@kya-os/cli 1.7.0 → 1.8.3

package/dist/utils/dco/github.d.ts

@@ -46,4 +46,105 @@ export declare function signingKeyAlreadyUploaded(keys: SigningKeyEntry[], publi
  * scope without leaving the flow. Requires a TTY; the caller must check.
  */
 export declare function refreshAuthScope(): Promise<boolean>;
+/**
+ * Read a pull request's description. Accepts anything `gh pr view` accepts:
+ * a full URL, or a number when run inside the repo.
+ *
+ * Returns the body verbatim — callers verify its contents rather than trust
+ * them, since a PR description is author-controlled text.
+ */
+export declare function getPullRequestBody(target: string): Promise<string>;
+export interface PullRequestSummary {
+    number: number;
+    headRefOid: string;
+    headRefName: string;
+    state: string;
+    url: string;
+    isCrossRepository: boolean;
+}
+/**
+ * Fetch the PR's current head SHA, state, and other polling-relevant fields
+ * in one call — the same fields the `agent task --watch` / `agent review
+ * --watch` loops re-fetch on every poll tick to detect a new head or a
+ * closed PR.
+ */
+export declare function getPullRequestSummary(target: string, repo?: string): Promise<PullRequestSummary>;
+/** Read-only unified diff for the PR. Never mutates anything. */
+export declare function getPullRequestDiff(target: string, repo?: string): Promise<string>;
+export interface PullRequestReview {
+    id: number;
+    author: {
+        login: string;
+    } | null;
+    authorAssociation?: string;
+    body: string;
+    state: string;
+    submittedAt?: string;
+}
+/** Every review posted on the PR, in the order GitHub returns them. */
+export declare function getPullRequestReviews(target: string, repo?: string): Promise<PullRequestReview[]>;
+export interface PullRequestComment {
+    id: number;
+    author: {
+        login: string;
+    } | null;
+    body: string;
+    createdAt?: string;
+}
+/** Every top-level issue comment on the PR (not review comments). */
+export declare function getPullRequestComments(target: string, repo?: string): Promise<PullRequestComment[]>;
+export type PullRequestReviewEvent = "APPROVE" | "REQUEST_CHANGES" | "COMMENT";
+export interface PostPullRequestReviewResult {
+    ok: boolean;
+    /**
+     * True when `gh` rejected the review with GitHub's self-review 422 (the
+     * authenticated token owns the PR, so it cannot APPROVE/REQUEST_CHANGES on
+     * it). The caller decides what to do next — this function only reports
+     * the fact, it does not retry as a COMMENT itself, since the caller is the
+     * one that knows to say so in its own output (see review-loop P13's design
+     * doc).
+     */
+    selfReviewRejected?: boolean;
+}
+/**
+ * Post a real GitHub PR review: `APPROVE`, `REQUEST_CHANGES`, or `COMMENT`.
+ * `body` carries the human-readable findings section plus the fenced
+ * `kya-os-signed-verdict` block — this function is content-agnostic, it
+ * just posts whatever string it's given.
+ */
+export declare function postPullRequestReview(target: string, options: {
+    event: PullRequestReviewEvent;
+    body: string;
+}, repo?: string): Promise<PostPullRequestReviewResult>;
+/**
+ * Distinct from {@link PullRequestReview} above (review-loop P13's richer
+ * shape, for `getPullRequestReviews`) — this is the narrower shape
+ * `getPullRequestReviewData` below actually needs: just enough to extract
+ * and verify a fenced `kya-os-signed-verdict` block, not a full review
+ * record. Renamed off the plain `PullRequestReview` it originally shared
+ * with P13's type to resolve the naming collision when both PRs' `gh.ts`
+ * additions landed on `main`.
+ */
+export interface VerdictSourceReview {
+    /** The reviewer's GitHub login, when `gh` reports one (a deleted/bot account can omit it). */
+    login: string;
+    body: string;
+}
+export interface PullRequestReviewData {
+    reviews: VerdictSourceReview[];
+    /** The PR's current head commit SHA — used to flag a signed verdict against a superseded head as stale. */
+    headSha: string;
+}
+/**
+ * Read a pull request's reviews and current head SHA (review-loop P9
+ * commit 3: `kya-os review verify`). Sibling to {@link getPullRequestBody},
+ * same `gh pr view` + ENOENT/scope-error handling via the private `gh()`
+ * helper above — review bodies are where the publisher (review-publisher.ts,
+ * compute) posts the fenced `kya-os-signed-verdict` block this command
+ * extracts and verifies.
+ *
+ * Review/comment bodies are returned verbatim — callers verify their
+ * contents rather than trust them, same as {@link getPullRequestBody}.
+ */
+export declare function getPullRequestReviewData(target: string): Promise<PullRequestReviewData>;
 //# sourceMappingURL=github.d.ts.map

package/dist/utils/dco/github.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"github.d.ts","sourceRoot":"","sources":["../../../src/utils/dco/github.ts"],"names":[],"mappings":"AAKA;;;;;GAKG;AAEH,eAAO,MAAM,iBAAiB,0BAA0B,CAAC;AACzD,eAAO,MAAM,qBAAqB,2DAA0D,CAAC;AAE7F,qBAAa,mBAAoB,SAAQ,KAAK;;CAO7C;AAED;;;;GAIG;AACH,qBAAa,YAAa,SAAQ,KAAK;IACrC,QAAQ,CAAC,cAAc,4DAAyB;;CAOjD;AAED,MAAM,WAAW,MAAM;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AAED,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;CACf;AA+BD,wBAAsB,aAAa,IAAI,OAAO,CAAC,OAAO,CAAC,CAOtD;AAED,wBAAsB,iBAAiB,IAAI,OAAO,CAAC,OAAO,CAAC,CAU1D;AAED,wBAAsB,SAAS,IAAI,OAAO,CAAC,MAAM,CAAC,CAYjD;AAED,8EAA8E;AAC9E,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEvD;AAED,wBAAsB,eAAe,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC,CAalE;AAED,wBAAsB,gBAAgB,CACpC,aAAa,EAAE,MAAM,EACrB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,IAAI,CAAC,CAmBf;AAED;;;;GAIG;AACH,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,eAAe,EAAE,EACvB,aAAa,EAAE,MAAM,GACpB,OAAO,CAMT;AAED;;;GAGG;AACH,wBAAsB,gBAAgB,IAAI,OAAO,CAAC,OAAO,CAAC,CAWzD"}
+{"version":3,"file":"github.d.ts","sourceRoot":"","sources":["../../../src/utils/dco/github.ts"],"names":[],"mappings":"AAKA;;;;;GAKG;AAEH,eAAO,MAAM,iBAAiB,0BAA0B,CAAC;AACzD,eAAO,MAAM,qBAAqB,2DAA0D,CAAC;AAE7F,qBAAa,mBAAoB,SAAQ,KAAK;;CAO7C;AAED;;;;GAIG;AACH,qBAAa,YAAa,SAAQ,KAAK;IACrC,QAAQ,CAAC,cAAc,4DAAyB;;CAOjD;AAED,MAAM,WAAW,MAAM;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AAED,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;CACf;AA+BD,wBAAsB,aAAa,IAAI,OAAO,CAAC,OAAO,CAAC,CAOtD;AAED,wBAAsB,iBAAiB,IAAI,OAAO,CAAC,OAAO,CAAC,CAU1D;AAED,wBAAsB,SAAS,IAAI,OAAO,CAAC,MAAM,CAAC,CAYjD;AAED,8EAA8E;AAC9E,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEvD;AAED,wBAAsB,eAAe,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC,CAalE;AAED,wBAAsB,gBAAgB,CACpC,aAAa,EAAE,MAAM,EACrB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,IAAI,CAAC,CAmBf;AAED;;;;GAIG;AACH,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,eAAe,EAAE,EACvB,aAAa,EAAE,MAAM,GACpB,OAAO,CAMT;AAED;;;GAGG;AACH,wBAAsB,gBAAgB,IAAI,OAAO,CAAC,OAAO,CAAC,CAWzD;AAED;;;;;;GAMG;AACH,wBAAsB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAGxE;AAcD,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IACZ,iBAAiB,EAAE,OAAO,CAAC;CAC5B;AAwBD;;;;;GAKG;AACH,wBAAsB,qBAAqB,CACzC,MAAM,EAAE,MAAM,EACd,IAAI,CAAC,EAAE,MAAM,GACZ,OAAO,CAAC,kBAAkB,CAAC,CAQ7B;AAED,iEAAiE;AACjE,wBAAsB,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAEvF;AAED,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IACjC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,uEAAuE;AACvE,wBAAsB,qBAAqB,CACzC,MAAM,EAAE,MAAM,EACd,IAAI,CAAC,EAAE,MAAM,GACZ,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAK9B;AAED,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,qEAAqE;AACrE,wBAAsB,sBAAsB,CAC1C,MAAM,EAAE,MAAM,EACd,IAAI,CAAC,EAAE,MAAM,GACZ,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAK/B;AAED,MAAM,MAAM,sBAAsB,GAAG,SAAS,GAAG,iBAAiB,GAAG,SAAS,CAAC;AAE/E,MAAM,WAAW,2BAA2B;IAC1C,EAAE,EAAE,OAAO,CAAC;IACZ;;;;;;;OAOG;IACH,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B;AAmBD;;;;;GAKG;AACH,wBAAsB,qBAAqB,CACzC,MAAM,EAAE,MAAM,EACd,OAAO,EAAE;IAAE,KAAK,EAAE,sBAAsB,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,EACxD,IAAI,CAAC,EAAE,MAAM,GACZ,OAAO,CAAC,2BAA2B,CAAC,CAmBtC;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,mBAAmB;IAClC,8FAA8F;IAC9F,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,mBAAmB,EAAE,CAAC;IAC/B,2GAA2G;IAC3G,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,wBAAwB,CAC5C,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,qBAAqB,CAAC,CAiBhC"}

package/dist/utils/dco/github.js

@@ -151,4 +151,137 @@ export async function refreshAuthScope() {
         child.on("close", (code) => resolve(code === 0));
     });
 }
+/**
+ * Read a pull request's description. Accepts anything `gh pr view` accepts:
+ * a full URL, or a number when run inside the repo.
+ *
+ * Returns the body verbatim — callers verify its contents rather than trust
+ * them, since a PR description is author-controlled text.
+ */
+export async function getPullRequestBody(target) {
+    const stdout = await gh(["pr", "view", target, "--json", "body", "-q", ".body"]);
+    return stdout;
+}
+/**
+ * Appends `-R <repo>` when `repo` is given, pinning the call to that repo
+ * explicitly rather than relying on `gh`'s ambient cwd-derived resolution
+ * (which prefers `GH_REPO`/`gh repo set-default` over cwd's git remote) —
+ * same reasoning as `fix.ts`'s `-R targetRepo` calls. `agent task/review/verify`
+ * commands run against a fresh clone or no checkout at all, so an explicit
+ * repo is the norm here, not the exception.
+ */
+function withRepo(args, repo) {
+    return repo ? [...args, "-R", repo] : args;
+}
+function parsePullRequestSummary(stdout) {
+    const parsed = JSON.parse(stdout);
+    if (typeof parsed.number !== "number" ||
+        typeof parsed.headRefOid !== "string" ||
+        typeof parsed.headRefName !== "string" ||
+        typeof parsed.state !== "string" ||
+        typeof parsed.url !== "string" ||
+        typeof parsed.isCrossRepository !== "boolean") {
+        throw new Error("Unexpected response from `gh pr view --json`");
+    }
+    return {
+        number: parsed.number,
+        headRefOid: parsed.headRefOid,
+        headRefName: parsed.headRefName,
+        state: parsed.state,
+        url: parsed.url,
+        isCrossRepository: parsed.isCrossRepository,
+    };
+}
+/**
+ * Fetch the PR's current head SHA, state, and other polling-relevant fields
+ * in one call — the same fields the `agent task --watch` / `agent review
+ * --watch` loops re-fetch on every poll tick to detect a new head or a
+ * closed PR.
+ */
+export async function getPullRequestSummary(target, repo) {
+    const stdout = await gh(withRepo(["pr", "view", target, "--json", "number,headRefOid,headRefName,state,url,isCrossRepository"], repo));
+    return parsePullRequestSummary(stdout);
+}
+/** Read-only unified diff for the PR. Never mutates anything. */
+export async function getPullRequestDiff(target, repo) {
+    return gh(withRepo(["pr", "diff", target], repo));
+}
+/** Every review posted on the PR, in the order GitHub returns them. */
+export async function getPullRequestReviews(target, repo) {
+    const stdout = await gh(withRepo(["pr", "view", target, "--json", "reviews", "-q", ".reviews"], repo));
+    return JSON.parse(stdout);
+}
+/** Every top-level issue comment on the PR (not review comments). */
+export async function getPullRequestComments(target, repo) {
+    const stdout = await gh(withRepo(["pr", "view", target, "--json", "comments", "-q", ".comments"], repo));
+    return JSON.parse(stdout);
+}
+/**
+ * GitHub's self-review rejection names the PR as the requester's own —
+ * distinct from a scope/auth/rate-limit failure, neither of which should
+ * be silently swallowed as "must be a self-review". Confirmed live against
+ * `gh pr review`'s actual error text: `gh`'s GraphQL mutation surfaces this
+ * as `GraphQL: Review Can not request changes on your own pull request
+ * (addPullRequestReview)` — a GraphQL-level error with no REST-style
+ * "HTTP 422" status string anywhere in it, so matching on the phrase alone
+ * (not a status code that isn't actually present) is what the real error
+ * requires.
+ */
+function isSelfReviewError(error) {
+    const err = error;
+    const message = `${err?.stderr ?? ""} ${err?.message ?? ""}`;
+    return /own pull request/i.test(message);
+}
+/**
+ * Post a real GitHub PR review: `APPROVE`, `REQUEST_CHANGES`, or `COMMENT`.
+ * `body` carries the human-readable findings section plus the fenced
+ * `kya-os-signed-verdict` block — this function is content-agnostic, it
+ * just posts whatever string it's given.
+ */
+export async function postPullRequestReview(target, options, repo) {
+    const flag = options.event === "APPROVE"
+        ? "--approve"
+        : options.event === "REQUEST_CHANGES"
+            ? "--request-changes"
+            : "--comment";
+    try {
+        await gh(withRepo(["pr", "review", target, flag, "--body", options.body], repo));
+        return { ok: true };
+    }
+    catch (error) {
+        if (error instanceof GhNotInstalledError) {
+            throw error;
+        }
+        if (isSelfReviewError(error)) {
+            return { ok: false, selfReviewRejected: true };
+        }
+        throw error;
+    }
+}
+/**
+ * Read a pull request's reviews and current head SHA (review-loop P9
+ * commit 3: `kya-os review verify`). Sibling to {@link getPullRequestBody},
+ * same `gh pr view` + ENOENT/scope-error handling via the private `gh()`
+ * helper above — review bodies are where the publisher (review-publisher.ts,
+ * compute) posts the fenced `kya-os-signed-verdict` block this command
+ * extracts and verifies.
+ *
+ * Review/comment bodies are returned verbatim — callers verify their
+ * contents rather than trust them, same as {@link getPullRequestBody}.
+ */
+export async function getPullRequestReviewData(target) {
+    const stdout = await gh([
+        "pr",
+        "view",
+        target,
+        "--json",
+        "reviews,headRefOid",
+    ]);
+    const parsed = JSON.parse(stdout);
+    const reviews = (parsed.reviews ?? []).map((r) => ({
+        login: r.author?.login ?? "unknown",
+        body: r.body ?? "",
+    }));
+    return { reviews, headSha: parsed.headRefOid ?? "" };
+}
 //# sourceMappingURL=github.js.map

package/dist/utils/dco/github.js.map

@@ -1 +1 @@
-{"version":3,"file":"github.js","sourceRoot":"","sources":["../../../src/utils/dco/github.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AAEjC,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAE1C;;;;;GAKG;AAEH,MAAM,CAAC,MAAM,iBAAiB,GAAG,uBAAuB,CAAC;AACzD,MAAM,CAAC,MAAM,qBAAqB,GAAG,oCAAoC,iBAAiB,EAAE,CAAC;AAE7F,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IAC5C;QACE,KAAK,CACH,mGAAmG,CACpG,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,OAAO,YAAa,SAAQ,KAAK;IAErC;QACE,KAAK,CACH,oCAAoC,iBAAiB,gBAAgB,qBAAqB,EAAE,CAC7F,CAAC;QAJK,mBAAc,GAAG,qBAAqB,CAAC;QAK9C,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;IAC7B,CAAC;CACF;AAcD,KAAK,UAAU,EAAE,CAAC,IAAc;IAC9B,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,IAAI,EAAE;YACjD,QAAQ,EAAE,MAAM;YAChB,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;SAC5B,CAAC,CAAC;QACH,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,IAAK,KAA+B,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;YACxD,MAAM,IAAI,mBAAmB,EAAE,CAAC;QAClC,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,MAAM,GAAG,GAAG,KAA8C,CAAC;IAC3D,MAAM,OAAO,GAAG,GAAG,GAAG,EAAE,MAAM,IAAI,EAAE,IAAI,GAAG,EAAE,OAAO,IAAI,EAAE,EAAE,CAAC;IAC7D,uEAAuE;IACvE,2EAA2E;IAC3E,yEAAyE;IACzE,gDAAgD;IAChD,OAAO,CACL,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC;QACnC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC;QACxB,0BAA0B,CAAC,IAAI,CAAC,OAAO,CAAC,CACzC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa;IACjC,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;QACxB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB;IACrC,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC,CAAC;QACzD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,mBAAmB,EAAE,CAAC;YACzC,MAAM,KAAK,CAAC;QACd,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS;IAC7B,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;QACtB,KAAK;QACL,MAAM;QACN,MAAM;QACN,uCAAuC;KACxC,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAW,CAAC;IAC5C,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,OAAO,MAAM,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,OAAO,GAAG,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,KAAK,2BAA2B,CAAC;AAC7D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe;IACnC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,CAAC,KAAK,EAAE,uBAAuB,EAAE,YAAY,CAAC,CAAC,CAAC;QACxE,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAsB,CAAC;IACjD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,mBAAmB,EAAE,CAAC;YACzC,MAAM,KAAK,CAAC;QACd,CAAC;QACD,IAAI,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,YAAY,EAAE,CAAC;QAC3B,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,aAAqB,EACrB,KAAa;IAEb,IAAI,CAAC;QACH,MAAM,EAAE,CAAC;YACP,KAAK;YACL,uBAAuB;YACvB,IAAI;YACJ,OAAO,aAAa,EAAE;YACtB,IAAI;YACJ,SAAS,KAAK,EAAE;SACjB,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,mBAAmB,EAAE,CAAC;YACzC,MAAM,KAAK,CAAC;QACd,CAAC;QACD,IAAI,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,YAAY,EAAE,CAAC;QAC3B,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,yBAAyB,CACvC,IAAuB,EACvB,aAAqB;IAErB,MAAM,IAAI,GAAG,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3C,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;AAClE,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB;IACpC,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,CAAC;IAChD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,KAAK,GAAG,KAAK,CACjB,IAAI,EACJ,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,iBAAiB,CAAC,EAChE,EAAE,KAAK,EAAE,SAAS,EAAE,CACrB,CAAC;QACF,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QACxC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"github.js","sourceRoot":"","sources":["../../../src/utils/dco/github.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AAEjC,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAE1C;;;;;GAKG;AAEH,MAAM,CAAC,MAAM,iBAAiB,GAAG,uBAAuB,CAAC;AACzD,MAAM,CAAC,MAAM,qBAAqB,GAAG,oCAAoC,iBAAiB,EAAE,CAAC;AAE7F,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IAC5C;QACE,KAAK,CACH,mGAAmG,CACpG,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,OAAO,YAAa,SAAQ,KAAK;IAErC;QACE,KAAK,CACH,oCAAoC,iBAAiB,gBAAgB,qBAAqB,EAAE,CAC7F,CAAC;QAJK,mBAAc,GAAG,qBAAqB,CAAC;QAK9C,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;IAC7B,CAAC;CACF;AAcD,KAAK,UAAU,EAAE,CAAC,IAAc;IAC9B,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,IAAI,EAAE;YACjD,QAAQ,EAAE,MAAM;YAChB,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;SAC5B,CAAC,CAAC;QACH,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,IAAK,KAA+B,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;YACxD,MAAM,IAAI,mBAAmB,EAAE,CAAC;QAClC,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,MAAM,GAAG,GAAG,KAA8C,CAAC;IAC3D,MAAM,OAAO,GAAG,GAAG,GAAG,EAAE,MAAM,IAAI,EAAE,IAAI,GAAG,EAAE,OAAO,IAAI,EAAE,EAAE,CAAC;IAC7D,uEAAuE;IACvE,2EAA2E;IAC3E,yEAAyE;IACzE,gDAAgD;IAChD,OAAO,CACL,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC;QACnC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC;QACxB,0BAA0B,CAAC,IAAI,CAAC,OAAO,CAAC,CACzC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa;IACjC,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;QACxB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB;IACrC,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC,CAAC;QACzD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,mBAAmB,EAAE,CAAC;YACzC,MAAM,KAAK,CAAC;QACd,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS;IAC7B,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;QACtB,KAAK;QACL,MAAM;QACN,MAAM;QACN,uCAAuC;KACxC,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAW,CAAC;IAC5C,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,OAAO,MAAM,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,OAAO,GAAG,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,KAAK,2BAA2B,CAAC;AAC7D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe;IACnC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,CAAC,KAAK,EAAE,uBAAuB,EAAE,YAAY,CAAC,CAAC,CAAC;QACxE,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAsB,CAAC;IACjD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,mBAAmB,EAAE,CAAC;YACzC,MAAM,KAAK,CAAC;QACd,CAAC;QACD,IAAI,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,YAAY,EAAE,CAAC;QAC3B,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,aAAqB,EACrB,KAAa;IAEb,IAAI,CAAC;QACH,MAAM,EAAE,CAAC;YACP,KAAK;YACL,uBAAuB;YACvB,IAAI;YACJ,OAAO,aAAa,EAAE;YACtB,IAAI;YACJ,SAAS,KAAK,EAAE;SACjB,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,mBAAmB,EAAE,CAAC;YACzC,MAAM,KAAK,CAAC;QACd,CAAC;QACD,IAAI,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,YAAY,EAAE,CAAC;QAC3B,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,yBAAyB,CACvC,IAAuB,EACvB,aAAqB;IAErB,MAAM,IAAI,GAAG,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3C,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;AAClE,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB;IACpC,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,CAAC;IAChD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,KAAK,GAAG,KAAK,CACjB,IAAI,EACJ,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,iBAAiB,CAAC,EAChE,EAAE,KAAK,EAAE,SAAS,EAAE,CACrB,CAAC;QACF,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QACxC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,MAAc;IACrD,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;IACjF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,QAAQ,CAAC,IAAc,EAAE,IAAwB;IACxD,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7C,CAAC;AAWD,SAAS,uBAAuB,CAAC,MAAc;IAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAgC,CAAC;IACjE,IACE,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ;QACjC,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ;QACrC,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ;QACtC,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ;QAChC,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ;QAC9B,OAAO,MAAM,CAAC,iBAAiB,KAAK,SAAS,EAC7C,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;IACD,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;KAC5C,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,MAAc,EACd,IAAa;IAEb,MAAM,MAAM,GAAG,MAAM,EAAE,CACrB,QAAQ,CACN,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,2DAA2D,CAAC,EAC7F,IAAI,CACL,CACF,CAAC;IACF,OAAO,uBAAuB,CAAC,MAAM,CAAC,CAAC;AACzC,CAAC;AAED,iEAAiE;AACjE,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,MAAc,EAAE,IAAa;IACpE,OAAO,EAAE,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;AACpD,CAAC;AAWD,uEAAuE;AACvE,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,MAAc,EACd,IAAa;IAEb,MAAM,MAAM,GAAG,MAAM,EAAE,CACrB,QAAQ,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,CAAC,EAAE,IAAI,CAAC,CAC9E,CAAC;IACF,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAwB,CAAC;AACnD,CAAC;AASD,qEAAqE;AACrE,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,MAAc,EACd,IAAa;IAEb,MAAM,MAAM,GAAG,MAAM,EAAE,CACrB,QAAQ,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,WAAW,CAAC,EAAE,IAAI,CAAC,CAChF,CAAC;IACF,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAyB,CAAC;AACpD,CAAC;AAiBD;;;;;;;;;;GAUG;AACH,SAAS,iBAAiB,CAAC,KAAc;IACvC,MAAM,GAAG,GAAG,KAA8C,CAAC;IAC3D,MAAM,OAAO,GAAG,GAAG,GAAG,EAAE,MAAM,IAAI,EAAE,IAAI,GAAG,EAAE,OAAO,IAAI,EAAE,EAAE,CAAC;IAC7D,OAAO,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAC3C,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,MAAc,EACd,OAAwD,EACxD,IAAa;IAEb,MAAM,IAAI,GACR,OAAO,CAAC,KAAK,KAAK,SAAS;QACzB,CAAC,CAAC,WAAW;QACb,CAAC,CAAC,OAAO,CAAC,KAAK,KAAK,iBAAiB;YACnC,CAAC,CAAC,mBAAmB;YACrB,CAAC,CAAC,WAAW,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;QACjF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,mBAAmB,EAAE,CAAC;YACzC,MAAM,KAAK,CAAC;QACd,CAAC;QACD,IAAI,iBAAiB,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC;QACjD,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAuBD;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,MAAc;IAEd,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;QACtB,IAAI;QACJ,MAAM;QACN,MAAM;QACN,QAAQ;QACR,oBAAoB;KACrB,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAG/B,CAAC;IACF,MAAM,OAAO,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACjD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,KAAK,IAAI,SAAS;QACnC,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,EAAE;KACnB,CAAC,CAAC,CAAC;IACJ,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC;AACvD,CAAC"}

package/dist/utils/dco/paths.d.ts

@@ -1,11 +1,4 @@
-/**
- * Slugs come from .mcpi/agent.json, AGENT_SLUG, or an interactive prompt.
- * The file-based sources are attacker-influenceable in a cloned repo, and the
- * slug becomes a filename under the keys directory, so every source must pass
- * the same shape check the interactive prompt enforces.
- */
-export declare const SLUG_PATTERN: RegExp;
-export declare function isValidSlug(slug: string): boolean;
+export { SLUG_PATTERN, isValidSlug } from "../cli-kit/index.js";
 /** Directory holding converted SSH signing keys, always absolute. */
 export declare function keysDir(): string;
 /**

package/dist/utils/dco/paths.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"paths.d.ts","sourceRoot":"","sources":["../../../src/utils/dco/paths.ts"],"names":[],"mappings":"AAGA;;;;;GAKG;AACH,eAAO,MAAM,YAAY,QAAyB,CAAC;AAEnD,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEjD;AAED,qEAAqE;AACrE,wBAAgB,OAAO,IAAI,MAAM,CAEhC;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAOnD"}
+{"version":3,"file":"paths.d.ts","sourceRoot":"","sources":["../../../src/utils/dco/paths.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAEhE,qEAAqE;AACrE,wBAAgB,OAAO,IAAI,MAAM,CAEhC;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAOnD"}

package/dist/utils/dco/paths.js

@@ -1,18 +1,9 @@
-import { homedir } from "os";
 import { join, resolve } from "path";
-/**
- * Slugs come from .mcpi/agent.json, AGENT_SLUG, or an interactive prompt.
- * The file-based sources are attacker-influenceable in a cloned repo, and the
- * slug becomes a filename under the keys directory, so every source must pass
- * the same shape check the interactive prompt enforces.
- */
-export const SLUG_PATTERN = /^[a-z0-9][a-z0-9-]*$/;
-export function isValidSlug(slug) {
-    return SLUG_PATTERN.test(slug);
-}
+import { SLUG_PATTERN, isValidSlug, stateDir } from "../cli-kit/index.js";
+export { SLUG_PATTERN, isValidSlug } from "../cli-kit/index.js";
 /** Directory holding converted SSH signing keys, always absolute. */
 export function keysDir() {
-    return resolve(process.env.MCPI_KEYS_DIR || join(homedir(), ".mcpi", "keys"));
+    return resolve(process.env.MCPI_KEYS_DIR || stateDir("mcpi", "keys"));
 }
 /**
  * Path for a slug's private key. Throws on slugs that fail validation so a

package/dist/utils/dco/paths.js.map

@@ -1 +1 @@
-{"version":3,"file":"paths.js","sourceRoot":"","sources":["../../../src/utils/dco/paths.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAC7B,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAErC;;;;;GAKG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,sBAAsB,CAAC;AAEnD,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,OAAO,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACjC,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,OAAO;IACrB,OAAO,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;AAChF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CACb,uBAAuB,IAAI,iBAAiB,YAAY,uCAAuC,CAChG,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,IAAI,CAAC,CAAC;AAC/B,CAAC"}
+{"version":3,"file":"paths.js","sourceRoot":"","sources":["../../../src/utils/dco/paths.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AACrC,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAE1E,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAEhE,qEAAqE;AACrE,MAAM,UAAU,OAAO;IACrB,OAAO,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AACxE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CACb,uBAAuB,IAAI,iBAAiB,YAAY,uCAAuC,CAChG,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,IAAI,CAAC,CAAC;AAC/B,CAAC"}

package/dist/utils/dco/render.d.ts

@@ -1,4 +1,4 @@
 import type { DcoSetupResult } from "./setup.js";
-/** Human-readable summary of a setup run, shared by `mcpi dco setup` and the register/init funnel. */
+/** Human-readable summary of a setup run, shared by `dco setup` and the register/init funnel. */
 export declare function renderSetupResult(result: DcoSetupResult): void;
 //# sourceMappingURL=render.d.ts.map

package/dist/utils/dco/render.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"render.d.ts","sourceRoot":"","sources":["../../../src/utils/dco/render.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAc,MAAM,YAAY,CAAC;AAiB7D,sGAAsG;AACtG,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,cAAc,GAAG,IAAI,CAkD9D"}
+{"version":3,"file":"render.d.ts","sourceRoot":"","sources":["../../../src/utils/dco/render.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAEjD,iGAAiG;AACjG,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,cAAc,GAAG,IAAI,CAoD9D"}

package/dist/utils/dco/render.js

@@ -1,19 +1,6 @@
 import chalk from "chalk";
-function statusLabel(status) {
-    switch (status) {
-        case "done":
-            return chalk.green("done");
-        case "skipped":
-            return chalk.gray("skipped");
-        case "would-change":
-            return chalk.cyan("would change");
-        case "action-required":
-            return chalk.yellow("action required");
-        case "failed":
-            return chalk.red("failed");
-    }
-}
-/** Human-readable summary of a setup run, shared by `mcpi dco setup` and the register/init funnel. */
+import { renderSteps } from "../cli-kit/index.js";
+/** Human-readable summary of a setup run, shared by `dco setup` and the register/init funnel. */
 export function renderSetupResult(result) {
     console.log("");
     if (result.agent) {
@@ -23,12 +10,8 @@ export function renderSetupResult(result) {
         console.log(`  ${chalk.bold("Human:")} ${result.human.name} ${chalk.gray(`<${result.human.email}>`)}`);
     }
     console.log("");
-    const width = Math.max(...result.steps.map((s) => s.title.length));
-    for (const step of result.steps) {
-        console.log(`  ${step.title.padEnd(width)}  ${statusLabel(step.status)}`);
-        if (step.detail && step.status !== "done" && step.status !== "skipped") {
-            console.log(`  ${" ".repeat(width)}  ${chalk.gray(step.detail)}`);
-        }
+    for (const line of renderSteps(result.steps)) {
+        console.log(line);
     }
     console.log("");
     if (result.metadataPersistWarning) {

package/dist/utils/dco/render.js.map

@@ -1 +1 @@
-{"version":3,"file":"render.js","sourceRoot":"","sources":["../../../src/utils/dco/render.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAG1B,SAAS,WAAW,CAAC,MAA4B;IAC/C,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,MAAM;YACT,OAAO,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC7B,KAAK,SAAS;YACZ,OAAO,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC/B,KAAK,cAAc;YACjB,OAAO,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QACpC,KAAK,iBAAiB;YACpB,OAAO,KAAK,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;QACzC,KAAK,QAAQ;YACX,OAAO,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC/B,CAAC;AACH,CAAC;AAED,sGAAsG;AACtG,MAAM,UAAU,iBAAiB,CAAC,MAAsB;IACtD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,OAAO,CAAC,GAAG,CACT,KAAK,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,EAAE,CACxF,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,OAAO,CAAC,GAAG,CACT,KAAK,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,EAAE,CAC1F,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IACnE,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QAChC,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC1E,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACvE,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,IAAI,MAAM,CAAC,sBAAsB,EAAE,CAAC;QAClC,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,MAAM,CACV,+DAA+D,MAAM,CAAC,sBAAsB,kDAAkD,CAC/I,CACF,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,cAAc,CAAC,CAAC;IACrE,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,oDAAoD,CAAC,CAAC,CAAC;IAC/E,CAAC;SAAM,IAAI,MAAM,EAAE,CAAC;QAClB,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,IAAI,CAAC,oEAAoE,CAAC,CACjF,CAAC;IACJ,CAAC;SAAM,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;QACjC,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,MAAM,CAAC,uEAAuE,CAAC,CACtF,CAAC;IACJ,CAAC;SAAM,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACxB,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,KAAK,CACT,6EAA6E,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,CAClG,CACF,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAClB,CAAC"}
+{"version":3,"file":"render.js","sourceRoot":"","sources":["../../../src/utils/dco/render.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAGlD,iGAAiG;AACjG,MAAM,UAAU,iBAAiB,CAAC,MAAsB;IACtD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,OAAO,CAAC,GAAG,CACT,KAAK,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,EAAE,CACxF,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,OAAO,CAAC,GAAG,CACT,KAAK,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,EAAE,CAC1F,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7C,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACpB,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,IAAI,MAAM,CAAC,sBAAsB,EAAE,CAAC;QAClC,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,MAAM,CACV,+DAA+D,MAAM,CAAC,sBAAsB,kDAAkD,CAC/I,CACF,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,cAAc,CAAC,CAAC;IACrE,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,GAAG,CAAC,oDAAoD,CAAC,CAChE,CAAC;IACJ,CAAC;SAAM,IAAI,MAAM,EAAE,CAAC;QAClB,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,IAAI,CACR,oEAAoE,CACrE,CACF,CAAC;IACJ,CAAC;SAAM,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;QACjC,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,MAAM,CACV,uEAAuE,CACxE,CACF,CAAC;IACJ,CAAC;SAAM,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACxB,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,KAAK,CACT,6EAA6E,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,CAClG,CACF,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAClB,CAAC"}

package/dist/utils/dco/resolve-agent.d.ts

@@ -0,0 +1,54 @@
+/**
+ * Read-only view of "which agent identity is configured in THIS checkout
+ * right now", surfaced by `dco whoami`.
+ *
+ * This exists because `dco setup` used to bake an agent's name/URL/DID
+ * as literal strings into the CLAUDE.md instructions it writes. That file is
+ * committed, so the literal values only ever reflected whichever agent
+ * happened to run `dco setup` first. Any other agent later working in the
+ * same repo (the common case for a repo that receives dispatched work from
+ * multiple agents) would have its PRs and commit trailers falsely attributed
+ * to that first agent. `resolveAgentIdentity` gives CLAUDE.md's instructions
+ * something to point at instead of a value: "run this, use its output",
+ * so the byline is always whichever identity is actually active locally.
+ */
+export interface ResolvedAgentIdentity {
+    /**
+     * Canonical `did:web:knowthat.ai:agents:<slug>` derived from the validated
+     * slug, NOT `.mcpi/identity.json`'s stored value verbatim. A checkout
+     * registered before the registration-time heal (init.ts/register.ts patch
+     * identity.json's `did` in place at registration) can still hold the
+     * unresolvable placeholder minted at `kya-os init` time
+     * (`did:web:localhost:3000:agents:<8hex>`); this is what actually resolves,
+     * matching the derivation `dco dispatch <slug>` uses.
+     */
+    did: string;
+    name: string;
+    slug: string;
+    url: string;
+    email: string;
+}
+/**
+ * Resolves the current agent identity from local, gitignored `.mcpi/` state.
+ * Returns null when there is nothing complete and trustworthy to report.
+ * Callers (notably `dco whoami`) must treat that as "no agent
+ * identity configured here", not as an error, since it's the ordinary state
+ * for a checkout that never ran `kya-os register`.
+ *
+ * Deliberately independent of `runDcoSetup`'s own identity resolution in
+ * setup.ts: that function additionally prompts, persists, and throws on a
+ * DID mismatch to steer a human through fixing local config, none of which
+ * is safe here: this is invoked live, mid-task, by an LLM composing a PR
+ * or commit, and must always degrade to null rather than prompt or throw.
+ * The whole body runs under a catch-all for exactly that reason: every
+ * individual step is written to fail closed already, but the guarantee that
+ * matters to callers is "never throws", not "every input we thought of is
+ * handled". A caller relying on the latter is one overlooked shape away
+ * from `dco whoami --json` crashing instead of printing
+ * `{"configured": false}`.
+ *
+ * The returned `did` is the canonical slug-derived value, not identity.json's
+ * stored `did` verbatim — see `ResolvedAgentIdentity.did`.
+ */
+export declare function resolveAgentIdentity(cwd: string): Promise<ResolvedAgentIdentity | null>;
+//# sourceMappingURL=resolve-agent.d.ts.map

package/dist/utils/dco/resolve-agent.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve-agent.d.ts","sourceRoot":"","sources":["../../../src/utils/dco/resolve-agent.ts"],"names":[],"mappings":"AASA;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,qBAAqB;IACpC;;;;;;;;OAQG;IACH,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;CACf;AAiGD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAsB,oBAAoB,CACxC,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC,CAuDvC"}

package/dist/utils/dco/resolve-agent.js

@@ -0,0 +1,164 @@
+import { execFile } from "child_process";
+import { existsSync, readFileSync } from "fs";
+import { join } from "path";
+import { promisify } from "util";
+import { readAgentMetadata } from "./agent-metadata.js";
+import { isValidSlug } from "./paths.js";
+const execFileAsync = promisify(execFile);
+const MAX_FIELD_LENGTH = 200;
+const DID_PATTERN = /^did:[a-z0-9]+:[A-Za-z0-9.\-_:%]+$/;
+/**
+ * Strip control characters (including CR/LF) and collapse whitespace. Values
+ * read here end up printed to stdout and copied verbatim into a PR
+ * description or commit trailer by an LLM, so a crafted value with embedded
+ * newlines must not be able to smuggle extra instructions into that text.
+ */
+function singleLine(value) {
+    // eslint-disable-next-line no-control-regex
+    return value.replace(/[\u0000-\u001f\u007f]+/g, " ").trim();
+}
+/**
+ * `readAgentMetadata` only type-asserts its JSON.parse result as
+ * `AgentMetadata`; nothing enforces at runtime that `name`/`slug`/`url` are
+ * actually strings. A field that's a truthy non-string (an array has
+ * `.length` too) would otherwise reach `singleLine`'s `.replace()` call and
+ * throw, which violates this module's whole contract of degrading to null
+ * instead of throwing. Takes `unknown` rather than `string` so every call
+ * site is forced through this runtime check before treating a field as text,
+ * not just past a compile-time type it was never validated against.
+ */
+function isSaneField(value) {
+    return (typeof value === "string" && value.length > 0 && value.length <= MAX_FIELD_LENGTH);
+}
+function isValidDid(value) {
+    return value.length <= MAX_FIELD_LENGTH && DID_PATTERN.test(value);
+}
+/**
+ * The PR byline links to the agent's registry page, so its host must be the
+ * trusted registry. A url from .mcpi/agent.json in an untrusted repo could
+ * otherwise point the byline at an arbitrary off-site (phishing) link.
+ * Mirrors the identical check `dco setup` applies before persisting
+ * agent.json in the first place (packages/cli/src/utils/dco/setup.ts).
+ */
+function isTrustedAgentUrl(value) {
+    try {
+        const url = new URL(value);
+        if (url.protocol !== "https:") {
+            return false;
+        }
+        const host = url.hostname.toLowerCase();
+        return host === "knowthat.ai" || host.endsWith(".knowthat.ai");
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * `dco setup` refuses a `.mcpi/identity.json` that's tracked by git,
+ * because a cloned repo could ship one to make signing use a key its author
+ * controls (see setup.ts's `isIdentityTrackedByGit`). The same threat
+ * applies here for the same reason `ensureGitignored` was added to
+ * `register.ts`: gitignoring `.mcpi/` after the fact does not untrack a
+ * file that was already committed. Without this check, a hostile committed
+ * `.mcpi/identity.json` + `agent.json` pair would resolve as a trustworthy
+ * identity and get echoed into every PR/commit trailer an agent composes
+ * from this repo.
+ */
+async function isMcpiTrackedByGit(cwd) {
+    try {
+        const { stdout } = await execFileAsync("git", ["ls-files", "--", ".mcpi/identity.json", ".mcpi/agent.json"], { cwd, encoding: "utf8" });
+        return stdout.trim().length > 0;
+    }
+    catch {
+        return false;
+    }
+}
+function readIdentityDid(cwd) {
+    const path = join(cwd, ".mcpi", "identity.json");
+    if (!existsSync(path)) {
+        return undefined;
+    }
+    try {
+        const parsed = JSON.parse(readFileSync(path, "utf-8"));
+        const did = parsed && typeof parsed === "object" && typeof parsed.did === "string"
+            ? parsed.did
+            : undefined;
+        return did && isValidDid(did) ? did : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+/**
+ * Resolves the current agent identity from local, gitignored `.mcpi/` state.
+ * Returns null when there is nothing complete and trustworthy to report.
+ * Callers (notably `dco whoami`) must treat that as "no agent
+ * identity configured here", not as an error, since it's the ordinary state
+ * for a checkout that never ran `kya-os register`.
+ *
+ * Deliberately independent of `runDcoSetup`'s own identity resolution in
+ * setup.ts: that function additionally prompts, persists, and throws on a
+ * DID mismatch to steer a human through fixing local config, none of which
+ * is safe here: this is invoked live, mid-task, by an LLM composing a PR
+ * or commit, and must always degrade to null rather than prompt or throw.
+ * The whole body runs under a catch-all for exactly that reason: every
+ * individual step is written to fail closed already, but the guarantee that
+ * matters to callers is "never throws", not "every input we thought of is
+ * handled". A caller relying on the latter is one overlooked shape away
+ * from `dco whoami --json` crashing instead of printing
+ * `{"configured": false}`.
+ *
+ * The returned `did` is the canonical slug-derived value, not identity.json's
+ * stored `did` verbatim — see `ResolvedAgentIdentity.did`.
+ */
+export async function resolveAgentIdentity(cwd) {
+    try {
+        const did = readIdentityDid(cwd);
+        if (!did) {
+            return null;
+        }
+        if (await isMcpiTrackedByGit(cwd)) {
+            return null;
+        }
+        const metadata = readAgentMetadata(cwd);
+        // Only trust agent.json when it's cryptographically bound to this
+        // identity (same rule setup.ts uses before persisting it) and shaped
+        // like a real slug (same rule signingKeyPath enforces). Unbound or
+        // malformed metadata could be planted in an untrusted repo and must not
+        // be allowed to spoof the reported name/slug/url, or to break out of
+        // the markdown link syntax CLAUDE.md tells an agent to build from these
+        // fields. isSaneField is a real runtime type guard (not just a length
+        // check) because metadata.name/slug/url are only type-asserted as
+        // strings by readAgentMetadata, never validated as one.
+        if (!metadata ||
+            metadata.did !== did ||
+            !isSaneField(metadata.name) ||
+            !isSaneField(metadata.slug) ||
+            !isValidSlug(metadata.slug)) {
+            return null;
+        }
+        const name = singleLine(metadata.name);
+        const slug = metadata.slug;
+        const url = isSaneField(metadata.url) && isTrustedAgentUrl(metadata.url)
+            ? singleLine(metadata.url)
+            : `https://knowthat.ai/agents/${slug}`;
+        // Returned did is the canonical did:web derived from the validated slug,
+        // not identity.json's `did` verbatim: a checkout registered before the
+        // write-time heal (init.ts/register.ts) can still hold the unresolvable
+        // placeholder minted at `kya-os init` time. `did` above is still the trust
+        // anchor that binds metadata.did to identity.json (proves this checkout
+        // came from `kya-os register`), just not what gets reported to a caller
+        // about to embed it in a PR description or commit trailer.
+        return {
+            did: `did:web:knowthat.ai:agents:${slug}`,
+            name,
+            slug,
+            url,
+            email: `${slug}@agents.knowthat.ai`,
+        };
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=resolve-agent.js.map

package/dist/utils/dco/resolve-agent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve-agent.js","sourceRoot":"","sources":["../../../src/utils/dco/resolve-agent.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AAC9C,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AACjC,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAEzC,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAiC1C,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAC7B,MAAM,WAAW,GAAG,oCAAoC,CAAC;AAEzD;;;;;GAKG;AACH,SAAS,UAAU,CAAC,KAAa;IAC/B,4CAA4C;IAC5C,OAAO,KAAK,CAAC,OAAO,CAAC,yBAAyB,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;AAC9D,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,gBAAgB,CAClF,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,KAAK,CAAC,MAAM,IAAI,gBAAgB,IAAI,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACrE,CAAC;AAED;;;;;;GAMG;AACH,SAAS,iBAAiB,CAAC,KAAa;IACtC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QAC3B,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC9B,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;QACxC,OAAO,IAAI,KAAK,aAAa,IAAI,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;IACjE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,KAAK,UAAU,kBAAkB,CAAC,GAAW;IAC3C,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CACpC,KAAK,EACL,CAAC,UAAU,EAAE,IAAI,EAAE,qBAAqB,EAAE,kBAAkB,CAAC,EAC7D,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,CAC1B,CAAC;QACF,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,GAAW;IAClC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,eAAe,CAAC,CAAC;IACjD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;QACvD,MAAM,GAAG,GACP,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ;YACpE,CAAC,CAAC,MAAM,CAAC,GAAG;YACZ,CAAC,CAAC,SAAS,CAAC;QAChB,OAAO,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,GAAW;IAEX,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,MAAM,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC;YAClC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,QAAQ,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;QACxC,kEAAkE;QAClE,qEAAqE;QACrE,mEAAmE;QACnE,wEAAwE;QACxE,qEAAqE;QACrE,wEAAwE;QACxE,sEAAsE;QACtE,kEAAkE;QAClE,wDAAwD;QACxD,IACE,CAAC,QAAQ;YACT,QAAQ,CAAC,GAAG,KAAK,GAAG;YACpB,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC;YAC3B,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC;YAC3B,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,EAC3B,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACvC,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;QAC3B,MAAM,GAAG,GACP,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,iBAAiB,CAAC,QAAQ,CAAC,GAAG,CAAC;YAC1D,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC;YAC1B,CAAC,CAAC,8BAA8B,IAAI,EAAE,CAAC;QAE3C,yEAAyE;QACzE,uEAAuE;QACvE,wEAAwE;QACxE,2EAA2E;QAC3E,wEAAwE;QACxE,wEAAwE;QACxE,2DAA2D;QAC3D,OAAO;YACL,GAAG,EAAE,8BAA8B,IAAI,EAAE;YACzC,IAAI;YACJ,IAAI;YACJ,GAAG;YACH,KAAK,EAAE,GAAG,IAAI,qBAAqB;SACpC,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}