@jevitate/cli 0.1.0

package/dist/mcp-api.js

@@ -0,0 +1,359 @@
+import { Server } from "@modelcontextprotocol/sdk/server/index.js";
+import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { CallToolRequestSchema, ListToolsRequestSchema } from "@modelcontextprotocol/sdk/types.js";
+import { ALLOWED_TOOLS, FORBIDDEN_TOOLS, findCapabilities, queueExploration as facadeQueueExploration, aiGenerateText as facadeAiGenerateText, facadeListIncoming, facadeGetCommand, facadeGetThread, facadeQueueAction, facadeQueueRetrieval, facadeApproveAction, facadeCancelCommand, facadeGetSiteHealth, } from "@jevitate/mcp-facade";
+import { FsJourneyStore, JourneyRegistry } from "@jevitate/journey";
+import { FsMissionTargetStore, MissionTargetRegistry, FsMissionQueueStore, } from "@jevitate/missions";
+import { FsInboxStore } from "@jevitate/inbox";
+import { envCredentialStore, } from "@jevitate/ai-core";
+import { safeRunPolicy } from "@jevitate/domain";
+import { runJourneyProgrammatically } from "./journey-api.js";
+const ALLOWED = new Set(ALLOWED_TOOLS);
+const FORBIDDEN = new Set(FORBIDDEN_TOOLS);
+/**
+ * Defense-in-depth guard: a tool descriptor may be built ONLY for a name that
+ * is in `ALLOWED_TOOLS` and NOT in `FORBIDDEN_TOOLS`. A violation is a build
+ * error, never a silently-served or silently-dropped tool.
+ */
+function assertAllowlisted(name) {
+    if (FORBIDDEN.has(name)) {
+        throw new Error(`refusing to serve forbidden tool '${name}'`);
+    }
+    if (!ALLOWED.has(name)) {
+        throw new Error(`refusing to serve non-allowlisted tool '${name}'`);
+    }
+}
+function jsonResult(value) {
+    return { content: [{ type: "text", text: JSON.stringify(value) }] };
+}
+function errorResult(value) {
+    return { content: [{ type: "text", text: JSON.stringify(value) }], isError: true };
+}
+/** Strips any known credential VALUE from a diagnostic string so a provider
+ *  SDK error (which can echo request internals verbatim) never surfaces a key
+ *  through the MCP result. The message returned to the caller is generic and
+ *  key-free; this is belt-and-braces on top of the gateway's outbound guard. */
+function redactCredentials(message, store) {
+    let out = message;
+    for (const key of ["OPENROUTER_API_KEY", "TYPESAFE_API_KEY"]) {
+        const value = store.read(key);
+        if (value)
+            out = out.split(value).join("***REDACTED***");
+    }
+    return out;
+}
+/**
+ * Builds the served tool descriptors — EXACTLY one per `ALLOWED_TOOLS` entry.
+ * Wired to their real backing services: `find_capabilities` + `run_journey`
+ * (journey store), `queue_exploration` (`@jevitate/missions` enqueue over the
+ * promoted `MissionTargetRegistry`), and `ai_generate_text` (`@jevitate/ai-core`
+ * generation gateway behind a fail-closed credential preflight). The remaining
+ * allowlisted tools — the inbox/command-queue surface — are registered (so the
+ * served set equals `ALLOWED_TOOLS`) but respond with a typed `not_implemented`
+ * error, since no facade-level backing service exists for them in this slice.
+ * No handler ever fabricates a success.
+ */
+export function buildMcpTools(deps) {
+    const findCaps = deps.findCapabilities ??
+        ((query) => findCapabilities(new JourneyRegistry(new FsJourneyStore(deps.journeysDir)), query));
+    const runJourney = deps.runJourney ??
+        ((id, params) => runJourneyProgrammatically({ dir: deps.journeysDir, id, params, policy: safeRunPolicy() }));
+    // queue_exploration: enqueue over the SAME promoted fs store `jevitate
+    // mission target` writes. The store is built lazily inside the closure so
+    // constructing the tool set never touches disk; a missing dir is a config
+    // error (a refusal), never a silent success.
+    const queueExploration = deps.queueExploration ??
+        (async (args) => {
+            if (!deps.missionTargetsDir || !deps.missionQueueDir) {
+                throw new Error("queue_exploration requires missionTargetsDir and missionQueueDir to be configured");
+            }
+            const targets = new MissionTargetRegistry(new FsMissionTargetStore(deps.missionTargetsDir));
+            const queue = new FsMissionQueueStore(deps.missionQueueDir);
+            return facadeQueueExploration(targets, queue, args);
+        });
+    // ai_generate_text: preflight-gated generation. Wired only when a gateway (or
+    // an explicit seam) is available — otherwise it stays not_implemented rather
+    // than fabricate an answer. The credential store is read ONLY inside the
+    // gateway/preflight; never here.
+    const credentialStore = deps.credentialStore ?? envCredentialStore();
+    const aiGenerateText = deps.aiGenerateText ??
+        (deps.generationGateway
+            ? (args) => facadeAiGenerateText(credentialStore, deps.generationGateway, args)
+            : undefined);
+    // The 8 inbox tools: the store is built lazily inside this closure (mirrors
+    // `queueExploration` above) so constructing the tool set never touches
+    // disk. A missing `inboxDir` is a config error (a refusal), never a silent
+    // success — `inboxHandler` below catches it (and any store-layer throw,
+    // e.g. `getForAgent`/`get`'s fail-closed throw on corrupt/tampered data)
+    // and converts it to a typed `internal` error, never lets it fabricate a
+    // success or leak an unhandled rejection out of the handler.
+    const inboxStore = () => {
+        if (!deps.inboxDir) {
+            throw new Error("inbox tools require inboxDir to be configured");
+        }
+        return new FsInboxStore(deps.inboxDir);
+    };
+    function inboxHandler(fn) {
+        return async (args) => {
+            try {
+                return jsonResult(await fn(inboxStore(), args));
+            }
+            catch (err) {
+                return errorResult({ error: "internal", message: err instanceof Error ? err.message : String(err) });
+            }
+        };
+    }
+    const idInputSchema = {
+        type: "object",
+        properties: { id: { type: "string" } },
+        required: ["id"],
+    };
+    const queueCommonProperties = {
+        run: { type: "string" },
+        journey: { type: "string" },
+        step: { type: "string" },
+        reason: { type: "string" },
+        agent: { type: "string" },
+        targetUrl: { type: "string" },
+        hasScreenshot: { type: "boolean" },
+        findings: {
+            type: "array",
+            items: {
+                type: "object",
+                properties: {
+                    id: { type: "string" },
+                    title: { type: "string" },
+                    severity: { type: "string", enum: ["low", "med", "high"] },
+                    evidence: { type: "string" },
+                },
+                required: ["id", "title", "severity"],
+            },
+        },
+    };
+    const queueCommonRequired = ["run", "journey", "step", "reason", "agent"];
+    const wired = {
+        find_capabilities: {
+            description: "Find promoted Journeys (capabilities) whose metadata matches a query.",
+            inputSchema: { type: "object", properties: { query: { type: "string" } }, required: ["query"] },
+            handler: async (args) => jsonResult(await findCaps(typeof args.query === "string" ? args.query : "")),
+        },
+        run_journey: {
+            description: "Run a PUBLISHED Journey by id with string params (fail-closed policy). Never accepts inline steps.",
+            inputSchema: {
+                type: "object",
+                properties: {
+                    id: { type: "string" },
+                    params: { type: "object", additionalProperties: { type: "string" } },
+                },
+                required: ["id"],
+            },
+            handler: async (args) => {
+                if (typeof args.id !== "string" || args.id.length === 0) {
+                    return errorResult({ error: "invalid_args", message: "run_journey requires a non-empty string 'id'" });
+                }
+                // Invariant #5: only id + params are threaded through — any inline
+                // `steps`/`recording` in the arguments is deliberately ignored.
+                const params = args.params && typeof args.params === "object" && !Array.isArray(args.params)
+                    ? args.params
+                    : {};
+                return jsonResult(await runJourney(args.id, params));
+            },
+        },
+        queue_exploration: {
+            description: "Enqueue an exploration mission against a PROMOTED target. Never runs anything — only queues. Refuses unknown/unpromoted targets and over-ceiling budgets.",
+            inputSchema: {
+                type: "object",
+                properties: {
+                    target: { type: "string" },
+                    goal: { type: "string" },
+                    feature: { type: "string" },
+                    route: { type: "string" },
+                    successAssertion: { type: "object" },
+                    strategy: { type: "string" },
+                    budget: {
+                        type: "object",
+                        properties: {
+                            maxActions: { type: "number" },
+                            maxDecisions: { type: "number" },
+                            maxCandidates: { type: "number" },
+                        },
+                    },
+                },
+                required: ["target"],
+            },
+            handler: async (args) => {
+                try {
+                    // All shape/budget/promoted-target validation is delegated to
+                    // `enqueueMission` (fail-closed). A refusal surfaces as a structured
+                    // error — NEVER a fabricated "queued" success.
+                    return jsonResult(await queueExploration(args));
+                }
+                catch (err) {
+                    return errorResult({
+                        error: "queue_exploration_refused",
+                        message: err instanceof Error ? err.message : String(err),
+                    });
+                }
+            },
+        },
+        ...(aiGenerateText
+            ? {
+                ai_generate_text: {
+                    description: "Generate a single text value for a form field via the model gateway. Credential-gated: a missing key returns a typed setup_required result; the key is NEVER sent to the model or returned.",
+                    inputSchema: {
+                        type: "object",
+                        properties: {
+                            fieldLabel: { type: "string" },
+                            goal: { type: "string" },
+                            visibleContext: { type: "string" },
+                            history: { type: "array", items: { type: "string" } },
+                        },
+                        required: ["fieldLabel", "goal", "visibleContext"],
+                    },
+                    handler: async (args) => {
+                        if (typeof args.fieldLabel !== "string" ||
+                            typeof args.goal !== "string" ||
+                            typeof args.visibleContext !== "string") {
+                            return errorResult({
+                                error: "invalid_args",
+                                message: "ai_generate_text requires string 'fieldLabel', 'goal' and 'visibleContext'",
+                            });
+                        }
+                        const history = Array.isArray(args.history) && args.history.every((h) => typeof h === "string")
+                            ? args.history
+                            : undefined;
+                        try {
+                            // The facade applies `withPreflight` — a missing credential
+                            // returns a typed `setup_required` precondition (the model is
+                            // never called), which is a legitimate result surface, not an
+                            // error, so the host can collect the key and retry.
+                            return jsonResult(await aiGenerateText({
+                                fieldLabel: args.fieldLabel,
+                                goal: args.goal,
+                                visibleContext: args.visibleContext,
+                                ...(history !== undefined ? { history } : {}),
+                            }));
+                        }
+                        catch (err) {
+                            // A provider/SDK error can echo request internals verbatim —
+                            // redact any credential value and return a generic, key-free
+                            // message. Never surface raw provider error text.
+                            const raw = err instanceof Error ? err.message : String(err);
+                            return errorResult({
+                                error: "ai_generate_failed",
+                                message: redactCredentials(raw, credentialStore),
+                            });
+                        }
+                    },
+                },
+            }
+            : {}),
+        list_incoming: {
+            description: "List pending inbox items (HITL commands awaiting a human) as InboxSummary projections.",
+            inputSchema: { type: "object", properties: {} },
+            handler: inboxHandler((store) => facadeListIncoming(store)),
+        },
+        get_command: {
+            description: "Agent poll for one inbox item by id (burn-after-read: consumes any human-provided secret input exactly once). Returns not_found for an unknown id.",
+            inputSchema: idInputSchema,
+            handler: inboxHandler((store, args) => facadeGetCommand(store, args)),
+        },
+        get_thread: {
+            description: "Get the conversation thread (agent/human messages) for one inbox item by id. Never returns secret input.",
+            inputSchema: idInputSchema,
+            handler: inboxHandler((store, args) => facadeGetThread(store, args)),
+        },
+        queue_action: {
+            description: "Enqueue a HITL inbox item requiring a human decision — kind defaults to 'approval' ('handback'/'review' also accepted). Never resolves anything; only queues.",
+            inputSchema: {
+                type: "object",
+                properties: { ...queueCommonProperties, kind: { type: "string", enum: ["approval", "handback", "review"] } },
+                required: queueCommonRequired,
+            },
+            handler: inboxHandler((store, args) => facadeQueueAction(store, args)),
+        },
+        queue_retrieval: {
+            description: "Enqueue a HITL 'handback' inbox item requesting the human retrieve/provide something back to the agent. Never resolves anything; only queues.",
+            inputSchema: { type: "object", properties: queueCommonProperties, required: queueCommonRequired },
+            handler: inboxHandler((store, args) => facadeQueueRetrieval(store, args)),
+        },
+        approve_action: {
+            description: "SM1: an agent can NEVER approve an inbox item over MCP — always refuses with human_approval_required. Approval is only permitted from the local jevitate UI.",
+            inputSchema: { type: "object", properties: { id: { type: "string" } }, required: ["id"] },
+            handler: async () => errorResult(facadeApproveAction()),
+        },
+        cancel_command: {
+            description: "SM1: an agent can NEVER cancel an inbox item over MCP — always refuses with human_approval_required. Cancellation is only permitted from the local jevitate UI.",
+            inputSchema: { type: "object", properties: { id: { type: "string" } }, required: ["id"] },
+            handler: async () => errorResult(facadeCancelCommand()),
+        },
+        get_site_health: {
+            description: "Report inbox store health: ok, pending count, age of the oldest pending item, and store version.",
+            inputSchema: { type: "object", properties: {} },
+            handler: inboxHandler((store) => facadeGetSiteHealth(store)),
+        },
+    };
+    const notImplemented = (name) => async () => errorResult({
+        error: "not_implemented",
+        tool: name,
+        message: `tool '${name}' is allowlisted but not yet wired in this build`,
+    });
+    return ALLOWED_TOOLS.map((name) => {
+        assertAllowlisted(name);
+        const w = wired[name];
+        if (w)
+            return { name, ...w };
+        return {
+            name,
+            description: `Allowlisted Jevitate tool '${name}' (not yet wired).`,
+            inputSchema: { type: "object", properties: {} },
+            handler: notImplemented(name),
+        };
+    });
+}
+/**
+ * Constructs the MCP `Server` and registers its `tools/list` and `tools/call`
+ * handlers off `buildMcpTools`. Does NOT open a transport — that is
+ * `startMcpServer`'s job — so this is safe to construct in a unit test.
+ */
+export function createMcpServer(deps) {
+    const tools = buildMcpTools(deps);
+    const byName = new Map(tools.map((t) => [t.name, t]));
+    const server = new Server({ name: "jevitate", version: "0.0.0" }, { capabilities: { tools: {} } });
+    server.setRequestHandler(ListToolsRequestSchema, async () => ({
+        tools: tools.map((t) => ({ name: t.name, description: t.description, inputSchema: t.inputSchema })),
+    }));
+    server.setRequestHandler(CallToolRequestSchema, async (request) => {
+        const { name, arguments: args } = request.params;
+        // `McpToolResult` is a strict subset of the SDK's `CallToolResult` (which
+        // carries an open index signature); the cast at this boundary keeps the
+        // handler-authoring type strict while satisfying the SDK's result shape.
+        // Defense in depth: a forbidden or unknown tool is NEVER dispatched.
+        if (FORBIDDEN.has(name) || !byName.has(name)) {
+            return errorResult({ error: "unknown_tool", tool: name });
+        }
+        const tool = byName.get(name);
+        try {
+            return (await tool.handler((args ?? {})));
+        }
+        catch (err) {
+            return errorResult({
+                error: "tool_failed",
+                tool: name,
+                message: err instanceof Error ? err.message : String(err),
+            });
+        }
+    });
+    return server;
+}
+/**
+ * Starts the real MCP stdio server. Blocks (the transport owns stdin/stdout)
+ * until the client disconnects — callers must NOT write to stdout while it
+ * runs, since stdout is the MCP protocol channel.
+ */
+export async function startMcpServer(deps) {
+    const server = createMcpServer(deps);
+    const transport = new StdioServerTransport();
+    await server.connect(transport);
+}
+//# sourceMappingURL=mcp-api.js.map

package/dist/mcp-api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-api.js","sourceRoot":"","sources":["../src/mcp-api.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,qBAAqB,EAAE,sBAAsB,EAAuB,MAAM,oCAAoC,CAAC;AACxH,OAAO,EACL,aAAa,EACb,eAAe,EACf,gBAAgB,EAChB,gBAAgB,IAAI,sBAAsB,EAC1C,cAAc,IAAI,oBAAoB,EACtC,kBAAkB,EAClB,gBAAgB,EAChB,eAAe,EACf,iBAAiB,EACjB,oBAAoB,EACpB,mBAAmB,EACnB,mBAAmB,EACnB,mBAAmB,GAGpB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpE,OAAO,EACL,oBAAoB,EACpB,qBAAqB,EACrB,mBAAmB,GACpB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EACL,kBAAkB,GAInB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,0BAA0B,EAAE,MAAM,kBAAkB,CAAC;AAwF9D,MAAM,OAAO,GAAG,IAAI,GAAG,CAAS,aAAa,CAAC,CAAC;AAC/C,MAAM,SAAS,GAAG,IAAI,GAAG,CAAS,eAAe,CAAC,CAAC;AAEnD;;;;GAIG;AACH,SAAS,iBAAiB,CAAC,IAAY;IACrC,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,qCAAqC,IAAI,GAAG,CAAC,CAAC;IAChE,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,2CAA2C,IAAI,GAAG,CAAC,CAAC;IACtE,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;AACtE,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AACrF,CAAC;AAED;;;gFAGgF;AAChF,SAAS,iBAAiB,CAAC,OAAe,EAAE,KAAsB;IAChE,IAAI,GAAG,GAAG,OAAO,CAAC;IAClB,KAAK,MAAM,GAAG,IAAI,CAAC,oBAAoB,EAAE,kBAAkB,CAAU,EAAE,CAAC;QACtE,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,KAAK;YAAE,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,aAAa,CAAC,IAAgB;IAC5C,MAAM,QAAQ,GACZ,IAAI,CAAC,gBAAgB;QACrB,CAAC,CAAC,KAAa,EAAE,EAAE,CAAC,gBAAgB,CAAC,IAAI,eAAe,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;IAE1G,MAAM,UAAU,GACd,IAAI,CAAC,UAAU;QACf,CAAC,CAAC,EAAU,EAAE,MAA8B,EAAE,EAAE,CAC9C,0BAA0B,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,WAAW,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,EAAE,CAAC,CAAC,CAAC;IAEhG,uEAAuE;IACvE,0EAA0E;IAC1E,0EAA0E;IAC1E,6CAA6C;IAC7C,MAAM,gBAAgB,GACpB,IAAI,CAAC,gBAAgB;QACrB,CAAC,KAAK,EAAE,IAAa,EAAE,EAAE;YACvB,IAAI,CAAC,IAAI,CAAC,iBAAiB,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;gBACrD,MAAM,IAAI,KAAK,CAAC,mFAAmF,CAAC,CAAC;YACvG,CAAC;YACD,MAAM,OAAO,GAAG,IAAI,qBAAqB,CAAC,IAAI,oBAAoB,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC;YAC5F,MAAM,KAAK,GAAG,IAAI,mBAAmB,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;YAC5D,OAAO,sBAAsB,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QACtD,CAAC,CAAC,CAAC;IAEL,8EAA8E;IAC9E,6EAA6E;IAC7E,yEAAyE;IACzE,iCAAiC;IACjC,MAAM,eAAe,GAAG,IAAI,CAAC,eAAe,IAAI,kBAAkB,EAAE,CAAC;IACrE,MAAM,cAAc,GAClB,IAAI,CAAC,cAAc;QACnB,CAAC,IAAI,CAAC,iBAAiB;YACrB,CAAC,CAAC,CAAC,IAAwB,EAAE,EAAE,CAAC,oBAAoB,CAAC,eAAe,EAAE,IAAI,CAAC,iBAAkB,EAAE,IAAI,CAAC;YACpG,CAAC,CAAC,SAAS,CAAC,CAAC;IAEjB,4EAA4E;IAC5E,uEAAuE;IACvE,2EAA2E;IAC3E,wEAAwE;IACxE,yEAAyE;IACzE,yEAAyE;IACzE,6DAA6D;IAC7D,MAAM,UAAU,GAAG,GAAG,EAAE;QACtB,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;QACnE,CAAC;QACD,OAAO,IAAI,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACzC,CAAC,CAAC;IAEF,SAAS,YAAY,CAAC,EAAuG;QAC3H,OAAO,KAAK,EAAE,IAAI,EAAE,EAAE;YACpB,IAAI,CAAC;gBACH,OAAO,UAAU,CAAC,MAAM,EAAE,CAAC,UAAU,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC;YAClD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,WAAW,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACvG,CAAC;QACH,CAAC,CAAC;IACJ,CAAC;IAED,MAAM,aAAa,GAAG;QACpB,IAAI,EAAE,QAAiB;QACvB,UAAU,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;QACtC,QAAQ,EAAE,CAAC,IAAI,CAAC;KACjB,CAAC;IAEF,MAAM,qBAAqB,GAAG;QAC5B,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QACvB,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QAC3B,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QACxB,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QAC1B,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QACzB,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QAC7B,aAAa,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;QAClC,QAAQ,EAAE;YACR,IAAI,EAAE,OAAO;YACb,KAAK,EAAE;gBACL,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBACtB,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBACzB,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,EAAE;oBAC1D,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;iBAC7B;gBACD,QAAQ,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,UAAU,CAAC;aACtC;SACF;KACF,CAAC;IACF,MAAM,mBAAmB,GAAG,CAAC,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IAE1E,MAAM,KAAK,GAA0C;QACnD,iBAAiB,EAAE;YACjB,WAAW,EAAE,uEAAuE;YACpF,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE;YAC/F,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,MAAM,QAAQ,CAAC,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;SACtG;QACD,WAAW,EAAE;YACX,WAAW,EACT,oGAAoG;YACtG,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBACtB,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,oBAAoB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;iBACrE;gBACD,QAAQ,EAAE,CAAC,IAAI,CAAC;aACjB;YACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBACtB,IAAI,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ,IAAI,IAAI,CAAC,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACxD,OAAO,WAAW,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,8CAA8C,EAAE,CAAC,CAAC;gBACzG,CAAC;gBACD,mEAAmE;gBACnE,gEAAgE;gBAChE,MAAM,MAAM,GACV,IAAI,CAAC,MAAM,IAAI,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC;oBAC3E,CAAC,CAAE,IAAI,CAAC,MAAiC;oBACzC,CAAC,CAAC,EAAE,CAAC;gBACT,OAAO,UAAU,CAAC,MAAM,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC;YACvD,CAAC;SACF;QACD,iBAAiB,EAAE;YACjB,WAAW,EACT,2JAA2J;YAC7J,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBAC1B,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBACxB,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBAC3B,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBACzB,gBAAgB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBACpC,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBAC5B,MAAM,EAAE;wBACN,IAAI,EAAE,QAAQ;wBACd,UAAU,EAAE;4BACV,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;4BAC9B,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;4BAChC,aAAa,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;yBAClC;qBACF;iBACF;gBACD,QAAQ,EAAE,CAAC,QAAQ,CAAC;aACrB;YACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBACtB,IAAI,CAAC;oBACH,8DAA8D;oBAC9D,qEAAqE;oBACrE,+CAA+C;oBAC/C,OAAO,UAAU,CAAC,MAAM,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC;gBAClD,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,OAAO,WAAW,CAAC;wBACjB,KAAK,EAAE,2BAA2B;wBAClC,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;qBAC1D,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;SACF;QACD,GAAG,CAAC,cAAc;YAChB,CAAC,CAAC;gBACE,gBAAgB,EAAE;oBAChB,WAAW,EACT,6LAA6L;oBAC/L,WAAW,EAAE;wBACX,IAAI,EAAE,QAAQ;wBACd,UAAU,EAAE;4BACV,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;4BAC9B,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;4BACxB,cAAc,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;4BAClC,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;yBACtD;wBACD,QAAQ,EAAE,CAAC,YAAY,EAAE,MAAM,EAAE,gBAAgB,CAAC;qBACnD;oBACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;wBACtB,IACE,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ;4BACnC,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ;4BAC7B,OAAO,IAAI,CAAC,cAAc,KAAK,QAAQ,EACvC,CAAC;4BACD,OAAO,WAAW,CAAC;gCACjB,KAAK,EAAE,cAAc;gCACrB,OAAO,EAAE,4EAA4E;6BACtF,CAAC,CAAC;wBACL,CAAC;wBACD,MAAM,OAAO,GACX,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;4BAC7E,CAAC,CAAE,IAAI,CAAC,OAAoB;4BAC5B,CAAC,CAAC,SAAS,CAAC;wBAChB,IAAI,CAAC;4BACH,4DAA4D;4BAC5D,8DAA8D;4BAC9D,8DAA8D;4BAC9D,oDAAoD;4BACpD,OAAO,UAAU,CACf,MAAM,cAAc,CAAC;gCACnB,UAAU,EAAE,IAAI,CAAC,UAAU;gCAC3B,IAAI,EAAE,IAAI,CAAC,IAAI;gCACf,cAAc,EAAE,IAAI,CAAC,cAAc;gCACnC,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;6BAC9C,CAAC,CACH,CAAC;wBACJ,CAAC;wBAAC,OAAO,GAAG,EAAE,CAAC;4BACb,6DAA6D;4BAC7D,6DAA6D;4BAC7D,kDAAkD;4BAClD,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;4BAC7D,OAAO,WAAW,CAAC;gCACjB,KAAK,EAAE,oBAAoB;gCAC3B,OAAO,EAAE,iBAAiB,CAAC,GAAG,EAAE,eAAe,CAAC;6BACjD,CAAC,CAAC;wBACL,CAAC;oBACH,CAAC;iBACF;aACF;YACH,CAAC,CAAC,EAAE,CAAC;QACP,aAAa,EAAE;YACb,WAAW,EAAE,wFAAwF;YACrG,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE;YAC/C,OAAO,EAAE,YAAY,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;SAC5D;QACD,WAAW,EAAE;YACX,WAAW,EACT,oJAAoJ;YACtJ,WAAW,EAAE,aAAa;YAC1B,OAAO,EAAE,YAAY,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,gBAAgB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;SACtE;QACD,UAAU,EAAE;YACV,WAAW,EAAE,0GAA0G;YACvH,WAAW,EAAE,aAAa;YAC1B,OAAO,EAAE,YAAY,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,eAAe,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;SACrE;QACD,YAAY,EAAE;YACZ,WAAW,EACT,+JAA+J;YACjK,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE,EAAE,GAAG,qBAAqB,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,UAAU,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE;gBAC5G,QAAQ,EAAE,mBAAmB;aAC9B;YACD,OAAO,EAAE,YAAY,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,iBAAiB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;SACvE;QACD,eAAe,EAAE;YACf,WAAW,EACT,+IAA+I;YACjJ,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,qBAAqB,EAAE,QAAQ,EAAE,mBAAmB,EAAE;YACjG,OAAO,EAAE,YAAY,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,oBAAoB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;SAC1E;QACD,cAAc,EAAE;YACd,WAAW,EACT,8JAA8J;YAChK,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,IAAI,CAAC,EAAE;YACzF,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,WAAW,CAAC,mBAAmB,EAAE,CAAC;SACxD;QACD,cAAc,EAAE;YACd,WAAW,EACT,iKAAiK;YACnK,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,IAAI,CAAC,EAAE;YACzF,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,WAAW,CAAC,mBAAmB,EAAE,CAAC;SACxD;QACD,eAAe,EAAE;YACf,WAAW,EAAE,kGAAkG;YAC/G,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE;YAC/C,OAAO,EAAE,YAAY,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;SAC7D;KACF,CAAC;IAEF,MAAM,cAAc,GAClB,CAAC,IAAY,EAAsB,EAAE,CACrC,KAAK,IAAI,EAAE,CACT,WAAW,CAAC;QACV,KAAK,EAAE,iBAAiB;QACxB,IAAI,EAAE,IAAI;QACV,OAAO,EAAE,SAAS,IAAI,kDAAkD;KACzE,CAAC,CAAC;IAEP,OAAO,aAAa,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QAChC,iBAAiB,CAAC,IAAI,CAAC,CAAC;QACxB,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;QACtB,IAAI,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;QAC7B,OAAO;YACL,IAAI;YACJ,WAAW,EAAE,8BAA8B,IAAI,oBAAoB;YACnE,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE;YAC/C,OAAO,EAAE,cAAc,CAAC,IAAI,CAAC;SAC9B,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,IAAgB;IAC9C,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAEtD,MAAM,MAAM,GAAG,IAAI,MAAM,CACvB,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,EACtC,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,CAChC,CAAC;IAEF,MAAM,CAAC,iBAAiB,CAAC,sBAAsB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;QAC5D,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;KACpG,CAAC,CAAC,CAAC;IAEJ,MAAM,CAAC,iBAAiB,CAAC,qBAAqB,EAAE,KAAK,EAAE,OAAO,EAA2B,EAAE;QACzF,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC;QACjD,0EAA0E;QAC1E,wEAAwE;QACxE,yEAAyE;QACzE,qEAAqE;QACrE,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7C,OAAO,WAAW,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,IAAI,EAAE,CAAmB,CAAC;QAC9E,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAE,CAAC;QAC/B,IAAI,CAAC;YACH,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,IAAI,EAAE,CAA4B,CAAC,CAAmB,CAAC;QACzF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,WAAW,CAAC;gBACjB,KAAK,EAAE,aAAa;gBACpB,IAAI,EAAE,IAAI;gBACV,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aAC1D,CAAmB,CAAC;QACvB,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAAgB;IACnD,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;AAClC,CAAC"}

package/dist/mission-api.d.ts

@@ -0,0 +1,56 @@
+import { MissionTargetRegistry, type MissionTarget, type MissionTargetStore } from "@jevitate/missions";
+/**
+ * Distinct from `@jevitate/missions`' generic promote error so the CLI can map
+ * "no such target to promote" to its own error code (E_UNKNOWN_MISSION_TARGET)
+ * without string-matching an error message — mirrors `journey-api.ts`'s
+ * `UnknownJourneyError`.
+ */
+export declare class UnknownMissionTargetError extends Error {
+}
+/**
+ * The store + registry pair the CLI operates on. Bundling them makes the
+ * unit-testable seam a single injectable value: production wires the real
+ * fs-backed pair via `missionTargetContext(dir)`, while tests can inject an
+ * in-memory `MissionTargetStore`.
+ */
+export interface MissionTargetContext {
+    store: MissionTargetStore;
+    registry: MissionTargetRegistry;
+}
+/**
+ * Builds the real fs-backed store + registry for a targets directory. This is
+ * the ONE place the CLI locates the same on-disk store that `queue_exploration`
+ * resolves against (via `MissionTargetRegistry.resolve`), so a target
+ * registered/promoted here is exactly the one the MCP tool can resolve.
+ */
+export declare function missionTargetContext(dir: string): MissionTargetContext;
+export interface AddMissionTargetInput {
+    id: string;
+    name: string;
+    authorizedOrigin: string;
+    baseUrl: string;
+    description?: string;
+}
+/**
+ * Registers a mission target. SECURITY: registering is NOT the same as
+ * promoting — a freshly-added target is `promoted: false`, so
+ * `queue_exploration` (`MissionTargetRegistry.resolve`) refuses it until a
+ * separate `promote` flips the gate. `registry.put` re-validates against
+ * `MissionTargetSchema` BEFORE any disk write (fail-closed: an invalid target
+ * — e.g. a path-unsafe id — is never persisted).
+ */
+export declare function addMissionTarget(ctx: MissionTargetContext, input: AddMissionTargetInput, nowIso?: () => string): Promise<MissionTarget>;
+/**
+ * Lists ALL mission targets (promoted and unpromoted) straight from the store
+ * — a local/dev-facing listing of everything on disk. This mirrors
+ * `journey list` (store-direct, all) vs `journey find` (registry, promoted-
+ * only): the promoted-only projection is what `queue_exploration` sees, not
+ * this listing.
+ */
+export declare function listMissionTargets(ctx: MissionTargetContext): Promise<MissionTarget[]>;
+/**
+ * Promotes a registered target so `queue_exploration` can resolve it. An
+ * unknown id is refused with `UnknownMissionTargetError` (never silently
+ * created). Returns the persisted, now-promoted target.
+ */
+export declare function promoteMissionTarget(ctx: MissionTargetContext, id: string): Promise<MissionTarget>;

package/dist/mission-api.js

@@ -0,0 +1,65 @@
+import { FsMissionTargetStore, MissionTargetRegistry, } from "@jevitate/missions";
+/**
+ * Distinct from `@jevitate/missions`' generic promote error so the CLI can map
+ * "no such target to promote" to its own error code (E_UNKNOWN_MISSION_TARGET)
+ * without string-matching an error message — mirrors `journey-api.ts`'s
+ * `UnknownJourneyError`.
+ */
+export class UnknownMissionTargetError extends Error {
+}
+/**
+ * Builds the real fs-backed store + registry for a targets directory. This is
+ * the ONE place the CLI locates the same on-disk store that `queue_exploration`
+ * resolves against (via `MissionTargetRegistry.resolve`), so a target
+ * registered/promoted here is exactly the one the MCP tool can resolve.
+ */
+export function missionTargetContext(dir) {
+    const store = new FsMissionTargetStore(dir);
+    return { store, registry: new MissionTargetRegistry(store) };
+}
+/**
+ * Registers a mission target. SECURITY: registering is NOT the same as
+ * promoting — a freshly-added target is `promoted: false`, so
+ * `queue_exploration` (`MissionTargetRegistry.resolve`) refuses it until a
+ * separate `promote` flips the gate. `registry.put` re-validates against
+ * `MissionTargetSchema` BEFORE any disk write (fail-closed: an invalid target
+ * — e.g. a path-unsafe id — is never persisted).
+ */
+export async function addMissionTarget(ctx, input, nowIso = () => new Date().toISOString()) {
+    const target = {
+        id: input.id,
+        name: input.name,
+        authorizedOrigin: input.authorizedOrigin,
+        baseUrl: input.baseUrl,
+        ...(input.description !== undefined ? { description: input.description } : {}),
+        promoted: false,
+        createdAtIso: nowIso(),
+    };
+    await ctx.registry.put(target);
+    return target;
+}
+/**
+ * Lists ALL mission targets (promoted and unpromoted) straight from the store
+ * — a local/dev-facing listing of everything on disk. This mirrors
+ * `journey list` (store-direct, all) vs `journey find` (registry, promoted-
+ * only): the promoted-only projection is what `queue_exploration` sees, not
+ * this listing.
+ */
+export function listMissionTargets(ctx) {
+    return ctx.store.list();
+}
+/**
+ * Promotes a registered target so `queue_exploration` can resolve it. An
+ * unknown id is refused with `UnknownMissionTargetError` (never silently
+ * created). Returns the persisted, now-promoted target.
+ */
+export async function promoteMissionTarget(ctx, id) {
+    const existing = await ctx.store.get(id);
+    if (!existing) {
+        throw new UnknownMissionTargetError(`unknown mission target '${id}'`);
+    }
+    await ctx.registry.promote(id);
+    const promoted = await ctx.store.get(id);
+    return promoted ?? { ...existing, promoted: true };
+}
+//# sourceMappingURL=mission-api.js.map

package/dist/mission-api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mission-api.js","sourceRoot":"","sources":["../src/mission-api.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,oBAAoB,EACpB,qBAAqB,GAGtB,MAAM,oBAAoB,CAAC;AAE5B;;;;;GAKG;AACH,MAAM,OAAO,yBAA0B,SAAQ,KAAK;CAAG;AAavD;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,GAAW;IAC9C,MAAM,KAAK,GAAG,IAAI,oBAAoB,CAAC,GAAG,CAAC,CAAC;IAC5C,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,qBAAqB,CAAC,KAAK,CAAC,EAAE,CAAC;AAC/D,CAAC;AAUD;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,GAAyB,EACzB,KAA4B,EAC5B,SAAuB,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;IAErD,MAAM,MAAM,GAAkB;QAC5B,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;QACxC,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,GAAG,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9E,QAAQ,EAAE,KAAK;QACf,YAAY,EAAE,MAAM,EAAE;KACvB,CAAC;IACF,MAAM,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC/B,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,GAAyB;IAC1D,OAAO,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;AAC1B,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,GAAyB,EACzB,EAAU;IAEV,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACzC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,yBAAyB,CAAC,2BAA2B,EAAE,GAAG,CAAC,CAAC;IACxE,CAAC;IACD,MAAM,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC/B,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACzC,OAAO,QAAQ,IAAI,EAAE,GAAG,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;AACrD,CAAC"}

package/dist/program.d.ts

@@ -0,0 +1,77 @@
+import { Command } from "commander";
+import type { ProfileManager } from "@jevitate/daemon";
+import { type StartUiServerDeps, type UiServerHandle } from "./ui-api.js";
+import { type AiCliDeps } from "./ai-cli.js";
+import { type DetectionDeps } from "./init-skills.js";
+import { type ExploreCliDeps } from "./explore-api.js";
+import { type RecorderLike } from "./record-api.js";
+import { type RunResolvedJourney } from "./source-run-api.js";
+import { type GitExec, type GhPort } from "@jevitate/sources";
+import type { BrowserPort, BrowserSession } from "@jevitate/playwright";
+/** Injectable wiring for the `record` command (all optional; real defaults). */
+export interface RecordCliDeps {
+    /** Testing seam — defaults to a real `PlaywrightBrowserPort`. */
+    browserPortFactory?: () => BrowserPort;
+    /** Testing seam — defaults to a real `@jevitate/recorder` `Recorder`. */
+    recorderFactory?: (session: BrowserSession, site: string) => RecorderLike;
+    /** Testing seam — the "user signalled done" wait. Defaults to Enter on stdin. */
+    waitForStop?: () => Promise<void>;
+}
+export interface CliDeps {
+    profiles: ProfileManager;
+    dbPath?: string;
+    journeysDir?: string;
+    /** Optional, additive: overrides the mission-targets store directory
+     *  (default: ~/.jevitate/missions/targets). Same dir `queue_exploration`
+     *  resolves promoted targets from. */
+    missionTargetsDir?: string;
+    /** Optional, additive: overrides the inbox store directory (default:
+     *  ~/.jevitate/inbox). Same dir BOTH `jevitate mcp`'s inbox tools AND
+     *  `jevitate ui` resolve against by default — Task 8 threads one resolved
+     *  dir into both so they serve/consume the same store. */
+    inboxDir?: string;
+    /** Optional, additive: `jevitate ui` wiring (see ui-api.ts). Omitted in
+     *  production means the real `startUiServer`, which binds a real loopback
+     *  HTTP port — tests inject a fake so no port is ever bound. */
+    ui?: {
+        startUiServer?: (deps: StartUiServerDeps) => Promise<UiServerHandle>;
+    };
+    /** Optional, additive: `@jevitate/ai-core` wiring (see ai-cli.ts). Omitted in
+     *  production means real env + the deterministic fake generation gateway. */
+    ai?: AiCliDeps;
+    /** Optional, additive: `@jevitate/explore` wiring (see explore-api.ts). */
+    explore?: ExploreCliDeps;
+    /** Optional, additive: `jevitate record` wiring (see record-api.ts). */
+    record?: RecordCliDeps;
+    /** Optional, additive: `jevitate init` wiring (see init-skills.ts). Omitted
+     *  in production means the real `existsSync`/`homedir`/`cwd` and the real
+     *  `~/.jevitate/skills-install-state.json` state path. */
+    init?: {
+        detection?: DetectionDeps;
+        statePath?: string;
+    };
+    /**
+     * Optional, additive: distributed-Journey-sources wiring (see source-api.ts).
+     * Every field is injectable so tests never touch the network, the real home
+     * dir, or the real `git`/`gh` binaries. Omitted in production means the real
+     * `~/.jevitate/sources` clone dir, `<cwd>/jevitate.lock`, `~/.jevitate/trust`
+     * stores, and the real `git`/`gh` ports.
+     */
+    sources?: {
+        sourcesDir?: string;
+        lockPath?: string;
+        trustDir?: string;
+        ackDir?: string;
+        git?: GitExec;
+        gh?: GhPort;
+        now?: () => string;
+        /** Identity recorded in a `TrustRecord`/`TouAck`; defaults to the OS user. */
+        approvedBy?: string;
+        /** Optional, additive: `jevitate source run` runner seam (see
+         *  source-run-api.ts). Omitted in production means the real
+         *  Playwright-backed `realResolvedJourneyRunner`; tests inject a fake so no
+         *  browser launches. */
+        runJourney?: RunResolvedJourney;
+    };
+}
+export declare function buildProgram(deps: CliDeps): Command;