@inf-monkeys-tech/monkeys-cli 0.11.1 → 0.11.3

package/README.md

@@ -4,13 +4,13 @@
 
 The official Monkeys command-line tool for humans, automation, and AI Agents. It works with both cloud and self-hosted deployments and covers subscriptions and identity, Workflow, Execution, Agent Work, Ontology/Data, System Config, file transfer, and dynamic OpenAPI access.
 
-The CLI is the only execution layer. The official Chinese-language `monkeys` Skill bundled in the npm package guides Agents in command selection, context resolution, and safe recovery. The CLI does not embed a model, planner, natural-language interpreter, or Agent Runtime.
+The CLI is the only execution layer. Seven focused Chinese-language Skills bundled in the npm package guide Agents by domain while `monkeys-shared` centralizes context, safety, errors, and version rules. The CLI does not embed a model, planner, natural-language interpreter, or Agent Runtime.
 
 [Install](#installation--quick-start) · [AI Agent Skill](#ai-agent-skill) · [Authentication](#authentication) · [Commands](#command-system) · [Advanced](#advanced-usage) · [Security](#security--risk-warning-read-before-use) · [Development](#development--release)
 
 ## Why monkeys-cli?
 
-- **Agent-Native** — The CLI and official Skill ship in the same package and install with one command
+- **Agent-Native** — The CLI and all official Skills ship in the same package and install with one command
 - **Multi-Subscription** — Connect one local CLI to multiple cloud or self-hosted endpoints and switch Profiles quickly
 - **Semantic First** — Workflow, Execution, Agent Work, Data, and Config have explicit domain commands
 - **Open Coverage** — Discover the OpenAPI contract actually published by a deployment and make controlled raw API calls
@@ -40,13 +40,13 @@ The CLI is the only execution layer. The official Chinese-language `monkeys` Ski
 
 ### Quick Start (Human Users)
 
-#### Step 1 — Install the CLI and Skill
+#### Step 1 — Install the CLI and Skills
 
 ```bash
 npx @inf-monkeys-tech/monkeys-cli@latest install
 ```
 
-The installer globally installs the `monkeys` CLI and installs the matching official `monkeys` Skill from the same npm artifact.
+The installer globally installs the `monkeys` CLI and all seven matching official Skills from the same npm artifact.
 
 To install only the CLI:
 
@@ -121,17 +121,25 @@ monkeys auth login \
 
 ## AI Agent Skill
 
-| Skill                                | Description                                                                                                                                          |
-| ------------------------------------ | ---------------------------------------------------------------------------------------------------------------------------------------------------- |
-| [`monkeys`](skills/monkeys/SKILL.md) | Multi-subscription context, authentication, Workflow, Execution, Agent Work, Data, System Config, OpenAPI, safety confirmation, and failure recovery |
+| Skill | Description |
+| --- | --- |
+| [`monkeys-shared`](skills/monkeys-shared/SKILL.md) | Profile, Context, Team, Identity, output, safety, errors, and version rules |
+| [`monkeys-auth`](skills/monkeys-auth/SKILL.md) | Browser and API Key authentication |
+| [`monkeys-workflow`](skills/monkeys-workflow/SKILL.md) | Workflow, Execution, and file transfer |
+| [`monkeys-agent-work`](skills/monkeys-agent-work/SKILL.md) | Kernel Agent Work lifecycle |
+| [`monkeys-data`](skills/monkeys-data/SKILL.md) | Ontology, Data, views, values, governance, and transfer |
+| [`monkeys-system-config`](skills/monkeys-system-config/SKILL.md) | Kernel System Config |
+| [`monkeys-openapi`](skills/monkeys-openapi/SKILL.md) | Schema inspection and controlled OpenAPI fallback |
 
-The installer always installs the Skill from the current npm package to prevent CLI/Skill version drift. Check compatibility at any time:
+The installer always installs every Skill from the current npm package and records the CLI version plus Skill checksums. Inspect or repair drift at any time:
 
 ```bash
 monkeys version check --output json
+monkeys skills status
+monkeys skills sync
 ```
 
-Agents should read the Skill before invoking the CLI. The source of truth for parameters is always `monkeys <command> --help`, never remembered syntax.
+Agents can read the exact embedded version without locating npm files, for example `monkeys skills read monkeys-data references/data-read.md`. The source of truth for parameters is `monkeys schema <command path>` and command help, never remembered syntax.
 
 ## Authentication
 
@@ -157,6 +165,18 @@ monkeys auth login --url https://customer.example.com --api-key-stdin --output j
 monkeys auth login --url https://customer.example.com --api-key-env MONKEYS_API_KEY --output json
 ```
 
+### Ephemeral Environment Authentication
+
+Automation hosts can provide one non-persistent, read-only Profile without running a login command:
+
+```bash
+MONKEYS_ENDPOINT=https://customer.example.com \
+MONKEYS_ACCESS_TOKEN=<access-token> \
+monkeys context show --output json
+```
+
+Both variables are required. While they are present, the CLI uses only the `environment` Profile and rejects Profile or deployment mutations. The CLI does not infer who issued the access token or how the host obtained it.
+
 ### Switch Subscriptions
 
 ```bash
@@ -179,7 +199,7 @@ The cache is refreshed from npm in a detached background process at most once ev
 # Check only; makes no installation changes
 monkeys update --check --output json
 
-# Upgrade the global npm package and sync the matching bundled Skill
+# Upgrade the global npm package and sync all matching bundled Skills
 monkeys update
 
 # Reinstall the current latest CLI and retry Skill synchronization
@@ -205,6 +225,15 @@ monkeys data asset list --profile customer-kernel --perspective kernel --ontolog
 monkeys config overview --profile customer-kernel --output json
 ```
 
+Context and identity are first-class discovery surfaces:
+
+```bash
+monkeys context show --profile customer-a
+monkeys team list --profile customer-a --page-all
+monkeys identity list --profile customer-kernel --user-type agent --page-all
+monkeys schema workflow run
+```
+
 ### 2. OpenAPI Discovery
 
 List and describe real Operations from the fresh OpenAPI contract published by the current deployment.
@@ -230,7 +259,7 @@ monkeys api call \
 
 ### Structured Output
 
-Automation and Agents should use `--output json`; long-running status watches use NDJSON. Successful results go to stdout with exit code `0`. Errors go to stderr with a fixed non-zero exit code.
+JSON is the default for automation and Agents; long-running status watches use NDJSON. `--format pretty|table|csv|ndjson|text` changes presentation, `--jq` filters the full JSON envelope, and `--output` remains a compatibility alias. Successful results go to stdout with exit code `0`. Errors use a fixed non-zero exit code.
 
 ```json
 {
@@ -267,16 +296,16 @@ Never infer Profile, Team, Ontology, or other IDs from resource names. Resolve t
 
 ### Detailed Documentation
 
-| Topic                               | Documentation                                                                                                                 |
-| ----------------------------------- | ----------------------------------------------------------------------------------------------------------------------------- |
-| Platform and context                | [platform-overview.md](skills/monkeys/references/platform-overview.md)                                                        |
-| Authentication and subscriptions    | [authentication.md](skills/monkeys/references/authentication.md)                                                              |
-| Workflow, Execution, and files      | [workflow-execution-files.md](skills/monkeys/references/workflow-execution-files.md)                                          |
-| Agent Work                          | [agent-work.md](skills/monkeys/references/agent-work.md)                                                                      |
-| Data reads and perspectives         | [data-read.md](skills/monkeys/references/data-read.md) · [data-perspective.md](skills/monkeys/references/data-perspective.md) |
-| Data writes and transfer            | [data-write.md](skills/monkeys/references/data-write.md) · [data-transfer.md](skills/monkeys/references/data-transfer.md)     |
-| System Config                       | [system-config.md](skills/monkeys/references/system-config.md)                                                                |
-| OpenAPI fallback and error recovery | [fallback.md](skills/monkeys/references/fallback.md) · [safety-errors.md](skills/monkeys/references/safety-errors.md)         |
+| Topic                               | Documentation                                                                                                                                              |
+| ----------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| Platform, context, safety           | [platform-overview.md](skills/monkeys-shared/references/platform-overview.md) · [safety-errors.md](skills/monkeys-shared/references/safety-errors.md)       |
+| Authentication and subscriptions    | [authentication.md](skills/monkeys-auth/references/authentication.md)                                                                                       |
+| Workflow, Execution, and files      | [workflow-execution-files.md](skills/monkeys-workflow/references/workflow-execution-files.md)                                                               |
+| Agent Work                          | [agent-work.md](skills/monkeys-agent-work/references/agent-work.md)                                                                                         |
+| Data reads and perspectives         | [data-read.md](skills/monkeys-data/references/data-read.md) · [data-perspective.md](skills/monkeys-data/references/data-perspective.md)                     |
+| Data writes and transfer            | [data-write.md](skills/monkeys-data/references/data-write.md) · [data-transfer.md](skills/monkeys-data/references/data-transfer.md)                         |
+| System Config                       | [system-config.md](skills/monkeys-system-config/references/system-config.md)                                                                                 |
+| OpenAPI fallback                    | [fallback.md](skills/monkeys-openapi/references/fallback.md)                                                                                                 |
 
 ## Security & Risk Warning (Read Before Use)
 

package/README.zh.md

@@ -4,13 +4,13 @@
 
 Monkeys 官方命令行工具，让人类、自动化脚本和 AI Agent 都能在终端中安全操作 Monkeys。它支持云端与私有化部署，覆盖订阅与身份、Workflow、Execution、Agent Work、Ontology/Data、System Config、文件传输和动态 OpenAPI。
 
-CLI 是唯一执行层；随 npm 包分发的官方中文 `monkeys` Skill 负责指导 Agent 选择命令、补齐上下文并处理安全恢复，不内置模型、规划器或 Agent Runtime。
+CLI 是唯一执行层；npm 包内的 7 个聚焦领域 Skill 按需指导 Agent，`monkeys-shared` 统一保存上下文、安全、错误和版本规则，不内置模型、规划器或 Agent Runtime。
 
 [安装](#安装与快速开始) · [AI Agent Skill](#ai-agent-skill) · [认证](#认证) · [命令体系](#命令体系) · [进阶用法](#进阶用法) · [安全](#安全与风险提示使用前必读) · [开发](#开发与发布)
 
 ## 为什么选择 monkeys-cli？
 
-- **Agent 原生** — CLI 与官方 Skill 同包、同版本发布，一条命令完成安装
+- **Agent 原生** — CLI 与全部官方 Skills 同包、同版本发布，一条命令完成安装
 - **多订阅设计** — 一个本地 CLI 可连接多个云端或私有化 Endpoint，并快速切换 Profile
 - **语义优先** — Workflow、Execution、Agent Work、Data 和 Config 都有明确的领域命令
 - **开放覆盖** — 动态发现部署实际发布的 OpenAPI，并提供受控的原始 API 调用
@@ -40,13 +40,13 @@ CLI 是唯一执行层；随 npm 包分发的官方中文 `monkeys` Skill 负责
 
 ### 快速开始（人类用户）
 
-#### 第 1 步 — 安装 CLI 与 Skill
+#### 第 1 步 — 安装 CLI 与 Skills
 
 ```bash
 npx @inf-monkeys-tech/monkeys-cli@latest install
 ```
 
-安装向导会全局安装 `monkeys` CLI，并从同一个 npm 制品安装匹配版本的官方 `monkeys` Skill。
+安装向导会全局安装 `monkeys` CLI，并从同一个 npm 制品安装匹配版本的 7 个官方 Skills。
 
 如果只需要 CLI：
 
@@ -121,17 +121,25 @@ monkeys auth login \
 
 ## AI Agent Skill
 
-| Skill                                | 说明                                                                                                  |
-| ------------------------------------ | ----------------------------------------------------------------------------------------------------- |
-| [`monkeys`](skills/monkeys/SKILL.md) | 多订阅上下文、认证、Workflow、Execution、Agent Work、Data、System Config、OpenAPI、安全确认与失败恢复 |
+| Skill | 说明 |
+| --- | --- |
+| [`monkeys-shared`](skills/monkeys-shared/SKILL.md) | Profile、Context、Team、Identity、输出、安全、错误与版本规则 |
+| [`monkeys-auth`](skills/monkeys-auth/SKILL.md) | 浏览器登录与 API Key 认证 |
+| [`monkeys-workflow`](skills/monkeys-workflow/SKILL.md) | Workflow、Execution 与文件 |
+| [`monkeys-agent-work`](skills/monkeys-agent-work/SKILL.md) | Kernel Agent Work 全生命周期 |
+| [`monkeys-data`](skills/monkeys-data/SKILL.md) | Ontology、Data、治理与迁移 |
+| [`monkeys-system-config`](skills/monkeys-system-config/SKILL.md) | Kernel System Config |
+| [`monkeys-openapi`](skills/monkeys-openapi/SKILL.md) | Schema 与受控 OpenAPI 降级 |
 
-安装向导始终从当前 npm 包安装 Skill，避免 CLI 与 Skill 版本漂移。可随时验证兼容性：
+安装向导始终从当前 npm 包安装全部 Skills，并记录 CLI 版本与 Skill 校验和。可随时查看或修复漂移：
 
 ```bash
 monkeys version check --output json
+monkeys skills status
+monkeys skills sync
 ```
 
-Agent 应优先读取 Skill，再执行 CLI；参数真相始终来自 `monkeys <命令> --help`，不能凭记忆构造。
+Agent 可直接读取 npm 包内的同版本内容，例如 `monkeys skills read monkeys-data references/data-read.md`；参数真相来自 `monkeys schema <命令路径>` 与命令 Help，不能凭记忆构造。
 
 ## 认证
 
@@ -267,16 +275,16 @@ monkeys workflow delete <workflow-id> \
 
 ### 深入文档
 
-| 主题                       | 文档                                                                                                                          |
-| -------------------------- | ----------------------------------------------------------------------------------------------------------------------------- |
-| 平台与上下文               | [platform-overview.md](skills/monkeys/references/platform-overview.md)                                                        |
-| 认证与多订阅               | [authentication.md](skills/monkeys/references/authentication.md)                                                              |
-| Workflow、Execution 与文件 | [workflow-execution-files.md](skills/monkeys/references/workflow-execution-files.md)                                          |
-| Agent Work                 | [agent-work.md](skills/monkeys/references/agent-work.md)                                                                      |
-| Data 读取与视角            | [data-read.md](skills/monkeys/references/data-read.md) · [data-perspective.md](skills/monkeys/references/data-perspective.md) |
-| Data 写入与迁移            | [data-write.md](skills/monkeys/references/data-write.md) · [data-transfer.md](skills/monkeys/references/data-transfer.md)     |
-| System Config              | [system-config.md](skills/monkeys/references/system-config.md)                                                                |
-| OpenAPI 降级与错误恢复     | [fallback.md](skills/monkeys/references/fallback.md) · [safety-errors.md](skills/monkeys/references/safety-errors.md)         |
+| 主题                       | 文档                                                                                                                                                 |
+| -------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------- |
+| 平台、上下文与安全         | [platform-overview.md](skills/monkeys-shared/references/platform-overview.md) · [safety-errors.md](skills/monkeys-shared/references/safety-errors.md) |
+| 认证与多订阅               | [authentication.md](skills/monkeys-auth/references/authentication.md)                                                                                 |
+| Workflow、Execution 与文件 | [workflow-execution-files.md](skills/monkeys-workflow/references/workflow-execution-files.md)                                                         |
+| Agent Work                 | [agent-work.md](skills/monkeys-agent-work/references/agent-work.md)                                                                                   |
+| Data 读取与视角            | [data-read.md](skills/monkeys-data/references/data-read.md) · [data-perspective.md](skills/monkeys-data/references/data-perspective.md)               |
+| Data 写入与迁移            | [data-write.md](skills/monkeys-data/references/data-write.md) · [data-transfer.md](skills/monkeys-data/references/data-transfer.md)                   |
+| System Config              | [system-config.md](skills/monkeys-system-config/references/system-config.md)                                                                           |
+| OpenAPI 降级               | [fallback.md](skills/monkeys-openapi/references/fallback.md)                                                                                           |
 
 ## 安全与风险提示（使用前必读）
 

package/bin/install-wizard.js

@@ -17,7 +17,7 @@ export function createInstallPlan({ packageName, packageRoot }) {
     {
       args: ['-y', 'skills', 'add', resolve(packageRoot, 'skills'), '-y', '-g', '--copy'],
       command: 'npx',
-      label: 'Install Monkeys AI Skill',
+      label: 'Install Monkeys AI Skills',
     },
   ];
 }
@@ -41,6 +41,15 @@ export async function runInstallWizard(options = {}) {
   const packageJson = JSON.parse(await readFile(resolve(packageRoot, 'package.json'), 'utf8'));
   const plan = createInstallPlan({ packageName: packageJson.name, packageRoot });
   const execute = options.execute ?? runCommand;
+  const recordState =
+    options.recordState ??
+    (async () => {
+      const [{ listBundledSkills }, { writeSkillsState }] = await Promise.all([
+        import('../dist/skills/content.js'),
+        import('../dist/skills/state.js'),
+      ]);
+      await writeSkillsState(packageJson.version, await listBundledSkills(resolve(packageRoot, 'skills')), 'install');
+    });
   const output = options.output ?? ((message) => process.stdout.write(`${message}\n`));
 
   output('Setting up Monkeys CLI...');
@@ -48,7 +57,8 @@ export async function runInstallWizard(options = {}) {
     output(`${step.label}...`);
     execute(step.command, step.args);
   }
-  output('Monkeys CLI and AI Skill are installed.');
+  await recordState({ packageRoot, version: packageJson.version });
+  output('Monkeys CLI and AI Skills are installed.');
 
   return plan;
 }

package/bin/run.js

@@ -41,16 +41,16 @@ if (install) {
   const { runInstallWizardCli } = await import('./install-wizard.js');
   await runInstallWizardCli();
 } else if (fastVersion) {
-  const { BUNDLED_SKILL_MINIMUM_CLI_VERSION, BUNDLED_SKILL_NAME, COMMAND_SCHEMA_MAJOR } = await import('../dist/contracts/version.js');
+  const { BUNDLED_SKILL_MINIMUM_CLI_VERSION, BUNDLED_SKILL_NAMES, COMMAND_SCHEMA_MAJOR } = await import('../dist/contracts/version.js');
   const data = {
     cliVersion: packageJson.version,
     commandSchemaMajor: COMMAND_SCHEMA_MAJOR,
     nodeVersion: process.version,
     platform: `${process.platform}-${process.arch}`,
-    skill: { minimumCliVersion: BUNDLED_SKILL_MINIMUM_CLI_VERSION, name: BUNDLED_SKILL_NAME },
+    skills: { minimumCliVersion: BUNDLED_SKILL_MINIMUM_CLI_VERSION, names: BUNDLED_SKILL_NAMES },
   };
   const outputIndex = args.indexOf('--output');
-  const output = outputIndex >= 0 ? args[outputIndex + 1] : 'text';
+  const output = outputIndex >= 0 ? args[outputIndex + 1] : 'json';
   if (output === 'json') {
     process.stdout.write(
       `${JSON.stringify({
@@ -71,7 +71,7 @@ if (install) {
 } else if (fastProfileList) {
   const { renderFastProfileList } = await import('../dist/config/fast-profile-list.js');
   const outputIndex = args.indexOf('--output');
-  const result = await renderFastProfileList(outputIndex >= 0 ? args[outputIndex + 1] : 'text');
+  const result = await renderFastProfileList(outputIndex >= 0 ? args[outputIndex + 1] : 'json');
   process.stdout.write(`${result.text}\n`);
   process.exitCode = result.exitCode;
 } else {

package/dist/command/metadata.d.ts

@@ -0,0 +1,11 @@
+import type { RiskLevel } from '../policy/risk.js';
+export interface CommandMetadata {
+    confirmationMode: 'conditional' | 'none' | 'required' | 'runtime';
+    confirmationEnforcement: 'generic' | 'native' | 'none';
+    confirmationRequired: boolean;
+    dryRun: 'generic' | 'native';
+    risk: RiskLevel;
+}
+export declare function getCommandMetadata(command: string): CommandMetadata;
+export declare function genericDryRunPreview(command: string): Record<string, unknown>;
+//# sourceMappingURL=metadata.d.ts.map

package/dist/command/metadata.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"metadata.d.ts","sourceRoot":"","sources":["../../src/command/metadata.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAEnD,MAAM,WAAW,eAAe;IAC9B,gBAAgB,EAAE,aAAa,GAAG,MAAM,GAAG,UAAU,GAAG,SAAS,CAAC;IAClE,uBAAuB,EAAE,SAAS,GAAG,QAAQ,GAAG,MAAM,CAAC;IACvD,oBAAoB,EAAE,OAAO,CAAC;IAC9B,MAAM,EAAE,SAAS,GAAG,QAAQ,CAAC;IAC7B,IAAI,EAAE,SAAS,CAAC;CACjB;AA6GD,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,eAAe,CAiCnE;AAED,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAU7E"}

package/dist/command/metadata.js

@@ -0,0 +1,150 @@
+const NATIVE_DRY_RUN_COMMANDS = new Set([
+    'config patch',
+    'config set',
+    'data asset enrich-jsonl',
+    'data asset feature-backfill',
+    'data asset import',
+    'data ontology import',
+    'workflow create',
+    'workflow delete',
+    'workflow import',
+    'workflow update',
+]);
+const READ_VERBS = new Set([
+    'check',
+    'current',
+    'describe',
+    'doctor',
+    'export',
+    'get',
+    'history',
+    'list',
+    'overview',
+    'read',
+    'schema',
+    'search',
+    'show',
+    'status',
+    'test',
+    'validate',
+    'version',
+    'wait',
+    'watch',
+    'whoami',
+]);
+const CREDENTIAL_PREFIXES = ['auth login', 'auth logout', 'profile add', 'profile remove'];
+const CREDENTIAL_COMMANDS = new Set(['auth api-key import']);
+const PRIVILEGED_COMMANDS = new Set([
+    'agent work assign existing',
+    'agent work assign new',
+    'agent work retry',
+    'agent work review approve',
+    'agent work spec approve',
+    'config patch',
+    'config set',
+    'data asset import',
+    'data asset import-jsonl',
+    'data asset import-jsonl cancel',
+    'data bucket create',
+    'data bucket update',
+    'data ontology create',
+    'data ontology import',
+    'data ontology update',
+    'data view convert-to-container',
+]);
+const DESTRUCTIVE_VERBS = new Set(['delete', 'remove']);
+const NATIVE_REQUIRED_CONFIRMATION = new Set([
+    'agent work assign existing',
+    'agent work assign new',
+    'agent work delete',
+    'agent work retry',
+    'agent work review approve',
+    'agent work spec approve',
+    'config patch',
+    'config set',
+    'data asset delete',
+    'data asset import',
+    'data asset import-jsonl',
+    'data asset import-jsonl cancel',
+    'data bucket create',
+    'data bucket update',
+    'data container remove',
+    'data ontology create',
+    'data ontology import',
+    'data ontology update',
+    'data tag delete',
+    'data tag-group delete',
+    'data view convert-to-container',
+    'data view delete',
+    'workflow create',
+    'workflow delete',
+    'workflow import',
+    'workflow update',
+]);
+const NATIVE_CONDITIONAL_CONFIRMATION = new Set([
+    'config export',
+    'data asset attachment download',
+    'data asset export',
+    'data asset media download',
+    'data ontology export',
+    'file download',
+]);
+const LOCAL_OR_SERVER_SIDE_WRITES = new Set([
+    'config export',
+    'data asset attachment download',
+    'data asset export',
+    'data asset media download',
+    'data ontology export',
+    'file download',
+    'team list',
+]);
+function commandVerb(command) {
+    return command.trim().split(/\s+/).at(-1) ?? '';
+}
+export function getCommandMetadata(command) {
+    const normalized = command.trim().replace(/\s+/g, ' ');
+    let risk;
+    if (CREDENTIAL_COMMANDS.has(normalized) || CREDENTIAL_PREFIXES.some((prefix) => normalized.startsWith(prefix)))
+        risk = 'credential';
+    else if (PRIVILEGED_COMMANDS.has(normalized))
+        risk = 'privileged';
+    else if (DESTRUCTIVE_VERBS.has(commandVerb(normalized)) || normalized.endsWith(' cancel'))
+        risk = 'destructive';
+    else if (LOCAL_OR_SERVER_SIDE_WRITES.has(normalized))
+        risk = 'bounded-write';
+    else if (READ_VERBS.has(commandVerb(normalized)))
+        risk = 'read';
+    else
+        risk = 'bounded-write';
+    const confirmationMode = normalized === 'api call'
+        ? 'runtime'
+        : NATIVE_CONDITIONAL_CONFIRMATION.has(normalized)
+            ? 'conditional'
+            : NATIVE_REQUIRED_CONFIRMATION.has(normalized) || risk === 'destructive' || risk === 'privileged'
+                ? 'required'
+                : 'none';
+    const confirmationEnforcement = NATIVE_REQUIRED_CONFIRMATION.has(normalized) || NATIVE_CONDITIONAL_CONFIRMATION.has(normalized) || normalized === 'api call'
+        ? 'native'
+        : confirmationMode === 'required'
+            ? 'generic'
+            : 'none';
+    return {
+        confirmationEnforcement,
+        confirmationMode,
+        confirmationRequired: confirmationMode === 'required',
+        dryRun: NATIVE_DRY_RUN_COMMANDS.has(normalized) ? 'native' : 'generic',
+        risk,
+    };
+}
+export function genericDryRunPreview(command) {
+    const metadata = getCommandMetadata(command);
+    return {
+        command,
+        confirmationMode: metadata.confirmationMode,
+        confirmationRequired: metadata.confirmationRequired,
+        dryRun: true,
+        risk: metadata.risk,
+        wouldExecute: false,
+    };
+}
+//# sourceMappingURL=metadata.js.map

package/dist/command/metadata.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"metadata.js","sourceRoot":"","sources":["../../src/command/metadata.ts"],"names":[],"mappings":"AAUA,MAAM,uBAAuB,GAAG,IAAI,GAAG,CAAC;IACtC,cAAc;IACd,YAAY;IACZ,yBAAyB;IACzB,6BAA6B;IAC7B,mBAAmB;IACnB,sBAAsB;IACtB,iBAAiB;IACjB,iBAAiB;IACjB,iBAAiB;IACjB,iBAAiB;CAClB,CAAC,CAAC;AAEH,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC;IACzB,OAAO;IACP,SAAS;IACT,UAAU;IACV,QAAQ;IACR,QAAQ;IACR,KAAK;IACL,SAAS;IACT,MAAM;IACN,UAAU;IACV,MAAM;IACN,QAAQ;IACR,QAAQ;IACR,MAAM;IACN,QAAQ;IACR,MAAM;IACN,UAAU;IACV,SAAS;IACT,MAAM;IACN,OAAO;IACP,QAAQ;CACT,CAAC,CAAC;AAEH,MAAM,mBAAmB,GAAG,CAAC,YAAY,EAAE,aAAa,EAAE,aAAa,EAAE,gBAAgB,CAAC,CAAC;AAC3F,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC;AAC7D,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC;IAClC,4BAA4B;IAC5B,uBAAuB;IACvB,kBAAkB;IAClB,2BAA2B;IAC3B,yBAAyB;IACzB,cAAc;IACd,YAAY;IACZ,mBAAmB;IACnB,yBAAyB;IACzB,gCAAgC;IAChC,oBAAoB;IACpB,oBAAoB;IACpB,sBAAsB;IACtB,sBAAsB;IACtB,sBAAsB;IACtB,gCAAgC;CACjC,CAAC,CAAC;AACH,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;AACxD,MAAM,4BAA4B,GAAG,IAAI,GAAG,CAAC;IAC3C,4BAA4B;IAC5B,uBAAuB;IACvB,mBAAmB;IACnB,kBAAkB;IAClB,2BAA2B;IAC3B,yBAAyB;IACzB,cAAc;IACd,YAAY;IACZ,mBAAmB;IACnB,mBAAmB;IACnB,yBAAyB;IACzB,gCAAgC;IAChC,oBAAoB;IACpB,oBAAoB;IACpB,uBAAuB;IACvB,sBAAsB;IACtB,sBAAsB;IACtB,sBAAsB;IACtB,iBAAiB;IACjB,uBAAuB;IACvB,gCAAgC;IAChC,kBAAkB;IAClB,iBAAiB;IACjB,iBAAiB;IACjB,iBAAiB;IACjB,iBAAiB;CAClB,CAAC,CAAC;AACH,MAAM,+BAA+B,GAAG,IAAI,GAAG,CAAC;IAC9C,eAAe;IACf,gCAAgC;IAChC,mBAAmB;IACnB,2BAA2B;IAC3B,sBAAsB;IACtB,eAAe;CAChB,CAAC,CAAC;AACH,MAAM,2BAA2B,GAAG,IAAI,GAAG,CAAC;IAC1C,eAAe;IACf,gCAAgC;IAChC,mBAAmB;IACnB,2BAA2B;IAC3B,sBAAsB;IACtB,eAAe;IACf,WAAW;CACZ,CAAC,CAAC;AAEH,SAAS,WAAW,CAAC,OAAe;IAClC,OAAO,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,OAAe;IAChD,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACvD,IAAI,IAAe,CAAC;IAEpB,IAAI,mBAAmB,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,mBAAmB,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAAE,IAAI,GAAG,YAAY,CAAC;SAC/H,IAAI,mBAAmB,CAAC,GAAG,CAAC,UAAU,CAAC;QAAE,IAAI,GAAG,YAAY,CAAC;SAC7D,IAAI,iBAAiB,CAAC,GAAG,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,IAAI,GAAG,aAAa,CAAC;SAC3G,IAAI,2BAA2B,CAAC,GAAG,CAAC,UAAU,CAAC;QAAE,IAAI,GAAG,eAAe,CAAC;SACxE,IAAI,UAAU,CAAC,GAAG,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;QAAE,IAAI,GAAG,MAAM,CAAC;;QAC3D,IAAI,GAAG,eAAe,CAAC;IAE5B,MAAM,gBAAgB,GACpB,UAAU,KAAK,UAAU;QACvB,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,+BAA+B,CAAC,GAAG,CAAC,UAAU,CAAC;YAC/C,CAAC,CAAC,aAAa;YACf,CAAC,CAAC,4BAA4B,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,IAAI,KAAK,aAAa,IAAI,IAAI,KAAK,YAAY;gBAC/F,CAAC,CAAC,UAAU;gBACZ,CAAC,CAAC,MAAM,CAAC;IACjB,MAAM,uBAAuB,GAC3B,4BAA4B,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,+BAA+B,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,UAAU,KAAK,UAAU;QAC1H,CAAC,CAAC,QAAQ;QACV,CAAC,CAAC,gBAAgB,KAAK,UAAU;YAC/B,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,MAAM,CAAC;IAEf,OAAO;QACL,uBAAuB;QACvB,gBAAgB;QAChB,oBAAoB,EAAE,gBAAgB,KAAK,UAAU;QACrD,MAAM,EAAE,uBAAuB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;QACtE,IAAI;KACL,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,OAAe;IAClD,MAAM,QAAQ,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAC7C,OAAO;QACL,OAAO;QACP,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB;QAC3C,oBAAoB,EAAE,QAAQ,CAAC,oBAAoB;QACnD,MAAM,EAAE,IAAI;QACZ,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,YAAY,EAAE,KAAK;KACpB,CAAC;AACJ,CAAC"}

package/dist/commands/agent/work/watch.d.ts

@@ -1,11 +1,12 @@
-import { Command } from '@oclif/core';
-export default class AgentWorkWatch extends Command {
+import { LocalCommand } from '../../../config/local-command.js';
+export default class AgentWorkWatch extends LocalCommand {
     static args: {
         issueId: import("@oclif/core/interfaces").Arg<string, Record<string, unknown>>;
     };
     static description: string;
     static flags: {
         'interval-ms': import("@oclif/core/interfaces").OptionFlag<number, import("@oclif/core/interfaces").CustomOptions>;
+        output: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
         profile: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
         'timeout-seconds': import("@oclif/core/interfaces").OptionFlag<number, import("@oclif/core/interfaces").CustomOptions>;
     };

package/dist/commands/agent/work/watch.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"watch.d.ts","sourceRoot":"","sources":["../../../../src/commands/agent/work/watch.ts"],"names":[],"mappings":"AAAA,OAAO,EAAQ,OAAO,EAAS,MAAM,aAAa,CAAC;AAUnD,MAAM,CAAC,OAAO,OAAO,cAAe,SAAQ,OAAO;IACjD,OAAgB,IAAI;QAAK,OAAO;MAAkE;IAClG,OAAgB,WAAW,SAAsF;IACjH,OAAgB,KAAK;QACnB,aAAa;QACb,OAAO;QACP,iBAAiB;MACjB;IAEI,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,CA8BzB;CACF"}
+{"version":3,"file":"watch.d.ts","sourceRoot":"","sources":["../../../../src/commands/agent/work/watch.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,YAAY,EAAmB,MAAM,kCAAkC,CAAC;AAIjF,MAAM,CAAC,OAAO,OAAO,cAAe,SAAQ,YAAY;IACtD,OAAgB,IAAI;QAAK,OAAO;MAAkE;IAClG,OAAgB,WAAW,SAAsF;IACjH,OAAgB,KAAK;QACnB,aAAa;QACb,MAAM;QACN,OAAO;QACP,iBAAiB;MACjB;IAEI,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,CA+BzB;CACF"}

package/dist/commands/agent/work/watch.js

@@ -1,22 +1,25 @@
-import { Args, Command, Flags } from '@oclif/core';
+import { Args, Flags } from '@oclif/core';
 import { AgentWorkClient } from '../../../agent-work/client.js';
 import { agentWorkMeta } from '../../../agent-work/context.js';
 import { watchAgentWork } from '../../../agent-work/polling.js';
 import { loadAgentWorkRuntime } from '../../../agent-work/runtime.js';
 import { errorResult, successResult } from '../../../contracts/result.js';
 import { asCliError } from '../../../errors/cli-error.js';
-import { renderResult } from '../../../output/render.js';
+import { LocalCommand, localOutputFlag } from '../../../config/local-command.js';
+import { renderCommandResult } from '../../../output/render.js';
 import { redactValue } from '../../../security/redact.js';
-export default class AgentWorkWatch extends Command {
+export default class AgentWorkWatch extends LocalCommand {
     static args = { issueId: Args.string({ description: 'Agent Work ID', required: true }) };
     static description = 'Output Agent Work status changes in NDJSON; Ctrl+C only stops local observation.';
     static flags = {
         'interval-ms': Flags.integer({ default: 2_000, min: 250, max: 60_000, summary: 'Polling interval' }),
+        output: localOutputFlag,
         profile: Flags.string({ summary: 'Kernel Profile name' }),
         'timeout-seconds': Flags.integer({ default: 3_600, min: 1, max: 86_400, summary: 'Maximum listening seconds' }),
     };
     async run() {
         const { args, flags } = await this.parse(AgentWorkWatch);
+        const format = (flags.format ?? flags.output);
         const controller = new AbortController();
         const onInterrupt = () => controller.abort();
         process.once('SIGINT', onInterrupt);
@@ -34,12 +37,14 @@ export default class AgentWorkWatch extends Command {
                     ...(event.requestId ? { requestId: event.requestId } : {}),
                     work: event.data,
                 };
-                this.log(renderResult(redactValue(successResult(value, { command: 'agent work watch' })), 'json'));
+                const result = redactValue(successResult(value, { command: 'agent work watch' }));
+                this.log(await renderCommandResult(result, { format, ...(flags.jq ? { jq: flags.jq } : {}) }));
             }
         }
         catch (error) {
             const cliError = asCliError(error);
-            this.log(renderResult(redactValue(errorResult(cliError.toErrorDetail(), { command: 'agent work watch' })), 'json'));
+            const result = redactValue(errorResult(cliError.toErrorDetail(), { command: 'agent work watch' }));
+            this.log(await renderCommandResult(result, { format, ...(flags.jq ? { jq: flags.jq } : {}) }));
             this.exit(cliError.exitCode);
         }
         finally {

package/dist/commands/agent/work/watch.js.map

@@ -1 +1 @@
-{"version":3,"file":"watch.js","sourceRoot":"","sources":["../../../../src/commands/agent/work/watch.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAChE,OAAO,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAC/D,OAAO,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAChE,OAAO,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AACtE,OAAO,EAAE,WAAW,EAAE,aAAa,EAAsB,MAAM,8BAA8B,CAAC;AAC9F,OAAO,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAC;AAC1D,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAE1D,MAAM,CAAC,OAAO,OAAO,cAAe,SAAQ,OAAO;IACjD,MAAM,CAAU,IAAI,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,eAAe,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IAClG,MAAM,CAAU,WAAW,GAAG,kFAAkF,CAAC;IACjH,MAAM,CAAU,KAAK,GAAG;QACtB,aAAa,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC;QACpG,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,qBAAqB,EAAE,CAAC;QACzD,iBAAiB,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,2BAA2B,EAAE,CAAC;KAChH,CAAC;IAEF,KAAK,CAAC,GAAG;QACP,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;QACzD,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,WAAW,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QAC7C,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;QACpC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC1D,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,cAAc,CAAC,IAAI,eAAe,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,OAAO,EAAE;gBACnF,UAAU,EAAE,KAAK,CAAC,aAAa,CAAC;gBAChC,MAAM,EAAE,UAAU,CAAC,MAAM;gBACzB,SAAS,EAAE,KAAK,CAAC,iBAAiB,CAAC,GAAG,KAAK;aAC5C,CAAC,EAAE,CAAC;gBACH,MAAM,KAAK,GAAG;oBACZ,GAAG,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC;oBACxC,UAAU,EAAE,KAAK,CAAC,UAAU;oBAC5B,WAAW,EAAE,iBAAiB;oBAC9B,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC1D,IAAI,EAAE,KAAK,CAAC,IAAI;iBACjB,CAAC;gBACF,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,WAAW,CAAC,aAAa,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC,CAAgC,EAAE,MAAM,CAAC,CAAC,CAAC;YACpI,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;YACnC,IAAI,CAAC,GAAG,CACN,YAAY,CAAC,WAAW,CAAC,WAAW,CAAC,QAAQ,CAAC,aAAa,EAAE,EAAE,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC,CAAyB,EAAE,MAAM,CAAC,CAClI,CAAC;YACF,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC/B,CAAC;gBAAS,CAAC;YACT,OAAO,CAAC,cAAc,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"watch.js","sourceRoot":"","sources":["../../../../src/commands/agent/work/watch.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAChE,OAAO,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAC/D,OAAO,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAChE,OAAO,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AACtE,OAAO,EAAE,WAAW,EAAE,aAAa,EAAsB,MAAM,8BAA8B,CAAC;AAC9F,OAAO,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAC;AAC1D,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AACjF,OAAO,EAAE,mBAAmB,EAAqB,MAAM,2BAA2B,CAAC;AACnF,OAAO,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAE1D,MAAM,CAAC,OAAO,OAAO,cAAe,SAAQ,YAAY;IACtD,MAAM,CAAU,IAAI,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,eAAe,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IAClG,MAAM,CAAU,WAAW,GAAG,kFAAkF,CAAC;IACjH,MAAM,CAAU,KAAK,GAAG;QACtB,aAAa,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC;QACpG,MAAM,EAAE,eAAe;QACvB,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,qBAAqB,EAAE,CAAC;QACzD,iBAAiB,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,2BAA2B,EAAE,CAAC;KAChH,CAAC;IAEF,KAAK,CAAC,GAAG;QACP,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;QACzD,MAAM,MAAM,GAAG,CAAC,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,CAAiB,CAAC;QAC9D,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,WAAW,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QAC7C,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;QACpC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC1D,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,cAAc,CAAC,IAAI,eAAe,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,OAAO,EAAE;gBACnF,UAAU,EAAE,KAAK,CAAC,aAAa,CAAC;gBAChC,MAAM,EAAE,UAAU,CAAC,MAAM;gBACzB,SAAS,EAAE,KAAK,CAAC,iBAAiB,CAAC,GAAG,KAAK;aAC5C,CAAC,EAAE,CAAC;gBACH,MAAM,KAAK,GAAG;oBACZ,GAAG,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC;oBACxC,UAAU,EAAE,KAAK,CAAC,UAAU;oBAC5B,WAAW,EAAE,iBAAiB;oBAC9B,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC1D,IAAI,EAAE,KAAK,CAAC,IAAI;iBACjB,CAAC;gBACF,MAAM,MAAM,GAAG,WAAW,CAAC,aAAa,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC,CAAgC,CAAC;gBACjH,IAAI,CAAC,GAAG,CAAC,MAAM,mBAAmB,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;YACjG,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;YACnC,MAAM,MAAM,GAAG,WAAW,CAAC,WAAW,CAAC,QAAQ,CAAC,aAAa,EAAE,EAAE,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC,CAAyB,CAAC;YAC3H,IAAI,CAAC,GAAG,CAAC,MAAM,mBAAmB,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;YAC/F,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC/B,CAAC;gBAAS,CAAC;YACT,OAAO,CAAC,cAAc,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;CACF"}

package/dist/commands/context/show.d.ts

@@ -0,0 +1,11 @@
+import { LocalCommand } from '../../config/local-command.js';
+export default class ContextShow extends LocalCommand {
+    static description: string;
+    static flags: {
+        output: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+        profile: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        team: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    };
+    run(): Promise<void>;
+}
+//# sourceMappingURL=show.d.ts.map

package/dist/commands/context/show.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"show.d.ts","sourceRoot":"","sources":["../../../src/commands/context/show.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAmB,MAAM,+BAA+B,CAAC;AAI9E,MAAM,CAAC,OAAO,OAAO,WAAY,SAAQ,YAAY;IACnD,OAAgB,WAAW,SACuF;IAClH,OAAgB,KAAK;QACnB,MAAM;QACN,OAAO;QACP,IAAI;MACJ;IAEI,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,CAkBzB;CACF"}

package/dist/commands/context/show.js

@@ -0,0 +1,32 @@
+import { Flags } from '@oclif/core';
+import { LocalCommand, localOutputFlag } from '../../config/local-command.js';
+import { resolveCommandRuntime } from '../../credential/command-runtime.js';
+import { resolveAuthSurface } from '../../credential/runtime.js';
+export default class ContextShow extends LocalCommand {
+    static description = 'Show the resolved endpoint, Profile, tenant, Team, identity expectation, and credential kind without secrets.';
+    static flags = {
+        output: localOutputFlag,
+        profile: Flags.string({ summary: 'Profile name' }),
+        team: Flags.string({ summary: 'Team ID used in this context' }),
+    };
+    async run() {
+        const { flags } = await this.parse(ContextShow);
+        await this.emit('context show', flags.output, async () => {
+            const { context } = await resolveCommandRuntime(flags.profile, flags.team);
+            return {
+                authSurface: resolveAuthSurface(context),
+                baseUrl: context.baseUrl,
+                credential: { fingerprint: context.credential.fingerprint, kind: context.credential.kind },
+                dataContract: context.dataContract,
+                deployment: context.deployment,
+                expectedPrincipal: context.expectedPrincipal,
+                expectedSurfaces: context.expectedSurfaces,
+                fingerprint: context.fingerprint,
+                profile: context.profile,
+                team: context.team,
+                tenant: context.tenant,
+            };
+        });
+    }
+}
+//# sourceMappingURL=show.js.map

package/dist/commands/context/show.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"show.js","sourceRoot":"","sources":["../../../src/commands/context/show.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACpC,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAC9E,OAAO,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAC;AAC5E,OAAO,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AAEjE,MAAM,CAAC,OAAO,OAAO,WAAY,SAAQ,YAAY;IACnD,MAAM,CAAU,WAAW,GACzB,+GAA+G,CAAC;IAClH,MAAM,CAAU,KAAK,GAAG;QACtB,MAAM,EAAE,eAAe;QACvB,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC;QAClD,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,8BAA8B,EAAE,CAAC;KAChE,CAAC;IAEF,KAAK,CAAC,GAAG;QACP,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAChD,MAAM,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE;YACvD,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,qBAAqB,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAC3E,OAAO;gBACL,WAAW,EAAE,kBAAkB,CAAC,OAAO,CAAC;gBACxC,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,UAAU,EAAE,EAAE,WAAW,EAAE,OAAO,CAAC,UAAU,CAAC,WAAW,EAAE,IAAI,EAAE,OAAO,CAAC,UAAU,CAAC,IAAI,EAAE;gBAC1F,YAAY,EAAE,OAAO,CAAC,YAAY;gBAClC,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;gBAC5C,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;gBAC1C,WAAW,EAAE,OAAO,CAAC,WAAW;gBAChC,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,MAAM,EAAE,OAAO,CAAC,MAAM;aACvB,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;CACF"}