@jevitate/cli 0.1.0 → 0.3.0

package/dist/host-health-run.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-health-run.js","sourceRoot":"","sources":["../src/host-health-run.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,0BAA0B,EAAE,MAAM,mBAAmB,CAAC;AAElF,OAAO,EAAE,sBAAsB,EAAyB,MAAM,sBAAsB,CAAC;AACrF,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAEzC,wFAAwF;AACxF,MAAM,SAAS,GAAG,IAAI,OAAO,EAA6B,CAAC;AAE3D;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,QAA4B;IAChE,MAAM,MAAM,GAAG,CAAC,QAAQ,IAAI,IAAI,iBAAiB,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;IAC7D,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;IACnC,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;IACtB,OAAO,MAAM,CAAC;AAChB,CAAC;AAUD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,MAAyB,EACzB,OAAU,EACV,OAAyD,EAAE,EAC3D,WAA6B,sBAAsB,EAAE;IAErD,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;IACtB,kGAAkG;IAClG,MAAM,UAAU,GAAsB,EAAE,GAAG,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;IACxH,MAAM,OAAO,GAAG,0BAA0B,CAAC,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;IACtE,OAAO;QACL,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,GAAG,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;QACtE,MAAM,EAAE,EAAE,UAAU,EAAE,mBAAmB,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAE;KAC/D,CAAC;AACJ,CAAC"}

package/dist/http-5xx-outcome.d.ts

@@ -0,0 +1,6 @@
+import type { GoalBasedOutcome, Http5xxDefect } from "@jevitate/explore";
+export declare function applyHttp5xxGoalOutcome(outcome: GoalBasedOutcome, defects: readonly Http5xxDefect[]): GoalBasedOutcome;
+/** `PUT /api/profile → 500` for each defect (first three), for a one-line `reason`. */
+export declare function describeHttp5xx(defects: readonly Http5xxDefect[]): string;
+/** The `reason` of a goal run that `applyHttp5xxGoalOutcome` turned into `defects-found`. */
+export declare function http5xxGoalReason(defects: readonly Http5xxDefect[], assertionPassed: boolean): string;

package/dist/http-5xx-outcome.js

@@ -0,0 +1,39 @@
+/**
+ * How an HTTP 5xx hard-signal defect (#208, `Http5xxOracle`) folds into a run's outcome — the same
+ * rule a `server-log` defect follows (#142):
+ *
+ *  - coverage/exploratory and feature runs count it with their own defects (a found defect wins
+ *    over a thin run's `inconclusive`, exactly like a declared-invariant defect);
+ *  - a goal run's own `GoalBasedOutcome`: `defects-found` over `succeeded` / `exhausted` /
+ *    `blocked`. A goal whose checks held but whose run hit a server error is NOT a success: the
+ *    checks' verdict stays on the result (`assertionPassed`, `checks`), and `reason` says both.
+ *    A broken run (`inconclusive` / `crashed`) and a hang keep their outcome; the defect is still
+ *    listed in `defects`, and `reason` names it.
+ */
+const BROKEN_GOAL_OUTCOMES = new Set(["inconclusive", "crashed", "hang", "intermittent"]);
+export function applyHttp5xxGoalOutcome(outcome, defects) {
+    return defects.length > 0 && !BROKEN_GOAL_OUTCOMES.has(outcome) ? "defects-found" : outcome;
+}
+/** `PUT /api/profile → 500` for each defect (first three), for a one-line `reason`. */
+export function describeHttp5xx(defects) {
+    const shown = defects.slice(0, 3).map((d) => {
+        const s = d.signals[0];
+        let path = s?.url ?? d.route;
+        try {
+            path = new URL(path).pathname;
+        }
+        catch {
+            /* keep the raw (redacted) url */
+        }
+        return `${d.method} ${path} → ${s?.status ?? "5xx"}`;
+    });
+    const more = defects.length > 3 ? ` (+${defects.length - 3} more)` : "";
+    return `${shown.join(", ")}${more}`;
+}
+/** The `reason` of a goal run that `applyHttp5xxGoalOutcome` turned into `defects-found`. */
+export function http5xxGoalReason(defects, assertionPassed) {
+    const n = defects.length;
+    const found = `${n} HTTP 5xx defect${n === 1 ? "" : "s"} found: ${describeHttp5xx(defects)}`;
+    return assertionPassed ? `${found} — the goal's success checks held, but the app answered with a server error` : found;
+}
+//# sourceMappingURL=http-5xx-outcome.js.map

package/dist/http-5xx-outcome.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-5xx-outcome.js","sourceRoot":"","sources":["../src/http-5xx-outcome.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;GAWG;AACH,MAAM,oBAAoB,GAAkC,IAAI,GAAG,CAAC,CAAC,cAAc,EAAE,SAAS,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC;AAEzH,MAAM,UAAU,uBAAuB,CAAC,OAAyB,EAAE,OAAiC;IAClG,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,OAAO,CAAC;AAC9F,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,eAAe,CAAC,OAAiC;IAC/D,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QAC1C,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACvB,IAAI,IAAI,GAAG,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC,KAAK,CAAC;QAC7B,IAAI,CAAC;YACH,IAAI,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC;QAChC,CAAC;QAAC,MAAM,CAAC;YACP,iCAAiC;QACnC,CAAC;QACD,OAAO,GAAG,CAAC,CAAC,MAAM,IAAI,IAAI,MAAM,CAAC,EAAE,MAAM,IAAI,KAAK,EAAE,CAAC;IACvD,CAAC,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,MAAM,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;IACxE,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC;AACtC,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,iBAAiB,CAAC,OAAiC,EAAE,eAAwB;IAC3F,MAAM,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC;IACzB,MAAM,KAAK,GAAG,GAAG,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,WAAW,eAAe,CAAC,OAAO,CAAC,EAAE,CAAC;IAC7F,OAAO,eAAe,CAAC,CAAC,CAAC,GAAG,KAAK,6EAA6E,CAAC,CAAC,CAAC,KAAK,CAAC;AACzH,CAAC"}

package/dist/inbox-cli.d.ts

@@ -0,0 +1,7 @@
+import { Command } from "commander";
+import { type CliDeps } from "./cli-shared.js";
+export declare function formatInboxListHuman(data: unknown): string;
+export declare function formatInboxThreadHuman(id: string): (data: unknown) => string;
+export declare function formatInboxCommandHuman(data: unknown): string;
+export declare function formatInboxHealthHuman(data: unknown): string;
+export declare function registerInboxCommands(program: Command, deps: CliDeps): void;

package/dist/inbox-cli.js

@@ -0,0 +1,197 @@
+import { readFileSync } from "node:fs";
+import { Option } from "commander";
+import { ok, fail } from "./envelope.js";
+import { emitEnvelope } from "./cli-output.js";
+import { emitJsonOrRefusal } from "./cli-refusal.js";
+import { commandPath } from "./cli-refusal.js";
+import { FsInboxStore } from "@jevitate/inbox";
+import { resolveInboxDir } from "./cli-shared.js";
+import { currentEngineInfo } from "./engine.js";
+import { callMcpTool, mcpErrorOf, mcpToolDeps, refusalFor } from "./mcp-cli-bridge.js";
+/**
+ * `jevitate inbox …` (#254): the HITL inbox from the CLI — one command per MCP inbox tool, each calling
+ * the SAME served handler (mcp-cli-bridge.ts) over the SAME store `jevitate mcp` and `jevitate ui`
+ * use (`~/.jevitate/inbox`, or `--inbox-dir`):
+ *
+ *   list            → list_incoming     show <id>        → get_thread
+ *   command <id>    → get_command       health           → get_site_health
+ *   queue-retrieval → queue_retrieval   queue-action     → queue_action
+ *   approve <id>    → approve_action    cancel <id>      → cancel_command (both always refused)
+ *
+ * SM1: approving or cancelling is human-only, in the `jevitate ui` dashboard — `inbox approve` /
+ * `inbox cancel` refuse exactly as MCP does (E_HUMAN_APPROVAL_REQUIRED, exit 64).
+ * `inbox command` keeps get_command's burn-after-read. A human's unread input is consumed only with
+ * `--reveal`, which prints it exactly as MCP returns it; without it the command refuses
+ * (E_INBOX_INPUT_PENDING) and consumes nothing, so the input is never burned unseen.
+ */
+const INBOX_DIR_HELP = "inbox store directory (default: ~/.jevitate/inbox — the dir `jevitate mcp` and `jevitate ui` use)";
+const REDACTED = "***REDACTED***";
+function withInboxFlags(cmd) {
+    return cmd.option("--inbox-dir <path>", INBOX_DIR_HELP).option("--json", "emit a JSON envelope");
+}
+function isRecord(v) {
+    return v !== null && typeof v === "object" && !Array.isArray(v);
+}
+function ageText(sec) {
+    const s = typeof sec === "number" && Number.isFinite(sec) ? sec : 0;
+    if (s < 90)
+        return `${s}s`;
+    if (s < 5400)
+        return `${Math.round(s / 60)}m`;
+    return `${Math.round(s / 3600)}h`;
+}
+export function formatInboxListHuman(data) {
+    const items = isRecord(data) && Array.isArray(data.items) ? data.items.filter(isRecord) : [];
+    if (items.length === 0)
+        return "no pending inbox items\n";
+    const lines = items.map((i) => `${String(i.id)}  ${String(i.kind)}  ${String(i.status)}  ${ageText(i.ageSec)}  ${String(i.run)} / ${String(i.journey)} / ${String(i.step)}  (${String(i.agent)})`);
+    return `${lines.join("\n")}\nnext: jevitate inbox show <id> · approve or cancel in \`jevitate ui\`\n`;
+}
+export function formatInboxThreadHuman(id) {
+    return (data) => {
+        const thread = isRecord(data) && Array.isArray(data.thread) ? data.thread.filter(isRecord) : [];
+        if (thread.length === 0)
+            return `${id}: no messages yet\n`;
+        return `${thread.map((e) => `${String(e.at)}  ${String(e.author)}: ${String(e.text)}`).join("\n")}\n`;
+    };
+}
+export function formatInboxCommandHuman(data) {
+    if (!isRecord(data))
+        return "";
+    const lines = [`${String(data.id)}  ${String(data.kind)}  ${String(data.status)}`, `  ${String(data.run)} / ${String(data.journey)} / ${String(data.step)}: ${String(data.reason)}`];
+    if (isRecord(data.resolution))
+        lines.push(`  resolution: ${String(data.resolution.decision)} by ${String(data.resolution.by)} at ${String(data.resolution.at)}`);
+    if (data.humanInput === REDACTED)
+        lines.push("  human input: provided concurrently — consumed by this poll without --reveal; its value is not printed");
+    else if (data.humanInput !== undefined)
+        lines.push(`  human input (consumed now, burn-after-read): ${String(data.humanInput)}`);
+    else if (data.secretConsumedAt !== undefined)
+        lines.push(`  human input: already consumed at ${String(data.secretConsumedAt)}`);
+    return `${lines.join("\n")}\n`;
+}
+export function formatInboxHealthHuman(data) {
+    if (!isRecord(data))
+        return "";
+    const build = [data.version, data.commit].filter((v) => typeof v === "string").join(" ");
+    return `inbox ${data.ok === true ? "ok" : "NOT ok"}: ${String(data.pending)} pending, oldest ${ageText(data.oldestPendingAgeSec)} · build ${build}\n`;
+}
+function formatQueuedHuman(data) {
+    if (!isRecord(data))
+        return "";
+    return `queued inbox item ${String(data.id)} (${String(data.status)})\nnext: a human answers it in \`jevitate ui\`; poll with \`jevitate inbox command ${String(data.id)}\`\n`;
+}
+/** get_command's item with the input's VALUE replaced — only for a poll without --reveal that raced a human's answer. */
+function withoutSecretValue(body) {
+    if (!isRecord(body) || body.humanInput === undefined)
+        return body;
+    return { ...body, humanInput: REDACTED };
+}
+export function registerInboxCommands(program, deps) {
+    const inbox = program.command("inbox").description("the HITL inbox from the CLI — the same tools `jevitate mcp` serves (approve/cancel stay human-only in `jevitate ui`)");
+    /** Calls MCP `tool` and prints its result (or its typed error as the matching CLI refusal). */
+    const run = async (cmd, tool, args, human, fallback, project = (b) => b) => {
+        const o = cmd.opts();
+        const json = o.json === true;
+        let envelope;
+        try {
+            const { body } = await callMcpTool(mcpToolDeps(deps, { inboxDir: resolveInboxDir(deps, o.inboxDir) }), tool, args);
+            const err = mcpErrorOf(body);
+            envelope = err === undefined ? ok(project(body)) : refusalFor(cmd, "INBOX", err, fallback);
+        }
+        catch (e) {
+            envelope = fail("E_INBOX_INTERNAL", e instanceof Error ? e.message : String(e));
+        }
+        if (envelope.ok)
+            emitEnvelope(program, envelope, { json, human, command: commandPath(cmd) });
+        else
+            emitJsonOrRefusal(program, envelope);
+    };
+    withInboxFlags(inbox.command("list").description("list pending inbox items (MCP list_incoming)")).action(async function () {
+        await run(this, "list_incoming", {}, formatInboxListHuman, "cannot list the inbox");
+    });
+    withInboxFlags(inbox.command("show <id>").description("an inbox item's conversation thread — never its secret input (MCP get_thread)")).action(async function (id) {
+        await run(this, "get_thread", { id }, formatInboxThreadHuman(id), `no inbox item '${id}'`);
+    });
+    withInboxFlags(inbox
+        .command("command <id>")
+        .description("poll one inbox item as the agent does (MCP get_command): burn-after-read — unread human input needs --reveal, which consumes and prints it")).option("--reveal", "consume the human's unread input and print it, exactly as MCP get_command returns it")
+        .action(async function (id) {
+        const o = this.opts();
+        if (o.reveal !== true) {
+            // Peek without consuming: a poll that would burn unread input needs --reveal. (A bad id falls
+            // through to get_command, which refuses it exactly as MCP does.)
+            const store = new FsInboxStore(resolveInboxDir(deps, o.inboxDir), currentEngineInfo());
+            const item = await store.get(id).catch(() => null);
+            if (item?.humanInput !== undefined && item.secretConsumedAt === undefined) {
+                emitJsonOrRefusal(program, fail("E_INBOX_INPUT_PENDING", `inbox item '${id}' has unread human input; reading it consumes it (burn-after-read). Rerun with --reveal to receive it`));
+                return;
+            }
+        }
+        await run(this, "get_command", { id }, formatInboxCommandHuman, `no inbox item '${id}'`, o.reveal === true ? (b) => b : withoutSecretValue);
+    });
+    withInboxFlags(inbox.command("health").description("inbox store health: pending count, oldest pending age, build (MCP get_site_health)")).action(async function () {
+        await run(this, "get_site_health", {}, formatInboxHealthHuman, "cannot read inbox health");
+    });
+    const queueFlags = (cmd) => withInboxFlags(cmd
+        .option("--run <id>", "the run this item belongs to (required)")
+        .option("--journey <id>", "the Journey (required)")
+        .option("--step <step>", "the step it stopped at (required)")
+        .option("--reason <text>", "what the human is asked for (required)")
+        .option("--agent <name>", "who is asking (required)")
+        .option("--target-url <url>", "the page it concerns")
+        .option("--has-screenshot", "a screenshot accompanies the item")
+        .option("--findings <file>", "a JSON file holding an array of {id, title, severity: low|med|high, evidence?}"));
+    const queueArgs = (cmd) => {
+        const o = cmd.opts();
+        let findings;
+        if (o.findings !== undefined) {
+            try {
+                findings = JSON.parse(readFileSync(o.findings, "utf8"));
+            }
+            catch (e) {
+                const code = `E_${commandPath(cmd).toUpperCase().replace(/[^A-Z0-9]+/g, "_")}_INPUT`;
+                emitJsonOrRefusal(program, fail(code, `cannot read --findings ${o.findings}: ${e instanceof Error ? e.message.split("\n")[0] : String(e)}`));
+                return undefined;
+            }
+        }
+        // Only what was given: the facade validates (required fields, finding shape) — never re-decided here.
+        return {
+            ...(o.run === undefined ? {} : { run: o.run }),
+            ...(o.journey === undefined ? {} : { journey: o.journey }),
+            ...(o.step === undefined ? {} : { step: o.step }),
+            ...(o.reason === undefined ? {} : { reason: o.reason }),
+            ...(o.agent === undefined ? {} : { agent: o.agent }),
+            ...(o.targetUrl === undefined ? {} : { targetUrl: o.targetUrl }),
+            ...(o.hasScreenshot === true ? { hasScreenshot: true } : {}),
+            ...(findings === undefined ? {} : { findings }),
+            ...(o.kind === undefined ? {} : { kind: o.kind }),
+        };
+    };
+    queueFlags(inbox.command("queue-retrieval").description("ask a human to provide something back to the agent — a 'handback' item; only queues (MCP queue_retrieval)")).action(async function () {
+        const args = queueArgs(this);
+        if (args !== undefined)
+            await run(this, "queue_retrieval", args, formatQueuedHuman, "cannot queue the item");
+    });
+    queueFlags(inbox
+        .command("queue-action")
+        .description("ask a human for a decision — an 'approval' item by default; only queues (MCP queue_action)")
+        .addOption(new Option("--kind <kind>", "approval (default) | handback | review").choices(["approval", "handback", "review"]))).action(async function () {
+        const args = queueArgs(this);
+        if (args !== undefined)
+            await run(this, "queue_action", args, formatQueuedHuman, "cannot queue the item");
+    });
+    // SM1: human-only. Registered so the CLI names the refusal (and where to go instead) rather than
+    // pretending the capability does not exist — they call the same always-refusing MCP handlers.
+    for (const [name, tool, verb] of [
+        ["approve", "approve_action", "approve"],
+        ["cancel", "cancel_command", "cancel"],
+    ]) {
+        withInboxFlags(inbox.command(`${name} <id>`).description(`always refused (MCP ${tool}): only a human can ${verb} an inbox item, in \`jevitate ui\``)).action(async function (id) {
+            const { body } = await callMcpTool(mcpToolDeps(deps), tool, { id });
+            const err = mcpErrorOf(body) ?? { error: "human_approval_required" };
+            const refusal = refusalFor(this, "INBOX", { error: err.error, message: `${err.message ?? `${verb} is human-only`} — run \`jevitate ui\`` }, "");
+            emitJsonOrRefusal(program, refusal);
+        });
+    }
+}
+//# sourceMappingURL=inbox-cli.js.map

package/dist/inbox-cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inbox-cli.js","sourceRoot":"","sources":["../src/inbox-cli.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAW,MAAM,EAAE,MAAM,WAAW,CAAC;AAC5C,OAAO,EAAE,EAAE,EAAE,IAAI,EAAqB,MAAM,eAAe,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAgB,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAChE,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAEvF;;;;;;;;;;;;;;;GAeG;AAEH,MAAM,cAAc,GAAG,mGAAmG,CAAC;AAC3H,MAAM,QAAQ,GAAG,gBAAgB,CAAC;AAQlC,SAAS,cAAc,CAAC,GAAY;IAClC,OAAO,GAAG,CAAC,MAAM,CAAC,oBAAoB,EAAE,cAAc,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE,sBAAsB,CAAC,CAAC;AACnG,CAAC;AAED,SAAS,QAAQ,CAAC,CAAU;IAC1B,OAAO,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,OAAO,CAAC,GAAY;IAC3B,MAAM,CAAC,GAAG,OAAO,GAAG,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACpE,IAAI,CAAC,GAAG,EAAE;QAAE,OAAO,GAAG,CAAC,GAAG,CAAC;IAC3B,IAAI,CAAC,GAAG,IAAI;QAAE,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC;IAC9C,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,IAAa;IAChD,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7F,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,0BAA0B,CAAC;IAC1D,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CACrB,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAC1K,CAAC;IACF,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,2EAA2E,CAAC;AACxG,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,EAAU;IAC/C,OAAO,CAAC,IAAI,EAAE,EAAE;QACd,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAChG,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,GAAG,EAAE,qBAAqB,CAAC;QAC3D,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;IACxG,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,IAAa;IACnD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IAC/B,MAAM,KAAK,GAAG,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACrL,IAAI,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,iBAAiB,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,OAAO,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,OAAO,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IACjK,IAAI,IAAI,CAAC,UAAU,KAAK,QAAQ;QAAE,KAAK,CAAC,IAAI,CAAC,yGAAyG,CAAC,CAAC;SACnJ,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS;QAAE,KAAK,CAAC,IAAI,CAAC,kDAAkD,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;SAC3H,IAAI,IAAI,CAAC,gBAAgB,KAAK,SAAS;QAAE,KAAK,CAAC,IAAI,CAAC,sCAAsC,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC;IAChI,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,IAAa;IAClD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IAC/B,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACzF,OAAO,SAAS,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,oBAAoB,OAAO,CAAC,IAAI,CAAC,mBAAmB,CAAC,YAAY,KAAK,IAAI,CAAC;AACxJ,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAa;IACtC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IAC/B,OAAO,qBAAqB,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,sFAAsF,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC;AACjL,CAAC;AAED,yHAAyH;AACzH,SAAS,kBAAkB,CAAC,IAAa;IACvC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAClE,OAAO,EAAE,GAAG,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,OAAgB,EAAE,IAAa;IACnE,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,WAAW,CAAC,sHAAsH,CAAC,CAAC;IAE3K,+FAA+F;IAC/F,MAAM,GAAG,GAAG,KAAK,EACf,GAAY,EACZ,IAAY,EACZ,IAA6B,EAC7B,KAAgC,EAChC,QAAgB,EAChB,UAAsC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAC/B,EAAE;QACjB,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,EAAa,CAAC;QAChC,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC;QAC7B,IAAI,QAA+B,CAAC;QACpC,IAAI,CAAC;YACH,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,WAAW,CAAC,WAAW,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,eAAe,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;YACnH,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;YAC7B,QAAQ,GAAG,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;QAC7F,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,QAAQ,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAClF,CAAC;QACD,IAAI,QAAQ,CAAC,EAAE;YAAE,YAAY,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;;YACxF,iBAAiB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC5C,CAAC,CAAC;IAEF,cAAc,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,WAAW,CAAC,8CAA8C,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK;QAC5G,MAAM,GAAG,CAAC,IAAI,EAAE,eAAe,EAAE,EAAE,EAAE,oBAAoB,EAAE,uBAAuB,CAAC,CAAC;IACtF,CAAC,CAAC,CAAC;IAEH,cAAc,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,WAAW,CAAC,+EAA+E,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,WAElJ,EAAU;QAEV,MAAM,GAAG,CAAC,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,EAAE,EAAE,sBAAsB,CAAC,EAAE,CAAC,EAAE,kBAAkB,EAAE,GAAG,CAAC,CAAC;IAC7F,CAAC,CAAC,CAAC;IAEH,cAAc,CACZ,KAAK;SACF,OAAO,CAAC,cAAc,CAAC;SACvB,WAAW,CAAC,4IAA4I,CAAC,CAC7J,CAAC,MAAM,CAAC,UAAU,EAAE,sFAAsF,CAAC;SACzG,MAAM,CAAC,KAAK,WAA0B,EAAU;QACjD,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAa,CAAC;QACjC,IAAI,CAAC,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;YACtB,8FAA8F;YAC9F,iEAAiE;YACjE,MAAM,KAAK,GAAG,IAAI,YAAY,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC;YACvF,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;YACnD,IAAI,IAAI,EAAE,UAAU,KAAK,SAAS,IAAI,IAAI,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;gBAC1E,iBAAiB,CACf,OAAO,EACP,IAAI,CAAC,uBAAuB,EAAE,eAAe,EAAE,uGAAuG,CAAC,CACxJ,CAAC;gBACF,OAAO;YACT,CAAC;QACH,CAAC;QACD,MAAM,GAAG,CAAC,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,EAAE,EAAE,uBAAuB,EAAE,kBAAkB,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC;IAC9I,CAAC,CAAC,CAAC;IAEH,cAAc,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,CAAC,oFAAoF,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK;QAGpJ,MAAM,GAAG,CAAC,IAAI,EAAE,iBAAiB,EAAE,EAAE,EAAE,sBAAsB,EAAE,0BAA0B,CAAC,CAAC;IAC7F,CAAC,CAAC,CAAC;IAEH,MAAM,UAAU,GAAG,CAAC,GAAY,EAAW,EAAE,CAC3C,cAAc,CACZ,GAAG;SACA,MAAM,CAAC,YAAY,EAAE,yCAAyC,CAAC;SAC/D,MAAM,CAAC,gBAAgB,EAAE,wBAAwB,CAAC;SAClD,MAAM,CAAC,eAAe,EAAE,mCAAmC,CAAC;SAC5D,MAAM,CAAC,iBAAiB,EAAE,wCAAwC,CAAC;SACnE,MAAM,CAAC,gBAAgB,EAAE,0BAA0B,CAAC;SACpD,MAAM,CAAC,oBAAoB,EAAE,sBAAsB,CAAC;SACpD,MAAM,CAAC,kBAAkB,EAAE,mCAAmC,CAAC;SAC/D,MAAM,CAAC,mBAAmB,EAAE,gFAAgF,CAAC,CACjH,CAAC;IAEJ,MAAM,SAAS,GAAG,CAAC,GAAY,EAAuC,EAAE;QACtE,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,EAAqK,CAAC;QACxL,IAAI,QAAiB,CAAC;QACtB,IAAI,CAAC,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC7B,IAAI,CAAC;gBACH,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;YAC1D,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,MAAM,IAAI,GAAG,KAAK,WAAW,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC,QAAQ,CAAC;gBACrF,iBAAiB,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,0BAA0B,CAAC,CAAC,QAAQ,KAAK,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;gBAC7I,OAAO,SAAS,CAAC;YACnB,CAAC;QACH,CAAC;QACD,sGAAsG;QACtG,OAAO;YACL,GAAG,CAAC,CAAC,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC;YAC9C,GAAG,CAAC,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;YAC1D,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YACjD,GAAG,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;YACvD,GAAG,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;YACpD,GAAG,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC;YAChE,GAAG,CAAC,CAAC,CAAC,aAAa,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5D,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC;YAC/C,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;SAClD,CAAC;IACJ,CAAC,CAAC;IAEF,UAAU,CACR,KAAK,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,WAAW,CAAC,2GAA2G,CAAC,CAC1J,CAAC,MAAM,CAAC,KAAK;QACZ,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAI,IAAI,KAAK,SAAS;YAAE,MAAM,GAAG,CAAC,IAAI,EAAE,iBAAiB,EAAE,IAAI,EAAE,iBAAiB,EAAE,uBAAuB,CAAC,CAAC;IAC/G,CAAC,CAAC,CAAC;IAEH,UAAU,CACR,KAAK;SACF,OAAO,CAAC,cAAc,CAAC;SACvB,WAAW,CAAC,4FAA4F,CAAC;SACzG,SAAS,CAAC,IAAI,MAAM,CAAC,eAAe,EAAE,wCAAwC,CAAC,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC,CAChI,CAAC,MAAM,CAAC,KAAK;QACZ,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAI,IAAI,KAAK,SAAS;YAAE,MAAM,GAAG,CAAC,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,iBAAiB,EAAE,uBAAuB,CAAC,CAAC;IAC5G,CAAC,CAAC,CAAC;IAEH,iGAAiG;IACjG,8FAA8F;IAC9F,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI;QAC/B,CAAC,SAAS,EAAE,gBAAgB,EAAE,SAAS,CAAC;QACxC,CAAC,QAAQ,EAAE,gBAAgB,EAAE,QAAQ,CAAC;KAC9B,EAAE,CAAC;QACX,cAAc,CACZ,KAAK,CAAC,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,CAAC,WAAW,CAAC,uBAAuB,IAAI,uBAAuB,IAAI,oCAAoC,CAAC,CACtI,CAAC,MAAM,CAAC,KAAK,WAA0B,EAAU;YAChD,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,WAAW,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;YACpE,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC;YACrE,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC,OAAO,IAAI,GAAG,IAAI,gBAAgB,wBAAwB,EAAE,EAAE,EAAE,CAAC,CAAC;YAChJ,iBAAiB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACtC,CAAC,CAAC,CAAC;IACL,CAAC;AACH,CAAC"}

package/dist/index.d.ts

@@ -1,2 +1,3 @@
 export * from "./envelope.js";
 export * from "./program.js";
+export * from "./result-schema.js";

package/dist/index.js

@@ -1,3 +1,4 @@
 export * from "./envelope.js";
 export * from "./program.js";
+export * from "./result-schema.js";
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,cAAc,oBAAoB,CAAC"}

package/dist/init-cli.d.ts

@@ -0,0 +1,4 @@
+import { Command } from "commander";
+import { type CliDeps } from "./cli-shared.js";
+/** Registers `jevitate init` (API keys, skills/MCP wiring, the repo's .jevitate/). */
+export declare function registerInitCommands(program: Command, deps: CliDeps): void;

package/dist/init-cli.js

@@ -0,0 +1,156 @@
+import { envCredentialStore, FEATURE_KEYS } from "@jevitate/ai-core";
+import { loadLocalCredentials } from "./credentials-file.js";
+import { ok, fail } from "./envelope.js";
+import { initProjectDir } from "./project-dir.js";
+import { KeyCheckError, credentialInputs, enteredKeyCheck, realSecureIO } from "./ai-cli.js";
+import { keySources, realVerifyFetch, shadowWarnings, verifyFeatureKeys } from "./key-report.js";
+import { collectAllMissingKeys } from "./init-keys.js";
+import { formatInitKeysHuman } from "./cli-output.js";
+import { detectRuntimes, resolveInstallTargetPaths, installSkills } from "./init-skills.js";
+import { registerMcp, resolveMcpTargetPaths } from "./init-mcp.js";
+import { initNextSteps, environmentHint } from "./init-next-steps.js";
+import { loadManifest } from "@jevitate/skills";
+import { resolveDataDir } from "./data-dir.js";
+import { emitJson, emitCommandResult } from "./cli-shared.js";
+/** Registers `jevitate init` (API keys, skills/MCP wiring, the repo's .jevitate/). */
+export function registerInitCommands(program, deps) {
+    program
+        .command("init")
+        .description("set up jevitate: collect API keys, install skills/MCP wiring, create the repo's .jevitate/")
+        .option("--json", "emit a JSON envelope")
+        .option("--skip-keys", "skip credential collection")
+        .option("--replace-keys", "prompt (masked) for a new value of every key, even one already stored, and store it")
+        .option("--no-verify", "skip the live auth check of each key (offline / CI): report presence and source only")
+        .option("--skip-skills", "skip skill installation")
+        .option("--skip-mcp", "skip registering the jevitate MCP server in detected harnesses")
+        .option("--targets <ids>", "comma-separated runtime ids to force-install to, overriding detection")
+        .option("--force", "overwrite a user-modified installed skill file/block or MCP config entry")
+        .option("--dry-run", "report planned skill-install/mcp-register actions without writing")
+        .option("--skip-project", "skip creating the repo's .jevitate/ (journeys, regressions, baselines, logs)")
+        .action(async function () {
+        const { json, skipKeys, skipSkills, skipMcp, skipProject, targets, force, dryRun, replaceKeys, verify } = this.opts();
+        try {
+            const data = { initialized: true };
+            // The repo's own .jevitate/ (0.2.0 layout): Journeys, regressions and baselines live with the
+            // app's code; logs stay local. Secrets and machine state stay in ~/.jevitate.
+            if (!skipProject)
+                data.project = initProjectDir(deps.init?.detection?.cwd?.() ?? process.cwd(), { ...(dryRun === true ? { dryRun: true } : {}) });
+            if (!skipKeys) {
+                // SECURITY: reuses the existing, already-guardrailed credential
+                // collection. The report holds only key NAMES (required/collected/missing),
+                // never a value — nothing here reads, echoes, logs, or returns a key.
+                const store = envCredentialStore(deps.ai?.env ?? process.env, deps.ai?.localConfig ?? loadLocalCredentials());
+                const io = deps.ai?.secureIO ?? realSecureIO();
+                // #230: never prompt a non-interactive stdin (no TTY — how coding agents and CI run
+                // `jevitate init`) — it would hang reading a 'line' event that never comes, or read EOF
+                // silently. Report what's still missing instead; the rest of init still completes.
+                const interactive = deps.init?.isInteractive?.() ?? process.stdin.isTTY === true;
+                if (replaceKeys === true && !interactive) {
+                    throw new Error("--replace-keys needs an interactive terminal (stdin is not a TTY) — run `jevitate init --replace-keys` in a terminal");
+                }
+                const fetchFn = deps.ai?.verifyFetch ?? realVerifyFetch;
+                // #291: each entered key is checked with its provider BEFORE it is stored.
+                const gate = enteredKeyCheck(fetchFn);
+                const keys = await collectAllMissingKeys(store, io, {
+                    interactive,
+                    ...(replaceKeys === true ? { replace: true } : {}),
+                    ...(verify ? { check: gate.check } : {}),
+                });
+                // #268: name every key's source; #291: verify every key the features use (env wins).
+                const { env, localConfig } = credentialInputs(deps.ai);
+                const nowLocal = { ...localConfig, ...Object.fromEntries(gate.entered) };
+                const nowStore = envCredentialStore(env, nowLocal);
+                for (const feature of Object.keys(keys)) {
+                    const r = keys[feature];
+                    const sources = keySources(feature, env, verify ? nowLocal : { ...localConfig, ...Object.fromEntries(r.collected.map((k) => [k, "set"])) });
+                    const warnings = shadowWarnings(r.collected, sources);
+                    r.sources = sources;
+                    if (verify)
+                        r.verification = await verifyFeatureKeys(feature, nowStore, fetchFn, gate.verdicts);
+                    if (warnings.length > 0)
+                        r.warnings = warnings;
+                }
+                data.keys = keys;
+            }
+            // Explicit `--targets` overrides detection entirely (the user takes
+            // full control); otherwise `detectRuntimes` decides, always including
+            // the always-on generic fallback. Shared by the skill install and the
+            // MCP registration so a single selection drives both.
+            const runtimes = targets
+                ? targets.split(",").map((t) => t.trim()).filter((t) => t.length > 0)
+                : detectRuntimes(deps.init?.detection);
+            if (!skipSkills) {
+                const paths = resolveInstallTargetPaths(deps.init?.detection);
+                const statePath = deps.init?.statePath ?? resolveDataDir(["skills-install-state.json"]);
+                const skills = loadManifest();
+                data.skills = await installSkills(runtimes, skills, paths, statePath, { force, dryRun });
+            }
+            if (!skipMcp) {
+                // Register the `jevitate mcp` server for each detected/selected
+                // harness, with the SAME never-clobber safety as skills: a user's
+                // conflicting or unparseable config is never overwritten without
+                // --force; each declined target reports a printable instruction
+                // instead (honest, never corrupts a config). `generic` has no MCP
+                // convention and is skipped inside `registerMcp`.
+                const mcpPaths = resolveMcpTargetPaths(deps.init?.detection);
+                data.mcp = await registerMcp(runtimes, mcpPaths, { force, dryRun });
+            }
+            // #230: exit 0 even when keys are still missing (the non-interactive path above) —
+            // init's other work (project dir, skills, MCP registration) genuinely succeeded, and a
+            // missing key is expected/normal for a fresh non-interactive install (CI, a coding
+            // agent) that configures keys separately. The warning lives in `data.keys[*].missing`
+            // (both here and in the --json envelope) rather than in the exit code, so a script that
+            // only checks the exit code still sees init as having done its job; a caller that cares
+            // about keys reads the summary/envelope, same as `jevitate ai status`.
+            // The "try this next" block, tailored to what is set up now (keys, MCP, the repo's
+            // environments). Additive in --json (`data.nextSteps`); keys are checked by NAME only.
+            const keysReady = data.keys !== undefined
+                ? Object.values(data.keys).every((r) => (r.missing ?? []).length === 0 && !(r.verification ?? []).some((v) => v.status === "invalid"))
+                : (() => {
+                    const store = envCredentialStore(deps.ai?.env ?? process.env, deps.ai?.localConfig ?? loadLocalCredentials());
+                    return Object.keys(FEATURE_KEYS).every((f) => FEATURE_KEYS[f].every((k) => store.detect(k)));
+                })();
+            const projectDir = data.project?.dir ?? null;
+            data.nextSteps = initNextSteps({
+                keysReady,
+                ...environmentHint(projectDir),
+                ...(data.mcp !== undefined ? { mcp: data.mcp } : {}),
+                skills: data.skills !== undefined,
+                dryRun: dryRun === true,
+            });
+            const envelope = ok(data);
+            if (json) {
+                emitJson(program, envelope);
+            }
+            else {
+                const out = program.configureOutput().writeOut;
+                // #213: --dry-run writes nothing — say "would" so the summary matches the disk.
+                out?.(dryRun === true ? "jevitate: dry run — nothing was written\n" : "jevitate initialized\n");
+                // #210/#230: per feature, "ready — n/n configured", or (no TTY on stdin) "not
+                // configured — set X or run `jevitate ai setup <feature>`" — never a raw `collected:
+                // []` that reads as "missing" when every key was already set.
+                if (data.keys)
+                    out?.(`${formatInitKeysHuman(data.keys)}\n`);
+                if (data.skills)
+                    out?.(`skills: ${data.skills.length} target/skill pairs ${dryRun === true ? "would be processed" : "processed"}\n`);
+                if (data.mcp)
+                    out?.(`mcp: ${data.mcp.length} harness config(s) ${dryRun === true ? "would be processed" : "processed"}\n`);
+                const project = data.project;
+                if (project !== undefined) {
+                    out?.(project.dir === null
+                        ? `project: ${project.reason ?? "none"}\n`
+                        : `project: ${project.dir} (${project.created.length} ${dryRun === true ? "would create" : "created"})\n`);
+                }
+                out?.(`next steps${data.project?.dir == null ? "" : " (app URLs: .jevitate/environments.json)"}:\n`);
+                for (const line of data.nextSteps)
+                    out?.(`  ${line}\n`);
+                process.exitCode = 0;
+            }
+        }
+        catch (err) {
+            const code = err instanceof KeyCheckError ? err.code : "E_INIT";
+            emitCommandResult(program, fail(code, String(err instanceof Error ? err.message : err)), { json: json === true, command: "init" });
+        }
+    });
+}
+//# sourceMappingURL=init-cli.js.map

package/dist/init-cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"init-cli.js","sourceRoot":"","sources":["../src/init-cli.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAAE,YAAY,EAAgB,MAAM,mBAAmB,CAAC;AACnF,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,cAAc,EAA0B,MAAM,kBAAkB,CAAC;AAC1E,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC7F,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACjG,OAAO,EAAE,qBAAqB,EAA4B,MAAM,gBAAgB,CAAC;AACjF,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,EAAE,cAAc,EAAE,yBAAyB,EAAE,aAAa,EAAkB,MAAM,kBAAkB,CAAC;AAC5G,OAAO,EAAE,WAAW,EAAE,qBAAqB,EAAyB,MAAM,eAAe,CAAC;AAC1F,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACtE,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAgB,QAAQ,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAE5E,sFAAsF;AACtF,MAAM,UAAU,oBAAoB,CAAC,OAAgB,EAAE,IAAa;IAClE,OAAO;SACJ,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,4FAA4F,CAAC;SACzG,MAAM,CAAC,QAAQ,EAAE,sBAAsB,CAAC;SACxC,MAAM,CAAC,aAAa,EAAE,4BAA4B,CAAC;SACnD,MAAM,CAAC,gBAAgB,EAAE,qFAAqF,CAAC;SAC/G,MAAM,CAAC,aAAa,EAAE,sFAAsF,CAAC;SAC7G,MAAM,CAAC,eAAe,EAAE,yBAAyB,CAAC;SAClD,MAAM,CAAC,YAAY,EAAE,gEAAgE,CAAC;SACtF,MAAM,CAAC,iBAAiB,EAAE,uEAAuE,CAAC;SAClG,MAAM,CAAC,SAAS,EAAE,0EAA0E,CAAC;SAC7F,MAAM,CAAC,WAAW,EAAE,mEAAmE,CAAC;SACxF,MAAM,CAAC,gBAAgB,EAAE,8EAA8E,CAAC;SACxG,MAAM,CAAC,KAAK;QACX,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,EAW/G,CAAC;QACL,IAAI,CAAC;YACH,MAAM,IAAI,GAA4B,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;YAC5D,8FAA8F;YAC9F,8EAA8E;YAC9E,IAAI,CAAC,WAAW;gBAAE,IAAI,CAAC,OAAO,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,IAAI,OAAO,CAAC,GAAG,EAAE,EAAE,EAAE,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;YAClJ,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,gEAAgE;gBAChE,4EAA4E;gBAC5E,sEAAsE;gBACtE,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,EAAE,EAAE,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,WAAW,IAAI,oBAAoB,EAAE,CAAC,CAAC;gBAC9G,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,EAAE,QAAQ,IAAI,YAAY,EAAE,CAAC;gBAC/C,oFAAoF;gBACpF,wFAAwF;gBACxF,mFAAmF;gBACnF,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,EAAE,aAAa,EAAE,EAAE,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK,IAAI,CAAC;gBACjF,IAAI,WAAW,KAAK,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;oBACzC,MAAM,IAAI,KAAK,CAAC,sHAAsH,CAAC,CAAC;gBAC1I,CAAC;gBACD,MAAM,OAAO,GAAG,IAAI,CAAC,EAAE,EAAE,WAAW,IAAI,eAAe,CAAC;gBACxD,2EAA2E;gBAC3E,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;gBACtC,MAAM,IAAI,GAAG,MAAM,qBAAqB,CAAC,KAAK,EAAE,EAAE,EAAE;oBAClD,WAAW;oBACX,GAAG,CAAC,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAClD,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACzC,CAAC,CAAC;gBACH,qFAAqF;gBACrF,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,GAAG,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBACvD,MAAM,QAAQ,GAAG,EAAE,GAAG,WAAW,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBACzE,MAAM,QAAQ,GAAG,kBAAkB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;gBACnD,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAc,EAAE,CAAC;oBACrD,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;oBACxB,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,WAAW,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;oBAC5I,MAAM,QAAQ,GAAG,cAAc,CAAC,CAAC,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;oBACtD,CAAC,CAAC,OAAO,GAAG,OAAO,CAAC;oBACpB,IAAI,MAAM;wBAAE,CAAC,CAAC,YAAY,GAAG,MAAM,iBAAiB,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;oBAChG,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;wBAAE,CAAC,CAAC,QAAQ,GAAG,QAAQ,CAAC;gBACjD,CAAC;gBACD,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;YACnB,CAAC;YACD,oEAAoE;YACpE,sEAAsE;YACtE,sEAAsE;YACtE,sDAAsD;YACtD,MAAM,QAAQ,GAAG,OAAO;gBACtB,CAAC,CAAE,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAiB;gBACtF,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;YAEzC,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,MAAM,KAAK,GAAG,yBAAyB,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;gBAC9D,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,SAAS,IAAI,cAAc,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC;gBACxF,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;gBAC9B,IAAI,CAAC,MAAM,GAAG,MAAM,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;YAC3F,CAAC;YACD,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,gEAAgE;gBAChE,kEAAkE;gBAClE,iEAAiE;gBACjE,gEAAgE;gBAChE,kEAAkE;gBAClE,kDAAkD;gBAClD,MAAM,QAAQ,GAAG,qBAAqB,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;gBAC7D,IAAI,CAAC,GAAG,GAAG,MAAM,WAAW,CAAC,QAAQ,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;YACtE,CAAC;YACD,mFAAmF;YACnF,uFAAuF;YACvF,mFAAmF;YACnF,sFAAsF;YACtF,wFAAwF;YACxF,wFAAwF;YACxF,uEAAuE;YACvE,mFAAmF;YACnF,uFAAuF;YACvF,MAAM,SAAS,GACb,IAAI,CAAC,IAAI,KAAK,SAAS;gBACrB,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAA2B,CAAC,CAAC,KAAK,CACnD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CACrG;gBACH,CAAC,CAAC,CAAC,GAAG,EAAE;oBACJ,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,EAAE,EAAE,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,WAAW,IAAI,oBAAoB,EAAE,CAAC,CAAC;oBAC9G,OAAQ,MAAM,CAAC,IAAI,CAAC,YAAY,CAAe,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC9G,CAAC,CAAC,EAAE,CAAC;YACX,MAAM,UAAU,GAAI,IAAI,CAAC,OAAyC,EAAE,GAAG,IAAI,IAAI,CAAC;YAChF,IAAI,CAAC,SAAS,GAAG,aAAa,CAAC;gBAC7B,SAAS;gBACT,GAAG,eAAe,CAAC,UAAU,CAAC;gBAC9B,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAyB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1E,MAAM,EAAE,IAAI,CAAC,MAAM,KAAK,SAAS;gBACjC,MAAM,EAAE,MAAM,KAAK,IAAI;aACxB,CAAC,CAAC;YACH,MAAM,QAAQ,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;YAC1B,IAAI,IAAI,EAAE,CAAC;gBACT,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;YAC9B,CAAC;iBAAM,CAAC;gBACN,MAAM,GAAG,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC,QAAQ,CAAC;gBAC/C,gFAAgF;gBAChF,GAAG,EAAE,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,2CAA2C,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC;gBAChG,8EAA8E;gBAC9E,qFAAqF;gBACrF,8DAA8D;gBAC9D,IAAI,IAAI,CAAC,IAAI;oBAAE,GAAG,EAAE,CAAC,GAAG,mBAAmB,CAAC,IAAI,CAAC,IAA2B,CAAC,IAAI,CAAC,CAAC;gBACnF,IAAI,IAAI,CAAC,MAAM;oBAAE,GAAG,EAAE,CAAC,WAAY,IAAI,CAAC,MAAoB,CAAC,MAAM,uBAAuB,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC;gBACpJ,IAAI,IAAI,CAAC,GAAG;oBAAE,GAAG,EAAE,CAAC,QAAS,IAAI,CAAC,GAAiB,CAAC,MAAM,sBAAsB,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC;gBAC1I,MAAM,OAAO,GAAG,IAAI,CAAC,OAAwC,CAAC;gBAC9D,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;oBAC1B,GAAG,EAAE,CACH,OAAO,CAAC,GAAG,KAAK,IAAI;wBAClB,CAAC,CAAC,YAAY,OAAO,CAAC,MAAM,IAAI,MAAM,IAAI;wBAC1C,CAAC,CAAC,YAAY,OAAO,CAAC,GAAG,KAAK,OAAO,CAAC,OAAO,CAAC,MAAM,IAAI,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,KAAK,CAC5G,CAAC;gBACJ,CAAC;gBACD,GAAG,EAAE,CAAC,aAAc,IAAI,CAAC,OAAyC,EAAE,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,0CAA0C,KAAK,CAAC,CAAC;gBACxI,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,SAAqB;oBAAE,GAAG,EAAE,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC;gBACpE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACvB,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,GAAG,GAAG,YAAY,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC;YAChE,iBAAiB,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,KAAK,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;QACrI,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/init-keys.d.ts

@@ -1,14 +1,42 @@
 import { type CredentialStore, type SecureKeyIO, type Feature, type CredentialKey } from "@jevitate/ai-core";
+import type { KeySourceReport, KeyVerificationReport } from "./key-report.js";
 export interface FeatureKeyReport {
     required: CredentialKey[];
     collected: CredentialKey[];
+    /**
+     * #230: only set on the non-interactive path — the required keys still absent after this
+     * command ran (nothing was prompted for, nothing persisted). Undefined/empty on the
+     * interactive path: `collectMissingKeys` either leaves every required key configured or
+     * throws (fail-closed), so there is nothing left to report as missing.
+     */
+    missing?: CredentialKey[];
+    /** #268: where each key comes from — names and sources only (additive). */
+    sources?: KeySourceReport[];
+    /** #291: the live auth check per key (additive; absent with --no-verify). */
+    verification?: KeyVerificationReport[];
+    /** #268: an env var that overrides a key just stored. */
+    warnings?: string[];
 }
 export type KeyCollectionReport = Record<Feature, FeatureKeyReport>;
+export interface CollectAllMissingKeysOptions {
+    /**
+     * #230: false when stdin is not a TTY (no key env vars, piped/redirected input — how coding
+     * agents and CI run `jevitate init`). `SecureKeyIO.promptSecret` reads a 'line' event that a
+     * closed/non-interactive stdin never emits, so prompting there would hang until the process is
+     * killed, or (observed) read EOF and exit 0 with nothing collected and no summary. Default true
+     * (a real terminal): unchanged prompting behavior.
+     */
+    interactive?: boolean;
+    /** #268 (`--replace-keys`): prompt for every key, even one already stored, and store the new value. */
+    replace?: boolean;
+    /** #291: checks each entered value before it is persisted (throws to refuse it). */
+    check?: (key: CredentialKey, value: string) => Promise<void>;
+}
 /**
  * Thin orchestration over the existing, already-guardrailed `collectMissingKeys`
  * — collects every feature's missing keys in turn (never in parallel:
  * `SecureKeyIO.promptSecret` is a single shared stdin, so concurrent prompts
  * would interleave). Adds NO new key-handling logic: it never reads, echoes,
- * logs, or returns a key value — only the key NAMES (required/collected).
+ * logs, or returns a key value — only the key NAMES (required/collected/missing).
  */
-export declare function collectAllMissingKeys(store: CredentialStore, io: SecureKeyIO): Promise<KeyCollectionReport>;
+export declare function collectAllMissingKeys(store: CredentialStore, io: SecureKeyIO, opts?: CollectAllMissingKeysOptions): Promise<KeyCollectionReport>;

package/dist/init-keys.js

@@ -1,17 +1,31 @@
-import { collectMissingKeys, FEATURE_KEYS, } from "@jevitate/ai-core";
+import { collectKeys, FEATURE_KEYS, } from "@jevitate/ai-core";
 const FEATURES = ["generation", "judgment"];
 /**
  * Thin orchestration over the existing, already-guardrailed `collectMissingKeys`
  * — collects every feature's missing keys in turn (never in parallel:
  * `SecureKeyIO.promptSecret` is a single shared stdin, so concurrent prompts
  * would interleave). Adds NO new key-handling logic: it never reads, echoes,
- * logs, or returns a key value — only the key NAMES (required/collected).
+ * logs, or returns a key value — only the key NAMES (required/collected/missing).
  */
-export async function collectAllMissingKeys(store, io) {
+export async function collectAllMissingKeys(store, io, opts = {}) {
     const report = {};
+    const interactive = opts.interactive ?? true;
     for (const feature of FEATURES) {
-        const collected = await collectMissingKeys(feature, store, io);
-        report[feature] = { required: [...FEATURE_KEYS[feature]], collected };
+        const required = [...FEATURE_KEYS[feature]];
+        if (interactive) {
+            const collected = await collectKeys(feature, store, io, {
+                ...(opts.replace === true ? { replace: true } : {}),
+                ...(opts.check === undefined ? {} : { check: opts.check }),
+            });
+            report[feature] = { required, collected };
+        }
+        else {
+            // Never prompt: report what's still missing instead of hanging on a closed stdin. `missing`
+            // is omitted (not an empty array) when nothing is missing, so a fully-configured non-TTY
+            // run reads identically to the interactive path's `{ required, collected: [] }`.
+            const missing = required.filter((k) => !store.detect(k));
+            report[feature] = { required, collected: [], ...(missing.length > 0 ? { missing } : {}) };
+        }
     }
     return report;
 }

package/dist/init-keys.js.map

@@ -1 +1 @@
-{"version":3,"file":"init-keys.js","sourceRoot":"","sources":["../src/init-keys.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kBAAkB,EAClB,YAAY,GAKb,MAAM,mBAAmB,CAAC;AAQ3B,MAAM,QAAQ,GAAc,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;AAEvD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,KAAsB,EACtB,EAAe;IAEf,MAAM,MAAM,GAAG,EAAyB,CAAC;IACzC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,SAAS,GAAG,MAAM,kBAAkB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QAC/D,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,QAAQ,EAAE,CAAC,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC;IACxE,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}
+{"version":3,"file":"init-keys.js","sourceRoot":"","sources":["../src/init-keys.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,WAAW,EACX,YAAY,GAKb,MAAM,mBAAmB,CAAC;AAsB3B,MAAM,QAAQ,GAAc,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;AAiBvD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,KAAsB,EACtB,EAAe,EACf,OAAqC,EAAE;IAEvC,MAAM,MAAM,GAAG,EAAyB,CAAC;IACzC,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC;IAC7C,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,QAAQ,GAAG,CAAC,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;QAC5C,IAAI,WAAW,EAAE,CAAC;YAChB,MAAM,SAAS,GAAG,MAAM,WAAW,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE;gBACtD,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnD,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;aAC3D,CAAC,CAAC;YACH,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;QAC5C,CAAC;aAAM,CAAC;YACN,4FAA4F;YAC5F,yFAAyF;YACzF,iFAAiF;YACjF,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YACzD,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QAC5F,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/init-next-steps.d.ts

@@ -0,0 +1,35 @@
+import type { McpInstallReport } from "./init-mcp.js";
+/** What `jevitate init` knows after setup that changes the "try this next" block. */
+export interface InitNextStepsInput {
+    /** Both AI features (generation + judgment) have their keys configured. */
+    readonly keysReady: boolean;
+    /** The app URL to put in the commands, when the repo's environments file names a real one. */
+    readonly appUrl?: string;
+    /** A non-production environment name from `.jevitate/environments.json`, for `demo --env`. */
+    readonly env?: string;
+    /** The MCP registration report; undefined when `--skip-mcp`. */
+    readonly mcp?: readonly McpInstallReport[];
+    /** Whether skills were installed (false under `--skip-skills`). */
+    readonly skills: boolean;
+    readonly dryRun: boolean;
+}
+/**
+ * The ≤5 "try this next" lines `jevitate init` prints (and returns as `data.nextSteps`). Every
+ * command is a real one with real flags (skills-cli-drift.test.ts checks them against the CLI);
+ * placeholders are `<…>` so nothing reads as a value we guessed. Tailored, never silent:
+ *  - keys ready → a goal run, an authored Journey and a demo (all need the model gateway);
+ *  - keys missing → the key-free adversarial run (`--fake-ai`: misuse is planned in code, the
+ *    findings are hard signals), a human-recorded flow, and how to add the keys;
+ *  - the agent line says whether the MCP server was registered, declined (conflict), or skipped.
+ */
+export declare function initNextSteps(input: InitNextStepsInput): string[];
+/**
+ * Reads `.jevitate/environments.json` for the next-steps block: the first non-production
+ * environment's name, and its `baseUrl` only when it is not the untouched scaffold's (so the block
+ * never presents the example `http://localhost:3000` as "your app"). Unreadable → nothing: the
+ * block keeps its `<app-url>`/`<env>` placeholders.
+ */
+export declare function environmentHint(projectDir: string | null): {
+    appUrl?: string;
+    env?: string;
+};