@ironbee-ai/cli 0.23.0 → 0.25.0

package/dist/tui/config/schema.js

@@ -1 +1 @@
-"use strict";var a=Object.defineProperty;var p=Object.getOwnPropertyDescriptor;var u=Object.getOwnPropertyNames;var h=Object.prototype.hasOwnProperty;var n=(e,t)=>a(e,"name",{value:t,configurable:!0});var g=(e,t)=>{for(var o in t)a(e,o,{get:t[o],enumerable:!0})},y=(e,t,o,r)=>{if(t&&typeof t=="object"||typeof t=="function")for(let i of u(t))!h.call(e,i)&&i!==o&&a(e,i,{get:()=>t[i],enumerable:!(r=p(t,i))||r.enumerable});return e};var b=e=>y(a({},"__esModule",{value:!0}),e);var k={};g(k,{ARTIFACT_AFFECTING_TOP_KEYS:()=>v,CONFIG_SCHEMA:()=>d,GROUP_ORDER:()=>s,GROUP_TITLES:()=>f,findSchemaEntry:()=>A,groupOf:()=>c,groupRank:()=>l,groupTitle:()=>w,orderedEntries:()=>T,topKey:()=>m});module.exports=b(k);const v=new Set(["verification","collector","browser","node","backend","android","browserDevTools","nodeDevTools","backendDevTools","androidDevTools","telemetry","privacy","statusLine","otel"]),s=["general","verification","verificationContext","browser","node","backend","android","collector","recording","jobQueue","analytics","statusLine","claude","telemetry","privacy","otel","fileChange","import","browserDevTools","nodeDevTools","backendDevTools","androidDevTools"],f={general:"General",verification:"Verification",verificationContext:"Verification context",browser:"Browser cycle",node:"Node cycle",backend:"Backend cycle",android:"Android cycle",collector:"Collector",recording:"Recording",jobQueue:"Job queue",analytics:"Analytics",statusLine:"Statusline",claude:"Claude",telemetry:"Telemetry",privacy:"Privacy",otel:"OTEL collector",fileChange:"File change",import:"Import",browserDevTools:"Browser DevTools MCP",nodeDevTools:"Node DevTools MCP",backendDevTools:"Backend DevTools MCP",androidDevTools:"Android DevTools MCP"};function m(e){const t=e.indexOf(".");return t===-1?e:e.slice(0,t)}n(m,"topKey");function c(e){const t=e.indexOf(".");return t===-1?"general":e.slice(0,t)}n(c,"groupOf");function w(e){return f[e]??e}n(w,"groupTitle");function l(e){const t=s.indexOf(e);return t===-1?s.length:t}n(l,"groupRank");const d=[{path:"ignoredVerifyPatterns",type:"string-array",editor:"string-list",description:"Glob patterns excluded from verification, applied to every cycle (browser / node / backend). Checked first \u2014 a match here activates no cycle regardless of other patterns.",def:"[]",artifactAffecting:!1},{path:"maxRetries",type:"number",editor:"number",description:"Max verification retry attempts before the gate allows completion despite failures. Single global counter regardless of how many cycles ran.",def:"3",artifactAffecting:!1},{path:"verification.enable",type:"boolean",editor:"toggle",description:"Master enforcement switch. Inverse semantics \u2014 verification is the core feature, opt out with false. When false, IronBee runs monitoring-only: no enforcement hooks, no skill/rule, no MCP servers; only session/activity/tool_call events flow to the collector.",def:"true",artifactAffecting:!0},{path:"verification.auto",type:"boolean",editor:"toggle",description:'Automatic-enforcement sub-toggle (only meaningful when verification.enable !== false). Inverse semantics \u2014 opt out with false for "assist mode": the /ironbee-verify command + MCP servers stay installed so the agent can verify manually, but nothing is enforced \u2014 no Stop gate, non-blocking (soft) PreToolUse hooks, and the skill/rule are omitted. true \u2192 full enforce mode.',def:"true",artifactAffecting:!0},{path:"verification.model",type:"json",editor:"json",description:`Model the delegated verifier sub-agent uses. Unset \u2192 the verifier inherits the session model (Claude verifier omits model: \u2192 inherit; Codex verifier omits agent-toml model \u2192 inherits config.toml's model). Set to PIN a specific model \u2014 e.g. verify on a cheaper/faster model than the main agent, or guarantee a model on Codex when config.toml has none. Two shapes: a string (applies to all clients, e.g. "sonnet" / "gpt-5.5") or a per-client object { claude: "sonnet", codex: "gpt-5.5" } when a project has both clients. Cursor has no verifier sub-agent \u2192 no-op there. Never resolves to a literal "inherit" on Codex (a 400). Artifact-affecting.`,def:"unset (inherit the session model)",artifactAffecting:!0},{path:"verificationContext.enable",type:"boolean",editor:"toggle",description:"Master switch for path-scoped verification context. When a cycle begins, the first devtools tool call injects the .ironbee/VERIFICATION.md files on/above the changed paths (author-written area guidance) into the agent's context via the host's additionalContext channel. Advisory only (does not gate). Inverse semantics \u2014 default-on, opt out with false. Not artifact-affecting (read live).",def:"true",artifactAffecting:!1},{path:"verificationContext.source",type:"string",editor:"enum",enumValues:["git","actions"],description:`Changed-path source. "git" (default) = working tree + last N commits, with an actions.jsonl fallback when not a git repo. "actions" = IronBee's own file_change events only (no git subprocess).`,def:"git",artifactAffecting:!1},{path:"verificationContext.commitDepth",type:"number",editor:"number",description:'Number of recent commits included on the git source (uncommitted \u222A last N commits). 0 = uncommitted only. Ignored when source is "actions".',def:"1",artifactAffecting:!1},{path:"verificationContext.maxBytes",type:"number",editor:"number",description:"Aggregate byte cap on the injected context string. When exceeded, the least-specific (root-side) docs are dropped first (leaf-first truncation priority).",def:"65536 (64 KB)",artifactAffecting:!1},{path:"browser.enable",type:"boolean",editor:"toggle",description:"Explicit on/off for the browser cycle. Written false by `browser disable`, stripped by `browser enable`. When false the cycle is disabled regardless of patterns.",def:"(absent \u2192 on; browser is the only default-on cycle)",artifactAffecting:!0},{path:"browser.verifyPatterns",type:"string-array",editor:"string-list",description:"Glob patterns for files requiring browser verification. Four-state: absent \u2192 code defaults (40+ extensions); [] \u2192 hard kill; non-empty \u2192 custom patterns (replaces defaults).",def:"40+ code extensions when unset; [] hard-disables",artifactAffecting:!0},{path:"browser.additionalVerifyPatterns",type:"string-array",editor:"string-list",description:"Extra patterns appended to browser.verifyPatterns (or to code defaults when verifyPatterns is unset). Ignored when verifyPatterns is [] (hard kill wins).",def:"[]",artifactAffecting:!0},{path:"browser.alwaysRequired",type:"string-array",editor:"string-list",description:"Browser-cycle required tools (all-of). The verify-gate blocks completion until every listed bdt_* tool was used.",def:"bdt_navigation_go-to, bdt_content_take-screenshot, bdt_a11y_take-aria-snapshot, bdt_o11y_get-console-messages",artifactAffecting:!0},{path:"browser.evidencePaths",type:"json",editor:"json",description:"Alternative tool-satisfaction paths (any-of). Browser uses pure all-of, so default is empty. Each path: { name, allOf: (string | { anyOf: string[] })[] }.",def:"[]",artifactAffecting:!0},{path:"node.enable",type:"boolean",editor:"toggle",description:"Explicit on/off for the Node.js runtime debug cycle (node-devtools, ndt_* V8 inspector probes). Opt-in \u2014 written by `node enable`.",def:"(absent \u2192 off; node is opt-in)",artifactAffecting:!0},{path:"node.verifyPatterns",type:"string-array",editor:"string-list",description:"Glob patterns for the Node.js runtime debug cycle. Default-off \u2014 block absent = inert. Block present + unset \u2192 9 code defaults (server/api/routes paths).",def:"block absent \u2192 disabled; present + unset \u2192 code defaults",artifactAffecting:!0},{path:"node.additionalVerifyPatterns",type:"string-array",editor:"string-list",description:"Extra patterns appended to node.verifyPatterns (or to code defaults when unset). Ignored when verifyPatterns is [].",def:"[]",artifactAffecting:!0},{path:"node.alwaysRequired",type:"string-array",editor:"string-list",description:"Node-cycle required tools (all-of). ndt_debug_connect always; evidence paths supply the rest.",def:"[ndt_debug_connect]",artifactAffecting:!0},{path:"node.evidencePaths",type:"json",editor:"json",description:"Alternative tool paths (any-of). Default: probe path (a put-*point AND get-probe-snapshots) OR log path (get-logs).",def:"probe path + log path",artifactAffecting:!0},{path:"backend.enable",type:"boolean",editor:"toggle",description:"Explicit on/off for the runtime-agnostic backend protocol cycle (backend-devtools, bedt_* HTTP/gRPC/GraphQL/WebSocket). Opt-in \u2014 written by `backend enable`.",def:"(absent \u2192 off; backend is opt-in)",artifactAffecting:!0},{path:"backend.verifyPatterns",type:"string-array",editor:"string-list",description:"Glob patterns for the backend protocol cycle. Default-off \u2014 block absent = inert. Block present + unset \u2192 13 multi-language code defaults (ts/js/py/go/java/rb/cs/rs/kt/scala/ex/php/clj).",def:"block absent \u2192 disabled; present + unset \u2192 code defaults",artifactAffecting:!0},{path:"backend.additionalVerifyPatterns",type:"string-array",editor:"string-list",description:"Extra patterns appended to backend.verifyPatterns (or to code defaults when unset). Ignored when verifyPatterns is [].",def:"[]",artifactAffecting:!0},{path:"backend.alwaysRequired",type:"string-array",editor:"string-list",description:"Backend-cycle required tools (all-of). Empty by default \u2014 backend uses any-of evidence paths instead.",def:"[]",artifactAffecting:!0},{path:"backend.evidencePaths",type:"json",editor:"json",description:"Alternative tool paths (any-of). Default three: protocol-call (any request tool) OR log-evidence (register-source + read) OR db-evidence (db_connect + a read op).",def:"protocol-call OR log-evidence OR db-evidence",artifactAffecting:!0},{path:"android.enable",type:"boolean",editor:"toggle",description:"Explicit on/off for the Android mobile verification cycle (android-devtools, adt_* device/emulator interaction). Opt-in \u2014 written by `android enable`.",def:"(absent \u2192 off; android is opt-in)",artifactAffecting:!0},{path:"android.verifyPatterns",type:"string-array",editor:"string-list",description:"Glob patterns for the Android mobile verification cycle. Default-off \u2014 block absent = inert. Block present + unset \u2192 code defaults (Android/React Native paths).",def:"block absent \u2192 disabled; present + unset \u2192 code defaults",artifactAffecting:!0},{path:"android.additionalVerifyPatterns",type:"string-array",editor:"string-list",description:"Extra patterns appended to android.verifyPatterns (or to code defaults when unset). Ignored when verifyPatterns is [].",def:"[]",artifactAffecting:!0},{path:"android.alwaysRequired",type:"string-array",editor:"string-list",description:"Android-cycle required tools (all-of). adt_device_connect always; evidence paths supply the rest.",def:"[adt_device_connect]",artifactAffecting:!0},{path:"android.evidencePaths",type:"json",editor:"json",description:"Alternative tool paths (any-of). Default two: device-evidence (UI interaction + screenshot + UI snapshot) OR log-evidence (Logcat read/follow).",def:"device-evidence OR log-evidence",artifactAffecting:!0},{path:"collector.enable",type:"boolean",editor:"toggle",description:"Master switch for the IronBee Collector. Implicitly true when the section has url and at least one credential (oauthToken or apiKey); set false to suspend while keeping url/oauthToken/apiKey/batchSize around.",def:"implicit true when url + (oauthToken or apiKey) set",artifactAffecting:!0},{path:"collector.url",type:"string",editor:"text",description:"Remote collector endpoint URL (IronBee Platform). Required for the collector to be active. Events POST to {url}/v1/events.",def:"(unset \u2192 disabled)",artifactAffecting:!0},{path:"collector.oauthToken",type:"string",editor:"text",description:"Personal access token for collector auth (X-OAuth-Token header). Per-(user, account), independently revocable from the console's /access-tokens page. Minted by `ironbee login` \u2014 the primary path for interactive CLI use. Can be supplied via IRONBEE_OAUTH_TOKEN.",def:"(unset)",artifactAffecting:!0},{path:"collector.apiKey",type:"string",editor:"text",description:"Shared account API key for collector auth (X-API-Key header). Parallel first-class path alongside `oauthToken`, intended for CI / GitHub Actions / deployment tooling and other non-interactive integrations where rotating a per-engineer OAuth token is impractical. Either `oauthToken` OR `apiKey` is required for the collector to be active. Can be supplied via IRONBEE_API_KEY.",def:"(unset \u2192 disabled)",artifactAffecting:!0},{path:"collector.batchSize",type:"number",editor:"number",description:"Max events per POST from the send_event handler (the queue chunks bigger snapshots into N-sized POSTs).",def:"100",artifactAffecting:!0},{path:"collector.timeoutMs",type:"number",editor:"number",description:"Per-request HTTP timeout (ms) for batched analytics sends. Single-event interactive sends keep a fixed 3000ms cap. Clamped to [1000, 60000].",def:"10000",artifactAffecting:!0},{path:"recording.enable",type:"boolean",editor:"toggle",description:"Recording enforcement for the browser + android cycles. Presence opts in; enable:false opts out. Auto-enabled when a collector is configured. Node/backend cycles never trigger recording.",def:"implicit true when section present or collector configured",artifactAffecting:!1},{path:"jobQueue.enable",type:"boolean",editor:"toggle",description:"Master switch for the file-backed job queue. Presence opts in; enable:false opts out. Auto-enabled when a collector is configured (a collector is pointless without a queue feeding it).",def:"implicit true when section present or collector configured",artifactAffecting:!1},{path:"jobQueue.autoFlushSizeBytes",type:"number",editor:"number",description:"Size threshold (bytes) above which submit() spawns a detached worker mid-session. 0 / negative disables this check.",def:"32768 (32 KB)",artifactAffecting:!1},{path:"jobQueue.autoFlushIntervalSeconds",type:"number",editor:"number",description:"Interval threshold (seconds since the live jobs.jsonl was created) above which submit() spawns a detached worker. Complements size \u2014 whichever crosses first flushes. 0 / negative disables.",def:"60",artifactAffecting:!1},{path:"analytics.enable",type:"boolean",editor:"toggle",description:"Master switch for per-session structural analytics. Presence opts in; enable:false opts out. Auto-enabled when a collector is configured.",def:"implicit true when section present or collector configured",artifactAffecting:!1},{path:"analytics.emitOnStop",type:"boolean",editor:"toggle",description:"When true, project + emit analytics at every Stop hook. When false, only at SessionEnd.",def:"true",artifactAffecting:!1},{path:"analytics.emitOnStopMinIntervalSeconds",type:"number",editor:"number",description:"Throttle: skip Stop-hook projection if the last successful emit was within this many seconds. 0 disables the throttle (backend handles rate-limit / dedupe).",def:"0 (disabled)",artifactAffecting:!1},{path:"analytics.emitTurnEvents",type:"boolean",editor:"toggle",description:"Opt-in for per-turn session_turn_analytics wire records. High-volume secondary signal; the base session_analytics record always ships regardless.",def:"false",artifactAffecting:!1},{path:"analytics.emitStepEvents",type:"boolean",editor:"toggle",description:"Opt-in for per-step session_turn_step_analytics wire records (an order of magnitude higher volume than turn events). Independent of emitTurnEvents.",def:"false",artifactAffecting:!1},{path:"analytics.emitApiRequestEvents",type:"boolean",editor:"toggle",description:"Opt-OUT for per-API-request api_request wire records (one per assistant message, success + failure). Primary value for backend cost accounting, so ships by default.",def:"true",artifactAffecting:!1},{path:"statusLine.enable",type:"boolean",editor:"toggle",description:"Master switch for the Claude statusline integration (session_status event + statusline wrapper). Presence opts in; auto-enabled when a collector is configured. Claude-only.",def:"implicit true when section present or collector configured",artifactAffecting:!0},{path:"statusLine.renderDefault",type:"boolean",editor:"toggle",description:"When there is no upstream statusline to chain to, false keeps the statusline silent; true renders a minimal model + context-% line. No effect when the user already has a statusline.",def:"false",artifactAffecting:!0},{path:"statusLine.emitMinIntervalSeconds",type:"number",editor:"number",description:"Minimum seconds between two emitted session_status events, on top of skip-if-unchanged. Rapid changes coalesce to the latest state after the interval. 0 disables the throttle. Read live each tick.",def:"10",artifactAffecting:!0},{path:"statusLine.refreshInterval",type:"number",editor:"number",description:"Claude Code's own statusLine.refreshInterval (seconds, host min 1) \u2014 re-runs the statusline on a timer in addition to event-driven updates. Unset by default. Values < 1 treated as unset.",def:"unset",artifactAffecting:!0},{path:"claude.oauthAccess.enable",type:"boolean",editor:"toggle",description:"Whether IronBee may read the Claude Code OAuth token (macOS Keychain / ~/.claude/.credentials.json) and call OAuth-scoped Anthropic endpoints. Default-on (opt out with false or `ironbee claude oauth-access disable`). First consumer: the statusline rate-limit fallback \u2014 fetches /api/oauth/usage to fill rate_limits for plans the statusline JSON omits them for (team / enterprise). Claude-only; not artifact-affecting (read live).",def:"true",artifactAffecting:!1},{path:"claude.oauthAccess.usageTtlSeconds",type:"number",editor:"number",description:"TTL (seconds) for the statusline OAuth rate-limit fetch cache \u2014 the /api/oauth/usage call + credential read fire at most once per this interval even when the statusline ticks far more often. Default 60; 0 means every tick.",def:"60",artifactAffecting:!1},{path:"telemetry.enable",type:"boolean",editor:"toggle",description:"Master switch for anonymous PostHog telemetry (CLI's own product analytics). Inverse semantics \u2014 opt out with false. Disabling also injects TELEMETRY_ENABLE=false into devtools MCP env. Orthogonal to the collector pipeline.",def:"true",artifactAffecting:!0},{path:"privacy.enable",type:"boolean",editor:"toggle",description:"Privacy mode \u2014 a single cross-cutting switch (all platforms) that redacts potentially sensitive data from what the @ironbee-ai/devtools MCP servers ship to the collector. Opt-in, default OFF. When true, injects COLLECTOR_EVENTS_TOOL_DETAILS_ENABLE=false (tool input/output detail) + COLLECTOR_ARTIFACTS_ENABLE=false (screenshots, recordings) into every devtools MCP env. Devtools-side only \u2014 the CLI's own send_event pipeline already whitelists tool_input and strips tool_response. Orthogonal to telemetry (PostHog) and collector (the sink).",def:"false",artifactAffecting:!0},{path:"otel.enable",type:"boolean",editor:"toggle",description:"Master switch for the local OTEL collector pipeline (Claude Code OTLP raw-API-body export \u2192 local daemon \u2192 session_context context-usage events). Presence opts in; enable:false opts out; auto-enabled when a collector is configured. session_context derivation is the sole consumer, so this also gates whether the settings.json OTEL env block (incl. raw-bodies) is written. Orthogonal to telemetry (PostHog) and collector (event sink).",def:"implicit true when collector configured",artifactAffecting:!0},{path:"otel.port",type:"number",editor:"number",description:"Loopback port the shared OTEL collector daemon binds to, and which the settings.json OTEL endpoint env var points at. One daemon per machine across all sessions.",def:"15986",artifactAffecting:!0},{path:"otel.idleTimeoutSeconds",type:"number",editor:"number",description:"The daemon self-reaps (graceful shutdown) after this many seconds with no /health hit and no OTLP event. Restarted on the next session/turn ensure.",def:"600",artifactAffecting:!0},{path:"otel.ensureMinIntervalSeconds",type:"number",editor:"number",description:"Throttle (seconds) for the high-frequency liveness `ensure` from per-tool hooks, so we don't pay a /health check on every tool call. session-start / activity-start ensure are unthrottled.",def:"30",artifactAffecting:!0},{path:"otel.emitMinIntervalSeconds",type:"number",editor:"number",description:"Per-session session_context emit throttle: admit at most one event per session per interval (leading-edge \u2014 the first request in each window is emitted, in-between requests are coalesced away and their body files dropped). Applies to the live path only; the catch-up/reprocess path is never throttled. 0 = emit on every API request (full context-growth time series).",def:"0",artifactAffecting:!0},{path:"fileChange.captureChangeset",type:"boolean",editor:"toggle",description:"When true, every file_change event carries a hunks-only unified-diff changeset string. Off by default \u2014 the default wire shape stays metadata-only (operation + line counts).",def:"false",artifactAffecting:!1},{path:"fileChange.maxChangesetBytes",type:"number",editor:"number",description:"Hard cap on the changeset string size. Diffs over the cap are truncated with a footer so the collector POST stays within typical reverse-proxy body limits.",def:"65536 (64 KB)",artifactAffecting:!1},{path:"import.concurrency",type:"number",editor:"number",description:"Default number of sessions `ironbee import` processes in parallel. Resolution: --concurrency flag > this value > built-in default. Clamped to [1, 32].",def:"4",artifactAffecting:!1},{path:"browserDevTools.env",type:"json",editor:"json",description:"Env-var overrides merged into the browser-devtools MCP server entry. Operators can override individual OTEL keys; IronBee invariants (TOOL_NAME_PREFIX, \u2026) always win last.",def:"unset (defaults + auto-OTEL when collector configured)",artifactAffecting:!0},{path:"browserDevTools.mcp",type:"json",editor:"json",description:"Full-replacement MCP config for the browser-devtools server entry. Auto-OTEL + telemetry env are still injected; IronBee env wins last.",def:"unset (use default npx -y @ironbee-ai/devtools entry)",artifactAffecting:!0},{path:"nodeDevTools.env",type:"json",editor:"json",description:"Env-var overrides merged into the node-devtools MCP server entry. Same auto-OTEL injection as browserDevTools minus the browser-only vars.",def:"unset (defaults + auto-OTEL when collector configured)",artifactAffecting:!0},{path:"nodeDevTools.mcp",type:"json",editor:"json",description:"Full-replacement MCP config for the node-devtools server entry. IronBee env wins last.",def:"unset (use default npx -y @ironbee-ai/devtools entry)",artifactAffecting:!0},{path:"backendDevTools.env",type:"json",editor:"json",description:"Env-var overrides merged into the backend-devtools MCP server entry. Same auto-OTEL injection as nodeDevTools.",def:"unset (defaults + auto-OTEL when collector configured)",artifactAffecting:!0},{path:"backendDevTools.mcp",type:"json",editor:"json",description:"Full-replacement MCP config for the backend-devtools server entry. IronBee env wins last.",def:"unset (use default npx -y @ironbee-ai/devtools entry)",artifactAffecting:!0},{path:"androidDevTools.env",type:"json",editor:"json",description:"Env-var overrides merged into the android-devtools MCP server entry. Same auto-OTEL injection as nodeDevTools.",def:"unset (defaults + auto-OTEL when collector configured)",artifactAffecting:!0},{path:"androidDevTools.mcp",type:"json",editor:"json",description:"Full-replacement MCP config for the android-devtools server entry. IronBee env wins last.",def:"unset (use default npx -y @ironbee-ai/devtools entry)",artifactAffecting:!0}];function A(e){return d.find(t=>t.path===e)}n(A,"findSchemaEntry");function T(){return[...d].sort((e,t)=>{const o=l(c(e.path)),r=l(c(t.path));return o!==r?o-r:e.path.localeCompare(t.path)})}n(T,"orderedEntries");0&&(module.exports={ARTIFACT_AFFECTING_TOP_KEYS,CONFIG_SCHEMA,GROUP_ORDER,GROUP_TITLES,findSchemaEntry,groupOf,groupRank,groupTitle,orderedEntries,topKey});
+"use strict";var a=Object.defineProperty;var p=Object.getOwnPropertyDescriptor;var u=Object.getOwnPropertyNames;var h=Object.prototype.hasOwnProperty;var n=(e,t)=>a(e,"name",{value:t,configurable:!0});var g=(e,t)=>{for(var o in t)a(e,o,{get:t[o],enumerable:!0})},y=(e,t,o,i)=>{if(t&&typeof t=="object"||typeof t=="function")for(let r of u(t))!h.call(e,r)&&r!==o&&a(e,r,{get:()=>t[r],enumerable:!(i=p(t,r))||i.enumerable});return e};var b=e=>y(a({},"__esModule",{value:!0}),e);var T={};g(T,{ARTIFACT_AFFECTING_TOP_KEYS:()=>v,CONFIG_SCHEMA:()=>d,GROUP_ORDER:()=>s,GROUP_TITLES:()=>f,findSchemaEntry:()=>A,groupOf:()=>c,groupRank:()=>l,groupTitle:()=>w,orderedEntries:()=>k,topKey:()=>m});module.exports=b(T);const v=new Set(["verification","collector","browser","node","backend","android","browserDevTools","nodeDevTools","backendDevTools","androidDevTools","telemetry","privacy","statusLine","otel"]),s=["general","verification","verificationContext","browser","node","backend","android","collector","recording","jobQueue","analytics","statusLine","claude","telemetry","privacy","otel","fileChange","import","browserDevTools","nodeDevTools","backendDevTools","androidDevTools"],f={general:"General",verification:"Verification",verificationContext:"Verification context",browser:"Browser cycle",node:"Node cycle",backend:"Backend cycle",android:"Android cycle",collector:"Collector",recording:"Recording",jobQueue:"Job queue",analytics:"Analytics",statusLine:"Statusline",claude:"Claude",telemetry:"Telemetry",privacy:"Privacy",otel:"OTEL collector",fileChange:"File change",import:"Import",browserDevTools:"Browser DevTools MCP",nodeDevTools:"Node DevTools MCP",backendDevTools:"Backend DevTools MCP",androidDevTools:"Android DevTools MCP"};function m(e){const t=e.indexOf(".");return t===-1?e:e.slice(0,t)}n(m,"topKey");function c(e){const t=e.indexOf(".");return t===-1?"general":e.slice(0,t)}n(c,"groupOf");function w(e){return f[e]??e}n(w,"groupTitle");function l(e){const t=s.indexOf(e);return t===-1?s.length:t}n(l,"groupRank");const d=[{path:"ignoredVerifyPatterns",type:"string-array",editor:"string-list",description:"Glob patterns excluded from verification, applied to every cycle (browser / node / backend). Checked first \u2014 a match here activates no cycle regardless of other patterns. Unioned on top of an always-on default set that excludes test files (**/*.spec.*, **/*.test.*, **/__tests__/**, **/__mocks__/**) \u2014 a test-only edit never activates a runtime-verification cycle.",def:"[] (plus always-on test-file defaults)",artifactAffecting:!1},{path:"maxRetries",type:"number",editor:"number",description:"Max verification retry attempts before the gate allows completion despite failures. Single global counter regardless of how many cycles ran.",def:"3",artifactAffecting:!1},{path:"verification.enable",type:"boolean",editor:"toggle",description:"Master enforcement switch. Inverse semantics \u2014 verification is the core feature, opt out with false. When false, IronBee runs monitoring-only: no enforcement hooks, no skill/rule, no MCP servers; only session/activity/tool_call events flow to the collector.",def:"true",artifactAffecting:!0},{path:"verification.auto",type:"boolean",editor:"toggle",description:'Automatic-enforcement sub-toggle (only meaningful when verification.enable !== false). Inverse semantics \u2014 opt out with false for "assist mode": the /ironbee-verify command + MCP servers stay installed so the agent can verify manually, but nothing is enforced \u2014 no Stop gate, non-blocking (soft) PreToolUse hooks, and the skill/rule are omitted. true \u2192 full enforce mode.',def:"true",artifactAffecting:!0},{path:"verification.strict",type:"boolean",editor:"toggle",description:`Strict mode (only meaningful in enforce mode). Default false. When true the verify-gate refuses N/A verdicts \u2014 both a global status "not_applicable" and per-platform not_applicable_cycles exemptions \u2014 so the agent must produce real verification tool evidence for every active cycle. Default (false) accepts N/A: the agent can declare a change has no runtime surface (globally or per-cycle) and the gate allows it, recorded + observable. Inert in assist/monitor (no gate runs). The gate reads it live; the rerender it shares with the rest of the verification block is idempotent (the N/A guidance is mode-agnostic, so the installed artifacts don't change).`,def:"false",artifactAffecting:!0},{path:"verification.model",type:"json",editor:"json",description:`Model the delegated verifier sub-agent uses. Unset \u2192 the verifier inherits the session model (Claude verifier omits model: \u2192 inherit; Codex verifier omits agent-toml model \u2192 inherits config.toml's model). Set to PIN a specific model \u2014 e.g. verify on a cheaper/faster model than the main agent, or guarantee a model on Codex when config.toml has none. Two shapes: a string (applies to all clients, e.g. "sonnet" / "gpt-5.5") or a per-client object { claude: "sonnet", codex: "gpt-5.5" } when a project has both clients. Cursor has no verifier sub-agent \u2192 no-op there. Never resolves to a literal "inherit" on Codex (a 400). Artifact-affecting.`,def:"unset (inherit the session model)",artifactAffecting:!0},{path:"verificationContext.enable",type:"boolean",editor:"toggle",description:"Master switch for path-scoped verification context. When a cycle begins, the first devtools tool call injects the .ironbee/VERIFICATION.md files on/above the changed paths (author-written area guidance) into the agent's context via the host's additionalContext channel. Advisory only (does not gate). Inverse semantics \u2014 default-on, opt out with false. Not artifact-affecting (read live).",def:"true",artifactAffecting:!1},{path:"verificationContext.source",type:"string",editor:"enum",enumValues:["git","actions"],description:`Changed-path source. "git" (default) = working tree + last N commits, with an actions.jsonl fallback when not a git repo. "actions" = IronBee's own file_change events only (no git subprocess).`,def:"git",artifactAffecting:!1},{path:"verificationContext.commitDepth",type:"number",editor:"number",description:'Number of recent commits included on the git source (uncommitted \u222A last N commits). 0 = uncommitted only. Ignored when source is "actions".',def:"1",artifactAffecting:!1},{path:"verificationContext.maxBytes",type:"number",editor:"number",description:"Aggregate byte cap on the injected context string. When exceeded, the least-specific (root-side) docs are dropped first (leaf-first truncation priority).",def:"65536 (64 KB)",artifactAffecting:!1},{path:"browser.enable",type:"boolean",editor:"toggle",description:"Explicit on/off for the browser cycle. Written false by `browser disable`, stripped by `browser enable`. When false the cycle is disabled regardless of patterns.",def:"(absent \u2192 on; browser is the only default-on cycle)",artifactAffecting:!0},{path:"browser.verifyPatterns",type:"string-array",editor:"string-list",description:"Glob patterns for files requiring browser verification. Four-state: absent \u2192 code defaults (40+ extensions); [] \u2192 hard kill; non-empty \u2192 custom patterns (replaces defaults).",def:"40+ code extensions when unset; [] hard-disables",artifactAffecting:!0},{path:"browser.additionalVerifyPatterns",type:"string-array",editor:"string-list",description:"Extra patterns appended to browser.verifyPatterns (or to code defaults when verifyPatterns is unset). Ignored when verifyPatterns is [] (hard kill wins).",def:"[]",artifactAffecting:!0},{path:"browser.alwaysRequired",type:"string-array",editor:"string-list",description:"Browser-cycle required tools (all-of). The verify-gate blocks completion until every listed bdt_* tool was used.",def:"bdt_navigation_go-to, bdt_content_take-screenshot, bdt_a11y_take-aria-snapshot, bdt_o11y_get-console-messages",artifactAffecting:!0},{path:"browser.evidencePaths",type:"json",editor:"json",description:"Alternative tool-satisfaction paths (any-of). Browser uses pure all-of, so default is empty. Each path: { name, allOf: (string | { anyOf: string[] })[] }.",def:"[]",artifactAffecting:!0},{path:"node.enable",type:"boolean",editor:"toggle",description:"Explicit on/off for the Node.js runtime debug cycle (node-devtools, ndt_* V8 inspector probes). Opt-in \u2014 written by `node enable`.",def:"(absent \u2192 off; node is opt-in)",artifactAffecting:!0},{path:"node.verifyPatterns",type:"string-array",editor:"string-list",description:"Glob patterns for the Node.js runtime debug cycle. Default-off \u2014 block absent = inert. Block present + unset \u2192 9 code defaults (server/api/routes paths).",def:"block absent \u2192 disabled; present + unset \u2192 code defaults",artifactAffecting:!0},{path:"node.additionalVerifyPatterns",type:"string-array",editor:"string-list",description:"Extra patterns appended to node.verifyPatterns (or to code defaults when unset). Ignored when verifyPatterns is [].",def:"[]",artifactAffecting:!0},{path:"node.alwaysRequired",type:"string-array",editor:"string-list",description:"Node-cycle required tools (all-of). ndt_debug_connect always; evidence paths supply the rest.",def:"[ndt_debug_connect]",artifactAffecting:!0},{path:"node.evidencePaths",type:"json",editor:"json",description:"Alternative tool paths (any-of). Default: probe path (a put-*point AND get-probe-snapshots) OR log path (get-logs).",def:"probe path + log path",artifactAffecting:!0},{path:"backend.enable",type:"boolean",editor:"toggle",description:"Explicit on/off for the runtime-agnostic backend protocol cycle (backend-devtools, bedt_* HTTP/gRPC/GraphQL/WebSocket). Opt-in \u2014 written by `backend enable`.",def:"(absent \u2192 off; backend is opt-in)",artifactAffecting:!0},{path:"backend.verifyPatterns",type:"string-array",editor:"string-list",description:"Glob patterns for the backend protocol cycle. Default-off \u2014 block absent = inert. Block present + unset \u2192 13 multi-language code defaults (ts/js/py/go/java/rb/cs/rs/kt/scala/ex/php/clj).",def:"block absent \u2192 disabled; present + unset \u2192 code defaults",artifactAffecting:!0},{path:"backend.additionalVerifyPatterns",type:"string-array",editor:"string-list",description:"Extra patterns appended to backend.verifyPatterns (or to code defaults when unset). Ignored when verifyPatterns is [].",def:"[]",artifactAffecting:!0},{path:"backend.alwaysRequired",type:"string-array",editor:"string-list",description:"Backend-cycle required tools (all-of). Empty by default \u2014 backend uses any-of evidence paths instead.",def:"[]",artifactAffecting:!0},{path:"backend.evidencePaths",type:"json",editor:"json",description:"Alternative tool paths (any-of). Default three: protocol-call (any request tool) OR log-evidence (register-source + read) OR db-evidence (db_connect + a read op).",def:"protocol-call OR log-evidence OR db-evidence",artifactAffecting:!0},{path:"android.enable",type:"boolean",editor:"toggle",description:"Explicit on/off for the Android mobile verification cycle (android-devtools, adt_* device/emulator interaction). Opt-in \u2014 written by `android enable`.",def:"(absent \u2192 off; android is opt-in)",artifactAffecting:!0},{path:"android.verifyPatterns",type:"string-array",editor:"string-list",description:"Glob patterns for the Android mobile verification cycle. Default-off \u2014 block absent = inert. Block present + unset \u2192 code defaults (Android/React Native paths).",def:"block absent \u2192 disabled; present + unset \u2192 code defaults",artifactAffecting:!0},{path:"android.additionalVerifyPatterns",type:"string-array",editor:"string-list",description:"Extra patterns appended to android.verifyPatterns (or to code defaults when unset). Ignored when verifyPatterns is [].",def:"[]",artifactAffecting:!0},{path:"android.alwaysRequired",type:"string-array",editor:"string-list",description:"Android-cycle required tools (all-of). adt_device_connect always; evidence paths supply the rest.",def:"[adt_device_connect]",artifactAffecting:!0},{path:"android.evidencePaths",type:"json",editor:"json",description:"Alternative tool paths (any-of). Default two: device-evidence (UI interaction + screenshot + UI snapshot) OR log-evidence (Logcat read/follow).",def:"device-evidence OR log-evidence",artifactAffecting:!0},{path:"collector.enable",type:"boolean",editor:"toggle",description:"Master switch for the IronBee Collector. Implicitly true when the section has url and at least one credential (oauthToken or apiKey); set false to suspend while keeping url/oauthToken/apiKey/batchSize around.",def:"implicit true when url + (oauthToken or apiKey) set",artifactAffecting:!0},{path:"collector.url",type:"string",editor:"text",description:"Remote collector endpoint URL (IronBee Platform). Required for the collector to be active. Events POST to {url}/v1/events.",def:"(unset \u2192 disabled)",artifactAffecting:!0},{path:"collector.oauthToken",type:"string",editor:"text",description:"Personal access token for collector auth (X-OAuth-Token header). Per-(user, account), independently revocable from the console's /access-tokens page. Minted by `ironbee login` \u2014 the primary path for interactive CLI use. Can be supplied via IRONBEE_OAUTH_TOKEN.",def:"(unset)",artifactAffecting:!0},{path:"collector.apiKey",type:"string",editor:"text",description:"Shared account API key for collector auth (X-API-Key header). Parallel first-class path alongside `oauthToken`, intended for CI / GitHub Actions / deployment tooling and other non-interactive integrations where rotating a per-engineer OAuth token is impractical. Either `oauthToken` OR `apiKey` is required for the collector to be active. Can be supplied via IRONBEE_API_KEY.",def:"(unset \u2192 disabled)",artifactAffecting:!0},{path:"collector.batchSize",type:"number",editor:"number",description:"Max events per POST from the send_event handler (the queue chunks bigger snapshots into N-sized POSTs).",def:"100",artifactAffecting:!0},{path:"collector.timeoutMs",type:"number",editor:"number",description:"Per-request HTTP timeout (ms) for batched analytics sends. Single-event interactive sends keep a fixed 3000ms cap. Clamped to [1000, 60000].",def:"10000",artifactAffecting:!0},{path:"recording.enable",type:"boolean",editor:"toggle",description:"Recording enforcement for the browser + android cycles. Presence opts in; enable:false opts out. Auto-enabled when a collector is configured. Node/backend cycles never trigger recording.",def:"implicit true when section present or collector configured",artifactAffecting:!1},{path:"jobQueue.enable",type:"boolean",editor:"toggle",description:"Master switch for the file-backed job queue. Presence opts in; enable:false opts out. Auto-enabled when a collector is configured (a collector is pointless without a queue feeding it).",def:"implicit true when section present or collector configured",artifactAffecting:!1},{path:"jobQueue.autoFlushSizeBytes",type:"number",editor:"number",description:"Size threshold (bytes) above which submit() spawns a detached worker mid-session. 0 / negative disables this check.",def:"32768 (32 KB)",artifactAffecting:!1},{path:"jobQueue.autoFlushIntervalSeconds",type:"number",editor:"number",description:"Interval threshold (seconds since the live jobs.jsonl was created) above which submit() spawns a detached worker. Complements size \u2014 whichever crosses first flushes. 0 / negative disables.",def:"60",artifactAffecting:!1},{path:"analytics.enable",type:"boolean",editor:"toggle",description:"Master switch for per-session structural analytics. Presence opts in; enable:false opts out. Auto-enabled when a collector is configured.",def:"implicit true when section present or collector configured",artifactAffecting:!1},{path:"analytics.emitOnStop",type:"boolean",editor:"toggle",description:"When true, project + emit analytics at every Stop hook. When false, only at SessionEnd.",def:"true",artifactAffecting:!1},{path:"analytics.emitOnStopMinIntervalSeconds",type:"number",editor:"number",description:"Throttle: skip Stop-hook projection if the last successful emit was within this many seconds. 0 disables the throttle (backend handles rate-limit / dedupe).",def:"0 (disabled)",artifactAffecting:!1},{path:"analytics.emitTurnEvents",type:"boolean",editor:"toggle",description:"Opt-in for per-turn session_turn_analytics wire records. High-volume secondary signal; the base session_analytics record always ships regardless.",def:"false",artifactAffecting:!1},{path:"analytics.emitStepEvents",type:"boolean",editor:"toggle",description:"Opt-in for per-step session_turn_step_analytics wire records (an order of magnitude higher volume than turn events). Independent of emitTurnEvents.",def:"false",artifactAffecting:!1},{path:"analytics.emitApiRequestEvents",type:"boolean",editor:"toggle",description:"Opt-OUT for per-API-request api_request wire records (one per assistant message, success + failure). Primary value for backend cost accounting, so ships by default.",def:"true",artifactAffecting:!1},{path:"statusLine.enable",type:"boolean",editor:"toggle",description:"Master switch for the Claude statusline integration (session_status event + statusline wrapper). Presence opts in; auto-enabled when a collector is configured. Claude-only.",def:"implicit true when section present or collector configured",artifactAffecting:!0},{path:"statusLine.renderDefault",type:"boolean",editor:"toggle",description:"When there is no upstream statusline to chain to, false keeps the statusline silent; true renders a minimal model + context-% line. No effect when the user already has a statusline.",def:"false",artifactAffecting:!0},{path:"statusLine.emitMinIntervalSeconds",type:"number",editor:"number",description:"Minimum seconds between two emitted session_status events, on top of skip-if-unchanged. Rapid changes coalesce to the latest state after the interval. 0 disables the throttle. Read live each tick.",def:"10",artifactAffecting:!0},{path:"statusLine.refreshInterval",type:"number",editor:"number",description:"Claude Code's own statusLine.refreshInterval (seconds, host min 1) \u2014 re-runs the statusline on a timer in addition to event-driven updates. Unset by default. Values < 1 treated as unset.",def:"unset",artifactAffecting:!0},{path:"claude.oauthAccess.enable",type:"boolean",editor:"toggle",description:"Whether IronBee may read the Claude Code OAuth token (macOS Keychain / ~/.claude/.credentials.json) and call OAuth-scoped Anthropic endpoints. Default-on (opt out with false or `ironbee claude oauth-access disable`). First consumer: the statusline rate-limit fallback \u2014 fetches /api/oauth/usage to fill rate_limits for plans the statusline JSON omits them for (team / enterprise). Claude-only; not artifact-affecting (read live).",def:"true",artifactAffecting:!1},{path:"claude.oauthAccess.usageTtlSeconds",type:"number",editor:"number",description:"TTL (seconds) for the statusline OAuth rate-limit fetch cache \u2014 the /api/oauth/usage call + credential read fire at most once per this interval even when the statusline ticks far more often. Default 60; 0 means every tick.",def:"60",artifactAffecting:!1},{path:"claude.autoModeAllowlist.enable",type:"boolean",editor:"toggle",description:"Whether IronBee writes the auto-mode allowlist carve-out for the verifier into .claude/settings.local.json. Claude Code 2.1.176+ ships a host-side sub-agent \"Content Integrity\" classifier (auto mode) that false-positives on IronBee's legitimate `ironbee hook submit-verdict` verdicts (the devtools calls happened earlier in the cycle, not re-shown in the handoff). When enabled (default), install adds a narrow, command-keyed autoMode.allow rule that exempts ONLY that command from the Content Integrity block ($defaults preserved \u2014 every other block rule still applies; IronBee's Stop-gate independently enforces real tool usage). Written only when verification is active (enforce/assist); inert when the host isn't in auto mode. Opt out with false \u2014 takes effect on the next `ironbee install`. Claude-only.",def:"true",artifactAffecting:!1},{path:"telemetry.enable",type:"boolean",editor:"toggle",description:"Master switch for anonymous PostHog telemetry (CLI's own product analytics). Inverse semantics \u2014 opt out with false. Disabling also injects TELEMETRY_ENABLE=false into devtools MCP env. Orthogonal to the collector pipeline.",def:"true",artifactAffecting:!0},{path:"privacy.enable",type:"boolean",editor:"toggle",description:"Privacy mode \u2014 a single cross-cutting switch (all platforms) that redacts potentially sensitive data from what the @ironbee-ai/devtools MCP servers ship to the collector. Opt-in, default OFF. When true, injects COLLECTOR_EVENTS_TOOL_DETAILS_ENABLE=false (tool input/output detail) + COLLECTOR_ARTIFACTS_ENABLE=false (screenshots, recordings) into every devtools MCP env. Devtools-side only \u2014 the CLI's own send_event pipeline already whitelists tool_input and strips tool_response. Orthogonal to telemetry (PostHog) and collector (the sink).",def:"false",artifactAffecting:!0},{path:"otel.enable",type:"boolean",editor:"toggle",description:"Master switch for the local OTEL collector pipeline (Claude Code OTLP raw-API-body export \u2192 local daemon \u2192 session_context context-usage events). Presence opts in; enable:false opts out; auto-enabled when a collector is configured. session_context derivation is the sole consumer, so this also gates whether the settings.json OTEL env block (incl. raw-bodies) is written. Orthogonal to telemetry (PostHog) and collector (event sink).",def:"implicit true when collector configured",artifactAffecting:!0},{path:"otel.port",type:"number",editor:"number",description:"Loopback port the shared OTEL collector daemon binds to, and which the settings.json OTEL endpoint env var points at. One daemon per machine across all sessions.",def:"15986",artifactAffecting:!0},{path:"otel.idleTimeoutSeconds",type:"number",editor:"number",description:"The daemon self-reaps (graceful shutdown) after this many seconds with no /health hit and no OTLP event. Restarted on the next session/turn ensure.",def:"600",artifactAffecting:!0},{path:"otel.ensureMinIntervalSeconds",type:"number",editor:"number",description:"Throttle (seconds) for the high-frequency liveness `ensure` from per-tool hooks, so we don't pay a /health check on every tool call. session-start / activity-start ensure are unthrottled.",def:"30",artifactAffecting:!0},{path:"otel.emitMinIntervalSeconds",type:"number",editor:"number",description:"Per-session session_context emit throttle: admit at most one event per session per interval (leading-edge \u2014 the first request in each window is emitted, in-between requests are coalesced away and their body files dropped). Applies to the live path only; the catch-up/reprocess path is never throttled. 0 = emit on every API request (full context-growth time series).",def:"0",artifactAffecting:!0},{path:"fileChange.captureChangeset",type:"boolean",editor:"toggle",description:"When true, every file_change event carries a hunks-only unified-diff changeset string. Off by default \u2014 the default wire shape stays metadata-only (operation + line counts).",def:"false",artifactAffecting:!1},{path:"fileChange.maxChangesetBytes",type:"number",editor:"number",description:"Hard cap on the changeset string size. Diffs over the cap are truncated with a footer so the collector POST stays within typical reverse-proxy body limits.",def:"65536 (64 KB)",artifactAffecting:!1},{path:"import.concurrency",type:"number",editor:"number",description:"Default number of sessions `ironbee import` processes in parallel. Resolution: --concurrency flag > this value > built-in default. Clamped to [1, 32].",def:"4",artifactAffecting:!1},{path:"browserDevTools.env",type:"json",editor:"json",description:"Env-var overrides merged into the browser-devtools MCP server entry. Operators can override individual OTEL keys; IronBee invariants (TOOL_NAME_PREFIX, \u2026) always win last.",def:"unset (defaults + auto-OTEL when collector configured)",artifactAffecting:!0},{path:"browserDevTools.mcp",type:"json",editor:"json",description:"Full-replacement MCP config for the browser-devtools server entry. Auto-OTEL + telemetry env are still injected; IronBee env wins last.",def:"unset (use default npx -y @ironbee-ai/devtools entry)",artifactAffecting:!0},{path:"nodeDevTools.env",type:"json",editor:"json",description:"Env-var overrides merged into the node-devtools MCP server entry. Same auto-OTEL injection as browserDevTools minus the browser-only vars.",def:"unset (defaults + auto-OTEL when collector configured)",artifactAffecting:!0},{path:"nodeDevTools.mcp",type:"json",editor:"json",description:"Full-replacement MCP config for the node-devtools server entry. IronBee env wins last.",def:"unset (use default npx -y @ironbee-ai/devtools entry)",artifactAffecting:!0},{path:"backendDevTools.env",type:"json",editor:"json",description:"Env-var overrides merged into the backend-devtools MCP server entry. Same auto-OTEL injection as nodeDevTools.",def:"unset (defaults + auto-OTEL when collector configured)",artifactAffecting:!0},{path:"backendDevTools.mcp",type:"json",editor:"json",description:"Full-replacement MCP config for the backend-devtools server entry. IronBee env wins last.",def:"unset (use default npx -y @ironbee-ai/devtools entry)",artifactAffecting:!0},{path:"androidDevTools.env",type:"json",editor:"json",description:"Env-var overrides merged into the android-devtools MCP server entry. Same auto-OTEL injection as nodeDevTools.",def:"unset (defaults + auto-OTEL when collector configured)",artifactAffecting:!0},{path:"androidDevTools.mcp",type:"json",editor:"json",description:"Full-replacement MCP config for the android-devtools server entry. IronBee env wins last.",def:"unset (use default npx -y @ironbee-ai/devtools entry)",artifactAffecting:!0}];function A(e){return d.find(t=>t.path===e)}n(A,"findSchemaEntry");function k(){return[...d].sort((e,t)=>{const o=l(c(e.path)),i=l(c(t.path));return o!==i?o-i:e.path.localeCompare(t.path)})}n(k,"orderedEntries");0&&(module.exports={ARTIFACT_AFFECTING_TOP_KEYS,CONFIG_SCHEMA,GROUP_ORDER,GROUP_TITLES,findSchemaEntry,groupOf,groupRank,groupTitle,orderedEntries,topKey});

package/dist/tui/sessions/area.js

@@ -1,3 +1,3 @@
-"use strict";var A=Object.create;var c=Object.defineProperty;var C=Object.getOwnPropertyDescriptor;var V=Object.getOwnPropertyNames;var T=Object.getPrototypeOf,j=Object.prototype.hasOwnProperty;var l=(e,i)=>c(e,"name",{value:i,configurable:!0});var I=(e,i)=>{for(var s in i)c(e,s,{get:i[s],enumerable:!0})},S=(e,i,s,f)=>{if(i&&typeof i=="object"||typeof i=="function")for(let g of V(i))!j.call(e,g)&&g!==s&&c(e,g,{get:()=>i[g],enumerable:!(f=C(i,g))||f.enumerable});return e};var E=(e,i,s)=>(s=e!=null?A(T(e)):{},S(i||!e||!e.__esModule?c(s,"default",{value:e,enumerable:!0}):s,e)),x=e=>S(c({},"__esModule",{value:!0}),e);var H={};I(H,{sessionsArea:()=>B});module.exports=x(H);var b=E(require("blessed")),o=require("../shell/util"),u=require("./read");const L=" {bold}\u2191/\u2193{/bold} move   {bold}v{/bold} verify   {bold}r{/bold} refresh   {bold}Esc{/bold} back   {bold}q{/bold} quit";function v(e){return e==="pass"?"{green-fg}pass{/green-fg}":e==="fail"?"{red-fg}fail{/red-fg}":e==="fail_reported"?"{red-fg}fail (reported){/red-fg}":`{gray-fg}${(0,o.escapeTags)(e??"\u2014")}{/gray-fg}`}l(v,"verdictColor");function O(e){const i=e.session.projectDir;let s=(0,u.listSessions)(i),f=0;const g=b.list({parent:e.container,top:0,left:0,width:"55%",height:"100%",border:{type:"line"},label:" Sessions ",tags:!0,keys:!1,mouse:!1,scrollbar:{ch:" "},style:{selected:{bg:"blue",fg:"white"},border:{fg:"cyan"}},items:[]}),y=b.box({parent:e.container,top:0,left:"55%",width:"45%",height:"100%",border:{type:"line"},label:" Detail ",tags:!0,scrollable:!0,alwaysScroll:!0,scrollbar:{ch:" "},style:{border:{fg:"cyan"}},content:""});function $(r){const n=r.active===!0?"{green-fg}\u25CF{/green-fg}":"{gray-fg}\u25CB{/gray-fg}",t=r.id.length>18?r.id.slice(0,17)+"\u2026":r.id.padEnd(18," ");return`${n} ${(0,o.escapeTags)(t)}  ${v(r.verdictStatus)}`}l($,"rowLabel");function h(r,n,t,a){if(t.length!==0){r.push(`{bold}${n}{/bold}`);for(const d of t)r.push(`  {${a}-fg}\u2022{/${a}-fg} ${(0,o.escapeTags)(d)}`);r.push("")}}l(h,"pushList");function w(r){if(r===void 0)return"{gray-fg}No sessions for this project yet.{/gray-fg}";const n=(0,u.readSessionDetail)(i,r.id),t=[];t.push(`{bold}${(0,o.escapeTags)(r.id)}{/bold}`),t.push("{gray-fg}"+"\u2500".repeat(40)+"{/gray-fg}"),t.push(`{gray-fg}phase:{/gray-fg}   ${(0,o.escapeTags)(r.phase??"\u2014")}`),t.push(`{gray-fg}verdict:{/gray-fg} ${v(r.verdictStatus)}`),t.push(`{gray-fg}active:{/gray-fg}  ${r.active===void 0?"\u2014":String(r.active)}`),t.push(`{gray-fg}retries:{/gray-fg} ${r.retries===void 0?"\u2014":String(r.retries)}`);const a=n.firstTs!==void 0&&n.lastTs!==void 0?`${(0,o.escapeTags)(new Date(n.firstTs).toISOString())} \u2192 ${(0,o.escapeTags)(new Date(n.lastTs).toISOString())}`:r.mtimeMs>0?(0,o.escapeTags)(new Date(r.mtimeMs).toISOString()):"\u2014";t.push(`{gray-fg}span:{/gray-fg}    ${a}`),t.push(""),t.push("{bold}events{/bold}");const d=n.counts;return t.push(`  {gray-fg}activities{/gray-fg} ${d.activities}   {gray-fg}verifications{/gray-fg} ${d.verifications}   {gray-fg}verdicts{/gray-fg} ${d.verdicts}`),t.push(`  {gray-fg}file_changes{/gray-fg} ${d.fileChanges}   {gray-fg}tool_calls{/gray-fg} ${d.toolCalls}`),t.push(""),n.verdict!==void 0?(t.push(`{bold}last verdict{/bold} ${v(n.verdict.status)}`),h(t,"checks",n.verdict.checks,"green"),h(t,"issues",n.verdict.issues,"red"),h(t,"fixes",n.verdict.fixes,"yellow")):t.push("{gray-fg}no verdict on file{/gray-fg}"),t.join(`
-`)}l(w,"buildDetail");function p(){s.length===0?g.setItems(["{gray-fg}(no sessions){/gray-fg}"]):(g.setItems(s.map(n=>$(n))),g.select((0,o.clamp)(f,0,s.length-1)));const r=s.length===0?void 0:s[(0,o.clamp)(f,0,s.length-1)];y.setContent(w(r)),y.setScroll(0),e.screen.render()}l(p,"render");function m(r){s.length!==0&&(f=(0,o.clamp)(f+r,0,s.length-1),p())}l(m,"move");function k(){return s.length===0?void 0:s[(0,o.clamp)(f,0,s.length-1)]}l(k,"current");function D(){const r=k();if(r===void 0)return;const n=(0,u.readSessionDetail)(i,r.id),t=(0,u.validateVerdict)(n.verdict,r.retries),a=[];if(!t.hasVerdict)a.push("{gray-fg}No verdict on file \u2014 nothing to validate.{/gray-fg}"),a.push("{gray-fg}(an enabled session writes verdict.json via submit-verdict; a monitoring-only session never does){/gray-fg}");else{for(const d of t.checks)a.push(d.ok?`{green-fg}\u2713{/green-fg} ${(0,o.escapeTags)(d.label)}`:`{red-fg}\u2717{/red-fg} ${(0,o.escapeTags)(d.label)} {gray-fg}\u2014 ${(0,o.escapeTags)(d.reason??"")}{/gray-fg}`);t.retries!==void 0&&t.retries>0&&a.push("",`{gray-fg}retries:{/gray-fg} {yellow-fg}${t.retries}{/yellow-fg}`),a.push(""),a.push(t.wouldAllow?"{green-fg}\u2713 PASS{/green-fg} \u2014 the Stop hook would allow completion.":"{red-fg}\u2717 BLOCKED{/red-fg} \u2014 the Stop hook would not allow completion.")}e.session.showPane(`Verify (dry-run) \u2014 ${r.id}`,a.join(`
-`))}return l(D,"verifySession"),g.key(["up","k"],()=>m(-1)),g.key(["down","j"],()=>m(1)),g.key(["v"],()=>D()),g.key(["r"],()=>{s=(0,u.listSessions)(i),f=(0,o.clamp)(f,0,Math.max(0,s.length-1)),p()}),e.setStatus(L),p(),g.focus(),e.screen.render(),{unmount(){g.destroy(),y.destroy()}}}l(O,"mountSessionsView");const B={id:"sessions",title:"Sessions",summary:"Browse sessions + verify (dry-run verdict validation)",mount(e){return O(e)}};0&&(module.exports={sessionsArea});
+"use strict";var A=Object.create;var c=Object.defineProperty;var C=Object.getOwnPropertyDescriptor;var V=Object.getOwnPropertyNames;var T=Object.getPrototypeOf,j=Object.prototype.hasOwnProperty;var l=(e,n)=>c(e,"name",{value:n,configurable:!0});var I=(e,n)=>{for(var i in n)c(e,i,{get:n[i],enumerable:!0})},S=(e,n,i,f)=>{if(n&&typeof n=="object"||typeof n=="function")for(let g of V(n))!j.call(e,g)&&g!==i&&c(e,g,{get:()=>n[g],enumerable:!(f=C(n,g))||f.enumerable});return e};var E=(e,n,i)=>(i=e!=null?A(T(e)):{},S(n||!e||!e.__esModule?c(i,"default",{value:e,enumerable:!0}):i,e)),x=e=>S(c({},"__esModule",{value:!0}),e);var B={};I(B,{sessionsArea:()=>_});module.exports=x(B);var b=E(require("blessed")),o=require("../shell/util"),u=require("./read");const L=" {bold}\u2191/\u2193{/bold} move   {bold}v{/bold} verify   {bold}r{/bold} refresh   {bold}Esc{/bold} back   {bold}q{/bold} quit";function v(e){return e==="pass"?"{green-fg}pass{/green-fg}":e==="fail"?"{red-fg}fail{/red-fg}":e==="fail_reported"?"{red-fg}fail (reported){/red-fg}":e==="not_applicable"?"{cyan-fg}n/a{/cyan-fg}":`{gray-fg}${(0,o.escapeTags)(e??"\u2014")}{/gray-fg}`}l(v,"verdictColor");function O(e){const n=e.session.projectDir;let i=(0,u.listSessions)(n),f=0;const g=b.list({parent:e.container,top:0,left:0,width:"55%",height:"100%",border:{type:"line"},label:" Sessions ",tags:!0,keys:!1,mouse:!1,scrollbar:{ch:" "},style:{selected:{bg:"blue",fg:"white"},border:{fg:"cyan"}},items:[]}),y=b.box({parent:e.container,top:0,left:"55%",width:"45%",height:"100%",border:{type:"line"},label:" Detail ",tags:!0,scrollable:!0,alwaysScroll:!0,scrollbar:{ch:" "},style:{border:{fg:"cyan"}},content:""});function $(r){const s=r.active===!0?"{green-fg}\u25CF{/green-fg}":"{gray-fg}\u25CB{/gray-fg}",t=r.id.length>18?r.id.slice(0,17)+"\u2026":r.id.padEnd(18," ");return`${s} ${(0,o.escapeTags)(t)}  ${v(r.verdictStatus)}`}l($,"rowLabel");function h(r,s,t,a){if(t.length!==0){r.push(`{bold}${s}{/bold}`);for(const d of t)r.push(`  {${a}-fg}\u2022{/${a}-fg} ${(0,o.escapeTags)(d)}`);r.push("")}}l(h,"pushList");function w(r){if(r===void 0)return"{gray-fg}No sessions for this project yet.{/gray-fg}";const s=(0,u.readSessionDetail)(n,r.id),t=[];t.push(`{bold}${(0,o.escapeTags)(r.id)}{/bold}`),t.push("{gray-fg}"+"\u2500".repeat(40)+"{/gray-fg}"),t.push(`{gray-fg}phase:{/gray-fg}   ${(0,o.escapeTags)(r.phase??"\u2014")}`),t.push(`{gray-fg}verdict:{/gray-fg} ${v(r.verdictStatus)}`),t.push(`{gray-fg}active:{/gray-fg}  ${r.active===void 0?"\u2014":String(r.active)}`),t.push(`{gray-fg}retries:{/gray-fg} ${r.retries===void 0?"\u2014":String(r.retries)}`);const a=s.firstTs!==void 0&&s.lastTs!==void 0?`${(0,o.escapeTags)(new Date(s.firstTs).toISOString())} \u2192 ${(0,o.escapeTags)(new Date(s.lastTs).toISOString())}`:r.mtimeMs>0?(0,o.escapeTags)(new Date(r.mtimeMs).toISOString()):"\u2014";t.push(`{gray-fg}span:{/gray-fg}    ${a}`),t.push(""),t.push("{bold}events{/bold}");const d=s.counts;return t.push(`  {gray-fg}activities{/gray-fg} ${d.activities}   {gray-fg}verifications{/gray-fg} ${d.verifications}   {gray-fg}verdicts{/gray-fg} ${d.verdicts}`),t.push(`  {gray-fg}file_changes{/gray-fg} ${d.fileChanges}   {gray-fg}tool_calls{/gray-fg} ${d.toolCalls}`),t.push(""),s.verdict!==void 0?(t.push(`{bold}last verdict{/bold} ${v(s.verdict.status)}`),h(t,"checks",s.verdict.checks,"green"),h(t,"issues",s.verdict.issues,"red"),h(t,"fixes",s.verdict.fixes,"yellow")):t.push("{gray-fg}no verdict on file{/gray-fg}"),t.join(`
+`)}l(w,"buildDetail");function p(){i.length===0?g.setItems(["{gray-fg}(no sessions){/gray-fg}"]):(g.setItems(i.map(s=>$(s))),g.select((0,o.clamp)(f,0,i.length-1)));const r=i.length===0?void 0:i[(0,o.clamp)(f,0,i.length-1)];y.setContent(w(r)),y.setScroll(0),e.screen.render()}l(p,"render");function m(r){i.length!==0&&(f=(0,o.clamp)(f+r,0,i.length-1),p())}l(m,"move");function k(){return i.length===0?void 0:i[(0,o.clamp)(f,0,i.length-1)]}l(k,"current");function D(){const r=k();if(r===void 0)return;const s=(0,u.readSessionDetail)(n,r.id),t=(0,u.validateVerdict)(s.verdict,r.retries),a=[];if(!t.hasVerdict)a.push("{gray-fg}No verdict on file \u2014 nothing to validate.{/gray-fg}"),a.push("{gray-fg}(an enabled session writes verdict.json via submit-verdict; a monitoring-only session never does){/gray-fg}");else{for(const d of t.checks)a.push(d.ok?`{green-fg}\u2713{/green-fg} ${(0,o.escapeTags)(d.label)}`:`{red-fg}\u2717{/red-fg} ${(0,o.escapeTags)(d.label)} {gray-fg}\u2014 ${(0,o.escapeTags)(d.reason??"")}{/gray-fg}`);t.retries!==void 0&&t.retries>0&&a.push("",`{gray-fg}retries:{/gray-fg} {yellow-fg}${t.retries}{/yellow-fg}`),a.push(""),a.push(t.wouldAllow?"{green-fg}\u2713 PASS{/green-fg} \u2014 the Stop hook would allow completion.":"{red-fg}\u2717 BLOCKED{/red-fg} \u2014 the Stop hook would not allow completion.")}e.session.showPane(`Verify (dry-run) \u2014 ${r.id}`,a.join(`
+`))}return l(D,"verifySession"),g.key(["up","k"],()=>m(-1)),g.key(["down","j"],()=>m(1)),g.key(["v"],()=>D()),g.key(["r"],()=>{i=(0,u.listSessions)(n),f=(0,o.clamp)(f,0,Math.max(0,i.length-1)),p()}),e.setStatus(L),p(),g.focus(),e.screen.render(),{unmount(){g.destroy(),y.destroy()}}}l(O,"mountSessionsView");const _={id:"sessions",title:"Sessions",summary:"Browse sessions + verify (dry-run verdict validation)",mount(e){return O(e)}};0&&(module.exports={sessionsArea});

package/dist/tui/sessions/read.js

@@ -1,2 +1,2 @@
-"use strict";var k=Object.defineProperty;var V=Object.getOwnPropertyDescriptor;var x=Object.getOwnPropertyNames;var v=Object.prototype.hasOwnProperty;var d=(e,n)=>k(e,"name",{value:n,configurable:!0});var C=(e,n)=>{for(var s in n)k(e,s,{get:n[s],enumerable:!0})},A=(e,n,s,t)=>{if(n&&typeof n=="object"||typeof n=="function")for(let i of x(n))!v.call(e,i)&&i!==s&&k(e,i,{get:()=>n[i],enumerable:!(t=V(n,i))||t.enumerable});return e};var j=e=>A(k({},"__esModule",{value:!0}),e);var P={};C(P,{listSessions:()=>D,readSessionDetail:()=>M,validateVerdict:()=>R});module.exports=j(P);var o=require("fs"),c=require("path");function w(e){if((0,o.existsSync)(e))try{const n=JSON.parse((0,o.readFileSync)(e,"utf-8"));return n===null||typeof n!="object"||Array.isArray(n)?void 0:n}catch{return}}d(w,"readJson");function p(e){return typeof e=="string"?e:void 0}d(p,"asString");function D(e){const n=(0,c.join)(e,".ironbee","sessions");if(!(0,o.existsSync)(n))return[];let s;try{s=(0,o.readdirSync)(n,{withFileTypes:!0}).filter(i=>i.isDirectory()).map(i=>i.name)}catch{return[]}const t=[];for(const i of s){const r=(0,c.join)(n,i),u=(0,c.join)(r,"state.json"),l=(0,c.join)(r,"verdict.json"),a=w(u),g=w(l);let f=0;try{f=(0,o.statSync)((0,o.existsSync)(u)?u:r).mtimeMs}catch{f=0}t.push({id:i,phase:p(a?.phase),verdictStatus:p(g?.status)??p(a?.lastVerdictStatus),active:typeof a?.active=="boolean"?a.active:void 0,retries:typeof a?.retries=="number"?a.retries:void 0,mtimeMs:f})}return t.sort((i,r)=>r.mtimeMs-i.mtimeMs),t}d(D,"listSessions");function R(e,n){if(e===void 0)return{hasVerdict:!1,status:void 0,checks:[],allPassed:!1,wouldAllow:!1,retries:n};const s=[];let t=!0;return e.checks.length>0?s.push({label:`checks (${e.checks.length} item(s))`,ok:!0}):(s.push({label:"checks",ok:!1,reason:"missing or empty"}),t=!1),e.status==="pass"||e.status==="fail"?s.push({label:`status: ${e.status}`,ok:!0}):(s.push({label:"status",ok:!1,reason:`unknown "${e.status??""}" \u2014 must be "pass" or "fail"`}),t=!1),e.status==="fail"&&(e.issues.length>0?s.push({label:`issues (${e.issues.length} item(s))`,ok:!0}):(s.push({label:"issues",ok:!1,reason:'required when status is "fail"'}),t=!1)),{hasVerdict:!0,status:e.status,checks:s,allPassed:t,wouldAllow:t&&e.status==="pass",retries:n}}d(R,"validateVerdict");function S(e){return Array.isArray(e)?e.filter(n=>typeof n=="string"):[]}d(S,"asStringArray");function M(e,n){const s=(0,c.join)(e,".ironbee","sessions",n),t=w((0,c.join)(s,"verdict.json")),i=t===void 0?void 0:{status:p(t.status),checks:S(t.checks),issues:S(t.issues),fixes:S(t.fixes)},r={activities:0,verifications:0,fileChanges:0,toolCalls:0,verdicts:0};let u,l;const a=(0,c.join)(s,"actions.jsonl");if((0,o.existsSync)(a)){let g="";try{g=(0,o.readFileSync)(a,"utf-8")}catch{g=""}for(const f of g.split(`
-`)){if(f.trim().length===0)continue;let y;try{const b=JSON.parse(f);if(b===null||typeof b!="object"||Array.isArray(b))continue;y=b}catch{continue}const h=p(y.type);h==="activity_start"?r.activities+=1:h==="verification_start"?r.verifications+=1:h==="file_change"?r.fileChanges+=1:h==="tool_call"?r.toolCalls+=1:h==="verdict_write"&&(r.verdicts+=1);const m=y.timestamp;typeof m=="number"&&Number.isFinite(m)&&(u=u===void 0?m:Math.min(u,m),l=l===void 0?m:Math.max(l,m))}}return{id:n,verdict:i,counts:r,firstTs:u,lastTs:l}}d(M,"readSessionDetail");0&&(module.exports={listSessions,readSessionDetail,validateVerdict});
+"use strict";var k=Object.defineProperty;var V=Object.getOwnPropertyDescriptor;var A=Object.getOwnPropertyNames;var C=Object.prototype.hasOwnProperty;var c=(e,s)=>k(e,"name",{value:s,configurable:!0});var x=(e,s)=>{for(var n in s)k(e,n,{get:s[n],enumerable:!0})},_=(e,s,n,t)=>{if(s&&typeof s=="object"||typeof s=="function")for(let i of A(s))!C.call(e,i)&&i!==n&&k(e,i,{get:()=>s[i],enumerable:!(t=V(s,i))||t.enumerable});return e};var j=e=>_(k({},"__esModule",{value:!0}),e);var $={};x($,{listSessions:()=>D,readSessionDetail:()=>M,validateVerdict:()=>R});module.exports=j($);var a=require("fs"),l=require("path");function S(e){if((0,a.existsSync)(e))try{const s=JSON.parse((0,a.readFileSync)(e,"utf-8"));return s===null||typeof s!="object"||Array.isArray(s)?void 0:s}catch{return}}c(S,"readJson");function g(e){return typeof e=="string"?e:void 0}c(g,"asString");function D(e){const s=(0,l.join)(e,".ironbee","sessions");if(!(0,a.existsSync)(s))return[];let n;try{n=(0,a.readdirSync)(s,{withFileTypes:!0}).filter(i=>i.isDirectory()).map(i=>i.name)}catch{return[]}const t=[];for(const i of n){const r=(0,l.join)(s,i),u=(0,l.join)(r,"state.json"),f=(0,l.join)(r,"verdict.json"),o=S(u),m=S(f);let d=0;try{d=(0,a.statSync)((0,a.existsSync)(u)?u:r).mtimeMs}catch{d=0}t.push({id:i,phase:g(o?.phase),verdictStatus:g(m?.status)??g(o?.lastVerdictStatus),active:typeof o?.active=="boolean"?o.active:void 0,retries:typeof o?.retries=="number"?o.retries:void 0,mtimeMs:d})}return t.sort((i,r)=>r.mtimeMs-i.mtimeMs),t}c(D,"listSessions");function R(e,s){if(e===void 0)return{hasVerdict:!1,status:void 0,checks:[],allPassed:!1,wouldAllow:!1,retries:s};const n=[];let t=!0;const i=e.status==="not_applicable";return e.status==="pass"||e.status==="fail"||e.status==="not_applicable"?n.push({label:`status: ${e.status}`,ok:!0}):(n.push({label:"status",ok:!1,reason:`unknown "${e.status??""}" \u2014 must be "pass", "fail", or "not_applicable"`}),t=!1),i||(e.checks.length>0?n.push({label:`checks (${e.checks.length} item(s))`,ok:!0}):(n.push({label:"checks",ok:!1,reason:"missing or empty"}),t=!1)),(i||e.notApplicableCycles.length>0)&&(e.reason.length>0?n.push({label:`reason (${e.reason.length} item(s))`,ok:!0}):(n.push({label:"reason",ok:!1,reason:"required for N/A (global or per-platform)"}),t=!1)),e.notApplicableCycles.length>0&&n.push({label:`not_applicable_cycles: ${e.notApplicableCycles.join(", ")}`,ok:!0}),e.status==="fail"&&(e.issues.length>0?n.push({label:`issues (${e.issues.length} item(s))`,ok:!0}):(n.push({label:"issues",ok:!1,reason:'required when status is "fail"'}),t=!1)),{hasVerdict:!0,status:e.status,checks:n,allPassed:t,wouldAllow:t&&(e.status==="pass"||e.status==="not_applicable"),retries:s}}c(R,"validateVerdict");function h(e){return Array.isArray(e)?e.filter(s=>typeof s=="string"):[]}c(h,"asStringArray");function M(e,s){const n=(0,l.join)(e,".ironbee","sessions",s),t=S((0,l.join)(n,"verdict.json")),i=t===void 0?void 0:{status:g(t.status),checks:h(t.checks),issues:h(t.issues),fixes:h(t.fixes),reason:h(t.reason),notApplicableCycles:h(t.not_applicable_cycles)},r={activities:0,verifications:0,fileChanges:0,toolCalls:0,verdicts:0};let u,f;const o=(0,l.join)(n,"actions.jsonl");if((0,a.existsSync)(o)){let m="";try{m=(0,a.readFileSync)(o,"utf-8")}catch{m=""}for(const d of m.split(`
+`)){if(d.trim().length===0)continue;let w;try{const y=JSON.parse(d);if(y===null||typeof y!="object"||Array.isArray(y))continue;w=y}catch{continue}const b=g(w.type);b==="activity_start"?r.activities+=1:b==="verification_start"?r.verifications+=1:b==="file_change"?r.fileChanges+=1:b==="tool_call"?r.toolCalls+=1:b==="verdict_write"&&(r.verdicts+=1);const p=w.timestamp;typeof p=="number"&&Number.isFinite(p)&&(u=u===void 0?p:Math.min(u,p),f=f===void 0?p:Math.max(f,p))}}return{id:s,verdict:i,counts:r,firstTs:u,lastTs:f}}c(M,"readSessionDetail");0&&(module.exports={listSessions,readSessionDetail,validateVerdict});

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ironbee-ai/cli",
-  "version": "0.23.0",
+  "version": "0.25.0",
   "description": "The CLI for IronBee — Verification and Intelligence Layer for Agentic Development",
   "main": "dist/index.js",
   "bin": {