\n    if (answer.length === 0 && defaultValue !== undefined) return defaultValue;\n    return answer;\n  } finally {\n    rl.close();\n  }\n}\n\n/**\n * @internal\n */\nexport async function confirm(question: string, defaultValue: boolean): Promise<boolean> {\n  const answer = await ask(\n    `${question} [${defaultValue ? 'Y/n' : 'y/N'}]`,\n    defaultValue ? 'y' : 'n',\n  );\n  const normalized = answer.trim().toLowerCase();\n  if (normalized.length === 0) return defaultValue;\n  return normalized === 'y' || normalized === 'yes';\n}\n\n/**\n * @internal\n */\nexport async function select(\n  question: string,\n  options: ReadonlyArray<string>,\n  defaultValue: string,\n): Promise<string> {\n  const numbered = options.map(\n    (opt, idx) => `  ${idx + 1}. ${opt}${opt === defaultValue ? ' (default)' : ''}`,\n  );\n  const answer = await ask(`${question}\\n${numbered.join('\\n')}\\n>`, defaultValue);\n  const trimmed = answer.trim();\n  const num = Number.parseInt(trimmed, 10);\n  if (Number.isFinite(num) && num >= 1 && num <= options.length) {\n    return options[num - 1] as string;\n  }\n  if (options.includes(trimmed)) return trimmed;\n  return defaultValue;\n}\n"],"mappings":";;;;;;;;;;;;;AAaA,eAAsB,IAAI,UAAkB,cAAwC;CAClF,MAAM,KAAK,gBAAgB;EAAE;EAAO;EAAQ,CAAC;AAC7C,KAAI;EACF,MAAM,SAAS,iBAAiB,SAAY,KAAK,aAAa,KAAK;EACnE,MAAM,SAAS,MAAM,GAAG,SAAS,GAAG,WAAW,OAAO,GAAG;AACzD,MAAI,OAAO,WAAW,KAAK,iBAAiB,OAAW,QAAO;AAC9D,SAAO;WACC;AACR,KAAG,OAAO;;;;;;AAOd,eAAsB,QAAQ,UAAkB,cAAyC;CAKvF,MAAM,cAJS,MAAM,IACnB,GAAG,SAAS,IAAI,eAAe,QAAQ,MAAM,IAC7C,eAAe,MAAM,IACtB,EACyB,MAAM,CAAC,aAAa;AAC9C,KAAI,WAAW,WAAW,EAAG,QAAO;AACpC,QAAO,eAAe,OAAO,eAAe;;;;;AAM9C,eAAsB,OACpB,UACA,SACA,cACiB;CAKjB,MAAM,WADS,MAAM,IAAI,GAAG,SAAS,IAHpB,QAAQ,KACtB,KAAK,QAAQ,KAAK,MAAM,EAAE,IAAI,MAAM,QAAQ,eAAe,eAAe,KAC5E,CACiD,KAAK,KAAK,CAAC,MAAM,aAAa,EACzD,MAAM;CAC7B,MAAM,MAAM,OAAO,SAAS,SAAS,GAAG;AACxC,KAAI,OAAO,SAAS,IAAI,IAAI,OAAO,KAAK,OAAO,QAAQ,OACrD,QAAO,QAAQ,MAAM;AAEvB,KAAI,QAAQ,SAAS,QAAQ,CAAE,QAAO;AACtC,QAAO"}