@ironbee-ai/cli 0.8.3 → 0.9.0

package/dist/lib/platform-section.d.ts

@@ -0,0 +1,126 @@
+/**
+ * Platform-section toggling for skill / rule / command markdown files.
+ *
+ * Each agent-facing markdown file (skill, rule, slash command) carries one
+ * or more marker blocks per platform. Two marker syntaxes are supported:
+ *
+ *     <!--IRONBEE:PLATFORM:node-->
+ *     ...content here...
+ *     <!--/IRONBEE:PLATFORM:node-->
+ *
+ * (the unkeyed form — handy when a file only needs a single block per
+ * platform), and:
+ *
+ *     <!--IRONBEE:PLATFORM:node:tldr-->
+ *     ...short heads-up content...
+ *     <!--/IRONBEE:PLATFORM:node:tldr-->
+ *     ...
+ *     <!--IRONBEE:PLATFORM:node:full-->
+ *     ...detailed flow...
+ *     <!--/IRONBEE:PLATFORM:node:full-->
+ *
+ * (the keyed form — handy when the same platform needs different content at
+ * different positions in the same file: short summary up top, full flow at
+ * the bottom, etc.). Keys are alphanumeric + hyphen.
+ *
+ * Two states per block:
+ *   - **disabled** — replaced with a short placeholder telling the agent
+ *     the platform is off and reminding them not to invoke that platform's
+ *     tools when the project isn't actually using it.
+ *   - **enabled** — replaced with the full guidance fragment for that
+ *     platform + key.
+ *
+ * `ironbee install` writes one or the other based on config state at
+ * install time. `ironbee enable-<platform>` / `disable-<platform>` flip
+ * already-installed files in place — no re-install needed. The marker block
+ * (and its key) is preserved on every flip so the toggle is always
+ * reversible.
+ *
+ * "Platform" is the umbrella term for everything the verify-gate can drive
+ * tools against: `browser` (browser-devtools, `bdt_*`), `node` (Node.js
+ * runtime debug — V8 inspector, `ndt_*`), `backend` (runtime-agnostic
+ * protocol calls, `bedt_*`). Future platforms (mobile / iOS / Android, …)
+ * plug in here without code changes to the marker syntax.
+ */
+/** Type accepted as the `replacement` argument to `applyPlatformSection`.
+ *
+ *   - `string` → used verbatim for every block (every key) of this platform.
+ *   - `null` → placeholder used for every block.
+ *   - `(key: string) => string | null` → resolved per block; returning null
+ *     uses the placeholder for that block.
+ */
+export type PlatformReplacement = string | null | ((key: string) => string | null);
+/**
+ * Replace the contents of every platform-section marker block for `platform`
+ * in `fileContent`. Returns the new content (or the original content if no
+ * markers are found).
+ *
+ * Each block in the file is independently resolved. The same platform can
+ * have multiple blocks distinguished by their key — see file header for
+ * the syntax. Blocks that share a key are still treated as a structural
+ * bug: only the first is updated and a warning is emitted.
+ *
+ * The markers themselves are preserved so the operation is reversible.
+ */
+export declare function applyPlatformSection(fileContent: string, platform: string, replacement: PlatformReplacement, fileLabel?: string): string;
+/**
+ * Build the on-disk fragment filename for `(fragmentBase, platform, key)`:
+ *   - keyless block (`key === ""`) → `<base>.<platform>.md`
+ *   - keyed block               → `<base>.<platform>.<key>.md`
+ */
+export declare function fragmentFilename(fragmentBase: string, platform: string, key: string): string;
+/** Read a fragment file from `${baseDir}/${name}`. Throws when missing. */
+export declare function readFragment(baseDir: string, name: string): string;
+/**
+ * Read the file at `targetPath`, apply the platform section toggle, and
+ * write back if the content actually changed. No-op when the marker is
+ * missing.
+ */
+export declare function togglePlatformSectionInFile(targetPath: string, platform: string, replacement: PlatformReplacement): boolean;
+/**
+ * One md file in a project that carries platform markers, paired with the
+ * fragment base name to use when the platform is enabled. Platform fragments
+ * live in the compiled `dist/clients/<client>/platforms/` directory at
+ * runtime.
+ *
+ * The same `fragmentBase` is reused for every key in the file — keyed
+ * fragments add `.<key>` before the `.md` extension (see
+ * `fragmentFilename`). E.g. fragmentBase `"skill"` + platform `"node"`
+ * resolves to `skill.node.md` for the keyless block, `skill.node.tldr.md`
+ * for the `tldr` keyed block, etc.
+ */
+export interface PlatformTarget {
+    /** Project-relative path to the installed md file (e.g. `.claude/skills/...`). */
+    projectRelativePath: string;
+    /** Fragment file base — see `fragmentFilename` for the full naming rule. */
+    fragmentBase: string;
+}
+/** Project files that carry platform markers, per client. */
+export declare const PLATFORM_TARGETS: Record<string, PlatformTarget[]>;
+/**
+ * Toggle every platform-section block (across every key) in every installed
+ * md file across all known clients in `projectDir`. Files that don't exist
+ * are silently skipped (the client may not be installed for this project).
+ *
+ * When `enabled === true`, fragments for each block's key are loaded from
+ * `platformsDirFor(client)`. Missing fragment files for a key fall back to
+ * the placeholder rather than crashing — the source md is the source of
+ * truth for which keys exist; missing fragments are an authoring gap.
+ *
+ * Returns the list of project-relative paths that were updated.
+ */
+export declare function applyPlatformToProjectFiles(projectDir: string, platform: string, enabled: boolean, platformsDirFor: (client: string) => string, clientFilter?: string[]): string[];
+/**
+ * Sync every platform's section in the project's installed md files to
+ * match the current config state — ON when the platform's effective patterns
+ * are non-empty, OFF otherwise. Browser platform is enabled by default
+ * (its `verifyPatterns` defaults to `DEFAULT_BROWSER_VERIFY_PATTERNS` when
+ * unset); node and backend platforms default to inert.
+ *
+ * Called by `ironbee install` right after the source md files are written
+ * so that re-installing a project that already enabled / disabled a platform
+ * preserves the right state in the freshly-written files (instead of leaving
+ * the source's empty marker block visible).
+ */
+export declare function syncPlatformSectionsToConfig(projectDir: string, platformsDirFor: (client: string) => string): void;
+//# sourceMappingURL=platform-section.d.ts.map

package/dist/lib/platform-section.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform-section.d.ts","sourceRoot":"","sources":["../../src/lib/platform-section.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AAqGH;;;;;;GAMG;AACH,MAAM,MAAM,mBAAmB,GAAG,MAAM,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC,CAAC;AAEnF;;;;;;;;;;;GAWG;AACH,wBAAgB,oBAAoB,CAChC,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,mBAAmB,EAChC,SAAS,CAAC,EAAE,MAAM,GACnB,MAAM,CA0BR;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,YAAY,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAI5F;AAED,2EAA2E;AAC3E,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAMlE;AAED;;;;GAIG;AACH,wBAAgB,2BAA2B,CACvC,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,mBAAmB,GACjC,OAAO,CAWT;AAED;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,cAAc;IAC3B,kFAAkF;IAClF,mBAAmB,EAAE,MAAM,CAAC;IAC5B,4EAA4E;IAC5E,YAAY,EAAE,MAAM,CAAC;CACxB;AAED,6DAA6D;AAC7D,eAAO,MAAM,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,EAAE,CAW7D,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,wBAAgB,2BAA2B,CACvC,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,OAAO,EAChB,eAAe,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,MAAM,EAC3C,YAAY,CAAC,EAAE,MAAM,EAAE,GACxB,MAAM,EAAE,CAiCV;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,4BAA4B,CACxC,UAAU,EAAE,MAAM,EAClB,eAAe,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,MAAM,GAC5C,IAAI,CAMN"}

package/dist/lib/platform-section.js

@@ -0,0 +1,279 @@
+"use strict";
+/**
+ * Platform-section toggling for skill / rule / command markdown files.
+ *
+ * Each agent-facing markdown file (skill, rule, slash command) carries one
+ * or more marker blocks per platform. Two marker syntaxes are supported:
+ *
+ *     <!--IRONBEE:PLATFORM:node-->
+ *     ...content here...
+ *     <!--/IRONBEE:PLATFORM:node-->
+ *
+ * (the unkeyed form — handy when a file only needs a single block per
+ * platform), and:
+ *
+ *     <!--IRONBEE:PLATFORM:node:tldr-->
+ *     ...short heads-up content...
+ *     <!--/IRONBEE:PLATFORM:node:tldr-->
+ *     ...
+ *     <!--IRONBEE:PLATFORM:node:full-->
+ *     ...detailed flow...
+ *     <!--/IRONBEE:PLATFORM:node:full-->
+ *
+ * (the keyed form — handy when the same platform needs different content at
+ * different positions in the same file: short summary up top, full flow at
+ * the bottom, etc.). Keys are alphanumeric + hyphen.
+ *
+ * Two states per block:
+ *   - **disabled** — replaced with a short placeholder telling the agent
+ *     the platform is off and reminding them not to invoke that platform's
+ *     tools when the project isn't actually using it.
+ *   - **enabled** — replaced with the full guidance fragment for that
+ *     platform + key.
+ *
+ * `ironbee install` writes one or the other based on config state at
+ * install time. `ironbee enable-<platform>` / `disable-<platform>` flip
+ * already-installed files in place — no re-install needed. The marker block
+ * (and its key) is preserved on every flip so the toggle is always
+ * reversible.
+ *
+ * "Platform" is the umbrella term for everything the verify-gate can drive
+ * tools against: `browser` (browser-devtools, `bdt_*`), `node` (Node.js
+ * runtime debug — V8 inspector, `ndt_*`), `backend` (runtime-agnostic
+ * protocol calls, `bedt_*`). Future platforms (mobile / iOS / Android, …)
+ * plug in here without code changes to the marker syntax.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PLATFORM_TARGETS = void 0;
+exports.applyPlatformSection = applyPlatformSection;
+exports.fragmentFilename = fragmentFilename;
+exports.readFragment = readFragment;
+exports.togglePlatformSectionInFile = togglePlatformSectionInFile;
+exports.applyPlatformToProjectFiles = applyPlatformToProjectFiles;
+exports.syncPlatformSectionsToConfig = syncPlatformSectionsToConfig;
+const fs_1 = require("fs");
+const logger_1 = require("./logger");
+const config_1 = require("./config");
+/** Per-platform placeholder content (shown when the platform is disabled). */
+const PLACEHOLDERS = {
+    browser: [
+        "<!-- Browser cycle verification is OFF for this project.",
+        "     - To verify frontend / UI changes by driving a real browser (DOM, console,",
+        "       screenshots, accessibility, network): run `ironbee browser enable` to enable.",
+        "       This file will be auto-updated with the browser-cycle guidance.",
+        "     - When OFF, do NOT invoke any `bdt_*` tools voluntarily — there is no",
+        "       active browser-cycle gate, so calling them only wastes cycles. -->",
+    ].join("\n"),
+    node: [
+        "<!-- Node.js runtime debug verification is OFF for this project.",
+        "     - If your backend is Node.js and you want non-blocking debugger probes:",
+        "       run `ironbee node enable` to enable. This file will be auto-updated",
+        "       with the node-cycle guidance.",
+        "     - If your backend isn't Node.js (Java / Python / Go / Rust / .NET / Ruby / PHP / Elixir / …):",
+        "       leave this OFF — `ndt_*` tools only attach to V8/Node processes and will fail elsewhere.",
+        "     - When OFF, do NOT invoke any `ndt_*` tools voluntarily. -->",
+    ].join("\n"),
+    backend: [
+        "<!-- Backend protocol verification is OFF for this project.",
+        "     - To verify backend services by driving real protocol calls (HTTP / gRPC /",
+        "       GraphQL / WebSocket) — runtime- and language-agnostic — run `ironbee",
+        "       backend enable`. This file will be auto-updated with the backend-cycle",
+        "       guidance.",
+        "     - When OFF, do NOT invoke any `bedt_*` tools voluntarily. -->",
+    ].join("\n"),
+};
+/** Escape a platform name for use inside a regex. Platform names are short
+ *  ASCII identifiers but be defensive anyway. */
+function escapeRegex(s) {
+    return s.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}
+/** Build the start-marker regex for a platform. The captured group is the
+ *  optional key (empty when the keyless form is used). */
+function startMarkerRegex(platform) {
+    return new RegExp(`<!--IRONBEE:PLATFORM:${escapeRegex(platform)}(?::([\\w-]+))?-->`, "g");
+}
+/** Build the end marker for a platform + key. Key may be empty for keyless. */
+function endMarkerFor(platform, key) {
+    return key.length > 0
+        ? `<!--/IRONBEE:PLATFORM:${platform}:${key}-->`
+        : `<!--/IRONBEE:PLATFORM:${platform}-->`;
+}
+function findMarkerBlocks(content, platform, fileLabel) {
+    const re = startMarkerRegex(platform);
+    const blocks = [];
+    const keysSeen = new Set();
+    let m = re.exec(content);
+    while (m !== null) {
+        const key = m[1] ?? "";
+        const startEnd = m.index + m[0].length;
+        const endMarker = endMarkerFor(platform, key);
+        const endIdx = content.indexOf(endMarker, startEnd);
+        if (endIdx === -1) {
+            const labelSuffix = fileLabel ? ` in ${fileLabel}` : "";
+            const keyDisplay = key.length > 0 ? `${platform}:${key}` : platform;
+            logger_1.logger.debug(`platform-section ${keyDisplay}: start marker found without matching end marker${labelSuffix}`);
+            m = re.exec(content);
+            continue;
+        }
+        if (keysSeen.has(key)) {
+            const labelSuffix = fileLabel ? ` in ${fileLabel}` : "";
+            const keyDisplay = key.length > 0 ? `${platform}:${key}` : platform;
+            logger_1.logger.warn(`platform-section ${keyDisplay}: multiple marker blocks with the same key${labelSuffix} — only the first will be updated. ` +
+                `Either consolidate the blocks or use distinct keys (\`IRONBEE:PLATFORM:${platform}:<key>\`) per position.`);
+            m = re.exec(content);
+            continue;
+        }
+        keysSeen.add(key);
+        blocks.push({ key, startEnd, endIdx });
+        m = re.exec(content);
+    }
+    return blocks;
+}
+/**
+ * Replace the contents of every platform-section marker block for `platform`
+ * in `fileContent`. Returns the new content (or the original content if no
+ * markers are found).
+ *
+ * Each block in the file is independently resolved. The same platform can
+ * have multiple blocks distinguished by their key — see file header for
+ * the syntax. Blocks that share a key are still treated as a structural
+ * bug: only the first is updated and a warning is emitted.
+ *
+ * The markers themselves are preserved so the operation is reversible.
+ */
+function applyPlatformSection(fileContent, platform, replacement, fileLabel) {
+    const getRepl = typeof replacement === "function"
+        ? replacement
+        : () => replacement;
+    const blocks = findMarkerBlocks(fileContent, platform, fileLabel);
+    if (blocks.length === 0) {
+        return fileContent;
+    }
+    const placeholder = PLACEHOLDERS[platform];
+    if (placeholder === undefined) {
+        throw new Error(`No placeholder registered for platform '${platform}'.`);
+    }
+    // Apply replacements in REVERSE so earlier indices stay valid as we
+    // splice. Keep each marker pair intact; only the inner content moves.
+    let result = fileContent;
+    for (let i = blocks.length - 1; i >= 0; i--) {
+        const b = blocks[i];
+        const inner = getRepl(b.key) ?? placeholder;
+        const before = result.substring(0, b.startEnd);
+        const after = result.substring(b.endIdx);
+        result = `${before}\n${inner}\n${after}`;
+    }
+    return result;
+}
+/**
+ * Build the on-disk fragment filename for `(fragmentBase, platform, key)`:
+ *   - keyless block (`key === ""`) → `<base>.<platform>.md`
+ *   - keyed block               → `<base>.<platform>.<key>.md`
+ */
+function fragmentFilename(fragmentBase, platform, key) {
+    return key.length > 0
+        ? `${fragmentBase}.${platform}.${key}.md`
+        : `${fragmentBase}.${platform}.md`;
+}
+/** Read a fragment file from `${baseDir}/${name}`. Throws when missing. */
+function readFragment(baseDir, name) {
+    const path = `${baseDir}/${name}`;
+    if (!(0, fs_1.existsSync)(path)) {
+        throw new Error(`Platform fragment not found: ${path}`);
+    }
+    return (0, fs_1.readFileSync)(path, "utf-8").trimEnd();
+}
+/**
+ * Read the file at `targetPath`, apply the platform section toggle, and
+ * write back if the content actually changed. No-op when the marker is
+ * missing.
+ */
+function togglePlatformSectionInFile(targetPath, platform, replacement) {
+    if (!(0, fs_1.existsSync)(targetPath)) {
+        return false;
+    }
+    const original = (0, fs_1.readFileSync)(targetPath, "utf-8");
+    const updated = applyPlatformSection(original, platform, replacement, targetPath);
+    if (updated === original) {
+        return false;
+    }
+    (0, fs_1.writeFileSync)(targetPath, updated);
+    return true;
+}
+/** Project files that carry platform markers, per client. */
+exports.PLATFORM_TARGETS = {
+    claude: [
+        { projectRelativePath: ".claude/skills/ironbee-verification.md", fragmentBase: "skill" },
+        { projectRelativePath: ".claude/rules/ironbee-verification.md", fragmentBase: "rule" },
+        { projectRelativePath: ".claude/commands/ironbee-verify.md", fragmentBase: "command-verify" },
+    ],
+    cursor: [
+        { projectRelativePath: ".cursor/skills/ironbee-verification.md", fragmentBase: "skill" },
+        { projectRelativePath: ".cursor/rules/ironbee-verification.mdc", fragmentBase: "rule" },
+        { projectRelativePath: ".cursor/commands/ironbee-verify/SKILL.md", fragmentBase: "command-verify" },
+    ],
+};
+/**
+ * Toggle every platform-section block (across every key) in every installed
+ * md file across all known clients in `projectDir`. Files that don't exist
+ * are silently skipped (the client may not be installed for this project).
+ *
+ * When `enabled === true`, fragments for each block's key are loaded from
+ * `platformsDirFor(client)`. Missing fragment files for a key fall back to
+ * the placeholder rather than crashing — the source md is the source of
+ * truth for which keys exist; missing fragments are an authoring gap.
+ *
+ * Returns the list of project-relative paths that were updated.
+ */
+function applyPlatformToProjectFiles(projectDir, platform, enabled, platformsDirFor, clientFilter) {
+    const updated = [];
+    const allClients = Object.keys(exports.PLATFORM_TARGETS);
+    const clientsToApply = clientFilter === undefined
+        ? allClients
+        : allClients.filter((c) => clientFilter.includes(c));
+    for (const client of clientsToApply) {
+        const targets = exports.PLATFORM_TARGETS[client];
+        const platformsDir = platformsDirFor(client);
+        for (const t of targets) {
+            const target = `${projectDir}/${t.projectRelativePath}`;
+            if (!(0, fs_1.existsSync)(target)) {
+                continue;
+            }
+            const resolver = enabled
+                ? (key) => {
+                    const path = `${platformsDir}/${fragmentFilename(t.fragmentBase, platform, key)}`;
+                    if (!(0, fs_1.existsSync)(path)) {
+                        const keyDisplay = key.length > 0 ? `${platform}:${key}` : platform;
+                        logger_1.logger.warn(`platform-section ${keyDisplay}: missing fragment ${path} for ${t.projectRelativePath} — falling back to placeholder.`);
+                        return null;
+                    }
+                    return (0, fs_1.readFileSync)(path, "utf-8").trimEnd();
+                }
+                : null;
+            if (togglePlatformSectionInFile(target, platform, resolver)) {
+                updated.push(t.projectRelativePath);
+            }
+        }
+    }
+    return updated;
+}
+/**
+ * Sync every platform's section in the project's installed md files to
+ * match the current config state — ON when the platform's effective patterns
+ * are non-empty, OFF otherwise. Browser platform is enabled by default
+ * (its `verifyPatterns` defaults to `DEFAULT_BROWSER_VERIFY_PATTERNS` when
+ * unset); node and backend platforms default to inert.
+ *
+ * Called by `ironbee install` right after the source md files are written
+ * so that re-installing a project that already enabled / disabled a platform
+ * preserves the right state in the freshly-written files (instead of leaving
+ * the source's empty marker block visible).
+ */
+function syncPlatformSectionsToConfig(projectDir, platformsDirFor) {
+    const config = (0, config_1.loadConfig)(projectDir);
+    for (const cycle of config_1.ALL_CYCLES) {
+        const enabled = (0, config_1.isCycleEnabled)(config, cycle);
+        applyPlatformToProjectFiles(projectDir, cycle, enabled, platformsDirFor);
+    }
+}
+//# sourceMappingURL=platform-section.js.map

package/dist/lib/platform-section.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform-section.js","sourceRoot":"","sources":["../../src/lib/platform-section.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;;;AA0HH,oDA+BC;AAOD,4CAIC;AAGD,oCAMC;AAOD,kEAeC;AA+CD,kEAuCC;AAcD,oEASC;AA9SD,2BAA6D;AAC7D,qCAAkC;AAClC,qCAAkE;AAElE,8EAA8E;AAC9E,MAAM,YAAY,GAA2B;IACzC,OAAO,EAAE;QACL,0DAA0D;QAC1D,iFAAiF;QACjF,sFAAsF;QACtF,wEAAwE;QACxE,4EAA4E;QAC5E,2EAA2E;KAC9E,CAAC,IAAI,CAAC,IAAI,CAAC;IACZ,IAAI,EAAE;QACF,kEAAkE;QAClE,8EAA8E;QAC9E,4EAA4E;QAC5E,sCAAsC;QACtC,oGAAoG;QACpG,iGAAiG;QACjG,mEAAmE;KACtE,CAAC,IAAI,CAAC,IAAI,CAAC;IACZ,OAAO,EAAE;QACL,6DAA6D;QAC7D,iFAAiF;QACjF,6EAA6E;QAC7E,+EAA+E;QAC/E,kBAAkB;QAClB,oEAAoE;KACvE,CAAC,IAAI,CAAC,IAAI,CAAC;CACf,CAAC;AAEF;iDACiD;AACjD,SAAS,WAAW,CAAC,CAAS;IAC1B,OAAO,CAAC,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;AACpD,CAAC;AAED;0DAC0D;AAC1D,SAAS,gBAAgB,CAAC,QAAgB;IACtC,OAAO,IAAI,MAAM,CAAC,wBAAwB,WAAW,CAAC,QAAQ,CAAC,oBAAoB,EAAE,GAAG,CAAC,CAAC;AAC9F,CAAC;AAED,+EAA+E;AAC/E,SAAS,YAAY,CAAC,QAAgB,EAAE,GAAW;IAC/C,OAAO,GAAG,CAAC,MAAM,GAAG,CAAC;QACjB,CAAC,CAAC,yBAAyB,QAAQ,IAAI,GAAG,KAAK;QAC/C,CAAC,CAAC,yBAAyB,QAAQ,KAAK,CAAC;AACjD,CAAC;AAWD,SAAS,gBAAgB,CACrB,OAAe,EACf,QAAgB,EAChB,SAA6B;IAE7B,MAAM,EAAE,GAAW,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAkB,EAAE,CAAC;IACjC,MAAM,QAAQ,GAAgB,IAAI,GAAG,EAAE,CAAC;IACxC,IAAI,CAAC,GAA2B,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACjD,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;QAChB,MAAM,GAAG,GAAW,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC/B,MAAM,QAAQ,GAAW,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QAC/C,MAAM,SAAS,GAAW,YAAY,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QACtD,MAAM,MAAM,GAAW,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QAC5D,IAAI,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC;YAChB,MAAM,WAAW,GAAW,SAAS,CAAC,CAAC,CAAC,OAAO,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChE,MAAM,UAAU,GAAW,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,QAAQ,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;YAC5E,eAAM,CAAC,KAAK,CAAC,oBAAoB,UAAU,mDAAmD,WAAW,EAAE,CAAC,CAAC;YAC7G,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACrB,SAAS;QACb,CAAC;QACD,IAAI,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACpB,MAAM,WAAW,GAAW,SAAS,CAAC,CAAC,CAAC,OAAO,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChE,MAAM,UAAU,GAAW,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,QAAQ,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;YAC5E,eAAM,CAAC,IAAI,CACP,oBAAoB,UAAU,6CAA6C,WAAW,qCAAqC;gBAC3H,0EAA0E,QAAQ,yBAAyB,CAC9G,CAAC;YACF,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACrB,SAAS;QACb,CAAC;QACD,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAClB,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QACvC,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACzB,CAAC;IACD,OAAO,MAAM,CAAC;AAClB,CAAC;AAWD;;;;;;;;;;;GAWG;AACH,SAAgB,oBAAoB,CAChC,WAAmB,EACnB,QAAgB,EAChB,WAAgC,EAChC,SAAkB;IAElB,MAAM,OAAO,GAAmC,OAAO,WAAW,KAAK,UAAU;QAC7E,CAAC,CAAC,WAAW;QACb,CAAC,CAAC,GAAkB,EAAE,CAAC,WAAW,CAAC;IAEvC,MAAM,MAAM,GAAkB,gBAAgB,CAAC,WAAW,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;IACjF,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,WAAW,CAAC;IACvB,CAAC;IAED,MAAM,WAAW,GAAuB,YAAY,CAAC,QAAQ,CAAC,CAAC;IAC/D,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,2CAA2C,QAAQ,IAAI,CAAC,CAAC;IAC7E,CAAC;IAED,oEAAoE;IACpE,sEAAsE;IACtE,IAAI,MAAM,GAAW,WAAW,CAAC;IACjC,KAAK,IAAI,CAAC,GAAW,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAClD,MAAM,CAAC,GAAgB,MAAM,CAAC,CAAC,CAAC,CAAC;QACjC,MAAM,KAAK,GAAW,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,WAAW,CAAC;QACpD,MAAM,MAAM,GAAW,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC;QACvD,MAAM,KAAK,GAAW,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QACjD,MAAM,GAAG,GAAG,MAAM,KAAK,KAAK,KAAK,KAAK,EAAE,CAAC;IAC7C,CAAC;IACD,OAAO,MAAM,CAAC;AAClB,CAAC;AAED;;;;GAIG;AACH,SAAgB,gBAAgB,CAAC,YAAoB,EAAE,QAAgB,EAAE,GAAW;IAChF,OAAO,GAAG,CAAC,MAAM,GAAG,CAAC;QACjB,CAAC,CAAC,GAAG,YAAY,IAAI,QAAQ,IAAI,GAAG,KAAK;QACzC,CAAC,CAAC,GAAG,YAAY,IAAI,QAAQ,KAAK,CAAC;AAC3C,CAAC;AAED,2EAA2E;AAC3E,SAAgB,YAAY,CAAC,OAAe,EAAE,IAAY;IACtD,MAAM,IAAI,GAAW,GAAG,OAAO,IAAI,IAAI,EAAE,CAAC;IAC1C,IAAI,CAAC,IAAA,eAAU,EAAC,IAAI,CAAC,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,gCAAgC,IAAI,EAAE,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,IAAA,iBAAY,EAAC,IAAI,EAAE,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC;AACjD,CAAC;AAED;;;;GAIG;AACH,SAAgB,2BAA2B,CACvC,UAAkB,EAClB,QAAgB,EAChB,WAAgC;IAEhC,IAAI,CAAC,IAAA,eAAU,EAAC,UAAU,CAAC,EAAE,CAAC;QAC1B,OAAO,KAAK,CAAC;IACjB,CAAC;IACD,MAAM,QAAQ,GAAW,IAAA,iBAAY,EAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IAC3D,MAAM,OAAO,GAAW,oBAAoB,CAAC,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC;IAC1F,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;QACvB,OAAO,KAAK,CAAC;IACjB,CAAC;IACD,IAAA,kBAAa,EAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IACnC,OAAO,IAAI,CAAC;AAChB,CAAC;AAqBD,6DAA6D;AAChD,QAAA,gBAAgB,GAAqC;IAC9D,MAAM,EAAE;QACJ,EAAE,mBAAmB,EAAE,wCAAwC,EAAE,YAAY,EAAE,OAAO,EAAE;QACxF,EAAE,mBAAmB,EAAE,uCAAuC,EAAE,YAAY,EAAE,MAAM,EAAE;QACtF,EAAE,mBAAmB,EAAE,oCAAoC,EAAE,YAAY,EAAE,gBAAgB,EAAE;KAChG;IACD,MAAM,EAAE;QACJ,EAAE,mBAAmB,EAAE,wCAAwC,EAAE,YAAY,EAAE,OAAO,EAAE;QACxF,EAAE,mBAAmB,EAAE,wCAAwC,EAAE,YAAY,EAAE,MAAM,EAAE;QACvF,EAAE,mBAAmB,EAAE,0CAA0C,EAAE,YAAY,EAAE,gBAAgB,EAAE;KACtG;CACJ,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,SAAgB,2BAA2B,CACvC,UAAkB,EAClB,QAAgB,EAChB,OAAgB,EAChB,eAA2C,EAC3C,YAAuB;IAEvB,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,UAAU,GAAa,MAAM,CAAC,IAAI,CAAC,wBAAgB,CAAC,CAAC;IAC3D,MAAM,cAAc,GAAa,YAAY,KAAK,SAAS;QACvD,CAAC,CAAC,UAAU;QACZ,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAS,EAAW,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1E,KAAK,MAAM,MAAM,IAAI,cAAc,EAAE,CAAC;QAClC,MAAM,OAAO,GAAqB,wBAAgB,CAAC,MAAM,CAAC,CAAC;QAC3D,MAAM,YAAY,GAAW,eAAe,CAAC,MAAM,CAAC,CAAC;QACrD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACtB,MAAM,MAAM,GAAW,GAAG,UAAU,IAAI,CAAC,CAAC,mBAAmB,EAAE,CAAC;YAChE,IAAI,CAAC,IAAA,eAAU,EAAC,MAAM,CAAC,EAAE,CAAC;gBACtB,SAAS;YACb,CAAC;YACD,MAAM,QAAQ,GAAwB,OAAO;gBACzC,CAAC,CAAC,CAAC,GAAW,EAAiB,EAAE;oBAC7B,MAAM,IAAI,GAAW,GAAG,YAAY,IAAI,gBAAgB,CAAC,CAAC,CAAC,YAAY,EAAE,QAAQ,EAAE,GAAG,CAAC,EAAE,CAAC;oBAC1F,IAAI,CAAC,IAAA,eAAU,EAAC,IAAI,CAAC,EAAE,CAAC;wBACpB,MAAM,UAAU,GAAW,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,QAAQ,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;wBAC5E,eAAM,CAAC,IAAI,CACP,oBAAoB,UAAU,sBAAsB,IAAI,QAAQ,CAAC,CAAC,mBAAmB,iCAAiC,CACzH,CAAC;wBACF,OAAO,IAAI,CAAC;oBAChB,CAAC;oBACD,OAAO,IAAA,iBAAY,EAAC,IAAI,EAAE,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC;gBACjD,CAAC;gBACD,CAAC,CAAC,IAAI,CAAC;YACX,IAAI,2BAA2B,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC;gBAC1D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC;YACxC,CAAC;QACL,CAAC;IACL,CAAC;IACD,OAAO,OAAO,CAAC;AACnB,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAgB,4BAA4B,CACxC,UAAkB,EAClB,eAA2C;IAE3C,MAAM,MAAM,GAAkC,IAAA,mBAAU,EAAC,UAAU,CAAC,CAAC;IACrE,KAAK,MAAM,KAAK,IAAI,mBAAU,EAAE,CAAC;QAC7B,MAAM,OAAO,GAAY,IAAA,uBAAc,EAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACvD,2BAA2B,CAAC,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,eAAe,CAAC,CAAC;IAC7E,CAAC;AACL,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ironbee-ai/cli",
-  "version": "0.8.3",
+  "version": "0.9.0",
   "description": "The CLI for IronBee — Verification and Intelligence Layer for Agentic Development",
   "main": "dist/index.js",
   "bin": {

package/dist/clients/claude/fragments/command-verify.node.md

@@ -1,33 +0,0 @@
-<!-- Node backend verification is ENABLED for this project. -->
-
-## Backend Node Mode (when `backend.node.verifyPatterns` matches an edited file)
-
-> **Precondition: the backend must actually be Node.js.** If you see `pom.xml`, `build.gradle`, `requirements.txt`, `pyproject.toml`, `go.mod`, `Cargo.toml`, etc., this section does NOT apply — `ndt_*` tools won't connect to non-Node processes. Just do browser verification.
-
-If the project has node backend verification enabled (`ironbee enable-backend node` once at setup, by an operator who confirmed the backend is Node.js) and your edits touch matching paths (e.g. `server/**`, `pages/api/**`), the Stop hook also enforces a Node cycle. The same `verification-start` covers both cycles; the same verdict file carries fields for both.
-
-### Steps (additive to the browser flow above)
-1. **Identify the running Node process** — note its PID, container name (`docker compose ps`), or inspector port.
-2. **Connect**: `mcp__node-devtools__ndt_debug_connect` with one of `pid` / `processName` / `containerId` / `containerName` / `inspectorPort` / `wsUrl`. Inspector is auto-activated via SIGUSR1 if needed.
-3. **Pick an evidence path** for each changed code path:
-   - **Probe path** (proves the code path executed): `mcp__node-devtools__ndt_debug_put-tracepoint` (or `put-logpoint` / `put-exceptionpoint`) at the changed code, exercise the path (e.g. trigger the API call from the browser), then `mcp__node-devtools__ndt_debug_get-probe-snapshots`. At least one probe must come back with `triggered: true`.
-   - **Log path** (proves no errors): exercise the path, then `mcp__node-devtools__ndt_debug_get-logs` with the error level filter. `backend_node_log_errors` must be empty for `status: pass`.
-4. **Disconnect** (optional): `mcp__node-devtools__ndt_debug_disconnect`.
-5. **Submit verdict** including `backend_node_*` fields. If browser cycle is also active, include browser fields in the SAME verdict — do not submit two verdicts.
-
-### Verdict (node-cycle fields)
-```json
-{
-  "session_id": "...",
-  "status": "pass",
-  "checks": ["POST /api/orders returned 201", "tracepoint at handler.ts:42 fired once"],
-  "backend_node_processes_connected": ["pid:12345 (next-server)"],
-  "backend_node_probes_set": [
-    { "type": "tracepoint", "location": "src/api/orders.ts:42", "triggered": true }
-  ],
-  "backend_node_probe_snapshots_collected": 1,
-  "backend_node_log_errors": []
-}
-```
-
-For a multi-cycle pass, both browser and node criteria must hold — claiming `pass` without one cycle's evidence will be overridden to fail by the gate.

package/dist/clients/cursor/fragments/command-verify.node.md

@@ -1,33 +0,0 @@
-<!-- Node backend verification is ENABLED for this project. -->
-
-## Backend Node Mode (when `backend.node.verifyPatterns` matches an edited file)
-
-> **Precondition: the backend must actually be Node.js.** If you see `pom.xml`, `build.gradle`, `requirements.txt`, `pyproject.toml`, `go.mod`, `Cargo.toml`, etc., this section does NOT apply — `MCP:ndt_*` tools won't connect to non-Node processes. Just do browser verification.
-
-If the project has node backend verification enabled (`ironbee enable-backend node` once at setup, by an operator who confirmed the backend is Node.js) and your edits touch matching paths (e.g. `server/**`, `pages/api/**`), the stop hook also enforces a Node cycle. The same `verification-start` covers both cycles; the same verdict file carries fields for both.
-
-### Steps (additive to the browser flow above)
-1. **Identify the running Node process** — note its PID, container name (`docker compose ps`), or inspector port.
-2. **Connect**: `MCP:ndt_debug_connect` with one of `pid` / `processName` / `containerId` / `containerName` / `inspectorPort` / `wsUrl`. Inspector is auto-activated via SIGUSR1 if needed.
-3. **Pick an evidence path** for each changed code path:
-   - **Probe path** (proves the code path executed): `MCP:ndt_debug_put-tracepoint` (or `put-logpoint` / `put-exceptionpoint`) at the changed code, exercise the path (e.g. trigger the API call from the browser), then `MCP:ndt_debug_get-probe-snapshots`. At least one probe must come back with `triggered: true`.
-   - **Log path** (proves no errors): exercise the path, then `MCP:ndt_debug_get-logs` with the error level filter. `backend_node_log_errors` must be empty for `status: pass`.
-4. **Disconnect** (optional): `MCP:ndt_debug_disconnect`.
-5. **Submit verdict** including `backend_node_*` fields. If browser cycle is also active, include browser fields in the SAME verdict — do not submit two verdicts.
-
-### Verdict (node-cycle fields)
-```json
-{
-  "session_id": "...",
-  "status": "pass",
-  "checks": ["POST /api/orders returned 201", "tracepoint at handler.ts:42 fired once"],
-  "backend_node_processes_connected": ["pid:12345 (next-server)"],
-  "backend_node_probes_set": [
-    { "type": "tracepoint", "location": "src/api/orders.ts:42", "triggered": true }
-  ],
-  "backend_node_probe_snapshots_collected": 1,
-  "backend_node_log_errors": []
-}
-```
-
-For a multi-cycle pass, both browser and node criteria must hold — claiming `pass` without one cycle's evidence will be overridden to fail by the gate.

package/dist/commands/backend-toggle.d.ts

@@ -1,56 +0,0 @@
-/**
- * Shared helpers for `enable-backend <runtime>` / `disable-backend <runtime>`.
- *
- * Per design §10 — opt-in activation for backend verification per runtime.
- *
- *   - `applyEnableBackend(runtime, projectDir)` writes opinionated default
- *     `verifyPatterns` to the project config under `backend.<runtime>`.
- *     Refuses if patterns are already populated. Other fields
- *     (`alwaysRequired`, `evidencePaths`, `additionalVerifyPatterns`) are
- *     not written — they merge in from defaults at config-load time.
- *
- *   - `applyDisableBackend(runtime, projectDir)` resets `verifyPatterns`
- *     to `[]` for the runtime, leaving customizations of other fields
- *     intact so a later re-enable restores them. Idempotent.
- *
- * Both throw when `<runtime>` isn't in the registered runtime set
- * (today: just `node`); callers handle the error and exit.
- */
-import { ConfigTarget } from "../lib/config";
-export declare function knownRuntimes(): string[];
-export declare function assertKnownRuntime(runtime: string): void;
-/**
- * Enable a backend runtime: write default `verifyPatterns` + splice the
- * runtime fragment into installed skill/rule/command md files.
- *
- * No-op + warning when patterns are already populated **in the targeted
- * layer** (the user must `disable-backend` first to reset, since we don't
- * want to clobber their custom additions). Higher-priority layers' patterns
- * are not consulted by this check — they ride along through `loadConfig`
- * at runtime, but they don't shadow our writes the way they do for boolean
- * `verification.enable` flips.
- *
- * `target` selects which config layer to write:
- *   - `"project"` (default) — committed `<project>/.ironbee/config.json`.
- *   - `"global"`  — `~/.ironbee/config.json`.
- *   - `"local"`   — gitignored `<project>/.ironbee/config.local.json`.
- *
- * `clientName`: optional filter for which clients' md files to update.
- * Same semantics as `applyVerificationToggle` — `"all"` / `<name>` /
- * undefined (default: every registered client; per-file existsSync gate
- * skips ones without installed artifacts).
- */
-export declare function applyEnableBackend(runtime: string, projectDir: string, target: ConfigTarget, clientName?: string): void;
-/**
- * Disable a backend runtime: reset `verifyPatterns` to `[]` in the
- * targeted layer and reset the runtime fragment in installed
- * skill/rule/command md files.
- *
- * Customizations of `alwaysRequired`, `evidencePaths`, and
- * `additionalVerifyPatterns` are preserved (we only touch `verifyPatterns`).
- * Idempotent — no-op when the targeted layer has no patterns to clear.
- *
- * `target` / `clientName` semantics match `applyEnableBackend`.
- */
-export declare function applyDisableBackend(runtime: string, projectDir: string, target: ConfigTarget, clientName?: string): void;
-//# sourceMappingURL=backend-toggle.d.ts.map

package/dist/commands/backend-toggle.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"backend-toggle.d.ts","sourceRoot":"","sources":["../../src/commands/backend-toggle.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAQH,OAAO,EAAmB,YAAY,EAA0C,MAAM,eAAe,CAAC;AAyCtG,wBAAgB,aAAa,IAAI,MAAM,EAAE,CAWxC;AAED,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAKxD;AAqCD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,kBAAkB,CAC9B,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,YAAY,EACpB,UAAU,CAAC,EAAE,MAAM,GACpB,IAAI,CAgDN;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,mBAAmB,CAC/B,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,YAAY,EACpB,UAAU,CAAC,EAAE,MAAM,GACpB,IAAI,CAwBN"}