@ironbee-ai/cli 0.8.2 → 0.9.0

package/dist/lib/platform-section.js

@@ -0,0 +1,279 @@
+"use strict";
+/**
+ * Platform-section toggling for skill / rule / command markdown files.
+ *
+ * Each agent-facing markdown file (skill, rule, slash command) carries one
+ * or more marker blocks per platform. Two marker syntaxes are supported:
+ *
+ *     <!--IRONBEE:PLATFORM:node-->
+ *     ...content here...
+ *     <!--/IRONBEE:PLATFORM:node-->
+ *
+ * (the unkeyed form — handy when a file only needs a single block per
+ * platform), and:
+ *
+ *     <!--IRONBEE:PLATFORM:node:tldr-->
+ *     ...short heads-up content...
+ *     <!--/IRONBEE:PLATFORM:node:tldr-->
+ *     ...
+ *     <!--IRONBEE:PLATFORM:node:full-->
+ *     ...detailed flow...
+ *     <!--/IRONBEE:PLATFORM:node:full-->
+ *
+ * (the keyed form — handy when the same platform needs different content at
+ * different positions in the same file: short summary up top, full flow at
+ * the bottom, etc.). Keys are alphanumeric + hyphen.
+ *
+ * Two states per block:
+ *   - **disabled** — replaced with a short placeholder telling the agent
+ *     the platform is off and reminding them not to invoke that platform's
+ *     tools when the project isn't actually using it.
+ *   - **enabled** — replaced with the full guidance fragment for that
+ *     platform + key.
+ *
+ * `ironbee install` writes one or the other based on config state at
+ * install time. `ironbee enable-<platform>` / `disable-<platform>` flip
+ * already-installed files in place — no re-install needed. The marker block
+ * (and its key) is preserved on every flip so the toggle is always
+ * reversible.
+ *
+ * "Platform" is the umbrella term for everything the verify-gate can drive
+ * tools against: `browser` (browser-devtools, `bdt_*`), `node` (Node.js
+ * runtime debug — V8 inspector, `ndt_*`), `backend` (runtime-agnostic
+ * protocol calls, `bedt_*`). Future platforms (mobile / iOS / Android, …)
+ * plug in here without code changes to the marker syntax.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PLATFORM_TARGETS = void 0;
+exports.applyPlatformSection = applyPlatformSection;
+exports.fragmentFilename = fragmentFilename;
+exports.readFragment = readFragment;
+exports.togglePlatformSectionInFile = togglePlatformSectionInFile;
+exports.applyPlatformToProjectFiles = applyPlatformToProjectFiles;
+exports.syncPlatformSectionsToConfig = syncPlatformSectionsToConfig;
+const fs_1 = require("fs");
+const logger_1 = require("./logger");
+const config_1 = require("./config");
+/** Per-platform placeholder content (shown when the platform is disabled). */
+const PLACEHOLDERS = {
+    browser: [
+        "<!-- Browser cycle verification is OFF for this project.",
+        "     - To verify frontend / UI changes by driving a real browser (DOM, console,",
+        "       screenshots, accessibility, network): run `ironbee browser enable` to enable.",
+        "       This file will be auto-updated with the browser-cycle guidance.",
+        "     - When OFF, do NOT invoke any `bdt_*` tools voluntarily — there is no",
+        "       active browser-cycle gate, so calling them only wastes cycles. -->",
+    ].join("\n"),
+    node: [
+        "<!-- Node.js runtime debug verification is OFF for this project.",
+        "     - If your backend is Node.js and you want non-blocking debugger probes:",
+        "       run `ironbee node enable` to enable. This file will be auto-updated",
+        "       with the node-cycle guidance.",
+        "     - If your backend isn't Node.js (Java / Python / Go / Rust / .NET / Ruby / PHP / Elixir / …):",
+        "       leave this OFF — `ndt_*` tools only attach to V8/Node processes and will fail elsewhere.",
+        "     - When OFF, do NOT invoke any `ndt_*` tools voluntarily. -->",
+    ].join("\n"),
+    backend: [
+        "<!-- Backend protocol verification is OFF for this project.",
+        "     - To verify backend services by driving real protocol calls (HTTP / gRPC /",
+        "       GraphQL / WebSocket) — runtime- and language-agnostic — run `ironbee",
+        "       backend enable`. This file will be auto-updated with the backend-cycle",
+        "       guidance.",
+        "     - When OFF, do NOT invoke any `bedt_*` tools voluntarily. -->",
+    ].join("\n"),
+};
+/** Escape a platform name for use inside a regex. Platform names are short
+ *  ASCII identifiers but be defensive anyway. */
+function escapeRegex(s) {
+    return s.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}
+/** Build the start-marker regex for a platform. The captured group is the
+ *  optional key (empty when the keyless form is used). */
+function startMarkerRegex(platform) {
+    return new RegExp(`<!--IRONBEE:PLATFORM:${escapeRegex(platform)}(?::([\\w-]+))?-->`, "g");
+}
+/** Build the end marker for a platform + key. Key may be empty for keyless. */
+function endMarkerFor(platform, key) {
+    return key.length > 0
+        ? `<!--/IRONBEE:PLATFORM:${platform}:${key}-->`
+        : `<!--/IRONBEE:PLATFORM:${platform}-->`;
+}
+function findMarkerBlocks(content, platform, fileLabel) {
+    const re = startMarkerRegex(platform);
+    const blocks = [];
+    const keysSeen = new Set();
+    let m = re.exec(content);
+    while (m !== null) {
+        const key = m[1] ?? "";
+        const startEnd = m.index + m[0].length;
+        const endMarker = endMarkerFor(platform, key);
+        const endIdx = content.indexOf(endMarker, startEnd);
+        if (endIdx === -1) {
+            const labelSuffix = fileLabel ? ` in ${fileLabel}` : "";
+            const keyDisplay = key.length > 0 ? `${platform}:${key}` : platform;
+            logger_1.logger.debug(`platform-section ${keyDisplay}: start marker found without matching end marker${labelSuffix}`);
+            m = re.exec(content);
+            continue;
+        }
+        if (keysSeen.has(key)) {
+            const labelSuffix = fileLabel ? ` in ${fileLabel}` : "";
+            const keyDisplay = key.length > 0 ? `${platform}:${key}` : platform;
+            logger_1.logger.warn(`platform-section ${keyDisplay}: multiple marker blocks with the same key${labelSuffix} — only the first will be updated. ` +
+                `Either consolidate the blocks or use distinct keys (\`IRONBEE:PLATFORM:${platform}:<key>\`) per position.`);
+            m = re.exec(content);
+            continue;
+        }
+        keysSeen.add(key);
+        blocks.push({ key, startEnd, endIdx });
+        m = re.exec(content);
+    }
+    return blocks;
+}
+/**
+ * Replace the contents of every platform-section marker block for `platform`
+ * in `fileContent`. Returns the new content (or the original content if no
+ * markers are found).
+ *
+ * Each block in the file is independently resolved. The same platform can
+ * have multiple blocks distinguished by their key — see file header for
+ * the syntax. Blocks that share a key are still treated as a structural
+ * bug: only the first is updated and a warning is emitted.
+ *
+ * The markers themselves are preserved so the operation is reversible.
+ */
+function applyPlatformSection(fileContent, platform, replacement, fileLabel) {
+    const getRepl = typeof replacement === "function"
+        ? replacement
+        : () => replacement;
+    const blocks = findMarkerBlocks(fileContent, platform, fileLabel);
+    if (blocks.length === 0) {
+        return fileContent;
+    }
+    const placeholder = PLACEHOLDERS[platform];
+    if (placeholder === undefined) {
+        throw new Error(`No placeholder registered for platform '${platform}'.`);
+    }
+    // Apply replacements in REVERSE so earlier indices stay valid as we
+    // splice. Keep each marker pair intact; only the inner content moves.
+    let result = fileContent;
+    for (let i = blocks.length - 1; i >= 0; i--) {
+        const b = blocks[i];
+        const inner = getRepl(b.key) ?? placeholder;
+        const before = result.substring(0, b.startEnd);
+        const after = result.substring(b.endIdx);
+        result = `${before}\n${inner}\n${after}`;
+    }
+    return result;
+}
+/**
+ * Build the on-disk fragment filename for `(fragmentBase, platform, key)`:
+ *   - keyless block (`key === ""`) → `<base>.<platform>.md`
+ *   - keyed block               → `<base>.<platform>.<key>.md`
+ */
+function fragmentFilename(fragmentBase, platform, key) {
+    return key.length > 0
+        ? `${fragmentBase}.${platform}.${key}.md`
+        : `${fragmentBase}.${platform}.md`;
+}
+/** Read a fragment file from `${baseDir}/${name}`. Throws when missing. */
+function readFragment(baseDir, name) {
+    const path = `${baseDir}/${name}`;
+    if (!(0, fs_1.existsSync)(path)) {
+        throw new Error(`Platform fragment not found: ${path}`);
+    }
+    return (0, fs_1.readFileSync)(path, "utf-8").trimEnd();
+}
+/**
+ * Read the file at `targetPath`, apply the platform section toggle, and
+ * write back if the content actually changed. No-op when the marker is
+ * missing.
+ */
+function togglePlatformSectionInFile(targetPath, platform, replacement) {
+    if (!(0, fs_1.existsSync)(targetPath)) {
+        return false;
+    }
+    const original = (0, fs_1.readFileSync)(targetPath, "utf-8");
+    const updated = applyPlatformSection(original, platform, replacement, targetPath);
+    if (updated === original) {
+        return false;
+    }
+    (0, fs_1.writeFileSync)(targetPath, updated);
+    return true;
+}
+/** Project files that carry platform markers, per client. */
+exports.PLATFORM_TARGETS = {
+    claude: [
+        { projectRelativePath: ".claude/skills/ironbee-verification.md", fragmentBase: "skill" },
+        { projectRelativePath: ".claude/rules/ironbee-verification.md", fragmentBase: "rule" },
+        { projectRelativePath: ".claude/commands/ironbee-verify.md", fragmentBase: "command-verify" },
+    ],
+    cursor: [
+        { projectRelativePath: ".cursor/skills/ironbee-verification.md", fragmentBase: "skill" },
+        { projectRelativePath: ".cursor/rules/ironbee-verification.mdc", fragmentBase: "rule" },
+        { projectRelativePath: ".cursor/commands/ironbee-verify/SKILL.md", fragmentBase: "command-verify" },
+    ],
+};
+/**
+ * Toggle every platform-section block (across every key) in every installed
+ * md file across all known clients in `projectDir`. Files that don't exist
+ * are silently skipped (the client may not be installed for this project).
+ *
+ * When `enabled === true`, fragments for each block's key are loaded from
+ * `platformsDirFor(client)`. Missing fragment files for a key fall back to
+ * the placeholder rather than crashing — the source md is the source of
+ * truth for which keys exist; missing fragments are an authoring gap.
+ *
+ * Returns the list of project-relative paths that were updated.
+ */
+function applyPlatformToProjectFiles(projectDir, platform, enabled, platformsDirFor, clientFilter) {
+    const updated = [];
+    const allClients = Object.keys(exports.PLATFORM_TARGETS);
+    const clientsToApply = clientFilter === undefined
+        ? allClients
+        : allClients.filter((c) => clientFilter.includes(c));
+    for (const client of clientsToApply) {
+        const targets = exports.PLATFORM_TARGETS[client];
+        const platformsDir = platformsDirFor(client);
+        for (const t of targets) {
+            const target = `${projectDir}/${t.projectRelativePath}`;
+            if (!(0, fs_1.existsSync)(target)) {
+                continue;
+            }
+            const resolver = enabled
+                ? (key) => {
+                    const path = `${platformsDir}/${fragmentFilename(t.fragmentBase, platform, key)}`;
+                    if (!(0, fs_1.existsSync)(path)) {
+                        const keyDisplay = key.length > 0 ? `${platform}:${key}` : platform;
+                        logger_1.logger.warn(`platform-section ${keyDisplay}: missing fragment ${path} for ${t.projectRelativePath} — falling back to placeholder.`);
+                        return null;
+                    }
+                    return (0, fs_1.readFileSync)(path, "utf-8").trimEnd();
+                }
+                : null;
+            if (togglePlatformSectionInFile(target, platform, resolver)) {
+                updated.push(t.projectRelativePath);
+            }
+        }
+    }
+    return updated;
+}
+/**
+ * Sync every platform's section in the project's installed md files to
+ * match the current config state — ON when the platform's effective patterns
+ * are non-empty, OFF otherwise. Browser platform is enabled by default
+ * (its `verifyPatterns` defaults to `DEFAULT_BROWSER_VERIFY_PATTERNS` when
+ * unset); node and backend platforms default to inert.
+ *
+ * Called by `ironbee install` right after the source md files are written
+ * so that re-installing a project that already enabled / disabled a platform
+ * preserves the right state in the freshly-written files (instead of leaving
+ * the source's empty marker block visible).
+ */
+function syncPlatformSectionsToConfig(projectDir, platformsDirFor) {
+    const config = (0, config_1.loadConfig)(projectDir);
+    for (const cycle of config_1.ALL_CYCLES) {
+        const enabled = (0, config_1.isCycleEnabled)(config, cycle);
+        applyPlatformToProjectFiles(projectDir, cycle, enabled, platformsDirFor);
+    }
+}
+//# sourceMappingURL=platform-section.js.map

package/dist/lib/platform-section.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform-section.js","sourceRoot":"","sources":["../../src/lib/platform-section.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;;;AA0HH,oDA+BC;AAOD,4CAIC;AAGD,oCAMC;AAOD,kEAeC;AA+CD,kEAuCC;AAcD,oEASC;AA9SD,2BAA6D;AAC7D,qCAAkC;AAClC,qCAAkE;AAElE,8EAA8E;AAC9E,MAAM,YAAY,GAA2B;IACzC,OAAO,EAAE;QACL,0DAA0D;QAC1D,iFAAiF;QACjF,sFAAsF;QACtF,wEAAwE;QACxE,4EAA4E;QAC5E,2EAA2E;KAC9E,CAAC,IAAI,CAAC,IAAI,CAAC;IACZ,IAAI,EAAE;QACF,kEAAkE;QAClE,8EAA8E;QAC9E,4EAA4E;QAC5E,sCAAsC;QACtC,oGAAoG;QACpG,iGAAiG;QACjG,mEAAmE;KACtE,CAAC,IAAI,CAAC,IAAI,CAAC;IACZ,OAAO,EAAE;QACL,6DAA6D;QAC7D,iFAAiF;QACjF,6EAA6E;QAC7E,+EAA+E;QAC/E,kBAAkB;QAClB,oEAAoE;KACvE,CAAC,IAAI,CAAC,IAAI,CAAC;CACf,CAAC;AAEF;iDACiD;AACjD,SAAS,WAAW,CAAC,CAAS;IAC1B,OAAO,CAAC,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;AACpD,CAAC;AAED;0DAC0D;AAC1D,SAAS,gBAAgB,CAAC,QAAgB;IACtC,OAAO,IAAI,MAAM,CAAC,wBAAwB,WAAW,CAAC,QAAQ,CAAC,oBAAoB,EAAE,GAAG,CAAC,CAAC;AAC9F,CAAC;AAED,+EAA+E;AAC/E,SAAS,YAAY,CAAC,QAAgB,EAAE,GAAW;IAC/C,OAAO,GAAG,CAAC,MAAM,GAAG,CAAC;QACjB,CAAC,CAAC,yBAAyB,QAAQ,IAAI,GAAG,KAAK;QAC/C,CAAC,CAAC,yBAAyB,QAAQ,KAAK,CAAC;AACjD,CAAC;AAWD,SAAS,gBAAgB,CACrB,OAAe,EACf,QAAgB,EAChB,SAA6B;IAE7B,MAAM,EAAE,GAAW,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAkB,EAAE,CAAC;IACjC,MAAM,QAAQ,GAAgB,IAAI,GAAG,EAAE,CAAC;IACxC,IAAI,CAAC,GAA2B,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACjD,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;QAChB,MAAM,GAAG,GAAW,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC/B,MAAM,QAAQ,GAAW,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QAC/C,MAAM,SAAS,GAAW,YAAY,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QACtD,MAAM,MAAM,GAAW,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QAC5D,IAAI,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC;YAChB,MAAM,WAAW,GAAW,SAAS,CAAC,CAAC,CAAC,OAAO,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChE,MAAM,UAAU,GAAW,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,QAAQ,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;YAC5E,eAAM,CAAC,KAAK,CAAC,oBAAoB,UAAU,mDAAmD,WAAW,EAAE,CAAC,CAAC;YAC7G,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACrB,SAAS;QACb,CAAC;QACD,IAAI,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACpB,MAAM,WAAW,GAAW,SAAS,CAAC,CAAC,CAAC,OAAO,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChE,MAAM,UAAU,GAAW,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,QAAQ,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;YAC5E,eAAM,CAAC,IAAI,CACP,oBAAoB,UAAU,6CAA6C,WAAW,qCAAqC;gBAC3H,0EAA0E,QAAQ,yBAAyB,CAC9G,CAAC;YACF,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACrB,SAAS;QACb,CAAC;QACD,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAClB,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QACvC,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACzB,CAAC;IACD,OAAO,MAAM,CAAC;AAClB,CAAC;AAWD;;;;;;;;;;;GAWG;AACH,SAAgB,oBAAoB,CAChC,WAAmB,EACnB,QAAgB,EAChB,WAAgC,EAChC,SAAkB;IAElB,MAAM,OAAO,GAAmC,OAAO,WAAW,KAAK,UAAU;QAC7E,CAAC,CAAC,WAAW;QACb,CAAC,CAAC,GAAkB,EAAE,CAAC,WAAW,CAAC;IAEvC,MAAM,MAAM,GAAkB,gBAAgB,CAAC,WAAW,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;IACjF,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,WAAW,CAAC;IACvB,CAAC;IAED,MAAM,WAAW,GAAuB,YAAY,CAAC,QAAQ,CAAC,CAAC;IAC/D,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,2CAA2C,QAAQ,IAAI,CAAC,CAAC;IAC7E,CAAC;IAED,oEAAoE;IACpE,sEAAsE;IACtE,IAAI,MAAM,GAAW,WAAW,CAAC;IACjC,KAAK,IAAI,CAAC,GAAW,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAClD,MAAM,CAAC,GAAgB,MAAM,CAAC,CAAC,CAAC,CAAC;QACjC,MAAM,KAAK,GAAW,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,WAAW,CAAC;QACpD,MAAM,MAAM,GAAW,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC;QACvD,MAAM,KAAK,GAAW,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QACjD,MAAM,GAAG,GAAG,MAAM,KAAK,KAAK,KAAK,KAAK,EAAE,CAAC;IAC7C,CAAC;IACD,OAAO,MAAM,CAAC;AAClB,CAAC;AAED;;;;GAIG;AACH,SAAgB,gBAAgB,CAAC,YAAoB,EAAE,QAAgB,EAAE,GAAW;IAChF,OAAO,GAAG,CAAC,MAAM,GAAG,CAAC;QACjB,CAAC,CAAC,GAAG,YAAY,IAAI,QAAQ,IAAI,GAAG,KAAK;QACzC,CAAC,CAAC,GAAG,YAAY,IAAI,QAAQ,KAAK,CAAC;AAC3C,CAAC;AAED,2EAA2E;AAC3E,SAAgB,YAAY,CAAC,OAAe,EAAE,IAAY;IACtD,MAAM,IAAI,GAAW,GAAG,OAAO,IAAI,IAAI,EAAE,CAAC;IAC1C,IAAI,CAAC,IAAA,eAAU,EAAC,IAAI,CAAC,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,gCAAgC,IAAI,EAAE,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,IAAA,iBAAY,EAAC,IAAI,EAAE,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC;AACjD,CAAC;AAED;;;;GAIG;AACH,SAAgB,2BAA2B,CACvC,UAAkB,EAClB,QAAgB,EAChB,WAAgC;IAEhC,IAAI,CAAC,IAAA,eAAU,EAAC,UAAU,CAAC,EAAE,CAAC;QAC1B,OAAO,KAAK,CAAC;IACjB,CAAC;IACD,MAAM,QAAQ,GAAW,IAAA,iBAAY,EAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IAC3D,MAAM,OAAO,GAAW,oBAAoB,CAAC,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC;IAC1F,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;QACvB,OAAO,KAAK,CAAC;IACjB,CAAC;IACD,IAAA,kBAAa,EAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IACnC,OAAO,IAAI,CAAC;AAChB,CAAC;AAqBD,6DAA6D;AAChD,QAAA,gBAAgB,GAAqC;IAC9D,MAAM,EAAE;QACJ,EAAE,mBAAmB,EAAE,wCAAwC,EAAE,YAAY,EAAE,OAAO,EAAE;QACxF,EAAE,mBAAmB,EAAE,uCAAuC,EAAE,YAAY,EAAE,MAAM,EAAE;QACtF,EAAE,mBAAmB,EAAE,oCAAoC,EAAE,YAAY,EAAE,gBAAgB,EAAE;KAChG;IACD,MAAM,EAAE;QACJ,EAAE,mBAAmB,EAAE,wCAAwC,EAAE,YAAY,EAAE,OAAO,EAAE;QACxF,EAAE,mBAAmB,EAAE,wCAAwC,EAAE,YAAY,EAAE,MAAM,EAAE;QACvF,EAAE,mBAAmB,EAAE,0CAA0C,EAAE,YAAY,EAAE,gBAAgB,EAAE;KACtG;CACJ,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,SAAgB,2BAA2B,CACvC,UAAkB,EAClB,QAAgB,EAChB,OAAgB,EAChB,eAA2C,EAC3C,YAAuB;IAEvB,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,UAAU,GAAa,MAAM,CAAC,IAAI,CAAC,wBAAgB,CAAC,CAAC;IAC3D,MAAM,cAAc,GAAa,YAAY,KAAK,SAAS;QACvD,CAAC,CAAC,UAAU;QACZ,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAS,EAAW,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1E,KAAK,MAAM,MAAM,IAAI,cAAc,EAAE,CAAC;QAClC,MAAM,OAAO,GAAqB,wBAAgB,CAAC,MAAM,CAAC,CAAC;QAC3D,MAAM,YAAY,GAAW,eAAe,CAAC,MAAM,CAAC,CAAC;QACrD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACtB,MAAM,MAAM,GAAW,GAAG,UAAU,IAAI,CAAC,CAAC,mBAAmB,EAAE,CAAC;YAChE,IAAI,CAAC,IAAA,eAAU,EAAC,MAAM,CAAC,EAAE,CAAC;gBACtB,SAAS;YACb,CAAC;YACD,MAAM,QAAQ,GAAwB,OAAO;gBACzC,CAAC,CAAC,CAAC,GAAW,EAAiB,EAAE;oBAC7B,MAAM,IAAI,GAAW,GAAG,YAAY,IAAI,gBAAgB,CAAC,CAAC,CAAC,YAAY,EAAE,QAAQ,EAAE,GAAG,CAAC,EAAE,CAAC;oBAC1F,IAAI,CAAC,IAAA,eAAU,EAAC,IAAI,CAAC,EAAE,CAAC;wBACpB,MAAM,UAAU,GAAW,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,QAAQ,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;wBAC5E,eAAM,CAAC,IAAI,CACP,oBAAoB,UAAU,sBAAsB,IAAI,QAAQ,CAAC,CAAC,mBAAmB,iCAAiC,CACzH,CAAC;wBACF,OAAO,IAAI,CAAC;oBAChB,CAAC;oBACD,OAAO,IAAA,iBAAY,EAAC,IAAI,EAAE,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC;gBACjD,CAAC;gBACD,CAAC,CAAC,IAAI,CAAC;YACX,IAAI,2BAA2B,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC;gBAC1D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC;YACxC,CAAC;QACL,CAAC;IACL,CAAC;IACD,OAAO,OAAO,CAAC;AACnB,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAgB,4BAA4B,CACxC,UAAkB,EAClB,eAA2C;IAE3C,MAAM,MAAM,GAAkC,IAAA,mBAAU,EAAC,UAAU,CAAC,CAAC;IACrE,KAAK,MAAM,KAAK,IAAI,mBAAU,EAAE,CAAC;QAC7B,MAAM,OAAO,GAAY,IAAA,uBAAc,EAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACvD,2BAA2B,CAAC,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,eAAe,CAAC,CAAC;IAC7E,CAAC;AACL,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ironbee-ai/cli",
-  "version": "0.8.2",
+  "version": "0.9.0",
   "description": "The CLI for IronBee — Verification and Intelligence Layer for Agentic Development",
   "main": "dist/index.js",
   "bin": {

package/dist/clients/claude/fragments/command-verify.node.md

@@ -1,33 +0,0 @@
-<!-- Node backend verification is ENABLED for this project. -->
-
-## Backend Node Mode (when `backend.node.verifyPatterns` matches an edited file)
-
-> **Precondition: the backend must actually be Node.js.** If you see `pom.xml`, `build.gradle`, `requirements.txt`, `pyproject.toml`, `go.mod`, `Cargo.toml`, etc., this section does NOT apply — `ndt_*` tools won't connect to non-Node processes. Just do browser verification.
-
-If the project has node backend verification enabled (`ironbee enable-backend node` once at setup, by an operator who confirmed the backend is Node.js) and your edits touch matching paths (e.g. `server/**`, `pages/api/**`), the Stop hook also enforces a Node cycle. The same `verification-start` covers both cycles; the same verdict file carries fields for both.
-
-### Steps (additive to the browser flow above)
-1. **Identify the running Node process** — note its PID, container name (`docker compose ps`), or inspector port.
-2. **Connect**: `mcp__node-devtools__ndt_debug_connect` with one of `pid` / `processName` / `containerId` / `containerName` / `inspectorPort` / `wsUrl`. Inspector is auto-activated via SIGUSR1 if needed.
-3. **Pick an evidence path** for each changed code path:
-   - **Probe path** (proves the code path executed): `mcp__node-devtools__ndt_debug_put-tracepoint` (or `put-logpoint` / `put-exceptionpoint`) at the changed code, exercise the path (e.g. trigger the API call from the browser), then `mcp__node-devtools__ndt_debug_get-probe-snapshots`. At least one probe must come back with `triggered: true`.
-   - **Log path** (proves no errors): exercise the path, then `mcp__node-devtools__ndt_debug_get-logs` with the error level filter. `backend_node_log_errors` must be empty for `status: pass`.
-4. **Disconnect** (optional): `mcp__node-devtools__ndt_debug_disconnect`.
-5. **Submit verdict** including `backend_node_*` fields. If browser cycle is also active, include browser fields in the SAME verdict — do not submit two verdicts.
-
-### Verdict (node-cycle fields)
-```json
-{
-  "session_id": "...",
-  "status": "pass",
-  "checks": ["POST /api/orders returned 201", "tracepoint at handler.ts:42 fired once"],
-  "backend_node_processes_connected": ["pid:12345 (next-server)"],
-  "backend_node_probes_set": [
-    { "type": "tracepoint", "location": "src/api/orders.ts:42", "triggered": true }
-  ],
-  "backend_node_probe_snapshots_collected": 1,
-  "backend_node_log_errors": []
-}
-```
-
-For a multi-cycle pass, both browser and node criteria must hold — claiming `pass` without one cycle's evidence will be overridden to fail by the gate.

package/dist/clients/cursor/fragments/command-verify.node.md

@@ -1,33 +0,0 @@
-<!-- Node backend verification is ENABLED for this project. -->
-
-## Backend Node Mode (when `backend.node.verifyPatterns` matches an edited file)
-
-> **Precondition: the backend must actually be Node.js.** If you see `pom.xml`, `build.gradle`, `requirements.txt`, `pyproject.toml`, `go.mod`, `Cargo.toml`, etc., this section does NOT apply — `MCP:ndt_*` tools won't connect to non-Node processes. Just do browser verification.
-
-If the project has node backend verification enabled (`ironbee enable-backend node` once at setup, by an operator who confirmed the backend is Node.js) and your edits touch matching paths (e.g. `server/**`, `pages/api/**`), the stop hook also enforces a Node cycle. The same `verification-start` covers both cycles; the same verdict file carries fields for both.
-
-### Steps (additive to the browser flow above)
-1. **Identify the running Node process** — note its PID, container name (`docker compose ps`), or inspector port.
-2. **Connect**: `MCP:ndt_debug_connect` with one of `pid` / `processName` / `containerId` / `containerName` / `inspectorPort` / `wsUrl`. Inspector is auto-activated via SIGUSR1 if needed.
-3. **Pick an evidence path** for each changed code path:
-   - **Probe path** (proves the code path executed): `MCP:ndt_debug_put-tracepoint` (or `put-logpoint` / `put-exceptionpoint`) at the changed code, exercise the path (e.g. trigger the API call from the browser), then `MCP:ndt_debug_get-probe-snapshots`. At least one probe must come back with `triggered: true`.
-   - **Log path** (proves no errors): exercise the path, then `MCP:ndt_debug_get-logs` with the error level filter. `backend_node_log_errors` must be empty for `status: pass`.
-4. **Disconnect** (optional): `MCP:ndt_debug_disconnect`.
-5. **Submit verdict** including `backend_node_*` fields. If browser cycle is also active, include browser fields in the SAME verdict — do not submit two verdicts.
-
-### Verdict (node-cycle fields)
-```json
-{
-  "session_id": "...",
-  "status": "pass",
-  "checks": ["POST /api/orders returned 201", "tracepoint at handler.ts:42 fired once"],
-  "backend_node_processes_connected": ["pid:12345 (next-server)"],
-  "backend_node_probes_set": [
-    { "type": "tracepoint", "location": "src/api/orders.ts:42", "triggered": true }
-  ],
-  "backend_node_probe_snapshots_collected": 1,
-  "backend_node_log_errors": []
-}
-```
-
-For a multi-cycle pass, both browser and node criteria must hold — claiming `pass` without one cycle's evidence will be overridden to fail by the gate.

package/dist/commands/backend-toggle.d.ts

@@ -1,45 +0,0 @@
-/**
- * Shared helpers for `enable-backend <runtime>` / `disable-backend <runtime>`.
- *
- * Per design §10 — opt-in activation for backend verification per runtime.
- *
- *   - `applyEnableBackend(runtime, projectDir)` writes opinionated default
- *     `verifyPatterns` to the project config under `backend.<runtime>`.
- *     Refuses if patterns are already populated. Other fields
- *     (`alwaysRequired`, `evidencePaths`, `additionalVerifyPatterns`) are
- *     not written — they merge in from defaults at config-load time.
- *
- *   - `applyDisableBackend(runtime, projectDir)` resets `verifyPatterns`
- *     to `[]` for the runtime, leaving customizations of other fields
- *     intact so a later re-enable restores them. Idempotent.
- *
- * Both throw when `<runtime>` isn't in the registered runtime set
- * (today: just `node`); callers handle the error and exit.
- */
-export declare function knownRuntimes(): string[];
-export declare function assertKnownRuntime(runtime: string): void;
-/**
- * Enable a backend runtime: write default `verifyPatterns` + splice the
- * runtime fragment into installed skill/rule/command md files.
- *
- * No-op + warning when patterns are already populated (the user must
- * `disable-backend` first to reset, since we don't want to clobber their
- * custom additions).
- *
- * `clientName`: optional filter for which clients' md files to update.
- * Same semantics as `applyVerificationToggle` — `"all"` / `<name>` /
- * undefined (default: every registered client; per-file existsSync gate
- * skips ones without installed artifacts).
- */
-export declare function applyEnableBackend(runtime: string, projectDir: string, clientName?: string): void;
-/**
- * Disable a backend runtime: reset `verifyPatterns` to `[]` and reset the
- * runtime fragment in installed skill/rule/command md files.
- *
- * Customizations of `alwaysRequired`, `evidencePaths`, and
- * `additionalVerifyPatterns` are preserved. Idempotent.
- *
- * `clientName`: same semantics as `applyEnableBackend`.
- */
-export declare function applyDisableBackend(runtime: string, projectDir: string, clientName?: string): void;
-//# sourceMappingURL=backend-toggle.d.ts.map

package/dist/commands/backend-toggle.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"backend-toggle.d.ts","sourceRoot":"","sources":["../../src/commands/backend-toggle.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAiDH,wBAAgB,aAAa,IAAI,MAAM,EAAE,CAWxC;AAED,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAKxD;AAyCD;;;;;;;;;;;;GAYG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAgDjG;AAED;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAwBlG"}

package/dist/commands/backend-toggle.js

@@ -1,192 +0,0 @@
-"use strict";
-/**
- * Shared helpers for `enable-backend <runtime>` / `disable-backend <runtime>`.
- *
- * Per design §10 — opt-in activation for backend verification per runtime.
- *
- *   - `applyEnableBackend(runtime, projectDir)` writes opinionated default
- *     `verifyPatterns` to the project config under `backend.<runtime>`.
- *     Refuses if patterns are already populated. Other fields
- *     (`alwaysRequired`, `evidencePaths`, `additionalVerifyPatterns`) are
- *     not written — they merge in from defaults at config-load time.
- *
- *   - `applyDisableBackend(runtime, projectDir)` resets `verifyPatterns`
- *     to `[]` for the runtime, leaving customizations of other fields
- *     intact so a later re-enable restores them. Idempotent.
- *
- * Both throw when `<runtime>` isn't in the registered runtime set
- * (today: just `node`); callers handle the error and exit.
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.knownRuntimes = knownRuntimes;
-exports.assertKnownRuntime = assertKnownRuntime;
-exports.applyEnableBackend = applyEnableBackend;
-exports.applyDisableBackend = applyDisableBackend;
-const fs_1 = require("fs");
-const path_1 = require("path");
-const registry_1 = require("../clients/registry");
-const logger_1 = require("../lib/logger");
-const output_1 = require("../lib/output");
-const config_1 = require("../lib/config");
-const runtime_section_1 = require("../lib/runtime-section");
-/**
- * Locates the per-client fragments directory at runtime. Fragments live next
- * to the compiled client code (`dist/clients/<client>/fragments/`), so we
- * resolve relative to this file's location — same trick the install code
- * uses to find skill/rule templates.
- */
-function fragmentsDirFor(client) {
-    return (0, path_1.join)(__dirname, "..", "clients", client, "fragments");
-}
-/** Opinionated verifyPatterns written by `enable-backend <runtime>`. */
-const RUNTIME_DEFAULT_VERIFY_PATTERNS = {
-    node: [
-        "server/**/*.{ts,js,mjs,cjs}",
-        "src/server/**/*.{ts,js,mjs,cjs}",
-        "backend/**/*.{ts,js,mjs,cjs}",
-        "api/**/*.{ts,js,mjs,cjs}",
-        "src/api/**/*.{ts,js,mjs,cjs}",
-        "pages/api/**/*.{ts,js,mjs,cjs}",
-        "app/api/**/*.{ts,js,mjs,cjs}",
-        "routes/**/*.{ts,js,mjs,cjs}",
-        "**/server.{ts,js,mjs,cjs}",
-    ],
-};
-function knownRuntimes() {
-    const runtimes = [];
-    for (const server of config_1.BACKEND_SERVERS) {
-        const runtime = Object.keys(config_1.RUNTIME_TO_SERVER).find((k) => config_1.RUNTIME_TO_SERVER[k] === server);
-        if (runtime !== undefined) {
-            runtimes.push(runtime);
-        }
-    }
-    return runtimes;
-}
-function assertKnownRuntime(runtime) {
-    const known = knownRuntimes();
-    if (!known.includes(runtime)) {
-        throw new Error(`Unknown runtime '${runtime}'. Available: ${known.join(", ")}.`);
-    }
-}
-function projectConfigPath(projectDir) {
-    return (0, path_1.join)((0, path_1.resolve)(projectDir), ".ironbee", "config.json");
-}
-function readProjectConfig(configPath) {
-    if (!(0, fs_1.existsSync)(configPath)) {
-        return {};
-    }
-    try {
-        return JSON.parse((0, fs_1.readFileSync)(configPath, "utf-8"));
-    }
-    catch (e) {
-        logger_1.logger.debug(`failed to read ${configPath}: ${e}`);
-        throw new Error(`Project config at ${configPath} is not valid JSON: ${e instanceof Error ? e.message : e}`);
-    }
-}
-function writeProjectConfig(configPath, config) {
-    (0, fs_1.mkdirSync)((0, path_1.join)(configPath, ".."), { recursive: true });
-    (0, fs_1.writeFileSync)(configPath, JSON.stringify(config, null, 2) + "\n");
-}
-/**
- * Resolve the client filter list passed to `applyRuntimeToProjectFiles`. We
- * pass `undefined` for "all" so the helper iterates every registered client
- * (its existsSync gate already skips clients without installed md files);
- * for a specific name we pass `[name]`.
- *
- * Throws on unknown name. `clientName === "all" || undefined` returns
- * undefined (== all clients).
- */
-function clientFilterForRuntime(projectDir, clientName) {
-    if (clientName === undefined || clientName === "all") {
-        return undefined;
-    }
-    // resolveTargetClients validates the name and throws when unknown.
-    const clients = (0, registry_1.resolveTargetClients)(projectDir, clientName);
-    return clients.map((c) => c.name);
-}
-/**
- * Enable a backend runtime: write default `verifyPatterns` + splice the
- * runtime fragment into installed skill/rule/command md files.
- *
- * No-op + warning when patterns are already populated (the user must
- * `disable-backend` first to reset, since we don't want to clobber their
- * custom additions).
- *
- * `clientName`: optional filter for which clients' md files to update.
- * Same semantics as `applyVerificationToggle` — `"all"` / `<name>` /
- * undefined (default: every registered client; per-file existsSync gate
- * skips ones without installed artifacts).
- */
-function applyEnableBackend(runtime, projectDir, clientName) {
-    assertKnownRuntime(runtime);
-    const configPath = projectConfigPath(projectDir);
-    const config = readProjectConfig(configPath);
-    if (!config.backend) {
-        config.backend = {};
-    }
-    const block = config.backend[runtime] ?? {};
-    const existing = Array.isArray(block.verifyPatterns) ? block.verifyPatterns : [];
-    if (existing.length > 0) {
-        console.log(`${output_1.pc.yellow("⚠")}  ${runtime} backend is already enabled in ${output_1.pc.dim(configPath)}.\n` +
-            `   Run ${output_1.pc.cyan(`ironbee disable-backend ${runtime}`)} first, or empty the verifyPatterns array manually,\n` +
-            `   then re-run enable-backend to re-apply defaults.`);
-        return;
-    }
-    const defaults = RUNTIME_DEFAULT_VERIFY_PATTERNS[runtime];
-    if (defaults === undefined) {
-        throw new Error(`No opinionated default patterns registered for runtime '${runtime}'.`);
-    }
-    block.verifyPatterns = [...defaults];
-    config.backend[runtime] = block;
-    writeProjectConfig(configPath, config);
-    // Splice the runtime fragment into installed md files (skill/rule/command).
-    // `clientName` narrows the iteration; without it we sweep every registered
-    // client and rely on existsSync to skip ones without installed artifacts.
-    const clientFilter = clientFilterForRuntime(projectDir, clientName);
-    const updatedFiles = (0, runtime_section_1.applyRuntimeToProjectFiles)(projectDir, runtime, true, fragmentsDirFor, clientFilter);
-    console.log(`${output_1.pc.green("✓")}  Enabled ${output_1.pc.bold(runtime)} backend verification in ${output_1.pc.dim(configPath)}.`);
-    console.log(`   ${output_1.pc.dim("Patterns applied to backend." + runtime + ".verifyPatterns:")}`);
-    for (const p of defaults) {
-        console.log(`     ${output_1.pc.dim("- " + p)}`);
-    }
-    if (updatedFiles.length > 0) {
-        console.log(`\n   ${output_1.pc.dim("Updated agent guidance files:")}`);
-        for (const f of updatedFiles) {
-            console.log(`     ${output_1.pc.dim("- " + f)}`);
-        }
-    }
-    console.log(`\n   ${output_1.pc.dim("Edit the patterns to match your project, or add overrides via")} ${output_1.pc.cyan(`backend.${runtime}.additionalVerifyPatterns`)}${output_1.pc.dim(".")}`);
-}
-/**
- * Disable a backend runtime: reset `verifyPatterns` to `[]` and reset the
- * runtime fragment in installed skill/rule/command md files.
- *
- * Customizations of `alwaysRequired`, `evidencePaths`, and
- * `additionalVerifyPatterns` are preserved. Idempotent.
- *
- * `clientName`: same semantics as `applyEnableBackend`.
- */
-function applyDisableBackend(runtime, projectDir, clientName) {
-    assertKnownRuntime(runtime);
-    const configPath = projectConfigPath(projectDir);
-    const config = readProjectConfig(configPath);
-    const block = config.backend?.[runtime];
-    const currentPatterns = Array.isArray(block?.verifyPatterns) ? block.verifyPatterns : [];
-    if (block === undefined || currentPatterns.length === 0) {
-        console.log(`${output_1.pc.dim("·")}  ${runtime} backend already disabled (no-op).`);
-        return;
-    }
-    block.verifyPatterns = [];
-    writeProjectConfig(configPath, config);
-    const clientFilter = clientFilterForRuntime(projectDir, clientName);
-    const updatedFiles = (0, runtime_section_1.applyRuntimeToProjectFiles)(projectDir, runtime, false, fragmentsDirFor, clientFilter);
-    console.log(`${output_1.pc.green("✓")}  Disabled ${output_1.pc.bold(runtime)} backend verification in ${output_1.pc.dim(configPath)}.`);
-    console.log(`   ${output_1.pc.dim("Customizations of alwaysRequired, evidencePaths, additionalVerifyPatterns are preserved.")}`);
-    if (updatedFiles.length > 0) {
-        console.log(`   ${output_1.pc.dim("Reset agent guidance for the runtime block in:")}`);
-        for (const f of updatedFiles) {
-            console.log(`     ${output_1.pc.dim("- " + f)}`);
-        }
-    }
-}
-//# sourceMappingURL=backend-toggle.js.map

package/dist/commands/backend-toggle.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"backend-toggle.js","sourceRoot":"","sources":["../../src/commands/backend-toggle.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;GAiBG;;AAiDH,sCAWC;AAED,gDAKC;AAsDD,gDAgDC;AAWD,kDAwBC;AA1MD,2BAAwE;AACxE,+BAAqC;AAErC,kDAA2D;AAC3D,0CAAuC;AACvC,0CAAmC;AACnC,0CAAmE;AACnE,4DAAoE;AAEpE;;;;;GAKG;AACH,SAAS,eAAe,CAAC,MAAc;IACnC,OAAO,IAAA,WAAI,EAAC,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;AACjE,CAAC;AAED,wEAAwE;AACxE,MAAM,+BAA+B,GAA6B;IAC9D,IAAI,EAAE;QACF,6BAA6B;QAC7B,iCAAiC;QACjC,8BAA8B;QAC9B,0BAA0B;QAC1B,8BAA8B;QAC9B,gCAAgC;QAChC,8BAA8B;QAC9B,6BAA6B;QAC7B,2BAA2B;KAC9B;CACJ,CAAC;AAeF,SAAgB,aAAa;IACzB,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,MAAM,IAAI,wBAAe,EAAE,CAAC;QACnC,MAAM,OAAO,GAAuB,MAAM,CAAC,IAAI,CAAC,0BAAiB,CAAC,CAAC,IAAI,CACnE,CAAC,CAAS,EAAW,EAAE,CAAC,0BAAiB,CAAC,CAAC,CAAC,KAAK,MAAM,CAC1D,CAAC;QACF,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YACxB,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC3B,CAAC;IACL,CAAC;IACD,OAAO,QAAQ,CAAC;AACpB,CAAC;AAED,SAAgB,kBAAkB,CAAC,OAAe;IAC9C,MAAM,KAAK,GAAa,aAAa,EAAE,CAAC;IACxC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,oBAAoB,OAAO,iBAAiB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACrF,CAAC;AACL,CAAC;AAED,SAAS,iBAAiB,CAAC,UAAkB;IACzC,OAAO,IAAA,WAAI,EAAC,IAAA,cAAO,EAAC,UAAU,CAAC,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,iBAAiB,CAAC,UAAkB;IACzC,IAAI,CAAC,IAAA,eAAU,EAAC,UAAU,CAAC,EAAE,CAAC;QAC1B,OAAO,EAAE,CAAC;IACd,CAAC;IACD,IAAI,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC,IAAA,iBAAY,EAAC,UAAU,EAAE,OAAO,CAAC,CAAkB,CAAC;IAC1E,CAAC;IAAC,OAAO,CAAU,EAAE,CAAC;QAClB,eAAM,CAAC,KAAK,CAAC,kBAAkB,UAAU,KAAK,CAAC,EAAE,CAAC,CAAC;QACnD,MAAM,IAAI,KAAK,CAAC,qBAAqB,UAAU,uBAAuB,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAChH,CAAC;AACL,CAAC;AAED,SAAS,kBAAkB,CAAC,UAAkB,EAAE,MAAqB;IACjE,IAAA,cAAS,EAAC,IAAA,WAAI,EAAC,UAAU,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvD,IAAA,kBAAa,EAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;AACtE,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,sBAAsB,CAAC,UAAkB,EAAE,UAAmB;IACnE,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,KAAK,KAAK,EAAE,CAAC;QACnD,OAAO,SAAS,CAAC;IACrB,CAAC;IACD,mEAAmE;IACnE,MAAM,OAAO,GAAc,IAAA,+BAAoB,EAAC,UAAU,EAAE,UAAU,CAAC,CAAC;IACxE,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,CAAU,EAAU,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AACvD,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,SAAgB,kBAAkB,CAAC,OAAe,EAAE,UAAkB,EAAE,UAAmB;IACvF,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAC5B,MAAM,UAAU,GAAW,iBAAiB,CAAC,UAAU,CAAC,CAAC;IACzD,MAAM,MAAM,GAAkB,iBAAiB,CAAC,UAAU,CAAC,CAAC;IAE5D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QAClB,MAAM,CAAC,OAAO,GAAG,EAAE,CAAC;IACxB,CAAC;IACD,MAAM,KAAK,GAAsB,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;IAC/D,MAAM,QAAQ,GAAa,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC;IAE3F,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CACP,GAAG,WAAE,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,OAAO,kCAAkC,WAAE,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK;YACtF,UAAU,WAAE,CAAC,IAAI,CAAC,2BAA2B,OAAO,EAAE,CAAC,uDAAuD;YAC9G,qDAAqD,CACxD,CAAC;QACF,OAAO;IACX,CAAC;IAED,MAAM,QAAQ,GAAyB,+BAA+B,CAAC,OAAO,CAAC,CAAC;IAChF,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,2DAA2D,OAAO,IAAI,CAAC,CAAC;IAC5F,CAAC;IACD,KAAK,CAAC,cAAc,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC;IACrC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC;IAChC,kBAAkB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAEvC,4EAA4E;IAC5E,2EAA2E;IAC3E,0EAA0E;IAC1E,MAAM,YAAY,GAAyB,sBAAsB,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;IAC1F,MAAM,YAAY,GAAa,IAAA,4CAA0B,EAAC,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,YAAY,CAAC,CAAC;IAEpH,OAAO,CAAC,GAAG,CAAC,GAAG,WAAE,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,WAAE,CAAC,IAAI,CAAC,OAAO,CAAC,4BAA4B,WAAE,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IAC5G,OAAO,CAAC,GAAG,CAAC,MAAM,WAAE,CAAC,GAAG,CAAC,8BAA8B,GAAG,OAAO,GAAG,kBAAkB,CAAC,EAAE,CAAC,CAAC;IAC3F,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACvB,OAAO,CAAC,GAAG,CAAC,QAAQ,WAAE,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC;IAC5C,CAAC;IACD,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,QAAQ,WAAE,CAAC,GAAG,CAAC,+BAA+B,CAAC,EAAE,CAAC,CAAC;QAC/D,KAAK,MAAM,CAAC,IAAI,YAAY,EAAE,CAAC;YAC3B,OAAO,CAAC,GAAG,CAAC,QAAQ,WAAE,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC;QAC5C,CAAC;IACL,CAAC;IACD,OAAO,CAAC,GAAG,CACP,QAAQ,WAAE,CAAC,GAAG,CAAC,+DAA+D,CAAC,IAAI,WAAE,CAAC,IAAI,CAAC,WAAW,OAAO,2BAA2B,CAAC,GAAG,WAAE,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAC5J,CAAC;AACN,CAAC;AAED;;;;;;;;GAQG;AACH,SAAgB,mBAAmB,CAAC,OAAe,EAAE,UAAkB,EAAE,UAAmB;IACxF,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAC5B,MAAM,UAAU,GAAW,iBAAiB,CAAC,UAAU,CAAC,CAAC;IACzD,MAAM,MAAM,GAAkB,iBAAiB,CAAC,UAAU,CAAC,CAAC;IAE5D,MAAM,KAAK,GAAkC,MAAM,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC;IACvE,MAAM,eAAe,GAAa,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC,KAAM,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC;IACpG,IAAI,KAAK,KAAK,SAAS,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtD,OAAO,CAAC,GAAG,CAAC,GAAG,WAAE,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,OAAO,oCAAoC,CAAC,CAAC;QAC5E,OAAO;IACX,CAAC;IAED,KAAK,CAAC,cAAc,GAAG,EAAE,CAAC;IAC1B,kBAAkB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IACvC,MAAM,YAAY,GAAyB,sBAAsB,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;IAC1F,MAAM,YAAY,GAAa,IAAA,4CAA0B,EAAC,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,YAAY,CAAC,CAAC;IACrH,OAAO,CAAC,GAAG,CAAC,GAAG,WAAE,CAAC,KAAK,CAAC,GAAG,CAAC,cAAc,WAAE,CAAC,IAAI,CAAC,OAAO,CAAC,4BAA4B,WAAE,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IAC7G,OAAO,CAAC,GAAG,CAAC,MAAM,WAAE,CAAC,GAAG,CAAC,0FAA0F,CAAC,EAAE,CAAC,CAAC;IACxH,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,MAAM,WAAE,CAAC,GAAG,CAAC,gDAAgD,CAAC,EAAE,CAAC,CAAC;QAC9E,KAAK,MAAM,CAAC,IAAI,YAAY,EAAE,CAAC;YAC3B,OAAO,CAAC,GAAG,CAAC,QAAQ,WAAE,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC;QAC5C,CAAC;IACL,CAAC;AACL,CAAC"}

package/dist/commands/disable-backend.d.ts

@@ -1,14 +0,0 @@
-/**
- * `ironbee disable-backend <runtime>`
- *
- * Disable backend verification for a runtime — resets `verifyPatterns` to
- * `[]` for the runtime, leaving customizations of `alwaysRequired`,
- * `evidencePaths`, and `additionalVerifyPatterns` intact so a later
- * re-enable restores them. Idempotent.
- *
- * Pairs with `enable-backend` (separate file by design — both call shared
- * helpers in `backend-toggle.ts`).
- */
-import { Command } from "commander";
-export declare const disableBackendCommand: Command;
-//# sourceMappingURL=disable-backend.d.ts.map

package/dist/commands/disable-backend.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"disable-backend.d.ts","sourceRoot":"","sources":["../../src/commands/disable-backend.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAKpC,eAAO,MAAM,qBAAqB,EAAE,OAa9B,CAAC"}