@groundnuty/macf 0.2.37 → 0.2.39

package/dist/cli/index.js

@@ -9,6 +9,12 @@ import { initAgent } from './commands/init.js';
 import { update } from './commands/update.js';
 import { showStatus } from './commands/status.js';
 import { listPeers } from './commands/peers.js';
+import { runPs } from './commands/ps.js';
+import { runFleetStatus } from './commands/fleet.js';
+import { runFleetDoctor } from './commands/fleet-doctor.js';
+import { runRoutingDoctor } from './commands/routing-doctor.js';
+import { runRegistryPrune } from './commands/registry-prune.js';
+import { runRestartSelfCommand } from './commands/restart-self.js';
 import { certsInit, certsRecover, certsRotate, issueRoutingClient } from './commands/certs.js';
 import { repoInit } from './commands/repo-init.js';
 import { rulesRefresh } from './commands/rules-refresh.js';
@@ -65,8 +71,9 @@ program
     .command('init')
     .description('Set up a project directory for an agent')
     .requiredOption('--project <name>', 'Project name (e.g., macf)')
-    .requiredOption('--role <role>', 'Agent role (e.g., code-agent)')
-    .option('--name <name>', 'Agent name (defaults to role)')
+    .requiredOption('--role <role>', 'Agent role — a canonical role (auditor, code-agent, science-agent, devops-agent, writing-agent) or a custom one. NOTE: the auditor role is the exact string "auditor" (no -agent suffix) — a near-miss silently skips its never-acts safety hook (macf#551).')
+    .option('--name <name>', 'Agent name (defaults to role) — the OTEL bot-name / GitHub-attribution identity')
+    .option('--routing-label <label>', 'Routing identity (registry key + cert CN), defaults to the agent name. Set only when it must differ from the bot-name, e.g. the substrate (devops-agent vs macf-devops-agent) (macf#545).')
     .option('--type <type>', 'Agent type: permanent or worker', 'permanent')
     // App-cred flags are required only for GitHub-backed registries.
     // `--local` (DR-024 / macf#322) skips token mint entirely; commander
@@ -76,7 +83,8 @@ program
     // rather than commander's generic missing-required message.
     .option('--app-id <id>', 'GitHub App ID (required for repo/org/profile registries)')
     .option('--install-id <id>', 'GitHub App Installation ID (required for repo/org/profile registries)')
-    .option('--key-path <path>', 'Path to GitHub App private key (required for repo/org/profile registries)')
+    .option('--key-path <path>', 'Destination the App private key lives at + what env.github points to (repo/org/profile registries). Defaults to ~/.macf/keys/<agent>.pem; pass --app-key to ingest the key here at init.')
+    .option('--app-key <path>', 'Source path of the downloaded App private key (.pem) to INGEST into --key-path (default ~/.macf/keys/<agent>.pem) at 0600. Onboarding: create the App -> download the .pem -> macf init --app-key <path> ... (macf#530).')
     .option('--registry-type <type>', 'Registry: repo, org, profile, or local (DR-024)', 'repo')
     .option('--registry-org <org>', 'Org name (for org registry)')
     .option('--registry-user <user>', 'User name (for profile registry)')
@@ -102,10 +110,12 @@ program
         project: opts.project,
         role: opts.role,
         name: opts.name,
+        routingLabel: opts.routingLabel,
         type: opts.type,
         appId: opts.appId,
         installId: opts.installId,
         keyPath: opts.keyPath,
+        appKey: opts.appKey,
         registryType,
         registryOrg: opts.registryOrg,
         registryUser: opts.registryUser,
@@ -213,6 +223,111 @@ program
     const dir = opts.dir ? validateProjectDir(opts.dir) : undefined;
     await listPeers(dir);
 });
+program
+    .command('ps')
+    .description('List MACF claude / channel-server processes (Linux /proc), keyed by ' +
+    'cwd + agent identity — multi-tenant-correct (never `pgrep | head -1`)')
+    .action(() => {
+    process.exitCode = runPs();
+});
+const fleet = program
+    .command('fleet')
+    .description('Fleet roster + interconnect-health (DR-030)');
+fleet
+    .command('status')
+    .description('Roster + LIVE health for every registered agent: NAME / HOST:PORT / ' +
+    'online-offline (mTLS /health) / uptime + the present self-report fields ' +
+    '(instance_id, cert_expiry warn<30d/crit<7d, and idle/busy state + otel ' +
+    'reachability when the agent reports them). Reachable + self-reports only — ' +
+    'no inject/delivery probes (those are later DR-030 increments).')
+    .option('--json', 'Emit the structured roster as JSON for automation', false)
+    .option('--dir <path>', 'Project directory (defaults to auto-discovery from cwd)')
+    .action(async (opts) => {
+    const code = await runFleetStatus(resolveProjectDir(opts.dir), { json: opts.json });
+    process.exitCode = code;
+});
+fleet
+    .command('doctor')
+    .description('Mesh-interconnect test per registered agent. DEFAULT (non-invasive): ' +
+    'REACHABLE (mTLS /health answers) + ACCEPTED (diagnostic mTLS /notify ACK — ' +
+    '200 + ack + correlation-token echo) — proves protocol-reaches-server ONLY. ' +
+    'With --inject (INVASIVE): also PROCESSED — routes a REAL marker-bearing /notify ' +
+    'to each reachable agent, WAKING it, then matches the echoed run_id off ' +
+    '/health.last_processed to prove the full deliver→process chain. --inject is the ' +
+    'IDLE-agent fallback (prefer passive last_processed for a busy agent); a timeout ' +
+    'is UNCONFIRMED (possibly busy), NOT a gap. Exits non-zero when DEGRADED ' +
+    '(Reachable+Accepted; PROCESSED does not affect the verdict).')
+    .option('--json', 'Emit the structured per-agent result as JSON (DR-031 watchdog contract)', false)
+    .option('--inject', 'INVASIVE Processed-now delivery-proof: routes a real probe + wakes each reachable agent', false)
+    .option('--inject-timeout <sec>', 'Per-agent poll budget for --inject, in seconds (default 24)', (v) => parseInt(v, 10))
+    .option('--dir <path>', 'Project directory (defaults to auto-discovery from cwd)')
+    .action(async (opts) => {
+    const code = await runFleetDoctor(resolveProjectDir(opts.dir), {
+        json: opts.json,
+        inject: opts.inject,
+        injectTimeoutSec: opts.injectTimeout,
+    });
+    process.exitCode = code;
+});
+const routing = program
+    .command('routing')
+    .description('Routing-infra (GitHub delivery plane) interconnect-health (DR-030)');
+routing
+    .command('doctor')
+    .description('Routing-infra interconnect check (DR-030 phase-2): STATIC GitHub-plane checks ' +
+    'that the delivery plane is wired right — (1) CALLER-PIN consistency across the ' +
+    'App install-set, (2) the #538 split: ROUTABLE (MACF_AGENT_<LABEL> registry key) ' +
+    '+ SELF-SKIP (agent-config app_name == bot-login, #566), (3) registration ' +
+    'FRESHNESS (registry instance_id == live /health), (4) MACF_CA_CERT present + ' +
+    'parses (#563), (5) tmux_session <project>@<agent> convention. These prove the ' +
+    'PLUMBING, NOT end-to-end delivery (that is --e2e, a later increment). Exits ' +
+    'non-zero when DEGRADED.')
+    .option('--json', 'Emit the structured per-check result as JSON (DR-031 watchdog contract)', false)
+    .option('--expected-pin <pin>', 'Expected macf-actions caller-pin (else the modal pin across the fleet)')
+    .option('--dir <path>', 'Project directory (defaults to auto-discovery from cwd)')
+    .action(async (opts) => {
+    const code = await runRoutingDoctor(resolveProjectDir(opts.dir), {
+        json: opts.json,
+        expectedPin: opts.expectedPin,
+    });
+    process.exitCode = code;
+});
+const registry = program
+    .command('registry')
+    .description('Registry maintenance');
+registry
+    .command('prune')
+    .description('mTLS-/health-check each registry entry and remove ONLY confirmed-dead ones ' +
+    '(refused/timeout after a retry). Consent required (default No); --yes bypasses.')
+    .option('--dir <path>', 'Project directory (defaults to auto-discovery from cwd)')
+    .option('--yes', 'Skip the confirmation prompt (non-interactive)', false)
+    .action(async (opts) => {
+    const code = await runRegistryPrune(resolveProjectDir(opts.dir), { yes: opts.yes });
+    process.exitCode = code;
+});
+program
+    .command('restart-self')
+    .description('DR-031 piece 3 (be-replaceable): prepare the workspace + spawn a DETACHED ' +
+    'relauncher that OUTLIVES this session, so a watchdog (or the agent) can ' +
+    'trigger a clean restart without losing work. DRY-RUN BY DEFAULT — emits the ' +
+    'plan (marked-stash, RESUME-note, relauncher cmd, session to kill) and does ' +
+    'NOTHING without --confirm. With --confirm: marked-stash any uncommitted ' +
+    'tracked changes -> RESUME-note -> spawn detached relauncher -> kill the ' +
+    'current tmux session (the restart trigger).')
+    .option('--reason <fault|upgrade|manual>', 'Restart driver (fault/upgrade/manual)', 'manual')
+    .option('--confirm', 'Actually act (otherwise dry-run)', false)
+    .option('--dry-run', 'Force dry-run even with --confirm (the safer wins)', false)
+    .option('--json', 'Emit the structured plan/result as JSON', false)
+    .option('--dir <path>', 'Project directory (defaults to auto-discovery from cwd)')
+    .action(async (opts) => {
+    const code = await runRestartSelfCommand(resolveProjectDir(opts.dir), {
+        reason: opts.reason,
+        confirm: opts.confirm,
+        dryRun: opts.dryRun,
+        json: opts.json,
+    });
+    process.exitCode = code;
+});
 const certs = program
     .command('certs')
     .description('Certificate management');
@@ -265,10 +380,12 @@ program
 });
 program
     .command('doctor')
-    .description('Verify the workspace\'s bot token satisfies the MACF App permission doctrine (DR-019)')
+    .description('Verify the workspace\'s bot token (DR-019) + settings match the role-aware floor (DR-028)')
     .option('--dir <path>', 'Project directory (defaults to auto-discovery from cwd)')
+    .option('--fix', 'Write the DR-028 role-settings floor (allow/deny/hooks) + sandbox entries into .claude/settings.json after confirmation', false)
+    .option('--yes', 'Skip the --fix confirmation prompt (non-interactive)', false)
     .action(async (opts) => {
-    const code = await runDoctor(resolveProjectDir(opts.dir));
+    const code = await runDoctor(resolveProjectDir(opts.dir), { fix: opts.fix, yes: opts.yes });
     process.exitCode = code;
 });
 program

package/dist/cli/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/cli/index.ts"],"names":[],"mappings":";AACA,OAAO,kBAAkB,CAAC;AAC1B,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAC3C,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAC/F,OAAO,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAC3D,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACvD,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAChD,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAExD;;;;;GAKG;AACH,SAAS,kBAAkB;IACzB,MAAM,GAAG,GAAG,eAAe,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAC3C,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,CAAC,KAAK,CACX,+EAA+E;YAC/E,oDAAoD,CACrD,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,SAAS,kBAAkB,CAAC,IAAY;IACtC,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,iBAAiB,CAAC,CAAC,EAAE,CAAC;QACvD,OAAO,CAAC,KAAK,CAAC,uBAAuB,GAAG,+BAA+B,CAAC,CAAC;QACzE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,SAAS,iBAAiB,CAAC,OAA2B;IACpD,OAAO,OAAO,CAAC,CAAC,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,kBAAkB,EAAE,CAAC;AACtE,CAAC;AAED,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;AAE9B,OAAO;KACJ,IAAI,CAAC,MAAM,CAAC;KACZ,WAAW,CAAC,wCAAwC,CAAC;KACrD,OAAO,CAAC,eAAe,CAAC;KACxB,MAAM,CAAC,GAAG,EAAE;IACX,UAAU,EAAE,CAAC;AACf,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,MAAM,CAAC;KACf,WAAW,CAAC,yCAAyC,CAAC;KACtD,cAAc,CAAC,kBAAkB,EAAE,2BAA2B,CAAC;KAC/D,cAAc,CAAC,eAAe,EAAE,+BAA+B,CAAC;KAChE,MAAM,CAAC,eAAe,EAAE,+BAA+B,CAAC;KACxD,MAAM,CAAC,eAAe,EAAE,iCAAiC,EAAE,WAAW,CAAC;IACxE,iEAAiE;IACjE,qEAAqE;IACrE,gEAAgE;IAChE,8DAA8D;IAC9D,sEAAsE;IACtE,4DAA4D;KAC3D,MAAM,CAAC,eAAe,EAAE,0DAA0D,CAAC;KACnF,MAAM,CAAC,mBAAmB,EAAE,uEAAuE,CAAC;KACpG,MAAM,CAAC,mBAAmB,EAAE,2EAA2E,CAAC;KACxG,MAAM,CAAC,wBAAwB,EAAE,iDAAiD,EAAE,MAAM,CAAC;KAC3F,MAAM,CAAC,sBAAsB,EAAE,6BAA6B,CAAC;KAC7D,MAAM,CAAC,wBAAwB,EAAE,kCAAkC,CAAC;KACpE,MAAM,CAAC,wBAAwB,EAAE,gCAAgC,CAAC;KAClE,MAAM,CAAC,SAAS,EAAE,+LAA+L,CAAC;KAClN,MAAM,CAAC,eAAe,EAAE,yIAAyI,CAAC;KAClK,MAAM,CAAC,uBAAuB,EAAE,uIAAuI,CAAC;KACxK,MAAM,CAAC,yBAAyB,EAAE,6IAA6I,CAAC;KAChL,MAAM,CAAC,uBAAuB,EAAE,0NAA0N,CAAC;KAC3P,MAAM,CAAC,6BAA6B,EAAE,iIAAiI,CAAC;KACxK,MAAM,CAAC,wBAAwB,EAAE,qCAAqC,CAAC;KACvE,MAAM,CAAC,2BAA2B,EAAE,6CAA6C,CAAC;KAClF,MAAM,CAAC,yBAAyB,EAAE,6CAA6C,CAAC;KAChF,MAAM,CAAC,cAAc,EAAE,2DAA2D,CAAC;KACnF,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;IACrB,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;IAChE,sEAAsE;IACtE,oEAAoE;IACpE,oEAAoE;IACpE,8DAA8D;IAC9D,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC;IAC9D,MAAM,SAAS,CAAC,UAAU,EAAE;QAC1B,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,YAAY;QACZ,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,YAAY,EAAE,IAAI,CAAC,IAAI;QACvB,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,cAAc,EAAE,IAAI,CAAC,cAAc;KACpC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,QAAQ,CAAC;KACjB,WAAW,CACV,mDAAmD;IACnD,oEAAoE;IACpE,0EAA0E;IAC1E,0EAA0E;IAC1E,wEAAwE;IACxE,0EAA0E,CAC3E;KACA,WAAW,CAAC,OAAO,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAgCvB,CAAC;KACC,MAAM,CAAC,OAAO,EAAE,yCAAyC,EAAE,KAAK,CAAC;KACjE,MAAM,CAAC,OAAO,EAAE,+BAA+B,EAAE,KAAK,CAAC;KACvD,MAAM,CAAC,UAAU,EAAE,uEAAuE,EAAE,KAAK,CAAC;KAClG,MAAM,CAAC,WAAW,EAAE,wCAAwC,EAAE,KAAK,CAAC;KACpE,MAAM,CAAC,OAAO,EAAE,0DAA0D,EAAE,KAAK,CAAC;KAClF,MAAM,CAAC,WAAW,EAAE,6FAA6F,EAAE,KAAK,CAAC;IAC1H,4EAA4E;IAC5E,4EAA4E;IAC5E,qEAAqE;IACrE,yEAAyE;IACzE,uEAAuE;IACvE,yEAAyE;IACzE,oEAAoE;IACpE,kDAAkD;KACjD,MAAM,CAAC,wBAAwB,EAAE,qGAAqG,CAAC;KACvI,MAAM,CAAC,WAAW,EAAE,2CAA2C,EAAE,KAAK,CAAC;KACvE,MAAM,CAAC,cAAc,EAAE,yDAAyD,CAAC;KACjF,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;IACrB,qEAAqE;IACrE,sEAAsE;IACtE,wEAAwE;IACxE,mEAAmE;IACnE,0BAA0B;IAC1B,MAAM,iBAAiB,GAAG,IAAI,CAAC,eAAe,KAAK,KAAK,CAAC;IACzD,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;QACrD,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,iBAAiB;KAClB,CAAC,CAAC;IACH,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;AAC1B,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,QAAQ,CAAC;KACjB,WAAW,CAAC,iCAAiC,CAAC;KAC9C,MAAM,CAAC,cAAc,EAAE,sEAAsE,CAAC;KAC9F,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;IACrB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAChE,MAAM,UAAU,CAAC,GAAG,CAAC,CAAC;AACxB,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,OAAO,CAAC;KAChB,WAAW,CAAC,8BAA8B,CAAC;KAC3C,MAAM,CAAC,cAAc,EAAE,sEAAsE,CAAC;KAC9F,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;IACrB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAChE,MAAM,SAAS,CAAC,GAAG,CAAC,CAAC;AACvB,CAAC,CAAC,CAAC;AAEL,MAAM,KAAK,GAAG,OAAO;KAClB,OAAO,CAAC,OAAO,CAAC;KAChB,WAAW,CAAC,wBAAwB,CAAC,CAAC;AAEzC,KAAK;KACF,OAAO,CAAC,MAAM,CAAC;KACf,WAAW,CAAC,8CAA8C,CAAC;KAC3D,MAAM,CAAC,cAAc,EAAE,yDAAyD,CAAC;KACjF,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;IACrB,MAAM,SAAS,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAC/C,CAAC,CAAC,CAAC;AAEL,KAAK;KACF,OAAO,CAAC,SAAS,CAAC;KAClB,WAAW,CAAC,kDAAkD,CAAC;KAC/D,MAAM,CAAC,cAAc,EAAE,yDAAyD,CAAC;KACjF,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;IACrB,MAAM,YAAY,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAClD,CAAC,CAAC,CAAC;AAEL,KAAK;KACF,OAAO,CAAC,QAAQ,CAAC;KACjB,WAAW,CAAC,+CAA+C,CAAC;KAC5D,MAAM,CAAC,cAAc,EAAE,yDAAyD,CAAC;KACjF,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;IACrB,MAAM,WAAW,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AACjD,CAAC,CAAC,CAAC;AAEL,KAAK;KACF,OAAO,CAAC,sBAAsB,CAAC;KAC/B,WAAW,CAAC,0FAA0F,CAAC;KACvG,MAAM,CAAC,cAAc,EAAE,yDAAyD,CAAC;KACjF,MAAM,CAAC,kBAAkB,EAAE,yDAAyD,CAAC;KACrF,MAAM,CAAC,qBAAqB,EAAE,sDAAsD,CAAC;KACrF,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;IACrB,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/E,MAAM,kBAAkB,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;QACpD,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,YAAY;KACb,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,aAAa,CAAC;KACtB,WAAW,CACV,qFAAqF;IACrF,4FAA4F,CAC7F;KACA,MAAM,CAAC,GAAG,EAAE;IACX,IAAI,CAAC;QACH,UAAU,CAAC,kBAAkB,EAAE,CAAC,CAAC;IACnC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,uBAAuB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACzF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvB,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,QAAQ,CAAC;KACjB,WAAW,CAAC,uFAAuF,CAAC;KACpG,MAAM,CAAC,cAAc,EAAE,yDAAyD,CAAC;KACjF,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;IACrB,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1D,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;AAC1B,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,SAAS,CAAC;KAClB,WAAW,CACV,oEAAoE;IACpE,mEAAmE;IACnE,8DAA8D;IAC9D,yEAAyE,CAC1E;KACA,WAAW,CAAC,OAAO,EAAE;;;;;;;;;;;;;;;;;;;;;;;;CAwBvB,CAAC;KACC,MAAM,CAAC,qBAAqB,EAAE,sEAAsE,CAAC;KACrG,MAAM,CAAC,gBAAgB,EAAE,mEAAmE,EAAE,IAAI,CAAC;KACnG,MAAM,CAAC,iBAAiB,EAAE,iDAAiD,CAAC;KAC5E,MAAM,CAAC,0BAA0B,EAAE,wFAAwF,CAAC;KAC5H,MAAM,CAAC,cAAc,EAAE,yDAAyD,CAAC;KACjF,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;IACrB,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACpC,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;IACzE,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;QAChE,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,KAAK;QACL,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,cAAc,EAAE,IAAI,CAAC,cAAc;KACpC,CAAC,CAAC;IACH,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;AAC1B,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,SAAS,CAAC;KAClB,WAAW,CACV,qEAAqE;IACrE,2EAA2E;IAC3E,0EAA0E;IAC1E,yEAAyE,CAC1E;KACA,WAAW,CAAC,OAAO,EAAE;;;;;;;;;;;;;;;;;;;;;;;CAuBvB,CAAC;KACC,MAAM,CAAC,qBAAqB,EAAE,iGAAiG,CAAC;KAChI,MAAM,CAAC,kBAAkB,EAAE,oFAAoF,CAAC;KAChH,MAAM,CAAC,0BAA0B,EAAE,oFAAoF,CAAC;KACxH,MAAM,CAAC,oBAAoB,EAAE,uGAAuG,CAAC;KACrI,MAAM,CAAC,iBAAiB,EAAE,iDAAiD,CAAC;KAC5E,MAAM,CAAC,QAAQ,EAAE,mGAAmG,EAAE,KAAK,CAAC;KAC5H,MAAM,CAAC,cAAc,EAAE,uEAAuE,CAAC;KAC/F,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;IACrB,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;IAChE,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;IACtD,IAAI,SAA6B,CAAC;IAClC,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACjC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACjC,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACvE,CAAC;SAAM,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QAChC,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;QACzB,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACvE,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC;QACnC,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,SAAS;QACT,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,IAAI,EAAE,IAAI,CAAC,IAAI,KAAK,IAAI;QACxB,UAAU;KACX,CAAC,CAAC;IACH,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;AAC1B,CAAC,CAAC,CAAC;AAEL,MAAM,KAAK,GAAG,OAAO;KAClB,OAAO,CAAC,OAAO,CAAC;KAChB,WAAW,CAAC,2CAA2C,CAAC,CAAC;AAE5D,KAAK;KACF,OAAO,CAAC,SAAS,CAAC;KAClB,WAAW,CAAC,iGAAiG,CAAC;KAC9G,MAAM,CAAC,cAAc,EAAE,oEAAoE,CAAC;KAC5F,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;IACf,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;IAC5D,IAAI,CAAC;QACH,YAAY,CAAC,MAAM,CAAC,CAAC;IACvB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,UAAU,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC5E,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvB,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,iBAAiB,CAAC;KAC1B,WAAW,CAAC,gEAAgE,CAAC;KAC7E,MAAM,CAAC,CAAC,SAAiB,EAAE,EAAE;IAC5B,OAAO,CAAC,SAAS,CAAC,CAAC;AACrB,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,WAAW,CAAC;KACpB,WAAW,CAAC,iFAAiF,CAAC;KAC9F,MAAM,CAAC,qBAAqB,EAAE,+DAA+D,CAAC;KAC9F,MAAM,CAAC,6BAA6B,EAAE,4BAA4B,EAAE,IAAI,CAAC;KACzE,MAAM,CAAC,iBAAiB,EAAE,0EAA0E,CAAC;KACrG,MAAM,CAAC,uBAAuB,EAAE,yGAAyG,CAAC;KAC1I,MAAM,CAAC,SAAS,EAAE,0BAA0B,EAAE,KAAK,CAAC;KACpD,MAAM,CAAC,cAAc,EAAE,0DAA0D,CAAC;KAClF,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;IACrB,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;IAChE,MAAM,QAAQ,CAAC,UAAU,EAAE;QACzB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,KAAK,EAAE,IAAI,CAAC,KAAK;KAClB,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEL,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,GAAU,EAAE,EAAE;IACpD,OAAO,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;IACvC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AACvB,CAAC,CAAC,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/cli/index.ts"],"names":[],"mappings":";AACA,OAAO,kBAAkB,CAAC;AAC1B,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAC3C,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACzC,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAC/F,OAAO,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAC3D,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACvD,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAChD,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAExD;;;;;GAKG;AACH,SAAS,kBAAkB;IACzB,MAAM,GAAG,GAAG,eAAe,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAC3C,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,CAAC,KAAK,CACX,+EAA+E;YAC/E,oDAAoD,CACrD,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,SAAS,kBAAkB,CAAC,IAAY;IACtC,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,iBAAiB,CAAC,CAAC,EAAE,CAAC;QACvD,OAAO,CAAC,KAAK,CAAC,uBAAuB,GAAG,+BAA+B,CAAC,CAAC;QACzE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,SAAS,iBAAiB,CAAC,OAA2B;IACpD,OAAO,OAAO,CAAC,CAAC,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,kBAAkB,EAAE,CAAC;AACtE,CAAC;AAED,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;AAE9B,OAAO;KACJ,IAAI,CAAC,MAAM,CAAC;KACZ,WAAW,CAAC,wCAAwC,CAAC;KACrD,OAAO,CAAC,eAAe,CAAC;KACxB,MAAM,CAAC,GAAG,EAAE;IACX,UAAU,EAAE,CAAC;AACf,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,MAAM,CAAC;KACf,WAAW,CAAC,yCAAyC,CAAC;KACtD,cAAc,CAAC,kBAAkB,EAAE,2BAA2B,CAAC;KAC/D,cAAc,CAAC,eAAe,EAAE,8PAA8P,CAAC;KAC/R,MAAM,CAAC,eAAe,EAAE,iFAAiF,CAAC;KAC1G,MAAM,CAAC,yBAAyB,EAAE,2LAA2L,CAAC;KAC9N,MAAM,CAAC,eAAe,EAAE,iCAAiC,EAAE,WAAW,CAAC;IACxE,iEAAiE;IACjE,qEAAqE;IACrE,gEAAgE;IAChE,8DAA8D;IAC9D,sEAAsE;IACtE,4DAA4D;KAC3D,MAAM,CAAC,eAAe,EAAE,0DAA0D,CAAC;KACnF,MAAM,CAAC,mBAAmB,EAAE,uEAAuE,CAAC;KACpG,MAAM,CAAC,mBAAmB,EAAE,0LAA0L,CAAC;KACvN,MAAM,CAAC,kBAAkB,EAAE,0NAA0N,CAAC;KACtP,MAAM,CAAC,wBAAwB,EAAE,iDAAiD,EAAE,MAAM,CAAC;KAC3F,MAAM,CAAC,sBAAsB,EAAE,6BAA6B,CAAC;KAC7D,MAAM,CAAC,wBAAwB,EAAE,kCAAkC,CAAC;KACpE,MAAM,CAAC,wBAAwB,EAAE,gCAAgC,CAAC;KAClE,MAAM,CAAC,SAAS,EAAE,+LAA+L,CAAC;KAClN,MAAM,CAAC,eAAe,EAAE,yIAAyI,CAAC;KAClK,MAAM,CAAC,uBAAuB,EAAE,uIAAuI,CAAC;KACxK,MAAM,CAAC,yBAAyB,EAAE,6IAA6I,CAAC;KAChL,MAAM,CAAC,uBAAuB,EAAE,0NAA0N,CAAC;KAC3P,MAAM,CAAC,6BAA6B,EAAE,iIAAiI,CAAC;KACxK,MAAM,CAAC,wBAAwB,EAAE,qCAAqC,CAAC;KACvE,MAAM,CAAC,2BAA2B,EAAE,6CAA6C,CAAC;KAClF,MAAM,CAAC,yBAAyB,EAAE,6CAA6C,CAAC;KAChF,MAAM,CAAC,cAAc,EAAE,2DAA2D,CAAC;KACnF,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;IACrB,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;IAChE,sEAAsE;IACtE,oEAAoE;IACpE,oEAAoE;IACpE,8DAA8D;IAC9D,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC;IAC9D,MAAM,SAAS,CAAC,UAAU,EAAE;QAC1B,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,YAAY;QACZ,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,YAAY,EAAE,IAAI,CAAC,IAAI;QACvB,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,cAAc,EAAE,IAAI,CAAC,cAAc;KACpC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,QAAQ,CAAC;KACjB,WAAW,CACV,mDAAmD;IACnD,oEAAoE;IACpE,0EAA0E;IAC1E,0EAA0E;IAC1E,wEAAwE;IACxE,0EAA0E,CAC3E;KACA,WAAW,CAAC,OAAO,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAgCvB,CAAC;KACC,MAAM,CAAC,OAAO,EAAE,yCAAyC,EAAE,KAAK,CAAC;KACjE,MAAM,CAAC,OAAO,EAAE,+BAA+B,EAAE,KAAK,CAAC;KACvD,MAAM,CAAC,UAAU,EAAE,uEAAuE,EAAE,KAAK,CAAC;KAClG,MAAM,CAAC,WAAW,EAAE,wCAAwC,EAAE,KAAK,CAAC;KACpE,MAAM,CAAC,OAAO,EAAE,0DAA0D,EAAE,KAAK,CAAC;KAClF,MAAM,CAAC,WAAW,EAAE,6FAA6F,EAAE,KAAK,CAAC;IAC1H,4EAA4E;IAC5E,4EAA4E;IAC5E,qEAAqE;IACrE,yEAAyE;IACzE,uEAAuE;IACvE,yEAAyE;IACzE,oEAAoE;IACpE,kDAAkD;KACjD,MAAM,CAAC,wBAAwB,EAAE,qGAAqG,CAAC;KACvI,MAAM,CAAC,WAAW,EAAE,2CAA2C,EAAE,KAAK,CAAC;KACvE,MAAM,CAAC,cAAc,EAAE,yDAAyD,CAAC;KACjF,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;IACrB,qEAAqE;IACrE,sEAAsE;IACtE,wEAAwE;IACxE,mEAAmE;IACnE,0BAA0B;IAC1B,MAAM,iBAAiB,GAAG,IAAI,CAAC,eAAe,KAAK,KAAK,CAAC;IACzD,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;QACrD,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,iBAAiB;KAClB,CAAC,CAAC;IACH,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;AAC1B,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,QAAQ,CAAC;KACjB,WAAW,CAAC,iCAAiC,CAAC;KAC9C,MAAM,CAAC,cAAc,EAAE,sEAAsE,CAAC;KAC9F,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;IACrB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAChE,MAAM,UAAU,CAAC,GAAG,CAAC,CAAC;AACxB,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,OAAO,CAAC;KAChB,WAAW,CAAC,8BAA8B,CAAC;KAC3C,MAAM,CAAC,cAAc,EAAE,sEAAsE,CAAC;KAC9F,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;IACrB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAChE,MAAM,SAAS,CAAC,GAAG,CAAC,CAAC;AACvB,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,IAAI,CAAC;KACb,WAAW,CACV,sEAAsE;IACtE,uEAAuE,CACxE;KACA,MAAM,CAAC,GAAG,EAAE;IACX,OAAO,CAAC,QAAQ,GAAG,KAAK,EAAE,CAAC;AAC7B,CAAC,CAAC,CAAC;AAEL,MAAM,KAAK,GAAG,OAAO;KAClB,OAAO,CAAC,OAAO,CAAC;KAChB,WAAW,CAAC,6CAA6C,CAAC,CAAC;AAE9D,KAAK;KACF,OAAO,CAAC,QAAQ,CAAC;KACjB,WAAW,CACV,sEAAsE;IACtE,0EAA0E;IAC1E,yEAAyE;IACzE,6EAA6E;IAC7E,gEAAgE,CACjE;KACA,MAAM,CAAC,QAAQ,EAAE,mDAAmD,EAAE,KAAK,CAAC;KAC5E,MAAM,CAAC,cAAc,EAAE,yDAAyD,CAAC;KACjF,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;IACrB,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IACpF,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;AAC1B,CAAC,CAAC,CAAC;AAEL,KAAK;KACF,OAAO,CAAC,QAAQ,CAAC;KACjB,WAAW,CACV,uEAAuE;IACvE,6EAA6E;IAC7E,6EAA6E;IAC7E,kFAAkF;IAClF,yEAAyE;IACzE,kFAAkF;IAClF,kFAAkF;IAClF,0EAA0E;IAC1E,8DAA8D,CAC/D;KACA,MAAM,CAAC,QAAQ,EAAE,yEAAyE,EAAE,KAAK,CAAC;KAClG,MAAM,CAAC,UAAU,EAAE,yFAAyF,EAAE,KAAK,CAAC;KACpH,MAAM,CAAC,wBAAwB,EAAE,6DAA6D,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;KACvH,MAAM,CAAC,cAAc,EAAE,yDAAyD,CAAC;KACjF,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;IACrB,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;QAC7D,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,gBAAgB,EAAE,IAAI,CAAC,aAAa;KACrC,CAAC,CAAC;IACH,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;AAC1B,CAAC,CAAC,CAAC;AAEL,MAAM,OAAO,GAAG,OAAO;KACpB,OAAO,CAAC,SAAS,CAAC;KAClB,WAAW,CAAC,oEAAoE,CAAC,CAAC;AAErF,OAAO;KACJ,OAAO,CAAC,QAAQ,CAAC;KACjB,WAAW,CACV,gFAAgF;IAChF,iFAAiF;IACjF,kFAAkF;IAClF,2EAA2E;IAC3E,+EAA+E;IAC/E,gFAAgF;IAChF,8EAA8E;IAC9E,yBAAyB,CAC1B;KACA,MAAM,CAAC,QAAQ,EAAE,yEAAyE,EAAE,KAAK,CAAC;KAClG,MAAM,CAAC,sBAAsB,EAAE,wEAAwE,CAAC;KACxG,MAAM,CAAC,cAAc,EAAE,yDAAyD,CAAC;KACjF,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;IACrB,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;QAC/D,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,WAAW,EAAE,IAAI,CAAC,WAAW;KAC9B,CAAC,CAAC;IACH,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;AAC1B,CAAC,CAAC,CAAC;AAEL,MAAM,QAAQ,GAAG,OAAO;KACrB,OAAO,CAAC,UAAU,CAAC;KACnB,WAAW,CAAC,sBAAsB,CAAC,CAAC;AAEvC,QAAQ;KACL,OAAO,CAAC,OAAO,CAAC;KAChB,WAAW,CACV,6EAA6E;IAC7E,iFAAiF,CAClF;KACA,MAAM,CAAC,cAAc,EAAE,yDAAyD,CAAC;KACjF,MAAM,CAAC,OAAO,EAAE,gDAAgD,EAAE,KAAK,CAAC;KACxE,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;IACrB,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IACpF,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;AAC1B,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,cAAc,CAAC;KACvB,WAAW,CACV,4EAA4E;IAC5E,0EAA0E;IAC1E,8EAA8E;IAC9E,6EAA6E;IAC7E,0EAA0E;IAC1E,0EAA0E;IAC1E,6CAA6C,CAC9C;KACA,MAAM,CAAC,iCAAiC,EAAE,uCAAuC,EAAE,QAAQ,CAAC;KAC5F,MAAM,CAAC,WAAW,EAAE,kCAAkC,EAAE,KAAK,CAAC;KAC9D,MAAM,CAAC,WAAW,EAAE,oDAAoD,EAAE,KAAK,CAAC;KAChF,MAAM,CAAC,QAAQ,EAAE,yCAAyC,EAAE,KAAK,CAAC;KAClE,MAAM,CAAC,cAAc,EAAE,yDAAyD,CAAC;KACjF,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;IACrB,MAAM,IAAI,GAAG,MAAM,qBAAqB,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;QACpE,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,IAAI,EAAE,IAAI,CAAC,IAAI;KAChB,CAAC,CAAC;IACH,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;AAC1B,CAAC,CAAC,CAAC;AAEL,MAAM,KAAK,GAAG,OAAO;KAClB,OAAO,CAAC,OAAO,CAAC;KAChB,WAAW,CAAC,wBAAwB,CAAC,CAAC;AAEzC,KAAK;KACF,OAAO,CAAC,MAAM,CAAC;KACf,WAAW,CAAC,8CAA8C,CAAC;KAC3D,MAAM,CAAC,cAAc,EAAE,yDAAyD,CAAC;KACjF,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;IACrB,MAAM,SAAS,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAC/C,CAAC,CAAC,CAAC;AAEL,KAAK;KACF,OAAO,CAAC,SAAS,CAAC;KAClB,WAAW,CAAC,kDAAkD,CAAC;KAC/D,MAAM,CAAC,cAAc,EAAE,yDAAyD,CAAC;KACjF,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;IACrB,MAAM,YAAY,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAClD,CAAC,CAAC,CAAC;AAEL,KAAK;KACF,OAAO,CAAC,QAAQ,CAAC;KACjB,WAAW,CAAC,+CAA+C,CAAC;KAC5D,MAAM,CAAC,cAAc,EAAE,yDAAyD,CAAC;KACjF,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;IACrB,MAAM,WAAW,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AACjD,CAAC,CAAC,CAAC;AAEL,KAAK;KACF,OAAO,CAAC,sBAAsB,CAAC;KAC/B,WAAW,CAAC,0FAA0F,CAAC;KACvG,MAAM,CAAC,cAAc,EAAE,yDAAyD,CAAC;KACjF,MAAM,CAAC,kBAAkB,EAAE,yDAAyD,CAAC;KACrF,MAAM,CAAC,qBAAqB,EAAE,sDAAsD,CAAC;KACrF,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;IACrB,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/E,MAAM,kBAAkB,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;QACpD,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,YAAY;KACb,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,aAAa,CAAC;KACtB,WAAW,CACV,qFAAqF;IACrF,4FAA4F,CAC7F;KACA,MAAM,CAAC,GAAG,EAAE;IACX,IAAI,CAAC;QACH,UAAU,CAAC,kBAAkB,EAAE,CAAC,CAAC;IACnC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,uBAAuB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACzF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvB,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,QAAQ,CAAC;KACjB,WAAW,CAAC,2FAA2F,CAAC;KACxG,MAAM,CAAC,cAAc,EAAE,yDAAyD,CAAC;KACjF,MAAM,CAAC,OAAO,EAAE,yHAAyH,EAAE,KAAK,CAAC;KACjJ,MAAM,CAAC,OAAO,EAAE,sDAAsD,EAAE,KAAK,CAAC;KAC9E,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;IACrB,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC5F,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;AAC1B,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,SAAS,CAAC;KAClB,WAAW,CACV,oEAAoE;IACpE,mEAAmE;IACnE,8DAA8D;IAC9D,yEAAyE,CAC1E;KACA,WAAW,CAAC,OAAO,EAAE;;;;;;;;;;;;;;;;;;;;;;;;CAwBvB,CAAC;KACC,MAAM,CAAC,qBAAqB,EAAE,sEAAsE,CAAC;KACrG,MAAM,CAAC,gBAAgB,EAAE,mEAAmE,EAAE,IAAI,CAAC;KACnG,MAAM,CAAC,iBAAiB,EAAE,iDAAiD,CAAC;KAC5E,MAAM,CAAC,0BAA0B,EAAE,wFAAwF,CAAC;KAC5H,MAAM,CAAC,cAAc,EAAE,yDAAyD,CAAC;KACjF,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;IACrB,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACpC,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;IACzE,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;QAChE,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,KAAK;QACL,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,cAAc,EAAE,IAAI,CAAC,cAAc;KACpC,CAAC,CAAC;IACH,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;AAC1B,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,SAAS,CAAC;KAClB,WAAW,CACV,qEAAqE;IACrE,2EAA2E;IAC3E,0EAA0E;IAC1E,yEAAyE,CAC1E;KACA,WAAW,CAAC,OAAO,EAAE;;;;;;;;;;;;;;;;;;;;;;;CAuBvB,CAAC;KACC,MAAM,CAAC,qBAAqB,EAAE,iGAAiG,CAAC;KAChI,MAAM,CAAC,kBAAkB,EAAE,oFAAoF,CAAC;KAChH,MAAM,CAAC,0BAA0B,EAAE,oFAAoF,CAAC;KACxH,MAAM,CAAC,oBAAoB,EAAE,uGAAuG,CAAC;KACrI,MAAM,CAAC,iBAAiB,EAAE,iDAAiD,CAAC;KAC5E,MAAM,CAAC,QAAQ,EAAE,mGAAmG,EAAE,KAAK,CAAC;KAC5H,MAAM,CAAC,cAAc,EAAE,uEAAuE,CAAC;KAC/F,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;IACrB,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;IAChE,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;IACtD,IAAI,SAA6B,CAAC;IAClC,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACjC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACjC,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACvE,CAAC;SAAM,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QAChC,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;QACzB,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACvE,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC;QACnC,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,SAAS;QACT,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,IAAI,EAAE,IAAI,CAAC,IAAI,KAAK,IAAI;QACxB,UAAU;KACX,CAAC,CAAC;IACH,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;AAC1B,CAAC,CAAC,CAAC;AAEL,MAAM,KAAK,GAAG,OAAO;KAClB,OAAO,CAAC,OAAO,CAAC;KAChB,WAAW,CAAC,2CAA2C,CAAC,CAAC;AAE5D,KAAK;KACF,OAAO,CAAC,SAAS,CAAC;KAClB,WAAW,CAAC,iGAAiG,CAAC;KAC9G,MAAM,CAAC,cAAc,EAAE,oEAAoE,CAAC;KAC5F,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;IACf,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;IAC5D,IAAI,CAAC;QACH,YAAY,CAAC,MAAM,CAAC,CAAC;IACvB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,UAAU,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC5E,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvB,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,iBAAiB,CAAC;KAC1B,WAAW,CAAC,gEAAgE,CAAC;KAC7E,MAAM,CAAC,CAAC,SAAiB,EAAE,EAAE;IAC5B,OAAO,CAAC,SAAS,CAAC,CAAC;AACrB,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,WAAW,CAAC;KACpB,WAAW,CAAC,iFAAiF,CAAC;KAC9F,MAAM,CAAC,qBAAqB,EAAE,+DAA+D,CAAC;KAC9F,MAAM,CAAC,6BAA6B,EAAE,4BAA4B,EAAE,IAAI,CAAC;KACzE,MAAM,CAAC,iBAAiB,EAAE,0EAA0E,CAAC;KACrG,MAAM,CAAC,uBAAuB,EAAE,yGAAyG,CAAC;KAC1I,MAAM,CAAC,SAAS,EAAE,0BAA0B,EAAE,KAAK,CAAC;KACpD,MAAM,CAAC,cAAc,EAAE,0DAA0D,CAAC;KAClF,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;IACrB,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;IAChE,MAAM,QAAQ,CAAC,UAAU,EAAE;QACzB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,KAAK,EAAE,IAAI,CAAC,KAAK;KAClB,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEL,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,GAAU,EAAE,EAAE;IACpD,OAAO,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;IACvC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AACvB,CAAC,CAAC,CAAC"}

package/dist/cli/proc-scan.d.ts

@@ -0,0 +1,81 @@
+/** The MACF process kinds this scanner recognises. */
+export type MacfProcessKind = 'claude' | 'channel-server';
+/** Where an agent identity was sourced from (precedence high→low). */
+export type IdentitySource = 'otel' | 'env-name' | 'env-label';
+/**
+ * Injectable `/proc` reader. The default implementation reads the real
+ * filesystem; tests pass a synthetic one. Every accessor returns `null`
+ * rather than throwing so a PID vanishing mid-scan (ESRCH) or owned by
+ * another user (EACCES) degrades to "unknown", not a crash.
+ */
+export interface ProcReader {
+    /** Is `/proc`-based introspection available on this host? */
+    readonly available: () => boolean;
+    /** Numeric PID directory names under `/proc`. */
+    readonly listPids: () => readonly string[];
+    /** `readlink /proc/<pid>/cwd` — absolute path, or null. */
+    readonly readCwd: (pid: string) => string | null;
+    /** Raw NUL-separated `/proc/<pid>/cmdline`, or null. */
+    readonly readCmdline: (pid: string) => string | null;
+    /** Raw NUL-separated `/proc/<pid>/environ`, or null. */
+    readonly readEnviron: (pid: string) => string | null;
+}
+/** One discovered MACF process, keyed by its own cwd + identity. */
+export interface MacfProcess {
+    readonly pid: string;
+    readonly kind: MacfProcessKind;
+    /** Absolute cwd from `/proc/<pid>/cwd` (the disambiguation key). */
+    readonly cwd: string | null;
+    /** `basename(cwd)` for compact display. */
+    readonly cwdBasename: string | null;
+    /** Resolved agent identity (see `agentIdentityFromEnv`). */
+    readonly agentIdentity: string | null;
+    readonly identitySource: IdentitySource | null;
+    /** `MACF_PORT` from the process environment. */
+    readonly port: string | null;
+    /** `OTEL_EXPORTER_OTLP_ENDPOINT` from the process environment. */
+    readonly otelEndpoint: string | null;
+}
+/** Split a NUL-separated `/proc` blob (cmdline / environ) into tokens. */
+export declare function splitNul(raw: string): readonly string[];
+/**
+ * Parse a NUL-separated `/proc/<pid>/environ` blob into a key→value map.
+ * Splits each entry on the FIRST `=` (values may contain `=`).
+ */
+export declare function parseEnviron(raw: string): Readonly<Record<string, string>>;
+/**
+ * Parse an `OTEL_RESOURCE_ATTRIBUTES` value (`k1=v1,k2=v2`) into a map.
+ * Used to recover `gen_ai.agent.name`, the OTEL-canonical agent identity.
+ */
+export declare function parseOtelResourceAttributes(value: string): Readonly<Record<string, string>>;
+/**
+ * Resolve an agent identity from a process environment, in precedence order:
+ *   1. `gen_ai.agent.name` inside `OTEL_RESOURCE_ATTRIBUTES` (telemetry-canonical)
+ *   2. `MACF_AGENT_NAME`
+ *   3. `MACF_ROUTING_LABEL`
+ * Returns null when none is present.
+ */
+export declare function agentIdentityFromEnv(env: Readonly<Record<string, string>>): {
+    readonly identity: string;
+    readonly source: IdentitySource;
+} | null;
+/**
+ * Classify a raw cmdline blob as a MACF process kind, or null if it's neither.
+ * channel-server wins over claude (a server is a node process that never
+ * carries a `claude` argv0). claude matches when any argv token's basename is
+ * exactly `claude` (covers `claude`, `/usr/local/bin/claude`, `.../bin/claude`).
+ */
+export declare function classifyCmdline(raw: string): MacfProcessKind | null;
+/**
+ * Enumerate every MACF claude / channel-server process via the reader.
+ * PURE w.r.t. the reader: no real-process dependency. Each process is keyed by
+ * its OWN cwd + environment — never `head -1`. Returns a stable ordering
+ * (by cwd, then kind, then numeric pid) for readable, diffable output.
+ */
+export declare function scanMacfProcesses(reader: ProcReader): readonly MacfProcess[];
+/**
+ * Real `/proc` reader. Each accessor swallows errors → null so a PID racing
+ * away mid-scan or an unreadable (other-user) process degrades gracefully.
+ */
+export declare const defaultProcReader: ProcReader;
+//# sourceMappingURL=proc-scan.d.ts.map

package/dist/cli/proc-scan.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proc-scan.d.ts","sourceRoot":"","sources":["../../src/cli/proc-scan.ts"],"names":[],"mappings":"AAmBA,sDAAsD;AACtD,MAAM,MAAM,eAAe,GAAG,QAAQ,GAAG,gBAAgB,CAAC;AAE1D,sEAAsE;AACtE,MAAM,MAAM,cAAc,GAAG,MAAM,GAAG,UAAU,GAAG,WAAW,CAAC;AAE/D;;;;;GAKG;AACH,MAAM,WAAW,UAAU;IACzB,6DAA6D;IAC7D,QAAQ,CAAC,SAAS,EAAE,MAAM,OAAO,CAAC;IAClC,iDAAiD;IACjD,QAAQ,CAAC,QAAQ,EAAE,MAAM,SAAS,MAAM,EAAE,CAAC;IAC3C,2DAA2D;IAC3D,QAAQ,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;IACjD,wDAAwD;IACxD,QAAQ,CAAC,WAAW,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;IACrD,wDAAwD;IACxD,QAAQ,CAAC,WAAW,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;CACtD;AAED,oEAAoE;AACpE,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAC/B,oEAAoE;IACpE,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,2CAA2C;IAC3C,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,4DAA4D;IAC5D,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,QAAQ,CAAC,cAAc,EAAE,cAAc,GAAG,IAAI,CAAC;IAC/C,gDAAgD;IAChD,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,kEAAkE;IAClE,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;CACtC;AAED,0EAA0E;AAC1E,wBAAgB,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,CAEvD;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAQ1E;AAED;;;GAGG;AACH,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAQ3F;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAClC,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GACpC;IAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAA;CAAE,GAAG,IAAI,CAWvE;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,eAAe,GAAG,IAAI,CAMnE;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,UAAU,GAAG,SAAS,WAAW,EAAE,CA0B5E;AAWD;;;GAGG;AACH,eAAO,MAAM,iBAAiB,EAAE,UA8B/B,CAAC"}

package/dist/cli/proc-scan.js

@@ -0,0 +1,172 @@
+/**
+ * Identity-scoped `/proc` scanning for MACF process diagnostics (macf#556).
+ *
+ * Single-tenant instruments (`pgrep claude | head -1`) are WRONG on a
+ * multi-tenant host: `head -1` grabs an arbitrary one of several `claude`
+ * processes, producing a "no OTEL" false negative against a sibling agent.
+ * This module is correct-by-construction: it enumerates EVERY MACF process
+ * and keys each one by its own `readlink /proc/<pid>/cwd` + per-process
+ * environment, so the caller can disambiguate by workspace / agent identity
+ * instead of picking one at random.
+ *
+ * Linux `/proc` only. The `ProcReader` seam keeps the scan a PURE function of
+ * injectable inputs so tests feed synthetic `/proc` data (no real running
+ * processes), and the real reader degrades gracefully (every read returns
+ * `null` on EACCES / ESRCH races; `available()` is false off-Linux).
+ */
+import { readdirSync, readlinkSync, readFileSync, existsSync } from 'node:fs';
+import { basename } from 'node:path';
+/** Split a NUL-separated `/proc` blob (cmdline / environ) into tokens. */
+export function splitNul(raw) {
+    return raw.split('\0').filter((t) => t.length > 0);
+}
+/**
+ * Parse a NUL-separated `/proc/<pid>/environ` blob into a key→value map.
+ * Splits each entry on the FIRST `=` (values may contain `=`).
+ */
+export function parseEnviron(raw) {
+    const env = {};
+    for (const entry of splitNul(raw)) {
+        const eq = entry.indexOf('=');
+        if (eq <= 0)
+            continue;
+        env[entry.slice(0, eq)] = entry.slice(eq + 1);
+    }
+    return env;
+}
+/**
+ * Parse an `OTEL_RESOURCE_ATTRIBUTES` value (`k1=v1,k2=v2`) into a map.
+ * Used to recover `gen_ai.agent.name`, the OTEL-canonical agent identity.
+ */
+export function parseOtelResourceAttributes(value) {
+    const attrs = {};
+    for (const pair of value.split(',')) {
+        const eq = pair.indexOf('=');
+        if (eq <= 0)
+            continue;
+        attrs[pair.slice(0, eq).trim()] = pair.slice(eq + 1).trim();
+    }
+    return attrs;
+}
+/**
+ * Resolve an agent identity from a process environment, in precedence order:
+ *   1. `gen_ai.agent.name` inside `OTEL_RESOURCE_ATTRIBUTES` (telemetry-canonical)
+ *   2. `MACF_AGENT_NAME`
+ *   3. `MACF_ROUTING_LABEL`
+ * Returns null when none is present.
+ */
+export function agentIdentityFromEnv(env) {
+    const ra = env['OTEL_RESOURCE_ATTRIBUTES'];
+    if (ra) {
+        const name = parseOtelResourceAttributes(ra)['gen_ai.agent.name'];
+        if (name)
+            return { identity: name, source: 'otel' };
+    }
+    const envName = env['MACF_AGENT_NAME'];
+    if (envName)
+        return { identity: envName, source: 'env-name' };
+    const envLabel = env['MACF_ROUTING_LABEL'];
+    if (envLabel)
+        return { identity: envLabel, source: 'env-label' };
+    return null;
+}
+/**
+ * Classify a raw cmdline blob as a MACF process kind, or null if it's neither.
+ * channel-server wins over claude (a server is a node process that never
+ * carries a `claude` argv0). claude matches when any argv token's basename is
+ * exactly `claude` (covers `claude`, `/usr/local/bin/claude`, `.../bin/claude`).
+ */
+export function classifyCmdline(raw) {
+    const tokens = splitNul(raw);
+    if (tokens.length === 0)
+        return null;
+    if (tokens.some((t) => t.includes('macf-channel-server')))
+        return 'channel-server';
+    if (tokens.some((t) => basename(t) === 'claude'))
+        return 'claude';
+    return null;
+}
+/**
+ * Enumerate every MACF claude / channel-server process via the reader.
+ * PURE w.r.t. the reader: no real-process dependency. Each process is keyed by
+ * its OWN cwd + environment — never `head -1`. Returns a stable ordering
+ * (by cwd, then kind, then numeric pid) for readable, diffable output.
+ */
+export function scanMacfProcesses(reader) {
+    if (!reader.available())
+        return [];
+    const out = [];
+    for (const pid of reader.listPids()) {
+        const cmdline = reader.readCmdline(pid);
+        if (cmdline === null)
+            continue;
+        const kind = classifyCmdline(cmdline);
+        if (!kind)
+            continue;
+        const cwd = reader.readCwd(pid);
+        const environRaw = reader.readEnviron(pid);
+        const env = environRaw ? parseEnviron(environRaw) : {};
+        const id = agentIdentityFromEnv(env);
+        out.push({
+            pid,
+            kind,
+            cwd,
+            cwdBasename: cwd ? basename(cwd) : null,
+            agentIdentity: id?.identity ?? null,
+            identitySource: id?.source ?? null,
+            port: env['MACF_PORT'] ?? null,
+            otelEndpoint: env['OTEL_EXPORTER_OTLP_ENDPOINT'] ?? null,
+        });
+    }
+    return [...out].sort(compareProcesses);
+}
+/** Stable ordering: cwd (nulls last) → kind → numeric pid. */
+function compareProcesses(a, b) {
+    const ca = a.cwd ?? '￿';
+    const cb = b.cwd ?? '￿';
+    if (ca !== cb)
+        return ca < cb ? -1 : 1;
+    if (a.kind !== b.kind)
+        return a.kind < b.kind ? -1 : 1;
+    return Number(a.pid) - Number(b.pid);
+}
+/**
+ * Real `/proc` reader. Each accessor swallows errors → null so a PID racing
+ * away mid-scan or an unreadable (other-user) process degrades gracefully.
+ */
+export const defaultProcReader = {
+    available: () => process.platform === 'linux' && existsSync('/proc'),
+    listPids: () => {
+        try {
+            return readdirSync('/proc').filter((n) => /^\d+$/.test(n));
+        }
+        catch {
+            return [];
+        }
+    },
+    readCwd: (pid) => {
+        try {
+            return readlinkSync(`/proc/${pid}/cwd`);
+        }
+        catch {
+            return null;
+        }
+    },
+    readCmdline: (pid) => {
+        try {
+            return readFileSync(`/proc/${pid}/cmdline`, 'utf-8');
+        }
+        catch {
+            return null;
+        }
+    },
+    readEnviron: (pid) => {
+        try {
+            return readFileSync(`/proc/${pid}/environ`, 'utf-8');
+        }
+        catch {
+            return null;
+        }
+    },
+};
+//# sourceMappingURL=proc-scan.js.map

package/dist/cli/proc-scan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proc-scan.js","sourceRoot":"","sources":["../../src/cli/proc-scan.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAC9E,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AA4CrC,0EAA0E;AAC1E,MAAM,UAAU,QAAQ,CAAC,GAAW;IAClC,OAAO,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AACrD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,GAAW;IACtC,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAClC,MAAM,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,EAAE,IAAI,CAAC;YAAE,SAAS;QACtB,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,2BAA2B,CAAC,KAAa;IACvD,MAAM,KAAK,GAA2B,EAAE,CAAC;IACzC,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACpC,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,EAAE,IAAI,CAAC;YAAE,SAAS;QACtB,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC9D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAClC,GAAqC;IAErC,MAAM,EAAE,GAAG,GAAG,CAAC,0BAA0B,CAAC,CAAC;IAC3C,IAAI,EAAE,EAAE,CAAC;QACP,MAAM,IAAI,GAAG,2BAA2B,CAAC,EAAE,CAAC,CAAC,mBAAmB,CAAC,CAAC;QAClE,IAAI,IAAI;YAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IACtD,CAAC;IACD,MAAM,OAAO,GAAG,GAAG,CAAC,iBAAiB,CAAC,CAAC;IACvC,IAAI,OAAO;QAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IAC9D,MAAM,QAAQ,GAAG,GAAG,CAAC,oBAAoB,CAAC,CAAC;IAC3C,IAAI,QAAQ;QAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IACjE,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,GAAW;IACzC,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACrC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAAC;QAAE,OAAO,gBAAgB,CAAC;IACnF,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC;QAAE,OAAO,QAAQ,CAAC;IAClE,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAkB;IAClD,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE;QAAE,OAAO,EAAE,CAAC;IACnC,MAAM,GAAG,GAAkB,EAAE,CAAC;IAC9B,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,OAAO,KAAK,IAAI;YAAE,SAAS;QAC/B,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;QACtC,IAAI,CAAC,IAAI;YAAE,SAAS;QAEpB,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,UAAU,GAAG,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAC3C,MAAM,GAAG,GAAG,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,MAAM,EAAE,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;QAErC,GAAG,CAAC,IAAI,CAAC;YACP,GAAG;YACH,IAAI;YACJ,GAAG;YACH,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI;YACvC,aAAa,EAAE,EAAE,EAAE,QAAQ,IAAI,IAAI;YACnC,cAAc,EAAE,EAAE,EAAE,MAAM,IAAI,IAAI;YAClC,IAAI,EAAE,GAAG,CAAC,WAAW,CAAC,IAAI,IAAI;YAC9B,YAAY,EAAE,GAAG,CAAC,6BAA6B,CAAC,IAAI,IAAI;SACzD,CAAC,CAAC;IACL,CAAC;IACD,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;AACzC,CAAC;AAED,8DAA8D;AAC9D,SAAS,gBAAgB,CAAC,CAAc,EAAE,CAAc;IACtD,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC;IACxB,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC;IACxB,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACvC,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI;QAAE,OAAO,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACvD,OAAO,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;AACvC,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAe;IAC3C,SAAS,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,UAAU,CAAC,OAAO,CAAC;IACpE,QAAQ,EAAE,GAAG,EAAE;QACb,IAAI,CAAC;YACH,OAAO,WAAW,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7D,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IACD,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;QACf,IAAI,CAAC;YACH,OAAO,YAAY,CAAC,SAAS,GAAG,MAAM,CAAC,CAAC;QAC1C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,WAAW,EAAE,CAAC,GAAG,EAAE,EAAE;QACnB,IAAI,CAAC;YACH,OAAO,YAAY,CAAC,SAAS,GAAG,UAAU,EAAE,OAAO,CAAC,CAAC;QACvD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,WAAW,EAAE,CAAC,GAAG,EAAE,EAAE;QACnB,IAAI,CAAC;YACH,OAAO,YAAY,CAAC,SAAS,GAAG,UAAU,EAAE,OAAO,CAAC,CAAC;QACvD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;CACF,CAAC"}

package/dist/cli/role-settings-model.d.ts

@@ -0,0 +1,70 @@
+/**
+ * DR-028 — the canonical expected-`settings.json`-per-role model.
+ *
+ * A universal **floor** + per-role **deltas**: the single source of truth that
+ * BOTH `macf init` (emit) and `macf doctor` (validate / `--fix`) consume, so
+ * init-output and doctor-expectation can't diverge. See
+ * `design/decisions/DR-028-expected-settings-per-role.md`.
+ *
+ * **Doctrine** (DR-028 §Decision 1): the defense is the **`deny` list + the
+ * PreToolUse hooks**, NOT allow-enumeration — canonical macf commands embed
+ * `$GH_TOKEN`/`$MACF_WORKSPACE_DIR` ("Contains simple_expansion"), which defeat
+ * narrow `Bash(...)` patterns, so the floor uses broad `Bash(*)`.
+ *
+ * This module is the **data model only**. The `macf init` emit and the
+ * `macf doctor` validate/`--fix` wiring land in follow-up increments (gated on
+ * DR-028 ratification, macf#539). Importing the hook-command constants from
+ * `settings-writer` is one-directional (settings-writer does not import this),
+ * so there is no import cycle.
+ */
+import { ROLE_FLOOR_ALLOW, ROLE_FLOOR_DENY } from './settings-writer.js';
+/** A hook the model expects in `.claude/settings.json`. */
+export interface ExpectedHook {
+    readonly event: 'PreToolUse' | 'PostToolUse' | 'UserPromptSubmit' | 'PreCompact';
+    /** Tool matcher for tool-scoped events (e.g. `Bash`); omitted for prompt/compact hooks. */
+    readonly matcher?: string;
+    readonly command: string;
+    /**
+     * `true` → a missing/changed instance of this hook is an **error**, not
+     * drift (DR-028: the auditor's `never-acts` hook). `false` → recommended;
+     * absence is reported as drift the operator may `--fix`.
+     */
+    readonly required: boolean;
+}
+export { ROLE_FLOOR_ALLOW, ROLE_FLOOR_DENY };
+/** Universal floor hooks (every role) — DR-028 §Decision 1. */
+export declare const ROLE_FLOOR_HOOKS: readonly ExpectedHook[];
+/** Per-role additions beyond the floor (DR-028 §Decision 1, Per-role deltas). */
+export interface RoleSettingsDelta {
+    /** Hooks this role adds beyond the floor. */
+    readonly hooks?: readonly ExpectedHook[];
+    /** Extra `allow` entries (e.g. the role's MCP servers) beyond the floor. */
+    readonly allow?: readonly string[];
+}
+/**
+ * Per-role deltas. Roles not listed get the universal floor as-is
+ * (code / science / devops — they all file + review PRs).
+ */
+export declare const ROLE_SETTINGS_DELTAS: Readonly<Record<string, RoleSettingsDelta>>;
+/**
+ * The roles the framework recognizes — ships an agent template / model handling
+ * for (macf#551). The floor applies to ALL roles; only some carry deltas
+ * (`ROLE_SETTINGS_DELTAS`). An `agent_role` OUTSIDE this set is a custom role
+ * (legitimate — floor-only), but `macf doctor` surfaces it (INFO) so a typo on
+ * a delta-bearing SAFETY-critical role — e.g. `auditor-agent` instead of the
+ * exact `auditor`, which would silently skip the never-acts hook AND its doctor
+ * ERROR — becomes visible instead of degrading silently. NOTE: `auditor` has no
+ * `-agent` suffix (unlike `code-agent`); use the exact strings here.
+ */
+export declare const KNOWN_ROLES: readonly string[];
+/** True if `role` is a framework-recognized role (see `KNOWN_ROLES`). */
+export declare function isKnownRole(role: string): boolean;
+/** Expected hooks for a role = the floor + the role's delta hooks. */
+export declare function expectedHooksForRole(role: string): readonly ExpectedHook[];
+/**
+ * Expected base `allow` for a role = the floor + the role's extra allow
+ * entries. The emitter composes `PLUGIN_SKILL_PERMISSIONS` +
+ * `PLUGIN_MCP_TOOL_PERMISSIONS` onto this.
+ */
+export declare function expectedAllowForRole(role: string): readonly string[];
+//# sourceMappingURL=role-settings-model.d.ts.map

package/dist/cli/role-settings-model.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"role-settings-model.d.ts","sourceRoot":"","sources":["../../src/cli/role-settings-model.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,EASL,gBAAgB,EAChB,eAAe,EAChB,MAAM,sBAAsB,CAAC;AAE9B,2DAA2D;AAC3D,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,KAAK,EAAE,YAAY,GAAG,aAAa,GAAG,kBAAkB,GAAG,YAAY,CAAC;IACjF,2FAA2F;IAC3F,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB;;;;OAIG;IACH,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;CAC5B;AAMD,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,CAAC;AAE7C,+DAA+D;AAC/D,eAAO,MAAM,gBAAgB,EAAE,SAAS,YAAY,EAQnD,CAAC;AAEF,iFAAiF;AACjF,MAAM,WAAW,iBAAiB;IAChC,6CAA6C;IAC7C,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,YAAY,EAAE,CAAC;IACzC,4EAA4E;IAC5E,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACpC;AAED;;;GAGG;AACH,eAAO,MAAM,oBAAoB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAU5E,CAAC;AAEF;;;;;;;;;GASG;AACH,eAAO,MAAM,WAAW,EAAE,SAAS,MAAM,EAUxC,CAAC;AAEF,yEAAyE;AACzE,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEjD;AAED,sEAAsE;AACtE,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,YAAY,EAAE,CAG1E;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,CAGpE"}